skysight-inc/HackerNews huggingface dataset:
No, you don't. Android ID is stored in Settings.Secure and can be read without any permission. READ_PHONE_STATE allows the app to read the IMEI/ESN/MEID of the device.
Wasn't that almost the same approach with UAC ?
Netscape was a threat because Microsoft could not control the web browser, so they countered by making Internet Explorer and then bundling it with Windows.

Java Microsoft made their own version of it, but made J++ and J# that compiled Java code to native code. Sun and others made APIs to it, and eventually Sun sued Microsoft and Microsoft abandoned J++ and J# and made C# in 2001/2002 to replace it with Java like syntax.

Java as a language was not a threat, Java as a platform in mobile devices and operating systems was a threat. Java was being developed into an operating system at the time for that Network Computer that used Netscape as a web browser.

You can see the worry on Gate's face and how he is thinking each question carefully before answering. It was all about what Gates can recall not what might be possible.
The missing ImportVolume documentation
Some people find it acceptable to give up information for "convenience", or even worse : bragging
Many other are sweet, this one uses WebGL and is very nice http://js1k.com/2014-dragons/demo/1868 (tested on Chrome)...
Would't using them require application support, like how DAWs support the Mackie Control protocol, among others?
I can't help but see parallels to Skunk Works.
Given that racism is a universal thing and often happens intra-minority (African-Americans and Jews are an (in)famous example), your statement would pretty much mean that just about every demographic exhibits a hallmark of privilege by sheer virtue of ignoring broader social contexts in a racial slur.
I've never understood why people like Rothko's work. I look at his stuff and say "I could do this myself with 2 - 3 colors of paint and 10 minutes with a paint roller." What am I missing here? Is his talent understanding his market or artistic (or both)?
I think you're right to be skeptical. I'm in one such "startup factory" (which does not accept outside proposals), as an employee in one of the startups. I can confirm that your comments are spot on.
> there's nothing in this analysis that suggests they're doing otherwise

The article included a decompiled code snippet showing it running methods like "sendMMSLog" and "sendPhoneCallLog", apparently logging a bunch of private data and sending it back to Uber.
Checking for root access is actually really useful from a developer standpoint. I've seen countless bugs on Crashlytics that are 100% on rooted devices which often is because the user has xposed or some other system level hacks that break my apps. This allows us developers to spend more time focusing on real bugs instead of chasing down these rooted device problems.
I can't tell why I would want to track my spending at costco. What does this do for me? How much work is it to enter data?
"based on the various interviews he's given and comments he's posted, he seems to be quite content with his situation"

I too would be content with getting free money extracted from the labor of others into my bank account every month, after qualifying by acting as a spy in a series of chase scenes in a CIA thriller. Sounds like the movie had a happy ending.
He has 5 students of which 3 have completed PhD, 1 is in progress and another one is MS by Research.

This is the only offer I have.
It doesn't pay me but I don't have to pay either except some admin fees. It's government funded.
Popular Mechanics and Popular Science are both available as well.

Popular Science 1872-2009: http://books.google.com/books?id=2CgDAAAAMBAJ

Popular Mechanics 1905-2005: http://books.google.com/books?id=RdMDAAAAMBAJ
Which is fair. But I'm also not willing to categorize prose as a "strawman argument" when it is the argument of an actual man, right in front of us.
Let's talk about targeting specific users in the scenario where you've kept your server-side API separate from your static front-end code.

The compromised front-end code server would need to know that specific users host and client in order to target a specific user. Users are logging in to the server-side API. They all get the same front-end code.

If a third party site tested from a variety of hosts using a variety of spoofed client information it would be very probable for it to detect code that targeted broader user fingerprints.

You're right in that this wouldn't protect against targeted individuals. But neither does an executive order from the state.

Web applications are an orchestration of two separate pieces of software that can work together using multi-factor authorization and signature schemes to offer a substantial amount of enhanced security when client-side crypto is properly utilized.
Rothko's work doesn't come across well in reproductions. The scale, texture, and subtle color variations all matter.

I felt much the same as you until I saw them in person. In particular at the Rothko room at the Philips Collection in Washington DC, with Rothkos on all the walls.

In any case, Rothkos aren't about representation (obviously), but about the feeling the painting brings about in the viewer. For me it's best not to assign them any meaning at all, but just take them in.

Nothing comes across for me from pictures in books or online though. It's a completely in-person experience.
I wonder if a few bytes could be saved by encoding the source in 7bit ascii, decoding and running through eval. Not sure if that makes sense.
I agree with wmf.

I was pondering what he could have done? Resell Netflix or redistributed captured video from Netflix?

Nope... Nope...

Its about suing form employee, who is also the now cio of yahoo, defrauded netflix and took money from Netflix by taking cuts of deals aka "kickbacks" from vendors where netlfix paid to vedors $X but the guy took 15% of $x for himself through a IT firm he has/had(?) On the side.

It is pertinent to note he is CIO of yahoo as there would probably be repercussions to yahoo if he gets convicted, but leaving out he is a former employee and these fraudulent actions took place while he was employed by Netflix, not yahoo, at the time
Auditing can be a deterrent to an attack, but won't necessarily protect you against it. It's a good way of letting you know what has happened after the fact.

Think if you had a DB with financials (credit cards and such) in a isolated DMZ with SSH inbound/outbound blocked

How can you dump the DB and copy it off if all the traffic was "proxied" through this?? It's not like you can scp a tarball anywhere.

You can't forward ports and expose the DB outside of the DMZ either.

And it doesn't take admins to setup auditing or disable forwarding, you have physically disabled it.

I got to say I don't understand the single point of compromise thing. A single point of failure is a bad, but the less points of compromise the better. You identify your critical systems, you protect your critical systems. Spreading things out doesn't make you more secure.

Here is an old white paper on some things to think about SSH in your infrastructure.

http://www.sans.org/reading-room/whitepapers/vpns/security-i...

Your right in saying this is an unproven application!
I totally agree with smosher. Once upon a time men of science used to describe biological systems in mystical terms because they could not understand it. Now we live in a post-Darwin world and have started to understand biology at the molecular level. No one uses phrases like "animate-matter" vs "inanimate-matter" anymore.
If comments were blocked, that's one thing, but increasingly often access to the site as a whole gets blocked.
The Legal Life-Cycle of a Startup
Awesome stuff.

Here's another article about this http://www.datagenetics.com/blog/november32012/index.html
Not ewww, it's one of the more interesting developments (well, technically a revival) in computer architecture from the industry. I just wish they'd 1) document their architecture and 2) allow access third party access to the bare metal.
When I toured the USS Carl Vincent (a nuclear air craft carrier) at Alameda I was surprised at how "small" its engines were relative to large container ships. It helps that they are electric of course (no big gas expansion chambers) but I suspect if it weren't for the proliferation concerns cargo ships of this size could be economically run on nuclear power plants.
"So I don't think he should be held to the same standard everyone else is."

I think you're misunderstanding how standards work. It doesn't matter if he believes it or means it to be abusive or if it's just trolling/performance art or if it's because of mental illness. Racist speech is offensive to the community and the people who repeatedly use it will be moderated.

There are people with mental illness that expose themselves or defocate in public. There nothing inherently wrong with nudity or defocation (hygiene yes but we're ok with dog poop as long as you clean it up) but these acts cross a line society has drawn. And most people will insist that such behavior not be permitted in things they take part in.
I'm open to anything you'd want to contribute, so long as it doesn't compromise the private nature of the service. Fork away! I'm available if you have any questions about the codebase, or need help getting started.
Glad its happen tbh I hate JS and so do many others. Its a fact JS is slowing down the web.
Given that an LED can act "in reverse", as photovoltaic source, what would be the efficiency of this as a solar cell? Any ideas?
You can call it a style if that makes a difference. I think there are reasons behind that style, and I think the too minimal standard library is the main reason. The lack of a good package manager until recently may be another contributing reason.

I hesitate to answer your hyperbole about ten variants of equal signs. It's not uncommon for languages to have two notions of equality like ocaml has (or even more): Here's Python for example:
http://stackoverflow.com/questions/132988/is-there-a-differe...

To answer your original question of why anyone would prefer to not use startswith: I don't think anyone does.
The Google engineer teaching happiness in three steps
While not "everywhere"...

Force SSL only: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Have site preloaded in Chrome: https://hstspreload.appspot.com
I would say it is certainly _far_ less relevant than the fact that he was a former employee.
stop selling personal data (if you do) !!!!!!
Respect privacy
I'm reminded of this quote from Joseph Campbell: "The schizophrenic is drowning in the same waters in which the mystic swims with delight." Terry Davis seems to be treading water—stuck somewhere between revelation and oblivion.
Solving the Mystery of Link Imbalance: A Metastable Failure State at Scale
Pfft, no, the world doesn't get better through goodwill in any way that scales.

Seems to me like it usually gets better when it makes economic sense for it to get better. It's on people to set up those economic situations.
How do I draw a pair of buttocks?
Looks like a more flexible (and wireless) version of Griffin's PowerMate[1].

Well, more flexible at least.
http://griffintechnology.com/powermate-bluetooth

I used to use the wired version of this one. More specialized for 3D navigation, but pretty configurable, just like the rest.
http://www.3dconnexion.com/products/spacemousewireless.html
Yep mine was summing the digits of a number until you reach a single digit number (eg 455 -> 5).
Im all for signing stuff but:

- amo wasnt affected by heartbleed

- signatures arent foolproof either

- HTTPS everywhere.. is supposed to advocate for TLS being safe ?

So the criticism seems quite misguided in this case.
Or we can save our righteous rage for people who aren't just trying to help in innocuous ways, and instead direct it at cops who shoot kids.
An economist explains what is happening to the global economy
The reason why they get good and enticing but unactionable predictions, is that they assume that they can trade instantaneously at the quoted price. They are neglecting the time their order would get to the matching engine, by which time the opportunity would be gone often enough to make their trading strategy unprofitable.

In fact the authors of the original paper seem completely clueless about this point: "For example, since the prediction time of AAPL, 0.0311ms, is less than 0.0612ms, which is the time difference between the upward spread crossing events from the Row k −1 to Row k + 4 in Table 1, the model could in principle perform fast enough to influence corresponding trading decisions"

As if their order could reach the matching engine in 30 us...
Do they? I thought most fossil-fueled power plants use coal, which they burn to power a steam turbine. Natural gas plants often use gas turbines, but this is very different from the gas turbine used by a ship: the latter burns kerosene, not natural gas. (Natural gas is uneconomical to power a moving vessel; because it's a gas, you need space to store it, and that space can be orders of magnitude bigger than an equivalent energy-density of diesel fuel or kerosene.) Diesel engines or oil-powered gas turbines are very rare for power plants, outside of backup generators for hospitals etc.
you can find other forums to ask more "abstract" questions

Could you name a few? I am often looking for places to ask unspecific questions of experienced programmers.
I can understand you. If I were in your position, I would think I'm lucky to have a job, get a paycheck, buy things I want and get bored as well. There are many people who don't know whether they're gonna have a meal today, they don't know if they can get a job to pay their kids school fees and the list goes on .... enjoy being one of the lucky people on earth.
Take your job as an opportunity to learn (good or bad things). If you don't like it, quit. Life is too short to waste ... make your decisions fast, Fail Early !!!
Well if you don't, then you get accused of refusing to mentor women.

More seriously, though, how about reaching to everyone who is visibly having trouble.

For example, someone who is hell banned yet posts constantly for months, is likely not getting along fine.
Great!

Can we now stop pretending that browser crypto is the only thing is susceptible to these issues?
I think the real reason is because Facebook plans to recreate the Bell labs style of industry research, where researchers have license to do whatever they want.
Wolfram Alpha says "(none in office)", and then tells you that the current leaders are the vice president and the president, and then gives you the dates in office for all the presidents, vice-presidents, and, interestingly, the president's wives.
I wonder how common this kind of thing is. It was definitely going on at a previous place I worked at.
Same with me this morning. Drove past someone at a bus stop and thought "They're going to sit there for another 10+ minutes, then pay $3+ to get to their destination with a stop every couple of blocks. Meanwhile, I'm going past right now using one seat out of five."
I don't know exactly how much Netflix pays this guy, but if it was at least as much as Glassdoor claims we pay our directors, I really can't understand why he would risk that for an extra $300k.
We're doing our first Friendsgiving this year, tomorrow actually. Still plan on seeing the folks on Thanksgiving Day, but it's excuse to have a party and hang out with the people that are close to us. Should be fun :)
It's sad if the allegations are proven to be true that he collected kickbacks by having a portion of the contract fees sent to his private LLC[1]. One of the weird thing about having a VP title on LinkedIn is that I seem to get random InMails from people who propose deals like this pretty regularly. It makes me wonder if it is rampant or there are just a lot of hopeful growth hackers out there who are promising kickbacks in order to get more business.

[1] Anyone know how you would report that on your taxes? Kickbacks from line 1 or something?
unethical businesses - Why? Because they do anything for money. They don't care about effects to the environment, they don't value human life and they treat employees as slaves (might not be same everywhere).
Thanks for articulating that. Id o admire terry because I'm rather amazed by TempleOS and as I'm almost the same age as him I can relate to his Commodore 64 computer roots but can't hold a candle to him in engineering terms. I don't know where to delinerate the lines between mental illness, cultural context, and personality in a complex case like schizophrenia so I've chosen to leave that question ina grey area.
Furthermore, it looks like PUT & DELETE were never part of Webdav (http://en.wikipedia.org/wiki/WebDAV).
Yes and yes. I am not a fan of "self-help" books, though this book could or could not be labeled as such. As someone who has for most of my life been quite socially inept, have found it very useful.

After reading this book, I try to make every conversation I have into a little game, where the goal is to get the other person to talk more, and about themselves, than I do. I tend to love to talk about myself, and think almost everything I say is very important.
Not on the front page of Hacker News either and usually flagkilled.
the simple answer is that you don't have the same information in front of you that you did at the time.

in hindsight, we can easily identify what is and is not relevant/influential, whereas in real-time anything could prove to be relevant/influential.
I'm going to be the unpopular voice in the room here, but as someone who has worked my ass off my entire life, a 1030 SAT and 3.5 in high school hardly seems like "acing" anything. In fact, that barely seems mediocre. College is a whole different ball game and it's much harder. I've seen kids with 800 math SATs and 4.0s in hs fail intro math in college. Why can't people accept that sometimes things are just hard?
Because there's something you want to make? And it's possible in the long term to ramp up to that point, it's just that these salary expectations make the first few years rather difficult - almost dependent on raising money at the absurd valuations that are currently the norm.

Just saying, something's gotta give.
What is that? Sparrow “father and son” (HD).avi
I don't think slugline was derived from headline. On old linotype machines, the slug was literally a line of metal.
For a C-corp you'd be in over your head trying to meet all the requirements to stay legal. And it's totally not needed unless you have investors. An LLC in your home state is easy and probably about $100. But it's also not needed unless you expect substantial income--because the only way to actually limit liability is to separate personal finances from business. Probably with an LLC you'd end up filing a tax return where you merge business income into your personal income, so there's not really a tax reason then.

In summary, if spending $100 is no sweat, sure get an LLC.

--not a lawyer--
I'm glad we've re-appropriated this holiday to celebrate friendship. My friends are just as big a part of me as my own family.
This one changed my life: http://www.americanradiohistory.com/Archive-Poptronics/70s/1...

That is the one with the Altair 8800 on the cover. It was cool and all to dial up the mainframe with the acoustic modem but man, to actually own the computer and no one else could use it or tell you what to do with it? What would someone do with so much power! :-)
I think it was on a tablet, not on the desktop by default yet.

It is kind of confusing.
The method is named sendMMSLog. The body of the method is not shown. Is it logging the messages sent to & from Uber? Or the messages you sent to your girlfriend. The difference between those two is massive.
Minimalist JavaScript Audio Equalizer
to add to the other comments's explanation:

imagine you have algos A and B, where A is better than B

your top competitor has algo B, and everyone else has C

if you release B to the public, now every C becomes a B and competes directly with your strongest competitor.

(pure speculation)
It's pretty crappy and is not responsive AT ALL, but the main thing there is the interface with the audio API. Potentially a starting point for better applications.
Myself, as a secular person, the way I approach religious art is the same way I approach non-religious art.

I give it a brief glance and a slight nod (if nod worthy which usually I don't feel is the case), then I proceed to ignore it. Most of what is called art isn't in my opinion anyway so I usually don't even bother with that.

There is some cool stuff for sure, Burning Man comes to mind, especially before the steampunk infestation. But generally I wonder why people waste their time.

I do however (nearly) fall to my knees in worshipful rapture at a good piece of technical work be it a building, a vaccine or a piece of code. But it has to be functional or I don't care about it beyond a glance. And efficiency and functionality it what makes it beautiful to me.

I'm guessing this view might be considered by some to be a disorder and it probably correlates with my lack of religiosity. As a side effect of said disorder, I simply don't care what these kind of people think.
No, it shows that there exists a method that calls a bunch of methods. However, as others have explained these methods appear to be from a library that's been loaded in wholesales, and it doesn't show that the method is ever called or that any data is ever transmitted.
My former remote boss used to spend his day going through Skype contacts to video conference his reports. His theory was that it's hard to lie face-to-face. He'd basically do one-on-one scrums.
Sorry, misspoke, but you know what I meant.

Salaries are only absurd near the top of the software industry. It's certainly better distributed than those other industries, though.
Not very new (at least a decade old) but it's a good thing to publicize.
Calling these entities "factories" is silly. Factories, as traditionally understood, stamp out identical copies of a product. That is not the purpose of these organizations. Yes, they intend to generate other businesses, but these business will not be copies.

Update: I'm not criticizing the thread here; the article used the term.
Heh well the answer is still the same, but the source has now changed to a story about this incident: http://searchengineland.com/according-google-barack-obama-ki...
Actually that's not what I'm saying at all. I'm critiquing the implementation of this for several reasons:

-The JS crypto can be trivially MiTMed. Your approach of checksumming the JS you outlined in another comment using external servers is laughably terrible

-The OTR is pointless. The keys aren't being verified so, again anyone could MiTM the key exchange and trivially intercept messages, even if there was no JS. This is the main point of the app, and it's completely broken.

-The entire application is relying on the security of the TLS PKI, which is horribly, horribly broken. This opens it up to attack by a huge number of people.

-It's being run on a shared server, with access to the keys by the real owners. Not to mention VM memory-leaking attacks by other residents, etc. Having your entire application logic hosted online and delivered to your users every time they access the service has security ramifications, whether you'd like to believe it or not.

So basically what YOU'RE saying is trusting 1 developer and trusting millions of people is the same because at some point you cannot verify every bit in the executable. Using browser crypto is worse than executables for the same reason PFS is better than non-PFS, you can't retro-actively hack or MiTM something. If both parties already have the executables stored locally (or delivered securely by an offline medium like USB stick and verified) the only way to intercept the data is compromise both end-points.

TL;DR your hyperbolic "trust as slippery slope" argument is dumb
I've always thought http://solvemedia.com/ looked nice. It's captcha via advertising. E.g., "Please type 'Just Do It'"

Not sure if it's applicable to your use case though.