skysight-inc/HackerNews huggingface dataset:
Good luck getting your users to come back and trust you after a major security incident that compromises their systems. I would turn it around and think of it this way, is it worth giving up some profit to help ensure you don't have embarrassing and damaging security issues? It's like insurance, you pay the premium and hope you never need it.
So I agree that it would be outrageous for to throw these folks in jail for this.

But it does seem worth following up on. Not because they did bad, but because it's important to learn how they did what they did. And demonstrating to potential terrorists that you're capable of finding people who breach security at landmarks seems like a good thing to do.

The Brooklyn Bridge would be a reasonable terrorist target. We collectively spend a lot of money to try to make it secure, just like we do with basically all large buildings. And that feels reasonable to me, and I imagine to a lot of other people. (e.g., I'm not sad some of my tax dollars go to protecting the Golden Gate Bridge[1])

And, so, I dunno, NYPD hasn't thrown 'em in jail yet, and they've only said "It is a matter of concern... I am not particularly happy about the event." So I guess I think it's a bit unfair or unhelpful to judge everyone's handling of it quite yet, everything seems sorta fine to me as of now.

Also what an awesome prank, I love it.

[1] http://www.nbcbayarea.com/news/local/Protecting-Our-National...
I love the intention of making the shows affordable and peg costs to a per-user basis. The reality in the U.S. is that big urban markets like NY, Boston, SF, LA, Washington, etc. are flush with cash, while stations in in small rural markets struggle to make ends meet. If federal assistance to CPB dried up, it's these largely underserved rural markets that would go dark, not big cities.
I've heard a lot of good things about Moose, the Modern Perl effort & so on. Enough that I periodically think about jumping back in the Perl waters. However, I always wonder if it's worth it, because Perl 6 is always "not far from release", so I figure I'll wait to check things out again.

Until the Perl community resolves the issues with Perl 6, the waters are too murky for a lot of otherwise would-be JAPHs.
Those reasons are mostly obsolete already. But it was never rebranded back:

https://bugzilla.mozilla.org/show_bug.cgi?id=555935
>And please stop with this "terrorist" scare mongering! We as a society (or the media portrayal) are becoming a bunch of paranoid jerks parroting this nonsense and wasting taxpayer funds when the NY cops have many more important issues to deal with.

Yeah, I heard we're nearly at the point now where we're going to go around putting hidden motion-triggered cameras literally everywhere.
Not to mention that if the cost of car ownership does go up an order of magntiude, the price of uberX would probably also go up quite a bit.
When someone bakes kerfuffle muffins, you need to screenshot that shit.
The problem goes deeper. That firewall (Little Snitch) updates itself over port 80, so most likely unencrypted.
A New Bike With Buzzing Handlebars That Give You Directions
I imagine they'll use NFC not wifi. I don't think it would be hard at all to make it more secure than existing key cards.
Lets not forget iPhone in available on more networks in US because of Android threat :).

More App's (By that I mean both in number and Quality) available on Android than iOS is not something Apple would want to become a common theme. That alone already made them more open and will continue to do so.
> Advertisers want it one way. They want to send a message, and they want that to be the only thing said.

I believe this is a byproduct of advertising evolving in a largely a one-way, broadcast mediums (e.g., TV, magazines).

Clever brands are learning the importance of having an online identify & bi-directional communication. It's a big change, but the brands that get their first are going to find a big advantage.
Jesse Jackson: Tech diversity is next civil rights step
Taking some of the larger drug and tech companies to task for their behavior ought to happen in the US as well. Not suggesting there aren't motives beyond the good of world citizenry coming from the Chinese government, but still.....
>You can't guard everything all the time.

No, but you can put everyone under the constant threat of imprisonment for nebulous reasons, or no reason at all, and there is some glitch in human reasoning that conflates the two.
Screenshots can be easily faked.
You don't know how to write readable perl?
Hosting your own makes sense for multiple reasons: you can be assured what code you are getting, you aren't limited by bandwidth rates of remote providers, and you get to control up/down time. The first is a must; the second and third make life more tolerable.
"Creates" is not normally used in the future tense.
http://s9.postimg.org/mtgm20ykf/image.jpg
Bingo! This is precisely what I was looking for. With the number of calls I receive, I need to figure out which ones I can safely ignore. Contactive rocks.
With Maven you specify the versions of libraries, jars are cached locally, and you can run your own local Maven server if you need to.
I've written/read/reviewed lots of Scala code and can't remember seeing it be an issue. Certainly not a huge one. I'd like to see a pointer to that thread if you can find it so that I know what to look out for. Maybe include that as justification in the SIP.

If this was such a `huge` issue, I strongly question how code of such importance would be written without a unit test accompanying it that calls the method at least once. If you are going to write code where having unit inferred is going to be a 'huge issue' what the %$&# are you doing not unit testing that method? Is it reasonable to assert we make the unit test harder to write (unit tests are typically procedures) and make this bug even work to catch in the first place?

If this is done with a -Xlanguage flag or made as opt in warning then that sounds very reasonable. It's going to be a lot worse if the first thing a newbie sees when they copy paste a main method in from an old tutorial is 'Error: Procedure syntax is deprecated'. No matter what the parser is going to have to parse the procedure syntax anyhow, in order recognize that form and give a reasonable error message for new users copy pasting in code. So it's not like we all that parsing code disappears.

>Additionally, compiler warnings will become configurable, so that developers can choose which warnings add the most benefit to their workflow.

My understanding was/is that this is going to become a compiler error. If it is going to just be an opt-in -XLint:procedureSyntax thing, then why isn't it being done for 2.11.3 ??? If the plan is just to make an opt-in warning I can rest easy, because I will simply never turn that linter warning on. I would however suggest to consider making it a -Xlanguage so that like postfix ops it can be disabled/enabled where needed.
This is true; at the time of implementation so few Clojure libraries were signed that taking it the rest of the way was not a clear win.

But clearly the job isn't finished; even if Clojure developers do a good job of signing packages and signing each others keys, (which is not generally true today) it still needs to distinguish between signed packages and trusted packages. Hopefully the next version can add this. But as with anything that requires extra steps from the developer community, a thorough solution is going to take time.
http://s17.postimg.org/htdtzm1of/image.jpg
Maybe I'm misunderstanding the use case. The dealbook article makes it sound like this is a time saving utility for junior analysts, many of whom have to do the same work, but at different banks. Did I understand that correctly?

If so, I'm still unclear as to why banks would be okay with institutionalizing what seems like a pretty sketchy process. As a junior analyst, sending internal spreadsheets to your friends at other firms, just so you can save time, does not seem like the most policy-compliant approach to reducing your workload. I fail to see why banks would be okay with their junior analysts sharing spreadsheets with their counterparts at competing banks, especially when sent through a third party.

Obviously you know more about this than me, so hopefully you can clarify.

EDIT: after checking out your site instead of just the (poorly explained) article, your business makes far more sense. However my question still stands in regards to collaboration. Won't companies want to protect internal modeling strategies?
Nice, I was going to ask if maybe Google or someone invested heavily in Android could step up and provide a secure source of dependencies for everyone.
This is pretty awesome. But do I wonder if something like this will be implanted by default at some point in human history and only removed when certain specifications are met.

I don't know if that would be bad or good. Looking around the world I'm not sure I feel it would be all bad. But yes.. abuse potential and _who decides... I know....
This is apparently a month-old announcement, and is available from many sources that don't inject quite so much editorial bias.
Hustler News
My humble homage to Hacker and Designer News. Currently just me posting articles I've liked, mostly from Medium.
Blog spam, original article: http://www.bbc.com/news/technology-28193720
I had a small website - a content aggregation - on which I put Google AdWords on. This was about 5 years ago and it's still going. It generates anywhere between 50-100 per month. Not much, but has been enough to support all of my other side projects.

Do you really need to start with $300/month fee? Can you start small(er)?
I stayed at a Hilton property maybe a month or two ago and they already had converted the door locks over to use NFC. The room keys were your typical keycard size, except they had no magstripe and there was an NFC tag embedded within the card.

I assume the next step would be for them to deploy a phone app which emulated the NFC tag.
I use LightPaper and like it a lot. The features I like most are side by side preview and editor window and export to PDF and HTML. Previously I was using Mou but gave up after stability issues.
I'm holding out for Vasalgel. It was featured a while back in Wired and I've been following it since: http://www.parsemusfoundation.org/vasalgel-home/

That being said, I'm glad more options are being explored.
This happened to me too, except we ended up in an hour-long traffic jam. Still didn't cost very much, and traffic was pretty bad elsewhere, but yeah.

Basically, if your Uber driver starts using a traditional GPS instead of Google Maps, get worried. That's my experience using Uber in LA for longish trips out to Marina del Rey, anyway.

(Going the other way: "The LA convention center? Where's that?" "Right next to the Staples Center." "Do you know what streets?". I did, but really? I'm from New York and don't have a driver's license, and _I_ know how to get there...)
Dropbox's Head of Design on the Dawn of Personalized Products – GrowthHackers
Am I the only one that thinks this is evil and scary?

I do hope governments rule against this kind of technology as extremely prone to the abuse of human rights. If you think arranged marriages are bad, what about 100% out-of-your-hands, in-your-parents 'arranged fertility'?
SSL would have partially mitigated this attack, but it's not a full solution either. SSL is transport layer security -- you still fully trust the remote server not to give you cat memes. What if this wasn't necessary? Why can't we embed the hash of the dependencies we need in our projects directly? That would give us end-to-end confidence that we've got the right stuff.

This is exactly why I built mdm[1]: it's a dependency manager that's immune to cat memes getting in ur http.

Anyone using a system like git submodules to track source dependencies is immune to this entire category of attack. mdm does the same thing, plus works for binary payloads.

Build injection attacks have been known for a while now. There's actually a great publication by Fortify[2] where they even gave it a name: XBI, for Cross Build Injection attack. Among the high-profile targets even several years ago (the report is from 2007): Sendmail, IRSSI, and OpenSSH! It's great to see more attention to these issues, and practical implementations to double-underline both the seriousness of the threat and the ease of carrying out the attack.

Related note: signatures are good too, but still actually less useful than embedding the hash of the desired content. Signing keys can be captured; revocations require infrastructure and online verification to be useful. Embedding hashes in your version control can give all the integrity guarantees needed, without any of the fuss -- you should just verify the signature at the time you first commit a link to a dependency.

[1] https://github.com/polydawn/mdm/

[2] https://www.fortify.com/downloads2/public/fortify_attacking_...
no, because Perl is a write only language ;)
I prefer driving, but am ok with being a passenger in the right car with a driver I personally know (i.e. my driver, vs. even a random guy from the motor pool, and certainly not UberX or a black car/taxi driver). For me I'd pay $50/hr to drive on a great road, $20 for most roads on e.g. the Peninsula, $0 for stop-and-go or SF anytime, -$20 to have a meh driver drive me around (black car or great uberx) or a very luxurious or empty train; $0-20 for a great driver I know and trust, -$50 for most taxis or a slightly crowded train, and -$100 for Thai taxis or public transit on wheels.
I see that I have confused the order of the 49ers' odds.
Migration tools aren't panacea they don't fix stackoverflow answers, pdfs, blog posts, existing tutorials, talks, slides, examples, mailing list posts, or irc logs.

They also require locking a codebase and making massive changes all at once.

It should be preferred to just add them as -Xlint:XXX warning / -Xlanguage:XXX features that can be opted into, along with a tool that will automatically update the code to best practices.

This way no legacy codebase has to undergo the massive cross-cutting refactor required when running a migration tool, instead they can opt into the features they want, and new users copy pasting in code will see that code work.
When people say "gratuitous and destructive forks", they aren't referring to the fact that a fork was made, but the method that was used. Instead of cleanly making a new fork, they tried to take control of ffmpeg itself, making the situation worse for all. They also perpetuated a rumour that the ffmpeg project was dead, when it clearly wasn't. Often just the fact that you make the fork is enough to revitalise the development of the original project, or it will stagnate naturally as people use the fork.

As a recent example, no one has tried to take over openssl's development. A number of "fixit" forks have been made, and either openssl will lift their game, the forks will diverge, or they'll be merged back together.
there are a lot of things one would like to control from his/her Android. For example specific neurotransmitter level (right now it is done by drugs (legal and illegal)) by remotely commanding the chip to increase release or to stop releasing it. Reminds about Mr Data turning his emotions chip off.
Sandstorm (on the front page right now) has an interesting take on this issue: https://blog.sandstorm.io/news/2014-07-21-open-source-web-ap... I don't know if their approach would apply to your idea, though.
Full-time travel, photography, and meeting people the world over and listening to their stories.
1. Heroku is expensive. Odds are you can get the exact same virtual/hardware specs with a cheap VPS from Digital Ocean or Linode or any of various other providers. It'll require a tiny bit more setup and configuration on your part, but it'll save you money. You could also consider shopping around lowendbox.com and lowendtalk.com to find the best current deals.

2. Optimize your application so that you won't need to scale via upgrading or adding new hardware for a long time. Be mindful of your database queries, cache things in the application itself, and use a caching web server like nginx as well. Only upgrade or scale to multiple servers if you've optimized everything as best you could at all the software layers and yet you're still experiencing more traffic load than you can deal with.

I've run medium-traffic sites and applications off of $5 and $10/month VPSs by following those 2 steps, with consistently good and stable performance and latency. My guess is that if you order a cheap VPS from the start and do everything else right, you'll find that it'll scale just fine for years and you won't ever need to leave it.

3. Have a donation banner and if it fits okay with your application, place ads.
I'm not sure those are particularly compelling reasons.

Of the "12" reasons given here, fully 6 boil down to "investors don't like LLCs". This, of course, is true. What the article doesn't go on to say, but maybe should, is that "investors don't like C corporations either". Whether you're an LLC or a C-Corp, the odds as I grok them are pretty good that your first institutional VC investor --- should you ever close a round of financing --- is going to build a rewrite of your corporate structure into the closing cost of the round.

Of the remaining 6:

* Reason 3 requires us to stipulate that the LLC agreement, for some reason, prohibits reinvestment of income into the company. You could design an LLC agreement that did that, but why would you?

* Reason 8 suggests that there is a specific case where your LLC is acquired in which there's a tax advantage to not being an LLC. Ok.

* Reason 9 argues that LLC agreements are harder to draft than corporate documents. I think this is probably just false. Certainly, the legal costs of setting up a C Corp are higher than those of an LLC, which most people set up without legal help at all.

* Reason 11 suggests that because LLCs are defined by membership agreements, which are just contracts, they can get hairy. This is a generalization of reason 3. It again requires us to stipulate that the members of the LLC have elected to complicate their membership agreement. Who does this?

* Reason 12 says that Section 1202 and 1045 rollover benefits aren't available to LLCs. OK, then.

* Reason 6 says that equity comp in an LLC is more complicated than that of a C- or S- corporation. This, as far as I understand it, is actually true. You can provide employee equity compensation in an LLC (we did), but it's not as flexible as what's available in a C Corp, which can have multiple classes of shares.

There is probably a lot of validity to these 6 points that I am missing because I'm not a lawyer. I just don't read them and see things that would have impacted my last company --- an LLC, and a decently big one --- operationally.

I feel like I often sound like a cheerleader for the LLC. I'm not. But it's cheap and easy to set up an LLC, and it's really not all that easy to set up a C-Corp. To my mind, the most important benefit of having a corporation is the ability to enter into corp-to-corp contracts, which is a problem LLCs solve just as well as C-Corps, with less drama. From what I can tell, plenty of corporations start off as LLCs and then convert to C-Corps when they raise money.

People should probably do the simplest thing that can possibly work, rather than spending thousands of dollars on corporate structure for a business that (like all businesses) is more likely than not to fail in its first year.
I'm not sure the freedom to reproduce as much as one wants under all circumstances is an inalienable human right. Others might feel differently.
I liked Neukoelln but was only there for a couple weeks.
HackMIT Puzzle Guide
Looks like he's losing a battery percentage every 3 minutes, he may not make it!
Python and Ruby are just as bad as Perl for this. Python being the least fluent of the three for scripting.

If you want a proper language to support your scripting goals, then if you go right up to something like Ocaml or Haskell you'll skip all the pointless stringly-typed problems of perl/ruby/python.
Napster Owner Rhapsody Passes 2M Paying Users
A moderator might want to change this to http://status.bitbucket.org/.
So the apps on the platform are essentially forked versions of open source apps. If you're editing the authentication system, which I imagine can introduce some heavy dependencies, how do you plan on handling updates from the original developers? Presumably there will be manual labor involved with merging the origin master branch into the Sandstorm app. Do you plan to do this yourself?

Nice implementation.
"We have identified the need for urgent Network Maintenance to maintain redundancy in our network. We expect there to be a few brief (less than 3 minutes) outages during this maintenance window. We apologize for the short notice but, want to make sure we address the redundancy sooner rather than later.
Posted about 4 hours ago. Jul 29, 2014 - 1:00AM UTC"

Funny they called unscheduled downtime, urgent scheduled maintenance of 3minute random blips.

Looks much more severe than 3min outages.....
That may be the case, but did any of the banned Bitcoin apps actually try to do IAP? How would Bitcoin IAP work, given the lack of inter-app communication in iOS?
In the general case, you'd take whatever formulas you have for return rate and corresponding probability (e.g. exponentially lower chances of exponentially higher returns), and feed that into a definite integral from -infinity to infinity (0 to infinity in the case of a model like investment return rate where you theoretically can't lose more than you put in). Consider, for instance, that the area under a standard normal curve (like any probability distribution) is 1, yet that curve extends infinitely in both directions, and there's a non-zero chance of it producing an arbitrarily large value.

If you have a continuous analytic model, you can integrate that analytically (or for the various standard models, just look up the answer based on the parameterization). If you have a discrete analytic model (a step function), you can construct an infinite series. If you have a model based on discrete statistical samples and extrapolations thereof, you can use a combination of numeric integration/summing and model-based bounds.

So, even though the total possible return on a business venture is potentially unbounded, you can still establish a finite expectation value for it.
Got the instasheep domain name if you want me to point it at a github repo.
Rather than releasing hormones into the entire bloodstream, isn't it possible to implant this closer to the reproductive system so that it can affect ovulation more directly? With the right sensors, it might even be possible to detect the ovulation event and activate only during that time period?
How far could you get with the free tier on OpenShift?
I don't want to dismiss such a concern out of hand, but if a government has decided to take away the right to determine ones own fertility, this is the best option. An individual can break into their own implant and digitally flip the switch - which seems better than alternatives.
And it's back.

Hence why you should git push to multiple locations for circumstances such as this.
It's hard to take people seriously who suggest Haskell as a good language for general scripting. That's some powerful religion.
Have you considered VPS? There are quite a lot of hosts these days that are reasonably priced - Digital Ocean and Linode come to mind first. Initial setup is usually all about trying new things and testing and starting small may be more cost-effective at least in the short term.

Depending on how efficiently you create the site and its functionality, you may be able to get away with minimal resources.

Edit: Ah, meowface beat me to it! :-)