skysight-inc/HackerNews huggingface dataset:
I do suggest we scrap it all and go back to the 1950s. Let people walk right out to the gate to meet arrivals. Let people run through the airport right to the gate without having to stand in a line at all. Even the level of security we had before 9/11 was misguided and caused more deaths than it saved.

Here's all we should do: leave security policy up to the airlines themselves. Then there won't be the sort of single points of failure we have now. If one airline wants to reinforce the cockpit doors or arm the pilots they can just do that without getting permission from a central authority and making that the new mandated standard. Get rid of one-size-fits-all security. Let "convenient security" be just one more attribute that airline companies compete to provide, along with "comfortable seating" and "frequent flights".
Java's pluggable type system can do this. The Checker framework provides a Units checker that can be plugged into the compile stage. See this blog for more info: http://blog.paralleluniverse.co/2014/05/01/modern-java/
It's interesting, but definitely have room to be improved. It doesn't seem like having a lot of users on board. Probably user engagement will be the next step to take to make it more fun.
Ask HN: Recommend cybersecurity books
Just bought Cybersecurity and Cyberwar: What Everyone Needs to Know (http://www.amazon.com/Cybersecurity-Cyberwar-Everyone-Needs-Know%C2%AE/dp/0199918112) and am loving it so far. Have read about 100 pages and it's very nice.

I like the way the book is written. Not too technical, meant for broader audience. It's also got lots and lots of examples of real life situations from the past decade(s) and not too much technical jargony. But that's also what bothers me. It's very funny book to read, but more details would be even nicer. I like details and the technical part of these things.

I'm studying CS and my main subject is data security. So I'm completely familiar with all the stuff you, the reader of this question, are too. If you know a good book from either category (for broader audience vs. technical and dependent on previous knowledge), and it touches cyber-this-and-that,

please, recommend me more. Share your thoughts on the book, too, so everyone knows why you're recommending it.
Not bad if you're already in the market for something. I just saved $10 on a $25 gift card.
You're right that there's nothing inherent to the tablet form factor per se that makes it less vulnerable to malware. It's just that the different input mechanism and smaller screen size makes backward compatibility less useful, and it's easier for platforms (including Windows RT) to build security into their app models if they don't have to worry about compatibility.
thanks for the feedbacks. Yea, it is just released. hope you enjoy it.
All the more reason not to use them so widely. They sometimes are invasive and behave like a virus (GPLv3).

PyQt4 vs pyside is a good example of licensing done wrong, I am not sure licensing a library under GPL would help others as it restricts the projects using them to use only GPL. It means that if you just link to it (just use the names in your program and rely on the client to have installed the right library) then your project needs to be at least the same version of GPL.

Then we have pyside who reinvents the wheel for people who cannot afford to pay for a simple layer between python and qt4.

LGPL is fine though for such uses.

But the main point I want to make is that people using those license seldom read them entirely, which makes it actually a big show stopper and ruin their effort to help the community.
Yeah the system is basically optimized for "spend as much time at the office as possible" as a measure of productivity. Over a long period of time, with a lot of people, things do get done, but it's horribly inefficient. Meanwhile in a lot of other countries, hardly anyone even has an office to go to at all. Globally, the bar for productivity of human labor is really quite low.
A better emacs extension lisp? How about this attempt in Clojure: https://github.com/hraberg/deuce
Another dis-informational headline. The press can be excused for this, but MIT should know better.

More realistically, 'when working with machines to do repetitive manual work, people prefer not to have to think so much.'
Many many colleges have online bachelors programs. This is just one that I know has a decent reputation.
Absolutely horrible idea. Linux users aren't exactly in desperate need of protection from their computers.
Oh I live on the east coast and experienced this from DC to Baltimore to Philadelphia to New York.

Again, not everyone in the "scene," is a dBag, it's just jarring to meet and encounter a large percentage of them!

It makes starting up and doing a start up a whole lot tougher, but whatever you just do it because you are driven no matter how you are treated.
Everything there besides Proxies and Symbols is already in common browsers, and I can't say I'm familiar with Proxies and Symbols in other languages (not to say some other languages necessarily don't have them, but I don't think most users consider them basic or encounter them often).
Keep in mind that perception matters a lot. This is, for example, a big part of how the TSA obtains "cooperation" from air passengers in the United States -- even though they aren't law enforcement and can't perform law-enforcement tasks like arresting people, everything about the way they present themselves (uniforms, badges, etc.) is designed to create the perception that they are and they can.

So if I'm on a train and it stops at the border, and a uniformed government official comes in and asks to see my passport and then starts asking me immigration questions, the perception is not "this is an uncontrolled border, just got a random check that could have happened anywhere in the country". The perception is not "oh, this officer can't actually deny me entry".

The perception is "this is an immigration check at the border", and the dynamic of the situation flows from there.

The ticket checking by rail crews does seem to be an entirely German thing (again, other countries' rail crews just had a list and marked which seats had been checked, so even if another crew or crew member came through later they didn't need to repeat it), and I suspect there's a larger cultural pattern here tied into things like the German identification-obligation laws (which, to be honest, made me more than a bit uncomfortable when I learned about them -- I have enough trouble with the idea that in my home country courts have ruled I can be subjected to an ID check at any time, learning that it's still a deeply-ingrained thing in a country with Germany's history is off the scale of unsettling for me).
1000 printable bingo cards? Python does that
Thanks, yea we were definitely inspired by the penny auction sites. However, we saw them as predatory. The nice thing about VidFall is you can't lose any money. Just a fun way to get discounts on gift cards. Thanks for the feedback.
I attended Epicodus, and though I had prior experience I ended up with a wonderful job afterwards and found the experience amazing. 90+% of the rest of the class got jobs as junior devs or better as well. Email me if you wanna chat, its in my profile.
I could have worded this more carefully. I apologize.
The part you misunderstood was that that police officer couldn't have denied you entry into the country.

See my other reply about the importance of perception:

https://news.ycombinator.com/item?id=8220096
Cynically brilliant. If this works, you've built a platform for the consumption of product ads, in which you consume ads before buying into the original ad.

It just might work. I hope it doesn't, for moral reasons.
How exactly has airport security caused any deaths?
The Secret World of Fast Fashion
Does moving the "attack zone" make any sense? What if someone bombs the car park -- will the airport stop allowing personal cars into it?

I know I'm not the first to say this sort of thing, and maybe it's cliche, but really, what is there to protect at the front of the terminal, that is not just as vulnerable now in the car park? (Edit: I recognize the poster I'm responding to hasn't necessarily endorsed the authorities' action in this case.)
I am the Cofounder, thanks for the post!
Nice idea. I could imagine playing this against friends who are in the same Twitter clique.

Asking me the Twitter client or banner was a turn-off. I may have an incentive to say I know what so-and-so said or would say, but asking about the Twitter client is a bit trainspottery.
That's when the weekend projects become necessary.
Why would the airlines have incentive to provide good-quality security? Terrorism events are rare and it seems unlikely that a reasonable amount of security infrastructure that the airline could provide would result in a substantial decrease in the probability that a sufficiently-motivated terrorist would be successful with an attack against that airline.

I just can't imagine we would get anything more than the airlines putting in a minumum amount of security theatre to meet appearances for the customers and appease the local regulations.
Seems like a variant of swagbucks (http://www.swagbucks.com/) except the discounts you earn toward giftcards from watching videos gets pooled toward the one person who decides to buy first.
I'm in the top 10 and I have only watched one video. Awesome.
It's from blackhat USA 2014 (Aug 6/7), when the video is uploaded it should be posted here: https://www.youtube.com/user/BlackHatOfficialYT/videos
I don't "hate" static typing. I dislike the current proposal though, because the proposed syntax is a horrible wart on top of a very elegant language.
Forging a Real Katana: Secrets Revealed
If your partners actually care about your product, get them to pay for it, enough for you to continue working on this product. If you need to find more partners to make $, do it. Put yourself in a state where funding is no longer a requirement, and you will then find more funding. Yeah, it's weird how this works.
That's the idea behind the classic dutch auction, my friend.

While I'm also unlikely to patiently pinch a few dollars, I find it mildly interesting.
For San Francisco/Peninsula DMV locations, the drive test is reasonably challenging and involves signal use, merging, making unprotected turns, backing, and complex intersections. I failed it twice with my parent's car and resumed my attempt to pass a few years later, this time paying for lessons.

Like every other merit-oriented institution, there's an industry around gaming this system. Besides having valuable information about test details, the driving schools get to jump ahead of the line and get earlier test dates and plusher time slots, and take their lesson fee on top of the test fee. The message is pretty clear: Fork up the cash to go through a school if you want to get your license in a timely fashion.

The schools themselves vary from utter crap to the guy that I went with(Mr. Yu), who has done it part time for over 20 years and has perfect knowledge of all three of the designated routes the Daly City examiners use, tips for each intersection, tips for some specific examiners(!), and a pleasant and persistent attitude. Mr. Yu is popular enough to be booked solid for a month in advance, but apart from that there's hardly any wasted time - I am paying about $700 for three sessions of two hours(that time including pickup and dropoff, all of which I drove on my own) and the test itself, which I'm taking in September.
>So what's the solution? Not having null references and having explicitly typed arrays.

Throwing the baby out with the bath water. Null types are extremely useful.

I don't get why the author claims the null type in C# is a form of "damage". It's just said that it's bad, not why. The problem with None in python was that you can't tell what it's supposed to be. In C# you know what type the null is meant to be.
Near as I can tell, he's devoting more than 10x the resources to this class. Instead of 1 lecturer + 500 students, it's 1 lecturer + 50. Plus 2 hours of extra instruction, so maybe it's 16x resources (assuming chem is normally 3 hours of instruction/week, (5/3)x10 ~ 16). Plus advisers tracking these students, peer mentors, etc.

It's hardly clear that graduating additional marginal students is worth 16x what graduating a normal student is worth. Can you explain why you believe it is?

Lets put the numbers into perspective. Instead of teaching 1 remedial 50 person class, this guy could teach a second 500 person class. 450 additional students could be educated at UT. Why is Vanessa worth more than 10 better prepared students?
TSA has more than a bit of scope creep going on. In theory, all they're supposed to do is a basic administrative search to prevent weapons or explosives from being brought onto a plane. In practice, the perception in the public mind that they are a more general law-enforcement body allows them to easily perform other tasks on behalf of agencies that don't have the same general search powers.

The classic example is searching for large sums of cash. Detecting large quantities of traveling cash and ensuring it's been properly declared is CBP's (Customs and Border Protection) job, not TSA's. But because TSA gets to X-ray and search every bag and body-scan every passenger, they catch that stuff, and then hold the passenger and go get CBP.

The result is that the number of outside-the-mandate things that can end up happening as an "incidental" result of TSA's screening is staggering.
I'm not sure if it's true, but I've read that the airlines didn't want to have any part in security after 9/11 because of the liability.
> with Proxy you don't have to write the functions any more, you could just define that one get on the handler you feed into Proxy

Doable with "old" JS. Consider this function:

function prop(name, gNs) {
var _name = '_' + name,
get = gNs && gNs.get,
set = gNs && gNs.set,
undef = function (v) { return typeof v == 'undefined'; },

if (get && set)
return function (x) { return undef(x) ? get.call(this, this[_name]) : (this[_name] = set.call(this, x), this); }

if (get && !set)
return function (x) { return undef(x) ? get.call(this, this[_name]) : (this[_name] = x, this); }

if (!get && set)
return function (x) { return undef(x) ? this[_name] : (this[_name] = set.call(this, x), this); }

return function (x) { return undef(x) ? this[_name] : (this[_name] = x, this); }
}

Pass `prop` (a) the name of a property you're defining getter/setter methods for and (b) an object with any custom getter/setter you might care to define (or neither, if you like), and it'll return a function that will act as both which you can assign to a prototype.
This isn't correct. They are checking for THC, tetrahydrocannabinol, the active ingredient in marijuana.
It won't, advertisers will eventually stop paying for impressions on this site and ones like it.

That's my guess anyway.
Thanks for the reply Kirllzubovsky...

For the most part as soon as the product is launched (about 2 weeks) they will be paying...60% of all monthly revenue generated. More partners are definitely ideal...just scared shitless (pardon the language)about overwhelming our entire group as were stretched thin already...but you're right...more partners certainly does = more money coming in, as well as more proven traction...

Appreciate the feedback Kirllzubovsky. Thanks.
Ask HN: Pros and Cons of different “HTML5 to mobile app” services?
It looks like I accrued one point for watching one ad. Cool.

Now I try to reduce the price of an item:
(First number is the points I need to reduce by that amount)

50 ($0.01)

100 ($0.02)

500 ($0.10)

1000 ($0.20)

2500 ($0.50)

5000 ($1.00)

Do I need to watch fifty ads to reduce the price of an item by one cent?
Airport security makes flying much more expensive (both in time and in money) and inconvenient and generally unpleasant than it would otherwise be. So many people who otherwise would take a plane on a short trip choose to drive instead. Some of those people die needlessly in traffic accidents, since driving is orders of magnitude more dangerous than flying. That's the primary mechanism of harm.

A common estimate I've seen is that roughly 500 extra people a year die due just to the added security costs post-9/11.

A little googling finds a few relevant popular-press articles including these:

http://www.businessweek.com/articles/2012-11-18/how-airport-...

http://www.wired.com/2012/04/is-airport-security-killing-500...

One of the relevant academic papers is by Cornell University researchers Garrick Blalock, Vrinda Kadiyali, and Daniel H. Simon, “The Impact of Post-9/11 Airport Security Measures on the Demand for Air Travel,” published in The Journal of Law and Economics in November 2007. (pdf here: http://dyson.cornell.edu/faculty_sites/gb78/wp/JLE_6301.pdf )
So, you run as root at all times? :)
Skycure (for iPhone)
Python's API structure may be fast and loose, but that is a feature, I think. Its type system may have some threadbare implementation spots – the _sre example from the standard library, for instance – but there are some compelling examples as well.

I, for one, have been working on an app implemented mostly with PyObjC, the bridge between Python and Objective-C. I had all but written off PyObjC as a bizarre yet unuseful language mule... but lately I had the occasion to read through the PyObjC source code base, in service of my project. Did you know that when you subclass a wrapped Objective-C type in Python, an all-new Objective-C class is created and wrapped as the descendant class, behind the scenes? That blew my mind.

That happens transparently, in concordance with Python's type heiarchy and runtime ABI. As it turns out, PyObjC predates Mac OS X, and the authors have put a lot of work into mitigating things like the GIL and system events.

I am also a fan of Django's field type system, as the author mentioned – and I am curious about what he thinks about descriptors (which he mentioned one but did not address) – I think descriptors are an amazing addition to the duck-typing regime in Pythonville.
> Proggy Tiny for the input console

I would humbly suggest trying either MonteCarlo [1] or its derivative, Tamsyn [2]. Certain characters (like the "@" symbol) look much better in either of these fonts.

[1] http://www.bok.net/MonteCarlo/
[2] http://www.fial.com/~scott/tamsyn-font/
Do you know a place to find more examples like these?

When I was re-learning Vim a few years ago, I found things like VimCasts to be incredibly useful -- reading documentation is one thing, but seeing how experts use the tools made a big difference in understanding for me. I suspect something similar would be helpful in moving beyond using Alfred as an application launcher and file explorer.
Yeesh.

The picture in readme is one running a fake program I was using for testing. If you'll notice, none of the options particularly make sense -- heck, the output of the program (shown toward the bottom of the readme) is "printing message at: {hash}"

If you take another look at the readme, you'll see that it supports `choice` style params. Which reads in the options available and presents them to the user via a dropdown.

So, friendly options are a'plenty! :)
"Pulling the Curtain on Airport Security" - This article's title. Wow.

Almost all airport security is a theater... The TSA are simply the actors...
The biggest thing I always look for in a VPS host is customisation. Let me choose the memory, disk space and prepaid transfer allowance. Being able to choose the number of cores would be a nice bonus.

I realise this makes billing more complicated but it must be possible, my current host offers this (and the option to rent a dedicated physical machine(s) to get full resources to myself)
I don't think you read what I wrote. I could come up with all kinds of shit I want 6 years olds to do, and come up with tests for it.

The point isn't whether or not I could. The point is whether or not I should.
This was at an organization that I don't work for anymore, and my recollection is a bit fuzzy. I think it was Computer Vision, Signal Processing, Wavelet, and Image Processing.

There were also some convoluted, non-technical reasons that we went with MATLAB.
Well ... I think it's nice to see Oregon state their case so plainly - "Oracle lied to the state of Oregon".

I've see plenty of Oracle disasters, but I think if you're going to rank horrible Oracle products, you should add Application Express to WebCenter and FatWire.
Yahoo Fantasy Football messed up
What airlines are doing now amounts precisely to "a large amount of security theatre to meet appearances for the customers and appease the local regulations."

I want to decentralize for two reasons:

(1) it removes single points of failure. For instance, post-911, airlines needed to GET PERMISSION to make changes such as strengthening the cockpit door or changing the protocol for opening it. Being more flexible means being able to quickly adjust to changing security circumstances.

(2) It gives customers the OPTION of purchasing LESS security. So far as I'm concerned, the airlines I fly are already far more "secure" than they need to be - I would pay extra to fly on a plane with NO security, one where people could just walk on openly carrying a rifle if they so desired.

Were it left up to the airlines, they would have to make tradeoffs between security and every other value customers have including cost and convenience. We then wouldn't get somebody's idea of "the best possible security no matter the cost". Instead we'd get "the best possible security consistent with not spending too much money and not inconveniencing or annoying passengers very much." Which is what we really want.
It is odd, sandboxing just the graphics stack.

Since Wayland is a redesign of the graphics stack it looks like they decided to redesign it in a secure way rather than waiting for some system-wide security architecture to be designed. GNOME is working on full sandboxing: https://news.ycombinator.com/item?id=8219309

It sounds like something as simple as a keyboard macro manager would not be doable...

That's doable in the compositor/window manager.

I'd also hate to try and write UI test automation for Wayland apps.

That's possible either through accessibility interfaces ( https://developer.gnome.org/accessibility-devel-guide/stable... ) or the compositor/window manager. Note that many OS X "haxies" also use the accessibility API.

Heck what about services that do browser test renders?

That should be no problem using either a modified browser or modified compositor.
This is a quite great produce, the best for coding on the go.
There have been a number of high profile departures in the departments responsible for Cover Oregon. However there was not a single person who could be said to be responsible for the success of the project; a fact that many ( myself included ) think was one of the reasons the project failed so spectacularly.

Kitzhaber should have appointed one person to be the RP for the overall project, and that person should have had a free hand to define the vendor relationship and delivery metrics.

As a citizen of Oregon, I'm embarrassed; I'm also pretty sure that the essential functionality of the project could have been delivered at a tenth of the cost of this shitshow.
Same plan we use to prevent terrorism at bus stations, beaches, and little league games.
LWN is old school and it's all about the content.
Will the talk be recorded? Can I sign up to be notified when the talk is available? I'm on the other side of the world but would be interested too.
I think Armin didn't address these valid points, because as he points out,
"The first one is that I barely understand them[type systems] at all myself."
If you want to kill 300 people, you can just blow up five buses. It's much easier than trying to blow up a plane.
I think visually, and so for me an initial description of how a character looks is really helpful, because otherwise my brain is forced to borrow from a different story, which leads to a disconnect when details are brought forward that aren't congruent with what I've imagined.
7.0 magnitude earthquake hits central Peru