skysight-inc/HackerNews huggingface dataset:
Not necessarily. The token can be used to simply verify that the request came from a legit page and not cross site request. The encrypted CSRF need only be verified by the server to see if it's not expired. The server can store the expiration in the CSRF token itself (encrypted and signed). It does not need to maintain a list of the CSRF tokens.

I wrote about this a little while back. Comments are here: https://news.ycombinator.com/item?id=5971464
It's great to finally see that Firefox is updating almost everyone like Chrome.

http://gs.statcounter.com/#browser_version-ww-weekly-201322-...

Those first few (dozen?) releases people constantly complained about the version number changes, the rapid release cycle, and there was quite a bit of fragmention.

There days there are a billion people getting a new HTML5 browser every 6 weeks.
I just don't like Chrome, for one. But, I really like the scrolling, pinch to zoom, swipe to go backwards, bookmark syncing across my multiple computers, etc.

The inspector, as flawed as it is, has some nice features. I don't have Mavericks, but I believe these updates are coming: https://www.webkit.org/blog/2518/state-of-web-inspector/
Bezos has been playing chess far longer than we even knew a game was going on. He just castled.
Aren't there companies like mashape for documentation of APIs (or at least through their software/proxy)? And if you decide to charge for it, ~20% goes to them. Works for me, but I don't know if that is the cool thing to do…
I'm usually not one for joining the anti-politics-on-HN bandwagon, but the Cato Institute is an explicitly political organization with an acknowledged bias. This is an unambiguously bad fit for HN.
Confusing physics: Slinky Drop Extended (video)
I suspect if you really, truly believe what Stallman says about freedom, you would be hard-pressed to find a job in any field. Many of Stallman's ideas echo what Ivan Illich had to say in Tools for Conviviality (though Illich understood that sometimes, some systems were "closed."

For example, let's say you want to be a carpenter. You would need "open source" tools that you could hack and fix, or you'd have to simply make your own from scratch. I realize such things exist, but you immediately put yourself at a disadvantage because you'll pay significantly more for your tools than a carpenter buying equipment at Home Depot.

Note, too, that I'm not criticizing Stallman's perspective here (I am sympathetic to it)--I'm simply thinking about the ramifications.
The article mentions Barry Washington, but I suspect that may be a mistake[1], and that they may be referring to Barry Cooper who after years of making lots of dodgy drug arrests and training other LE officers the same; infamously changed sides and now sells DVDs to the public that teach how to avoid "getting busted"

http://www.texasobserver.org/gone-rogue/

[1] edit: I'm the one who is mistaken, see frogpelt below. Leaving it up because I think it adds more to the conversation regarding the practice of police work as it relates to drugs and property seizure.
Great Startup Product Design Is Telepathic
TC's purpose was probably to hide that once again they didn't scoop a big story so they put the call out for some me-two-three-four-five-six articles to cover it up.
I'm using web developer extension anyway. Disabling/enabling JS is a matter of 2 clicks in its menu.
It's an inset picture and link[0]. They collect quite a bit of data[1] (that you can ask for[2]).

"Astronomers at the Wilcox Solar Observatory (WSO) monitor the sun's global magnetic field on a daily basis."

[0] http://wso.stanford.edu/

[1] http://wso.stanford.edu/words/plots.info

[2] http://wso.stanford.edu/forms/prsyn.html
You can't sell services to everything. If you want to sell support for your open-source product, then you get more money (from more support contracts) by deliberately making the interface obtuse and hard-to-use.

The GNU manifesto says that eventually "There will be no need to be able to make a living from programming", but it doesn't give much advice on what to do until then. In the future, the software that runs the asteroid miners should be open for the public to see, but in between there and then there'll be private companies trying to mine the most asteroids, keeping their software proprietary as they do.
These animals are brought up in very inhumane conditions -- in crowded spaces, with no light, no freedom.

It isn't accurate to paint an entire, very diverse industry with the paints of the worst offenders (e.g. Texas factory fattening houses).
>"Well, we know enough to know how to increase stability - primarily by increasing trail and rake."

..or, absent ideological zeal, the number of wheels.
Does this mean that Linux, and other Unix variants (but not Mac OS of course, because Apple plays ball), will be classified as a "Hacker Tool" in the eyes of the law?
SEEKING FREELANCER - URGENTLY - SYDNEY,AUSTRALIA
We are looking for a gun web frontend developer and designer, seeking to use their talent to help a focused airline team put together business application prototypes using the latest web technologies and techniques.
You will have 8+ years of experience and can point towards YOUR online portfolio. You will be fluent in English and be able to confidently communicate your approach and understand our requirements. You will have experience with a well rounded set of frontend technologies, backend development will not be required but familiarity will be an advantage.
Your initial engagement will be for 2-3months with an immediate start. Your remuneration will be competitive and opportunity for contract renewal will depend on your performance.
Exceptional remote workers will be considered, however Sydney,Australia based workers are preferred.
To register your interest, email recruitment@7skies.com with your location, skillset, portfolio link and remuneration expectation.
An unrelated HTTP session cannot set a cookie for another domain (unless it's a subdomain in which you have the more serious issue of session theft or session fixation). The solution to both of these problems is HSTS with the includeSubDomains option.
Latvia will extradite suspected hacker to U.S.
Yesterdays news were not valid. It seems that Latvia actually will extradite him to U.S.
You're right, locking the operating system will secure it. But people aren't doing that. And people lend their computers to friends sometimes. It happens. I think the actual situation is that you don't understand how people are using computers, and how people expect them to behave - which is very important.

Your software allows me to open up one application and see all passwords. It's likely the single most-used application, and the easiest attack vector on the machine. If I wanted your password, I'd try Chrome first. It's very widely-used, and therefore a huge vector. That is the problem here.

Either change it, or better communicate the need to lock your system. Because to an average user on the street, this is a scary thing to be able to do so easily.

Is there a public point of contact that I can speak to about this?
A lot of collectibles' value comes not from the objects themselves but from the exceptional contexts which spawned the objects

Wouldn't you pay more for a prop that was actually used on the set of your favorite movie instead of an identical reproduction?

Wouldn't you pay more for an object that was a key during an important historical event even though there are many objects like it used by unknown people in unknown contexts?

Wouldn't you pay more to collect an original tool invented by your favorite pioneer scientist even though there are much better versions of this tool in use today?

Wouldn't you pay more for works by an artist that invented new innovative techniques than artists who just reuse others' techniques even if the later artists arguably get better results because they are using the techniques after they have matured and have been perfected?
http://blog.sfgate.com/techchron/2013/08/05/taste-testers-sa...

I've read that methane emissions from cattle contribute substantially to global warming and other pollution problems. According to the link above, this method could reduce methand emissions from cattle by 96%, and reduce the amount of land needed by 99%.

I haven't followed the link to the study at Oxford and Amsterdam University (always a good idea if you start to get excited about general science coverage). I plan to do this later.
Well sometimes the shovels are made of gold.
If you value feedback from the HN collective then you probably should read the extensive discussion from the last time this was submitted:

https://news.ycombinator.com/item?id=4081390

There are many points and counter-points there, with more anecdotes, and some data.

Comments there are closed, of course, it being so old, so any new discussion will have to be here.
From the article you linked:
"Cooper says one mentor was Barry Washington, who is named in a class-action lawsuit that’s been filed against the city of Tenaha, Texas."
I tend to defer belief and keep "mu" in mind if I can't independently verify stuff.

I believe in very little.
Gah. Coffee, why hath thou forsaken me.

Thanks for not downvoting this as mercilessly as it deserved.

/me slinks off
Yup, I have very similar problems.

Google+ is a great example - it slows to a crawl after a few minutes of browsing - it particularly becomes unusable when I scroll down and it loads more content via AJAX.

I'm on Xubuntu 13.04.
Man, that was a long time coming! Glad it's finally here.
Lensrentals Repair Data: 2012-2013
Firefox has come so far from the memory hogging 4.0 days. Like others here, I give it a shot ever few month and UI responsiveness always sends me back to Chrome. The resurrected electrolysis project can’t come soon enough.

The irony is what use to be its greatest flaw, memory usage/leaks, is now it's greatest strength. Around Chrome 15+ memory usage started ballooning and was too much for my 2GB netbook. A laggy UI is much better than an unresponsive system from thrashing RAM.
Why is everybody saying that this post seems sleazy? Am I the only one that's not seeing it like that? He is only trying to encourage people to attend the BoS conference by telling us about the benefits. How else would you do it?
I don't think age or beard colour affect curmudgeonness. The grumpiest guy at my office has a beige beard and he's not old.
If you were a physicist, you’d likely also have to be a programmer – the inverse, unfortunately, does not hold.
WOW OMG CAN'T BELIEVE IT
Seriously, once I had a hope that there will be a day without NSA/PRISM/Snowden on front page or a top comment not mentioning them in an unrelated post. I was wrong.
Ok, there were things worth discussing for a month or two but now...
It is about worthy Hacker News in 2013.
Is Inc the new Medium?

These are all starting to look like SugarApe out of Nathan Barley.
Except we can set the cookie because we're already doing that to HTTPS requests via cookie-forcing.
Interesting. What does pressing that button actually do?
Yeah, try killing this one too. And the one after this. After that. Followed by another one. See where this is going? We have to remove the root, not the leafs.
Fucken retard nigger.

God says...

ttle.

22:31 But the king of Syria commanded his thirty and two captains that
had rule over his chariots, saying, Fight neither with small nor
great, save only with the king of Israel.

22:32 And it came to pass, when the captains of the chariots saw
Jehoshaphat, that they said, Surely it is the king of Israel. And they
turned aside to fight against him: and Jehoshaphat cried out.

22:33 And it came to pass, when the captains of the chariots perceived
that it was not the king of Israel, that the

----

God says...

hers trustees vomited reserved Still visions experiments
produce vicissitudes omitted drink sufferedst mortality
bath easeful hell Are Senators 91 Free citizens sooner
justify INDEMNITY females help cud respect everythings_a_okay
evening groanings grievous curious labourers may watch_it_buddy
fields truly Kenya self carried abase You_fix_it anything
follies precede or re-collected satiate fared yada_yada_yada
direct review Governor moreover ostentation assent greeted
nursery preaching hasting Victorinus digested habitation
Continency sacrificed up Plain leadeth judgment vehement
inchoate greatest ensnaring DON'T dissentings definitely
well-drunk rmunday men one I'm_feeling_nice_today
Umm... did you actually read the link that you just cited? “Multiple factors are involved, but in general, lower to middle income couples usually benefit from filing as a married couple, while upper income couples are often penalized.”
Also a dealbreaker, no "disable HTML" option. It's critical to my daily workflow to be able to turn off all content and browse the web in peace and silence.
No, I can't find a single logical reason. Saturating peoples appetite for overmarkeded type of food doesn't seem logical to me.

Just because people will pay money for it, doesn't make it a good idea.
IBM tries ARM-style licensing to reverse decline of Power CPUs
That was supposed to be switched on by default in Firefox 22, but Mozilla noticed some issue with it. The feature is there in FF22, but you have to switch it on yourself. If you you want to know more about the issues, you can read what Brendan Eich had to say:

https://brendaneich.com/2013/06/the-cookie-clearinghouse/
1) simulate request to http(NOT SECURE)://site.com
2) simulate response with Set-Cookie: csrf_token=123123;

> unless it's a subdomain in which you have the more serious issue of session theft or session fixation

elaborate plz? From what I know, subdomain can only do same attack (cookie tossing). Are you talking about phishing?
Create an Asteroids Game for iOS in 15 min. with Joybox 1.1.0 and RubyMotion
AI (in games, mostly)
It appears to be easier to get into the RSS feed than the front page, so if you follow RSS you see many truly terrible submissions.
Reminds me a bit of back in the day when you used to walk the bookstore and pick up the nth book on "how to be good at marketing" or "how to manage people" which you would take home and hopefully read. At a certain point you realized that you had to spend time actually doing and not taking the easy route of reading on how to do something. Getting tips and suggestions only goes so far.

This also applied to programming books in the 90's. Buy another O'reilly book when you hadn't even gotten to the 3rd chapter in the previous O'Reilly book. And spend time browsing for the next book about something when you hadn't even begun to understand or master the previous thing.

Going even further back this wasn't that much of a problem though. There were very few bookstores that carried computer books (I had to drive to the Princeton U bookstore) and when you got there there might have been 1 or 2 books on a subject so you couldn't get distracted with unlimited content and information.
Networks Are Smart at the Edges (2008)
isn't it because the front wheel change the contact point with the ground when you turn ?

when you both turn and inclinate the bike, the contact point is more on the side which you turn, balancing the bike.
Steve Blank - Your computer may already be hacked-NSA inside
Joybox 1.1.0 has been released
That's missing the forest for the trees. There are probably lots of factories that treat animals more humanely than others but we still should be investigating alternative methods of creating meats. Ultimately you're going to have to meet problems of scalability down the road in some years, and/or other unforeseen problems with antibiotics and such. It's probably best to start heavy research/experimentation in preparation now than later.
Ask HN: What's your preferred email signup method?
I'm getting a landing page set up for a small side project I've been working on and was wondering what the preferred method of gathering interested email subscribers is.

I know Mailchimp offers nice signup forms but I'm not aware if it would end up being easier to just roll my own.

Thanks.
MIT Researchers: Printable Keys Make Mechanical Locks Insecure
I just got an email from them:

ovh.ie - http://www.ovh.ie
45 Upper Mount Street,
Dublin 2

2013-08-06 17:28:17

Dear Customer,

You recently made a payment by cbDelayed for purchase order number xyz on our website, and we thank you.

Unfortunately, this payment could not be validated.

Please kindly accept our apologies.

For further information, please contact us on http://forum.kimsufi.ie

Kind regards,
The OVH Kimsufi Team.
Geocities are gone. <blink> is gone.

Pretty soon, <marquee> will be gone too. At least animated gifs are still stronger than ever.
How exactly does a hardware based router help? Is the idea that TOR is running on separate hardware, and despite the local system being compromised, the attacker can't "phone out" to find the real IP address?
> eaten as much meat as the western man does now

sexist

> The problem arising from growing meat consumption include, pollution, maldistribution of food, animal suffering, wasting of land and resources, wasting of water, etc.

Most of these problems are addressed by artificial meat
or you could have scrolled down where I wrote an answer hours ago ..
Looks like gstreamer support for non-free codecs (like H.264) is not enabled in this build yet: https://bugzilla.mozilla.org/show_bug.cgi?id=794282#c78
Or use sticky sessions and keep the session state server side... Much faster than rebuilding session state for every request (whether from a cookie or from a DB), especially the more complex your app and session state become.
Rats, I should have read that more carefully! Thanks for catching it.
And make sure to also check out the physics debug draw video! http://vimeo.com/71388927

This is such a cool project, and Juan has been working is A off on it! Glad to see it released!
This is a confused and confusing article.

The "streaming" to which it refers could mean any of a number of different things depending on the context you choose to read it in. Those contexts include:

(a) "Streaming" as laypersons define it; literally viewing unauthorized streaming content from a service like Youtube.

(b) "Streaming" in the SOPA analysis, as Zittrain and (unfortunately) Techdirt are discussing in the article linked from this WaPo post.

(c) "Streaming" in the Klobuchar bill, which makes a very specific change to copyright law that isn't nearly as sweeping as SOPA.

(d) "Streaming" as described in the Commerce report.

I assume the WaPo is referring to (c) or (d), since that's the interpretation that squares with the headline. But then why is it talking about Justin Bieber and SOPA?

Specifically: the Klobuchar bill closes a loophole in the copyright law that results from streaming being classified as "public performance" and not "distribution". Like other criminal infringement statutes, it requires the infringement to be commercial in nature to be prosecutable --- you have to build a business on your unauthorized streaming to have committed a felony. Unlike (as I understand it) SOPA, the Bieber Youtube upload would not be a crime in the Klobuchar bill.

The Commerce report doesn't even advocate for Klobuchar; it merely recognizes the loophole in the law, which obviously does exist: you can build a Pirate iTunes Music Store and be charged with a felony, but build a Pirate Netflix and it's a misdemeanor. That is, in fact, a weird legal result.

Finally, Bieber's opinion about his fans uploading unauthorized copies of his work is probably not relevant. Bieber sold his commercial interest in those works to recording companies, for spectacular amounts of money. It's easy for him to advocate for his fans right to traffic in unauthorized copies of his tracks; they're not his property anymore, and infringement is someone else's problem.
The idea is that non-technical users shouldn't have options in preferences that will break the web for them, and that technical users will use about:config or an add-on (e.g. NoScript). I find it difficult to argue with that.

edit: clarity. total rewrite.
Maybe I'm taking it personally, and the charitable read on the title is "While We (the editors, here at TC HQ) Are Trying To Follow His Game Of Checkers..."
Nasty surprise for me: 'Remove the ability to not "Always show the tab bar"'
https://bugzilla.mozilla.org/show_bug.cgi?id=855370

'browser.tabs.autoHide' config also removed, tab bar now always visible no matter what.

Add-on to restore old behaviour:
https://addons.mozilla.org/en-us/firefox/addon/hide-tab-bar-...
(There is an unnecessary gradient to the background of my navigation toolbar now though.)

Discussion threads of indignant catharsis:
https://groups.google.com/forum/#!topic/mozilla.support.fire...
http://forums.mozillazine.org/viewtopic.php?f=23&t=2687123
Is there any good reason for removing the distinctive behavior of an element that so many older websites use, even if it is considered a design faux pas? History should not be destroyed.
Tuning your Ruby GC for fun and profit
Oh, I'm no expert. That's what concerns me about so much of the babbling about renewable energy: if I can find such major underdiscussed flaws, either I'm confused or the experts aren't as expert as they claim.

If you're going to pounce on one sentence (and imply that somehow it should have been thorough when it was just one sentence), then yes I'd like you to back up your broad-brush insults with some figures (nothing difficult, just sensible ballpark framing).

OK, for all your attack verbiage we get one salient point: human energy use amounts to 0.01% of all Earth's incoming solar energy. So back to my concern: where is the tipping point at which shifting all our energy use to "renewables" starts adversely affecting the environment? "Manmade-CO2 based global warming" was laughable, now it's practically a religious doctrine. "Solar strip-mining" kills everything living under those panels, taking most of the light & heat. Hydropower wrecks wetlands by turning shallow warm muddy water (which life therein has enjoyed for darn near ever) into deep cold clear basins. Wind farms have their issues, but lack of sheer scale obscures them, and methinks we are ignorant of what effects vast fields of turbines would have (just as we dismissed the effects of other energy sources listed).

Blowing it all off as "worrying about an LED's effect on a rocket launch" is historically naive. Manmade CO2 is really just a minuscule percentage of total CO2, yet there's a vast movement to severely curtail human activity in fear of its accumulation forcing a "tipping point" toward global disaster. I'm not convinced that solar panels & wind turbines don't, on a comparably large scale, risk similar consequences.
Oh.

That is, actually, pretty nice.
I will buy this. It has a great price and even if it isn't the greatest computer in the world, the fact that you can just put it out in the sun to power it up makes it convenient. Can't wait!
Great framework. Great tutorial. Learn and have fun!
That actually only happens on reasonable quality ones. Old and cheap shitty ones usually get stuck open or break off very rapidly. The BS spec is only good until 1 insertion after the point of sale.

Source: I was a part time sparky for a few years.
Because signed session data is a great idea. Only slightly more data than an identifier traded for one less lookup and much higher flexibility server-side.

This implementation appears to have a bug in the signing mechanism, which is pretty bad. That's why we use existing crypto libraries.
I see that Mozilla is now signing hashes of Firefox downloads with a 4096-bit RSA key. But the key used to sign firefox-23.0.tar.bz2 (id 0x057CC3EB15A0A4BC) is only self-signed and was created three weeks ago. It's not on pgp.mit.edu. Is there any actual way to "validate the authenticity of these keys in an out-of-band manner" as the KEYS file recommends?
History responds with a resounding "YES."

No different from wars over water supply.
I think you are taking this personally when you really shouldn't. I love Top Gear, and I watch it purely for entertainment value.

I doubt anyone purchased any car based upon their recommendations or takes them seriously when they "review" cars.