skysight-inc/HackerNews huggingface dataset:
Nope. EVeryone downmodding is well aware that Amazon doesn't hide the subscription - in plain sight or elsewhere. When you sign up for prime, you know that you're signing up for a subscription service. There's no doubt. Things like "try it free for 30 days" in bold letters make it very clear.

I've also never seen a default behavior of enabling prime.
You are correct - it looks like it is distributed as a kernel patch.
Elcomsoft Forensic Disk Decryptor [0] can find the decryption keys from the RAM dumps or hibernation files.

The RAM can be accessed using a DMA malware from the GPU/NIC/Intel ME or other devices which have a (micro-)processor and can use DMA [1, just submitted].

[0] - http://www.elcomsoft.com/efdd.html

[1] - https://news.ycombinator.com/item?id=6457069
BlackBerry reports deep loss, revenue drop, as warned
Audible's response (on that very page) is actually a textbook example of how to deal with a thing like this.
An intriguing part of the article asks about the Twitter Ruby-to-Java migration and posits that any language would be fine for a services architecture.

I'm not much of an object-oriented hacker, but when I was at larger IT firms, what several Java codebases shared was a common use of design patterns. It seems that this sharing of what may be considered a common vocabulary essentially makes it much easier for Java devs to jump into any project and follow the "accepted" usages in a way that perhaps other languages do not? So you are scaling up your dev team, it's infinitely easier to recruit acceptable Java candidates than say, Scala hackers? I do want to mention that my impression of Twitter is that there is definitely a polyglot JVM environment there (Scala, Clojure).

This feels like a bigger issue to me than I'd like it to be - in particular that Java programming opportunities vastly outnumber, say Ruby, Scala, Clojure, etc, hacking jobs.
XDC2013: Brian Paul - 20 Years of Mesa - A Retrospective [video]
You could always look in the threads section... That's what I do.
IOS 7 is reportedly making people sick
> Beyond that, you are labeling the business a "scam" because you assert they are hiding the recurring payments from their users. Maybe so, but it would help to have data, rather than "wondering" how many users were unaware of the payments. When they become aware, does the company refund their money?

I think the class action lawsuit might satisfy your curiosity.
Interesting fact: King has existed since 2003, but they're only now going public. Given that their only real success so far is Candy Crush Saga, you have to wonder if this will be the next Zynga.

(Also fun fact, Notch worked for King until Minecraft became big enough to pay for full time development.)
@cpncrunch, you need to re-read section 3.1.2.1 of StartSSL's policy:

Class 1 certificates are limited to client and server
certificates, whereas the later is restricted in its usage for
non-commercial purpose only. Subscribers MUST upgrade to Class
2 or higher level for any domain and site of commercial nature,
when using high-profile brands and names or if involved in
obtaining or relaying sensitive information such as health
records, financial details, personal information etc.

That said, if you're a business, you pay $60 to get verified for a year, and then you can create as many certificates as you want.
I agree it's not for everyone, but I can see its usefulness for a number of service scenarios such as PaaS/SaaS.

I signed up for a trial (no CC required), and there's integration support for Pingdom, New Relic and Webmon. i.e. you can get these to send email alerts to status.io which then parses them to set the service status. e.g. http://doers.statuspage.io/integrations/pingdom/

There's also support for pulling in metrics from Pingdom, New Relic, Librato, TempDB and Datadog and displaying nice graphs: http://doers.statuspage.io/public-metrics/introduction/

It would be nice I guess if you could send your own nagios notifications or poll a custom data source in addition to these other commercial services.
For the new Call of Duty, the studio motion-captured an Alsation
Why can't get the 'best config for security' be default out of the box on nginx and apache httpd? That's the only way we're actually going to have a secure web, ain't it?
Their target market is clearly "stupid customers who don't fully read pages and probably don't fully read credit card statements either"
NULL in SQL: explaining its behavior
You can do both, of course, with the use of metatags.

But that point aside, it is the editor's job to second guess things, as you say. By writing a headline, an editor is implicitly saying, just in case you don't get to reading every story on this page, here's a 10 to 100 word summary of what it's about. The difference here is the medium...the print page makes it easy to convey meaning through design and photos. A search engine does not. And unless you want your search result pages to look like Myspace, I think it's important for the metadata to convey actual meaning that doesn't require the context (I.e. Buying a back issue of the newspaper) for it to make sense
I bought a couple of the original APC 8750s when they came out. "Meh." Fiddled with one, the other is still in the original box. My RPi units get a lot more use.
Not just sounds. It's every NLP trick across all fronts including crying icons and sad faces that only brighten up when you pay.

... all of which is easily defeated by setting date forward, likely meaning that they are making as much money from charging $0.99 for level batches (each of 20 stages to a total of 400+) as they do from selling in-game gimmicks. They just milk this puppy through every hole.
I was wondering if anybody in HN tried this.
> Could they put the subscription details in bold? Could they use a larger font than all the other text? Sure.

> Could they pop up three boxes after you click yes and say, "Are you sure?" "Are you really, really sure?" -- (yes, I know I'm being ridiculous) -- but yes, it is a tradeoff.

What? No these are NOT the issues why it's misleading.

You should put the terms of subscription in between the shopping cart and the checkout button, instead of way outside any natural reading order.

The misleading bit is that there is NOTHING suggesting a subscription model, or even mentioning "look to the sidebar for the terms of our subscription" in between the item list and the checkout button.

This means, literally, there is NO REASON for the user to read about the terms of subscription. Because the checkout button, which comes first, leads away from the page. There is no reason to even expect the rest of the page to contain any useful information after the checkout button.

Read that last paragraph again. Because that is not a matter of subjective opinion.

You speak of "plain English", the plain English conversation between the webpage and the user goes like this:

(in plain English reading order)

- webpage: "in your shopping cart are the following items at the following price: ####. Would you like to proceed to checkout? Y/N"

- user: "Yes"

- webpage: "by saying Yes you have agree to subscribe and pay 40 dollars every month"

Does this conversation make sense? No! So tell us again, how does the website make it clear that there's a subscription in "plain English", because I'm not seeing it.
Your backdoored DMA capable NIC can also just copy the plaintext out of RAM without futzing around with the key.
> These days I would not bother with it, given that we have Clojure

And Racket. And a variety of Scheme implementations.

The spirit/sentiment of ISLisp seems similar to traditional, pre RSR6 Scheme. But I guess ISLisp would appeal if it's similar to some other, older Lisp systems?
Candy Crush is a pretty good game. Not novel, for sure, but well polished and neat.

That said, a minor success doesn't really mean you're ready for an IPO, I don't think.
One of the nice things about OSX and Filevault2 is that you can force the key to be destroyed on suspend:

destroyfvkeyonstandby - Destroy File Vault Key when going
to standby mode. By default File vault keys are retained
even when system goes to standby. If the keys are
destroyed, user will be prompted to enter the password
while coming out of standby mode.(value: 1 - Destroy, 0 -
Retain)
Yes true, it occured to me after writing the death star was massive.. and Discovery One perhaps a bit small?
Ask HN: Job interview puzzles
Hi,

I like little puzzles, e.g. tower of hanoi, project euler [1], that are often asked to solve on job interview to judge the logic skills of the interviewee.

Do you know any puzzles in this style ?

[1] - http://www.projecteuler.net/bolbol
You can easily read the greyed-out comments by highlighting them with your mouse.
Clearly we have a problem
LOl that screenshot proves beyond a doubt that they are a scam company. What the hell are you guys thinking? Those bastards should be in jail in my country.
Plant that grows tomatoes and potatoes
If this is a concern, the solution is easy. Buy an SSD, turn computer off when you walk away, turn computer on when you come back.

The intersection of people vulnerable to cold boot attacks and people likely to be victims of cold boot attacks is hopefully the empty set.
Venmo is also used by Simple[1] [2] so it's already in banking. That may have influenced things. If Simple get big then Paypal could end up processing a significant amount of banking transactions.

[1] https://simple.com/
[2] http://pandodaily.com/2013/09/20/mobile-payments-are-one-thi...
My take on why imgur is on top (I've been using & evangelizing it for a couple years): They initially picked one thing (image hosting) and did everything possible to remove barriers & friction to getting that task done.

Ways to upload to imgur include clicking upload button, using file dialog; dragging and dropping onto the webpage; OSX dashboard widget (used this one when I was on mac); windows context menu (right click send to imgur); chrome extension; FF extension; bash script; wordpress plugin... basically any way you can think of, you can put images on imgur quickly. Oh and not blocking 3rd party referrers, and actually doing a good job of handling images makes a big difference. To the latter point: I was uploading images from iOS to wordpress but the orientation was in the EXIF data. WP ignored this so my images were rotated the wrong way... use `convert` to fix them 1x1 = pain in the ass. Select images, drag/drop onto desktop, group as album... surprise surprise: imgur orients the pictures properly automatically.

The UX on imgur is what I'd call a case study of good UX, basically the best I've seen on any website. Kudos to imgur, they deserve all the success they're getting. /fanrant
Lawyers are so expensive.

If my girlfriend got scammed by this, I would do what a gorilla would do.

Smear my feces on the investor's doorknobs.
Sharing code snippets with team members just got a whole lot easier
We're off to see the wizard of business resilience
I get a rather strong sense of déjà vu looking at lots of spray-http code: it's a pretty good model of what I was already starting to do or what I had in mind a lot of the time.

My own header definitions are pretty clumsy at present; I'm just about up to the stage of improving that with macros now. (I didn't do that to start with so that I could write a few and get a feel for what it would need to be like.)
Like how you can get the performance rolled back in time. Nice feature that I have never seen before. Makes it feel less of a leap of faith.
Wrong like false, you are not the product, the product is ad space
"1,131 cases to 189 in 2012. It's still a small proportion of the estimated six million Americans abroad"

Yes, I would say that 0.019 percent of the passport-holding population currently living abroad (presumably biased toward the more wealthy passport holders) is a small proportion indeed. What is the comparable figure for people from other countries who renounce their citizenship each year to become naturalized United States citizens? It is surely much higher.
You should have read further then - he was questioning where Wired was getting their data, not using it to back his own argument.

"If Java rules the web I want to know what Wired are basing their conclusions on, except that it makes a more compelling article."
Also:

https://code.google.com/p/word2vec/#Pre-trained_entity_vecto...
What a load of bullshit, this page is clearly designed to trick people into a subscription.
This is a real problem. You should be scared. Also, you should buy a VibraDamp Laptop/Keyboard mat from me. Protect yourself today! For added protection I will also make up and sell a VibraDamp Mini to keep your phone on!
Might be this one?

http://www.jeremymorgan.com/
I'm incredibly new to Git, but actually destroying the history seems like a crude solution for a sophisticated tool like Git.

Couldn't there be some way to just tag the "main" commits and mark the dead ends as "extraneous" rather than destroying them? And then have your history-viewing tool hide/squash the unmarked "invisible" commits by default and only expose them when specifically requested?

I mean, it seems to make more sense to just look at a blind alley of commits you made and just flag them all as a mistake rather than actually rearranging the DAG.
Speaking of size comparisons, how many bytes does this mother weigh in as a WebP?
Get to know us, then. That doesn't mean you have to schmooze with us or, god forbid, do cold-calls. (Really, that doesn't work.)

But follow us on Twitter or Google+. Comment on what we write, even (especially) when it isn't about your product category. (You can like a cat video, y'know. Or tell me about one.)

Let me get to know you as a person, and then when you send me a note telling me about your imminent launch, you aren't a stranger asking for something.
Are there really people like this out there? Otherwise, I don't see the point of satire.
IPhone 5s Wired Review
Thanks for the detailed response.

re: actively managed funds

Even beyond price, it is hard to know exactly what you are getting. A fund may be in the large cap value segment generally, but what if the fund manager hates financials or loves energy? Or even worse what if he hates financials this year, but loved them last year? Trying to diversify properly with such idiosyncratic building blocks seems a frustrating excise.

Re: overall allocation

I noticed that you have three model portfolios based on risk tolerance (conservative, moderate, aggressive) and you measure them versus target date funds as a benchmark. Are those different models intended to account for personal risk tolerance as well as time to retirement?
Exactly this. I don't mind leaving the history of experiments in if they lead fairly logically and cleanly to the final product, but sometimes I will have 2 or 3 "WIP" commits in a row, that turn out to be completely irrelevant to the final product.
Copy the plaintext of what? The password? The encryption programs usually don't keep the password in the RAM longer than required, but the key must be always there.

I just wanted to say that keeping the decryption keys out of RAM and Disks is not that paranoid because there are techniques which allow extraction of data from the RAM: cold boot, ordinary malware/rootkits, DMA malware.
exactly, a business model that tricks customers is not a business model, it is a scam and fraudulent
Agreed. This 'investor' is full of shit. Per their own screen capture, there is no line item for 'VIP membership' in the cart section of the page. As such, it reasonably appears that the customer is buying no such thing. But, in fact, they are!

The presence of the sidebar is irrelevant, as it is in no way visually associated with the current transaction.
On the front page it say

"5 books for $1 each with membership"

I think that makes it clear this isn't a one off purchase.
I'd use a dictionary and Bayesian net. You're given word lengths and keystroke signatures. You are not told which key matches which signature. It essentially becomes an encryption cracking problem, kinda like "e is the most common letter so that's the vibration sig we'll see the most".
Pictures of you
It doesn't actually require LN2. In fact, all you really need for many cases is a can of compressed air and a usb drive.

The idea that your full disk encryption is only safe so long as nobody manages to have such outlandishly difficult to acquire materials is rather disheartening.

Moreover, disk encryption systems aren't just designed for overly paranoid individuals who probably don't have anything more interesting on their drive than embarrassing porn, it's also targeted for people who have data they seriously want to keep from being divulged. A perfect example being a running, but locked, corporate laptop being stolen from an office building or even a public space (e.g. a coffee shop). Someone desiring to commit industrial espionage would have no difficulties whatsoever in pulling off a cold boot attack on a vulnerable system, even if liquid nitrogen was required (it's quite easy to obtain and fairly cheap).
New England Patriots vs Atlanta Falcons Live
New England Patriots vs Atlanta Falcons Live
This is really an excellent introduction to programming in python!
Beyond everything else it always shocks me as to how many people buy shoes online. I mean I can never find ones that fit well in the store never mind taking a shot in the dark with some no brand cheapa shoe.
I'm not very knowledgeable about x86, but why do they have to use the debug registers if they're slower? I know in GCC you can mark registers as "do not touch" when you write assembly in C. Why not use more general purpose registers?
Why? A chargeback is basically an automation of that process, with the full backing of your credit card company.
"Baidu requires users to sign up for its in-house online payment platform and then pay 1RMB (about $0.15). But it’s still a full terabyte of free space, all for a few clicks and email address submissions."

...so it's "all for a few clicks and email address submissions", with exception of money of course!
Zynga's market cap is listed as $2.9 million. Presumably this is a typo; it's ~$2.9 billion.
Are you using Shopify with a custom theme? I recommend starting with one of their stock themes - those should work well - and moving to a custom theme once you have more expertise. :)
If investors get a good ROI all legally they might be horrible people but not horrible investors.
I'd need to think about whether that's feasible or not in the overall design. (Locally, it'd work fine, but I don't think I want to be keeping the raw value around once it's validated.)

Arbitrary string headers are essential. Conversion between the typed header and strings is part of the design (though only partially implemented at present). As for other extension-headers (as they are designated in RFC 2616), that's the header enum variant ExtensionHeader(~str, ~str).
The founders should just retire from the fortune they made and let the company die.
No. Wal-Mart has distribution that makes the operations of most grocers look archaic. More man hours are devoted to managing their operations than putting a rover on fucking Mars. This makes them extraordinarily efficient. Things that don't sell are pushed out for things that do, giving people exactly what they want, when they want it.

They also know that they only need to have, on average, four checkouts open from the hours of 8-6, Monday through Friday, so there is no inefficiency when it comes to staffing, either.

Meanwhile at Mom and Pop's Five and Dime, inventory is brought in once a week on a truck, and if they got rid of cereal X and moved the milk over two aisles how much would their sales increase? Who the hell knows? They are just doing what has worked for the past 40 years. But it's okay, because shoppers in the area like them and because there isn't any meaningful competition, they can just use cost-based pricing to guarantee a satisfactory margin and keep themselves in business.

Unfortunately in this scenario, local town inhabitants are paying for this inefficiency. When Wal-Mart moves in and gives the consumers more choice at lower prices, Wal-Mart robs Mom and Pop of their margin, keeps a little of it, and gives the rest to the consumers. Your wages aren't 20% lower just because Wal-Mart ironed out a huge producer surplus. You are wealthier because you can go to the mall and buy a quality shirt for $30 that was made for about two bucks whereas before you would have had to make your own shirt which might take you most of a day. This is how economic progression works. Better business practices make society wealthier through efficiency.
Netflix makes it pretty obvious that you're signing up for a monthly subscription. It is also a pretty well-known fact about their business model so it's much harder to be "duped" into it.
Java to Scala converter
Why we hate the new tech boom
I think that the real scam is the VC funding. C series!. really!?
Pre-internet, or at least widespread internet, there was a similar scam with music tapes, perhaps records even before that. The first month's selections would be free but for shipping, after that they would send you a bunch every month if they didn't hear from you — and a hefty bill.
Ivan has already adjusted his views on RC4 as you can read here:

https://community.qualys.com/blogs/securitylabs/2013/09/17/u...

And the qualys SSL analyzer no longer penalizes for not mitigating Beast, they just warn about it in orange but there is no longer a penalty as of a couple weeks ago.
Facebook Starts Up Its Mobile Ad Network Again, Focuses On Improved Targeting
If this device was remotely managed and you had access to the sensors mentioned in the white paper then the tasks above may not be that hard for smaller plots of land.

Teaching it what rain is? How about a query to Yahoo Weather.

Teach it what ripeness is? Imagine this device taking pictures of each plant every day and emailing individual images to you. Start out by manually training on the corpus based on what you think is ripe or not ripe. From their you would have a good stepping stone to start machine learning based on color and size of the plant. Same goes for unidentified plants in the garden that may be weeds.

I think the idea of total automation and remote sensors could make managing a farm a one person job.
There’s Poop on the Moon
I believe that strong typing is a much bigger factor than design patterns in supporting big codebases, and allowing people new to the codebase to contribute productively. Once you go beyond a small project, it's really nice to have the compiler on your side here!

In terms of the pool of total developers, the argument is that "A-grade" developers use Scala and/or Java, "B-grade" developers only use Java, so a Scala developer is rarer but more likely to be an A-grade developer. But of course, once this is known then the B-grade developers learn Scala. This is probably what happened to Ruby - it was little known, so all the Ruby developers were 10x. Now everyone learns Rails, and Rails + Ruby teams are rapidly reverting to the mean.

But yes, I do agree that we've figured out what good Java code looks like now, although it took us 10-15 years to do so. And we haven't hit the 10 year mark on Scala, Ruby, Clojure etc...
> That's why you never rebase a published branch.

My problem with that is my coworkers and I usually work on our own feature branch. Ideally I wouldn't push mine to the central repository until I'm done, so I can rebase on master without changing the public history, but at the end of the day I don't like to leave code only on my computer (what if my hard drive blows up??) so I push everything I don't want to lose.
> . This striking block was dubbed Jake Matijevic, in honour of a recently deceased Nasa engineer.

They are naming rocks. They haven't even stepped foot on Mars yet and they are already going space mad.

And what's so special about getting a rock named after you? I'm sure there are enough rocks out there that everyone can have their own rock. Why not name a canyon or mountain after him?
Vertically, NULLs are not all identical. A Unique key against a nullable column will allow multiple NULLs
Techcrunch comes to India