skysight-inc/HackerNews huggingface dataset:
The Arcades of the 80's were massive computer rooms. I was privileged to have known a few elder programmers/hardware hackers, arcade owners in the 80's, who had no issues with us kids (well, family friends) ripping cabinets apart and being involved in re-programming things. As a kid, they were my guru's. It was a wonderful time to be willing to stay up late, hack on code, and see new things up on the screen .. two battlezone cabs wired up for multiplayer, infinite lives on things, &etc. well okay, the social aspect was terrific as well. The local arcades attracted a lot of people .. so sitting in the backroom with the change-counters and dead/living cabinet bits hacking code could be reprieved with a sudden blast of humanity.

Good times.

Nowadays I watch people ignore/blowup each other with their eyephones and instead of change-counters its appstore credit...
Ok, passwords were encrypted, were they salted? Per-account salts? How was the salt stored? How about the keys? What was the scheme?

Actually, it seems like all sites with sensitive user data should disclose full technical details of their password scheme. How could we make that a reality?
Amazon is probably next.
Chrome 34.0.1847.137m on Win7, getting an alert:
"Error, while recording your screen"
Make a law. I don't think there are actual laws in place that hold companies liable when stuff like this happens. I don't even think they are required to have regular security audits.
There's an interesting project called "Honeywords" (one of the authors is Ron Rivest) http://people.csail.mit.edu/rivest/honeywords/

Link to paper:
http://people.csail.mit.edu/rivest/honeywords/paper.pdf

(see also recent paper "Some Remarks on Honeyword Based
Password-Cracking Detection" https://eprint.iacr.org/2014/323.pdf)
From the readme:

Currently the API for screen capturing is supported only by Google Chrome, Canary and Chromium by enabling an experimental flag.

In order to enable the flag:

Go to chrome://flags
Enable - "Enable screen capture support in getUserMedia()"
Restart your browser

https://github.com/mgechev/jscapture#how-to-use
Plenty of children struggle in school and go on to do amazing things afterward, and plenty of “child geniuses” are lavished with attention and go on to do nothing notable.

The purpose of a school should be to encourage all students to flourish, not to pick the ones who will “advance civilization” at age 5.
Well, the point he opens with is just him being rude, nothing to do with the limitations of the Glass itself. What's he's actually asking for in that very first point is a way to view content on Glass without the other person in the conversation realising that you're tuning them out. As someone else commented, this is the same as pulling out your smartphone and playing with it instead of conversing.

The conspicuousness point is also trueish, but overblown. The sunglass clip-ons do reduce the visibility of the unusual headwear, they just don't eliminate it. From experience with our set at work, people out in public react considerably less when the sunglasses are clipped on. It's not going to fool someone you're in a direct conversation with, but you get fewer odd looks. Obviously this is with one of the subtle charcoal colours, and not the day-glo varieties. I would argue that you shouldn't be fooling someone you're in a direct conversation with anyway. If you want to do that, there are other tools for single-party recordings.

So we're down to 4.5 points out of 10. Not accounting for uneven ears, sure. Battery life, sure. Bulk, maybe. Voice recognition? It's actually pretty good, for voice recognition. It just doesn't have the same capabilities as a human (no tech does, hence my original comment). We got a set straight from the US, it was responding happily to my broad, middle-Australian accent, and it would still recognise a colleague with a very strong French accent who passed by me saying "OK Glass, google porn" ("drive-by" commands are a different problem...), all with no particular calibration done. Voice recognition doesn't work with background noise? Even humans have trouble with that.

So no, it's a bad review all around, for both techies and naifs. It sets expectations for naifs that are impossible to achieve, despite there a few real issues being described. I personally don't think Glass is ready for the public yet, but this article offers a lot of misdirection on why.
Can someone please help me understand why their stock price was not impacted by this? I observed Target when similar incident happened and nothing seemed to change.

Is the general market neglecting security exploitations or is the damage too small for those big companies?
I personally think that it's a big hit for the companies. They will have to spend money to patch it up and also lose trusts from users.
Continued glared isn't even necessary, losing the night vision (a problem that the camera doesn't show) is the real problem. It's not likely to directly cause an accident, but it might very well be a contributing factor (for many or most accidents that do happen, each contributing factor has usually happened multiple times before without causing an accident).
The actual 9 lines of code that Google allegedly copied from Java for Android
How I Lost to the World Chess Champion in 32 Moves
I wouldn't put it past our esteemed politicians to make backroom deals about stuff like this. Something along the lines of 'we need a new enemy, this terrorism thing is running out, how about a cold-war light?', 'let me get on the horn with Putin and see what he thinks about it...'.

I like Russians, have some Ukrainian friends and have spent a good part of my life behind where the former iron curtain used to be. So my perspective is probably quite warped. Putin and his band of cronies are effectively still doing exactly what the communist fat cats were doing, now you have he mafia to worry about instead of the authorities (that may be a couple of years out of date).

It's funny how everything changes and yet, the basics are still the same. Real change takes a long time.
I wish our office coffee machine had a direct demultiplexing port into my mouth. For the coffee, that is. Not the waste.

application-specific library: Yeah, all my circles are squares, too.
Maybe for that image, but I got totally different results with a sample PNG (with Compressor being much smaller than optipng).
> one day the browser might have daemons

It already does. Just write an extension and schedule a function. The one thing I don't think you can do yet is listen on a socket. At least not without doing a websocket connection to a separate service. Or bringing a native component with you.
What do you mean by "proprietary"? Pdfium is BSD-licensed, and pdf.js uses the Apache 2 license; both are extremely permissive.
Great read. I thought that maybe it would be even more impossible to project the text on the moon with a geostationary moon projector. I heard that making a geostationary moon satellite is tricky, adding to the benefits of this solution.
A link loop as in a dynamically generated menu structure that creates an endless loop for the crawler, or accidentally makes large numbers of very similar pages with similar URLs, etc. (Yes this can happen legitimately and by accident on retail/commercial sites).
And if it detects more than one person behind the screen it won't play unless you upgrade your movie license for public performance.
Also interestingly, they will "translate" movie titles that are in English into a different title, also in English. So "The Hangover" becomes "Very Bad Trip".
Why I Am Not An Integrated Information Theorist (or, The Unconscious Expander)
Is it safe to change my password now? All I read in the article is how much they are investigating this. How do I know the hackers don't still have access and are now actively monitoring password changes potentially getting more info?
I am concerned that there is nothing about this on the eBay front page and that I have not received an email from eBay about this
I've found the same as you - pasting code from anywhere to a Python application comes with a risk. This risk is however not too different from other languages where you wouldn't want mixed spaces and tabs in your code either. In my opinion, Python just enforces good coding style. You might have been as the error messages I get is rather verbose telling me the linenumber with an exception "IndentationError: unexpected indent" or "IndentationError: unindent does not match any outer indentation level". The first is for wrong identation level and the second is for mixed tabs and spaces.

Anyways - to mitigate the risk of misaligned code. The usual thing is that the wrong type of indentation is used. I use sublime text and in that editor there's a button where I can convert tabs to spaces and vice versa. The other thing is that of misaligned code with your existing code. You can usually get some plugins that handle this for you. In Python I use the Anaconda-plugin with the 'Auto format' feature which aligns in accordance to the PEP-8 standard.
I get for "most amazing woman ever" (including quotes) images, then tumblr, pinterest, Facebook, Twitter, Twitter, then MetaFilter.

Sub-optimal, but not terrible.

Removing the quotes gives me similar reaults to you. But there are a few results about interesting women based on achievement not appearance.

Google is trained by the crowd, and the crowd is stupid. See for example the numbers of searches using + operator correctly.
Our work with Cebit – A video social proof story
Did you set it to lossless? I didn't investigate the lossy conversion because I can't stand lossy compression.

Edit: Just tested with another image, same result.
Startup founders take note.
I guess in rail terminology the platform includes the track section, but I always think of it as the part you stand on while you're waiting for the train since that is the part that is raised above track level - so wider track areas would necessitate narrower platforms. The definition of platform is a raised surface, after all.
Billion-dollar medical project helped fund “Putin’s palace” on the Black Sea
4 isn't particularly surprising. People rightly believe that they have the right to decide who records them. A stranger walking in with a camera when they're in an intimate/family/business situation feels incredibly intrusive. If you walked in with your phone held out in front of you as if you were recording you'd get the same reaction.
While this is not exactly a game engine, check this out: http://rogeralsing.com/2008/12/07/genetic-programming-evolut...
You need to know how they store passwords because ... what?
Part of the Windows SDK.
Compressor.io – optimize and compress your images and photos
Mastering Bootstrap Sample Chapter Available
EBS Encryption for Additional Data Protection
Not sure about the US laws, but in South Africa we have the Protection of Personal Information Act (Popi) and it became law on November 26 2013.

"Popi essentially regulates how anyone who processes personal information must handle, keep and secure that information.

Personal Information broadly means any information relating to an identifiable, living natural person or juristic person (companies, CC’s etc.) and includes, but is not limited to:

contact details: email, telephone, address etc.
demographic information: age, sex, race, birth date, ethnicity etc.
history: employment, financial, educational, criminal, medical history
biometric information: blood type etc.
opinions of and about the person
private correspondence etc."
McCabe's Cyclomatic Complexity and Why We Don't Use It
That's not really true at night though, CCD cameras can change their light sensitivity quickly, something human eyes can't do (after a bright flash, you'll lose your night vision up to several minutes).
But "they" already have you personal information?
FBI says it struggles to recruit young hackers – because they're all smoking pot
Seems the app is a test to verify that people don't read the README.
So we can understand the risk of compromise.
I was quoting the article...
How many billion $ companies will it take before we finally rid ourselves of plain-text password authentication (regardless of whether or not it's performed over TLS, or they're using a 'good' hash function for verification)?

The lack of a usable secure password authentication standards for the web is the most pressing issue in web security these days. If there's one thing in the next HTML standard that should be depreciated, it's <input type="password">
Thank you for the info @binofbread, I didn't know that.
Could you please send me a screenshot to diegoloop@icloud.com?
That would be great! Thank you!
EBay says encrypted passwords were taken
While the main poppler developers, who IIRC are three guys from Spain, have made a heroic effort, poppler is really not that good. Poppler was created by ripping out code from Xpdf and making it into a library.

If you look at the code, it is not really well architected. Here is a file I found a problem in - http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Tex... . Take a look at that file and judge for yourself if it follows "Code Complete" type suggestions.

One reason I looked in that file is poppler does not deal well at all with many map PDFs like http://web.mta.info/nyct/maps/busqns.pdf or some others I have on my hard drive. They take forever to load.

Some PDFs have caused the applications using poppler to crash, although some of those have been patched. It's not as bad as it used to be, but still. My patch to speed up the bus map PDFs was not accepted. Then there are features like being able to enter data into PDFs and such. Compare and contrast Adobe's official Acrobat app for Linux and a PDF reader based on poppler like evince.

So the answer is a standard one - code architecture, bugs and features. The answer would be to take the PDFs that Adobe Acrobat handles but which poppler doesn't in terms of bugs and features, and see how pdfium handles them.

Of course, it's possible pdfium will handle those but fail on an entirely different class of PDFs and their pdfium specific bugs.

The PDF standard is a fairly large one. What features does pdfium handle which poppler doesn't? What percentages of PDFs crash the viewing application, or don't render correctly compared to poppler? And so forth.

I should also add that poppler usually depends on cairo for vector graphics. So once in a while the fail for a pdf is on cairo, not poppler. I have seen some of those fixed, some not.
You don't need big craters to create a shadow. Plough the moon, turning over the dust in 20 cm wide and 10 cm high piles. At a square km per machine per week (I'm making that up, but it is less than a hectare per hour, and the world record is over 4 square km/day (http://www.guinnessworldrecords.com/records-1/ploughing-area...), likely on way better ground, but not nuclear-powered, either), that's 'only' 10,000 machine-years. Turn 10,000 nuclear warheads into crude nuclear engines, and you can do it within a few years.

I might help spending time choosing an area where you can avoid deep craters and have enough dust to form the piles.
JavaScript Promises: Sync, Inversion, Trust, and Extension
I believe this is the source of the PPAPI plugin, and not something built into Chrome.

Anyway, this is great news for Chromium, as the PDF plugin can now be shipped to distro repos.
because how the passwords are stored affects whether they are recoverable.

are you dense?
Agree. Those should be the only reason not to disclose breaches (to the public).
Too bad security isn't a concern; only the almighty dollar, right?

Cheap excuses for security only add salt to the wound.
From the comments:

"This really won’t affect anything. Most people these days are use to being hacked, spied on and violated."
There is no usable secure password authentication standard that will protect from password compromise after password database leak. In fact, if you're talking about SRP, it's worse in this regard compared to, say, using bcrypt.
Ruby gem brings sparse bitmaps to Redis
He asked a simple question, what's with the hostility of asking if he's "dense" ?
That's one reason for the recall, is my guess. The recall allows consumers who want to return the product for a refund rather than keeping the patched version to do so, which would allow people for whom the Nest Wave feature was a big part of the original appeal to get their money back.
'Maybe it will be ok' is not a good strategy regardless of what you think you know about the situation.
> I don't understand why eBay (and others) don't offer two-factor authentication

eBay implements 2-factor auth via a PayPal s/Key hardware token.

https://www.paypal.com/securitykey
India is a perfectly good example, since it illustrates that a relatively smooth wealth distribution doesn't mean you get a flush toilet.

This is obtuse even by your standards, Chris. You could equally well argue that South Africa with a Gini of 63 is enormously economically empowered, but you're not guaranteed a flush toilet there either.

What's wrong with competition, and allowing the better countries to get more workers?

Try being a politician explaining that to economically dislocated domestic voters. Hell, look how bent out of shape people here get about immigration and the US only ranks 180th out of the world in population density. I don't think it's it's an economic necessity, but it's a political reality, unfortunately.
Such reactions are wonderfully captured in Surveillance Camera Man 1-6: http://www.youtube.com/user/SurveillantCameraMan
That's not an actionable information. There is no reason not to change password and not use different passwords for different websites even if they use yescrypt* with 2 TB ROM.

*) https://password-hashing.net/candidates.html
Without double checking your math, I'm pretty sure the significant error in your conclusion here is modeling the games he's playing as coin flipping with even payouts. The specific game he's playing is actually dropping a percentage each time and is more accurately modeled as "heads I win .98, tails I lose 1". (Technically he's betting $15 for a chance to win $14.69). With that in mind, many fewer than 1 in 28 players would end up with his results.
i'd say a must read for this discussion

http://en.wikipedia.org/wiki/Laser_safety#Old_system

"Class I

Inherently safe; no possibility of eye damage. This can be either because of a low output power (in which case eye damage is impossible even after hours of exposure), or due to an enclosure preventing user access to the laser beam during normal operation, such as in CD players or laser printers.

Class II

The blink reflex of the human eye (aversion response) will prevent eye damage, unless the person deliberately stares into the beam for an extended period. Output power may be up to 1 mW. This class includes only lasers that emit visible light. Most laser pointers are in this category.

Class IIa

A region in the low-power end of Class II where the laser requires in excess of 1,000 seconds of continuous viewing to produce a burn to the retina. Commercial laser scanners are in this subclass."
So, say I have 25GB of photos on my OneDrive. How would I go about compressing them all in a lossless way similar to the way this website does it? I use Windows so no imageoptim for me.
Layout views with Backbone
Yeah, but with Chrome reading PDFs is almost like seeing a normal web page, whereas with pdf.js my i7 jumps to 100% CPU usage.

In any case, I use a native viewer, which provides the best overall user experience.
Is Amazon ever going to add https for its site, I wonder?
First rule of customer service: customer says he's not happy with the product? -> full refund, record as many reasons why as possible, figure out which ones hold water, fix them then re-approach former customer as beta tester.

For now he's done something you apparently did not do, which was to buy the thing and give it a work-out.

Of course, Google and customer service are rarely used in an affirmative sentence of any kind but still, that's how you're supposed to deal with this.
When stated that way -- I agree:

1) State your "unsuccessful" tasks as completed accomplishments ("learned XYZ").

2) Do not include "learned that we should not use XYZ" into your "give me my bonus" pitch.
Nostolgia ... I remember those days.

Developers try so hard these days to implement push notifications from their apps & services and boast about all the IFTTT stuff.

Carries here in India used to provide email-to-sms
as a free service. You would just send an email to +91PhoneNo@xyzprovider.com and that message would be sent to PhoneNo as an SMS (160 chars from subject).

Now a days if you want to send a message, you need to have developer accounts, install Software on the devices to receive the notifications, need to have a data connection on the phone, talk to push notifications clouds and a few other things.
The FBI is playing a dangerous game with China. This kind of attacks are generally kept in the shadow.

I don't see what they hope to gain by doing this.
Given the low reflectivity of the moon, can't we "just" lay down a lot of mirrors in the shape of the letters we want?

Build a rocket ship that makes a flyby of the moon, drops some mirrors and returns. Maybe it could rendezvous with the ISS to get a fresh supply of mirrors and we send the mirrors to the ISS by conventional means.

And when I say mirrors, I am thinking of really thin ones. Really, just giant sheets of aluminium foil. I suspect they'll naturally drift around and degrade over time, giving people something to think about as a poignant metaphor of some artistry thing.
No abstraction is better than having abstraction. See http://pdos.csail.mit.edu/exo.html
2 player fixed limit is not solved, but the best in class are generally considered to be better than the best human players and likely have been for several years.

I'm not up to date on the general consensus on the state of 2 player no limit, but personally I'd bet on the best bots over the best humans even at 100 blind stacks.

http://www.computerpokercompetition.org/ has some results from previous competitions. You can probably find some of the relevant papers on the subject from there as well.
I'd not buy one with a wire. If the current Glass is conspicuous without one, imagine how much more it will be when there's a wire running awkwardly down from your glasses.

Plus, I can't count how many times I'm out in the world with an earbud in and the cable gets snagged on something. The first time that happened with the Glass and the quick-release didn't let go, there goes my glasses and Glass, leaving me blind and out hundreds/thousands of dollars.

Like many, I imagine if I were to buy one it would be with corrective lenses, which means then I would have to carry a second pair of normal glasses with me so I can put the Glass away when I'm indoors -- while it may be alright to put your headphones in when you're outside on the street, I'm not 16 anymore and can't get away with looking like I've got my earbud in sitting at my desk or having lunch with a colleague.

A cord would solve a problem with old technology. The point of this is to do things a new way.
California had a grade-school program in the 1970s called MGM - "Mentally Gifted Minors" - which focused on the top 2% (IQ 132+). It was cool, but IIRC at my school it basically replaced a single class period per week - I think it was taught by one part-time teacher who rotated between different schools on different days, trying to keep kids intellectually engaged and relieve them from the most tedious stuff they would otherwise have to suffer through.

These new tools (or Khan Academy, or even the self-paced books that homeschoolers used to use) would probably allow kids to make a lot more progress were they so inclined.
Great analysis. Reminds me of an updated, "Why the Future Doesn't Need Us", by Bill Joy.
Google Panda 4.0 – These Sectors Got Annihilated