skysight-inc/HackerNews huggingface dataset:
I'm not even sure what you are claiming at this point. We all agree that there was copying in some direction with THIS particular example since the css files are identical. And who knows, maybe they both independently copied from a third party like a library of layouts. But I am presuming C copied from B here and not C and B from A. Regardless, the fact it is identical is far more than coincidence.

As far as using the same web layout as far as having header footer menu and columns it's not even a coincidence, it's just a standard layout. It's not a coincidence that someone else has a red car, they are very common.

I will address the issue of whether a layout that looks similar is definitely a copy. I don't agree with that.

Is using "0px 2px 5px #CCC;" as drop shadow settings proof of copying as you are claiming? Absolutely not. It is not some obscure color, it's GRAY. Gray drop shadows are very common. The assertion that the other settings are too particular or unique among billions of possibilities is completely absurd. You really think this is the only site with this drop shadow setting? I will bet you $500,000 it is not. Warning: I already checked. That is not surprising at all. 0px for horizontal offset is not just common but required for shadows coming from an above light source. 2px vertical offset is common as well. 5x blurring is common as well. The entire combination is common and obvious as well. But let's say some random site has 3px vertical offset instead. It's going to look quite similar to one with 2px. Is it a copy or not then? Can't tell from just that, it's irrelevant in fact. Two sites that look similar on the web, using generic common layouts, are not necessarily copies of each other. Even if they use a lot of the same colors and drop shadow settings and margins, especially when we are not talking about #CCC and not a color like #12dca9. It is also not uncommon to have white background behind text and a single pixel grey border. That is on thousands of sites. As is the light grey background. Google finds "background: #F9F9F9" on over 500,000 pages, many predating the existence of HM's domain name registration. Did they steal background: #F9F9F9 from others? Probably. I mean, why #f9 and not #f8. #F9 is a bit of an odd choice. HNM at least used blue for their masthead background. HM uses: #F60. Where have we seen that exact shade of orange before? Hint: it was "stolen" by HM from the top of this page you are looking at. This leads to another problem. Hacker is a common term. Hacker News is reasonably generic, but it is known as being this site. When I see a site that says "Hacker Monthly, the print magazine of Hacker News" and uses the exact same recognizable color scheme as Hacker News, I definitely assume that it is run by the same company. Only if I scroll down to the bottom do I see a "not affiliated" disclaimer. This is quite confusing given that it claims to be "the print magazine OF Hacker News". That is obvious confusion in the public, and the name, claim to be "of Hacker News", and exact color scheme match is a clear trademark violation.
If they are compliant with ESIGN then there is no reason it's not legally binding.

http://www.echosign.com/public/static/faq.jsp#five

http://en.wikipedia.org/wiki/Esign
Aristotle was a philosopher, not a pundit. Most of his opinions were rooted in reason, even ones that seem silly or backward to us now. It's easy to read the work of people from past eras and be dismissive of them. After all, they were wrong about so much.
I don't know about the US, but in other countries, slavery prostitution outlets are indeed persecuted and closed once found. Other prostitution outlets are tolerated (or encouraged.)

My point is even assuming incorruptible law enforcement, these outlets would still exist, might last less if you wish.

From there to saying it's a government sponsored slavery is a big step.
"Google typically offers a maximum of $3,133.70"

i believe they recently paid out 2x $60,000 prizes.
I've got http://exploit-exercises.com/ bookmarked, but haven't had a chance to start the exercises yet.
Ideally you have to master a low level language like C, socket programming and assembly on various architectures. You can somehow get away with a scripting language like perl or python and drop-in shellcodes but I suggest you do it the hard way.

You can start reading the classics (although most of them not applicable today) like Smashing the Stack for fun and profit by Aleph One, 7350 (teso security group) papers on format-string exploitations as well as various other techniques on heap-over flow techniques, double free()'s etc. A very good book for all round exploitation with some advanced techniques is "The Shellcoders Handbook" which I highly recommend. The Phrack magazine (before the editing team changed) has some really juicy techniques on exploiting various platforms.

Other than that, you should browse through A LOT of source code trying to identify bugs in open source software and subscribe to various security bulletins so you can read advisories and try to exploit them. GDB is your best friend for that job since analyzing core files is the beginning of everything.

Finally you should get involved in security communities (the more under the ground they are, the better) and attend security cons (HAL, Defcon, CCC).

I used to do some heavy exploit writing back in high-school and I can tell you it's really REALLY fun but time-consuming and frustrating sometimes. Exploiting software is a form of puzzle solving.
While I considered this approach to be plausible at first glance, it isn't.

For the tags to work for your users, they would also have to visit the registry for that tag.
I can only answer for myself, but in the case of the 8-bit remixes, I felt they were like a parody of the original and should be protected on that basis. Plus, they did do a transformation that made them original.

Looking at this case, it really doesn't look like she did much of anything. They are not a new medium and seem quite like a small alteration. If it was a painting of the final origami then I would be all for the defense (change in medium always struck me as good enough), but it isn't.
Show HN: HTML 5 Diners, Drive-ins, and Dives Locator
And requiring alt means you lose that signal, since content providers will continue to be lazy and leave the alt blank, so now all images look like they're decorative, instead of some being "we don't know".

You can't solve a social problem (content providers who don't care) with a technical limitation (required alt tags).
In a way, these "leeches" are providing free pen-testing, and publicizing the fact that software is cheap to exploit. If this drives the markets to invest in security software, I think it's a net win.
I'm honestly curious - what's a use case for scripting the editing of files that's not better satisfied by using a scripting language? I see the value of Arch's focus on minimalism more than keeping ed around in this case, but I'm happy to be wrong.

If your terminal is broken, there are plenty of ways (reset, stty sane, whatever) to fix that. I'm also not sure why having an extra binary on my system is a good safety guard against a broken keyboard.

The ajax term case is valid I guess, though I'm not sure how common that is. I was in a case like that a year or so ago and ended up using cat and sed to get the thing back on the network.
For Haskell, there is no doubt it could do better. The culprit is probably the relatively new Websocket server. For evidence, I cite http://www.yesodweb.com/blog/2011/03/preliminary-warp-cross-... But "Not bad for 3 lines of code" is a pretty fair sentiment.

Erlang and Go doing great is no surprise. Java didn't do too well, but the implementation didn't really use the most performant tools available.

The real loser here is Node.js. Nearly as long as the Java example, but the worst performer in the real metrics. So much for "making concurrency easy."
Could you explain your reasoning a bit more? I am not following from "individual invests thousands of hours into their passion; some are compensated for their work by people who value their skills; those individuals are leeches on society". I think there is a step or twenty in there that you could expand.
uh, forge tthe alt, should the no closing img tag be on the list? or not closing br? i've never used those, ever. they make no sense.
Twitter Ditches “50+”, Now Show Exact Counts Of Retweets & Favorites
Ask HN: How do you build your webapp on top of your API
A week or so back there was a discussion regarding whether flask was better than django. Some people were arguing that flask had better REST support; making it superior since it's "best" to have your backend basically be an API that you then build your web app, mobile app, etc on. I've seen this structure advised before and have always wondered how does this work efficiently. I agree that this seems like a good way to structure an app since it gives you one point with which to interact with your data. But, unless you have a nice javascript frontend that just makes AJAX calls to the backend won't all requests require two HTTP requests: one HTTP request from the user to your server to get the page and then another HTTP request from your server to your API to get data? Wouldn't this add extra latency or can it be assumed to be almost negligible since the servers are likely located physically close to one another?

NOTE: I'm only curious to know the answer to this question. I don't really care whether flask is better than django or vice versa, that was simply included for background so please no flame wars :)
A bug is sometimes just a bug. To be valuable, it has to lead to a vulnerability and ideally to privilege escalation. If it simply crashes the application without the ability to control further program execution, it's useless.
Part of the problem is that EC2 is such a whacky environment. Notice Erlang's median connection time was tiny but its average had huge outliers.

Read the timing numbers with a reasonable portion of salt. It's EC2 we're talking about here.
No, you'd still have to scour the web for each individual library of tags. Since they require the .register() on the page, from what I understand.

Though your last part, with <require /> is fascinating and would greatly improve this.
Perhaps this is the explanation for how Flame and Stuxnet had so many zero day exploits: the Feds crowdsourced them through the Grugq.
Penny auctions, statistics and web scrapping
Release early, release often is why its not perfect. Its also a general purpose way to share links, pro tips, and photos. But there is a 'next' button one you get into protips
When Accuracy is the Wrong Evaluation Measure
Missouri S&T was voted the most depressed school (or something to that effect) at one point. I don't recall the details, so don't quote me on that one.

Our university has about as high a percentage of Engineering and Science students as any university does. Again, don't quote me, but it has gotta be pretty darn close to the top.
The Great Replacement: Microsoft, Yammer, and a New World in Enterprise
>Lang's crease patterns aren't culturally revered, nor were they ever reserved for commercial use

I think you just answered your own question. The fair use argument is a lot stronger for something that's culturally iconic (and it means no-one's going to mistake the remix for an original work), and we have a lot more sympathy for someone who just wants recognition for their work than for someone trying to maximize their profits.
What is the source of income for FB apart from advertisements?
Looks like they removed the controversial paragraph from their TOS. Great to see the common sense prevail.
Bells & Whistles isn't a bad starting place (as my post says, it's the default) and it can create conversions (even the majority), but it can also be a mixed bag of candy with an ROI that's hard to establish because it's simply a bucket that all new features go into.

Compare that to designing a premium offering that a free user can hire to a valuable job you've identified among your user base. Achieving that requires more segmentation and discipline than power user potpourri, but it also commands higher prices.

Obviously I don't know your startup or how you're implementing freemium, so don't take any of the above as a judgement of the way you're doing it. This is just what I've commonly seen.
How To Know If You've Been Hit By The Recent MySQL Vulnerability (CVE-2012-2122)
It has changed a lot in the last 20 years. Now organized crime as well as the involvement of nation-states has made it far more lucrative, and conversely, dangerous. Kingpin (kingpin.cc) does a good job of describing how much money there is to be made, even when you're not a PhD.
How much more ethical are Europe and the US?
>Isn't there a "reverse Moore's Law" for software? None of my multi-GHz, multi-core, multi-gigabyte machines boot up anything like as fast as my old AppleII or Osbourne portable.

This might be true for machines that held the OS in ROM, but most current computers load much faster than an IBM PC loading the OS from a floppy disk.

These comparisons don't mean much, because the software can do thousands of new things that it could't, like connect to the internet, wirelessly, at high speeds, play multimedia at millions of colors and huge sampling rates, etc.

It's not like the exact same programs got somehow slower, just the same category of programs. A modern text editor is so much more advanced that WordStart that it's not even funny.

And you might not remember that loading a simple game in a 8-bit home computer from tape (a cassette tape, such as used by Amstrad CPC, Commodore 64, ZX Spectrum, etc) took ages (5-20 minutes), and involved 1/1000000 of the data of a modern game.

None of my text editors launches as quickly as WordStar used too.

Try an SSD drive and you'd be surprised.
This is fun.

(loop :for animal :in '("dog" "cat" "bird")
:for color :in '("brown" "black" "red")
:do (format t "See the ~a ~a?~%" color animal))

See the brown dog?
See the black cat?
See the red bird?

How far can we take the example?

(loop :for animal :in '("dog" "cat" "bird")
:for color :in '("brown" "black" "red")
:for count :from 2
:do (format t "See the ~a ~a ~as?~%" count color animal))

See the 2 brown dogs?
See the 3 black cats?
See the 4 red birds?

How about this?

(loop :for animal :in '("dog" "cat" "bird")
:for color :in '("brown" "black" "red")
:for count :from 2 :sum count :into total
:do (format t "See the ~a ~a ~as?~%" count color animal)
:finally (format t "See all ~a?~%" total))

See the 2 brown dogs?
See the 3 black cats?
See the 4 red birds?
See all 9?

Anybody?
> They're making themselves rich at the expense of everyone else. They're a leech on society.

No they're not, on both counts. They're not making themselves rich at the expense of everyone else. Their major customers are governments, who are in no rush to make their own purchasing patterns illegal. They're taking part in an active established market. Immunity have been doing this publicly for over a decade, with the difference being that anyone can buy Canvas.

The simple solution (which works in favour of the exploit dealers too btw) is to use a layered approach to defences that make it more expensive to develop an exploit. That's what Microsoft have been doing since Vista. There are now so many hurdles you have to jump through for a server-side remote code execution bug that for most people it's just not worth it (given that you'll have to chain exploits more often than not to bypass protective measures), which is partly why client side bugs are becoming more common.
lame interview, why is this hacker news worthy?
Those two factors are essentially restrictions.
Now if only they'd show exact tweet times. I hate "about an hour ago". On Gmail too.
Show HN: Humans Did What? - Index of humans.txt files
As a current student, I can verify that this is accurate.
Extending Backbone views to configure non-DOM events
Why Do Startups Fail
+1 for this fantastic site ..
"Smashing the stack for fun and profit" is absolutely a great introduction to the classic buffer overflow attack. It is also the foundation on which tons of exploits are built on: http://insecure.org/stf/smashstack.html

Once you've read that, I highly recommend going through Stanford's CS 155 practice assignment on the subject. Unfortunately I really can't find the assignment anymore but perhaps a more thorough search of their archives would reveal it.

However, here is a blog which details the answers to all of the problems and includes the problem themselves. It explains why they work, and how to get to them. Very helpful if you are interested in looking at more advanced techniques: http://blogs.hulmahan.com.ph/archives/category/hack-101

That takes care of the basic C sploits. Beyond that, it really depends which level you want to attack at. You can attack at the stack level for almost all programs.

For web applications, you can go at a much higher level with stuff like SQL Injection, Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), and Session Hijacking.

Lastly, I highly recommend "Grey Hat Hacking, The Ethical Hacker's Handbook." This book does a fantastic job of giving you a taste of hacking at all levels. It covers OS attack possibilities, network level attacks, exploit generation and more. It also does a great job of introducing you to a lot of tools that help get the job done. From there, you'll at least be able to think of what you want to learn about next.
Very interesting. I think soft limits could be a great way to go, particularly in situations where the users needs can change (increase) at a moment's notice and their getting value out of the service means not hitting a roadblock that requires them to convert beforehand. Giving value first and sinking the hook is rarely a bad idea. :)
To be fair, the piece makes no mention of both of the artists as 'origami artists'. The title depicts them as 'origami enthusiasts'. To be fair I initially had a bit of a problem with the description, but then I read the materials concerning Lang's claim and I will agree that the artist somewhat of a origami admirer (so the title is correct).

Though, I absolutely agree that at a minimum, permission and attribution would be polite. I can't imagine on what ground the painter thinks they are standing on, as the 'inspiration' is so overwhelmingly overt. But as an origami 'enthusiast' myself, I'll watch this with an interested and slightly sad eye.
Perhaps the worst thing about this is that engineers at the browser makers are now incentivized to create Zero-days. $250k and rising for knowingly creating a backdoor? There's now a market for software engineer corruption. Maybe add in some middlemen...
"When you first approach an attractive stranger, having established at least an indication of mutual interest through eye contact, try to make eye contact again at about 4ft away, before moving any closer. At 4 ft (about two small steps away), you are on the borderline between what are known as the ‘social zone’ (4 to 12 ft) and the ‘personal zone’ (18in to 4ft).

If you receive a positive response at 4ft, move in to ‘arm’s length’ (about 2ft 6in)."

Reminds me of the "How To" Goofy cartoons -> http://www.youtube.com/watch?v=xxeL9bdSu-A&t=102
Your "many old scientists" parenthetical comment neglects several strong biases. You've likely never heard of most of the old scientists who don't get into politics because you don't know about their work at all. Older people tend to be more interested in politics than younger. It's hard to be trained/have experience in one field and then switch to another, so few young scientists would also be known for their politics. (For example, Margaret Thatcher's research chemistry impact is much less well known than her political impact.)

And yet, Chomsky is one of those few, having become one of the leading opponents to the Vietnam War while in his late 30s - as your link itself implies - and so doesn't fall under the premise of your comment.
Despite my warnings, I think freemium can be a brilliant marketing tactic even when it isn't sustainable. Whether or not it's dishonest depends on factors that are partially in the founders control and partially not. When Stormpulse did the bells & whistles version we made all of the links say "Upgrade" very clearly so the user knew what they were getting but also what they were getting into.
There are lots of pages that use this particular drop shadow but there are also lots of other possible and very popular variants of this particular setting. I am not arguing any of the settings by itself is likely to be unique, I am arguing that once you have 30 or 50 decisions like that to make, each even with just a few reasonable possibile solutions, it is very highly unlikely two persons will chose the same combination of solutions in the majority of the decisions, even if the CSS to achieve the effect would be different, just because there are so many possibilities. And many decisions are much more arbitrary than the examples shown so far, like choosing the way you present the past issues of your magazine.

If we are sitting next to each other and are told to write down a random 50 character long string built from digits from 1 to 5 and we would end up having the same digits on 30 positions, with long subsequences being the same (= many decisions regarding closely related design parameters being the same), would you be more willing to attribute it to chance or to one of us copying from another?
It seems like Clickable is a good match for Syncapse, but based on their funding record they must have been on track for something considerably bigger. I wonder what happened that caused the sale at this price.
Would love to hear details on that.
>Something else that can't be measured? "Business value".

If it makes money, it has business value, in my book. If it makes MORE money, it has more business value.

Actually it might be the ONLY measurable thing in the whole discussion.
Depreciation is going to be worse on the more expensive models. As the initial purchaser you're effectively paying a premium to be at the 'cutting edge' that doesn't translate into an increased residual.

That said, pick up a $1,500 MacBook Pro and you shouldn't have any trouble selling it on for $1,000 after two years of ownership. Even better if you bought it with a student discount, and it has a three-year warranty (included with the student discount, at least in the UK).

It's something people often don't consider in the 'Mac vs. PC' debate. Yes, a MacBook Pro may be $200 more expensive than a similarly specced laptop from another manufacturer, but it's the total cost of ownership you should be considering, and PCs tend to depreciate an awful lot worse than Macs...
What are you talking about? If all of a sudden there was a campaign to defame Vint Cerf through namecalling and slander, would that be "fluff" and "chitchat" for HN?

Chomsky is an qualified participant in this debate, unlike the examples you gave. He has published works on media analysis and the mechanisms by which facts are overpowered by propaganda. That is exactly the issue at stake here. Standing up for truth and rigorous investigation in the face of media pressure. That's why he is involved in this.. It's the kind of thing he's fought for his whole life.
Building plugins for PHPStorm sucks - somehow
Power is not only an aphrodisiac, it does weird things to some of us
why would iphone be harder to hack than android? is it because iphone software is more closed source?