skysight-inc/HackerNews huggingface dataset:
Facebook can and should be held liable for clear failings on the behalf of their security team.

Absolutely no backend code should be pushed out that isn't first audited by a security company. God knows they can afford it, and mistakes like this could end up being much more costly to Facebook (stock price, lawsuits, etc).

Crap like this makes it clear that not only are critical changes to the security infrastructure at Facebook not at all audited (in-house or outsourced!) for even the most ludicrously-obvious security vulnerabilities, but also that Facebook itself does not take even begin to take security seriously.

And this is completely ignoring the fact that it took them five days to acknowledge such a critical issue, which is a further symptom of Facebook's sheer apathy to the security, privacy, and data of their users, both corporations and individuals alike. To think that a company/website like Facebook, containing as private and personal information as Facebook profiles have, and with such incredible monetary and technical resources at its beck and call cannot even triage incoming vulnerability reports correctly makes absolutely zero sense.
New Details on Skype Eavesdropping
"Flask will allow you to easily use NoSQL solutions if that's your thing"

Agreed - we normally use flask alongside psycopg2 and postgres but recently we've been using it with NEO4J for fun

http://www.coolgarif.com/brain-food/flask-api-over-neo4j-in-...
Really, you're declaring your own porn preferences as a universal human constant?
Divorce is hundreds to thousands of years old, in Christianity, Catholocism (annulment), Islam (featuring time-limited marriage contracts, and Judaism (Get) -> most of the Western world.
>Somewhere along the lines, college changed from being a stepping stone to the goal in and of itself.. and no one considered what comes after.

I think some colleges and universities themselves are a part of this. The attitude from my school (small liberal arts) at least was that college was explicitly NOT meant to be training you for your future career, but rather that your studies were worthwhile for the sake of learning and personal enrichment. Just a lot of the "teaching you how to think" bs that liberal arts schools tend to sell themselves on.
Use Django when you're an agency making a finite delivery to a client. :)

Edit: on a serious note, use it when all the dependencies it comes with matches what you exactly need. Once you're down the path of swapping something out, all the third-party apps/packages (one of the key features) become useless. This becomes problematic when you start to use something like MongoDB and end up having to write a lot of code on your own.
What do you mean? When you think about it, you can still charge people for support, warranty etc.
Why give credit to reviewers?
I've found if my fingers are flying and I have a determined look on my face, it goes over a lot better.
While I know its 4:40PM PST so the supreme court ruling is "old news" already, but I'm disappointed that this is the only related post to the rulings on the top 60 of HN. And it's not even directly about them.

Snowden, on the other hand, dominated HN when it broke and still continues to do so. While HN isn't necessarily political, it often is for matters of liberty. Why isn't this a bigger deal in this community?
Better question: 'ask' is its own page, why not 'show'?
Personally, I use "analog" to mean "not digital" and "analogue" to mean "something similar to". I think that's a little clearer, at least to some US readers.
previous discussion: https://news.ycombinator.com/item?id=5946362
Either, I'd be particularly interested to hear if you were open to one but not the other.
It's cool to see these images improve, but they just got this idea from MapBox, no? Just like they got the idea to move on vector and 3D from Apple. Is invention at Google Maps dead, and now we just watch as they ape their competitors to stay ahead?

Reactivity is to be expected from the entrenched player, but aping competitors alone won't keep Google relevant forever.
Wayland alone might not, but MAC can limit access to file descriptors
That's a proposition. Is there an argument to back it?
Why should marriage be life-long, vs time-limited?
I was hoping for something a bit more vector based. G-code seems more like Logo than PostScript.
Would you be saying the same about "it's OK for companies like Google to have the courage to have an opinion" if Google was taking the opposite stand?

I'd prefer mega corporations staying out of social issues. Produce social value by making great products, not political advocacy.
In fact, they will be integrating SMS "soon": http://www.engadget.com/2013/05/16/google-hangouts-sms-integ...
A TypeScript & Alt JS Grab Bag
Probably some old code that was written in haste back in the day, and that never got touched because it got the job done.
>Opponents of the proposition pick a district court with a judge whose bias is known.

First you can not "pick" a District Court Judge, cases are assigned to District Court Judges.

>The state puts up a defense, loses, and then does not appeal. There are, now, no safeguards blocking this sequence.

The first ruling is the safeguard...Judges can not just rule according to their gut or "bias" they have to follow precedent - they can not ignore case law nor can the attorneys.

Besides, if you think the State is acting so unethically, in basically throwing the case (which again is not really possible in a Federal Court Civil Rights Case), then they will simply take the appeal to blok a private party from doing so, and just lose that case. Then what? Appeal to the SCOTUS? Well as it stands the SCOTUS does not have to take any case, in fact the majority of cases they appealed to them they do not to take, approximately 90% of every case they hear is some death penalty appeal. SCOTUS has a history of passing on very important issues, and could have passed on DOMA if they wanted.

>The protection of the court is useless if you cannot get your day in court.

They had there day in Court and lost, they decided not to appeal, no one can force a party to appeal. It is not for private parties to assume they could have done better than the State and interject themselves in the State's place and appeal. That opens a floodgate of real issues. Who has standing when multiple parties want to take the case? What if one of those parties is actually adverse to the position?
If you're really careful and not use anything from base that might use an Integer ;)

Currently non-Haskell dependencies are managed per package, so if anything from integer-gmp is linked, it will include the whole JSBN.

If you want to weed out the unused JSBN part, you can use closure compiler (although the new code generator will probably still have a few incompatibilities with it).
Probably. The main guys who created Google Maps are long gone.
A question for anybody that may work on the Earth project. Is Google actively trying to fill in past pictures, or only working forward? One of my favorite features was to do the time slide backwards on towns I lived in. Some go back to the 80's and others only a few years.
Dropbox: What is Packrat?
Well... No. And I say this as someone who write Obj-C all day and actually likes Obj-C.

Obj-C is a relatively thin layer around C, it's nowhere near Java's level of abstraction.

For one thing, at least on iOS, there is no actual garbage collector. ARC is a static analyzer that injects manual memory management code into your app - it does not collect garbage at runtime.

Even with ARC you are still managing your own memory - it is not possible to write a complex iOS app without understanding manual memory management and what the different reference types do in this regard. This is in contrast with Java where you really don't have to understand memory at all to write non-leaky code.

You're also allowed to (though not encouraged to) do low-level hackery like pointer arithmetic. There is nothing stopping you from reaching down and fiddling with raw memory addresses and values. This is in sharp contrast with Java and other high-level languages where you're very explicitly forbidden from doing anything that might blow your foot off.

The runtime itself is also really thin compared to the JVM. Hell, frequently the first you know something is wrong is when your program segfaults. Try that with Java.

Not Obj-C, but OSX/iOS, is also that as soon as you get into any of the deeper libraries you're in C-land. Core Graphics is exclusively a C API, as are many of the other APIs like calendaring and address book. You really can't go deep into the platform without touching raw C.

Anyways, Obj-C isn't on the same abstraction plane as Java, not even close.
So, correct me if I am wrong, you are going to misuse a tourist visa in a country which has questionable police practices. Are you sure this is wise?
Because you can't conspiracy-theorize it. I'm only half kidding.
And equivalents in Polish language (and probably dozen others as well).
Could be. I thought analogue was just the british variant of the spelling.
I've always been suspscious of RubyMotion for having no trial. Now I know.
I can't say I've ever noticed this feature before on Dropbox. I came across it while searching for the correct use of the word/term packrat (with or without hyphen). Nice use of the word on Dropbox's part.
Come to San Diego. Our meetups are great from the several different ones I've been to. I haven't encountered anyone like you described.
It hadn't really been widely used for anything more than image rollovers though. His concerns arose when entire apps began being written in client-side javascript
Comically low compared to what? Sure, compared to a CD sale they are low, but the royalties on a CD sale cover all future listens, by all future owners of that disc. Royalties on radio playback pay for one listen by tens of thousands of people. Royalties from a stream pay for one listen by one person, of course they are low.
Jibes pretty well with the theft of Glenn Greenwalds partners laptop just 2 days after he communicated over Skype that he would be sending the Snowden files to him.

“When I was in Hong Kong, I spoke to my partner in [Rio de Janeiro] via Skype and told him I would send an electronic encrypted copy of the documents,” Greenwald noted. “I did not end up doing it. Two days later his laptop was stolen from our house and nothing else was taken. Nothing like that has happened before. I am not saying it’s connected to this, but obviously the possibility exists.”

http://arstechnica.com/tech-policy/2013/06/snowden-distribut...
This. G-code is more like Logo than PostScript. Something based on meshes and computational-computed surfaces (e.g. bezier curves) would work better. In fact, we could get most of the way there with OpenGL/DirectX at a low-level (meshes to specify a few vertex positions, hull shaders to to extrapolate additional vertices based on whatever algorithm you want).
> 60fps scrolling?

It's pretty easy to make UITableView's chug if you do something stupid when populating cells as well.

> A semi-decent animation framework for developers?

The property animation system introduced in Honeycomb and backported to what, 2.2? works very nicely.

> Low audio latency

Audio has been an issue on Android. I've not delved into it myself but this is certainly something that only seems recently fixed. Not sure this warrants calling the platform far behind though.

> and good power management?

I'm not sure what you're getting at here.
I don't think you should be disappointed for two reasons.

1) Outrage will always get more publicity than celebratory or agreeable states. That's just human nature. I suspect by it not being big news on HN it is because most of the community supports Gay Marriage or at the least is not offended by it. I strongly support it.

2) it isn't technology focused. The NSA snooping is about misuse of the technology we all hold dear. It's also international, where as a Gay Marriage ruling in the US is really a regional issue, where many of us already live in more enlightened places. NSA snooping through major international sites is an international issue. Even if I'm never in the US, facebook, google, et.al (did I use that right?) affects me too.

So take heart, it isn't that the HN community doesn't care, it is more likely that many of us say 'good, about time', but that man not necessarily prompt an upvote.
The article did a pretty bad job chronicling his history at Microsoft.

Tod presided over developer tools at Microsoft during the 90s, and played a key role in making Windows the most popular developer platform during the 90s.
"This announcement is enthusiastic, rather than saying..."

Well, Netflix is in the business of renting video, not in the business of fighting DRM.
wait, who has gone a decade without a profitable year? because it's certainly not the music industry.
But that would Give Information to the Enemy and Threaten America™.
> But that would also make your web site inaccessible to most users.

I call this a feature and part of the sad state of the web. In other words i think that is a point they would like to illustrate. I dont think a 100% score should be possible if it isnt technically correct. Poor compatibility on the browser end isnt really their problem and certinly shouldn't limit scoring.
How many more replies before everyone figures out they're being trolled. By a throwaway account that's not even hiding it no less.
It took me a while to understand what you meant by this. It was obvious to me that the loops under test do do work (the shift/increment) every time through. But we're talking about different loops.

For others trying to understand this comment: the TEST loop which runs the code being benchmarked is short-circuited in the 'do' and 'while' cases because the setup code does not get re-run, so on the first test loop, it sums up an array of random numbers, and on subsequent runs, it sums an empty array. This also gave me the 'aha' that explained why the huge difference between 'while' and 'do': in the 'do' case, we execute the loop at least once in every one of the hundreds of millions of test runs, whereas in the 'while' case, the loop is executed 0 times in all but one run.
I recognize that, and I think there are good reasons for justifiable divorce to exist. No-fault divorce is newish since the last major social reboot, coming into being starting in the 60s.
The biggest reason I see for the payouts is simple:

That exploit has a value on the 'black market'. If it comes down to "no money" or "$20k", people are going to be looking at the "something" instead of "nothing", no matter what the laws say.

The bug bounties don't always have to be a lot - most people will want to do the right/safe thing anyway. They just have to offer some incentive (we've all seen some success with even $800 bug bounties) to keep the honest people honest.
I don't argue with that. All I'm saying - they are pro DRM. But when confronted about it, they try to deny it, and pretend they aren't. Being pro DRM is bad PR for them. Publishers are at least honest that they support DRM (out of some stupid reasons). It's not publishers however, but Netflix who pushes this garbage into the standard. So they have to bear the responsibility instead of pretending that they have nothing to do with it.
Interesting, arstechnica has almost the exact same article, even the encrypted message image is the same!

http://arstechnica.com/security/2013/06/can-apple-read-your-...
This Startup Wants Your Teen Child for Unpaid Labor
Manage debt and credit:How graduates can avoid financial troubles
Because gay marriage has nothing to do with technology, but NSA spying does.
How is that significant, though? The fact that the money isn't in any specific national banking system doesn't change the laws that you and your business are subject to unless you happen to find a country whose laws only care about property that's in the banking system.
What if Edward Snowden were Chinese?
Why reuse the name? That's just confusing (and a bit disrespectful).
Though it is more focused on online hiring, you might find some good pieces of advice here: https://news.ycombinator.com/item?id=5774303
Inside An Illegal Party In An Abandoned Subway Station Deep Under NYC
The Machiavellian texter
ngrok is functionally equivalent to our Passageway: runscope.com/docs/passageway. Can never have enough tools out there though. Looks great Alan.
sounds scary. You forgot to mention furry hands though.
Exactly. If I'm not mistaken sometimes terrestrial radio stations are PAID by the labels to promote certain shitty pop songs. Why do you think they play the same ones every hour?

Here's another thing I don't get thought. I listen to albums every day on Spotify. I also bought a few on iTunes. How much of that $9.99 does the artist get for my unlimited usage?
Yes, hence wanting to know if it's included in 8.1 preview as it has been in the leaked prerelease. http://www.winbeta.org/news/leaked-windows-blue-build-9369-h...
This root of this bug (exposing profile_id or some user identifier in a hidden field and passing it to the server as a parameter) is incredibly common, and super easy to exploit via inspect element.

We have a rails test that we give dev candidates, and red flags go up when we see this happening (which is far more often than I'd like to admit). Kind of scary that there's likely a bunch of production code floating around that is so easily hackable.
amazon.com?
The more people standing up to call bullshit on the NSA, the better.

I'd like to live in a world where ideas are discussed on their merits and not based on the people proposing them, but we don't live in that world. When the "creator of the web" says something, it makes news in a way that it does not when you or I say something.
If someone needs a monetary incentive to be honest then they're not honest, in fact they're quite the opposite.
I disagree. No-fault divorce is the result of skewed moral perceptions and broad disconnection from reality. No-fault divorce has hurt women very seriously, which is evident from the precipitous increase of divorce rates since no-fault was established as the effective norm (NY was a fault state into the 2000s on paper, but effectively no-fault in implementation (no substantiating evidence was really required, and it was a forgone conclusion that a judge would grant the divorce once the divisions of assets, custody, etc., were agreed by both parties)).

I doubt we'll ever agree on this, however, as you apparently see the destruction of meaningful marital covenants as an emancipation.
Slightly off topic, but does anyone else experience poor audio echo in Hangout video conferences?

At work we would kill to replace Skype with Hangouts, but with the same computers and the same microphones, everyone in Hangouts constantly hears themselves, while Skype reduces hearing yourself to a very rare event.
Here a screenshot, just in case they decide to take that blog offline

http://i.imgur.com/Duyq1N4.png
From memory there was a few, but I've lost the links file I had. Contenture was one of them. There was a project at one of the journalism schools trying to push the same model too.

It's a good idea on paper, but actually making the market-building side work is really hard.

I've been focused on the technology side because hey, that's how I'm wired. Essentially, you can't rely on standard web bugs or javascript approaches; they're much too easy to subvert.

In my honours dissertation I identified 9 distinct attacks on the "naive" protocol and developed countermeasures for each. But that design is fatally flawed too. I have another design which ... well, watch this space: http://robojar.com/
Looks cool, maybe I'll contribute
Don't let it get to you.

The web is just the interface. What's going on behind the scenes varies on the application. The parent made an extremely broad generalization.
I don't think you can credit Apple for the technology to make 3D photography, it has been a very well established technique for quite some time. Apple just happend to buy a company that did exactly this.
Please don't get confused, there are foolish people utilizing every programming language all the time. PHP may be disproportionately more popular than other programming languages but it hardly deserves the blame.
Flamingo: Better colors for basic Bootstrap
'Plagiarize'? 'Stealing'?

No, not even close. No code was reused, any parts similar were reworked as far as I can see.

A real shame they didn't dial it back and make it a fun article. Inspiration is something we all use.

If I inspired someone so much they went off and made something similar that would make me proud.

This wasn't a stolen 'code and all' website, at best 'some' parts that are pointed out as similar were recoded and reworked, as far as I can see. That's hard work.
I think native code GHC has its stack in the standard location, though it manages it explicitly (as most native code languages do). (I'll double check the ghc source later to make sure i'm quibbling correctly)
Absolutely. It's OK for Chick-Fil-A to have an opinion, too.
The Scandinavian countries and Australia have this problem solved. Divorce doesn't hurt women if there is income parity, no stigma and comprehensive social services for children.
The tech I'm developing makes this possible. The basic model is subscription sharing based on views, but it can be adjusted for time on-site etc. My intention is that the agreement with publishers is that they won't show ads to subscribers.
Maybe the data isn't rolling out to everyone simultaneously?

Here's what I see--no clouds at any zoom level: http://i.imgur.com/M6PuwgI.jpg
Chrome 23.0.1271.97 (AdBlock, Ghostery, 3rd-party cookies off) and I'm not getting any phishing warning.
Have there been any recent rumblings on #pocoo on extension approval?

It'd be great to see Flask-Security gain more prominence (after you change the default away from plaintext of course :)
I do believe that is incorrect. Wikipedia http://en.wikipedia.org/wiki/Nocturnal_emission#In_men summarizes Alfred Kinsey's Sexual Behavior in the Human Male, p. 275 as follows:

> For males who have experienced nocturnal emissions the mean frequency ranges from 0.36 times per week (about once every three weeks) for single 15-year-old males to 0.18 times per week (about once every five-and-a-half weeks) for 40-year-old single males. For married males the mean ranges from 0.23 times per week (about once per month) for 19-year-old married males to 0.15 times per week (about once every two months) for 50-year-old married males.
They offer a "30 days money back guarantee".
Not sold on using it? What are the reasons?
A better analogy would be that a test drive is an advertisement.

If I can get a "test drive" of the music whenever I want, all the time, then yes, I'd be less likely to buy it. And so there's likely a crossover point where too "smart" streaming systems will cut into revenue. You see fear of that in e.g. last.fm's restrictions on number of skips per hour for the web player.

But it is pretty clear that a lot of peoples music buying habits involve first getting to know an artist or a specific song via exposure to it. All the music I buy comes as a result of that.
Sounds like a great idea at least in principle - if you're typing a password, tell the special password keyboard app where you expect it will go, and then firewall the app from sending it anywhere else.

In practice this app sounds like it's at least as large a security hole, if not more:

ScreenPass guarantees that users always input passwords through the secure keyboard. It does this by using computer vision to periodically scan the screen for untrusted keyboards.

No thanks, I'd rather not.
Only when he proposes it and fights for it. Anyone that does that will attract the same attitude from me.

Not to worry, I'm not even an Australian voter, I'm just a brit that bailed a year or so before citizenship was an option, though I do love the country and am under no illusions anywhere else is politically superior.