skysight-inc/HackerNews huggingface dataset:
An attacker would have three primary avenues of attack:

1) Escape the virtual machine sandbox.
2) Denial of service of host resources.
3) Attack network services.

For 1), virtual machines provide strong, hardware supported isolation of the host. They can't access the filesystem, resources, or hardware of the host, only their own.

For 2), virtual machines also provide strong protection from the denial of service of host resources. Virtual machines can be restricted in memory, CPU, and device use while running. This occurs routinely with virtual machines provisioned on servers.

Network services, 3), are the largest attack vector not protected by encapsulation within a virtual machine. One weapon virtual machines do posses, however, is complete control over the virtual NIC. Every packet sent or received can be inspected, modified, or discarded.

Arc's network policy is not carved in stone. There is nothing preventing Arc from adopting a same-origin policy, like browsers. Perhaps it will.
I have some ideas. Contact me in my profile if you want.
The trolls and assholes are still cleaned up after. There are people who spend a few hundred bucks trolling but they're essentially invisible unless you go looking for them.
No, I don't think so. Certainly, Youtube for iOS lacks the behavioural problems that showed up when Jasmine shifted to HTML5 for the video pane
In Victoria the TAC handles it - "The TAC will pay the reasonable costs of medical treatment, rehabilitation services, disability services, income assistance, travel and household support services that you may need as a result of your injuries from a transport accident."

They also pay out on accident claims - my brother was involved in a multi-vehicle accident as a passenger in Victoria, sustaining serious head injury which will impact him for life.

In Tasmania the MAIB handles it - "The Motor Accidents Insurance Board (MAIB) is a Tasmanian Government Business Enterprise which operates a combined common law/no fault motor accident scheme for Tasmanians.

The scheme provides medical and income benefits on a no fault basis to persons injured in motor vehicle accidents whilst enabling access to common law."

For example, my car registration is around $600 aud per year, however only about $150 is actual registration/administration costs. The rest is a tax that is paid straight to the MAIB.
I wouldn't call it misunderstood. You're free to be selfish or cooperate, your choice. It's not freedom unless you can choose.
I had assumed that "Datomic in the browser" meant an implementation of Datomic that actually runs in the browser (presumably written in ClojureScript, though not necessarily). In fact, this looks more like "[Accessing] Datomic from the browser".

Aside from that, this does look genuinely interesting. I'd like to see more information about how people are using Datomic - I've evaluated it briefly but never saw a good enough reason to move away from familiar relational databases.
Acronyms Used: (trivial and otherwise)

--

SaaS: Software as a Service (might as well include it)

--

LTV: Life time Value (months of use * cost per month)

CAC: Customer Acquisition Cost

ARPU: Average Revenue per User (monthly)

Churn: Rate of customer loss (over specified period)

MAU: Monthly Active Users

--

WoM: Word of mouth

SEO: Search Engine Optimization

SEM: Search Engine Marketing
Sure. I am at teamlonric@lonricstudios.com
Speaking of DropBox, they seem like a natural competitor in this space. Given that they are also a YCombinator startup, has that been discussed? Or is it more likely they will just be happy to be one of the many backends you support?
>I don't think being open means you have to let third parties dictate the terms of their use of your stuff.

Then what does open mean? To me it means to provide an API on an equal footing among the various platforms. If Google is providing access to secret Web service APIs to their Android and iOS Youtube Apps, but not to Windows Phone, how is that open? Requiring to show ads is still understandable, but requiring HTML5? Why do they care if it's HTML5 or something else? It sounds fishy, and Google should come out with a real reason for requiring HTML5 if there is one, after all they call themselves open.

It is probably well within their rights to screw around since it's their stuff, but lets not pretend it's open. Didn't MS get lambasted for private APIs in Windows? Why does Google get a free pass now and get away with calling itself open?
I find it difficult to square a 10-40% chance of success with "fairly good accuracy".
There are only a handful of people who actually know what transpired between these two corporations. I would guess that none of that small group actively comment on hacker news.
https://news.ycombinator.com/item?id=6220632

The core problem with HN seems to be the tendency for people to lambast ideas before we've given them a chance to germinate. PG gets fiery mad at this behavior. Scoffing at ideas adds nothing, in fact it reduces the value of the conversation to the point that it has less-than-zero value.

To use a (poorly constructed) analogy: if I want to laugh at nerds and their nerdy ideas, I should go join the ranks of nerd-scoffers at any local high-school, where I'd be a better fit. If you want to be part of the conversion here, you should bring a positive or constructive voice and try to improve on ideas, rather than tear them down.
Brute forcing an individual user's password can still be made an extremely costly operation with appropriate measures incorporated.
GitHub realtime activity as soundscape
Introducing choir.io
This comment and the fact that it is so highly rated shows just how easy it is to fall into the trap of "I'll just create my own better crypto!" /dev/urandom is insecure by design. It is a non-blocking version of /dev/random and works by first depleting /dev/random, and then falling back to a very low quality RNG once /dev/random is depleted.

/dev/random is the right way to provide hardware RNG in a UNIX environment. However, programs using it can be blocked for extremely long times if there is no dedicated hardware available for providing RNG. I have regularly seen blocking times in the multiple hour range. This is not practical for most programs.

Even relying on /dev/random isn't necessarily safe. I have seen setups where people connect /dev/random to /dev/urandom in an attempt to eliminate these long block times on /dev/random. A quick google search can bring up multiple examples of how to do this. I'll leave it to you to think about out why this is a bad idea, but the result is that you cannot even trust /dev/random.
> Does anyone know if Stripe account setup&approval for UK is just as straightforward as for US?

Yep; it's the very same instant setup.
Depends a lot on the person. If somebody has done consulting or contract work, it's a pretty natural thing. I've done it both as an employee and an employer.
Silverlight for Linux has existed through the Mono platform since 2007 under the name Moonlight: http://mono-project.com/Moonlight . With Microsoft's blessing I might add.
Yeah, it is probably about as secure as is reasonably needed. You should also have daily and maybe total limits, do statistical anti fraud (useful in general, but more so on low trust channels)

You might be more willing to allow large repeat transactions vs large transactions to a new payee.

I haven't tried it yet, but you definitely want the voice call to include both as much transaction info as possible and a "press 0 to talk to security" etc.

Unclear which telephony provider you use, but if you are more partnered with carriers, you can see more data, which may help reduce fraud. If you turn out to have a bunch of users in Nigeria, I'd set up peering directly with the Nigerian mobile carriers. This is probably years down the line.

I'd personally be willing to risk 10-20 BTC to this level of security, but not 500. Of course, my Bitcoin holdings are 2-3 BTC right now.

The big risk is the link between Coinbase and your outsourced telephony provider. Worst case, if someone is defrauded out of 5 BTC, he can eat it, or you can eat it -- it's not material to you. However, if I can somehow compromise the entire thing and take 10% out of every enabled-for-sms account, that might be material to Coinbase. I'd make sure the entire path is secure, and do as much verification in-house as possible, and probably put aggregate limits on the whole thing.

To be clear, I like the idea here, and think it is a great thing to deploy, it just makes me scared because it is a huge step down from the rest of coinbase's security. Since it is opt-in maybe it doesn't matter as much.
Your arguments are nonsensical:

- Yes, I do want to view SilverLight videos on Linux. But I can't. Because Microsoft won't let me (or Xamarin or Ximian) implement the DRM parts.

- Yes, I do check that an nvidia card is supported on Linux before I buy it; That's why, for example, I avoid AMD, and it IS my problem if I buy an AMD card for which there is no good driver on Linux

> I think Microsoft is more open than Google in a broader sense. My mantra is: you can't reverse engineer the cloud.

The implied argument (Microsoft is more open because you CAN reverse engineer their products) is complete bullsh*t. Evidence: http://www.advogato.org/article/101.html
Crazy talk.

>> Knowingly breaking the law

Yeah, mythz's crazy anti-Microsoft law ...

MS argument here is that Google is pushing for open platforms and standards when it's profitable for G and closing their own when not.
I suspect the process is a little more difficult than a random official granting access without vetting.
I don't seem to have that problem, :/

make sure "mouse-mode on" is set, rather than "mouse-mode copy-mode".

Here is my mouse config:

set-window-option -g mode-mouse on

set-option -g mouse-resize-pane on

set-option -g mouse-select-pane on

set-option -g mouse-select-window on

set-option -g mouse-utf8 on
For the same reason other sites use floats for sidebars: they hate you and want to become irrelevant.
If this truly has the malicious potential you claim, what would stop someone with bad intents just making it themselves?
Without the DRM parts, making e.g. NetFlix streaming unusable on Linux (until recently, when someone managed to get Wine to the point where it can run Microsoft's own SilverLight DRM properly).
Stackoverflow:
212 Ada followers
508 FORTRAN followers
38,600 C# followers
44,500 JavaScript followers

Github:
329,678 Search language:ada
720,910 Search language:fortran
6,034,816 Search language: c#
44,430,272 Search language:javascript

The two services are heavily used by the C#/web community. mobile too but I did not include numbers
Thanks for pointing that out. I've seen several of these projects as they've come across the tech scene over the years, but I had no clue they were all done by the same guy.

Incredible.
They did change it, except for the one thing the provider of the so-called "open" API doesn't even do - HTML5. Why should Google hold MSFT to that standard when it doesn't even do it itself?

I smell the same anti-trust bullying that MSFT did in the 90s and early 00s.
> The more time they browsed the worse they felt.

Despite the shakey study wouldn't this result be expected? The more time you spend on Facebook the less time you spend actually socialising with real people? Facebook doesn't have voice chat. Text messaging is unforfilling.

Facebook has a great number of uses but one thing it doesn't do is allow you to see your friends, or actually speak to them. Using their chat box, if anything, emphasises the distance between you and the person you are speaking to.

Facebook doesn't have the tools to help with loneliness. Then it makes it worse by showing how awesome everyone else has it. My friends timeline is like a highlight reel of their best bits.
You realize that they're probably investigating or lobbying for doing just that, right? AFAIK, the only reason no one has gone after AdBlock yet is because they do not actually have enough users to make a demonstrable dent on the advertisers' revenue streams.

I really wouldn't be surprised to see this kind of legislation in 5-10 years, or sooner.
Your question was answered, more or less, in this thread:
https://news.ycombinator.com/item?id=6220479
Good point, I blame it on my poor english. "Accessing Datomic from the browser" would have been a more appropriate title.
localStorage on its way..will be pushed shortly.. +1

Thanks for the suggestions
That's awesome.

Any bets on when we can start using it on the front-end? I'm sure Chrome/FF will pick it up quick once it's finalized, but when will ECMAScript 6 be present in 95% of IE installations? 2020?
In Pandora's Big Data Music Experiments, Listeners Are Lab Rats
To Young, the change in repetition felt subtle. Coincidental, even. It wasn't. Changes like this are part of Pandora's ongoing experimentation in how best to deliver music to its listeners.
You can down vote me all you want, but I feel zero sympathy for Microsoft. If their app is being blocked from YouTube is because they deserve it. Google has all the right to choose which third parties can access YouTube. Microsoft is in no positing to criticize the actions of other companies.
Guessing the Android SecureRandom vulnerability
5 stages of a design project
Writing clearly and precisely in English. Managing conflicts and expectations. Business and financial matters.

If you can't express yourself clearly to your peers and managers, you won't control your career. If you can't work well with people, you won't control your career. If you don't understand the business context of your work, you won't control your career.
It seems like Microsoft and Google have switched places. I tend to trust Microsoft more these days.
He had a share of public fame with jslinux, a lot of people realized how much he meant to all of us. Also he competes for the fastest pi program, he aces both ends of the spectrum. Impressive.
open does NOT equal putting yourself on equal footing with your competitors.
Is this internship program unpaid just for women? If not, I don't see how having an internship program constitutes unfairness. If she isn't paying interns unequally, what exactly is hypocritical about her having an internship program?
We are hiring Web Application Developer. Apply now -
Oh, and don't think you are the smartest person in the room. If you find you're the smartest person in the room for real, you need to get a better job.
or that they got in a huge fight with their s/o right after posting pictures of hugs and kisses.

My wife's friend talks to her all the time about how her and her husband are constantly fighting and their marriage is falling apart. I hear this second hand but I'd never know that from all the lovey Facebook posts and pictures.

Another couple we are friends with is just 'perfect' and 'cute' on Facebook but the husband is just an ass to his wife sometimes (borderline verbal abuse) and has turned outings with them from fun to weird, awkward, and embarrassing. Meanwhile, the wife has become a secret stripper (husband knows and supports it) yet no one else knows.

I just assume that if someone is broadcasting that their husband or wife 'is the best ever' is covering for something.
Most important thing for new programmers: build projects.

Later steps:

Algorithms: Skiena's The Algorithm Design Manual http://www.algorist.com/

Learning about syntax / theory: SICP http://mitpress.mit.edu/sicp/
...or do people use Facebook more when slipping into a more depressed state?
Their method is crafted to find the reverse relationship, but I don't think that they properly defended against confusing the two.
As a Microsoft employee, I endorse this position.
Have Trouble Writing? Learn How To Create Great Blog Posts
I agree that we would do well to think completely outside the existing framework of services. Under present circumstances openness has moved to the forefront of peoples' thinking in lieu of imagining more fundamental changes. This is probably a good thing, but even better would be building completely new and open tools and services.
- Samba and Wine were both created using reverse engineering. Microsoft frequently made changes that broke both products. Don't get me started on Microsoft's PPTP and Kerberos.
- Nvidia produced their own closed drivers on Linux. How does that involve Microsoft?

Are you really making the argument that if your application doesn't encrypt its interfaces, then you're open?
What happened to that software-based LTE station thing for PC's of his?
It's not argument, it's a carefully crafted anti-Google PR statement with the goal of getting the public to do their own bidding for them, so they can get Google to do as they wish and further their own competitive platform.
You can also reduce the list before presenting it to the user.
For one, Sencha's app doesn't allow commenting. For two, it doesn't support notifications, so "re-created" is a generous verb there.
Except Hacker News is even worse at r/programming than r/programming.
Well 1st people often don't have an alternative (driver and app support of Windows, Google's search results quality).

And 2nd people do like to be screwed, if that means less effort and lower risk. The vast majority of civilizations in human history were slave based, with the majority of people being slaves.
Actually, yes, it does. If you're giving preferential treatment to your apps that's not possible to replicate, you're not being open.
Or, get one "investor" to pay you $1 for a 100-millionth of your company.
Oops, indeed I did.
Can't you just use IPC and basic file I/O, rather than tech bubble 2.0?
From http://www.wpcentral.com/official-youtube-windows-phone-app-...

>Google said in a statement that the HTML5-based YouTube app still violates Google's terms of service, and therefore cannot be permitted to remain active.

Google's statement:

"Microsoft has not made the browser upgrades necessary to enable a fully-featured YouTube experience, and has instead re-released a YouTube app that violates our Terms of Service," says a spokesperson. "It has been disabled. We value our broad developer community and therefore ask everyone to adhere to the same guidelines."

Sounds pretty vague and beating around the bush. Why don't they tell us why they're blocking the new app? After all, if they want to call themselves "open", can't they at least tell us the reason it's blocked?
How is it spiteful to the 7 people who own Windows phones?

This is Google saying "because of their behaviors, we don't want to allow them to consume our services." Microsoft is trying to weasel this into good PR for themselves, but the fact is this: Google has no obligation to people that are not making them money. It is not their responsibility to keep people buying Microsoft phones.
This doesn't particularly surprise me. Facebook is a self-advertising platform; people present a whitewashed and happier-than-reality version of themselves, and when you compare that to your own life (with its problems and warts and whatnot), you might conclude that your life is deficient.

It's the "keeping up with the Joneses" problem, except massively amplified.
Yeah, you keep using that example and conveniently ignoring that there are still huge numbers of users that refuse to use the native app because the web app works great for them. Plus Sencha redoing it and having it work better than the remade native Facebook app.

Whatever, just saw the username and won't waste my effort. iOS is the greatest thing ever.
That's true; I updated my comment to clarify that. If that's the difference between Google being okay with it and not, I guess I don't see where the chasm of difference is:

* Microsoft claims they've enabled ads on YouTube videos. How, if they're not using the same technique as Jasmine?

* If they are using the same technique as Jasmine, why is that not enough? Why is Google still saying (or at least Microsoft is claiming that Google is still saying) the entire app must be HTML5?

* If the technique Jasmine uses does, in fact, satisfy Google's "HTML5" requirement, but for some reason Microsoft isn't using it (but somehow is playing ads anyway), why doesn't Microsoft just do it? Embedding a web view into a native app isn't exactly rocket surgery: why do they claim it's technically difficult and time consuming?
Ok, so we have local storage and highlighting ready...! Thanks for the suggestions guys. Appreciate it..
Take a Chance on an Intern
I thought Reddit was fairly pro-Microsoft? I mean, if we're talking Reddit as a whole and not /r/programming. Reddit has a lot of general users who use Windows, especially any gamers, so they take kindly more to Microsoft. I remember articles on Reddit that mocked Bing and most of Reddit seemed to support Microsoft.
It all comes down to the fact that iOS is too significant source of users to give the cold shoulder. Windows Phone is still sufficiently small fraction of the market, that Google has more interest in degrading the Windows Phone OS instead of earning from the additional users.

I think this is purely a game of numbers, and if/when WP gets big enough that the additional income from eg. youtube outweighs the income generated from users who picks android next time.
>So Google blocks Microsoft, who wants to turn this into a anti-Google PR stunt and is openly crying foul trying to rally public support for their plight since they have no legal recourse.

And there's nothing wrong with that. Google might be doing a legal thing, but they're still doing the wrong thing.

>Which is odd for Microsoft who loves exploiting the legal system to others detriment. I'm honestly shocked that Google isn't bending over backwards to help a competitor who is actively extorting the Android ecosystem through patent litigation (on tech created by Google), who makes more money on Android sales than even Google does (who has contributed significant resources into making Android).

I dont think not actively preventing them from doing the same thing your apps do is 'bending over backwards'. The other points are irrelevant. If you claim to be open, you must be open to everyone, not just the people you do not consider competitors.
I agree. SA is far from perfect, but the $10 entry fee combined with a group of active moderators improves the quality of the community.
The whole article was written to point out that Google's not as "open" as they proclaim they are. In reality, they're just another one of the big guys. Apple is "Beautiful", Google is "Open". Neither of them is either. It's all marketing.

It's in Microsoft's favor to damage that image. Don't take it personally.
One difference is that Microsoft and Nvidia are considered evil and are derided for it and they don't pretend that SMB or graphics drivers are open. While Google has a 'do no evil' official policy which many folks seem to think they comply with. Similarly, with regards to openness.