skysight-inc/HackerNews huggingface dataset:
reminds me of the old sony rootkit cd stuff.

But i think a lot of these companies know that it would be legally hairy to get into vigilante DRM justice, so instead they just surreptitiously collect data that will let them plot their next move. maybe that's paranoid, but comeon in this day & age everything is logged. Even if they are serving 404s, it's trivial to log that data anyway (as was pointed out) or maybe it goes straight to server logs and someone in LG analytics says in the future "well, that data is there somewhere... we may as well use it"

it's hard for me to imagine someone at a corporation standing up and going "NO! that's violating our users' privacy". they pretty much consider any info they can get to hit their servers to be their property no questions asked
1) The drive was very likely encrypted. The FBI deliberately waited until he was using the laptop in a public location, and tackled him so they could explore the drive while it was still logged in. As to why he wrote everything down in a diary, or didn't plan for that eventuality...seems to be a combination of hubris, inexperience, and naivety.

2) Yes. They can be authenticated by the officers who took them. The officers merely state that they tackled Ross in the library, and that they personally photographed what was on the screen, and that the image you see is said photograph. You are of course correct that they could be fabricated, but that's up to his defense attorney to argue, and for a jury to believe is enough to constitute "reasonable doubt" in their collective minds.

3) Again, evidence does not have to be perfect. Everything you argue applies to any kind of evidence. What's to say the witnesses testimony wasn't coerced? The letter forged? The rules of evidence come into play here, as well as the jury's role in deciding what to believe. That said, it's certainly an interesting issue, and it would be great if there were stronger chain-of-custody and verification rules for digital evidence collected from a seized hard-drive, for example.
Decent options. Amarok, Rhythmbox, Clementine.
I'm happy with Clementine.
I hope I get a way to turn this off easily

1. Don't turn it on

2. ???

3. Profit
Ha. That made me laugh. The point is if you make someone look extremely evil, more "normal" people are less likely to show any support or sympathy towards them, right? Some who might have been neutral about a black market where you can buy drugs (that the government deems illegal) who would have supported the person who owned/managed it, whereas now I imagine they'd be less likely speak up.
Except that ActiveX works only on Windows IE and not built on web tech. Chrome Apps run on ChromeOS, Windows, OSX, Linux, Android and IOS. And they are built using HTML and JS.
Why do rich white men develop condoms for Africa? So that there will be fewer black people. He's just like his father, http://www.youtube.com/watch?v=EZ6mjx4J7dM
Federal Election Commission deadlocks in proposal to allow bitcoin donations
i ALWAYS knew he was a pimp.
Right, but that's like arguing the government clearly controls the weather, because of how convenient it would be for them if they could.

You're just saying, "Well I could see them setting him up" and hoping that counts as evidence.
>What's wrong with the Chrome browser becoming an OS? What you get is a fast and secure OS.

Citation very much needed.

Fast? It's slower than native, and --for some tasks, like any kind involving multimedia editing-- useless.

Secure? When did OS+browser became more secure than just OS?
‘They furiously and passionately wave their hands, but as you and your team stream back to your desks, you wonder “How does all the hand-waving apply to me? It sounded great, but, well, so what?”’

Worth mentioning is that it's possible to understand exactly how all the hand-waving applies to you and your team even if you're not a Lead or Lead of Leads. That may be a sign you're qualified to be one of those (whether you want to be is a different matter).

As such, the only thing I'd say is that the roles stated here are the things you expect from those people, but they aren't exclusive. It's possible for a “mere” engineer to have some strategic understanding of the playing field, but not want to take a lead role. It means their picture probably won't be as complete, but that additional understanding will probably help them do their job better—and possibly help them to help their lead do their job better in turn.
These apps don't run on Chrome the browser. They run on the Chrome runtime, and open outside the browser. So, if they're extinguishing non-Chrome browsers, they're extinguishing Chrome browser too - which is obviously not the case.
So you're saying the Fed prints dollars by the millions during booms and destroys them again by the millions during busts?

Who cares if prices stay stable or not? The value represented by whatever price is attached to those things won't change
Idiomatic JavaScript code uses both PascalCase and camelCase.

Constructors use PascalCase; variables and methods use camelCase.

So, it's OK to call it JavaScript! :-)
It's not about trusting what they did, it's about being able to forecast and budget for what you might like them to do in the future. If it was "services, 20 hours" you have no idea what part of a project/task/matter might have been a cost-effective use of your budget.
>That’s a funny definition of cross-platform. You mean, it’s cross-platform if you use Google’s browser.

Cross platform just means they run in different platforms. Nothing in the notion depends on if they do so with native code or with some supporting layer (like the JVM, WxWidgets or Chrome).

>Why should I support ChromeOS? ChromeOS is not the web!

Why should you support ANYTHING for that matter? Including the web. If you want to do so, do it. If not, don't. You don't "have to".
Yep you've basically refuted the idea of personal security due to a vague insinuation of how "most people" trust their electronics. Or did you have anything constructive to add?
For starters, if you aren't quite used to the the workflow of contributing to an open source project, you could start helping out by submitting some good reads to pycrumbs (https://github.com/kirang89/pycrumbs).
But surely those people are perfectly well aware that such a black market is deemed illegal and that they can still be arrested for selling, buying and using.

He's not being made to look any more evil than anyone else accused of attempted murder and running a criminal syndicate.
If everything Jeremy Lim is saying is true, it's encouraging to see the dreaded DMCA being used to fight against actual IP violations of "the little guy," as well as companies going above and beyond to help him out. Kudos Jeremy - nice artistic work, and working with the system to recover your work.
I don't think Chrome Apps work on iOS or Android. If they do, mind linking to confirmation?
Dear companies supporting this project, I've got a better idea: pledge a fraction of your profits with a charity of your choice instead of conditioning your philanthropy on some arbitrary metric.
Override templates from third party cookbooks on chef
Can you clarify what part of my comment this is in response to? I'm having difficulty understanding why you chose to post it in reply to my comment.
>Nope, they're Google's way of extinguishing non-Chrome browsers. Only Chrome/Chromium will be supported. That's called vendor lock-in - regardless of being open source.

In order for it to be "vendor lock-in", people should care about those apps in the first place. Which they don't, much. In fact, they are quite niche.

So, yes, they'll might lock a 0.1% of people with that.

Now, if they did the same for Search, Mail or YT I'd be worried.

(Hint: even after all those years, Google Docs, a flagship has an insignificant user base -- and that one is not even Chrome-locked).
Want to Build the Future of Shipping?
Some say you can value a service by what happens when it's down. Do businesses stop? Do people just move on to other forms of advertising?

When EasyPost is down, warehouses and fulfillment centers grind to a halt. That's because we're solving a really big problem and building a really big business doing so.

If that's exciting to you, we'd love to hear from you. Apply on our jobs page https://easypost.com/jobs. If there's not a role that fits, apply under any of them and indicate what you'd like to build here.
>I will be fair and the answer is no, but at least for the last 2-3 years we have a little stable environment. If it's ruby app we know it's rail, if it's Python we know it's either Django or Flask (or Pyramid). When we think about client side we think of jQuery and pure Javascript.

If you think that, then you're misguided.
Does Python Scale?
> Reimplementing it wouldn't make much sense and so would complaining about the lack of implementations.

I do not think that Chromium represents the best possible implementation of the Web stack. Having multiple implementations of HTML and the various related specs is what has pushed them forward so rapidly.
Actually, it states this: "The boundaries between major and independent labels, and the definitions of each, differ from commentator to commentator" in the link.
The problem with this is the basic structure of the notification system. The standard would be the push system itself (rather than a browser standard).
New Ruby Homepage
If this is some sort of misguided attempt to liken this situation to end consumers pirating music, I'm afraid you're way off base (and on quite a high horse).

If it isn't please explain because I'm not understanding your point.
Now The Whole World Is An Airport: Surveillance And Social Control
If you think you want to do this in the future, then get your corporate D-U-N-S number and corporate Apple developer account. Things can go wrong in this process, there are horror stories of it taking many weeks.
Very interesting.

> If you rely on CAPTCHA's as CSRF protection, make it consistent.

This was discussed at today AppSecUSA [1] that it is rarely ever seen anyone use CAPTCHA as CSRF protection.

[1]: http://appsecusa2013.sched.org/event/10d6389173e14b246720d83...
Nice write up. While checking to see if Google's "Hall of Fame" [1] was updated yet, I noticed that their reward program is actually really active. Here are some stats compiled about the Reward Recipients and Honorable Mention pages, based off these numbers, they are dolling out a cash reward roughly every 1.8 days!

2013
197 Reward Recipients [1]
168 Honorable Mention [2]

2012
191 Reward Recipients [1]
147 Honorable Mention [2]

2011
121 Reward Recipients [1]
68 Honorable Mention [2]

[0] http://www.google.com/about/appsecurity/hall-of-fame/

[1] http://www.google.com/about/appsecurity/hall-of-fame/reward/

[2] http://www.google.com/about/appsecurity/hall-of-fame/distinc...
Better a crowd sourced classification algorithm for good an bad traffic? Built-in anomaly detection?

Challenging...
This is truly a good step forward. I am not sure why it's called Safari Push Notification. As per their docs, it is primarily an OS function. So technically it should be possible to do this using Chrome on Mac as well. However, it is possible they bundle it with Safari. Then they can have push notifications in Windows as well.
This person who is holding forth on the deficiencies of $language debugging uses 'print' as the favored debugging tool. IN PRODUCTION. That's completely disqualifying
Reminded me of Da Vinci's Notebook and their masterpiece "Title of the Song": http://www.youtube.com/watch?v=734wnHnnNR4
"The reason that this hasn't been done, I suspect, is that the intersection of users for whom WYSIWYG is important and for whom having Emacs-ish features is important is virtually nil."

We know from inspection the value is at least 1.0 (RMS).
But it's interesting that Limm didn't seem upset about people sharing his work. What hurt him was that somebody else had claimed authorship, and somebody else was receiving the royalties.
One way out is to have lots of small agreements, one after the other. Then it doesn't matter what the small agreements say in detail, just that the relationship will only go on, if both parties are satisfied.
And now that they have released a community edition -- open source (Apache Licensed) -- copy of PyCharm, I cannot imagine any sane person continuing to use a "dumb" editor.

All of the JetBrains products are super smart and efficient, and the community editions are no exception.
visualnode was a fork of http://pytools.codeplex.com and they've joined the NTVS project (which is also forked from the same source). Bart Read from red-gate did the npm GUI for NTVS in fact. they stated that they'll shut down visualnode.
Steal my music? I can accept that and can even appreciate the exposure. Steal my music with someone else’s name on it? Oh, man. I wanted to hurl.

Sarcasm aside, this is a wide miss when it comes to this guy. There's a huge difference between a fan that wants to hear your tracks for free (which they can all do right on the artist's website and youtube channel) and a predator who searches for that perfect nexus of mildly popular up-and-comer who lacks the legal muscle to fight back in order to exploit both artist and fan alike.
Type II here, my endo-doc has me eat a certain amount of carbs at every meal. She prefers that I eat carbs that take longer to process, like fruits and vegetables. I just finished half a baked apple.

https://en.wikipedia.org/wiki/Diabetic_diet#Carbohydrates

http://www.diabetes.org/food-and-fitness/food/planning-meals...

That is not a "nowhere near carbs" diet.
monopolies aren't illegal.
It's about 250ms from India
Not a networking guy here, and this is nowhere near all you're asking for, but here's a classic GUI-controlled router setup which allowed me to totally block my son's internet access when needed. Sounds like your TV needs that too:

* Router was a Linksys WRT54GL [1] re-flashed with Tomato [2] firmware

IIRC it took two steps to stabilize things:

* One of the menu options [sorry, don't recall which one] allows watching the MAC and IP addresses of connected devices in real time as they come and go. You can somehow assign names to devices in this list to help sort them out. Unhook or power off off everything else or use the OUI lookup or somehow otherwise identify the TV. Click on 'static' so as to force Tomato's DHCP service to make the current IP address fixed for the TV's MAC.

* Now that the TV has a static IP on your LAN, you can use Tomato's 'Access Restriction' on that IP to disallow all outside access. Works as well for restricting one's kids' access to reasonable time ranges -- and cutting them off when necessary ;).

--------

[1] http://www.newegg.com/Product/Product.aspx?Item=N82E16833124...

[2] http://www.polarcloud.com/tomato
It's on the page Lisp Articles:
http://paulgraham.com/lispart.html

which is linked to from the page Lisp Links:
http://paulgraham.com/lisplinks.html

which is linked to from the top level page Lisp
http://paulgraham.com/lisp.html
I am tired of creating accounts everywhere online - especially for shopping.
The only real surprise is that Salesforce wasn't better able to obscure it. Still, they weren't giving out a million dollars for a days work.
APIs now bigger than SOA
It's not even very good sarcasm in this case, since the author openly says in the article that he didn't really mind and appreciated the exposure that came from his music being pirated, except for this case, in which it was being attributed to someone else (depriving him of said exposure).
A quick search on Google Play still lists the track mentioned: http://i.imgur.com/IUe6qwE.png
After reading the article, I don't think a great director is someone who makes the minions think "so what?", and if they do they generally either are:

1. Not looking to their leads for guidance on this crazy inspired person.
2. Completely right and the guy is full of shit.

Worst case for a good director is people say something like "Wow, I am inspired, but I don't understand HOW to accomplish that lofty goal." and that is where the leads come in.
I'm not really surprised. Salesforce held contest a few years ago for some of their Apps and based it completely on Facebook Likes of YouTube video presentations.

Some teams were definitely felt favored. Some were let in well past the entry due-date (giving them more time to submit better presentations). Other products were bogus and nothing more than photoshop mocks. And some companies cheated and purchased thousands of likes over night (they were caught and disqualified).

It was a serious mess. The funniest part was seeing how the companies all had thousands of likes while the actual views of the videos were barely in the hundreds.
Puppet at work, mostly; I've spent the past five years working with both puppet and chef for various clients and jobs. Working on trying out ansible for my own private host, setting up.

Puppet isn't that heavy - I use the agent to bootstrap my laptops, e.g. on ubuntu, apt-get install puppet, create a file with this contents named laptop.pp and then run 'puppet apply laptop.pp':

$tools = [ 'aptitude', 'at', 'elinks', 'mtp-tools', 'mtpfs', 'libxml-devel', 'puppet-lint', 'msmtp','rxvt-unicode', 'python-dev', 'python-pip', 'xclip', 'xsel', 'vagrant', 'virtualbox', 'unrar', 'p7zip-full', 'netcat', 'socat', 'zsh', 'screen', 'strace', 'sudo', 'tmux', 'scapy', 'ruby1.9.1-dev','rubygems', 'git', 'git-annex']
package { $tools: ensure => 'installed' }

$window_manager = [ 'xmonad', 'ttf-inconsolata', 'dmenu','dzen2',
'libghc-xmonad-contrib-dev','libghc-xmonad-dev', 'xmobar']

package { $window_manager: ensure => 'installed' }

$audio_video = [ 'vlc', 'moc']
package { $audio_video: ensure => 'installed' }

$games = [ 'mame', 'mame-tools', 'gnome-video-arcade', 'sdlmame', 'sdlmame-tools', 'mednafen']
package { $games: ensure => 'installed' }

$productivity = [ 'mutt-patched', 'rtorrent', 'irssi', 'bitlbee']
package { $productivity: ensure => 'installed' }

$python_pip = [ 'zipline', 'blueprint', 'ansible', 'salt', 'grc']
package { $python_pip: ensure => 'installed', provider=> pip}

$gem = [ 'jekyll', 'knife-ec2', 'chef', 'rake']
package { $gem: ensure => 'installed', provider=> gem}

file { '/home/username/.xmonad/':
ensure=>'directory'
}

file{ '/home/username/.xmonad/xmonad.hs':
ensure=> 'present',
source=> '/home/username/bootstrap/templates/xmonad.hs',
owner=> 'username'
}

file { '/home/username/.xmobarrc':
ensure=> 'present',
source=> '/home/username/bootstrap/templates/xmobar-rc',
owner=> 'username'
}

exec { '/usr/bin/xmonad --recompile':
subscribe=> File['/home/username/.xmonad/xmonad.hs'],
refreshonly=> true
}
What is Twitter co-founder Biz Stone’s venture Jelly.co all about?
I wasn't aware of BLISS: http://en.wikipedia.org/wiki/BLISS

It does seem to have some interesting features for a systems level language--for example, expressions over statements and references over pointers.
Tribologist here, about to publish a study of reciprocating friction and wear in graphene-loaded plastic composites. We see two orders of magnitude wear reductions at 30,000 cycles for 10% graphene by mass (dry reciprocating conditions) and suppression of the abrasive wear mode. Also friction coefficient goes down by 10%, but other studies have reported much bigger friction coefficient improvements.
Specifically in response to number 3: I contend that it is easier to coerce a machine than a witness, that forged bits can be perfectly identical whereas forged letters might not.

Machines need to be held to different standards for different reasons. If we lend them a greater veracity than is appropriate, how unforgiving might such an error be?

We live in a world of statecraft through malware with Stuxnet, Flame and Duqu. We live in a world where international telecommunications companies enable global eavesdropping and interception at the carrier-grade level.

You cannot discount the idea that his entire machine might have been compromised all the way down to the firmware, to elicit highly specific programmable responses choreographed in real time. That much is is honestly unlikely, and unrealistic, but in theory, the possibility is there.

Consider that he may have been a useful idiot. A patsy. That he was framed, does the physical evidence and circumstantial evidence seal off that path of doubt? How advanced could the Silk Road's administrators actually be? Could they have crafted such malware, to root kit his laptop and lead investigators to a fall guy, and then temporarily close up shop if he goes down?

I don't think that's what happened, but when a laptop is a key piece of evidence that a case may hinge on, The first thing I think of is how much control I honestly have over my own laptop.

Fabricating bits is not the same as fabricating other evidence. Machines are different.

As for your points #1 and #2, yeah, I'll agree that those are valid points and that sounds pretty damning, and I'll give it up on those.
Used to be Ford and Chevy drivers bashed each other.

Now it's software.

Same thing, different decade.
Google Chromecast announces hackathon
in-co-rrect
Dezzmo.com participated in the hackathon. Mostly for the $200 heroku credits, networking, fun and because we were able to get free tickets. That being said we never intended to submit the application due to violation of the rules. If we knew what the result would've been, hell, we should've submitted.

Clearly not every submission was even opened according to #dfnolaunch on twitter.
That's why Intel's future chips that will allow encrypted connections to Intel's servers and be updated whenever Intel wants them to, without the user seeing anything, worry me, too.

http://www.popularresistance.org/new-intel-based-pcs-permane...

http://semiaccurate.com/2012/05/15/intel-small-business-adva...
Heap Overflow in Floating Point Parsing (CVE-2013-4164)
I'd set a conditional breakpoint:

(gdb)> break <some-location>
Breakpoint 1 at ....
(gdb)> cond 1 x < 42
(gdb)> cont

And now, it will execute until 'x < 42' is true. If the bug is that you always expect 'x > 42', then it triggers.

Although, to be honest, I mostly use a debugger as an exploratory printf these days:

(gdb)> call pretty_print(my_data)

I do mainly use printf as the front line of debugging, though, with several debug switches on the command line. I follow up by jumping to a debugger once I have an idea of where things are going wrong, and I can poke around at the state.

I also need to look into backwards stepping. GDB can trace executions of the program, and when you see the issue pop up, you can step backwards in time to see what caused it.