skysight-inc/HackerNews huggingface dataset:
No company is immune to making ridiculous statements - Apple told people not to hold the iPhone 4 the 'wrong way', for example[1].

I can believe that management at Lenovo simply can't understand how serious this incident is - they're unlikely to have the technical knowledge needed to understand how severe the security problem is. I'm sure there are hundreds of Lenovo engineers tearing their hair out in frustration right now. Not that this excuses the management - they should be listening to their engineers.

[1] http://www.engadget.com/2010/06/24/apple-responds-over-iphon...
Getting Started with Ruby Processing
I just got 2 emails today from the legacy testflightapp.com, reminding me that they are shutting down the site on Feb 22 and that I no longer will be able to access all my historical tester-app data. The email provides instructions for migrating the data from testflightapp.com to itunes connect (which is always a pain to have to go through). When I went through the steps in the email, it seems as if all the previous accepted testers would have to re-accept the testflight process. I hope this isn't the case, but it's not the end of the world otherwise.

On a larger theme, I'm surprised that someone (an enterprising tech person) doesn't set up a service that archives all the data from startups that get acquired and then are shutdown. I'm imagining something like a secure github that has all the channels for each dead/acquired service that you could log into. Or perhaps there could be a company that charged the acquirer a small fee to take over the hosting of just the archived data, so it's still accessible. Perhaps this already exists?
HTML is an open standard, try writing a strict HTML browser that fails on non-standard pages and then surfing the web. There is a huge difference between using HTML files internally generated by a process you control and trying to read anything calling its self an HTML file.

The same applies to MPEG4 there are plenty of files that work on one player but not another. EX: Wait you also want to open an 8k MPEG4 file on a phone?

PS: I wish everyone that suggests open solutions actually needed to implement one. Generally, when people say open solutions they really mean leverage some huge chunk of code that someone else wrote, or let me leverage your hardware and software for free.
While Google might be complacent. I don't know of a single Google product that I use that has a reasonable alternative.

And that's not to say I've tried. I had a blackberry, used Fastmail.fm, switched to Firefox. Just none of them really hold up against Google's products. They all work, just nowhere near as well as they should.

If there were alternatives I could switch to, I would. Especially their cloud services, but I'm not the one controlling the purse strings on that.
> Surely nobody at Lenovo honestly belived that ad injection improved user experience?

I can see the marketing folks honestly believing this. See, the problem with people in marketing is that they come up with ideas that sound good in theory but neglect to consider the implications.

"Wouldn't it be great if I was presented with offers to buy things based on context clues in the web pages I'm browsing?"

"Wouldn't it be great if I didn't have to enter passwords all the time?"

After the marketing brainstorm session the engineers are asked "can this be done?" And the answer is usually "Yes, but..." This is the point at which the marketing droid zones out. "Make it so!"

So yes, I do believe someone in marketing thought this was a great idea. And if it worked perfectly without compromising security, it probably would be a good idea. But there's always compromises in technology, and the marketers either can't grasp or don't care about the consequences.
Show HN: Gamamia: Find, share, and discuss indie games
So how do standards come about? Someone does something new. Which means it isn't a standard yet. Otherwise we would still be using 1980's technology "standards".
Lenovo is breaking HTTPS security on its recent laptops
Now I'm being stalked by Komodia ads!
Is this sort of thing more tolerated in China where people are used to having explicit network interference, eg great firewall?
Indeed. I have been buying IBM and then Lenovo Thinkpads for ages. I hate the thought that my next machine will be another brand.

Lenovo: One customer lost. More to be lost.
The Android ecosystem is suffering the same problem.
Surely, Intelligence Corps. "Intelligence Core" is rather self-refuting.

As another poster says, this likely means nothing as all Israelis are forced to go through a military brainwashing program.
It runs a proxy and configures the OS proxy settings (used by most web browser) to use that proxy. Nothing at the TCP/IP level.
Haha. It's like stabbing someone 44 times and getting 44 counts of attempted murder.
I have a ThinkPad T61 that I bought refurbished a couple of years ago. One thing that I really like about it is that it came with a clean Windows 7 installation.

But now, there's no way in hell I'd buy a Lenovo. Trust is not easily regained once broken.
Kibana 4. Literally
I completely agree. I'd guess at least 50% of my email is deleted immediately after reading and not because it's unwanted, but because it holds no long-term value. Inbox assumes that all email is better archived than deleted which is simply not the case.
Why would you live with a person like that?
Ambition Hiring VP of Sales
Ambition is looking for a leader. Somebody that sets tempo, builds process, coaches behavior, and scales revenue.

You’ve spent the last five years creating a system, perfecting your SaaS playbook, and exceeding goals. You’re ready for the defining moment. It’s your time to achieve greatness.

We’ve spent the last two years building the product that will serve as the foundation of your empire. Ambition is ready for prime-time. The stage is set and the audience is willing.

Who You Are:

- SaaS Veteran. You’ve spent thousands of hours studying the game… you know the players, read the blogs, understand the models, and sell the solutions. You’re the best of both worlds… muscle memory combined with hunger to be challenged and evolve.

- Natural Leader. People follow you because they respect you. You hold yourself to a higher standard and empower those around you to be great.

- Systems Oriented. You understand that process drives results and discipline crosses finish lines. If it’s not measurable, repeatable, and scalable then it’s redefined until it is.

- Solutions Driven. Problems exist to be solved. Objections exist to be overcome. Goals exist to be reached.
A Coach. This word means more to you than it does to most people.

Who We Are:

- Seventeen person company based in Chattanooga, Tennessee. We sell Ambition, both figuratively and literally. Our product is a best-in-class sales productivity platform and our competition is sandboxed and outdated. This is our year to win.

- Engineering-heavy. At risk to ourselves, the last twenty months have been spent building a solution the right way. Ambition is flexible, powerful, beautiful, and provides meaningful value.

- Building out sales, success, and support... it’s time to convert potential energy into kinetic.

- Google Ventures, SV Angel, Redpoint Ventures, and Y Combinator funded us to build a product and go to market. We’re raising a Series A this spring to go to war.

What We Need:

- Somebody ready to take everything we’ve learned at Ambition and codify it into something more efficient, more compelling, more profitable.

- Somebody willing to recruit and hire, teach and listen, sell and support.

- Somebody comfortable setting and exceeding aggressive goals.
Somebody at that critical inflection point in life where risk is attractive, nights are sleepless, and legacy is defined.

If This is Your Calling:

- Introduce yourself. Start a relationship.

- Send us a resume that focuses on the experiences that have prepared you for this role. Include milestones achieved and lessons learned along the way. Include references and sales numbers.

- Create an Ambition pitch deck. Utilize our website, blog, and product demo. Schedule times to both qualify and pitch us.

- Walk us through your manifesto. What makes you more passionate, more qualified, more capable than everybody else?

- Tell us why you will win.

- Make this job yours.

---

careers@ambition.com

https://ambition.com

https://demoambition.com
http://cdn.ndtv.com/tech/images/gadgets/Samsung_Galaxy_S5_fl...

If you look close at in the connector on this S5 you can see there are two separate 'tabs' that are rather fragile if you are not careful removing and inserting your power cable. I've seen these break on phones before.

http://images.anandtech.com/doci/8554/DSC_1380.jpg

The iphone connector has no small fragile pieces like that.
Understood. If `ffiFunc()` returns an empty array at a double call site, does ASM.js just accept it as `0`? (`+[]` is `0`). Or are there runtime checks that verify that the return value is a numeric type?

btw, I hope these questions make it clearer why I grumped a bit about the specification, and result in a more robust spec!
Yes, saw the commit on your project, thanks ! :)
Here is it should have been written:

> We have thoroughly investigated this technology and please don't sue us.
Why your billion dollar idea is worth nothing
I'm really torn on things like this. Heroku is the type of service that got really good at one thing, and is now branching out into related services. Thus far most of those related services have been great, but I'm still a proponent of companies that "do one thing, and do it well."
If you're the developer that's your job to tell that to your boss. Come up with analytics to support your findings, make your case, he's probably not going to be reading this thread and staying up to date on all the latest and greatest that's your job. He may be stubborn or you might find out that your user base is all IE6 I don't know but sitting around complaining isn't going to get you anywhere either :)
Exactly. If I were CEO of Microsoft now I'd terminate Lenovo's Windows OEM contract just for tarnishing the reputation of Windows.

That would probably put Lenovo out of business, actually. Might get other OEMs to take notice too :)
This does not matter at all, because if the separate companies have the same owner structure (which they will have), the segregation will be just on paper.
Just spell it out!
Fucking PR speek. That needs to stop too.
Even when they disabled server side operations, the malicious root certificate very likely remains on thousands of computers -- and thus a high security risk for all owners of those computers!

In essence, a root certificate with known private key is as dangerous as a worm that infected your computer. Maybe even more dangerous.
Then maybe coding isn't for you? You need passion to code, but if you get bored in half an hour i doubt you have it
Assuming it happened as he described, it's really tough to know if they were being honest. If they really wanted his help to investigate corruption and drug trafficking then I can see why they'd ask. The only people who support corrupt politicians are those who pay them. I know I'd help in a corruption investigation.

That said, often LE uses false pretenses. It's quite possible they actually wanted him for his Anonymous connections. Had he worked for them they could have pigeonholed him into ratting.
I used to get a subscription to Computer Shopper back in the day. And it wasn't because of the articles in it either.
Could you tell a little bit more about ritalin?
I mean there are a lot of side effects, which might be not worth it. I also have a lot of trouble to focus, on stuff that are not interesting, for longer than 30min, and although i have not been diagnosed with TDAH, i have been thinking about trying out some meds.
Game developers call that principle "Data Oriented Design".
Slightly different, I think. VHS and Beta were competing formats, but you could play any VHS tape in any VHS player. That was the point the parent was making, I think.
I don't understand how Microsoft expects to keep developers working for their ecosystem when they're not building anything marginally better than their existing competition.
Didn't Apple do just that with Antennagate?
I used to work with someone who pronounced "cache" like "cachet" (i.e., "cash-ay"). It was like fingernails on a chalkboard.
Charging for hotel wifi is about price discrimination. The only people willing to pay $25/day for in-room wifi are business travelers who aren't paying for it themselves anyways.

That's why you're more likely to pay for wifi at a business hotel (Marriott/Hilton) than you are at a tourist hotel. It's also why you're more likely to pay for it at a more expensive hotel than a less expensive hotel.

Frequent business travelers care a lot more about reward stays than they do about free wifi (because they're not paying for it, and because the loyalty program will give it to them for free).

The article reads more like a press release for a social media agency (which is who they quote in most of the article) than it does an actual analysis of why hotels charge for Wifi.
the nature of writing a blog post ex post facto?
IBash Notebook
I don't see any reason why attempting SQL injections on a few forms on the County website should be treated any differently than trying a few ways to pick the lock on a county building. Should the punishment for the latter depend on the sophistication of the lock-picking techniques the intruder uses?

Web servers are other peoples' property, and there's no "right to tinker" with them. All you have is an implied license to use the site in the way the owner expects you to use it, the same as with a physical storefront.
This is the same thing people said about Microsoft products in the 90s. Some of them (Like office for example) still are in that position.
Yeah. The "no security issues" line is possibly oblivious, but that one's just a straight-up lie.
I would fire the boss.
Not really, no. If ElasticsearchCo were to go belly-up, the technology would almost certainly be backed by someone else.
Taking a look at the history of Superfish
How one school is turning Generation Z into entrepreneurial innovators
4th Grade Girl Learning Python – Free Curriculum Available
Show HN: Pangamea – Tinder for game discovery
Our kind of audience has learned to be more effective with less distraction, likely because we have encountered information overload routinely before and therefore changed our behavior and preferences to prevent or lessen the problem.
If this guy gets six months for scanning a website the WebSense execs should be in prison for life. WebSense repeatedly scans websites for security vulnerabilities without permission.
MassTransit ]|[
1. I agree, but one of the arguments for "use JavaScript and not ActiveX/Flash/Java" is that those are binary blobs. I think Emscripten-generated asm.js is bad enough that it doesn't gain you a lot compared to a blob.

2. Well if they don't target asm.js, I'm not sure how relevant they are to our discussion. They're going to get faster as JavaScript engines become more optimized. I tried the Scala.js benchmark, and at 1000x1000 and 1 pixel, it took over 10 seconds to render the scene. I don't know what that means, but it felt slow. I can't find comparisons of Scala/Clojure in JavaScript to Scale/Clojure on the JVM, if you know of some, can you point me there?

PNaCl won't be a standard because of politics. Technologically, it's superior.

3. It "might" run. If you depend on WebGL you can kiss IE support goodbye, for example. Also "run" ought to come with some sort of baseline performance. Let's say you can run Windows XP via Emscripten. Don't you agree that the attendant speed decrease means that, while it may "run", it's not very useful if you can't really use it?
Because it is needed to decrypt the key and as the program uses it, it must be in memory (at least at some time).
Sure, I muddled the point but ArVid VHS tapes ARE VHS tapes. Like how some CD players also let you use MP3 CD’s.
Keyword there is "snail mail." You're saying you really want this stuff in your mailbox every week? I don't want any snail mail(of any kind), any week but it's something I still have to live with.
I am mindblown too. I thought that it was pretty obvious by now to everyone that ads do not show you the offer that is best for you; they show you the offer that's best for the company, which means you spending more money on something subpar. I find ads anything but useful.
Marketing folk are both the biggest scammers and biggest suckers at the same time. Causality is not one of their strong points.
No, I'm not making a straw man, I'm pointing out that "SQL Injection" is very vague, and attempted SQL injection even more so.

There is a huge gulf between checking for access and abusing access.
I recommend the Asus UX line. Don't get the super-high-end ones if you're going to put Linux on it, but you'll get excellent value for your money with $600.
Five Reasons Why Startups Are Afraid of Marketing
The big difference is you don't mind when Apple does things like this. If you have "Hey, Siri" enabled then your phone's microphone is on all the time listening to everything you say. But I don't see a lot of people crying foul over that.
Why slower on mobile? The upgrade cycle on phones is much shorter than PCs, so even if you never put new software on a phone, you'll get an HTTP/2 enabled browser quickly.

On the software side, Google-derived Android comes with Chrome by default, which already support SPDY and HTTP/2 support is imminent. Safari on iOS 8 supports SPDY, ditto on HTTP/2 coming soon. Both those software updates can be done instantly (via Google Play Services) or within a year (yearly iOS updates).

So I'd think mobile support is coming very quickly.
NaN in JavaScript is bad design
HN is, compared to the population of the West or even just the smartest 1% from which Nobelists would be drawn, a small place; on top of which, it skews young (Nobels are increasingly awarded to older people), and on top of that, I get the impression from media articles and other things that as soon as a top scientist become a Nobelist-with-a-capital-N, their already minimal free time shrinks to a size requiring an electron microscope to see.
So, just a hunch that it would be a company name or something else that might be in the dump? There's no technical reason for the actual password itself to somehow end up there? A serious security flaw or something?
Well there you go. They investigated and found no security issues.

Can't get any better than that!

Seriously, there were so many different ways they could have gone with this and saved face, but they just decided to hunker down. Sad.
They tried dictating what vendors could pre-load, and were taken to court by the US Justice Dept, along with a large number of states AGs.
Incidentally, first time I've seem LGTM, had to google it.
I have no experience with OS X and Alfred, but from what you describe it looks like krunner for the KDE desktop environment.

krunner is a mini-CLI you can open with alt-F2 by default (customizable of course). It allows searching apps or the web, opening web sites, search files, controlling music being played, or whatever really as it's extensible through plugins.

If using KDE is acceptable to you, you can learn more here:
https://userbase.kde.org/Plasma/Krunner
Ahh. That makes sense. So the malware itself is decrypting the certificate using the password.
The patent is way expired.

I think it has more to do with the fact that a lot of people just don't like the Trackpoint or (more likely) won't give it a shot, so manufacturers aren't going to invest the time and money to put it on their laptops.

Personally I think the Trackpoint is the greatest thing ever, but I worked at IBM for a long time. Pretty much anyone who has had to use Thinkpads for an extended period of time ends up loving the Trackpoint. But regular people just don't want to give it a shot.
If you're still interested, try solo stringed classical pieces while coding. Bach's solo cello suites are a good place to start.
On linux it's very slow and has glitches on firefox 45 (iceweasel); good on chromium.
Baidu Qianxi – Real time map of the 2015 Chunyun
He didn't find the password in the clear, he found the private key in the clear. He brute-forced the password.

I assume his reasoning for looking for the private key was similar to: this program creates a new certificate authority and installs it on this computer. In order to do this, it must have all necessary tools for doing so, including the private key it uses to create those certificates, in memory somewhere. Even if that private key is stored encrypted somewhere, it has to exist unencrypted in memory at some point to be used.
You mean like with spotlight in Yosemite?
>> "I don't know of a single Google product that I use that has a reasonable alternative."

They might not cover all of your personal needs but for most people:

- iOS is as good as or better than Android

- Office is better than Google Docs

- Gmail is still the best web mail but Google mobile/desktop clients are no where near as good as the alternatives

- I find Safari 8 (on Mac) much faster, more efficient, and pleasant to use than Chrome. Firefox is close to Chrome but there are still a few (little) things with it that annoy me.
- Mobile Gaming Forum London

- AppsWorld London
Right. See, for example, how the fact that some of the more stringent aspects of French labour law only apply to companies with 50+ employees leads to lots of 49-employee French companies.
>My grudge, if I have any at all, is not with Chomsky or his politics, but rather with the Myth of Magical Numbers, which has so entrenched itself that even mathematicians have fallen prey to it in one form or another for centuries, if not millennia.

I see your point, but I'm not sure Chomsky was espousing anything magical (as in pseudo-science) by saying the Fibonacci sequence is found in nature and isn't well understood why. Present company excepted, perhaps.

I also try to keep in mind that the term "magical" is often rather amorphously applied.

Some call pseudo-science "magical" due to ignorance.

Some call some science "magical" due to ignorance.

However, some call certain science "magical" not due to ignorance, but as a respectful nod towards the vast complexities involved that we still don't know (and perhaps never will) that surround the complex "nature"[0] of science.

If you haven't already read it, I think this is a pretty interesting take on it (in a sense):

http://www.amazon.com/New-Kind-Science-Stephen-Wolfram/dp/15...

Series of followups 10 years later:

http://blog.stephenwolfram.com/2012/05/its-been-10-years-wha...

[0] https://www.youtube.com/watch?v=Bo3R3LBjDek (Love And Rockets - "No New Tale To Tell")
A lot of this is dependent on where you live? Are you billing via a US/International LLC? Or is this a direct contract? do you spend USD in the current country or another currency?
This article reminds me of an incredibly beautiful one by Christopher Hitchens called "Unspoken Truths"

http://www.vanityfair.com/news/2011/06/christopher-hitchens-...
I won't read that one on principle alone. The author (coolsunglasses on HN) runs around all the various forums (, threads, and subreddits) for other languages, trolling other users and making fun of their languages. He's a complete asshole. Besides, Real World Haskell and Learn You a Haskell are both extremely competent books/tutorials.
Don't know if you are aware, but http://www.synctus.com/ddar/ is currently down
Apple Bans ‘Bonded Servitude’ at Supplier Factories Worldwide