skysight-inc/HackerNews huggingface dataset:
Vivek Ramachandran's Exploit Research Megaprimer[1] is a good video series for the basics. Peter van Eeckhoutte's article series[2] also provide a good hands on for getting started. Vivek's doing a training course at 44Con (disclaimer: I'm one of the organisers) that covers some of this[3] and looks quite promising but if London's a bit of a stretch you should be able to find training courses at conferences closer to home.

The Shellcoder's handbook is a good starting point too but is getting a bit long in the tooth. Attacking the core is a good starter on kernel bug dev. Both should be available on Amazon.

It's also worth pointing out that if you have a local Def Con chapter it's worth going at least once or twice to see whether or not you like it. Same if there's a local BSides event - these are free events, wildly variable in quality but run by the community for the community. There's also other cons like 44Con, Brucon, Cansec, Defcon etc. if you really want to get into it but these can be quite expensive.

I'm not sure where you're based, but if you're in or near London the local Def Con chapter DC4420[4] is on tuesday downstairs at the Phoenix, Cavendish square near Oxford Circus. I'll be there and will be more than happy to have a chat with you and introduce you to people.

[1] - http://www.securitytube.net/groups?operation=view&groupI...

[2] - http://www.corelan.be/index.php/articles/

[3] - http://44con.com/training/vivek-ramachandran-hacking-with-py...

[4] - http://dc4420.org/
Laws are (among other things) a reflection of culture. You can change the law and trigger culture changes.
You should have a look at this PDF http://neildavidson.com/download/dont-just-roll-the-dice/
I've just discovered this, what the Economist calls, "videographic". As expected it's been produced quite well and communicates its topic, the presidential race, quite clearly while backing it up with data. Usually, I would expect this to be published in the form of an infographic. However, after watching it I am convinced that the video format is even more accessible. Therefore, my question to the community: Do you guys think we will see more videographics and less infographics in the future?

Certainly videographics now are much smaller than infographics (as judged by Google search results 280k vs 30m)
Finding and consuming exactly the right mushroom or cactus is actually not a problem in traditional societies. They're pretty good at the gathering part of 'hunting and gathering'. The big difference with modern society is that psychoactive substances were much more likely to be treated as sacraments for religious ceremonies rather than something you consume at a rock concert or while watching the Superbowl
Phantom is awesome. I tried to use it for testing, but it's too slow (10 seconds for one test). Anyone else tried it? Any tips?
Updating Android - The Great Challenge
But American laws are important because America claims jurisdiction over .com, .org, and others. And people who do something that is not a crime in their country but is a crime in America, even if they are not in America and their servers are not in America and their users are not in America can be deported (or face severe actions) in their home country; or can have the US forever closed off as a destination.

The UK has a few problems, but we're remarkably free of corruption. Most of ours is stupid people offering "access" to a government official in return for a donation to a party, or not declaring expenses correctly. Certainly nothing like the transparent buying of influence available in other countries.
DOS's edlin is a very crude line editor, unlike ed(1) which has regular expressions, the g// command, etc.
Disabling the tracker in your own car is fine. However, that's not what the jammers do. They broadcast a signal that blocks GPS for everyone on a wide radius. To be able to guarantee no lock in a 10m radius means you have to interfere with GPS for at least half a km around you. It's absolutely not okay to wholesale block service to everyone near you because you want to be more private.
If you absolutely need to debug something on the device in iOS 5, I wrote this a few weeks ago: https://github.com/brainlock/ios-remote-inspector

I had a rendering bug that only happened on the device, not in the simulator.

This opens the web inspector locally, and exposes a proxy on port 55555 for you to access from your working machine.

Not really useful on iOS 6 anymore :-) but still, useful on iOS 5.
Developers are always going to combine approaches to what best suits them. Using abstract, extendable naming conventions and abstracting out each module/widget into separate files organised into folders for compilation via LESS or SASS is an ideal combination for me. I think every front-ender needs to pick and choose ideas from multiple methodologies, otherwise there will always be issues with maintainability when building large sites.

More important than any one methodology is consistency and documentation, no one wants to pick up a project with 'genius' abbreviated class names without some example markup!
This technique is certainly useful in a variety of instance and I've done the same thing with both HTMLUnit and JWebUnit in Java. The "great site you know of" appears to be filled with books that are copyrighted and for-profit so I'm not sure you'd really want to publicize what you're doing on your blog.
On the topic of emails and account cancellations: When I started sending out "Your Tarsnap account will be deleted soon" emails, the account attrition rate dropped by 50%. The change wasn't from people who didn't realize their account was going to be deleted -- they had received two emails already, 1 week and 2 weeks earlier -- but getting that last prompt seems to have shifted people's default action from "do nothing" to "pay some money to make the account stay around".

Some time later, I cut Tarsnap's account attrition rate by another ~50% by adding a line to the "account will be deleted soon" email: "If you've decided to stop using Tarsnap, I'd love to know why." This wasn't deliberate -- I added it for the simple reason that I really do want to get that information -- but it seems to be causing people to stop and say "hmm, I can't think of any good reason to not use Tarsnap, so maybe I should keep using it after all".
I think most people are bad at flirting, not just hackers.
"Microsoft has offered users an escape chute, given that you’re not going to be able to find anything, and added a search feature that allows you to filter the apps by typing the name of what you’re looking for. "

Ubuntu also suffers from this dumb idea. Hide everything and force the user to type the name. What if it's a little utility you rarely use and you can't remember the name? Oh well, too bad for you.
Oh gods, please, no. The enforced linear nature, the droning voice, a momentary lapse of attention and a link is missed, the inability to scan quickly, and the snail-on-valium pace. Don't force me to work at your speed - there are things I do faster, and things that take more work.

So please, please, give me written words and carefully crafted diagrams every time. I want information, not passive "edutainment" that's neither educational, nor entertaining.
Object-Oriented JavaScript Part 1: The Functional Pattern
The Way Things Work
I'm not condoning this as a technique to remain "private" ... I'm simply stating that I understand why people are buying jammers and I agree that some of them should be allowed to have their privacy.

I'm not so sure about others. If you're driving a truck for a shipping company, I suspect it's their right to know where their equipment is.
Personally, I didn't mind your initial post about being skeptical — that thought occurred to me too. But then you posted several more times about your skepticism without going to kareem's page to double check your skepticism, which I thought was unfair. On his site he makes it pretty clear what he does and how his consulting work fits into that:
http://blog.reemer.com/about

Plus the guy blogs pretty regularly. My personal sense is that someone who writes an article sharing his process and results for free deserves the benefit of the doubt — and at least a few clicks around their website to check it out — before posting in a way that suggests that his integrity may be suspect.
Leaked Microsoft document details $299 Xbox 720 in 2013, Kinect glasses,...
That statement in the article is just wrong. A knowledgeable and experienced designer should be an experienced scientist who uses user testing to confirm rationalizations.
I would strongly suggest you drop the "websites not using us yet" line from your landing page. Showing their logos isn't a trick to increase conversions, but borderline dodgy -- and people will notice.
Okay, I make a clear distinction between community up / down voting, and owner moderation. I should have been clearer.

Don't worry about the down votes. They are frustrating, but anyone on HN knows that you occasionally get a random down vote. By themselves they're usually meaningless. Yes, people should really either engage in the debate and not down vote, or not engage, and down vote, and explain if needed. (Personally, reasons for down voting should be restricted to "this comment does not belong here; it adds nothing to the discussion".)

I think there's general agreement about voting on HN - up vote things that are well written, even if you disagree. Don't down vote just because you disagree. Down vote things that add nothing to the discussion. Flag spam or other blatantly harmful stuff.

But all of that is separate from the issue of trusted people within HN locking threads, deleting threads, deleting posts, changing titles, banning users, etc.

> No insight and no accountability = bad moderation practices.

I honestly truly disagree with this. Strongly.

It's really simple to say "Here are a list of rules. Don't break them or we mod your posts". But when Bob starts skirting the rules there can be huge flamewars. Bob says he clearly wasn't breaking any rules, mods say he was, other people jump in saying that he wasn't and the mod is dumb and has made a bunch of similar stupid decisions, then other people jump in and say that maybe Bob was a bit close but he does so much good that we can make an exception for him, then other people leap in and say it's a stupid rule anyway. Meanwhile, this thread is getting so much attention that the real stuff of the forum is being ignored. New users are not interested in that stuff. The thread creates an unpleasant atmosphere which is noticed by other people. Now whenever Bob replies to someone who's a mod there's suspicion that Bob is just flame-baiting.

Anyway, I'm doing what I hate, so I apologies to everyone on HN. I'm setting my noprocrast settings for 48 hours. This is my lost post on this thread!
Work, work, work and then die
New Poll: How do you order your CSS properties?
Even if you don't actually do any empirical tests, a good user experience designer should at least IMPLEMENT their ideas and try them out first hand themselves before declaring them the best for a particular situation. That's why it's sad that so few user experience designers have any competency in actually implementing their designs. Many of them (the bad ones) don't even understand what the technology is capable of, let alone know how to program.
QBasic's Gorillas in coffescript
Imho this is a bad pitch. It took me a moment to realize that you have already solved the problem that you're proposing (and the "challenge" is only meant to pitch the solution).

Given the elegance of that very solution I think this marketing stunt is entirely unneeded and actually harmful; it's confusing and you miss out on getting a descriptive headline such as "Generate OptParser from code comment!".

That said... Brilliant idea!

I'm definitely trying out docopt for my next project.

And I have a counter-challenge for you:

How about making docopt work with nested commands? I.e. multiple methods could have a docopt-style comment and they would smartly merge to enable usages such as "mygit remote show --help", where 'show' is a subcommand of 'remote', with its own set of parameters and a matching help-page.

If you can work that one out then docopt could become the defacto standard for generating even complex OptParsers.
'Civilization' Creator Had No Idea You Could Play His Game for a Decade
I don't understand your logic. If it's your car just don't install a tracker device?
1. Is flirting your real goal? 4 billion years of evolution says "mmmmmmm...maybe not" google "maniac high no nonsense" if you actually need help with the birds and the bees. Also "ross jeffries lost in space" for another useful perspective. I know these are random queries, they happen to be the ones that put the results you want at the top as opposed to 10 pages in.

2. Some great house music, even a track with an actual build, start 4:50 into the set, google "smoab reinhard". This is from an era in which electronic dance music had...wait for it...HARMONIES.

Enjoy.
Docopt looks like a useful library, but I'd be interested to see how intelligent the "help" parsing is when faced with slight variations in the format.

Using Commons-CLI in Java actually goes the opposite direction and if can be reasonably terse (one line per parameter or option) but it's also got to be wrapped in a class and have the rest of the Java boilerplate (a main method to execute, etc).

Perhaps I'll try it on my next NodeJS project.
Coinstar is kicking Netflix's butt
>To respond a little - I was trying to use "innately get depressed when not exposed to sunlight" as an example of something well researched showing that light affects people physically in ways that are not just 'seeing shape and contrast'

It could not be light as such though. It could be warmth from the sun that makes people depressed when not exposed to sunlight, or vitamin deficiency (some vitamins need sunlight to be usable).
There is a new video only with the answer!

http://www.youtube.com/watch?v=_36yNWw_07g
Yes. Pink to my eyes is a kind of watered down red. Do you consider it any more different? Ie the kind of difference you get from purple vs yellow, or red vs green?
Is using Google Chrome faster?
You can already have deeply nested subcommands in docopt, take this example: https://github.com/docopt/docopt/blob/master/examples/git_ex...

Making possible several help-screens for different commands is on it's way. The only stopper—deciding on API:
https://github.com/docopt/docopt/issues/17
In economics terms, this article proposes the idea that Coinstar's Redbox dvd vending machines are an inferior good when compared to Netflix.

https://en.wikipedia.org/wiki/Inferior_good
IOS 6 release date set for fall along the next-gen iPhone
people get so much butthurt when they don't see "<stuff i chose to work with> wins this benchmark"

any framework, any language, hell any hardware is either generalized to deal with many problems or specifically designed to battle one.

you sure can write fast C program that does exactly this benchmark well - what will that prove? nothing at all..

why is it so hard to accept the fact that some tools can provide good enough results without too much tweaking while other tools may provide better result with more time spent achieving it?
But it returned only half as many messages as Go.
Presumably just as vulnerable as someone who doesn't know where to drive without their GPS.

What would be interesting is though with a network of self driving cars you could figure out where all the GPS jammers were.
My understanding is that books.uk is just a second level domain. It would have to be Nominet who questioned the application, and there are countries that appear to take a liberal view of the use of their country code. Have I misunderstood?
Why Microsoft should make its own tablets (and phones and PCs)
Outlook Web App does not support Chrome on linux, but Firefox 3.0.1 is ok
Double clicking a "No" button should mean yes, of course.
Chrome tips
Linux is quite popular with scientific computing people doing GPGPU math.
This is very useful! Thank you for sharing!
docopt is even more terse than 1 line per argument/option/command.

Take an example:

Usage: quick_example.py tcp <host> <port> [--timeout=<seconds>]
quick_example.py serial <port> [--baud=9600] [--timeout=<seconds>]
quick_example.py -h | --help | --version

2 commands, 3 arguments, 5 options: in only 3 lines of DSL.

Take a look at more examples: https://github.com/docopt/docopt/tree/master/examples
How (and why) is Microsoft tweaking its 'Chakra' JavaScript engine in IE10?
Ah, that's great!

But I'd strongly vote for making it possible to annotate multiple functions and merging their respective doc-strings smartly.

I don't think you'd want to express the entire syntax-tree of a reasonably complex program (e.g. 'git') in a single doc-string. Not only would that turn into a mess, but you'd also lose modularity. I.e. subcommands often need to be dynamically generated (e.g. depending on loaded modules) and not all subcommands may be available at all times.
Well, it was targeted at both, CVS and Subversion and centralized version control in general. He commented on the "SVN is CVS done right" that you can't do it right since it's the wrong thing to do in the first place.
Debugging JavaScript is Awesome
> If you are expecting users to read your error messages, you're doing it wrong.

Hence it's even more important to call for action, not status in the button. If a button reads 'save' it has a much higher chance of being read than then long text before 'Ok'
BTW, about bad pitch: maybe :-)

I wanted to improve on presentation, since my last post:
http://news.ycombinator.com/submitted?id=halst
Knowledge of fractions and long division predicts long-term math success
The UK has a few problems, but we're remarkably free of corruption.

http://en.wikipedia.org/wiki/Leveson_Inquiry
JQuery Gantt — Draw Stunning Gantt Charts With jQuery Easily
Russian hacker gets iOS 6 3D maps running on iPhone 4
In my country there is no problem in sharing copyrighted content as long as do not receive economical profit. Also, I have found the example very practical as introduction.
Any plans to add Ruby and other programming languages?
I think knowledge of ed helps learning vi, just as knowledge of all the Unix programs that come before help learning Perl because it has so many influences. It always bemuses me that some people try to learn it as their first language. :-)
Ask HN: Clojure vs Haskell for a first functional language?
Which is more suited for someone who's just trying to learn their first programming language? And why?
What education startup you will start if you had a million to spend?
If you had a capital of one million US dollars to invest in any education/training related startup that makes trainee "employable" what kind of startup will you choose? How will you spend the money?
Disclaimer: I have great respect for women. If you are a woman, please don't take offense from this post. Because none is intended. As your archetypical computer nerd, I had a very hard time dating. These are things that helped me. I want to share this info with other guys like me. Sort of like ... I wish I knew this when I was young.

----

I had a very hard time with the ladies. Somethings that helped:

- Move to a place with a better male-female ratio.

- Move to a place where you seem like a good catch.

- Seek out women in different professions than tech (I am convinced there are too few geek girls to go around. I never realized how bad the odds were.)

That's it. Seriously. For me, it was about location-location-location. I firmly believe there are certain cities full of women who just tease - they string you along as friends but no more. If you have had no dating success in 1-2 years, you might be in a dating dead-zone.

Some things that helped (but I sucked at doing these):

- Gym

- Good clothes (not by my definition but by a young woman's definition - these did not match at all. We're talking bright colors, shopping at Express ... this nearly brought a tear to my eye.)

- Good haircut (again, I thought I looked like an idiot ... the ladies really like it. Spiky hair=catnip?)

- Read "The Game" - it is not about pick ups. It is about confidence. Frankly, I think the same ideas described in this book for picking up women are used by so-called hustlers and suits in making business deals.

Heh ... maybe I should do a more detailed post on this one day. I clearly spent way too much thinking about this subject when I was single :p

Some important things:

a) DO NOT GET DEPRESSED! There are lots of losers out there. Getting with a loser is easy. One reason you are single is you want something better.

b) DON'T LOSE YOUR IDENTITY!! A lot of women described me as geeky when I was young. So what? I do what I love. That said, I'm okay compromising on clothes. However, when I dated women who wanted to change me completely, it was me who broke it off. That said, I do try to reduce my overall level of geekiness in front of strangers. Don't overwhelm them ;-)

c) DON'T GET DEPRESSED! When you are young, single and geeky, it might seems like the one thing you need to make life work is a mate. That's not true. Trust me. There are benefits to being single - like time to play video games, board games, travel on your own, hack around, read books, attend tech events, whatever you want. Never lose respect for yourself!

Best of luck to all my single, geeky HNers. I hope some of this will help.
How to protect yourself from a Twitter-fueled PR disaster
Ah, I missed that point. I just.. see that as a non-issue.

Though someone COULD use books.uk like a domain, I don't see people confusing it with .books websites.

If they do they have the wrong expectations from ccTLDs
I'm also a fan of idea of using function-docstrings for separate subcommand help-screens. Problems: (1) exact API, (2) how to do that in non-python implementations. You (and everyone) is very welcome to suggest APIs for that in issues:
https://github.com/docopt/docopt/issues
This is awesome, thanks Orrick team. Even if you don't use these verbatim, take a look at your current docs and then scan the Orrick version to see if any improvements occur to you. I'd like to see more law firms do this.
sed is great but it's a stream editor; try moving the last line to the start of the file.
Angel Investing: A Growing Phenomenon Around the World