skysight-inc/HackerNews huggingface dataset:
While your brief comment will probably be downvoted to oblivion I too am wishing there was a Sketch for Windows. With Fireworks being canned, I'm worried about what tool I'll use next for web design.
$700 sounds about right. You'll want to add another $5-700 or so for the service equipment, but that's about it. Generally, permanent outdoor installations should be hard-wired in, rather than using a weather-shielded outlet.
LuaJIT contains a pretty fast interpreter, thus it makes sense to use it on consoles (with the JIT turned off by compile-time-flags) instead of the Lua reference implementation.
> 1. Safari was one of the first browsers to ship with a popup blocker

Opera was shipping an enabled-by-default popup blocker before Safari's first public beta, and I'm not even sure if it was first.
Well, yeah, "transcode" might be better, but then again there isn't really any hard difference between "encode" and "transcode", or possibly "encode" is just useless because it can not ever happen without an associated decoding of the information source?

But no, in a way, you are getting it all backwards, or at least a bit confusing.

This is how you should construct a system that processes user input:

First, the input format should be defined such that it can only describe things that make sense within the given context, in particular it should usually not be possible to represent in it instructions for programming language interpreters.

Second, whenever you have to represent user input in some context, you have to encode (well, transcode) it into the format of that context. This transcoding generally should only change representation and not change the meaning of the converted information.

This automatically implies that you can not "inject code". There isn't really anything magic about "code". That's what I think is a large part of the confusion around "sanitizing input". The input can not represent code, the conversion does not change the meaning, so if the input can not represent code, the transcoding obviously can not cause code to appear either, and thus you are safe - and not only are you safe, but your system also works as it should otherwise, which it potentially does not if you start "removing dangerous characters".

That is why you should not "sanitize", but only validate and encode/transcode/convert. Which you need to do anyway for your system to work properly. Lack of injection vulnerabilities will result automatically.
I think in this case it's more dedication - getting over that initial "hump". Probably worth it; at least for the experience of doing it once.
Ha, same here. Too many other things that take priority at the moment though.
The canonical quote is that "we lock our doors to keep honest people honest."

Practically, we cannot guarantee the security of our locks, or homes, or cars/bikes, etc. But we erect barriers to help enforce societal norms regarding security and privacy. These can be explicit measures such as door locks and deadbolts, and more holistic things like living in a good neighborhood, meeting your neighbors, preempting the broken windows effect, etc.

The only guarantee, in terms of home security, is a great insurance policy with riders for your major possessions.
Still reading. On #6, I never got that impression; Lewis refers repeatedly to the digitalisation of the exchanges bringing prices down. e.g.:

75.73%: "A few thought it was important to remember that technology had lowered their trading costs from what they had been decades earlier - and half-turned a half-blind eye to the stunts Wall Street intermediaries had pulled to prevent technology from lowering those costs even further."
Self-storage is quite an interesting phenomenon. The total self storage rentable space in the US is now 2.3 billion square feet.[1] That's enough space for every American to have over 7 square feet in which to stand. In fact, that's probably enough to lay down.

To be sure, a lot of other men and women got rich before the storage men, in order for us to have more stuff than will fit in our houses.

1. http://www.selfstorage.org/ssa/content/navigationmenu/abouts...
Completely disagree. The founders your talking about will provail no matter what. creativity, passion, inspiration isn't about money. True entrepreneur ship is about exploiting the flaws in the system. System changes and they find new flaws.
> This is yet another alarming signal that the whole idea that your SSN/SIN or credit card number is somehow secret and can be used for authentication is flawed.

Secret information is required for practical authentication. Some examples:

Private keys (ssh, gpg, SSL/TLS certs, bitcoin wallets)

passwords

session ids

api secrets

auth tokens
Make sense and I agree. Thanks for the feedback! Unfortunately, ngrok's new protocol is optimized very heavily for speed which comes with a cost in complexity of both the protocol and the clients that implement it.
SilverRail Gets $40M From Peter Thiel to Become ITA (Not Kayak) of Train Travel
I have been waiting for the security audit report since the first time it was mentioned. Now that it is out i feel a little disappointed that there are no real intentional risks
7 businesses Amazon wants to shake up
That's a pretty nice review. I hadn't heard of System76 before. Looks like they make some solid hardware.

I had similar touch pad issues with a HP where the sensitivity was either too much or not enough. When I ran Xubuntu, I saw the same issues and could never get it dialed in where I wanted it. I eventually jumped over to using CrunchBang (uses OpenBox for the DE, built on Debian) and my touchpad was pretty much dialed in from the get go. Makes me wonder if the sensitivity issues may be with the touchpad drivers that Ubuntu provides, granted it they are different than what's packaged with Debian.
This seems like an advantage that Ruby's culture has over Python's. If people didn't stall so much, the process wouldn't be so slow and there wouldn't be a reason to stall any more.
The only thing Apple wins is the mindshare of relatively
wealthy (American) people and an enormous amount of
hedge and institutional fund investment.

So they're only dominating in terms of profit share in wealthy countries. And also in most if not all customer satisfaction and retention metrics. And also killing it at retail.

But other than that, not dominating at all.

I hope I can achieve this level of non-domination in my lifetime. Seems pretty cushy.
Except I think entrepreneurs are the defects. Their the guys that make things work inspit of the system. For every rule there is an exception and an entrepreneur their to expliot it.
Or robots with penises. Paging Pintsize[1]...

[1] http://questionablecontent.wikia.com/wiki/Pintsize

EDIT: well, now this makes no sense. The parent comment basically asked whether or not lab-grown penises might exist, and what uses may be found for them.
Language Agnostic Coding Standards
Zapier is also good with lots of integrations, but it's a little pricey. Yet if you calculate what your time is worth and include the amount spent on making this work plus customizations, it's probably less. Depends on if Zapier can do what you want.
Facebook 'weeks away' from e-wallet approval
Well, since C++11, C++ also has a standard minimal GC API, although only VC++ supports it currently.

Thanks for the clarification, as I only knew there was a GC from gamedev articles, forums, without much details.
I would disagree.

What you do in your personal time is none of your employers business he is not paying for that time and he does not own whatever you create in that time.

Not unless you signed a ridiculous contract saying something like that which in my opinion should not be enforceable anyway.

It's like a construction company saying it owns the house you built for your family just because you happen to work for them and you gained experience by working for them.

They certainly didn't supply the raw material which in programming would be time and effort so they shouldn't have any claim on it.
The marks they make can be.

http://www.scientificamerican.com/article/diy-graphene-how-t...

It apparently also has some use as a lubricant which has something to do with why #2 pencils are smoother than normal. Ed: Graphite also acts as a lubricant but #2 pencils relative smoothness has something to do with laying down more layers of graphine.
This took you 11 days?!
I agree that the short and commonly used numbers that are often considered to be proof of ID are no longer suitable. When a computer can easily guess every possible combination of numbers in a set in seconds, it's not really sensible to use it for validation.

However, even if we all had a unique 4096 bit private key with which we identified ourselves, it would still essentially be a number and it would certainly be able to be stolen. Stealing a number is more or less the same as stealing a private key or stealing a classified electronic document - it's the unauthorised access and copying of information. Society has broadly come to accept that this is considered stealing.
I tried Komono, but it cannot auth into the sites I want to pull the data from....

Just grabbed import.io - will see if it can loginto sites and grab the data from services I am already paying thousands per month for.

EDIT:

To add some context: I pay about $3,000 per month for some monitoring services which do not have any real reportin mechanisms. So for my daily and weekly reports, I have to manually compile them and screen shot a ton of things, compose an email and send.

I want to configure a scraper to automatically grab screens of things I want regularly and email them.

I want to have a script that will grab many diff pieces of data (visual graphs, typically) and put them all into one email.

I am working with my monitoring vendors to get them to add reporting... but until that can happen - I am tired of spending a couple hours per week screen capping graphs...
If it was legally released under an open source license, someone can and should grab it before he deletes it, put it somewhere else, and people other than him can certainly legally keep using it or working on it, right?

I guess the employer could try cease-and-desisting others and claiming it is their IP and the open source license was not legal.
lol the comment by cam44 in the post.
Any of the encryption algorithms used by TrueCrypt would be fine. The real security lies in the strength of your password. http://xkcd.com/538/

EDIT: Thought OP said Twofish
Also good would be taking better advantage of hardware protection, kernel api design, and app permissions, so that even when something is compromised it can't just start poking around doing whatever it wants.
Open-source bullying is when someone says "your code sucks and you should kill yourself!".

This is more of a company enforcing that you do not copy the systems they are doing to minimize competition. Many times when people leave they try to create same product that previous company created.
As Richard Branson said; Screw it, just do it.
Here's another Feynman lockpicking anecdote: a video about his exploits cracking peoples' safes at Los Alamos during the Manhattan Project: http://www.youtube.com/watch?v=Waw11zhaKSk
note that disruption comes from below, not from big AAA titles...
It is useless unless a person receives the implant. It's not useful on its own. To solve that problem, there are already masturbation products on the market made out of synthetic materials. Half of humanity already has vaginas. The sex industry already has hold of people with vaginas, it's just not legal most places.

However, maybe this changes something in the market for sex reassignment surgeries.
I'd be curious where you are getting that narrative from. It differs from what I am familiar with for sure in terms of knowledge of this industry. Not that that's not the play of some REIT's (or what they say they are doing but not really doing) of course but I wonder how many of the locations fall into that category vs. just "after a certain point the money essentially prints itself". Which sounds pretty good. [1]

(What you are saying is typically done though with parking lots in cities for sure for various reasons.)

"and you still have control of a massive chunk of land to boot"

Unless you have land in a particularly valuable location the fact that there is a building on it is going to contradict having someone purchase it for development purposes. It's being used. In other words "nothing to see here move along". And if it was in a super valuable upcoming area that would already be priced into the land cost and might be prohibitive.

I'd also would like to know what the time frame is for something like this to actually happen and how many times it has actually been done. That is, out of the entire self storage industry, how many locations (multi level for example - those larger buildings) have been raised for a higher use (with every tenant thrown out)? And something else built on the land which generates more revenue. Where a comparable piece of empty land was not available?

Of course it might be something that the REIT says marketing wise in order to enhance the appearance of the value of their properties. But to me it seems that the reality of whether that would actually happen (and how often) might be entirely different.

That said any links to this would be nice if you can pass along.

[1] For self storage that I am also familiar with they predictably raise the price every year. And it's not easy to move things out (you need a truck or you need to dispose of something.)
This is a sad story, but it could have been seen coming from a mile away:

- He worked on a personal project during company time. Edit: Oops. I misread this one as the inverse of what the author was saying. He only worked on it while employed. Still very ugly given the field of his work.

- His personal project is directly related to his work.

- His personal project conceivably competes with his employer's products.

- The company does not have staff in NY or CA, so the author lacks even the minimal limitations on non-competes imposed by state law (http://newappendto.wpengine.com/wp-content/uploads/2013/12/1...)

All of these things are typically barred by completely reasonable non-competes. As the author, I would absolutely expect to receive a C&D. As his former employer, I would feel (personally) hurt, even betrayed, by this behavior.
What’s Worse than Heartbleed? Bugs in Heartbleed Detection Scripts
Tech and Community Service Organizations Need a #OneCity Approach
Never sign this unless you have a lawyer, money and breath to invalidate a clause you thought "does not hold up in court".
Sex industry jokes aside it has been amazing to watch this field of research advance. While still limited to relatively simple structures (tracheas, vaginas, cartilage, etc.) this is helping actual patients now, not just lab demos. Imagine when we can grow a new eye, kidney, lung, or heart.

I love what our industry does with technology but to me it still pales in comparison with things like bio-engineering. Perhaps that's just my perspective.

EDIT: Attaching a bit of a personal outlook. I am about a month away from having a tumor removed and the primary surgery doesn't bother me as much as the reconstruction process that will be required after. Having my own tissues grown to fill in the hole would definitely change my perspective.
Could you provide a link to a screenshot/example of what you're talking about. I understand the gist of what you're describing; I believe I've been looking for the same thing.
> I wonder if Google made a mistake by not choosing native code for Android apps.

I would say yes.

> We have heard forever about Java (and other run-times) getting close to C in performance, but outside of specific test cases native code still runs circles around everything else out there.

Please don't mix language vs implementation.
Add Canada to that list. Free market but it's definitely trying to emulate the socialist policy successes in Scandinavian countries.
First, the word iphone isn't even mentioned in the article, but its funny how quickly HN drops into an iphone vs. android

Second, the author points out NDK over Java as a solution which is already leveraged by some popular apis transparently from java, such as libgdx.

Finally, the ui is responsive enough. My biggest annoyance whenever I have to help my in laws or my parents with their iphones and there is no back button - I don't notice any significant difference between their iphones and my Galaxy S3, and I'm sure Samsungs phones have only gotten better.
In Canada you can refuse to give someone your SIN for non-government purposes ... in theory. I was once refused an apartment sublet once when I did this. I had to come back with evidence that the landlord had no legal right to collect the SIN. That and the strong implication I was capable and willing to file a complaint.

People use all sorts of zany things to try to prove identity. I think public education is the first line of defence against the misuse of things like SSN/SIN.
note that 90% of the profit comes from big AAA titles, not from below.

... I get what you're saying, but I think the Unreal Engine is going to continue to be a cash cow for a good while yet.
Is Sublime still being updated?
With IPv6 there's no reason you couldn't do this, but what is the use case? I'm not seeing what you could do with individually addressable agents that you couldn't do otherwise.
Clearly.pl: org-mode like html editor
10 Terrific Things To Do With the Galaxy S5 But Not With The iPhone 5s
Yeah, I see that confusion quite often.
I might be wrong, but I believe that Inkscape has the ability to do blurring.
CD's don't and never really did. If you bring in an early CD (like from the 80s) you can get a nominal amount because CDs were rare then. If you bring in a CD from the last 10-15 years they are nearly worthless. Most shops ended up shredding the extra.

DVDs have a bit of crazy market. Some distributors (Disney and Criterion especially) do a short limited run. The 2nd hand stores rely on these gems in a big box of junk to make profit.
>>He worked on a personal project during company time.

Doesn't he claim this is not true?

"I did not do so on company time (as proven by the git commit logs), I worked on it in the evenings after I had completed my work for the day."
Dvisory on Heartbleed for Percona customers and users
He did not work on it during company time.

"I did not do so on company time (as proven by the git commit logs), I worked on it in the evenings after I had completed my work for the day."
Monitoring technology pick of the week: Elasticsearch
This is part of our ongoing saga regarding what to do with our startup. We decided to document the process as there are plenty of things we didn't consider before setting out (that potentially make selling a small startup untenable). As ever we'd welcome any thoughts from HN.

We'll post something about our experiences with Flippa soon - as it stands the potential for having a sale go bad while incurring Flippa fees is making us increasingly uncomfortable.
It's interesting that there is no mention of the so called "citizen developer". According to some Gartner reports very soon a fairly large amount (approx. 25%) of all business applications will be "written" by so called "citizen developers". These are mostly business people with minimal or no programming knowledge but are able to use software tools to create other "software tools". A good, VERY BASIC example is building an Excel "app" with some VB scripts...
The OP explicitly said that he worked on it during personal non work time, and further more has evidence (git logs) to prove it. Whether his former employer has any evidence (either way) apart from the existence of the project on github obviously hasn't been stated.
Show HN: modern relational algebra
It is available for p9p, and there are screenshots

http://lab-fgb.com/abaco/

Feel free to ask any questions. FGB is a nice guy so feel free to contact him directly
"Stealing" a number does not exist. Learning what the number relates to by way of breaking the law should be.
I always liked the Yahoo Pipes concept... but it didn' seem take off... and I personally found it too limited for everything I tried to do with it. Perhaps it's just another case of the old "visual programming language" is harder than it looks.

I hope Huginn does better. I like their copywriting "You always know who has your data. You do."
Phasing out C language to prevent heartbleeds
Because of the well known yet uncaught mistake made by C programmers, causing heartbleed, should we look to other low-level languages like D, that have more forgiving memory management by design.
When they ever bother to implement this 2012 open ticket.

https://code.google.com/p/android/issues/detail?id=39482
Borando is correct. MinimaLT (our TLS replacement) will use some sort of PKI, and eventually SayI. SayI is completely distributed, and enables the relying party (the entity doing the authentication) to choose which parts of the PKI to trust. And it will scale to the Internet; efficiency has been a problem with choose-who-you-trust PKIs.

We are working to release a Research Prototype for MinimaLT, which can be used for open source prototyping while simultaneously hardening our implementation.

There are a number of projects, open source and academic which are looking at MinimaLT. Some are implementing or providing interfaces for other languages (e.g., JavaScript/Erlang). Others are analyzing the security.

Most of all, we are focused on a small, tight codebase. Everything needed for security but not one iota of extra code. This is one of the ways we are engineering MinimaLT to avoid the problems that plague TLS.
please do, although it will take me forever to read with a Eng-Rus dictionary.

Challenge accepted.
I don't know if I buy the resume-killer concept. Do you have some examples?

maybe it's because I'm a programmer and not a CEO, but it sure seems like at interviews people just skip the boring parts of my resume to talk about the charismatic companies I've worked at, disregarding the gaps.

I do know one company (Basho) that refuses to hire anyone who has ever had a negative experience at any job. As a result, they tend to hire young, inexperienced people.
For most smartphones the number of icons that fit on a home screen is independent from the device type or the operating system on the device.

Different Android-based operating systems come with different UIs, and installing a new home screen UI on any of them is as easy as installing Angry Birds.
Wow, I didn't realize it was this easy to make a font from SVG files. Thanks!
Fastscript: A lightweight JQuery Clone
Pretty much all of them do. Many of the big leaders in the C++ world, like Google, are pushing the idea that every last optimization technique is crucially vital. Google can bank on tenths-of-a-percent of performance, so why can't you? Google can devote armadas of armadas of test machines to run asan/tsan/space-alien-san and everything else continuously, and it works pretty well for them, so why can't you do this too?
Erlang: From WhatsApp To Outerspace
It a problem with dumb programmers doing everything on the main UI thread.
To the untrained eyes, it may appear that there is no where to throw trash away in Tokyo. This is because the Japanese have cleverly disguised the trash cans as vending machines (PET bottles/aluminum cans) and convenience stores (other garbage).
Yes, C# and other .NET languages are nice, but the open source implementation (Mono) ends up being difficult to port to novel platforms due to a combination of technical and legal issues.
I'm curious to know whether this could be offered to M->F transsexuals.
[Auto] NginX – Google PageSpeed IP Ranges Updater
Python's logging overhead