skysight-inc/HackerNews huggingface dataset:
I'd agree. On the ad exchange side, their customer support is the best in the industry. But then a lot of that DNA comes from DoubleClick where they have always needed to provide sales and support services to a wide variety of customers and partners.
Imperative Reasoning is Hard
Good point, I believe if you list multiple sync rep targets it only requires one of them, but I would have to go check that properly :)

Still, Postgres in a hot standby configuration is relatively simple, still high performance and an actual real database that doesn't need tens of grand in licensing. You really can't go much wrong with it.
Sadly, groklaw.net apparently went down exactly because it was unable to insure the privacy of its communications once it discovered the extant of the NSA data collection.

So if we are unable to communicate privately, is there any privacy left?
Yes, they can, were it not for other laws explicitly barring them from doing so.
> (1) I'm not sure that his suggested tactic of judging by the latest timestamp would actually work well for established pools. I suspect that some pools are less eager to update their xaction sets, and therefore might lose to selfish miners

I don't see a reason as to why they would object, care to offer one? Plus, since you point out a threat that I think needs to be addressed (thanks btw!), this can be mandated in an updated protocol if the Bitcoin (or Namecoin) devs feel similarly.

> (2) even if these operational measures worked perfectly, they would succeed in lowering gamma. But even with gamma at 0, selfish mining is still a win for groups of size 33% and above.

Here I think you misunderstand. The implications of my comment were not simply that gamma is reduced to zero, but that the whole problem is thrown out the window because the entire pool would be banned from the network (blacklisted). Their selfish blocks would no longer be accepted by the network, and the implications could be even stronger than that (transactions, connections, etc. could also be rejected).
This comment makes you sound both arrogant and uninformed. You should rethink your tone.

First off, security exploits are not measured in how hard they are to pull off, they're measured in overall impact. This is because the point of security is to prevent such exploits, not to wave your dick around like an idiot. The point of this post is that there are very serious exploits in the service. That justifies the post being on the frontpage regardless of how hard they were to find. (Hint: the fact that you call it a "high school" exploit does not negate the fact that it's a serious vulnerability.)

Second off, Snapchat had a long time to fix this and they didn't. Maybe you would have "just fixed it" but the fact that they didn't is also newsworthy and totally justifies this post being here.
PSA: Adobe is offering Photoshop CC and Lightroom for $10/mo, ends Dec. 31
Yeah, I hear that a lot.. it's not easy to find something all family members agree on.
Rdio discontinues Vdio video streaming service
Who cares what is legal/illegal. That's missing the point. Under the PATRIOT Act raping and torturing infants is legal[1]. When corrupt politicians make corrupt laws, the only thing that should matter is what is morally correct. Or to quote John Oliver of the Daily Show,

> I think you're misunderstanding the perceived problem here, Mr. President. No one is saying you broke any laws. We're just saying it's a little bit weird that you didn't have to.

[1] probably.
Agreed. (I didn't say it was a bad thing.)
I still don't get it. There's equivocation with the verb to produce.

I'm going to play Socratic Advocate here. When a music producer produces a record of an artist, who owns it? How do we conceptualize this relationship of artist to market? Do we argue for record companies or for artists? What motivates the moral structure of this debate? Are we sympathizing with record companies or artists? It's a record of the artist's musical activity.

Now, a phone company is a producer of our records. We're its content producers. But if the record company re-uses its artist's work without that artist's permission...?

How do we conceptualize this asymmetry?
ED officials raided two bitcoin trading firm in Ahmedabad - India
Downvoter must be a pinchzoom hater
And Snowden is hardening the NSA!
Good you're not a computer then.
Switch from schema.rb to structure.sql by setting config.active_record.schema_format = :sql in your application config if you want to do anything remotely interesting with your schema.
They share the same node, language, so I don't see they could avoid comparison. In fact, programming language could be argued to be a specialization of spoken language. After all we're not punching in bytes by hand on control cards anymore.
Unpopular personal story time.

I have a Google account, and it is perfect. I use the gmail UI to send and receive email from my own domain name, which I use for work and personal email; I then have a gmail address which I use when I am signing up for sites that I expect to receive spam from - I can use both of these simultaneously just selecting which account I want to send from. I have Google+ which I have set up granular permissions, so that certain people can only see certain content. I have a Youtube page, which is connected to my Google account but uses a separate alias completely separate from my real name, which I automatically become when using Youtube. There is no public facing connection between my real name and my YT alias, and I never have to switch accounts or select which one I would like to use.

I might be missing the problem, but to me it seems straight forward and logical.
cool, sounds like a good party
It sounds like you are comparing Zotonic to Django in an apples-to-apples sort of way, so I'm not sure why you don't consider it to be a framework. I think that it's definitely a framework as much as Django is, it just happens to come with a CMS app built on top of it pre-installed, which looks complete enough to be "the product" when it's really just a starting point. The project website could be clearer about this.

Having said that it's not "just a CMS," it is in fact pretty awesome for building simple marketing/brochure mostly-static-but-with-a-contact-form-and-blog type websites. Individual websites can be hot loaded into the running daemon, and started, stopped, and rebuilt from a git repo through a web based interface. I host a couple local business sites for some recurring income and I'm strongly considering porting my existing clients to it and using it for similar sites in the future.

Despite that simple use case, I wouldn't dismiss it for more complex projects, as long as, e.g., its data model (a triplestore built on top of postgres) works for you.

In summary, in my opinion it has some caveats but is as good as Django. :)
Target confirms encrypted PINs were stolen in recent data breach
I really like the simplicity.

Can you reverse the direction of one of the spirals?

Or maybe slow down one to half-speed?

(Maybe it would look better, maybe not.)
I disagree. This is so far over the line into obvious bullshit that anyone with a 6th grade education can smell the government's Schadenfreude.

If anything they are exploiting the fact that the public has become docile and likely won't fight back, even when they know without a doubt they are being lied to by the people they pay to protect them.
Student loans are distributed directly to your school, where they take out tuition and cut you a check for the remainder. How do you plan to intercept the school loan before the school cuts their part out?
The purity of angel investing
A quote from Benjamin Franklin comes to mind: Those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety.
Law is not some unicorn that you can make whatever color you like. It is flawed like all creations made by man, and only what we make it.
Cool list, will definitely check out when I have some free time. I really loved the lispy newsletter, looking forward to future editions.
Most of us spend our time writing code once in order to automate tasks forever, the whole point of which is to increase "laziness". As many have said, laziness for the programmer is a virtue.

As far as lifestyle businesses, the term is itself a strawman that antagonists to the concept use, then you just knock down the strawman. I can't think of a good term for this type of business - I could say bootstrapped, but bootstrapped might just mean taking no angel money, but hoping for VC at some point.

While exit implies a buyout, it could also mean an IPO. I'm not sure what kind of business you are thinking of when you do not like any of the kinds that have been mentioned.

I do not have my sights set on an angel to series A to series B to IPO treadmill. Although market circumstances can change so who ever knows? If building a "lifestyle" business with the goal of doing higher level interesting work instead of drudge CRUD work, and having time for exercise, friends, family and leisure after working 40 hours is lazy, then call me lazy.
This 2004 paper got a lot of attention in the computer vision community doing essentially the same thing about a decade ago:

http://www.cs.columbia.edu/CAVE/projects/world_eye/

"The World in an Eye,"
K. Nishino and S.K. Nayar,
IEEE Conference on Computer Vision and Pattern Recognition (CVPR),
Vol.I, pp.444-451, Jun, 2004.
That's not an "exploit", that's just how all these services work. For a large service there really isn't a good way to implement private set intersection as would be required for this - all the techniques that might work are deep into academic-paper-only territory, forget about finding a convenient open source implementation lying around on github, let alone a mature one.

The other one, bulk registration of accounts, is also not an exploit using any conventional definition of the word. I spent years fighting bulk account signup abuse at Google. When we failed it was not an exploit in our system, because that implies you can provide some kind of cast-iron security guarantees on par with cryptography; you can't, all you can do is rate limit and try to detect bogus accounts. It's like finding a way to send spam and calling it an exploit.

The poor crypto is disappointing but hardly unique: the field of crypto in general has given people poor tools to work with. Things like NaCL are barely known where as lower level primitives are supported out of the box by basically every OS/platform out there, with little or no guidance on the best way to use them.
What is the problem with `$this = $(this)` ?
You used `that` but I didn't get that.
Question about pg/rails approach...

This seems to tie the database closely to the ORM. What if there are multiple applications using the schema? Wouldn't it be better to have the database code & controlling system separate?

I've found it more convenient to have a set of SQL files for specifying tables & indexes and to have the app not control the database schema directly (Perhaps I just don't see the clear advantage, or perhaps Rails tooling is so good it obviates my concerns. :-) ).
Starting a new gig? Here’s your “first day at a new job” checklist.
Who was he talking about? Me? If so, I upvoted the reply, what more do I need to do?
But it has nothing to do with Valve. Personally I don't see what's wrong with proprietary drivers as long they work.

You also need proprietary drivers on Windows and Mac OS X.
I disagree with this argument. Modern programming is done with groups of people; you are not only communicating your intent to the machine, you are communicating your intent with fellow engineers. It is in this case that nuance is important. For example, C++ references and pointers are exactly the same as far as the machine cares. But the difference is important for communicating intent to other engineers.

This isn't to say that C++ lacks significant flaws, but I don't think nuance and variety of expression is one of them.
Harvard Course-Introduction To Computer Science- CS50x
Glenn Greenwald keynote at Chaos Communication Congress [video]
I don't get how referencing a singular event often is actually an issue.

the Great Depression showed us how important it is to have an insurance on personal bank accounts, to disincentive bank runs. While one might counter that there have been other economic crises and bank runs, there have also been many other terrorist attacks aimed at US interests and allies. We still cite the great depression all the time because it was kind of a big deal.

I don't want to comment on how its being used in this policy decision but acting like 9/11 isn't somehow a big deal is strange.
Well, yeah. But what are we going to do about it since it's clear past due to update such laws. Now we're in the thick of an infrastructure that has just busted any practical sense of minimal right to self-governance.
> I just meant that in my experience it's healthy to have something to aspire to

I had actually thought that's what I was doing when I compared it to Lua! I was quite surprised at how well Wren did in comparison. The trick will be to see if I can keep it that fast as the implementation gets more robust. It takes some shortcuts right now that don't scale well, but happen to be faster.

> I really want Jeff to write a little book about it, walking the reader through the implementation.

I would love that. I've skimmed femtolisp a few times and it's clean but suffers from the almost total lack of documentation that other programming language implementations also seem to have.
Isn't that the same presentation that this post is about?
I already received the first refund check. Basically, it goes into my student account, which is paid in full, so they send the remainder back to me through check or direct deposit.
Looks like they have chosen to only use App Folder permissions rather than full Dropbox. I suppose it helps in getting production approval, but then if other apps are able to get them I wonder why can't lightpaper.
Curious about this too. I've always had to sort of verbalise in my head when I read, I think because of the way I was taught in primary school. This is extremely slow though.

I can however read code without verbalising, and with sheet music I can sort of directly execute the notes with thinking explicitly about the notes I'm seeing.

I can imagine some people can read prose in a similar manner, and I'd love to know how.

I've tried to sort of 'relax' my brain while reading, but then it seems nothing has actually registered!
In what way have my liberties been reduced? On the ground, nothing has changed. Now five organizations have my metadata instead of four.
Your own private pypi server
Also xv6 book that's meant to accompany the source code. http://pdos.csail.mit.edu/6.828/2012/xv6/book-rev7.pdf
This version hasn't been updated in a long time. I hope the author gets back to it at some point. I've only played with it a bit, but it was very nostalgic. I think adding modern stuff to this is a bit missing the point, but it might be fun to add some sort of GUI to it, something much simpler than X Windows.
Don't even bother. You can find hundreds of people on elance to do it for you for a couple hundred bucks.
Even further: We don't possess the copyright to the algoritms of non-plaintext. So effectively we don't own anything we codify in a proprietary format...
He who forgets history is doomed to repeat it.
> He was ruling that the collection was legal under the patriot act.

No, he was ruling that it was Constitutional under the Fourth Amendment. There were also claims under statutory rules, but they were dismissed on procedural grounds (specifically, that they were subject to soveriegn immunity and the claims, regardless of the merits, did not fit within the scope of Congressional waivers of that immunity.)

> However, the supreme court has the ability to apply "judicial review" to overturn a law / act / action.

Judicial review is not a unique power of the Supreme Court -- every federal court reviews actions against the federal Constitution (which is, after all, the highest federal law) routinely, and exercises the power of judicial review. The Supreme Court's only special role with regard to judicial review is the same as its special role on every other issue -- its the last answer in the judicial system, as there is no higher court to appeal to.
Same here. I told the person to type my name in google, with the word "resume" next to it, and that the first result would be my resume. She was astonished and asked how I could do this. I replied that I followed Google's own s/developer/webmaster/ guidelines. (Try it: google "chris mahan resume", it's still there, three years later, first result.)

I subsequently failed the basic algo questions, though, not having a computer science degree (thankfully--both for not working at Google and not having a computer science degree).
Really like that - beautiful and elegant.
The Facebook app is perfectly fine, I have no problem with it.

I have plenty of games that eat more battery than anything on my phone.

Except that like I said in HTML every single text you show is literally an eval call. There's still ton of XSS on website, it's a common security threat, the same will be possible on an HTML5 application (they will even have access to your phone functionality).
Does this mean I should buy a gun? You sound just like the NRA.
Originally posted and more useful title: "How ego and misunderstanding sabotage convertible notes"
The attorney general of Maryland who argued that case in 1979 has strongly protested against its application to mass surveillance.

http://www.npr.org/2013/12/21/256114227/1979-supreme-court-r...
Someone also reimplemented it in Mathematica

http://community.wolfram.com/groups/-/m/t/175891
Very merry cleverness
You're not going to get a political solution without widespread political action. Talk about it, make it an issue that is just as important as anything else at the polls. Make other people understand the importance of the issue as well.

If gay marriage and pot legalization can become real, serious issues that the electorate cares passionately about then so can surveillance and the extension of essential liberty onto the internet.
> I don't get how referencing a singular event often is actually an issue.

Because it's a reactionary and not derived in principle? How exactly do you counter "I know what's best for you based on a single event"?
> Comparing performance on entrance exams is more consistent with how private sector employers evaluate non-STEM college graduates.

How exactly is that? I've not heard of an employer asking for SAT/ACT scores for college grads. I've heard of reporting GPA and talking about internship/club roles, but never standardized test scores taken before college.

> Those 47% of teachers scoring in the bottom third of the SAT/ACT aren't going to be in the running for very high-paying jobs almost regardless of their college performance.

Seriously? You could score in the middle or poorly on a standardized test and go on to do extremely well in college and the workforce. Further, scoring high on SAT/ACT tests doesn't indicate you will do well in college or the workforce. Employers are almost always looking for a couple of factors for potential hires, not just one, and we would expect teacher hires to be no different in that regard.
Target confirms encrypted debit PIN data was stolen during hack
Btw... events.ccc.de is offline. Here is a mirror: http://ccc.devsn.se/congress/2013/wiki/Main_Page
This works on things like Christmas ornaments as well...
Neat. I also like this one (Coffeescript): https://gist.github.com/rjz/3610858
My Two Types of Creativity Are Archenemies
> And actually, I don't happen to think it's a waste of time to study art, or history, or literature.

It's not a waste, but it's a waste on many. Basically, there are two core questions we have a species: how we live and why we live. art, history, and literature help answer the why and the how is very clearly answered by the sciences/engineering.

Honestly, people just going to college for a future job is a waste of their time, the professor's time, and college resources.

If I had the time, I would enjoy taking a literature or art class these days.
"UPDATE: We really are douches."
Tips for Deciding Between Amazon RDS and MySQL (2012)
Even further: it seems like we have to abandon all proprietary formats. What is a record is not something you technically own. Your idea or concept is codified in the record.

What's that saying?: Files are a myth.
The certification, however, is a complete joke since companies can self-assess and register themselves as safe harbor compliant.

And this creates a genuine difficulty for EU businesses, because it's no longer credible to claim that you thought a US business was compliant because of safe harbour arrangements. It may therefore not actually be legal under European laws to export personal data to those US businesses any more. If any European company did so, and as a result there were negative consequences for the subject of the data, that could lead to a nasty lawsuit for the company that did it, even if their actions would have been considered reasonably diligent because of safe harbour a few years ago.
Partially or wholly publicly funded, yes. Publicly operated or administered, no. The part about operation and administration is the key point about parents and communities being able to have input into their children's schooling. Charter schools don't address the existing problems with public education in regards to many communities being able to have a voice in achieving quality education.
Tim Burton better patent the ability to use Johnny Depp and Helena Bonham Carter in a movie together.
Not really: the stipulations in the agreement you make with the cloud provider explicitly cover data rights. Rights to subpoena data is completely different.
The three main things to be concerned about are corrosion, galvanic corrosion[1] and galling[2].

Corrosion is more commonly known as rust, but that's technically reserved for steel (or, more accurately, iron) oxidation. Aluminum certainly corrodes, but it corrodes into aluminum oxide, or alumina, which is actually a ceramic that is stronger than aluminum. In fact, good luck using aluminum without a coating of alumina... it naturally occurs on the surface of atmospherically exposed aluminum. As a result, when a chunk of aluminum is broken off of a larger piece, the material almost immediately forms a protective layer of alumina. It's almost like aluminum self-heals in the presence of oxygen.

Galvanic corrosion occurs when dissimilar metals come into contact amidst an electrolyte solution. In the case of vehicles, that's usually seawater/sea-mist or salted winter roads. While saltwater is also responsible for accelerating normal corrosion, it also plays a part in galvanic corrosion. So yes, having aluminum and steel touching is a recipe for galvanic corrosion, but galvanic corrosion is not black-and-white. Each metal has an anodic index; a high or low anodic index doesn't matter all that much. What matters is the difference between the anodic indices of the touching metals. For aluminum and steel, that difference is quite small, so galvanic corrosion isn't a huge issue, but it's not negligible either.

Galling occurs when the sliding friction of two parts, say a screw and its threaded mate, results in plastic deformation, usually in the more ductile of the two pieces. This generally doesn't come into play in the construction of a vehicle because many parts are attached either by welding or by a bolt-nut combo. Choosing the correct materials for the bolts and nuts (basically, just use hardened, but not stainless, steel) gets rid of this concern in most cases. In cases where one must screw a steel fastener into a threaded aluminum piece, a helical insert is usually prescribed. While many manufacturers make these, we typically used Helicoil for spaceflight ops because they're tested and rated for spaceflight (batch traceability, proper composition docs, etc).

[1] https://en.wikipedia.org/wiki/Galvanic_corrosion

[2] https://en.wikipedia.org/wiki/Galling