colonelxc

It's probably all the same movies/tv shows available on Amazon. Note that the 100,000 includes all the ones you can purchase and rent. If you have amazon prime, the 10,000 subset is what you can stream for free to this device.

Any reviews for this yet? I've been thinking about gifting it to a fellow hacker.

Yes, the main problem with this method is that it is socially unacceptable to split up families and groups while they wait to board and are boarding.

I think a slightly less efficient approach would be to somewhat batch up rows. So instead of having all of the people in the window aisle on one side of the plane enter, how about have 1 row of people (typically 3) on one side of the plane. Instead of doing every row at once, do every 3rd or 4th row. That way, the same amount of people will be in front and behind you as before (including moving up far enough to be out of your way when the group of 3 in front has reached their row). So then you can alternate sides of the plane, and also alter what set of rows on each side (basically, if 0 == row modulo 3, then you are the first set of rows to board).

Regardless of how anyone decides to partition passengers, however complicated, the computer just needs to make sure to number boarding passes accordingly so people can line up in whatever order you choose. Southwest kinda has that going on (your boarding pass has an A,B,C and a number 1-60 on it), but the letter/number is based purely on what order the passengers checked into their flight (and on southwest people get to sit wherever they want).

The OP specifically mentioned a MPB, a laptop, which are pretty easy and high value targets for theft. If my laptop was stolen, I would be relieved to know that my personal data was safe.

There are additional reasons for full disk encryption too, like ensuring that important system files have not been tampered with. Whether or not you want to go that far depends entirely on your level of paranoia.

For a home desktop, the cost/benefit may be a bit different, because the computer is exposed to less places and people. As with many things in security, you would need to calculate what is an acceptable risk to you versus the cost of mitigating that risk.

From the FAQ:

http://duckduckgo.com/faq.html

Where do you get your results?

From over 30 sources, including DuckDuckBot (our own crawler), crowd-sourced sites (in our own index), Yahoo! "BOSS", "embed.ly", "WolframAlpha", "EntireWeb", "Bing" & "Blekko". For any given search, there is usually a vertical search engine out there that does a better job at answering it than a general search engine. Our long-term goal is to get you information from that best source, ideally in instant answer form.

I think a lot of people overestimate the capabilities of Anonymous and the like. Surely there are probably a few in there ranks that actually do know what they're doing, but most are going to be script kiddies, or even lower (basically a human powered botnet operating the LOIC).

I think that what Anonymous does teach us is precisely why it is important to be a good cyber citizen, for all the bad media that will come up if you anger the hive. There's actual security lessons too (you actually need to make the effort to try and eliminate the low hanging fruit, to have security in mind from the beginning, to factor in the risks of a large data loss or defacement).

I think that book could be written by many people in the infosec world, as the details are already public and the attacks are not that sophisticated. The thing is that there are already lots of "best practices" that are not being followed that allow a lot of these hacks to happen. It's true that you may never be confident in how secure or insecure you are, but if you aren't doing the basics (using frameworks that help take care of the basics of things like SQLi, XSS, and CSRF vulns), then you're already behind.

Not everyone lives on the bleeding edge. For instance, my laptop runs Ubuntu 10.10, which still uses 3.6 by default. Even though it is pretty trivial to add the Mozilla PPA, I don't feel that the new features of 4 or 5 are important enough to switch to them before I upgrade my OS.

It's not just searches, but hits to a specific site with information about chloroform, which is even more crazy.

Here is a explanation from a the maker of a competing tool[1]. It actually delves into the Mork file format with the data from the trial. There are a couple 84's in the format and in the data, but what I think what happened is because there is no "visitedcount" when you have only visited a site once, it took the data from a previous row (in this case, a myspace page) and repeated the value.

If that is truly what happened, the fix is to simply re-initialize the visitedcount to 1 between rows in case there isn't a visitedcount listed.

[1] http://wordpress.bladeforensics.com/?p=357

It keeps track of the sites in memory. That means if the machine gets kicked, old urls can be submitted again.

It is also just simple URL based limitations, adding some bogus parameters to a url, or a hash, would be enough to get around it.

I don't know the specifics of the algo, but it may also add sites to its cache if someone visits one of the old comments pages, which could make it look more sporadic and picky.

You can take away my save button, as long as you make it easy to discard my current work as well. The version control like systems we have today are ok (Time Machine, dropbox, Windows previous versions), but not ideal.

If I'm using a word processor that is automatically saving, why should I have to then explore my hard drive to find the file and examine previous versions? The app I am using needs to present this interface (even if it is ultimately supplied by the OS, like save dialogues).

I believe the 0-day was for subverting mcafee

They may just be counting those who were actively exploited, and excluded the cases where the guy and his friend were checking a few accounts. Since they reported it, it would be fairly easy to isolate their activities from other accesses.

I am just as confused as you. Any coder here should be able to whip up an equivalent script in their language of choice in a few minutes.

Obviously, the popularity of lulzsec is the main factor here.

When you transfer money to MtGox, you're essentially giving it to them. They give you a unique address to send to (so they know who sent the money to them), but after that transaction they have your money. Then, they just update the DB reflecting you have X amount of BTC in your account. As you trade with other people on the market, your respective accounts are updated in the DB. When you want to withdraw, you tell MtGox where to send the money. They check the DB and deduct that amount, and send that money from their big stash of everyone's money.

That is why trades can be instantaneous, and don't require confirmation the network (except when you are sending to or withdrawing from MtGox itself).

In this case, if you could hack the DB and convince MtGox that you had more BTC in your account than you really did, you could still withdraw BTC, but there would no longer be enough BTC for everyone to withdraw.

I think it is mostly captured, except for the moltov coctails and the refilled RPG that they showed. They did show that they were taking the time to get the rust off of ammunition. You probably wouldn't do that if you had means to produce it in quantity.

To answer your last question, yes, east Texas is known for favoring patent holders in cases of infringement[1]. It doesn't seem to matter if neither party actually has a presence in Texas even.

1. http://www.technologyreview.com/communications/16280/page1/

I think that using the median instead of mean might be more meaningful. If you have someone put in a really high salary, the mean will be skewed to a point potentially above most of the population.

Given a mostly normal distribution with only a few extreme outliers, the median will be a more realistic number.

Though, unless the documents have links to other documents, their main algorithm (PageRank) isn't going to be very effective.

A guy I know used to do this in airports (just for fun, didn't do anything malicious) by grabbing webmail logins. Running wireshark with some simple filters and watch the cookies roll in.

Maybe not the right place for this, but why is gxs's comment dead? It's factually correct (as far as I can tell), and provides more related reading material.

Or, more realistically, they said that it is a conflict of interest to sit on the board of two different (competing) projects, OpenOffice and LibreOffice. No one said they couldn't be part of the "community."

Since the code base was just forked, patches can be applied to both projects (and should, where appropriate).

The song is free on Coulton's website:

http://www.jonathancoulton.com/songdetails/Mandelbrot%20Set

You make an interesting implicit association between passion and satisfaction.

> The result is that we end up in a place that’s not fully satisfying.

For you, you've decided that you want to be passionate about your career, and that would satisfy you. Does that always have to be the case though? Maybe some people would be completely satisfied with their work if they work in a nice and comfortable place, with people they enjoy being with, and not too much stress. They have a pleasant day at work, then get to come home and do whatever they are really passionate about.

I know that here, in the entrepreneur crowd, that someone will suggest that those people need to "figure out how to monetize their passion." Yes, sometimes that's true. Sometimes, I think people just want to enjoy their hobby or whatever, not try to make money at it. If I love model plane building and flying, that doesn't mean I would love to open a hobby shop, or run model plane building classes or whatever.

I think there are a lot of cases where people can be satisfied in their work, in that it is both enjoyable and that it provides for their other passions. I think that's an ok state to reach too.

Chromium is open source, Chrome includes Google's special sauce. Now, I don't think Google is abusing this privilege, but I just wanted to point out the difference.

Google is a company that makes money by knowing everything about people, and then presenting ads to them. A browser is a great way to be able to follow a user wherever they go, even after they leave Google's sites. I'm not the op, but I block google analytics for the same reason.

Finally, something that works on flash in linux!

I jest, but flash is the perfect target if you want to hit multiple OS's. Doesn't mean the malware authors will actually develop exploits/malcode for multiple OS's though.

"Streak.ly is coming soon."

Maybe you should promote it after it launches.

read his about page: http://www.startbreakingfree.com/about/

Shows he's started a few other sites, including working on a YC funded (stealth) startup.

I have flux installed on every computer that I have (at least, ones with displays). I like it a lot. Non-flux displays (like my tv, iphone), seem extra bright at night (so I turn them off earlier).

(correct me if I'm wrong, HNers)

In WebOS, "apps" are written in html/css/js, so it makes sense to have the capability of running a standalone js engine like node for GUI-less apps (background services).