skysight-inc/HackerNews huggingface dataset:
I don't understand. Aren't there cross site scripting restrictions?
Yeah, totally. Not to mention that you basically can't leave your machine powered on and unattended anymore, lest the operating system decides to get frisky and update itself without asking first. And still worse are the times when you're right in the middle of something and the machine declares that it WILL reboot on you, and there's no two ways about it. You are on the way to destruction. You have no chance to survive make your time.
So how do you prevent this?
The DDoS that almost broke the Internet
You're quite right. Bizarre that it didn't even register. At least that explains why some people have picked up that habit.

Crockford himself seems to have abandoned the habit if you check his github code.
There are quite a few options available from the stand-alone, like SpiderOak, to things that sit on top of Dropbox, such as Boxcryptor.

What I haven't seen is a comprehensive security review of these alternatives. There could be bugs, flaws, or they could outright not be doing what they claim to do.
Ask HN: RSS Feed Sync (Google Reader alternatives)?
OK, so this is another Google Reader alternatives question. I know there have been a few discussions regarding this already. However, they all seem to focus on finding an alternative client to view the feeds. This is not what I'm looking for. I'm quite happy with Liferea (and more recently Canto) on Linux and FeedDeamon on Windows. What I find the invaluable about Google Reader the ability to keep my various clients in sync (and particularly the read status of entries, as that's not something one can replicate by shoving an OPML file into Dropbox-- which is my current plan at the moment).

Does anyone know of an alternative (ideally, free) service that would let me do that?
In the picture you see Riot Police, ‘Mobiele Eenheid’. A SWAT team is called ‘Arrestatieteam’ in Dutch http://www.svenvanbeek.nl/layout_imgs/632011/SVB_Arrestatiet...

I think they shopped the photo to illustrate their story -- they’re not claiming it’s genuine I imagine (after all, apparently it took place while they were asleep).
New attack methods are not the problem. If there is new technology there will always be a new attack method. Right now the existing attack methods are the problem. Specifically, that technology is being developed using the same lack of basic security standards and thus the same old attacks keep working.

SQLi should not be a thing. At all. It's the most trivial fucking thing in the world to validate data before you use it in an SQL query, and people get it wrong, every single day. Security isn't hard, it's just tedious.
I don't know why this got downvoted. It was a legitimate question. I've been involved in patent filings and unless you are a one-man operation, there are always other people that contribute to the key insights needed to come up with a novel, useful invention.
Check my other comments regarding embedded software development in C/C++.

There are tons of plugins even for Arduino, Lego, etc.
How not to use lambdas in Python
Yes, that was the second sentence I forgot to type. There's some need, but probably not one that Apple deems large enough to necessitate a new product category.
Sure Igor the dentist is about $400 for two cavities. Not joking at all. Ticket about $1,200 - accommodations about $800 for a week. Less in SE Asia.
Everything I Make is Terrible
Website that sells to billionaires
www.mr-butler.com

Is there a recession??

According to Mr Butler the recession is long dead and we now live in a world of billionaires.

With items reaching $1 billion Mr Butler isn't for the average Joe. Aimed at only the super rich - Arabs and the Chinese; Mr Butler offers only the highest luxury items including supercars, watches, super yachts, planes and homes.

So, if we win £110m on the Euro lottery we could maybe buy something from Mr Butler!
No, OpeBTS does the GSM related DSP. You get a stream of I/Q samples from the USRP, which is more or less just the digitalization of the baseband. OpenBTS carves the time slots and "frames" out of this, does the GMSK de-modulation and similar stuff.

Note that the lower layers of GSM is very different from e.g. ethernet. Once you get past all the very gory stuff up to layer 2, the concepts are pretty much the same though.
Google brings real-time NYC subway schedule data to Google Maps
Is there a mirror of the image? Ironically enough, that server is down for the count.
> Just a minor little feature that most people would use only occasionally in their objects.

Yeah until you have to work with java's Bignums one day, then you start wanting to choke people to death.
Pay for higher education for all citizens, stop teaching to the test in primary education and actually value critical thinking. Skepticism and curiosity need to be the key tools of our society, so that people can discover for themselves what the truth is and whom they agree with politically. Education would also lead to more skilled laborers and should help us compete in the global economy.
I mean the syntax is homogeneous, I agree the styles in use today certainly aren't!
Yes, sounds like the free market worked great for the customer!
Oops! Exception Encountered
they are uniforms of the Riot Police, not SWAT.
I don't think customers in the US and UK markets are addicted to handset subsidies -- they just don't know any better. I recently moved to an MVNO that uses the T-Mobile network and three-months in I really couldn't be happier. More than that, everyone I share the story with is extremely interested in my experience. It's really just a matter of time.

There are two hurdles that I see: First, the lack of cheap, available, unlocked phones. I can afford the upfront cost of a Nexus 4, but I know many relatives who cannot. Even so-called "dumb" phones run $100 or so and selection is extremely limited. Second, many professionals I talk to get their phone and service from their company. As we all know, corporations are slow to change especially when it comes to telecom (evidenced by the sheer number still issuing BB phones).

I see T-Mobile trying to address these hurdles by bringing a trusted brand to the no-contract/non-subsidized market. I hope it works out for them.
Decompose Run-on Tests
Who is "their"? This is NATO we're talking about. To my knowledge, NATO purchased 5 surveillance drones a year ago, and one of them crashed in January. So they're down to four. And I don't believe there are any NATO drone-executed kill operations known to have occurred.
I hate it when that happens to me! I've had a quick google and nothing jumped out.

Thanks.
Depends who's running it. :)
It depends on what income level you're talking about. Many low income people can't afford insurance and never receive healthcare until something catastrophic happens, and in that case they go to the emergency room. Hospitals are required to provide treatment (though there have been scandals surrounding this in the past), and so they will and then afterwards just bill the uninsured low income patient an insane amount. Debt collectors will then hound the individual or family for quite a while afterwards. Its a very efficient system. ;-)
That is precisely what the NATO document in question is specifying.

However, they also include civilian 'hacktivists' who engage in cyber attacks against an enemy state during existing armed conflict.

[edit: clarify civilian angle]
A few things going on here,

1. According to Business Insider (BI), PayPal is using Fuel from Mirantis to manage its OpenStack deployment.

2. BI also announced that Fuel was released on March 25 under the Apache 2.0 License. However, the fuel website points to a form that appears to give free access to fuel under a creative commons attribution, noncommercial, share alike license, with additional licensing options available from Mirantis.

3. To top it all off, the CEO of Mirantis contacted BI and said the information about PayPal migrating over was incorrect and based off of second-hand knowledge (as seen on the update in the bottom).

4. BI also spoke to paypal who stated they are diversifying their VM infrastructure to "enable choice and agility", not replacing VMware.

So, based on all this, it sounds like what really happened is PayPal decided to implement OpenStack to allow for a more diverse internal set of tools to develop infrastructure. A miscommunication occurred somewhere, which resulted in the BI and Forbes story.

http://www.businessinsider.com/a-dangerous-sign-for-vmware-p...

https://fuel.mirantis.com/
Google Made Sweden Delete the Word ‘UnGoogleable’ from Its Language
It makes it pretty fucking likely.
As the article discusses, R has a steep learning curve. Mastering R requires knowing dozens of commands and tricks, but once you learn those the language becomes very expressive and quick to work with.

I agree it's frustrating. I've been working with R on and off for more than five years and almost exclusively for 1-2 years, and I still need google every ten minutes to remember some esoteric command that is perfect for the problem at hand. In my experience this is still quicker and less error-prone than python, which often requires you to effectively roll out your own solutions for small data processing needs.
Sharding with the Django ORM at Disqus
True. However, there is value in a company like Amazon licensing or creating their own suite of tests like those performed by this researcher that would warn users if they are likely exposing files publicly that they probably shouldn't be exposing. e.g. "We found that the following files appear to contain password data and are publicly viewable. Are you sure you want these files to be listed publicly?
I don't think it's meant to be representative of their surveillance footage.
"Casualties of war" are, like it or not, a given. In war, if X is an active lethal threat, and the best expedient option is to destroy it ASAP, bystanders caught in the destruction are deemed acceptable losses. If a program running on your computer unbeknownst to you is doing something causing grave harm to others right now, those being harmed have the natural right to do whatever it takes, including at least equal harm, to make it stop.

In fact, that's the whole point of war: all other viable options for self-preservation (personal and national) have been exhausted, leaving only killing people and breaking things until the threat stops.
Of course not the detail that would actually make it interesting, the price.
How I Won a SXSW Pitch Contest
Just a small clarification, you can't carry bitcoins with you either.

Bitcoins are not little pieces of information you can hold on a thumb drive, but an agreement by the network that a certain balance belongs to some address.

You are absolutely tied to a server for transactions, and there is a trusted third party required. That third party is the bitcoin network itself. It is impossible to make a bitcoin transaction while offline because making a transaction means updating the state of the network, not merely giving somebody information.
You can get flagged for much less. (I believe the single transaction limit is more like 5k)

But they can also flag smaller transactions that appear to fit 'structuring' patterns. So fairly small innocent transactions can and do get erroneously flagged.

(Structuring being the practice of breaking up 'large' transactions explicitly to avoid being flagged.)
Oodles of improvements to Chrome’s spell checking
Amazon uses a Wizard-type agent at certain support levels that scans your setup and builds you a report of everything you can save money on and security issues, etc.

http://aws.amazon.com/premiumsupport/faqs/#TAwhat
People still screw up by failing to anchor expressions in Perl and Python, however.
AWS actually already does proactively monitor and send out alert emails to customers who have LIST enabled to Everyone on their S3 buckets, which is a good thing.
Equality T-shirts via Teespring...Buy If You Support
Only if it's cash:

"Banks, for instance, are required to report all personal cash transactions exceeding $10,000, as well as suspected incidents of money laundering, loan fraud, computer hacking or counterfeiting."

The article mentions there are about 15 million such reports every year. Compared to the volume of financial transactions it's tiny.
'Security experts' are full of it. Root DNS servers have seen attacks on the same scale regularly.
19 Year Old Flees America and Skips College to Bootstrap a Startup in Bosnia
Also, AWS usually notifies the account owners in such cases. I remember getting at least 3 such emails across all the AWS accounts I have been an owner of.
Intrade: To Our Customers... There is little new information
I think that it is intuitively quite clear, that it is possible for 'cyber operations' to be part of acts of war. [1] And the perpetrators are therefore combatants and legitimate targets. But since I read P.W. Singer's Wired for war I have the strong feeling that the second order effects of 'cyber' and drone operations are quite poorly thought out. So for example a drone pilot is by this standard a combatant. And this reduces the protections international law has for his house and the civilians within ( his family).

So I think, that the dominant military power ( or in case of the NATO, military alliance) should try to limit the use of potentially disruptive developments, already out of self interest.

[1] I will not argue in this about the morality of war or the logic of warfare. Here I will simply argue within this framework.
I don't see how the source is relevant to my opinion. I agree with it because I'm capable of critical thought, not just because of the source. It's obviously opinion.

I think you have a different definition of objectifying than I do. That's fine. I'm a Buddhist, so I have a very liberal definition of what it means to see something as an "object".

Phrasing and context is critical, of course. If someone tells me I'm pretty and I don't know them, it's awkward and creepy. If someone I've known for a decade tells me the same, the comment is colored by my understanding of what they mean. If someone tells me that I'm a beautiful person, that's less objectifying than telling me I'm beautiful. If someone tells me that they enjoy being around me, that's unambiguously a compliment. They're commenting on their own state of being instead of commenting on mine.

It's complicated. I probably shouldn't comment on this further since it is something I've been thinking about pretty hard for a long time and my conclusions are not necessarily intuitively obvious.
Heat map (or rather dirt map) of Seattle restaurants
> You can import contacts from Facebook or your SIM card, but not from Gmail

Thankfully gmail contact import landed recently
Retail store charges online shoppers $5 to browse and it's a good thing
Yes, probably. Thanks!
How to Look at Your Genome: Close-Up or Wide-Angle?
What you need to know about the world’s biggest DDoS attack
Also, "doing it right" is an illusionary dream when your software interacts with the real world. In my opinion, it is not true that most code complexity comes from being lazy about code structure and simply not caring whether "models know about my views or not". This might happen sometimes but is usually easy to fix. It makes up a small percentage of code complexity.

There is an impedance mismatch between the way computers work and the way the real world works.

Software works in clear conditionals, numbers without any uncertainties, events that flow deterministically based on relatively simple rules.

The real world works in probabilities, half truths, imprecise numbers, special cases, partial information, irrational actors and deliberate rule breakers.

When you start writing a new piece of software, at first you tackle the most common cases of the real world. At this point it is possible to write clean code and well defined abstractions. However, eventually you are going to get users that will find that your software is too simplistic and doesn't take into account common sense exceptions, doesn't give them enough flexibility to deal with partial information and doesn't allow them to act according to unwritten exceptions to the rules. You have two choices. Either refuse to bend your software to the real world to keep code simplicity or start coding in the exceptions that your users desperately want.

Computers don't understand common sense so you have to translate all these exceptions into well defined rules and heuristics even though this does not reflect how things work in reality. Because computers don't think probabilistically, these heuristic tend to be numerous and complexe and difficult to deal with.

The main jobs of programmers in my opinion, is to manage this complexity so that their programs don't become too unpredictable when the thousands of exceptions interact together in unexpected ways. It's quite the balancing act but I think the best developers are those that don't back down and are able to face these types of problems. Sometimes this means refactoring some exceptions out of the system, or moving it somewhere where it doesn't cause unwanted interactions but sometimes it means leaving it in and managing it as best as you can so that your software can deal with the world as ambiguous and fuzzy as it is. A developer that ignores the fuzziness of the world in order to write clean code, is naïve and ineffective in my opinion.
I work as a Deputy Returning Officer for elections in Canada. This role (simply stated) involves distributing and counting ballots at a local polling station, and ensuring the Elections Act is followed. While I do not support disenfranchising the mentally disabled from voting, it should be recognized that often its a parent, spouse, or caregiver who is the one voting and making the choice for the mentally disabled voter. This can mean they are essentially voting twice, or more if they are assisting multiple people. In one case in the last federal election, I refused to allowed a man to assist both of his children to vote, instead his wife had to assist the second child. This was within the authority of the role and there was no problem.

As long as there are some safeguards in place the mentally disabled should be allowed to vote, or make the attempt. If you sat there for a few days and saw who came out to vote, you may rather wish they too weren't having an influence on helping to elect the next government or opposition parties.
I think R's biggest strength of R is the package ecosystem. I would not trade the large community of active package developers for slightly friendlier syntax.
Reasonably? That's pretty much good. Add what another comment said about not giving out personal information, but having a good AV like MSSE, using automated Windows Updates, use an updated browser (even if it's just the latest version of IE), don't run untrusted software, and having strong passwords (using something like LastPass to remember them all but still retain convenience) is basically all you can reasonably ask an average user to do. And for the most part, that's good enough.

Sure, there's evolving threats, there's drive-bys that will slip around all of this, there's ways attackers could still get through. But as scary as it all is, anything beyond these steps gets into the territory of major inconvenience. The problem with that is, the more intrusive and inconvenient the security becomes, the less likely people are going to be to actually use and remember their security practices. If mom can't repeat it at her book club, it's not going to be effective. And to be honest, these types of attacks that bypass these restrictions are exceedingly rare when it comes to mom and grandma. The biggest threat there is phishing and malware. Corporate security has professionals enforcing a policy that meets the business's own requirements.

So to answer your question, yes, that's all you can reasonably do. In most cases, you'll be pretty well protected with just that, and those steps aren't too complicated to follow or remember.
It means users don't have to create and remember a new password for every site they register to, which has security problems.
Though overly snarky, you have a great point. Wasn't Weev just sent to jail for exactly this? Doing http gets against "guessed" URLs without authorization?
Im looking for more of an official document/announcement. I wasn't able to find anything of the sort in the provided link.
The Best Way to Save Banking Is to Kill It
In my experience, managers are like programmers. Good managers can be really effective. Most are semi effective. Some are downright harmful. For the most part though companies seem to have limited ability to tell which is which. I went through a major re-org over year ago. Just from the management switch my stress level went down by a factor of 10.
Why did you go through Houston instead of DFW? The latter is way cooler.
«How is github any different than Summly from a 'renting' of technology perspective?»

Are you kidding? Github has global visibility, and is the absolute leader in the open source software hosting vertical.

From a "renting" of technology perspective, they are not that different. From a "large customer base" perspective, which was also mentioned in the article, they are complete opposites.
17 year old makes $15K with his iPhone app in 9 days (AMA)
Massive issue here for many when it comes to Java 8 - what about Android ?

Android's dalvik is based off of Apache Harmony, which doesn't appear to be updating anymore. Does this mean no Java 8 for Android/Dalvik? Seems like it would be a major issue if so.
for the biggest attack in the history, its kinda looking boring from here (India). :/

1 billion+ people won't hear of it much.

I would be interested to know, what did Spamhaus paid google to use its resources, and would such a type of cooperation on global scale means the end of DDoS in the long term?
Very amazing joke
This funny joke will make you smile. It is good, but check why it could also be called an epic fail! :)
That is what I keep repeating when people complain about operator overloading.

It is just symbolic names, like doing abstract mathematics with letters instead of numbers.

Except for C, Java and Go, all the remaining mainstream languages allow for symbolic names in the functions/methods.

I never understood what was the big deal.
Show HN: Libro Ipsum - Generate placeholder text from any source material
Show HN: Socket.im Get Help Immediatly.
This was started as a weekend project. And ended up here. Socket,im is a tool for sharing stuff between parties without hassle. You just type socket.im/something then system creates something what we call a socket. You can send links, messages, images etc via socket.im and anyone who is already connected that socket (by also typing the socket name or if you sent him a link by clicking the link) would receive what you have sent. It's anonymous. Nothing is stored on the server persistently.
Soon we will add file sharing and ssl support.
socket.im is still in its early days so it's something like an alpha version.

If you need help from someone immediatly that you don't know him, using internet. Use socket.im !

* New functionalities added.
We will be available at http://socket.im/dev
Well, it can't be helped, Mozilla is not a big corporation, they don't have enough resource to reinvent every popular web service.
Coincidentally just started using this today. I've got a couple of widgets/jobs I'm hoping to share for re-use. Some on the wiki are out of date e.g. the Twitter ones that don't support Oauth will stop working soon.
Google is yet to even add support for the Java 7 language constructs.