skysight-inc/HackerNews huggingface dataset:
Right. Also, unless I missed something, I didn't see anything in their FAQ that states categorically that they're not storing your card information on their servers.

No, Coin, I'm not going to store all of my credit and debit cards in a single spot on the Internet.

Your app has to work without Internet, or it's a security risk.
More specifically: public domain gives anyone license to do anything they want - anything they want - with the work. Google can take a public domain book and charge you $1,000,000 to read Google's copy of it, in only the ways Google wants you to.

But the original work is still public domain. So if you can find a copy somewhere else, you don't have to pay for Google's copy or follow their rules.
Is there a better write up of the exploit? How did they escape the renderer sandbox?

(I ask, because I theorize that it's really easy to escape the Chrome renderer sandbox because the renderer is attached to Binder and thus has access to the whole system_server interface and everything else registered through the magic android.os.ServiceManager).
Sure. Have your entire kit powered by a AA batteries. Any connection to the outside world should be either radio-only (wifi/bluetooth) or optical. That way, there's no electrical path that can carry current from a device that's plugged into the wall to your body. In the worst case, you'll have a pair of AA batteries tied to your body, which should be a negligible risk.
I would guess that depends on how well that startup's lawyers argued the case. Considering how Judge Chin felt about this before the arguments started (he was somewhat skeptical that this was fair use) and how much effort he put into his judgement, I would say Google's lawyers did a fair amount of work explaining to the judge why they were doing this, what the benefits to society were, and how they're controlling it to be of benefit to the copyright holder.
31 games in 31 days
The most famous British political satire TV-series is "Yes Prime Minister"[1]. Believe the IMDB 8.2 doesn't make justice to this masterpiece which most often than not proved to be spot-on about how matters of the state are approached by politicians.

Here is a snippet from Episode 1, season 2:

----------------

Late in the evening PM at home. Bernard, PM’s personal secretary, enters the room:

PM: All the cabinets have got to make cuts in their spending plans.

PM’s wife: Bernard would you like a scotch?

Bernard: Yes, I can have a large one please!

PM’s wife: Another triple!

PM: Humphrey should have seen this coming and warn me.

Bernard: I don’t think Sir Humphrey understand economics prime minister. He did read the classics you know.

PM: Well that’s the thing. He is head of the treasury.

Bernard: Well prime minister, I’m afraid he is in even greater disadvantage understanding economics. He is an economist.

----------------

I never heard of a more accurate description of an economist.

[1] http://www.imdb.com/title/tt0086831/
Reasoning from first principles is ahistorical, and that is why it so rarely works in the real world. Political and social constructs inherited through time (like, say, the law) will butt heads against a "pure" new solution. You need the resources (and determination, will, etc) to overpower colossal systems we've arrived at through the progression of history.

If you're going to hit homeruns like Musk, I think you must "reinvent the wheel" like he does. But he has resources to fight those battles, and you -- probably -- don't. When he didn't have those significant resources, like when he started Paypal from first principles, he had an entire cultural shift as his economic lever: he was only able to compete in the online banking and credit card industry because it was an Internet wild west.

I'm not sure that reasoning from first principles is the right first step for someone with no assets now that the internet has legal and corporate oversight swimming through it. But what do I know :P
>> because it's not worth the cost.

> Neither are airbags in cars, yet the government stepped in and made them mandatory.

that's simply untrue.

http://www.riskworld.com/news/97q1/nw7aa029.htm

this testimony is from 1997, and even with mostly first generation airbags in play at that time it's still wrong.

They are even more effective at saving lives now, and many of the problems with passenger side airbags have now been alleviated.

saved lives = saved money (unless you're looking at cost-to-state of an entire life rather than cost-to-state for medical/funeral costs, but that's outside the scope of this)
Do elaborate on "no gain".
My first thought was "what do automated sharing of purchases have to do with animated GIFs?"
Yes.

So much so that I don't carry them, and it costs me money.

The wallet is: photo ID, transit card, and 1 or 2 ccs, depending on if I need my biz cc that day.

Wallets are a pain - though it must be said less so than, keys or phones. All of which dig into me an inopportune moments (usually going around corners on the bike) get dropped, or left on the counter... I'm probably just much to forgetful and clumsy for modern life, but all this /stuff/ is constantly annoying.
Google doesn't really care about the profits made on Android phones -- they just want more Android out there since it feeds usage of Google services (such as Maps, Mail, and Search)
Errr, did you read the part where fraud has dropped massively? And liability is more clear-cut and reasonable for pretty much all parties?

--edit-- and did you think us Europeans just rolled it out for shits and giggles?
Rap Genius Has Licensing Deal with Largest Music Publisher Sony ATV
Not really the same thing. This isn't a net neutrality situation. While anyone can copy public domain material, that doesn't mean that any given entity is obligated to bear the expense of keeping it around to be copied.

Publishers presumably have had copies of all public domain books since they've been printed. Does that mean the publisher should be compelled to print a copy and give it away to anyone who asks? Even if they send an automated request for one 1000 times a second?
that insane volatility should drop with increased adoption.
5 Quotes Explain It All: Why Pivotal One Is A Game Changer for the Cloud
Microsoft's next CEO
The 50KB limit on data (base64 encoded data) will be a gotcha you'll have to deal with similar to the size limit in DynamoDB. Now you'll have to split your messages so they fit inside the Kinesis records and then you'll have to reassemble them on the other end... Not fun :-)
What stops the person taking the payment from pushing the switch button accidentally or intentionally. Also I can totally see how people can steal your card, use the app to put it into their coin then place the card back so you don't know you've been robbed.
Means you are always in sight of your card because although merchants can force the transaction through, customers expect the pin entry ritual. Skimming becomes a lot more difficult and in most stores you don't even need your card to be near the cashier because the terminals are separate from the register.

This also stops the frequently problem mentioned about a waiter changing your card because you'd need to validate the purchase via pin on a POS terminal.

The downside is that you're vulnerable to shoulder surfing and people stealing your pin (at which point they really have the keys to the kingdom), but given that signature checks are rarely that stringent in the US I think it's a moot point.

Magstripes still work, but many stores in the UK have stopped accepting it as a payment method if the card fails.

I'm surprised to see no mention of NFC in this thing, that would work in Europe in plenty of stores.
> Disagree with what?

I disagree with the notion that RDS removes remarkably little of the pain of running a database instance.

Yes, there are projects where RDS is not a great solution, but it definitely simplifies a lot of stuff. The notion that it "only removes up-front setup pain" is silly. If you manage your databases correctly, up-front setup pain should be the vast majority of all your basic admin operations. The "at the cost of ongoing maintenance" part is a real head scratcher for me. RDS basically gives you everything you'd have with a DB on an AWS instance except a local login, which one tries to avoid using like the plague anyway.
Does deactivated mean erased?

From what I understand...there is some sort of memory chip on the card that stores the credit card numbers and info for every card, right?

So what is to stop some chip from bypassing the OS that manages the multiple cards and just reads the raw data?

Sure, it may be 128-bit encrypted, but if they have the raw dump - then it's just a matter of brute forcing it to eventually crack it...no?

What am I missing here?
This is great guys. It's surprising that you're able to get an 8x-20x speedup over email.parser with another pure python parser. (What does this say about email.parser, eh?)

Did you consider using a C extension and tools like lex or ragel for the rfc822 scanning phase? Not worth it?
When I was looking through a list of browser supported PFS TLS suites, I came across this one which is apparently supported across versions of IE that otherwise don't support PFS:

DHE-DSS-AES256-SHA

I know DHE is slow, but what really sticks out like a sore thumb is DSS. Is it known to be broken?
16 "essential" cards? And most/all are mag-stripe and could go on coin? I have a DL and a credit card. Everything else can be easily stored on my phone.
That's a great site!

The "like bar" works fine on your site, however, it still doesn't work for the suggested videos that come up after watching a video. Guess there's nothing that you can do about it though. Still a great site, thanks!
There might be an attribution error happening here, since Jerry Springer himself was previously most famous for acting badly, for paying a prostitute with a check while on the Cincinnati city council.
I go weeks at a time without getting asked for identification when paying with a credit card. Most merchants will happily swipe the coin and move on with their life. Those that question it can still check ID or make a copy of the driver's license. This is a sweet product and I can't wait to dump the 7 cards in my wallet. One extra backup card, a good thing to have regardless, will take care of the occasional merchant who won't accept coin.

btw, it sounds like you should have had a lawyer handling some of those chargebacks, particularly if you had captured the driver's license info. We started using a (cost conscious) lawyer to deal with every chargeback and our win rate went way up. And by "dealing with a chargeback" I mean forwarding along our response on his letterhead.
well I heard New Relic today saying they run their own production monitoring on their staging.dogfood it first...
Exactly. I feel like they would have been more successful going after things like rewards cards first and then after proving legitmacy and market need there, trying to take a stab at the credit card market.
Man, I love that book. I loved it so much, as a matter of fact, that I went and bought it from Amazon. Even though I haven't directly used a large amount of it (though the locally sensitive hashing stuff and the communicational complexity stuff is easily worth the price), it has definitely made me think about large datasets in a much more productive fashion.

My only complaint is with the awful, awful cover. No link, but if you've ever seen it, you'll know exactly what I mean.
It's hugely reduced fraud. Why wouldn't you want it?
Your own team of web designers for less than $5 at the UI Atelier
This is a limited time offer, check it out...
We used gerrit at amazon and my current employer and it seems to have plenty of enterprise features out-of-the-box.

https://code.google.com/p/gerrit/
Yea but most places require you to swipe the card or have it physically there.

Online they make you provide information that is not written on it. With this you could easily copy a card and buy anything later on that day.

This thing should be outlawed
Will be taken down by the SEC in 3, 2, 1...
When you come back, you will see exactly the same screen as when you disconnect it. Your process will continue running.
Have you considered a phone case that has a card holder?
Show them how awesome Tampermonkey can be - they will love that.
Very cool product. Im curious to see how the big guys (VISA, Mastercard) would respond to this.
http://getprotean.com was similarly hyped up last year, hopefully this one delivers.
I think a lot of that has been driven by the fact that your new phone is faster _and_ thinner. If it wasn't both, I have my doubts that people would always pick the thinner option. The large screen android options of recent years show that size isn't a trump for everyone.
Having to base64 encode data is also a bit awkward. They should be passing PutRecord parameters as HTTP headers (which they are already using for other properties) and let users pass raw data in the body.
In freemium models, some features are free. People should be able to use the app without submitting contact details. I did not state that all features had to be free. Enough features should be available that users can quickly understand premium account benefits. Deciding what features to make free vs. premium can be a difficult business decision.

Then, unlock premium features for registered (paying) accounts. (Trial periods require superfluous tracking code that offers little business value, if any.)

See: http://www.forbes.com/sites/brettnelson/2013/07/23/the-freem...
I think you are mistaken about card rules. To protect themselves against chargebacks the merchant needs to keep a copy of the signed credit card slip, not a physical imprint of the card. That's actually better than a physical imprint (which is impossible on many cards these days anyway) because a matching signature can prove who used the card, not just that the card was physically present.
That's why I spent a ton of money on bellroy wallet. I've got the slimmest wallet in the office!
Atually, I wouldn't be surprised if the currently existing rules would already bar merchants from taking such a card - technically, this is a cloned card that is not issued by a member of MC or VISA; and there are security rules/training for identifying cloned (blank) cards and refusing/detaining them as fraudulent.
The so-called reason by analogy is just gradient descent to approach local optima in optmization. The "by first principle" is just providing an approximate (ideally convex) model and solve it analytically for global optima. The problem is generally very hard (#P hard), both for formulating the problem and solving it. Global optimum of course in theory is better, but the quality of your objective function and constraints could easily offset this advantage. If you can come up with a simple linear programming problem for the battery example - that's great, but most likely you won't due to the prescence of competitor, market and policy constraint.
Ask HN: If a Hadoop cluster were free, what would you do?
"Jerk" is always defined in a social context, though. In some circles, calling Obama a communist is jerky, in others perfectly acceptable if not obligatory. What is implied in "jerky" YT comments is that the social circles come into contact with each other, but there is no objective "jerky" that comports with the artificial construct of "common sense."
If you have any suggestions for online courses or other self-learning resources for distributed systems, I would be much obliged. The Ullman book is already in my queue.
Why does my boss need to know I cloned the card? I'm saying, mistakes like these already happen without cards being cloned, it won't be introducing a new problem. You don't need to say anything to your boss more than, "Sorry, I used the wrong card."

Many Amex cards look very similar, for instance. I and others I know have accidentally handed the corporate amex over instead of the personal one. I've also had the case where, a company (in this particular case, a rental car company) had saved my corporate card, and automatically billed that when I went for a personal purchased.
It's claimants duty to provide reason for his assumptions.

I don't have the time to produce a formal proof right now, but ideas for directions:

1. It's a 'good' property to stop any 'bad' properties from existing (otherwise they're not really 'bad'). A godlike thing exists, and contains all good properties, thus nothing with 'bad' properties can exist. This is either a contradiction with reality if you take reasonable definitions for 'good' and 'bad', or proof that the 'good' and 'bad' in the proof are meaningless, should be replaced by 'X' and 'Y', and then neither of other assumptions is valid (could be X(essential) as well as Y(essential))

2. A property that is very good might force a property that is slightly bad on its own, and still be good in total. I'd guess this can't be formalized, since good and bad are so fuzzy in the entire proof.
Go-lang's decentralized library system
I do this a lot in math class, actually. The professor goes "so X leads to Y, right? RIGHT?" and I just nod and say yes or otherwise he won't get on to the next thing. I'll understand it better when I can read it in the book.
These hold 12 max but they do offer rfid protection and i guess you could get 2 (1 business, 1 personal?)

http://www.secrid.nl/en/index.html
Machine learning branches out
In that situation the universe is not following a defined set of rules, it is following an arbitrary set of rules. Even during the initial playback period.
The Kinesis consumer API is somewhat equivalent to the Simple Consumer API in Kafka. You'll have to manage the consumed sequence number yourself. There's no higher level consumer API to keep track of the consumed sequence numbers.
Similar to beego and webgo. Differentiator?
in their FAQ it says that the coin can only hold 8 cards at a time, but the app can store an unlimited amount. So I assume that you'd have to sync the one(s) you want to use via mobile app (I'd hope) that you'd already have stored, then select it via toggle button on the card. It makes it sound kind of cumbersome for that purpose. I do like the overall idea though, I think its really cool and hope they succeed!
Are You Using Correct Color Codes? Probably Not — And Here's Why.
> Really? I'm very surprised. Canada has moved over many years ago. I thought we'd be following the US here.

The US banking system is incredibly antiquated compared to Canada's (and much of the rest of the world's).
I was at the talk. It was great. Good job!
"Coin does not support EMV" is an interesting statement - I can't see how they could ever support EMV without explicit cooperation from every issuing bank, which they won't have.
Psyched! See our HN post about our Dart app (Dart rocks) and our team's disappointment with not being included in the 1.0 announcement. https://news.ycombinator.com/item?id=6735044
The world's first Jolla phone will be sold on Nov 27 in Helsinki
SourceForge Suspends DevShare Program (3 Members), Looking for Feedback
Learn Dart By Creating A Pirate Name Generator
You honestly can't think of good engineering reasons not to push new code directly into production?
Here's my list:

* Costco membership card

* three loyalty shopper cards for my common stores (I need the physical card because none of the apps I've tried using that scan the bar codes work with store scanners)

* a card to pay for my train rides,

* bank debit card for ATMS

* business credit card

* personal credit card

* medical insurance card (this one would be easy to just use a photo of)

* AAA card (would be easy to use photo of)

* Zip Car Card

* Bus pass card for corporate shuttle

* Airlines MVP card (likely easy to just use a photo of, I think....though I'm not sure about speedy checkin).

* Access card for corporate office.

* Drivers license

I have about 25 other cards that I keep at home, like Library, more shopper perks cards (usually because they can lookup by my email address in store), etc..

This doesn't really help my wallet situation that much.
I'll answer this with the plot for the movie 3:10 to Yuma.

Rain falls down from the sky. It goes through a river. The river passes through Glen Hollander's land before it ends up in your backyard. Glen realizes this, and puts up a dam to prevent the water from reaching you, unless you pay a monthly fee.

You may not like it, but the internet is the rain, and it's flowing through Comcast's land before it gets to your back yard. You can always try to find a different landowner to sell you water if you don't like it, but ain't no "argument" that's gonna change where the rain falls. (Unless you start your own ILEC and dig your own fiber)
I am in two minds - eight years ago and more we were all desperate for a good mail handling library. Now, I hardly seem to have a use for automated mailings that is not handled by Mailchimp (sorry!) or I just want to fire off HTTP calls to some API to mail custom mailings for me (which is I think what you guys do)

In short email is probably more important to my business (even with my paltry list numbers) but I no longer run a mail server, anywhere, I do not even have a local mail client unless you count JavaScript.

I'm wondering if I am trading off vulnerability for ease at the wrong places.

... hmmm a little unfocused I am afraid but I really have not made any explicit strategic decisions over email but even so, my whole mail handling has altered.

I just am surprised I have not noticed how big a step it has been.
If it works, it's clever. But I am definitely not flattered and wouldn't be personally happy about knowing someone did it. The 45 minutes I spent interviewing you and the more than an hour I spend carefully writing up my interview feedback is totally wasted. Well, that sucks for me.
Note that Evil Governments can much more easily flick the switch to cars than maintain roadblocks.

Take a look at Syria, or Egypt. Egypt actually did shut down the internet[1] during unrest. The Syrian government has tried to suppress an uprising, but has not been successful in doing so. It take a lot more resources to actually hold and maintain an effective roadblock than it does to just flick a switch. Imagine how much easier it would have been for them if they could just flick the switch and shut down all of the rebel's cars.

This is not some abstract hypothetical point, there are actually cases out there today with oppressive governments who would have incentive to use this technology nefariously.

But beyond that, there are more mundane concerns as well. After the subprime loan crisis, dealers started including remote disablers in cars, so they could remotely repo cars if the owners defaulted. However, a disgruntled former employee has used those disablers to disable hundreds of cars that had them[2].

[1]: http://www.renesys.com/2011/01/egypt-leaves-the-internet/

[2]: http://www.wired.com/threatlevel/2010/03/hacker-bricks-cars/
No big threat to the spread of chargeback-free bitcoin... Got it
Isn't it reasonable to refer to it as a zero day since it is unknowable whether this exploit is being used in the wild?
Nice presentation, thanks for sharing!

Favorite quote: "your product should be cutting edge, not your tech"
For even more detail I like OWASP's cheat sheet https://www.owasp.org/index.php/Transport_Layer_Protection_C...
Secret treaty leaks, Mexico wants copyright extended even more than US does
Yeah, but if you notice the "Related" tab on the left of videos has the same results as the related videos that load after a video ends, with the like bar included.

You're right, unfortunately I can't override the contents of what's inside the player itself.
Theoretically, you can put a large number of payment applications on a single EMV chip already, and a transaction will either use defaults or present you with a choice.

Unfortunately cross-bank and cross-scheme cooperation has never been there to the extent that this has been possible so far.