skysight-inc/HackerNews huggingface dataset:
Sites are susceptible when user input is ... incorrectly filtered for characters used in database commands ...

If you're trying to protect yourself from SQLi by filtering & then running user input, you're doing it wrong. If a supposedly tech-literate site like Ars can't get that right, what hope do we have? (Let alone the banks themselves...)
Because 8.1 is intended as a (free) update to 8 rtm.

So kinda like what they used to call a "service pack".
If it were the other way around, with me being left outside, I'd be beside myself.

As I understood the sequence of events, the staff first separated the speaker from his wife. Then they told him that they could not accommodate her in the speakers' lounge, and that she'd have to wait outside the facility.

So from her perspective, there were some complications to be ironed out, and we'll get it taken care of. And then, suddenly, the door is slamming behind her as she's standing on the street, with no idea of what's happening to her spouse the speaker. Should she stand here and wait for him to come get her? How will we meet up after the event, if he doesn't come out?

The speaker, properly empathizing with his spouse over the way she must feel, chooses his commitment to her.

It's not a question of whether the person kicked out is likely to be murdered. It's a question of being made to feel powerless, with no clear course of action. Those are feelings that any human is likely to have, regardless of their gender.
I've run some CPU benchmarks, and the $80 droplet is roughly equivalent to the $40 linode. But if you get lucky and no one else on the same host is using much CPU, the linode will be over 50% faster. Of course, most customers aren't running CPU-bound tasks.
Peter Thiel's Solution to the Student Loan Bubble Makes a Lot of Sense
https://groups.google.com/forum/#!msg/native-client-discuss/...

That post is old, but the instructions are still valid.

> I assume the API's that NaCl-exposed have a corresponding set of C# interfaces? How does one write to the browser window, get user input, network I/O, etc?

Unfortunately there is nothing available to expose Pepper interfaces directly to the managed environment that is shipped with this, though it is possible to auto generate bindings and glue code to make it work. What you'll see in the HelloWorld example I linked above is a very manual way of doing this, exposing an internal call that itself just calls directly through the C Pepper interface, effectively allowing Pepper calls from C#.
10.04 was a virtual lifetime ago.

I just played Euro Truck Simulator 2 in Ubuntu 13.04 this morning. With the latest update it runs very nice. Full screen, no tearing. It has less FPS than in Windows, but that's expected for this particular game. Using an empty Openbox desktop to run it made no difference, the performance issues are not because Unity, but because of the game engine. I'm only working in moving my savegame from Windows to Ubuntu.

On the other hand, Portal and Half Life 2 run PERFECT in Ubuntu. Just as fast and pretty if not faster than in Windows 7. I'm waiting for Portal 2, as that's one game I have not managed to finish in any platform yet. They also support virtual desktops, so I can ctrl-alt-arrow them away in an instant if my GF needs something from me.
Optical switching?

The trouble is that the power levels required for a nonlinear optical material are often much higher than the light beam being switched. So you might need to use a 1000W beam to switch a 1W beam (for example).
A path towards cheaper higher efficiency solar panels
Non-hipster technique would have included invoking Yogi Berra and his "Nobody goes there anymore. It's too crowded." line.
I haven't spent much time looking into cache effects in the compiler's internal data structures, that gold hasn't been mined yet.
> According to one indictment, European credit card numbers sold for as much as $50, while US ones fetched about $10.

This is truly dumbfounding to me. They had normalized, searchable access to millions of credit cards. They presumably had systematic ways of siphoning off money on high balance cards in a way that no one would've ever noticed. And yet, their grand scheme was to hock the numbers piecemeal for 50 a pop?

How are such smart people so bad at business.
Did the HR people ever provide any rationale for this? I mean, I know that hiring people full-time creates a bunch of additional costs and liabilities. But did they ever quantify what those costs would be, so that you could weigh them against the projected benefit of a hire, not to mention the opportunity cost of cutting someone loose and hiring a new person, with the resultant drop in productivity?

I mean, it's not going to get better until HR people and CFOs are called on the carpet for poor decision-making in a situation like that.
I guess I wasn't being clear. I was just curious how do you handle your memory in the case of doing optimized builds?
It's amazing that intelligent people can assume that questions of memory, consciousness and thought cannot be answered by the natural sciences.

Given our species long history of pushing back the boundaries of mysticism, fear and uncertainty, it would seem presumptuous to doubt that our own minds are somehow exempt from the rules of the natural world.
Swiftkey (Android keyboard) now with cloud sync - what could possibly go wrong?
A slight miss or hit of earnings expectations in a quarter really can make a rational person change their valuation of a company by 20%.

Stock prices are generally considered to be the present value of all future cash flows. In other words, growth prospects are priced in. Because of this, missed earnings can seriously effect value because they can dramatically change market beliefs about probable future cash flows and growth potential. Smaller stocks and high P/E ratio stocks (broadly, growth companies) are particularly vulnerable because the present value of future growth is a higher part of the total value.

Edit: Forgot to mention, empirical data typically suggests that markets initially under-react to earnings surprises.
Embedded Content and Iframe Security
I used to work at Amazon, and this is disturbing, but not really surprising.

A focus on cost instead of value is a core element at Amazon. I ultimately left because what could be described as a failure to recognize value over the actual cost. 5 years of controlling high-value but high-cost things left my department with a shredded staff. By the time the economy was improving in the 2006-8 timeframe, nearly all my colleagues left.

And these were people at the TOP of the foodchain - senior full time software engineers.

Unfortunately Bezos is more lucky than a skilled manager. He has some useful values, mostly around being frugal, that has served the company well. But in a competitive hiring market, one would be making a mistake joining up with Amazon if you had an alternative.
Sounds to me like the work his team was doing, annotating films with meta-data, is a stop gap situation. I presume Amazon is working on an automated system based on Mechanical Turk or crowd sourcing to do the annotating.

If this is indeed the case, it would not make sense to hire a full-time team.
I mean, sure, cleaning staff are contractors/temps.

Obviously people like that don't deserve any kind of job security and should be fired annually.

/sarcasm
Disqus launches new website
See the Rise of a Once Great City: Detroit’s History in Maps: http://www.wired.com/wiredscience/2013/07/mapping-detroit?mb...
I built BigCouch from source and played with it a few years ago. Cloudant is a cool company, and good of them to open source a big piece of their infrastructure.

I am taking a fresh look at CouchDB. I have always had an aversion to JavaScript, which is what CouchDB views are written in, but lately I have been getting into JS more because of Meteor and Ember.js. Off topic, but I find using a subset of JS, and keeping JSLint running in IntelliJ makes for a nice dev environment.
They had millions of credit cards. It's far easier and safer to sell the cards than try to come up with a scheme that will make an equivalent amount of money using them. Plus with that many they had far more than they could ever use.

That's like saying anyone who runs a SaaS that helps other businesses make money for $50/m is bad at business.
This is why we have morals. So we don't have to conduct opinion polls to see what's right and wrong.

Plenty of atrocious things were wildly popular. They get absolutely zero extra legitimacy for being so.
Complimens on all the achievements!

Instead of renting a VPS, you could also purchase a Raspberry Pi for about $35, and get the same learning experience. In addition to that, the visibility of the cute blinking LEDs (in a transparent case) gives an opportunity for actual "RELAXEN UND WATSCHEN DER BLINKENLICHTEN" and the joy of actually owning "EIN KOMPUTERMASCHINE FÜR DER GEFINGERPOKEN UND MITTENGRABEN".

Edit: the all caps is only because they are quoted verbatim from a famous blackletter sign in university computer rooms in mangled mock German.
I don't miss shadowing in CoffeeScript at all. I agree with the idea that the larger the scope of a variable the more descriptive its name should be and the small its scope the shorter its name can be.

I also don't think it's good to get carried away with closure depth, stacking them n levels deep.
Here in Portugal, a €0.70 coffee is somewhat expensive ;)

That said, it should be noted that here in the Iberian Peninsula we just mean coffee, not buckets of water, cream, sugar and milk with some coffee mixed in, like those served at Starbucks.
Avoid JS callback hell with 'yield' (example of a new WebDriver library)
Because low risk, little effort, high volume. Easy (if you're smart).
Big Fixes, Speed Improvements and Simpler Pricing
"According to one indictment, European credit card numbers sold for as much as $50, while US ones fetched about $10."

Where are they getting their numbers from? Last I heard (a year or two ago), carders charged about 10 cent for foreign cards and a dollar per US card. Any actual carding researchers care to weigh in?
This is what's interesting to me about one argument in favor of GM. On the one hand, the author seems to argue (here and in her books) that GM is merely an extension of what farmers have been doing for ages, and that the type tools and techniques of the work done to change organisms are irrelevant.

On the other hand, GM crops are patentable, whereas hybridized crops are not (is this correct?). This is the heart of the economic argument: Farmers can buy the seed or not. But they can't produce it themselves. So the tools and techniques aren't irrelevant.

It's certainly _possible_ to have it both ways (as we do now), but this way of parsing the issue seems to me neither economically nor technologically (in the sense of patentability) advantageous to agriculture in the long term. I'd prefer not to get into a situation where the only economically sensible way to produce food is to buy seed from one source. And that's the rational choice for a company like Monsanto: increase shareholder value by becoming the only economical source of seed.
An Atypical Web Vulnerability
Kirkpatrick: Facebook Mobile Ad Growth Shows Promise
Doesn't NASDAQ have some responsibility for this hack? Doesn't NASDAQ have serious security reputation issues now?
A lot of people are jumping to the comments and assuming that the worker is either a developer or a warehouse worker, which makes me assume they didn't finish the article. The OP worked on quality assurance, which is staffed by a lot of contractors because (ideally) the ramp-up time for the position is much smaller than that of an SDE, and a lot of these positions don't last long enough to warrant full-time employment. (That being said, a lot of the full-time QA people start out as contractors.)

The clarion call about the dangers of bad management (and not even "bad" in the Dilbert sense, but "bad" in the "these people are not qualified to do what they need to do" sense) is extremely well-taken. This is why documentation at MegaCorps is so incredibly important, especially with high turnover: if your institutional knowledge is confined to a person, not a wiki or a sharepoint doc, then you're unnecessarily exposing yourself to risk and ruin.
Could it also be that the US hackers are just as visible? They could be quietly recruited by the government when they get caught.
I agree that it is cool. I am a huge proponent of people understanding the amazing world around them. Nature is really f'ing amazing....and often times quite tasty!
Your first challenge is selling your platform to companies and organizations. It does not matter if you are selling to the Gates foundation or Netflix. Once the company/organization buys into the platform, they will do a lot of the marketing/promotion for you through social media and traditional marketing channels. Once you sell your platform, focus on getting users for that competition.

Pitch the various competitions and prizes to journalists. The X Prize foundation has a lot of media buzz around them. I am sure you could do the same.

You can make money from both sides. Like Kickstarter, charge companies a percentage of the prize for listing on your platform. Second, you could also charge a nominal entry fee like $5 for each submission, which will select for higher-quality submissions.
I would forgo all of these new features if LibreOffice would create more compatible MS Office docs. As it stands, I can no longer use LibreOffice in my current work environment. Everyone complains my MS converted docs do not open correctly, AND VICE VERSA, on their MS Office apps.
> Court documents allege that as a result of the scheme, financial institutions, credit card companies and consumers suffered hundreds of millions in losses, including more than $300 million in losses ...

BULLSHIT. I want to see hard evidence that there were real losses totaling more than $300 million. The justice dept loves inflating loss figures based on sentencing guidelines which mandates minimum losses for stolen info even if they were never used to commit a crime.
If your software runs on OS X, try Instruments! It's free (comes with XCode) and has an Apple-quality UI.
If they used them all at once to make purchases, it would have triggered fraud protection software. If they were distributed, less likely to be caught.
Yeah, that's an issue with conservative garbage collectors. When memory actually in use is a large fraction of the address space, then random values can look like pointers too often. When valid_memory << address_space, on the other hand, most non-pointer values won't alias a valid pointer.

The specific issue with Go was significantly mitigated in Go 1.1 by making much more of the GC precise rather than conservative. Here's a comment from about a month ago on the current state: http://code.google.com/p/go/issues/detail?id=909#c59
I do not think that we would want the result of that.
Wonderful book, but if Norman is updating it, I really hope he drops the 'POET' backronym. It was contrived and awkward, and it's repeated inclusion felt seemed more like a slight to the publisher who changed the name from Psychology Of Everyday Things to its more approachable name.
It does handle a million lines in a few seconds - it's just that the rest of the compiler's work goes even faster.

The top cycle sucker is Lexer::scan(). Here's the source:

https://github.com/D-Programming-Language/dmd/blob/master/sr...

See line 440. It's entirely possible I've missed something glaringly obvious - have a go at it and see if you spot anything.

Oh, and "complaints" is a relative term. DMD is incredibly fast at compiling compared to other compilers - it's just that I want it to go even faster. Anything less than instantaneous I regard as "needs improvement." When D gets a design win at a company, I'll often ask what put D out in front of the competition. "Compile speed" is usually mentioned. Compile speed has a huge effect on programmer productivity.
This is what IE advocates have been saying since IE9, and it is no more true with IE11 than it was then.

Inertia means IE needs to be significantly better than the alternatives to catch up. It takes time and energy to switch, so the payoff has to make it worth one's while.

When Firefox came out, it offered substantial improvements over IE6. When Chrome came out, it offered substantial improvements over Firefox.

IE11 continues the "hey, we're almost caught up!" tradition that has seen IE's market spiral downward for years. Until a version of IE comes out that earns the reaction "whoa, this is much better than Chrome or Firefox!", the downward spiral will continue.
"but it's fairly representative in that it's something of a goal within the system rather than an external benefit."

But if the system allows us to achieve some desirable goal, why would it need to have any external benefit by itself, besides helping you to attain the goal?
PoachIt is looking for engineers who love Python and DevOps
PoachIt.com is looking for a seasoned full stack engineer, based out of NYC, to take the product to the next level.

Our stack:
* python (Tornado, Django, Celery)
* postgres
* redis
* nginx
* AngularJS

We're looking for an engineer who:

* can implement large scale migrations

* loves to automate things (Fabric, Chef, Vagrant)

* can build and optimize servers

* enjoys watching page load times decrease

* enjoys contributing code to all aspects of the product

We're offering competitive salary, equity and a chance to build with the latest tech!

Please send info to jobs@poachit.com
I really wonder how long CEOs and management people in general think this party can go on.

The trouble is, many tech-based industries today have little effective competition in the short term. No-one is going to disrupt Amazon and take over "We own on-line sales for the entire universe" because someone made a dumb hiring decision. No-one is going to beat Google out of the online advertising space because they have terrible customer service.

Sure, they might succeed despite these obvious failings rather than because of them, and they might have succeeded more if they'd been smarter, but in a very real economic sense, success is relative. Until these kinds of screw-ups make a dent in the bottom line that is both significant and clearly visible, there's nothing to drive a change unless something catches the eye of a few people who are very powerful but even more busy.
Nice long form sales letter on the KYC page. David Ogilvy would be proud!
You can't find a piece about Paula Deen today because the attention has shifted to Prince George. Which, by the way, is exactly the point: While there are people who care about Snowden, NSA, etc., they are not currently any kind of substantial part of the public. We all ignore that at our peril.

The fact that Snowden may be a larger-than-normal individual news story doesn't change the fact that the story doesn't capture public attention in the face of the multitudes of other news stories continually cropping up and then going away again.
Why not use the community edition of couchbase?
Choosing a product because you liked the commercial, choosing a book because you like the cover, choosing a bottle of wine because you like the label, choosing a computer because you like the design, choosing clothes because you think they look good is a bit... Superficial, no?

When you choose a technology with a bad website, you have to actually look at that website for hours and hours reading the documentation. This can be incredibly frustrating for people who are sensitive to such things.

But more importantly, there's a subtle biasing. People usually do not make rational decisions about technology. The design of the website is a more significant factor than you might think, at least in my experience of watching people make such decisions. If it wasn't, then why would anybody bother to make a good website?
Microsoft got sued in the 90's for not extending retirement plans to its temps. Since then the two track system developed.
I'm not sure where you got your info from but non-US cards have always had higher value due to limited supply. The value also depends on the type of info. For example, magnetic stripe data (dumps) is worth more than basic card info (which isn't worth much).
I see this advice over and over again, but I'm really interested in reasoning behind it.

Hourly rate works fine for situations where one day you work 3 hours, and another day - 9 hours. The day-rate by default assumes that you at least work for 8 hours. So why bring this unnecessary constraint?

Also, why is a week-rate more ambitious?
> In many ways it doesn't matter if you chose it or not.

Just to be clear, it doesn't matter to the project creators/authors. We don't know that for a fact, but their behavior seems to imply that. I'll admit, I find that a bit surprising, since I've never worked hard on a public-facing project without hoping people would use it and find it useful.

However from a global welfare perspective it clearly matters a great deal. The over-simplified but not-too-far-off math on the social benefit of a project is that global_welfare_added == (value_added_per_user) * n_users, so a positive multiplier on n_users is a positive multiplier on value so long as the value added is positive.

In this case, making the website look like an actual website isn't about "creaing a need", it's about informing people who have that need (designers who need to edit vector graphics) that the product might fill that need. Currently the site doesn't communicate that at all. Furthermore, that their demonstrated indifference to communicating the nature of their product to potential users makes me loathe to donate dev time or money to fund development of a product that will be little used by those who might value it.

> But I wouldn't really want to divert resources towards marketing it and away from making it more usable and functional.

The tiny user base undoubtedly restricts the project's access to resources in terms of donations of both time and money. Again, it's easy to imagine why the authors would be indifferent to this, and my only point is that's a shame for anybody who values a more widely-used project.
What would actually be more sought-after is a way to host outside of a government easily coopted by US government interests (legal or otherwise), and to do so in a place without a 160ms latency penalty (sorry UK, long distance relationships don't work).

Perhaps a trawler in international waters off the pacific coast, coupled to a microwave relay.
I use http://bigv.io/ - much better and local to me. There is only a few beers difference between €2.99 and £12 a month...

They are VMs but they perform better than a dedicated Atom from my testing.
It's been some considerable time, but I spent some time some decades ago working as a temp. In many cases -- institutional and/or individual perspectives -- it's essentially a class system. Regardless of ability, temps are "second class citizens".

Or perhaps we should start to think of it as a "caste" system. Once you are "labelled" at an institution, depending on for whom you're working, your only way out may be to move to a different institution. These days in the U.S., that's not necessarily an easy proposition.

It used to be that many business would hire temporary workers as essentially a "trial" period. If they liked you, you might well be offered a permanent position.

These days, temporary employment has indeed turned for many into a shell game limiting liability and obligation to the employee.

Truly fungible employment.

It can be hard to be rid of that "fungible" label.

"There are people who count, and people who don't."
User Personalization with People
State AGs Ask Congress to Gut Critical CDA 230 Online Speech Protections
This is not surprising at all. But I'm a dog person. I can identify most of the dogs that live on my street by their barks/howls.
The person in question already owns an iPad, so there's no more to install or buy.

iTunes is not required. iCloud is not required. Your comment is a troll.