skysight-inc/HackerNews huggingface dataset:
> The only things OTP guards against in a physical access scenario are hardware keyloggers and shoulder-surfing, neither of which were part of this attack.

Well, yes. But in the case of bsd/Linux, if your user is in the sudo group/file -- requiring OTP on privilege escalation would help. While in many common configurations, when sudo is set to prompt for a password, it'll also cache that for a certain period.

If* you could make window UAC ask for an OTP (or password) rather than just accept a click on OK, it would also help in this scenario. Note that OTP for every UAC prompt would probably be quite annoying even in windows 8 -- but possibly more manageable than typing in a (secure) password.
How to Share Facebook Content with Just Friends
Crikey. Site builders are getting frighteningly good. Weebly is already pretty acceptable but at first glance Voog looks like a great leap forward.
I think there are 2 pieces to discuss.

1) Is alg trading overall a good thing? Possibly. It adds liquidity which helps ensure proper movement of money. Whether that is overall a good thing or not can be debated.

2) Is it a good thing to make a ton of money off of this? This is the question that is maybe a more obvious no. But you can apply the same logic to basically all of financial services. How much is too much?
I would like to think that most people would be able to distinguish between the Russian people and culture on the one hand and their current government on the other. But let's use the shorthand of saying "Russia" for the geopolitical entity. "Russia" still generates a lot of fear based on recent history, where Russians were the privileged nationality in the Soviet empire, which surrounded itself with satellite states controlled by the Red Army. It was until a few decades ago one of two superpowers vying for global domination. Many neighbouring peoples have memories of being denied statehood (Ukrainians, Tatars), being invaded (Czechs, Slovaks, Hungarians) and even occupied (Balts), or being deported wholesale (Chechens, Crimean Tatars) by Russia within the last century, so there is an underlying part of their psychology that sees Russia as a potential existential threat.

Russia is by no means unique in this respect. This applies to most global and regional hegemons. There are many that do not like the U.S. or China. Britain and Germany in recent memory, or France earlier in early modern Europe, inspired similar fear. But what is particularly worrying about Russia now is that the narrative being privileged within the country only portrays Russia as the victim of recent history. This makes it difficult for Russians and their neighbours to come to a common historical understanding.
Is there a way to get into any of this without any math background whatsoever, just programming skills?
Good riddance -- that screen was nothing more than a historic artifact at this point.

With Microsoft's monopoly on web-enabled devices finally broken by Android/iOS, not to mention the emergence of Chrome on Windows desktops, IE-dominance has finally more or less ended[1].

[1] http://caniuse.com/#search=webgl
No ads.

Instead, an easy-to-use and affordable micropayment system, something like flattr (but with an option for paid-only content), that can be used by Internet users to pay for content, maybe as a part of the ISP subscription.

The cynic in myself outlines a world full of pay-to-win online games, but I suppose people will learn about them and they will vanish sooner or later anyway.
Yes, Linux is very well supported. After being accepted into Microsoft's BizSpark program this fall (excellent! Have a startup idea? Then apply!) I started using Azure just about exclusively and their Linux VM support is very nice.

I feel that Microsoft is on fairly even footing with AWS and Google Cloud.
It seems like this is actually a step in the proper direction. The removal of 'VAT based on seller country' from the system, standardizes now everything towards 'VAT in buyers country'

Now after talking with other SaaS owners it seems we're one of the 'few' non-EU companies that actually complies with this - however that choice is rather due to the provider we use.

We comply with the rules by using a payment reseller ( fastspring / saasy ) which allows us to reduce accounting ( only major payments are being sent from reseller ), and at a comparable rate to stripe ( 1-2% higher )

Since they specialise in regulations and payments, it's really a big headache off our shoulders - plus you reduce the invoices you have to handle. Also it removed that whole merchant account setup process etc, which was a bigger pain for a Hong Kong based company.
Building Better Python Tools Hackathon in London, 17 Feb 2015
As unbelievable as many on here seem to find this, North Korea was making threats regarding this movie many months ago. Long before this hack.

http://www.bbc.com/news/world-asia-28014069

North Korea was bizarrely sensitive about this movie, and made actual, military threats regarding it.

One of the reasons, I think, that makes so many discount the North Korea angle is the belief that such would be so contrary to normal human behavior. Yet the NK leadership seems to exist in some sort of bizarro world where these sorts of actions are fine.
>I'd say great product trumps luck. Because without a product all that luck can get you is a winning lottery ticket.

Of course you would say that, because that's your experience. In your case, the entry fee to the lottery was creating a great product, doing marketing, and generally hustling - just like your competitors. Once you paid the entry fee though, the controlling factor was luck. You won, and your competitors lost. I am not trying to take anything away from your success, because you paid your entry fee through hard work, but as I said it shows a lack of perspective to just say "we are successful because we made a great product". Great products fail every day.
I visit my own site mostly with Firefox on Mac OS X. While I do look at it on iOS and Android from time to time, not a whole lot, as I can't actually _work_ on my site from a mobile device.

The mobile view of my site, admittedly, sucks.

The main thing I do is hide the extensive vertical navigation bar on the right side of the desktop view, I hide the logo, then place a very compact navigation bar at the top.

I realized just yesterday that there are some styles in my desktop view that are not reflected in the mobile stylesheet, like "picture frames" around images. I can easily fix that.

What I'd like to know, is how to make my site not suck, for those with mobile gadgetry.

I use just one HTML document for each page of both the mobile and desktop view of my site, with a separate stylesheet for screens that are less than 481 pixels. Internet Explorer doesn't understand how that's done, so I have:

<link media="only screen and (max-device-width: 480px)"
href="/css/mobile-manual.css"
type="text/css" rel="stylesheet" />

<link media="screen and (min-device-width: 481px)"
href="/quixotic.css"
type="text/css" rel="stylesheet" />

<!--[if IE]>
<link media="screen" href="http://www.warplife.com/quixotic.css"
type="text/css" rel="stylesheet" />
<![endif]-->
This calls for BaseN computing; an algorithm that compiles code down to the most optimal base (minimizing overflow) and then ran it on a quantum baseN computer; post compilation basing; cross basing; etc
Funny, they named their barebones theme after http://en.wikipedia.org/wiki/Pripyat :D. http://voog.com/signup?language_code=en ('Choose' button at the bottom next to the text about the blank slate).
I don't think algorithmic trading itself is morally dubious. However the institutions, people's behaviour, artificial barriers to entry in the market and a lot of tangentially related matters are.

Your job sounds really interesting though! Are you at liberty to give a bit more details?
The Weird and Wonderful Spineless Critters That Basically Rule the Planet
If trading is providing a valuable service for society - the finance industry normally claims that it is ("liquidity in the markets" etc) - then it's morally correct to get algorithms to do this efficiently and effectively.

This assumes that algorithms are able to deal with edge cases well enough, which I doubt strongly (e.g. Black-Scholes is a massive oversimplification and traders don't even understand that fully) and I don't personally agree with the premise that this is valuable for anyone outside the industry - in particular the distribution of wealth causes severe and increasing problems in society. Martijn also makes good points, although I don't think these are specific to trading.

Your job sounds cool! Nice one and thanks for doing it :)
Which, it's worth noting, Agoda did for a friend of mine on New Years Eve in Thailand last year.
Multi-Stream Transport 4k Monitors and X
Cape Watch: Tim Burton Says We Need Happier Superheroes
How much did he make from that song being heard by 43M people on the radio?
Story of Watsi YC 13 and why everyone deserves universal healthcare
>Marketing is the science of bringing a product to market, and later on, navigating the markets the company operates in.

No. See Wikipedia:
Marketing is the methodology of communicating the value of a product or service to customers, for the purpose of selling that product or service.

Marketing is about communicating the value of the product. Regardless of the actual quality of the product. Building a great product is not marketing.
I'm a desktop and server developer. I have excellent tooling and a top notch debugger which make my job easy.

When I have to do front-end web dev, I feel like coming out my high end sedan and riding a skateboard : skateboarding is certainly a lot of fun for the cool kids, but I'd rather sit comfortably in my sedan.

OK ... now I guess I just have to ask you to get off my lawn :-)
> I think if we never had to do NATs we would be a lot better off.

Multiplayer gamers everywhere just did a giant Hoo-ah to that. I think the network admins are already drunk.
Defining the Bitcoin Professional
Where is Snowden welcome in the West?
I could defend the merits of algorithmic trading - having computers instead of humans price liquid securities has reduced spreads and the competition has brought down transaction costs overall. This all results in less and less of a chunk that "Wall Street" is taking out of "Main Street". And it results in a higher liquidity premium leading to higher share prices overall. This is good for companies and good for shareholders which include everyone with a mutual fund or pension.

But at the end of the day it doesn't really matter. People have traded for profit motives alone for hundreds of years without a social motive. Most of finance is conducted for profit alone. There are tons of businesses out there that are for profit alone. There's no need to look down on people for it.
Are You Using “Watering Holes” in Your Product-Market Validation?
the data within the store is encrypted separately. (depending on the scheme used,) The URIs consist of an ID and the key, but the store only knows the locator.

So you might know you have CHK@???,ID in your store, but to understand what it is you're hosting, you need to be aware of its full URI CHK@key,ID.

(some details left out on purpose)
This is very cool, I've used the Telerik editor (http://demos.telerik.com/kendo-ui/editor/index) control in the past, but this might be a decent competitor.
I got my first programming job with 0 years of professional development experience and no degree. Honestly, the key is to get yourself the interview. In your cover letter explain that you have taken the Certification course. Explain your motivation and passion. Once you get in front of the interviewer you can show yourself off.
Sure, go cry to mommy.

Or grow up and may be have some ethics and security in place?
And thus you earned my highly prized "Todays Most Valuable Posting" badge. Do you have any experience with it? Gotchas, potential security issues etc?
What I want to know is how much he would make for the same number of plays from traditional radio stations. Pandora is, in essence, a radio station. You cannot play a specific song, or restart the song, just like a broadcast station.
I did notice it wasn't in the Windows 10 Beta
That's a very good question. I can't actually remember any particular inspiration for using 1995 as a start date, but it was probably just a random year to give it an "Authentic" look as if it had been some old shell system for the TAFE that had been in use for ages (ie much like how most software will have "copyright 1996-2014" to certify the date on which the copyright was filed and what the current year was. It was however, never meant to be an authentic piece of software or have any significant numbers, merely written as a brief demonstration that used a few simple commands to list file and directory structures. 2006 was the year that code would've been made though.
I think most westerners do like Russians and Russia, but don't like Putin and his growing anti-democratic tendencies.
Well, if the point of the study would change with the choice of the units, then the study isn't that good, is it? :)

I'm not arguing the point. I'm arguing, that using twelfths has not utility over using per cent, for example, but is counter-intuitive.
Thanks for the reply tip!
12 Step-by-step process from zero ebook sales to $4,500+ with 1 ebook
Breaking news: Politician blames external factors for problems, assumes no responsibility.
Even with the high pay and the intellectually challenging work, I've never found finance the slightest bit appealing.

Somehow, in finance, the impression I always got was that the engineers/algorithm guys were always second fiddle to the traders, and the traders were an incredibly aggressive group of people with a mean competitive streak (part of it I'm sure was the subset of people I met).

It's hard to explain, but I very much enjoy being a nerd among nerds. Being a nerd among finance people always made me feel highly alienated.
> so the fact that they don't do it makes me question how secure https really is with Chrome anyway.

Chrome does revocations. They just don't use the standard mechanisms (which, BTW, you can enable if you want.) CRLsets are Chrome's revocation mechanism.

The problem with the standard mechanism is that if the browser can't reach the online revocation server, it trusts by default (fail-open).

The reason it fails open is that this (i.e., the lack of connectivity to revocation server) a pretty common case -- most captive portals, for example, would not work because they require HTTPS to sign in, while at the same time, disallowing any other network connectivity.

So, we now have a single-point-of-failure in the revocation server, which can be quite easily exploited by an attacker -- simply killing connections to this server will make browsers bypass the check.

The CRLset system closes this hole by periodically pushing revocation lists down to the browser, obviating the need for an online check. (Not to say that CRLset does not have its own problems. It does, but they're less severe.)
Sadly not as far as I know.

As proven with the recent attack in Sydney (the guy had been walking free with 40 charges against him), my stepfather was in the precise same position. Multiple charges but walking free because the justice system had catastrophically failed.
I think it's pretty clear we need to separate the "document" aspects of the web from everything else. HTML and CSS are really useful technologies for dealing with text content, but they're only one tiny part of what the web is about now. Conceptually, building web apps with HTML and CSS just does not make sense, and almost necessitates using some clunky framework built on top of JS. (And I'm not JUST talking about Facebook and the like. I think most websites with a nav bar count as "web apps", in a sense.)

Perhaps this will involve building the layout and plumbing of a website using straight (sandboxed) code, and then filling in the content using the same old HTML (or Markdown) and CSS. If the site has no content — if it's an online tool like a file converter or an uploader, for example — you could omit the HTML/CSS part altogether. Think UIKit: build up your view controllers, your tables, your data sources, and your nibs, and then provide the content in the form of HTML/CSS like before. (Of course, you don't have to work like this if you don't want to. Just throw up a blank view and keep working in HTML/CSS/JS if you prefer.)

(Yes, you can create a blank page and populate it with JS today — and indeed, this is what frameworks like Ember do — but you'd still using divs and the like to do it. I think this is backwards. We shouldn't be using a text rendering engine to produce web apps; we should be using web apps to host text rendering views. In other words, Ember should exist on the top level, not the bottom.)

One question that will let us know if we're on the right path is, "Can we make websites that feel just as good as native apps on mobile?" Not just "good enough", but so good that nobody will even think to write native web apps ever again. Same responsiveness; same support for gestures and touches; no more misclicks and accidental navigation.

Fundamentally, the web is for content, so it'll always be vital to be able to do things like hyperlink to arbitrary pages and open multiple links in succession. But now that most of the web's content is inside these overarching web apps, and also that websites are being used for purposes other than content, it's important that the tools we use grow along with the web.
> Your job sounds really interesting though! Are you at liberty to give a bit more details?

I don't like to broadcast too publicly the details of where I work. Email me at jordigh@octave.org if you want more personal details.
Sony corrupting the American values...

They gave up the right of free speech.

And we are the only nation that's codified AND that's been practicing it for hundreds of years.

Oh wait, Sony is owned by Japan...
Must be especially sweet for N Korea, kneeling US and Japan with one hit.
Having had the (dis)pleasure of working with TinyMCE on a number of past projects this looks like a no-brainer. The only thing I'm not sure about is the use of `data-wysihtml5-command` attributes to configure the toolbar, is there an option to configure this via a configuration object in JS? - e.g. I just pass the ID of the element I want to use and a set of options?
I wanted to make a more general point to all the people who misunderstand marketing. Actually, the overwhelming majority of people associate marketing with advertising or design on flyers. The point I wanted to make is geared towards people in startups who misunderstand marketing and thus completely avoid the topic, which more often than not, reflects on their success.

It also leads to inventing terms like "content marketing", "inbound marketing", "growth hacking". Oh, the irony with the last one. A marketing term, to trick people who hate marketing, to do marketing...

I'm sure it pans out great for people like Rand Fishkin, Dharmesh Shah and Sean Ellis. The problem is, the people who fall for these neologisms get disconnected from the much, much larger marketing community. They get inside of an echo chamber. Instead of reading thorough articles, by authors which credentials are checked, claims are investigated and arguments - reviewed by peers, they get moz.com and quicksprout and kissmetrics, unbounce and optimizely. Well, I guess people get what they ask for - something easy, which does its "magic".

My last line in the previous post was a cheap shot and uncalled for. I'm sorry about that.
Representations and requirements: the value of ethnography in system design
Sony Pictures hack: Why its perpetrators should be called cyberterrorists
Indeed, I've re-worked the title to include quotes around the "OS" parts as everyone who states that it is a shell is actually correct. I should've termed it better.

Indeed having no inspiration or having a lot of boredom leaves the mind to create its own entertainment and innovation, however I'd disagree that I'm smart. My code is merely a series of hackery and visual tricks. It technically -does- do what it is supposed to, but it is nowhere near as maintainable, optimized and well written as the code of that of a talented or seasoned programmer.

Thanks for your kind words!
phys.org is a perfectly fine resource. I think you're being unnecessarily picky.
>My guess is the US saw the approaching re-election[2] of Putin as a bad move and decided to take action.

US energy independence is unrelated to Russia. The entire Russian economy could go down the toilet and the world would hardly notice. Short of starting a nuclear war Russia is irrelevant at this point. They will have to get along with Europe at some point but a whole generation is now lost.
How do you get a partial refund? You have to submit to airbnb's arbitration process which is basically someone there making what (in our experience) were snap decisions. Broken shower for 4 days, stained sheets, photo and video evidence. Airbnb response? "You stayed there the full time, it couldn't have been that bad - no refund."
I've been on the failing side as well, both with Pipedrive marketing activities (at least 1 mentioned in the post too) and my own startup. With the latter I had "luck" in getting decent press and some influential users, but it failed because the product wasn't there. So I guess we both have a point.
My alternative would be bspwm, the binary space partitioning wm.

I like bspwm's approach to keyboard shortcuts: don't do them. Have an external socket through which external applications have complete control over window-manager tasks, and use an external hot-key manager (sxhkd, by the auther of bspwm) to send commands to it to handle windows.
A terrorist threat and a terrorist act are easily distinguished:

"Did shit blow up? Then It was an act."

Threats are not acts, despite what any legal framework may say.
For what is worth, I downvoted your first comment, and I'm not an employee of SnapChat - in fact, I don't even know what SnapChat is exactly. The reason why I downvoted you is already explained by the commenters who responded to you.

I suspect other people were interested in your reaction to this article, and like me, they thought it was pretty poor and downvoted you - nothing to do with Snapchat employees.

Apart from that, if you think Evan Spiegel cherry picked an email nicely written that leaked from the Sony hack, nobody or nothing would prevent you to look for all emails from him that leaked and cherry pick the ones that make him look like an asshole; in fact it would do more to prove your point and while being more time efficient than constantly monitoring the karma of the comment to find evidence of a fake review - which I doubt, since the comment hasn't been flag-killed - and write super long replies like you just did.
...and believing things without a shred of evidence is called "faith." And neither "faith" nor "principals" is an inherently good thing by definition - in fact some people might call "principals" based on "faith" or "religion" or "race" or "gender" or "greed" or "lack of education" or any other reason "dumb."
Russian here. I don't like Russia too.
I don't think the US increased oil production to decrease oil prices. It has had a very successful increase in shale gas production due to new technologies. This has affected the oil prices, and Saudi Arabia in turn isn't liking the competition, so it has massively increased its oil production as a matter of policy. This will eliminate a lot of new, marginally profitable energy producers, across the globe, including Russia. Once they've collapsed, expect the taps to close again. I think the current situation is more of a happy accident for US Foreign Policy. A lot of American producers will be burnt by the current price of oil as well.
Tim Berners-Lee says the double slashes was a mistake and should have been left out. http://www.dailymail.co.uk/sciencetech/article-1220286/Sir-T...
Sexual violence – hard-hitting poster campaign
First thing has an offset of zero.