skysight-inc/HackerNews huggingface dataset:
I think that until cycling is perceived as safer in a city, it is mostly the more dedicated, daring and reckless who are out there. When they're the dominant cycling presence, the public (especially drivers) can get a negative impression of cyclists in general.

With better infrastructure comes a greater proportion of everyday types - students riding to university, people slowly riding to work, families, etc.

This change is happening slowly where I live too.

Many cyclists get the jump at red lights to get into a safe, visible position ahead of cars. Many ride outside available (but narrow) bike lanes because they don't want to be within range of a suddenly opening car door.
The G7 is not limited to US & Japan. Why don't you include those other 5 countries when talking about the great depression of the 1930s ? Why don't you include the 2008 and 2014 deflation in most of those countries ? Do so and you'll get close to 100 years.

Now why do you limit your vision to 100 years ? Because you know this has been a period when inflation dominated more than ever ? For the bigger picture : http://upload.wikimedia.org/wikipedia/commons/thumb/2/20/US_...

Is inflation the norm, or is the period 1950-2000 an historical aberration ?
I have a collection of old systems, and I've been able to keep my oldest - a 30 year old Oric Atmos - alive quite easily, while teaching myself a bit of electronics to boot.

You can't do that with an iPhone!
Level-Up Your Productivity
Blogspam url?
http://diveintohtml5.info/history.html
I was hoping that this report was some April fools' prank, but it seems to be corroborated by a source that's better for all things Stanford. http://www.stanforddaily.com/2015/03/30/graduate-student-cha...
Yeah, I really had hard time sleeping because thinking of the downvotes...

Linux supports any architecture, that doesn't matter. I'm asking if anyone has tried or knows about this: Is there a bootlock? What's the shipped BIOS? Question is legit, this is M$ we're talking about, not precisely known for its openness. And just for asking, I'm being downvoted and called "antagonistic". You fanbois are just hilarious. It's called "freedom of choice". Yes, that actually exist outside your little world where companies decide what you have to use. I prefer to make my own choices. I might like the hardware design (which is actually nice, and M$ usually makes nice and functional hardware) but I don't like Windows. Period. In fact, I'm not even surprised of your answer and the downvotes, didn't expect otherwise from M$ fanbois ;)
Silk Road investigators charged with stealing Bitcoin
I see...You believe the cause is so noble that it's obvious drawbacks are beyond discussion. Then lets discuss something else. Why don't you tell us why you think it's so important for foreign entrepreneurs to start businesses in the US. Do you feel the same about US entrepreneurs opportunities in foreign countries?
http://imgur.com/play - interactive Imgur experience with input commands

http://imgur.com/collab - collaborative post creation
This battle was lost the second people started using .net and .org for things that wheren't related network technologies and non-profit orgranizations respectively. The nail was driven into the coffin when people started using country tld's for sites that had nothing to do with that country.

If anything this might be step back in the right direction. Whereas I cannot tell anything about the nature or origin of a site based on the fact that it has a .net or .ly tld, I will be able to tell something about nature and origin of a site if it has a .google or .apple tld.
We don't need no coders anymore
Also Coppy (Clippy clone): http://i.imgur.com/iDSUNhi.png
Now fly using Ola App – Introducing Ola Air! http://www.tdgmag.com/2015/04/ola-air-fly-using-ola-app/
Haha, love it this is a briljant joke! :)
zoom in to the map select the Pacman overlay. If it can't create a playfield it offers a 'I'm feeling lucky'. I ended up at https://www.google.com/maps/@-22.975078,-43.1923318,18z/data...
lobste.rs sports a full terminal interface with working chat and slowly updating lines.

http://lobste.rs
#NSFW
http://espresso.economist.com/3525bb43cce253e2e8f04e7b62f1ba...

Economist reports that Poroshenko has suggested a winner takes all judo match with Putin to end the fighting in the Donbas.
moc.elgoog would have been much better social commentary on the gTLD explosion.
Snapchat payment system doesn't look like a good idea, unless you want the payment to disappear after a certain time
I'd love to have something like that if it ran bash or even Powershell.
That's because a greater percentage of the general Dutch population cycle rather than the dedicated subset of Americans.
Usually you can find shortcuts to the boss areas, and most enemies in the game can be just run past. They leash back to their spots pretty quickly from what I've seen so far.

But I guess relatively speaking to non-Dark Souls style games, then yes, you do have to fight your way to the boss fights.
Primary Keyvil, reprised
> Anandtech has already tested a beta version

It's an interesting experiment but I don't think Google is aiming to please the crowd with the need for "native apps" anyways and they wouldn't be terribly interested in keeping the native VLC dependencies alive and/or compatible. It seems pretty obvious to me that Google is trying to push the mainstream consumer market into a "cloud computing/services lifestyle", it only makes sense because their whole business model revolves around web users. So VLC is out, Netflix/Playstore is in.

Not for me, don't get me wrong, I'm not that kind of consumer and it may be safe to state that most people within the HN crowd isn't either. I'm personally following and waiting for the Novena[1] laptop and open hardware to be launched.

Even if chromeOS is removed and Gnu/Linux is loaded instead, chromebooks' keyboards look abysmally ugly and useless to me, otherwise I would at least be excited about the inexpensive hardware.

So yeah, as a consumer I can distill my opinion about this product to "meh...", but as a web developer though, that's a different story, the possibility of Google hardware converting handheld mobile users to desktop-ish mobile users and reaching a broader international audience makes me almost enthusiastic about Chromebooks.

After all, until some potentially better hardware project (Firefox OS [2] or Indie Phone [3], who knows) expands to the netbook-ish form factor ("Lapfox"?/"Indiebook"?), the not-so-open inexpensive Chromebook hardware & affordable by hundreds of millions (potentially billions, we'll see) introduces and welcomes new demographics to the web and is better for the world (in the short run) than almost-fully-open expensive hardware that only a few million can afford (for now), don't you think?

[1]: https://www.crowdsupply.com/kosagi/novena-open-laptop

[2]: https://www.mozilla.org/en-US/firefox/os/

[3]: https://ind.ie/about/
New inbox by Google

https://www.youtube.com/watch?v=hydLZJXG3Tk
Container Solutions Releases New Container Tech
Might Norwegian hydro be less polluting than Costa Rican? I am thinking of lower CO2 sequestration in northern versus (sub)tropical climate forests.

Flood a forest for a dam, and you have less sequestration...
Thailand: 25-year prison sentence for criticizing royal family
And is hundreds of times more efficient than my good old apple II.
I don't see your point. If such a vuln could cause damage massively bigger than 20k, why is it so stupid to reward the one who found it with a corresponding amount?
Popcorn Time, Now part of Netflix
https://blog.popcorntime.io/popcorn-time-now-part-of-netflix...
Can you win at anything if you practise hard enough?
Don't know if april fools but the banner at the top: http://www.topgear.com/uk/
Getting started with Spark: how to to create lightweight RESTful app in Java
Compiling C# Code into Memory and Executing It with Roslyn
That seems unlikely. Bloodborne, like Demon's Souls, is published by Sony as a PlayStation exclusive. Dark Souls wasn't.
x86: Drop 32-bit support in Linux Kernel:

https://lkml.org/lkml/2015/4/1/118
Who are you to call millions of pokemon fans silly?
Don't trust the data before you verified it is indeed the common problem here. You have to be careful with JWK in a similar way: the public key can be specified a as a URL via the x5u parameter, you have to make sure you only trust keys from a whitelisted URL otherwise whoever supplies the token signed with a JWK can just provide their own public key and self-sign it.

This can be problematic and need some leg-work on a developer's side when the URLs to be whitelisted aren't documented. For example Apple use a similar signed blob to allow 3rd parties to verify a Game Center identity, using generateIdentityVerificationSignatureWithCompletionHandler. The data you get back includes the publicKeyUrl, but not which URLs to expect. A naive implementation would just download the public key and run with it. Bad for two reasons: you're now downloading data from an arbitrary location and you are trusting a signature that you verified using untrusted information. In case anyone is interested, the two locations I've seen Apple provide here are https://sandbox.gc.apple.com and https://static.gc.apple.com .
http://com.google/ - Is it valid url? (Remember today is April First)
Again, balance. Let me give you an extreme example to picture my way of thinking about it to you. Again, it is an extreme exaggaration.

We have 1938. The whole world is talking about Nazis. French, Russians, Brits, Argentinians. You name it. There will be a war, we have this maniac Hitler there, blah, blah, blah. Then - as a tourist I suppose let's say a tourist from France - you visit the US. No mention of Hitler in the US newspapers. It turns out that Americans give very little thought to Nazi Germany. Why? Because they are all horrified and talk all the time about this prison where criminals suspected of killing thousands of Americans are kept. Turns out they were tortured.

Here in Europe we have ISIS from the South. Putin from the East. It's not like China wastes their time too, especially when you look at their Navy and what it is doing on Vietnamese, and foremost Japanese territorial waters.

Fear not. Guantanamo. US Government is horrible. As bad as Russian Iranian, or Chinese. Without them we would have world peace. Jesus Christ just look at Guantanamo!!!

And then - being a tourist - you are obviously like: how this happened? Why they are like this? And you check their news outlets. Turns out they watch KGB-TV to get their news and trust it more than their Government.

When I see something like this, I'm like, dude you don't deserve democracy you have. You are too stupid for it. You will be a Jew proudly voting NSDAP. (sorry couldn't help myself)
Fintech (or marketplace) banks: the second wave of fintech
Since it took a while to find out how to set this up using duplicity to backup the home directory under Ubuntu Linux, here is how I got this to work. Maybe this can be of help for somebody: https://gist.github.com/molobrakos/ff1620ce6031c99f120b
I loved the "How I start: Nim"-article that was posted to hn a while back. Interpreter, then compile-to-nim implementation of brainfuck. All in a handful of code:

https://news.ycombinator.com/item?id=9021244
This gets my early vote for most likely to become a reality.
I'm not even going to try to defend her actions, but I think you might be underestimating the power of going on and off antidepressants on top of graduate school at Stanford.
SET BLASTER=A220 I7 D1 T2

Ah, the memories...
Yes, this bug is worth more than $5k. To be honest I expected $15k - $20k :) I wanted to write a kind of "complain" to Google, but first I reread a Google Vulnerability Reward Program Rules and understood that Google could not pay me more. Take a look at the table here: http://www.google.com/about/appsecurity/reward-program/index..., YouTube is a "Normal Google application", this bug is in "Logic flaw bugs leaking or bypassing significant security controls" category. So that's mean that Google rewarded me a maximum reward - $5,000 :)

Facebook has not got a boundary for maximum reward, so they can pay as much as they want…
I published my Work-in-Progress maze game in Google Play: https://play.google.com/store/apps/details?id=com.tinjas

After a minute or two (after tapping Start), it will jump-scare you with your friend's photo. You can then jump-scare your friends with your own photo.

It uses Facebook, but doesn't post anything (other than Game Request, which is user-initiated).

The game itself is still largely unfinished, but playable. Feedbacks welcome!
New stb graphics library
They had even translated it to other languages. Color me impressed.

http://i.imgur.com/4KI0vRT.png
Container Solutions is proud to release today its own container technology, Rocker. Rocker is an amalgamation of ideas and sources from both the Docker and Rocket projects.

http://container-solutions.com/2015/04/container-solutions-i...
Last year, I was part of a "citizens' jury" in Adelaide tasked with making recommendations to the South Australian government about improving road sharing safety involving cars and bikes. It took a few months of presentations and deliberations.

Permitting riding on footpaths where appropriate was one of our recommendations.

Riding without a helmet, perhaps in the CBD or in conjunction with an improved bike hire scheme, was one of my proposals that didn't win consensus with the group.

We made about 30ish recommendations all up, and almost all were endorsed by the Premier for trial.

The whole process was very eye-opening. I drive to work, but I would ride if it were safer. I hope we'll gradually see improved infrastructure here in Adelaide, at least by the time my children are at riding age.
Show HN: Wiffi – The Scent of Secure Connection
Motorola Selfie Stick https://www.youtube.com/watch?v=584qPWzfhHY
It would have been pretty impressive if they created a whole gTLD just for an April Fools joke.
Run to get offers by flipkart:

https://twitter.com/Flipkart/status/583145516218720256
To_nil gem
BuzzKill - http://offers.freecharge.com/buzzkill/
The Power of FollowUp.cc in Mailbird 2.0
Not happening in my experience. As long as everyone in the industry is earning their share from this madness they'll happily "suggest optimizations to the domain portfolio" of their vict^Wcustomers.
Encryption Backdoors Are Unsafe and Ill-Founded
Android has shells, and you can put arbitrary distributions in a chroot, if it's rooted.
They've certainly gone to a lot of trouble writing support docs if it's not real: http://www.amazon.com/gp/help/customer/display.html/ref=hp_b...
Or perhaps even inadvertently selected against.
(I'm still waiting for the W3C spec and full browser support that will allow me to comment on just any url.)
> Origin barely works

Never had an issue with it.

> SWTOR was barely loaded, Sim City

All of them: now fixed. It's not an excuse but online game launches, nearly without exception (most certainly not exclusive to EA), always go like that. The reason is as Blizzard described it with the Diablo launch: during a launch you have a massive influx of players of which a good amount completely lose interest over the next week or two. Buying servers (which, keep in mind, the majority of game publishers still do) would be a huge waste of money.

It's set to improve as the cloud comes into use (e.g. Titanfall, Camelot Unchained, ESO) but there is still resistance against it.

> Battlefield launches are terrible and so on.

Be fair, that had nothing to do with capacity - that was a rushed product. I played it from beta, through early access and into release never being denied a login due to capacity. The game crashed, the sound didn't work, it was extraordinarily buggy and unfinished; yes, but don't claim there was capacity problems.

You are confusing EA's ability to write code and manage infrastructure with their tendency to be greedy and willingness to release unfinished products. The EA greed debate has nothing to do with Orbit.
This is coming from the company who brings you the "IoT" clothes washing machine...

Also whats with curved phones?
The slight variations in the opening tend to be important to the middlegame that follows. You can set up the pieces 8 moves into mainline Ruy Lopez, for example, but if you start from exactly that position every time then you just end up with a "second opening" after that point. Randomizing the start position is possible but undermines the whole "pure battle of intelligence, no chance involved" shtick that is part of chess' appeal.

Fundamentally with the exponential fanout of the moves but a relatively small set of choices initially, there's always going to be a point where the game transitions from "likely to be an exact position I've seen before" to "likely to be something new, but similar to previous games".
People saying he should of gotten more than $5k, it sounds like he accepted a decent sum just to spend time looking with no requirement to find bugs! To me, that sounds like he was compensated fairly from the go and any extra is just a bonus.
imgix launched the Chester Face feature, which we're providing to our customers as an AFaaS (April Fools as a Service) option:

http://blog.imgix.com/post/115195342369/new-imgix-feature-ch...

Chester Face is a tool that will automatically detect any faces in your imagery and replace those faces with that of Chester.

(Chester is an engineer's cat, who happens to be photogenic and comes out of the box in the correct shade of orange for our branding)
This has been wrong or useless (all nulls) for every number I've tried.
Uranium is available in seawater in virtually limitless quantity (for all practical intents and purposes), so nuclear power should be considered renewable.
For or against gTLDs Google should not be able to squat .dev is too generic to give to one company. Infact any one company squatting any gtld that isn't their registered trademark leaves a sour taste in my mouth.

It's just a game of "we have money therefor shut up." combined with "The world revolves around the USA"
> Zheng's attorney has indicated in court documents that she may plead not guilty by reason of insanity, which can be a tricky defense to mount

Unless you somehow get mainstream press to make a victim out of the perpetrator. Maybe with long articles where it's repeated ad nauseam that the poisoner and saboteur was not herself, was stressed, was depressed and had headaches.
- Investigate integrating solutions such as Checkmarx or Veracode into your SDLC (for ongoing code level static analysis), do not look just for one-off assessments of your system.

- Run manual penetration tests or vulnerability assessments depending on your confidence in the state of your system.
Either choose a pentesting boutique close to you if you like meeting people in person or pick a company that runs tests with a group of people, not a single auditor. The results will likely be much better then.

If you're looking for a solution for team based security testing take a look at http://www.applause.com/security-testing
(Disclaimer: I am security team lead at Applause. Disregard that marketing pricing calculator on the webpage)

If you're looking to test any type of app dealing with the protection of digital goods, e.g. Books / DRM / Audio / Video / Paid features, we're specialists for that.

We're deploying teams of white hat security experts to run security tests, including automatic scans on web, mobile, desktop applications.

General process:
=> Lead security expert carries out risk assessment to craft custom test plan
=> Penetration test or vulnerability assessment (realtime results in 24/7 web platform)
=> Deduplicated, validated and prioritized results with remediation advice
=> Customer fixes vulnerabilites
=> Retesting of vulnerabilities to verify fixes are effective

First results, often critical vulnerabilities, usually trickle in within minutes of starting the test.
Awesome! Would this have happened under Balmer ? Nadella is truly changing Microsoft into a "cool" company.
Except this seems to be more a case of severe mental illness than conscious morality, as far as the facts go. Not that any mental illness renders a person criminally dangerous or unable to account for their actions (in fact the vast majority of mental illness cases don't), but in this particular case it would seem at least possible that doing harm was partly beyond her conscious control. Also, if she wanted to get attention/help, you can argue that she meant to get caught, whether or not she also meant to cause harm.

Either way, I really hope all the affected are healthy, safe and taken care of physically and emotionally. Hopefully she will receive adequate psychiatric care, as well as be prevented from harming others.
> That's a security point, not a reliability point.

I appreciate the distinction you're making, but in my opinion security and reliability are one and the same when you're discussing authentication methods. The lack of security would render your system unreliable (as you can't ever be certain the credentials are valid); and an unreliable software stack would be detrimental to the security of the authentication (bugs are, after all, often security issues).

> They will be more reliable, as you don't need to talk to e.g. MySQL that might be down or slow. This disadvantage is that they're difficult to revoke.

I'm all for building fault tolerant systems, but the database being available is the bare minimum you'd normally need for a web / cloud / whatever service to operate. Even authentication aside, I'm not really sure what good the service would be with the database offline (so you can log in, but can you now post comments in the community portal, or use the CMS, or book manufacturing jobs, etc. And what about any required form of audit logging?). So I don't really understand why you would need login process to be tolerant to that specific failure.

Your database performance point is an interesting one though. Personally I'd approach that by having the session table mirrored on a high performance key-value store to reduce the load on your RDBMS (to use your MySQL example). But then that solution quickly runs into additional security, reliability and complexity issues; much like using JWTs. So I'm definitely not trying to say my approach to the same problem is any better.

What I did find the most interesting about this JSON web token approach was a comment made by sandstrom (https://news.ycombinator.com/item?id=9302304) where he discussed the decentralised / portability possibilities of such an authentication model. This isn't something I've ever needed to consider in my line of work, but it seems a very useful method of linking different platforms in a clean way, and without them necessarily having direct access to each other.

Anyway, I don't want to sound like I'm dismissing your points. It's a very interesting solution on a common problem. Sometimes I need help to understand the process and the best way to do that is to question it so any ignorance (on my part) is counter argued and thus corrected :)
About your edit: fair enough, if you are talking about primary energy production. I understood what the figure provided in the first comment was referring to (electricity production/consumption) and was addressing that.

In the end, I think the fact that they produce all of their electricity from hydro is a fantastic achievement. That you (and many others, including a lot of people in Norway) would like them to stop pumping oil from the North Sea is (for me) a different issue.

I don't think Norway producing less oil would reduce global oil consumption.

FWIW, they produce about half of what they did in the early '00s.
XKCD: xkcloud
Lessons in Designing Great Enterprise Software
cd games
cd rps
rps.exe

and you'll find that it can't be run, but Cortana will guide you to "fix" it. After fixing it, Rock-Paper-Scissor game will run.
i love computer very much！i have a dream about becoming a computer progromer since i was a child.But i don't know how to start my dream.i need a kind man or women who can give me some advice