skysight-inc/HackerNews huggingface dataset:
No need to ask, your local super market or big box store probably already has a freemium model -- samples (http://imgs.sfgate.com/blogs/images/sfgate/parenting/2010/08...)

I do, however, whole hardheartedly agree with you sentiment about relying upon free services or saas.
I find the for loop easier to read.
What Scientists Really Do
I have to say this type of comment is the reason why I still come to HN day after day, year after year.
It might be an honest mistake today, but tomorrow it could be picked up as a word that would let some legislation go trough without alerting general public. I think, it's important for the security community to make sure that the "golden key" won't become an euphemism in the future. This article is a great start.
Probably only a minor ding but then only through the lawsuit it spawned.
I agree. Whoever thought this was going to end up being less troublesome than passing a phone around (which is, admittedly, awkward) hasn't thought through the scenarios. There's no way a bunch of people at "dinner with friends" are all going to pull their phones out and start up a little photo-viewing LAN party.
The idea of a secure golden key would be wonderful if you could always trust the keepers of that key to do the right thing. But you can't. The same applies to the idea of "you have nothing to fear if you have nothing to hide", which incorrectly assumes that what you perceive today as nothing to hide will always be perceived the same way by others that can view your communications.

The ironic thing is that eventually, those that the golden key is aimed at today will probably be the least hurt by it. The bad guys will take precautions and not trust the security of public services (they'll be using their own secure channels) while the good guys will continue to loose their privacy and liberty.
But to the average user who has been waiting to comment - it's incredibly frustrating.

One thing is when you're a "normal" user, see a discussion you could add true value to, and then realize.. d'oh, I can't comment. While I still enjoy looking at things PH links to, I've stopped reading the comments because I've found seeing a comment you can't respond to is more irritating than I'd have ever previously imagined :-)
From their paper:
"We have observed variations between countries. While
cards from Belgium and Estonia work like British cards,
we have tested cards from Switzerland and Germany whose
CVM lists specify either chip and signature or online PIN,
at least while used abroad. The attack described here is
not applicable to them. However, because UK point-of-sale
terminals do not support online PIN, a stolen card of such
a type could easily be used in the UK, by forging the
cardholder’s signature."

Their attack uses offline PIN mode. This is further expanded upon in section III.

The simplified attack is such: Basically the PIN signed block doesn't get sent to the bank. Verification is only between the terminal and the card, and the card (or rather MITM hardware) returns a "all is well, transaction approved" message when in fact no such thing happened. The terminal doesn't go online and talk to the bank and verify the signed PIN block.

This is essentially misconfiguration of the merchant terminal that ignores the result of the PIN verification.

This is similar to when you tap a card to buy something. If the merchant system doesn't go online to verify it -- which it often doesn't for small transactions (<$10) then you can game the system.
Added to my todo list, thanks.
The Post's proposal is so obviously ridiculous it's almost difficult to discuss fruitfully. The fact is, it just doesn't really matter who has access to certain individual's security; as long as somebody other than the owner has access, than privacy is violated. There's no such thing as half measures when it comes to security and there's no such thing as a semi-permeable security "membrane", so to speak.

A story: The Belgian census bureau in 1930-31-32-33 conducted a nationwide survey, noting down, among other things, people's religion. Although this was done innocently for records' sake, when the Nazis invaded the country, they had access to a perfect registry of Belgian Jews.

The takeaway is that the "good guys" won't always be in possession of sensitive information, no matter how good they are. Safety comes in people's ability to manage their own information, not in their ability to manage others'.
This is great.

Does FightMetric include data on on disclosed fighter pay? I'd love to see a basic statistical analysis of average yearly pay.
I didn't read it as being directed only as targets.

There's been a general push, among communities suffering harassment, against the notion that vocally calling out malicious actors is 'feeding the trolls' in the traditional exacerbating sense. i.e. standing aside allows further victimization.
It's a little annoying to see entrepreneurs and startup folks shoved into hackathons--I kind of prefer the notion of a pure technical hackathon where you're just playing with ideas, or finishing up side projects. Dealing with biz on the side, or decks or whatever, just kind of cheapens it for me.
Things to Do at a Startup Every Wednesday
intesa/sanpaolo/bci/cib/whatever (has a ton of brands in europe) has virtual cards with time-based expiration (at most 12 months) or single use.

I am reasonably sure ING and unicredit did that too some years ago.
As an alternative, try Google Web Designer (free), Mixeek (free) or Sencha Animator ($199).
> green hexagon is the boat

Isn't the boat a pentagon?
I'm undecided whether this should be opt-in or opt-out, but it surely shouldn't break the router if something upstream breaks.
Valleyball
Mist screens are getting interesting
They raised $1m about a month ago: http://techcrunch.com/2014/08/21/product-hunt-announces-seed... .. so I'm guessing total is now $7.1m with the newly announced $6.1m? (Unless they were separately announced parts of the same round.)
Here's another argument against it: Market share.

Scenario 1: Apple creates a secure system without a backdoor. Everybody uses it.

Scenario 2: Apple creates a "secure" system with a golden key that lets US law enforcement in. Nobody with a clue outside the US uses it. Several European governments ban it. Apple (and US) market share declines around the world.
You're correct and these "art started xx,000 years ago" are kind of laughable.

Yes the first instance of preserved art is from that date. However, it's a fossil. Do we assume our ancestors sat around the camp fire suddenly decided "hey I'm going to take some berries and plaster them on the wall in the shape of a deer". No one before that took a stick and drew in the dirt?

We're also oblivious to huge amounts of human history. Neanderthals are thought to have lived in groups of about 50 people and there's evidence of them living in everything from open air camps to huts.

What these paintings could well be showing us is merely a record of what they've seen in the area. When you're nomadic it was likely beneficial to leave a reminder of what you hunted in the area.

I expect art started in the Neanderthals, there's evidence they may have practiced medicine. They made tools. It makes sense modern humans would have learnt and improved it like we did everything else.

We took huts and made longhouses. We took fur clothing and sewed them into clothes. We took spears and darts and made atlatl and bows. Why wouldn't we have taken Neanderthals scratchings in the dirt and probably on rocks and we made permanent paintings on the walls with colour and detail.
I have similar laments, but am hoping Julia will carry this torch.
Lead Poisoning in Rome: The Skeletal Evidence (2012)
or what they consider irrelevant or noise.
Yeah, the article is extremely vague, not an explanation at all like the title says.

Another comment in this thread explains:

> It didn't shut off all internet access. The DNS resolver on the router checked for connectivity. If it couldn't resolve Belkin's domain, it disabled the DNS service because it assumed the Internet wasn't really connected.

By sp332, https://news.ycombinator.com/item?id=8429287
"Good guys". Apple. Google? Whuy? Why do adults have the moral understanding of a 10 year old.
Woah, I love your boss' advice! It is necessary to know your audience before you can prioritize.

Also, I don't think consumers want features in the sense of "more", but in the sense of "key". Maybe it is Key Features, Stability, Performance, More Features, in that order.
Uh, is it just me, or does "texting while driving" not belong in that list? Do you really think people care about it because they're "conformist old people"?
Shall we rename slashdot effect?
Thanks for the response. I'd humbly submit that there are occasions where the guidelines should be ignored in service of a more descriptive (non-linkbaity) title.

I can't find the submission but one recent example that comes to mind is a presentation on radar detectors that was fascinating. I clicked because the submitter described the article; the original title was (IIRC) the model number of the radar gun.

Later a mod changed the HN post back to the model number, which had zero relevance to anybody not in the radar gun industry.
Thanks. Should be all patched up now. A lot of the user management stuff is a work in progress. After all, didn't have many users before today.

Thanks so much for pointing it out!
(Forgive me if I misunderstood... but your reply to my comment leads me to believe your business went under due to people skipping out on their debt to you.)

I'm sorry for your loss. But this is why we should all strive to repay our debts... even to corporations[1]. I would imagine that some of your customers that stiffed you may have had the very attitude you described when you said "But from a corporation? Their losses are priced into their interest rate." They, too, may have assumed that your loss was priced into your rates. It must not have been. Perhaps other businesses don't either. It makes you wonder just how many people/business get totally screwed by people defaulting on debt to them. You suggested that chasing might understand differently if s/he had lost a business. Of course you are also entitled to your opinion. But, honestly, I'm a little sad that you don't see the other side of it, having been shattered by people not making good on their debt to you.

[1] I understand that Corporation ("big C") is generally directed at the big, huge things like Walmart and Chevron. But corporation ("little c") is just a legal term and can still be the small business down the street.
It's the Theil index https://en.wikipedia.org/wiki/Theil_index

I am not an expert in its use, but IMHO, it's BS because it's dependent on the idea that you have maximum diversity if various subgroups are all the same size, but it's very dependent on the definition of subgroups. For example, in the case of ethnic diversity, the measure will vary significantly depending on whether you group people from Southeast Asia and people from the Indian subcontinent together as "Asian" or not, or any other subjective subdivision.

It might have use as a comparative measure with a predetermined set of classification groups, but you can definitely manipulate your conditions to construct different outcomes.
IoT Departments Coming: Target and Best Buy
...can we just have BEAM-on-Cortex?
Same here! The name made me think I was going to see a vim 2.0 by Microsoft. I'm sure the majority of their target audience wouldn't have this kind of reaction.
We (and most every other country) demonize immigrants as a matter of course on usually fallacious ethnic, religious and economic grounds. See how the Irish were portrayed[1] when waves of them were showing up in America in the early 19th century. The rhetoric and stereotypes have been reused in each successive wave, for the Chinese, the Mexicans, the Latin Americans, etc.

[1] http://thesocietypages.org/socimages/2008/10/06/negative-ste...
How to Use the Gmail API in a Chrome Extension
There's one point which I see far too rarely: even if the current people in power were all 100% trustworthy good guys, you can't guarantee the people in power 10 years from now are any good at all.

In the face of every other objection, THAT should be the one to attack proponents with. If you wouldn't give the powers to your worst enemies, you shouldn't even think about giving them to your current friends.
We got the joke.
OK, this is much less scary than I thought reading the article. Probably wouldn't hurt to diversify it a bit and use some major provider like Google or Amazon (or both?) for the check, but at least it doesn't look as bad as the vague description in the article that made me think some vital router functions and not simple DNS check depend on external infrastructure.
If we had stayed with fission instead of bailing after relative non-incidents (Chernobyl and Three-Mile Island), wouldn't it have drastically increased the power supply to almost that point?

The casualties, even the most indirectly computed casualties, from nuclear accidents are far, far less than the casualties from coal. It's going to get even worse once the sea levels really rise.

A single fission plant used to supply about a third of my energy; if they had proliferated to the extent people thought they would have, it energy would have, in fact, been a lot cheaper.

Democratic ignorance and regulation killed that dream, though. At least we still have "clean coal."
forever barring economic disasters or TEOTWAKI

Bought 5000 bitcoins for ~$5 each. Have 2000 left and sold the rest for $1 million late last year. Live pretty frugally so that should be me.
And who doesn't have a browser? I can't think of any better solution than this.
I've just started learning about Android. This article is really disheartening. The Google course on Android Development (on Udacity) pushes Fragments from the very beginning.

Compared to learning how to program for the web, Android seems like a complete mess--the exact opposite of simple and easy to understand. Android seems to have lots of abstractions, and the introductory course just seems to throw one method after another at students, without explaining why those methods need to be called.

After spending some time to understand the reason Fragments exist, its sort of upsetting to learn that developers think they are a waste of time and a source of bugs.
Is that a joke? It's the first one on my screen.
I'd love to see a development of the law that aligns with Blackstone's Commentaries on trespass and ravenous beasts of prey: it is justifiable to enter another's servers in order to hunt and kill worms because destroying such creatures is profitable to the public.
The author of the original disclosure states on his blog that this is no big deal, in fact he's been asking for a visit for a while and if anything is upset that it took so long

> http://www.futuresouth.us/wordpress/?p=52
The Ultimate Godwin reason.

The French people, presumably, trusted the French govt. in 1936 when they filled in their census data.

Big Data is not a modern phenomena. It was invented in the 1930s by IBM and the Hollerith machines. The success of tabulating 40+ million Prussians was repeated across Europe.

The French census data was bravely protected by prevaricating French administrative staff who had realised the consequences but delay turned into eventual capitulation.

http://www.ibmandtheholocaust.com/

You cannot trust your future government, it could be anybody, with any agenda.
You're single line comment might have appeared dismissive of the version control used by the OpenBSD people, especially because it's something that often comes up in threads about BSD.

Threads involving OpenBSD can involve fierce downvoting so it's probably a good idea to be clear about what you're saying.
Yeah, don't get me wrong, it isn't hard to do at all, and I think it reflects their focus on people living month-to-month, that just isn't me. I love that it is opinionated and that its opinions are so universally good, it's just one style of saving I wish were better encouraged by the interface.
> Totally creepy and unacceptable that a private piece of equipment can be affected remotely.

Any modern mobile network client can be affected by the developer's servers going down, because that's the only way to do captive WiFi network detection.

Chrome, for instance:
http://www.chromium.org/chromium-os/chromiumos-design-docs/n...

(I believe this kind of thing won't be necessary when Passpoint networks are deployed.)
> higher hardware costs

Yes.

> bigger size

If you're comparing something like a bare ATTiny to a Raspberry Pi, sure, but the size difference between a standard Arduino and the Pi isn't great.

> worse peripheral selection

Um, compared to what?

mbed, a new operating system, will have to have drivers written for everything it supports - which is likely much shorter list than for Linux.
http://www.dd-wrt.com/site/index

Problem solved.
Keyword being "direct". Publicly no doubt they have mission statements that read like they're trying to save the planet. Privately, they are tasked with exploring the margins of new paths to revenue. (NOTE: pure speculation.)
I imagine it's to stop people from committing the social faux-pas whereby they're handed a phone, and they start swiping through pictures in the gallery (and possibly stumbling upon pictures the phone owner did not intend to be seen).
"Hour of Code" crowdfunding campaign
Hanlon's Razor seems to fit this debacle fairly well:

"Never attribute to malice that which is adequately explained by stupidity."
That's pretty funny. I'd say that the majority of the time that I call head or tail, it's using that syntax.
This is awesome - I've been wanting this exact tool for the last 5 years on various projects.

Over time, it would be good to have little bits of markup that allows you to highlight things like outstanding questions that need answering by a specific person, pull requests that need review, blocking issues etc

And then have them pulled out in the summary email.
The point the OP is making is that nobody cares because nobody has been told to care. All it takes is a well-timed news article on how some Bad Guy used Irresponsible Unbreakable Crypto to change that.
Evolution of human societies and the organization of ventures
Doubt it's p2p, they probably just ship around a public url.
You don't even have to bother updating your old recurring accounts -- Amex seems to recognize those transactions and continues to allow charges to go through to the old number.
Some 3rd parties (.gov etc) see that as a feature. Not everything is either customer friendly or outright malice.
For most people, DNS on the router is vital because they don't know how to get online without it.
Click on it.
Google targets businesses with Chromebooks for Work
A Programming Language for Games, Talk #2 [video]
From the sample leaderboard, this seems more like "which startup has the most employees voting for it?" (case in point, dmor: http://valleyball.co/company/mattermark?cheat=1) instead of "which startup is most likely to succeed?"

The problem with a fantasy startup league is the time horizon. No user is going to pay attention for years for an event to occur, whereas in fantasy sports there's an event every day/week.

Relatedly, there's no good explicit definition for when a startup fails. (case in point, Yo has been dead for a month but this webpage pretends it isn't)
It may deserve to be directed more broadly; reading the article, it was not my impression that it was being so directed - and skimming again seems to support my initial reading ("ignore" is mentioned thrice, and every time in the context of talking to someone who was a target of trolls).

I would note that this discussion lends significant strength to my initial complaint here - which is that a bare RTFA is poor form and one should point to why and how the source disagrees with the comment. People are quite capable of reading the same material and coming away with different things (without anyone being an idiot).
Show HN: Chrome extension to make writing content scripts easy
Do you carry a cell phone? The baseband networking stacks deep in the phone (below even the operating system) can and have been remotely controlled by law enforcement on many occasions. The FBI used these attacks to turn on the microphone of cell phones and gather evidence on suspected mafia members: http://www.zdnet.com/news/fbi-taps-cell-phone-mic-as-eavesdr...
Note to Self: It's the Storage Space, Stupid
My two cents:

Years ago, I found Kathy's posts both very informative and entertaining. She seemed to be very generous with her time and writing. She even took the time to respond to me, personally, once on some question or other.

Something I read at the time about the Weev "data breach" circumstance, that I did not see widely reported. I'm sorry I don't have a reference at hand, so take this as unsupported and from memory: Weev did not immediately reveal the problem. He first took some time (in relative terms; I don't know or recall an absolute quantity) to decide what he was going to do about it and with the data. The reporting implied that perhaps he chose disclosure after realizing there was no other avenue that was personally more advantageous; or perhaps he came to the decision to "do the right thing".

I do NOT support the prosecution of Weev especially under the twisted rationale proffered. The Internet is a public space, and if you are stupid enough, lazy enough, and/or especially simply uncaring and arrogant enough to expose your (and perhaps worse, your customers'/clients') private data there on an unsecured URI/URL, then that is YOUR problem and you DESERVE to be called on it -- all the more so when you do it deliberately as a part of your design.

Nonetheless, I was left with the impression that Weev is not Mr. Goodie-Two-Shoes. (And this was before I knew he was the one who apparently led the bandwagon against Kathy.)

The prosecution shifted attention from the fuck up that is AT&T, onto Weev. Another stupid and probably self-serving prosecution...

And that's the last time I want to use his name. Because, as has become apparent, the loss we are focusing on now has been contributions like those Kathy made to our online world.

So, my two cents. The post implied it is up to us; therefore...
Talk one is here: https://www.youtube.com/watch?v=TH9VCN6UkyQ

https://news.ycombinator.com/item?id=8342697
Looks like that's it, and the commit log was probably just sarcastic then. :)
Loading webfonts with high performance on responsive websites
No, its a hipster thing.
Complete nonsense - you're equating imperfections that result in failure of a system with complete disinterest. For each anecdotal example of failure, as you cite here, it is equally easy to find anecdotal examples of success, eg: http://edition.cnn.com/2013/08/13/justice/amber-alert-hannah... I don't see any evidence here for your contention about the proportion of alerts issued in divorce proceedings, or a systemic pattern of indifference on the part of law enforcement.

Also, the government spends quite a lot of effort on the investigation and prosecution of child pornography, as documented here, for example: http://www.justice.gov/usao/waw/press/categories/childporn.h... To what degree this should be a factor in encryption policy is open to debate, but your charge that 'TPTB don't actually care about these cases at all' is baseless and does a disservice to the people who investigate such crimes.
"It's worth remembering in the case of discoveries like this that the oldest instance of the practice is almost certainly far older than the oldest preserved instance of the practice."
An excellent point and one I came here to make.

I'm very curious about what you say about statistical work. What would such an analysis look like? I don't have a strong background in statistics and I'm confused about how the inference would work.
How Safe Is the Artificial Turf Your Child Plays On?
Right, hence the dilemma in the article.
There are no booleans in C, just ints. I think c99 added a 'bool' type, but it's just typedef'd to being an int.
How to do advertisements well in virtual reality