skysight-inc/HackerNews huggingface dataset:
New IE Zero-Day Being Exploited in the Wild
It was an amazing experience. I go to the page, see the Google Books link, make myself ready to buy it just because I want to reward the license decision and the ability to read it in plain HTML and than you hit the territorial wall of yesterday.
>100% of passengers were satisfied with them and prefer them to frisking.

This is a silly comparison. I'm sure if the survey had asked passengers if they preferred frisking to a cavity search they would have found a lot of people being very ok with getting frisked.
If it makes sense, a meeting will happen.

I would never run around an office interrupting peoples work just to make them attend a usually pointless "stand-up"

It seems like a lot of chest thumping to me.
OEM. Only fools buy retail. Buy it with a £1 USB stick and it's fine: http://www.scan.co.uk/products/microsoft-office-home-and-bus...

Everything is licensed. Even bread. You have to give it back one day via the toilet or the grave.
They were perfected, until the new buyers wanted to connect their smartphone to it.
Why I Migrated Away From MongoDB
It seems hard to general to get your hands on any modding code. Apparently the modding culture doesn't encourage opensource as much as other hacking circles.
Yep, the 10+ year-old ones. Might last a lifetime too.
It's therapeutic, for me anyway.
One angle on the idea of disrupting the industry; It seems like a lot of programmers would be in a good position to do recruiting on the side for a few hours a week. They already know a lot of other people in the field. And they obviously are able to recognize technical skills and filter people.

Could a startup make a setup where anyone can sign up and become a part time recruiter? Maybe you set up a real recruiting company to handle the paper work and billing, and let programmers sign on to be your staff. Then give them a big cut of any fees they make.

Anyone interested in helping me flush out this idea? It might be a viable startup, no?
Even 37Signals has added new features; they just make them a new product instead. The large advantage of this approach is that the complexity is minimized. As long as your customers are OK with this (37Signals trained their customers early and well), it's a good way to go.
http://www.pmel.noaa.gov/vents/acoustics/whales/sounds/sound...

Looks like they give a 128kbps wav file. Not exactly audiophile quality unfortunately.
Waking up early isn't for some people - especially hackers who work best in the early hours of the morning.

I think the most important thing is to get your body on a regular sleep schedule.
Even without a true sandbox, and with JITed/compiled code, you should be able to run it on a stack of its own, either a distinct kernel thread or a user space thread. If the code doesn't call out to event-handling code frequently enough, a watchdog thread can send it a signal; the signal handler may then choose to cause the thread to pause execution or reschedule or whatever. It's not exactly simple, but also not that outlandishly difficult compared to creating the JIT compiler in the first place! Of course, it depends if you're merely having to avoid blocking the UI thread or if you're also interested in preventing runaway CPU usage.

Browsers stopped being document readers well over a decade ago, even if they seem like one to the user.
Definitely neat, but of course platform-dependent.

Due to the cross-platform needs of Mozilla's PDF.js build scripts, we've been writing a Node.js lib on top of Node's APIs that enables you to write shell-like scripts that run seamlessly on multiple platforms:

http://shelljs.org

Like Sh.py, you can (if you must) also run external commands, either synchronously or asynchronously.
Panasonic, Canon shutter China factories amid violent anti-Japan protests
I'm sending my buddy the link to your site, I'm pretty sure me and some old friends from school are about to spend too much time playing games... And I had been so productive these last few weeks.
Thank you for your feedback...I think they can use it...but a lot of the experiences that high school students are not work experiences...instead projects and activities...which can be better described using visual ways a la a portfolio...while building a professional network at the same time...
> They are probably optimized now, but not for the consumer's benefit.

I suspect you mean they've been optimized for the shareholder's benefit.
Another twist on this is that many big companies will pay their employees say a free ipod if they recruit someone to join the company, but will pay a recruiter 20K or more.

That never seemed fair to me. I wonder if a twist on this is that the employee can refer his friend to the recruiter and then go to his employer and say I have a friend perfect for this job. He's represented by recruiter X. Then recruiter X splits the fee with the employee.
"They could verify those things on other clients..."

But clients are not trustworthy. How do you decide which clients to trust? How long before your 'adversary' discovers your trust methods an replicates them in his client?

"...server which then decides the proper outcome."

This requires processing power. Random sampling is perhaps a possible solution, but if you're overwhelmed with nefarious client activity (50% perhaps) and you're only sampling, say, 10%, still 40% of your gameplay is cheating clients. If you increase your sampling based on finding increases in cheating, you start to overwhelm your server farm.

tl;dr - this is not an easy problem to solve
Oh cool =) I don't really think in terms of classification and optimization anymore and don't really see much distinction between minimizing a loss or objective function. But I did rant on because I am really passionate about how much unnecessary complexity (hehe) is in much of machine learning. And am always eager to talk about promising unifying approaches. If you haven't read up on semirings or computational algebraic geometry you should. For an MLer learning more math is like learning math for a programmer, it is a lot of upfront work but it makes a lot of seemingly arbitrary list of rules much more cohesive and simpler when you've achieved what is basically a conceptual compression.
However, these days, I'm also worried about exploits against browsers. If you have your system infected by just by visting a webpage, I don't consider that the user's fault.

I'm starting to consider a lot of these exploits and security problems to be the developer's fault. Too many attack vectors are well-known, and should be accounted for in the design of software.

For example, overflow exploits: Why, in this day and age, do we still default to writing software that works with untrusted data in languages that don't enforce bounds checking? C++ has many virtues in many situations, but it's not a language for writing web browsers. For performance-critical modules that are small enough to make serious code auditing feasible, sure. But as the primary implementation language it's just one big vector for attack that pervades the entire codebase.
I get the feeling you've never used Office for anything serious?
> I really don't understand how scheduling fixed-time appointments became the natural order.

It depends on the work you do. Most of us on HN are typically doing open-ended work. We do not really know how long it will take. Time-fixed appointments make a lot of sense for someone who is working primarily with lots of people or who always has more requests than time to attend to them.
Fork a Repo, Get a Job
The misspelling and the .co URL instead of .com is going to hurt you so bad. When consumers choose a brand to trust, a lot goes in the name. You might be able to prove out an MVP of a product but you won't go big on that domain name.
Can anyone actually get to the site right now? I was getting database connection errors but now the site is not even responding.
The right way to do it:

1. Present data showing there is a problem.
2. Propose fixes.

But that's harder than doing it the wrong way:

1. Screed.
2. Propose fixes.
Hi Yitchelle. Thank you for the feedback.

learnmoreabout.it is where the tests are hosted if you don't want to CNAME your own domain into the question.

The mechanism is basically the number of click throughs vs people leaving their email vs overall page hits vs time spent on the page.

I'm continuing to define it but overall there is good feedback coming from users at the moment.

A video is something I'm looking at. Do you think a screencast with commentary from myself is enough in this day and age or do people want a more flashy video?
Yes, I'll single out the dishwasher item. Mine has a couple dozen buttons. I only care about two: Start and 4-Hour-Delayed Start. I couldn't even begin to tell you what the other buttons do.

Sometimes it's also about focus, too.

Same with my digital camera, Microsoft Word, Excel, et cetera.

Don't master. Learn what you need to get the job done.

Twist ending: I do the dishes a lot, and I end up washing them by hand anyway. Why? Because it's tedious labor that gets my mind away from coding and technology. I consider it meditation. My wife hates that I don't use the dishwasher.
Samsung Desperately Leaks Galaxy S IV Debut Date
The content is more important than the presentation for most users.

Visio is a piece of shit I will say.
Nothing requires the new owner to immediately change DNS...
10 minutes? For how many people?
Sounds like a great idea to me! :-)
Looks great. Funny thing though, while waking up, I read this as CSS3 patented buttons and I was almost not shocked.
i don't get what I'm supposed to be doing with this app?
Totally embarrassing. I'm trying to get it running again.
The Consumerist » Petco Releases Coupon On Internet, Forgets How Internet Works
Ask HN: What indie book authors would you recommend?
I'm looking to build a new book bundle featuring some really interesting indie authors. I'm looking for books like "Step by step UI" - ( http://sachagreif.com/ebook/ ) by sacha greif -- books related to design, mobile/web development, startups!

Would love to hear some of your favorite indie books!

Cheers!
For many of these staffing firms, it's really a numbers game for them. They throw everything against the wall and see what sticks. On perm roles, when you are getting $15-20,000 just for making an "introduction", there is heavy competition and incentive to try to "win" as many placements as possible.

In the contract IT space, fake resumes are the norm. There are some firms that just train up people in a technology, build them a fake resume with 4 years experience, then hope they perform on a phone interview and last past the first week or two of the contract and have learned enough to fulfill the contract.

For disruption, I like what Developer Auction[1] is doing. Where the companies bid on each person they wish to employ and drive up the salary / signing bonus. Seems to be a better model than what is currently out there.

[1] http://developerauction.com/
Here we go again with the recruiter bashing.

I'm a former tech recruiter. A few of you know that already. I hear these recruiter rants more than most. Most of it is justified however it's all noise and no feasible solutions.

That great little spiel the author mentioned at the end? The one where he said he would shout my name from the rooftops if I took that approach? How, exactly, does that fit in with I certainly don't want cold-calls or cold emails, ever. If I can't introduce myself to the guy, how am I ever meant to prove I'm not one of the many useless bottom-feeders he deals with on a daily basis?

I've blogged extensively about the problem: http://hackerjobs.co.uk/blog/2012/6/15/all-that-is-wrong-wit...

The facts are simple, regardless of the fact that most recruiters can't even spell PHP, the industry is worth hundreds of billions globally and isn't going anywhere fast and it's certainly not innovating any time soon. Sure their marketing methods are improving and their sales pitches becoming sleaker but ultimately, you are paying a ridiculous sum of money to get a guy with no clue about tech to spend a week or two on the phone harassing every developer that comes even close to some of the tricky but cool sounding words on your job spec.

My prediction: more and more tech companies adopt internal recruitment teams and someone will actually create a useful, multipurpose, recruiter free (cough print: http://hackerjobs.co.uk cough) job site or web service that eliminates, crowd sources or automates the leg work that you are paying an incompetent human thousands of dollars to do on your behalf.
This one looks good to me. Animated gif, on the other hand, does look dithered on its background. Ubuntu 12.04, Chromium 18.0.1025.168.
15 years recruiting software engineers, and I agree that the industry needs some major changes. The problem you mention about candidates being used unknowingly to bait potential new customers has been around for a while, and many recruiters are not providing the proper value for the price.

I've started using a different model with my clients. I don't want to go into too much detail, but my clients pay me a smaller up front fee to initiate a search, and then a fee upon hire. The combined fees (front and back end) per candidate end up being much lower than the industry standards, perhaps even half what others are charging.

Why would I provide my service at approximately half the cost of other companies? For one, when a client pays me up front, it guarantees my fee and reduces my risk. Contingency recruiters take on 100% of the risk, whereas in a retained relationship the hiring entity assumes 100% of the risk. My model spreads that risk. I'm willing to take a lower fee, so long as my fee is guaranteed.

My model will surely not be popular with contingency firms that have hundreds of recruiters that they can burn through (pay them peanuts + commission until they burn out), but I think if more small boutique firms used this model regionally, many small software firms would jump at the chance to work with one small firm that is going to produce with a minimal number of candidates (usually 2-3 per search for my clients). Having the up front payment allows me to be more selective to find the right fit, instead of just trying to find ANY fit.
They don't want to pay enough that it distracts too much from people doing what they were really hired for.
As a side note, publishing this on Google Docs is an interesting choice by the author - alleviates any need to worry about load from the piece becoming popular, but it almost makes it an anonymous article.
I didn't mean for my statement to turn into java bashing at all. I was just stating that after interviewing over 200 java developers for java related positions, I found that MOST of them "Senior" and with > 10 yrs experience were not very well rounded at all and stuck in their java bubbles. I would ask that any other recruiter/interviewing managers to comment here. I know from other people I have talked to, they felt the same.

And it sounds like this guy is trying to get OUT of java and into something else. Does his 10 years experience in java directly translate to being a senior/expert person in any other language?

So with that being said, the OP is going to have to do something with his resume to get above that stigma. Developing Java for 10 years at the same company and the exact same project just raises flags at every single level for me.

Now he did say he did some personal projects where he made some stuff on his own. I will honestly say that really doesn't make him qualified to be a senior level person on an iphone/android/something/anything development team.
Intel: Clover Trail Atom chips ‘cannot run Linux’
Feedback on our new UI/UX pattern and our Platform
Hello,

I would like to get some feedback about our new user interface:

http://guchex.com/guilherme/post/10/linq-lambda-expressions-and-generic-delegates

Is it easy to use? What do you think we could change?
You’re welcome to check out OkCupid — just drop me an email (address in my profile).

If you stop by on Thursday afternoon, you can join us for lunch and a game of Catch Phrase. Or, come after work and challenge someone to Mario Kart or Smash. Or, stop by any other time and we’ll still be happy to show you around.
New in-the-wild malware linked to state-sponsored Flame targeting Iran
LinkedIn's mission is to connect the world's professionals to make them more productive and successful.

In that light, there are a few things that I consider the goal to be:
1. Keep you informed of relevant news, articles, and changes in your network. There are examples of where it's difficult to do a perfect job. Connection updates are one - some people absolutely want to see them all and some don't. We're trying to be smarter by collapsing them together, which saves a lot of vertical space, and we're working on algorithms to identify the most "interesting" ones. Fortunately, it's very easy to tune which types of updates you receive in your settings if you really want to.
2. Give you the opportunity to interact with news, articles, shares etc and hence demonstrate authority or interest in a topic among your network.

We obviously look at the traffic we're generating to publishers and to other LinkedIn verticals like groups, but those aren't numbers that we're trying to optimize.
The Holographic Story
From Catching a Clue to Catching The Attacker: SIEMs Evolve
Interesting Idea. I would suggest focusing on getting university professors to join your network. Their participation will attract high school students.

Seems like your biggest competition will be students using LinkedIn (network) + Tumblr (portfolio information). For example, on LinkedIn, a search of my Alma Mater professors returned over a thousand results.

And don't forget, LinkedIn also has Groups. For example, a search for 'bioinformatics' returned over 250 groups.
IPhone 5 benchmarks: Slower than the Galaxy S3, faster than the Nexus 7
I'm quite happy on 500+ page word documents here, tracked across 30 users on SharePoint. I was not happy with Pages a couple of years ago - it did a shitty job of import/export losing styles and even text sometimes.

Don't like Ribbons? Double click one of the groups and they go away http://officeblogs.net/UI/sizepics/RibbonCollapsed.png

And I don't know how you can complain about that when Pages is full of horrible trays...
That always seemed a bit odd to me as well, though I had a client a few years ago that had a points system where different referrals had points value (director = 10, sr engineer = 7, etc.) which they could use to get cars, cash, etc. It seemed to work well but didn't distract employees.
Here's why it, at its heart, is wrong.

A good recruiter is good on both sides - people want to have their resume in the recruiter's portfolio, and companies want that recruiter's card on their hiring manager's desk. Because of this, technology has only made recruiting more empowering for good recruiters - they can manage more clients on both ends, can schedule easier, and are more agile.

I've got two particular recruiters in mind, but I know that with either of them, if I quit my job on a Friday both my employer (who works with one of them) and myself would have interviews lined up on Monday if that's what we were looking for.

Just because there are a lot of bad recruiters out there (for the same reason there are a lot of bad realtors, or marketers, or hair stylists), doesn't mean there isn't immense value in the good recruiters.

This rant is just a rant, probably the result of one too many recruiter emails in the inbox on a Friday morning.
Figuring out how to encode various classes of data into images is one of the more challenging aspects of the method of loci. Also, memorizing an associative array of data is less natural in the method of loci than memorizing ordered data since the way you recall the data is by tracing your steps through the memory palace in your mind. I guess you could place two images at each location, functioning sort of like a LISP alist (list of pairs where the first element in each pair represents a key and the second a value), but that still doesn't answer your question about how to create the images. Maybe go syllable by syllable? For example, if you wanted to remember that kochen is kitchen, you could visualize a macaw perched on the shoulder of Barbie's boyfriend while the latter flipped burgers on a toy grill. The "caw" sound in my dialect of English is identical to the "ko" in kochen, and Barbie's boyfriend Ken would be enough to trigger my memory of "-chen", so I'd be like "Right! This was illustrating that the German word kochen means to cook."

Spaced repetition lends itself a lot more naturally to memorizing foreign language vocabulary words than the method of loci, so you might want to use that approach instead. Within spaced repetition, you can also use vivid images as a sort of scaffolding to increase the odds you'll remember the word before the next review, and you can eventually let that image go once you start recalling it easily. The more connections you form to other thoughts, the more firmly a fact will be anchored in your mind, so you might as well use mental images if you can come up withthem, even in spaced repetition. James Heisig uses visual mnemonics to teach several thousand Chinese characters in Remembering the Kanji[1] (Chinese characters for use in Japanese) and Remembering the Hanzi[2] (Chinese characters for use in Chinese), and communities like AJATT[3] and Reviewing the Kanji[4] advocate combining Heisig's approach with spaced repetition.

[1] http://nirc.nanzan-u.ac.jp/publications/miscPublications/Rem...

[2] http://nirc.nanzan-u.ac.jp/publications/miscPublications/Rem...

[3] http://www.alljapaneseallthetime.com

[4] http://kanji.koohii.com/
From my experience with GIF back in the day (with the file type, not the protocol, I did not do any GIF-related development), the problem is not with the specification. The problem is with shitty encoders and shitty software that was all written during the late 80s and early 90s then never touched and improved since.

It seems all the GIF encoders out there just take the easiest way out. GIF itself (from what little studying I've done of the spec) isn't such a terrible "codec" to work with, and it has features comparable to basic, decent video codecs. It has the potential to be decent (color space issues aside). The problem is with the crappy-ass encoders that take the laziest approach possible, rendering each frame separately, literally not cross-optimizing anything, applying random dithering in hopes it'll look OK on the pathetic monitors that were the best the 80s had to offer, and trying to do it all with as little RAM and CPU time as possible with no regard for searching for similarities across frames and finding ways to optimize the results appropriately.

There's no reason a good GIF encoder couldn't do what you did in your post. I don't know if one actually exists - I gave up on GIF long ago, after a string of horrendous failures similar to yours, where even the simplest animations would result in 1 MiB outputs and have horrible dithering banding throughout.

Add to that the similar disregard in decoding in browsers - where a 256 KiB GIF takes a full 45 seconds to load (stuttering and freezing for 20 seconds at a time) on a 50mpbs connection running on an i7 CPU as a result of the combined failure of encoders and decoders alike. It's pathetic.

APNG is at least a chance to wipe the slate clean.

Anyway, nifty animator there. Thanks for sharing, it'll really come in handy for screencast demos.
Only the master bulb runs WiFi, the rest run something (zigbee?) that's lower power.