skysight-inc/HackerNews huggingface dataset:
Exactly, it's just a URL.

Why not sell it? People sell URLs all the time, and bitbucket is clear written intent from the company that they wanted their source control systems accessible to the public else they would not have provided written notice to the world of their passwords.

Surely the creators of the software are competent software experts who fully understood the implications of making their repository public. Surely, they are not asserting that they were so negligent in the performance of their duties as to not check whether the repository would be made public.

Also, they've made numerous written affirmations that the issue found is not a bug, and would not qualify as part of their bug bounty for security flaws.

They are morons and deserve to be hacked because they are negligent and make affirmations that leaving their source control system passwords on public computers is not a security issue worthy of payment. They deem the risk to be so insignificant as to not even be worth $500.
"What if this guy "helped" us get funded by the skin of our teeth only to skip out on the bill? We'd still be short a few grand, have to deliver the project to the paying backers and be liable for Kickstarter and Amazon fees."

Wait, I don't get it. If the guy pulls out last minute, the project still won't be funded, no? So there would be no obligation to deliver anything. Am I missing something?
Right, variance was part of the original MSR proposal for CLR Generics.

How did delegates use variance? I've never been terribly clear on the whole delegates concept - they're like first class functions, except nominally typed and weird.
Something similar that didn't make it (shut down in May 2013): http://quant.ly/
Don't get me wrong, Eclipse had a lot of powerful features but never felt as polished as ReSharper does in Visual Studio.
I was really hoping for some viagra jokes.
"Neo-Reactionaries" drop all pretense: End democracy and bring back lords
My roommate, who will change the world
What I did (before I got someone to pay for it for me :D) was buy an iPod touch on craigslist. Got it for like $80. It was a big stretch, financially, at the time, but the hours upon hours it saved was well worth it. You can also sometimes pick up iPhones with bad esns/cracked screens for a lower than normal cost.

'Course all of that assumes you would need more than 2 months worth of debugging on browserstack.

Good luck, either way
So when even one day old babies are shown to pay different attention to mechanical things vs faces between boys and girls, that's just evo psych non-sense too? Or the fact that the countries with the most gender equality in society show less preference in men or women to break with gender stereotypes in their jobs?
Just use Flash.
"10% of the gain will be donated to the muslim brotherhood foundation."

Am I they only one alarmed by this?
Did they really try to put him out of work? I could not read any such thing in the vendor's emails. Perhaps the vendor just wanted to complain to the researcher's manager so he might receive additional training or so protocols could be set up for handling such issues?
The project can be funded but if he used a wrong cc # or expired the funds won't transfer, even though the project was 'funded.'

I don't think he would be liable for KS and Amazon fees for that as they are paid instantly when the transfer happens.
Here's the thing. CPAN is pretty damn comprehensive. The problem is rarely not having a solution for your problem, but finding which of the few solutions best fits your need, is well maintained, etc.

According to this, CPAN has ~30,000 modules with aout 3/day being added, rubygems has more than twice as many modules at ~67,000 with an additional 43/day, and npm has ~50,000, but is gaining 111 modules a day.

What is being added? Is it just the thousandth personal version of someone's lightbox implementation that they feel the world needs to see? I sure hope not, because that doesn't bode well for those repositories, IMHO.

Edit: I guess lightbox doesn't make sense with node, or at least is less likely than some other possibilities.
What happened to npm in August?

http://i.imgur.com/dUr1B9t.png
It doesn't matter, as long as it still gets delivered to a spam folder, you can still retrieve the message.
I think you bring up an excellent point. With traffic, content certainly tends to deteriorate, or at least change. Like you've noted, most things are their best at the beginning. This being said, how do you try and stay on the cutting edge of the best sites in their early stages?

I'm honestly too young to have an experience with this myself, and don't expect finding out the best new sites to be easy or quick, but what tips from your experience can you offer?
For those interested in this area, I find The Whole Street's "Quant Mashup" reasonable. It aggregates blog posts from a broad group of quant oriented blogs:

http://www.thewholestreet.com/

For a more academic bent, Quantivity on Twitter provides curated academic quant research:

https://twitter.com/quantivity
> You can't claim that the Euro isn't a financial instrument just because you don't live in Europe.

Indeed, I can't claim that. Nor am I. It definitely is!

> This makes the Euro a traditional currency which bitcoin isn't. That's not to say bitcoin is worthless, since its value is really whatever someone is willing to pay for it.

I don't think we disagree. :)
Assuming I am willing to fork over a lot more money and use much less powerful hardware running a glorified phone OS, all for the sake of having a smaller computer.
This article is from 2010. It is relevant today as well, albeit differently.
Yeah, I need to work on my tone, because that came across exactly the opposite of how I intended.
No, I'm not going to agree. From Shubham's post it looks like they were already planning to expand the scope of their program in response to his findings. This is from their email to him on Nov. 4, a full month before his blog post:

First of all, we're still very thankful for pointing this issue out. The credentials you found were real threat. I
agree when you write it was easy to exploit.

[...]

When we created the terms and conditions, we tried hard to add every web app which we have impact on, and where a reported issue is a value for us. At that time we weren't thinking of leaked password or such. In the past we turned down the bounty request of people finding issues in out-of-scope services. We had a lot internal discussions about your request: if we were about to pay, we couldn't justify our out-of-scope decisions for anyone else.

It seems reasonable from that email to assume they were discussing this incident seriously and thinking about how this would affect future bug bounties. I am willing to give them the benefit of the doubt unless you have a strong reason otherwise. When the matter was private between them and Shubham they issued a private apology and explanation. Now that Shubham has made the issue public they have issued a public apology and explanation. This is an appropriate response, not just a PR move.
So it's like HN with more bitcoin?
A bit better. Yeah, that stage was working pretty hard on something. Hard to say but it may have been turning around, like the F9R would for its first retro burn. Some extra practice wouldn't hurt.
This Is What the Infinite Monkey Theorem Looks Like
At the expense of a few rep points, this site is going to fail not because it isn't a good idea, but because finance people are just so frequently miserable human beings.
It seems reasonable to assume that they will pay him:

To improve the program from now on we will reward bug hunters who find bugs outside of the scope provided [...] We will also retroactively check to see if other reports found issues that fall into this category.
Physics of the Amazon Octocopter Drone
Google Compute Engine Opens to General Public
Yes, I've seen people do that before. You can't do that with Bitcoins and crowdfunding. This platform does it now http://www.bitcoinstarter.com .
You can't back out in the last 24 hours if it takes a project under funding. Trust me, this isn't new and it's been debated in circles outside HN for a long while (I could list dozens of kicktrolled campaigns). The consensus is one of the reason Kickstarter is winning the crowdfunding game is it is possible to back out -- if they change that, they change the game. This gives consumers more freedom. But I think extra large amounts need new rules -- or just forbid them (as painful as that is).
Indiegogo has surmounted those obstacles and charges a pledge when it is made then refund slater if the campaign doesn't succeed. That might be a competitive advantage going forward.
> Google knows that future of mobile apps are web

Sure except Google is also pushing for it's own web techs, native-client and dart VM. Dont be too quick saying "the web won" when different vendors have different vision of what the "web" is.

A last thing, chrome apps API is not standard.
> The only thing missing is a way to edit the JS and see the result.

If you look on at the right edge of the grey-ish tab bar, you will see an "edit" link. This opens up a link to CodePen which lets you fork the snippet and mark changes to it. Here is one such link: http://codepen.io/kangax/pen/wDuxl
SciDB: Efﬁcient Versioning for Scientiﬁc Array Databases
Eh, I believe that was his point. If you're going to go to the trouble of building a safe memcpy with no sharp corners, don't leave the overlapping buffer razor blade sticking out. Perhaps you should settle down.
Grad school for math can be a bit scary. If you've been out of math for that long, you'll need to do some review. All of the people I know in my graduate program are experts at at a large swathe of undergraduate topics: calculus, differential equations, linear algebra, combinatorics, probability, etc. And of course, they know even more about the topics they really like. If you have the chops to do it, though, math only gets more interesting from there: Real Analysis, Topology, Modern Algebra, Galois Theory, Knot Theory, Convex Geometry...
The irony is that Kickstarter's design ensures you won't lose any money backing a loser. In theory, backing a loser should be a risk-free proposition, but folks clearly don't see it that way.
Truthful warnings to people who are in danger is not tortious interference.
It definitely is. I was bookmarking them once. There's even a snarkier version -- a kicktroll bids at the final second to $1 of funding a failing project. Yes, there is a project that got $49,999 of a $50,000 goal, with a very large troll donation in the last seconds. The owner of Kicktraq (who might read these boards), has a good knowledge of it. He seems to be some kind of savant, and can remember so many campaigns.
Thanks for your reply, the index of finite size is the part where I was confused.
I have actually done some googling about this before, and never caught it, because I wasn't exactly sure where I was uneasy. This has bothered me for a while, but reading that post in HN prompted me to think about it more, and I started writing my thoughts in a communicable manner in order to organize my own thinking. I figured publishing it and submitting it to HN would be a very effective way to get immediate feedback. In HN if you are wrong people will gladly let you know quickly. Also putting it in HN helps prompt people to post and argue about it and other ideas that are related, so it's an interesting and fun discussion.
As someone who's spent most of their career in professional finance, my strong advice would be to avoid the proliferation of "contributor" sourced sites.

These sites typically allow anyone to write financial articles, trading recommendations etc. and get paid for page views. There is little to no verification of the content, let alone diligence on the credibility of the authors, and the quality of the discussion is extremely poor.

Unfortunately, given the volume of content they can produce through crowd sourcing, they are also extremely popular. Examples include Forbes, Seeking Alpha, The Motley Fool.

EDIT: Assuming your question was in relation to financial news.
That was super cool to use, and I totally create a digital version of my signature on my iPhone that I'm going to use! Awesome!
Ah yes of course that makes sense. Can you tell I'm a total newb :) Thanks.
and I don't bother to use such sites. I think I can pass up this content.
Glad that problem is solved. -_-
There are couple of HNs for other industries as well, I remember... can anyone list them??
No code, no downloads.

Nothing to see here, just silly bandwagonning.
Nothing new, Thought would be good to Share with hn.
> due in part to the fact that my chosen career, systems admin, doesn't really have a university career path leading to it

I need to put a plug in for my alma mater:
http://www.rit.edu/programs/networking-and-systems-administr...
being 100% correct and legally in the right is no defense against years of lawsuits
That code is just as easily converted to use snprintf, and then you don't need to worry about the . Or -1.
Well, this can actually have a pretty significant effect on the feel of the game so depending on what kind of game you were prototyping, it might be worth it (though, your better off hardcoding a few cases of SAT than trying to get it working completely generally in a prototype).
Wow, somehow I completely missed that. Thanks for pointing it out.
David Lowery is on a crusade for copyright, fairness and art
I guess by legit I don't even mean weather or not it's a legit Mac, I really am just wondering if that's a legit score in general. Because it's single core score is 7 times faster than the next fastest score.

I am guessing that there is a way to fake geek bench results, because that does not look right. That CPU is supposed to have 3.4Ghz clock speed, but it's listed as having 1.3Ghz.
The older generation literally creates the younger generation.
That is an option that can be changed, there have been indiegogo projects such as the ubuntu phone, that would only have charged if funding had been successful.
Google Puts Money on Robots, Using the Man Behind Android
If the law doesn't matter, then don't bring it up. Under your logic, you can replace "tortious interference" with "turnip testicles" and this discussion is equally meaningful.
I don't know if "surmounted" is the right word. Kickstarter has made deliberate choices to operate this way. Kickstarter favors the backers, not the campaign. They surely know well how the system operates, and it's not an obstacle per se, but a rule of their game.
...but that's how the free market works.

It genuinely baffles me that people might think of something's being socially worthless, but commercially valuable as a feature.
Yeah this is the way I'll end up going. Less than a $100 is a small investment to make sure my sites show well on such a large segment of devices.
My technique for snowflakes shooting
Aesthetics can be fun and entertaining, but a video has to have some new and novel ideas before its called jaw dropping.
Let's give it up for the payload too! Orbital Sciences' SES8!
Bitcoin Mining Uses $15 Million's Worth Of Electricity Every Day?
How do the astronauts on ISS spend their spare time?
hahah was just gonna write about this, but you beat me to it.

Either way, the point is, there's a trade off. Kinda like the 80-20 rule. It obviously taken 20% effort to protect against 80% attacks (the casual opportunistic attacks. like preventing sql injections, or locking your front door) and it takes 80% effort to prevent those last 20% attacks (actual Pros). SO "you might as well not have bothered" is somewhat naive in my opinion
12 Hours Giving Tuesday Hangout-a-thon Video
Is there really a SQL injection vulnerability?

Can someone describe the specific vulnerability in more detail? All the example URLs in the article yield an SQL syntax error, which definitely puts the site at high risk for such vulnerabilities. However, on the other hand, I saw no URLs that actually demonstrated successful injection.

For it to be an injection vulnerability, the server needs to execute the query (not fail with a syntax error).

Does anyone have a working example? Nothing malicious please. I tried several basic techniques and was unsuccessful, due to what appears to be escaping on double and single quote characters.
They probably do reduce the staff workload by some amount (although there doesn't seem to be any obvious difference in staffing levels between Japanese restaurants that use "shokken" and those that don't).

I've also sort of assumed that one of the reasons they use them is because they make it a little easier to avoid "trouble": typically you pay first when you use a shokken, and you pay after your meal when you don't...
Ah, yeah, I noticed this a while later. It works if you click on the main article body, but I agree that's an annoying / unnecessary step.
> The developer clearly stated that he would look into it

Belied by the developer's inaction since 2010. Did you read the whole page?
That doesn't seem to make sense. The funded parties generally aren't sending you anything immediately after it's funded either. You're backing a project which eventually may send you an item, after it's been created in some way.
How long will it be until artists start using product placement and full blown advertising within the actual content of their songs to get around these things..?
I guess you attach some positive connotation to the word "feature"? e.g. Apple products have a lot of features that I find stupid, but that doesn't mean they're not features.

Socially worthless or not, that's how the world works. I'm not trying to be a corporate cheerleader. It is what it is.
Teaching about security by looking for some basic low hanging fruit? Perhaps. But what he's also teaching is how to blame and shame, and needlessly tread into murky legal territory.
> Gold has some intrinsic value. If nothing else, it has some industrial uses.

The value of gold is not based on its intrinsic industrial uses. It shares this characteristic with bitcoins.

> So owning AAPL shares does come with obligations from Apple.

Not in the sense OP used. He was very explicit:

> One is that they are convertible into something else, another is that the issuer will accept them as final means of payment from his debtors.

Apple stock is not convertible on demand into gold or cash, nor is Apple obligated to accept Apple stock in payment of its debts. By OPs definitions, Apple stock is not a financial instrument, and thus has no value. (Note: Of course, as ever, OP has used an incorrect definition, but that's neither here nor there.)

But again, according to OP Apple stock is not a financial instrument; it shares this characteristic with bitcoins.

> You can pay debts and taxes in euros.

No, I actually can't, no more than I can pay them in bitcoins. If I had some Euros I could trade them for my local currency and use that to pay my debts and taxes, but the same is true for bitcoins. We can argue that the market for euros is much more stable and liquid than the market for bitcoins (very true!), but this is a difference of degree, not a difference of kind.

The differences between bitcoins and gold, euros, or Apple shares are real and significant, but OP has failed to articulate them.
No DDR4 ram?

I heard it was coming out in 2014.

This is good, I can't wait for HSA programming model.
In addition to what other commentors have suggested, I highly recommend giving something like https://giveit100.com/ a try. I saw the founders at Startup School and their product definitely has very real potential.

I've personally had tremendous success committing to work on something every day.
The EMT (or EMH) is obviously false in its strongest form. However in a weaker form it is generally accepted even by behavioral finance guys. That is, even many (most?) behavioral finance economists believe market is efficient enough that investors should not expect to outperform the market. Can read a little more and get specific example of behavioral finance guru Daniel Kahneman on this point in Wikipedia article here: http://en.wikipedia.org/wiki/Efficient-market_hypothesis
I love that feature but just listing concerts in my country isn't very useful in the US. I regularly get shown that someone is playing in Portland or Austin and I live nowhere near either of those places. Given it hooks into Songkick (awesome site btw) which knows locations of all these events, maybe they could find a way to track where you are and give more relevant suggestions.
I'm not sure if you'll find those type of innovation you listed in developing countries, because none of it is their major pain point.

Their major pain points are infrastructure, public health, education, functioning government, and basic economy, all of which were addressed long ago by advanced countries.

So I think the article is misguided in that sense, and half your point is well taken.

More apt question would have been, which developed country was able to adopt novel technology quickly because of its high risk tolerance, or lax safety regulations?

But I'm not sure if such country exists.
Five Former N.F.L. Players Sue the Chiefs Over Head Injuries
While you were likely pointing out that the problem "would not otherwise exist", I'd like to propose that the problem might "not actually exist".

I was flying a few weeks ago and the pre-check line was backed up with 30+ people, while the normal security line was empty and I passed right through in seconds. I haven't been to Dulles in years (described in the article), so I'm not sure if it is worse there.
SpeedCop analyzes your program and advises on how to make it run faster
With no competition for high end desktop CPUs we can expect price increases.

It's a bit different in a saturated market, where most of the potential customers already own one or more of the products in question.

Intel is effectively competing with itself. I have three Intel CPUs in my home and Intel needs to beat them by a significant performance margin, and at an acceptable price, before I will buy another.

So they still have plenty of incentive to outdo themselves.
My Google Helpouts Experience
Microsofts "Project Spark" Create Your Own Game Beta Launches
Perhaps an extra degree of verification for pledges beyond a certain value?
Google soon to come up with 'Floating retail stores'
Sure, but if you use Git this can get pretty hard to deal with especially on large repos with lots of history. A `git clone` downloads an entire repo, and all of its history...so if you have a bunch of gems or executables in there that boosts the contents of your repo tremendously.

This is why there is `bundle install --deployment`, which "freezes" the Gemfile and ensures it has not changed from what has been committed to the repo. If it has, `bundle install` will not succeed.
If you steal a $60 video game from a store, and as a result the store goes out of business or people become afraid of thieves, the county will lose a hefty chunk of property taxes. Society also loses the opportunity to turn a miscreant into a contributor.

If you plug your car into a school for half an hour, you ... what, exactly?
You know, I read Hacker News less and less precisely because the posts are so damn negative. For those debating whether Notch is good or bad, I suggest reading every article from programming in the 21st century.[1]

[1] http://prog21.dadgum.com/archives.html
A Hidden Tax at the Pump – Iranian Sanctions
I do like npm's simplicity. You used to have to be really careful with the versions, because if you didn't specify it would just download the latest version, and sometimes some of your dependencies would use the wrong versions of libraries and APIs would change and things go haywire. I think they've fixed a lot of that now, though...it was certainly easier a few months ago than it was a few years ago.
Workshop slides: Learning ElasticSearch
Hotfile agrees to shut down, pay $80M to movie industry on eve of trial
You know, you are just harming yourself this way. If you must show your stuff on HN, why not post it as a ShowHN?? why do this dishonorable thing to gain attention? IMO it actually harms you.