skysight-inc/HackerNews huggingface dataset:
Looks like app.net isn't perfect either. Their HSTS isn't implemented correctly. Only 'alpha.app.net' and 'join.app.net' are protected while 'app.net' is not. They fell into one of the common pitfalls with their http->https redirects: http://coderrr.wordpress.com/2010/12/27/canonical-redirect-p...
You can verify this at: chrome://net-internals/#hsts
Has anyone had the experience of being told to simply throw away a glass bottle - that it's essentially made of sand, and it's much more efficient just to make a new bottle from the raw material? That's happened to me, from someone working at a restaurant. I get the feeling form this (small) story, that that's not actually entirely true. What say you, HN?
Heap Spray Exploit Tutorial
A few things a like that. I get 1L bottles of a tomato pasta sauce I like. It costs about US $2. It tastes good and has a custom bottle for the brand. How do they do it? I couldn't grow the ingredients from seed for that price as the seeds alone would exceed that cost. Then making the sauce, the bottle, then shipping.
Are we all violating the Computer Fraud and Abuse Act of 1986 by exploiting this weakness? By following a link?
OK Might as well keep stupid laws in place then? What's your point? Should we also outlaw fast food b/c more low income people eat it and we all know lower income people commit more crimes?

I got it! We'll outlaw poverty!
> This means that it would be possible for someone to put themselves into a state where they'd be permanently prevented from reselling or giving games because they don't have physical access to some console that's been put in offline mode.

This isn't really too big of a problem. Just require users to phone in and request a license transfer if they lose a console. Limit the number of times that a customer can "lose" their console without an investigation.
The statement is indeed ambiguous, however CA citizens are pestering local law enforcement regardless of their intent (be it for or against). The amount of people fearing 'illegals' is certainly not small, however the amount of people fearing overzealous police departments is also not small.
How do you deal with fraud in this type of site?

It seems like anytime you are offering a conduit between a credit card number and a bank account you are at risk of someone push a large number of fraudulent transactions through and hoping to cash out before the chargebacks start.

Payment providers clearly have this problem (ie. Stripe does itself), but as a small startup it seems like a pretty daunting risk. Why not use Stripe connect in this case and simply get the couple to sign up for their own Stripe account?
Maybe, but cars just don't explode like that. Engines don't just fly dozens to a hundred feet from the vehicle. Given how the impact with the palm tree occurred, the engine should be under the passenger/driver. They are designed to break free and be pushed down under the car in high speed impacts so that they don't end up in the cabin and crushing the legs of the passenger or driver.

I'm actually very curious where the engine is relative to the car.
Somebody needs to watch the 'Collateral Murder' video again.
Perhaps, but there was a more serious, barely veiled threat of disbarment or sanctions against this lawyer for misrepresenting the law in his C & D. This may be why Kaplitt was able to have such a rollicking good time with no worries about blowback: he knew he had this ass over a barrel. (I thought the response was awesome.)
Disclosure: Rackspace owns ObjectRocket and I work at Rackspace.

Have you tried ObjectRocket (if you're in US-East or US-West)? http://objectrocket.com/ High performance Mongo with replica sets.
Why India Trails China
Saudi Arabia (like Kuwait) doesn't have much of a military, but it is absolutely crucial to the world energy market. The US will apparently spare no expense to protect it.

That and genwin's reason.
I guess it's a good thing I never reset my LinkedIn password after they lost them all, so I don't have a LinkedIn account to be hijacked.
But most of the people in jail aren't on the supply end. That's the point.
Tiny Tiny RSS on Heroku - http://projectdelphai.github.io/blog/2013/03/15/replacing-go...

I like it because its free and I own the data. While it may be more difficult to set up than other online services such as feedly, old reader, or newsbleur, at least I get to have control over the service. Even if Heroku goes down, I can just move the application to another hosting site (such as openshift or linode).

If you don't go this route, I would also suggest Feedly. It's a great beautiful service, but just wasn't right for what I wanted and I didn't like how they handled certain things.

disclaimer: the link is my own post.
Fantastic! I did hear there were some big documentation updates coming, hopefully this is the first of many. Thanks for sharing.
http://www.youtube.com/watch?v=wB74_jhDC-Q

http://www.youtube.com/watch?v=7lPyUCBuwUM
I'm using it until it dies. None of the alternatives work for me. I only use it as a back-end for NetNewsWire, and only open NNW a few times a week.
Yes, he is an evangelist for WebStorm and is involved in the new Android IDE.
No, but Sony gave that possibility then took it away.
On the old analog internet it worked great.
Ah ok. That's very misleading. This is a pretty open call for nominations from the public. The actual people selected from that group that Laureates vote on is kept secret.
So has the Xbox One, although there's only one SKU so far.
imho, great video, but please change the initial video screenshot.

The pre-play screenshot seems a bit angry, and Im note sure how it ties in? In contrast, the content of the video I think was on-target, and thought provoking.

A shot of manning being 'escorted' to trial, or just his face would be more suitable I think.

or you could lead with the text slide "Is truth the Enemy? ..".. which is impactful.

Thanks for doing this!
I find it much more likely they went this route for the style. The photographer for these photos is Lam Thuy Vo [1] and based on her gallery, she appears to shoot with a 5D Mark II. She is obviously comfortable with a high quality camera.

[1] http://lamivo.com/index.html
Adding support for search engines to your JavaScript applications
As a counter anecdote, I've seen that happen several times. A few months back, a truck struck a tree, the engine block was 50' away, and the transmission actually busted through a wall almost 70' away.

Interesting. I wonder what would account for the difference in experience? Maybe newer cars are more prone to that? Maybe traffic in your area is moving faster... are the accidents where you've seen this typically on a freeway / interstate, or a secondary road or what?

The initial impact could certainly have been loud enough to sound 'like a bomb'

Agreed, and that would be my default assumption, lacking any other evidence.
You can go into a bookstore right now and find books calling Obama a muslim traitor and probably the antichrist. If the government actually killed authors who wrote negative things about presidents during their terms, it would be the second leading cause of death for American authors after alcoholism. Hating on presidents in the long form is practically an entire genre.

Sometimes, you know, people take too many pills and then they never wake up. Sometimes people get into car crashes. Sometimes things just happen, and death like life doesn't have to follow a neat and obvious narrative.
the full source code is up at https://github.com/Tokutek/mongo
I use DDG, but whenever I have the sort of search intent you outline, I simply append !g and search Google instead. It's also easier for me to use DDG and append !gi to look at images, rather than run a Google search and then switch to image search.
World's First Supersonic Drone Ready For Its Maiden Flight
I'm glad you think the war in Iraq was bad, because so do I.

But why would it be OK for someone to have a hand in 116,000+ deaths for democracy but not be OK to have a hand in 600,000+? There's no good answer to this question, which is why I don't see why Manning would want to be known as the instigator of it all.

The rest of your points, even if we simply specify them as true, don't really explain why Manning's own supporters engage in lies and propaganda. So while it's nice to see them again after so long, we pretty much do already know about those claims.

E.g. the maltreatment; the trial judge agrees with you and Amnesty International, so why was that not put on the website? At least that would have been truthful. I would think it would also further the cause of the site in getting the "aiding the enemy" charge dropped, if that's really what they were about.

> I know the reason why they put him through that - it is because Manning was expecting life in prison or to be executed for what he did.

If what you say is true, then the military would also have mistreated Sgt. Bales, but they didn't. Murder is a capital offense too, in the military.

On the other hand, Manning's own lawyer said that Manning "joked" about killing himself, which is typically a fairly solid plan for landing yourself on Prevention of Suicide Watch status in a military prison. Doesn't excuse keeping him in that status after his military psychiatrist deemed him not a suicide risk, which is why the judge reduced his sentence, but nor does it require some massive conspiracy to explain his treatment.

So, if I were a supporter of Manning I wouldn't even worry a bit about the charge of "aiding the enemy", which is almost trivially proven by the prosecution given the way the UCMJ is written. All they really have to prove is that there exists at least one classified document that Manning felt would be posted to the Internet by WikiLeaks, and that there exists at least one enemy of the U.S. with direct or indirect access to WikiLeaks.

Instead his supporters should focus on getting his eventual sentence reduced (though Manning himself is doing far better to help his cause than his supporters are, IMHO).
The town of West Orange has been the subject of ridicule for some time: https://www.youtube.com/watch?v=sUzs5dlLrm0

Pleasant Valley Way, the subject of the tune, is in West Orange. https://en.wikipedia.org/wiki/Pleasant_Valley_Sunday
But again: the ability to amortize a big upfront payment over a two year contract is also a characteristic of "rich" consumers. Not everyone has $200 in the bank when they need a new phone. These people end up with Gingerbread handsets.
Go after specific laws. Specifically with drug laws, a strong case can be made about the nanny-state; it seems like a lot of the core republican (especially the libertarian wing's) message would make our current war on drugs a prime example of our big-government nanny-state.
Did I read correctly, that the authors of the original paper were allowed to review the rebuttal article, and even worse, their single negative review caused the paper to not be published?

Isn't there some concept of recusal, conflict of interest in allowing a researcher whose results are being challenged to review the challenge, and veto its acceptance? That's absurd on its face.
Yea, if at all possible you'd be better off using amazon's add to cart api over this, do to the 13% swing in cost.
Wasn't Ambassador Stevens in Libya?
That would be a valid theory if they didn't have a very similar competing product released at about the same time. A competitor that captured the lion's share of positive publicity by merely maintaining the status quo.

As it stands, I will be surprised if XBox One captures 25% of the latest gen console market when it is all said and done.
They forgot?
I'm not sure I get the advantage of DDG's bang commands over using browser search keywords. I have one or two letter keywords for the few site specific searches I occasionally use (I find I use Google for almost everything, these others rarely, for very specific things). With bang commands I don't get to pick the mnemonic and it is often more than 2 letters. Also, for some people bang commands simply might not cover all of their specific searches (I just checked that they do for me, but, as I said, with much longer syntax than my browser keywords).
Sounds like you would enjoy cinemagraphs. For example: http://annstreetstudio.com/category/cinemagraphs/
Furthermore, many people in our industry don't even wear suits to interviews (I've interviewed many candidates and never interviewed a candidate in a suit)
Microsoft remembered it sells (mostly) console, not (mostly) games.

pleasing the pirates sells wonders.

If you only lived your teenager years in the US or Japan, then you will not understand. But Sony et al sold millions of consoles to other countries where the market probably bought 1 game per 10 consoles sold (numbers vaguely remembered from a playstation1 analysis i read a long time ago)
For those that don't get the last part, I'm pretty sure he's referencing Stallman's spiel about "GNU plus Linux"[1].

[1]http://ohinternet.com/Richard_Stallman
US Denies Atheist Citizenship Unless She Proves She Is a Church Member
If you have a static html page, do a silent redirect to the CDN which will also host the html page apart from the resources. That will work nicely.
> how do you possibly make the leap that it's 'more likely than not'?

Because I'm not a coincidence theorist when it comes to how power operates. The Obama administration has publicly claimed the power to kill American citizens, the first administration to do so.

To ignore that consideration is just as shortsighted as saying, "A DRONE STRIKE DUN IT!".
These people clearly missed the point of Manning's leaks.

Its like how Christians worship Jesus instead of God. The point of the leaks was to shed light on the atrocities committed by the government not so that Manning is glorified into some sort of saint. I mean, I'm all for doing that- but wtf is the point when the same atrocities will happen again on some other day. You can argue that so that future leakers will get protection- well let me remind you there won't be any future leakers present anyway. The government will certainly start to smarten up about who they choose that pulls the trigger.
This is a shame, I was really looking forwards to disc-less play and family sharing.

How cool would it have been if all my friends made a family group and with that we can all play each others games. But no people love gamestop.
I want this as well, but I'm not exactly sure how that will jive with the mandatory kinect. My 360, along with all of my other components are in the basement.
Two things I love about these videos:

1) They're far simpler and easier to follow than anything I've found in the official Angular docs
2) He includes a brief section on testing. I'm a self-taught developer and work exclusively on my own projects. And I rely pretty heavily on tutorials. It's so rare to find a tutorial that spends any time at all on testing.
>>This is why both fire and ambulence are dispatched to accidents.

I don't think you can make that claim necessarily. Firetrucks get dispatched for people experiencing health emergencies as well as ambulances just because they are often able to respond more quickly than EMTs. I know this from talking with my firefighter friends and experiencing it first hand with relatives that have passed.

Also firetrucks were always being dispatched to a retirement home where I grew up, not because there were fires or a likelihood of explosion.
It's always the new guy, f'n new guy.
Unfortunately, it looks like such kindly worded cease and desist orders do not actually produce results, the person here doesn't appear to have changed the cover of the book at all.

http://www.amazon.com/dp/1621050203
Yeah, fires definitely happen as a result of collisions, they just aren't terribly common. Or at least that's been my experience.

I think there's an NFPA (or IFSAC or similar) recommendation on the charged handline thing, but my department defaulted to stretching a line but not charging in most cases. But we did require a charged line in place on any extrication scenarios.
There used to be a time when all programmers were true CS graduates. But demand for tech across the boad has risen and now we have hacker schools that get you up and running in 6 months.

If there is a corresponding rise in demand for design skills, at some level across the board, you can expect the same trend.

Reaching your peak and landing a job are two different goals, and if more designers are needed, you can be sure companies won't wait for a full grad when others show they can perform many of those tasks "well enough"
Someone turned off the 'more magic' switch...
Starting Forth – the classic Forth language tutorial
DNS hacks on big public companies seems like a big security oversite form the linkedin team. wow.

Perhaps my HTTPS anywhere extension could have helped folks.
Maybe the methods would be tailored to the specifics of the person targeted. That makes a lot more sense than some sort of generic "send in the goon squad."
This combined with JS-FORTH allows a person to learn and test examples without having to download any extra software.

http://forthfreak.net/jsforth80x25.html
Three ideas:

1. Write a list of things that you need to do each really small implementations and keep it in front of you (I use google calendar tasks and keep it in an open tab next to you). Each time you finish a task highlight it or check it off. After a while, each unfinished bullet point will start to bug you especially the longer its been unfinished (at least for me). This helped me finish tasks I hate just because I hate it being the only unfinished task on my list.

2. I can't remember where, but I once read a statement by a coder who said that if a change is too hard implement [in code] restructure the code so that the change is easier to do. I would suggest that whenever you need to work with a section of code that you rewrite it so that you understand it better and can work with it. After all, its your project now, not the old developers. This will take time, but if you plan to stay with the codebase for a while, it might be the better option.

3. And then of course, you could just chug away at the project and work your way through it. If you just want to finish it hard and fast, I would suggest the Pomodoro Technique. I always prefer #1 than the pomodoro, but I've read a lot of people that swear by it, so it probably has some value.
I know that sounds crazy, but I'm seriously considering drinking no poison at all.
It varies by jurisdiction. Some fire departments provide both fire protection / fire suppression and emergency medical response. Others do only fire. But even departments that are "fire only" (like the department I was with) are dispatched to most car accidents due to the fire risk. 50 times out of 100 we got there, did a quick size up, found no risk of fire, and returned to quarters, but on the more serious crashes, we would stay on scene while the medics were working. If there was someone pinned in a vehicle, we would pull a 1-3/4" handline and charge it and keep it in place in case anything happened during the actual extrication process.
I'm sorry, I can't see any mention of a seller resource at https://stripe.com/docs/api, nor does the Ruby library seem to implement it. Is it called something other than Seller?
Recycling is a good thing, the opinions of waiters (or what not) not withstanding.

Maybe restaurant employees aren't the best source of info on the topic.
I think it's worth more than $100. I certainly can't see how the no would be resounding.
It's user-dependent. Stripe provides users with some protections (e.g. against card-testing), and then users will verify their platform's sellers in a way that makes sense for them. Lyft and Sidecar collect drivers' licenses from drivers, and only pays them out in proportion to the amount they drive. Homejoy trains cleaners, and each user rates the cleaner. And so on. Fraud is heterogenous by nature.
The point was made in my first post:

"the great evils in history generally, and the Holocaust in particular, were not executed by fanatics or sociopaths, but by ordinary people who accepted the premises of their state and therefore participated with the view that their actions were normal.""
OP works there according to his twitter feed.
Thomas Watson, not James Watson.
Wow yeah, firefox here on a desktop - they moved the browser's scroll bar from the far right to the right of their content (the middle of a 1920px wide browser). I was clicking where the scroll bar would be to try to scroll - and what that did was for every click I made (on a blank background), when I clicked "back" to get back to HN after I read it, it cycled me through as many different stories as erroneous clicks I made before allowing me to back all the way to HN. (basically spamming 3 different stories I didn't want to read instead of "back" button functionality)

Terrible UX.

Edit: additional paranthetical
I don't really see how the features they removed are incompatible with not requiring online checkins every 24h and certainly not with the used game policy. I don't see why they couldn't have made the online checkins optional, but required to do any of the game sharing, and if you don't check in within 24h it just disables games that aren't yours and doesn't let other people play yours.

Sure, that could be gotten around but people are going to figure out how to pirate anyway.
That still doesn't make it more likely than not. A regular car crash is still far more likely.
I don't know which is worse: that my computer can't load and render a simple webpage with 5 gifs, or that a webpage is so poorly optimized that it puts my laptop on it knees...
Don't worry. Valve will come out with a nice car (SteamBox) and will craft their message more carefully to make sure all of the horse lovers don't get spooked before they fall in love with the ride.
Random anecdote:

One of the DNS issues I tried to fix with NIS+ was the 'maintaining a list of trusted servers' problem by distributing the management of the authoritative servers. Trust was built bottom up, and authority came top down.

The way it worked was that clients used a 'coldstart' file which was the (small number) of servers you trusted to provide your namespace lookups. You to their public key and you put it into your coldstart file. Similarly, a server put the key(s) of the servers it trusted above it in the name space in its coldstart file. And at company 'root' level was a set of servers run by a trusted authority.

Locating the authoritative name server for x.y.z from p.q.z (same as DNS root is rightmost) client in x.y.z asks its server for a trusted y.z server, gets it, and asks that server for a trusted z. server, then asks that server for a q.z. server and finally for a p.q.z. server. Once this has happened once you know trusted servers can can jump to the nearest one to start resolving a new path in the namespace.

It was slower on initial lookup and then just as fast as DNS on later ones.

It had the downside that compromised (or borked) high level servers could send you on a different path to different root if the server above them was incorrect.

It is one of the more fun problems in the whole name/directory service space.
I often describe LinkedIn as a bunch of business people, who have a website. It's not a tech company and the hiring reflects that.
Sounds like Bulgaria.
"market probably bought 1 game per 10 consoles sold"

You seem to have reciprocated your fraction there: http://www.vgchartz.com/analysis/platform_totals/Tie-Ratio/G...

Globally, the PS1 sold about 9 games per console. I don't necessarily fully trust that site or that number, but it's probably at least within a factor of two, which still leaves it a great distance from your number.
Acknowledgement of the leak demonstrates knowledge that the US government is actively violating the constitutional rights of citizens. Assuming it is the most "just system" in the world where one is "guaranteed the right to a fair trial" contradicts that (an assumption that the government will not violate rights).
Maybe food should be free.