skysight-inc/HackerNews huggingface dataset:
These days linux distros like Ubuntu are incredibly easy to install, and most computers are already setup to boot from the cdrom first. The problem is this setting has the ability to be worded in a way that would scare most users, so it is unlikely many new users will want to enable it.

Part of the UEFI standard allows a "Do you trust this program?" popup for untrusted media when secure boot is enabled, which would make a lot more sense in this context. If your windows image is modified, it would essentially brick the computer otherwise. A popup would still scare users enough to get their computer looked at (if they didn't know enough themselves), or to be able to say "yes I trust this" if it is a linux system or a different setup (like windows 7, for example).
Didn't everyone learn this lesson from Hackers?
Its hardly scamming when you play the rules to maximum effect.
Depth: 15-30 m

Length: 13.7 km

https://en.wikipedia.org/wiki/Second_Avenue_Subway
Note that the HEADER tag here was replaced by HEAD in subsequent HTML versions. The current HEADER is a completely different beast, falling inside the BODY. The neat thing is that, since the BODY exists and there is no HTML node, current browsers are able to interpret this HEADER as if it were HEAD.
Raising Successful Children
Physical IDs can be faked.
I was on a Rails project with some pages spending 200ms or more rendering views. To some extent that could have been got around by inlining partials or getting very clever with cache invalidation, but it would have come at a high cost in terms of complexity. Maybe a C++ framework could hit the performance/complexity sweet spot better. Then again, the site's down, so maybe not.
This

Also, most of the people who say "oh, go fix yourself", did you try even to build chrome from source?

A friend of mine tried, and it's a huge pain! File size, compile times, libraries, etc, etc

Unfortunately, having the build environment sometimes is more difficult than changing the code.
It just sounds like the reporter is pissed because he couldn't get in on the action.

If this is a scam then so is pooling in money with your friends and family to increase the odds of winning.
The thought hadn't cross my mind, but after reading this post it got me thinking:

Sensa

So, let's get this straight...a hacker "decides" to hack the account of a semi-high profile tech guy and then after committing several serious crimes like fraud that could land him in jail for an extended period of time repeatedly contacts the person he hacked when he must know that Apple will surely pursue this matter?

I smell a rat...

http://forums.macrumors.com/showthread.php?p=15405091#post15...
I once wrote a C parser in Python by hand. Maybe the code is interesting to you:

https://github.com/albertz/PyCParser
There is not much that is CSP about Erlang.
We frequently see articles about well connected or influential people like reporters getting preferential support from large companies. This might be the dark side of special response.
Irrelevant because those accounts are hacked by someone who acquired the password of the actual user by a keylogger etc. They were not exploiting flaws related to server side. In iCloud's case, there is nothing the user could have done to prevent this attack.
The original blog post makes it quite clear that the .mac account was used to compromise the Gmail account.

I think the screenshot is from after he regained control of the Gmail account.
Many a good investigation starts with a single, unsubstantiated piece of information. It's certainly an interesting claim - perhaps it can and/or will be chased down and appear one day on Snopes.
True, I am hoping Ruby 2.0, and Rails 4.0 will improvement on those front.
If it is not trivial for you and your friend to determine a proper compensation package, then I fear you may have other areas where you think the friendship is an asset in the business but probably isn't.

choose which is more important, the friendship as it has been, or the business opportunity. if you pursue the job, the friendship will most likely change.

personally I have avoided this in in some similar circumstances because I think the friendship as it is is worth more than the money.
There's a project currently in planning stages that is supposed to upgrade the 11-mile section of century-old infrastructure between Newark and NYC, improving both Amtrak and NJ Transit service. It'd add a new Hudson River tunnel, a faster modern routing through the Meadowlands, and expand Penn Station into the old James Farley Post Office. http://en.wikipedia.org/wiki/Gateway_Project
Thanks to Gov. Chris Christie it's not gonna happen anytime soon: http://www.nytimes.com/2010/10/08/nyregion/08tunnel.html
Ok, yes, that's true; lack of job "liquidity" can negate the effects of a hot market. If there are only two places to work in your town, you have to think twice before leaving the safer once.

I never considered it before, but this is another benefit of startup hubs for the best startups: it's easier for people to leave their employers to come work for you. Of course you die by that same sword when you get sufficiently big, but that's a good problem to have.
Same here. I tried low-carb for a while and while it was effective for weight loss, I found it very difficult to stick to. I know for a fact, though, that my body responds poorly to too many carbohydrates, so regulating sugars is important if I want to lose any weight (and probably also to stop myself from winding up diabetic).

I switched to intermittent fasting and I am losing weight and have more energy while having no problems at all sticking to the routine.

I skip breakfast, have a low-carb/high protein snack around 2pm and a normal dinner sometime between 6-8pm. So it ends up being about a 16-18hr fast. On Friday and Saturday, I'll relax the rules and have a larger lunch or maybe a midnight snack, since I tend to stay up later those nights.
You're right, and sometimes I do do that. But most times I'd rather have it end up in my Downloads folder. Also, on my mac laptop, I'd have to drag, exposé-show-desktop, drop, exit-exposé... :)
How does this actually stop spam? Any automated bot would just do the POST or whatever is behind the HTML form, without actually loading up the page with this script, and since there's no server-side verification of the user input, it would merrily go through.
Just because a company can have their FAQ pages SEO'd to the top of the SERPS doesn't mean their services haven't been hacked.

Most people who get hacked hardly ever report it, they just want their account(s) back.
You could do as jlouis suggested and have each plane or flight manage its own seats/places. The state of different flights or planes isn't necessarily related and can be handled differently, giving you a smaller isolated unit than "everything at once".

This gives place to parallelism as soon as you have more than one plane to contend resources for in your concurrent model, which is most likely the case in the real world.

If you have only one plane, then you likely won't need to scale.
Great resource. Thank you!
Does anybody knows a similar resource for Android controls?
Its a good interesting piece but in this case could easily be that the employee in Mat's case didn't follow correct procedure or was not familiar with it (new employee?). Even if he knew the procedure for this cases there are all kinds of possible explanations: maybe the hacker pay him, maybe himself is the attacker, etc...
That's how it worked in Lion, but Mountain Lion behaves differently -- you get the duplicate with its file name selected, so you can rename it, but the original stays modified unless you think to immediately pick "Revert to last saved version".

I actually liked the Lion behavior better. (Now I wish I'd had the chance to try out the Mountain Lion beta before release, so I could have filed a bug for this.) That's what we get for everyone complaining about the lack of "Save As"...
> Josh Bloch, who wrote rangeCheck, testified that “[a]ny competent high school programmer could write” that method. RT 815:13-16 (Bloch). Even Oracle’s expert Dr. Mitchell conceded that “a good high school programmer” could write rangeCheck with guidance. RT 1316:24-25 (Mitchell).

Maybe this whole misunderstanding comes from the fact that Oracle just thinks programming is a lot harder than it is.
Isn't that an area that cannot be controlled at all? There are government issued IDs and if a normal company cannot trust them, then there's no way out. Biometric identification can be the last unbreakable protection, but that's also only valid until you find someone who, for example, lost/damaged his eyes in an accident and is up for scamming the company you're targeting.

I mean, there's a reasonable limit of what companies may want to check, but once those proofs can be faked, it's not their responsibility to fix the issue anymore.

(PS. some countries have more restrictions than others too - for example in Poland you need two IDs with a photo to get any kind of mobile plan on a contract - that leaves plenty of ways to verify your identity)
Logo design can cost thousands if you hire a specialist. And they would spend a lot more than 4 hours on your logo (closer to 40-50 hours).

I am a web designer primarily, but I could probably help you out. Email me at inlith@gmail.com

My portfolio is at madebyargon.com, but again it only showcases my website and UI design work.
However, showing up in person is a huge inconvenience for a hacker in another country. Another technique banks use is to send a physical piece of snail mail to a physical postal address containing a verification code or card.
Didn't they call you back to your phone number prior to resetting your password?
Are you using a particular Scala framework, or building your site from scratch?
Link is dead!
Why not require it then?
Sounds like the new normal for twitter. I keep seeing 'get more real followers' ads all over these days. They promise 1000s of them all 'real' but I would be willing to bet, they are all bots.
When I read this I was just astounded by the self-righteous, entitled tone as if the person who filed this knows (yes, "knows", not "believes" or "prefers") that the download bar is an annoying, unnecessary, undesirable feature that the Chrome team must fix immediately. It's not the request itself that bothers me but the tone of it.

I use Chrome on 4 very different machines. A 10-11" Xubuntu laptop, 11.6" MacBook Air, 20" iMac, and a dual 17" monitor Win7 machine. On each computer I feel a bit differently about the download bar. On the MBA and iMac I love it, on the Win7 machine I'm indifferent to it (I actually have a love/hate relationship with it on that one) and on my Xubuntu "netbook" I consider it a necessary evil. So I feel both ways about the download bar but I would never call for its end because it's far more helpful than not.

Its really not difficult or at all time consuming to close it out. And yeah, I totally agree that it would be a good idea to have the option to not show it. Notice I said "it'd be a good idea" and not "there should be that option". If I were the guy on the Chrome team that read this I'd consider it but not make it a priority simply because it sounds like entitled user complaining which the web is so chock full of, especially when users get something free.

Sometimes I really hate users. I mean, lots of people like me need them to succeed with our startups but god damn it if they don't just piss you off to no end sometimes. There's a big problem with users not being able to tell the difference between what they'd like to have and what they need to have. Often it's a real fine line. Yes we should give the users what they want within reason (the customer is always right and all that) but at what cost? My web browser needs to allow me to download files. I would like for it not to clutter up my screen with another window made active by default. Solution? Download bar. Great! But now I need the download bar to just go away because it takes up too much screen space. Or do I? Maybe what I really need is a bigger monitor or to close the bar when it shows itself. Is it an annoyance? Yeah. Is my demand more important than the desires of other users if they're happy with the download bar? No. Unless I'm the only user. It really seems like lots of users really believe they're the only users. It's like every user on the web is an only child or something that's been accustomed to being served everything they want all their lives at the expensive of others' needs.

To be clear, and to repeat it again, I really do think the option to always hide the download bar would be a great thing for users and it'd even help me! It's just that I've seen so many entitled attitudes from users, my own clients, and others this past year and a half that it gets to me bad and I think a lot of people can relate. There's a way to get attention and there's a way to get the wrong kind of attention. You know, Chromium is open source. Maybe someone who wants it bad enough will fork it, add the functionality mentioned, and submit the changes back to Google. Who knows, maybe the next auto-update will surprise us with this new feature.
Learning to Speak and Listen in Actions, not Words.
i think it can be pretty tricky to get real intuition without having the maths around. for example: exactly what assumptions do these methods make about the kinds of noise in the data? this can make a large difference in practice.
Missy Franklin Pictures
http://www.w3.org/History/19921103-hypertext/hypertext/WWW/P...

The work at CERN is differentiated when it is performed by westerners or by people from the eastern side:

"The cost [...] has been evaluated, taking into account realistic labor prices in different countries. The total cost is X (with a western equivalent value of Y)" [where Y>X]

source: LHCb calorimeters : Technical Design Report

ISBN: 9290831693 http://cdsweb.cern.ch/record/494264
I wonder if attacker will be caught and would end up in jail.
All password change requests like that must be carefully recorded and are probably very traceable.
Considering public nature of this exploit, Apple might put quite some effort to carefully investigate the incident.
Sure there is. if you pay for your Google Apps account: http://support.google.com/a/bin/request.py
Visualizing Statistics in Minecraft
You're right. When I forgot my battle.net secret question answer and wanted to change my password I had to send Blizzard two forms of ID. For some games.

The solution exists, its in use now and it is mind boggling that for hundreds of dollars in apps, my file vault password, my payment details and of course a remote wipe facility for my hardware it isn't even an option.
That was sort of my point -- erlang was fashionable like couchdb, but neither ended up living up to the hype :). In that sense couchdb doesn't count.
East Side Access is another amazing project in NYC. going to bring LIRR to Grand Central in 2019 ish.

i've been somewhat documenting its progress at http://eastsideaccess.tumblr.com
i think you might have misunderstood what i wrote. i didn't say artists make more money from spotify/last.fm. i said they got a higher proportion of what was paid.

either way, it sounds like there are just anecdotes on both sides, so there's no actual information either way.
They still require additional effort. Right now, in my pajamas, without leaving my house or spending money, I can do exactly what that hacker did. I probably wouldn't even try it if I knew I would have to get a fake ID just to punish some Gizmodo employee for shits.
I'm loathe to listen to the advice to invest in the market for the long term when the HFTs (who are making lots of money) have driven the average hold time down to under 30 seconds.

It make me feel like I'm being encouraged to put by money in the market so ensure that there's money for the HFTs to steal.
Social Engineering will usually win out as long as a person is in the loop. It's just not feasible to expect a poorly paid CSR to be able to cope with this type of threat.

In the end, a company has to constantly weigh the cost of strong protections versus the risk, and what this exposure will cost them in terms of customer goodwill as well as any civil penalties that may arise.
I can't see it is really a big deal, just pick the best tool for the job, e.g. weblogs.java.net use Drupal.
Is it really so hard to right because instead of cos?
None of that will move people off of buses to a subway or train. The proposal of extending the 7 line to NJ, for example, would certainly help.
No, you had to send copies/images of your ID. ID that is trivial for a hacker to duplicate.
I don't understand where you think I said it did. I specifically said it was a great idea to slap a better UI on git, but mentioned the caveat that to do a good job, the interface would have to be geared to a specific work flow.
But honestly, would you be so quick to respond to a snarky bug tracking thread? I wouldn't. The fact that it's so snarky with such an entitled attitude would push me to give it attention at some point but it definitely wouldn't make my top ten list. There are better ways to go about this stuff and I think reports like this one are counterproductive.
The TBM's finished digging tunnels for all three NY projects in July, now beings the cleanout and cut & cover work so they can start laying tracks and prepping the stations: http://www.dnainfo.com/new-york/20120725/long-island-city/mt...

I worked briefly on the environmental side of this project at my last job in 2002 and something I don't hear that often is that there are completed cut-and-cover tunnel segments for the 2nd Avenue subway right now - the project initial began in the 1970's and some work was completed before the project ran out of money and it was shut down. I've been in the completed tunnel sections under 2nd Ave in the around 95th Street and under the Bowery. I think there is another section further north in Harlem but I haven't been in that one

Tunnel section under 95th street: http://twitpic.com/afuoxv

Tunnel section under the Bowery: http://twitpic.com/afupg0

The initial plan was to tie the new tunnels with the existing section, but last I heard (and this was admittedly 8 or 8 years ago) they abandoned the plan to tie into the Bowery section (they want to go under it) since the route has changed somewhat to tie in with other lines.

The scale of the project still amazes me, I'm glad to see that it's proceeding.
We have two main stacks at my company. One is Rails-based, the other is a mix of C++ and Java. The tasks that the C++ and Java side do is significantly more complex (real-time graph-traversal and number crunching) than what Rails is doing.

On similarly sized server instances our Rails stack can handle about 10 requests per second, whereas our C++ / Java stack can handle about 400.

In practice the only time that I've seen the database be the bottleneck in Rails is when the database is accessed by people that pretend that ActiveRecord is in-process data and just use it like it's not querying a database (e.g. I've seen pageviews that require 30+ SQL queries). That or their database is set up in stupid ways and doesn't have indexes in the right places.

Rails is actually very slow. That said, I think a smarter approach than recreating the framework in faster languages would be to allow C or C++ into the main Rails project and to rewrite the hot parts in one of them. We sped up ActiveResource by about 35x by reimplementing it in C++ (with no changes required to our apps).
If I understand correctly, the NJ Transit trans-Hudson services have been at maximum capacity for years, so they could carry more riders if they were able to add more trains at peak times, but without a new tunnel (and probably more platforms) it's just not possible to run more trains.
No! The biggest annoyances for me are:

1) Not easily switching to a new tab when it is opened (I somehow learned about command-option-shift-click, but, really);

2) Not being able to use ctrl-scroll wheel (on Logitech trackball) to zoom (command +/- not nearly as nice).
Having spent 7 years in the games industry, I am really interested to see how the kickstarter projects work out. TBH, I don't think some of the more high profile ones raised nearly enough money to make a game to the level of what people are expecting. Also, the timeline. What happens when a year goes by and there's no game. 2 years? 5 years? Some of the people raising money are known for taking a long, long, long time to develop a game. Do you want to pay $100 now to seed a game you won't see until 2018?
We use both Erlang and CouchDB at Cloudant and have great success with both
Am I the only person who becomes extremely irritable once their blood sugar gets low? I can't imagine fasting for a day - I'd have no friends left by the end of it.
Maybe, just maybe, one day when you were 26 you entered your late 20s and received the corresponding metabolic slowdown.
http://stackoverflow.com/questions/115983/how-do-i-add-an-em...

Git questions on SO with more than 300 upvotes should be considered bugs.
not useable in all country. Not applicable on imap, pop3. Use case where an email account serve more than 1 physical person. Unusable while you travel.
Play, with large components ripped out and rewritten. In particular, the monadic db access system is something we wrote in house.
> like why does 'git push' push just the current branch, and 'git pull' pull all branches?

It's the opposite, "git push" pushes all branches and "git pull" only pulls the current branch. I think it's because push will only do fast-forward merges while pull will do any merge, and that could require a working directory to exist (but why not make push just push the current branch?)
BeanPole, A Java library that simplifies app deployment on Elastic Beanstalk
Why? Come on man, don't leave us hanging. Give us an argument. Start a discussion. You can't just leave that dangling out there like that. That's why these comment threads exist.
npm: Launches new website
>I also want to get the offer that an hard pressed negotiation would give me

He doesn't sound like much of a friend when you say that. The easiest solution is to find employment elsewhere. When you bargain with a friend with that kind of mindset you will either press too hard and lose him (and potentially the offer too) or you'll end up feeling resentful at being "underpaid".

There is no magic bullet or answer to your question. Either roll the dice or preserve the friendship by looking elsewhere.
> why does 'git push' push just the current branch, and 'git pull' pull all branches?

What version of git are you using? "git pull" definitely just pulls the current branch. It will fetch all the other remotes, but will only pull the current branch.
Hackers: Another reason to thread clouds carefully
Glass towers could be awkward S.F. fit
Startup founders stop using obscenity and cuss words
Disruptions: By Litigating, Apple Spills its Secrets
pple, by going to a jury trial to defend the patents of its most prized products, is allowing competitors and the public to see inside one of the most secretive companies in the world.
Of course not, the expense of the fiber and equipment itself is the same but the number of customers and thus the maximum revenue is far lower.
Y Combinator's First Batch: Where Are They Now?
I completely agree with you about fault-tolerance. However Erlang, CSP, actors and message passing are heralded as the key to parallelism. The Erlang book still promises n-times speedup for n-cores, with not enough of a caveat.
Jimmy Wales Speaks out on UK Law and Freedom for Startup Growth
Can iCould be enabled remotely? I know it shouldn't be able to, but could it?
What Will Facebook Look Like in 2022?
Incidentally, this was one of the best answers we've ever had to the question on the application that asks you to describe some system you've hacked.