skysight-inc/HackerNews huggingface dataset:
It doesn't matter how many times you covered it. It was a dick move, plain and simple.

You obviously knew about the flaw at least few days before your interview with Forbes (or whatever it was). Shooting a one-liner email to Onity was a no-brainer. "I found a major flaw in your locks. Contact me for details." They reply - great, they don't - fine, proceed as planned. I come from a reverse engineering background and I'm sorry to say but I have lost all professional respect for you, regardless of how good of a reverser you are.
Now, maybe, but back then...
Thank you. You saved me some typing. :)
Our web-based IDE[1] does exactly this, including syncing between source and PDF, using PDF.js. Works great for the most part!

[1] http://rstudio.org
iOS has never been about easy to use, its been about hard to fuck up. I find it hard to believe that so many people who use windows but own an iphone/ipad are afraid of a filesystem. You show them a commercial where you plug an android phone/tablet in, then you are instantly dragging and dropping files just like a thumb drive without having to sync, then they are opening up an excel file using preinstalled open office (or for commericals airing on the internet maybe a video file being played using preinstalled vlc). Say the words "out of the box", no extra cost for these apps. If HTC and/or Samsung threw a hanful of programmers at porting open source apps to android and started this kind of advertising, iOS would be on the way out quickly.
In the Middle East/Qatar till the end of Nov, but looking forward to getting back...wish I could make it! Will be looking for events in December and next year!
'Over half' of Android devices have unpatched holes
We should put it in salt or something...
The Google Closure javascript framework precompiles templates, too. https://developers.google.com/closure/templates/
This assumes a thoroughly mercenary/market oriented focus of colleges, and ignores altruistic or societal motives of many if not most colleges/universities/educators and professors.
And I thought people who used RSS were technically aware and wouldn't use broken clients. How about collecting user gent strings and filing bugs, or producing a test suite?
in fact there is a unique melody for every singing,other music is just the extension
When you double-click a photo in iPhoto to look at it full screen, it makes a copy of it on the chance that you intend to edit it. It stores that in a shadow directory called "Modified". Even if you don't edit it, the copy is retained.

Right click on iPhoto Library, Show Package Contents, look at size of Modified vs Originals folders to see if this is the cause behind your library doubling. If it is the case, please report back, I'd like to know as I also do not care for the implementation of this functionality.

If you crop and such your photos then you can't just delete the Modified ones without trouble.
Closure templates does this. It's never occurred to me that someone would do it any other way.
A few months after this was first shown on HN Chrome started shipping with a built-in pdf reader that looks exactly the same on both MacOS and Linux.

I always assumed it was pdf.js
Hi,

I am not an iPhone user, but if what you have described above are problems that a significant number of iPhone users face, then I am pretty surprised/disappointed.

All of these would be hampering user experience ( something Apple excels at ) irrespective of whether the user is a casual one or a heavy one.

Also, if these problems are easily reproducible and quite prevalent, isn't Apple solving these in upcoming upgrades?
In other words, they must be getting some kind of feedback/bug-reports and these problems should surely have to be part of that.
I so agree with all this. I'm not a Noscript user but I install Flashblock, Adblock, Ghostery on all my computers and i find the web to be an awful experience without at least Adblock.
I was also astonished at how many ad profiling companies Ghostery revealed.

It's not necessarily targeted advertising that people should be concerned about; it's gradual profiling by companies that have the potential to affect insurance premiums, mortgage applications, and a whole host of other real-world interactions with corporations who profile using data sourced online.

This article from 2010 in the WSJ is revealing; it hints at how companies have long been itching to use online data -- such as which articles you read -- to categorise populations into neat pigeonholes: http://online.wsj.com/article/SB1000142405274870464860457562...
> I don't understand how salts could help against timing attacks, though.

The salt which is unknown/unpredictable (and contains enough entropy) to the attacker makes his offline attack against the hash unfeasible (after he has managed to fetch the password hash from the server using timing leaks). I'm not sure if it is possible to fetch the (whole) hash using timing, because it is not a direct comparison. But anyway, if the attacker managed to do that, now because of "a proper salt" he would have to crack a hash that was composed of, say, 128 bits of salt and 20 bits of the actual password. It is unfeasible because of that 128 bits of salt alone.
Heroky
OSX has nothing to do with ID3 tags. And there have been 400m+ iPods sold with no major ID3 issue.

Just saying that just because it affects you personally does not make it a widespread issue.
Apple should stop making their own productivity software as it is pretty poorly done. Mail is OK, but I would not recommend anyone to use it. I works is probably some of Apple's weakest software. They should really just retire the suite.
MySQL function returns dates of speficied day & between date range
I supported the Macintosh Labs at SFU from 1991-1993. Those systems booted off of floppies (which I handed out at the front desk) - and one of my jobs at Harbor Center was, on a weekly basis, running anti-virus off the boot floppies to clean them off.

I also supported the Macintosh Platform at Netscape (HUGE Macintosh house) from 1996-1998. A good portion of the time we ran into a tough problem on the Macs there (by then we had hard drives), our Mac Lead (which I was not) - had us do a "Fresh Install" of the operating system. That pretty much always resolved the problem, but seems kind of invasive nowadays.

I sometimes think we view Mac History through rose colored glasses.

I will agree with you - that damn beachball is annoying. Though, I am happy to say, that as of 10.7.4, it probably only spins for about 5-10 minutes of my day now in aggregate, as compared to the 20-30 minutes a day back in the 10.7.1 era.
In other words, the same "Windows 8 Mobile will come with a locked EFI Secure Boot" we've known about. The OS is signed and verified by the bootloader.

http://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Int...
These guys seem to miss one important thing. The fact they have a business and try to earn money by doing some things does not put any obligations on me. They try to write free content and earn money by showings ads. Great idea. Unfortunately, ads are in 99.99% cases done so badly they really piss me off, so I don't want to look at them. Should I feel guilty that I am denying those nice guys earning a living by that? No more than I should be feeling guilty not going to McDonalds because I don't like the taste of their sauce (true story!) and this denying nice people that work there some of their revenue. If these guys say that if I'm not going to look at ads I'm not welcome on their site - fine, I won't come there anymore. I never heard of them before today anyway, and didn't feel a gaping void in my life. But I won't feel guilty because their business model makes me physically unwell. I tried browsing with AdBlock off, and it's hell. Most ads are crappy, repetitive, annoying as hell and completely irrelevant to me. I feel no obligation to subject myself in my home on my computer to this abuse. You want my money? Do something I want to buy. You want me looking and clicking on stuff? Do something I want to look on and click on. Your business model doesn't work this way? Do it without me or change it.
Any complaints about NoScript are completely unfounded, (unless they are addressing that stupid update page). Why on Earth would I want you to use full percentage points of my CPU time to shuffle divs around and report back to the server everything I'm doing with my mouse?

I feel the same about Ghostery. There are a lot of Facebook/G+/whatever buttons on websites and I don't particularly want them to be collecting data points for every page I see.

Blocking ads does suck for websites that are being respectful about it; but surprise, there's a whitelist for that.

I checked MakeUseOf with adBlock off and there are ads in the middle of the article, which I think is disrespectful to the readers. Maybe respect is a two-way street?
Thin social line between security, privacy (on Facebook)
Wonderful. I will be there.
Even though I'm a big Apple fanboy, I have to admit I avoid using Apple's desktop applications. The one exception is Mail.app, but even there I'm always eagerly looking for any possible alternative. iPhoto, Addressbook, iCal, none of those have ever appealed to me, and I've always use (mostly web-based) alternatives. And enough has already been said over the years over that piece of bloatware called iTunes.

So as far as I'm concerned, this isn't something new. IMO, with some rare exceptions, Apple has never been very good at application software.
No, it's not faulty at all. People tend to favor those who favor them, those who given them things. The example in Argentina was Evita handing blenders and bikes to the people on the streets.

The fact that there are those who believe that those policies are wrong is meaningless to the voters. The group will vote for those who give them things, plain and simple. And they will do so even at their own peril. Case in point: How many cities have now filed for bankruptcy protection broken under the weight of pensions that cannot be supported?

The only regulatory element in the feedback loop of the whole unionized labor equation is complete and utter failure. Nobody is going to say something like "Wait a minute, who's going to pay for these exorbitant lifetime pensions? Let's scale it back and make them reasonable." No, they'll take and take and take until the goose is dead and no more golden eggs can be produced. This, to some extent, is human nature.

Given that, it is only natural that these groups will not support or vote for those who come forward and expose reality. Nobody likes being wrong. It becomes tribal, us vs. them, and all reason is lost.

Simple exercise:

Hire a gardener for $100 per month to take care of your lawn.

Let's say he retires after five years (to speed up the example).

Now, by contract, you have to continue to pay him $100 per month for the rest of his life.

But, wait a minute. You still need a gardener.

No problem, you hire another one at the same $100 per month.

The issue is that, now, the same position costs you $200 per month, $100 for the guy doing the work and another $100 for the guy who retired.

Repeat that five years later. Now the same position costs you $300 per month.

Of course, the gardener's union will favor and vote for those who will keep this gravy train going, regardless of the fact that it is killing the goose. And yes, anyone who dares bring up the reality of what is going on will not only not get their votes, but they'll also be treated to their attacks and ire. The funny thing is that reality and mathematics don't change and eventually the house of cards comes crashing down.

This is an over-simplification, but it serves to illustrate one simple reality of the union problem. Democrats give them more and more, and that's why they continue to vote for them. Mathematically, with sixteen trillion dollars in debt this situation cannot continue for too long. We'll see what happens when the music stops.

So, yes, people like me are saying: It's time to stop this madness. And, for that, we are hated and ridiculed. That's OK.
I think the issue is that user expectations have gone way up, and that results in disappointments that get amplified when coupled with frustrations.
Learn Python or Ruby?
I want to learn either Python or Ruby, so which language do you recommend, why do you recommend it and what are the best tools/books/tutorials to learn that language?
Commercial fusion reactors that don't generate energy? Totally.
History of Reddit by jjrs
Sure, that's not what they/I mean though. They made something to register hours for their employees (perfect case for Access/Lightswitch) and asked us for a quote for a complex public facing SAAS solution. And the 'case' they want to make is to ask why there is so much programming involved even EVEN HE can make 'a complete application' in a few days.

Lightswitch and other systems like it have their domains and work well in those domains, but less tech clients cannot see the difference between one domain and the other. A web project we did in another 'codeless' tool (which is just not true as you are coding, just in another way) was delivered and the client said; we saw on the tool vendor's site that you just press one button to make the web site into mobile apps for all devices. So why are you charging us for that? In short; people believe what vendors say on the golf course or on their sites. Even if those cases are completely out of context; people don't KNOW that they are.

If a CEO of tool-vendor X tells CEO Y on the golf course that their product 'fixes all IT problems because anyone can make solutions for web and mobile with it', then CEO Y will tell buy this product. Although neither CEO X or Y know actually what the product does. This is really normal. So then the product gets pushed down to the production managers and they get the 'command' to 'use it for everything, because we are shifting to this product as it will save us millions in IT costs'.

I have seen this many times (in big and small companies) and I see it with LightSwitch as well; with Sharepoint too; I know a few companies who make everything with SP, much to the dismay of the IT dep.

Edit: and I don't really know if it's the right way for businesses to go. I remember Access well; I remember institutions, for instance the main Dutch court, creating MONSTERS in that themselves because it's easy and (almost) no programming. Then when the guy/girl who did this leaves, someone needs to take it over. We are talking about a complete mess which is business critical. So I believe it has it's place, but only for small departmental apps; if they grow they should be replaced by something solid and this should be considered the prototype. IMHO.
Well... I'm not going to buy anything with that stupid chip then. Period.
Okay, so my phone? My, at work, workstation?

How about borrowing a friends computer? If you suggest that I'd bring a USB-dongle for that we live in different universes.
Strongly agree on the pay-per-click vs pay-per-view ...

Correct me if I'm wrong, but I believe we may be shifting towards this pay-per-click model. Remember GM pulling their ads from Facebook ? Views are still an important part of a marketing strategy, but it's harder to estimate the actual benefits of such a campaign (as opposed to clickthrough rate).

This is not the death of online advertising - companies are making huge profits with a cost-per-click model, eg Criteo... So yes, adblock is changing the way editors made money. But oh well, isn't the internet threatening the business model of the music/film industry ?
I believe Chrome's pdf plugin is based on Foxit
I know there's some startup that already tries doing this but they also told me that automating something like this with machine learning is an almost impossible task.
Here are some benchmarks: http://jsperf.com/dom-vs-innerhtml/18

TLDR: It depends, but DOM manipulation tends to be faster in newer browsers.
Given its financial performance, I can only imagine that iOS's quality is priority #0, #1, and #2 through 10 at Apple. From an anecdotal perspective, it has all gotten a great deal better over the years.
Joliebox acquisition brings Birchbox to Europe • The Rude Baguette
J2ObjC: A Java to iOS Objective-C translator by Google
i wish i could donate some karma right now... very good answer!
I was actually thinking about switching to AMD. Not that it'd make any difference...
First, he had to very explicitly enable that keyboard (not easily done by accident, considering it's about 7 taps deep in Settings). After enabling, it is rather simple to activate that keyboard – hitting the globe icon on the keyboard will cycle through all enabled keyboards.

Second, the keyboard isn't ridiculous. It's actually quite powerful. He took a screenshot of the Chinese – Simplified (Handwriting) keyboard, which allows users to draw characters in the blank area. I hear it's an incredibly popular input method in China. Of course, the iPhone offers 6 other Chinese input methods, ranging from traditional keyboards to the drawing methods.
Obviously thats going to be a very different team, but absolutely agree. Plus ipv6 for s3 and cloudfront...
Having to set aside less volume for the connector in your devices is a technical win, and I don't think the financial benefit adds up to enough to significantly matter to Apple. But I'm interested: by labor shortages do you mean internal engineering shortages or Apple being unable to source enough cables from OEMs for various reasons?
I know who Jeremy is, and my question is legit. Innovation is a loaded term, and has nothing to do with the question of Rails stagnating. Rails is known for the nice packaging of good ideas, not for brand new ideas. I think you could argue the same about Node or 99.99% of all software since new ideas are extremely rare as are really good quality implementations.

So in all I seriousness, I want to know where he feels Rails is lagging.
Why buy the bully chips at all?
Intel was always like that, therefore most of my PCs were on AMD where possible.
As a quick solution, you can combine Sieve with Twitter to RSS (http://www.twittertorss.com/)
Couple of ways to take this:

1) Microsoft has exerted leverage over Intel and got them to go down the preferred supplier route. Possible, and not overly surprising.

2) Intel is trying to carve a niche out and thinks its best bet is with the old hound.

3) The boring technical reason that there's loads of implementation and they can't be bothered making the changes to the Linux packages.

It sounds like it'll run but with none of the fancy features to shut down cores under low use, but Linux developers have been adding missing functionality for years so it's not exactly unusual.
It's not that the chip won't run linux. It's that the device it comes shipped in will be UEFI locked down such as to make it impossible to install anything...

Until it's jailbroken and you install whatever on it you like.
NoScript also whitelists the websites of its author by default. I have a bittersweet relationship with that plugin.
It is only about $20 a month on the subscription package.
Microsoft doesn't play too well with others either but you can customize and hack their software. They want you to do that and they make it easy for power users who are not professional programmers. Apple doesn't want that. Apple wants you to use it in one particular way or not at all.

Both approaches have their benefits. At least with Apple products you always know where things are. If you open MS Office on a power user's machine you may find something completely unique to that user. It's very useful to them but totally unsupportable for anyone else. Office is the people's Unix shell in a way. Apple doesn't want to be that and it isn't.
Can you explain how templates make data binding easier? Working with the DOM means that you immediately can save a reference to an element, rather than generating the HTML and then traversing that HTML to get the element you want to change.
> when JS support is unavailable

That, yes. I noticed that my CPU load was noticeably high browsing some sites. Nothin special, just news sites. I found that quite annoying so I activated NoScript, suddenly the load was gone. The problem is, that NoScript seems to "deactivate" half of the web for me these days, precisely because of client-side templating.

There've been some valid reasons stated here though. However, the site I'm working on uses server-side templating, that's why I was asking in the first place.
Ah but if Ruby were faster Rails would be faster. Whether it's possible to do less and be acceptably fast is besides the point, I like Rails.
Is LinkedIn using a URL strategy I don't know about...?
So, no Clojure on iOS here?
I am jealous. 10000 messages and it very often takes 5+ seconds to switch between smart mailboxes. Admittedly the smart mailbox filters I have set up are pretty crazy but still... It's not like email metadata changes. The results should be cached.
>testing passwords against multiple hashes (at the price of one) is impossible

That's defending against a newly generated rainbow table.

> And it is not possible to see if different entries shares a same password (or to see if they have a different password).

That's repeating the first point with different words! It's defending against a pre-generated table. i.e. a rainbow table.

Timing attacks are not mitigated by salts; they're mitigated by the design of the encryption. You should not rely on salts for this. In fact, if your hash is exposed you should assume your salt is also exposed.

What do salts guard against other than rainbow tables?
Pretty much never. How often do they make requests that are at least partially attacker-controlled, though? (Note that variants on https://www.someapi.com/...?username=foo contain attacker-controlled data...)
Yes, I seriously dispute the claims you make, but purely based on my own sample of, say, ten users that I have discussed this with. Hence, I have a completely different opinion, but I don't have a large sample.

I'm trying not to be argumentative, but you're tempting me :).
I feel the same way about the Android browser on my phone. I had a good hard laugh at this guy after reading the article; the fact is that crappy content and push marketing is a bigger threat to the internet than anything else.
Intel's decision to support only Windows 8 on Clover Trail might work for laptops but seems very risky for tablets, where x86 tablets running Windows 8 look to be priced close to Apple's Ipad and significantly higher than Google's Nexus 7 and Amazon's Kindle Fire HD.

Uhm, they surely meant the other way around?

Practically no one have ever switched OS on a tablet/phone whereas on a laptop you'd certainly expect to be able to run linux.

And what's the point of talking about the price? An x86 windows tablet is the only tablet that is able to run real applications. For those that want that the price is more than justified. Those that don't want that should probably buy an arm + windows RT tablet (which is probably more competitive to the reduced feature set of smartphone-based devices such as android and iOS).
I completely agree, but spreading blatant FUD that anyone can see just isn't true, isn't the way to do that.
As far as I can tell, you're fabricating scenarios that match your viewpoint. Feel free to provide citations to show otherwise. Obama-controlled General Motors forced unions to accept cuts to their pensions during the restructuring[1], which is the opposite of the behavior you're describing.

Anyway, this clearly isn't the right place for this discussion, but I don't think highly voted incorrect statements should be allowed to stand unchallenged.

[1] http://www.time.com/time/business/article/0,8599,1902009,00....