skysight-inc/HackerNews huggingface dataset:
;; The particular issue of executing arbitrary Java constructors used
;; in the examples above no longer works in Clojure 1.5 when
;; *read-eval* is false. Even so, you SHOULD NEVER USE
;; clojure.core/read or clojure.core/read-string for reading untrusted
;; data. Use an edn reader or a different data serialization format.

From that comment it seems like the Java constructor loophole has been closed. With that gone, I don't understand why the reader is still dangerous. What am I missing?
"iOS 6.1.2, was launched on February 19th, 2012" - given it's had more than a year I'm not surprised it's this widespread. (ok really just pointing out the typo for the author)
"I took an iOS class last year and got completely intimidated by Objective-C. It felt like I had to write a lot of code to do simple things and in my mind’s eye any potential app idea I would want to work on was getting crushed before I could even take it seriously."

I want to call out this particular line: "It felt like I had to write a lot of code to do simple things"

I dived into iOS development full on a couple of months back, and have to say, after extensive experience dealing with Android, BlackBerry and PhoneGap.. the iOS framework is phenomenal. I have found that more often than not you will NOT have to write a lot of code to do simple things (the same may even apply for seemingly complex things!).

It takes a little bit of getting used to, but after it all clicked, I feel like an idiot for feeling intimidated at all. To those that feel intimidated by the thought of iOS/Objective-C, I suggest diving in and giving it a shot. I promise, you'll love it.
Clojure's reader is designed to provide the types of tasks useful for Lisps; specifically to take a string and convert it to data structures. However, like most Lisps Clojure has some special syntax that does various tasks at read-time like the #= tag that might not be safe to use as a webform processor, but it's critical to the way that Clojure works.

In Clojure 1.5 there are EDN functions that handle a subset of the Clojure syntax and parse strings into data types like numbers, maps and vectors (and others). It's meant to deal with data only and not "reader forms". I wrote a Ring middleware to handle EDN data and recently ported it to use the new 1.5 EDN reader.

https://github.com/fogus/ring-edn/blob/master/src/ring/middl...

It looks almost exactly like the old clojure.core/read-string except it will not execute any dangerous code.
iOS 5 user here: What is the state of maps in the new release?
[Luddite attitude, but it's the #1 reason for my phone, more than text/mail of any variety.]
Writing Your Own Xcode 4 Plugins
Keep in mind that this is a Clojure-specific issue. In Common Lisp, eval-suppressing macros should prevent this sort of thing (but I would not rely on that -- it is easy to accidentally create a reader macro that fails to check those variables).

Personally, I would only use something like read if I were reading a configuration file i.e. something that only someone with privileged access can modify. I would not even consider using read for arbitrary, untrustworthy data; it is just silly in this day and age. It may make the code look prettier, but the fact that arbitrary data structures can be created and the potential to execute arbitrary code is enough to keep me away.
As an American, I was always under the impression we were the puritans when it comes to pornography. How much popular support does this have over there? I'm also surprised this is something the European Parliament has the power to enact.
Or he wanted the money.
I don't get why it's called a "countdown", when the counter on the page clearly intends to count up...

Edit: original page title is "Java 0day countdown".
Check out http://david-smith.org/iosversionstats/
Starting a Company? It’s Okay to Work Part-time.
Sweet that you made your first app. But the fact that you made an app really isn't that novel, how about teasing us with what it does in the title instead of a now common place technology?

Tell us that you made the "Groupon of twitter" or the "foursquare of plurk" then tell us how you did it all with just node and MangoDB.
Jelly Bean for Android probably isn't coming to your phone.
Exactly. We have a generic serialize() method in our models to do common toJSON. In item views, where performance is critical, the view itself transforms a subset of the models properties to JSON.
Maps are fine, searching still isn't as good as google. However, since google maps is available as a separate app now, that is better than iOS5 maps, there's no reason to not upgrade.
Safari wasn't.

Also, nobody compromised Safari at Pwn2own last year.
None that I know of. I've never heard anyone in the news seriously suggest a ban of pornography.
I am going to rant about graphics here. The graphics on this game look 8 years old. A game doesn't need to look fantastic to be good but surely a new game should have good graphics. I am not talking about realistic graphics. Simply esthetically pleasing graphics. The graphics in the video look like something from runescape...

Looking elsewhere. Is this game not called 'Ultima Online' because Garriot doesn't own the rights? A sequel in all but name?

While the vision sounds promising I worry about broader appeal. Who is this game for? Tabula Rasa failed pretty badly. I don't quite see the appeal of this game. Most MMO's have a clear goal. Even if that is the same. "Level up, do quests, reach new areas, get gear." Perhaps I misunderstand but the goal of this game seems to be 'explore for yourself.' I don't think that is enough to pull people in. I have played the Ultima series. I still give Ultima Online a spin every couple of months and this new game doesn't pull me in..

The video left me feeling like the game is a time sink without getting the reward of getting little achievements like gaining levels and discovering new gear. The very things that make such games addictive.

When I saw the title my first thought was "TAKE ALL MY MONEY NOW." After seeing the video I think perhaps there is a reason why EA didn't take the franchise further.
Also super useful:

% man 1 pbpaste
I agree, graphics were prettier, but controls were sluggish and unresponsive. Jumping mechanics were a nightmare.

The series really started its downward slope from there.
SimCity 5 Review: “Simulating 1950′s America” in 2013
This couldn't be more accurate. Unbelievably spot on.
Of course CCTV has flaws, but for Ma and Pa shops with their own setups it's unlikely to be pwned by someone running facial recognition trackers or what not.

The outrage still is about the whom not the what. Most people are completely used to being filmed, what they're not used to is the data being sent to an organisation that is genuinely very, very good at processing data. I'd be surprised if most governments had data analysts and storage systems half as good as Google.
How hot does the road have to get before the self-healing process kicks in? Would warmer climates even need the induction machine?
I feel like Google is losing a PR war around Glass, almost as badly as Adobe lost its around Flash.

Glass will probably be adopted among adventure sports enthusiasts and niches of skilled laborers, but if they want to see them become accepted in everyday life, they need to do a better job assuaging people's concerns around privacy, fashionability, and information addiction.
I just just submitted an app as well and really didn't have any second thoughts about using APIs only available for iOS6. While a few users may miss out at first, users are upgrading fairly quickly and meanwhile testing and developing is so much easier on my end.
Patient has 75% of his skull replaced by 3D-printed implant
Is navigator.javaEnabled() (used in this page) accurate ? I deactivated Java plugin in Chrome's about://plugins (and restarted everything just to be sure), and it still returns true. Did I do something wrong ?
You know, I spent a good half hour on Google trying to find someone with the stats and didn't hit that at all. That's awesome thank you!
My two year on the Nexus S on sprint is coming to an end soon. So you recommend just buying the 4 directly and that will resolve the updating issues (Sprint was always behind the other major carriers due to 4G or something similar. I'd wait 2 - 3 months post major announcement)
Your sextant wasn't working?
Unless publishing the documents is what you need to be wary of. That was the whole idea behind Tor hidden services: to give people living in repressive countries the ability to run blogs etc. anonymously.
That is bad, but the real story here is that the EU is considering banning porn.

Are they insane? Really?
I kind of did something vaguely similar, except less cool. I wanted to learn a little python except there was problems with getting internet access at my house. I was only without internet for like 3 weeks but that didn't cause too many problems with learning (and could always go to a friends house if I really needed internet). The best thing that helped me when learning was the python docs.

I highly suggest downloading documentation. Just going through little sections of the documentation was a great way to learn. Not having internet was also sometimes a good thing as there was very little distraction.
Thanks jusben. Fixed :-)
So you wouldn't want to use the reader if safety is needed. Instead you would use the EDN data functions.

http://clojure.github.com/clojure/#clojure.edn
link to original document: http://www.europarl.europa.eu/sides/getDoc.do?pubRef=-//EP//...

submitted HN link: http://news.ycombinator.com/item?id=5340184
'Be safe out there' is brilliant marketing
I would love to see how this pans out with someone who has completely unpredictable style...
Quite simply, the likelihood of abuse is much, much higher with personal devices than with business devices.

This seems like it would be immediately obvious to anyone familiar with the public at large.
As an expat living in France I just discovered this thing called "droit d'image." I wonder how Google is going to reconcile their glasses with people's right to privacy (or right to not be recognizably recorded) in public. It's one thing to drive a few hundred Map cars around and scrub the images. It will be something else when thousands of these are deployed and everyone on the other side of the glass will need to have consent.
Agreed, it was rather fun when I remember playing it on my PC.
THIS IS AWESOME!!!!
Yes, they have said that, and with the best intentions. But one can never predict what will actually happen with a company in the throes of shutting down. The lawyers could kick out the programmers before they can throw the killswitch, or even obtain an injunction against doing so. Picture a hypothetical event where Valve enters bankruptcy and shuts down service, but an acquirer intends to resume it, but the case gets stuck in the courts for years. (IANAL and I'm exaggerating to make the point, but you get the idea.)

We're dependent on Valve's good will and intentions for Steam. There is no technical solution that the community can implement without Valve's blessing.

All of the above should be factored into the grandparent post about factoring DRM into discounting the price you're willing to pay. Valve's reassurance reduces but does not eliminate my personal DRM discount. By contrast but also comparison with Valve/Steam, the attitude of EA and many other publishers and platforms instantly pegs my personal DRM discount at 100%.
Looked up AAB...mind blown. Thank you.
Yeah, maps are seeing constant updates. I recently noticed that the area I live is now in 3D. Also I've noticed directions get fewer and fewer erros, so I'm pretty impressed how much it has improved despite there being no fanfare about it. No reason not to upgrade these days.
> From Lord British's Treatise on "What is an Ultimate RPG?":

> * Fully interactive virtual world - If it looks usable, it should do something
> * Deep original fiction - Ethical parables, cultural histories, fully developed alternate language text

This reminds me of the first Deus Ex. Wonder if they'll be able to pull it off.
Same here. Appears to be disabled http://www.java.com/en/download/testjava.jsp
The quality of graphics that we see in modern games has more to do with art assets then with programming of the game engine. Take a close look at the surroundings in your next game session. Every single thing in the game at some point had to be modeled by a person. When you're just starting with a project, you don't have those various and detailed models available. What you saw here was the "programmer art" version, which is actually pretty good for programmer art.

And apparently "explore for yourself" worked for Minecraft. Any style of game can be successful, it just takes a good gameplay element on top of it to make it.
Augmented reality Zombie Toy Attack 
fresh graduates first free android game with augmented reality with multiplayer option
You can tell if Java is running in your browser by testing it here: http://www.java.com/en/download/testjava.jsp
We developers get the credit when someone is using our code. The open source libraries usually require keeping the copyright notice at least in the source file. Anyone looking at the code will know who wrote it. Putting myself in the shoes of the Layervault people, I can understand that it's very hard to accept that someone is presenting as his own work something that it took me years to arrive to via iteration. Remember also the rage of Steve Jobs when he called Android a rip-off and of Dustin Curtis when people started copying the Svbtle designs. In all cases, I think the copyright law is not on their side, and perhaps not even any ethic law, but I can understand why they are pissed.
It made me actually check and make sure that I had disabled the plugin. I thought I had already done it.
Wacom Driver Hack
I think it was the kind of game that was so bad that looking back I have fond memories.
LA Robotics Club’s Low Cost MCU Blasts Past Kickstarter Goal
Building a respectful web crawler in PHP
probably bc they are saving those safari bug bounty's for iOS:
https://twitter.com/i0n1c/status/309585202810867712

i highly doubt it was because no one could pwn safari.
Voters in EU write to their representatives approximally never so getting 350 emails in less than a day could easily mean that there is a huge opposition.

People tend not to care about details of governship that only marginally effect their lives, but this is going to have a potentially huge effect.

Frankly though, I doubt it will pass -- anybody who votes for this risk alienating voters who normally wouldn't care, and there aren't enough proponents to make up for it.
I didn't say it was a good joke...
Sure, they probably did and I'm not trying to argue that it's impossible to use technology for evil. In fact, I'm someone who has protested and left a project because of the ethical implications it posed.

My position, and the only point I'm trying to make is that these technologies aren't themselves sinister. It's their uses that we need to cast light on.

Saying that no one really "needs" facial recognition or photo tagging is obvious. For that matter, no one needs an iPhone, or a computer, or the internet, or books. But, it does open up new possibilities to have those technologies to work for us. Before now, there's no practical way you could query your family photo album for all photos of aunt Beulah from 1994-1998. Is it needed? No. But neither is having any recollection of your relatives.

I'd be interested in seeing what kind of criteria you can come up with for dichotomizing good and bad technology purely on technical grounds. That is, without taking into account usage and motivations for usage. I mean that sincerely and not jest.

I do agree with you that there should be some sort of "guild ethics" we adhere to, but not that we should ostracize certain technologies. We should refuse to work on certain projects or for certain organizations when we know they will be used for wrong. Firewall technology? Good. Great Firewall of China? Bad.
That was our biggest peeve with Backbone views. We fixed it by having a `renderTo` method instead of `render`. Basically, insert the $el into the DOM first, then call render.

Another benefit to this approach is it makes replacing, disposing views, creating stacked views easy ... That is when renderTo tries to insert into a container and determines a view is already in place, it can call dispose or detach on the existing view. Much simpler than Marionette regions or other view management approaches.
WoW is a different case. It's sold as an MMO and very clearly doesn't have a single-player version.
> Since then, most every other RPG has focused more on level grinding then “role playing”, which has been reduced to a few initial character choices... Less open. Less immersive.

I don't think this team has played any RPGs over the past decade. Non of them are like this other than JRPGs. It lessens his project's credibility.
Works for me now. Thanks!
Killing failing businesses is evil because...
Wonder if the sample skews towards user with jailbroken devices. The community has been encouraging upgrades in case 6.1.3 kills evasi0n.
Big-O and related notation
America's Power Grid is Like an Old Car - Less Reliable, More Expensive
"Down" sounds sexier than "up". Also there's a connotation of impending... er... something with a countdown vs. count-up, which I guess makes sense for the anticipation of another vulnerability.
The story raises an interesting dilemma that many of us in the tech and academic realm are faced with quite often, when recruiting / hiring people to join our teams (whether at a company or in a lab or in an academic dept). Personality and indeed intelligence is a vector. How much of a priority do you put on the length of the projection of the vector onto the dimension(s) that are of direct relevance (e.g. expertise and creativity in theoretical physics) and how much weight do you put on the other dimensions (of which there are many)?

The risk of hiring a mad/strange/unstable/unusual "genius" is that dealing with the social aspects of their presence is not without its cost, even if there is a high probability they can generate the magic sauce. The risk of hiring a more well rounded set of team members is that you will end up with a pod of best friends who never end up generating the magic sauce.

Personally I favour the latter approach, I strongly believe that a more cohesive, well rounded team ends up being greater than the sum of the parts, and that quite often, a team containing a mad genius devolves into chaos.
Hmm..

Kickstarter Estimated delivery date: Oct 2014

Amazon authorized payment window: July 2013

This should be interesting...
In some of the examples that use OAuth, the tokens are things like GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET.

var params = {
code: code,
client_id: 'GOOGLE_CLIENT_ID',
client_secret: 'GOOGLE_CLIENT_SECRET',
redirect_uri: callbackURL,
grant_type: 'authorization_code'
};

Are these replaced somehow with real values? Where does that happen?
It's the bug (or feature) of Chrome:

http://stackoverflow.com/a/13648431/507072
They remain two of the best games I have ever played. Looking at the games the team have made brings back a lot of good memories. Wing Commander Privateer was also phenomenal at the time.
This may be the cynic in me, but I feel that's because exploits fetch quite a sum in the black market these days.
You can create a bookmarklet to reenable zoom on sites that disable it: http://apple.stackexchange.com/a/46973
An Open Closed Case
from collections import deque

class LRUDict(dict):

""" LRU queue with dictionary lookups based on the Python Cookbook RingBuffer recipe.
A deque-based ringbuffer expires entries past size_max.
Doesn't allow deletion for obvious reasons.
"""

def __init__(self, size_max):
dict.__init__(self)
self.queue = deque()
self.size_max = size_max-1

def append(self, value):
self.queue.append(value)
if len(self) >= self.size_max:
self.append = self._full_append

def _full_append(self, value):
self.queue.append(value)
return super(LRUDict, self).__delitem__(self.queue.popleft())

def __repr__(self):
return "%s(%s)" % (self.__class__.__name__, dict.__repr__(self))

def __setitem__(self, key, value):
if key not in self:
self.append(key)
return super(LRUDict, self).__setitem__(key, value)

def __delitem__(self, key):
pass
It has the word PROTOTYPE on the screenshots. I wish my prototypes looked that good!
I think that this is part of a bigger problem; a lot of people find design to be "easy" in that it's subjective - Client A doesn't like your work but Client B does. Can't even get a job in the field? No worries, people flock to 99Designs and Fiverr for cheap, tacky work that validates the crummy designer. Working for someone with no morals? They'll show you some styles they like and tell you they want it "exactly" like that, and if you want a paycheck, you'll do it and maybe you'll learn something about the technique that you can translate into more original works. Some people just honestly don't think they'll ever be caught or that they have a right to be "heavily-inspired" because "you don't own that".

http://youthoughtwewouldntnotice.com/blog3/ has been around for awhile, but now with Pinterest, Dribbble and other resources, it's becoming a lot more common to find the people who are making it difficult for designers to feel like they can truly stand out.

Outside of flat copying/pasting code, it takes a little more to get it to be functional. By nature, lots of developers are working in teams where collaboration/pair programming is promoted to begin with. You work on projects where it is essential to team up to figure out what's going on and what could make it better. In order to ensure the project continues to move forward and work, there needs to be a method to the madness that everyone understands. At the agencies I've worked at, while everyone was a designer, we all had our specialties and we didn't really work together much outside of talking about general branding guidelines/techniques, etc.

In design, all it takes is having the same software to mimic something. So when someone that is actually doing honest-to-goodness original, clever stuff gets jacked by the hacks-at-large, it is easy to get defensive and want to lock it down, particularly when you make your livelihood getting clients that like your style and it is suddenly watered down by clones and you're not getting paid to do what you made popular anymore. On Dribbble, I've seen it go so far down the hole that people have both claimed the original artist was the hack or said "Really reminds me of [hack]'s work.." on someone's copy of a copy.
Kaggle bulldozers: Basic cleaning
What if you buy a new device? Does the purchase live in your account into perpetuity, or are you out of luck when you upgrade to the "next" iDevice?
For something less trivial, one of my thoughts for Google Glass was that it could help people who can't recognize faces themselves.
No, but law enforcement can force you to log information with warrants, national security letters (US-only), etc. So they won't have records in the past, but once they are focused on looking for something, they can get information going forward.
What's the most popular programming language of 2013?
Interesting data analysis from CodeEval, and RedMonk who aggregated data from github and stack overflow.
Very, very recommended: Ultima Retrospective[1] by "Spoony". Goes into detail on the rise and fall of Ultima.

[1]: http://spoonyexperiment.com/category/game-reviews/ultima-ret...
Why is this a newsletter instead of just a series of articles online?
I've seen antigen before, thing is, zsh plugins, especially useful ones, are few and far between.

I have ~30 plugins installed with Vundle, and regularly add and play with new ones.

For zsh I have exactly two (syntax highlighting and one I'm forgetting at the moment) and I can't remember the last time I saw another that looked useful.
Isn't that a count up?
You can call a method with Mustache. You don't event need Handlebars to do that.