skysight-inc/HackerNews huggingface dataset:
People have an expectation that they could die from heart disease or cancer at some point. They have an expectation that they could die in a car crash when driving. They have an expectation that they could be killed in a plane crash when flying.

They have no expectation that they and their friends will suddenly have their legs blown off and bleed out on the street while enjoying a public social event.

That is what makes terrorism different than those situations you highlighted. The fear in the back of you head while doing mundane things.

This isn't complicated. If I wanted comments like yours, I would go to reddit.
>>where they put in a pile?

Did you mean were? No, they were not. A drone strike is not a shot on a dart board by a marksman so they don't need to.

>>hundreds in one strike>>

My mistake. I was angry and I just mentioned it in flow - I originally wanted to portray remote strikes in general. But drone strike are not sniper shots either! Can I humbly ask you to go here[1] and you might be enlightened http://en.wikipedia.org/wiki/Drone_attacks_in_Pakistan

>>I stopped reading.

I believe that you've stopped reading - literally, especially after reading your last sentence.

[1]http://drones.pitchinteractive.com/
Who on earth uses ColdFusion any more? Surely when they re-built it a while back they could have used something more secure like Django?
Ok, so if you have people that are legitimately lazy, then they should be fired, full stop. However there is probably another reason they are not writing enough tests:

- They don't see the benefit because they are forced to write lots of tests that do not, and never would have, provided value. (like stupid getter and setter tests being the canonical example)

- Writing tests is hard or slow, either due to things not being tooled out or because the code has not been architected to be testable.

- Writing tests causes lots of false positives, fails to catch real bugs, or end up being extremely brittle. Classic example here is religious mocking of the database in the name of performance, yet fails to catch most bugs since it's, you know, not actually hitting a database.

- The suite is slow or causes deployments to slow down such that adding tests adds a "tax" to everything else people do.

I've had enough experiences with all of the above phenomena so as to become completely skeptical of extensive testing since unless you are a real pro you will inevitably wane on at least one of these things.
NASA Wants You: The Original 1959 Astronaut Job Description
Then how does the US factor into this correlation with an even higher rate of home ownership and lower rate of unemployment?

No, unemployment and home ownership may be tangentially linked but one does not relate directly to the other.

This is how the unemployment rate matches up for both countries.

https://www.google.fr/publicdata/explore?ds=z8o7pt6rd5uqa6_&...

Notice a difference? Spain, and a lot of European countries, have some archaic debt laws. Where even if you could move to where the jobs are, the mortgage on the house you no longer own is still on your back. So you could take another job but half your income is going to service that old debt. This contrasts pretty well with the way the US and UK handle debt; you invested, the investment failed, liquidate everything, and then move on.
I think the poster wanted to show the contrast between a series of coordinated attacks across Iraq which have killed many and 2 explosions in Boston killing 3. Both are obviously terrible events, but one got more attention by a factor of at least 1000. It's just good to keep in perspective things that are going on elsewhere in the world.
It's possible to debug targets running under the current user, so root privileges might not have been needed, if they had an agent running under the same UID as the application.

> However, the private key can be then used to carry out crypto operations.

Surely this is of concern? According to the logs they'd known about the breach for a week - that seems like enough time to decrypt each card one by one and exfiltrate them.
It doesn't actually show up as a service yet - follow the instructions on this page [0], see "Getting started".

Basically, create a project in API console, create an OAuth 2.0 client id, add [1] to the valid JavaScript origins and then paste your client id ({number}.apps.googleusercontent.com) into the playground [2].

[0]: https://developers.google.com/glass/playground-usage

[1]: https://mirror-api-playground.appspot.com

[2]: https://developers.google.com/glass/playground
that's a cool idea and looks well executed, I'd be interested to know what technologies you are using?
That's correct, as is the author. People are advocating for affirmative action for women instead of advocating for the best speaker pitches and letting the chips fall where they may. Don't make women tokens, expect the same excellence you do from men and they will rise to the occasion. I have no doubt that the visibility of women will rise at conferences while they are competing successfully in tech jobs and representing a greater share of programmers and engineers.
Well, when I was reading it on HN I thought "There was a bomb in Boston and two people died, what's so intersting about this, why it's on HN and why are people in the comments so emotional?" I'm not from the US but even where I live this is top news. I felt similarly with the boring and overhyped Fukushima crisis.
Um, I doubt most of the packages were existing JS code. Many, sure, but not most.
DHTMLX JavaPlanner v.1.2 Released with Useful Extensions
JavaPlanner has got new extensions:
1.'tree' mode to display events in expandable groups in the timeline view;
2.auto resize to adjust the size of the calendar container to fit content area.
It doesn't make you stupid but it is easier to find and convince stupid people to go out and die than it is to find and convince smart people to do the same thing, many suicide bombers are found to be mentally retarded and/or highly suggestible.

The Japanese example is a, ahem, yellow herring, that was during wartime when both sides had formally declared war. Wartime patriotism (and of course the necessity to obey military orders) makes smart people obliged to do stupid things, they'd have been shot if they refused, in fact that is a thoroughly poor counter-example.
Once I have a new test machine that his much faster I will indeed retest all the eras (with multiple tests per era). Of course this time I plan to build a real sound proofing system around it. This last machine was really annoying.
Hi ses, thanks for feedback and trying it out. I am using using Rails,HTML/CSS/AJAX for the development, MySQL for DB and Capistrano for deployment.
Then it's a very good thing so people understand that you cannot rely on a platform where one company has all the power on what can run and what can't.
Maybe it'd spring see nice anti-competitive trials. Results being irrelevant, as long as people understand that locked platforms are bad.
amendment to 8: add "human" to the list, in first position, obviously.
I've just started using ebay. I look at the feedback because I realise (from years of reading Amazon reviews) that people sometimes give bad feedback for something outside the seller's control, even if the seller tried to correct the error.

So this bad feedback wouldn't have bothered me.

But I guess some / many people don't check the details. When you have two sellers listing the same item with similar 'buy it now' prices and packaging I guess feedback is the only other metric someone can check.

Since ebay sellers cut costs and profits as far as possible having similar prices is pretty common.
No amount of tests can help you if don't know how to solve the problem. And the better you know how to solve the problem the less tests you really need. ;)

Old, but quite relevant: http://ravimohan.blogspot.com/2007/04/learning-from-sudoku-s...

Some sane amount of testing is good. However, I'm not very convinced writing tests first is a good idea. I saw a few programmers practicing this and when writing code they often concentrated too much on just passing the damn test-cases instead of really solving the problem in a generic way. Their code looked like a set of if-then cases patched one over another. Therefore, if they missed an important case in their testing suite, they had 99% chances for a bug. Once I ended up writing a separate, more generic implementation to validate the test suite. And it turned out there were a few missed/wrong cases in the test suite.
"Along with the encrypted credit card, the last four digits are stored in clear text to assist in lookups and for display on things like your Account tab and payment receipt emails."

I really don't see the need for that at all. What sort of credit card "lookup" are they doing exactly?
Adobe stuff is best assumed vulnerable at all times though.
I wish there were a simple-as-Stripe way to outsource multiple payment options for customers (BTC, cards, ACH, etc.). I guess technically you could use PayPal or maybe Amazon Payments for that, but I don't think they're particularly likely to support Bitcoin anytime soon.
Sorry but having passwords in plaintext is not a "goofup".

It is completely and utterly inexcusable.
Perhaps there should be some weight parameter added to both positive and negative feedback, where the value of the sale is being compared to total sold goods value makes the feedback more or less relevant: if you're mostly dealing with expensive laptops, and then you've sold broken pair of cheap headphones, then it should matter less, than when you're selling cheap headphones and you've sold broken expensive laptop. This is from top of my head, but I bet there are many other ways to improve rather old, and no more ideal eBay feedback system.
I guess it's mainly to display stuff. When you have multiple cards on Amazon you can choose which one to use, however without seeing the last four digits its pretty hard to tell which is which.
For the record - hd25 is really-really nice but consider AKGs too - I am using AKG k518 from a while now, and it is almost or just as good as the HD25 but have a far lower price.
How to Install Android 4.1.2 XXLQB Jelly Bean on Galaxy S Advance [GUIDE]
The sensor was not the slowest element, it was the servos combined with the design. For the next build I plan to use a big step-motor rotating in continuous mode and transfer the rotation motion into a linear one like steam powered machines do.
Google Glass tech specs are here
NPM is amazing. I used to use Python, which had the right idea with its modules but got so much of the implementation horribly wrong, and it has multiple package managers. Node, however, got modules right. Files and modules are in completely separate namespaces, and npm is a single package manager that "just works". The fact node isn't "batteries included" doesn't matter, because requiring modules is easy and dependencies "just work". You stop worrying about setting up dependencies, so you stop worrying when you want to add another dependency. It's great.
what a strange article
Somebody once said that the fact you never saw a headline “rogue trader causes $1B in profits” was evidence that such schemes did indeed go unnoticed unless they caused losses.
> It could happen to any of us really.

Yes, but the whole private key thing and the ability to access the cc numbers from the front-end (unless they hacked the DB server as well, I think they didn't?) reeks of failure.

The only thing standing between the plain text cc numbers and the hackers is the passphrase, better pray that it's a good one.
That's interesting, I think Rails has been overrated in the past but this is exactly the kind of project I think Rails is great for - where you've got a very clear simple aim, and you want to quickly develop an app people can play around with.
Google Glass is finally here: Tech specs released, first units shipped
And that is "still" the case
Duetto: A faster and smarter alternative to Emscripten.
I was about to comment about this as well. I don't particularly like Rails. One of my most linked posts on my blog is a rant about what I don't like about Rails. But that was written when Rails 2 was current, and while I don't particularly like Rails still, I'm very happy to see that Rails has steadily moved towards splitting more and more stuff into separate gems that are increasingly useful in non-Rails scenarios.

So while Rails certainly is "batteries included" and "full stack" in many ways, I don't see how it contradicts the "tiny module aesthetic" that this guy mentions: A typical Rails deployment is big, sure, but it's big by pulling in a ton of, in many cases quite small, modules, more and more of which can be replaced

I still have issues with the level of coupling in a typical Rails deployment (e.g. a number of gems still pretty much expect a full "default" Rails stack, so replacing or avoiding specific components is often tricky), but the landscape has changed drastically.
I know Aus has more than a few issues surrounding xenophobia and race but... I lived in Perth for two years and spent six months on the road around the country. Despite the fashion for Southern Cross tattoos, it comes nowhere close to the US for sheer number of flags. I never noticed flag poles and flags in people's front gardens (for example) like I saw in Texas.
Krugman's error is to label the the bitcoin open network 'antisocial' in comparison to the federal reserve closed network. If antisocial means 'not wanting the company of others' : I think that means a closed network not an open network; the exact opposite of what he postulates.
They would win but after going to court and spending money. The main problem is that anyone can file almost any type of lawsuit
Malwarebytes False Flags Core Windows Files
Malwarebytes had a bad signature which flag many core windows files as malware, then quarantined them. It also quarantined itself rendering many machines unusable.
MetArt and all its sister sites now accept Bitcoins
I am still new to web dev to comment on this. But IMO rails has managed well to take care of the heavy duty web apps as well. But yes as far as prototypes go and getting something built up quickly, rails is a definitely a good option.
Ebay does not allow feedback left on buyers.
Until the U.S. get their act together regarding sterile transit, the international airports are going to continue to be forced to operate effectively with one hand tied behind their back. The sheer inefficiency of forcing everyone passing through to go through arrivals and then departures is ridiculous and must put a stupid, utterly unnecessary strain on the airport.

As an aside, I went through Changi airport (the current number one) and it really is lovely. I watched the Koi being fed and wandered around their butterfly garden in Terminal 2.

If the U.S. does in fact have sterile transit and I'm just misinformed, I stand by to be corrected :)
Google Releases Glass Specs
This is a fascinating insight into what the DoD thinks the story is, and a frightening example of why fair trial and due process should be required to incarcerate people.
Interesting idea. Probably would be a stronger demo if you pre-populated it with some actually worthwhile comments.

Really don't like the pagination. Scrolling is how this is done on the web. Arbitrary page breaks and non-intuitive scrolling breaks this.
Even if they have a passphrase it has to be strong enough to withstand brute force for months. If you're not smart enough to keep the private key separate from the crap you're trying to protect, why should I think you're smart enough to ensure your passphrase is good enough?
In case you're wondering: yes. I wrote and partly rewrote the above sentences while distracted.
LSD use turns 70 years
Be Comfortable While You Stay In Assisted Living Atlanta, Ga
Storing passwords in clear text is definitely not normal.

Also the social engineering implications could be huge. Many people use the same password across various sites so in theory there could be a lot of compromised email accounts. Which could then mean compromised internet banking sites, trading sites etc.
I don't want to work for a big company
No, they were just re-encodes to my knowledge. I have a Netflix account and I checked out one of the pirated ones just to compare. I couldn't tell a difference so they did a good job, but I'm sure the difference was there.

I'd imagine the Netflix DRM will get broken sooner or later, especially as they continue to release Netflix-only content, but the screen caps have been so good that the pressure to do so hasn't been very high I don't think.
A complex data structure for predictive text input in Firefox OS
Is there an Open Source equivalent?
Frontify: Collaboration for Designers and Developers
There is a lot wrong with this approach, but even if you agree with their method there is one thing that seems odd in their analysis.
Let's suppose that life originated before the birth of the earth. Obviously it managed to reach earth, which would mean it (the organism) had to travel through space for an extended period of time - the authors claim that it was frozen - so you should account for that time in the graph, and obviously life couldn't settle on earth for quite some time because in the beginning our planet was extremely hot and unsuitable for any kind of life. That would shift their postulated origin of life further into the past, most likely to a point where there wasn't even a universe to begin with, or at least no planets that would allow for the formation of life. [Note: I didn't read the whole paper, maybe they discussed these points. Also please correct me if I'm wrong on anything]
Twitter is forcing us to drop ability to flattr creators by favoriting tweets
"America, the home and defender of democracy, is more important than some backwards country in the desert"

That is the subliminal message. It is sad, but unfortunately this is the way this planet works.
Cool! Thx guys.
Did you look at this library: Cloud Haskell/distributed-process? [1]

[1] https://github.com/haskell-distributed/distributed-process
> whereas the opposite occurred

No opposite. There certainly is inflation. Just not hyperinflation. Some Austrian economists have also written on what exactly will bring about hyperinflation [1]. In short, it is when large amounts of money comes into circulation, i.e. when you and I can borrow that money to buy stuff.

Peter Schiff follows the Austrian school of economics, but he is not an economist himself. His highest degree is a bachelors in finance and accounting.

[1]: http://mises.org/daily/3390
The real issue is that due diligence on the word was not done. The copyright this is a load of hogwash, in my opinion looks for words that you need to define in another dictionary is acceptable practice (however, copying the definition verbatim is not).

It's almost like saying "you have a thread scheduler in your operating system and are violating copyright." No, that is a core component of an operating system, just like a word is a core component of the English language (fictitious or not, once it enters an accepted dictionary it becomes a word - other dictionaries are forced to define it due to the nature of language).
Patented :'(
Wait, since when did OKCupid start charging? They were free when I was on there (before the match.com takeover)
Opportunity for advancement. And money. More than that, I'd be looking for a company that was amazing at staff development, really cared for its staff and stood up for them, and furthermore a company doing something I can believe in; I currently at a place that does public service work and that's not unimportant to me.

I know the above is virtually all soft stuff, compared to the money and autonomy-related options in the question, but having worked in places where I felt valued and supported, and in places where I felt ignored and mistrusted, it's important.
And (in most jurisdictions) the tort of barratry[1] is no longer recognized.

[1] http://en.wikipedia.org/wiki/Barratry_(common_law)
How would you growth hack HN?
That doesn't make any sense. It's exactly like saying: "Oh sure, the credit card numbers were encrypted but if the encryption key is brute-forced then it's game over".

The CC numbers were encrypted using a public key. The corresponding private key was itself encrypted using "[a] complex passphrase [that] is not stored electronically". They could be lying, but if they are not then this is perfectly valid security.

Using this scheme, you can store new CC numbers any time you want using the public key. You'd have a regular billing cycle(say a month) with billings happening in a short time window(All my linode accounts get billed within minutes of each other so I think this is the case for linode). When you want to bill your customers you'd input the passphrase which wouldn't be stored anywhere, would be used to temporarily decrypt the CC numbers and bill everyone. Unless you are attacked in that window(or an attacker gains access before that window and can remain unnoticed until it happens, and even then they'd need root access to read the memory and not just access to the filesystem) then the CC numbers are pretty safe against any attack that leaks files/databases/etc...
Yeah, maybe you're right. The text is a bit unclear about that.
Here are the key specs:

Display: High resolution display is the equivalent of a 25 inch high definition screen from eight feet away.

Camera: Photos – 5 MP; Videos – 720p

Storage: 12 GB of usable memory, synced with Google cloud storage. 16 GB Flash total.

Battery: One full day of typical use.

Compatibility: Any Bluetooth-capable phone. The MyGlass companion app requires Android 4.0.3 (Ice Cream Sandwich) or higher. MyGlass enables GPS and SMS messaging.
If the hackers got to the ColdFusion source code then it is quite possible they decrypted credit card numbers.

The passphrase may not be stored in the database but presumably the decryption key is kept in memory by the app server while running. Otherwise it wouldn't be able to charge anything. And if the hackers could modify the ColdFusion source code, they can get to anything the app server can, including the decryption key. ColdFusion uses an interpreted language so injecting code is possible with just filesystem access.

Linode says there's "no evidence" of decrypted card numbers but I think it's more a matter of no evidence.. yet. They also call salted hashes "useless" to hackers which betrays a rather unenlightened perspective on infosec.
Netflix plotting move to HTML5 video - but only if DRM works
This is interesting, I'm all for bitcoin, but I think if I am meeting someone over the internet, I'd like at least some part of the process to not be anonymous.

I know that doesn't necessarily make me safe, but it is one more step.
As bitcoin volume increase, miners will probably start charging transaction fees themselves. So that'll increase.
I absolutely agree, I am not complaining that stories like this aren't covered and I'm certainly not trying to trivialise the events yesterday, I just think it's worth being reminded that events like this are almost an everyday occurrence in less fortunate countries.
It was after their acquisition by IAC in 2011. Match.com is owned by IAC, so technically it was taken over by IAC. The CEO said multiple times they'd never charge, but plans tend to change after you get acquired.
Just out of curiosity, how do you differentiate with http://rapgenius.com ?
A ToS can never prevent you from being sued. At best they can help you get the case thrown out.
Titan supercomputer to be loaded with 'world's fastest' storage system
EuroPython 2013, early registration closes today (April 16th)
Well, the official statement re: the passphrase is:

> @Eivind – our private key is stored only in encrypted format. The passphrase is not guessable, sufficiently long and complex, not based on dictionary words, and not stored anywhere but in our heads.