skysight-inc/HackerNews huggingface dataset:
Well AFAIK, each lock is unique, and while it's easy to pick each individual lock, it's harder to guess or derive from a few of those locks the master key that'll actually open them all.
Well, they still sell a smaller phone, the 5S. I hope next year, when they no longer sell the 5S, they'll come with another model, maybe an iPhone Mini or 7C or whatever.
I did it in a VM. :)
I'd be very interested about the who, what and how of that. Is that open-sourced ? What tech ? There are few usable app/website for exchanging services (aka LETS). There is communityforge (based on drupal), bliive (closed-source), timebanking (python) and an old ASP out-of-date package.
Keep downvoting me. You're still not getting the water.
...the "conveyor belt" metaphor for learning monads;

Thanks for that! Here's a link:

http://web.archive.org/web/20100910074354/http://www.haskell...
Can offer: sex

Wants in return: sex

Title: sex4sex

Okay.
Not necessarily. Even just a rudimentary familiarity with it, or another language like COBOL, they could find a six-figure gig right out of school in several markets. They don't need to specialize in it, just knowing enough to get by will make them coveted by hundreds of defense and government contractors, for example.
Likewise, I'm very happy with this exact setup after coming from a mix of memorized password and site-dependent password-generation schemes.

I'm on Mac and found KeePassX to be a better solution than the original KeePass, it's much lighter weight. My only hope is that KeePassX gets browser integration at some point via keepasshttp - https://www.keepassx.org/dev/issues/91
It's a slightly satirical video.
> Do you know FORTRAN?

a little

> Do you know any programmers who know FORTRAN?

many

> Do you know anyone who wants to learn FORTRAN?

many

> Unless you're in the community the answer to all of those is no.

Fortran is still widely used in mathematics and science. So if that's the community bubble you're referring to, then yes, there's definitely a niche there in my experience (but not purely for legacy reasons).
Ugh after listening to a few seconds of that, I need this https://twitter.com/sep332/status/620297730783637505
I totally agree with you on the capacity standpoint. Door-to-train and train-to-door remain stubborn issues with "circuit" style transport systems though.

I don't live in either city, but I do live in a top-10 metro with the second largest subway system in the U.S. For me to get to the train system from my house is currently a 30-45 minute drive (there's a bus, but for "reasons" it's even worse). Stop-to-stop my ride is 40 minutes. To get from the nearest station to my work is a 50 minute walk or a half hour bus ride. My commute then using the best available mass transit is a little over 2 hours or 3 hours if I assume we live in a post-surface vehicle world. Even if I move my household to one of the single bedrooms built right next to the station, it's still over an hour door to door with half of it on a surface bus or most of it walking (and now it's 2 hours again).

Ignoring all that mess, I can just drive and it's a 30-45 minute (the length of just the train leg) easy drive from my garage to my work's garage.

So I can spend 4-6 hours a day taking mass transit, or I can spend 1-1.5 hours a day in a car.

For what it's worth, I'm a huge proponent of mass transit and subways, and think the U.S. is pitifully behind in every way, I personally wish we engaged in the articles plan, and in many of the proposed mass transit and livable cities initiatives. But there are sometimes good reasons why people take cars over mass transit, even when it's as good as it gets where I live or in NYC and all of these plans are decades away from happening and changing things. The important thing is for stopgap ideas like cars not to get in the way of these kinds of improvements in they way that they have.
That would restrict it to locksmith basically (professional or hobbyist), as opposed to anyone that can find out how to run a 3D printer. Being a locksmith isn't scalable, using a 3D printer is.
and those crypto experts? They usually spring fully formed from the head of Zeus.
To be fair to the article, it should be obvious that it's about SoundCloud by the end of the first paragraph (& thus the 'we' refers to 'us at SoundClound').

I do agree that the title here is out of context but it seems any modification of titles is seen as editorialising.
They could, but "use SQLite" is not a spec.
It is indeed a bit underwhelming, especially if you consider for how long it has been in the pipeline.
Unhappy academic here - codebases with millions of lines of Fortran are very prevalent here as well. It is both better and worse than a lot of people think; like a lot of the other comments said, that code is rarely touched, but when you need to touching it can be very painful. Modifying old Fortran is rough, mostly because of that awful, awful IMPLICIT keyword. Though I will say that the native multidimensional array support does make certain sections much easier to read than corresponding vanilla C code.
No it isn't.

That is a login routine/authentication. If they had replaced MD5/bcrypt with their own in-house alternative, that would be rolling their own "encryption" (hash function). But as is, they designed a login/authentication scheme that was highly flawed, but used off-the-shelf hash functions to do so (even if MD5 is deprecated at this point for anything security related).

To phase this simply: "If they didn't do maths, they didn't design their own encryption scheme." They did not, so therefore they did not.

Now you can argue the merits of using an off-the-shelf authentication/login scheme (e.g. Kerberos, OpenID, ASP.net's authentication provider, etc) and I would agree. But that isn't what you said, you specifically said they rolled their own "encryption" which they did not.
I agree with you. But cost of living is just one factor for us. We care about a peaceful environment, hopefully lower taxes (even if we make less ), decent infrastructure (in NJ, we have shitty roads with high cost).
Good idea. I'll write some new blog posts that revisit the old ones with commentary.

Not sure the posts would work as show HNs as you can't use them. They could be linked from a show HN in the comments though.
We have a web app that downloads a large list of simple repetitive maintenance tasks ("check amount of spare printer toner", "water the office plants", and such) with documentation, images, etc. that need to be performed regularly, and then shows the user that list so he can perform the tasks and send back the results. Some companies using this app do not allow internet access in the specific areas where tasks have to be performed, so some parts of the app have to work without it. Business requirement was "store enough info on the device to be able to run without internet access for one month".

Without an in-browser persistent database (we used WebSQL, with all the future risks), it would require some interesting workarounds (can you serialize multiple megabytes to local storage? how long will it take? will it rollback from a fault correctly?) or Phonegap type solutions.
Speeding Up Your Neural Network with Theano and the GPU
Better way to describe it was "like SQLite"
You can get graphical defragers today...
What is the significance of a green account?
Wow, a lot of replies.

Just want to clarify my meaning here. The intent is really a more frank and critical version of mmaunder's advice above.

When I say he is unprofessional, I'm not talking about per se what he did at work, how he left (involuntarily), or his reaction. That was more amateurish, which isn't exactly "professional," but not unprofessional. He should have set expectations and negotiated better and harder earlier. He should have done a job search on the DL so he had something lined up before giving an ultimatum; the writing was on the wall anyway. Woulda shoulda coulda. Well, coding and negotiating skills are not correlated. Join the club. Hopefully he will learn and do better next time.

What is unprofessional is posting a pseudonymous rant to Hacker News with your email address and "begging for work."

Posting a pseudonymous "My shitty employer shafted me" story to HN would be spot on. But turning that into a job solicitation is a huge, unprofessional blunder. Yeah, he touched a nerve and got bumped up the page. Yeah, he's probably going to be inundated with offers. Charity offers for weak positions of the kind he left. Maybe he won't be screwed over hard, but he won't be treated like a professional and get the terms he could if he were working from a position of strength, competence, confidence and success. He'll get an offer consistent with desperation. Do you want to work at a company that seeks out desperate candidates as your colleagues?

The fact is, if you want $75K, you have to find someone who thinks you are worth $75K. If you don't have a degree or a distinguished resume, you've got a lot to prove even in a tight job market for engineers. The way you do that is show that you kick ass on the front end and can lay down code with the next guy, and communicate your worth and expectations with confidence.

But yeah, those of you who think a self-pitying rant about starving in a trailer and getting fired from his first glorified internship in a winning career strategy, you do what works for you.
That's why I said stupidly proud. There should be no distinction but somehow this picture is amazing.
Yup, groups of expert mathematicians, also known as "cryptographers". They create and review on another's schemes.

The author of a scheme can be a single competent person, but it would be unwise to trust it before peer review, regardless of the author's track record.
We updated the title to something less misleading.
A* implies that you have a heuristic function pointing towards a known destination. It's about knowing where you want to go, but not how to get there.

In this case, we don't know where in the solution space the best solution will be. It's not even that easy to tell if we've found it. So that rules out simple pathfinding algorithms like A*.
Program design in the Unix environment (1984) [pdf]
Hipchat vs. Slack: which app takes it all
In my mind, Markit is the biggest future threat to Bloomberg
OptiKey – an open-source, assistive on-screen keyboard which runs on Windows
It's not going as far as rolling your own md5 implementation though, which is something I've seen in places.
You are right. I said stupidly proud, because there should be no gap in science and somehow this picture is amazing.
Crazy Twitter App Ideas – Mad Steve
He looks seriously high..
Seeing as how you're concerned about costs...

The cost of producing the keys will effectively be $0 in relation to your legal fees if you were to actually pursue doing this.
The article assumes that the reader knows what MDXfind is. Can somebody explain? Is it a brute force tool?
TFA was simply a look at webmail clients. Since, as you pointed out, the webmail client installed as part of iRedMail is Roundcube, there wasn't any point in explicitly highlighting iRedMail.
I think a better analogy is that having a free cafe ends those interminable discussions about where to go to lunch each day.
Because I want to live in the future. Assuming the future is something like The Culture it would be very fascinating.

Edit: I don't understand the down votes. If you view conciousness as a mathematical identity what is the difference between being made up as atoms or being made up of bits?
Work for free! Sounds like a great way to earn a living.
> I'm glad they didn't. Its not essential to solve the problems the module system is designed to solve, making adoption easier. A mechanism to resolve, download and cache artifacts is still needed anyway, at least I didn't see anything in that regard.

But, had they included versioning support, they could have also built upon that later to support module distribution to finally not have to worry about maven, ivy, etc.

The main difficulty about versioning though are snapshot (development) versions that don't have a defined version number. In maven, typically these are just "*-SNAPSHOT" which may not be unique enough if two projects wanted to depend on two different snapshots of the same module.
I like Password Safe (https://www.schneier.com/passsafe.html), although I do wish that it used AES-256, SHA-384 &c.
Yeah, absolutely. Even with unlimited food at his disposal, it still took 5-6 months to do this. It gets easier with more humans, because some of them can specialize in exchange for the energy gathered by other specialists (hunters, farmers, etc.). You can have a guy specialize in nothing but cutting wood, or in nothing but making tiles.

Get enough humans together and you develop enough spare capacity to dedicate a few percent of your population to mine for ore and now you get metals, which give you even more spare capacity over short-lived stone and wood tools and the technological ball rolls on and on picking up more and more speed.
Fair point.

What I had originally thought of as an experience machine was drugs that would produce chemically equivalent reactions as those produced from our experiences.

Spiritual usually has an anthropomorphic meaning which is what I object to:

Defined as "of, relating to, or affecting the human spirit or soul as opposed to material or physical things"

Maybe a better way of stating it is that I am not an empiricist that believes that sensory experience is the end-all be-all.
Someone uploaded these high res scans of the keys too:
https://imgur.com/gallery/JQD7l

It seems likely that the uploader had the master keys in his private possession for a long time, but only decided to upload the pictures due to the keys being leaked anyway.
I used nmh + sendmail on a Dell sitting in my upstairs bar for years and never had much issue with delivery or receipt.
A New Approach to eCommerce
>It's fine when holding nothing, now do it with a couple armfuls of groceries or whatever.

Fortunately, these days, we have advanced shopping bag technology. We no longer have to carry our groceries in our arms.

Heck, I know this is out there, some people have even mastered the use of shopping carts.
Cobbling together existing primitives counts as "rolling your own crypto".

They did it in a trivially stupid way, but it is still a botched attempt at cryptography.
Ask HN: Should I let an agency promote our incredible orca video?
We filmed this orca video near Vancouver last week. Now an agency offered to promote it for us for a revenue split. Do you have any experience with this? How much can you make e.g. for 1 million views?

Or can it be successful without their help?

https://www.youtube.com/watch?v=APG-ksUPfXo
​Microsoft supports VP9 in Edge as it continues its open-source move
I love this stuff. I'm currently working on a project where, left to my own devices, I would have come up with some complicated scheme that would reduce an O(n) (or even O(n^2)) task to O(log n). Fortunately, the guidelines I've been given (government, of course) offer a series of extremely-hard-to-understand-but-O(1) methods for retrieving the data. I haven't benchmarked it yet, but i'd imagine that my process would take about 5ms per record, and this process will probably take something on the order of 5 microseconds per record.

I'm learning all kinds of tricks that older developers can probably do in their sleep. Very cool.

(Note: the reason I say "older" instead of "experienced", even though for these purposes they're interchangeable, is that the tricks I'm learning are coming from a COBOL codebase written back in the 70s that I'm modernizing into Go.)

I also learned a long time ago that lookup tables for common requests are a no-brainer. If you only have 256 possible answers to a formula, just stick them in a lookup table.

Love it.
I saw a few that were definitely not matte in there.
Teaching big data processing with open source software
Seriously? That excellent! I make wonderful cookies. Please build me a site that facilitates programming work in exchange for a batch of cookies. Once it is complete to my satisfaction I will send you a batch of cookies :)
It's just against every software engineering best practices. You find a library which implements what you want/need? You don't copy&paste 10% of it into your repository just to make sure it won't ever brake. What if it's broken already? They will fix it and your version won't be updated. This logic is not even ok with your own code, why should it be promoted with somebody else's code?
I.... Wow, that was actually a good speech.
But isn't a healthy dose of scepticism simply good Science? Peer reviewed results are hard to be sceptical about. My favorite thing about science is that you often have strongly opposing sides both with super intelligent scientists. When everything has been fleshed out, the best and brightest tends to come to the top (not always, but as a generalism it is true).

Virtually everyone was sceptical of the guy claiming to have developed a form of propulsion powered more or less only by light, but then NASA tested the "EmDrive" and sure enough, it seems like the fundamental idea works. (http://www.nasaspaceflight.com/2015/04/evaluating-nasas-futu...)
Building Search Friendly JavaScript Applications with React.js
Queue: Basic Overview
When I see Microsoft Design, I think of metro, years ago, the ui become flat-ize,Microsoft introduce metro, a big advance, but material design it's a big win.
Agreed.

More concerning is the bit where the author says that they have "1500 coders firefighting, just keeping that legacy monster alive."

I wonder if that has gotten any better since 2006.
Show HN: Chrome extension to replace Stanford with Stanfurd
Taking a subway then transferring to a bus, followed by a streetcar is going to be a long trip.

Well, sure. Taking a Maglev, then a bus, then a street car would also be a longer trip. And let's face it, it would be a lot easier to set up multiple bus routes than multiple Maglev routes.
...immediate (apologetic) use of `andThen`...

That is hilarious:

note: the andThen method isn’t defined for functions of 0-arity, but we’re going to pretend that it is and that it works the same as it does for functions of one argument.

Here's this thing that no one who doesn't already understand monads has ever seen, and that actually doesn't even work in this situation, but let's pretend it has some other definition that would work, if that were actually possible, which isn't the case. Why is everyone running, screaming, back to metaphor-based tutorials?
This is, I think, actually a very reasonable argument. The threat model which compels us to use specific strong techniques to hash passwords is very much a last line of defense: If an adversary has got hold of a copy of our database, and the user has chosen a relatively weak password that's vulnerable to rainbow tables, and they have reused that password on their banking service, then the fact that their password is bcrypted rather than MD5'd might prevent their bank account getting hacked. Bcrypting all your users' passwords is a just-in-case-the-worst-happens measure, like issuing a cyanide capsule to a spy - "Alright, you've captured me, but you'll never get any information out of me!"

But it should be clear that a lot of other stuff has to have gone wrong before it comes to that, and - more importantly, why are we all of a sudden so concerned about whether the user's bank account will get hacked? That's the user's problem, not ours, right? If someone's stolen our entire database, things have already got as bad as they can for us - if they're also bad for our users, why do we particularly care?

Fundamentally, if a user has elected to give us their bank password, why is it on us to protect it with military-grade crypto, when clearly the user doesn't think it's sufficiently valuable that they kept it secret? And why should we act as if every password someone chooses to use might be a shared credential?

It seems you're expected to assume that it's your duty to protect customers against any loss they may incur on a third party site because they reused a password, if that password is revealed by someone hacking your database.

But total DB compromise isn't actually the only place in your threat model where you should be worrying about who can figure out a user's password. One very good reason for strongly hashing passwords is to make it very clear that your employees who have legitimate access to the database can not themselves discover users' passwords. This helps maintain the trail of accountability that lets you demonstrate that actions taken by a specific user who logged in with their password were actually taken by that user.

In that sense, the real reason for using strong crypto on user-chosen passwords is because they are secrets which belong to the user and which nobody else should be able to find out about. As such we take extraordinary measures to ensure that that secret is kept. That way it doesn't matter if their secret is that they use a weak, nonunique password. Indeed, how could you even know?

In the Ashley Madison case, of course, it turns out that there are a lot of other secrets that a database can be holding on behalf of a user that should not ever be accessible to anyone else.... but nobody's complaining that the activity history of accounts wasn't encrypted to protect customers against loss after a total data breach.
Once hes installed as President we'll never be able to get rid of him
Why not filter out those 80 with a dead-simple (fizzbuzz level) online quiz?

In my experience it was enormously difficult to find qualified candidates, especially if HR or recruiters were allowed to pre-filter candidates using relatively superficial judgments. A fizzbuzz test easily eliminated more than 80%.
Jony Ive is a great designer. I admire the work he has done, I have 2 macbook pros sitting on my desk right now next to the iPhone 6+ I own. Now that I have established my "apple credentials", I ABSOLUTELY HATE the apple propaganda videos describing their products with his voice. It may have played 5-10 years ago, but now I just think its pompous and superficial. Of course its just my opinion, but I really wish apple would revamp their whole showcase format. It really turns me off to hear things like "This is the most advanced iDevice we have ever produced, it truly is an amazing, magical device". Shit, it better be, you spent the year iterating on it!!!
"The third big factor is that autonomous vehicles are coming. We probably will have them by 2030; they’ll be fairly common. " I honestly think this is wishful thinking. At least not in the "autonomous" form that many people imagine. If anything, they will be like Tesla's autopilot mode - so the car will keep itself in lane, brake and accelerate, but not much more - you still have to pay attention all the time and be ready to take control at a moment notice. Fully autonomous vehicles where you can take a nap or turn around in your seat and read a book or watch a film will take half a century if not more, if not because of technological reasons then because of legal ones. I would say both are going to be huge.
People that take a bus don't use the Amtrak tunnels.

If you are going to build a maglev then you'd probably have express trains. That does without saying, right?

The A train covers 31 miles. That's a long ride.

http://web.mta.info/nyct/facts/ffsubway.htm#stations

I'm sure there are plenty of places where we'd benefit by greatly reducing commute times.

As for the Gateway tunnel, yeah, that should have been done.
Even though I know who he is, at a very basic level, McAfee is the annoying anti-virus I can't disable at work, and the only time I have to deal with it, is when my computer is grinding to halt.

Not the best name association.