skysight-inc/HackerNews huggingface dataset:
It's not quite what it seems. The passwords got into log files before the passwords were stored in the password database, and someone got a hold of the log files.

I suspect that this is far more common than people realize (sensitive data getting into log file, not log files getting leaked).
Unfortunately you do have to pay some money. Godaddy offers certs for 12.00 USD a year, which is probably less than you're paying to host the site.

As for making it https, (hypothetical web developer) most cheap hosting providers actually provide tools for managing certs and apache configs in cpanel. It's not too difficult to do yourself. Basically install mod_ssl and copy paste a standard config, substituting the pathnames for the paths of the certs you got from a CA.

I understand that your average beginning-throw-up-a-website-for-a-business would find this difficult, but they can hire someone for an hour to install their certificates.
Wow, not only is there NO constructive reason for creating or publishing this, but what an over-engineered technique, jeesh.
Discussion: IPhoneography
I don't mean flat-out deny, There's a reason why simple social engineering works with a very high degree of success, and manipulating small children who have trust in his kidnapper (which isn't rare, since they're often family members) is even easier.
Wouldn’t there be a prohibitive number of false positives? It sounds like the poster child for this sort of calculation: http://lesswrong.com/lw/2b0/bayes_theorem_illustrated_my_way...
Their list of participating sites is mostly bogus. I think it's generated from their form which prompts users to configure a site -- this would explain the inclusion of some otherwise inexplicable "sites" like http://facebook/ (yes, no TLD) and http://example.com/.
tptacek explained to me once how using a self-signed certificate (or more to the point, trusting it) is a bad idea: http://news.ycombinator.com/item?id=2376644

You can get free certificates backed by a CA trusted by most browsers, for example at https://www.startssl.com. There are some limitations (e.g. no wildcard certificates) but it's still much better than a self-signed one.
I see red. Looks cool, but probably showing incorrectly (chrome dev channel).
http://imgur.com/R5qE1

osx 10.7.4
chrome 23.0.1271.1 dev
Intel HD Graphics 3000 384 MB (macbook air)
At least I hope this lame attempt for publicity brings more attention to your blocker application. Wow rack middleware that adds an iframe to every page.
Why on earth should the responsibility (of those that will become redundant) fall on the early adopters of a new technology?

If I had become a fax machine expert would it be fair to charge a tax on those that began to use email to support me?

People should take responsibility for themselves and their own actions.
I don't have a critique for the content yet, and HN is usually the place to post this kind of stuff so here goes.

My initial reaction is to close the window immediately due to the font on the slides. I don't know if that is the fault of my browser (chrome 21.x on this PC), slideshare, or the presenter who put together the slides, but the staggered characters drive me bonkers.
Cool. Caltech seems to have an implicit distribution requirement, through the requirement that that part of the units be split evenly between introductory and advanced courses--I think one would run out of introductory courses if one tried to do them all in one area.

I suspect that MIT and Caltech students end up taking as much humanities and social sciences as do STEM majors at liberal arts colleges, and could plausibly claim to have obtained a liberal arts education.
It’s time to take the word ‘startup’ back from the VCs
Are there any plans or thoughts in regards to adding some way to implement it on a website without using JavaScript? You control the browser, so it shouldn't be difficult to do.

For example, you could define a special URLs for login and logout actions. (E.g. persona:action=login&onsuccess=encoded_url1&onfailure=encodedurl2 ). I don't know about others, but it would make me much more willing to give a try.
Slow down or you'll burn up on reentry. Start with Amway.
While it's possible that Java just hasn't been as much of a target, the difference between Windows and IE (which are the two M$ products that particularly got them into trouble with security flaws) and Java's JVM, other than one being an OS, one being a browser, and the other being a runtime environment, is that the former two started off being buggy and got better, and the JVM has been in the news for more security problems since Oracle took over. I think the finger to point is at Oracle. From what I have heard about how things went when they were taking over, I think the issue is that they are too "enterprise" for their own good. Sun's lawyers were pretty awful (or too good depending on whether you like suing) too though, so maybe some was inherited.

One other thing before I go- are other JVM languages affected by these bugs?
Rule of thumb, at least for bootstrapping, wait at least a month before you implement any new idea/feature.

If you still think its worth your time by then, then do it.
I'd say it was a business opportunity if it wasn't for the abysmal track record airlines have for remaining profitable transporting humans.
Mac version? Planned six years ago?
> The first accident caused by one could set the industry back decades

Unless they deploy to multiple regions, maybe? I imagine some cultures will be much more forgiving of and reasonable about the occasional accident than American culture. If even a single city in the world successfully deployed autoautomobiles, the impact would be so swift, obvious, and desirable that most other societies would follow suit in spite of the loud, irrationally fearful minority.

I hope. :)
IOS6 security vulnerability in 2 seconds
Use siri to access any app from a locked iphone ios6
I think you bring up some interesting points, but I just want to address the "Do we think someone could create a competitor to ebay with a "better" site design and steal ebay's crowd?" line.

eBay isn't successful because of design or lack of design. It's successful because it's where people go to sell or buy in an online auction format. Same thing for Craigslist.

Yet look at Apple, specifically the iPhone and iPod. The smartphone and mp3 player were not new innovations, but Apple's design and marketing built the world's richest company on them.

TL;DR: Design makes all the difference. Design makes none of the difference.
I'm not disagreeing with you at all; I upvoted your comment because I think you are correct.

Antonio Villaraigosa was the chair of the convention, so I guess you could say he's a politician as well as convention MC and a party functionary to boot.

He's termed out of his job as LA mayor this year, so he's looking for a new position and doesn't want to turn the party leadership off.
Here Is The Plan Marissa Mayer Just Announced To Yahoo Employees
I've commuted by bicycle in both San Francisco and São Paulo and the claim that one city is far less safe than another is simply not true.

It's about about changing your riding style, your routes and determining where you will and will not bike.

In SF, the roads are safer for bikes, so you spend more time on the roads. In SP, the roads are less safe for bikes and pedestrians, so 99% of people are in cars or buses. This fortunately leaves 90%+ of sidewalks wide open to use as a bike lane.

The simple rule of being able to bike safely is "If I can walk safely from point A to point B, then I can also use that same route to bike safely"

If anything, the 180km of stopped traffic makes SP in many ways safer than SF. Biking through SP during rush hour is like biking through the Disneyland parking lot.
Tongue in cheek or not, it reeks of desperation.

If I developed for the Blackberry, this would increase my skepticism that RIM will be around for a long time, and thus make me less inclined to continue developing blackberry software.
People don't appreciate being needlessly insulted, I can't fathom that you don't actually understand that. Your "big paragraph explaining a browser" is a strawman. They already say browser, they don't need to elaborate. They can still suggest browsers they do support, the shark just gains them nothing. You honestly think someone seeing the message they have is going to think they are cool/clever/funny/hip? When a course of action gains you nothing and has the possibility of offending potential customers/users the decision seems pretty obvious to me.
For style, there are points of style that no automated tool that currently exists can enforce, such as 'good naming'. At the moment that looks like an AI-hard problem.

For your point about sharing knowledge, your argument works against all forms of sharing knowledge. You may as well say that wikis are unnecessary, because standups, code, comments, and code reviews share knowledge. What you have missed is that these different modes of knowledge sharing work better at sharing different kinds of knowledge, which is why you (should) want all of them.

Also, good developers are not really fungible. Developer X may be really good at making code flow, so that what it is trying to do is not obscured by how it is doing it, and developer Y might have a really good knowledge of algorithms and an eye for optimisation. In that case, having them review each other's code will always result both in better code and in (eventually) better developers.

As far as it goes, I have seen plenty of badly done, useless code reviews. I have also had really well done code reviews, where someone would email me an annotated diff of one of my commits, or where I would pair for a few hours with someone going over some thorny code I or they had committed and making it less thorny, or where we would go back and forth refactoring some piece of code while talking over the whys and wherefores. If I had only had bad code reviews I would be much more sympathetic to the point you are making, but as it is I just think that you have never been involved with a competently done code review.
Wow, just tried.

Steps:

- Do Not Unlock your phone

- Activate Siri

- Go to Town

This is potentially really dangerous. Now I'm wondering if apps themselves should actually be responsible for granting permissions when the phone is locked.
If the vulnerability exists in Java 5, 6 and 7, it seems likely that the underlying problem is pretty old and not a recent development. Version 1.5.0_22 seems to have been released some time around 2009, and that was the end-of-life release for "Java 5" - it's earlier versions were years before this.
Testing the effect of the diabetes drug Liraglutide in Alzheimer's disease
"Internet companies must allow only real, common names."

"Social media companies must allow only real pictures of users."

"a system [to monitor Internet activity]...obligatory for browser or operating systems

That sounds so ridiculous, I can hardly come up with a good response for it. Is that what they consider "food for thought"?
> Leaving New York for some vacations in Miami? Take the plane and pick up your car whenever it arrives

my car? Like I own the car? Why would you own a car? Who takes care of the maintenance?

Just kidding. But seriously, if self-driving cars were a thing, I can think of very few reasons why any normal people would own cars.
I have tested sending text messages and using twitter.
That was sarcasm, btw. Just in case that point was lost in because this is non-verbal.
We could easily make cars way, way safer - put a giant, sharp spike sticking out of the center of the steering wheel, pointed at the driver's heart, and forbid seatbelts. Nobody would ever go over 5mph, or put themselves at risk of crashing into anything.
Hi Regularfry,

I'm not sure what you mean?
I like this idea but my first impression is it sounds like a lot of work to setup and scale. Am I wrong?

Secondarily, if this were a service, wow!
I'm actually at a loss for words... a single html tag can reset a phone to factory default? And it doesn't even look like a defect, just an oversight.
Walk Score introduces crowd-sourced neighborhood guides
I see it as a continuum.

But actually it maybe be true that in some cases it is more beneficial overall to the society to just support the family for a while if say the breadwinner breaks a leg. That is better than a bankruptcy, loss of house, loss of job.

> Doesn't it bother you that an even-handed application of this principle leads to absurdity?

It doesn't because this has to be applied to a certain degree. Absolutely no safety net is not good, but it is not possible of feasible to just hand out money either.
I found this after reading these pop-science articles. It seems like an interesting line of thought. Does anyone know of any other studies that have already been run?

http://www.popsci.com/science/article/2012-09/newest-impact-...

http://www.guardian.co.uk/commentisfree/2012/sep/10/alzheime...
Good point - but still, isn't it taking Oracle longer to patch the vulnerabilities? (Last one they knew for what - 4 months?)
We use ACH direct deposits for all our transactions when possible, but when not, check is really the only other option. Credit card fees are far too expensive for the recipient (3-5%) for large amounts.

We are typically asked to write checks by lawyers :) Everyone else has moved to electronic banking.

Checks are also handy for one-off payments to people (not companies!) you don't know and won't meet again.
Link bait article. Doesn't provide anything of value.

"Is Kim Kardashian really the new Reid Hoffman?"

Seriously?
Samsung Galaxy S3 Vulnerable to Remote Factory Reset
I think eventually, car ownership will go down significantly, since companies managing fleets of electric cars can do it far more efficiently than private ownership of long range cars. Uber is faster than walking to the car you parked half a mile away. There's always 'free parking' for your large house party in the city. You can also create small cargo only cars for small deliveries like that laptop situation. It's far more efficient from an energy/vehicle cost/liability stand point. Amazon prime 'local' might just replace stores from a pure efficiency standpoint. The number of total cars neccesary will decrease and the large amount of real estate devoted to cars will decrease significantly. Car maintenance costs will decrease with predictable schedules, and economies of scale that come with fleets.
Same here, sign up and consequent access to my subdomain is broken with NoScript.
Oh, I really like the notion that an answer can't stick in a mind that hasn't asked the question. That is pretty cool.
https://lizibot.com/

It's pretty cool. Try it out.
I see that you already have it on your to-do list to fix browser navigation, so here's a related request: Don't hijack my browser's "open link in new tab" functionality. Right now, your pager buttons' href attributes are "javascript:void(0)", which breaks middle click (or Ctrl+click, etc) behavior.
My bet is on Chrome's sometimes clumsy font rendering. Go fullscreen on the presentation and the characters will render fine.

Edit: scratch that - each letter shows up as a separate span in the generated HTML. There's no sane way to typeset that.
SQL Server Programming Hacks, Tips and Tricks
Actually, for commercial airliners its "worse". They require both a pilot and co-pilot behind the yoke, even in autopilot.

If an airliner is flown with less than two crew in the cockpit, even for a short period of time, the remaining pilot/co-pilot must wear a mask when flying above 25,000ft.
Maybe stupid question, but isn't there mmap64 and mmap2 with which you can map larger files? You are limited to 2 gigs at a time, but that shouldn't be a complete show stopper.
I watched a friend write an app for the playbook, and he kept firing up a virtual machine to do something. Why would the dev environment need a virtual machine running every time you need to run a test?
Fully automated cars let's you have all sorts of crazy solutions in the 200+ year time-span.

Think 100% electric high speed trains that let cars 'board' at highway speeds. Evacuated underground tunnels for low drag long distance high speed trips. Hybrid Maglev cars that rocket down the highway on a cushion of air while being inductively charged. Even things as simple as highways without road signs of any kind.
The first source submitted is still on the front page:

http://news.ycombinator.com/item?id=4572886
Already in active discussion on the front page:

http://news.ycombinator.com/item?id=4572886
Why do so many responses seem to be "well, that's just a bad example of it"? It reminds me of the similar "well, they're just not a true conservative/liberal".
The point of any website is to never have a 404 happen in the first place. In which case, I would feel guilty burying a missing child link in a site that would almost never show a 404 error. Might be good for a big site like facebook though. That being said "milk cartoning" is a little controversial, since it was introduced decades ago the results have been near zero.
Your site works on my S2. Please don't change the test number ;)
The whole purpose of the new autonomous vehicle law is to allow development of the systems in real-world conditions, before they can get to the next level of driving without a driver behind the wheel as a backup.
when was the last time a bad video inspired a bunch of developers to start working with the product?
Given what I've seen lately, this is just false. The Java team under Oracle, despite my trollish expectations, is actually doing really well.

That they've inherited a huge, complex codebase is unfortunate.

I think any program or VM, Ruby, Flash, Python, whatever would end up with the same number of security holes if it had the user base to attract attention from hackers.
Law Permitting Self-Driving Cars Signed By California Governor
I'm not sure if generalising from a handful of massively-endowed private universities to all universities everywhere is a meaningful thing.

It used to be that books were so rare and expensive that they were chained to desks. A single copy would be read aloud to students -- the very word "lecturer" means "reader".

These days, for a liberal arts education heavy in classics and great books, the cost of the materials is close to nought. That's what I meant by the capital.
I think pet names (http://www.skyhunter.com/marcs/petnames/IntroPetNames.html) can help here; your @wmf doesn't have to be the same as someone else's @wmf (full URLs must be used on the wire).

(Fun fact: People in Germany keep tweeting about @WMF, but it's clearly not me.)
Einstein's brain is now interactive iPad app
So, if MS is doing so well, why didn't this exploit stop at the Java process level?

(Not trying to rag on MS.)
But even a async database should be able to write something to its log after it discarded the write request. From what I understand from the original article, this did not happen.
This isn't limited to the Galaxy S3 or even to Samsung phones.

http://news.ycombinator.com/item?id=4569686

Here is an application to block the attack.

http://news.ycombinator.com/item?id=4573357
Works fine for me, Firefox 15/Chrome 21 on Linux with a GTX 560 Ti card
You make an interesting point. I could see how these 404s could be in poor taste depending on the tone of the site, but I'm not really moved by the "someone might feel bad about something they saw on the internet" argument.
Already being discussed on the front page:

http://news.ycombinator.com/item?id=4572886
I'm grateful that some countries swap periods and commas relative to the US when writing numbers. It got me a discount on a calculator!

I wanted an HP15. When I went to buy one, the store was out of stock, but offered to let me have the display unit for something like 10% off. While examining it to make sure it was in good shape, I noticed commas and periods were swapped, and pointed this out.

I had no idea this was normal in some countries, and so assumed it was a defect. So did the sales person, and offered me another 10% off because of that. I decided I could live with that "defect" and bought it.

I was delighted when I got home and read the manual to find that this was simply a setting for internationalization, and and I could easily set it to US mode.
Wow. Technology is really changing the world now. What's next? Flying automated cars? I cant wait for the next invention! The government/inventors should better make these driverless cars very functional and safe to use since we all know that computers cannot think right away unlike human when it comes to urgent incident situations.
http://sommer-solen.dk/cctv-have-en-afskraekken...
Is it just me, or is double-tapping on text still not usable enough? Every time I do that, my finger inadvertently slides horizontally instead of vertically, and I need to re-center the text to continue reading.

This is one of the main reasons I love readers like Instapaper.
I seriously doubt this will disrupt any of those industries, except possibly shuttle buses that cover very restricted routes. It will be years before these get past the handful of people that will likely rush out to buy one (Woz, for example, if they put the tech into either a Prius or Hummer)

The technology pundits are ignoring the human factor, giving up control, trusting your kid's lives to a computer, the same technology that crashes on the desktop, and on our smartphones. What happens when the first car has a BOSD and the backup human driver isn't paying any attention and the accident happens within seconds of the crash? These things will likely kill a bunch of people and will go the same way that the C-5 or the Segway did.

Maybe I'm too cynical, but until we have HA computers that exist outside of a datacenter, I doubt a proof-of-concept by Google will go anywhere in this or the next decade, let alone disrupt anything. The idealism and flying cars optimism is well placed and I'd love to see it happen, but the future nearly always takes much longer to happen than people predict...
7 year old kids can now own a guided missile.

7 year old kids can be kidnapped in hacked vehicles.

Statewide gridlock due to DDOS.

Just looking at the flip side.
You should be used to this kind of talk by now. It's the modus operandi of socialism and the Democratic party. Who ever heard of personal responsibility?
Mandatory code reviews are about politics and efficacy. There's many people in the programming profession who maintain the appearance of producing a lot of software. However, when you view their large number of commits, you see they do very little or nothing at all. These people don't want their competitors creating a lot of software so they will try to manipulate the politics towards a belief that in all cases:

1. a high volume of very small commits are better than a low volume of large commits regardless of the functionality they provide.

2. Number of commits is an effective metric for productivity and contribution.

3. very small amounts of code are much better than large amounts of code regardless of the functionality it provides. Code is evil, so the person that produces less of it is more saintly.

4. mandatory code reviews will find lots of bugs. Naturally, they turn into complaints about spaces and formatting. EVERY TIME.

These are only true in a very limited set of circumstances. One example is when working in maintenance on an existing project. Small changes are appropriate because the product is finished.

The reality is they are trying to prevent productivity and efficacy of other developers, just as a business would try to increase the costs of their competitors down the street. PHBs aren't able to understand the impact of commits and new code, and will judge productivity by number of commits, large or small, and code review complaints rather than large amounts of working, tested software. Less scrupulous people definitely try to take advantage of this in a political corporate environment.