skysight-inc/HackerNews huggingface dataset:
Interestingly, picasaweb.google.com contributes a whopping 73% of links to google.com

http://pagerankgraph.com/#google.com
The bug I filed based on Jeremy's suggestion is about source coordinates, not line numbers. We are way past the ancient mistake of numbering lines but not columns, which bites minifiers all the time.
Do you think RMS hacked his lunch by adding a little extra salt?
One liner to find if any of your Facebook friends had their password compromised:

grep -o '[[:alnum:]+\.\_\-]*@[[:alnum:]+\.\_\-]*' yahoo_ab.csv | while read line; do grep " $line" parsed_db.txt; done

For those not in the know, you can export a CSV of your Facebook friends' email addresses in under 4 minutes by following this guide: http://lifehacker.com/5690378/how-to-export-your-friends-ema...
which yields a yahoo_ab.csv. From there you can cross check it against the parsed_db.txt file or the full_db.log

You should probably tell your friends if they're showing up in the parsed_db.txt as one of their passwords can now be seen by anyone.
Gawker rooted
I wonder if a concern they had was Heroku already moving in the direction of node.js support.
Play free bike games 
enjoy yourself
p;ay free online flash games.
Seriously, use 1Password... it's great.
You're only considering the negative aspect of "big words". Sure, there are many instances in which peope unnecessarily use lesser-known synonyms, but it is helpful when people utilize a vocabulary in order to be concise. I think that while the current mantra of "don't use big words so everyone can understand" is called for because of the amount of people abusing vocabulary so others will consider them intelligent, we should remain cognizant of the benefits succinct communication provides.
Introducing IMGKit: HTML + CSS = JPG for ruby
Time in web applications is not used looking up array lengths - it's used in IO, layout, and DOM manipulation. If iterating through arrays was found to ever be a noticeable issue in practice, the Closure compiler could just be modified to emit more efficient code. That's one of the advantages of having the compiler - you don't have to make a convenience/readability trade.

Closure was not thrown together by novices new to the language. It was started by Erik Arvidsson and Dan Pupius, two JS hackers that have been doing this kind of work longer than just about anyone else. Its differences from other libraries aren't the result of ignorance, they're mostly the result of conscious tradeoffs to make compilation more effective.

Edit: Oh, and the string thing... If you ever do

new String("foo")

in JavaScript, you're doing it wrong.
> allowing recording of public officials and servants in almost all cases.

I'm tempted to go so far as to say that a public official (especially in law enforcement) acting in her official capacity should have no expectation of privacy from recording, though I'm willing to admit that there might be some case I'm not thinking of.
What a clever idea! The specific features here aren't that appealing to me but the idea of integrating crow-sourcing into an otherwise normal app is intriguing.
Don't forget about head and tailwinds. Tokyo to SFO is 9 hours, but SFO to Tokyo is 11 hours. NYC to SFO is 6.5 hours, but SFO to NYC is 5.5 hours.

More importantly though, you can get to a lot of Asia from SFO without changing a plane, that's not true of NYC.
Note, this was written over a year ago, so stuff may have changed since then. It would probably be worth taking a look to see how things have improved.
Mehwish Hayat Pictures
To those hiring in NYC - I just relocated to the east coast from CA and am looking for opportunities in NYC. Feel free to reach out.
As we've been told many times over, "nothing to hide, nothing to fear". Let's apply the same principle to our public servants.
For those who might be wondering, this is in reference to the hacker group who recently hacked Gawker.
266 emails whose domain end with .gov

Very interesting.
The C-style linked lists that TFA discusses don't involve any dynamic allocation. They're intrusive structures that link locations together, not containers that are responsible for memory ownership and management.

Intrusive data structures are actually very malloc friendly because you can include multiple lists in structures that are allocated sequentially, and insert/remove at will without any allocation or deallocation whatsoever. This is of course why C programmers use linked lists heavily.

("realloc is scary"? Really?)
"If I get a CD that has code on in that lets me generate level upon level how much information is that CD carrying?"

The information content of something is rigidly bounded by the size of the code and the size of the input. Compress the CD's image with an "optimal" compressor (don't forget the decompression code in the total), add a couple of bytes for your random seed, done.

It doesn't matter how gloriously complicated the end result may be. The fact that you can precisely reconstruct the end result with the contents of the original CD, plus your randomization seed, plus your psuedorandom algorithm, means that that is all there is.

You can add more information by pulling from some random source that is irreducible, such as a quantum random number stream. Then, to reconstruct the result, you'd need to be fed the previously-random numbers as well.

It isn't actually possible for computation to add information. It is always bounded by the computation specification plus the input data. It can chew it and mangle it and present it and yea verily project entire universes from it, but the very definition of a computation's information content is basically the minimal seed necessary to recreate it.

See http://lesswrong.com/lw/vh/complexity_and_intelligence/ , which, incidentally, directly takes on your question about fractals in a subsequent post.
Realistically, this isn't likely to compromise a strong 12 character password without a second breach at a different site. (In order for your 1GHz processor to have any bearing on the discussion, they need not only Gawker's password hashes, but another site you coincidentally have an account at that uses the same password.)
If by denied you mean rejected, then good on you for getting on with it anyway.
> If you can't hire people at a given wage, raise the wage. Or whine online about the lack of employees.

THANK YOU.

They simply aren't paying enough.

If they pay the same as everyone else, they don't stand out. And they require MORE work than other jobs with the same salary.

If the absolute level of remuneration isn't high enough, people with the necessary skills will just do their OWN startup.

They have to pay enough that the surety of the wage OUTWEIGHS the possibility of striking it rich, for people who could do their own startups.

This is pretty easy to see -- take the founders, and ask them if they'd switch to someone else's company for what they are offering new employees.

Or, ask them if they'd switch their OWN compensation package with whoever it is they are trying to hire.

No, THEY won't work for that little, even on their own baby. So why would anyone else?

Average wage = Average worker

It basically comes down to greed. If they MUST have rock star ninjas, but they REFUSE to pay for it, they aren't serious about succeeding.

If they CAN'T pay for it, then they need to raise money so that they can. If they can't raise money, they aren't any more stable than anyone else's random startup. Why bother working for them at all?

Better to combine salaries to get ONE expert than two or three or four middling employees.

Really the problem is there's too much glorification of FOUNDERS. We see time and time again that they don't have the skills needed to do whatever it is the company is supposed to do, so it's usually the early employees who do it. People think it's their god-given right as a "Founder" with a capital "F" to be king of the hill and get the lion's share of everything, and command an army of peons (who actually do the vast majority of the work) who are obligated to fulfill the "F"ounder's aspirations.

ViaWeb started with the people they needed. It's a lot easier to hire for the non-critical positions.
I don't think were talking about startups on the weeks to months scale. That's the time period where it's a couple people in an apartment. Yeah, you probably don't have time to train people at that stage.

You jump from that stage to Google as if there's nothing in between, but almost every other company is in between. Plenty of startups have been around for years, and plenty of them have enough funding to ensure that they'll still be around for years. At that point it becomes possible to make the short-term sacrifices necessary to ensure long-term success, like training.
Does anyone have a list of sites that gawker owns - I have no idea which sites I need to potentially check.

EDIT: Nevermind - it seems that resetting your password at gawker.com resets for all of their sites.
Funny you should ask, this was actually a question that Robert Morris asked on my YC application. I don't view Heroku as a competitor. In fact, I believe they announced that they abandoned their node.js experimental hosting.

However, Joyent really has a leg up on node.js hosting, and seeing as they employ Ryan Dahl and just basically bought node.js, it could be difficult to gain market share, but I believe there is room for others to play.
I'm currently sending emails to the first 50,000 addresses listed in the database dump via SendGrid. I only have 50,000 credits left for this month, but at least that many will get notified.
Only if adding salt was somehow forbidden, would push the boundaries of known human experience, or playfully exciting in some way. I do think the Chefs on Planet Green's Future Food are hackers in their own way: http://planetgreen.discovery.com/tv/future-food/meet-chefs.h... - a while ago I saw them cook food with liquid nitrogen and preparing numerous dishes using nothing but road-side weeds spiked with miracle fruit.
If only you had some connections with web designers.
In light of Gawker's recent situation, how should you be salting passwords?
I figured I'd ask. We all know by now that Gawker has was compromised and it sounds like they weren't salting their passwords very well, or at all.

With that in mind, what is the proper way to do this? Is it fine to simply have a single, rather random salt used or should you somehow change the salt all the time? If the salt changes, how do you know how to compare it when they're logging in?
Who Tweets?
I agree; I implied that the JVM is a reason to use Java, not that Java is a reason to use the JVM.
Why I gave up on static types
Google is still the happiest place to be working in the US
A rounding error that causes a fast-paced Javascript game to crawl to a laggy stutter when repeated all over the place.

Regardless, the Closure Compiler (that the Closure Library is made to be used for) fixes this common case.

Another example where it's more than a rounding error: http://stackoverflow.com/questions/2573212/why-is-setting-ht...
Ask HN: Did Reddit Just Get Astroturfed? How Could Technology Tell Us?
In a surprisingly fortuitous turn of events, a profile of Julian Assange on OKCupid has been 'revealed' on Reddit, and breathlessly reported as true by Gawker, Business Week and others in very quick fashion. See: http://www.reddit.com/r/politics/comments/ekgvz/behold_julian_assanges_profile_on_okcupid_last/

Each story frames the discovery as a grassroots effort at Reddit, reported in one story as an 'extensive team of quirky internet experts'.

The discussion for this particular story is surprisingly incredulity-light: a major upvoted post unpacks an 'investigative' backgrounder of Harry Harrison, with only a few downvoted posts exclaiming 'fake'. The usual 'investigative energy' of Reddit seems focused only on confirming what many in that community would be highly skeptical of.

A quick glance at the public profile purported to be of Assange contains such odd statements as an interest in 'white collar crime' and 'trickery', which seems to indicate some cheeky character assasination more than anything else.

I'm left with a sense the community there has been astro-turfed. Not an uncommon occurrence, but it has left me wondering how you could determine any irregularities in a community discussion like this?
Hmmm, I am more into typographic designs and they follow Rams's "school" if you say so. I can let go of Graphic Design for now. More than often, they are just graphics... no design.
Actually, Heroku has 1,000 people running node.js apps on their platform. The first phase of the experiment is over, but they're releasing the new version of it next year apparently.

http://blog.heroku.com/archives/2010/9/20/an_update_on_herok...
https://github.com/mathgladiator/win/blob/master/lib/win.sec...

I give it both a static prefix and a configurable suffix.

I once had a system that used their login as part of the salt, but that introduced major support issues.
that is a bad answer.

the search results from google are all added code, but php supports it natively: http://ca.php.net/manual/en/function.crypt.php
A bit too late now, but that violates at least the first three terms of the SendGrid e-mail TOS and I wouldn't be surprised if SendGrid got a "bit upset" about it..
Can anyone lookup my name? I'm not in access to my personal email to send an email to the OP. I don't remember I have used comments of Gawker sites but anyway to be sure. The user id i generally use is same as here. Thanks.
Absolutely. To me the key "risk" really is not so much the OS going unsupported but any Google services that it depends on doing so. Which is more about the buy in to things like Google Docs, Calendar, etc. The risk is all the higher because the services are "live". If Microsoft gives up on MS Exchange, your exchange server doesn't immediately stop working. But if Google turns off Google Calendar one day because it's not turning a profit ... oops.

The problem is that, for me, a huge part of the value of ChromeOS is provided by Google's suite of apps. Those apps are the reason it is viable in the business space. I would be looking for a way to run hosted versions of those in house and then we would have a really interesting situation.
fwiw, I love your landing page design.
In the footnotes he proposes that Lady Gaga is a hacker.

The definition is getting a bit shallow isn't it?
Cool! How is that working out for you?

I had to quit my job before any real progress was made on my venture.

My site has been live for a couple months now and is starting to get consistent and increasing levels of visitors thanks to riding the long tail :D

Very exciting!
The essay defined hacker in a clear and focused manner. Clearly it's broader than the definition than you would choose, but I suspect it might also exclude things you might define as hacking.

My impression is that people expect hacking to require the use of technology, but that doesn't necessarily mean what we would expect it to. A chopstick is after all a technological tool.

We might restrict it to electricity, but then that might preclude mechanical devices, so perhaps we allow machinery in general, but then a pair of chopsticks might be a sort of simple machine...
So you wake up feeling great every morning?
No hits on blntechie.
> I think the escape hatch is that the information conveyed is not the points on the screen, but the rule on how to generate those points. Going back to my other post this means that the city builder conveys no information about a particular city map.

Yep. The amount of information conveyed can be considered 'equivalent' to the length of the shortest algorithm used to get from one string to the other.

The field that is concerned about thinking about this problem in a disciplined manner is algorithmic information theory:

http://en.wikipedia.org/wiki/Algorithmic_information_theory

In particular, they show that the quantity is incomputable (the Komolgorov complexity).
I stand corrected, but still feel Joyent is the major player at the table with four aces as of now. Plus, it will be interesting to see what salesforce.com does with the direction of Heroku.
http://stackoverflow.com/questions/401656/secure-hash-and-sa...
The interface between "ignorance is no excuse" and the vagueness and selective enforcement of a great deal of law is always a difficult gray area.

I think that the most important thing about a political system is predictability, not "democracy" or "justice" or some other vague, high minded ideal. The number one job of our elected and appointed officials should be providing this predictability.

This is a particularly stark example of what happens when that duty is shirked. Corruption and incompetence flow into every crevice not solidly plugged with deterministic law.
It's great to see object-capability security being discussed on here! Mark Miller, Ben Laurie, and Mark Lentczner are working on how to apply this 1980s research in a web context at https://sites.google.com/site/belayresearchproject/ under the name "Belay". They're still in early stages...
Thats great, thanks. I was relieved to not find my email in the list, although I could swear I've commented on gawker sites.
I typically commit at least once an hour when I'm coding full steam ahead. My rule is I commit to my local repo whenever I have uncommitted work that I'd care about losing (if I made a blunder and had to revert everything). I also commit locally whenever I switch tasks (so one commit is one coherent block of work). I only push from my local to central repo when I have the code in a reasonable "working" state.

If you're working on your own then commiting frequently is fine. If you are working with a team then that's a lot of information for your colleagues to process, so it's a good idea to condense your changes down a bit when you commit to the main branch. I think that's what the article is getting at when it talks about feature branches.
Interesting read, I'd love to get the same insight in to the Assassin's Creed team's methods...
There's so much more to a CS major than just programming. You should check out the grad program's curriculum to make sure you're doing it for the right reason. Anyway, research experience is not required for most master programs. Industry experience and recommendations from work would work.
I guess what I really wanted to say here, BTW, was that I'd rather work with a smart person that doesn't know the particulars for $foo language than I would with a dumb person that has 20 years of experience with $bar framework.
Do you think the fact that you proposed a cloud hosting platform was part of the reason for rejection?

By the way, the landing page design looks great!
Context? The website contains no information about who this person is or what type of project he is working on.
Carlos Miller's excellent blog "Photography is Not a Crime" is highly relevant.
I bet we're going to see a bunch of "Heroku for X" now that they've set a precedent. I'm not sure that's a bad thing; it's a great idea.
The persistent failure of US state and federal government to fix this situation has a deeply corrosive effect on the public trust. With trust in public officials plummeting for various reasons, this represents an alarming threat to the long-term health of the United States.
Mười thách thức của người quản lý
Về mặt khái niệm, tạm bỏ qua sự phân định giữa nhà quản trị (manager) và nhà lãnh đạo (leader), sau đây xin gọi chung là người quản lý. Để làm tốt công việc, người quản lý trước hết phải nhìn được những thách thức và tìm phương thức giải quyết. Theo tôi, mười thách thức lớn nhất đối với năng lực của người quản lý có thể tóm lược như sau:
Fair enough. Though if you want to write code that looks like Python or Ruby, I can't recommend CoffeeScript (or Coco, if you're feeling frisky) enough.
People think it's real because the "last login" date on the account is Dec 31, 2006.
Thanks. Think I inadvertently polluted(ing) the original thread.
Well, haven't actually clicked the send button yet.. was waiting for the import to finish. I'm second-guessing the foolhardy good samaritan effort now, though. ;)

It's a free account that I got via an AppSumo bundle, so no real loss to me if it gets terminated, but I'd rather not go that route to begin with, ya know?
I don't think you're giving Bewkes due credit. It seems like the point wasn't lost on him at all; the industry seems to have realized that the wave is going by, and they got caught flat-footed. See:

"Time Warner’s HBO is in the process of introducing a new online service, HBO GO, which will be available to authenticated HBO subscribers. Mr. Bewkes has also led an industry initiative he has called TV Everywhere, whose idea is to offer cable network programming online for anyone who is a verified cable subscriber. "

They're trying to take advantage of the economies and at least some of the capabilities of the digital distribution platform without losing a huge chunk of profits (subscribers). It makes sense to try and diminish their digital-distribution competition (including Netflix) for business reasons. Netflix jumped the gun on them by hopping on the digital platform first, and at very subsidized prices, so the conglomerates have to play catch-up. Don't forget, though, that this kitty got claws: big media can still price Netflix out of the game, or at least out of this ridiculous growth phase, since they do own/create the content that Netflix thrives on, and can raise prices.
No offense to Stallman, but isn't it the definition of anti-social to be at a dinner table and proceed to play with everyone else's utensils disregarding their desire to use them for, you know, eating?
"I’m not sure what this pattern is called in Java, but in JavaScript it’s called a ‘memory leak’."

The comment is in regards to goog.memoize but is terribly backwards. The complaint about goog.memoize is that it will grow uncontrollably because it does not cap the size of the caching object. A memory leak is the inability of a program to free memory it has allocated.

Since js is garbage collected causing a memory leak involves creating a circular reference fooling the garbage collector into thinking that an object is still in use.
The hash is md5 not sha
Here is an example of a real-world performance bottleneck that was discovered by the closure team:

http://pupius.co.uk/blog/2007/03/garbage-collection-in-ie6/
For js running in a browser this does not matter but on a server this will make a huge difference.
Three related cases come to mind:

1. Secrecy in matters like, well, diplomacy.

2. Protection from reprisal.

3. Confidentiality of people other than the public servants. A lot of government work deals with heavily stigmatized things other than crime – poverty, disease, etc. It’s hard to record a social worker without bringing unjustly harmful attention to the people they work with.

I strongly agree with your general principle. I just don’t think it would work without some compromises.
Fuck. What the fuck did I even need a Gawker account for?

(Thanks for making this. I was going to download the torrent, but assumed that I did not ever visit their site, much less make an account. Wrong!)
Or a 13/80 difference, which is in the 15%+ range. It's a rounding error on a total time of many seconds, but not in the realm of the very fast.
Lets all forget that the word hacker had nothing to with programming and was popularized by a bunch of dudes fiddling with toy trains.
The Browser Takes All
True, but as someone who has a java background and is working on js, it's nice to know that switches suck in js :)
http://chargen.matasano.com/chargen/2007/9/7/enough-with-the...
In a world where Stuxnet exists and Gawker might not, a date field in a dating site database should probably be taken with a shovel of salt though right?
Working in a startup at the iLab incubator in Toowong. Some interesting companies in here. There's a good meetup that meets here also, Upstarta, if you looking to chat about startups etc... http://www.meetup.com/upstarta-brisbane-qld/