skysight-inc/HackerNews huggingface dataset:
Some filesystems allow reading from the directory node as though it is a file. In Plan9, for instance, that will return you a machine readable directory listing. You could do funky stuff with this feature, if you were crazy enough :)
I wasn't really thinking of it as targeted at servers only - more improving the Minecraft ecosystem.

But since you mentioned it - Minecraft has a central authorisation system. It would be trivial to sell subscriptions to particular servers through an app store and have Mojang enforce that via the central authorisation.

That are lots and lots of benefits that could come form this, not least locking young kids down to play only on "family friendly" servers (which is pretty much impossible at the moment).

Damn.. I think this is even a better idea than my original one.

Someone on HN must know someone at Mojang? Please tell them to do this!!
Long story short, this topic won't end until XSS gets fixed. The people writing HTML don't consider XSS their problem, its been what 20 years?

Nobody even knows what 'fixing' xss would look like.
You're welcome :-) Indeed I was a bit surprised by some hostile comments, yet they do make good points. I never thought that the post would be posted on Hacker News, next time I'll take that into account ^^

Thanks for the links, I actually commented on the article on wired.com yesterday. Regarding the promotion of C~ yes we have started doing that, especially since we made it open source and have started to target everybody who might be interested in designing hardware (on FPGA or ASIC).
I am using 2.7.6
All attacks against JS crypto addressed assume a somewhat determined and active attacker. Although this is definitely the big problem to be concerned about, that does not mean that there is no place for JavaScript cryptography as protection against casual passive eavesdroppers. The problem is that users are quick to get a false sense of security because of this, not that JavaScript crypto is utterly without use.

Having said that, the state of web cryptography is abysmal. There is work on a Web Cryptography API [1], but so far browsers only implement the part that concerns the generation of cryptographically secure random values. Even then, an attacker can use injected JavaScript to override the window.crypto functions, so they would need to be protected somehow.

The lack of secure crypto prevents a whole class of applications from coming to JavaScript. Luckily my bank offers native apps, so I can just recommend my parents to use that instead of their website.

[1]: http://www.w3.org/TR/2014/WD-WebCryptoAPI-20140325/#scope-al...
Not necessarily. It would create a market for patent litigation as a service, where the patent still belongs to the inventor, but the litigations are managed by one or more third parties.
Certain sexual deviations are considered norm nowadays. Maybe other mental disorders, such as anxiety are normal (though unpleasant) as well, and we just don't know it yet?
Debian 6 LTS (Long Term Support)
I agree that society advances itself together, however I don't think that shirts are necessary for a society to be considered "Advanced".
That definition of "comprise" is more or less the opposite of the British English definition, where "A comprises B, C and D" means "A includes B, C and D and nothing else." E.g Parliament comprises the House of Commons, the House of Lords and the Queen.
There are advantages other than just the high resolution available under the UHD/4k umbrella (ITU-R BT.2020). The BT.2020 colorspace provides a wider color gamut, increased bit depths reduce color banding, supports 4:4:4 chroma sampling and up to 120Hz progressive frames are standardized.

Of course that doesn't mean Netflix can or will make use of any of them in their releases.
How can we help you?
'Terrorist' is fundamentally a political label, so it's not possible to separate the political and security questions.
Agreed the article is not very insightful. Another place where it misses the point entirely:

> The problem is, having established a secure channel with SSL, you no longer need Javascript cryptography; you have "real" cryptography.

This overlooks a major use case of client-based cryptography where you don't want to expose any private keying material to the server.
That is what fonts are - sets of small pictures, accessible by an index.
It did. I couldn't find anything before the ribbon bar, frankly, and using tools took significantly more time because I had to search for them in overly long menus, or even submenus. Now they're mostly laid out directly in front of me, logically and visually ordered. I don't feel that menus are a good UI to anything.

It would seem that most UX people now agree with me, as traditional menu bars have been de-emphasised across nearly all the apps I use. Word was the only app which required me to delve into the menus in common use.

Why do you think the ribbon bar has a worse UX than a menu bar?
To add to the question, what happens with CloudFormation setup, where template doesn't specify EBS volume type. Will new instances use gp2 as default?
The Man Who Saves You from Yourself (2013)
Maybe we don't actually have a democracy?

You know, we have been watching, for more than a year now, story after story telling us that the Five Eyes intercept, filter and store a range of communications between allegedly criminals, mere suspects and whole populations.

A tiny portion information is then used to "fight crime", while the rest sits there, waiting to be used for the economic and political interest of those nations, and to stop dissent and social movements -- even it the information is not used, the mere fact that somebody is watching works damn well to bring fear and distrust to potential unrest.
"have the Minecraft server loaded onto a personal server"

Ditto. My kids love it. Finally my "fileserver" CPU has something to do. Doesn't take much resources until its ridiculously big/modded. Its fun. It doesn't take much static NAT work for their friends to get access too.

The problem is a bathtub curve where anyone can run a server in their basement on an old/free PC for basically no cost and no effort. And there is a use for a huge server with 100s of people on it and massive creativity and hopefully not much griefing and its going to be expensive but worth it. Minecrack will probably always survive? And in between is a medium sized dead zone where nothing can live. In the middle a 10 year old can't pay for it, and it wouldn't be worth paying for anyway.

The marketplace looks like journalism. You're always going to have people commenting for free in blogs, and you're always (maybe) going to have the new york times. In between, the market has simply died and blown away and isn't coming back.
Vesting done right
I got the question so often during the past couple of months, I decided to write it town in a little blog post. Useful templates included!
That's a cool approach for working on an MVP (minimum viable product). Instead of pushing something out there and hoping to get feedback, these guys are using the inverse approach and asking people what to build.

Looking forward to reading a follow-up on this with details on how many reactions came aboit and how they handled all that.
I call it "faith in democracy", as there is no evidence of it happening in any modern "democracy". Just got to believe....
I agree that the article fails to expose the main issues properly but JavaScript in the browser, in it's current implementation is harmful. It gives you a false sense of security.

The biggest issue is that the crypto code can be changed at any time transparently. It's typically distributed by the same party that has your data so all you're really doing is transferring trust to them.
Why not? It's not like every font of every typeface has to implement every Unicode code point.

You'd probably only have one or two installed that have the emoji characters.
I wouldn't agree that

> The Investigations are quite opposed to the project of the tractatus

quite so straightforwardly; both are to some extent interested in describing the limits of what can be said objectively, and in constructing arguments that place some (including a lot of philosophical) speech outside that boundary. I do agree that the stance taken by the Tractatus is undermined by the deeper problematic exposed by PI, of course, I'm just saying there is commonality in the intent.

I don't think it's realistic to evaluate philosophy in terms of its production of positive "philosophical truth", btw. From my point of view most of its value is in exposing incorrect assumptions.
The people that I know that are on the Paleo diet have lost weight and feel healthier. I am skeptical about the rationale behind the Paleo diet and attribute most of the benefits to them paying attention to their food intake and general health (and eschewing junk food) rather than the theory. The outcome is the important thing.
I’ve been doing Paleo and low-​carb for about an year. It’s been unquestionably effective. However, in the course of trying various adjustments over this time, I’ve basically concluded that any sort of “eliminationist” diet — Paleo, low carb, gluten free, vegan, you decide what’s best for you — can work well, as long as it’s generally safe and you pay attention to how your selections affect how you look and feel. Such an approach is what I’d recommend over generic calorie counting. Food is such a potent input into your body; picking and choosing what you put in can make all the difference.
Java OutOfMemoryError cheat sheet
I really don't agree on your definition of fonts. When i write a letter i am certainly not painting rows of little pictures on a sheet of paper.
You can't do online migration, but migration via a snapshot should be quick and easy. Snapshots are incremental, so the best way to get low downtime is to create a snapshot, then when that one completes, unmount the old volume and snapshot again. The second snapshot should be really quick, especially if your application isn't write-heavy.
Simple Release Tracking
We're looking forward to build things that people can actually use, and I noted down to write a follow up on the experience, stay tuned!
Controlling the brain with light
Just putting this heresy out there to see what happens:

I wouldn't want anybody betting their life or freedom on browser based crypto, but if widely adopted and well implemented, maybe it is good enough to make mass surveillance significantly harder? If everybody's crypto code is being tampered with, somebody is likely to notice.
A lot of older folks I imagine would just setup their own server and port forwarding. There's a million guides out there for that.
Actual study: http://www.nature.com/ejcn/journal/v68/n3/full/ejcn2013290a....

Interesting note in the conclusion: "Adherence to protein intake was poor in the PD group."

I wondered if this would impact skeletal muscle mass, but the author's previous research indicates that does not appear to be the case.

http://onlinelibrary.wiley.com/doi/10.1111/joim.12048/abstra...
Merge duplicate submissions and their votes for URL that are "the same", and display only one submission:
https://news.ycombinator.com/item?id=7903800

Blogspot is a common problem for example, trailing slash, etc.
Why have both "username" and "display name"?

At first I thought it was an extra layer of security , like most online games have, to discourage username/password bruteforcing. (It's an obscurity layer, but obscurity layers are not by definition bad.) But you need to tell others your username to communicate with them.
That really isn't a good name.
> I think you're a bit arrogant for assuming they give a fuck what you write to your girlfriend on iMessages.

This statement is nonsensical, because we know now that recording and reading what we write to our girlfriends on iMessage is exactly what they are doing. Indeed GCHQ have watched so many webcam chats amongst random people they can tell us how many are pornographic to three significant digits of accuracy. This is very much the definition of "giving a fuck".

Given that the premise of your post is incorrect, I wonder why you hold the opinions you do.
Just use a spherical oven and perform a geometric inversion with origin the centre of the oven and radius the oven's radius. Then all the pie inside will become outside and the outside will fold inside and you'll have infinite space for pie. As easy as capturing a lion.
I used Office 2010 for a while and it was crashing 4+ times a day, so I tried 2013 and easily recreated some of those crashes. I have not used it extensively but it does not take long to discover it's still trash.

PS: Office 2013 still has bugs from word 97, which is what happens when there is zero competition.
Behind The Scenes: Announcing Stories of Change for World Press Photo
I'm a startup owner myself so really like this type of stories and experiences.
I maaaay have found a pdf of it with a google search so... yeah.
> assume a somewhat determined attacker

Most CVEs that come to mind assume a somewhat determined attacker.

It takes a reasonably determined attacker to commit to rails without permission [1] or run a ten-line perl script to crash a server [2] too.

Waving away a problem via "the bad guys would need to think for more than one second" is not exactly reassuring.

[1]: https://github.com/rails/rails/commit/b83965785db1eec019edf1...

[2]: http://www.ocert.org/advisories/ocert-2011-003.html
Thanks, nice to read an article about food that is weighed and quotes some scientific studies, especially seeing there the following phrase: "a long-term randomised controlled trial" !

The tl;dr seems to be:

"What happened? Both groups lost weight, but after six months the women on the Palaeolithic diet had lost more, and their waists now measured less than those on the Nordic diet. It seemed as though this diet was better, but then things changed. After two years there was no difference in weight between the two groups. The only difference was in levels of the harmful blood fats, triglycerides, but even then they were at what would be considered safe, normal levels in the people on the Nordic diet too. Both groups found the diets difficult to manage and most people didn’t achieve the targets of eating the right amounts of each food group."

and, from the closing paragraph:

"When it comes to losing weight, the advice is pretty dull – eat less and exercise more."
Because it's waste. Because if not every font implements it, what is the usefulness of it? Did you ever visit websites that use glyphs your font doesn't know?
How would you use those pictures on a website, when you can't even guarantee the style of the picture, because it may be implemented differently or not at all.

It just looks like a big waste for no good reason.
There is no permanent cure for any attack surface in a given technology. Security is an ongoing effort and requires deep understanding of the underlying platform.

If "writing HTML" exposes cross-site scripting vulnerabilities on your site, then maybe "writing HTML" isn't so easy after all.
No. Just stop eating so many processed foods. That's all it takes. You don't need to jump on the latest diet trend to be healthy.
TLS all the time on these big websites is a very recent phenomenon, only being activated in the past couple of years. What's more, GCHQ were tapping internal traffic between Google datacenters which wasn't encrypted until Snowden, so TLS between customer and web server only slowed them down.

I suspect nowadays they're finding it much harder, but in these documents they're being asked to explain their pre-existing policies which were developed when TLS and internal encryption were much less widely used.
There is also an organization operating under the "Democracy" banner that is extremely dangerous. Extremely dangerous to democracy, which is the thing we have to protect us from, amongst many other things, mass executions by the State.
Third Party Android App Store Files EU Antitrust Complaint
Found some here, but it's far from finished : http://www.airplanehome.com/Images/29Aug2006ImagesCatalog.ht...
About including design  and development in the same sprint
So what do you use for the actual transcription? MTurk or similar?
It's possible to eat much less, tastier and healthier than a lot of people does now. Overeating looks very much like a legal drug.

Now you don't need to go far away in time to find cultures with healthy food habits. Do you?
The iOS 8 Features App Developers Should Know About
Not really. If you don't trust the server to hold the key, you can't trust the client you downloaded from the very same server.
> Waving away a problem via "the bad guys would need to think for more than one second" is not exactly reassuring.

The NSA are well resourced, but I doubt they have much more than a second spare for every internet user on the planet. So speaking as a relatively uninteresting person, I actually would find that somewhat reassuring. If you're a Person Of Interest, that's obviously a very different situation, and you shouldn't use browser-based crypto.
How do you define a "real terrorist"?
The bar is low enough that simply getting people to eat less processed foods is a win. We can debate how the liver breaks down sugar, or whether milk should be avoided, but that seems inconsequential when people are eating "hamburgers" where the buns are made from two deep fried chicken breasts.

That said, virtually every major health agency recommends a diet where carbohydrates (from vegetables, fruits and grains) represent the majority of calories. For an individual, under the guidance of a doctor, it can make sense to alter this. For everyone else, just follow the guidelines.
Dropbox building a mobile-first, cloud-first platform, one acquisition at a time
Hop Groups brings multiparty communication to email
Really, they lack of soft skills... How can making fun of language (in an ignorant way) be a good marketing strategy?
>I believe it helps ensure security.

How many terrorist attacks have been prevented as a result of this illegal privacy invasion?

Is there any evidence of it ensuring security? I see none.

What leads you to believe that it ensures security?
He is being sarcastic. See his comment history.
It's ketosis that causes the weight loss (Liver producing ketons that break down fat cells). And it's been around for a while (i.e since Atkins days).

When you cut out processed foods, and grains, you are left only with pretty much only healthy foods, so it's no wonder they feel better. But that isn't the same as saying all grains and processed foods are bad for you.
While I personally believe in the effectiveness of the paleo diet, I think there's too much focus on whether or not it allows people lose weight without eating less. The average American dietary intake per day is around 3,700 kilocalories[1], compared to a recommended value of around 2,000 kilocalories, so it's no mystery why people are getting fatter. I hence think an effective topic of study would be how effective various diets are at making people consume less calories, and the paleo diet seems to be great at this, due to involving many foods that produce greater satiety.

Even if the body treated all calories equally, automatically storing all excess energy as fat, the paleo diet could still have an advantage purely because of its interactions with human physiology somehow reducing appetite and hence reducing total calories consumed.

1. http://en.wikipedia.org/wiki/List_of_countries_by_food_energ...
Seems to be their thing

QHandJoob

QFlatBoob
Most of the people running servers are doing it as a desire to be the part of the ecosystem who runs servers. They aren't interested in making money off the ecosystem as much as becoming a part of the ecosystem, and as server ops have been since the first days of IRC and the earliest dialup BBSes decades ago, there's more than a little power trip involved. If they wanted money they'd spend time on mturk and easily make more, unless they somehow go pro and make it into the really big leagues. Much like pro sports.

I'm guessing the pirate effect wouldn't be an issue because the "pro mod writers" would be about 10x more excited about the topic than "pro server operators" for obvious reasons so the mod store writers wouldn't do anything too dumb... I hope. One rather trivial and easy to implement solution is MC currently has a centralized auth system for MC users that existing servers talk to (I have a server in my basement, and I am made well aware from my kids when the MC auth servers are down), and extending that a tiny bit to auth both MC and mods isn't much work other than a bit more traffic to the auth server, which they can probably afford by skimming off mod sale prices. So you can tell the server all day that you have a copy of mod name jiggy-2011, but when the server turns around and asks the existing centralized MC server if username jiggy has actually paid for mod name jiggy-2011, then ...
Paleo diets happen to be high protein and low carb. Protein is the most satiating macronutrient and carbs are the least. This type of diet is effective because macronutrient ratio it makes it easier to have a calorie deficit and not be hungry.
I just know my my children rebel by buying Apple products and have no technology skills. (Their rebellion choices could be way worse) They use "leet" speak on sms. I always hated it and didn't use it in my OLD warez days on the C64 NASA (North Atlantic Software Alliance) cool name huh? :)
Spotify Web API
JavaScript crypto is simply not a protection against that attack model. It is protection against the attack model of the passive eavesdropper. That's all I'm saying. I completely agree with what you say.

Whether you view that attack model as something worth considering depends entirely on context. But it's a valid view for many applications. As long as people don't use it with any expectations of security under active attack models, I'd say that's okay.
Though I would necessarily say it's that simple, the article kinda seem to end up with a similar conclusion

> So, there’s no hard and fast evidence yet that we should be eating like cavepeople. It is of course unhealthy to eat a diet which mainly consists of highly processed foods like white bread and sugary cereals, but this doesn’t mean that all dairy products and grains need to be avoided unless you have a specific problem with them.
The case for a monopoly has been put - and it's one I agree with - but I' with camperbob here, patent monopolies are too long. They don't respect the change in product lifecycles that's come about in the last century or so.

If it took 10 years to produce the next line of products and if products were manufactured to last that long then 15-20 years seems fine.

But the patent term is far too long compared to the product lifecycle (in computing/electronics fields at least); patented tech is too often redundant by the time it enters the public domain.

I'd like to see maybe 5-8 year terms and possibly with a cap that looks something like "if global revenue is 100 times the number of inventors times 50 years times the 90th percentile pay in the country where patented the patent lapses" (the idea being selling at a 1% patent premium that returns enough to reward the inventors with never having to work again means the patent should lapse) [but admit that would be a very hard law to draft without leaving loopholes; there's probably major flaws too, one really would rather look at profit but it's too easily manipulated I feel].

Anyway, can someone justify the 15-20 years over a 5-8 year term (for electronics, say)?
Given that it's been a mystery which patents Android might be infringing, what is the likelihood that those patents fill their original purpose of promoting progress? (Beyond the effects obtained by simply implementing them and selling the product.)
Designer (the old IDE) was pretty bad. Besides that there were two choices for the backend compiler/toolchain, Imagecraft and HiTech. Imagecraft produced awful code, and HiTech got bought by Microchip, who promptly killed all upgrades and support for the product.

Creator was a fresh start and plays much nicer. But that's not to say it doesn't have problems too.