skysight-inc/HackerNews huggingface dataset:
Manipulate Word, Excel, PowerPoint & PDF Files in Android Applications
Saaspose development team is pleased to announce the release of Saaspose SDK for Android. We have been working on Saaspose SDK for Android to facilitate the android developers with feature-rich APIs round the globe. Saaspose REST APIs gives developers total control over documents and file formats on all platforms. We have developed SDKs for these file format APIs to help you utilize these feature-rich APIs in you applications for quick file processing. You can now use Saaspose APIs in your Android applications and take document manipulation experience to another level. Whether its text extraction from PDF files or conversion of MS Word document to different file formats, Saaspose REST APIs have much more to offer for your Android applications. You can extract text from documents, calculate formula in worksheets, convert PDF to images, extract images and slides from presentations and perform many such operations on the documents in your Android applications. You can also integrate multiple Saaspose APIs to use a combination of features for best quality results.
RUFKM?
There is a need. There is a demand.

There is a MARKET.

Organizing donation data.

One of you dumb college motherfuckers better build this and make some money off of it. I know that's most of who reads this site. And I know I'm offensive to all you real readers... BUT I DON'T CARE. Cause there's money to be made, and it's so fucking easy. and you young dumb fucks can make money and also save some lives. SO FUCKING DO IT.

I throw these ideas out because I'm hoping you'll do it NOW.
The fibo_log routine is doing exponentiation by squaring as you suggest, but it isn't explained at all in the article. It just says it "uses interesting algorithmic strategies and is supposed to be O(log n)."
I assume you're talking about IE6 not supporting alpha-channel transparency and IE7 getting the gamma wrong?

Both of those problems can be easily fixed (in most cases) by using iepngfix for IE6 and stripping gamma information from your PNGs (which you should do anyway, to minimize the size of your images). I've been using PNGs successfully in my projects for several years, and during most of those years I had to support IE6/7. In fact, if you need to support any version of IE, PNG should be the least of your problems.
No, there's a different dictator there.
Your resume is really just a way to get an opportunity to talk at a high level with someone else who can evaluate your technical chops.

Here's my take on it: http://jp.eeqj.com/

Again, put enough stuff on there that you don't get disqualified, but don't just list the dictionary. I'd skip the "years of experience" part. That's not going to make or break it.

Focus on getting some sort of contact. Then do the normal sales thing. The document is really just a key to put into the lock to get past the filter.
I've long used this smell to identify companies not to trust with security. It's rare that I would be willing to create an account somewhere just to buy something, but a policy like this is always a deal-breaker for me, because I would expect them to get hacked.
Well, you obviously have to define "long" and "any" in that sentence. The famous xkcd cartoon evaluates a four word "phrase" (four common random words) as 44 bits of entropy. But he's not comparing it to a random alpha-numeric string, he's comparing it to taking an uncommon word and doing a couple of letter substitutions to defeat complexity requirements.

A real random alpha-numeric password (what I get my password manager to generate, since I don't have to remember it) 12 characters long is more like 70 bits of entropy. You'd need 6 random words to match that. Essentially for every 2 random alphanumeric characters you need another random word.
I'd prefer to pick a language for the job that can handle manipulating the data as well as emitting it in the correct format.

Having to duct-tape XSLT on top of PHP just because PHP can't cut it is rather perverse.

The only thing I can think of that's worse than "programming" in XSLT is ColdFusion.
Good grief, do you have to wear a helmet any time you're in the forest?
mega-search.me already looks like having problems.
While the password limit raises some concerns, this ^ is exactly what I took away from the exchange. Brilliant support!
Oh, I should have added I am in the Northeast -- so looking to open it in that region.
but good tip about the midwest nonetheless.
I doubt that he's a billiaire, but even so all his funds have been seized at the moment. He had to get friends and investors in to fund mega.
Why does Mega's security matter to Mega?

It seems like they've implemented encryption to provide plausible deniability that they're knowingly hosting pirated content, not to actually protect the privacy of users, the vast majority of whom will not be uploading confidential data.
Computer Science PhD trends
> In a factory in 1965, maybe

Depends on the factory, and I doubt it's much more or less likely in the 21st century than it was in 1965. In all times and places, you have enlightened and unenlightened people. In all times and places you have good and bad leaders.

"In every time, in every place, the deeds of men remain the same."
FilteredPaste.js - A jQuery Plugin To Filter & Clean Pasted Input
DecodeDC interview with Vint Cerf
Spherical 360-degree video, on a budget
Come on - when used with hedge and employ, it's dense jargon. And now you're being pedantic.
Free Online Computer Science and Programming Books
It just means that your stop-loss order is working on unsmoothed millisecond-resolution data when it should be working on smoothed minute-resolution data.
This is the rig that was used to film the videos included in Der Spiegel's coverage of the recent volcanic activity in Kamchatka:

http://www.spiegel.de/international/world/four-volcanoes-eru...
An Introduction to Linear Analysis
"50,000 freshly written and barely tested lines of code"... it sounds like they're doing it wrong.
"His" home, the one in Coatesville, is actually a rental. I don't doubt that he could afford to own it, but he was prevented from buying it by the NZ overseas investment commission.
Personally: both are amazing people, but only one appears to be a pompous dick. (Not knowing either, I only have hearsay and biographies to base some of my opinions on. Although, one is still producing data points)
Just because you can sell a product in large numbers doesn't mean you should make it! I'm looking at this in terms of how it effects their brand's image in the long run. If they stuck with a simpler product suite, I think that would be in better conformance with their brand.
When I complained to my bank about their 12 character limit they told me...

"12 characters is already hard enough to remember."

Sigh.
Those appear to be Stanford's own guidelines on the subject. As far as I know, there are no actual hard and fast rules and one has to decide on a case-by-case basis after applying the four factor test. That part of the statute seems to be there because legislators believed that making a bunch of copies of something for classroom use was likely to be fair use and there was enough concern over protecting that use case to mention it explicitly.

Incidentally, there are many sets of guidelines like the one you cite. Here are a couple others:

http://www.adec.edu/admin/papers/fair10-17.html

http://www.ala.org/Template.cfm?Section=copyrightarticle&...
It wouldn't take that much work to change markup languages, or fix the UI of something like mediawiki or dokuwiki to something that's more amenable to those industries, if they don't like the defaults. Mediawiki might be pretty locked into a database for page storage, but dokuwiki has a git backend plugin, and some other wiki software even supports git backends natively.
My favorite is the eAPIS password requirements:

https://eapis.cbp.dhs.gov/help.html#a7

Your password:

must start with a number and be between eight and twelve characters in length, and
must contain at least one of the following special characters:
Cannot include your Sender ID, and
Cannot repeat any character consecutively more than two times.
Edit: it's common for OSX to drop support for old hardware. It's also common for software to improve overtime with upgrades and bugfixes. Developers don't want to support old software indefinitely, unless you can do so with newer tools on newer hardware. Simply researching the limits of legacy systems is a massive waste of time, supporting them is a nightmare.

Try to find a modern version of some software on OSX 10.4, for example. Development has likely frozen years ago, meaning bugs won't get fixed, security is out the window, and everything sucks forever.
Five eyes push to declassify security vulnerability data
Yes, I and my coworkers could've sold the realtime trades of a petroleum multinational to the highest bidder, including ones that hadn't happened yet. That would've been easy, and would've been worth 100's of millions to someone. Not getting caught and having your life ruined -- that was scary and would've been hard. Now, if I was working for a sovereign power, like China, and my life was there anyhow, then pulling stuff like that in the US wouldn't be so hard.
bcrypt has a 50 char limit. You could always prehash(sha256) the password before passing it to bcrypt.
I can attest to this being the case. I mentioned it elsewhere in the thread, but we're in e-commerce and when walmart.com went down around black friday last year we saw a 20megabit jump in traffic until their site came back up... and we're only one e-com provider out of many.
Put an end to it and upvote the comment please :)
Metaspolit-like framework taps into 29M hacked passwords
If I were a bettin' man I'd wager that more people have access to the internet than to public libraries.

Also, no one ever snags that last book that you really need for class. (Instead publishers charge you out the ass for a digital copy you dont even own!)
Penance driven development
Considering their success so far I wouldn't be so sure.
Show HN feels more natural when you are launching something – you are wanting people not only to review and provide feedback, but also to sign up and become users of the product.
This is just my understanding having been lurking on HN for over an year.
Things we know are broken with UEFI and Linux
The naive recursive implementation + memoization would be a cool addition. :)
> You're supposed to put a phablet in your purse, not your pocket.

> I've seen guys with Notes 2. I really hate them

I'm a guy, and I really hate large phones too, but come to think of it, I actually do carry a bag around all the time that could be reasonably called a "purse," and this doesn't seem particularly uncommon behavior for guys these these days...

The main reason I hate large phones is because they're awkward to use, and awkward to hold, particularly with only one hand (and that's important, as there are many situations like standing on the subway where a two-handed "like-a-tablet" approach isn't practical or desirable). The size when I'm not using it is less important, though smaller/lighter is always good, of course.
Why does this only seem to be a problem in the USA? This doesn't occur in Australia/NZ but we still have patents.
With the same name, same logo, same sponsoring parent organization, held at the same university? I also distinctly recall a meeting where the executive director from the last hackathon, who is now running this one, informed the members former team that you would be joining on for this semester's MHacks.

Please, do explain how this MHacks is inaugural or different.
Yeah we noticed some people didn't get it right away. We tried a few designs and this one was the best D:
I don't think it will be too easy. For a taste, you could take a look at my "Haskell Fast & Hard" tutorial. If you signed for the beta you can get try it here:

https://haskell.fpcomplete.com/user/yogsototh/haskell-fast-h...

If you don't already have a beta account. You can try the original non interactive version here:

http://yannesposito.com/Scratch/en/blog/Haskell-the-Hard-Way...

I had the chance to be an alpha user of School of Haskell and I copied the tutorial to it. Clearly the interactivity provide a clear benefit.

Concerning the difficulty of my tutorial, it goes like this:

1 - very easy
2 - easy
3 - medium
4 - hard
5 - very hard
6 - annex is kind of brutal difficulty

And actually, there is at least five more level of difficulty if you want to "master" some advanced feature of Haskell.

But one thing that no tutorial is able to give, is the feeling of joy when writing Haskell.
It is something you experience only when doing your firsts non trivial programs.
Another example is gaining access to an offline backup, archive, etc.
and "they" don't need to break the encryption, they just need to steal a users password
I didn't see the documentary, but the book does build a single case, but it's mostly saying "please consider the many, many complex effects of the environment" rather than "don't consider other things."
just pinged you!
Did you consider Scrivener? I'm not sure about version control, but it's supposed to handle references and definitely handles the composition-from-smaller-parts thing. It's designed for long works. I used the windows beta for a fairly long school paper, and it helped a lot.
Thank you that's helpful! And totally makes sense.
Video Documents Thought In Fish Brain For The First Time
A business can't go to the founder as its own piggybank to get out of bad decisions. It's not only a legal and accounting nightmare, but it's bad for the business, too.
If Django isn't a shining example of a Python web framework succeeding then I don't know what is.
> Forget the password to the encrypted text file? Throw your life away and start a new identity.

Singularity Amnesia?
Late last year I was building infrastructure with some higher security requirements and was quite shocked at the IPMI situation - concerned enough to email Redhat (who obviously support lots and lots of clients on hardware from lots and lots of vendors) via a personal contact in a global security team there, with my concerns and some evidence related to our particular hardware vendor.

After some time to ponder, they got back to me with "your concerns look legitimate". Discussions followed, but I am not aware of any specific advisories resulting from this.

I also understand that recently there was an IPMI-related presentation at Ruxcon Breakpoint in Melbourne, Australia: http://www.ruxconbreakpoint.com/speakers/#Igor%20Skochinsky ... no idea of the content, though.

Honestly, I think the first thing is for vendors to be a lot more honest: if someone has root on your host, they can most likely trivially obtain root on and backdoor the IPMI controller. Once they get root on the IPMI controller, they can do anything they want on the IPMI LAN. This reality differs greatly from the 'dedicated' and 'separate' words used in vendor marketing literature and documentation, and is no doubt a direct contributor to insufficiently paranoid systems architecture, resulting in real world vulnerabilities in some pretty important systems.

Why do I say pretty important? Well, outside of remote KVM, IPMI is frequently used for node fencing in high availability (HA) cluster scenarios, which means that this technology is likely to co-occur with some fairly paranoid / 24x7x365 systems (air traffic control, stock markets, etc.). Attackers with a foot-hold can thus use IPMI-based vulnerabilities to (permanently) compromise such higher-end systems.

What are we as implementers supposed to do? Here are some ideas. (1) Run a relatively paranoid, receive-only, anomaly-based NIDS on your IPMI segment to encourage 'after the fact' detection of bad behaviour. (2) Run IPMI on a dedicated VLAN. (3) Run your IPMI VLAN on dedicated hardware (4) Program your network infrastructure to ensure that regular IPMI nodes on your average server cannot communicate with any other peers on the link layer (ie. other servers) except for the expected source of management operations (5) Make sure the expected source of management operations isn't running an IPMI controller (or at least, one from the same vendor on the same subnet) (6) Don't use IPMI at all

Honestly, IPMI can be very useful in some cases, though it's probably a massively unspoken vulnerability in some high end systems. As always, don't trust any single component... security only comes in partly-effective layers ...
Another smell is bizarre rules. Rank amateurs are quickly spotted by requirements not to use various characters related to SQL injection and XSS. The other week I encountered a site that whined about consecutive letters, case and numbers. (My password was randomly generated by a password manager.)
This isn't unique to PHP, by any means. Visual Basic was much the same, even in later versions where you actually could write well designed code if you knew what you were doing. The IDE, documentation and design of the language encouraged you to make bad design decisions, much like PHP.

.Net languages aren't immune to this either, particularly Windows.Forms and ASP.net. To write decent code in those, you basically have to fight the IDE and the framework every step of the way. ASP.net MVC makes it much easier to write good code, at the cost of being harder to user if you don't already know what to do. Your average newbie can't just point and click until he's half way there.

PHP has decent frameworks, like Symfony. They make it much easier to do the right thing, and harder to do the wrong thing, at the cost of being more difficult to learn.

Props to the Symfony team though. They're still trying to make something good out of PHP long after most other decent developers abandoned the platform on favour of something less newbie-driven. It helps a lot to have that kind of framework available, just in case I have to use PHP for something.

Edit: Accidentally said that ASP.Net MVC encouraged bad code, but meant it encouraged good code.
> Get a whole heap of passwords from random.org.

I suggest /dev/random or /dev/urandom, as it doesn't involve a third-party. You can xor with data from random.org, if that makes you feel better.

> Forget the password to the encrypted text file? Throw your life away and start a new identity.

Just print out the plaintext of your password text file, and store the piece of paper somewhere reasonably secure. I say `reasonably' because if someone were to gain physical access to your computer, they could install a keyboard logger anyway.
Have you tried using contracts in racket?
Using PGP sounds fine, but why trust a random (ha) website more than you trust a browser plugin?

Even though you generated a bunch (up to 100), what is to stop random.org from storing every one of those? Much better to just use pwgen or similar.

1Password allows you to sync the encrypted file via dropbox, so if you lose your access you'll still have the encrypted file, you just won't have any updates. And if you can't trust the browser plugin, you can't trust your browser either and no password scheme will help.
Yes, just hacking around can be useful for beginners. Dynamic typing like Python does (and not like PHP or Javascript) might be ideal for novices.

About design patterns: Lots, if not all, of the common design patterns for Java are just workarounds for weaknesses of the language, like lack of proper closures. So more capacity for abstraction would make them less verbose or invisible.
I feel like this is almost a non issue unless you're running a site that absolutely needs to run everywhere since the last browsers that shipped without gzip support were released in what, 1998? A significant portion of your users (according to O'Reilly's 2009 _Even Faster Websites_, around 15%) don't say they can support gzip even though they can. Just ignoring Accept-Encoding headers and serving only gzipped content is probably good enough for 99% of people and likely gives you slightly better overall performance on average than actually respecting whatever the request headers say.
A Lightweight Logger for C++
I'm not sure it qualifies as "xenophobia" per se (i.e. "intense or irrational dislike or fear of people from other countries"). The point seems to be that the politicians are acting against the interests of their own, American constituents, not attempting to incite an irrational, automatic mistrust of foreigners.

Also, usually, xenophobia is directed at people, not companies. But I suppose that can be a blurry distinction where law is concerned :) You are quite fair to point out that we don't know exactly what they will say yet. Ironically, when we do know, it will be far too late for outrage to change things.

Finally, I should point out that way back at the start of Obama's administration, there was an influx of litigators going from the RIAA to the DOJ. I believe you can find posts by one Ray Beckerman on that subject if you look for them and people have been noticing a trend ever since. I think people became more sensitive to the politics of hiring people at the DOJ after all the Bush-era controversies over that.

EDIT: Found one of the articles. Here's a post about that issue from 2009 -
http://recordingindustryvspeople.blogspot.com/2009/04/anothe...

From that article: "[Ed. note. I now know of 6 RIAA lawyers who have joined the Justice Department under the new administration. Under the law, these lawyers are all recused from involvement in any matter involving the RIAA or EMI, Vivendi Universal, SONY BMG, or Warner Bros Records. -R.B.]"
This $5 lamp is powered by gravity
Very surprised that Elon Musk was runner-up for founder. The guy is tackling some of the toughest, most important problems in the world that most fear of even thinking about. Not to diminish Kevin Systrom's accomplishments, but I just think that the amount Musk has accomplished with his (three?) companies is tremendous.
Any user input needs to be filtered, sanitized, validated and limited.
Please be my guest and pass any user input to your magic hashing function, don't cry about it later because due to some special circumstances / framework bug / language bug / buffer overflow / extra hidden utf char, your magic function opens a huge security hole. oh oops.
Flexible Screen from Samsung
The poor state of bank passwords is fresh in my head from working on taxes tonight. It's kinda sad that the message boards I use for non-sense are probably more secure than my banks with respect to password handling.

That said, I don't think Stardock gets a free pass just because a lot of banks suck at it.
http://www.nslu2-linux.org/
???
On the Obama campaign we made our donate pages 60%
faster and got a 14% increase in donation conversions.

Did they test this? For what purpose? We've known this is true since 2006.

http://www.zdnet.com/blog/btl/googles-marissa-mayer-speed-wi...
That is not something I would have guessed about bcrypt. I learned something new today.
I'm using Racket right now to develop a machine learning algorithm. The new math and plot libraries are absolutely fantastic. For the brave or foolhardy it makes a viable alternative to R, NumPy, or Julia. (I haven't used Julia. I have found NumPy impossible to install. I want to punch something every time I use the steaming mess that is R.) Racket is far more a real language than the alternatives in this space but it lacks their wide range of numeric libraries.

Racket is also a really interesting language to learn. Nothing else does meta-programming like Racket, or mixes typed and untyped languages (see Typed Racket). However the most fun I've had with Racket is writing machine code directly into memory and executing it straight from Racket.
> can be easily fixed (in most cases) by using iepngfix for IE6

It could be even more easily fixed by using GIFs instead. I assume that's what many people thought. Thankfully, IE6 is finally dead and no one have to worry about PNGs anymore.
What post was that?
Chinese Hackers Stole NYT Employee Passwords