skysight-inc/HackerNews huggingface dataset:
I doubt she has been taught to repeatedly take off 10x8s.

I find it more likely she been taught that it doesn't matter what she takes off: as long as she gets to the end without error, her answer will be correct.

I imagine that she has reasoned that taking off 50x8 is difficult because she doesn't yet have instant access to 5x8 (which would be rare for her age group) but she can confidently subtract 8s without error (also rare). Perhaps she reasoned this earlier and has been consistently using an inefficient version of the method when she doesn't need to. In that case, she will likely be able to fix this herself when she realises.

[Edited to add: I interpolate this because I am a schoolteacher who teaches math. It's a big part of my job to recognise what support a student needs: here, most likely she needs 8-times-table support.

The method that I describe is well-enough established in the school system that university entrants use it. Of course, it's possible that her teacher has taught her an inefficient method, but that would be unusual. There are bad math teachers in elementary school, but that's not a typical teaching error.]
I'm guessing you state this as a person that has never been to Austin.

Travis County[1]:
Highest elevation 1420ft
Lowest elevation 425ft

San Francisco:
Highest elevation	925 ft (282 m)
Lowest elevation	0 ft (0 m)

Thanks for your baseless statement though.
Exactly teachers have a lot of leeway in how they want to teach something. The most common reasons for failure are that the teacher does not understand exactly what she is teaching. That is a failure of the district and school in not recognizing that the teacher is not well-trained to teach the subject matter.
The solution: a catapult.

Fire the message over Army B with a catapult.
why not... i'm not teaching the dictionary meaning of the word, i'm teaching the concept...
Despite the warning to the company back in 2010, I'm not sure he should be publishing this. He's putting the 2000-odd users at risk by teaching us how to get their passwords and usernames like that, it's even worse if we can get at email addresses too. I would bet the majority of those registered reuse the passwords.
afaik Opera is the leader in standards.
Read Techcrunch faster
I absolutely agree. There is a huge, amazing array of concepts that never gets touched upon because it is important that students learn to divide large numbers by hand. They were designed for an era where "computers" were people and companies hired people to keep, literally "the books" in order. That world disappeared decades ago, but this relic remains.
Lattice, I never heard of it when I was in school. When I first came across the term about two years ago, I realised I had already worked out the algorithm a few months beforehand.
what yakov says isn't fully accurate. there are 4 voice channels that sum up to around 50kbit. and the fdr recording data is specified at around 12kbit. check the bea working group document

ironically part of my master thesis is about blackboxes and satellites. iridium has been working with some company about the topic(i think, i wish i remembered the details, but you can just google them). but generally iridium is slow right now(that might change but when i say slow i mean less than 4kbit slow), and i think the main reason why it's still there is because it covers the poles.

rolls royce actually already deployed a thing that transfers data through satellites, so you can actually get live engine data. this is almost ironic since their engines seem to be so crappy that a significant portion of them requires replacement according to qantas.

inmarsat on the other hand is much faster. you have to consider though, in a lot of regions you have way more planes than you have bandwidth. also inmarsat is already heavily used by ships(which from what i heard have a lot of virus infested windows pc's sending bogus junk). there is no way

the main issue is that we can easily have way more planes than we have bandwidth per spot beam

[] http://www.bea.aero/en/enquetes/flight.af.447/flight.data.re...

[] http://www.telegraph.co.uk/finance/newsbysector/transport/10...

[] http://www.rolls-royce.com/about/technology/systems_tech/mon...

[] http://www.inmarsat.com/about-us/our-satellites/
When I tried Opera, it returned Chrome 31.
Relevant Futurama Quote:

"Leela: Didn't you have ads in the 21st century?"

"Fry: Well sure, but not in our dreams. Only on TV and radio, and in magazines, and movies, and at ball games... and on buses and milk cartons and t-shirts, and bananas and written on the sky. But not in dreams, no siree."
What's the actual problem here? How many fatal crashes of commercial airliners with black boxes have ultimately not been root-caused? I don't think it's very many. Is the problem that it doesn't happen quickly enough? Is the fear that another plane might crash for the same cause while people are still investigating the first one? I'm not sure this is based on anything rational.
I'm getting really tired of the complaints from teachers and parents about these education reforms. Not because the reforms are any good, but because they're so tiny and insignificant.

"School math" is already an absurd parody of the real thing (rather than repeat the argument, see Paul Lockhart "A Mathematician's Lament").

And I'm supposed to get up in arms about switching to a slightly different long-division algorithm? Seriously? These parents and teachers are so ignorant of mathematics that they can't even form coherent arguments about what they don't like beyond "it's different from the steps I learned to mindlessly repeat as a child".
That does not look like a site meant to be used, it looks like a site to be listed on Google.
whooooooosh

Nice one :)
I don't think it's a two way link. That a pre-occupation with monetary success implies self motivation and entrepreneurship doesn't mean that the reverse is also true.

Also I think it's OK that the American Dream is about individual economic mobility. But I don't think it's about the individual, rather it's about the idea that any individual can achieve their dream. Or perhaps that there aren't a set of people who can and others who cannot.

Whether or not American politics have been faithful to the American Dream is a separate discussion.
> [5] + [5]

"55"

This is why people don't like JavaScript.
Namespace prefixes are not that difficult to configure once you know about them. But if you're just starting with XML, probably because you need to extract some information from a document you've been sent, you don't want to learn the theory of XML, you want to get the data you need out and get on with adding business value. So you find a tutorial, you write an xpath, and it doesn't work. You try removing the foo: prefixes in your xpath, and it still doesn't work. This is not the experience that a technology should give new users. A default of matching ignoring namespaces would not make anything impossible.
I'm not shocked either, but it is an annoying reminder that the market will not tolerate end to end encryption.

You can't discover someone's marketing preferences if all their habits and speech look like random noise.

For some software producers, security is a bug, not a feature.
Basically yes. As he did, he managed to get the API key by doing a TCP dump.

From there he was able to use the key to get the users and plaintext passwords. Very much wtf.
Somebody is trying to outshine Mt. Gox in terms of amateurism. I wouldn't be surprised to find a number of other vulnerabilities (SQL injection ?). Who the hell thinks it's OK to store non-encrypted passwords in this day and age? It's not like you don't have a major security breach every month...

Also, I like the 'handler.php' endpoint returning some kind of ugly pseudo-SOAP. Ugh.
It's a timebomb. If the company won't fix it then the problem gets worse and worse, waiting 4 years before setting it off is long enough.
They've already screwed over their users to such a degree with this implementation that the only sane thing to do is to warn all of the user base to stop using it at once and never go back.

What's described in this article indicates a level of incompetence far beyond any hope of forgiveness by those users. If there was any reason at all to trust the API's designers, then what you describe would be the correct response, but this is very much a case where the only rational response is to tell everyone to leave immediately, forever. It's truly an unforgivable lapse of technical judgement.

It's not the way it is because of some honest mistake that someone made, like most security bugs are. This was by design, and it's bad enough that there's no reason to believe that the designers are capable of coming up with a better design.

EDIT: As others have pointed out, he did warn them. Even more WTF then!
For my browser diagnostic needs, I prefer http://ifconfig.me/

Memorable url, shows ip address, shows user agent, and much more. As an added bonus, if you:

curl ifconfig.me

It responds with just your external ip address.
It generates that text from geolocation and is a brilliant move.
VEVO releases SDK to offer videos to third-party developers, and monetize them
Fair enough, I retract my statement :) Maybe people are not surprised after all.
That may be true of existing black boxes, but a purpose-designed solid-state black box wouldn't have to be very big. Especially if it was optimized for surviving impact with water rather than, for example, a mountain.

In fact, I was just thinking about how you could probably put a miniature blackbox in every single airline seat. Airline seats are already designed to float, and you'd only need one of them to be recoverable. Such a black box might not be capable of storing everything traditional black boxes do, but if it managed to capture a last moment GPS position it might make it much easier to find the regular black box.
So, if the plane is traveling at 13 km a minutes and you have a 20 minute window, it's going to take a long time to find it.

Doesn't the technology exist to detect low power signals from a much greater distance? The US military must be able to do it?
How many fatal crashes of commercial airliners with black boxes have ultimately not been root-caused?

I am not sure what you are trying to say.

The blackbox is like your log file on a server: the flight recorders (flight data recorder and cockpit voice recorder) in aircraft, (wiki). So if you want to know what happened to the aircraft, whether after a fatal crash or after a hijack or after emergency landing, the blackbox is ultimately the best source. Don't forget there is a legal responsibility.

It is totally rational.
LTCM was not the only outcome of it. Pretty much of all of modern finance is.
But if you were broadcasting location and velocity at all times, even if an aircraft lost power, you could project where the "unplanned water landing" would occur. That seems helpful.

I wonder if Google's Project Loon [1] would be of any use here.

[1] http://www.google.com/loon/how/
IMO, the only reason you would say that is that you either know nothing about Mathematica, or that your knowledge of it is very superficial (speaking as someone who uses it daily).
"If the watch was so smart, why didn't it tell me at 9 PM that it was low on energy and that I should put it on the charger overnight."

Not all people have the same sleeping pattern. While 9PM may be cool enough time to remind you to recharge the battery, it will be a disaster for other people. I think either of following will be a great feature to add: 1) auto-recognizing sleeping pattern of watch wearer (may be hard to implement); 2) just to add an option in system setting your usual sleep time.
A Mathematician's Lament is a good document to read when thinking about this. Link for the lazy

http://www.maa.org/sites/default/files/pdf/devlin/LockhartsL...
The countries with the highest number of female executives
Easy way to tell is if it is available from the author's website.
Overview of projects working on next-generation secure email
For me the real achievement of Wolfram is the visualization capabilities. The knowledge bases are nice if you happen to be interested in a domain that is represented, and they make for great (controlled) demonstrations, but Wolfram Alpha (which taps these same knowledge bases) really fails often when making arbitrary but reasonable queries.

I think Wolframs visualization libs set a high bar, though, and I hope non-closed communities (like the python scientific/mathematic programming community, the R community, etc) will rally to meet the challenge.
And #7 is missing a minus sign in the exponent. Otherwise the whole thing diverges.
The Danger of Part-Time Work
> Pythonic programming obeys explicit over implicit, which which if you want a lazy version you explicitly use a lazy version.

What does this have to do with anything? If the construct was defined as lazy, then it would be just as explicit. There is nothing about generator expressions that says "here, here, this is lazy".
It's totally stupid that this is not itself Open Source.

Otherwise, it's got potential and probably is better than GitHub's choosealicense thing
I think you got a detail wrong.

I think that the app can only access all users registered with its api key. Same for passwords.

You say "all users registered on the site", the api says "Note, this can't be used to lookup just any user's password – the user must have been created by the API account."
Building a grid system with Sass
Sorry to sound cynical, but having seen the glacial pace of progress with Godus, thanks, but no thanks.

Kickstarted, drip-fed games, are not my cup of tea.
Please don't just duplicate work that is already being done. Partner with http://tosdr.org/ instead
My knowledge of what is and isn't practical with streaming technology isn't much better than that of a layperson.

I do find the aviation industry to be sometimes peculiarly behind the times. For example, a few years ago, I wondered online why airports did not have constant video recording of the runway and taxiways. Such would have been enormously helpful in solving many accidents, such as the SST crash.

But an airline pilot argued with me, saying that such would be cost prohibitive and thoroughly impractical. I was baffled by such statements, given that every 7-11 had constant video surveillance.

I do follow air crashes and the subsequent investigations, the engineer in me just cannot resist. The investigations are so thorough these days that it's pretty rare that the cause and chain of events are not thoroughly understood. The only issue is sometimes it takes years, which can get pretty frustrating for people (including me) who like instant answers. The mitigating factor is accidents are now extremely rare. I don't think that the cost of a live streaming system is clearly worth it.

The black box system has turned out to be probably the biggest single factor in improving safety ever devised. They work great, and the aviation industry is (naturally) very conservative about changing things that work.
This just speculation with close to zero evidence. It could be coincidence, it could be real-time retargeting based on web traffic, etc.

Dominos buys lots of online advertising so the chances of someone seeing a dominos ad straight after talking about Pizza are very high just by pure randomness.

If you read the details of the privacy setting it's about Microsoft targeting based upon profile demographics (gender and age).

Skype are pretty specific about what they use to target and the reasons they process your messages in their legal docs:

http://www.skype.com/en/legal/privacy

So let's not jump to conclusions without actual evidence.
Yes, the murderer is still guilty of murder, just like the fraudster is still guilty of fraud.

But this doesn't account for the additional damage caused by complete reliance on "evidence" that shouldn't even pass a sniff test. One would very much fault a prosecutor for continuing to press a murder case with the sole piece of evidence being a typewritten note saying "I, John Smith, committed this murder".
It's A Fork-Off: Tasting The World's Foulest Food
It does make other bogus assumptions though. Normal distributions, risk free interest rates,...
Non-encrypted passwords are an artifact of legacy systems, and some modern businesses believe that the risk of plain-text passwords being leaked is lower than the risk of systems breaking due to updating passwords/authentication to an encrypted schema.

Some modern businesses don't make the best decisions.
The Math.abs is run client side.
When I say plaintext, I mean like a .c file--a bag of bytes that may or may not parse into the AST you intend. Modern editors dress plaintext up with syntax highlighting, auto-complete, folding, and such--the code has a veneer of structure--but the basic representation remains plaintext. (And for good reason... plaintext is easy to edit with existing editors, tractable, easy to parse, somewhat easy to tool, moderately easy to version control, and hard but possible to transform automatically. But I believe plaintext is only a local maxima in code representation. We just don't have a good enough editor for code ASTs (yet)).

Now in the Wolfram Language REPL they have some rich input capabilities like http://reference.wolfram.com/language/example/BooleanOperati... . I suspect these are still underpinned by plaintext dumps internally, though, judging by http://reference.wolfram.com/language/tutorial/VariablesInPu... .

I should have said that they've gotten farther than anyone else so far, perhaps, but I haven't tried WL yet, so who knows?
Part of the reason Iridium needs a lot of satellites is because they're in low earth orbit, to reduce latencies (800km instead of 42000km for geostationary orbits means round trip latency of 5ms instead of 280ms).

You might be able to lower costs by tolerating increased latency and using higher orbits. You'd still need something for pole coverage, of course.
Ah, fair enough--and actually I agree that public school might prepare someone better for public high school.
Dammit, thanks, i corrected that.
No one know yet. Until they found the aircraft and the blackbox, they can only suspect. There are reports of passengers checked in with stolen passports but the government and the airline think the possibility of terrorism is low. Let's hope we can discover the missing aircraft soon.
That's a bit of interpolation there. I will admit that we are given very little to work on, just a piece of paper with the algo partially done on it by a child... I'm assuming you think that because of the "10x8" on the side and it could be easily "20x8". It looks like they are teaching it by places, and the 10x_ represents the order of magnitude that is currently being operated, and she was to see how many "8"'s in that magnitude are in the number. That was my assumption, at least.
Constructive Empiricism
Please don't be anti-commerce. Commerce is healthy.

http://mimiandeunice.com/2010/10/01/non-commercial/

You are probably conflating the idea that most commercial software is proprietary, so not only does it make money but it does so by restricting the users' freedoms. The GPL is exactly what you want to block this. The GPL says you can only make money with this if you figure out how to do so while respecting user freedom! You should be happy to allow that.

Any license that has a blanket anti-commerce clause is non-Free and non-Open, i.e. is proprietary, by all standards. Do not use such a license.
Quoting for emphasis:

"I'm convinced they've hurt their own country far more than me with this ruling, as it emphasises what the world already knows: the UK has contempt for basic press freedoms."
— David Miranda
I think saying that he "warned them" is a bit dishonest. He said the following as a side note 4 years ago:

I've just checked and you can obtain the password through an API call
after you register a new API user.

They designed this functionality so they clearly knew it was possible, what he didn't do was explain the impact (take public key from app -> request user password) and if he hasn't notified them since that post it's entirely possible that they never had a reason to reconsider that (awful) decision. That post 4 years ago can't really be considered "responsible disclosure".
Well my business has SAAS and downloadable software versions. However I've been refining it for 15 years, so it generally runs very smoothly unless I screw something up. I usually don't touch ANYTHING in the 1-week before I go on vacation, just in case I break something.
I thought the original reason for Antibiotics in feed, was so the farmer could save money on conditions (i.e the farm can be a little bit unhealthy for animals, as they are all on antibiotics... the growth effects were/are secondary...)
Yes I take amtrak every other weekend, i love it. No horrible and insulting security checks, so much leg room, decent toilets, power outlets, good air conditioning, food pantry that sells alcohol, polite staff.
I dont get the hate. I love it.
Real-Time Content and Re-Open Tracking Return to Gmail
Cool, is Wolfram programming language basically Mathematica + some special domain-area libraries?
Did Netflix screw up? I don’t think so (By NFLX co-founder 2011)
As you say, CC licenses are not appropriate for software. The CC-NC clause is also bad for ANYTHING because non-commercial clauses are bad and incompatible. The PRIMARY effect of an NC clause is to be a Wikipedia-incompatible clause, regardless of whether there's ever any commercial use or not.

See http://freedomdefined.org/Licenses/NC
It's a felony in the US to do what the author did here, right? Not that there's any indication where they're from, I'm just curious.
By NFLX co-founder. Written when stock plummeted from 300 to 100 in 2011.
Correction: an API account can see all users that registered through the API with that account's key.

Still, WTF!?
Ugh Apache. What you are looking for is this: http://coil.apotheon.org/
Private social networks for universities
we just launched our website. any feedback?
Interesting, because it does the opposite for me, i.e. it reports my primary monitor's resolution, despite the browser running on my secondary monitor!
Right! Forget the slow, unreliable upload. Overnight a USB drive.
However, the API key for any app can be discovered with zero effort, because it's included in each request. So you can retrieve the plaintext passwords for any user who has signed up with any app using the API.

Whoever created this monstrosity should be ashamed of themselves.
I don't think his post was blatant enough for the devs to pick up on it. Seems like the only guy that responded tl;dr'd it. He should have stated very clearly that this is a MAJOR security issue.
xprivacy and xposed framework give an insane amount of control back to us end users. I suggest everyone cautious of their private data being taken without permission to look into them for android.
Is Software Development like a stock market? So, how to choose the stocks?
If I may add _one_ suggestion to both, it is to say "Elizabeth" or "Spiegel" instead of "the woman from the article" or something like that. It makes the reference more human.

Good point.
If anyone from the Criticker team is here on HN, I'd be happy to help you guys get this resolved -- my company Stormpath (https://stormpath.com/) provides a really secure way to handle user accounts.

I'll help you guys integrate, or -- if you prefer, I'd be more than happy to dive into your source and help figure out problems and get them resolved. We have a pretty huge team of security experts, and we're all more than happy to help.

I'm randall@stormpath.com if you'd like to chat.
> Non-encrypted passwords are an artifact of legacy systems

The copyright is from 2004, that's only 10 years ago. I wouldn't say plaintext passwords were a sensible decision back then.

> Some modern businesses don't make the best decisions.

Some modern businesses don't have the best priorities.
How China Fooled the World [video]
Btw. it didn't just crash the sandbox.