skysight-inc/HackerNews huggingface dataset:
I think in this case, and the comments seem to confirm, that it's an issue with the SOAP/XML encoder's handling of null values. That aside, AS3 doesn't bug me too much, my biggest issue with Flash/Flex was how it handled programmatic audio elements so differently from video/clip elements, that is/was annoying.

Of course since Adobe has all but abandoned the platform, it probably won't be much of an issue in the future... Kind of a shame, as Flex was actually pretty nice. If adobe was more open with the flash client as a platform, and focused on the tooling (where they make their money), it could have been integrated into browsers, and had a much better chance of sticking around.
Ahhh, interesting. Yes, absolutely, it's only a signal, not proof of relevance.
if title.endswith("?"): block(submission)
A government may be incompetent in solving issues in the interest of their constituents, but these people are cream-of-the-crop professionals at accumulating power.
For an example of a recent bug try this http://gcc.gnu.org/bugzilla//show_bug.cgi?id=56888 basically the compiler tries to recognise code that manually does memcpy or memcmp and replaces it with the built in version. Even if you are trying to compile libc where you get an infinite loop when this happens.
To be fair, he said the Redskins were going to win.
Opscode wiki and ticket user database compromised
Forebruary, an endless wall calendar
A website I was building, which depended on a ColdFusion service, started breaking for Norway users. Why? Norway's country code was "NO" - http://stacktoheap.com/blog/2012/12/19/why-a-feature-of-our-...
Hey Myles, update your site to have links to your most recent writing :)
lol thanks for being the one person that sees something. My point in the article was to facilitate a discussion and you're right I wrote it on the fly in 10 minutes glad you got the point.
This attack is on HTTP compression, which covers only the body of the request, not the headers [1].

1. http://en.wikipedia.org/wiki/Http_compression
I'd rather pay for my entire, well-integrated operating environment and technology stack than use HTML-fail/CSS/JS or some other Frankenstein's monster cobbled together from open sores and so-called standards because...it all just works.
Good story. The great politicians have a way of doing this too. Center on the person you are with.
I suppose it's appropriate to rub in the fact that there's a Rudy's 10 minutes from my house. What you call a special occasion, I call lunch :-)
Can you please give me an example that would support specifying graph elements in form of:

{ name: "", inputs : {}, outputs {} }

?

Specialized lib is always better. The best thing about noFlo is visualisation.
Refreshing to know that even settled projects have those same problems at their core. Depending on upstream developers is always a big risk you have to calculate well. Was always a pain and only gets bigger in our agile *aaS world.
Mountain View Ca - Fulltime:

Mirantis is an OpenStack solutions and technology company help the wider adoption of OpenStack as well as contributing substantially to it development, and extending its capabilities via our own technology and products.

We are hiring a range of positions:

Engineering - http://www.mirantis.com/careers/

Cloud Platform Services Architect Mountain View, CA, United States

Customer Engagement Program Manager Mountain View, CA, United States

OpenStack Cloud Architect Mountain View, CA, United States

OpenStack Deployment Engineer Mountain View, CA, United States

OpenStack Operations Engineer Mountain View, CA, United States

Python Engineer – OpenStack Community Mountain View, CA, United States

Sales/Solutions Engineer Mountain View, CA, United States

Sustaining Engineer for OpenStack Deployment

Well funded, great customers large, complex and interesting projects - great pay, benefits and flexibility.

Email me: sstave@mirantis.com
The attack builds on the CRIME attack, which is discussed in more technical detail here:

http://zoompf.com/2012/09/explaining-the-crime-weakness-in-s...

That page suggests that guessing known text like an SSN or email address contained in the body would give them an opening to break the encryption entirely, but I don't know enough about crypto to know if that's actually a possibility.
Stormpulse – Austin, TX – Full-time, permanent – (http://www.stormpulse.com)

Our mission: To interpret the Earth's most threatening data.

-- Senior Python Developer --

About us:

We tell our customers when bad weather is going to disrupt, delay, or damage their business. Our product provides high-level intelligence and low-level analysis on weather risk for supply chain managers, business continuity professionals, commodity traders, and oil/gas operators. Here's President Obama looking at our map: http://news.yahoo.com/photos/u-president-barack-obama-looks-...

We're looking for a couple of developers to join our team. Tools we work with include Python, Celery, Redis, MySQL, Postgres, Backbone, nginx, AWS

About you:

* Able to rapidly gain (and enjoy gaining) new expertise in a previously-foreign, non-technical domain (e.g. weather, earthquakes, wildfires, solar flares)

* Derive joy from seeing huge leaps forward in the customer experience

* Mastery in a non-technical discipline (i.e. you are not only a great developer, but also a master at jazz music, mountain climbing, chess, skiing ... something that has taught you how to think beyond a keyboard).

* Ability to collaboratively apply the design principles of Stormpulse to new projects

* Not satisfied with a compromise -- always pursue the possibility that two seemingly contradictory goals can be simultaneously achieved through great feats of design / engineering

* Derives pleasure from the final aesthetic

Requirements:

- B.S. in Computer Science, Electrical Engineering, Mathematics, or college degree with related technical experience required. ("Hackers with Humanities degrees are awesome" says Matt)
- Strong experience with one or more of Python, Ruby or similar object oriented dynamic language required. Additional experience with Javascript, HAXE, HTML, or CSS is highly desirable.
- Experience with GIS (PostGIS, ESRI, Mapbox) is preferred
- Linux experience with knowledge of Linux internals and Distributed Systems preferred.
- Self-motivated and driven to continuously improve personal and professional skills combined with openness to constructive feedback.
- Strong communication and documentation skills.

Location:

3925 West Braker Lane
Third Floor
Austin, TX 78759
United States

Contact:

resumes@stormpulse.com
Remember that we’re wired to respond to personal news. That’s the secret to Facebook’s and tabloid magazine’s success. So as happy as I am about this, let it also be a reminder that Snowden's not the story. The fate of the internet is.

If you haven't read it, this is a great article on the subject: http://www.theguardian.com/technology/2013/jul/28/edward-sno...
Something is "dead" when the youth no longer care about it?
Get off my lawn.
No, NEON is an ARM-specific tech, and is widely available and used e.g. on Android smartphones.

It's like MMX / SSE of x86 world, a set of extra instructions to process many small integers in parallel in one instruction. Since image data are usually independent 3-byte pixels (or 3 planes of 1-byte subpixels, one per color channel), NEON is great for many image-processing tasks.

See e.g. https://en.wikipedia.org/wiki/ARM_architecture#Advanced_SIMD...
I agree that a Brompton is a better choice. It folds up to about the same size as this uni-wheel thing. However, they are pretty expensive. Mine was pretty close to $1800. I think the cheapest one (1 speed, no lighting system) is $1000.
http://visualbooster.com/share/20130801230340534.png Here is graph which represents fertility rate in Russia (orange) comparative to Japan (red) and Germany (blue). It's obviously climbing up since economy stabilized. Now, would you expect huge increase after anti gay-propaganda law is established?
Compile to asm.js?
Bottling Permit: http://public.leginfo.state.ny.us/LAWSSEAF.cgi?QUERYTYPE=LAW...
We've developed an iOS app to natively test APIs. Should we open source it?
This confirmation is the legwork I was hoping for. "A spokesman for the FBI told to the Guardian on Thursday that its investigators were not involved in the visit, but that 'she was visited by Nassau County police department … They were working in conjunction with Suffolk County police department.'"
> It is a completely rational fear that given increasing powers government will increasingly abuse them. Also there has been nothing in recent policy that at all demonstrates that the federal government will ever relinquish power once given it

If you really think that then you haven't been paying attention. For example, the Church committee, and later when the U.S. belatedly relaxed controls on computer cryptography, and then even put the NSA and NIST in charge of ensuring the public had great cryptography available to them to protect the public's and government's communications and data.

> "Terrorism" on the other hand does not scale

It doesn't have to scale. You could sit and prepare for years for a single massive attack and get maximal value out of it. As technology improves, so does the ability to for a single malicious agent to kill or maim more and more and more people at a single time, which only gets worse when you combine multiple such agents into a group.

And as you mention, the psychological impact is completely out of proportion to the resources expended. The government is following the public's lead on this. No one wants to be blown up, but even more importantly, no one wants those who try to attack the nation to be simply let off the hook or allowed to attack unopposed.

> Also, unlike increasing government powers, there is no evidence that terrorists acts on US soil are increasing.

Wow, it's almost like there's some unseen force interfering with Al Qaeda's previously-stated wishes to bring violence to American soil...
SEEKING WORK - Los Angeles or Remote

Ruby on Rails Developer + Hardware Hacker (I especially love projects that involve both!)

Bread & Butter Stack: Rails, PostgreSQL, Heroku, with ZURB Foundation on the front-end. I also do A/B testing work. (Visual Website Optimizer)

Mention you're from HN for a free 45 minute Skype/G+ Hangout consultation where we can discuss your project and the best way to reach/exceed your goals :)

http://bengelsey.com
This has the potential to blow up into a huge flamefest.

Short answer: No. Absolutely not.

A longer answer would probably explain that in my experience over 10 years in the industry, much of that working with Naturalized Indians as well as H1Bs, I would say they are on par with anyone else in the industry, you have good and bad.

I've met brilliant Indians, and worthless ones. Just like every other nationality. It's simply not a good metric to use when choosing them, that's why it's illegal to do so.
Ryerson’s Digital Media Zone to Build India-based Incubator for Startups
thanks..the link helps...its websockets that causing issue...should have used socket.io for basic websocket as well...looks so easy..i used Apache Web Server..had to configure a lot to make it work for ws protocol...
Without the apostrophe to escape the string, it just doesn't have the same magic.
Section Chief: You dispatched field agents without understanding the base rate theorem!? You're a loose cannon, McGillicutty...

McGillicutty: ...I get results!

Section Chief: Mathematically, you shouldn't. Ergo, you don't.
ASCII is Obviously meant to use CP437 for character codes 128-254, duh...

Seriously though, most other code pages are pretty transparent to/from unicode... IBM PC-DOS extended ascii (classic ANSI-BBS) isn't so transparent.
I'll agree with that, usually the pictures are a little more discrete though, but I guess the larger issue is, should they have be more discrete? I think it all depends on context.
Edward Snowden Offered a Job at Russian Social Network VK
I guess I thought they were guessing the POST data from a login form -but I see what you are saying. The POST request in URL encoded form or multi-part form data is not compressed anyway, only the response is affected by deflate. So I am curious too, how a password would be in the gzip dictionary, since it should never be sent back to the browser in compressed form.
I typically only link to stuff that reaches a certain level of popularity. Because popularity's a good proxy for quality, right?! :p
My fantasy vision, predating go, was publisher/project/version with /src and /bin

Yes in a way that feels more natural to me too - all your stuff is in one place, including src and binaries, not mixed up with other binaries/source and all under one version. The current scheme does follow unix conventions though and it's not too important.

The only persuasive criticism I've seen of versioning is that it doesn't deal with dependency hell automatically, however I'm not sure it can or should, and having simple versioning would be a nice step up from simply checking out master at the time you happen to go get, which means go get is not a reliable tool for fetching dependencies if you don't freeze them somehow (hence the contortions of this developer). It's not a huge deal though, and I'm sure it'll be addressed somehow at some point and the meantime there are various possible workarounds.
No - the opposite; but in the meantime lets place bets on how many companies she will buy. My bet is 40.
What are some of these problems? And where are the paying customers?
A couple of years ago I read an NBC article[1] about low-quality, spammy ads on the Web. The article was decidedly negative about them....and yet (at least at the time) the page was full of them: "Billionaire prepares for financial ruin" etc, all the AdBlade/Taboola-type shit.
It was pretty ridiculous, given that the tone of the article from the very beginning was positively railing against low-quality ads.

[1] http://www.nbcnews.com/id/32676456/ns/business-the_big_money...
Okay, I'll respond to this.

My token nod of agreement with darien was more or less just a vote to call bullshit on the article. I wasn't trying to be hilariously snarky, or win some kind of prize, or even add to (or perhaps inadvertantly detract from) the grand, and sweeping cultural touchstone that is Hacker News.

Why does my user name match my comment? Why not? It's available. Whether this practice is frowned upon isn't particularly relevant to my goal of participation, in voicing my opinion.

Why did I choose to create a pseudonym for this response? Why wouldn't I? I'm not sock puppeting, or stacking the vote by creating multiple accounts. Whether you can tell or not, I haven't been replying to myself, in an attempt to create a false impression of astro-turfed conversation. I'm not creating this account in an effort to unjustly manipulate the perception of reality that other users have.

I'm not interested in collecting Karma. I'm not here to establish reputation, or take credit for anything. I'm merely participating in the peanut gallery of comments. In this instance, pointing out that I don't believe the assertions of this particular blog entry is relevant, and material to the discussion.

If I create a new user for each topic of discussion, what does it matter to you? Does the fact that I'm creating a new account potentially discredit all other new accounts? Is my behavior somehow toxic and counterproductive to the reflected glory you wish to receive for participating on someone else's website? Am I being inconsiderate when I pollute the namespace of their user IDs? Are you simply worried about ycombinator's servers?

Maybe my respose was simply too short for your tastes. Would you like me to go into detail, regarding why I don't buy the story, which seems like fiction, but is reported as possible fact?
Pepsi challenge anyone?
If there's a "India == bad devs" stereotype, it's more the result of cheap American outsourcers trying to get bargain basement prices on Indian dev labor and then being unsatisfied with what they get.

Sorry but you give cheap, you get cheap. No form of software development is a rote, repetitive process that you can just drag in anyone who can fog glass off the street and sit them down at an assembly line to do. It's not amenable to the kind of cheapo outsourcing that can be done with some industrial processes. (And even there, you get what you pay for... it's why the Chinese sweatshop junk is junk.)

I've met plenty of good Indian devs over here in the 'States, and I'm sure there are plenty more over in India. But they're probably only a bit cheaper than good U.S. developers, especially since they can get telecommuter positions at U.S. firms for U.S. wages.
This sounds like the most plausible theory, though it makes the attack pretty limited. It could bypass CSRF protections, which don't work with GETs.

So it sounds like an attacker needs an endpoint that contains sensitive information and puts information from a request's query parameters into the response body. I imagine tons of applications do this, but it's nowhere near as far reaching as CRIME.
Senior UI Developer

Engineering | San Francisco, CA, United States
AppDynamics is the leader in next generation solutions for managing modern, distributed, and extremely complex applications residing in both the cloud and the data center. Our customers include some of the largest web sites on the planet, who use our products to monitor and troubleshoot applications distributed across thousands of servers.

With the paradigm shifts to horizontally distributed applications, service oriented architectures, cloud hosting, and agile deployment it is more complex than ever to manage large-scale applications. The innovative AppDynamics technology greatly simplifies managing these modern application architectures. With over 500 high profile customers and year over year revenue growth above 300%, we are disrupting the multi-billion dollar APM (Application Performance Management) market.

Founded in 2008 and lead by proven innovators, AppDynamics has rock solid funding from top tier venture capital firms including: Greylock, Lightspeed, Kleiner Perkins and IVP.

Design, architect, and develop our user interface using the latest web and mobile technologies. Deliver innovations that make complex problems (massively distributed application analysis and management) easy for our customers to tackle. Make the impossible possible and the hard easy.

Requirements:
Passion for creating amazing user experiences
Passion for software design and well structured code.
Expert level OO design and programming skills.
Computer Science background
Experience building complex Object Oriented web applications in JavaScript, HTML5 and CSS.
Experience with client side web technologies/frameworks (one or more of AngularJs, Knockout, Ember, Backbone, Jquery/JqueryUI, Closure, Sencha/ExtJs, YUI, Bootstrap, Dojo, mustache.js, require.js, common.js, TypeScript, Dart etc)
Motivated individual that wants to be part of a fast paced startup.

Bonus Experience:
UI design (creating mockups and wireframes, working with visual designers, etc)
Mobile UI development (iOS/Cocoa, Android,).
Java server side web frameworks (SpringMVC, Struts, Tapestry, Wiket, Closure, JSF)
Java/J2EE and/or .NET stack.
Flex and Flash exposure
Proficiency with visual design tools (Photoshop, Fireworks, Illustrator, etc).
My problem is the proceedings taking place behind closed doors and without any real oversight. Especially since DOJ/NSA/FBI have been outright lying to congress.
I am not going to hold the UN veto against Russia; USA has done much worse with their veto power over the years.
Toronto, Canada - FULLTIME. VC Backed. Comp Salary + Benefits + Equity Opportunity.

Top Hat(https://tophat.com). We build software for The Modern Educator.

Django, JS, RabbitMQ, AWS, Backbone, Real Time, Big Data, EdTech, Dent in the universe kind of stuff.

-----------------------

Looking for a brilliant developer:

Does doin’ your thing in Django take you to your happy place? Does coding in JavaScript feel better than Christmas morning? Does programming in JavaScript bring you more satisfaction than rainbows and puppies combined? Read on, you Maniac Hack. Read on.

If you’ve been to university, you understand the nut Top Hat is trying to crack. Your professor starts to talk, and you really do have every intention of listening. But within about five minutes, your good intentions fly out the window and you begin to surf Facebook, catch some Zz’s, or if you’re feeling really ambitious start working on a problem set for a completely unrelated class. When you join our team, you’ll be working on classroom interaction software and help higher education find its mojo!

Your work will touch hundreds of thousands of paying customers (300,000 and growing every day). Plus, you’ll get to ship code on a weekly basis. We only officially launched a little over two years ago, but we’re already profitable and are growing like crazy! Lucky for you, we’re small but mighty. That means you get to touch everything—front-end, back-end, database code—whatever your little hacker heart desires! And what’s more? Everything you touch will be yours. Well, kind of. We follow the “Facebook approach,” meaning we give developers complete ownership of features.

The Fabulous Life of the Top Hat Developer comes with other sweet perks too. Every fifth week is hack-week, where you and your fellow developers get to spend a week working on pet projects. There’s also lots of free deliciousness. What’s up catered breakfast and unlimited snacks and drinks? Oh, and did we mention StarCraft throw-downs at lunch?

https://tophat.com/about/jobs
Or email: matt [at] tophat dot com
Yea, I heard Bill Clinton was a master of this.
pastebin is a legitimate mirror of their own blog post: http://www.opscode.com/blog/2013/08/01/security-breach-user-...
> It means Son, my father has the same name as me, without the Filho part

Interesting, that's similar to Junior in the US, but there it generally isn't part of the "official" name, only informal.
We're collecting about 300,000 measurements per day right now with our network of Android devices, but our research partners are looking for more like 30,000,000 per day in order to build proper, new weather forecasting algorithms. Our growth plan is to continue building our open source SDK, and have other app developers install it inside their apps - we've seen significant interest already from some top weather app developers and are exciting to work with them.

We're targeting severe weather such as thunderstorms and studying their formation by measuring the rapid changes in atmospheric pressure during storm initiation. We intend to dramatically increase the data inputs to new weather models using Android sensors, and we should therefore be able to kickstart a revolution in short-term forecasting.
looks pretty complete to me?
SEEKING WORK - New York City - remote or local - projects of any length

I'm an illustrator and game designer, always looking for new games or apps to help create.

Games: I did all the art and UI for Optia (http://bederstudios.com/optia), an award-winning iOS puzzle game. I've also done game art and design for Microsoft Game Studios, Atari, MIT Game Lab, and others.

Illustration: I've done drawings and paintings for national newspapers and magazines, including the New York Times and the LA Times. My work has been repeatedly recognized by the Society of Illustrators and American Illustration, and has been featured on prominent industry sites including Illustration Age, Illustration Friday, and Behance.

I'm fluent in many graphics programs (PS, AI, InDesign, 3ds max) and can learn new ones quickly. I'm very familiar with version control and project management software. Some experience modifying code in Lua and Objective-C.

My portfolio site is http://naftalibeder.com.

Feel free to contact me at naftalibeder@gmail.com. Thanks!