skysight-inc/HackerNews huggingface dataset:
corresation: I can't answer your post directly, so I'll answer my own. It's absolutely not vague handwaving. HTML or JSON parsers can't make arbitrary network connections. XML parsers often can.

XML remains the lingua franca or most enterprise systems and interchanges (meaning the ones that people are most interested in trying to compromise

That is one of the reasons attackers are so happy. They are not trying to compromise. They are succeeding. Show me a SOAP/XMLRPC web service and I will show you a compromised machine, with very high probability.

See, for instance, last year's BlackHat presentation about SAP. Root with 1 request. Granted, there was an overflow involved, but the entry point was XML. Many more instances of this are available (I've compromised tens of systems in the last six months through the "magic" of XXEs, but unfortunately can't talk about them).

http://media.blackhat.com/bh-us-12/Briefings/Polyakov/BH_US_...
I have to disagree - he was talking about the eco-system of clojure as well as the language.

We do get mixed up with complicated frameworks at the expense of simple (dare I say composable) solutions. Clojure is small and simple enough that it has not yet had the weight of working in a thousand different environments imposed on it.
I'm with you here. The RIM-161 standard anti-ballistic missile used by the US is quoted by wikipedia as having a speed of 9600km/h or 2.7km/s. Speeds in low-Earth orbit are about 7-8 km/s, objects entering from a solar orbit likely several times that. There is absolutely no way you would have significant success probability of intercepting it with a missile unless you knew the incoming orbit very precisely.

Just look at that dashcam footage: from entering the atmosphere to breakup was just a couple of seconds. On a very tangential orbit, no less.
Running a SaaS product on a dedicated server, needs a system administrator, and I can't afford to pay one, at least not in the first months.
Is everything on ecomom marked down to liquidate it? Because it looks like they are heavily subsidizing the prices on this stuff.

I see prices that are half or 2/3rds what amazon charges for the same thing. Plus they give free shipping as well for not-that-large orders.
Switch from Bamboo to Cedar for development
> Honestly that's only an implementation dependent detail.

Not really, no. JavaScript is a ridiculously high-level target for another language, and this introduces a huge amount of complexity in any effort to target it efficiently.

You can pare down JavaScript, as Eich seems to be banking on, but what possible technical reason is there for this? If what you care about is compatibility with Apple/MS browsers, then generate JavaScript from your intermediate bitcode/bytecode, and let those browsers be slow and complicated and have worse development tooling.
Is the Apple iWatch the next big thing?
It would depend on your needs. For eg: do you need a L/W/M-AMP server or something that can run Rails, or node.js. If all you are doing is wordpress themes and templates, I assume you want a L/W/M-AMP server stack.
AWS free tier is awesome and more suited to your needs. Once you start gaining momentum you will get charged, but hopefully you will be making positive revenue as well. Windows azure, they have a free 3 month trial, but it gets expensive there after. I personally use hostmonster, mainly because all the general server admin stuff that I do not want to worry about is taken care of for me. Their customer service is excellent as well. Other notable ones are Heroku, MediaTemple and Hostgator.
Ask HN: Could a new public marketplace for zero-day exploits be successful?
I understand that others have tried in the past to launch an "e-bay for exploits" but with limited success. The most well-known example is WabiSabiLabi which in shutting down wrote that "The international group had to stop trading its knowledge after controversy and legal threats surfaced from third parts and competitors." But is this evidence that the model is totally non-viable or do you think there could still be an opportunity for an ethical organization to vet buyers (to comply with international law and avoid selling to non-NATO countries or criminals) and do this responsibly and successfully?

Also, if anyone is particularly interested in further exploring this concept, please don't hesitate to contact me directly as well.
Dress Online Shopping Australia
Clothing and dress shop online in Australia with an extensive collection of clothing and fashion.
Gouniq.com is best online clothing store in Australia selling the best range of Designer Label & Boutique. Online Clothing Stores Australia, Online Dress Shopping Australia.
No, what's getting lost is that it takes an hour to fill up that fucking car. Thanks but no thanks; 10 minutes at a gas station is enough to make me want to chew my own arm off.
Google Now has a lot of promise, but I've been using it a bit since it was first released, and it's never actually provided me with any really useful information.

The promise behind Google Now is amazing, but it simply doesn't work well enough yet to be any kind of consideration. Here's hoping they manage to get the actual software in-line with the promise eventually!
This article reeks of deceptive phrasing. e.g. Instead of say nobody provided energy saving instructions he says nobody provided detailed energy saving instructions.

I also find it highly improbably that a Tesla engineer would advise someone to improve range by speeding up and slowing down.

Some of it does ring true. e.g. The driving in circles vs searching for charge station. But on the whole it still sounds pretty weak.
+1 for getting started on the cheap-ish with Rackspace. Getting a box setup with the built-in DNS is relatively painless. I was using Slicehost for most of my hosting before the merger and haven't had any problems since and the control panel/support is much nicer.
I believe the explosion was much higher in altitude somewhere between 6 to 30 miles, so video only captured the fragments of the asteroid.
Oh this is pretty nice of you. Unfortunately I have that timeframe booked for me, but I do wish you best of luck. Any chance you can make a recording and put it up and share the link with us when you are done?
Complete guide to deployment automation of DotNetNuke websites
Test Drive : DC to Boston in a Tesla Model S
To varying degrees you get this stuff in Austin, Portland, Seattle, Brooklyn...
And actually I've seen parties like the one angersock describes in places like Bloomington, Indiana and Huntsville, Alabama - it's a matter of knowing the right people, there's a network of social connections. I don't know if it reaches to Singapore, but it doesn't sound impossible to me.
+1. i love how easy `af update <app>` is!
It wouldn't be unrealistic to expect distro support if these were free software packages that distros could patch and package up for their own needs. But they aren't, they are proprietary blobs distributed through a proprietary app store that is only supported on Ubuntu. And that's the thing with proprietary software: you DON'T get what you pay for. Personally, I refuse to play proprietary games, they offer nothing to me and the experience is always negative. I think it is a farce to say that the technical benefits of GNU/Linux are not owed to the fact that it is an entire ecosystem of free software. If you believe this is a question of ideology, and you willingly disregard it, then what is the problem with Windows?
I faced a similar issue in past having a paypal account in UK. I fixed their ass as it was my own money and they had to pay me in 6months and then they closed my account. PAYPAL is actually becoming virtual beggars.

My question is simple as below:

Why do they let us accept payments as much as we want and when we make withdrawals that time they came to know we have bla bla information missing to be verified???????

Why they can not simply held/limit/block our paypal accounts on the very first transaction we receive so we make arrangements or leave using it???????

I have heard many many complaints where people's accounts got held due to verification pending etc but they all have one COMMON thing they only get their accounts blocked or held when the do withdrawals. Paypal the fucking beggars wait till we make money in our accounts by hard working and once we do withdrawals they make issue's. I believe paypal as a big time FRAUD itself. They should held our account or do not let us use it unless we have all the verifications done......... Do comment guy'ssss with LIKES or DISLIKES
Tesla's Elon Musk makes misguided attack on New York Times
Thank you everyone for input and taking time to answer my question.

Many of you suggested some companies with free tiers, but on a SaaS product, I can't use that. I feel insecure, don't know why.

I would prefer something semi-managed, or easy to managed, without ssh. I know a few basic linux commands, I know how to setup a lamp on a vps, but that's all.
When you've got thousands of dollars worth of tools at risk, you don't let software guess what to do - you can program most machine tools to damage themselves without a complaint. Software can help, but suggesting that a computer can produce a flawless CAM program for a CNC tool is like suggesting that computers should write web browsers or filesystems.

CAM programming is an art, and it requires intimate knowledge of the machine you're coding for if you hope to get a final product without too many trial and error iterations.
I use Node.js with Mongodb database integration. So js frontend and backend.
Yeah, w3schools is still showing up all the time -.-
The user experience with Google Now varies heavily depending on your usage habits and the type of phone you have. The only thing Google Now showed me for months were outdated, inaccurate weather 'forecasts' that made absolutely no sense (and opening it took more than 30 seconds on my old Nexus S). Boy, was I disappointed.

But if you set your Settings to the right items, you enable all your Search History, and everything else, and you have a modern phone like a Nexus 4, Google Now is amazing. Really, really amazing. It's definitely there and it works fantastically well, if you care to set it up right.
Yes, but: Mozilla disagrees because Eich disagrees, and Eich disagrees because he's built his entire career on top of his invention of JavaScript.

Is there really anyone other than Eich -- producing ANY platform -- that thinks that JavaScript is the correct baseline virtual machine to target?

Breakdown of low-level targets:

Google: Native, NaCL, PNaCL, Dalvik

Apple: Native, LLVM (eg, for OpenGL feature emulation).

MS: Native, CLR

Oracle: JVM, Native

Mozilla: JavaScript
Linux port is not tested at all !!!!
The problem is corporate culture and chasing secondary indicators of productivity (hours spent in the office, lines of code written, emails sent). The actual output of knowledge workers is hard to determine and bursty (you can spin your wheels on a problem for days but have a break-through in minutes) so people come to rely on these proxies.

I don't even think the problem is employers [in Silicon Valley]. Employees themselves, unaware of how best to show their worth, choose to optimize for these proxies because it's perceived as a safer bet.

That said, I think when I've worked 80 hour weeks before I've gotten twice as much done as 40 hour weeks, but only because I felt driven to produce a certain output, not because I cared about the hours.
It's cute. I've been using it for the past couple of weeks on a Nexus 4.

My opinion on it currently is that it looks promising but it's quite useless until there are finer controls on when and how cards appear (the controls there are now are really simplistic), and more importantly the ability to create my own cards, which would give me a reason to get back into SL4A.

As an example, the commute card that shows your distance from work/home is nice, but I have two jobs and commute home->work->work->home. I'm not sure I expect Now to figure that out quite yet, though it wouldn't be hard, but I do expect to be able to teach it that, which I can't currently do.
Cartoon about Climate Change
I'm skeptical there exists a system to automatically fire nukes at something and it has never had a false positive. Especially (chauvinistically) under control of the Russians through the fall of the the USSR.

I'm not sure a terrestrial power could do this without being way visible ahead of time.
FYI, you might find this useful: http://rewindhn.com/
Open up the patent granting process
Not anyone can dump money on a problem. You have to have the money first.

To be clear, though, I really respect the Gates foundation's philanthropy philosophy. They are about achieving quantified results rather than just doing something trendy.
more about it here: https://www.eff.org/deeplinks/2013/02/talking-software-paten...
Disregarding the 1000 tons meteor that blasted in the Amazon in 1930: http://star.arm.ac.uk/impact-hazard/Brazil.html
Any guides on setting it up right? I've got all search history and everything enabled, but it doesn't seem to be amazing yet. I'm not in Mountain View or even USA though - so more than likely that's the problem.
Programming has been taught by the public education system in my jurisdiction going all the way back to my father's time (using punch cards in his day), so maybe I'm biased, but I don't see why programming should be singled out specifically. There are a lot of industries hidden in much the same way that would be equally valuable to learn about.
There's no reasoning with you. I'll leave the history of all my comments here as well as my twitter updates with the same name speak for me.
It's Paul Thurrott. He's like the mirror-universe version of John Gruber who only boosts Microsoft stuff instead of Apple.
> If the car's manufacturer suggests multiple small recharge-charge cycles (using regenerative braking) to do that, why would I distrust them?

The answer is simple -- they're wrong. Regenerative braking cannot recover more energy than was lost in getting the car to its present velocity, so the advice to engage in stop-and-go driving emanates from someone who doesn't understand physics.

Phase 1: Acceleration -- energy is provided by the battery to the car's electric motors. The battery energy required is greater than or equal to the car's final velocity as shown in m * v^2 / 2 (http://en.wikipedia.org/wiki/Kinetic_energy).

Phase 2: Braking (deceleration) -- energy may be recovered from the act of braking and delivered to the battery. There are two choices -- either turn the car's energy into heat with brake pads, or turn some of it into electrical energy that flows back into the battery using a method called "regenerative braking".

Can the energy recovered by Phase 2 equal the energy expended in Phase 1? No, this is not possible -- because of the second law of thermodynamics, one cannot recover all the energy, there are inevitable losses.

Therefore (read carefully) stop-and-go driving is always less efficient than driving at a fixed speed. Always.

> I know almost nothing about the chemistry of the batteries, and even less about their control software.

I'm not addressing what you may or may not know, only what the facts are. And if someone at Tesla actually offered the advice to engage in stop-and-go driving in order to increase the car's range, someone needs to go back to school.
Making Sharing Better - The Quora Blog
Here's why from Mashable.com
http://mashable.com/2013/02/15/why-russians-have-dash-cams-c...
The definition of average[1] is not narrow. It could be mean, median, or mode or something else.

[1] http://en.wikipedia.org/wiki/Average
Tipsy Fish: When Anti-Anxiety Meds Get Into Rivers
Yeah, an impact crater wouldn't look like that. It would look like one of the craters on the moon with large amounts of ejecta thrown out radially around it.
It would also be nice to be able to tell it "I'm going to my girlfriends house after work". In that situation, telling me there's a traffic jam on my route home isn't useful information at all.

I also would love the ability (if it exists, I haven't seen it) to have it use geocoded reminders, like "remind me to get milk when I'm near the grocery store".
Dash-cams: Russia’s Last Hope For Civility And Survival On The Road (2012)
The problem with Office is that it is too good.

Until free/open alternatives like libreOffice or googleDocs catch up MSFT has no incentive to hold down the bloat or demonstrate good customer service.
> enable all your Search History

This is something I just can't bring myself to do. I disabled it years ago, along with all the other personalization options.

I don't mind giving them my location. I don't even mind them analyzing my mail. But I search for all kinds of crap, and I really really don't want anyone building a profile on me based on that.

The manual customization options in Google Now are sadly lacking. I've been able to add a few sports teams, but that's about it.

I suppose I could switch all my default searches to DuckDuckGo, then only use Google judiciously to deliberately train it. Hm, I think I will.
Yes, he picked a fight. This is an effective PR method, though it would be better if it wasn't.

It will make some people rally to his cause more, and it will turn some people off (likely the ones who wouldn't buy the cars anyway).

If you wanted to criticise the response you could call it cynical, but I think you'll agree that's a long way from being childish.
This is how people queue in Thailand [pic]
How to Achieve 12-Factor App “Config” Glory with Django Settings Files
So part of being a 12-factor app is storing your config in your environment (http://12factor.net/config). This is how I do that using Django settings files.
CSA Astronaut Chris Hadfield Q&A | uWaterloo Live Feed
I think he meant the fuel pump. It can overheat if fuel levels get too low.
I think you may be comparing apples and oranges. From what I hear, node is not so good for large, complex projects. It has a specialized niche that it's very good at -- lightweight servers that need to either support large numbers of concurrent users, or they have to be very low-latency. Rails is good for general-purpose web development.
Large-Scale Parallel Statistical Forecasting Computations in R
I'm not nearly as biased and I completely agree -- a must read for anyone breaking into the SEO realm
The commute card would actually be useful if only it would show public transit departures I can make, as it is now whenever I see the card it mostly shows subway trains that have already departed or a few that I can not possibly make it to in time.

Clicking the card only takes me to Google Maps where I get tons of irrelevant suggestions. Not helpful.

I do love the idea though. I'm hoping it will improve!
Zirveye Giden Yol Filmini izle - Türkçe Dublaj
We know students are taking their own lives because of the debt they think they can never pay back[1]. Start-up founders are in a similar position, indebted to their investors[2] and under pressure to deliver a return. Do start-up incubators like YCombinator and 500 Startups provide advice and counselling to founders, especially younger entrepreneurs just out of college?

[1] http://www.huffingtonpost.com/c-cryn-johannsen/student-loan-...

EDIT: Added to clarify

[2] A debt of gratitude, where there is a moral obligation to repay investors for their help and funds.
Digital Ocean looks interesting. But if you want a dedicated box check out Hetzner.de. 49Euros/month gets you a i7 Quad core beast with 16GB RAM and 2x3TB HDDs.

Moving from Linode (20$/month plan for 512MB ram) gave me something like 30x capacity increase for only about 2.5x price increase. Mind blowing.
Agree. Its not the most useful class.
Perhaps, but there's a pretty huge difference between "burn and coast" and "burn and brake". Plus that's for ICE vehicles, not all-electric. ICE uses gas to keep idling even when your foot is off the gas, so that strategy might work, but electric doesn't "idle".
They experimented with it, publicly declared it a success, but said they weren't going to do it, and proceeded to use the tech on the far side of the country. Pechora-Kama I think was the original project. Maybe they did, maybe they didn't, but the locals I've met (Kazakhstan) insist that they did.
Ah, no wonder you think 'filling up a petrol car to do 500+ miles takes <5 minutes.' You've only ever owned go karts with lawn mower engines that have weaker emission standards compared to their US counterparts.
bdsm-style desires appear to be more common than is commonly depicted in the media.

It has become only less taboo to talk about recently, coming to the mainstream in books like "Fifty Shades of Grey".
from the article it sounds like some of it may have gone
towards misguided inventory purchases, but why would a
company like this need its own technology infrastructure?

They're a retail company; by inventory, perhaps it means they spent all their cash on a big shipment of diapers and sippy cups.
I was a linode customer and I just bought a digital ocean box.

I was paying $29.99 (about 31 with tax) for a 768MB RAM box with 2.3Ghz cpu and 4 cores, 36GB storage and 300GB transfer with an additional $7.95 for backup ... so $40 all together. That eats a chunk of the $100/mo I make off my very small rails app.

For $20 ... I get 2.1ghz 2 core cpu, 2GB of RAM, 30GB storage (SSD btw), 3TB transfer with backups thrown in for free. So I save an extra $20 a month ... but if everything goes well, I'll probably shell out the extra $20 to get a 4GB box if the next 6 months with Digital Ocean go well just so I can be with in a better server neighborhood.
The infrasound detectors mentioned in the article can supposedly detect a 1-kiloton blast anywhere on earth [1] (page 15). This meteor was "hundreds of kilotons".

http://www.ctbto.org/fileadmin/user_upload/pdf/ISS_Publicati...
I'm actually surprised that location-based reminders aren't already part of Google Now. It seems like a really natural feature given everything else it already does.
This is kind of hacky but...

If you're willing to schedule a Google Calendar event for wherever you want to go - and give it a location... Now will actually figure that out for you. It will tell you when to leave to get to that event (and forgo telling you the commute time to home).
You should be able to get the first by setting an appointment in your google calendar. It certainly gives me a heads up for traffic when I set things in there for destinations it recognises.
An alternate explanation that doesn't involve a fantasy world where Brendan Eich issues oppressive decrees from his throne of skulls:

Maybe Mozilla dislikes NaCL because there's actually a lot wrong with it?
Galaxy88 Agen Bola & Bandar Bola Indonesia
Bandar bola , galaxy88 merupakan agen bola dan bandar bola yang menyediakan permainan taruhan bola seperti sbobet dan ibcbet. Untuk dapat mengikuti permainan sbobet dan ibcbet anda harus mendaftarkan diri anda di bandar bola galaxy88.com
Galaxy88 agen bola & bandar bola indonesia

Kami telah menyediakan customer service yang handal yang akan membantu anda dan menghubungkan anda dengan permainan sbobet dan ibcbet , bandar bola kami akan menyediakan account sbobet dan ibcbet yang bisa anda gunakan dalam permainan sbobet dan ibcbet. Segera daftarkan diri anda di agen bola galaxy88.com.bandar bola kami siap melayani anda 24 jam nonstop sehingga kapanpun anda bisa menghubungi kami.
Why You Should Never Have More Than 9 Browser Tabs Open
Oh how I wish I could settle down to 40 hours a week.Im actually looking forward to it. Currently work about about 60, and thats without counting the extra work I do on weekends. Anybody got a remote position for a Python guy? :)
Unlike student loans you can always declare bankruptcy if startup related debt is unmanageable so it's only really an issue for older founders who have actual savings.
Yeah I think it's worth it once we have the rust-based one.

I mean come on, Firefox isn't even distributed in 64-bit as an official option. It's really on it's last legs waiting for the next gust to carry it.