skysight-inc/HackerNews huggingface dataset:
TCHunt Gold - Quickly Find TrueCrypt Volumes
Technically, SF Bay is full of water. Though the bits I lived near were mostly salt ponds, which are not exactly a gorgeous view - though it might be a matter of taste; I rather enjoyed the wildlife refuge on the east end of the Dumbarton bridge. And the bay is flat with no waves and few points of interest. But you could kayak in it.

If you want water to look at SF offers many pretty vistas and has the virtue of being the local nightlife. Commute to Silicon Valley is nasty but you'll at least have lots of company.

If I thought I loved Half Moon Bay so much that I wanted to try living there, here is what I would do: Rent some temp housing next door to work. Then, every day after work, drive to Half Moon Bay. Spend a few hours picnicing, admiring the water, etc and then drive home. That experience will be just like living there, except you'll only fight rush hour once instead of twice per day and your kitchen and bed will be on the wrong side of the mountains. After a month of that, plus some local research and side trips, you'll be able to answer your own question.
What's wrong with W3Schools
Except that's a thoroughly one-directional approach. How can I log in to Facebook with an external identifier, without having a Facebook account? How can I add someone on Facebook as a friend, while maintaining my identity on another site? Until it can accomplish those basic things, it's less than a solution.
I have had to do both: SOAP is WAY more messy.
Also, this means you can't change carriers with CDMA phones :-(
Bypass new Mac App store using old URLs for open source: Emacs, etc.
You actually might like San Mateo. Really easy to get to half moon bay using 92. Traffic isn't so bad going up to the city. Going down to mountain view / san jose it can get bad though.

If you want better nightlife options you can live in millbrae and take bart up to the city. It is unfortunate but BART doesn't go all the way to san mateo.
Two words: FuzzyFinder.

Bind it to a key and switching between buffers (or on-disk files that are not even loaded) becomes as simple as typing a few letters of the filename.

No more scanning of abbreviated tab-labels, no more trial and error cycling through buffers. Highly recommended.
The Adventures of Marissa Mayer
As a small business owner, AT&T and Apple never cared about gaining or keeping my business. When I tried to switch to Verizon, they made it clear that Sprint was the choice for me. At first I thought about the status symbol that was the iphone, the trends, the ease of integration with my macbook. Then I realized I hadn't made a phonecall in 2 years, and had resorted to txting everybody because I was so tired of the dropped calls. A local Sprint small business rep saw my gripes on twitter, asked if I'd come and give her a chance to win my business.

Long story short, a big FUCK YOU to Apple, AT&T, Verizon, and the iPhone. Now I can make phone calls again.
implying that religions are themselves

I take issue with even that much of the concept. Religions are not entities, only the people that make them up are.

And it seems the unfortunately vast majority of the time, those people are hateful, ignorant, or just plain dulled.
The Four Steps to the Epiphany [pdf]
I feel a similar way. My other half is a teacher, and every time I've looked at the software systems she uses (in the UK) I'm appalled. I've identified a few software tools which would make teachers lives much better and easier, based on problems she actually has. Are they hard to build? Not that hard. Could I get them in to schools? Not a chance.

Approved bidders, closed lists, hugely expensive bidding processes, it's calculated to keep the market sewn up by the education IT vendors (usual suspects, Capita, Fujitsu, etc.)

At a time when the UK is looking to save money, the state of school software provisioning is shameful on multiple levels.
Ditto. Having been on a team that developed a CMS for a school (tmedweb.tulane.edu), I have never met a group so intrenched in the status quo as a curriculum committee.

> Current e-learning platforms ... are riddled with unattractive and unusable interfaces that are counterintuitive. This presents a problem to the teachers who are less likely to create content for students, but also for the students themselves.

Yes, yes, yes. Somebody, please weather the Blackboard onslaught and fix this.
This is great! A few bugs: The stems are technically incorrect (from third line up the stem goes down not up) and there aren't natural signs where there should be (G Minor Solo, the D# and D). I assume it's the player's problem and not the XML, if I'm not mistaken.
Come on, it's a cell phone carrier. There's only one possible answer to the "will XYZ cost more..." question: yes.
You're absolutely right, and I agree with your advice. Also contributing to your 401(k) - assuming your options aren't terrible - is in the same realm of advice.

We should have been more clear - this particular post is all about security selection for the individual investor, i.e. "I have this much money to put into my IRA and what should I buy" type questions.
> The trouble with putting the current task on the submit button is that the user is already doing that task and they might think that the button is a link to start the task over

Yup. Another risk is using an ambiguous phrasing, such as on this very web site: in order to post your comment, you have to click on a button that says "Leave comment".

Does this mean the button will post my comment or abandon it because I want to leave?
If something is repeatedly happening (restaurants have bad sites, enterprise software is crap, education software is ugly..), it might be worth digging a little deeper and understanding why. If something is perplexingly broken, there is slightly harder to find reason why. That's why it's perplexing.

Very often people seem at grasp at a hand wavy, superficial explanation. For example, a few days ago there was a thread on restaurant sites. A lot of comenters seemed to conclude that this is because service providers to this market suck. While that's almost axiomatically true, it should just trigger another why.

If you are off to fix the restaurant site problem, you need to answer the second why. Conclude that service providers suck stopping there will lead you try fix the problem be starting a web site design business for restaurants that doesn't suck. But restaurants didn't just magically all end up with bad service providers. Surely some good ones tried and either failed or started to suck. There was a reason.

Same here. The "horrible mentality" of schools is s symptom, not a root cause.
good point, I think I ran into that when I was playing with coroutines to build a simple finite state machine to parse something; as soon as it got the least bit complex, I was like, "you mean I can't extract a generator!?" I was originally inspired by this post:

http://eli.thegreenplace.net/2009/08/29/co-routines-as-an-al...

and was thrilled with how clever it all seemed, but in practice, it seems to be stretching the capabilities of the yield statement too far
Ask HN: Best language to code a web app?
Which programming language would be best to program new web app? I don't know any languages myself, however I want to learn. I did some very basic coding before and can mess with basic source code. I have never written any serious code myself though. I want to design a new web site/app. That will require a large amount of real-time communication between users. And yes I know I won't be able to pick it up right away, I simply want to be able to work with a programmer or a friend that knows how to code.
I would say not a full browser option, but it would make sense as an extension/userscript
But they have quite different meaning, one can't just replace OUTER with INNER.

Table A has m rows
Table B has n rows

all rows return a match (aka: join on 1=1)

OUTER JOIN will return m*n rows
INNER JOIN will return m*n rows

none rows return a match (aka: join on 1=0)

OUTER JOIN will return m+n rows
INNER JOIN will return 0 zero rows

INNER join enforces that match has to exist.

OUTER join doesn't.
Not yet you don't!
Another Marissa Mayer article that boils down to "hey look, a girl!".
Maybe this will help; are the following two statements contradictory in your mind?

1.) The government taking *more* money from me should be called welfare.

2.) The government taking *less* money from me should be called welfare.

You see, I was trying to get you to argue both sides and lo-and-behold you did it. The next step was to have you either explain how both of those (to me at least) mutually exclusive statements can be true or you have to accept one or the other as true and reject the other. (Or you can also say that the Aristotelian law of non-contradiction is phooey...)

You might be tempted to change the sense in which you are using the term welfare (I have noticed sacre quotes showing up in your last posts) but that's what i would called a fallacy of the fourth term. (And since you keep qualifying the term with 'social programs' I think it would be disingenuous to switch to the general second term and then back to the specific first without making it abundantly clear that you are doing so.)

In my mind (and in most common dictionaries) welfare means a. governmental provision of economic assistance to persons in need; or b. absolutely anything that aids or promotes anyone's well-being regardless of their prior need.

(So at best you could say all of the first sense are of the second but you could not then say that all of the second sense are of the first. i.e. it would be a a concentric venn.)

I thought that the article, you, and I where all using the term in the first sense but, once it became expedient to you, you seemed to switch to the second.

The only other option as I see it is that you think it all belongs to the government and I should just be happy that they let me keep any of their money at all. And surely if I had it I wouldn't be as enlightened in my use of it anyway so it's really best for me if I just hand it over.

But, and this is a very important 'but', the fact that you have declared that a 90% income tax rate is fine in your mind I now see that all hope of us becoming of one mind is utterly hopeless. I have no category that allows for that detestable state of affairs regardless of any circumstances. So, really, I think the best we can do is agree to disagree...
Zero chance. It will be optional in the way that TSA searches are optional at airports.

Public Safety, of course. Terrorists, child molesters, hate speech.

We'll have to be protected.

Really, this script writes itself.
The US Postal Service has existed for over 200 years, and at no point has it become mandatory.

We could easily provide half a dozen other major government initiatives which intersect with commercial activity and do not seem remotely on track to mandatory usage.

What makes this particular initiative different? If the postal service were created today, would you also suspect that it would become mandatory in a matter of time?
Chinese Mothers
in my case its about the SQLAlchemy ORM which uses by default OUTER JOIN to load a set of parent objects and their related objects. If the foreign key on the parent is NOT NULL, you can replace the OUTER JOIN with INNER. So yes clearly OUTER and INNER are different but its sometimes the case that the use of OUTER is unnecessary, other times the case that a query can be restructured to not require OUTER (such as, using an EXISTS to check for "no parent rows found" instead of OUTER JOIN and a NULL check).
There is social stigma. You'll be seen as petty and somebody that micromanages unimportant parts of life.
This is a nice boost to a typical $4k / month Finnish programmer salary.
Yeah, it was after BoA that he said this (I think he feels he allowed the BoE community to badger him into making it).
http://news.ycombinator.com/item?id=2071529
Who creates the indices, though? And if everybody would act like that, the system would fail, because nobody would trade stock anymore.
Seems like a lot of stories about guys who eventually got rich.
The postal service isn't as powerful a tool/threat to the political order as the internet.

Edit - And furthermore, it's a govt issued id to track all your online transactions. This is tax revenue waiting to happen.
I tend to read quite a bit, and ebooks really did piqued my interest. However, every time I look at the price of an ebook compared to the real thing, I get a little disheartened, and end up buying the dead-wood book instead.

It might be due to the type of reading I do (mostly non-fiction: finance, management, science, technology, etc) and Amazon's ebook store in the UK, but I really find it hard to believe that I have to go through almost 100 eBooks to make it up for the price of the device.

So, no eBooks for me, not until they actually come up with a much better pricing scheme.
I did read his post, but there isn't a single actual demonstration of his claims that javascript math is flawed:

http://rdist.root.org/2010/11/29/final-post-on-javascript-cr...

All of his exploits talk about attacks that are just browser attacks, but nothing that says what you're saying about an actual exploit in the math of javascript. His attacks also assume an infinitely capable attacker who can always alter content, which is pointless because all browser based security, even your own proposed bcrypt, is vulnerable to all of his attacks.

Also, my invocation of SJCL is not straw man, it's the actual library I'm using, so if you're going to do an exploit that takes advantage of a flaw in javascript math, then that's what you'd use. It's a concrete thing to focus on as an attack vector. That's sort of the inverse of "straw man".

Finally, if you are saying that this is the first time you're hearing about the Twilio 2-factor auth then you didn't even read the blog post.
Why is nobody talking about the real issue here: the slashed budget of the USPTO that has made them unable to properly vet patent applications for a decade? The problem isn't the trolls, it's the fact that these bullshit patent requests are being granted in the first place. The USPTO can't afford to have experts review patent applications, and this is the result.
How many people have MySpace accounts they never use anymore? The point of the article is not that people won't ever sign up, but that they'll lose interest.
Again, you say javascript cryptography is flawed, and then say it's a browser environment problem. Let's break this down.

If the flaw is in how javascript does math, then that's something Autho.me has to deal with and I'd like to know about it.

If however, this is a flaw in browser environment, then all methods that use a browser are equally flawed. That includes OpenID, Oauth, SRP, and your own proposed solution of bcrypt. That's because, once I can exploit the browser environment, then I have access to anything the user submits.

That's the crux of my question: If you say there's an exploit against cryptography because of javascript math then demonstrate it. If you have exploits against the browser environment, then I can't fix those and they apply to your proposed solutions.

Let's take an example: An attacker can inject XSS code onto the login page and get the SRP password. Well, an attacker that can XSS the login page and get the password from your SSL/bcrypt solution. They've got access to the whole page.

So, if you find demos of failed math in javascript I'd like to see those.
Just to tell, the youtube video its said to be supressed by the user :P
Yes, but there also used to be competing post offices that were so profitable and efficient that they were able to offer three-cent stamps.

Read about it here: http://www.lysanderspooner.org/STAMP3.htm

Spooner's post office was so good that no one was really using the USPS any more. He was literally running them out of business.

That is, until Congress came in and said that what he was doing was illegal. Since then, there have been no alternative post offices.

Businesses like UPS and FedEx survive because of a loophole in the law that basically allows for parcel, but not post, shipping: http://mises.org/daily/3646

That said, they recently had a big regulatory battle between UPS and FedEx. I forget the specifics, but one business was being classified differently, and thus incurring higher operating costs than the other, simply because it was classified differently... In other words - punitive tax legislation. I forget exactly what happened there, and can't find a link at the moment buuuut:

The point is this: Your example of the post office is fundamentally flawed because it doesn't take into account that the post office is protected from market forces by legislation and thus, force.
No, Zed, I'm saying the post we're commenting on is the first time I've heard about you doing 2-factor auth. Why would you think I would comment on a post I hadn't read?

You keep talking about "the math of the Javascript". You're a smart guy. I think you know that we're not saying the math in SJCL is wrong. I don't know what "just browser attacks" mean; you're asking the browser to implement cryptography, the browser is relevant.

Nate does talk about "the math of Javascript", by the way.
False. Drivers licenses are only required if you want to drive on public roads. If you have a lot of property with private roads (farms, quarries, etc), you're free to drive unlicensed. Hell, you don't even have to get a license plate for your car if you never put it on a public road (although you'll probably have to register it with the state for property tax reasons).
The real correct answer: if it matters, you're already doing something wrong.
Yes, I do, but claiming I wrote the crypto in javascript is false. I wrote one part in javascript, and the other part is in C. That means, if there's an attack against the Javascript cryptography not the browser environment, then the mutual aspect of the cryptography will mean that the C side will catch the error.

That's why you're wrong when you say I did in javascript. Only 1/2 of it is in javascript, and I only wrote a minimal amount of that.
Respectfully disagree about not dipping into your IRA to fund a startup if you're driven to succeed and raising capital otherwise falls through. Just make sure it's for the right idea and it'll pay multiples over the crappy returns the S&P has over the past 10 years (which is almost nothing).
That sucks, but overpopulation is one of the greatest threats to the world today, and it's only going to get worse if people continue having children at the rate they are today.

That said, I'm not sure what the right answer is when people don't voluntarily have fewer children.

Personally, my own contribution to the solution is not to have kids at all. If I ever want a kid badly enough, I'll adopt.
facebook gets much better when you unfriend lots of people. fred wilson has his "only bar mitzvah" rule and only has ~80 friends. i still have around 600 down from almost 1000.
I'm going to assume you're asking about frameworks as well since comparing PHP to CGI Python or CGI Ruby wouldn't exactly be fair (even though some people love to compare Rails/Django to pure PHP). This isn't a straightforward question, so I'm not going to give you a straightforward answer, but here goes.

Based on my experience of working with Rails, Django, Pylons, Zend, etc. I'm going to have to say, "It depends LOL!1!". If you're on completely level playing field with Ruby, Python and PHP I would say jumping into Rails would be a good choice since there's so much quality training material out there (and it's a really good framework if you can ignore the fan-boys).

Since you mentioned some real time stuff you might want to look into something like Tornado/Python (tornadoweb.org) though I honestly can't say if any other framework would prevent you from real-time since I don't know anything about your server/load.

If you don't know what MVC is, or think Models are skinny european women then I'd almost be tempted to say play with some PHP without a framework for a little while. This will let you get more familiar with processing a web form for example, or uploading an image without a framework telling you how they think it should be done. Get your hands dirty in other words.

I dunno, that's just my advice. Hopefully I didn't dumb it down for you but I had to assume you've never built a web app.
search for the text "Filed by", its there, its just buried in the 800 things huffpo crams on a page.
find out what that programmer knows and learn that one :)

Most of them work well enough, so having a mentor if you get stuck is worth more than anything else.
Entertaining Cat With A Laser (Patent)
Code like Yoda, you must not.
We'd still be able to decrypt the updates and look for holes, or if you have the hardware, just flash your hacked update on the PS3. (We have metldr keys, so we can sign our own loaders)
While I totally agree with you (the problem is not actually the trolls) but these kind of patents can be easily identified as trolling.
Of Facebook Likes and Bribery
American federalism is under siege. There is, in fact, a plan for a national driver's license called REAL ID, and the states are resisting it.
I teach ICT courses at the University level and provide tech support for a non-ICT department as well so I see both sides of this. Simply put, no one has frakking clue what they're doing. Many profs are completely clueless in content and instruction while many students have no idea what they don't know. This shouldn't be too surprising since the field is so new. Even the leading tertiary schools are still figuring out their own ICT curriculum. Second tier schools and secondary schools are completely without guidance. ICT needs another decade or two for instruction to catch up.
Faster is not even the most relevant reason why one should (and would) choose 0 == flag.

edit
http://news.ycombinator.com/item?id=2082165 hit on it perfectly.
I know he talks about it, but he doesn't really. He starts talking about it, and then switches to a browser environment attack.

The main crux of my disagreement with you is that you say: Doing javascript in the browser makes it more vulnerable to an exploit than just doing bcrypt+ssl passwords. However, if someone can exploit the browser (XSS, content modification, etc) then no login system is safe.

In other words, you're pimping bcrypt+ssl as a better alternative because it's NOT vulnerable to browser environment exploits, but it is. Every browser is.

A browser environment exploit is all the things you keep bringing up: cache poisoning, SSL exploits, phishing, XSS attacks, content modification, etc.
I've never met anyone on Facebook either. I've run into the strange misconception from non-facebookers that Facebook is somehow a dating site, which is strange. Obviously those people also perceive that facebook is a way to "meet people."
This article is pretty disgusting... I'm surprised that the wall street journal would print what is essentially a big troll.