skysight-inc/HackerNews huggingface dataset:
While this is interesting, it looks simple to beat in the current iteration. The distort operation blurs the image, so the original is easy to pick out by simply determining the relative constrast of all the images.

This could be fixed by applying a similar blur operation to the original, but I'm pretty sure something else could be found. The only advantage (security-wise) this would have over the OCR-CAPTCHA approach is its relative novelty - should this approach become popular, many new ways to beat it would come up, and we would be in an arms-race like with standard CAPTCHAs.
FWIW, and iPhone does hae somewhat more "utility" than jewelry. Sure, it's partly a "shiny thing", bit it's a shiny _useful_ thing. (Whether its utility is worth the ~$400/year it costs if you break/lose one every two years is a good question.)
Anyone with power/influence enough. Like it has always been.

It doesn't matter if the person is known to the general public or not. Money/power/influence is what matters in our present world.
I took Dan Boneh's "Cryptography I" course this year on coursera and I learnt a lot. The mathematical basics are covered (with references to books and free resources if necessary) and the concepts are very well explained. I would definitely recommend taking it. There isn't a new offering planned yet (Crypto II will start in January), but I think it will be proposed again soon considering that they had two runs of the course (spring and summer) in 2012.

You can also find many useful resources on this nice blog :
http://blog.cryptographyengineering.com/p/useful-cryptograph...
I am fairly ignorant on languages. Does Chinese keep up with the fast pace of innovation these days by creating new words for new inventions from the English speaking world?

One of the reasons I think English does make a good exchange language is because it generally has a word for anything that comes along. Also it is the easiest to deal with in terms of building software and existing natural language processing research.
> I have thousands of fonts and have yet to see (or hear) of one that would trigger the security problems supposedly resolved by this update.

this is the complete backwards-thinking that causes people not to install security updates. Too bad it's repeated here in bold on a publication and subsequently even linked on HN.

Of course none of the fonts you have installed is using the security flaw.

But that newly created malicious font that is being used from that ad banner on that website you just visited is certainly going to use the security flaw to install additional malware on your system.

This has nothing to do with the existing fonts you deliberately installed but everything with newly created fonts that you don't deliberately install.

Another note: I really think MS should have fixed the vulnerability in their font parser instead of just disabling a whole class of fonts in a security update.
Hey! Don't forget the Oric-1/Atmos!

http://torlus.com/index.php?2007/11/13/206-oric-1-in-a-fpga-...

http://passionoric.free.fr/eng/download.htm
A 512 bit composite is not a lot of entropy - it's about 45 bits of entropy, which isn't much. sqrt(512) * 2 (since each prime is approx the size of the sqrt of the number, and there are two of them).

A few months to crack a 45 bit encryption doesn't sound quick to me. Even a 64 bit encryption would take many centuries at that rate.
Show HN: A backbone-esk event listener built on Klass
Someone could publish a DB of the IP addresses and locations. It would be a DB for Mongol...
Learning to Speak American
Holiday deals can really be hiding hacker surprises - Hacker News
Did the capacitors destroy the supply? I managed to repair mine: http://blog.jgc.org/2011/11/back-from-dead-with-power-supply...
When stackoverlow goes bad
"I based my M16 bought at Walmart caricature on the little I've learned from news media"

Maybe you should stop believing everything (or anything) you read in the news media.
Nah, he's exactly right. Starbucks is not just a coffee shop, like Apple is not just a consumer electronics company. There are few brands that are qualitatively different than everyone else because they managed to create a lifestyle out of their product/services.
any suggestions/feedback would be awesome! thx.
"640K ought to be enough for anybody." - Bill Gates, 1981
Can you actually drag a company into court over CANSPAM? I was under the impression it was FTC fines only.
I'd bet that day comes by the end of the decade.
Raspberry Pi Foundation launches the Raspberry Pi Store
Well, that's a debatable point. What is the core concept? That the people should elect the government? Well it went from white landowning males electing the government to all adults (excl. prisoners)? Does that count?
>Luckily the new patches to Java 7 no longer have this problem. But as the different statistics show – vast majority of the applications out there have not migrated to Java 7 as we speak. So most often than not, your application at hand has got the very same problem waiting to surface.

It's a tad misleading, but it's "still out there waiting to bite you" because of Java 6 still being widely used.
Perhaps it would help to checkpoint the compilation periodically, keyed by hash of input consumed so far, so when adding a word on page 100 you don't have to load all packages and recompile 100 pages.

- One approach is fork() processes (the tricky part being flushing all I/O and redirecting to separate files). This only works in RAM, which means active users & machine affinity, but I suspect storing checkpoints for long is useless anyway.

- Another approach is TeX's builtin memory \dump mechanism.
This generates a file, so you could reuse flexibly, stuff in memcached etc. And easier to set up.
But looking at mylatex.ltx I get the impression you can't \dump from a process that loaded a dump, so you'd have to start from initial tex and re-parse all of latex :-(. Perhaps still a gain, at least keeping one dump after the preamble?

The other half of the problem is getting the page(s) you want quickly without waiting for the whole document to compile. My impression is pdflatex output is not valid PDF until it's done. Less of a problem for writelatex which already does separate images?
> I also don't understand what usability complaints users would have, since for the most part, they access it through a client such as Outlook.

Disappearing & reappearing emails through outlook. (And occasionally disappearing and not reappearing; Had something to do with ActiveSync and outlook open at the same time, but I never quite managed to exactly characterize it). Despite exchange's hyper configurability, those disappearing and mostly reappearing messages did not have anything in their logs different than anything else.

Also, search was abysmal.

Larger mailboxen (3-4 GB at the time) caused huge slowdown, and people were moving stuff to local (though, not backed up!) archives sorted by quarter, so that the recent year or so would perform reasonably.

> But you're comparing a service in 2012 to one in 2006.

I'm comparing Exchange at 2006 (I think it was Exchange 2005? but it might have been Exchange 2003; It was the latest available at the time) to Gmail at the time. Everyone preferred gmail to outlook web access, and most preferred it to Outlook as well (for tags, search and predictable behavior).

I'm sure Exchange has improved since, but so has gmail. What can exchange 2013 (or exchange 2010, which is the recent battle-tested version, unlike 2013) do that that Exchange 2005 couldn't?
Ask HN: How do i promote my Android App?
Hi guys, i just released my android application two weeks ago. currently it has been downloaded 1000, and i think that's too low. How do you guys promoting android app ?, is there any website should i follow to ? this android application also happen to be my Final your project to finish my study, so i really want to do everything for this.

Thanks.
Beware a Sleeping Godzilla: The UN’s Internet Treaty Fiasco
How to save your phone after you dropped it in the toilet
Err, it is, it's a chain of coffee shops, and isn't unique in that.

Maybe I'm biased because for the last few years I've been living in one of the few starbucks-free cities left, but the times I've been in in other places... it's just a coffee shop.
For me, IKEA stores are a vision of that hell that so many religions like to scare their adherents with. There is not a single thing about them that does not chill me. That endless one way system can drive a man to despair - long before he is plunged into the depths of the rack filled dungeon below.

I like to think that if I am very, very good my wife will not make me go there (and Santa might bring me some toys).
What does this actually mean? Obviously it is pretty obvious if it lands on top of you, but if there is a 1 megaton impact of a meteorite landing 10 miles away what are the consequences? Given the lower gravity and atmospheric pressure would you be basically sand blasted with remnants?
This seems very sluggish in my browser (Firefox 17.0.1). There's about half a second of lag, which is far too long.

It also took me a while to realise that I had to drag the handle instead of just being able to click in the bar where I wanted it and slide from there, although this is presumably easy to fix.
Using ATA Over Ethernet (AoE) On Ubuntu 12.10 (Initiator And Target)
> Using primitives is a good discipline, specifically because your default programming techniques should be clean, simple, efficient. The point isn’t that you should be prematurely optimizing your code, but rather that when given a choice between two nearly identical approaches, you shouldn’t irrationally choose the less performant option without a good reason.

By the same token, you shouldn't arbitrarily pick the non-object solution without considering the other code interacted with.

> If your language’s standard libraries included both quicksort and bubblesort, you should never choose the latter.

Not entirely true. If you know n <= 8 or some small number, you might want to.
I think you're suffering from burnout, something I suffer from at least twice a year. The last thing I want to do during this time is sit in front of a computer, even though - like you - my head is full of ideas and projects. It hurts for me to get out of bed, much like depression, I feel worthless like I'm unable to do my job anymore because it pains me too much.

What I do is start running more, once a night/morning, take the dog for a longer walk, go out to the cinema, meet some friends for a pizza or something. Basically taking my mind away from projects whilst getting fresh air, socialising and being active. During this time I tend to get headaches often, but I NEVER take medicines as they seem to make me feel down again. Spending time outside and getting myself fresh air is the best remedy, takes longer, but it's more natural and feels rewarding.

Talking about rewards, another thing that works for me is rewarding myself with mini-achievements. "I'm going to run 3 miles today. And if I do, we'll have a pizza." any reward except computers. After a week or two - depending on how burnt out I am - I feel the urge to get back on a computer and start working again.

I hope the above helps :) It takes a lot of time to find the right remedy for getting yourself through burnout, but time and time again I've read people saying "just get off the computer and out and about" it works, even thought it can be a pain to motivate yourself at first.
try to submit your app in Android sites that do apps reviews, some links over the web can help maybe to spread it out
Focus, will you?
So you can feel good about being a big tough gun owner well your government does whatever the hell they feel like anyway?
You don't have to hide the checkbox like that; display: none; is fine. Also looks better code-wise.

And apparently performance wise: http://www.zeldman.com/2012/03/01/replacing-the-9999px-hack-...
JDK 6 is EOL 2 months from now: https://blogs.oracle.com/henrik/entry/java_6_eol_h_h

It's also pretty rare for folks to use that http client. It's normally the case that an apache commons or netty http client is used.
Raspberry Pi Gets Own App Store
And in case you're interested of the hardware, here's some details: http://archive.org/web/petabox.php
If anyone is tempted to try this without purchasing a suitable kit, make sure the parts are suitably rated. The 250V non-polarised C2 may be safety critical if it's a line to line or line to neutral capacitor - look for an "X" or "Y" marking (I can't tell from the damage evident in John's photos). Lots of information on line-rated caps at http://my.execpc.com/~endlr/line-filter.html.
Upvoted primarily because "parents often make the difference" alludes to the wider context, the systems context, which includes the parents and other individuals and groups and society in general.
Would some people pay $50 more for a hpothetical iPhone with an RFID chip in it over the current iPhone 5, even if they only ever used it at Starbucks? Yep.
Try dodging a 100kg man armed with 5kg rock. I had to do it once while wandering the streets of a big South American country. If I had a gun I certainly would have not killed the bastard as just waving it should've solved the situation. Instead I had to keep cool, pull a Jedi mind trick, and literally run for my life. Yeah, guns kill. So rocks too.

Again, how do we stop all this killing?

Either way, I think we should start by banning cars. People kill much more people with cars than with any other tool. Maybe except for voting, but that's another matter.
> If they could predict who is a criminal before a crime is committed, social benefits could be rerouted away.

Surveillance is no replacement for legwork. They're not catching that many criminals (or "terrorists") with it right now, and in order to have an effect like you describe they need to catch most if not all of them. Surveillance isn't a panacea like that (even if you ignore the freedom aspect), even with perfect total information awareness, there's a ceiling of efficiency.

The thing you describe, to run smoothly is just about the same amount of trouble and effort for a government, as it would be to rule with actual justice, civil liberties, privacy, etc.

The truth is, all this surveillance shit is NOT really about protecting the public and reducing crime. It may be useful but not that useful, definitely not billons-of-dollars useful, the amounts that are being invested in this tech. It's about the state protecting its place, keeping the status quo and people covering their asses. In a healthy country, those two goals are aligned. In many countries, including the USA, they aren't. Also, money and power. Actually it's just power, money is secondary.
Book: Agile Localization
The short answer is that it is very hard to acquire fully-automatic weapons in the US today. Aside from the fact that anything available for sale to civilians will be both prohibitively expensive (1-2 orders of magnitude more expensive than a comparable semi-automatic weapon) and most likely an antique (only weapons manufactured before 1986 are available to civilians), the acquisition process itself is pretty arduous (e.g. FBI background investigation, signoff from head of local law enforcement, etc.). From my understanding, these weapons are almost never used to commit crimes.

The real danger are handguns - something like 3/4s of gun deaths are from handguns.
> but that doesn't mean programming in PHP is a bad practice

Of course not! We are agreeing on this - I'm just noting that programming exclusively in PHP (or any other language for that matter) is bad practice. I have nothing (or not very much) against PHP :)
Circular Values Math and Statistics with C++11
http://www.mkw.me.uk/beebem/ is a very, very good software "replacement" if you need a quick fix.
> You were wrong.

Australia has had zero (0) gun massacres since Port Arthur. The major leading cause of gun deaths in Australia is suicide, around 300 per year from among the ~750k gun owners in this country.

I agree that totalitarian governments have been the leading cause of death in the 20th century. But it's an orthogonal point. Look around: guns do not prevent tyranny. Neither do high explosives. What counts is institutions. The United States inherited a set of institutions (cultural norms, the rule of law) from the British that went a long way to assuring economic success and a culture of freedom.

So did Australia. Our freedom has never been guaranteed by the kind of constitutional mechanisms the USA has; it has always been reliant on culture and history. The freedom of the people of the United Kingdom is not guaranteed by any written constitution; it is reliant on culture and history. And so on and so forth. Widespread gun ownership does not banish shitty governments (ask a Saudi).

We are not going to agree, and nothing I say will change your mind. Please feel free to leave another triumphal remark below this one and let's both get on with our lives.
The GFW doesn't really have filtering devices with IP addresses.

For filtering in literal sense, i.e. address based packet null routing, all you can find is general carrier routers with their routing tables being dynamically manipulated by BGP commands sent by the GFW. You can't know where the commands come from.

For "filtering" described in this research, it's active connection disruption with spoofed tcp reset packets. The GFW mirrors traffic via some routers for detection and sends spoofed traffic for disruption. It doesn't have an IP address per se. This tool can find out from which router the GFW mirrors traffic, but not the GFW itself.

Here is a previous illustration on the topology of GFW networks: https://media.torproject.org/image/community-images/topology...
plain text proxy was banned by GFW, like a decade ago.
The Acceptable Cost of the Right to Bear Arms
Constexpr unions
End of the Year 20% Sale from open source hardware for makers vendor
Ipsum 8
The model that has worked amazingly well for Python (and Matlab, and R, and probably a number of others) is to encapsulate the hard stuff - say BLAS for linear algebra, or GraphLab for loopy belief propagation - together with all the amazingly tuned shared memory support, concurrency, parallelism, data locality, whatnot - in C-level modules written by expert people and expose a powerful API that doesn't expose you to the nontrivialities of concurrent or parallel programming. If you spend lots of time in the driver code, you most certainly won't be happy with Python, R, or Matlab, but then Cython (and possibly Numba at some point) help push this "lots of time" further and further down.

"all else fails" is the starting point of pretty much everyone doing real work. What's your alternative here? Most of the time, specialized libraries will be both more convenient and more efficient than rolling your own with fine-grained concurrency/parallelism in Java or PyPy.
It may be better to block it. In the long term the Chinese might learn that is better not to block internet than to loose the resources it provides. An interesting twist would be to make every popular site to be banned.

The Chinese government seems intelligent enough to understand that China will be better if they can use the resources provided by the rest of the world. They are not Syria.
There is always a character in every photo
Quick and Easy -- Manipulating C++ Containers Functionally
"Australia has had zero (0) gun massacres since Port Arthur."

http://en.wikipedia.org/wiki/Childers_Palace_Fire

Your point?
Using some online calculators for the effects of nuclear weapons, I suspect the answer would be that you'd be reasonably safe at 16km:

http://www.alternatewars.com/BBOW/ABC_Weapons/Nuke_Effects_C...

http://meyerweb.com/eric/tools/gmap/hydesim.html

I don't know if a meteor impact would produce the same prompt radiation as a H-bomb, but the much less dense Martian atmosphere might negate that.
Their model suggests that Tunguska-type events of around 10 megatons should occur roughly once a century and smaller 1 megaton events once every 15 years.

If the rate is 1/15 years on Earth, why haven't I witnessed any yet? I suspect the answer is that Earth is rather large. Mars may not be quite as big, but it's still quite implausible that our Mars visitors should happen to be at just the wrong place at the wrong time, even with a 5-times increase in risk.
Fascinating accidental inventions
This is an important point. Skeumorphic is really only bad when it acts as a barrier to using an application.
C++ and Beyond 2012: Andrei Alexandrescu - Systematic Error Handling in C++
Yes he is free and we are. He has the right to do so, and others have the right to criticize him for that.
Does that mean that AES-256 is 'broken' in crypto terms?
Please reread what you just wrote.

Seems to me that this is _exactly_ the reason google is doing this - to push you over to Android.

You're not paying for gmail/apps, so you're the product, and the product is now being ported to Android. It's really that simple.
Comment on my basic one-shot amazon price alerter
This took about a day to make.

The idea is that you don't need to register, and that your email address is deleted after your alert expires.

Simple and easy.

URL: http://pricemon.org
Thanks!

I'm not sure if I missed it, but maybe you could explain immediately invoked functions somewhere, as the examples rely heavily on them.

Also, the code example in the introduction showing the format of code examples is CoffeeScript, which is a bit confusing.
One of the biggest issues with standard captcha's is their lack of accessibility, especially for blind or low-vision users. Some provide an audio alternative but they're generally worse than the visual version.

It's good to see some innovation in captchas but I don't see how this particular idea can overcome this hurdle.
My old and somewhat related PoC project for screen casts, but still working. Just checked (debian wheezy with stock kernel 3.2.0-4-amd64). It requires building and loading simple kernel module, though.

Apparently nowadays debugfs is owner-only rw, so you have to change it or start it as root.

https://github.com/przemoc/kaos

Look for the top-right corner to see the effect while you're typing or clicking something.

P.S. Funny thing is that I don't know why I wrote >>Kprobe dependency can be easily removed by writing own input handler and it will be done in future<< back then, because when I evaluated this statement year or so ago, it didn't look that easy, and there would be more code in the end, I suppose.
My beautiful wife, Apple
Depends if they blew the traces off the board (that happen to my Master Turbo). Soldered on paperclip fixed it but was probably a small fire waiting to happen.
The Future is Cloudy
Enough Already
ISP Walks Out of Piracy Talks: “We’re Not The Internet Police”
Alternate Link - http://www.raspberrypi.org/archives/2768
Show HN: Our stab at PG's No.1 frighteningly ambitious startup idea
We built a "search engine" that lets you query opinion- and experience based information about the physical world. Human-to-human. It's something that Google, who is really good at surfacing factual, commonly held to be true, objective information, will never be able to do.
Fox runs whichever story fits their current agenda. Need to cut funds? Call teachers lazy and incompetent. Need to keep guns unregulated? Give teachers guns.
+1 for this. I've had it installed permanently for a few years and it works perfectly. You can even emulate Tube connected processors!