skysight-inc/HackerNews huggingface dataset:
Well, you had downloaded an application and you were fairly sure of its purpose, I can't blame you there.
I'm interested to see ZMQ being compared to the traditional brokers as I've been considering swapping from ActiveMQ. Although not surprised at it's results. It very much re-enforces the ideal of keeping software simple and barebones, rather than bloating it with stuff most people never use.

Mainly because I'm finding the latency from ActiveMQ is starting to affect my overall system latency. RabbitMQ was the next broker on my list to test, but ZMQ makes more sense (if you don't mind writing the broker part).

Background; I'm currently running a system which at peak runs with about 15 million messages per hour using ActiveMQ, with several producers and consumers on the same topic. Apart from speed, not had any issues with it.
This particular attack doesn't even involve a Java exploit. The weak point here is users who are accustomed to clicking "allow" on any security warnings without reading them.
Quite, it sounds like a bit of a dick move at first blush but the air quality of say LA or Mexico City would be drastically improved at little to no additional environmental cost if the emissions were being emitted in less of a geographic hole.
I would have, but then the term "cross site injection attack", is again Javascript terminology (he probably meant XSS or CRSF, but the term "cross site" doesn't really apply to Java applets).

However, the guy just got hacked out of about $8k worth of BC, which sucks, and for that I do give him a pass :)
An evil wee signed applet.
Student Hackers: DO NOT Intern...BUILD.
This wasn't someone hacking MtGox.

This was someone on a vulnerable OS, running without malware protection, with Java active in the browser, visiting an unknown link, and possibly giving an application permission to run. (Although maybe it didn't need permission to run?)

To get to that point the person needed to ignore several well established security principles.
In Chrome, you can choose to pause on uncaught exceptions, as opposed to all exceptions or none, which is the case in Ffx
Hmm, is there a reference of who actually designed all these unicode chars anywhere? I remember looking a while back to no avail - these more 'graphic' ones resurfaced my interest. Did one poor sod do the whole lot [of Emojis] or...?
I have yet to see the cat glyph in the title (firefox, chrome, or safari) is it 1F63B in http://www.unicode.org/charts/PDF/U1F600.pdf ?

Edit: changed glyph based on someone mentioning it had heart-shaped eyes
I'm afraid bitcoin will always be too volatile to be used as a currency because it's not backed by anything, and can't be inflated/deflated. The government actually serves a useful function by controlling money in circulation, even though it's not backed by gold anymore, at least it's stable (as long as inflation rates are maintained) which allows it to be used as currency. Sure everyone complains that USD is being printed, but at least that gets people spending - using the currency, instead of hoarding/saving which is what's happening with BTC. At current levels of volatility, merchants will abandon the currency.

Perhaps there's a some theoretical solution out there, whereby the inflation rate of BTC is a function of volatility ... ?
Honest question.....why work on these features when we have Firebug ?
Very very well said.
These assessments don't mean much because we are only getting one side of the story. Let's measure electricity from the power plant to the car and compare it to gas from the gas station to the car. How did gas magically appear at the gas station? Do oil pumps, oil tankers, refineries, delivery vehicles, and gas stations themselves now produce no pollution and waste?
Background; I'm currently running a system which at peak runs with about 15 million messages per hour using ActiveMQ, with several producers and consumers on the same topic. Apart from speed, not had any issues with it.

ActiveMQ or ActiveMQ Apollo? Definitely give Apollo and try if you haven't, it's incredibly easy to drop it and requires very little configuration.

I'm processing similar peak levels with Apollo, and so far have been amazed at how well it handles things.
Some basic analysis of the binary:

Creates the following directories:

%UserProfile%\537214
%UserProfile%\684544
%AppData%\dclogs

Creates a new registry value (so that it runs every time on startup)

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
537214 = "%UserProfile%\537214\svhost.exe"

Tries to connect to:

tamere123.no-ip.org on ports 80 and 1604

The subdomain above leads to the following IP:

198.203.29.120

Which, according to iplocation.net is located in:

Los Angeles
California
ISP: Hugeserver Networks Llc

It's very unusual for malware to be hosted in USA so I would assume that either it is a compromised computer/bot or it is some script kiddie using his home connection, the latter is more likely since there were no exploits used just social engineering and luck.

File hashes:

MD5: 0x81F8E4C33ADECE6BF89EF171D9930282
SHA-1: 0xF540BA6C5F1C2AA50B81A440E7D74F8CF588B4D7
... and you wouldn't release that separate viewer, would you?
I'm planing on using a hyperlapse for a recent roadtrip through the US, including photos. I also want to create a video from the hyperlapse and add the photos via AfterEffects.
This defies my understanding of HTTPS. I thought that in an https request, an encrypted connection would be made to the host first and the request itself (including the query string) would be transmitted as an encrypted stream. Could someone please enlighten me?
This article has a pretty bad smell. The author makes a lot of fairly extreme claims but these are mostly based on his own anecdotes or non public data sets. The claims that

"you can separate all advanced math teachers easily into two categories: Okay with blacks in their classroom [...] Not okay with blacks in their classroom. Whites end up succeeding, blacks end up failing"

and

"the evidence shows that teacher recommendations have zero correlation with aptitude in a field"

are really quite dubious and almost certainly false. How did they measure whether they were "okay with blacks in their classroom"? As many others have said in the original thread, this is probably a hoax.
The thing is, I feel like hospitals are hesitant to embrace new technology that isn't proven. Glass definitely fits that category. Like 16s said above, it's the First App Generation. This will get it in the hands of users. And from there, I think we will begin to see the really good, game changing uses.

Besides, like the article says, it always seems to be that the porn industry is one of the first to innovate. And that's because it's such a crowded space. Here's an interesting article about it http://edition.cnn.com/2010/TECH/04/23/porn.technology/index...
LXDE & Enlightenment work well for me, even inside a virtual machine.
The percentage decline in tenure track faculty might be fine. Straight-up instruction (non-tenure faculty) is also important; it provides employment for those who don't make tenure.

Tenure level academia is demanding:

a) Once you've made it, you have a solid reward: a sustainable lifestyle salary, freedom to work on what you wish, and, notoriety.

b) To make it, you have to work insane hours for about a decade or more (PhD, post-doc, 5-years) -- where the first few years (5-8) pay very little, if anything.

c) The odds of making it are against you -- many drop out in their PhD ("ABD"), fail to get post-doctorate work, fail to get a tenure track slot, or, fail to get tenure.

The promise of tenure is the carrot that feeds expectations that can only be met by talent and hard work.
Here's a rough draft that would, I think, only reinforce the 'aha' moment. It could be inserted as the third last paragraph:

"There's a potential problem with this procedure. What if Alice had started with some other word - say 'FILES' - and following this procedure also led to the word 'THINGS'. In fact, it might be that many, many English words all lead to the word 'THINGS'. If that were so then Bob would be justified in feeling skeptical that Alice had solved the crossword. She'd be using a "bad" one-way function. Both Alice and Bob need to be confident that this procedure doesn't lead to too many collision between English words. This is a challenge that needs to be addressed if you want to prove that a function is truly a good one-way function."
The biggest issue I see would be updating the block chain for the wallet between uses. Seems like it takes longer and longer to update. Moved my wallet to a new computer last night and it's been going for the last 5 hours.
Ah that'll be the problem I was having, some areas don't have a high enough frequency of images available to make a good hyperlapse.
It should also be mentioned (since we are talking about statistics here), that 1/3 of the total US medical research spending is from taxes (congress) and has been consistently been so for 20-30 years. That money has no connections with the current health care system, or insurance companies and is just pure tax money sent into research.

From those 1/3, about 95% of all core research is supported, and around 80% of all research into medical conditions that are life threatening.

Health care system, insurance companies and patents are for everything else...

*The 95% and 80% is number from a talk, and for the moment I can't find references. What I could find is statements about majority funding is used on basic research (http://jama.jamanetwork.com/article.aspx?articleid=205216 and http://www.nsf.gov/statistics/seind12/c5/c5s1.htm). In the future I will hold off on those number in comments until I got direct sources to use with them.
True, but it's in-memory only (there was no persistence with ZeroMQ in the given setup).
You have the option of enabling two-factor authentication for various actions:

http://i.imgur.com/5I31WcX.png
In general I agree with the advice to not store large quantities of btc on Mt. Gox, but it's not as dangerous as it used to be a year ago and may be less dangerous than storing them locally in an encrypted wallet... Especially if one uses Windows. If one is using two-factor authentication with Mt. Gox, even if I somehow got infected with a keylogger it wouldn't really matter for Mt. Gox whereas my local wallet would be in trouble. And while we'll see how Mt. Gox responds to user stupidity that leads to their btc being stolen, I'm confident that if it was squarely Mt. Gox's fault (e.g. someone executed a successful social engineering attack on them to get around yubikey), they would make things right.
There is a legal requirement that you can never take a decision that's bad for the company. If there is an official analysis made that shows that you could make more money by selling your product at 3x the price and people would still buy it, and you ignore such a report, then it's a very good reason to get you kicked out of the management board.

And yes, companies donate money/products to charity, but only when they have "spare" money, so money they have no current use for, no ongoing investment plans and so on. And most of the time, giving money to charity is written off as a PR expense, improving the company image by donating to the poor. So yes, there are ways to spend money for noble causes if you want to, but you can't knowingly make a decision that would make the company make less money.
I think thats done to fool AV software. - AV software will probably flag up any string which equals "AdobeUpdate-Setup1.exe"
My OS X 10.7.5 Chrome shows a cat glyph in the title in the tab bar, but a square in the actual text. Quite weird.
but it'd be viral so be universal. Merchents and absolutely everyone would all quickly start checking just to ensure they don't get coins they can't trade, making it effectively universal.

Which means it comes down to convincing the gatekeeper that you were burgled. But that's a human level problem.
Handling of special character is usually a bigger problem than unicode. Just today, I tried to name a file with both a single quote and an exclamation point from bash shell. Ended up doing that with a GUI file manager.
I've added a PS. Thanks for the suggestion.
>I did read TFA and... pentagram? Do you mean the staff/lines?

Hah, yes, sorry. In my language it's called "pentagram" (which means "five lines" literally). For some reason I had the idea it was the same in english. Well, after all, other words like "harmony" and even "music" were borrowed in English as is ;-)
One would expect a certain level of security measures for a site that directly influences your financial situation. Most CRUD applications require you to put in your old password when changing your new one. Apparently you can actually trade coins away from your account without typing your password on MtGox. That's just ridiculously unsecured.
I know about coinbase and use it, but it's very limited. U.S. only, is not a real exchange (buying bitcoins is often not possible), etc. And quite frankly, support is lacking too.

Buying bitcoins is still extremely complex for most of the world. It needs to be simplified further.
Typeracer – The global typing competition
Or, you can shift their workplaces to areas with no parking.

I work in a downtown business district. A recent office move and resident parking, constraints in parking facilities, and heavy enforcement of once-loose parking rules vaporized office worker parking. This affects 20-30k people.

Result: The telecommuting program participation rate is up, and people are taking public transit options, several of which are free to them.

The car problem in society is all about who bears the costs for things.
AngularJS Directive for Mobile Sliders
Good catch! I guess you'd have to take it to a lawyer to be sure... I wish that On The Media bit did a better job with citations.
greed, when directed with proper force, is how progress is made.

unchecked greed, of course, is when progress happens unevenly for society.
Then why even test ZeroMQ then?

If you plan to setup a benchmark test, and then decide to throw out the results (winner/ZeroMQ) because it doesn't produce the desired outcome you wanted ... then this benchmark is a joke to begin with.
It definitely doesn't mean waterfall.

Big Design Up Front is the way to go, but with caveats: only design as much as you need to, with the things you know are true or expect to happen. Requirements will change, no matter what, so you have to be flexible.

Yes, it does mean simulation and modeling. Mainly to verify/disprove assumptions and learn how your system will work as early as possible.

But waterfall? [shudder] No!!
Microsoft Game Director Adam Orth Resigns Following Xbox Comments
she picks the second word of the first line, and give the page of that

You've lost me. I think OP does it in a way that people don't have to guess at what he's talking about, which is important (very important) when introducing an idea).

There are certain tweaks we can argue about to be sure, but I think this serves as an intro that everybody can "get." She's not securing a $100,000 account. If someone were to get interested in this and pursue more knowledge she would quickly realize that she couldn't use this algorithm to secure important accounts.

Note: I assume you mean that she picks the second word of the first line, looks that word up in the dictionary and gives the page number of that word.
Coinbase is probably in it for the long run, and they are probably doing things to enable them to outlast the competition.

However.

On Monday I was planning to place an order for bitcoin on Coinbase and I was informed that the order would go through on Friday at the market rate at that time. That is somewhat worthless and extremely dangerous in a volatile market. For now, I consider their service unusable.
The first A in ASCII stands for American, so it does have quite a bit to do with anglocentrism.
That's neat, but howcome something like Django doesn't "inherit" from the Python preset?
However the headline does appear to be true.

brominated vegetable oil, potassium bromate, olestra -- all banned here in the EU, but not in the US.
That's one of the more rational explanations of the causes of the Iraq war that I've heard....
How does this scam work?
(Mail to the brand holder, thanks)

Dear CEO/Principal,

I'm sorry to disturb you so abruptly.

We are the department of registration service in China. On April 11,2013, we received an application formally. One company named "TianFeng Investment Co.,Ltd" had applied for the Brand Name "rocketlease" and some relevant domain names through our body.

Now we are handling this registration, and we found that the keyword of these domain names and Brand Name is identical with your company's. So now we need to confirm a couple of things with you:
1. If your company consigns that company to register these domain names and Brand Name, we will send an application form to them and help them finish the registration at once.
2. If your company has nothing to do with that company, they maybe have other purposes to register these domain names and Brand Name.

We haven't finished the registration of that company yet, and we have postponed the application of this company temporarily already. In order to deal with this issue better, please contact us by telephone or email as soon as possible.

In addition, we hereby affirm that our time limit for dissent application is 7 days. If your company files no dissent within the time limit, we will unconditionally approve the application submitted by that company.

Best Regards

Anna Liu
Regional Manager

AnHui Office:
Phone: 0086 551 6512 0117
Fax: 0086 551 6512 3308
Postal Code:230022

Address:AnGao World Cities,No. 99,WangJiang West Road,HeFei,AnHui Province,China
ShangHai Headquarters:
Postal Code:201315
Address:No.11,Lane 788,Xiupu Road,Nanhui District,ShangHai,China
previous discussion (4 days ago): https://news.ycombinator.com/item?id=5504910
It did not detect any cats in this picture:

http://www.fantom-xp.com/wallpapers/20/Four_kittens.jpg
Mark Zuckerberg: Immigrants are the key to a knowledge economy
Bitcoin panic selling halves its value
I would not use ZeroMQ for anything but the most non-critical queues. ZeroMQ is not persistent: if your server crashes you lose all your queue contents.

My current favorite is RabbitMQ. It has improved steadily over the years, performs pretty well and very easy to setup.
One big problem with comments is the isolation. If I leave a comment on a blog, there's little chance that I will return to see responses to it, and I even if I do, it isn't part of my online persona. There's a very asymmetrical relationship between the author to his/her blog, and the commenter to his/her comment. That's why comments don't often match the level that content does.

We are currently experimenting with a solution to this on Hubski. We are allowing some blogs to mirror Hubski discussions of their content on their blog. Here's an example: http://www.theadvancedapes.com/theratchet/2013/1/28/evolutio... I've long seen many bloggers append a post with "discussion on HN" or "discussed on Reddit". We decided to skip the link, and to allow the thread to be embedded. It's not so much a commenting platform as a mirror to the Hubski discussion. So far it seems to be working well, and we have a cue of blogs waiting to be added.

I should mention that users can follow or ignore users, tags, and domains on Hubski, and what they see is a result of what they follow. I don't think this would work on HN or Reddit, as no one would want every post from a given blog to be submitted automatically.
I'm a bit sceptical of this, as RabbitMQ performance is very similar between transient and persistent. In my own tests, they were up to an order of magnitude different, even on an SSD.
got this in my inbox this morning and i've not come across this sort of email before.

the site seems legit when you look at it, but is clearly bogus (all links are broken, searching for domains doesnt work)

I'm curious, so I'm trying to understand what they get out of this by doing this.
Eavesdropping on wireless keyboard
A similar example was highlighted on BB the other day, with an interesting twist about cognitive bind-spots leading to security holes:

http://blog.tanyakhovanova.com/?p=277

http://www.schneier.com/blog/archives/2013/04/nice_security_...
Yes, american dream, create a wonder drug and make billions...
Because ZeroMQ is cool. Just look at all the buzz it gets on HN.
Mmm, "oily anal leakage".
no - if you started your own 'bitcoin' chainblock, the existing bitcoin chainblock shouldn't (as far as i understand it) be interoperable. That is, its like printing your own currency - no one else will reckonize it, unless you somehow own vast amounts of resources, and is willing to exchange that with the new bitcoin.
Healthcare is unlike the rest of the economy. Drugs don't need marketing and market research. Because in healthcare you don't give what patients want but what they need.

If a drug is best in its class doctors will not need "seminars", "education" to use it - it will be self evident by the trials and outcomes. Oh but wait - you cannot compare drugs to other drugs. You only compare them to placebo thanks to the cuffs put on the various government agencies by the intense lobbying of the industry.

Edit: To get the drugs past the FDA you only need to show it behaves better than placebo. Comparative trials of drugs are a minority and rarely done.
Foursquare raises $41 million Series D round
Here's a list of all removal requests

It's not.

http://www.google.com/transparencyreport/removals/copyright/...

"...It is a partial historical record that includes more than 95% of the volume of copyright removal requests that we have received for Search since July 2011. It does not include..."
> It’s the equivalent of reaching the end of a book and having a mob of other readers immediately descend on you, everyone trying to make their review heard above the fray.

But when you reach the end of a book (and if you liked it), the first thing to do is seek out others' opinions of and discussion of the book, right? It's the same with TV shows; as soon as it's over (on a weekly schedule), people naturally want to discuss it at twop or tvtropes' forum or whatever. Making that discussion easy on your own site just streamlines the process.
mv foo \!\'
It should be noted that we still don't "know": even "provably" secure functions depend on an assumption that may or may not be true, such as that factoring integers is much harder than multiplying them.

Of course, almost everyone thinks these problems are in fact hard (at least for classical computers), but there's no proof (such a proof would imply P != NP).
Researcher hacks aircraft controls with Android smartphone
Ha yes, also possible :)
Lawers
I would like to see that
He did say ZeroMQ broker outperforms all others. This means that unless you have a need for complex broker features, ZeroMQ is a perfect message dispatcher among processes.
I think bad_user is saying that Google decides the definition of kosher, doesn't tell you what that definition is, and changes it when they please.

If I'm reading this right, you are saying that's perfectly ok and if I get caught in the collateral damage, it's my problem and I shouldn't hold it against Google.
Don't forget that many large-company positions - HW or SW - are being filled in design centers in India, China, E.Europe and elsewhere. Yes, there is an income difference. But their economies are pumping out hundreds of thousands of engineering grads. And HW design in the U.S. is definitely seen as less glamorous.
JGC is a better writer than me - I did not suggest the exact language, just the structure of an alternative approach to the explanation that I think would make it simpler.
humor.

That said you'll notice Samsung doesn't advertise it's chips or raw display panels, because they are not actually sold to the people watching The Daily Show.
Have you looked at Vizio's new ultra-book lineup. They have all been upgraded to touchscreen and the 15in models run at 1920 x 1080
On OS X: View > Show Minimap
Introducing Ripple, a Bitcoin Copycat