skysight-inc/HackerNews huggingface dataset:
My wife shopped at Target twice, both times outside of the period given for the breach. I think we are still going to get the cards replaced just to err on the side of prudence.

I find myself wondering how this might affect Target. I almost never shop there myself. My wife, on the other hand, might have shopped there once a month or once every couple of months. Yesterday she told me she is not going back. Ever. There have to be other people on the same boat.

It'll be interesting if they ever release information on how exactly the breach was orchestrated. My biggest question is about all of that data moving about Target's distributed system without any encryption whatsoever. At least that's what it sounds like. The data capture had to be done at some central point in their infrastructure in order to affect some 1,800 stores.

Again, all of that data from 1,800 stores got to a central repository of some sort completely unprotected? Why isn't that information stored and limited to the within the walls of each store? It'd sure limit the exposure, well, a factor of 2,000. Anything leaving the walls of a store needs to be encrypted.

Perhaps someone with more experience in brick-and-mortar payment infrastructures of this kind can comment on this?
http://en.wikipedia.org/wiki/Hare_Psychopathy_Checklist, and before that, a very strong gut feeling. Too many things click together: the overall toxicity of a person, his desire to belittle / denigrate many people around him (a waitress in a cafe, contributors to an internet community project, a non-psychopath competitor etc.), his grandiose self-image (he literally designated himself as 'elite'), threats of violence and criminal leanings, always hogging the spotlight in social settings, "friendships" that change to enmity overnight, et cetera et cetera.
I guess it depends on whether or not you want your code to read like natural language.

The refactored version reads like:

Allow access to the site if the user is signed in or has a trusted IP.

The original (DeMorgan's applied):

Allow access to the site if the user isn't signed out or doesn't have an untrusted IP.

It does help to have a good understanding of propositional logic and Boolean algebra, though.
The link is paywalled, I can't even see an abstract.

Edit: I missed the "Free with registration" link https://pubs.aaas.org/Promo/promo_setup_rd.asp?dmc=P0RFB1
I mean, I think the way to do this would be to pitch it the Canadian equivalent of the Health and Human Services department--they host the app backend, and offer scheduling and reservations, and send health checkup reminders. In return, they get to monitor the profession and help encourage safe sex.

Seems like a win for everyone.
Actually they can:
http://en.wikipedia.org/wiki/Section_Thirty-three_of_the_Can...

Parliament can specifically say "we know this law is unconstitutional, but we like it anyway, so it's staying for 5 years. And then we can renew it if we want." They may not want to do that, as it's a pretty strong thing to do, but they are absolutely able to.
Thanks for posting this up -- can you clarify the reason for using AGPL as opposed to something a little more friendly to SaaS businesses, like BSD or MIT licenses? I only ask because it seems like from reading the license that any changes to the source code must be provided for download, thereby making it difficult to build a defensible business with this tool (I guess with this tool alone).
With regards to the idea that just the current function should be on screen: At one point I saw a reference to a study (though of course I cannot now dig up the link!) that suggested an inverse correlation between the amount of code visible on screen and the number of bugs written by programmers, with the conclusion that programmers should buy big screens, use slightly smaller fonts, and avoid using too much whitespace. It is exactly when you are thinking only about the few lines of code you're writing, and not about the context in which those lines are going to run, that you're most likely to introduce a bug.

In an ideal project, of course, your code be so beautiful--so loosely coupled, so free of side effects--that you could in fact focus on a function in perfect isolation. But few of us are lucky enough to live in such a world.
As a fellow atheist and motorcyclist, may I suggest that you start wearing a helmet? I mean, when there's no afterlife to look forward to, you should probably wear the appropriate safety gear.
It's an amazing topic. My wife is a doctor and I'm amazed of how difficult is to see if an article is sound or important or it's been checked properly, or if the tree of citations that lead to it's importance is sound after new studies.
I've been thinking on a visual standard that let's you know what status has a given study, how many reviews has, if it's citing studies that are solid with solid peer reviews and such.
Ideally it should be possible to track a new discovery down to it's scientific roots, and easily be able to know how good is.
But to achieve this you need as you said to change all the scientific publication method, create some kind of standard publication API for the data, the citations, the peer reviews and number of times it's been replicated. Also some kind of debate forum around this publications would be of help. Were people could coordinate replications or talk about methods , etc...
But it is all a big mess, and certainly ready for disruption.

One clear user case is that recently it was published in the New England (a tier one med publication) how all the studies about high blood pressure and salt relationship have their origin in an old animal study with rabbits (If I recall correctly). They fed them with the equivalent for humans of hundreds of grams of salt, as the blood pressure rise it was deduced that salt causes high blood pressure. They also did a meta-study about the relationship of high blood pressure and salt and they didn't find a clear correlation. Maybe this is correct maybe it´s not, but that a medical truth as established as salt=high blood pressure can not be properly traced and known, just let's you see how it's all broken.

edit: typos and spelling
So crazy that the EU parliament was probing US intelligence abuse via ECHELON already 13-14 years ago:

http://news.bbc.co.uk/1/hi/world/europe/820352.stm
it's also slashdotted.
For the nth time, I encourage people to look at flow-based DSP programming tools like Reaktor and Flowstone (or its earlier incarnation, Synthmaker) where many of these ideas have already been successfully implemented. For the life of me, I can't understand why IDEs don't come with flowchart generation/editing built in by default.
Our main focus is helping business to focus on what matters most by providing reference points on metrics. We are not planning on serving investors.
Your Database Just Got Its Own Website
Initially it started when I was working on the AISoy1 Robot (www.aisoy.com) which was using a very limited ARM processor. We decided to give upgrade and management capabilities via a web application to the robot; we tried first with a Python based one, but it was consuming too much memory, so I started this project. We continued using it, although now we use Raspberry Pi which is quite more powerful.

Nice projects are right now rasppi-style projects where you are interested in doing an application that almost does not consume resources: 2MB RAM for example for oterm, not including shared libraries, as fast as the fastest.

Also I use it as a platform to easily develop C/C++ web services where performance is paramount, on real big servers.
There really is no such thing as "pre-authorized" from the bank's point of view. You never tell your bank "it's OK for Utility Company Foo to debit my checking account"

You give the bank's routing number and your account number to the utility or whomever. That's all they need. That information, by the way, is present in clear text on every paper check you write. The bank doesn't pre-authorize anything, nor can they block anything short of closing your account and giving you a new account number. Your protection is that presenting a fradulent check (electronic or physical) is a crime.
You're not disagreeing with anything I wrote. I said multiple inheritance is intrinsically complex in ways JOINs can be. JOINs can be used to do all kinds of wild and whacky things, they can also (easily) lead to horribly slow queries. They may be conceptually simple, but so is Universal Algebra.
Why not distribute a vm image with all your stack and then just update the image with new features/fixes?
Most of what you learn in CS is a bunch of words you have no idea what they mean until someone gives you a precise definition. Deterministic Finite Automata, regular expression, static typing, serialization, compilation, singleton pattern, etc. are all terms we use every day in our profession, but it's not clear what they mean. But we read the definition, forget it, someone reminds us, we forget it again, we implement it and we remember. Same with monoids, functors or monads, we need to take some time to learn what they mean and then we can include them in our vocabulary.
> For these explorer-type players, finding development fossils -- items that were present in the original game's code but never used -- is one of the chief rewards of ROM hacking.

That's pretty cool, they find enemies and items that have never actually been used in the game, and reuse them in modded missions.
MoboTap releases Dolphin Zero browser on Android
We are not selling it. Our objective is to maximize business success, not helping investors.
Woops, you're absolutely right :)
Refined:
[0369] can appear any number of times
[147] and [258] must appear an equal number of times, or for any remaining:
[147] must appear a multiple of 3 times
[258] must appear a multiple of 3 times
A Tiny Speaker Printed on a Single Sheet of Paper
There is a big difference (which I dont know if its good for oterm): Oterm does not use ssh at all. It is like xterm, but does not use X as protocol, but https.
That's pretty much it.

If you want to do it with a minimum of new syntax, you could defer naming the join until the select, as you normally would:

CREATE TABLE emp (
emp_id INTEGER PRIMARY KEY,
manager_id INTEGER FOREIGN KEY REFERENCES emp,
hr_rep_id INTEGER FOREIGN KEY REFERENCES emp,
name VARCHAR(50),
...
);

SELECT emp.name AS "Employee", manager.name AS "Manager"
FROM emp
NAMED JOIN emp.manager_id AS manager;

I hadn't given any thought to the syntax, but that looks pretty nice and tidy.

Edit:
NAMED JOIN isn't really appropriate anymore with that change in syntax. Something like DECLARED JOIN might be better.
This was against IT policy of the agencies we were working with.
Hey. I still use that phone with CM Jelly Bean :) I still love it. If the specs are similar, then I don't mind getting one at $38. I can use it as a remote for Chromecast!
I don't want to hit different keys for commenting and uncommenting! What I want is to have one key which does all this:

1. if there is no region active and current line is not commented - comment it

2. if there is no region active and current line is commented - uncomment it

3. if there is region active and it's fully commented - uncomment that region

4 otherwise comment the full region

And it's this easy to do this:

(defun comment-or-uncomment-region-or-line ()
"Comments or uncomments the region or the current line if
there's no active region."
(interactive)
(let (beg end)
(if (region-active-p)
(setq beg (region-beginning)
end (region-end))
(setq beg (line-beginning-position)
end (line-end-position)))
(comment-or-uncomment-region beg end)))

So I see absolutely no reason for not coding this up and using it :) (Other than, heck, it really is my first ELisp function and it shows :D)
Ezel: Client + Server Code Sharing with Backbone and Node.js
Submitted, this is pretty sweet!
Normally I'm for this, but this seems to be a valid discussion for HN.

I rarely upvote, but I did this time.
You can always buy up his startup if you want to run your business around his tool. I'm going to guess he'd be very amenable to this.
First against the wall, it would appear. All of us doing tech work should be paying very, very close attention to this sentiment.

That said, why can't these folks find more constructive ways of trying to change the system and address their grievances?
Are you referring to "Python programmers? Some people specialize, you know, not to mention that a reader could read between the lines of your post and think that you might be fighting for more platform spread in a Python shop. "You dummies don't understand, Rust would be so good for this!"
Ahhh, those were the days when your main source of new source code to play with came from print publications.
At the very least, I believe they are responsible for paying the credit card companies to replace the stolen cards. I can't find my source on this, but I do remember a few times that a retailer was held fiscally responsible for new card distribution.
It would be much better to have 100 more cars on the road during rush hour, right?
"driven up the property values and rent prices, creating animosity, evictions, and poverty"
I'm sorry but I can't imagine the gentrification has caused poverty. It's probably made it more inconvenient and pushed out people in poverty though.
I just fixed at master the most important one, the first.
This is awesome, I was JUST about to implement this where I work. May we all be freed from SAML based implementations of SSO

one question - If this implementation uses django cookies to manage state, does this mean that it actually only works within the django ecosystem?
I did not know about that.

Article from lwn: http://lwn.net/Articles/317154/

thanks for the tip!
Your idea of a fun date night with your SO must be very different to mine.
Next time, you can also write a fascinating article about the implication of a(b+c) = ab + a*c
There is no stand for you to take. The EU is hopelessly dependant on the US. You don't have to take responsibility for your country so America wins easily.
That's on the standard eval boards? You've managed to get me interested in this rabbit hole again!
Not surprised to see this. The real estate hyperinflation in the Bay Area is beyond sanity at this point.
One of the fundamental reason why Asians do well in testing is because academical achievements are highly valued, by parents, teachers, society, and most importantly, their peers.

It's the same reason why Americans are really good at basketball and football, why Brazilians are really good at soccer. Kids will go through great lengths to earn respect from peers.

Whether the attitude toward academic achievements creates followers or leaders, remains to be proven.
Thanks for open sourcing this!

I have to say though, it seems like there are a lot of easier targets for this kind of software outside the legal realm where it wouldn't have to be installed on their own servers.

I don't know about the competitive layout of your industry, but I was wondering if you considered switching into other market segments that wouldn't have things like formal code reviews up front for a product like this.
About the slides, on some of the other reports they provided pictures of the slides. On the petrobas article no slides were provided.
Not all janitors are policy wonks. "Impossible" is a strong word. Perhaps "they are unjustifiably losing their benefits" would fit the facts better.
The private buses are a very visible symbol of what's going on in their neighborhood. They're an obvious target.
How to rock content marketing in 2014: 8 resolutions
Because then people might listen, things might change and then they'd have nothing else to talk about!
Maybe researchers could negotiate a license for commercial data that would allow others access to the data for review or reproduction purposes at a reasonable charge, but not for use as the basis of new claims.

Has anyone seen a deal like this before?
Technicaly the bus is place of work, so there are interesting implications for Google as employer.
Have you ever tried? Masturbation works just fine.
He already tried that. You're not helping.
World Domination with Haskell
People tend to use these for purchase they deem are high-risk such as from an unknown or shady looking merchant.

The problem we are seeing is that it's often the big, legitimate merchants that are targets (ha) of high-tech theft. The kind of merchant for which you'd never think to use a one time use card.
I want to raise an issue that people often ignore. We put the government's fault onto an employee's fault.

But I will state my position clearly: I do think the resignation is a good thing. I don't agree with the word "removal".

The biggest problem to me is not about NSA involvement, it is how WE treat people who work at NSA and other government intelligence agency. If the fear of a single man is what makes the issue hot, I beg to differ. You can disagree with him and not pass the standard. If the whole committee thinks there is something fishy, I see no reason why the proposal would get through the internal draft. It is that distrust.

My school and many schools out there would send out internship notice; if you are a public school one of those would be government internship and among them is NSA and FBI.

How do we treat these kids in the future? How should we treat our future or current co-workers who had worked as contractor or done internship at NSA, FBI and CIA?

Do we trust them?

The fact that "NSA [employees] (edit, response to http://www.ietf.org/mail-archive/web/cfrg/current/msg03556.h...) should not be in any position in the cryto committee" is too far. He should resign in fact, to avoid interest conflict; people don't trust NSA right now. But how are we treating these employees? Have we asked him privately? Should this email be in the public in the first place? Have they ever had a private conservation about this? I think like it is more of an attack and a warning to all NSA-title employees that they should never reveal their affiliations, even on resume.

Since everyone does things differently, some will never join NSA and some will for either money or technical development or patriotism, how do we as people treat these employees?

I am upset that when people look down at them and think they are rat. This is a stronger ethic issue that few notice. The whole "removal" sounds like "one ought not be an NSA employee." Being someone new to security and admire open standard and fear of backdoor, I think it is nicer and professional if that has been raised to Kevin Igoe first privately.

From the way the mail is phrased: it never happened.
For Abba...

Why doesn't (.)(.)\2[^\1] work?

I thought backreferences matched the captured literal, so negating it would match? But this looks the same as (.)(.)\2\1...
I'd love to have loners.org to use for a (free, non-commercial, and personally-funded) resource for introverts, and I promise not to give you a domain in return!
Shh! don't tell anyone how awesome Portland and Bend are ;-) Lots of good things happening in both places. You are right, in Seattle you can have a new gig an hour from now if you want it, but it is expensive and pretentious. I grew up there, love it, but left three years ago...sure it isn't SV, but still too expensive and terrible commutes.
I can't imagine they were protesting the literal act of using a bus to ferry employees to work. Rather this was an easy way to target members of a group the protestors feel wronged by/animosity towards.
Yes. Another reason I think we can call sociopathy a weakness is that, as with all evil, the actors are thoroughly deceived about their own motives. This makes them especially maddening to those who catch on and falsely assume that they could make a straightforward choice to behave differently
ha i had similar project but right now i'm publish job offer site on github: https://github.com/dawjan/pracanowo.pl

Check main CV builder:

http://cv.pracanowo.pl/cvprzedstawicielhandlowy.html

No by google and new engine i;m on position [serp] 945
So i don't see any reasons to still support my project
NYC and SF are exclusively for rich people
People ask why I'm not on Facebook. I tell them I'm anti-social and thus will only join anti-social networks. They don't usually get it.
You should still be able to edit your post, fyi. There should be a link on the same line as your name that says 'edit'. Editing gets disabled after a some amount of time, but IIRC it should be more then 1 hour.
Yes others banks have this feature as well
I hesitate to say that it "caused" poverty.

But for people who have seen their rents go up while working the same jobs at roughly the same pay, you can see that a larger percentage of their pay goes to rent.
Rent prices and other expenses skyrocketed. And not everyone has option to move out. So yes, it caused powerty.
I do what I'm told, and I get it done on time. But I also explain why I think it's the wrong decision, and I usually provide links to articles backing me up. I even try to include links to counter-examples. I have little patience for people that don't listening to experts. If you don't listen to me, then listen to these other engineers that are better than me. If you don't listen to them, then it's going to be really hard for me to respect your decisions.

I'd rather have a manager with just 10 years experience, than be a manager myself. I like working on products more than management.
Has this actually happened? I can't find any other news source confirming this.

Edit: Yeah, this actually did happen. Picture of the broken window: https://twitter.com/craigsfrost/status/414121201754468352/ph...
Of course, since Chuck Norris can execute an infinite loop in less than one second.
It would be much better to have affordable housing for all instead of the wealthy pricing out the ordinary.
Completely agree on making existing key-based crypto more usable. A few weeks/months ago when someone started a thread on OpenPGP best practices, I asked why lots of key based tooling wasn't already baked into operating systems like linux. More details in the original thread [0]. It seems like this is really low hanging fruit; much lower than creating a new crypto system.

[0] https://news.ycombinator.com/item?id=6660162
The idea of cryptographic hashes is that they don't leak information about the plaintext, though.
This is an example of another fashionable exercise: assuming your customer/client base is representative of an entire market. The National Association of Realtors has over a million members. Some are obviously going to be savvier and more successful than others, but on the whole, real estate is an industry that has embraced technology and realtors use technology in a variety of ways to market listings, service their clients and complete transactions more efficiently.

You should consider that "knows how to use WordPress" is not the litmus test of tech savvy. There are a good number of folks out there who have made millions online who probably don't have any experience with a CMS.
PISA tests are not based off school curricula. This is a much different claim than the one that PISA tests successfully examine "high level understanding and application of subject knowledge and skills".

PISA tests are time-bound; thus, they cannot avoid testing time management. PISA tests include multiple choice questions; thus, they cannot avoid testing students' ability to eliminate nonsensical options. The issues with short-answer questions are more subtle and less problematic, but at the very least, depend on the reviewer having the capacity to fully understand the students' response, linguistically and colloquially.

These are very common complaints about test design: that the test scores end up being trumped by orthogonal "test-taking" skills. The typical responses to them are that these orthogonal skills are nevertheless useful "real-world" skills, which is absolutely true, but it undermines the original claim that the tests are primarily examining the actual subject knowledge.