skysight-inc/HackerNews huggingface dataset:
I found this part of the article particularly interesting, because I've seen more than a few comment threads on HN lately where people say you can't be arrested for resisting arrest alone (as it makes no logical sense)

Because Contempt of Cop has yet to be codified into our criminal statutes, the trooper allegedly drew a blank at first when filling out his report. But even the final reduced charges are ridiculous, especially the resisting arrest charge. If you're going to charge someone with resisting arrest, it should logically follow that an arrest was already in progress.
> JavaScript-based sites are as accessible as Flash-based sites - the developer has to know how to make it accessible, or it isn't.

How is that the case? The text is on the screen like any other website would be. It's not an image or in a binary format like it would be with Flash.
I don't get why this is a problem.

In the PC world, authenticode on executables does not really offer that much security: Any malware can be signed and you normally don't verify the signature of applications.

And with Android: Just because APKs could be forged, what exactly is the attack vector? If sideloading is not enabled, and the play store uses HTTPS, how would such an forged APK with an stolen signature get placed on your device?
Could other apps modify the APK of another app? Doesn't each app have it's own Linux userid and aren't there access restrictions? How would some random game go and write into the APK of an app with high privileges in order to inject code?
If that were possible, there would already be DOS like attacks: One game destroying the APK of a competing game, etc.

I'd really like to know the attack vector!
And a FAQ for the acquisition: https://support.xobni.com/entries/21914995
I'm not claiming the US wants certain peoples dead. I'm claiming that given any opportunity or excuse it went to war with states whose basal ideology was not of rule by the people unless they were American clients.
IWork for iCloud Beta Open for Registered Apple Developers
iWork for iCloud now lets you create beautiful documents, spreadsheets, and presentations using Pages, Numbers, and Keynote in your browser on a Mac or PC.

If you are a Registered Apple Developer, you can use the beta of iWork for iCloud. To get started, simply go to https://beta.icloud.com with the latest version of Safari, Chrome, or Internet Explorer and sign in with the Apple ID associated with your Registered Apple Developer account.
Ask PG: Is there any significance of the thick line on top of Hacker News?
Seems like a sensible acqui-hire.

The only surprising thing for me is the amount of attention those small acquisitions by Yahoo get around here.
Hahaha, I try (okay, not) but Minecraft mods and a tiiiny bit of Unity is as far as they got, so far.

Soon I'll get some kids older than 11, they can read English, that helps a lot ... maybe the old Aphyxia tuts, so who knows :)
Scientists use stem cells, mouse body to make a real human liver
With a solution like TLS, your private keys and the server's private keys protect you.

The password is your access to the network, not the encryption key for your messages.
Study: People With a Lot of Self-Control Are Happier
EntourageBox: Let friends upload files straight to your cloud storage.
It is a black memorial. Doug Engelbart has died.
How can you control any app?
By replacing an trusted app with a malicious app with a forged signature?
How would you do this replacing?
https://news.ycombinator.com/item?id=5986307
As far as I know Google doesn't really offer meaningful support for just about any of their web products. Something like this would require significant support.
Both. These "sides" are being blurred. As advanced as Angular is, I see it as an intermediate step towards Derby/Meteor.
I'm wondering if there were any specific reasons as to why Weka was used instead of Mahout for the machine learning chapter, as both are in Java.
How the hell do you get 8 times your base compensation in bonuses ? Now that's a skill I'd like to learn.
That assumes that what ever is getting the images is also going to process them as QR codes and follow any URL encoded in them. Based on what the system is described as doing, I don't see why it would have any concern over a QR code since QR codes are not an accepted form of addressing a envelope.
Don't think he was ever actually a member of PARC, although his ideas and collaborators certainly inhabited the place.
Which apps can do this? Is this a special right (installing apps)? Or is it always granted?

Does this mean that if I don't install any rogue app store, that I'm safe against the attack which allows forging signatures?
Dear Sir, we regret to inform you that your services as head of state are no longer required. A security officer will allow you to gather your things and escort you from the premises after collecting your keys.
No need to get upset at GP. A lot of low-end Android phones have little internal storage and installing to SD is not a default thing. I'd be that most Android apps are under 15MB and a lot of apps that I use are under 3.
Maybe, but that requires the user reading this message in big red letters

"This is probably not the site you are looking for!"

and then clicking "Proceed anyway"
What about an app that teach you spanish ortography?
Android since 4.2 has supported certificate pinning --- though I don't know how it works with the Play Store.
probably because both oohaY and inboX are just round the corner from most of us around here.
I've always wondered, is interest possible on BTC loans? Technically, it should not be, since there's a limited amount of coins.

Are you qualified/classified/stamped/branded/innoculated/whatever to comply with US regulation bullshit?

What's your business model here? Keep a % of the loan?
Thank you for your reply. I haven't seen this before so I'm guessing it's a new practice.
CSRF has nothing much to due with wifi in particular, unless an HTTPS page is loading HTTP content, and a DNS hijacker is MITMing HTTP content.
"Part of the goal is to understand how ad targeting algorithms peg people in specific audience segments. "That's why it needs critical mass, because only when enough people are playing can we start seeing patterns in what kind of cookies or attribute-identifiers companies look for and discriminate with," she said."

Doesn't sound like she knows how ad serving companies operate. These days many companies are just storing one cookie with some sort of unique identifier for the user, then storing user profiles, targeting data, behavioral tags, etc in a server-side cookie store. You're not going to be able to gather much data about companies that operate like that by analyzing huge numbers of their cookies, since every user will have a unique cookie.
I don't know how can the spoofed app have more permission than the ones in the original manifest
Getting Things Done In a Busy Development with a Piece of Paper
Probably for the same reason that there isn't a Google Search Premium (that doesn't show you ads). And probably for the same reason that even if you pay for Hulu Plus, they still show you ads.

We could speculate that this is because the ads are too lucrative for them, or because they want to offer advertisers the widest market possible (with no opt-out), or because they want to preserve their image as a "free resource" as opposed to a seller of premium plans.

I don't know to what degree those reasons may be valid, but when companies this big choose not to monetize a channel, there is usually a strategic reason.
Kuhn: Berkeley DB 6.0 license change and Debian
Motion sensitive Apple TV iOS game
nope, been around for a while, just seldom used.
By providing misleading cookie info, couldn't you make the targeted ads even worse?

For example, suppose that the cookies are arbitrarily altered, and they make advertisers think that I'm an older man who's extremely wealthy and takes vacations.

Now, whenever I visit travel websites, I'll see higher prices, whereas if I hadn't mislead the advertisers, I might see prices that are more reasonable and appropriate for my age / income bracket.
That's pretty funny, Xobni's CEO is Jeff Bonforte who used to be a yahoo running IM and eventually part of the business where delicious was. Now he's been brought back in.
If distribution has to be fast, then what's wrong with XMPP?
$60 million is an acqui-hire?
android.permission.INSTALL_PACKAGES
Don't Xobni own the bookmarking tool that they rescued a few years ago?
Show HN: ulisesrmzroche.github.io | marketing page
http://ulisesrmzroche.github.io

Hi ya'll,

I just shipped the MVP of the marketing page for a web dev consulting business I'm trying to start up. Would greatly appreciate any/all feedback before I start work on v2. Thanks for your time!
A whole wall of posts about the law, the prosecutors, the bail -- not one about this seemingly ordinary teenage kid stripped naked, held in solitary, black-eyed and beaten to concussions in pre-trial confinement.

The law is what the police, the prosecutors and the general public can get away with, and this prosecution is what we get when there is no skepticism or accountability at all for those who carry out "the law."

But why is it that we never seem to care much about what happens to people in jails? Is it just a given now, something so commonplace that we just can't get worked up about it anymore?

If we can't have accountability for police and DA's can we at least have some accountability for the variously careless, incompetent and/or sadistic Mayberry's who run our prisons?
JS blocking does not mean "BAN ALL JAVASCRIPT GRRRR" it means "I will decide which sites can run code on my computer".

So if you have a web app - a page that needs to run code to provide its value - you have to let it do that.

But if you have a document that is strictly informative then REQUIRING that you run some code just to read some text is simply counter-intuitive. A document shouldn't need to run code to provide its value, NOR SHOULD IT DO SO TO LOOK NICE.
Doug was the Albert Einstein of our field.

Oral history for people who want to learn more about him:

http://www-sul.stanford.edu/depts/hasrg/histsci/ssvoral/enge...
Often I see people installing leaked updates for apps like Gmail which are shared through Dropbox, etc. These would normally not install because they don't have matched signatures, unless something like this vulnerability was used.
Many clients wouldn't find this sufficient for user acceptance testing.

Won't any mildly tech-saavy client want to try it on their laptop, phone and/or tablet to make sure it looks right in different browsers? Well, it'll look exactly the same, because they aren't actually rendering it....

The minify/obfuscate solution seems sufficient (and possibly an expiration date...) but even that would be obviously unnecessary with many clients.
Ha, ha, exactly, once you get into this, it will be hard to stop :)
Blog post: http://blog.xobni.com/post/54534193175/oohay

FAQ: https://support.xobni.com/entries/21914995
Congrats on the relaunch. I like it, especially the intro video.

I have gotten useful reviews and good feedback on a number of my project sites that I submitted to Criticue. Plus, it's fun to review other peoples' projects.
Clickable Link: http://ulisesrmzroche.github.io
If your site has a CSRF flaw, then a CSRF attack can be launched against it by a MITM as soon as you access any other HTTP site.

So it's best to use a trusted network if the HTTPS site you're accessing has CSRF flaws. That was my point.
There's a mention about selecting a "shoe lover profile" when shoe shopping or something along those lines so it seemed to me that this was accounted for.

"For instance, if a user decides to go shoe-shopping for summer, he or she could equip their browser with the cookies most associated and aligned with shopping, shoes and summer"

You could do the same thing by trial and error switching profiles or some kind of way of sharing "this profile gives low prices at X travel site" information between users.
Tutorial: Hacking WordPress with XSS to Bypass WAF and Shell an Internal Box
Having used Puppet and Chef in the past, Salt is a breath of fresh air. I've found it much simpler to use.
I had a look at how Ansible does 0mq encryption the other day, they do key exchange over SSH and then use keyczar to encrypt data over the socket, so that doesn't look too bad. I didn't look at the key exchange or review things in depth, but, assuming keyczar.Encrypt() does the right thing, it shouldn't be too bad.
What if you owned the copyright to the New York Times article?
Imagine using a pineapple http://wifipineapple.com/ and sitting in a coffee shop with your laptop out messing with people's insecure traffic! The ramifications of such could be quite potent given any chance that an insecure app could allow insertion of basically any content into a http request.

This is why you secure your damn wifi. Even if the password and user are on the wall, the traffic is still encrypted!
Students Question the NSA at Recruiting Session [audio]
At one point I believe the site had an option to buy more reviews. I don't know if it took off.

I was always curious how this would work - the system works because of the 1:1 ratio of reviews submitted/reviews received. If people can pay for reviews, someone else has to submit a review without another one being available for their site.

But I suppose you could always incentivize people to leave extra reviews, by awarding them credits, 'karma,' or even a little cash.
Engelbart not only had amazing vision, he had the ability to turn it into working demos. And he was able to inspire others (at PARC most notably) to work in the same way. His mouse is now everywhere of course, but his more important ideas, eg for tools to support collaborative thinking, still remain to be realized.

The history of Engelbart's approach to HCI (Augmentation of the Intellect, or IA) and its more-or-less friendly rivalry with AI is quite interesting. AI got more of the research money back in the day, but IA seems to have been more generally successful, although not under that rubric. And nowadays, the borders between them are blurring as humans and computation get more closely connected.
This.

In some european countries the client will simply sue the OP for damaging his reputation/business interests and the damages he'll claim will be considerably higher than the money he owes. On top of that, this can be considered extortion.
> These two cases are also considered, generally, to be some of the worst decisions by the Supreme Court

Funny, I would think that some of the worst decisions are generally considered to be Dred Scott, Plessy v. Ferguson, and Bush vs. Gore (the last of which a former SCOTUS Justice has even said they regret granting certiorari to the case).
Take more risks to make life more fulfilling
The bigger shock: they haven't already?
Dealing with Heroku’s Random Router
AT&T customers: Opt out here:

Program One: "External Marketing & Analytics Reports"

http://www.att.com/cmpchoice or call 1.866.344.9850

Program Two: Relevant Advertising including "Wireless Location Characteristics"

Go to http://adworks.att.com/adpreferences on your computer or http://adworks.att.com/mobileoptout on your
wireless device.

Source: AT&T customer letter from Robert W. Quinn Jr.
AT&T
Senior Vice President - Federal Regulatory & Chief Privacy Officer
http://assets.fiercemarkets.net/public/mdano/amis/att-privac...

(Wouldn't want to make it easy and have a single URL for everything -- sheeze.)
Without Douglas Engelbart, none of the personal computing tech we have today would have been even this remotely far ahead. He was the first person to believe in the Personal Computer.

He got to pass on after seeing his vision come to life. It must have been an amazing experience for him.
And it scared those who didn't know better into not asking themselves the tough questions required to become one who does know better.
After $42M in investment, yeah.
How do you know the man is Indian? The clothing style is more suggestive of him being Hispanic or African-American.
I've spoken with him too, very recently. It's my impression he's still actively answering support emails for CL (as in daily). No?
Well at some point you've got to stand up and put your money where your mouth is.

And if you're sympathetic to the Wikileaks cause, you're probably already on an NSA list anyway...
The Editing Problem
Probably because npm is installing the executable to a directory that's not on your PATH. Check to see if /usr/local/bin is in your PATH variable.
That's not what he's saying. The criminals using VPNs to defraud people are also paying for those VPNs with stolen credit cards -- go figure, right? Selling VPNs has a high chargeback risk. It's hard to get a merchant account for selling any category of service with a high chargeback risk. They're not singling out VPN providers for any other reason.
The Upside: The real threat to your online privacy
Rap Genius and the long tradition of black music explained for whites
Snowden and a muzzled free press
I meant manually hunting. I usually wind up with more teeth and scales than I can use without particularly seeking them out. Though I guess I don't buy things with them a lot.

The one time I did buy alien alloy from the store, I didn't have too much trouble farming 750 scales from big lizards, though. I could bring in 30 or 40 scales per trip. I didn't time myself, but the trips themselves couldn't have been more than a minute or so in duration. It was definitely tedious, but not totally unreasonable.

Traps are a poor source by comparison -- 20x to 40x less efficient per time spent. Admittedly, they're passive. Sort of.
If you can get a user to download an apk from a non-market source (like your website), this should let you install as an update to an existing app. The user wouldn't even see the permissions page.
If the citizens of the US lose jobs, income, heck, blockbuster movies because the international market dries up, they will change the way they act.

You can't guess how, unfortunately. The largest response will be anger at the rest of the world, which could lead to a Weimar Republic situation.

I think that's a real danger. From my perspective, most everything in the US is kinda right of center, but the last thing I would want to contribute anything to is to empower the hard right elements in it.

Collective punishment just doesn't sit right with me.. I think it tends to hit the wrong people and leave the intended targets mostly unaffected. I mean, US citizens who travel, to see the world and learn about it, and meet people and learn about them, are exactly the ones that should be welcomed and encouraged, no? And if the US economy takes a hit across the board of the high-tech sector, it would also mostly hurt the "small fish", I'm sure. Whatever would make Facebook or Google loose even 1% would also completely shutter a lot of mom and pop shops. (not that people working at Facebook and Google wouldn't also loose jobs, and it would NOT be the people responsible for anything Google or Facebook got punished for)

Not that I don't find your attidude impressive, or that you don't have a point. If more would feel so directly responsible for what is done in their name, we wouldn't be here talking about this. So ignore what I say when it comes to your attitude, I just want to explain why I won't be part of putting all Americans into one bag and hitting it.

If the rest of the world starts to punish anything American, starts judging people and companies by region code instead of by what they're doing or saying, then it's just "they hate us for being American" for a lot of people, and downhill from there. We've been there quite recently.. as someone who did a lot of stupid battle with Bush followers, that stuff is burned into my retina forever.

Generally speaking, you guys have people in your country you could use help with, or at least moral support for, instead of being shunned for them. This can be said about any country, but also about the US. So have a nice 4th of July, and enjoy it.

There is this line from "The Wire" that the character played by Steve Earle says to the heroin junkie: "Sorry Bubs... shame ain't worth as much as you think. Let it go." And he's talking about personal shame, not even on behalf of others. If you're embarrassed, use that, and shout from the rooftops; but don't let it actually get inside you. The ones who should be embarrassed aren't, yet the ones who should keep their chins up are feeling down? Nah!
There's also a very cool history behind Xobni featured on their homepage: https://www.xobni.com/.
You're all part of the show[1]. (Would You Kindly Remember Which Tech Teams Ran the Obama Campaign? And their connection to Reddit?)

You have no idea how predatory you need to be to face Power down, and a sponsored Face Book / Reddit protest is not your friend. $100k donations - to whom? People forging careers in Social Media Shaping (or as us old timers like to call it, propaganda[2]) and so on?

This is a serious warning (and I fully expect a ban, or "down votes" for this, given the political alignment of HN): you need to be hard, sharp, fast, ruthless and enjoy blood sports to get into this game.

I suspect most of you are not: and the people "running" this campaign via Reddit / Face Book are really not your friends[3].

And since we are living in a time where a Face Book "threat" from a teenager can get you prison time, I'll merely give you a quotation from a science FICTION novel (not even a real political theorist, they're dangerous / now under the "banned" list in America):

"The personal, as everyone’s so fucking fond of saying, is political. So if some idiot politician, some power player, tries to execute policies that harm you or those you care about, take it personally. Get angry. The Machinery of Justice will not serve you here – it is slow and cold, and it is theirs, hardware and soft-. Only the little people suffer at the hands of Justice; the creatures of power slide from under it with a wink and a grin. If you want justice, you will have to claw it from them. Make it personal. Do as much damage as you can. Get your message across. That way, you stand a better chance of being taken seriously next time. Of being considered dangerous. And make no mistake about this: being taken seriously, being considered dangerous marks the difference - the only difference in their eyes - between players and little people. Players they will make deals with. Little people they liquidate. And time and again they cream your liquidation, your displacement, your torture and brutal execution with the ultimate insult that it’s just business, it’s politics, it’s the way of the world, it’s a tough life and that it’s nothing personal. Well, fuck them. Make it personal.” ~ Altered Carbon, Richard Morgan.

[1]https://www.youtube.com/watch?v=KQEDojPZ7YI
[2]http://www.propagandatheory.com/history-of-propaganda/french...
[3]https://www.youtube.com/watch?v=J4pIXQvxMeA&list=PLA62577633...
I had the chance to meet Doug as a student a couple of times. He showed me and my friend the NLS system and thought us basic typing on the chord keyboard. He was the grandpa I never had who's wisdom extends to the technology of the future. I hold him in very fond memories.
What is your goal with this website?
From Wikipedia:

"Web 2.0 describes web sites that use technology beyond the static pages of earlier web sites...A Web 2.0 site may allow users to interact and collaborate with each other"

Craigslist, along with Flickr, Twitter, etc, are the quintessential Web 2.0 sites.
Not that I'm aware of. I've man-in-the-middled a few of them in the past couple months. On my phone, Twitter and Foursquare are the only ones that I've seen that actually do certificate pinning.
I'm pretty sure that you're right, and this is the Gerald Weinberg. (Or at least they both have "M" as their middle initials.) He's written quite a bit on programmer productivity.
Did you even read the article? The government is actively sifting through his mail, more than 10 years after he was considered to be a threat... and a hippy environmentalist threat at that...