skysight-inc/HackerNews huggingface dataset:
By that logic why would he even bother reporting it and have security experts poking around the logs and potentially find traces of his download.

Personally i would have sold it to the highest bidder. Being "white hat" gets you in trouble more often than not.

Il stick to "gray hat" thank you very much. If i ever choose to disclose any vulnerability to the owners i will not reveal my identity and after arbitrary amount of time say... (1 month) if it's still present sell it to the highest bidder let them deal with the consequences.

You have to be strict when teaching people and this is no different. If you let them set the rules they could choose and unreasonable length of time like 1 year before they allow you to disclose anything.

You are the one in the position of power never let them take that away from you. By revealing you identity you give away all your power.

If you're not a threat people don't take you seriously.
I have no such problems.
Think/hack/try first, code later - this is my advice to you.

Pen and paper are my debugging tools, not a type system.
From their job post, these guys really look like over confident 20-something hipsters...
They did list Goldieblox, who are now more known for pissing off Beastie Boys.
As an Aussie, sad to see a homegrown company head overseas. Can understand why though. 30% corporate tax, lower EBITDA: Market Cap and I'm sure plenty of red tape. Tis a shame.
I ran through the guided demo/walk-through and was sad to see that the export to HTML/CSS contained a crap ton of ID selectors. I only played with it for 5 or 10 minutes, but I found this:

Say you remove the id tag of #signup-form and change it to some arbitrary classname. The styling immediately goes away on the element! Somewhere there's a hard-coded style on the ID selector for the purposes of a pretty demo. This doesn't sit well with me.. You can see this is true when you click on the "Edit Project CSS" from the top menu item. I should've been able to change that ID to a class or combination of classes and not affect the styling on the fly.

Likewise, I'm a bit concerned what would happen by adding several classes. It doesn't appear as though they're each uniquely and independently tied to their own styles via the right adjusted area. If you want to do anything non-trivial, I believe you're stuck with manually entering the CSS in the "Edit Project CSS" pane on your own, which is worse than using your own IDE with automated updates in the browser via LESS, SCSS, SASS, HAML, Stylus, etc.

All I'm trying to say is better handling of classes would be much appreciated for those of us who prefer to try and widgetize and create reusable components. Beyond that, it looks nice :)
This is philosophical mumbo-jumbo.

When people program, they (usually) don't do math. And that's it.

The fact that you can view a programming language as a formal system, and the fact that computer programs can be viewed as mathematical proofs of mostly totally uninteresting propositions, doesn't magically turn programmers into mathematicians, just as the fact that the brain can be viewed as a chemical and physical system doesn't turn every thought into a chemical experiment, and each thinking person into a chemist.

Saying otherwise is just an abuse of language.
I hope people don't go touting this as a wonder drug immediately. Please also read the "Adverse Effects"[1] section on the Wikipedia page for Valproic acid.

Someone very dear to me was administered Valproate for her epilepsy as a kid and the full extent of its adverse effects have been in full force for a while now. She's a fighter, thankfully and has been taking it like a champ.

[1] https://en.wikipedia.org/wiki/Valproic_acid#Adverse_effects
One of the points of the article is that it's hard to tell and control what is happening on the Google+ interface and system.

Add A/B testing and rollout of new features, utter lack of accountability and bugs, and probably no one in the world can ACTUALLY TELL if the alleged abuser actually sent an invite.
How we got our 4 week old app featured in the App Store
Ya, check him out on deepcapture. His name shows up every so often, and not in very good light.
The government regulations aren't there to create or protect monopolies. They're there to control monopolies that were likely to occur anyway, so that the monopolists can't use their position in an overly extractive manner.

Since these regulations occur at a local level, some of the rules are more effective than others, and some of them are straight-up corrupt. But the common case is not government creating monopolies, but rather government restraining them by regulating them.
> No one's software freedom is reduced if I release a closed source derivative of a permissively-licensed open source product

So no ones freedom is reduced if you get the power to sue anyone who modify or share the derivative product? Is this the statement being made?
That was my whole reason for asking; they seem common because of the media. Now that I see other comments here it seems really easy to get them which seems like something open to abuse. I am just surprised because they are so uncommon here.
Also fascinating that despite all the talk of Bitcoin only being used by speculators, there's demand for tools which allow it to be used purely as an exchange mechanism.
Ask HN: Is it the time to introduce OProfile like OAuth 
Signupp and SignIn in the multi-device world is so frustrating. Keeping one single password on 50 websites and 100 apps is not a good idea as well.

I had big hopes with the Open authentication or even with properties like Google and Facebook that they will ultimately solve this problem. But that never happened.

Infact, I have had bad experiences with spammy and dubious sites which ask for Facebook authentication,

I was thinking if there's a scope for much more elegant solution. To collect information in layered format from my name, email address, age, sex, location, interest, etc but to never store my password.

Can this solution solve privacy problem ?. There will be always site who would like to understand more from my usage patterns and behaviour.

But why, why today there isn't an elegant solution to share basic profile information with sites just for purpose of using it.

Would it make sense to add profile layer to authentication information by such open source solution.

Or to introduce a standard which define shareable profile information from one app to another. Do we know or don't we have right to know what facebook/linkedin can share with others ?
Your statement:

Being "white hat" gets you in trouble more often than not.

Is beyond absurd.
The point is Google should make their product attractive instead of relying of just leveraging their existing power to promote it. It doesn't have to be exactly 1:1 for people to be expecting at least the same quality.
I think this paints a rather meagre picture of software development in 2014:

> More or less everything is expected to talk HTTP, and it’s really easy to make things talk HTTP.

A lot of things that shouldn't talk HTTP are expected to just because there's an army of programmers who don't know better. Also, it's actually hard to make things talk HTTP, partly due to HTTP itself. However, much of this complexity is hidden, leaving people to think that

> devices are memory-starved, CPU-starved, and battery-starved.

In what freezing fucking hell is a dual-core, 1 GHz computer with gigabytes of RAM and tens of gigabytes of storage and 3D acceleration that can fit in my pocket memory-starved and CPU-starved?

The fact that so many applications perform computationally trivial things, but lag on such devices, has nothing to do with their processing power being low, and has everything to do with them being badly written. It takes a lot of effort to make an application lag on such a system.

> Browsers suck too

Browsers are fine as long as you use them for what they are meant to be used: browsing HTML files. Seriously, browsers have been just fine and dandy since the days of Opera 6.

What does suck, indeed, is when people try to use tools that were meant to make HTML docs look nice to build an office suite. They inevitably end up with an office suite that sucks, but that's not the browser's fault.

(Edit: just to be clear, the author kind of seems to imply some of these points, too)
Chrome uses NSS everywhere except on Android, where it's OpenSSL.
"uses math of all stages" - I don't think so! Source - post-doctorial mathematical researcher.
Watson Is Moving To NYC
>There is plenty of evidence

Then it should be easy to offer some, rather than just saying that it exists.
Data scrapers used Amazon cloud to reap biz bods' CVs, wails LinkedIn
European Parliament invites Snowden to testify
I make software, and I do not want people who use it, share it, or modify it to be under the threat of being sued. Legal violence is to me is near equal to physical violence, and thus a moral issue.

I do also not care if the legal violence happened because of changes an other developer did on my work. Just because they added something does not give them the right to use what I made into a legal weapon.
I wonder if restraining orders apply to third parties contacting on behalf of the restrained person? Suppose, it's violation only if it's proven that the person willingly made third party to make contact? (Otherwise it's nearly trivial to put anyone under a restraining order to courtroom, huh.)
But many DSLs can be implemented just as well without the use of macros.

This does not refute your point at all -- that macros can be very helpful when implementing DSLs -- just wanted to point out that macros are not a requirement for doing so.

Also, a DSL expressed using first-class entities will fit into and integrate with its host language more nicely.
Check the manual; magic_quotes, mysql_escape_string and mysql_real_escape_string have already been deprecated/removed.
Pizza Hut sold $1 million in pizzas through Xbox 360 in four months
Because this way the term "PC" become meaningless... http://en.wikipedia.org/wiki/Sorites_paradox
I read an interesting study concerning how our memory works: People who learned number sequences by heart, and the following weeks studied a new effective technique for remember numbers, subsequently did not remember the first numbers as well as people who did not study new memory techniques.

It suggests that childhood amnesia could be a result of us learning a new way of thinking when we grow up.
I don't know about that. Legal research for more than just answering a question like "does interspousal testimonial immunity apply in states which have not approved gay marriage when an out of state witness is called pursuant to a national federal criminal subpoena?" For that kind of a question you want to know if there is any recent law at all. So if this database is not kept up, it will be pretty much useless to answer this kind of question, except to the extent you want to get into the reasons for interspousal immunity in the first place.
Perhaps he will get medal from security officers, that is why he was reported... Oh wait...
HHKB Lite 2, small and supremely elegant. More cheap-n-cheerful than the flagship HHKB, but also vastly cheaper, and still in perfect condition after ten years of heavy use.

I love my HHKB; would buy again!
Can I just say; Your son is 11 and is making mobile apps in Objective-C. WOW. Kudos to him. He's shipping! That's really amazing and something to be celebrated in and of itself.
> Sales jumped 34 percent from the previous 12 months to $149 million.

Atlassian has a really good growth, I've heard of a ~30% yearly figure:

> Atlassian's 2011 Revenues were $102 millions [1]

> 2009 revenue was $US58 million [2]

Which sounds like an exponential 30%. Any financial expert to confirm we're comparing the right figures here?

> Scott Farquhar, who owns about 88 percent of the company with co-founder Mike Cannon-Brookes

> Accel Partners [...] now owns 10 percent of the company

Anyone knows how the structure of the capital works and who owns the rest?

[1] http://techcrunch.com/2012/01/16/atlassian-2011-revenues-102...
[2] http://www.smh.com.au/technology/enterprise/from-uni-dropout...
I really hope this doesn't fuck up the company offering. We are deeply embedded with Atlassian products / services. JIRA is an ingrained part of our daily business processes.

All of our developers actually like it - a first when it comes to bug / issue / story management tools. It has its quirks, but we haven't found anything that matches it to date.
It might already be considering that there is a substantial proportion that is "unknown" mining power: https://blockchain.info/pools

On the other hand, the heuristics of blockchain.info do determine block ownership are not perfect either: https://bitcointalk.org/index.php?topic=123726.0;all
"JavaScript is horrible."

> function byNum(a,b) {return +a>+b}
undefined
> [5, 10, 1].sort(byNum)
[1, 5, 10]

No, it's not.
AngularJS directives explained by examples on a mind map
EU parliament says Prism part of US econ/polit espionage and not anti-terrorism
There's a somewhat similar app I used to use called OpenSignalMaps [1] - except it would tell you the signal strength of your own network in your area.

I always wondered why OSigM weren't using the data available to them to construct a competition-analysis/referral app. Looks like these guys beat them to it.

Waiting for the app to become available in my country...

[1] http://opensignal.com/
I agree, but I don't find it obvious if following (adding to circles) someone on Google+ is a form of communication at all.
"haphazardly accumulated features" is not an explanation, it's a subjective point of view.

"it's not very liked one due to it's flaws", PHP is very well liked, just not by everyone .. which goes for most things in life.
I don think it should surprise anyone here that users with enterprise-size Python codebases aren't jumping to Python 3. PEP 373 doesn't end support until 2015, and I assume at that point RHEL or maybe even someone in the python community will pick up the torch (a la Rails LTS).

I think by far the more interesting question is what is going on with today's green-field projects (a.k.a. the enterprises in the making). Whoever steps forward to maintain 2.7 long-term will probably be charging an arm and a leg (Red Hat I'm looking at you) and so of course this is unaffordable for bootstrapped companies and ordinary folks will not be able to afford a security patched Python 2 install.

Meanwhile the statistics I've seen for green-field development are mixed-to-promising for Python 3. I know for my new projects I'm over 50% 3.3. And when the shoe drops with 2.x support EOL, I think that's going to give it a serious kick.
Collecting ridiculous amounts of data just because they can, without stopping to think what that data might be used for and is already used for.

Collecting data is their business model. All of the "services" they provide are just honeypots for their data-collecting operations.
Preventing duplicated requests in AngularJS
Model M with the nasty clicky sound.
How Reorganizing Our Content Increased Leads By 800%
Universality, primes and space communication
> If Google did send an automated email (which is unclear), then lawyers should be updating their advice to the subjects of restraining orders to ensure that their contact lists are purged appropriately.

so basically you are saying that when something in the law is not clear, it's the job of the lawyers to make it sure they give proper advice to the next person coming into that situation, while the unlucky first person just has to face consequences?
Here's my docker file for running a postgres 9.3 with plv8

FROM boothead/saucy

ENV DEBIAN_FRONTEND noninteractive

# Add repository and install PostgreSQL 9.3
RUN echo "deb http://apt.postgresql.org/pub/repos/apt/ precise-pgdg main 9.3" >> /etc/apt/sources.list
RUN apt-get update
RUN apt-get -y --force-yes -f install postgresql-9.3 postgresql-client-9.3 libicu48 wget

RUN wget http://www.mirrorservice.org/sites/archive.ubuntu.com/ubuntu//pool/universe/libv/libv8/libv8-3.7.12.22_3.7.12.22-3_amd64.deb
RUN dpkg -i libv8-3.7.12.22_3.7.12.22-3_amd64.deb
RUN apt-get -y --force-yes -f install postgresql-9.3-plv8

# Postgres is started now, shut it down and replace config
RUN service postgresql stop
ADD pg_hba.conf /etc/postgresql/9.3/main/
ADD pg_ident.conf /etc/postgresql/9.3/main/
ADD postgresql.conf /etc/postgresql/9.3/main/

# Create superuser, tempo db and plv8 language
ADD create_user.sh /
RUN /bin/bash /create_user.sh
RUN rm /create_user.sh

# Configure for running in container
EXPOSE 5432
# VOLUME ["/var/lib/postgresql/9.3/main"]
CMD ["/bin/su", "postgres", "-c", "/usr/lib/postgresql/9.3/bin/postgres -D /var/lib/postgresql/9.3/main -c config_file=/etc/postgresql/9.3/main/postgresql.conf"]

create_user.sh is basically service postgresql start; su echo <SQL> | psql; service postgresql stop;

This is fine for me to spin up a postgres instance at some known state for development, but it's a bit dissatisfying for managing the data separately from the container. Anyone got any tips for integrating volumes with this?
I have a friend who works the emergency telephone line and is getting increasingly frustrated with calls regarding Facebook. A typical call will have the caller complain that, "[person x] has written something horrible on my wall!" So he says, "hang on? They've written on your wall? So you're friends with them?! Just un-friend them!"

In fact in a recent review he was told off for groaning loudly on the telephone when someone mentioned Facebook.

However, you can see that if Google+ continues with it's desperate push for market share like this, there will be more and more instances like that in the article. People really won't know how to properly eliminate others from the online social lives, as easily as just "un-friending" them.
As someone who works in VFX I can sympathise with CCP on this.

However the real question is: why should port everything to 3? none of the software in VFX uses it, plus a lot of people aren't really up to speed with the changes.

What is the point? yes the language "purer" but that doesn't make my life easier......
Cookie law is snake oil-grade security, and giving a false sense of security is almost always a bad idea.

Real solution is fixing client software. But, meh, all popular browsers are made by companies that are - one way or another - heavily dependent on advertisement (thus, tracking).
Use bcache to speed up SATA drives (Linux)
Show HN: Tongue-in-cheek project to explore community voting using meme altcoins
Meme altcoins are pretty ridiculous, and I couldn't help but notice the storm-in-a-teacup that was the Coinye West launch (currency symbol COYE, a parody altcoin named after Kanye West). I'm not sure if there is a better time to learn about hacking on altcoin daemons!

Bitcoind and its forks expose a JSON-RPC server enabling API wallet management and account balance calculations. My vision was to allow Coinye miners to vote for their favourite Kanye West songs by sending coins to specific Coinye addresses. I hacked up a small Python script to create a Coinye address for each of Kayne West's music tracks and to generate a static web page listing the current voting scores.

Source at:

https://github.com/brotchie/coinyesbest

https://github.com/brotchie/coinyesbest/tree/doge

Resulting static page at:

http://coinyesbest.com/

My primary findings after wasting time on this: There is a gap in open source tools to parse altcoin block chains and calculate the current balance of any given address.
Well, doughnuts and Timmie's in the am and beer in the evening.
"Is anybody else genuinely annoyed that sites such as angel.co use these as legitimising signals of worthiness?"

Absolutely. AngelList is all about institutional brands, and that's kind of sad. Teams are summarized by where they studied and worked, not what they accomplished, or what people think of them.

It always struck me as a lazy 'old boys club' method of filtering people and ideas.
Please don't spout this false old lie. Its been correct a few hundred times already on HN, so how can you have missed it?

If the tamper proof hardware resist modification by everyone (including the people who produce/sell them), GPL is perfectly fine with it. Sell it, bake it, do what ever you want. However, if a producer want to sell tamper proof hardware which they exclusively have a way to tamper with, its not tamper proof and it is not fair to the person who bought it. At minimum, give the owner of the device the same right to do modifications.
> One of the points of the article is that it's hard to tell and control what is happening on the Google+ interface and system.

I was a little skeptical of that part. Is it really that easy to accidentally invite someone?
Few companies in the world can be said to have tried harder to destroy the individual's right to privacy

Go on then - what examples do you have of Google "trying hard" to destroy individual privacy rights?
[social venture] The Wello Water Wheel Story : Cynthia Koenig
He was addressing "go learn some more (let's say 5) languages and then come back"
If violating a restraining order is a misdemeanor or other crime, which it certainly is if bail is set, then the burden of proof goes the other way at trial (which we aren't at yet).

The state must prove he sent it (probably, I am assuming, knowingly --- I doubt that fat-fingering is enough given due process requirements), and they must prove it beyond a reasonable doubt.
Security risk.

Somewhat similar to the reason you don't keep all your money in one financial institution. Imagine what would happen if you served/consumed everything with credentials from only one SSO provider and that SSO provider got breached. If your profile were to be attached along with your SSO, your entire identity then becomes at risk.

While I do not like remembering thousands of usernames and passwords, I swallow it as the bitter pill that comes with the necessity of keeping my eggs in different baskets.
I do not understand why you want to get paid for it?
Alternative, a tamperproofed device can be immune to any form of modification or replacement of the software contained in the device.

Sure, you can develop one of those, as long as you subsequently provide a means to circumvent the tamper-proof mechanism. There is a critical semantic distinction that I think a lot of people are missing: the GPL does not restrict your ability to develop any sort of product you wish, it merely imposes additional obligations designed to ensure your users have the same freedom of development that you had when you developed the device.
Great long and transparent post by Hana.
The best investment an Australian developer can make is a passport.
Please see my reply to Patrick’s sibling comment: https://news.ycombinator.com/item?id=7030013
Best resources for JavaScript design patterns
If you're talking about Windows, then maybe it will improve once this issue is fixed: https://code.google.com/p/chromium/issues/detail?id=137692
I've similarly only been using the tool a few minutes, but this specific example - adding an extra row without doing any extra, manual work - seems to be eminently possible with Easel (as does automatic resizing on adding/removing rows) - the magic is Bootstrap behind the scenes, but it certainly works!

Hint: try creating a page using the 'Home' template and messing with the rows/columns in the centre to get a feel for it (though it seems to work on the blank canvas, too).
Right you are talking about a temporary restraining orders, right? For a full fledged restraining order there is at least supposed to be a showing of evidence and an opportunity to rebut the evidence on the part of the other party, right? The article you link to seems to lump these together with no real discussion of the process.

The idea behind a lax standard for TRO's is that if there is danger, the court should temporarily try to mitigate it, pending further process.
Doctorow: 2014, The Year We Lose the Web
I would argue that your reply is the one that's absurd. Why is the quote you mentioned unreasonable?