skysight-inc/HackerNews huggingface dataset:
It would be best (per the HN guidelines) to title this submission with the original article title, "Disclosure timeline for vulnerabilities under active attack." That's a more neutral spin than the headline "Google: 7 days advance notice is enough for actively exploited vulnerability" originally submitted here.
What requires more steps?
You know that and I know that but I know a lot of people who never thought to type in program names even on Windows 7.

The big flaw in Windows 8 is that you have to already know how to use Windows 8 in order to use it. It gives you almost no hint on how to do anything or where to find anything.
I wonder if this has anything to do with the 3rd party software used to compromise drupal.org?
On viewing the video your description is a little generous. He did hear it and put his hand out, but it would have fallen without help. Not really like the cane echo distancing.
I think knockout is a fairer comparison than angular. KO is not at all prescriptive, just one piece in the puzzle which you combine with other things, much like React professes to be.
Everyone is asking for it. The entire Metro UI is one gigantic design mistake. Hell people were complaining about it an entire year before Windows 8 was released. Since then it's been like watching a train wreck in slow motion.
That list makes me uncomfortable. I can't imagine doing all of it unless I was some criminal. But to each his own I guess because I don't really care what government or add company person is looking at me browsing reddit or programing forums. So nothing to hide, too much trouble and I don't care about my privacy. Now if I really wanted to hide my activities, I would be using tor BTW.

Plus I am a little optimistic about companies like Google/Apple/Microsoft. The risk involved in invading someone's privacy is definitely not nearly the worth of them getting caught and all the bad press. The ad companies and the government however I don't trust. Because they don't have a face to save. Someone gets busted, they shut down/resign and life goes on.
Though to be fair, those that are interested in it probably already have it. I'd rather see a post about a concrete alternative than a direct link to some special offer.

I guess you're arguing that the upvotes are coming from happy users that are lending their support by clicking an up arrow. That just feels weird for HN.
I don't know much personally about airbnb.

I wonder how many bad incidents airbnb has facilitated? Searching for "airbnb robberies" seems to point to only one incident (San Francisco) where the victim blogged about it.

But generally we shouldn't expect to hear about crimes facilitated by airbnb. Neither the cops nor the victims have an incentive to publicize it.

airbnb may have paid out a lot in hush money and settlements.

So, while this new identity scheme is unwelcome and intrusive, it may be the only way forward for airbnb.
@acuozzo I was running dual monitors and was watching the movie on the tinier MacBook Pro screen. I had no intention of using an image from the film for anything at all. But I always open both screenshots (two screenshots are saved to your desktop when you are on two monitors; again, with the shortcut "CMD+Shift+3") to be sure I delete the one I don't want (i.e. the GUI of the monitor I don't care about), in this case, I just noticed this empty region (where the DVD Player app was running) in Preview right before deleting the image.

@mosteveryoneElse yes, it must be mostly related to DMCA BS. And Apple is just being overprotective here. Since the DVD Player App is native to the Mac OS, surely it is mpy difficult to hide 'designated app[s']' windows when a user takes a screenshot.
Privacy is not just about what is public. A hidden camera in your bathroom is an invasion of your privacy regardless of whether the videos are made public. Social networking sites are littering the web with web bugs, tracking cookies, and other invasive methods of recording more than you explicitly share with them -- how is that not an invasion of privacy?
Helpful Business Tips For Young Entrepreneurs Before Launching Their Start-ups
Nobody actually uses the Windows Store. The app store for windows is the web: put an installer on your website, user clicks it, IE runs it. No jailbreaking required.
It's easy if you have 4 years of school to soak up knowledge. But if your family can't afford to pay your school fees, you end up working somewhere full-time. So you have to study nights. Except you fall in love and get married to a wonderful woman, but then she wants to spend those nights with you. So then you end up not sleeping and begging her to get a night-job so that you can learn how to install arch linux on a virtual machine. Becoming a software engineer when you have life commitments is tough, and you end up reading programming language books on your iPhone every time you go to take a crap. Believe me, it's hard.
Bob Dylan's World [Infographic]
The continue UI change from desktop to metro back to desktop for all kinds of things is the most jarring thing I've ever experienced.
Hands-on AngularJS with Backlift part 2: Wiring up a back-end API
This, everyone focuses on the negatives, their fears, and the what ifs, not the near-guaranteed and positives. We should have fully functional (and available) bionic limbs this decade, with the ability to get them 3d printed to your exact proportions. It is the future!
Nothing (because none of these are necessary for the kind of privacy I practice).

I think about what I post to what social network and some things I just don't post at all.

I think I still have privacy. I have private conversations with people via Skype, IM, Facebook, email. Is it possible that at some point those leak? Perhaps. It's just not likely enough that I chose to worry about it.

I value the benefits I get over these interactions over the tiny chance they may come back to eventually haunt me.

I chose to live in the now and not let myself be gripped by paranoia of what might be.
Some comments have said: it's a silly bug, but the condition is still true so WTF? I would like to think that it was finally closed at least partially because it was a silly bug and this is an acknowledgement of its silliness, and the degree to which it become ever more silly over the years.

It would've been well-intentioned but probably misguided if it existed in 1997. It was mildly silly in 2004, but monumentally silly in 2013.

In the Linux community (or politics, or business, or professional sports, or entertainment gossip, or any number of other things that people follow), people have a natural tendency to create ongoing dramatic narratives about what's going on in whatever thing it is that they're following. These narratives (certainly the Linux and sports and politics ones) always involve divvying up the participants into goodguys and badguys and us and them, in the most reductive and intellectually dishonest way possible. But, I guess it makes everything fun and exciting, and for people who don't actually know (or want to know?) how complicated and unknowable everything is, it gives them a sense of belonging and makes them feel like they understand what's really going on in the world.

Rush Limbaugh has often said things like, "I take things that are complicated and make them simple. I figure all of this stuff out so you don't have to." That tells you pretty much all you need to know about him, and the people he appeals to. I'm not picking on the right, I could throw any number of demagogues on the left into the same category. Anyway, unsurprisingly, the simplified narratives that these people always present are all about how everything's black and white and how this one group of people have all the answers. They could make everything better if only this other group of people, who are chock full of evil and malice towards you, would let them.

In politics, this kind of reductionist tribalism is actually really messed up, because it influences the government in real ways. Among sports fans, being a reductionist tribal idiot is not that big of a deal, because it's all in good fun and the worst case scenario is you might have to stumble across some guy's stupid rant about how the Raiders are the root of all evil and the people of Oakland are actually bad human beings by mere association.

In the Linux community...I don't know. If you think of it as a fun hobby for a bunch of CS students, engaging in a little reductionist tribal idiocy is possibly amusing, possibly annoying, but pretty harmless. However, at some point as a project becomes larger and more meaningful to more people, I think it actually gets in the way of the community's ability to cohere around truly meaningful goals and ideals. It needs to grow up, basically, and it doesn't need to engage in dumb demagoguery to move forward- it's reached a point where dumb demagoguery may actually hold it back. In 2013, fear and loathing with regard to MS is a pointless distraction. Brain cells devoted to hand-wringing about some imagined Evil Empire are brain cells not spent creating cool and useful things.
Activating mobile malware with Music and Light Sensors - The Hacker News
> What I find amusing lately is the exodus from Ruby over to Javascript. What's the thought there - maybe there weren't enough braces? Maybe THIS time, this scripting language will work! What valiant hope.

I'm not one of these developers, but I believe the appeal is largely the ability to work with one language in the "full stack": Node.js on the server, JS in the browser obviously, and maybe MongoDB or Postgres.
Do you have a link to the app?
Engineering school killed the futurist in me. When I was a kid, I read books projecting that we'd have manned missions to Mars by 2025. I went to school to be an aerospace engineer and work on stuff like that. Then I realized that the reality of the field was spending $1 billion to improve the fuel efficiency of a commercial airliner engine by 1% every decade so that the airlines could stave off bankruptcy just a little bit longer.

I learned that the nature of technology is rapid development, followed by plateau. Thus, while new things might surprise us, the basics are pretty much here to stay. I don't foresee that, 50 years from now, the existing mature fields will be all that different. E.g. I doubt medical technology will advance meaningfully for the median person. I plan to live a healthy life of 75-80 years, just as my grandfathers did in Bangladesh who were born early in the 20th century. I will almost certainly be living in a house that looks more or less like houses do today. My car might drive itself, but as an urban dweller the only meaningful difference will be not having to make smalltalk with a cab driver.
I don't know whether it's for mobile or not, it just seems that whenever a sucky change is made to a desktop UI it's "for mobile". All I see is that it (and other products) are, despite a previous evolution of 20+ years of desktop UI history, now getting worse instead of better.

But maybe you're right, it's not always mobile, sometimes it's making a UI noob-oriented at the cost of productivity. Which is just as annoying.
Well, you don't rise to the top of the food chain unless you're able to kill every other animal out there.

Hail to the king, baby.
Yes, there is definitely a disparity between native code and Javascript running in the browser. Yes, different browsers have different performace bottlenecks, and yes, different hardware configurations and GPU also have a huge impact.

On the other hand, you're talking about having problems recreating games that ran on 16Mhz CPUs with 1MB of RAM, which makes me somewhat sceptical.

I don't mean to be disparaging, but I expect that there's something in your main game loop that is killing your performance, and that even if you ported it to asm.js or C++ you would still have the same bottlenecks (perhaps masked better on modern hardware by the better native performance).

As a counter-example, a reasonably complete and functional HTML5 port of a game from the 90s:
http://www.adityaravishankar.com/projects/games/command-and-...
Having been 27... As someone who's 45, I'd like to say: I've long wanted to write exactly such an IDE etc (right down to dedicated custom hardware) for some esoteric language, so take that energy and plunge in, learn a lot about the development stack without taking on the full weight of a serious heavyweight language. This place is a lot of fun :-): http://news.ycombinator.com
The name of that project is horribly relevant.
Stripe is about simplicity (for developers) and being fairly standardized and automated. Payment aggregation has higher risks and Stripe probably doesn't want to deal with them at this point.

BrainTree, if you contact them directly, can work with various merchant accounts. We had to get special permission to do payment aggregation. Also, our underwriting merchant held a % of our funds in escrow for the first 12 months of our operation.

The main issue with payment aggregation is increased fraud. We had to deal with it and you will too if you get any sort of traction. What happens is people will make fake seller accounts and then make purchases through those accounts using stolen credit cards. Once you ACH those funds to them, guess who is on the hook for chargebacks? If you said "I am", you are correct. In 2011, we lost a good amount of money (five figures) in a 3-month span. Also, if your chargeback rate is too high (> 1%), you will likely get a warning from your merchant processor and possibly get booted.

FYI, there is a YC company helping people deal with some of these issues:
https://siftscience.com

Using something like Sift Science or simply manually reviewing and approving accounts is the best way to go initially.

To answer your other question, I don't think there are US laws regulating payment aggregation (yes). I don't think the new money transmitter laws apply here, but I could be wrong.
It's presented as an infographic on screen, but it's quite a readable and interesting essay, and unlike most infographics, here the author makes clear all his assumptions and shows his work in the calculations he did to reach his conclusions. I shared this with my Facebook friends, who include many mathematics teachers.
I'm sorry to hear what's happened to you and your family -- it's clearly unacceptable. I'm not going to defend that. But I do want to respond to your last comment, because I don't want you to think I posted what I said from a position of being brainwashed by propaganda. I wasn't. It just happens that my own experiences, and my family's experiences, with the NHS have been positive (so far at least). I'm actually due to have an operation myself next week, one that is more preventative than anything and which could've been deferred had cost been a factor. Hopefully it'll go well. I know it's of little comfort that someone else's experiences have been good, but there it is anyway.

For what it's worth, how would you make things better?
According to you, it shouldn't matter where I was in Africa since the whole continent is "failed". If you now think that the blimps should be over the beaches (and shanty-towns...) of Cape Town, but not the red dots in the conflict zones, then you've changed your mind about that.

The nearest red dot looks like it's over 2000 km from Cape Town. Nothing within 1000s of km of all of Nigeria. There are huge markets there. etc. etc.
Treating your customers as humans is good business.

Customers pay and pirates plunder.

Software pirates will find a way to steal things they are unwilling to pay for. The smart companies in software will work to serve their customers and leverage the pirates for their one valuable quality - free marketing and distribution.

Another way to look at it is the reason the F2P + micro transactions works is the same reason that shareware works, lower the friction to enjoy the product and make it easy to share. Sharing is valuable.

Video game companies are so much hoping to stop piracy or used game sales that they forget that sharing a game with friends is free advertising and marketing for them.

If League of Legends wasn't free, I probably wouldn't have tried it, but because it is free to play a lot of my friends have played, purchased, and enjoyed the service. Apparently Team Fortress 2 makes 3x more money as F2P than a traditional $50 boxed game.

To me it boils down to getting your product into the hands of people who are willing to pay for it. If people aren't willing to pay for it without DRM, adding DRM won't make you more money, it will just piss off the people who were willing to pay you in the first place.

I'm kind of surprised how many of my hardcore gamer friends are anti Xbox One already simply because of the way MSFT is going to handle used games and DRM. They're losing the hearts and minds of their core market.
Certain traffic lights in the UK have something like that. If you flash your lights (at night) as you approach they will change. It's sometimes used where a minor road crosses a major one. At night the lights are configured to stay green for the major road, until either: a) a vehicle is sensed waiting at the minor road's stop line; b) a flash of light detected from the direction of the minor road.

The crossing of the A60 into Rempstone is one such example.
> and there is nothing particularly special about writing a kernel.

My support on this phrase, I had had discussions about this and can get very controversial.
Seriously? Validation has no meaning for me at all. If I can program something, then that is all the validation I need. Why don't you pay me the $40k a year for private education, and I'll buy you an account on Lynda for $25/month and tell you'll be a team leader at Apple some day. Sound fair? ;)
Not that it makes the Start screen any less wierd, but win+W keys open up search for settings, without having to press down at the end.
A bigger problem with that, two people using glass in the same voice range area will step on each others commands.
That's the most mean comment I've seen in this thread. Bellybutton:Button::Button:{Butt/On}
300K for a senior engineer? Maybe a few people at Google. I've heard of some 200K jobs at Apple for low level systems programming people that are hard to find.
Your Gmail Inbox Is About To Change Completely
dial :)
The Manager Who Lost the North
It is very explicit and C-like. If, like me, your favorite language is C, it's OK (I agree it's not optimal). If your favorite language has exceptions, it'll annoy you a lot.
Not only that, its a .blogspot.com.br domain.

When I removed the .br part it redirected me to .blogspot.co.uk
Why I Don’t Recommend Xamarin for Mobile Development
This article incorrectly refers to Linux as an operating system.
He used his ears. Stevie Wonder's retinas are not attached to his optic nerve.
We've had positive experiences with Start8 as well http://www.stardock.com/products/start8/
List of Food-related National Day of Civic Hacking Hackathons
Now if I could just get Ubuntu running bug-free on my Nexus 7...
Amitabh Bachchan and Salman Khan got their Facebook pages verified
Hey, that travel advice thing about been around for a couple thousand years:

http://en.wikiquote.org/wiki/Augustine_of_Hippo

And the idea of traveling isn't to spend it all in a bar. Anyway, spend your time as you please...
Just my luck that a group of Drupal enthusiasts came upon my comment...
Refactoring is not reformatting, nor are text replacement systems comparable. Refactoring allows you to keep program behavior the same while safely making structural changes to your code. Renaming is one simple example of this (where true refactoring tools are superior to textual find-and-replace because they understand which occurrences of an identifier are semantically identical). But there are many other useful refactoring operations, such as extracting a bit of logic into its own method, etc.
By far my favorite response to a confirmed bug. We use Jira, and unfortunately don't have that option configured, it's always a fun one to use ;)
I disable javascript. It's the only way to fully prevent fingerprinting[1]. Unfortunately, many web developers don't know how to write websites in plain HTML, or they want to use AJAX without any graceful fallback.

[1]http://panopticlick.eff.org/
Interesting how differently we view things.

I'd find it irrelevant what the founder was getting paid as long as I was getting paid the "right amount" for the work I was doing against market rates and I found it an enjoyable place to work.

The only time I would care about what the founders where paying themselves was if I was taking a reduced salary for some reason (and to be honest with the programmer job market the way that it is it would have to be a damn good reason).

The reality is that if you are paid like an employee that is because you are an employee and the owners/founders will get paid more or as my grandfather used to put it "No-one gets rich working for someone else".

I like the idea of a completely transparent company and will be interesting to watch them grow (hopefully).
> most people are clicking #2

Maybe a little nit picky but that's a bit of an assumption especially in the context of the article.

I guess it shows the importance of having more diverse results, you want other results appearing that strongly link to you positively (our official twitter/fb/software reviews for example)
That's an interesting article about how Japan hadn't yet extended their safety net (which includes things like universal health care) to the emerging edge case of mass layoffs, something that just didn't happen in their culture before.
Walter Russell Mead's blog pretty regularly talks about state and local governance. The big pension disasters are heavily biased towards the blue states, and red states like Texas have seen heavy migration from blue staters looking for jobs.

The danger is that migrants from blue states will turn red states blue and kill the nice business environment that attracted them in the first place.
POSIX time.h defines "unix time" as seconds since the epoch in type... time_t, which (according to the POSIX standard) can be either an integer or a floating point value.

In practice though, "unix time" is merely a convention which is based off of the POSIX standard.
Alright, Scala has been added to my list.
I don't think littleutils does much more than optimize images, which is pretty different from: http://www.imgix.com/docs/urlapi

Resizing or optimizing images, in isolation, is not a hard problem. I've solved subsets of this problem a handful of times before, and I could do it again, but I gladly pay for imgix. The time and headaches saved are easily worth it. The next time I have to rely on ImageMagick will be too soon.
It will only be one query. The django orm won't do any filtering outside the DB that is up to you.
It's interesting that they are expanding from good old games and bringing in a lot of good indie titles as well. I see them growing as a credible, DRM-free competitor to Steam outside the AAA, $60 game market.
"Anyway if you control the host"

In other words, if the host is sitting on your desk. Chances are good that you have more control over the computer you type your messages on than some server you set up. What makes you think that the rack mount you left in your mom's basement is not being tampered with while you are away?

"your attack vectors are dwindling fast"

Now you need to trust both the host and your client machines, while before you only needed to trust your clients.
FYI, I've built a transform[1] for browserify for JSX — now React apps can be written with JSX and using CommonJS module system and then consumed by browsers.

P.S. It doesn't work now with react-tools installed from npm due to bug with their release, which is now fixed in the repo but isn't released yet.

[1]: https://github.com/andreypopp/reactify