skysight-inc/HackerNews huggingface dataset:
Not sure about it being money laundering or this being your only worry - what strikes me is that you appear to be able to obtain credit card numbers from other countries with which you are proposing to use in substitute for the persons actual credit card.

In any case my credit card is valid in all countries where I see a VISA or Mastercard sign, and I have never heard of ever receiving discounts for using it. If anything some places charge a premium just for handling it, even in my own country.

This just seems like you trying to look for a problem to fit your idea. Sorry about being blunt.
It looks like they use RSS feeds from the sites, and just show summaries. When you click on the article, they open the site in an iframe.
By being vague about their claims, they are also being unclear on what should be done to fix the issue. Maybe in some cases, the offending websites even feel they don't need to do anything. I can already imagine some reactions:

- "I'm not storing the password in plain text, I'm hashing it after sending the email confirmation"

- "I'm not storing it in plain text, I'm encrypting it."

And of course, they would entirely miss the point that the real issue is that they are sending the password by email.
Free, as well as all major ISPs in France, rents you a router when you subscribe. This is where the filtering is done, using lying DNSs it seems.
The pedantry that's irritating me is this argument about there somehow being a "safe" way to store the plaintext-equivalent version of a password (there isn't) or even that there is somehow a need to do so (there isn't).

I agree that the Plain-Text Offenders site should state this plainly.
That's not a bad system. However, I have to grade on the paper directly and I don't want a computer near me if possible when I correct. Too many distractions.
I just grade each question then I add them all up if I predict the grade is gonna be bad or I subtract if the grade's gonna be good.
Would something like this satisfy you:

The system provides functionality for (password reset via email|sending plaintext password reminder emails|other password-based credential recovery|other delegation or retention of password-based credentials) which strongly suggests that an attacker who succeeded in (cross site scripting (XSS)|cross site request forgery (XSRF)|obtaining production server access|obtaining production database access|obtaining back-up meda|observeing network traffic|actively injecting network traffic) would then be subsequently capable of (logging into this site with a targeted user's password-based credentials|mounting on-line attacks against (a specific user's|all users') password-based credentials|mounting (dictionary|non-dictionary) off-line brute-force attacks against (a specific user's|all users') password-based credentials)|passive decryption attacks|active man-in-the-middile attacks) (with little or no work factor).

This (is|is not) recommended for (urgent) remediation. It (is likely|is not) sufficient to meet Payment Card Industry (PCI) standards or other adequate standards of care in the industry.

Check all that apply.

Also see http://cwe.mitre.org/data/definitions/719.html , for example http://capec.mitre.org/data/definitions/55.html .
You think Facebook Advertising Really Work? Read this.
The legality varies by country. In general they just say that they are selling the system and software as a whole so you can return everything for a refund. In any event it is too late now.
Except it's in stock right now: http://www.amazon.com/Nokia-Lumia-920-Windows-Phone/dp/B00A2...

And the Chromebook in question has been out of stock from Amazon and only available through resalers at a significant markup.
Thanks for the link to __twc!
https://soundcloud.com/twc-3
Finding your One Metric That Matters
Nate Silver doing AMA on reddit, Tue 2:00pm Eastern
> Cabal is probably the #1 thing keeping me from writing more Haskell code. I've had so many issues with conflicting versions of various libraries being required, and incredibly cryptic error messages upon failure.

Cabal has recently been causing problems because the fast pace of Haskell lib development and some big changes in the language and certain core libraries has been causing lots of incompatibility problems.

cabal-dev is a new tool, based on cabal, that will use a per-project virtual environment and should "fix" all the version incompatibility issues there have been. cabal-dev is similar to python's virtualenv, ruby's rvm and other similar tools.
We are. http://plaintextoffenders.com/about
There's the hypo-mentalism - hyper-mentalism axis: http://edge.org/conversation/the-imprinted-brain-theory (scroll to the second picture for a tl;dr, ignore the genetics thing if it's not your thing...)
GoPro - Cats vs. Laser
The 10-second formulation: "these sites will email your password, meaning it can be used to compromise your account."

That's precise, short, and easily understandable. It's also verifiable. I'm sure you can come up with something that hits those marks just as quickly. It's really not hard, which makes the sloppiness of this site's claims more annoying.
Your government at work trying to make that as unpleasant as possible: https://en.wikipedia.org/wiki/FATCA.
That was the price in the early 00s, Free has fiber plans for the same price I think.
Even if you do I'd be careful in assuming a Chromebook is the answer. I bought one to use with C9 (IDE) but found Chrome OS very poor in terms of basic functionality and C9 ran unusably slowly on it.
It depends on the evidence the submitters send us. If it's a Forgot Password or Password Reminder (or sometimes being told what your password is by a CS rep), that's evidence enough. We also allow for Here Are Your Details emails after registration as evidence, though the probability is small that passwords are stored in plaintext/reversible encryption (but we still believe it's an offense since the password is both sent over an insecure medium and is stored on the email server).
I really don't see why so many people expect this to be comforting.

In one thread everyone will be so sure that ARM devices are the future, and in the next nobody needs to worry about secure boot because nobody will ever want to use ARM.
It's not impressive, though. It's not surprising that someone is able to create a program using a Turing-complete language. It's just surprising that they decided to waste their time with an unreadable one. It's far more impressive to do basically anything else related to programming.
Review19 = Collaborative decision making + project tracking

http://review19.com
Nvidia  unveils Project Shield, a Tegra 4-powered Android gaming handheld
> Though the idea that any ISP that actually tried this in a competitive market would still have any customers left by the end of the week seems mighty suspicious.

I'm fine with letting them try because meaningful competition means consumers can go elsewhere. I hope there are some interesting business models to discover such as ISP side security filtering, ISP prioritisation of traffic, cheaper prices for consumer concessions, allowing content providers to pay for priority etc.
Even better than that - in Britain they can allegedly prove/disprove when a recording was performed by analyzing the electrical grid:

http://www.bbc.co.uk/news/science-environment-20629671
Waking With The Sun
Delhi gang-rape victim as guilty as her rapists, Asaram Bapu says
That's a very shallow reading of the article, and given your comments about violence, you seem to have missed the main point, which is that there's a continuum of mental states, from flat out psychopath to neurotic and everything in between. The lawyer mentioned on the first page would appear to be high on the scale, but not enough for him to not care about risking going to jail.

And your 'screwing over customers' is vague in the extreme. How exactly are you going to keep people on your hypothetical dating site but without them meeting people? Withhold phone numbers? On the other hand, the asbestos example given in the article is concrete and specific and seems pretty plausible to me - certainly enough to be worth trying (once you've exhausted other, less risky solutions).
I'm learning a lot thank you.
Felix is pretty impressive!
How would the psychopath's lack of empathy differ from the autistic / asperger's lack of emapthy?

It reminded me of the axis of hypo-mentalist <--> hyper-mentalism from here http://edge.org/conversation/the-imprinted-brain-theory (second figure, ignoring the genetics parts for this discussion) ...but I don't know where would autism and psychopathy would relate and differ. They are certainly very very different things, but I can't think of a simple conceptaul framework that would show their similarities and differences.
For the purpose of getting your password, reversible encryption means the same as plain-text.
I'm the same.

I have a hard time enjoying myself playing games now also.

Could be doing other more productive things and at the end of they day no one cares what you archive in a game.
Yes, that guy is pretty good, and he just happened to be giving out his tunes for free for video game devs to use on /r/gamedev.
That's a nice little write-up, I think it would be great on the main page.

I didn't look for it under "About" because I'm used to that being for personal details about the project's people rather than intro or summary info.
You should never be able to retrieve the original password.

And why use a custom scheme when there's quite a few very good methods like bcrypt et al that we mention on the website?
Or you can negotiate.

You are in the better position, simply put you can say "it's not making you any money, you've had it for ages, it costs you to maintain it, it's going nowhere, so why not accept my offer?" and name your price.

Your argument/position is that you can always just change your name and walk away so you have nothing to lose. On the other hand he will lose by holding out for something that may never come round again.

So he should take your money - whatever it is - it better than nothing.

OK if he still won't budge, just change you name.
Actualités Revue Palazzo
"Toutes les actualités dans la revue du Palazzo, veuillez trouver toutes les informations d'art et de culture d'Essaouira dans notre revue. "
> Does that mean that if/when an attacker uses a SQL injection vulnerability to obtain the contents of your database,

More pedantry: if you have a decent RDBMS like Postgres and connect to the DB always as some user A (using a Pg function with SECURITY DEFINER defined by a superuser to compare passwords with a delay, hashed or not) and use column-level permissions that disallow access to the password (or hash) column to non-superusers, they can sql inject all they want (any attempt to dump/select the password column will fail, unless they also manage to reconnect to the database as superuser).
That's awesome. I was thinking to build a similar site focusing on purely on eCommerce and was worried about legal aspects of this.
To me it seems like using a recruiter or monster.com to find a job: most of the people on it - employers and employees - have already exhausted their other, better options like networking, and are getting desperate.

And nothing kills attraction like desperation.
Fusilli con zucchine e gamberetti
Not yet - but it's just a matter of writing the makefile. I'll get around to it one of these weekends.
Ask HN: What makes PHP so difficult?
Having been awake now for roughly 30 hours coding my php project what makes it such a tough and confusing language? Does MVC complicate matters? Am I reading the wrong books/website and It is actually quite simple? In my humble opinion it's quite possible the worst server side language going.
This is just bunch of words. la-la-la.

practice at lying, cheating and stealing - this requires lot of self-control, which is considered a virtue.

They are ruthless because to them other people are objects - this is an emotion management, another virtue.

They are not focused on any long term goal. Their focus is very much on the now - and this is called spontaneity, a top of Maslow hierarchy.

So, you call it wrong?)

The point is, there are never been any study of so-called extreme cases. Get your test subjects from slums - you will get different psychology. It does't matter what experts think they will find. They will find what they don't expect.

The common-sense psychology text-book says that family doesn't matter. Well, if it is an average mediocre family, it doesn't, indeed. Children were shaped by their social network - by the street.

Now consider being raised in a family where you father died in an accident and mother became mentally ill, without any treatment, or even diagnosis. What common-sense psychology will say? "We probably would see some systematic differences"?

This is yet another bell-curve. Common-sense psychology studying mostly those 75%. Yeah psychopath is different.
Combine with L-Theanine (increases GABA activity), Lemon Balm (slows down GABA breakdown) and L-Tryptophan (good for social anxiety).
There's no way I would use Codeanywhere if what you're saying is true. In the worst case scenarios, you were given direct, unauthorized access to a stranger's personally identifiable information. What makes you think your information will be more secure?
There is no local monopoly France. (for ADSL, not speaking about fiber here).

All of the "last-kilometer" connectivity is owned by the historical telephony operator France Telecom (also known as Orange after its privatization), which has the obligation to rent it to other providers. You can switch between all country-wide ISPs as you wish.
Skype. The only missing thing is skype.
"I wanted to give my team, technical head and management enough confidence to work as easily without me"

Why?

I can guarantee that the minute you walk out of the door, they will tear up anything that you wanted them to do. Whoever will replace you will want to do it their way, not yours, and that's all there is to it. Management are notoriously eager to stamp their authority when someone leaves, for good reasons as well as bad. No need to be overly romantic about any legacies!

Friendship and networks on the other are valuable so work on those as your priority.
> White Males have no trouble everywhere.

They do where white males are abundant.
In other contexts of society it's perfectly reasonable (if not expected) to point out "offenders" (those who are increasing risk of harm to the public) without being obligated to at the same time to educate and reform the offender.
I like RDBMS security (and I think it needs to be employed more frequently), but there's still no valid reason to ever store a plaintext (or plaintext-equivalent) password. Storing something toxic in a "safe" way doesn't make what's being stored any less toxic. The effort to create and maintain a "secure" one-off credential storage system seems like a waste given the availability of well-tested, accepted methods of credential hashing and storage.
> The (mostly) free market takes care of ...

Most electricity markets are highly regulated markets, and the regulations are enforced. You are "free" to trade if you follow the rules.

Read some of the PDFs for http://www.google.com/search?q=electricity+market+design
and you can see some of the issues and some of the suggested solutions. Market rules are designed to create a functioning market - like a system architecture - to achieve network reliability, price stability, reduce political interference, and prevent gaming the system (Enron, but gaming can happen anywhere in the system).

Physical electricity connections for consumers are often natural monopolies, and thus require regulation. Imagine you could only buy power from an unregulated AT&T and that there was only one AT&T :-)

It is a very specialised job to design the rules and enforcement systems for a market so that the players (independent suppliers, consumers, and network operators) have the correct incentives to acheive systematic goals.

When the regulations fail, you get Enron and Southern California. When the market rules are not designed correctly, Iraq consumers have blackouts even though their next door neighbour has power to spare, because there is no incentive to build or run a transmission connection between them (e.g. due to fuel subsidies, or political instability). When contracts or the free-market fails, they cause Germany to dump excess wind turbine power to a buyer in another country, but they overload the network of a third party country stuck in-between the generator and load. Regulations are set up to help prevent the whole US eastern seaboard blacking out due to domino effects of network failures and individual incentives of the players to avoid costly redundancy or over-capacity.

99.9xx Reliability costs huge money, and rules help incetivise players to be capable of handling black swan events. Most consumers care about reliability, but most are too small to have any purchase power to effectively influence power producers/network operators (networks have monopolies on connections to consumers, only a very limited number of huge consumers have independent connections).

Deeply hard problems: political, economic, and technical.
Underlying Passion
People keep using this word 'pedantry'.

I think I posed a very real-world and relevant concrete scenario with considerations that are usually worth thinking about.
Yes, but that's not her fault

Resources management is a company problem. They could have proposed another time for her that wouldn't imply extra hours

They (the company) chose to go the extra mile and should be commanded. That extra mile between employers and the company should be settled between themselves.

Well, if my employer makes me do night deliveries without compensation of any sort I start to look at other options.
I think it is a windows virus going around and yahoo webmail is just a symptom:

http://www.reddit.com/r/netsec/comments/163uph/a_bunch_of_pe...

Any non-windows users affected?
And what is Gentoo?
Enough people get on well with it to make it the most popular language for web development, so the implication is that it's you not finding it easy rather than the language being especially hard. It doesn't fit with your mindset. Presumably, as you say it's "possibly the worst server side language going", you've tried a lot of them. Use what works for you.

Three other points though;

Firstly.. being awake for 30 hours is going to make you sleep deprived and confused, which will make it harder to code things. You'll probably find you're more productive coding for 10 hours, sleeping for 10 hours, and then coding for a further 10 hours than trying to code for 30 hours straight.

Secondly, the language you're using is a small part of app development. Tiny in fact. In my experience the "40/20/40" rule is right ... designing and building an app is 40% planning, 20% coding, and 40% testing. That's with about 15 years web development experience.

And lastly, if you think PHP is the worst server side language, you've obviously never written a large scale site in Perl. ;)
Despite displaying obviously irrational behavior, the dude did pull off some non-trivial documented tricks like founding initially successful hi-tech companies, escaping across several borders into the States, and (possibly) getting away with murder.

Some details like a harem of 8 gfs were reported by others including CNN. Think about the dude's age - 67! Despite all the mocking of his "just cuz I can" motivation, I've known some powerful people that by the time they got to 67 would do random crap just for the hell of it.

So… don't write it off completely as bath salt fiction. Sometimes a combination of rich aging control freak idle hands can produce surprising results. And for the millionth time, it really would make a fun movie.
Absolutely, I live quite near by to and highly recommend it to anyone interested, I've been a few times now, and would quite like to go again. For those who are interested: http://www.fhc.co.uk/ There's Ffestinog further south too, but there isn't a tour around that like the one at Dinorwig.
They are trying to optimize for clarity. Too much verbosity reduces clarity. It is not easy to find the correct balance between concision and cryptic. Many factors have also to be taken into account: should the program be easy to read by beginners or can we assume an experienced reader.
> There are no native apps [..]

Google's NativeClient gives you native apps.
Here are the quick Bullet Points, I have planned for my Exit. That will give my Team a good support. I wanted to make sure, I don't miss out any thing.

A.) Hand Over of Current / Live Projects

B.) Hand Over of Old / Finished Projects

C.) Transfer of Important Research and Knowledge update

D.) Important Enquiry and Well documented Enquiries / Probable Clients

E.) Design Resources and Development Resources / PDFs and eBooks, Important Blogs

F.) Important Application on iPhone and iPad

G.) Important Success Stories of Companies in Mobile

H.) Interesting Business Model and Strategies by Mobile Companies

I.) Internet Advertising, Mobile Advertising and Other Revenue stream for Mobile Apps

J.) Client Communication and Client Trust Building measures

K.) Enquiry Client Communication and Handling Enquiry, Sales Team

L.) Documentation , Code Review, SVN and Git Protocols

M.) Client Stories for each Existing and Old Clients, Blunders made with Client / How to avoid blunder Clients

N.) App Store ( Deployment, Distribution) - TestFlight, App Store Distribution, App Store Marketing , Enterprise Distribution

O.) One to One - Understanding the individual Team Member Potential and Interests

P.) Internal Projects and Products

Q.) Code Review Sessions
Amphetamine neurotoxicity:

http://en.wikipedia.org/wiki/Amphetamine

>The increase of cytosolic dopamine appears to trigger neurotoxicity, as dopamine readily auto-oxidizes, so that amphetamine or methamphetamine's increase in cytosolic dopamine can lead to oxidative stress in the cytosol that in turn promotes autophagy-related degradation of dopamine axons and dendrites

NMDA antagonists such as magnesium (as mentioned by rms), zinc, DXM, MK-801, Memantine and Ketamine can reduce/prevent tolerance as well as nerotoxicity.

http://www.acnp.org/g4/gn401000166/ch162.htm

> Methamphetamine toxicity is inhibited by a variety of drug treatments, including: ... 3) NMDA receptor antagonists

http://www.socialanxietysupport.com/forum/f30/evidence-for-n...
reddit gold has that feature.
>In a side-by-side Web page loading test with Google's Nexus 10... Tegra 4-based prototype loaded a set of Web pages nearly twice as quickly... the Tegra tablet appeared to be running the stock Android browser, however, while the Nexus 10 was running Google Chrome

Scumbag Nvidia? I would doubt that either browser makes significant use of >2 threads, leaving most of the performance difference that was not due to the 200mhz clock increase explained by the different browser.
The corresponding graph is very interesting as well [0].

Demand rose steadily from 4:30am through to its peak at 4:30pm. Just after this the spot-price jumped from ~$100 where it had been fairly steadily throughout the day to ~$2300. The market quickly corrected itself, but that half an hour would have been expensive.

Assuming an average price of $2350 per unit, for 2800 units, that half an hour would have cost around $3.43M. In all likelihood the market would have corrected much more quickly than that, but even at half that price it is still a lot of money.

[Edit]

The market is actually calculated in 5 minute intervals, and this graph [1] shows it broken down like that. From it we can see that for 5 minutes the load was at 3050 units, and the price was $12750. The price is an hourly rate, so if this had continued for the hour it would have cost $38.9M. As it was for only 5 minutes, it was actually 'only' $3.24M

Looking at the half-hour averages, this seems to match up, so maybe we were fairly close to begin with.

[0] http://www.aemo.com.au/mms/GRAPHS_NEW/GRAPH_30SA1.GIF

[1] http://www.aemo.com.au/mms/GRAPHS_NEW/GRAPH_5SA1.GIF