skysight-inc/HackerNews huggingface dataset:
I'm not suggesting that implication. The implication is that when you know someplace seriously botched security in one area, you should assume all their security is suspect.

The default most of us have to use is to assume when we use websites is that they are doing things right, so seeing no problem in one area (login passwords) doesn't change anything about our confidence in the rest of the site (credit cards). It stays at default.
Ignore. If I comment on an image or post that gets very popular, I get notifications about every response, mostly from people I don't know. I'd love to click one button to make that stop.
they should hire someone to fix that form.
Legend has it that a Qantas 747 tried that.

Problem: Autoland landed rough and to the left of runway

Solution: Autoland not installed on aircraft.

Apparently, when the 747 first came out they had issues with the avionics box for autoland, and someone didn't tape-off the panel in the cockpit as unserviceable.
Tokyo please!
The advertising isn't intrusive in the Android version of Maps.

It's also worth noting that, like search advertisements, Maps advertisements have the potential to be useful. If I'm looking for a restaurant near some location, restaurants that care enough to advertise in Maps for that location could easily be worth considering.
Jokes aside, they will need some CSI quality, image enhancement wizardy at the moment. For what it's worth, I wish that they pull it off sooner than later.
Well iOS 6 on the whole is pretty decent. It's maps that is a true train-wreck. That being said, it's not suprising that launching a brand new map service is going to be worse than the established one that's had years of feedback and growing pains of its own. Also, this was really the only way for Apple to get that type of feedback, so the actual decision to do so isn't surprising. That doesn't mean I don't want my damn google maps back though.
> President Ronald Reagan and his tax policy chief Donald Regan were more right wing than the Koch brothers and Michelle Bachmann combined

I think this is where your memory skews.

By the standards of the time, that is true.

But today? Reagan supported AMNESTY. He supported a tax reform bill that RAISED some taxes. EITC??? That's a means-tested welfare program to try to lift working poor above the poverty line.

I grew up a liberal. I still am, but I'll be honest, my idealism is tested by our tax rate and fiscal ignorance. If you have no kids or mortgage, live in California and make over 100k -- in other words if you're like most software engineers in bay area startups -- you pay an obscene tax rate. And I'd even be OK with that if Sacramento and D.C. were good stewards of our tax dollars. But, of course, they're not.

Still, I have no choice but vote Democratic. I could vote 3rd party and waste my vote. But today's breed of hyper-partisan, non-fact-base Republicans just are not a serious alternative.
So depending on the algorithm you are using, you are going to leave some of these fields in the struct as null/empty?

To me this is the whole issue. Of course if we have knowledge outside the method declaration about what values can be left 0, then we can pass the correct ones as needed. But the interface is ambiguous about when that is acceptable, and the implementation can change without changing the interface.

According to the mail lists I've read on the subject, the correct way to implement your algorithms in Go would be for each to be a separate method. And indeed that is the only way in Go to support a fully specified interface.
Consider it validation of your idea and forge ahead. Companies win on execution, not being first.
On the flip-side, how is it that publicly elected officials are not indicted or held responsible for creating these loopholes after being lobbied and end up costing their shareholders - the public, some real coin. I think of the whole thing as a closed loop ecosystem and somebody has to be losing, if a group of shareholders is gaining.
Dueling anonymous sources. Wonderful.

That being said, 9to5Mac seems to emphasize that an app was submitted and Jim Dalrymple seems to emphasize that it isn't sitting in review.

There's one simple way those could be consistent: an app could have been submitted and rejected. Google's and Apple's different points-of-view might even be giving us the contrasting spins on the situation.
Re #1: There's still a matter of degree, however - this takes zero technical knowledge and zero external tools, works on every platform that Pandora runs on, and requires maybe 5 seconds of time.

Re #2: Again, it's a difference of degree. Invalid TLS certs will at least give a browser warning that a user isn't used to seeing (in modern browsers), cluing them in that something might be up. Sure, some users might bypass it anyway, but there's at least some tip-off. Furthermore, there's no reason why the password needs to be in the DOM past the login page, which can easily be served over full HTTPS with no user experience impact. Yes, that can still fall prey to session hijacking if you don't use HTTPS for the rest of the site, but session hijacking doesn't give you passwords that you can use to go break into other sites.
If you want HN to work like Reddit, why not just create Reddit.com/r/hn and have a crosspost bot sync the sites? No client side software needed.
True, though I think converters are the key difference there. The analog side of mic technology hasn't changed a whole lot recently.
It's not a hardware project so the new rules don't apply.
> Is anyone arguing that mere accusations should result in kickstarter takedowns?

Yes, it should - if it's backed by a legal letter, Kickstarter might be liable too, if the suit is sucessful.
I'd recommend Python and Django too. I've been developing JEE applications for 8 years now and recently started a project (www.freedomsponsors.org) with Django. Django makes things so simpler and faster to code. I'm in love with it!

If you take that on, I'd also invite you to do a little collaboration on it - FS is free on Github (github.com/freedomsponsors). It might give you a feeling of what's it like. And I could definitely use some help :)
Well - the major content (in my mind) was Jon Mavor/Steve Thompson.

If all they do is port some small portion of Planetary Annihilation forward, then I'll be happy.

If they actually deliver on 50% of what they've promised + Orchestral Score - I'll be beyond happy.

I spent a good portion of 1997/1998 playing Total Annihilation.
W3C announces plan to deliver HTML 5 by 2014, HTML 5.1 in 2016
Very true! And here's a realistic attack scenario:

Malorie goes to the coffee shop/train station/airport terminal and sets up a public wifi network. The network--be it provided by a laptop hotspot or a router with custom software--is programmed to intercept request/response cycles as follows.

Every response, except those that are part of Malorie's attack, is replaced with a redirect to Pandora's settings page. Some fraction of users will have a Pandora login cookie, which means they'll see the page.

Further, every response for the Pandora settings page gets a <script> tag of Malorie's creation. The JS reads the value attributes of the password and email fields and sends them to Malorie's server.

Malorie then has a bunch of email/password combos. A lot of users will have reused that same combination on many different sites. Quite possibly their email accounts too, which would facilitate even more account takeovers via password reset emails.

So now Malorie can steal entire online identities. From people who reuse passwords, anyway.

To protect against this and many other attacks, everyone should avoid reusing passwords. A password manager, such as the excellent 1 Password, is the most practical solution.
While not exactly what you are proposing, ff you want/need to use characters as icons, there is a pretty neat hack called Font Awesome (http://fortawesome.github.com/Font-Awesome/). It's used to replace the twitter bootstrap icons with font files; seems to work pretty well so far (with no need to re-color individual icons... you can style the font/icons with css).

Things like <div class="icon-flag" style="color:red; font-size:36px"> will create a 36point red flag character for you.
> But if I'm the taxing entity, is it rational for me to endorse the idea of paying less?

It's rational for you to accept the fact that people will work to minimize their tax liability and construct policy under that assumption.
but they are both severly crippled on iOS, chrome is just a safari skin, and sparrow cannot be used as a default app for mail on iOS cannot use notification for new mail unless using 3rd party services (if you are trusting them with you email credentials).
Start with Ted Bundy's reading list and build from there.
That would be a really cool project, but certainly a lot more work than my <100 line Chrome plugin. Maybe the HNSearch guys could do that, they already pull down all the data from the site. It would also be very hard to get the votes/comments to mirror.
This is why we need API neutrality http://api500.com/
Quinceanera Dresses 
Buy a quinceanera dress here for your quinceanera day.We assure you of high quality and special care for every quinceanera dress,buy with confidence!
Maybe it's a hiring gambit. It's probably the easiest way to find the brightest and most passionate of available people. It's a default app, so ppl will jsut give them the benefit of the doubt while they fix it up and do a little poaching thereby.
While I don't like those 'ly' names myself either, I wouldn't necessarily say it's bad. There are still a lot of startups with 'ly' names appearing and getting funded. We (people on HN) aren't typical users, and sometimes we're not the best people to advise on how to build a site that will get millions of users (I mean, how many people here would have thought instagram would be worth a billion dollars, or even USE instagram :)
So I presented the sapphire option to my girlfriend. She was hesitant at first because she wasn't sure what it would look like on her hand. After scouring Toronto, I found the Fair Trade Jewellery Co. (http://ftjco.com/). I'm linking to them because they are fantastic.

They stayed open past their normal hours so that my girlfriend and I could make it down. They sourced 3 purple sapphires for us so she could see, and 1 of which was absolutely gorgeous. My girlfriend loved it, and it's what I ended up going with. Putting a payment down next week.

But the best part appeals to the nerd and engineer in me. They do bespoke rings, fully in-house. They will customize the ring to any design you want, to fit your finger and the gem. That way, it's not only designed the way you want, it's made to uniquely fit you.

They design everything in CAD, and iterate with you via e-mail. Then they print it on their 3D printer, where you have a chance to go in, see it in person on your finger and with the gem. If changes are needed, they can iterate again. Otherwise, they go ahead and make a plaster mold. Then they melt the metal (i.e. gold, platinum) and cast it. They have all the equipment for this in-house in the back of their store. Honestly, I haven't been more excited about buying a ring than now. I'm super happy I found them.
My knee-jerk response to that: Do they make pink girly legos? Maybe there are reasons why that's the wrong approach, but I tend to regard interaction and packaging as two very distinct design components. If the packaging is the problem, fix that first.

Changing the interaction should come second. Dumbing it down is almost never the solution, yet it's often the first solution people turn to when trying to deal with a gender gap. It's as if they think the issues will go away if they speak very slowly and loudly.

(I admire the objective, but I believe I would like the project better if it said "an engineering toy" instead of "the engineering toy." The implication differs.)
To me, Google's tone at their pre-WWDC Maps event (and the effort they made to demonstrate things on iOS devices) doesn't seem consistent with the hypothesis that they decided to force Apple's hand.
This. For more information on why this is the case, here's a pretty good article on it.

http://arstechnica.com/security/2012/08/passwords-under-assa...

The simplified version: Every time a password is cracked it is added to a database of hashes used to hack other databases. Essentially crowdsourced cracking.
Does Betteridge's Law of Headlines apply to this article?

Have I created a paradox??

http://en.wikipedia.org/wiki/Betteridges_Law_of_Headlines
California taxes pay for California, and SV engineers owe their industry to Californka being California.
A "true platform" doesn't change with management's whims. No dev should trust Twitter's APIs.
> The fact that someone could physically break into your machine to steal your Pandora password is extremely problematic? I'd hate to see your write-up once somebody knocks over the carton of milk...

For users that use the same few passwords everywhere, it could well be a problem.
"Do they make pink girly legos?"

Why yes, yes they do: http://friends.lego.com/en-us/Default.aspx

They're controversial for the same reasons people are complaining on this thread, but they're selling. (See http://abcnews.go.com/blogs/business/2012/09/lego-friends-tr...)
You won't find anywhere near this level of abstraction in the standard library, at least not that I am aware. The Java culture is understandably implicated by this though, because Spring is not some niche framework being perpetrated in some fringe corner of the Java-verse. It is very much the mainstream of Enterprise Java. Of course there are lots of Java developers outside of that set who are doing great work. And a lot of Spring makes sense, or at least it did 8 years ago when I last looked it. This class does seem to reference a sort of endless abstraction maze that resonates with people though.
To be fair, plenty of American cities have crappy public transit. On the other hand, plenty of people in non-US cities absolutely depend on public transit because cars and/or gas are substantially more expensive (on an absolute basis and/or relative to the local standard-of-living).
So from a brief read

- Android 4.1+ (JB and above) include full ASLR which will mitigate this vulnerability somewhat

- From my own Android experience, the screen must be active for the NFC receiver to active. This means the phone can't be exploited while it sits in your pocket.
So are there any retail stores still selling kindles?
Consumerist has been down all day
I almost wrote a comment about how it was basically just making erector sets pink, and what was the point of that. You've made me think twice.

However, I feel like parents who are inclined to buy this might not be likely to have princess-obsessed kids. But I am not a parent, so I don't know.
I think anyone who calls someone else a "fanboy" is not worth listening to.
> Use cash. But be aware it is slowly but surely becoming a ghetto.

How exactly is it becoming a "ghetto"? I have never seen any retail stores or restaurants refuse to take cash. In fact, the only place where I've encountered that issue is for buying gas. In big cities, like NYC, there are still restaurants where they only take cash.
Your argument, then, is that Pandora should apply password hashing to keep people from being compromised elsewhere? Assuming they only had two online accounts this might make sense. Assuming every single one of their accounts, all the same credentials, had perfectly implemented password hashing, this might make sense.

But that is bullshit and we both know it.

There will always be a bad implementation, or a mistake, or an insider, or a man in the middle. If all their 100 accounts are the same creds, it only takes one time and they're fucked.

It is completely impossible to have perfect security on all these accounts. It is inevitable that one will get cracked. At that point, blaming anyone but the user is lunacy.
"Yesteryear's Republicans were reasonable. It's just this crop that's a bunch of know-nothing radical fascist reactionaries" was said in the 1980's as much as it's said today. It was said in 1994 about Newt Gingrich and Co. just a few years before they worked with President Clinton to reform welfare and balance the budget. "This is not your father's Republican party" was a favorite line of House Minority Leader Dick Gephardt, if I recall correctly.
It's true that, had I been stuck with iOS 6 maps on March 11th last year in Tokyo, instead of good trusty Google Maps, it would have been much harder to find my way home.

Now all I was doing was walking the 5km back to my safe home. Think about the people in Tohoku who might have been looking for the closest shelter with tsunami incoming in the next 10 minutes...
This why this is important to put the basis theory of API neutrality http://api500.com/post/31465739810/what-is-api-neutrality
There are a number of examples floating around that make it appear as if Apple is deriving map feature types from their names. For example, a water pumping station labelled as a gas station.

http://theamazingios6maps.tumblr.com/post/31933329952/the-ta...

What's that about one error being overblown?
I think this is going to be fun because you will be able to concentrate on one player. Imagine if they had done this while, e.g., Lawrence Taylor, was still playing?

This is a real treat because we will get the see the attributed greatness* that previously only coaches, players and NFL Films could verify.

* The type of players for which coaches make adjustments, a week before the game, to account for.
True, but a company that is already the target of one antitrust lawsuit probably has less leeway than it used to.
To this point there seems to be strong and widespread anecdotal evidence that many boys don't want to seem to much like girls by playing with "girly" toys and many girls feel the same way towards "boys" toys. There is perhaps (or perhaps not) a problem with this phenomenon that, over time, needs to be addressed. In the meantime things like this seem to be a great way to spread interest in science and engineering among both genders.
They could easily set up a bullpen of 5 projects to soak up extra funding. It is completely pointless to fund a project over its budget. The project can change its budget and plan/promise of they want to raise more.
dood - just make that shit a service - I've talked to a # of companies that were looking for something like that and were dismayed that they couldn't just sign up w/a credit card, seriously
My experience is limited to sisters, but they played with the normal legos just as much as I did. I suspect these would have been a hit.

Users care about things like color far more than engineers often suspect. If changing the color makes a substantive improvement to outcomes you care about - change the color.
Faculdade Marcelina 
Atualmente, na Faculdade Marcelina, são oferecidos cursos de graduação, pós-graduação e mestrado. Desta maneira podemos citar os seguintes cursos nos seguintes moldes: graduação – Administração, Ciências Contábeis, Enfermagem, Fisioterapia, Nutrição, Tecnologia em Radiologia, Artes Visuais, Desenho de Moda, Educação Artistica, Música e Relações Internacionais; pós-graduação – Moda e Criação, Audiovisual, Radioterapia, Enfermagem Pediátrica, e inúmeros outros; e por fim mestrado – Artes Visuais. Todos estes cursos podem ser verificados a fundo através do acesso ao site da instituição na internet, onde você pode consultar e eliminar todas as dúvidas a respeito da faculdade e dos cursos oferecidos.
My reply to that argument here: http://hackerne.ws/item?id=4551852
Citation please?

So far as I know, Nokia was a leader in non/pre-iOS/Android app markets. For some reason I think their results weren't competitive with iOS or even Android...
I'm not even going to upgrade since I use maps all the damn time.
Twitter seems to just have a leadership team with a complete lack of vision.

Tweetie actually did a great job of delivering relevant ads in a way that wasn't very obnoxious at all. Then Twitter bought the client, stripped out the ads, and started delivering really lame and irrelevant "promoted tweets"

The amount of cognitive dissonance is amazing. They need to ban 3rd party clients to protect monetization, yet they don't monetize their clients in a meaningful way. They want to be a platform, yet they do everything possible to make that effort fail and piss off potential partners.

All I see from them are expensive campaigns linking traditional media to whatever the twitter platform is supposed to be. I can't see how a business model that boils down to giving teenagers a way to communicate with Justin Bieber's assistant creates any value.
Whiteboard paint recommendations?
Surely I'm not the only one here geeky enough to want to buy a can of whiteboard paint, paint a wall of my house, and proceed to solve math problems there.

Looking online, the reviews are mixed and the prices are very high. Do any fellow HN readers have recommendations?

Thank you!
Roues Carbone
Probably defeating code signing and sandboxing
Net Neutrality is the reason the Internet has driven online economic innovation. It protects our right to use any equipment, content, application or service without interference from the network provider. With Net Neutrality, the network’s only job is to move data — not choose which data to privilege with higher-quality service and which to demote to a slower lane.

This would be the same for APIs, which are too often driven only by business when investors strategies come in the place.
Stay open for an API without discrimination and tiering on data access and re-use is giving trust to all your ecosystem for building future business on it.
Don't respect it is enfrenging the API neutrality concept.

More on what would be API neutrality here : http://api500.com/post/31465739810/what-is-api-neutrality
Yes, but isn't it worth capturing that content, and in doing so, their users? The search engine I am suggesting could easily transition to being the next Twitter. We grab the content, their users perform searches, and then the users migrate when they see that they can not only search every tweet ever made (since we began indexing) but also add to the database directly (kind of like Google having both a search box and an "add your own URL" box on the main page).
In NYC, Google Maps is king, at least on Android phones/tablets (I don't have any experience with iOS devices to compare with). It will provide door-to-door directions, including the trip time, and will base its directions on the current time and timetables.

In Tokyo, it will also specify the total cost for the journey, which is very handy when walking for 5 more minutes can save you a few hundred yen.

I just tried getting public transit directions from Redwood City to Lake Merrit, and this is what I came up with: https://maps.google.com/maps?saddr=Redwood+City,+CA&dadd...

I can't comment on how good the directions are, but it definitely doesn't say "directions not available". From the map route, I'd say it looks pretty reasonable and is what I would use if I had to travel from Redwood City to Lake Merrit.
What, are we in 2nd grade? Call it whatever the fuck you want. /rant
#1: You know what also requires zero technical knowledge and zero external tools and requires maybe 5 seconds of my time? Typing in a new password for the account and clicking "save".

#2: It needn't be an invalid TLS cert. It could be a valid TLS cert pointing to another domain. The browser provides no warning and you only notice it if the check the domain is different from the one you expect. Watch out for domains that are only different because they use a funky character that looks like the one you are expecting.