skysight-inc/HackerNews huggingface dataset:
Browsers should display GIFVs without transport controls (unlike <video>), and ignore any audio tracks that are included - basically construct a limited MP4 profile and handle it appropriately. It's a useful construct imho.
Batches of CVE numbers get pre-allocated to major players well ahead of any actual vulns being found, so that there is no need to individually request IDs from a central authority for, say, every single browser bug.

That happened here, the vuln itself is... um, around two weeks old.
You can add comments but they won't be passed along and I don't think that's the case for this either. They're just there for documenting.
Did you know there are actually a dozen+ different Fico scoring products, several versions for each of the big 3 credit agencies and several product-specific models for Houses, Cars, etc?

Lenders do not update to the latest Fico version the way we all buy new iPhones. Many lenders integrate Fico scoring into proprietary models.

Having ANY collection will hurt you, period. Even under $100. Even if it doesn't drop your fico, American Express for example won't open you an account with an open collection. Any mortgage lender would make you settle the collection before closing. So in summary, i think your advice here is very bad. Yes, if you have a collection, you MAY be able to have it removed from your reports without waiting 7 years. But it's not black and white.
GoPro camera makes Californian surfer CEO a billionaire
I'm certain you're right, but surely you can see how trusting a stranger on the internet isn't really a viable option. If you're interested in getting people to use your framework, it sure would be nice if there was a demo for your framework that didn't involve giving you so much access.
What is the innovation here?
Four mistakes in spelling 'webm'?
Two from Malawi, two from Brazil, two from Turkey, two from Japan. It was an interesting piece, but I guess the writer and photographer couldn't get as much of the world in as they would have liked.
Varnish and caching in general can be a complete mind-freak the first few times you experience it, however after working with it nearly daily for the last 3 years, I've come to love it. It has allowed me to scale a number of WordPress websites far beyond where they had business being (34mm UV/180mm PV per month on a handful of servers). Super excited to see them continuing to build in great features.
Nice reaction on Lennart's “awful Linux community” post
Interesting article. I didn't realise "romance fraud" was a thing.
Search for ":packaged" in the marketplace to find apps that are not shims around web pages. But in general, there's nothing wrong with good web pages if they provide offline support... What is still frustrating is that discovering those good ones is a pain.
Don't go there. :)
Hybrid materials could smash the solar efficiency ceiling
This is what happens when "growth hackers" get a hold of your sales strategy.

They re-frame the conversation to center around meaningless (although indirectly related to sales performance) metrics that give the sense of success but do everything to shroud real success. Kudos this this marketer for labeling his/her metric improvement "10X conversations" giving it at least a tinge of humanness.

There's nothing wrong about trying to improve these metrics in and of itself, but when the entire tactic is based on tricking or threatening people into initiating "conversations" (ie. when those conversations are more "Please do not call me" as opposed to "Please tell me more about your product") then the real goal of said marketer is not to sell the product, but to sell their own usefulness within a company.
Consider an empty plane where all the seats are paid for by passengers that all coincidentally were late to the airport. That's not a problem for the airline, because the tickets got sold and it was the passengers fault. However, this is a failure for the tube, for which payment is secondary.

For an airline, transportation is an unfortunate side-effect of getting paid. For the tube, managing tickets is an unfortunate side effect of transporting people.
You are welcome.

we can basically conclude that society is preyed upon by forces that have no counter.

That is, what distresses me also! It is more and more uncovered, that there is no moral anchor anymore in our societies -- and where reference is made to a higher being (as on the Dollar bill), situation is even worse. In Germany, we have a "christian" party with "christian" explicitly in its name -- but that is also the party, that is most ensnared with lobbyists and corporation interests and cares the least about people. It is just a tradition, to brainwash the people.
Sorry, was there a problem with JSON that I wasn't aware of? Oh, you mean, the problem of following the spec or not paying attention. Ok, in that case I see high adoption rates for this. Or, we can just make sure we do follow the spec and pay attention to what we're doing and stick with what works and is practically an industry standard.
Art on your TV
I propose a new format - GIFVGIF
> This is not Haskell where different functions have arbitrary precedence

If this were true, how would ghc know how to compile Haskell programs?
SaaS Marketing – Rockstar Checklist
NASA invests $50M in 7 astrobiology research groups to answer: Are we alone?
Just an anecdote: I use the DLR multiple times per day and after a few years using it I finally got stuck on a door the other day. I pushed the button to open the door, it started opening and when it was around 80% opened, I was entering the carriage, when it suddenly closed really fast. I got sandwiched on my shoulders and then on my right foot. The door didn't open, I had to force myself to remove the damn foot painfully. It did hurt. Can't imagine what could happen if it was someone weaker (like a child or an elderly). Oh, and my red snickers turned black.
Anyone know how AWS clusters Redis?

I had alwas just assumed Redis released this a while ago and that is why AWS started to support Redis along with Memcache in their clustered ElastiCache product

http://aws.amazon.com/about-aws/whats-new/2013/09/04/amazon-...
I think bhuston said it best.

>This is a marketing endeavor that is pretending to be a technical innovation.

Most of us are asking, why isn't it format X, or format Y. When they are clearly superior in quality and compression. The answer is they don't have marketing power.

GIFV is directed at increasing attention to imgur. By trying to make more sites adopt it as their image/video hosting platform. Since imgur already has the size/market dominance to spread the GIFV platform. Increasing its chance of adoption.

Rise above, support webm. Better compression, better quality, more wide spread.
New Tax breaks and funding for startups in Ireland
If I could upvote this a 1,000 times I would. Here's to nostalgia!

Anyone doing a vetted version of this, now that I would (not literally I might add NSA) kill for.
JSON is great. Please don't change JSON.
Crash Course on MySQL
Yes, why are they calling mp4 files gifv files? Is it somehow cooler?

Can I start serving .html files as .awesome files? And .js as .kicka$$ files? and .mp3 as .boomin'?

GET "index.awesome"

<script src='jquery.kicka$$'>

<audio src="foil.boomin'">

at this rate, why not re-write all of html so it's cooler? <body> => <b0d> <title> => <1nduk+10n>

<link rel="openid.server" href=""> => <cyb3r-jack rel=!!openid.matrix_data_cent3r" ultra_max_hyper_ref="">
I didn't realise passing under the Clyde had such an affect, that's quite interesting. I would have thought, however, that being mixed overground/underground (on many London lines) would make air circulation an easier problem to tackle.

Ah, I do have similar memories of my (possibly rose tinted) glasses steaming up, but it was always so much cooler and I never felt that I couldn't catch a breath of clean air.
Weebly (YC W07) Debuts an iPad App for Building and Managing Websites
Single-master Redis and replication overhead of current Redis architecture not ideal for getting Redis beyond the "it's a great cache" use case, so I'm been looking forward to this.
> Need a Jevascript developer? Good luck finding one under 100K per year.

This is not true except in Silicon Valley. And that's just simple supply and demand. They need way more devs per-capita so they have to really incentivize people to move.

Everywhere else dev is well-compensated relative to other professions and you get more leverage and autonomy but it's much harder to translate that into an inflated salary. There are paths to get there and it is possible to get $100K+ as a developer but it's really just an open career ladder, whereas most other careers the ladder is closed to all except the ridiculously productive and/or sociopathic. Not a gold rush.
So this is actually making mp4 worse? Talk about innovation.
Checked it out and it seems like it only does the default branch.
Ahh I didn't realise that. Thanks for the correction.

Do you know if the more recent patches, {27..30}, are also vulnerable to this CVE?
UEA students urged to urinate in shower
Obviously wasn't a month ago (https://news.ycombinator.com/item?id=8432826), but yeah, it's not exactly fresh.
Risk is THE biggest factor in interest rates. If it was all timevalue we'd be paying interest closer to inflation rates.

Put yourself in the shoes of a lender. On one hand is a doctor, $300k salary, looking to borrow $30k for a new boat. 780 fico. On the other is Trevor, a bartender who makes $25k a year, has a 680 fico with some late payments and a cable bill collection from 2 years ago and wants $30k for a new car.

Would you lend to them both at the same rate? Both will have the same time value effects....
In the US, I think the main issue has to do with most Police Departments only requiring a High School Diploma as an education requirement. I've had internships with Gov't agencies and volunteered at local PDs and it's a very common thread that a large portion of the workforce is computer illiterate. Sure higher education doesn't necessarily mean people will be proficient with computers but at least they will have exposure and familiarity. Also the people who make the decisions (higher ranking officials) are usually older and also phobic of technology.
That's failover -- essentially Redis Sentinel.

Redis Cluster on the other hand orchestrates multiple redis instances to function as one, thereby preventing the need for redis servers that are very large and preventing the need for presharding[1].

[1] http://blog.zawodny.com/2011/02/26/redis-sharding-at-craigsl...
Do they from an mp4?
Video learning on-demand: less work and more effective
HJSON seems a lot simpler and closer to JSON than YAML.

And.. yeah, for human processing/reading/writing, ignoring trailing commas and having comment does improve JSON IMO.

I don't know why JSON is so strict in fact. Virtually everyone forgets to NOT have the last comma of a list all the time.

Now then again HJSON is +1 standard and incompatible with JSON so im not sure how that'll take off.
It doesn't really miss the point - the point was a more human friendly JSON and it hit that nail on the head pretty well if you ask me.
I have an intense desire to learn how to incorporate some of the more traditional diets shown. Not only do they look healthier, they are also much cheaper. How can a westerner like me learn how to prepare these meals and base our diets around them? I am sort of disgusted by how much our family spends on food, and how often we don't cook.

Really I just want to learn how to base our diets around cooking. I can cook pretty well. My wife can, too. We just don't plan ahead. I wish there was a guide that told me exactly what to do to create a traditional kitchen that can create a home-cooked complete meal each evening with < 1 hour of work per day.
Most food is acquired taste, thabs to our evolved brains that instinctively avoid potential poisons. Eat it five times, don't die, and it becomes palatable
What stops you delivering any old mp4 as a gifv?
I can tell this thread is gonna be a gold mine for Shit HN Says
Artist uses hexadecimal converter to intentionally twist and corrupt his photos
My perspective is that a whole lot of our economic problems (in the USA) stem from personal debt. It wouldn't be the end of the world if people typically had to earn enough money to own a house before buying a house--in fact, it would decrease home prices, since the ability to get mortgages and the promise of government violence if you don't pay them back inflates the cost of housing stock. And student loans are literally slavery--they similarly inflate educational expenses, and even worse can't be discharged in bankruptcy. An end result is otherwise educated people face a large marginal tax rate that cuts into productivity, and far too many choosing education that is mostly a waste of money since they don't have to pay for it, until some unforeseen point in the future.

I think it's also easy to overstate how much loaning would decrease. The widespread use of credit scores when issuing loans belies the idea that it's only state violence that ensures people pay back debts.
The C++ template system is turing-complete and partial specializations are more or less equivalent to the way you do type-level programming in Scala with different priority implicits, so I don't see that it would be any easier to support than the Scala type system.
Someone needs to clarify to me why people are excited about this. Isn't this just horrible for readability?

I've just started reading Clean Code, and there is a lot of emphasis on writhing readable code, because the philosophy is that code is only written once but read many times.
But YAML is a superset of JSON.
Huh.

I seemed to recall that Snowden made guests put their phones in the refrigerator, which is the same principle. So I went and tested my phone in on the work fridge, and you could still make calls to it.

Filing cabinet, ditto. Mylar antistatic bag, (which has a conductive layer, though not very conductive) ditto.

Tried some conductive fabric, which we sell for e-textiles stuff, and which the manufacturer's datasheet advertises as providing some 85dB of RF attenuation, and sure enough I couldn't call my phone anymore.
I have very little evidence to support this, but they probably use twemproxy. twemproxy is a proxy for redis that automatically manages routing commands to multiple redis servers efficiently.

They definitely don't use redis cluster, because redis cluster requires explicit client-side support. That support is only available in a limited number of clients today.
HTC 're-imagines' point-and-shoot photography with a new handheld camera
It really depends - there's been some posts on HN criticising the freemium approach:

- http://www.tylernichols.com/web-development/i-am-done-with-t...
- http://blog.rapportive.com/is-freemium-right-for-you

When building AppCodes I decided to sacrifice the learning curve for the ease of use once the tool is understood.

This kinds of products don't work well when published with freemimum plans - people don't try to understand the product, skip the tutorials, sign up for free, spend 5 seconds evaluating the tool, and unless the learning curve is very calm - leave.

What I prefer is for people to take a while and make sure they understand the ASO process ( http://www.slideshare.net/kolinko/appcodes-app-store-marketi... ), and then - once signed up, to spend a while learning the tool. The expectation is that the ones that go through this will get a better experience afterwards. The ones that won't - there's a no-questions asked refund :)

Another thing with freemium is that it works best with products that people use consistently for months and years. While this might be the case for web SEO or for app sales tracking, in case of App Store SEO it really isn't. You want to spend 3-5 months setting up your position, and once it's all set and you can forget about it.

If I was running a freemium service, I'd have to find some tricks to keep bringing people back. I'd also be more inclined to gear the service towards the app developers with more than one app - because only those devs would bring in the profit.

I don't track our competition too closely, but the last time I checked, that was what they were doing. Publishing charts of your position, and sending you e-mails of your daily rankings (even though rankings in the app store rarely ever change), and moving towards Enterprise customers. They also tend to deliver an interface that's easy to learn, but not that effective really (e.g. they don't bother distinguishing between iTunes keywords, and App Store search phrases).
At least that was the case with the ones I checked...

If you disagree, I'd greatly appreciate a reply :)
You witnessed these cases of toddlers dying personally? Or did you watch them on TV?
Need to try Brekkie the next time I'm in Bangalore for sure!
Am I right in thinking (based on that test above) that if a system has the patch that adds the prefix/suffix, it's safe against this attack?
The point of JSON is to have a standard way for data-interchange. Adding the complexity of "sometimes you might have quotes, sometimes not" and "you can display multi-line strings in different ways" gets away from this.

JSON is great already. I don't really see this as necessary. I could understand the comments (but use // instead of # as per Javascript comments) to increase clarity to people who don't know the original design syntax. But the others do not seem really useful.
"The roads are free at the point of use, the tube isn't."

No they're not. They are partly funded by general taxation, just like the NHS. However, if you want to drive your car on the road, you can't just drive it. You have to first pay a specific 'vehicle tax' which is per vehicle, per year: https://www.gov.uk/tax-disc

Furthermore, if you want to drive in most of Central London during the day time on a weekday, you have to pay the congestion charge: https://www.tfl.gov.uk/modes/driving/congestion-charge
original post: http://appleinsider.com/articles/14/10/09/apple-outlines-app...
Is VP9 in much use (compared to VP8)? I've definitely heard good things about it, but I have no idea how well supported it is or whether anybody has it in use yet.
I was similarly turned-off. It's one thing to credit your influences, but this came off as name dropping with a side of social shaming.
That was my thought as I read this. Why repurpose JSON when YAML was written specifically for cases like this?
Ah, that actually makes some sense, as far as a file format specification. So GIFV would offer a subset of the functionality of a typical video file format (most notably, absence of sound). Although I would think it would make more sense to just strip out the audio, rather than instruct browsers to ignore any audio tracks.
No breakfast for http://www.rediff.com/business/report/india-is-home-to-13rd-...
That's probably because Firefox on OS X (32.0.3) doesn't yet handle H.264, which is what these GIFV files really are.

FF on Windows (32.0.2) does support H.264, and the GIFV files play as expected. IIRC, FF on Android was the first version to get H.264 support, which it's had for some time now.

EDIT: You can check codec support for your current browser+platform at YouTube's HTML5 page, below. I briefly dug around in Bugzilla for this issue, but haven't found it yet.

https://www.youtube.com/html5
Yup, unless you are doing something crazy.
Why not just have an attribute or two in <video> tag that sets it to be no volume and whether there should be transport controls? That sounds more useful to me and applicable across all video formats.
Actually, exploiting bugs in image parsers has been a classic vector. Certainly tiff, jpeg and BMP to my memory. When i worked at symbian we had an svg parser vulnerability that went underreported.

And given the slew of bugs Google keep finding fixing in libraries like ffmpeg, there are likely lots of bugs lurking in something as complex as an MP4 player...
They also won't look like shit because of the limited colour range.
Coincidence? According to the Washington Free Beacon, since 1988 some 88 percent of Bezos' donations went to Democrats.

http://www.Newsmax.com/Newsfront/Bezos-contributions-Democra...
Finding your bike maker is a little like dating
http://www.bbc.com/news/world-africa-29256443

Yes. There is. Long story short - health workers killed by scared villagers.
Copyright and IP Assignment Explained: What Copyright Transfer Really Means
I don't know about your comma statement. I never have a problem writing symantically correct JSON by hand - though there are limited use cases where you should need to do so anyway. If your IDE isn't marking invalid JSON syntax you need a better IDE.
NOT SHARING PROFITS
I agree! Just listen to "Security Now" popcast from Steve Gibson.

Steve's thought on how safe the data in cloud storage is by asking a question: "How easy is it for me to recover the data from your cloud service if I loss/forgot my password?"

On iDevice, it is NOT that hard for the phone owner to do it. It is trivial for any government agencies fake the owner's phone #, txt Msg, email to recover or reset the iCould password.
Topic aside, the original comment was ambiguous. Is it a middlebrow dismissal ("Pfft, their VCS is two dozen years old ..."), or is it an expression of admiration ("Wow, it's pretty amazing that their version control system has stood the test of time, even when the rest of the world seems to be moving towards git!")?

The pythonic tendency towards being explicit about what we mean to say serves us well even in prose. :-) I agree with the OP, it's a pretty neat engineering feat. I think the downvotes would likely have been avoided had that admiration been more clearly stated.
"a more human friendly JSON" is a goal that misses the point of JSON.
When attempting to consolidate power very destructive economic policies are often used out of fear that those forces could threaten ones' power. Similar thing happened in Zimbabwe. Russia is on this same path now too.

Venezuelans who can should request to be paid in bitcoin from foreigners. This probably would work best for those abroad since the bitcoin can be remitted as if there was no border at all. Venezuelans who have knowledge labor -- programmers, researchers, data entry, could also be paid in bitcoin. Eventually when enough people have bitcoin it could also be used to exchange value without the country.
Bye Bye Red Hat – Apple Here I Come
Who’s Got the Monkey? The Art of Managing Your Management Time
If I remember correctly they only have read replicas. I don't think they even have proper Fail over. You manually have to promote one of the read replicas to master... Feel free to correct me :)
Show HN: Stream music from one iOS device to another
Seems like a construed attempt to make JSON easier for "humans" (whatever those are) but in general JSON isn't something my mom worries about. I'm not sure why something like a simplified YAML couldn't be used for the intended use cases.

I've been doing a lot of ansible work recently and YAML feels fairly reasonable and I can show it to my wife and she "gets" what is happening.

Sorry just reminds me of: http://xkcd.com/927/

Maybe we need a HN bot that links that automatically?
There are a lot of uses for dumb, audio-free video files. Web forums, for instance. You can allow users to embed them without worrying about 100 different auto-playing videos with sound on your page.

Plenty of ways to implement that and I'm not sure this is the best approach, but it's not just "worse video". More features is worse, not better, a lot of the time. Like when people used to build entire websites in Flash before the iPhone's lack of flash player finally made them stop.
I have toast, does that count?
Comments are nice when your JSON is at-rest (e.g. in a file) but more often than not it's in-flight and my code is probably not adding comments when building a message.

Come to think of it, what would an API look like that writes HJSON? Not pretty, probably.

I like the unquoted strings and trailing comma, but the rest I don't think is unnecessary. I'd be happy with the standard ECMAScript map literal format.