skysight-inc/HackerNews huggingface dataset:
There was a request for it: http://www.evertype.com/standards/iso10646/pdf/n258a-heartdo... (but do note the date)
Some resources (Note that all current "solutions" are "editorial", putting emphasis on manual curation):

http://www.politicsdaily.com/2010/07/27/after-breitbart-and-...

http://www.huffingtonpost.com/tag/slow-news-movement/

http://www.slownewsmovement.com/about/
15 Best JQuery Instagram Plugins
Mongo-like Reddit based database
Can't believe they designed a logo especially for this worm (and gave a fancy name). There's apparently a marketing campaign in vulnerability discoveries too.
> An attacker can exploit this vulnerability to execute arbitrary code but will need a specifically crafted file and use social engineering methods (observed in this campaign) to convince a user to open it

So, it's a remote exploit, but requires the user to open a document.
Hurdle for the police, but a bigger one for you.
2. Nothing's stopping anyone from using 3rd party libraries within an AngularJS application - using React for the view layer, for example. Angular encourages the use to separate concerns (mainly DOM manipulation) via directives, instead of mixing that logic into other parts of your application (like vanilla JS, jQuery and Backbone tend to do).

5. You're wrong, and your argument is invalid. It's open source, legible, modular and fully comprehensible if anyone bothers to dive into it.
Privatoria for Individual use is available to try out for free
tldr; git clone git://repo.or.cz/conkeror.git && firefox -app ./conkeror/application.ini
I feel like this exact same problem is going to be encountered when automatic cars are introduced. Automatic systems will be good enough to take care of 98% of situations, but in the 2% when the system is just not good enough, the humans will not fare much better, if at all. Good drivers will still exist, average drivers will remain average, while people who should never be in command of a moving vehicle will now be "driving".Only very few of them will be able to cope with truly critical situations. Of course all of that will be dismissed on the basis of automatic cars saving innumerable human lives, but I believe we will observe the exact same phenomenon.
Is it me or is the linked article remarkably content free given the about of security babble it contains? The nice aspect of the Heartbleed branding was its simple and clear message, not having opaque sentences such as "Visibility into this campaign indicates targeting across the following domains" and self serving platitudes such as "As part of our normal cyber threat intelligence operations, iSIGHT Partners is tracking a growing drum beat of cyber espionage activity out of Russia."

edit: The meat of the vulnerability is in the "Working with Microsoft, we discovered the following" section, over halfway down the page.
Startup story booths.

Great idea, +1 to that...

I went to the last event in London and the thing I felt was missing most was social interaction between attendees who wouldn't otherwise meet and hearing stories of other startups not (yet) in YC. This was mostly down to the attendees, which if you didn't know anyone else could be a bit intimidating.

It'd be nice to see a few more social elements to encourage mingling - for example an open mic area to talk about your startup and solicit advice, discussion groups (or office hours) for different startup categories (travel etc) in smaller rooms so that people with similar interests could gather, or perhaps some kind of mini hackathons lasting 15 minutes on different subjects. Anything that lets people interact in a non-forced way.

People mingled at the drinks at the end to some extent, however that was pretty random I felt more group interaction earlier on would have helped break the ice a little more rather than simply leaving that to drinks etc. and my only regret about the event was that I didn't speak to more people.

I would suggest to pepper these in between talks, after a few back to back talks the audience got a bit of an information fatigue, I think

Definitely - the talks were all in contiguous blocks, which meant by the end it was difficult to take it all in, though in London I loved Paul Buchheit near the end - he started to guffaws from some kids in front of me because of his gnomic delivery and by the end had them rapt. They do at least have the ones from the event online. More office hours between talks would be great - perhaps each speaker could give an office hours open to the floor?

Smaller talks to smaller groups (perhaps in parallel) would also work wonderfully, as having such a large audience makes the dynamic very different when it comes to questions and even for the speakers themselves. There are of course issues with that in terms of money and it's already a free event.

More interaction with YC'ers and speakers.

I don't think this is really possible, given the number of people in attendance. At the event in London speakers were mingling but were mobbed by hopefuls standing in rings around them and it all became a little odd and celebrity-focused, which I don't think was the intention. Perhaps some people find this useful, but I wasn't sure it added much given the ratio of speakers to attendees.

Great events though and cheers to YC for putting them on.
+1 I doubt it would cause confusion, but it's nice to be respectful to existing OSS projects and anyone that makes web browsers should have a lot of respect for Konquerer.
a flight attendant walked in, asking that the temperature in the baggage hold be lowered because she was carrying some meat in her suitcase. Bonin lowered the temperature. Fifteen minutes later a flight attendant called the cockpit on the intercom to report that passengers in the back were cold. Bonin mentioned the meat in the baggage hold.

This is a bit douchy, no? Or is it common practice?
Cloud Architecture 101: Scalability DON’TS (not Only for #AWS)
Congrats !

A few points:

- metabolism: http://examine.com/faq/do-i-need-to-eat-six-times-a-day-to-k...

- Losing weight = eating less than your TDEE. Training more is a bonus, all you need to do is eat less to lose weight

- what do you call a protein diet? around 2g/kg of bodyweight is enough (http://examine.com/faq/how-much-protein-do-i-need-every-day....)

- alcohol is ok if you are not abusing it (ie a 6 pack is unlikely to be good), you can pick the alcohol depending on how many calories they have if you want http://getdrunknotfat.com/

As for timing of exercises, do it whenever you can really, I workout fasted at 7am but that's not going to be a huge difference if you are working out at 6pm or noon.

As mentioned, Lyle McDonald (http://www.bodyrecomposition.com/) has lots of good stuff
How does

> When exploited, the vulnerability allows an attacker to remotely execute arbitrary code

go along with

> [...] will need a specifically crafted file and use social engineering methods (observed in this campaign) to convince a user to open it [...]

Is this a fucking joke? Looks like some company just want to push their name out there and get some free media exposure.
Can I paste a table from Writer into Calc, and it do the right thing? No :(
To have realistic 3D technology you need to have 3 things:

1. Stereopsis - different image for both eyes.

2. Accommodation - ability of eye lense to focus on different distances.

3. vergence - eyes rotate slightly inward or outward so that the projection of an image is always in the center of both retinas

Modern 3d technology (movies, VR) provides only sereopsis without accommodation or vergence and vergence-accommodation conflict can cause headaches. You also notice that if you look at different part of the screen from where the movie camera is focused on, the image is blurry.

Conventional lens-screen technology (like Olucus Rift) can't solve these problems. You need something new like light field technology or hologram technology. This is why hundreds of millions if not several billions are needed to develop this technology.
Path's pivot
I'm tired of that name calling. These are just bugs. All these projects fix bugs and honestly I'm personally glad for the work they've done. I don't like their attitude or some design choices but I also lack knowledge. I wouldn't be able to write these software and my complain is mainly a lack of thorough testing. Using C for all these things makes debugging not exactly easier.
A crappy logo.
JavaEE Spring Security – 50+ Awesome Resources
This is brand new. After Heartbleed, people realized that branding vulnerabilities is great for driving business. A year ago, this was unheard of.
From the article: The vulnerability exists because Windows allows the OLE packager (packager .dll) to download and execute INF files. In the case of the observed exploit, specifically when handling Microsoft PowerPoint files, the packagers allows a Package OLE object to reference arbitrary external files, such as INF files, from untrusted sources.

So the process is initiated through a spearphish, and when the file is opened the vulnerability causes the system to download additional code and execute it.
Ultrasonic Wireless Power Transmission
SEEKING WORK | Remote or London, UK

Full-stack Rails developer, been using Rails since before v1.0. I've just moved to London and I'm looking for something for ~20 hours per week.

More about me: http://nikwakelin.com

Email me: me@nikwakelin.com
“Intelishake”- on Kickstarter seeking your support 18% funded on the first day
1. GAE and GoLang is neither here nor there; Angular's documentation was in need of a lot of improvement when I started using it a year ago, but since then they've been working hard on it. (I found myself in the list of contributors actually, all I did was make a small edit to the documentation). If the documentation sucks - and you seem to know what's wrong with it - edit it. There's a big shiny "IMPROVE THIS DOC" button on every documentation page.

2. As others mentioned, what toolchain? At my current project we've got the ol' Grunt toolchain set up, generated by Yeoman, and customized to our needs - no Google involvement there, and it's a massive improvement over the old toolchain, which was an assortiment of tools run from Maven (often in the old Java JS runtime, which was slow)

3. I've yet to encounter any issue in our Angular projects that need debugging; writing proper unit tests (and Angular allows that) and not doing crazy stuff helps a lot in that respect.

4. Such as? Every framework introduces its own semantics; before, I used Backbone, which has routers (which were actually controllers), models and collections (where collections were a subset of models containing models, what?), and views (which often served as controllers as well, creating the ViewController thing). I don't see your point.

5. Yes it is. MIT license, open source, hosted on Github - the comparison with Java probably couldn't be more skewed.

The comparison with other frameworks is somewhat relevant, in that it's a full-scale application framework - not jQuery with a structure layer on top like for example Backbone is. The upsides of that is that it's much easier to achieve the same thing (trust me, I'm rebuilding a 60K Backbone project in Angular with a factor 10 less code required), it's much easier to develop, test and maintain (and with a 12-man development team of varying skill levels you need that), etc. Not to mention, like I said, unlike ColdFusion or Java or Silverlight or whatever, it's an open source project from the start - not something ditched to the community after the company itself lost interest.
It's already done in most IDEs and you probably use it :)

Ctrl+click on method invocation - did it jumped to the declaration?

Click on some method name and choose "show all invocations" or sth like that. Here you have one of the possible tree views of code.

Another tree-view of code is visible when you have code folding feature enabled.

Another one - when you debug and show subfields of some variable.

Yes, it's nice to have these additional abstractions over plain text. But these abstractions are inherently leaky, and I much prefer to work with text files than with some binary format to fix the leaks.
> its a minimum period of archiving

And a maximum. Privacy laws also dictate that data should not be retained longer than needed for the purpose for which you're storing it. If you store data for statistics, a few days would be the max because you can count hits and anonymize data almost immediately. If you store data for the government and the government only needs it for 6 months, then after 6 months you have no right to store it anymore. And ISPs really stick to this.
Local Search Ranking Factors 2014
Disappointed Google is going into AR (ok, ok - "cinematic reality") rather than VR. AR is much more limiting than VR. With VR you can be "anywhere". With AR, you're in the same place - just with some stuff added on top. I'm sure AR will find its own killer apps, but I think VR has much more potential.
This exploit is delivered with a PowerPoint document, so no remote hole.
It's a bit strange, that the reference a CVE (for which no information is available) and just generically describe the campaign and whatnot. The real report though is only available after a registration?
That's not really the way things should be done. If there is a threat, inform people about it and don't hide all the stuff.
If what you want is state-funded or charitably-funded institutions commissioning and performing new art music without reference to audience tastes, well, that's already been tried: see https://en.wikipedia.org/wiki/Darmst%C3%A4dter_Ferienkurse and so on. The results are generally considered to have been mostly not a success, both in terms of attracting an audience and of the quality of the music itself. The author of the Beethoven article happens to have written a book http://www.amazon.com/The-Rest-Noise-Listening-Twentieth/dp/... which covers this among other things.
Why Online Marketing Coaching Doesn't Work
I guess it is actually about the context in this case, not about the issue itself. Exploits via outlook and office existed for a long time. This is hardly something new. Targeting a specific region / company / group of people, based on politics, without spamming everyone in the world with this vulnerability is a relatively new thing. It looks like they really did want to stay hidden for a long time.
And their map suggests that poland is in the middle of russia. What the hell.
I think the trigger will be as most bubbles. Every joe shmoe on main street starts buying and profiting off these start ups in some way or another then smart money takes it's profits, prices dive slightly, main street panics and there you have it.
That machine is by no means more simple. Certainly more similar to existing machines, but not more simple.

One could go the ARM or MIPS route and these machines actually exist.

BTW what is this Trillek thing?? I was browsing a bit and I can't quite figure out what's the point.
The Implicit Calculus: A New Foundation for Generic Programming [pdf]
Nuzzel, a hot news app whose secret sauce is that it has no secret sauce
It says basically nothing. It gives a CVE (for which no information is available) and says the exploit was used with PowerPoint documents, that's it.
Unit tests vs. class tests
I don't care if you folks downvote me. I'd rather that than you all transforming HN into a site for politics and "outrage" articles, and ruining it.

The Washington Post is a fairly mainstream news organization, isn't it?

It's very, very much a political and "outrage" story. Does anyone really feel 'intellectually gratified' after reading it? I know I don't. I feel angry. To me that means it's not really something that belongs here. This isn't a site for political activism.
In deed almost incredible! Especially considering that during the same time in the Soviet Union speaking German was not forbidden (though it was not well seen by Russians).
Here are Snowden's first emails about the NSA leaks
The string quartet is the defining example of https://en.wikipedia.org/wiki/Baumol%27s_cost_disease .
x86 assembly, however, can also lead to existential crises. 'I have to do WHAT? And they did it this way because of a decision made when designing the 286? Why am I in this field again?'
Unfortunately no screenshots and i don't like the default key bindings.
I have been using dwb ( http://portix.bitbucket.org/dwb/ ) for a while now and it's great! (Apart from some glitches on a few websites)
I get a white page. (Or is that because I do not use Windows? ;)
Single page version http://www.theatlantic.com/technology/archive/2014/10/lone-g...
Yep. It's also worth remembering that different people respond physiologically to 3D movies very differently [1]. Disney thought the effect was useful enough to patent and use for more films, so it's unlikely everyone responds that negatively.

1. http://www.plosone.org/article/info%253Adoi%252F10.1371%252F...
but will need a specifically crafted file and use social engineering methods (observed in this campaign) to convince a user to open it

What's next, "Zero-day Impacting All Versions of All Operating Systems - allows users to download and execute arbitrary code"? I suppose if you're a fan of user-hostile walled-garden trusted-computing models you might consider that a vulnerability, but I think it's safe to assume that most people consider the ability to "download and execute arbitrary code" to be a very useful and fundamental feature of an OS.

from Vista SP2 to Windows 8.1

I'm curious if this "vulnerability" also exists in XP.
> prefer plain text over most "smart" formats

To be usable and easily read, plain text needs word spacing and line breaking, which is a form of "smart" formatting.

> Why have we settled on programs written in text?

Again, text with newlines, indenting, and fixed width fonts, without which it can't be read. So we're talking 2D text here.
"Turn your phone into a simple interface" doesn't sound quite right; maybe "Give your phone a simple interface" fits better?

Looks very much like BigLauncher, I assume it's from the same company?
Maybe I'm reading into details too much, but they never said "open". They said: "specifically when handling Microsoft PowerPoint files". Outlook allows previews of office files and "handling" may be involved even before the presentation is actually opened / previewed. It's just speculation though.
Don't forget to spice up your report with "THE RUSSIANS DID IT!!!!!!!!!!111!1".
Yes. This absolutely fucking sickens me. It instantly gives news agencies an excuse to pick up every little hole and scare all the mortals into submission.

Security has become a marketing and media circus now which in turn desensitizes people to real concerns and rational thought.
Vatican: ‘Homosexuals have gifts and qualities to offer Christians’
One of the facts that amused me from that book was that switchboard operators were originally teenage boys, but they were rude to customers and swore a lot - so they switched to women.
Thanks!
Yeah, both Bitbucket integration and full project reviews are definitely on the TODO list.
Kinda depends under what level of privilege the code runs.

Also secure environments often strip down the ability to download and run arbitrary code, but might still allow theoretically-data-only formats to be downloaded and opened (such as .ppt files), in which case this is definitely relevant.
I went with a clone because they're about £4/$6 and that seemed like a no brainer. I haven't had any duds yet! They only come in the 5V option from what I've seen, but it's simple enough to swap out the crystal and the regulator to make it a 3.3V/8MHz.

Only issue I had was to modify the LUFA DFU bootloader to automatically start the micro if there isn't a programming request within 5 seconds. The default code will sit in the bootloader forever until something happens - fine for prototyping, but a problem if you have it in a semi-permanent place and the power goes.
USB Armory, an embedded platform for security projects
Lone geniuses or simply those with the best marketing and ability to exploit the efforts of others and the general technology landscape? I guess you could argue that many of these innovators are not technical geniuses but in fact business geniuses operating in technology.
A little of it is pension funds or sovereign wealth funds, but most of it is from high-net-worth individuals. Investors are required to be financially sophisticated; they know the risks they're taking.
Seems like isightpartners is down atm.

Here are some more details: http://www.tripwire.com/state-of-security/incident-detection...
And then there's XML...
If the market goes "rational" where that was what you were betting on, you make money. You go bankrupt when the market "stays irrational", i.e. the stocks you thought were overpriced stay overpriced.
Site's down.
cache: http://webcache.googleusercontent.com/search?sourceid=chrome...
No, text isn't picture. Pictures are just one representation of text for particular purpose. Text can be touch (brail script), sound(when you use screen reader), and to programs text is just a sequence of numbers.

The important thing about text is the restriced set of possible symbols and their compositions, and close correspondence of them to meaning (much closer than with general images, video, etc).
Maybe the author intended to filter his readers. Maybe he wanted the readers to switch to serious reading and comprehending mode. Writers do not always engage the maximal readership but sometimes they may not wish to do so either.
that would be: https://news.google.co.uk/
Dragons, Memory and Navigating the Globe Using Only Your Wits
> I think it would be a tremendous waste of effort to rewrite Emacs libraries in any language other than Emacs Lisp. Thus, what interests me is the idea of supporting other languages in addition to Emacs Lisp.

https://lists.gnu.org/archive/html/emacs-devel/2010-04/msg00...

> Common Lisp is extremely complicated and ugly. When I wrote GNU Emacs I had just finished implementing Common Lisp, and I did not like it much. It would bloat Emacs terribly, and documenting it would be hard too.

> Scheme is elegant, and it is a better direction to move in.

> Since we have our own Scheme implementation, we should use that one. If it has a serious disadvantage, we should do something about that. There are various things that might be right to do, but simply disregarding it in the case of Emacs cannot be right.

https://lists.gnu.org/archive/html/emacs-devel/2010-04/msg00...
How are you finding it awkward? It's the simplest way of getting data into a template that I know of - assign a value to a scope and done, no hassle. And vice-versa, too.

(disclaimer: I come from Backbone, where we did all data and event binding by hand)