skysight-inc/HackerNews huggingface dataset:
You don't need a combination, just compromising the BIOS gets you root. You don't need to separately compromise the disk firmware, it's either or.

The point is that it's the same kind of attack. Relying on the BIOS may save you from an attack on the disk firmware but that doesn't much help if the same class of attack is still effective against the BIOS.
I'd downvote this if I could.
Couldn't I just use links to get the same effect? But with the comments (what I consider the best part of HN)
Nobody is ever really coerced into buying airline tickets, but if Expedia sat the CEOs of the major U.S. airlines down and convinced them to all agree to raise prices, that would still be price fixing and illegal under the Sherman Act.
Simple. Send a pen register/trap and trace order to, say, Microsoft for a target's Hotmail traffic (except Subject: lines and body content).

I disclosed Microsoft's wiretap compliance system in this article last month:
http://news.cnet.com/8301-13578_3-57593538-38/how-the-u.s-fo...

If it's Hushmail in Canada, that's why we have MLATs.
I've seen your flawed argument used more and more often around here lately. It's pretty disappointing to see.

Somebody speaking out against deeply broken technologies or bad ideas that have received a lot of hype lately does not mean that such a person "hates progress" or is "resistant to change" or any utter nonsense like that.

Likewise, adopting so-called "new ideas" or "new technologies" does not necessarily mean that real progress is actually being made. JavaScript and NoSQL, for example, are generally regressions in most respects, even relative to 1990s- or 1980s-era technologies.

True progress happens when we move beyond our current abilities. It is not progress in any sense when we start using inferior programming languages or databases, for example.
The problem is that DoD institutionally is shit at IT now. It didn't used to be this way (DoD was at the forefront in the beginning), but now we just can't do contracting for IT to save our lives.

Everytime someone tries to start a system to fix pay they realize that they will need to change all the personnel systems to match, and figure that they'll go and fix the personnel systems too.

They tried that with DIHMRS, which actually did involve billions, and the project never even got finished it was such a C.F.
> very appealing option in a number of cases.

What cases do you have in mind?
What don't you like about Angular? The template engine makes the insanity of explicit updates go away...
It looks like that was directed at me. So: Thanks! :)
And that article is published and is being discussed here: https://news.ycombinator.com/item?id=6149393
Yep. I'm sending a patch for the CSRF token masking change shortly. I'm less sure about the length hiding change; it feels like an ugly hack, but we put it in because it's the least awful solution that the paper presents. I'm curious to find out exactly how effective the length hiding is one the PoC code is released.
I've seen people using Wordpress to power a high-traffic REST API.
Well, awk. That's what happened when I searched for "mod_python" and "django"; I guess I know why it didn't show up in the later versions.
Amazon's position in the market before this case is one of the things that makes it interesting. If Apple went to into a competitive market and pulled this it would be pretty clear cut. But instead they went into a market dominated by a de facto monopoly. In fact many people believe that Amazon should have been investigated for it's practices in the 'pre-iBooks' era.

> They fixed prices [...]

This is something I'm not sure about. From what I've read it sounds like all the publishers already wanted to do this and Apple was just the perfect opportunity to force the issue.

But as I said above, Apple clearly knew this was the case and used it to their advantage. They didn't set out fix prices, but they weren't against it.

> And in fact, it didn't.

This is a little odd too. Because of the agency model and the most favored nation contracts, prices went up. But if prices were artificially low before hand, was this a harm to consumers or a correction that would have happened eventually anyway?

There are some interesting twists in this case that make it a lot less clear-cut than most price fixing schemes. Apple probably deserves some kind of punishment for their behavior. On a personal level I'd really like the ability to buy books in the Kindle app, that seems like a fair punishment. I love my Kindle, but I do think Amazon might have been abusing their monopoly.

Of course the publishers were all guilty as hell, but they settled quickly. If they had tried to fight this too, I wonder if we'd hear as much about Apple. They're the only ones left standing and fighting.
The crime is that businesses are not allowed to get together and raise prices in concert like this.
Bipartisan Congressional Coalition Introduces Surveillance Order Reporting Act
Simple, just prop up your phone and video yourselves having sex. Like a Kinect, it can detect the position of your bodies. And it can analyze the audio to determine if the female orgasmed.

And then the video will be automatically uploaded to the NSA.
> The moment thats not the case, you can be sure there will be an anti-trust investigation.

That was the case, there was an investigation. All the publishers quickly settled because they were caught colluding to use Apple to force Amazon to switch sales models.
expr = '28+32+++32++39'
print sum(int(i) for i in expr.split('+') if i is not '')
Suggested not to view on a mobile device - works just fine on an iPhone 5, actually.
I think Yahoo just needs great engineers and acqui-hiring is a good way to get them quickly. I think that as long as Yahoo can keep the teams together, they have a good shot of building some great tools.

If I was to guess their strategy: Sumly + Tumblr + Rockmelt looks like a new content distribution system.
Cloud Cannon
Really? They both play this kind of stuff close to the chest. As far as I know Amazon has never released sales numbers for the Kindles, at least Apple tells us that.

Anecdotally I use Kindle ecosystem, as do some of my friends and family. I don't know anyone who uses iBooks, so that's probably skewing my viewpoint.

I guess they did at least make a name for themselves with textbooks, at a minimum.

EDIT: According to All Things Digital, during the trial one of Apple's people estimated their market share at 20% [1]. That's way higher than I would have guessed.

[1] - http://allthingsd.com/20130613/apples-e-book-market-share-is...
I added most of the really bad features.
Can you explain specifically what you mean by investor shell game? Who benefits and how?

(I don't necessarily disagree with you I just like to understand high stakes trickery).
The "developers" dig seems unnecessary.

@cuttooth and @PommeDeTerre, since you both are pushing the "JS is a flawed language" angle, what do you find are its greatest flaws?
>so if someone can successfully attack the TPM, you are having a very big problem and will not go to security today.

"That isn't supposed to happen" doesn't mean it won't happen. The Titanic wasn't supposed to sink.

The point is, you want to be able to recover from attacks. It isn't about security today. The premise here is that you've already been compromised to the point that the attacker may have been able to screw with the firmware on your hardware. What you need then is not an assurance that the thing that already happened not be very easy, what you need is a way to hard reset the hardware to a known-good (i.e. factory) state given the assumption that every piece of EEPROM in the machine has been replaced with malicious code. Having something like a jumper on the logic board that will do that in hardware would be a welcome security feature.
Work and Play Differ in Form, Not Content
I'm a python-native programmer who just recently picked up SICP. I've been trying to use some more functional tools; I told a friend at work one day that I was going to try to do everything with just map and filter.

But I also just had an experience I haven't had much since I was extremely new: the experience of going back to something I wrote last week and not being able to decipher it. I'm going to keep it up, partly because I like it and also because I have some hope (unjustified?) that map will give me better performance than looping. I wish there was a way to enable tail recursion though--seriously, I promise I'll ask for clear stack traces when I need them.
Except that this isn't specific to Rails at all, this is just a method for combating it if you are using Rails.
Sorry, this was meant in jest.
^^^ This. This is what we're up against. A steaming pile of moral hazard.
No, based on the data, the more reasonable hypothesis is that WordPress is killing PHP: http://www.google.com/trends/explore?q=wordpress%2C+php#q=wo...
Actually, it's a harder workaround than I was suggesting. When the ETag isn't explictly set, the full body of the middleware chain is generated every single time, irrespective of the Conditional Get.

You want the ETag generated without the Length Hiding, which isn't the way Rack::ETag works. It digests the whole content - it's implementation calls upstream first, so it effectively ensures it's always at the end of the middleware chain.

You'd need to extend/replace/otherwise hook into Rack::ETag, which is a bit more surgical.
It isn't a Rails specific vulnerability. So if you don't run Rails you're actually worse off because you don't get this (tiny) amount of protection.

And even if it were a Rails specific problem, "Don't run Rails to avoid any issue with Rails" is obvious, and is unhelpful to everyone.
I read your post. The point I was trying to make was that Apple did something illegal and got busted for it. Amazon either hasn't done anything illegal, or hasn't gotten busted. The judgement for Apple isn't to help Amazon, it's to pay back the damaged they have done to their competitors. Since it was deemed that Apple hurt Amazon, Nook, etc, they now have to pay that back by hurting themselves.

What would be Apple's punishment? A fine? That's hardly going to deter the world's most valuable company. What they did hurt their competitors. The punishment is that they now have to help their competitors regain what they lost. This is not unprecedented by any means. In the two cases where Microsoft was deemed to have an illegal monopoly, they had to give their competitors access to their proprietary APIs (US v Microsoft, a gift to Apple and Linux vendors) and include downloads to competing browsers (EU vs Microsoft, a gift to Google, Mozilla, and Opera).
Even more fun and guaranteed to crash everything except for desktop Chrome & WebKit Nightly is the follow up http://swannodette.github.io/2013/08/02/100000-processes/ - here we create 100,000 go blocks (akin to 100,000 goroutines in golang) and run them all at the same time.
NSA's 'archaic' email hinders keyword searches: official
Exactly the discussion i had today with a colleague. Mongoose makes it incredibly easy to get started and iterate rapidly.

I have yet to experience MongoDB in a large scale production environment and the common pitfalls often cited, but let's face it - If you're Start-Up has scalability issues, it's prob a nice problem to have.

Based on my personal observations, i suspect the lack of adoption is because founders are thinking about scale prematurely - which is rather Anti Lean Startup and Anti-Pg anyway.
If you said that HTML browsers should be that, I'd totally agree with you, but (unfortunately, IMO) they're not. They're app platforms now, and so performance becomes really critical. Like, stuttering animations make users mad at the browser, not at the (possibly stupid) code within it.

My last project was a now-defunct deformable-terrain world game[1], based on voxel fields and surface nets. We were running into problems with Lua's GC just on our actors, nothing else in the world. With the amount of data we were forced to push around, I can pretty confidently say that an all-managed environment would have killed us (because we tried it first in C# and it did).

[1] - An early video, before the team broke up: http://static.largerussiangames.com/voxels/videos/rigidbodie...
The military has about 2.3 million people, compared with 120 million civilians that could potentially fight [1]. Out of curiosity, how many of those civilians do you think would need to join a militia for it to be strong enough to resist the military?

[1] https://en.wikipedia.org/wiki/United_States_Armed_Forces (see manpower infobox)
Olfactory fatigue works for all kinds of stenches, it doesn't mean they aren't unpleasant.
Vice has really been killing it lately with their reporting. This story though was covered by mainstream press 3-4 years ago.
One of JG Ballards best novels is High-Rise, a sort of Lord of the Flies in an apartment tower. It's a lovely skewering of the social mores of proper English people, as well as a musing on the thin veneer of polite society. Only tangentially related, but it's a good read. http://www.goodreads.com/book/show/70256.High_Rise
Which apps were these? I had one popular app in 2008 which was in the top 20 apps I recall, but certainly never had any 10K days. Best day was 720k pageviews and I was getting paid around $1 CPM.
Yeah, I've confirmed a few different times. Just pushed a build to production. So, let's see what happens when the caches all clear out. Should have posted this on here weeks ago.
I feel like a broken record for saying this but ... most production JS is shipped minified just like the code for this post. The entire code base is 25K gzipped smaller than ES6 generators + jQuery + Underscore + Immutable Collection Library + Promises implementation which is what ClojureScript + core.async delivers!
Is there a particular bluetooth keyboard you recommend?
That's pretty cool. You don't need WebKit nightly, it runs fine for me on Safari 6.0.5.
There are any workaround for other web frameworks like Django or Padrino?
NSA Collects 'Word for Word' Every Domestic Communication, Says Former Analyst
Thanks a lot for those two links. They really make it for me!

Edit: I found that Coffitivity goes really well with Muzak - https://www.youtube.com/watch?v=gdJWZxPW45c - that someone else posted. Turns your office into a mall!
I wasn't disagreeing with you, they do try to sell sex and publish silly articles often, but I do think some of those are interesting and telling of an industry that no one else really hits on.

The article about Prim for example I think makes a good point. Also note that TechCrunch gave them a 1000 word review -- that's quite telling to me as it sounds as though YC might have an arrangement with TechCrunch.

The personal profiles, while tacky as hell, do also show you that folks who are all for disruption and who some look up to, are also just regular people. I also noticed this on the Path article -- http://bioischanged.com/user/davemorin which is actually quite interesting to me.

Again, I totally get the ban, and I agree they publish filth, but I have to say, they do cut through a lot of other valley red tape that others don't.
Works fine on Firefox 22
Definitely stick with promostudio.com. Sounds like a word-of-mouth kind of business, unlike tumblr/flickr/reddit which spread virally by link sharing so verbal spelling is less important.

I tried to find some more domains, but I was surprised how saturated the domain space is with anything to do with "video". Best I've found is:

pitchproduction.com

hypespotlight.com

(more here: http://wedomainsearch.com/#/dYVtJ0zS)

Though promostudio.com is probably better.
Catch is terminating service
Same, on my iPhone 4S...
So, basically, with lots of work, you can make something that's technically functional but with none of the beauty of a language that's meant for it.

I understand the appeal of functional programming, really I do, but why can't we accept that sometimes just because you can doesn't mean you should?
Catch.com pivots
What the hell part of Microsoft were they from? And were you able to get the answer to that question before they were shot?
Considering everyone on the internet is being logged in some sort of way by various entities at all times, I think most are used to it by now. The government may have judicial powers, but I think most people have accepted being tracked by things like browsers, analytics services, social networks, etc. The next logical question is "How would government tracking affect my life differently than Facebook tracking, and would it make my life worse?" Considering the average person is probably not committing felonies on a regular basis, the conclusion is generally "Well honestly, it's more likely that Facebook tracking will affect my life negatively (ie. somehow posting the weird things I look at on the internet on my news feed) than government tracking." Since this person has already accepted Facebook tracking as part of their lives, it's then pretty easy to accept government tracking.

Mind you, this is all speculation on what the average person might think, but I'm not a big fan of slippery slope arguments so I tend to agree.
mod_python works fine with 2.7, but that might be because Debian/Ubuntu was doing some maintenance out-of-tee (so their patches should definitly be pulled in). To the people who believe it is obsolete, though: mod_wsgi handles only trivial HTTP handling, and is not a reasonable replacement for mod_python, which could be used to plug in to almost any part of the Apache processing pipeline; it is much closer to mod_perl than mod_jk (which feels more like mod_wsgi).
The opinions of one who writes "Javascript 'developers'" are probably not worth knowing. Javascript has stupid scoping rules, and some other obvious flaws, but it's not flawed as in unusable, and it's certainly not flawed as in "'developers'".
It's really weird to me that the author prefers map(add, ...) to sum(generator expression).
Sure, but look at what happened to Arc. There was excitement in the beginning, but since pg wasn't really taking patches (except bug fixes), the community forked the project and started working cool stuff on their own. Eventually, pg released new versions, which never incorporated the community fork's changes, so bit rot crept in, and people gradually lost interest and drifted away from the project. The project isn't dead exactly (is Lisp ever really dead?), but it isn't the hub of activity it was at the beginning.

I don't think dilution is main threat here. I think turning Dwarf Fortress into a viable open source community takes effort, and just letting the code into the wild won't necessarily accomplish much.
Youtube direct link: http://www.youtube.com/watch?v=v1p9jlQUW0k

So the Broad Group continues to claim [1] they are going to build their 225 story building in 3 months. (well erect it would be more accurate). One wonders if this sort of construction would be a better solution than occupying partially constructed buildings.

[1] http://en.wikipedia.org/wiki/Sky_City
Excellence does not transmit well over reproduction.
> All of this is academic because it assumes the AI would design a new smarter AI - which of course we could not let it do since we wouldn't be able to trust the design.

Err... that was the assumption that started the debate--that someone will be both smart enough to code an AI, and clever enough to code it with the ability to self-modify, and stupid enough to do that without adding any guides for what it should be self-modifying toward.

If you don't assume that the ratchet-effect of Positivist scientific progress allows for the existence of such a person (in that they'd only be taking the current literature of their time and adding one last little insight, so they don't have to be superintelligent enough to catch their error in advance), then we're having different arguments here.
Verbal history of the PC industry (Horace Dediu of Asymco)
I tried on firefox 22, it took 4:54 mn to complete , each color was around 4 to 8 numbers.
I then tried on IE10 to have some fun : I took 7 sec to complete, each color was between 1 and 3 lines ...
My immediate response was, "Ruby? Ugh! You should never use Ruby."
In the HN thread earlier this week Gentoo was more accurately described as being part of the build tool chain. This makes a ton of sense to me and something I thought about doing if I ever wanted to "make my own distro".
There is something to be said for functional code which clearly shows the operations being performed in (reverse) order. In Haskell:

(putStrLn . show . sum . map read . filter (not . null) . split '+') "28+32+++32++39"

or, if you like list comprehensions,

(putStrLn . show . sum) [read x | x <- (split '+' "28+32+++32++39"), not (null x)]

But don't underestimate the power of syntax! It's much easier to see the structure of your (d0m's) first example than of the second at a glance. I won't comment on the readability of my Haskell code as I'm already far to conditioned.

(Note that I had to define 'split' by hand; it is a gaping hole in the otherwise very comprehensive Data.List library.)
What Mechanisms Can I Put in Place to Control My Board(s)?
Yeah this also works quite well in IE10.
Just to explain core.async uses the fastest dispatching mechanism available, Firefox doesn't provide anything sensible like MessageChannel so we just resort to setTimeout. setTimeout in all major browsers has a 5ms delay between nested calls - thus all the discussion about setImmediate the past 2 years or so.

I am surprised about IE 10 since we do use setImmediate if available, but I haven't done much testing there - will need to look into it.
For appropriate levels of paranoia and/or "I'm doing this right just because", I'd hesitate a little about choosing OS X or Windows as an OS. Once you've allowed them to connect to the internet, they both do a surprising amount of "phoning home", and who knows what "the mothership" is capable of being coerced into making them do.

I'd lean much more strongly towards Linux or even one of the various BSDs if I were doing this. I'm not about to audit all of the Linux/OpenBSD code myself – but I'd feel somewhat more comfortable with them knowing the code is at least available for me to review and that there's a much smaller chance of the NSA or FBI being able to "lean on" enough people to be able to keep backdoors undisclosed.

(Having said that, if you've got a "spare" Mac and are comfortable with OS X, you'd almost certainly be able to set up a system that's "secure enough against ubiquitous recording-of-all-traffic" surveillance, and if the NSA chooses to target you specifically, you've probably got to admit your privacy battle is lost from the start…)
Qaeda Intercepts Prompt U.S. Terror Warning
Maybe, but dismissing people doesn't sit right with me.

Not to get to Yoda-y, but the anger here is real and deserves some scrutiny.
Mac + Nginx + Percona + PHP
Something like 60 or so, but Chrome handles it all without missing a beat. It's only if I have 40+ tabs running flash that there's a problem, and even then its only that flash might crash.
Yes, there is a bounty of mod activity, but it is rare for mods to outlast the source game by a decade.
What are you talking about? Trust me, when a prototype device gets stolen in a bar, that's absolutely not guerrilla marketing. That was serious business, and I'm certain the only reason the engineer didn't get fired is because it would have been bad PR. Apple takes its prototype hardware extremely seriously.

And I really have no idea what you mean with the "gimped software and drivers for other platforms" claim.
Ask HN: story about uk insurance underwriter and cosmic rays?
A few months back was a story regarding the 1800's and a bright light in the middle of the night that got people up, who thought the day was starting. The story reflected on this true event from the perspective of a current uk insurance underwriters perspective. Does anyone have a link to that original hacker news article? I would love to reflect on it further, it was dystopian future possibility after a large solar release.