skysight-inc/HackerNews huggingface dataset:
I think it's a valid concern for more than 70 people.
This will be more great publicity for Norwegian government-owned consultancy Evry, which has built the BankID Java Applet which is used for authentication of each and every online consumer money transaction performed in the country.

However, it is about time - I've heard online banking developers talk crap both about BankID and the underlying online banking infrastructure in the country, and security holes due to Java exploits are rampant. The banks have paid the bill for this until now, but it causes massive inconvenience for...every Norwegian who uses an online banking service. (Every adult Norwegian, more or less).
> I can see CIA looking at how their propaganda are affecting foreign nations by seeing who reads it from where

Interestingly, this is the second Google project on HN today that caters to people in oppressive countries. uProxy and recently announced Project Shield [1]. The major targets are Syria and Iran. Incidentally, they're also targets for the US military :) Intel from the enemy territory will certainly be of interest.

Good PR that Google is getting from it is in no way helping with mass surveillance at home, which they're themselves a big part of.

[1] http://projectshield.withgoogle.com/
Tufts Medical Center gets $40 million to see if vitamin D can prevent diabetes
Description - Facebook Recruiting III - Keyword Extraction
We are supporting our users. The point is that in this case we shouldn't have to. The problem is an entirely artificial one of Mozilla's creation, and no support from anyone should ever have been necessary.
A few years ago, Flash used to be a security nightmare and Java was shiny and solid. These days, it's pretty much the opposite. Flash security holes are fixed very quickly, Java security holes, slowly-to-never.

So, for the moment, we have not taken the decision to disable Flash.
The problem is that the files are still there, if the application manages the files itself to get more functionality than the fileystem itself offers (i.e. like iTunes indexing the files), then if you move/rename files you have fooled the secondary index. So the problem isn't that apps can't/shouldn't manage the files themselves, the problem is that the index they use (e.g. a SQL table) isn't provided by the filesystem to guarantee consistency. If the filesystem provided a database like interface, then iTunes and Lightroom wouldn't have to have SQL tables for the files, and if you moved a file on disk you wouldn't have fooled the application.
I reported this big issue forme in the developper forum.
al java version, even recent ones, ALL are considered, (not like flash...) as a "permanent unsecure virus" by Firefox.

- How can the Mozilla team can think they can get away with this ?
This behavior is all but neutral from firefox ?

- So I have to drop my software that I programmed in 7 years ?
Benjamin Smedberg (the guy at mozilla who made this shit) is an extremist.
I went 4 days ago in the developper forum to discuss about this :

---------------------------------
Me: "A red no entry sign" is too radical for recent java player I think.
My users give me a phone call to tell me "No way I will accept to install your software with this red warning"... Even the people who know me, tell me they got so scared they have really hesitated to accept java. Now I do understand at a time when java had urgent security issue this scary red-message was necessary. But I really wish that Firefox checks the java version installed ... and give a less-scary-warning-sign or a "go !" if the user has a recent java version (like the latest on java 1.7 update 30).

Benjamin Smedberg: "We fundamentally disagree about the risks of the Java plugin. We believe the Java plugin is unsafe, and we want to present that to our users".

-- Is there a boss at Mozilla ? someone who cares about developpers.
And yea Benjamin, you know, java is open source by the way.
Fuck you idiot !
Thierry
Finally, DRM for email!
You have to stop and think for a moment, though - it's kind of cool that the Firefox development team can basically say "Norwegian authorities - you need to ditch your $100 million outdated software solution because it is unsafe, and we are going to announce this to all your users".
While I agree with your opening sentiment, and I agree regarding OP's dad not having the appropriate training and judgement, I disagree with the conclusion that he should be the resolution to that problem.

The appropriate training is nothing less than years of experience working with computers or being in the IT business. Why do we believe that this ought to be standard knowledge for users? It seems to me that we're placing too much burden on the user to make good judgements in the face of insufficient application and operating system trustworthiness.
How to fix WordPress Maximum execution time exceeded Error
Daemon/Freedom was an amazing two book series to look at as well, one of my favorite books of all time.
I have reported this big issue forme in the developper forum last week.
All java version, even recent ones, ALL are considered, (not like flash...) as a "permanent unsecure virus" by Firefox.

- How can the Mozilla team can think they can get away with this ?
This behavior is all but neutral from firefox!

- So I have to drop my software that I programmed in 7 years ?
I went 4 days ago in the developper forum to discuss about this :

---------------------------------
Me: "A red no entry sign" is too radical for recent java player I think.
My users give me a phone call to tell me "No way I will accept to install your software with this red warning"... Even the people who know me, tell me they got so scared they have really hesitated to accept java. Now I do understand at a time when java had urgent security issue this scary red-message was necessary. But I really wish that Firefox checks the java version installed ... and give a less-scary-warning-sign or a "go !" if the user has a recent java version (like the latest on java 1.7 update 30).

Benjamin Smedberg (chef of this idiot change): "We fundamentally disagree about the risks of the Java plugin. We believe the Java plugin is unsafe, and we want to present that to our users".

-- Is there a boss at Mozilla ? someone who cares about developpers.
And yea Benjamin, you know, java is open source by the way.
Fuck you idiot !
Thierry
Just because you lowered my home loan fees while the sun shone, doesn't mean that you'll be there when winter comes and the shit hits the fan.

Liquidity is always there. Until it ain't.
And how is any of that different from the status quo?
> many more

That's not the same as several times more. If I remember correctly, it was something along the lines of 500% more. It's a crazy amount of fructose. And there usually is very little fiber (which you'd get with fruits) to slow down the absorption rate.

HFCS isn't that different from sugar. The only real problem is that it's even cheaper than sugar.

Theoretically, you could use a bit less because it's a little bit sweeter than sugar, but no one seems to do that.

HFCS is a very cheap way to make your crappy product taste like something. That's why it's everywhere.
Slackers rejoice! No way to block you from surfing porn at work anymore :)
CSS recursion
Yep. Just awful...
This kind of defeats email as a medium doesn't it?

Also I am supposed to trust (yet) another third party who hasn't got a neck in the game to keep my privacy?

Sorry I don't get it.
A Haskell kernel for IPython
Doubt that it will help a lot - metadata is valuable. Sometimes the fact that you are communicating with someone is as damning as the communication itself.

Unless the addon is really sneaky and confirmed by a lot of people chances are it will still be detectable by DPI. And you have the problem of the addon traversing the state firewall in the first place.

And you need secure OOB way to transport password anyway.

From what I see you need secure way to transport keys and don't minding to raise a few red flags with the authorities.

In that case just rent micro instance with any out of country cloud provider you have access to and ssh tunnel trough it.
PHP will parse whole file, before actually optimizing anything. Thats the only penalty you get.
Have you read the linked page?

At the moment, as Oracle refuses to fix security bugs timely, Java is permanently unsafe. Please be pissed off at Oracle for not protecting their users, not at Mozilla for doing it for them.
"Everything is a file" isn't really a problem. Its the index and metadata that is the problem. If you can make a one liner that says "show me all the photos taken last week, in the entire system" and that will respond instantly without traversing the hierarchy, then you have a proper index and metadata over your filesystem.
I think it has to do with text over it, so your pattern recognition thing in brain gets thrown off because it needs clear edges. I find it unsettling as well.

On the other hand I was toying around with idea of blurred backgrounds about a month ago based on several things I saw people were trying to do with it. It can be extremely pleasant if it's not upsetting outlines. Here's what I quickly proto'd based on what I saw elsewhere in several instances: http://cssdesk.com/VYN67
So what's the alternative exchange format between different programs then?
Freemium model appears to be allowing this else downloading can be easily stopped from wget and other downloaders. ofcourse screenshot is the option. ;)
This is HN, mind your language please.
24 Honest Slogans Show How We Really Feel About Famous Companies
>>My experience suggests that if you do that, the other party will never stop disagreeing with you no matter how far up the chain you go.

Absolutely true.

There was a MOOC about argumenting at coursera I think. The proffessor had the same viewpoint. One of the lessons was that you have to start at a common reference point and argument from there. If you and the other person have no common reference points, you will never resolve your difference of opinion ever.
Ok, to rephrase for the pedant: "Google pulls core developers off of uProxy; without leadership, multiple incompatible forks form and quickly die"

(Not saying that that will happen, just clarifying what I presume is the grandparent's point)
Typed Object Handles
The problem is entirely of Oracle's and your own creation. Oracle is not adequately supporting their software, and you have failed to notice the signs over the past several years that browsers were headed in exactly this direction and adapt accordingly.

Mozilla is taking the only responsible course to protect the vast majority of their users. It's been a long time coming, and absolutely no one should be surprised that it finally arrived. If anything, I'm surprised it took this for the first major browser to do it.

More will follow. Adapt or die.
What apps like this do is create social pressure on people to not copy things. If you use SnapChat it is obvious that you want the communication to be treated with more "sensitivity" than a Facebook post.

The common complaint that it is impossible to self destruct data is obvious to most people. If it is technically impossible to make something un-shareable then the only thing you have left is social convention.
edit: here I should replace firefox and mozilla with oracle

That's quite a stretch.

I have a user who uses frequently one specific website and for no apparent reason Firefox decides to tell him it's now dangerous to use with fearful and technological terms (vulnerabilities, plug-in, risk, etc.).

If Mozilla decides its users are dumb and should not be trusted to allow Java applet to be run then they should not warn them with techno-cryptic messages they know their users can't understand (because if Mozilla thought they could then Mozilla would know users could make the difference between a good and a bad applet and that warning wouldn't be needed).

A shorter and less scarier note would have been a better message for everyone.
From 2010. A lot has changed since.
Simple. They've built what search engines want vs what humans wanted: content that will rank in the search engines and get more shares/clicks. Thin product comparison pages no longer rank well and even worse a lot of them may give the signal that you're not a quality site.

Sometime this year or last, these guys probably looked at their traffic growth and realized this existing model was never going to cut it. Their sole strategy is search engine traffic and their pages were not ranking.
Well, the A350 has a long and painful history, it should have flown for years if customers had not threatened to boycott it. I can't see a fast release schedule, considering the price of developing a new plane.
Ever seen mp3fs[1]? Adding a filesystem layer on top of whatever music management software isn't implausible.

[1]: http://khenriks.github.io/mp3fs/
A "horseless carriage" may be a bit of a contradiction, from a certain point of view, but we don't have a strict definition of what is and what isn't a carriage, so it's not particularly misleading. We have a very strict definition of a corporation, so "autonomous corporation" is misleading. True, language evolves, but the law hasn't yet.
Well, applications still can store their data in a large SQLite database (for example) and be immune to users moving files around. Require admin rights and put the database somewhere outside of user reach.

Now if you want files that are accessible both from inside and from outside the application, then you have to settle for a compromise somewhere, and that's what we already have with filesystems and the OS-provider access methods to them.
Bind, call and apply in JavaScript
Bypassing censorship without privacy is just good way to invite someone knocking on the door if you are interesting for the authorities.
Look at this as a handy guide to how not to deploy in one single page. Pretty much any of the things in bold, had they not been done, would have avoided this from happening. Reused flags, letting dead code sit around in production for years, lack of change management, etc, all are signs of something gone horribly wrong.

Also, regardless of if the deploy went good or bad, discuss the aftermath with co-workers. I'd almost guarantee that some of these problems had crept up before, and being able to ask the question of "how can this never happen again" is important, because otherwise, those problems will be forgotten and stumbled over again, in a future, perhaps more critical incident.
The humble USB cable is part of an electrical revolution
The platform itself produces accounting data with 1 ms accuracy. How to do accounting in a real world public service is another question. But we aim for a very short-lived (10 seconds) but widely horizontally spread (1000 machines) workloads.
You obviously have never traded stocks and I would strongly advise against it.
Why is GAnalytics' "Avg. Visit Duration" 00:00:00 even though it shouldn't?
For things like this, I just remove the code and leave an explanatory comment indicating what's not there anymore and why, and what revision it was last seen in.
High-Performance Browser Networking (text freely-available)
Ask HN: any smell code hub?
Hi! For my scientific work I'm looking for TONS of smell code
for any programming language. Not rules, namely examples (with some rating probably).

The goal: sort of smell code detector.

Of course, "code smell" query on https://github.com/search?q gives
some examples ;), and we know patterns http://c2.com/cgi/wiki?CodeSmell
and taxonomy of smell code http://www.soberit.hut.fi/mmantyla/BadCodeSmellsTaxonomy.htm.

But... Any links here?
Healthcare.gov: it could be worse
I'm building Shoptimate.com [1] and I'm in Europe. Amazon isn't as huge as in the US (and the multiple local Amazon sort of compete with each other).

But I also gave up on the website to build a browser extension. Shoptimate is bootstrapped and mainly active in Europe so I can execute more slowly and without the pressure of VC-money. But even then, it's a tough space.

[1] http://www.shoptimate.com
Seriously? $29 doesn't register as real money to me. Especially from a business perspective.
It's a question of comparing cost of protecting 1 ton of gold (vault, armed guards, managers, video surveillance and finger print scanners) with a cost of protecting 200K bitcoins.

No matter how many bitcoins do you have, you can lock them up with M-of-N transaction where N separately generated keys belong to your partners and friends. And the encrypted wallet can be backed up on any number of computers for a very low cost.
@chrissmeuk, you've been hellbanned.
Menu File -> print -> print to file.
You just got a nice pdf. No need of extensions.
Also a perfect description of life forms.
Open source does not mean secure. Half the time nobody even reads the source, let alone compares the binaries to the repository.
It's a copy of one of the comments on the link. It should have been in quotes at a minimum.
Or, the shorter version:

Don't use any products that are offered by or have some kind of link to one of the known NSA partner companies (as seen in Snowden's slides).
The appropriate training has been given by me to the various family members I have to support. They started out just like his stepfather. It did not require them to have years of experience before they stopped trusting random websites, installing whatever came across their screen. It required me explaining the relevant concepts a few times. That was it.

We absolutely place too much burden on end-users -- one reason the iPad is such a hit -- but "don't believe everything you read on the Internet" and "ask me before you try to fix something you don't really understand" is not a heavy burden. If it were, we'd have a lot more mechanics and a lot fewer operable cars on the road.
You're arguing against a strawman. Autonomy doesn't mean complete independence. It just means self-governance. An human is considered autonomous, even if he relies on other people for survival, like we all do.
> An important property of corporations
is that they are always resolvable to
a natural person

To play up the SF angle a bit, this might change when lobbyists start accepting Bitcoin.
How to Tango with Django: A Python Django Tutorial
PHP Requests is pretty good, too. https://github.com/rmccue/Requests
USB Implementers Forum Says No to Open Source
Defending Against Crypto Backdoors
10 years of Xen : Transforming a Dinosaur into a Bird (or winged Panda)
…and you shall land amongst the stars
Everyone's pointing out that these can be saved and they address this in their FAQ. It seems the purpose is not to stop the other person viewing the message more than once on their end (snapchat-ish) but to stop emails being recorded by email providers/governments.

EDIT: Looking through their privacy statement:

"Hence messages are to be sent at the risk of the user. Information such as messages, time, date, name of the receiver and sender are also logged by us.
We also collect and use aggregated or de-identified information."

IANAL but that looks to me that they are storing messages?
sales is kind of easy if you don't care about profit. also kills off competition, which in turn makes sales easier.

but what happens once profits are needed? or is amazon the largest NPO on earth?
Ever heard of drones? I remember numbers that indicated for a country that there was 1 strike every 3rd day, on average. It was either Pakistan or Afghanistan.
Most of the vulnerabilities in Java that effect browsers are not relevant when Java is used in other contexts, rather than embedded in a browser.
Why most specs suck and how to fix them
I would support idea to just price every transaction with a 0.0001% transaction fee. It should be enough to bring the whole HFT industry out of business while not having any impact on markets themselves.
If you were deploying web servers on embedded devices without planning for easy and painless upgrades, joke's on you. That's terrible for your client's security.
I found the 100px radius acceptable, personally. I wonder what the tipping point is. Perhaps it's when it's no longer possible to do feature detection.
I wish the Twitter Music app would get more love
But with minimal effort, they can be, but it would have to be somewhat targetted attack against this particular service.
Thanks Nokia PR team.
Should one live in New Zealand, Australia, Canada, UK, France, Sweden, Italy, Germany or in one of many other countries with a recent record of bowing to pressure from US agencies (often in spite of local laws and/or over trivial matters like copyright), then one should care indeed.
I stopped reading when it said 432Hz was a "healing" energy - but what a shame, that made me miss the next sentence where it mentions "Nazi propaganda minister Joseph Goebbels"

Not sure if post is parody of conspiracy theories, or serious?
Not quite. You have to have your code "substantially based" upon OpenJDK, and be GPLed, in order to use their validation suite. So Harmony still would not be able to use their validation suite.
A single cloud service is provided by a central entity, but the application could be spread out across many such services (e.g., a distributed system running on EC2, Rackspace, a bunch of no-name VPSs and even home computers by offering a downloadable application that did something useful in return).
Shouldn't that be 7000 people?
This is void of any citations of scientific studies or just about anything to back its claims. How does this get voted up?
Personally I don't mind extra layers of abstractions at all... as long as they're optional.
Like Bootstrap itself, this would greatly benefit from having the line-height in body set to 1.6 or 1.7.

Test it with Inspect Element: http://www.html5admin.com/demo/ and http://getbootstrap.com/css/
Thanks for the reply, this sounds like just the kind of thing I'm interested in, and I'm happy to see more competition in the field of renting machines for short periods. I look forward to seeing this released and giving it a go.
There is a HUGE difference between resolvable to 'a natural person' v. 'a specific natural person.' This difference is basically the gist of the article.
The warnings are 8-14 and 5-8 words respectively, and state the case concisely. The word "risk" appears nowhere, and is a common English word anyway, and "vulnerable" and its derivatives are also common English words.

How would you rephrase the warning in fewer than 8 words that would have helped your stepfather understand the problem and how to deal with it?
Yeah, my first thought was that these already exist as computer worms. Though the difference is that they could actually play "by the rules" instead of using computer time against the owner's wishes.
Linux is king *nix of the data center—but Unix may live on forever
It feels like this article is getting confused between an application storing its own "application state" versus a user's own "authored files". There is a massive distinction.

The example of a fitness tracker app storing each workout is bad. Because these are not a file and never would have been a file in any era of computing. It is application state.
> So what do we do?
(1.) We make safe assets more expensive to lower the risk/reward ratio for commercial activities:
(2.) we make bank holdings very unrewarding (lower interest rates),
(3.) we devalue the money in circulation and provide liquidity in one move (print money),
(4.) and government invests in big infrastructure (liquidity, jobs, momentum, signalling etc).

I clearly see how 3. is not possible with Bitcoins, but how are the others not possible?
woops. sorry about that.
PhpStorm 7.0 final release is here
I was just thinking I could use a little more nutjob to help me get started in the morning.
> the source will be readable and verifiable.

that's all well and good, but if it's executed by an unverifiable binary build of Chrome (i.e. the one distributed by Google), it's not worth much. For what you know, Chrome might just detect the extension is installed and silently eavesdrop on all its calls.

If this extension will work as-is on third-party Chromium builds compiled from public sources, then yeah, it can be trusted on those builds.