skysight-inc/HackerNews huggingface dataset:
I always wondered why malware doesn't simply replace the windows loader with a secure boot signed grub (kindly paid by redhat) and then load an arbitrary payload.

If microsoft accepts signing a grub bootloader which in turn can load an user built linux image and initrd, then malware could do the same.

Furthermore, if the concern is to avoid unauthorized modification of the boot record, why don't create an hardware filter that prevents writes to the boot sector unless a special hardware key (for example on the laptop case) is activated.

Or, nstead of preventing the write, this hardware key could sign the boot record using a key which is recognized by the firmware.
Actually vendors could implement this and get the microsoft windows 8 logo + have a competitive advantage because they show they care for the freedom of their users. (The cost is negligible I guess ... with respect the plethora of multimedia keys, wifi/bluetooth disable toggles etc)

Sorry if it's a stupid question, but the amount of fud around this topic makes it difficult to quickly find relevant info.
What's the latest on Python 3 support in Flask?

Edit: Why the downvote? I'm just fishing for anybody having newer info than what's on the website out of genuine interest and because HN tends to be a place where people would know; it's not meant as a troll.
I'd be more than a little skeptical of an index which places the U.S. below Qatar and Chile.
> There's no global truth for ethics.

So it's OK if a moderator on this site deletes your comment because he doesn't agree with it? Your comment contains no profanity or anything that might be construed as obscene. That sort of censorship wouldn't bother you?
I'm not naive. I realize there are repercussions to it. It isn't unique in history, and I'm grateful people have and continue to do so.

When you're publishing things about the Mexican drug cartels, you have to expect that you're going to piss off the gangs. That's part and parcel with what you're doing. Unfortunately, it's sort of how progress is made; if you publish something and get jailed, beat up or even killed, that becomes part of your message. I'm not trying to sound flippant. It's reality. What passes for "anonymity" won't save you, and true anonymity makes it unlikely that what you publish can make a difference. Besides, did truly anonymous publishing ever really exist?

When it comes to getting your message out to make a difference (which I assume is the underlying point), fame and anonymity are opposite sides of the same coin. If you can't achieve one, you're best bet is to focus on the other.
What will the immediate consequences be, if the injunction actually goes into effect? I have a ton of questions about this, but basically:

- Will Samsung/Google just tweak the software to get around the patent, and continue shipping?

- Could Samsung ship the device sans-Software, and have a US based facility install the OS to get around this?

- What is the appeal process that Google/Samsung can take? That is, when Samsung files the appeal, how long does it take to be reviewed and considered? Can Apple appeal an appeal?

- What is the meaning of this 2014 court date?

- What defines the "Galaxy Nexus"? Could they change the colors on it, or tweak the case, and call it a different device to continue shipping?

Of course, any answers are basically speculation at this point, but mostly I want to get a feel for some of the possible avenues that the parties have to take.
My Ubuntu 10.04 desktop went to 100% proc and load avg of 20, none of my 10.04 servers or Debian stable servers were affected.

This fixed it:

date; sudo date `date +"%m%d%H%M%C%y.%S"`; date;
Treasures of telephony tucked away in AT&T's  vault
Let me rephrase. I'd be shocked if there was a good reason for this other than "google doesn't like guns."

As for ethics, I would go as far as to say that punching holes in paper from 100 yards away is about as benign an activity as one can imagine. But perhaps environmentalists would take isuse, so I'll retract that as well.
“Leap second” bugs take out some prominent websites
This was my thought too, but I pushed GOW to a lower priority in my to-do list after a comment in a recent thread that publicised it:

http://news.ycombinator.com/item?id=4085830
Red Hat users , be cautioned ! https://access.redhat.com/knowledge/articles/15145
London, UK - full time

YPlan - early team - Generalist Developers

Want to be one of the first members of a ground-breaking mobile commerce startup? Join YPlan, a pre-launch stealth startup backed by venture capital and angel investors (unannounced) who helped build the world's most loved mobile, consumer and social companies.

At YPlan, we are grabbing a huge, inefficient industry and flipping it on its head through a mobile-only approach. We obsess about simplicity, beauty, great consumer experience and build amazing products by questioning the standard way of doing things. We are looking for an outstanding technology leader who lives and breathes mobile, builds stuff that “just (somehow) works”, genuinely loves to code, and shares our passion for excellence and changing the world for the better.

What you'll do:

* Develop category defining mobile apps for iOS and Android.
* Build out and maintain backend systems for data management and analytics.
* Build a frictionless mobile payment experience for our users.
* Improve our machine learning technology to aid content discovery and targeting.
* Implement social integration and sharing.

We are looking for Mobile Application Engineers and Backend Engineers who are/have:

* Passionate and enthusiastic about changing the world.
* Have attention to detail and relentless drive for quality.
* Independent and product-focused, able to work both independently and in larger teams.
* Passion for maintainable, extensible, testable, and reusable code as well as fast iteration.
Solid understanding of data structures and algorithms.
* University degree in Computer Science or related discipline preferred.
* For Mobile Application Engineers, expert knowledge of iOS SDK/Objective C or Android SDK/Java is a must-have. Interface design expertise and ability to work with UI designers much wanted.
* For Backend Engineers, experience with high performance, scalable, mission-critical applications, recommendation systems and payment systems prized. Python fluency required, experience with Java or other JVM languages would be an advantage.

Remuneration:
Very attractive including stock options.

Location:
Central London

Why us:
Be one of the first YPlan team members! You'll have a say in all parts of the company and get to shape our culture and development methodologies. We advocate data-driven decision making, put product quality first, promote open culture and flat hierarchy. You’ll be joining a small team of hard-charging people, who have built and worked with tech startups in the past and are committed to building excellent products.

To apply:
Drop me a line to viktoras@yplanapp.com and let's chat!
I am in China right now. I just tried to Google Bloomberg and my connection was stopped.

I can not connect to bloomberg.com. I can not read this BBC article.

Reply here and I'll test whatever you want me to.
I wonder if that flow rate would be high enough to build this membrane into a drinking straw, so you could take a safe drink right out of the ocean with a cheap, compact device. This seems like it has the potential to revolutionize camping and survival in the near-term, and eventually the availability of clean water everywhere.
SEEKING WORK - remote.

An expert in the dying art of ActionScript 3 programming.
Backend programming in Python or Java. Hands-on experience with C++/Qt/OpenGL/Unity3D/Semantic Web/Salesforce

Not afraid to learn something new.

See my profile here: https://grouptalent.com/talent/2464 or at oDesk https://www.odesk.com/users/~~729881ad189fa90c

Email is in the profile.

Ivan
Learning your first programming language
All this work of trying to achieve "pixel alignment" on icons is useless, in my opinion. Just change the browser zoom level, and it all breaks. It Retina, it's not necessary. And font rendering is so different between platforms and browsers, it's too hard to try to accomodate.

End-users don't really care about "blurry" (i.e. anti-aliased) icons, since all their text is rendered the same way. They only care if the icons aren't legible.

Much better than trying to hack hard pixel edges, would be not to cram so much stuff into an icon in the first place. Examples:

- Instead of a dogeared document with lines on it (indicating text), just use a blank dogeared document

- Instead of a book+bookmark icon, just use the bookmark part, or just the book part, depending on what the icon is for

- Instead of slapping a "+" onto an existing icon (e.g. on top of a book with a bookmark, to indicate "new repository" on Github), just use a "+" icon by itself, and ensure the context makes it clear that we're talking about a repository

GitHub tried to cram way too much information into a lot of their icons, and it's basically useless IMHO. Icons shouldn't be self-contained complex symbol languages; they should be simple and depend on context for full meaning. They're not sentences, they're signposts.
What if you don't represent a populist movement and your views don't cater to the masses?
HTC One X Gets A Jelly Bean Port
Jennifer 8. Lee, a former reporter for The Times...

That was not a typo. This person's middle name is the number 8:

http://en.wikipedia.org/wiki/Jennifer_8._Lee

Lee was not given a middle name at birth, but instead chose "8." as a teenager. For many Chinese people, the number eight symbolizes prosperity and good luck.

I found that to be a fascinating little tidbit.
Any books/reading for Product Managers?
Hi,
I wonder if you guys have any recommended readings for product managers? I have read the lean startup and design of everyday things.
Please recommend your fav books too.
Thanks
Manas
The Invisible Fist
Come on!

Just get a fake account in wordpress, blogger or whatever and post using a public wifi. They will do the hosting for you for free and you will be virtually untrackeable. If you need to publish some video, post it on youtube or a clone using the same procedure as before.

You can even use facebook for hosting (!) if you fake the email.

I really don't get why this guy needs to purchase a VPS to publish.
You should have gone with Fernet Branca - it's great with Cola ;-)
SEEKING WORK - NYC or Remote

http://madhatted.com matt.beale@madhatted.com

Fullstack web developer with a background in startups, eager to work with the smart people on your team to build something great. I've been working with Rails since 2006, but I'm comfortable with everything from Linux command-lines to writing tested Javascript libraries.

If you're doing something with Ember.js or an ambitious client-side app, let's talk!
Exactly, it is piss in an ocean.

Regardless, people like you are actually the reason I am thankful that SpaceX exists. It really doesn't matter to them what people like you think, thank FSM...
Software Engineer - San Francisco, CA - Thumbtack.com

We're looking for full time software engineers and mobile engineers.

Our delicious company food culture has been featured on Inc.com and inspires many Bay-area startups. We eat family style meals everyday cooked in-house by our gourmet chef.

We recently raised a Series A and are growing rapidly. Over 250,000 small businesses have already signed up.

We can offer visas if you live abroad and are willing to relocate.
thumbtack.com/jobs or email dan at thumbtack.
Why Boxer.app isn’t in the Mac App Store
The other catch that not many folks seem to realize is that 'your' us-east-1a is NOT the same as 'my' us-east-1a, although my 1a and 1b are guaranteed to be different AZs.

And I think you hit the nail on the head - 'regions' are for regional fault tolerance, while AZs are for within-a-region fault tolerance.
Gargh. That was my first guess and then I changed it.

(They are the only two I've heard of.)
How? Don't checks have your name on them, or doesn't the bank know it?
Come on, the muppet thing is just a bit of reverse linkbait, and should be taken lightheartedly. As for insulting - if anyone has cause for insult, its the hundreds of developers who have spent their time putting together something that Atwood rubbishes on what feels like a weekly basis.
The CEO of Stratfor wrote a book called "The Coming War with Japan" in 1991:

http://en.wikipedia.org/wiki/George_Friedman

After I told him this a few months ago when we were talking about this article, my dad read it a little more critically and found at least one blatant factual error. So take it with a grain of salt.
I mean that the phones were blocked for a while, before they were allowed.

I'm not American, but still I wouldn't mind seeing these South Korean chaebols get a taste of their own medicine.

Protectionism may reduce the overall efficiency of a system, but can be good for the individual actors within that system who implement it. I think Americans are more interested in their livelihoods than in the efficiency of world production. In fact total efficiency should never be our goal; that would make slaves of us all.

The original iPhone was blocked from South Korea for quite a while.

Here's more info on South Korean protectionism in relation to phones: http://online.wsj.com/article/SB125367616595333125.html?mod=...
Google's Project Glass Lets Technology Slip Into the Background
It doesn't really matter what you do. If you are concerned about looking foolish, then probably yes. Otherwise, have at it.
Scrolling through the results, I see:

- 50% Star Wars imagery (iPhone as stormtrooper once, but usually that ugly green Android guy using a lightsaber on something representing Apple)

- 10% Lord of the Rings imagery

- Many posts that “support the cause” without delineating any sort of argument

- No one disputing that Samsung ripped off Apple’s designs or patents

Interesting.
http://www.newsdiffs.org/diffview?url=http://www.nytimes.com...

The diff algo is producing some weird results. (Look at the first paragraphs.)
Therein lies the difference between a company and a quality company.
SEEKING WORK - Pittsburgh or Remote

"Full Stack" Robotics Engineer with 12+ years of experience.

* Software, Hardware, Electronics. Localization, Computer vision, Sensor Fusion.

* C/C++/Java.

* Current project is autonomous vehicles.

Website: http://mind-melt.com/ or http://about.me/JeffreyKramer/

Contact me at jeffkramr@gmail.com.
Heh, yeah, not the best. But my lack of investment in a decent server would be a problem regardless of my choice of blog software ;)
ebay can at least make the argument that the legal headaches/uncertainty with enforcing interstate gun laws may not be worth the money they get from gun auctions.

Google won't even allow you to link to Cabelas.
Wouldn't the water have to be sanitized first? It sounds as if it only filters sodium, not other dangerous particles.
Do yourself a favor and don't lock yourself even more into the Windows environment
if you, for whatever reason, have to work with it.
"No reasonable expectation of privacy" for cellphones
Your website might be informative and completely ethical, however advertising weapons could easily be deemed as unethical. Weapons are designed to end lives.
"Made lawfully under this title" is the wording that mattered in Omega v Costco and lower court decisions in Kirtsaeng v John Wiley. In 17 USC §109 which limits copyright holder rights and is the codification of the first sale doctrine, all of the limitations listed apply only to works subject to that phrase.[1]

In a nutshell:
One interpretation is that "lawfully made under this title" simply means a work that does not infringe on other copyrights, as per Title 17. Another implies that the work must be made in the jurisdiction of US Law for the limitations to apply.

I cannot see how first sale in all its forms would not be threatened by the latter interpretation. If you go out of the US and buy a book that is not produced in the US, you would have no codified right to resell it in the US.

[1]http://www.law.cornell.edu/uscode/text/17/109
San Diego, CA

Web Cube is a CMS+eCommerce platform that powers the website and online stores for a number of large well-known brands.

http://www.webcubecms.com/our-company/clients/

We're looking for solid Python+Django developers to help grow our platform and take it to the next level.

http://www.webcubecms.com/blog/2012/06/17/join-our-team-were...
Which is nice, because you get fine grained control over which bandaids you put over cmd.exe. This basically gives you readline and not much else, and you don't have to install multiple possibly overlapping bandaids to get it.
Why should we blame apple for the fact that chrome cannot use apple's nitro js engine? Why couldn't google use their own V8 engine? Isn't software for iOS natively compiled ?

Does anybody know if there is some other (more important restriction) that makes difficult if not impossible to create a javascript engine that performs at least as apple's nitro engine?
Good point, I didn't take into account fraud on the part of the customers.

The legitimate but non-US prepaid card is still something I think could work though. I tried googling about it and didn't really find anything at all though.
Founders at work by Jessica Livingston,
Rework by Jason Fried and DHH,
The Startup Owners Manual by Steve Blank...
iOS 6 beta now prompts for permission to allow access the address book - the same way you get prompted now for gps or notification permissions when apps request it.

I noticed a lot of those permission alerts, over and over.
Austin, TX or remote - Stormpulse http://stormpulse.com

We are a profitable, bootstrapped company disrupting the $1 billion weather business with a unique, counter-intuitive product used by 6 million people last year. Our clients include many of the world's largest companies--and the White House bunker. More and more often I can drive down the road, point to a sign or a truck and say 'hey, they use Stormpulse!'. It's fun.

We are designers. We are independent. Our mapping and weather data systems have been written from scratch. We have a vision to take our product far beyond what anyone else has ever seen or imagined in the weather space, which effects every person on the planet.

Our platform is written in Python, JavaScript (jQuery, backbone, bootstrap), nginx, Postgres, PostGIS, Flash, haXe, MySQL on Amazon EC2 + S3.

We are Matt, Brad, Josh, and Bryan. Come create with us: founders@stormpulse.com
You recommend me looking at a source that states it doesn't have more bugs than IE.

Look, the article on techcrunch is troll bait and the agenda is meme based already, the article title brings to ponderation on the amount of self satisfaction a corpse would feel because a company pulled a virtual machine from running on mobile browsers, limiting it to export to executable apps that are doing well by any measure. I don't see a valid way to continue this other than pointing back to what I posted.

I would say cross scripting is the largest security problem nowdays by any measurable account. These are your parameters looking at spread and profile, javascript tops flash in both, so let us not make it sound like flash is the end all of security problems on the web.

You don't "like" it, perfectly fine, no big deal, I reckon you probably interact with it on a lot of plats nowdays without even knowing. Bandwagon opinions aside, it is that simple.
Sounds like they just tried to steal a huge network of e-mail addresses and run it through their infrastructure.

To me, this is essentially theft.
here's mine:
http://news.ycombinator.com/item?id=4018867
Hacker News stories which contains plenty of book recommendations (sorted by points, labeled by topic):

Science Fiction: http://news.ycombinator.com/item?id=2978027

Computer Science: http://news.ycombinator.com/item?id=3595599

General: http://news.ycombinator.com/item?id=1752139

Design: http://news.ycombinator.com/item?id=3276986

Computer Science: http://news.ycombinator.com/item?id=1636275

Developing mental models and increasing cognition: http://news.ycombinator.com/item?id=3277457

Quant finance: http://news.ycombinator.com/item?id=3177815

General: http://news.ycombinator.com/item?id=663662

General (non software): http://news.ycombinator.com/item?id=1226736

Math: http://news.ycombinator.com/item?id=665029

General: http://news.ycombinator.com/item?id=875686

Entrepreneur: http://news.ycombinator.com/item?id=2928211

Statistics: http://news.ycombinator.com/item?id=902074

Philosophy: http://news.ycombinator.com/item?id=1503137

General: http://news.ycombinator.com/item?id=1865350

Math for beginners: http://news.ycombinator.com/item?id=755043

Military strategy: http://news.ycombinator.com/item?id=456275

General: http://news.ycombinator.com/item?id=797070

Investing: http://news.ycombinator.com/item?id=248469

"I want to start a web company": http://news.ycombinator.com/item?id=1567456
Aren't there legal hurdles that vary by country and state? Perhaps that's why it is better to have specialists sites (like Gunbroker).

That's just a wild-ass-guess. Feel free to tell me I'm wrong.
SEEKING FREELANCER

A start up in Ann Arbor, MI. Looking for a designer. Initially to design our landing page, and then work with us on a continual basis. We care a lot more about your design skills than your coding skills---we are fine with getting PSDs or html (although the later will be nicer). We're a technical team with mostly engineers. Thank you.

azarias[at]meritful[dot]commm
Grappa was version 0.7 :)
McDonald's worker reveals secrets of fast-food giant
Thanks for publishing these code reviews; it's fun to load up the projects and jump from file to file on a guided tour
The best way to get people excited about your product
I can't say it strongly enough, but the ability to be one of the diminishing few with a high ability to understand, debug and fix, large Visual C++ codebases, will likely provide you with a long career.

Not all of it is going to be rewritten in .NET, and every year, more of the C++ guys die or retire, and more people quit for .NET, or something easier.

Maintenance may be a dirty word in some circles, but for me it's more like an endless confusing puzzle, and stream of opportunities to make things better.
Agreed about The Innovators Dilemma; and from the original list, Founders at Work, Crucial Conversations, and The Design of Everyday Things. Your mileage may vary on The Alchemist; some people find it transformational, others aren't so excited. I haven't read the others on the list so don't mean to be dissing them, just don't have any first-hand experience.

I'd also add

- Sherry Turkle's The Second Self
- Geoffrey Miller's Crossing the Chasm and Inside the Tornado (a different Geoffrey Miller than the one in the original list :) )
- Rita McGrath and Ian MacMillan, The Entrepreneurial Mindset
I am a MASSIVE weather nerd, and I live in Austin so this excites me, but alas I'm not a developer, I'm just an IT guy.

Good luck with your hunt!
And yet the same is not true of Toronto, Canada. There are complex cultural issues at work -- it's not just about prevalence of gun ownership.