skysight-inc/HackerNews huggingface dataset:
The part of the work you don't see is the hours, days and months spent, usually unpaid, spent auditing code to find the bugs.

It is like the anecdote of Tesla and Ford and knowing where to put the X[0], you aren't paying for time or manual labour - bug value is derived from how much damage it can cause, what its worth to Facebook to not be exploited and what the exploit is worth to the bad guys on the black market.

[0] http://www.snopes.com/business/genius/where.asp
When to raise using Crunchbase data
OTAs have all kinds of weird tricks raising and lowering prices to get people to book sooner rather than later. Instead of realizing that providing good service with a nice clean interface is the way to go they use these cheap tricks. Agoda, Booking.com and many other OTAs all do this sort of thing. Sometimes it's as simple and clearing your cookies to get a lower rate.
Intercom let's you have a one to one conversation with a specific user. We send a notification that doesn't elicit a one to one conversation - it's purely informational. I use the word broadcast because it generally implies a lack of two-way communication.
I can't believe they're finally fixing the pagination bugs! Super excited.
It's even simpler, most of what I've seen they suspend their machine with the visible tab on facebook, resume and check what's new.
Totally agree. It is such an important part of a Django project where Models are involved. Every release of Django brings exciting and well thought through features. Future looks great for this awesome Python framework!
Javascript, Java, and PHP right up there at the top.

Yep, we're doomed.
Do this often enough and the airline will ban you. This is hidden city ticketing and repeated abuses will lead the airline to simply drop you as a customer.
Recently, I've been having run working on Huginn (https://github.com/cantino/huginn) and BeeLine Reader (http://www.beelinereader.com). Both are tools that augment people's abilities, which is one of my current interests.
One of the best parts of that 2011 thread is the number of people asking for Canadian support, then how quickly Stripe actually ended up supporting Canada (within 1 year roughly).

We desperately needed Stripe and you guys delivered so quickly. Much appreciated.
Unfortunately, I cannot agree with you completely.

If there is no language constraint and the system resource constraint, to the problem we have understand so far, using Java will be the fastest and easiest way without hashmap.

Load the complete file as a string (depending on how the size of the data set, up to 2^31 - 1), then using string.indexOf() function will get the best result.

The underlying algorithm for indexOf() is implemented by JVM in C code which is must fast than any other implementation.

My gut told me that it's weird to use hashmap to do string lookup. Everybody knows hashmap is used to lookup key-value pairs. The real reason for not using hashmap here are:

1. hashmap's lookup Big O is O(n), but not the build cost. if the data set size is huge, it takes long time to build the hashmap since every new element exceeded the initialCapacity being added needs a rehash

2. the underlying implementation of indexOf() will use a sort of algorithm called "automata" or something else to do a fast search within a string.

So there are lots of alternative solutions. Don't always think there is only one. I'm not in this field, and I'm not interesting to get into to it too much. But I don't think the best answer is that tiny change.

This is why I suggested to consider if you are doing application level optimization or changing system level algorithm. Building software is a lot more than code manipulation. Understanding requirement is the first step in the SDLC (Software Development Life Cycle).
Perhaps because time elapsed between when you searched and when you searched using the Incognito window? Perhaps because you hit a different load balancer with a different cache?

It's quite possible that nothing nefarious is going on.
CCTV Attempted Arson At Petrol Pump Footage
CCTV Attempted Arson At Petrol Pump Footage.
Check out Payzippy.
I am rather surprised by this constraint on the model, as an extremely straightforward modification to the standard SIR model allows for diseases to reach an endemic equilibrium state.
Wait! There's something cheaper from Canada???
It's not five data points.

It's five trials with many, many data points - what you're fitting is a time series.

Hell, for some epidemics (epidemic modeling being what I do for a living) I'd kill for five example cases to fit a model against.
Effective Ways to Promote a Mobile App
That's why I specifically said Warren Togami - he's taken over from Charles Lee as the main driver of Litecoin development and has done an excellent job at that.
Bitcoin is the Internet of the economy
Brand also worried that declaring that counterterrorism officials “have been operating this program unlawfully for years” could damage morale and make agencies overly cautious in taking steps to protect the country.

It's great to have another voice speaking up against mass surveillance. Still -- you're telling me these agencies are in all likelihood committing crimes against the American people, but we need to be careful not to hurt their feelings?
Travelling Minimally
First, it's viruses, not virii. And viruses are not the sum totality of infectious diseases.

Second, as I mentioned in another comment, a very easy extension of this model allows infectious diseases to reach a state where they exist at equilibrium within the population. I have no idea why the authors didn't use them.
Somewhere there's a bunch of people thinking "at least that's all that's been leaked".
Languages are being forced down developer's throats all the time, I don't see how Objective-C is an exception. Microsoft did it with C++ and later C#. Google does it with Java on Android. Netscape did it with JavaScript. I could continue.

Even if a platform can technically support other languages reasonably well, whatever the platform vendor favours tends to be the most popular and best supported choice.

I don't see any connection between how popular a language is and how well-designed it is.
Completely agree. To add, IMO the most valuable application of this exploit would have been to deliver drive-by malware. There are some groups that pay $0.5-3 CPM to get their Javascript onto much less targeted web sites. The Yahoo malware would have cost nearly double that.

Getting drive-by traffic is one of the most expensive pieces of the puzzle for malware groups. Last time I checked the forums, a thousand visitors was selling for around a dollar, and that isn't even well qualified traffic.

Having access to Facebook and over a billion pageviews per hour would be worth millions to any group who is capable of handling that type of volume. If they were smart about it, they could probably get away with it for up to a day (the Yahoo malware was active for a day and they didn't obfuscate it much).

Back of the envelope value is around $1M per hour, and that doesn't include the premium for the higher quality of traffic, but does assume you find a way to inject across all the servers and somehow not display it to Facebook internal IPs.

A big group with some fresh browser 0day would have loved to get their hands on this.
Why Learning in Classrooms is better than online resources. Part 2.
I'm an american, and I've never paid to transfer money to another bank account, even at another bank. Im not sure why people would pay for that, other than not knowing they dont have to.

edit: If people are curious, its this: https://home.capitalone360.com/p2p
Tarkovsky Films Free Online (2010)
It's interesting to think of this from your perspective and I fully agree that agency will remain what people want.

I don't think its far off to consider a world in the not-so-distant future in which VR expands the possibilities of the universe, and therefore our agency.

Think of the limitations we have now in reality. There is one currently livable planet, clogged highways, limited resources, way too many people, the inability to jump up and fly across the world, etc. I can see VR shattering the boundaries of our current agency in reality, just like Oculus and Valve are certainly on their way to doing with technology.

And with such a highly immersive environment and increasingly interconnected world, I imagine it might even be nice to just plug-in and exist almost entirely in a virtual world. I don't think it is as much a matter of addiction as just, what might be better in the future.
> But you're telling me these agencies are committing a crime against the American people, and we need to be careful not to hurt their feelings?

Its worse than that: we have to be careful to avoid making them cautious about committing crimes against the American people, the rule of law, and the Constitutional order of government.
Voto Latino Google+ Hangout with Katheleen Sebelius Tomorrow
I've heard Marx described as having been great at diagnosis, but terrible at prescription.
I'm not sure why National Auto Parts would needs a Perianesthesia nurse who runs a website called SuicideLaws.com, but they seem to be paying him well enough to drive 1992 Ferrari 512 TR.
How to Get Others to Do Your Social Media Marketing for Free
I just launched my online school, any feedback to make it better
Hi, I just launched my online school (learnjoomlafast.com) that teaches non coders and beginners how to create websites with Joomla. I need your feedback on how to make it better!
Well, it makes sense that she'd say that since she's one of the two that rejected that the program is illegal.

I've been reading Tim Weiner's Enemies, a history of the FBI and one thing stuck with me. That was that there was a period of time when the FBI was incredibly useless because of a previous Supreme Court ruling that wiretapping was illegal and then FBI agents all began to misunderstand what they could and couldn't do. That lead to a breakdown in communication and procedure between different offices and several terrorists that could have been caught slipped by.

I'm not saying that Brand is right, but there is reason to worry that this could happen again. What needs to be done is a clear declaration of our fundamental rights and a watchdog court that won't let the agencies overstep in their pursuit of justice. The agents have to know their boundaries, we have to know their boundaries, and we have to know that they know their boundaries. The whole FISA court stuff is ridiculous.
The advantage over zoho is:
1. looks
2. simplicity of setup/use
3. integration between the subsystems
4. integration between companies - if you run multiple companies you can manage them from one account and one inbox without logging into each one separately
According to the article, three out of five members of the board held the opinion the program was illegal. That's a little bit different than what the title of the article suggests.
I've been working on such a project for a couple years as a solo/on-the-side thing. It's not available as a turnkey product yet, but the technology is working and can build arbitrary amounts of realistic test data (based either on your private data sets, or public sources like census data). I'd love to begin working with others on how exactly to integrate this into their test and development workflows. Email me at ken.woodruff@gmail.com if you'd like discuss further.
It's much more useful to us to watch Dogecoin fork and get more valuable data on how forking events happen to crypto-coins.

It's a pity that Dogecoin uses such an out of date codebase - having it more up-to-date would give a nice target with real economic value and importantly transaction volume for testing out exploits. (for crypto-coins "exploits" can mean economic design issues which can't necessarily be fixed with code changes) The very short block interval makes attacks like selfish mining easier to try out for instance. Similarly because they kept the 1MB blocksize limit, but with a 10x shorter 1m interval, it gives insight into what Bitcoin would look like if the blocksize limit was raised.

Keep in mind that most people in the crypto-coin dev/theory community don't actually own that many coins, and in any case are insiders that can easily move their coins to whatever crypto-currency is most likely to grow. The smart people aren't wedded to any particular currency, but rather the growth of crypto-currencies in general. Understanding how they fail is essential to making crypto-currencies succeed in the long run.
People's Republic of Offshore
They're not committing crimes against the American people. Not one American has been found who has been demonstrably harmed by any NSA program. Without harm, there no criminal act. That said, something can be unlawful without being criminal.
This is something that I am in complete agreement with, but which took me a while to realize.

I was learning how to code on my own for a long time. I learned a lot. But I also developed some bad habits and realized about 6 months in that I hadn't met a single other programmer since starting to learn.

So I signed up for a developer bootcamp (Code Fellows in Seattle) because my aversion to traditional education was - I realized a bit late - the root cause of my aversion to the "classroom."

Since starting, I've at least doubled my knowledge and grown my network base by several orders of magnitude, and its only been 2 weeks.

It seems like I really wasted a bunch of time not meeting people and collaborating, and being in an environment where that is not only required but also easy is very enlightening.
Cool. So just booking one flight pays for almost a years worth of VPN service.
"As someone who had to learn [Objective C] to do iPhone dev, I find it objectively terrible"

I see what you did there.
I hope the archive.org team is already prepared to mirror Google code, just in case it shuts down. Would be so sad to lose all the code
It would be wonderful if all wiretaps were ruled illegal.

It would also be wonderful if all law enforcement officers were required to wear uniforms or identify themselves when in the course of their duties.
When I first heard about dogecoin I laughed. When I saw the circulation I paused. When I learned more I got interested.
Don't think either party has disclosed that.

>and due to a valid scenario he theorized involving an administrative feature we are scheduled to deprecate soon, we decided to re-classify the issue as a potential RCE bug.

I imagine it might be some feature that could maybe be triggered internally through a file:// or http://localhost/ URL, and in doing so gain access to an interface that can issue shell commands. That's pure speculation though, and I'm probably way off.
> Microsoft did it with C++

Why do people keep repeating this urban legend?!

I was already doing C++ in MS-DOS (Borland), UNIX (vendor's compiler) and Windows 3.x (Borland), long before Microsoft compilers were any good.

ALL C vendors were pushing for C++.
Is it? We're talking about it for four generations at least now, and all men are still irredeemably sexist. When we know that it got small enough so a man has a workable chance of not being sexist? 25 years? 50 years? 100 years? Who would determine that and how?
Considering Facebook's good security team (and Yahoo's notoriously poor one), I suspect that they'd probably catch the malware and perform some sort of emergency action in under an hour.

A much more devious attack would be modifying some of the code to silently siphon off login credentials, and grabbing the user database. Then once they were satisfied with that they could go with the malware route.
We could maybe use another teammate if you think you can be committed and be dedicated in working at least 6+ hrs/day (you need time to catch up as well).
That's awesome to hear man and glad that you could agree with me on those things. Yeah it comes down to a motivational factors of wanting to learn code and getting your projects actually done in a shorter space of time. Good luck with the bootcamp man :)
Is the actual battlecode execution engine available for someone to try? It seems like a nice project to set up a open battlecode server..
http://en.wikipedia.org/wiki/Edward_Snowden
> I've heard Marx described as having been great at diagnosis, but terrible at prescription.

Marx and Engels weren't all that bad at prescription -- a substantial portion of the 10 key concrete policies for "advanced countries" in the Communist Manifesto have been widely and successfully adopted in the modern, developed, "capitalist" world.

Lenin's rewriting of Marx's program to a very different one, with notionally the same end state and, in many cases, similar near term policy changes to be applied in very different contexts, that was supposed to work in conditions which had neither the specific problems Marx's program was designed to address nor the foundations from which Marx's program was designed to address them, hasn't worked out very well, but that's a different issue.
Unix vendors didn't push C++-only platforms, nearly all the libraries were in C. Contrast to MFC, ATL, COM etc.

(Yeah COM was supported for VB too, but C-hostile)
From the article, he says just shoot him an email.

If you find this interesting and want to hire me to do a security
focused review or penetration testing in your own (or your
company's) code, don't hesitate to send me an email at
reginaldo@ubercomp.com.

*edit: formatting
HLearn cross-validates 400x faster than Weka (2013)
Yup, everything's open source, setting up your own private competition is quite doable.

https://github.com/battlecode
How was Snowden harmed by an NSA program? He's admitted to committing a federal offense and therefore cannot return to the US or countries with an extradition treaty without appearing in federal court. That's pretty "standard" judicial proceedings, no need for NSA powers.
My first contact with the language was in 1998, when I had to port a particle simulation engine done with Objective-C/Renderman to C++/OpenGL. From a dying NeXT Cube to then raising Windows 95 mainstream systems.

Objective-C has a nice appeal given its Smalltalk semantics for OOP.

However I don't like:

- lack of modules, using prefixes is so 70's!

- @ in all keywords and Objective-C literals

- manages to have method names even longer than Java enterprise frameworks do

- the way properties are declared

> Heck, even back in the day, the first browser was developed in it, as well as the first true first-person-shooter.

Historical accident, as these were the systems those developers had available to them.
Well, there are a lot of applications that can be done with them through the integration with IFTTT and through their API. As an example I am using it as a wake up alarm and it surprisingly works. I wrote about my experience with it here https://medium.com/the-internet-of-things/b8b2d741910a. I also made it turn green through ifttt when the TSLA stock which I am investing in rise up by 3%. At big web services companies as Microsoft, they also use them as a visual fast way to monitor the health of the web service. The possibilities are just endless on what you can do with them.
Except for CORBA, ever tried CORBA with C?

UNIX enterprise programming was all about CORBA, not C related stuff.

That is how we eventually got into J2EE.
Does it matter? This is a tactic by the US government to make the public forget about crimes they're committing against the public's privacy.
> They're not committing crimes against the American people. Not one American has been found who has been demonstrably harmed by any NSA program. Without harm, there no criminal act.

Criminal acts, in general, don't require harm (some specific crimes may involve a harm as a required element, but that is not generally the case -- generally, crimes exist to prevent harm, but that does not mean a harm must be realized for a crime to occur), and, in any case, depriving the American people of the popular sovereignty by exercising the power of government inconsistent with the constraints in which it is granted by the people through the Constitution is, in and of itself, a harm.
Maybe it's too late but I thought this was a job title.
The GNOME guys built an entire desktop environment on top of CORBA and C...
Gang Rigged Pumps With Bluetooth Skimmers
The Upper Michigan Blizzard of 1938
Any good resources for getting started with day trading?
The title is a little misleading; the traffic wasn't directed to the building, but instead to two companies nominally registered there. Sophidea.com looks to be hosted at Hurricane Electric in Fremont, and DIT like it's at PSInet in Atlanta. The two companies appear to be related (a trace of sophidea.com goes through dynamic-internet-technology-inc.10gigabitethernet1-1.core1.fmt2.he.net).

I wish they had some numbers illustrating just how much traffic "most of China’s 500 million Internet users" would represent. I bet it would saturate a 10 gigabit line ;)
Bubblicious? Simple explanation of super high startup acquisition prices
Markdown based content/blogging platform
Take a look at the first 60 seconds of this video [1], I don't believe it's possible to watch this video without knowing that it's a sponsorship deal he has.

I view it the same way that nobody would look at a football (soccer) team's shirts and think "wow, those players must love that company!" despite there not being a "this is an advertisement" text on the shirts.

If I wanted to deceive viewers then I would change the terms of the deal to not show the 5 second clip or the floating 3D laptop, and to not have a link in the description of the video (or at least not one that can be seen to go through an adserver URL), then I would get him to make his comments about the laptop more subtle, but more frequent across all his videos. This would still be completely legal, despite having much more potential to mislead viewers, but certainly arguably less ethical.

Here [2] is an example of (non-YouTube) another thing I've done for a brand, to show that when it isn't already imminently obvious we do make sure that the paid nature is explicitly stated.

So: do you disagree with my judgement that there is no need for a specific note on such an obvious piece of activity? I would hope and assume you will once you see it, but if not then I'll certainly go get a few more opinions to see if I should change mine.

[1] http://www.youtube.com/watch?v=8CiQfMtSOgM

[2] http://www.pcgamesn.com/sponsored-post-introducing-qpad-prof...
Bridal Dresses
At Gracewedding Online Shop Find Beautiful Bridal Dresses, Bridesmaids Dresses To Your Perfect Wedding, And If You Want, You Still Can Choose Mother Of Bride Dresses For Your Sweet Mother, Or Pick Flower Girl Dresses To Your Little Girl. Even Find Your Prom Dresses, Evening Gowns, And More Occasion Dresses In Here For Your Every Party!
It's quite evident that Microsoft was pushing C++, their tooling from that time was certainly focused on it, most prominently MFC I think. Plus they never bothered to support C99 in MSVC, literally forcing people towards C++.

Wasn't aware of anyone pushing C++ outside the Windows world, but I don't think it weakens my point.
Do I really care if Snowden worked alone or with others to bring attention to a massive secret spying program directed against its own citizens that even the governments own review has characterized as both useless and illegal?
This pretty clearly demonstrates to me the problem --- the stripe developers and management themselves don't actually understand the problem.

Patch is right, you need to be PCI compliant and Stripe (despite their recent funding) is apparently misunderstanding the problem with their approach.

And frankly, PCI compliance be damned, can ya'all not see how the "redirect to page" way is more secure.

Stripe hiding behind "our code is fine, only if you get hacked is it a problem" is, quite frankly, disgusting blame redirection.
I'm OK if they want to look at my data. I just want to know who and when they look at it and how much they are going to pay me for it. 1,000 Bitcoin gets you everything I have data-wise.