skysight-inc/HackerNews huggingface dataset:
If you're into WebGL, you could create a motocycle 3d-showroom and allow people to customize their virtual machines.
Not if you believe in variety. Unless you believe e-retail is fundamentally doomed, if you want diversity in your investments you ought to have at least some holdings in e-retail, even if BP is outperforming Amazon.
Not having the image provides even less certainty of security.

You assume that the image being there will make people less likely to check other aspects of the site, like the URL. But consider the average user. Spoofing and phishing attacks work because people don't check these things.

The security image is difficult to spoof and is more likely to clue average users in to attacks. Therefore, it is useful as a security device and is not worse than not having it.
Happily (or unhappily), the law is applied by humans rather than computers, and isn't very susceptible to that sort of thing.

Also -- 'being the copyright holder of a work that infringes copyright' isn't a thing. If I copy Harry Potter, by the act of copying I'm infringing JKR's copyright. That I assigned copyright of any original works I make to X doesn't make X liable to JKR for that instead of me! (I can't assign JKR's copyright to X - I never had it in the first place).

(Even if I make a derivative work of Harry Potter without permission - so there will be new copyright which can be assigned to X - that doesn't change anything. It just means that you'd need both JKR's and X's permission to copy it. It wouldn't make X liable to JKR).

Not to mention, works doesn't necessarily "belong" to the copyright holder. I may own a painting, but the artist still hold the copyright on it. Wrong's generally aren't about 'belonging', anyway. Most restricted things are acts (e.g. making a copy of a copyrighted work, or communicating it to the public). Possession of an infringing work is usually only a wrong when coupled with e.g. intent to sell.

(IANAL)
I found this highly amusing.

First Port:
Dvorak Version : https://github.com/cavedweller/YOU_ARE_DEAD
The problem with karma implementations is that they don't always encode for the best outcome. I am not sure what karma means on HN. There are some topics where you could very easily fish for karma by going with the prevailing thoughts in any given community. Post against the grain and loose karma. It's fairly predictable in most communities.

Then there are effects as I've seen in some of the Stack Exchange sites. One that comes to mind is ServerFault. Moderators and high-karma members with elevated privileges have turned that particular site into a nearly unusable and hostile environment for anyone outside a very narrow definition of what the "gang" wants.

This is an interesting effect because it encodes what a few privileged users want as opposed to what --conjecture-- a larger majority might be looking for out of the site. And, from a strict business view of the problem it reduces that audience and the applicability of the site/s by a potentially significant factor.

It's like having a mechanical engineering site where high-karma users have decided they only want to discuss hex bolts used by aircraft mechanics. You show-up to ask about hex bolts used on motorcycles and watch out!

Perhaps the ultimate questions --on a site-per-site basis-- might be:

- What's the design intent behind karma or user reputation?
- What is it you want to encode?
- How do you ensure that this is, in fact, encoded into the rating?
- How do you prevent users from polluting or de-valuing karma through
misinterpretation, petty/spiteful voting, "gang-like" behavior or other
degenerations?
- If karma is used to elevate user rights, how does it also affect
responsibilities? Does it impose a level of accountability?
- How do you keep karma "wars" from affecting your community? By this I
mean gang-like behavior by regulars who'll attack outside their pack
with the only tool they have, karma.
- How to you keep karma from affecting site business?
- Short of the benevolent dictator model, is there a better approach to
encoding user value, participation or relevance?

Not an easy problem to solve as most communities have discovered. For the most part HN seems to regulate rather nicely. We are all guilty of veering off here and there but eventually things come back to a reasonable center. Maybe it's because posts age very quickly and it takes a lot to stay in the first page or two. Other types of sites don't have that advantage.
CBS forces SodaStream to soften Super Bowl ad as to not offend Coke and Pepsi
That's the point. The idea is you have to figure out how to play the game.
>How would this work for banks? Besides reauthenticating when changing critical account info, should someone be forced to reauthenticate when they make a transfer? Or a transfer of a certain amount of money?

My bank does this. It also allows batching transfers, so you only have to reauthenticate once.
On the orig bitcointalk thread when SR first advertised there somebody suggested this kind of a network and there's 20 pages of replies why this wont work for narcotics the biggest reason being theft downline the second being arrested with a ton of drugs and authorities wont care you were in an anonymous network you are getting a major trafficking charge
Pinky RSI
Wait, what? There are no transactions that should be blocked? Preventing the sale of napalm to a triple-arsonist is evil?

I know I'm being a little extreme, but again- what!?!
"Wobbling Behavior"
My only objection is that it is unfairly hard for people with wide screens. I've made a narrower terminal because I got annoyed with having to play such a long level in order to make attempts at advancing the level (I've done it once by accident but not sure what I did).

EDIT: I've now figured out how to do it. Thinking I'd found all of the special rules I read through the source. There are some real gems in there :).

EDIT2: Huh, it looks like I was overthinking the level-advancing. There is no code for the problem I thought I was solving; I must have imagined it.
Lifestyle Businesses
Yeah, I know about that study. I'm still very sceptical that their estimates are realistic at all.
But doesn't some node eventually have to know the final destination of the hidden server?
Guilty as charged on that one! I'm incoherent this morning, and feeling a bit off colour. Thanks for being classy and constructive (no sarc).

Here's a fun experiment. Go to the article, and search for the terms 'bank' and 'monetary'. 'bank' appears once within 'bankrupt', and 'monetary' doesn't exist at all.

Any article on this subject is meaningless without including those. The Economist is like an alcoholic who has recently started to admit that their behaviour is sometimes harmful, but hasn't yet come out and said "I'm an alcoholic".
So, from my understanding, you're actually tasked with re-working their internet site as opposed to their intranet site. This is obviously a bigger undertaking than I had understood. I've worked with banks and insurance companies that have had teams and teams of people working on intranet sites hence my amazement that they'd leave such a task to an individual.

Having said that, especially considering it's a financial institution (i.e. you're standing between people and their $$$), I would highly recommend you select a tried and tested CMS that multiple internal people have extensive knowledge of. The fact that it's "open source" should probably not play a big part in your decision making.
Well he would have had technical authorization to transfer files to a CD (I've burned classified CDs myself). It's hard to prepare a classified briefing for your chain-of-command without a way to get the files onto the air-gapped presentation computer without network access, and there are known security issues relating to USB thumb drives so it would make perfect technical sense to require CD drives be used. You just have to label it properly, handle it properly, etc.

You could argue that the system could have technical measures in place to see that the CD-R was being filled, used repeatedly in a short period of time, etc. but that could be worked around too.

He's exactly right that trusting an insider is a perfect example of how not to do INFOSEC, but that was a risk the military judged was of lower danger than the risk associated with artificial constraints on the ability of the military and government to cooperate on anti-terrorism.

Pretty much any measure the gov't and military put in place in this area to protect against the future Mannings of the world will at least slightly inhibit their ability to detect and prevent future terrorist strikes, I guess we'll have to see what they've chosen to do. :-/
> I would suggest if you have this feeling that you don't have a good grasp on metaprogramming.

I don't think someone has to be an expert on metaprogramming to recognize the flaws in C++ (although I do think it helps).
Why should one worship a god that can't tolerate a pagan man that nevertheless lived a good life? If a god wants the man to be virtuous, why can't the man expect the same from the god?
The researcher's original work was meant to crack down on child pornography distribution, where the covert channel would be embedded in the download of a video or large file of some sort.

In the case of the Silk road, the police would probably need to direct the target to another website, and somehow convince the target to leave that website open. Harder, yes, although probably not impossible -- one might, for example, claim to be directing the target to a website where a PGP key is being distributed, and then use Javascript to open a window in the background (one of the many reasons why one should disable Javascript whenever they use Tor). It is generally considered to be good advice not to follow off-site links for something like Silk Road, but the reality is that most people who go there are not experts on computer security and do not understand how Tor might be attacked (consider, for example, this case: http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/ ). The police may not be world-class cryptanalysts, but they are pretty good at tricking people.
It depends on the people...
How is it worse?

And how exactly do you plan on serving the image to the user? Do you have a rouge router? Or a homographic URL?

And consider, if you do have either of those things, then you can do so much more than spoofing an image, like reading all traffic, including SSL.
Check out the hacks from #MHacks, largest student hackathon ever
harder than it looked!
The most accessible guide to Stoicism that I've ever found was recommended by Derek Sivers, and written by William Irvine "A Guide to the Good Life".

http://www.amazon.com/Guide-Good-Life-Ancient-Stoic/dp/01953...

I really highly recommend it myself. A bit of history of Stoicism, but also a lot of practical advice about how to put it into practice in modern times. (Always going back to the key Stoic thinkers.)
A well known and obvious false dilemma, how is that relevant?
> Translation: "If we eliminate any chance that a tab will be misinterpreted, can you think of a case where a tab might be misinterpreted?"

This is inconsistent with your initial statement:

> After nearly 40 years' experience in programming, I offer that (as to computer source code) tabs should be outlawed.

You said nothing about "programming languages that make whitespace significant."

Therefore, I was asking why you want tabs outlawed in other languages. If this isn't the case, then we're in agreement---but your initial post was misleading.
If they're smart, they'll just focus on compromising the site itself or using fake buyers/sellers. There are tons of ways to attack a site like that which do not rely on attacking tor.
I'm the guy who submitted this, and I can't even explain why it's at the top. I mean, I'm not saying it shouldn't be.. I wouldn't have submitted it if I didn't think it were of interest. But I didn't expect so much of a reaction.

Anyway, I don't think anything has "changed" I think it as just a case of somebody taking the initiative to post this, and it just happening to be somewhat timely (there was another thread discussing stoicism earlier) and being of interest to a broad cross-section of HN readers. shrug
w3m url > file

The 'large entities' referred to may well have access to bash and a text mode browser. And wget in mirror mode can duplicate the whole site of course.
I think it's a reaction to the other article on the front page that spoke about stoic philosophy.

It is. I was the earlier discussion, was reminded of this, and - since Stoicism has been on my mind lately anyway - I thought now might be a good time to share this, and that some people might find it interesting.

That said, I was shocked to come back online after a couple of hours and find this at the top of the front page. I thought it would get 4-5 upvotes and maybe 1 comment. :-)
DOSbox has been out for Android for quite some time. Takes a little configuring, but it works. I've seen people running windows 3.1 and win 95 on Android as well.

http://androiddosbox.appspot.com/

http://forum.xda-developers.com/showthread.php?t=1325643
This is misleading, since it means it's not a CPU emulator, however it's an emulator of Windows in a sense that it mimics the Windows environment and system libraries.
stealth aircrafts you mean?
Any article on this subject is meaningless without including those.

Eh, it's fine in my book. Banks may be the biggest issue, but so long as we're getting somewhere I'm happy with The Economist focusing on different aspects. Getting tunnel vision and saying "we must focus only on banks!" would ultimately be a loss, IMO.
>Grow their business? Who isn't shopping online with Amazon already?

The vast majority of retail purchases are not conducted through Amazon. Just look at Walmart's revenue compared to Amazon's. There is plenty of room to grow.
Not annoying at all.
You literally have no idea what you're talking about. I can't even argue with you because you clearly do not understand the definition of science, and so we're talking past each other.

"Replication is nearly unheard of?" Are you kidding? Read a journal. Seriously. You're citing popular news articles as if you understand anything about the field.

Oh, and I'm still waiting for my picture of gravity. But not here, because this thread is no longer worth my time to check on.
Somewhat annoying.
This reminds me of the terms of service of an old trolling site, adequacy.org, which forbade port scans, OS detections, right clicking to view source, etc.

"Adequacy.org gives permission for its servers to be accessed by HTTP clients specifically designed to represent the logical structure of the served documents in a user readable format, or by mail transport agents legitimately transporting email relevant to the site. Protocol handshake information generated by our servers in a network transaction with your computer and client program, including but not limited to HTTP headers or SMTP handshakes, are Copyright (C) 2001, 2002 Adequacy.org; disclosure of the contents of such protocol exchanges is strictly forbidden.

The HTML source to our web pages is also Copyright (C) 2001, 2002 Adequacy.org, and is only licensed to you for the purposes of reading and responding to Adequacy.org content, not for direct examination of said HTML source. Disclosure of the HTML source of any Adequacy.org page beyond the perusal of article and comment content is strictly forbidden.

Any means of accessing Adequacy.org which violates these permissions, including but not limited to telnet access to any port, port scans, operating system detection programs, or any client or client feature specifically designed to display HTTP header information in a normal network transaction with our servers, or to display or store the physical structure of the HTML documents served (as opposed to generating a user-visible display out of the logical structure), are access control circumvention devices and thus not allowed under the provisions of the DMCA. Use of such devices on our site shall constitute unauthorized access (a.k.a. "hacking"). An example of such client devices is the wget program, which by design displays protocol information and does not render the HTML document for user consumption; another one is the "Display Source" feature of Web browsers.

Also, we reserve the right to remove comments deemed inappropriate in tone, factually false, or in violation of the law. We recognize this is an extreme measure, and will thus apply it sparingly.

We will enthusiastically give out your IP address to the FBI. We live in dangerous times, and Americans have to watch out what they say."

Link is here: http://www.adequacy.org/special/tos.html
Pascal's wager assumes one can only hold a belief in 1 god.

However as it is trying not to make assumptions about the existence of gods then it really should take into account the possibility of infinite gods. Wager value now divided by infinity or negative as believing in infinite gods is tough on your wallet.
Not sure why this is on here really

Well...

but I will say I picked this up about a year ago and started reading it and was absolutely blown away by how relevant it still is 1,000 years later

I think you just answered your own question.

I can't remember who first recommended The Meditations to me, but I've found this work to be very relevant as well. What I wish I had, was more time to follow up with the writers of other Stoics. One day... sigh
I think the market punishes Apple because the market is all about future performance and Apple has reached a very high amount of growth and stability over time. That isn't to say it won't continue to do well, but when information is priced in, it's hard to justify the multiples. The businesses are very different--stock price is certainly not indicative of anything engineers think or care about.
Why getting involved in groups matter
Recaps like the ones that the Onion AV Club does seem to be a good place for this kind of discussion. Twitter, not so much.

No spoilers plz, I'm only on the second episode!
and Steve Jobs who said that quote in his younger years, but in his later years sued Samsung from stealing from Apple and patented eveyrthing.

The lesson being "Good Artists Copy, Great Artists Steal,"...but not from me.
"Kamen believes that the program could have 5 million women entrepreneurs running businesses by 2020."

So they're only hiring women? Why? Seems like a pretty sure way to violate local anti-discrimination laws.
Postel’s Principle is a Bad Idea
Wikipedia passes 3bn monthly mobile page views, aims for 4bn by June
Reading this code made my day, thank you.
See, there's a lot more to ruby than rails - I love and use padrino, since it doesn't include as much magic. It doesn't suffer from the rails vulnerabilities caused by the yaml usage. There's also a problem, that in ruby yaml is the to-go marshalling and config format, thats what allowed the attack against rubygems. But now, suddenly all ruby applications were in danger - even my apps, even though I don't use yaml. Shell-scripts, daemons, everything that uses ruby - whether it uses yaml.load or safe_yaml.load. Chef and Puppet were at risk - and those provide root access to hundreds of servers, machines that don't even run ruby apps.

And that is because gems are not signed. If gems were signed, all of this would be a major nuisance, but with limited fallout. Signatures would get checked, approved, done - no matter which attack was used to get to the gem repo. There will be more attacks, using other vectors - a kernel exploit, a webserver exploit, a mail account hacked into. And containing that fallout is way more important. And that's the lesson that needs to be learned by all language communities: Code distribution needs to be secured since otherwise a single attack puts the whole community at risk.

So feel free to point at the python docs and pretend that that's the lack of insight about yaml is what caused the problem. It's the spark that blasted the powder keg, but we were sitting on it long before.
PlayStation 4 revealed
Perhaps the author confuses what our media says we're interested in, vs what Americans are actually interested in. Most of us are interested in a job, getting to work, finding a spouse, paying our mortgage. Just like everybody else.
How did you end up with 110k USD? GDP per person is ~56k (assuming 0% growth over lifetime), which means with danish taxes there is quite a bit over 100k USD contributed to the government on average. Your numbers sound incredibly fishy (and no, I don't read danish)
It's worth pointing out that, in my experience, very few non tech professionals know how to bypass such an otherwise trivial security feature.

Disabling JavaScript is an option...but not one that I would even use given how that option is buried in different ways for different browsers.

Viewing source: very few people who have not done web dev understand that HTML is just text, never mind have the ability to not panic when they see a jumble of source. I haven't seen any recent studies on this, but I've heard using Ctrl-F is something the average user almost never does.

I'm not belittling the OP's point, just saying that if this implementation fools the originating blogger, it will fool most of his/her audience. Also, I continue to think (and wish) that using the web inspector was a basic web skill that was taught, and something more worthwhile than the majority of 5-week HTML basic courses I've yet seen.
ActiveModel Type Coercion and API Validation
The challenge isn't locating or identifying average users, though, since they'll gladly send you their name and address. The challenge is finding the distributors, who are (presumably) more careful to follow the rules. It sounds like this technique can't really do that in the general case.
When a startup gets cloned, the thing is that it is never just one clone, its is one hundred of them. If this startup is so lucrative and easy to copy, put your game face on the one hundred other competitors... As its your friend, you can work on his defense strategy or your offense strategy.
How Your Brain Tells You When It’s Time for a Break
"Give me the wisdom the see the difference".

But sometimes people (Aaron Swartz comes to mind) find the courage to fight and try and change things even when the odds of winning against large companies or the government seem remote.

Sometimes humanity advances when certain individuals fight against the odds. I wish I had their courage.
Semi relevant, but Aztecs did not use books in quite the same way we do. They were mostly illustrations or symbolic glyphs and the real information was passed on orally[1].

I've never heard anything about burning of such books though. Do you have a source you could share?

[1] http://www.plu.edu/~tother/essays/ethnohistory-how.html
I find them annoying if im trying to find them later.
One node will know the last link in the onion skin but it won't know that's the silk road's server or the outer layer of the skins.
I mostly agree with what you are saying. The reason we are having a discussion here is that there are at least two ways to look at the fact that Apple enjoys both mass volume and high margin:

1. Apple has an amazing business.

2. Despite 1 it is not sustainable to have both mass volume and high margin.

I am trying to come up with counter examples of point 2. Coca Cola, McDonald's and Microsoft come to mind, but they share a common characteristic in that these companies control a small but high margin part of their respective value chains. The end products that consumers actually buy (Coke, burgers and PCs) are mass volume and low margin.
Names: Decentralized, Secure, Human-Meaningful: Choose Two
Another cool thing, from a security perspective, is that there is actually a tool (Safe Haskell[1]) that makes it easy to disallow unsafe behavior and operate a whitelist of trusted modules. So not only is unsafePerformIO well-named, it's also trivial to restrict its usage.

[1]: http://www.haskell.org/ghc/docs/7.4.1/html/users_guide/safe-...