skysight-inc/HackerNews huggingface dataset:
You underestimate just how low density many parts of the USA are: https://www.google.de/maps/@41.5585724,-87.6995585,6409m/dat...

In that area without parents driving their kids around, it would mean many kilometers of walking, due to the lack of public transit.
What's the risk of using plaintext passwords if we assume every user is employing long, random, unique passwords? This has always seemed like a non-issue to me because I've been using a password manager for a half-decade.

e: Downvoting questions is mean. FWIW I always use bcrypt.
The domain name appears to be an anagram of Sony Pure Crime.
No matter how you do it you can shoot yourself in the foot.
I don't think you can even buy a Mac with a built-in DVD drive

Yeah, you still can. But probably for not much longer. Your overall point is quite valid. http://www.apple.com/macbook-pro/specs/
Nice side-by-side demo at http://force12.io
Yeah. If you're concerned about limiting the amount of additional code one needs to understand in order to use part of a library of code, then the fix is relatively simple: make each function in your library depend on as little of the rest of the library as is possible.

If the author is legitimately concerned about code bloat from the unused parts of a library, Go's linker needs to get a lot smarter.
Show HN: Material Design News Website
How about a maglev?

http://giphy.com/gifs/speed-maglev-a8HzaGEoLYvLi

A fast smooth ride. Probably only need a low-speed maglev like what's being built in Beijing:

http://english.cri.cn/12394/2015/04/21/3381s875320.htm

At 60-80 mph you could be whisked to Giants Stadium or one of the local airports is 10 minutes, for example.
And there are 6 million rivets in the Sydney Harbour Bridge.
I thought it was always a "common knowledge" that small animals tend to eat constantly and suffer sooner from food shortage because of higher relative heat dissipation. Some mice eat up to 50-80% of their weight per day, opposed to just few percents for biggies like elephants. Mice also have much faster metabolism in the same conditions.
Why do you think they didn't leak sooner? It's trivial to reverse-engineer the master keys with a few example locks. Also, whenever I see an article about black-market tor sites that lists examples of available contraband, "sets of TSA / (city) master keys" are frequent fliers.
Could you recommend a good password manager?
right on.
Bloomberg terminal and Thomson Reuters are certainly ripe for strong competitors.They are basically operated as monopoly for decades.Yc,developers and others should take on this challenge.
http://www.nytimes.com/2015/09/10/business/dealbook/the-bloo...
Awesome to see the Rising Star Expedition on HN! I was working in Johannesburg while the expedition was active and my partner managed, through a serious of very fortunate events to become a caver on the expedition. Here she is carrying up some of the first bones they extracted - https://i.imgur.com/IfT4PQz.jpg.

For those of you interested, the expedition was sponsored by National Geographic, and there was/is a fairly extensive blog (http://voices.nationalgeographic.com/blog/rising-star-expedi...) covering most of the details. When they first started pulling up the fossils, the excitement was palpable - http://voices.nationalgeographic.com/2013/11/11/video-first-....

The expedition occurred nearly two years ago, and there were so many bones still left in the catchment that they left many behind.

Incidentally, though the article says it was scientists who discovered the fossils - they were actually discovered by amateur cavers. The Cradle of Humankind (so named because there are so many similar catchments in the surrounding area) has a massive system of caves and some of the most hardcore amateur cavers in the world.
Any attacker who snags the server's database will have access to all accounts. When the passwords are hashed, they won't.
Apparently Apple is fighting an order to make its platform surveillance-friendly
For dynamic http content, there is a "cache-control" in http header for CDN to decide how to do cache.

For static content, CDN will try to cache the static content for ever.
it's not a very successful product so far

I guess it depends on your definition of "successful". Apple TV has sold over 25 million units. http://recode.net/2015/01/27/apple-tv-hasnt-changed-in-years...
Being a Clinton Apologist Is a Hard Life
The Stockholm syndrome shown by Go users in things like this is just incredible.
You really need to detach yourself emotionally from work. You need act less with emotions and more rationality.

When people promise something x in the future, without any official contract I automatically assume that its not going to arrive. It's just carrot. Expect the worst, and be a bit stoic. In many ways less gain now, is better than larger potential gain later because of the risk you take.

Don't try to forcefully negotiate, or use ultimatums without any BATNA. When he broke his promise, don't say anything. Find another offer, come back and say I have offer x now, bye. Maybe he will give a counter-offer if he really cared.

I've learned this from experience.
Yes, they have a single point of failure -- but, more importantly, this is the only point of failure.

Write your password on a piece of paper and store it safely (what constitutes 'safely' may vary. For most people, an envelope in the bottom of a drawer is plenty safe.). Put the actual password database on Dropbox and make sure it's replicated in a couple of locations.

> they're not the 'ultimate solution'

Nobody said that, so your quote-marks are out of place. The GP said that there is no better solution today.
Exactly. I clicked, incredulous and excited at what news this is! While still fascinating, I'll admit I was just a tiny bit disappointed.
Parental Control Software
Long, random password stored in plaintext: as soon as the user database is compromised, the attacker can log into your account and do whatever they want. This may result in additional exposure of information that wasn't part of the original compromise. The attacker can also impersonate you and cause other kinds of damage.

Long, random password hashed with bcrypt/scrypt/etc: if the user database is compromised, the attacker gets the user database and nothing else.
Изготовление+ритуального+венка+своими+руками
Yeah, they brush it off as a minor issue, and just conclude Google can handle it!

This sentence makes me dismiss the entire article:

"The trading model and real time issues are just technical problems. Google is smart enough to solve them."
This seems kind of hyperbolic to me (not unlike most MIT news releases). There have been plenty of new cache coherence mechanisms in the last 30 years. This may be the greatest departure from the classic MOESI and friends, but it's certainly not like the research community has been sitting on their hands all this time.
Ask HN: Should I quit my job (or work part-time) to join an Uber for X startup
A former colleague has founded an Uber for X startup. They want me to join without salary to build their software from scratch. After having worked there for free for a almost year (or even longer if I don't work full time) I would get stocks worth the salary I never got, to become co-owner.

Do you think this a good deal to consider? I think becoming stake in an Uber for X business sounds like fun but I am afraid I can't get by on savings and I would lose most of my current job security and salary. Risk/reward, opportunity cost? I'm really hesitant to work for free in return for stocks...
Making Phusion Passenger Up to 4x Faster Than Unicorn, Puma and Torquebox
Thanks, I was thinking about that for a moment too. I will fix that :)
9 Views and Sea Organ Croatia Solar System Models
I vividly remember a case where a really simple page in a system had become incredibly slow - on asking what had changed I was told "all we did was add a count of the number of users".

Turns out the back end (they were micro-services - even though the term hadn't been invented at that point) didn't have a call for "total number of users" so the front end code (this was server side HTML generation - 10+ years ago) was getting a list of every user in the system and iterating over all of them in chunks and counting.
That's been my thinking as well. Not to put words into your mouth, but it sounds like you would agree that TV and "computer monitor" are converging.
Best part is:

> I'd call it "Arket" because is far more Googleable than R or Racket
What a ridiculous statement. Taxes are what, a third of that? Leaves 100k. This means that rent would have to be $5k/mo before you get to the same starting point of $40k. And now you have $40k of money post-tax and post-rent; nurettin is talking about $40k before tax and accommodation. US$40k in Turkish lira loses a third to income tax as well, and I have no idea what accommodation is like there.

$5k/mo rent exists in SV, but if you're paying that much, it's because you choose to, not because you have to.

I love this industry, but it sickens me when people on six figures moan about how they're 'so poor' or 'hardly make anything' and try to distort the numbers to make it sound bad.
Try LastPass.
As a hiring manager myself, I would say those kudos/recommendations are nice-to-have and I am not paying too much attention to the contents. However these testimonials tell me a candidate has basic social skill, talks to colleagues, and able to get along with others (yes, people won't write testimonials to someone they don't get along).
GPUs aren't cache-coherent yet. That said, they have fantastic atomic ops performance relative to CPUs. I'd guess that the lack of performance benefit so far is because it's possible to write many algorithms with the assumption that there is no cache coherency.
When I read that title, I automatically assumed it to be an extinct human-like race, filling in another gap of human evolution history. Maybe whoever wrote that title thought the same, and failed to realize that ordinary people would construe it otherwise.
They come and leave one line jokes. Very intellectual.
Something I've never understood (since highschool some 30 years ago) is; when getting partial skeletons perhaps from only a single individual, how can they claim new species? I mean what's diff with that and some hypothetical future anthropoligist looking at siberian with roundish skull thicker brow ridges and that of six foot tall masai with long face and then a sub 5 foot native peruvian and declaring them all different species?
Spanish location data visualisation startup CartoDB raises $23m
Personalization: Key to Better Customer Experience
First it's Thomson Reuters. Second, YC has little chance in this market which requires large capital for the data feeds, and has enormous incumbent advantages. Third, FactSet is a player there, it's not even a duopoly.
And he did it without the interweb!
Also Ryno Cise Murpe
This is frightening. Who is running the security teams at these large companies?
A fantastic and widely recognised alternative is Signal for iOS, (and its counterpart for Android, TextSecure), created by Open Whisper Systems. People like Edward Snowden have been praising it.

iOS: https://itunes.apple.com/gb/app/signal-private-messenger/id8...

Android: https://play.google.com/store/apps/details?id=org.thoughtcri...
I have people asking me in slightly shocked tones why I don't use an iPhone, and their certainty is always based entirely on social proof

I cannot count the amount of times I have experienced this phenomena. A couple of years ago, when I first got an android phone, I remember someone say "Ha, you don't have an iPhone, your poor!"... the content of the comment didn't really disturb me, what did was the reasoning which lead the person to generate such a perspective.
The main advantage is that rail is cheaper per passenger/km beyond a certain capacity, since it's more efficient to drive on metal rails than tires on asphalt.

So even if it's more expensive upfront after X years you get continuous savings every year from increased efficiency.
The paper is available at http://arxiv.org/pdf/1501.04504.pdf [pdf]
It would need a huge injection of money to happen. Just last week there was a major report that the subway system is falling apart.

“Basically at the current pace, there isn’t a foreseeable future in which all the subway stations are in a state of good repair,”

http://newyork.cbslocal.com/2015/09/03/mta-subway-repair-rep...
I use this public javascript: http://venge.net/programs/twonz.html.

To deal with changed passwords and password restrictions,
I use a page with of mapping for each issue to an updated base url or changes to be applied to the forged password.
I don't quite follow. If they have access to the server's database, then unless the rest of the DB was encrypted using a key derived from the users password, will they not have access to all the accounts anyway?

(edit: I should perhaps make it clear that I'm not suggesting that passwords shouldn't be hashed, merely that if you have access to the database containing the password hash, then in many cases you'd already have access to the data that knowing the password behind the hash would provide).
CartoDB raises $23M from Accel, Salesforce to accelerate US expansion
Pokemon GO to iOS and Android
njrfbzr cbjn!
PlentyOfFish (Markus Frind) on Spilt Testing
I'm not really a GPU person, but my understanding is that GPUs have very simple memory models, memory reads and writes are scheduled more manually. But this is part of their appeal, why they can run so fast, but also why they aren't as general as CPUs.

But my knowledge is a bit out of date, since GPUs are actually including caches now, and what they can do seems to evolve rapidly.
The last picture of with all the girl scientists makes me stupidly proud.
Also money is easier to store than favours
Not even iOS - there are thousands hybrid apps being built on business platforms like Salesforce.

iOS development is becoming 'just another' language in your stack.
> Signal uses your existing phone number and address book.

Failure, why restrict your users to their phone numbers?
Sure I have. That’s why I said "something" instead of "a lot". They were investigating C++ in 2006 and I've actually talked to a C++ developer from Bloomberg so something has changed. Just search their job listing:

http://jobs.bloomberg.com/go/All-Open-Positions/515100/?q=&t...
Kind of, you get the experience of coherent access from a software perspective.

http://www.nvidia.com/content/pdf/fermi_white_papers/nvidia_fermi_compute_architecture_whitepaper.pdf
See, if McAfee says the right things, I think he'd end up doing well - as well as a fringe/joke candidate could do. He's pro-gun and quite anti-government. If Trump can do it, why not McAfee?

And the scrolling seems off or hijacked in some way, on the "How to Vote" page, it's the digital equivalent of having your breaks cut.
A hard-core caving buddy of mine once took me on a couple cave expeditions of increasing difficulty, though they were easy for him. As a newbie, I was more than a little uncomfortable. It is a totally new way of seeing the world around you, and by no means a natural experience. I have much respect for those who do it regularly. Just make sure you don't call them spelunkers, which is a much tamer tourists-only approach. When doing real caving, even the "simple" caves, the psychological and physical requirements are much more than you'd at first expect.
Well, the title is not very factual nor honest. It is completely hyperbolic.

The idea looks interesting (I have not yet read the actual paper), but calling it «The first new coherence mechanism in 30 years» is ridiculous.
Water, it's fine if it takes 10 years to move water from point A to point B as long as you don't need to build and maintain a pipe. Also, they are not solid rock or water, it's more like gravel with water in-between but the flow rate can get fairly high due to size even if the flow speed is very low. 1 mile per day is slow but * 365 days * 10 years that's a long way.
Chances are if they have database access, they can do that already. Many/most exploits at the application layer are made to gain access to the database.
A number of paleoanthropologists are skeptical of the claims.
They say that the bones look like H.erectus and that some of the more bizarre claims sound "tailored for the media"
And several of other flops (iPod socks anyone?).

But I didn't said they don't make flops.

Just that their "signature thing" is not coming up first with something, but coming with something that's somewhat thought out and people actually want to by. People remember them for these things: the iPod, iPhone, iPad, MacBook Air, iMac, etc (and IIRC Apple Watch too, did better than all competitor smartwatches combined).
To be clear, there is a big difference between "spelunking" and real "caving." I haven't met a caver yet who like being called a spelunker.
Google to Spend $250 Million Training Staff on the Alphabet
Their atomic operations used to be extremely costly from a utilization perspective. They would shut down all other threads in a warp while the thread performing the atomic ran alone. Is that still the case?
Large web apps in Python – Web architecture
Security Configuration is no longer an option in Utilities in recovery mode
They may not necessarily have compromised the entire system.

Consider for example, SQL injection. Alternatively, some kind of DB dump mistakenly exposed in the webroot. Neither should happen but they're real-world examples. Sometimes misconfiguration leaves you in a weird state.
The login process looks like: User navigates to login screen and sends plaintext password to server. Server hashes the plaintext password and compares it to the hash on disk. If the hashes are equal, the server grants access.

Since a user can only submit a plaintext password, not a hash, then they won't be able to log in unless they know the correct plaintext password. Even if they have a copy of the server's db, they won't be able to use any info within it to log in as anyone else unless they use brute force to reverse a hash.

EDIT: It's true that the attacker might have a copy of all the user's data. But unless they know someone's plaintext password, they can't log in as them. The attacker might have a copy of your tweets, but they won't be able to log in as you and send a new one.

There are only a few ways an attacker can snag a database. Most of the attacks let an attacker download it, but not modify it. For example, directory traversal lets you download ../../../../etc/passwd along with ../../path/to/database_backup.

Even if an attacker has shell access, it's unlikely they'd be able to use the service or change a user's password by manipulating the database directly. They might not be able to modify database for a number of reasons: the database might require credentials the attacker didn't get, or the attacker might only have access to a server containing database dumps rather than the database itself, or the attacker might be logging in as a user which has read-only access to the database file.
Self-hosted: http://www.passwordstore.org http://keepass.com http://keepassx.org

Paid: http://lastpass.com http://1password.com
So ETL is mostly about getting data into some kind of processing system. That means there are lots of functions for dealing with things like csv data and polling directories and transforming json data into flat structures and... etc.

Dataflow is a programming model for performing actions on data. A system that implements dataflow programming will probably have functions to load external data into the structure needed for the system, but it isn't primarily about moving data to another system.

For example, Google Dataflow[1] has functions for reading files etc, but there aren't really the huge number of things for cleaning and processing data that a real ETL system has. Instead, you load the data into the system, and then process it for a specific task.

[1] https://cloud.google.com/dataflow/what-is-google-cloud-dataf...
Why you need to say NO to new features?
Show HN: PeachPy – x86-64 assembler in Python, with Go support
I'll second nilved's suggestion of KeePass. The database is encrypted and stored on the local machine. I currently use Syncthing to share it between my devices.
Now try to write a formatter that runs incrementally (i.e., keeps formatting while the user types).
That business is more about connections than anything. While tech stack is great, it's all about data feeds. Fast, exclusive, reliable data feeds.
Absolutely not. Creating an Uber for X startup and working for free are two of the worst ideas I've ever heard.
Traders value consistency and dependability.

Its not like you can throw together some trading system with an eventually consistent datastore in the back.

the entire finance industry is based on trust. Part of that is trust that bloomberg is correct.

Loosing a couple of trades without an audit trail crashes markets.
It would have been interesting to know if they are using Fortran 95 or the more recent (and very modern) 2003. People who like to beat on Fortran rarely know that it has evolved quite a bit since '66 and '77
I had the same thing, but I was unable to even log in and stop the emails. I had to just mark it all as spam in the end.
The article is from 2006, should be noted on the title. And, anybody knows if the situation is still the same?
Why? Compare the even crazier https://duckduckgo.com/?q=!i+new+years+ice+swimming
3 Things Small Businesses Expect from Their IT Providers
Do you have links to these claims? I would like to read more.
Absolutely it's about the status. No-one in the industry wants to be the person saying "Um I don't have Bloomberg Chat. Can you email it to me instead?"

Regarding just replacing IBchat with another chat program, Reuters Messenger has been on most trader stations for over a decade now but has failed to gain traction.
That's a communication issue, in our project, we sit our back end devs side to side the front dev ends. "Information must flow".
Agreed, very soothing and hypnotic to watch!
Hi, front end developer here.

Started with C++, then moved to PHP, looked at Ruby, picked up JavaScript, built some ASP.NET apps in C#, did some Unity programming, wrote a bunch of stuff in Java, then finally moved to full time JavaScript programming.

Why the hell do you think a front end dev is "by definition" mono linguistic? It makes no sense.
Now just get a job as a baggage handler and you'll be set.
Doesn't solve the versioning problem. That's a little disappointing.
He Case Against Third Party Libraries
Can it solve this one: there is a box of size AxB standing in in the corner of the wall and the floor. There is a ladder of length L, which stands against the wall and just touches the box. The slope of the ladder is bigger than X degrees.
> governments will learn something from this

I fear, some governments may seriously have an idea of restricting 3D printers.
The Last Audio Cassette Factory [video]
SQL Injection is an application layer exploit that gains the attacker access to the database, but does not involve any sort of privilege escalation. Consider this: an attack gain access to your bank's user credentials database. Do you want them to have access to your unencrypted password? Is it really so "harmless"?
I think he was getting out.
Tracking.js and the computer vision power of JavaScript
That seems to be quite much what my friend built in one company as customer proprietary system. Basically it looks exactly the same. Those boxes are just code modules / microservices with custom code. It's also important that everything can be configured, modified and routed in realtime by adding new boxes etc. I really loved that design. Ok, technically same results can be reached using multiple differenet architectures, but that suits microservices concept very well. Yet, it could lead to high latency depending from multiple different aspects and how modules are technically connected.
Big Data and Connected Cars Will Disrupt the Car Industry