skysight-inc/HackerNews huggingface dataset:
ActionDispatch::Routing Rails Vulnerability
I generally access YouTube by typing "yo" into Chrome's omnibar and hitting tab to search. If like me you want to take this for a spin without installing the Chrome Extension you can edit the search engines list in Chrome to replace the search URL for youtube.com with

http://toogl.es/#/search/%s
Doesn't appear to include the original D&D set (those little books with the black and white covers), but a quick Google search indicates that PDF scans (if not originals) are floating around out there.
Pretty much a Tony Soprano-like racket.
Same thing as a bump key? Basically you cut down all the notches to the lowest setting (ie the deepest cut for that model of key), and then exactly as you described you put the key in up to the penultimate notch, at which point you apply rotational pressure on the key and knock the key in with some force (aka "bump" it in). The force of the insert bumps all the pins up, and the torque applied to the key catches the top half of the pin in the "open" position as the mechanism falls. If you catch all the top halves, the lock is breached.
That's assuming "you" are your body.

Here is what I believe instead:

"you" are the countless processes running inside your brain, interacting with each other. When these stop, you're dead. When you're asleep, they interact with each other less, and "you" are reduced. When you're in a coma, they interact with each other much less, and "you" are much reduced. But when you're frozen after your brain activity has stopped, anyone revived out of your body isn't "you" anymore. It'll be someone else with your memories. The only benefit of this would not be to you but to your family and friends (if they're still here) or to projects you're working on but want to have finished even if you won't see the results.

I suppose there's a chance cryonics can be useful, but only if it manages to "preserve" someone before their brain activity stops (which CAN be after the person is clinically dead, e.g. heart stopping != brain dead), and their brain activity continues at a very slow pace, but continues nonetheless.
Why Autowired isn't dependency injection
To resist a temptation you have to have it in the first place; people who don't have certain temptations don't really get to judge those who didn't resist theirs.

And then there is the fact that "temptation" and "aspiration" are both equally valid to describe anything depending on your personal moral compass. For example, how is being indignated about "criminal vandalism" that nobody directly affected seems to be quite as upset about not a temptation, too?
Google's fourth-quarter results shine after ad rate decline slows
You may be right and I may have gotten too zealous there, but more transparency is definitely needed as well as tighter regulations regarding the disclosure and involvement of funding parties.
It makes me wonder how strong the cylinders are. They look quite small, so it seems like with a tool shaped like a "T" with a wide top you'd be able to force a lock open.
Ask HN: Personal email hosting service on the cheap?
Now that google charges for google apps for small business, how do people go about hosting just an email address at their own domain on the cheap?

Many of the services I've seen (rackspace, fusemail) require $10 per month. Google apps for small business is approx $50 per year, There's got to be something better / cheaper for just email. (ideally sub $20 / year)

I'd like to find a reliable, well known, add and spam free, hosted imap server that allows multiple addresses (aliases) that point to a single mailbox.

Suggestions?
Unrelated - but did TC switch off Facebook as their commenting system? This is their first post where I see Livefyre comments instead of Facebook.
> So you would never use Satan.js?

I happen to find Satanic imagery a bit cool, so I probably wouldn't mind, but others might. Would you use a project called Vomit.js? Diarrhea.js? Ebola.js?

> And if your dad was killed by a gnu, you would only use BSD's?

Um, perhaps?

> I hope you like apples and windows

Apples and windows are relatively benign objects without disturbing imagery attached to them.

> How would you cool yourself if you didn't have sweat glands? Blaming pigs for being unhygenic is like blaming cancer patients for not having hair.

Who's blaming pigs? Pigs, their mud, and their parasites are simply unsavory to think of for many people. Likewise, bacon itself is so savory that my mouth starts watering and I can't stop thinking about salty fat. For others, bacon is either disgusting or something to be shunned.
That's what I was thinking. That would be quite nice.
Given how easy it is to fool the FDA, why are only ~35 new compounds submitted for approval each year? And why are only ~25 approved?

Note that the fact that trial results aren't released to the public doesn't mean that they aren't disclosed to the FDA.
Between this and the Safari story, I'm struck at just how deep Apple's internal secrecy ethos runs. The idea that there is that level of dedication to keeping a project hidden, not just from outsiders, but from almost the entire rest of the company just blows my mind.

It certainly explains how they're able to keep projects secret for as long as they do.
http://i.imgur.com/kaOa0G3.gif

Here's a version I found on reddit a while back.
I have a great justification, a son and nephews. Actually I have never stopped role-playing in ~35 years.

That said, Where's TOMB of HORRORS !
There's a big difference between writing your own code just to learn how AES works and writing code and then saying "we will protect your privacy using this code". The reason experts discourage people from writing crypto code is because it's Hard; even the experts get it wrong. Even if you ignore all the weaknesses you can create by using bad keys, there are still simple mistakes that will ruin you system. For RSA you need to make sure your key generation isn't subject to Pollard's p-1, Pollard's rho, William's p+1, Fermat factorization, Wiener's attack, and others. And then once you do that, if you pad incorrectly the whole thing gets blown up anyway.

This isn't someones little toy app, this is a professionally done, "we will protect your privacy" service with the government already breathing down their neck. The sloppiness they are showing in their crypto (or at least in their presentation of the crypto) is just unacceptable.
So Apple basically was Steve Jobs. Time to ditch some stock.
Apple's process hasn't succeeded in substantially mitigating that problem.
It'd make more sense to derive the key from the data. That way, if two files are duplicates, their encrypted versions will also be duplicates.
Locks are a relatively simple a fun mechanism to play with. Lock picking can be explained similarly. It's essentially simulating that key by popping the pins up to the shear line (the horizontal plane) and applying tension via your tension/torsion tool so the pin doesn't fall down. Then move onto the next one. If you get all pins to the shear line, the lock opens.

It's also a pretty cheap hobby to get into. Though the legality varies by country/state so do check into that first if interested.
How we became biohackers
The "MIT Lockpicking Guide" covers the subject nicely, if you are just interested in how it works. A slick gif would be nice though.
"90% fewer users means 90% less potential profit."

So, those companies could grow their profits by 10% by becoming cross-platform? I would think it would be much harder to tweak that installer to get 10% more conversions on Windows than to provide a Mac installer.

Also: it is revenue that they are leaving on the table, not profit. That makes this a slightly less favorable option, but still, I think a company would be stupid to keep even 5% extra revenue on the table.

I see two potential reasons why OS X does not have this problem:

- there aren't as many places to hook into the system. For example, Safari doesn't support custom toolbars (it might be possible to code something as a browser extension, but let's not wake anybody)

- the culture on both platforms is different. Windows users may moan about crap, but in general accept it; Mac users less so. See my earlier comment at http://news.ycombinator.com/item?id=5060019
On residential locks the tolerances on each pin's traveling cylinder are loose enough to allow you to apply shearing force on the pin by holding the lock tight (as if trying to open it) and quickly bump each pin up so they land on the salient edge of the entire cylinder block and avoid dropping back into a locking position.
What a refreshing article when I'm about to defend my PhD this Friday :)

My experience of the PhD was that it didn't break me but I come out of my studies having completely lost all respect for academia.

I finished my dissertation in about two and a half years (the main contribution and content of it) and then I waited for about three years to be able to defend it. No matter how often I pressed things and asked whether something was missing or lacking nothing happened (I actually blame my advisor). It wasn't until after I talked to the department head and said that I would not university registration fees (we have to pay them every year) unless something happened. Some other professor was put in charge and that made my advisor angry and everything got delayed again and now I'm finally finishing.

What bothers me is that I'm defending based on knowledge I had three years ago and I'm not allowed to add to it since that's not a part of my dissertation (and I've been really afraid of some other individual having published similar or same finding in those three years - I haven't really been following all research since I lost all interest in academia).

</rant> :)
There is a ZooKeeper plugin for ElasticSearch: https://github.com/sonian/elasticsearch-zookeeper
From the source this might help explain:

Nitesh - yesterday
Related, the flaws in the machining of the pin chambers is what you exploit while lock picking. You turn the lock slightly, then use another tool to push pins up one at a time, and hopefully when they come down they get stuck on the top of the lower pin chamber. Once you do that with every pin, it's unlocked.
I'm interested to see if using FRP principles in conjunction with Backbone makes sense. I love Backbone, but I feel like there are times I'm worrying too much about the DOM because I don't feel like abstracting out yet another subset of data into a model. If it was as quick and simple as calling a few functions (binding callbacks to existing view functions), then I feel like it would really clean up my code.
I'm there with you. I have to have music while coding. Thanks for the list of new (to me) music.
I don't get this. I install Java updates regularly and I've never had this toolbar installed. (I do agree that Oracle are jerks, however)
Any app that allows general web access must be given a 17+ rating. This includes any browser, as well as any app that happens to include an integrated browser for another purpose (e.g. a Twitter client that shows links in-app).

As for children having access to the built-in web browser, certainly not if their parents don't think full web access is appropriate for them.
I just wrote a quick explanation above, but let me know if you want more detail. Picking difficulty varies quite greatly by number of pins, number of security pins (some are tougher!), quality of the lock (the imperfections make it possible), and the tool/experience you have.

I'm also by no means an expert, just somebody interested in the hobby.
I'm pretty sure that at that time I had tons of music (using winamp) and photos on my computer (scanning was the way at that time).
Snip.it acquired by Yahoo – site to shut down
what exactly is that little dirt stain that moves from cylinder to cylinder supposed to be? is it supposed to represent tension or something?
Fastmail.fm
What's with the racist mentality?
Thanks for the explanation. Why wouldn't GMAIL, YMAIL, LIVE etc... not want this "pull back" function within their own systems - start small. Then overtime, maybe the protocol could be revised making this function interoperable.

Sometimes you just want to pull back an email and Gmails 30 second lab function is useless.
I can sympathize, I found it's simplicity nice at first. But it quickly wears on you as your codebase grows and you have to refactor. You can find seasoned Erlangers complaining about it's peculiarity often, whether they'll admit it's a problem or not.
I have no idea why a simple blog post would take 20 seconds to load--long enough to have its own loading bar!

Taking a quick look at the source, it looks like they're doing some sort of crypto. Very weird.
I am from Poland, currently living in the UK. In neither of those countries people floss, and I have never had a dentist recommend it to me. Lots of people brush and use mouthwash instead.
Now that you said it, it makes a lot of sense for Microsoft to invest a couple billions on preventing that from happening.
maybe you should try to learn what decentralized means.
My biggest issue with Steam on Linux is the load times. They seem ridiculous for no discernible reason. Based on my watch opening simply loading a game must read through 20 Gigabytes of files. Oh, wait. The game is only 14 G on disk. Maybe it's 14 gigs of ridiculously compressed data?

Connecting to servers in TF2 takes an eternity, too.
Interesting. What is that little gold-ish looking thing that moves from one pin to the other in this gif?
Zachary, today I was thinking along the same lines and I really really like your proposal!

How do you propose object-based views to expand beyond the generic cases in order to handle for example multiple forms, or hiding a field from a form and then adding that (for example request.user) after form validation, before save , or add some additional logic to a detail view?

In my opinion, IDS['slug'] would be neater than ids.SLUG

And now for something completely different:
An other idea of mine which keeps going around in my head is having addable forms, so you can do total_form = profile_form + company_form and easily validate etc. What do you think?
As mentioned in the last ten Mega crypto threads, security pedants aren't satisfied with the level of privacy that convergent encryption provides.
You need to enable Gmail labs http://support.google.com/mail/bin/answer.py?hl=en&answe...
If you are not super tight with your money situation I would go with the unpaid one. Sounds way more exciting and an interesting environment to experience. You will have enough opportunities for "regular" jobs after college so use the internships to take some risks.
It's actually the other way around!

Imagine we currently had a well-designed, scientific regulatory system. All clinical trial activity was transparent so that regulatory bodies and the public had the complete picture of the efficacy and safety of pharmaceutical products.

Now imagine pharmaceutical companies were lobbying government to allow them to instead filter their clinical trial data, suppressing scientists from publishing negative data, and only publishing positive data to support their products. They launched a site called http://www.sometrials.com, arguing that only publishing some trials reduced regulatory cost and burden, ensuring cheaper drugs for more people. Wink wink.

Then a modified version of your statement would make a lot of sense, imho: I am terrified of the idea that pharmaceutical companies are trying to compel scientists to do anything against their will. Private corporations don't have this right any more than they have the right to read your encrypted email.
I recently decided to port some apps to Android and Windows 8 to lower my Apple only risk. Diversification is good right? It's been a really mixed bag so far. 1 of my apps is doing better than it's iPhone counterpart, the rest might as well not exist. [1]

[1] - http://www.entrelife.com/2013/01/case-study-of-android-vs-ip...
Here's the line that makes me really uneasy about what you're saying:

> It is better for long term growth if kids are humbled at an earlier age

You don't humble a kid. That's not an action any person needs to take, ever. Instead, you expose them to the wonderful things in the world, and they will learn humility and be inspired and motivated at the same time.

If you "humble" them instead, they may learn humility, at the same time as they learn how shitty some adults are, and you seriously fuck with their motivation and inspiration.

I'm aware this may not be quite what you meant; maybe I'm reading too much into your wording.

But while I agree that false praise is bad ("kids are told they are prodigies"), the solution isn't to cut them down; it's to show them more of what's possible (and of course, replace the false praise with simple recognition of how their hard work is paying off, noticing improvement, etc.).

You want to build a drive for self-improvement in them; not convince them they're already at the pinnacle (as if anyone ever is...), nor convince them that they're currently worthless compared to the best (because it's not a competition) -- just notice how they're getting better at climbing, show how it's making their skills/lives/etc. better, and help them along.
Cracking tool milks weakness to reveal some Mega passwords
Hiring Salespeople Decoded: Interview with Kyle Porter from SalesLoft
It's the currently binding cylinder. With the right amount of tension applied via the wrench, one pin binds at a time, which is what allows you to set the pins one at a time.
I did this, on a 40k salary, in 2003. I had a $1k/month studio apartment in Hoboken NJ and commuted on the Path subway to lower Manhattan. I kept spending very low: never went to restaurants, never traveled, no relationship, no cell phone, cheapest available DSL internet at $30/month. For food I'd sometimes actually get ramen, but more often other cheap groceries like store brand cereals, pancake mix, PB&J. I had about $400/month disposable income and saved about $300 of it.

Adjusting from 2003 to today, the apartment might cost $1500 now, but a 65k salary is still better off than I was then.

By the way, one of the best places to live in New York is actually New Jersey. If your office is in Manhattan anywhere close to the Path stations, you've got a 30 minute commute from Hoboken or the downtown areas of Jersey City out to Journal Square. Housing is decently affordable there, and as a bonus you dodge the NYC commuter income tax.
Any chance you can add a subscribe by email form so we can be notified when you release new videos?
The UK system is reputed to be far less abusive than the US system. The US system put me through the frigging wringer.
You can still run all your Windows workloads in a virtualized environment under either Openstack or RHEV.
http://www.youtube.com/watch?v=sR7KnQ_5ZxE
I don't think digital cameras were particularly affordable at this time. My digital camera was $600, purchased in 1997 or 1998.
I have been wondering why it doesn't pay to build good places so thank you. Do you think that is the only way to tackle the problem? There must be a way to fund and build buildings where you make more money by building a decent one.
Vuemix lets you browse nine videos at once as you surf web shows. 
View multiple videos in browser and ipad.

Sample

http://app.vuemix.com/watch/e047ce74673073a3dee82855fb968eff
It's suppose to show you which pin is the correct one. The lock picker obviously can't know that's why he tries all of them.
How many ways are there to draw a cloud?
I want to address your last comment, about heart rate monitors being horribly inaccurate for you.

According to a large body of research (http://www.polar.com/en/about_polar/who_we_are/research_inde...), the Polar brand heart rate monitors provide basically medical quality data.

Have you really tried one of the new Bluetooth LE monitors, and what sort of problems did you have?

It's vitally important to me, because my startup revolves around the rock-solid, years of research that have gone into developing these devices.

Thanks for letting me know.
Wow, some people. You think you should get all the value of using Github and give nothing back to the community through public repositories? What would your response be to a customer that demands you work for free, telling you to recoup the costs from your other customers?
Pocket's my go-to tool for that. http://getpocket.com/
They don't seem to do that, though. Note that they claim that it's a random key and that deduplication is "much more likely" to happen when files are copied. If they would derive the key from the data in a deterministic way, they could always dedup and the previous statement (deduplication of copied files is more likely) could not be true.

edit: Clarify.
Install the Herp Derp YouTube Comments browser extension: http://www.tannr.com/herp-derp-youtube-comments/
I'm not certain I understand what problems you are alluding to. Scholar has cases, and for you as an individual finding a case is largely trivial.

If your interest is in getting and providing bulk access to cases, then yes, you have obstacles. But that is only a problem for a select few individuals/companies who care about this as a business or hobby. The end users you may be trying to service by offering access to the cases can already get access to the cases from Google for free.

EDIT: To be clear, I'm not intending to downplay or diminish the efforts of you and others to open up access to those older cases. I think that is great. All I am saying is that for the vast majority of people, the vast majority of the time, there really isn't a problem in finding cases online.
Mobile developer? Understand sources of network latency
I have an alternative approach (that is not incompatible with this one) that works well when one is not expected to deal with a lot of email not addressed directly to me: I only process email that mentions me specifically in the headers. Mailing list traffic of anything outside my most proximate working group is thrown into a pile of mail I read -- or don't -- at my leisure. Doing this, there's often not much mail addressed specifically to oneself.

This strategy probably has variable utility depending on one's role in an organization: triagers and connectors between groups may not be able to use this as successfully, for an individual contributors -- like me -- it seems to work.

This only works in organizations with reasonable email hygiene where:

* People don't expect you to respond to something where you are not in the To/CC list

* People don't use expanded email aliases as opposed to more typical mailing lists.

This strategy is not unlike how one deals with being subscribed to large mailing lists like, infamously, LKML (Linux Kernel Mailing List) people can just ignore stuff and read at their leisure.
Exactly. Read: There is no real deduplication of data. So if 1 file is reported, there's no way to track all the other copies, or automatically ban a specific file hash.