skysight-inc/HackerNews huggingface dataset:
That's on your carrier/manufacturer, not part of Android itself.
As a freelance doing fireman maintenance on Rails apps from time to time, I can tell that the word is not out enough, yet (far from it).

The guides do not underline that you can do RCE, either!

There is a metasploit module available now.

https://twitter.com/unixmonkey/status/360859127620182017

https://github.com/joernchen/metasploit-framework/blob/7f3ec...
I feel like this is knowledge that should be limited to people who can figure out to do it. I'm not sure it's valuable to widely and easily disseminate this information to the world.
Obama isn't much different than the previous president. He's just more charismatic.
As far remember Muchacho is a font file: http://www.behance.net/gallery/Muchacho-Free-Font/8042679
You didn't deserve to be downvoted for this comment. The taboos may keep these things in place, but we have to ask how the taboos got their in the first place. In the case of cannabis it was largely as a result of DuPont being unable to compete with industrial hemp, and leverage a little racist fear-mongering by borrowing the Mexican term marijuana to make it appear extra dangerous. Take a look at the film Reefer Madness from the 30s to see the ridiculous propaganda that they were feeding to the public.
You can have a long, secure password on your backup, and a short pin on your phone
It's not very bad on Android. The framework really pushes for a kind of plug-in like architecture where you abstract your core components into things like Services, so thinking about those core features up front goes a long way to creating a common point to handle permission checks. If all else fails, an app could simply extend Application and check permissions at runtime.
OK, but I WOULD like to point people to this interesting link:

>"The Naval Surface Warfare Center, Dahlgren Division (NSWCDD) seeks Cooperative Research and Development Agreement (CRADA) Partners that possess the expertise, capabilities, facilities, and experience in the field of manufacturing, testing, and distribution of cardiac pacemakers.

https://www.fbo.gov/index?s=opportunity&mode=form&id=409766e...
I've done something similar for Oslo, Norway; http://trafikk.quai.io/ (warning: Norwegian text)
It's fast because it's written in C, which means you have to load it as a PHP extension (which means compiling PHP again on *nix).

Comparing its speed to other frameworks just seems... pointless. They're completely different animals.
I wonder if the "third way" here isn't more "by dropping prices and making drugs more affordable many drug users are less likely to engage in petty crimes to raise money to pay for their habits"

EDIT: Should probably emphasize "addicts" to differentiate from recreational users.
I like the domains I've registered - that's why I paid to get them. If you contact me about one of them, I won't reply since it's really none of your business. Why should I spend the time to answer?
No. The Android API has always given the guarantee (and it still does) that your application's permissions will always be there. They can't be revoked during runtime. If it's in the manifest, it's perfectly fine to assume that you have it.

No piece of documentation or sample code has ever encouraged a pattern of "checking if your app has permission X or Y" because it's a total waste of time. Likewise, none of the built-in Android apps or any of the open-source apps from Google developers I've seen do that. There is no point to doing so.

In fact, it's actually bad practice because you're adding a bunch of error checking code for an error condition that's never going to happen. If you're getting a SecurityException for an action that you've explicitly requested the permission for, you're running on a broken API and it's not your responsibility to handle that.

The framework does include methods for checking permissions, but they are generally meant for things like inter-process communication and library code. There's no need to use them for ordinary applications you are building yourself. And nobody does that, rightfully so.
What this actually means: groupcache is awesome. You just act as if the cache is full, and if it isn't, it will be. Where did the data come from? That's pluggable. And no concern of the part that just serves it up. Very subtle, very nice.
Anyone able to run metasploit (eg: any script kiddie) can figure out how to do it right now.
Just use nvm[1]. It's awesome, use it dev/prod. It's also easy to build and install from source on debian-based distros (my only experience).

[1] https://github.com/creationix/nvm
You can handle the noise with decent headphones, but I'm never really comfortable without my back to a wall.
Elemental implements, as opposed to wraps, the distributed-memory algorithms. In other words, it does not call any library like ScaLAPACK; it is an alternative approach. Elemental builds on top of BLAS/LAPACK/MPI in order to provide a nice interface to dense linear algebra on clusters/supercomputers.

The other major difference is that sequential libraries tend to get away with letting users not have to worry about where data resides. This is of fundamental importance in distributed libraries, and, for this reason, it is usually a bad idea to think of simply modifying sequential APIs.
There are plans of integrating that. However, Stripe is limited only to US market, so still looking for better worldwide (at least US and Europe) solution.
This is in almost the same category as checking in your SSH private keys. I say almost because at least this one is somewhat understandable. From the perspective of of an app developer having everything in one place that you can deploy makes things easy. Hence it's included by default. Otherwise people would complain of losing the secret keys in between deploys (causing existing sessions to invalidate)[1].

Course none of that makes it acceptable (it's atrocious!). This is a perfect example of why code and config need to be kept separate[2]. If you have that as a mantra from the beginning then you don't have issues like this.

[1]: In reality you should change your secret token regularly. The best approach is to accept a rolling window of old ones so you can age them out. Then you can pick how far back you want to support (eg. how stale a client's cookie can be).

[2]: http://12factor.net/config
You can run exit nodes anonymously. Prepaid, anonymous credit cards are available everywhere now.
And see this StackOverflow question:
http://stackoverflow.com/questions/9571392/ignoring-timezone...
Bill Buxton - Always be a beginner
Moving out of the CookieStore also covers against this, apparently (see the twitter link I posted here).
Without the close ceilings or walls it might not be as bad, if he got the acoustics right it might be more like being outdoors than the echoing-cave effect most open plan offices have.
I really hate this whole business of domain name marketing. You get scummy/scammy/slimy tactics like this when people are motivated to game the system for profit.

You know what? I have no obligation to keep an open line of communication to anyone. I mainly have a domain so I don't have to memorize the IP address of my servers that mainly I use, and so I never have to change my email address. My registrar can get ahold of me for billing and technical purposes, but otherwise I don't want to see spam about domain name SEO BS. I may keep the requisite RFC recommended email aliases open for technical contact purposes, but I have no responsibility to respond to emails sent to those addresses, and I fully reserve the right to drop all traffic from IPs that send spam to those email addresses.
It kind of sounds like you're saying you don't understand the economic and social benefits of buying local.

If you've been watching the situation in the US and EU for the past 5-6 years you might better understand.
Tooth Sensor Rats You Out When You Smoke
Janrain and Engine Yard have been known to host community events.
Bandcamp takes 15% until you hit $10,000 in sales, then scales back to 10%.
"This is not intended to be a bulk mailing list cleaning service and we reserve the right to disable your account if we see it being used as such."

the only thing different between "bulk mailing list cleaning" and "new account validation" is volume...

if you don't want people to use your API, don't offer it.
Ah makes sense (we just got it in Canada recently)
Whoa! That's a great deal! I've been looking at insurance options in preparation for the exchanges opening up, and what I've been able to find are plans going from $150-3,000 in NY State.

Full disclaimer, I know nothing about health insurance and have never had it, so my understanding of the terms and how things work probably account for the wild price discrepancies.
Dropbox and Google Drive made uploading file super easy. You just drag&drop file on your hard drive and they take care about the rest. In addition to that, whenever you are going to update the file, you don't have to login. Again just drag&drop and Dropbox + Sellbox do the magic.
Why is this information stored in a cookie the client has access to? Why doesn't ROR have a shared secret so the information can be stored on the server like, for example, PHP does?
I wonder how much the less versatile C3BO version costs to build. It seems to me that you could use a cheap MC, a grid of 10 solenoids, and a simple light sensor to build a version that would work on most touch screens and not have to deal with the hassle of building a 2D plotter, integrating a webcam, and controlling it with a relatively expensive Arduino.
Yes. Nobody here wants to learn how Brad Fitzpatrick reasons about, designs, and implements server software. It's all spam.
Navy looking for "expertise, capabilities...experience in...cardiac pacemakers"
I found this way easier to configure than Slate.app was. Its API and docs are much simpler.

And it has support for CoffeeScript or any other JS languages. I haven't figured out how to get ClojureScript working with it though, but that would rock.
I suspect the police force would dislike being put in this category. But in general, I can't really agree with you. It's hard to deny that in Western culture there have been moral/religious taboos around drug use for centuries. People act strangely on drugs and that quite frankly scares the heck out of many people. Once laws are in place all sorts of unintended consequences occur around beneficiaries (ie Hippies!) but the root cause is this long running taboo around drug use. That's why this is so powerful to me.
So of course the python version is simpler, it does less.

What does the Haskell version do that the Python doesn’t? In terms of externally observable behaviour they both prompt for inputs and then add them up. In terms of design they’re both infinite loops that maintain one item of state.

I understand that the example was written to show the State monad, and obviously the same externally observable behaviour could be achieved in other ways in this simple case. My point is that in imperative languages you get that State behaviour for free, and unlike the simplified alternatives to the Haskell that rely on recursion instead, such as the one you posted, the imperative state-for-free model scales up when you start to get lots of state and mutation going on. It doesn’t start to suffer in performance metrics like speed or memory usage, nor does it start to have unpredictable performance characteristics in complex systems.

As I’ve stated elsewhere in this thread, this argument is not meant to belittle Haskell or dismiss the clear advantages its model offers. I’m arguing that there is a price to making those things as explicit as Haskell does, and that price is probably too high for mainstream industrial acceptance, so if we’re going to reap the benefits of the sound foundations on an industry-wide scale, they need to be available more transparently.
Disasters & Data: What You Need To Know
That's probably not down to a censorship 'lens' though.

A more apt US analogy might be how many people were aware of the scale of protests against the Iraq war -- especially the vast opposition to it in Europe. My impression is that US mass media self-censored and barely reported those protests. (I may be mistaken: I don't live in the US, but that's what I've heard from people who do.)

Of course it's a far cry from self-censorship by the mass media to state censorship of the Internet. But for many people it results in the same distorted view of the world.
Driving Sideways
Taking a quick look on github, it seems most people are aware of this and have implemented some mechanism to avoid it, being .gitignore or using an env variable, and a SecureRandom or otherwise generated string for development.

https://github.com/search?p=7&q=secret_token+extension%3Arb+...
Second this. One of my favorite things is getting a slice, however small, of how truly great programmers get their work done, why they chose what they did, and what the results were.

We actually need more of this on HN, not less.
https://news.ycombinator.com/item?id=6101294
Yet another example of the mad rush to jump to an incorrect conclusion.
When the Patient Is Racist
Considering the pressure the US is applying to gain access to people's data, I think I am equally critical of anything from from a US company.
Barnaby?
The Social Ideology of the Motorcar
Discussion of announcement of death:
https://news.ycombinator.com/item?id=6101294
I get that it's useful to have the occasional reminder of the importance of paperwork, but does it really need to come in the form of such a horrid looking site?
Try living near the Syrian DMZ for a while. It really doesn't get any more relevant than that.
It shouldnt be on the carrier / manufacturer. Whats innately different about the software on phones as compared on Windows / OSX / linux ... that the user cant be trusted with administrative rights on their machine?
I don't understand the need for the payload server from the slides. That makes me wonder - why not just use a HTTP server to serve the static files (e.g. nginx)? I'm sure I'm missing the obvious, but I'm probably not the only person wondering it.
I use Humana. I'm single, 38, male, in good shape, non-smoker and I pay ~$180 a month for health insurance.

Get a high deductible. A low deductible is nice as part of a group plan, but when you're not on a group plan you're just over paying for extras. Instead, get a health savings account (HSA) and save income (tax free) for the purpose of paying for your health services before you meet your deductible.

Keep your health insurance primarily for major issues. You want insurance there if you get cancer or you're involved in a life threatening accident. You're better off paying for the minor things with an HSA.

For International travel, get travelers insurance. I spend a lot of time in Asia and I use FrontierMedEx. They'll pay your doctors fees in cases of an emergency and will fly you back to the US if you need major care. You only pay for travelers insurance while you're traveling and it's reasonably cheap too. I pay less per month for FrontierMedEx than I do for Humana.

Good luck!
The original Scratch[1] is publicly available, although it does require basic reading and math skills. That said, very young kids have made some pretty amazing things with it over the years.

[1]http://scratch.mit.edu/
ScratchJr might not be available, but Scratch is: http://scratch.mit.edu/
I agree it's convenient, but I'm having a hard time imagining people who would be selling digital content, if only they didn't have to upload it to a storefront...
> but as soon as you start doing this there really isn't an end in sight.

That's based on the flawed assumption that people just are out to get you.

People are out to get the US to a large extent because of how much the US has been meddling all over the place.

Stop the one sided support for Israel, and stop supporting Middle Eastern dictators, and don't invade any more countries, and a large part of the recruiting-basis for islamic fundamentalists for actions against the US would start falling away pretty quickly.

> In wars between states, you can negotiate, but in wars of ideology/religion, that's not so easy.

It might not be so easy, but it is far more effective than military actions that breed new generations of people who hate you for ever person you kill - whether a legitimate target or "collateral damage".
Noting that I said "There are other things they might do"

So without knowing the specific domain it would be important to know whether the domain was actually deleted (at which point it becomes a free for all in the drop) or something else happened to it (like an inside job at the registrar). By the way Network Solutions was famous for this happening. I don't know if it happens anymore (there) or when it stopped happening (there) but many people got hold of domains by having an inside employee at NSI work with them.

If you gave me the domain name I could check a few things and possibly either rule in or rule out the possibilities.

But once again ICANN would only forward the report to the registrar and they decide how it will be handled etc.

The trademark stuff means nothing in the scheme of this!

Proving a trademark and gaining ownership is a completely different process. If you were to call us and try to get a domain that way it wouldn't (and shouldn't) work.

Related things happen quite frequently. Specifically some web guy registers a domain name for a client and then the client tries to get hold of the domain. We don't (and can't) get in the middle of those things. I suspect other registrar operate in a close fashion.
Hahaha. The problem here was that there was no free market in the first place. The Hippies are more akin to your cable company or some other state sanctioned monopoly or oligopoly now being opened up to real market forces. Inflated profits due to protection almost never ends well.
"We know that gmail.com is a valid MX host while gmali.com is not."

They've failed in their own example. gmali.com has valid MX records and accepts mail. Just because they don't accept billions of email per month, why should this service block any mail?
Monad transformers is one of the trickiest parts of using monads, and certainly they're not well explained at the example - I'm afraid the linked article does an awful job at introducing monads to web developers, when most of the basic terms used remain without a proper definition.

For what I've learned about transformers (although I haven't used those at practical projects), they are used to combine several monads and wrap them around a single value with several layers of monadic types, so that the adequate monad can handle the inner value when the occasion arises. But don't take my word for that; understanding transformers "does" require knowing a good deal of category theory.
For stateless load balancing without a central server. By having the data in a client cookie so that any web server can access it. Without it you need sticky sessions on your load balancer or a central data store requiring additional round trips for each request. A lot of frame works use the same principle (ex: Django uses it too).

The data stored in the cookie is cryptographically signed with the secret token so the server can verify if its been tampered with. It's a very solid approach but like anything involving crypto it's important to keep the secrets secret!

To clarify, the secret token should only be known to the server. The client doesn't have it. The client only has their own signed cookie data.
How many Udacity courses have you actually finished? I'm doing 40 hours a week; and I've finished two Coursera courses. I appreciate having a system that forces me to focus on a single subject for a month or two. I'm too scattered in how my interests sway me otherwise.
Well that nearly gave me a heart attack. I thought for a moment that this was an obituary. Hope he sticks with us for a long time.
Just for fun: as an AngularJS directive/validator https://github.com/lebek/angular-guardpost
What this actually means (2): Go standard library has reasonable performance.

This won't work so beautifully when whoever implemented all the magic bits under your business logic didn't do so to deliver reasonable performance for your use case.

Or if the underlying code is in fact wrong. This turns into the kind of code you can see from Line 242:

https://code.google.com/p/google-api-go-client/source/browse...
The colonists revolted because they were being denied their rights as British citizens. And before WWII we, and intermittently France, were the world's only major democracies.

The relationship is somewhat akin to ancient Greece and Rome, but closer.
I'm working on a pebble app- May use this to distribute it until a non crappy pebble store comes out!
For every sad Hippy in the 1st World there's hopefully 100 great stories in ravaged 2nd world countries up to their eyeballs in corruption funded by the distorted profits of an illegal trade. Maybe Marijuana really will be the "gateway drug" The first drug that marches us towards a path of i) legalizing, ii) taxing, iii) treating addicts and iv) reducing prison populations.
Ask HN: What are the best podcasts for big data and/or python hackers?
Or really, your favorite podcasts overall would be grand.

Thanks!
There are some valid use cases for this. "Read All Contacts" is often required to optionally invite your friends. "List running Apps" for crash-reports.
I've used e-junkie before. It is certainly not pretty, but it works.
> It's a kind of torture; sometimes, you just want to scream," retiree Katie Jacques of Leeds, England, told the BBC. Leeds is one of several places in Great Britain where the Hum has recently appeared.

> "It's worst at night," Jacques said. "It's hard to get off to sleep because I hear this throbbing sound in the background. … You're tossing and turning, and you get more and more agitated about it."

This is the kind of thing that cognitive behaviour therapy can help with. But because that's a psychological therapy people feel that they are being dismissed.

> Being dismissed as crackpots or whiners only exacerbates the distress for these complainants, most of whom have perfectly normal hearing. Sufferers complain of headaches, nausea, dizziness, nosebleeds and sleep disturbances. At least one suicide in the United Kingdom has been blamed on the Hum, the BBC reports.

It's a great shame that people are missing out on effective help because of their stigma around psychological illnesses.

Just because something has a real world cause doesn't mean that CBT is dismissing it as "all in the head"; it's just giving people tools to help them cope with a distressing situation.
Replying to myself as the edit window has passed - still haven't tracked down that double-cropping story. The thought occurs, what happens with source material which fits no definition of "wide"? Older TV shows or many Kubrick films?

Horizontal black bars on screen to correct aspect are common, vertical black bars are less acceptable for whatever reason (Aesthetics? Acclimatisation? Who knows?). My xbmc setup not only has a hybrid stretch+crop for 4:3 stuff on my widescreen TV, it also has a setting which stretches more towards the edges than the centre of the picture. Acceptable presentation for my old TV recordings and such but if someone handed me a Dr. Strangelove recording distorted similarly, I'd be less than impressed. I prefer to ruin the presentation on my own terms!

Another mode I use for presentation of 4:3 material on the wide TV is 14:9 + crop - this is essentially a halfway-to-fullscreen zoom mode I use for my old game consoles. This has never, in my experience, cut out any relevant action or HUD info as these games needed to be designed for ludicrously variable CRT overscan in the first place.
Well no, that's exactly what you want to find out from data like this. :)

(Well, what I was curious about, anyway.)
Use space bar / arrow keys for navigation.
Conservative, pro-security candidates get more donations from the defense industry: news at 11.

In other news: befuddled HN poster can't believe that Wired ran an entire articled based on confusing correlation with causation.