skysight-inc/HackerNews huggingface dataset:
It seems browsers are making a poor assumption here: that if HTTP/HTML say to download, the browser should immediately begin downloading the file to the user's computer.

The content-disposition filename is an effective hack to fix RFD. But as other commenters pointed out, just linking to evil.com/worm.jpg.exe achieves a similar effect to RFD, and can be just as effective on many users.

Windows has failed to warn users about what is happening when random executables are run (and RFD attacks that in particular). They should improve on this.

Perhaps the browsers should also change their behavior? They could prompt users with information about what is happening when a protocol specifies that a download should begin.
There are a lot of web (micro-)framework or tools on Go right now and it seems there is a new one each day that i lost count. On top of my head: revel, beego, martini, gin, web.go, gorilla.

Have any of HN folks tried it all? Any comparison or review? I personally have only tried martini.
Ideally the camera would cover that as well. Or you could use cell towers.

In the story I read (I think on reddit but I can't find it now) they destroyed all his hard drives but he had one camera that uploaded to the cloud so he still got some footage from that.
This really got to me and made me want to make an account just to comment that I am finding myself doing the same. I run the same old SNES emulator of FFVI(FF3) on SNES to play a hacked saved rom file I made to try and feel that energy I felt when I was just a boy with my best friend. Now I'm just a man that is caught up in habits of telling my wife I love her and pays the bills and all.

I feel no amount of planning an getaway vacation or getting a great project at work etc can bring me back that feeling of just kicking back with my friend jacking around with HIMEM.SYS to play Falcon 3.0 while we waited for duck tales to come on...

I miss you Nick - I wish you never found that gun.
> Someone with power, like an employer, could pressure people into handing over their votes.

This is absolutely what's going to happen if such system is implemented.

Appearing to delegate one way, but having their votes counted another way? Seriously? It is way too complicated for an average voter. Even if you implement some sort of plausible deniability scheme (so that aforesaid someone can't just login with your credentials and set it up the way they want) - imagine explaining plausible deniability to a 90-years-old grandma or some uneducated farm worker, or a drug addict...

Elections are rigged this way even in countries with supposedly secret votes: bad guys might ask you to prove your vote by, say, snapping a picture of "correctly" filled ballot alongside your ID, but even that is not necessary - enough people will do what someone with power tells them to on a vague threat "if you try to fool us we will find out", or because it's a "patriotic" thing to do, or simply because they are told to and don't know better.

Not to mention that a huge number of people just couldn't care less. Half of population simply don't show up at the polls. How many of them will simply sell their right to vote for a token sum of money?

The current system is bad in many ways [1], but this proposal is even worse - way too much potential for abuse.

[1] Some reasons why - http://en.wikipedia.org/wiki/First-past-the-post_voting
357 people now being monitored for Ebola in New York
Google's a huge company and its products have a wide variety of requirements. For context, dl.google.com is basically a download server: its goal is to get static files from Google's servers to your client as quickly as possible, with some minimal business logic. Something like this is basically ideal for Go, because it is relatively stateless and focuses on shuffling bytes from one IO interface to another. Another ideal use-case was the project that Matt Welch blogged about moving to Go.

When most laypeople think about "Google", they probably mean the search engine. I cannot imagine the serving system of Google - the part that actually retrieves the results and ranks them - ever being written in anything but C++. The scale of data that it operates on is just too large, the complexity of the code too high, and the CPU budget per request too small.

Now, there are other binaries in the search serving stack that I think should ideally be written in Go. I said as much when I was at Google, though I doubt it'd ever happen simply because of inertia. But that's probably not what people are thinking of when they say "Google-scale".

Source: I worked in search for 5+ years.
Is mDNS really so useful? Of all the people I know who know about it, everyone has disabled it when possible due to all the useless network traffic it produces.

Apparently Canon's wireless printers are well known for doing mDNS floods:

http://digitalhome.ca/forum/showthread.php?t=148153

http://forums.anandtech.com/archive/index.php/t-2171044.html
Plenty of times I've come back to my computer, typed my OS password expecting that it was locked, waited for my display's turn-on lag, and found that it wasn't locked (grace period). I type the password blind, but reserve the enter until I have visual feedback.

At least typical IRC clients don't transmit until hitting enter. Browser omnibars and Javascript can send away every keystroke as it happens. Now I want to search all my Google Docs for my passwords -- let alone other stupidity I don't care to share.
Actually it is not. Many places have student discount but don't advertise it. You have to ask.
Coding Problem: How do you fix a typo during high traffic without breaking production?!
Tesla 3rd Quarter Stockholder Letter and Results [pdf]
I just signed up, but can you show us what the average donation is?
Lyft is that nicer, gentler company. That's their differentiator: "We're like Uber, but friendlier." Whether that can succeed in the marketplace will depend upon consumers like cutthroat & efficient over friendly & quirky. So far most of my friends prefer Uber, but then again, we're evil techies who are taking over SF with our laptops.
Someone hacked their email, and send them his resume? Isn't that a felony?
The answer is obvious and simple to anyone who has worked for "one of Wall Street's most successful entrepreneurs."

These assholes churn through assistants like you wouldn't believe. Most quit, in spite of the high pay, out of basic self-respect. The others are fired during a tantrum.

Most of these jagoffs have a few pending wrongful termination lawsuits at any given time. Just ask them, they'll probably brag about it.
I would encourage people to

1) collect data and submit written complaints to regulators like the FTC if they believe they've identified unfair or deceptive business practices

2) boycott companies that engage in these practices, and ask your friends to do the same

3) consider technical mitigations like the de-identifying properties that using the Tor Browser Bundle offers
Sounds like a good project for a raspberry pi.
My issue with such opaque pricing methods is that there are substantial economic externalities. If you charge students a different rate, no big deal. You are either a student or you are not a student. But once you get into more complex price discrimination, you force the user to expend time and effort to understand how the company is price discriminating, and to spend time trying to figure out how to counteract it.

For example, airline pricing is a clusterfuck of opaque pricing. I spend literally hours whenever I book a ticket, trying to figure out the optimal flight. Other flyers also spend similar amounts of time trying to figure out the pricing algorithms and not get screwed. Overall then, thousands upon thousands of man hours are wasted just trying to figure out how to get charged a decent price.

Frankly, I think such bullshit should be illegal. The airlines may earn a few extra bucks, but no one considers how much time and effort is wasted by the user.
LovePalz Club
Cooler than Tinder, integrate social & interactive toy
Is it me or is your userid ironically apropos to this discussion?
You'd think that if the turnover was so bad that they had to have the ad literally 10 years running, at least one of the burnt assistants would've explained what's going on.
Interferometry in the RADAR bands allows you to penetrate the cranium and reflect back the neuronal correlates of consciousness. These signals can be decoded into your inner monologue and emotions.

This is the latest rave in Silicon Valley (which used to be called Microwave Valley!). Well... not the latest, they've been working on it for decades. <:)
Ah the irony of an article lamenting something they're currently using quite heavily.
> I've got 2-3 nights per month to hang out with work people, and I use them doing something I enjoy.

That's super-great for you, but what if work people don't want to do something that you enjoy? Lemme guess: you won't hang out with them, right? Because that'd be a waste of your time.

Fun fact: that's the definition of you are not being included. But you didn't want to be invited to their uncool party anyways, right?

> And you, and all my coworkers for that matter, have no claim on it.

Why do you even bother hanging out with your coworkers at all? Like, what's in it for you? Are they just extra bodies filling in the space for doing something you enjoy?
I'll point out that the original vmstat output also revealed 3000 interrupts per second, in the column right next to syscalls. Many times it can be faster to look around at the high level instead of immediately diving deep. In this case, checking to see which device was causing the interrupt storm would have led to "something on the network" pretty quickly.
The writing in this post is superb. One of my favorite lines:

"Windows is the Superbowl Halftime Show of operating systems. Given what everyone got paid, and how many people were involved, you’d think it would be a lot more memorable."

As someone who spends a lot of time with Windows...yeah. But the post is really an amazing blend of technology and sentiment, kind of reminiscent of Neal Stephenson at his best. Makes me want to dust off my PDP-11 emulator and take another crack at Unix V6.
Tense stand-off between Million Mask March protesters and police in London
Build an Elite Physique with the 4-Day Muscle Thrashing Workout Program
My favorite paragraph, about LISP machines:

>It is a very weird experience. It feels like a machine for monks or nuns. Baffling. But there is this weird sense of raw power . . .
I previously had this idea as well:
www.InterTechTion.com

Started taking up a lot of time though and stopped sending emails a while back.
Strap on Your Oxygen Mask, First
actually it is. when you are sudo you can practically do whatever you want, including opening a backdoor, adding another admin user, forwarding ports etc.
What you need to know about WireLurker
Holy f*ck, that article was so much more than I was expecting, and it just kept getting better. I can't believe I almost passed it by. I'm still digesting it...
Blind woman sues Coles [Australian Supermarket] over website accessibility
Heh, throwaway. Posting an admission that I might've shared my passwords, using the username associated with those passwords, seemed foolish.
Tesla delays the Model X until mid-late 2015
As someone who has no idea what the working environment is like, I'd love to hear some stories. What's day-to-day life like in that sort of job? I guess I'm just curious what the owners do to make it so unbearable to work there. And why they don't care.
Coincidentally, the scoping issue is almost exactly the same issue that plagued Zope, a Python-based app server, back in the day.

In Zope, any property could be inherited not just from the parent object, but from the current context; you could invoke the object path "a.b" and b would inherit from b, but if you invoked the object path "a.c.b", b would inherit from c instead. They called this design pattern "acquisition", and seemed rather proud of it until they realized it was the kind of magic that was ultimately too magical for its own good.

The Zope guys tried very hard to eradicate it, and in the process ended up alienating all the developers with the new, non-backwards-compatible version. Funnily enough, there is another Angular parallel to Zope: Just like Zope 3, AngularJS 2.0 is also not backwards-compatible.

Angular's parameter-based dependency injection is coincidentally the same reason Martini [1] is slower than most other Golang web frameworks. Clever, sure, but ultimately a design flaw.

These problems demonstrate how important it is to introduce a good design from the very beginning. You can fix bad code, but bad design is much harder to change.

[1] https://github.com/go-martini/martini#service-injection
> ...who in their right mind would bother interpreting it?

Um... me?

https://code.google.com/p/picoc/
aamm123456aag
The orange user names are shown only to other YC alums, not others.
This happened to me, and "wake-up call" is exactly right. I set up the camera to check my cats when I was away, and found myself realizing I walk around naked a lot.
> You are expecting people to change their personal habits because another coworker may not approve of them.

I like that you put the word "approve" into my mouth. It's an excellent straw man technique and pretty underhanded. Well done. Full marks for rhetorical technique.

> I personally don't drink, but I would never suggest to co-workers that they change their outside of work habits because I don't want to go to a bar.

And yet, that's not what's happening.

The situation at hand is that there exists a group of people who like to do Activity A. Now a new person, Person P, joins the group who does not like doing Activity A.

Now, Person P has a choice. They can either leave the group or they can force themselves to do Activity A.

> It's clearly different if its a work sponsored event.

The thing that you're all missing is that the fact that it's in a workplace is completely irrelevant.

Let's assume Activity A is "going to a fellowship meeting on Friday nights". Would an atheist feel included if everyone simply said, "Oh, you don't want to? Guess we're leaving you behind, then." Or worse, if they said, "Oh, you don't want to? But you'll really like it! We demand you come along and do something you won't enjoy!"

"Can't we just go and play board games or something?" "No, fellowship is far more important! That's what we do on Friday nights."
Interview questions are great tests of algorithmic thinking, which is why some companies ask them. I don't plan on interviewing for a job any time soon and I probably wouldn't want to work at a company that asks questions like this anyway. But I would like to get better at problem solving in general, and interview questions seem like a great way to focus on developing a better analytical approach.

I wonder if anyone else studies these types of problems and gains something from it, or if they're just asked during interviews and then forgotten.
>CTRL + F "Tue. Nov. 24th 2009"

Off topic, but is there a linking service where the reader can be directed to an arbitrary location within the page? In this case we could just click on the link and it'll directly take us to that particular comment?

I'm just surprised that there's still no way for me to link someone to a particular paragraph within a Wikipedia article in the year 2014.
I would walk out of a job interview that asked brain teasers. It's not revealing of anything and tells the interviewers that either you've heard that piece of trivia before, or you got lucky and reasoned it out. And "we just want to see how you think" is evidence that the interviewers hadn't thought about how to actually determine what kind of an engineer you were.

The best interview I ever had was basically a small amount of spec work accompanied by a writeup of why I did what I did.
Complaints about the website aside, this technology is great and is exactly the type of thing microsoft needs to be developing.
Thanks for signing up! The average monthly donation is $39.50 and the median is $20.
I'd never heard of dexy before but has anyone tried it?
“The Giving Tree” at Fifty: Sadder Than I Remembered
After reading these other comments, I Googled David E. Shaw and found this: http://mathbabe.org/2012/04/05/it-sucks-to-be-rich/. (WARNING: Not sure of the validity of these stories, but they're interesting.)

> First example: David hires a Ph.D. in English literature (he has a thing for “geniuses”, even in the mail room) to test mattresses for him. So that person’s job is to sleep on 15 different mattresses, for 8 nights each, and draw up a report to tell him the pros and cons of each mattress. This is to avoid him having an uncomfy night’s sleep. That’s what the risk was that we were avoiding with that.

> Second example: David wants to be sure his trip to California goes smoothly, so he hires a Ph.D. in Something to take the exact same trip – same car service to the NY airport, same flight (same seat on plane!), same car service upon arrival, same hotel, exactly a week before his trip (due to understood seasonality issues of air travel) – to make sure there are no snags, and to draw up the report that presumable explains how much leg room there was in his plane.

As an aside, their research group encouraged me to apply for a position shortly before I graduated college. The application asked for things like SAT/ACT scores and (number of) lines of code written in various languages. I thought my application looked pretty good, but I guess my ACT score was too low for them to consider me (even potentially!) brilliant. I still feel kind of bitter about that.
Interesting, I was just in the USA and caught up with people my partner knows in SF (none techies mind you). All of them told me uber was old news, service was not as good, coverage not as good as Lyft.

I have no idea if it's true while over there but enough of them said it that I stopped using Uber while I was in SF and only used Lyft, and managed to convert my partner's parents to using Lyft as well.
You should watch this:
http://www.ted.com/talks/david_bismark_e_voting_without_frau...

There are established ways around the percieved problem, even before you start thinking on cryptographic solutions

EDIT: sorry, voting digitally isnt addressed in those links :/
Hacking iFrames for Fun and Proper Image Orientation
First-past-the-post voting
How did you come up with that name? "InterTechTion" sounds and looks horrible to me. Almost like it could be a defunct semi-conductor manufacturer from the 80s.
On the one hand, "If you don't want naked pictures of yourself in the cloud, don't take naked pictures of yourself and put them in the cloud."

But this is like saying "If you don't want to get scammed, then don't respond to scammy emails." That is, it's perfectly good advice, which is fine for people who visit Hacker News, but maybe not sufficient for the vast majority of people who aren't aware of the ins and outs of our rapidly advancing technology.

There are whole communities of people devoted to the practice of finding women who accidentally configured their phones to upload all pictures to a publicly accessible cloud storage server. The women whose nudes are distributed this way may not realize their pics are being mirrored- or they may assume it's to a private site (because why the hell isn't that the default?!?)- or they may have shared these pics with a dude who made the same mistakes.

But regardless, the point remains- any individual is easily capable of being immune to this problem. But there's a whole population of vulnerable victims who don't even know they're being victimized. And that is a real problem.
"The ridesharing space does not offer advantages to economies of scale" - efficiencies of scale in ridesharing are massive; more consumers means a more liquid marketplace and less downtime for drivers (idle time or time-in-transit to a passenger)and more drivers means shorter wait times and increased reliability in car availability. Beyond the improved consumer experience, there's real $ value creation resulting from these efficiencies that can lead to increased revenue/unit of time for drivers, decreased fares for passengers or increased commission for the ridesharing platform.
My translation, trying to preserve the imagery expressed in some of the characters and also the rhythm of poetry in Mandarin,

《冲突》 "Collision, Rushing to a"

他们都说 The people are always talking, speculating

我是个话很少的孩子 That I'm a man-child, a little bit morose, have little to show for in the discipline of twisting tongue

对此我并不否认 To their accusation I won't deny nor recant,

实际上 But I'll instead declare that in reality, (not on their verbal plane),

我说与不说 I choose to speak to not speak - might as well cut my tongue,

都会跟这个社会 I have computed all possible scenario's of their word games and foresaw,

发生冲突 All interactions rushing on the freeway, en-route to their collisions.
It's worth five figures to the buyer if they can make five figures or more of value from it.

Not speculating about nation states here but 'groups': making good money from post-Auth MySql RCE not totally absurd - Amazon, Rackspace, HP, Heroku and Jelastic all offer MySql-as-a-service, where you are given low privilege (maintained, geo-redundant, etc) account access to shared MySql instance. If there's more than five digits of business value stored in that database then a five digit exploit makes sense.

Or think about any of the (poorly written) bitcoin services out there that use some default phpAdmin creds for a database that also hosts their vault.
Frame introspection in Pyston
Even computers see faces where there aren't any. I've had Facebook's tagging functionality sometimes pick a non-human part of an image as a face to be tagged.
You can click the time of each comment to get a permalink: http://workingwithwords.blogspot.com/2004/08/gee-i-wonder-if...

Wikipedia articles have the same functionality: http://en.wikipedia.org/wiki/HTML_element#Anchor
Well, if you go to spsfind.com, it 301 redirects to sps-app.com, which seems to be a social positioning app, in Hebrew. Doesn't seem to be related to D.E. Shaw, though.
Breaks the scroll wheel.
Thanks, I came to the comment section here looking for a txt version.
I commented earlier that I thought about applying to that classified job in 2007 - as it happens, in 2008 I briefly worked as the personal assistant to a personal assistant at D.E. Shaw. I was working alongside Harvard business school types, but doing the most trivial things. I literally had to run across midtown to deliver a six pack of Diet Dr. Pepper to one of Shaw's executives at one point. Half the people I met there were humanities PhD dropouts. I applied to humanities PhD programs while working there and sort of did the reverse.
sounds like he wanted "tech education" in there or something.
To clarify this point, the Minecraft server is free to download [0], even if you have not purchased the game at all.

[0] https://minecraft.net/download
I'm sure many would talk privately, but not publicly. Not if they're hoping to get paid from their lawsuit or if they got paid to sign something. Or if they want to work for another firm, and have to worry about false rumors being spread.

They also know first hand how litigious and vindictive these guys get. My friend nearly killed himself as a result of being repeatedly dragged through the courts. He was forced to burn his life savings on lawyers, after his two asshole employers predictably turned on each other. And he was just a witness in the cases, a pawn, subject to torture by two of Wall Street's most successful entrepreneurs. They blew millions on lawyers and ruined lives, just to fuck with each other.
But then, how would you be sure that web sites like camelcamelcamel.com are not price-steering you with false data?
If the entire computing session, instead of just the word processor, is similarly cloud-hosted with similarly granular revision history, you've got your margins.