skysight-inc/HackerNews huggingface dataset:
Still has my closest grocery store listed as "Albertson's." At least it found the store, which took some coaxing from Apple Maps. It also finds 1 California Street in SF, which Apple Maps failed at a few weeks ago. I note that the pinch gesture behaves in an atypical way. It's more of a "pure zoom" and has no scroll at all, which is kind of a pain.
As an information security professional, I see two different issues at play here. First, they got access. They were granted access by the admin who did not lock down the server. I am not a lawyer, but I see the unauthenticated web server, no matter how much of a mistake, as being implicit permission to access the site. A house, by default, implies privacy. A web server is more of a business in this metaphor. If the door is open and the lights are on, it's implied you can come in and look around. Machines accessible over the web are by default open to everyone unless permission is revoked. The "unauthorized access" charge, in my opinion, should be struck down. When a site is made accessible from the unauthenticated Internet an admin implicitly granting you permission to visit the site.

The second issue at play is the fact that the guy apparently collected some email conversations to use as proof. Using my business metaphor, walking into a closed business that to a layman appears open is a simple mistake. Anyone could reasonably assume the business is open. However, collecting their merchandise even just to prove they forgot to lock up would still be stealing. In this situation, it's unauthorized copying. Most reasonable people would consider this to be unacceptable.

The second situation is muddied a bit further by my wording "most". Websites accessible when unauthenticated are able to be scraped easily. What if the Googlebot crawled the site and collected the information due to a poor robots.txt? What if you walked into the business and tried some free samples (unauthenticated websites are implicitly free samples)? Data privacy comes into play on this one though, and I would argue that any reasonable person would understand these as private communications. While they are accessible to view, any reasonable person would understand it is unethical to read them and unacceptable to copy them.

The fatal flaw of the defendant was copying the emails. Up to that point, he was completely within reasonable practice in my opinion. Here's a takeaway for any startups: security isn't a joke. It's a career ender, it's a business ender, and it could be a career ender for your customers who trusted you. You hire the best programmers, but budget a little aside for an external penetration test, and take the results seriously. Don't lose your company and your reputation because of a caffeine-fueled oversight.
How To Stop Forum Spam
Sweet. Any chance for Android version?
I don't believe patents are necessary for solving this problem. The threshold pledge system [1] can solve it without involving the legal system.

[1] http://en.wikipedia.org/wiki/Threshold_pledge_system
I think people like ideas like this because the idea that USA is going to back down to some where-the-fuck-am-I place in northern Cambodia and Laos to remove the bombs we dropped is laughable: http://truth-out.org/news/item/3001:landmines-and-cluster-bo...

You act cynical and as though you have a 'realist' point of view, but nowhere do you mention holding the countries that dropped these weapons accountable. Why don't we shame them? Why don't we pay for handicapped children to come to the USA and peacefully sit in on protests? Why not make this the embarrassing issue it should be?
That's a good approach, but not novel and not the first host doing that.

Many hosts automatically scan and fix their clients sites and have been doing that for a while. Specially when you are talking about popular CMSs like WorPress, Joomla and drupal.

thanks,
And the entire fanboy base (me included) sighs in relief.

New computer to be built next year.
Wow, what would anyone do with billions of dollar if their reputation is hit so hard? I'm actually curious about moral position of people who engage in such frauds. Is there any research on such white-collar "crime"? What motivates them and why?
Learn How to Attack SSH Tunnels' Security with PenTest Regular
Basic Concept and Usage of SSH Tunnel
by Digit Oktavianto
SSH Tunnels: How to Attack Their Security
by Andrea Zwirner
SSH Forwarding
by Alva “Skip” Duckwall
DIY SSH Tunneling: How to Create an SSH Tunnel
by Ben Moore<p>PLUS:
The Problem with OpenSSL
by Colin Renouf
WPS: Does It Make Our Wireless Networks Really Safer?
by Bart Leppens
Pen Testing: Nature vs. Nurture
by Tony Campbell<p>and in the Regular Column:<p>Dial ‘S’ for Scammers
by Adam Kujawa
The Physical Aspects of Cybersecurity and Their Importance – NISPOM
by Marc Gartenberg
The blame would rest on the admin who set the permissions. You can't blame a lock for not being locked, but you can blame the night watchman for not locking it. This doesn't remove blame from the intruder though.
How to create a private npm.js repository
Hard to describe how much i enjoyed this.
Senate bill rewrite lets feds read your e-mail without warrants
> I've been thinking that Win RT and Surface are the real future of Windows - ARM based, no more backwards compatibility.

If that's true, then I don't see any reason to be using ARM Windows. iOS and Android are better in every aspect that counts, except for MS office.
A super nice team on top of some impressive technology.
Extremely. It's not so much that the iOS devices are prettier - although their UX simplicity is hard to argue with - but that Android's extra power and flexibility also comes with more interface complexity. People find it hard. To the point that my parents and girlfriend all have trouble placing phone calls with my Galaxy S2.

I still love it, but it's got a way to go.
It happens all the time. There are plenty of people who just want to create a scene, cause a fuss, make life difficult for security staff, etc.

Journalists have also been known to test the limits of airport security, taking suspicious items on board planes or gaining access to restricted areas, then reporting on the associated security lapses.
Deloitte (large accounting firm) signed off on the independant auditor's report... summary here: http://www.zerohedge.com/news/2012-11-20/deloittes-2011-auto...

Is it just me, or does this kind of stuff scream "the system itself, allows massive fraud to occur" ?
It is naive, given the facts, to consider that it was a mere "horrible business decision" especially in face of the values involved
Nintendo warns against Wii U update being interrupted
While you are probably right about this mine clearing tool, there have been previous examples that show the military’s requirements for particular items are much higher than civilian requirements in times of relative peace. Obviously when there is a world war, requirements go down dramatically to get things done, but when making purchase decisions in time of peace it seems that requirements are very high. Items like devices/vehicles etc. get very expensive and complex.

[Added] I’m talking from a US perspective, but it seems plausible that most developed country militaries spend on technology when in time of peace.
Or, you could just adopt a paleo-diet and dispose of these mind-tricks.
F1 Brasil Grand Prix - Live (Hungarian F1 Fan blog)
Most of the world's consumers don't own a credit card.

Admittedly, this startup is based in the UK, where most consumers have several credit cards.

http://www.creditcards.com/credit-card-news/credit-cards-aro...
Nice idea until spammers just make bots that idle on your site and follow a few links before and after signing up.
If you are going to nitpick, I will say that this is a feature that relies on browser-support. It's not fundamental to the web. Query-strings however by definition needs to be supported on the server-side. They are a part of the web. They are required for the web to work.

Why is "browser-support" relevant? Your example is not supported in MSIE. I also thought it was removed from Chrome (in the name of "simplicity"), but I may be wrong.

A link with query-strings is guaranteed to work for everyone.

http://support.microsoft.com/kb/834489
Here the fundamental problem seems to be a very poor understanding of Autonomy's marketing and margins models.

CNBC is reporting that Autonomy was booking losses on hardware sales as marketing expense, and that its arrangements with resellers amounted to kickbacks. That may reflect improper accounting and practice. But any serious understanding of how the company goes to market and wins business should locate these expenses and arrangements no matter where they reside on the income statement -- and having located them, realized their implications for the value of the business. Clearly HP missed these items, which means they didn't understand the business model. The End.

Maybe Deloitte did a poor job on Autonomy's books. But anyone spending this kind of money at these multiples on the basis of an auditor's opinion is an idiot. And it does not speak well of HP that they are trying to place responsibility for this on someone outside their organization.
Do they automatically fixing themes to CMS'es? Updating the engine is one thing, WorPress, CME, and so on, but that only takes care of a tiny portion of the attack vectors. In my experience, if a wordpress or a phpbb forum was hacked, then its the user installed/programmed theme that was the cause and not the engine itself.
Less people would use each.
On Reddit the topmost posts have around 10k~ upvotes (not karma), a lot of people see them and vote them. But if we then go to see the single subreddits, the ammount of upvotes needed to reach the 2th/3th place can drastically decrease, and so do the users that see that subreddit. And this is for subs that are on the frontpage, if we go to look all the other subs there are some who get just a bunch of posts each day and therefore are harder to sort, you get the same content for days on their frontpage.

Now let's consider HN. The current top post has 317~ points and apart from the posts about Steve Job's death and an earthquake(I don't remember which) you usually have a GREAT post if it reaches 500 votes. And we don't have downvotes (or at least not everyone I think). So, splitting this posts in subs will create a unnecessary fragmentation that I can see will only hurt the community. But I agree we could have something to sort, but I don't see it as a needed thing, therefore I don't see it happening.
i will really like that. And i think there should be a separate Review Startup or Show HN category as well. I just submitted for the first time for review and it went unnoticed.
A 220 floor building is a hugely complex engineering feat to pull off which will have little in common with the 30 floor hotel that Broad previously manufactured and erected. The difference cannot be overstated; from the structural elements needed to support something approaching 3000 feet (including the sheer loads from wind) to the highly specialised services required (lifts, water, drainage, fire services, power distribution etc.). On top of this there are the technicalities and logistics of manufacturing and assembling something this big and tall in such a short time. There will be a lot of specialist and custom engineering involved.

So what is the point? If Broad's mission is manufacture cost effective, easy to erect and energy efficient tower blocks then the 220/F monster seems an unlikely direction to take. The average tower block in any but the most crowded city is unlikely to much over 30 floors. And from a cost and energy efficiency standpoint there are diminishing returns on very tall buildings anyway.

All in all I think this is more of a publicity stunt than a reality.
> Apple should buy Twitter not for its social network, but for its talent and technology.

What? Seriously? Apple should acquihire Twitter?

> The social network is basically an added bonus.

I think we're done here.
50% off No Starch ebooks (24 hour offer, use code GOBBLEGOBBLE)
This has nothing to do with Google Glass. The article describes an augmented reality system. Glass is not AR -- you don't look through it. It's just a display that is unobtrusively visible in a small part of your vision.
Show HN: Color Alchemy, my first foray into game making
Google's AirPlay
Know the founder personally, very down to earth, humble and nice guy. Well deserved Oliver!
How is it supposed to trick you, when you can feel exactly how much you ate when you put it into your mouth? Not to mention you KNOW that everything you're looking at is bigger, because you put the AR headset on in the first place to do exactly that.
One aspect is priority: How much important house styling is for you? May be some cultures have low priority for it.

So far the herd mentality is concerned, being different than others just because everyone is trying to be different (identity crisis?), is the same herd mentality.
Neat. Your challenge here will be finding a large enough community of people who want to put the time and effort into illustrating and animating this – enough to create a stream of new content for users.

Instagram caught on in part because taking a photo is so easy. None of the composition involved in writing even a 140-character tweet: you just hold up the camera and snap. (Yes, photography involves composition, but pretty filters aid even the worst photographers there.) Do you have any idea of how you'll encourage enough content to create a meaningful feed?
Is the accepted convention that in online communication literal grammar corrections should start with an asterisk or at least be surrounded by quotes.

I know how silly this is, but now you see what happens when you get too focused in grammatical mistakes.
In the Case of Brit Ruby We All Lose
> Autonomy founder Mike Lynch is a non-executive director of the BBC.

Way to go journalistic impartiality at the BBC.
The two way communication is interesting.
How did this get past QA? It looks terrible on any retina device (every Apple flagship).
Both parts of the sentence need to be able to stand alone; they can't stand alone in the described instance.
10 years in jail for incrementing an integer at the end of a URL. Wow. What a disconnect.
Tip of the hat (repeated in 6/8) for using some of your time to save the rest of us a bit of time.
Conferences Must Be Active to Promote Diversity (with maths)
I don't think the point of this article was "Republicans are scummy", because everyone knows the Democrats are too.

The only thing this article made me think was "Damn it, we were so close!"
Following that logic breeds bizarre results.

What if you find this magic token because it was embedded in some client-side, javascript login-form? Are you a hacker for viewing the source?

Securing content on the internet is easy. If you don't want it accessible to anyone, don't give the content to anyone who provides an unauthenticated HTTP request.

Why are we putting the legal responsibility of maintaining security on that content on everyone except the ones actually in position to do so?
I understand, but I think the comparison isn't really as useful as it wants to be when it's linked to a commercial venture.
Twitter suspends ‘NYT On It’ account after New York Times complains
He should totally have posted those on pastebin instead and shared on the net.

I think that if one finds an embarrassing security vulnerability, they should look up the offending company and upon finding that company ever took part in the crap like described in the article, they should publish the vulnerability wide open, goatse-style, anonymously via pastebin.

Those companies should suffer to the end of times and their clients should too.

Unless that company properly apologized, which they never do. Corporations don't seem to be capable of that. Not in their DNA.
Aren't you assuming that investors and VCs are interested in ethics and morality? May be some are, but I'd guess many are more interested in ROI. Whoever gives them the max return gets their money, no?
Both involve sentient beings. This is not about valuing children less. This is about valuing sheep more.

This might be an uncomfortable world view, taking how much we depend on non-human abuse in our civilization, but it's not the only case where we built it on abuse of others, human or not.
That's a great article. I thought I was pretty secure with the two-factor authentification. But with the 'socialing' technique it looks quite easy to break. To me, the best advice is to give bogus answers to security questions. That leaves very little chance to pass through the password resetting process.
Unless the World Bank has climatologists on staff doing original research, this boils down to "we found a paper that we're basing our planning on". It's as relevant and interesting as "Boston Symphony envisions a world with quantum cryptography". Absent researchers on staff who can add something new or display some expertise in choosing to rebroadcast the news or not, I really don't care what the Boston Symphony's opinion is.
They said the same about greylisting. That the spammers would just write a retry logic into their sending daemons. This was several years ago, back when I enabled it on my mail server, and I am yet to see a single spam that didn't come from Hotmail or Gmail.

[1] http://en.wikipedia.org/wiki/Greylisting
In my area, Apple Maps has better local data.
Taiwanese company claims their MLC SSDs have 4x the average lifespan
Disruption by who? Other sovereign entities?
Win a Professional Logo Design and a Business Card Design
It's time for another Logo Design Contest!<p>Here's what you can win this time:
- a Professional Logo Design (3 logo design concepts included)
+ a Business Card Design<p>Good Luck!
1. Put up a personal site on your own domain if you don't already have one. It doesn't have to be fancy but should look professional. A single page will do. Write a few paragraphs about yourself and link to projects, social media profiles, and your CV. See mine as an example: http://driverdan.com

2. Have a searchable PDF version of your CV / resume linked to from your page. If possible also include an HTML version. Consider SEO when writing your CV. What keywords do you want people to find you for?

3. Be everywhere. Have active social media profiles on all the major sites. LinkedIn is a cesspool of recruiters so get your keywords on your profile and link to examples of your work.
It is because it's deep in people's mind like the hate for IE, it is much a better browser now but people are hard to change their mind. So is for Android, it has evolved a lot but people still think Android is the one that was on the G1. It is not, it moved on, it's nicer and much easier to use. I can't believe someone who says that he can't use it. If you have problems with (the latest versions 3+) Android, you will have problems with iPhone and even a toaster. If then you choose to hate it and keep your mindset than that's another discussion.
It's an interesting public statement with no actual content.

Let's break it down:

* I think that these estimates are baseless

* and very, very wrong.

* It is a outrageous number

* I’m not going to comment anything on a specific number

* I believe we have a very, very happy settlement and a good ending

All of these things could be true if HTC was paying $20 per phone or $5.99.
I'm not sure I agree that the post above has no relevance. Every time I encounter (an extremely highly voted) patio11 post, my used salesman alert starts blinking. The guy is obviously a master at garnering karma and links, SEO, what have you, while seemingly providing some value. And he makes his money from this combination. So it is useful to realize where the OP is coming from (self-promotion) when considering the validity of his posts, since they are largely anecdotal.
They add items all the time. Taking it down is just more hype and probably gives the IT team a nice way to do a double check before they get hit with a high load event.
Is the threshold pledge system a viable alternative to depending on IP?
Arguing on the Internet is Worthless - Ask Mark Suster and Paul Graham
http://robbieabed.com/arguing-on-the-internet-is-worthless/
Fun contest to win over $200 worth of Java knowledge - Share the love
I prefer to reserve a seat when traveling cross country, who wants to stand up in a train for 3+ hrs when I can sit down and read a book.

In Denmark when I travel with my dog I'm actually required to reserve a seat for him and myself... making it even more awkward since I have now reserved a seat for a dog who isn't allowed to sit on it.

After a few times allowing people to sit on my dogs seat I now politely decline, its no fun for or either passenger or dog to try and share the same leg space.
I guess I don't think there is a 100% correlation between success and a great idea. I think that luck can be just as big a factor in success as the idea, especially in the mass consumer space.

If celebrities didn't take to Twitter I very much doubt they would have hundreds of millions of users now. You could argue the idea is what drove celebrities to use the service, but did it? If another service came out before or around the same time that celebrities used instead, would we say "Twitter is obviously a great idea that just didn't catch on?"
Distributed Management at GitHub (by Ryan Tomayko)
And Play2 core is composed of very robust components without any runtime enhancement, any magic. Using Scala power, we can build very clean tools, such as this one, without perverting typesafe/fully-compiled basements.
Why would you care about your reputation when you're in a five star hotel at the Caribbean with billions in your bank account?!
True Informed Consent Is Elusive
MRI does GC runs like they're going out of style. I recently did some comparisons with JRuby and saw 100x more GC runs on MRI, and easily 10x more time doing those runs. GC::Profiler ends up eating a crapload of memory as a result.

Check out slide 37 and surrounding slides. If you're complaining about GC and aren't giving JRuby a shot, you're missing out. http://www.slideshare.net/CharlesNutter/why-jruby-rubyconf-2...
I have one, it's called "forking" and it'll be ready soon.
There are, actually, many similarities. Both groups of people defy social norms and seek publicity in the course of acting out grievances with the establishment.

Activism and terrorism are often one and the same. I don't think it's unfair to describe 9/11 and similar terrorist attacks as forms of activism — not that this in any way justifies the attacks — nor to apply the 'terrorism' label to many self-described activists (e.g. Anonymous with their computer hacking)
> "And it does not speak well of HP that they are trying to place responsibility for this on someone outside their organization."

If HP are prepared to pass on their information to the SEC and SFO, as well as talk about potential civil action, it would suggest they believe they have a valid case and this isn't just pomp and bluster for the benefit of shareholders.

I'm not saying the acquisition wasn't a stupid idea, or that HP's auditors couldn't have spotted these problems sooner - but if what HP claim is true then you can't hold it entirely against HP and the auditors.