skysight-inc/HackerNews huggingface dataset:
> Unfortunately, not the steel trap that Bill was looking for.

A catholic priest may not reveal anything he learned during the confession, no exceptions. That's the only "profession" I know with such a strong promise of confidentiality.

"Can. 983 §1. The sacramental seal is inviolable; therefore it is absolutely forbidden for a confessor to betray in any way a penitent in words or in any manner and for any reason."
http://www.vatican.va/archive/ENG1104/_P3G.HTM
Facebook Could Rack Up $1B in Profit This Year
When you have so much traffic, it's easy to find other avenues for product changes. You can move into new niches. You gain flexibility.

But when you also have a high valuation, and have been taking money off the table, those choices become limited to those that are perceived as the highest growth. You lose flexibility.

Frugality is good, at all levels.
I don't think any of us can honestly answer that question. Why is it even relevant what state most of the people are in.
When Bad Patents Hurt Good People: Patent Threat Shuts Down Flight Planning Site
Picking Investments: Only Two Things Matter
Her tweestream at http://twitter.com/birgittaj has more, but the short version is that the DoJ is subpoena'ing her "personal details" as well as all her tweets. She's talking with Iceland's Minister of Justice.
I don't think it needs to have anything to do with deadbeat dads or the possibility of raising a child alone. Pregnancy is and will always be different for the woman. For one, she has to actually be pregnant for nine months and deal with the sickness and pains that brings. Then she actually has to give birth. Getting pregnant when you are not ready is a terrifying and a loss of your life and plans as you know them.
Yes, when you have the baby you adjust and are happy for it and yes in the future you can pick up your career again and try to juggle both. But when you are not wanting a kid yet, it's hard to think about it that way.
And abortion is not exactly an enjoyable alternative either.
thanks :) Add your search query and share it with your friends when they ask about content.

ie
http://lmptfy.com/?q=metallica
It was originally from SQLObject, a much older ORM. DeJaVu also has its own variant on Python expressions transforming into SQL using lambdas and bytecode inspection. To my knowledge, the foo__gt=2 thing is a Django-specific concept.
But also, using quotation marks purely for emphasis/sarcasm is an informal practice, it doesn't belong in something like a news article (or an essay, legal document, etc. ).
Well, that is a crap way of doing things because in credit-card world you can 'hold a charge' for $x rather than actually execute the charge transaction. Holding a charge checks the credit card can pay the dollar amount and I believe also reduces that against your spending limit - but it doesn't actually put the charge on your bill. It only lasts a short period of time and so if you don't complete the transaction the charge is dropped altogether.

It comes down to whether your credit card processor exposes to you such functionality and whether you are smart enough to know to use it.
Why would you use a capital letter for the second word? It should have been "Do it" in which case the problem does not happen. Strange that nobody seems to take this basic rule into account.
https://secure.wikimedia.org/wikipedia/en/wiki/Capital_lette...
so do we - can you tell ? Bitcoin is another awesome project worthy of support.
Only makes it more important that we get decentralized identity mechanisms (key based id) up and running sooner rather than later.

Yeah, no doubt. :-)
I would personally say that even if nearly everything in the book fails for me, it was a good enough read to be worth $15 (roughly what I would pay for a novel, let's say).
I stopped during the second paragraph, because I suspected as much. Maybe I'll read his old blogs instead, he was sounding like a captivating writer.
Atwood and others have been praising the idea of a centralized identification system for a while, and tying it to a government identification system makes sense, but tying this to the Obama administration could be a marketing disaster. I can already hear Glenn Beck associating it with Nazi Germany and advocating against its use. Similarly, its association with Verizon, AT&T, Paypal, Symantec, and Google is likely to bring its own breed of distrust. This strikes me as a project that doesn't deserve the politicization it's going to get.

This is why we can't have nice things.
Interview with OkCupid CEO about their analytical approach to online dating
Look at the 'certificate type' column for *.heroku.com. That shows at least 8 using Heroku.
The Cause of the Outbreak of the First World War
Actually, no that's not the point of autho.me. I know you keep thinking it's about me making a secure authentication that competes with bcrypt+ssl. It's actually for the purposes I laid out in the blog post:

1. An easy to setup secure auth system that's at least as secure as the others available. Not more secure, but just as secure. For example, your attack of protecting against content modification applies to all login systems. Every last one. Phishing also applies to all of them. I'm trying to tease out what ones are particular to autho.me and cover those.

2. The ability to manage users across multiple domains and organizations.

3. The ability to share or trade accounts with other trusted partners. This one is dubious because I don't know how users will like it. Really gotta figure out the usability of this.

4. An easy way to do 2-factor authentication with phones.

So, don't be blinded by the SRP. That's just there to make the other features work. I'd also say if you're going put up specific attacks, then you should give ones that aren't also attacks against the things you promote. If you evaluate autho.me from the point of view of an infinitely capable super hacker who can always modify content, then all logins are vulnerable.

I'd also like demonstrations of actual javascript turing completeness or mathematic failures that aren't handled by Tom Wu's SJCL. If there's flaws in Javascript's math such that it causes failures, then I'd like some concrete examples that don't require "infinit super hacker injects code" attacks.

In otherwords, I'd like demonstrations of the SRP data that's publicly sent and an attack against it because of a failure in javascript mathematics, sjcl, or my code.

Anyway Thomas, I don't take it personally, even if you are a bit sensationalist about it.
Wait... this doesn't add up for me:

"[This will] limit fraud and streamline online transactions, leading to a surge in Web commerce" - Is this really that big of a factor in constraining online retail, or is there a greater chance of it imposing stupid rules. Who's behind this?

"Verizon Communications Inc., Google Inc., PayPal Inc., Symantec Corp. and AT&T" - Oh yea, this sounds perfectly benevolent... But who's overseeing this?

"[McConnell,] a senior counselor..." "Dept. Homeland Security..." "big reduction in the size of Internet help desks" - Since when is it the DHS's job to worry about internet help desks? Who else wants this?

"Clippinger..." "Board member... "advises...Equifax...PWC..." Nothing to see here...

I may be tin-foil hat about this, but it seems like where the companies (incl. GOOG) are trying to take net neutrality - into a controllable space with gov't teeth...

http://cyber.law.harvard.edu/people/jclippinger
Ask HN: Please critique my startup idea and landing page
I would greatly appreciate any constructive criticism the community has about my startup idea, BakeLayer.

http://bakelayer.com/

The idea is simple -- hosted browser cookies. There are several advantages to storing data server-side that would normally be stored client-side:

- You can store more data in a database than you can in a browser cookie. That data can be accessed via a key/value interface (API)

- You can add, delete, and modify cookie data server-side without the need for the visitor to access a page on your site.

- There are multiple methods of tracking other than cookies, so I can use those methods to associate an ID with each client, making it harder for them to "lose" the cookie data you've assigned to them. Naturally, only methods that haven't met with litigation are employed.

I'm still kicking around ways to price this, as potentially it could be hit with a ton of traffic (each page view on a given website, similar to an analytics service). After reading the Dilbert comic today I'm pretty sure how I want to market it.

Any ideas or notes on the design or business idea are greatly appreciated!
Acer Aspire Timeline AS1810TZ Series Akku
5600mAh Acer Aspire Timeline AS1810TZ Series Akku,Acer Aspire Timeline AS1810TZ Series Genuine original battery, Versand in die ganze Europ
I should add also though that if she does mean pregnancy, she is wrong. I would say AIDS pretty much leveled the playing field as far as sexual risk goes. Definitely scarier than giving birth.
I can vouch for the inner joins blowing outer joins out of the water. Setting up your postgresql.conf appropriate to its environment is helpful as well, http://wiki.postgresql.org/wiki/Tuning_Your_PostgreSQL_Serve... has a good deal of explanation.
●---------------------------------------●
●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●
●---------------------------------------●
Reflection for the Masses [pdf]
It's a design decision. MySQL chose "fast defaults". PostgreSQL chose "safe defaults". If you want the other choice, use the other database.
Very sad indeed. It might just be semantic, but it seems that this person died from wounds inflicted during childhood, it just took a while for him to succumb.
You'll just be able to use your government issued id to make your book purchases on Amazon. Sounds good!
I'm glad to see more projects starting to accept Bitcoin. :)
Again, if there's an actual demonstration of Javscript maths calculating incorrectly, then please give it. I'd like to make sure it's covered in the SJCL.

Otherwise, this claim basically says that Javascript is either not turing complete or doesn't have math sufficient to do the crypto, yet the SJCL does it. It also assumes that other languages somehow have "magic" math, when really nearly all cryptography is giant bignum hacks that exploit how binary math works.

If you've got a counter to this, then by all means, I'd like to see it.
I don't think this is just for the Tin-Foil Hat crowd. Beck is on the extreme "gov't isn't natural, do away with it all!", but the other end of the spectrum is just as nutty in thinking that we can really control the US's corporatist system via the same gov't our big business use to gain their own influence. Am I crazy for not trusting the US to keep Corps. out of our internet?
http://bugreporter.apple.com/
It will be interesting to see what this does to Verizon's Droid pricing. If Verizon adopts similar plans to AT&T with a cheap, limited, data add-on, a Verizon iPhone could be just as big a boost to Android.
It appears that Zed Shaw does not like openId. I agree with him that it is certainly no panacea, but the risks can be minimized to a large extent if used properly.

I use openId to login to HN. So when I submit my Google openID, in principle, HN can redirect me to a fake Google site where I may unknowingly type in my password. The big loophole is that I have no control over which site I am redirected to by HN.

However if I were to log into google first and then visit the HN login page that problem disappears. If all goes well HN redirects me to Google which remembers that I am already authenticated and directs me back to HN. OTOH if HN sends me to a malicious site it will ask for my password and give itself away as a malicious site.

I am no security expert, and corner cases of vulnerability surely exists. But some simple guidelines can mitigate the risks quite a bit.

One point raised in the article is that

By comparison, OpenID assumes the User and a Third Party
is more trustworthy than the Customer. I personally find
this bizarre since it's saying that someone is going to
log into a potentially dangerous site, and simply using
OpenID makes that alright.

I wont go on to claim OpenID makes everything alright. But I like the feature that I as a user get to choose who I trust with my password, 2nd party, third party or some N^{th} party. So it does not seem that "bizarre" to me.
True, you can possibly rig it up with an unlocked AT&T or other non-T-Mobile contract bound phone.
I'm not at all sure I agree with some of these points.

Personalising by first/last name is a well-known screw-up if you're working with international markets. Numerous cultures put their surname first, assuming they even recognise the distinction at all. Also, being "chummy" by addressing mails to someone on a first-name basis will annoy a significant number of people, particularly those from older generations or, again, from various cultures other than English-speaking Western ones.

HTML e-mail is commonly accepted these days, but you need to know what you're doing. If you send something that looks cute in your mail client, that is no guarantee at all that it will render even sensibly, never mind identically, in other popular mail clients. Also, various things related to HTML e-mails are common markers for spam, and if it's the first time you're writing to a customer you're already the wrong side of average on a lot of popular mail systems these days.

Finally, the upsell-in-conclusion idea sounds dangerous to me. If I've trusted a company with my e-mail address and the first thing I get back is something trying to sell me more stuff rather than support whatever it was I signed up for, then my opinion of that company will instantly drop.
I'm pretty much OK with saying "Give us your credit card number; we'll charge you after your free trial" and then saying "Your free trial expires three days from now." People are easy to nudge into desired behaviors: they find it easier to go through with a decision they have already made than to make what seems like a separate decision at the 30 day point. I know of no moral stricture which says I should choose the sucky-to-the-business model just because it is sucky-to-the-business.
Surprised to see none of them using Route 53. Suspect that won't be the case in a year's time.
Happy New Year◎,◎appy shopping

●---------------------------------------●
●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●

●------ http://goo.gl/l5v0b ------●
●---------------------------------------●
Happy New Year◎,◎appy shopping
Damn. Getting all teary-eyed reading the posts in the other thread. Life on this little rock can be so hard sometimes... RIP Bill.
Pricing game theory suggests that T-Mobile should undercut AT&T by a small margin at most.
> The fact that this single event occurred is sufficient to demonstrate that the 'How to have a mutually enjoyable sex life' script does not work universally

I'm sure there are wealthy, polite, and educated necrophiliacs also and single instances of sexual fetishes and requirements so strange as to be unimaginable by most of us. Does his mean that we need to adjust our entire model of human sexuality for each of these? Maybe for people so limited of thinking as to believe that any one model of sex could achieve 100% coverage, this could actually be useful information. But to automatically assume anything about 'ordinary' sexuality is ridiculous.
Digg.com founder?
> 1. I'm a control freak and a privacy freak. I don't trust any third party with my email. I want to know how things work under the hood. And if I want to make a change, I don't want to have to depend on any third party to do it.

Email should be considered public. Unless you're using encryption it's sent in plaintext and could easily be stored on any server it goes through. While it may be harder for the gov to get access to it a clever hacker or employee can still get it.

> 5. Stealth. It's much less likely that someone will try to break into my server than into Google's servers.

Security by obscurity is not security at all.
gg=G: Autoformat the entire file. Useful to apply changes after changing tab options.
So, if I'm reading this right, a release of MySQL that came out only a year ago and is still of development quality finally has ACID compliance by default? Or has there been a production-grade release since then?

EDIT: My mistake. Apparently I'm not sufficiently familiar with MySQL's revision number practices. According to this: http://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html#news-... 5.5.x is a production release; I saw an odd minor version and assumed it was dev, since that's what I'm used to everywhere else. My other questions still stand, though.
Siap Menang atau Kalah
I don't have any problem with OpenID itself, and in fact I worked on the PIP project at Verisign briefly. That statement is more about the difference in design, that OpenID has been marketed as some kind of protection against evil sites. It's an evil site, no amount of OpenID is going to protect you.

I also disagree with the idea that OpenID protects against phishing, since well, if one site can be phished then an OpenID site can too. Phishing is a failure of usability in the browser, so all websites are vulnerable to it.

Basically, my objections with OpenID are more in how it's marketed as some protection against things which really aren't a protocol problem or can't be solved by OpenID.
Tumblr seems to be big with the younger age groups, it's more of a facebook compliment though.
ARAHIMHAMBA'S BLOG |MENCIPTAKAN PELUANG USAHA DAN PELUANG BISNIS
business opportunities that awaited by everyone to learn more
Isn't it safe to just say that every technology fades with time? The only constant in our industry is that we will all become less relevant in time.
hrm. cool idea. would have to make sure that accessing such an integral part of data from your servers would be snappy fast, though.
If true. I wonder about the possibility of No Vzw bloat on board, how will that effect the sales of android, will the Iphone cost more as a "Premium" clean phone?
Actually, he's incorrect. The crypto is calculated in javascript, and in a C library written by the author of SRP:

http://srp.stanford.edu/download.html

I'm using 2.1.2 with one slight modification to use SHA256 instead of SHA1+MGF1.

That means that, should there be a failure in the javascript, it has a chance of getting caught in the C code written by the author of SRP.
If you made it out of steel, it would survive just fine -- there would be some ablation, but it would still get to the ground.

As to the "more expensive"...no, not really. Basically, it's just a crowbar with a simple camera and some fins on it. Using this technology it would trade in the camera for a radio back to the launch vehicle. You'd need all the same bits on a missile, plus more besides, and the missile would need to be larger.
Surely Retina on a iPad sized screen would be rather too demanding for the CPU?
Facebook has the advantage of being built into way more mobile devices than anything before it ever was. Many phones now come with a facebook icon on the main page when you first turn it on.

Also the amount of free advertising it gets from companies using it's logo everywhere with add us on facebook and have your say on facebook, how many other companies get their logo and a call to action to use there service for free on TV every day around the world?
It's not crazy at all, but it seems we've reached a point in the conversation where we can't produce anything meaningful without it getting drowned out by screams of "Fascism" and "Plutocracy".

I think that both Government and Business stand to benefit from it enough that it's possible that there weren't underhanded motivations involved, or at least that they won't come to fruition.
Reminds me of the #firstdraftmovielines trend:

http://www.alexc.me/riding-a-twitter-trend-firstdraftmovies-...
I really don't want to change the subject or take away from the discussion about Bill, but I just want to quickly interject and say I disagree with this. I have now lived in Princeton for 18 years, unaffiliated with the University (I went to HS here, but go to college elsewhere). The town is picturesque, historic, and enhanced by the sterling reputation of the University. As for the isolation, NYC is just an hour train ride away, Philly an hour and a half. I suppose there isn't a ton of stuff to do in the town, but I've never found it to be a problem. In any case, Princeton is a great place to live.
The new it social network for tweens/YA is tumblr. Facebook will eventually lose market share to Tumblr.

All these social networks are simply an extension of the email use case. It's nothing new, nor do I see Facebook taking down google.

Social networks are like hot clubs. Eventually their popularity fades, as soon as another it scene opens, which is why I'd never invest in a social network site.

So shall it pass with Facebook
People with bad numeracy have more loan defaults
Thanks, and agreed. The latency of each request would have to be as short as possible. I'm guessing in order for it to be snappy fast I'm looking at requests taking around <80ms.
What a weak argument. Buy a 24" screen. Rotate 90°. Shut up and enjoy.
Please tell me the difference. All I see is that it's more difficult to switch when using buffers instead of tabs (have to press :, have to add ! if it's not saved).
Blowfish encryption (and persistent undo) came in 7.3:

https://groups.google.com/group/vim_announce/browse_thread/t...
This Woman Was Forced to be Sterilized: What Would You Do?
Ok that clears the air :)

I agree that if as an user I trust the "customer" to take me to my OpenId provider then it provides no protection against phising. I totally agree that phishing is not a protocol problem and cannot be solved at a protocol level.Thankfully I wasn't exposed to that marketing, so to me OpenId was mostly an issue of convenience. However the common modality of breaking OpenId security can be mitigated if I login to my OpenId provider first.

I think your concern is that my OpenId provider itself might be a phishing trap. Yes, if I fall for that, then all bets are off. But ideally I should be typing its url on my browser or going from a bookmark.
From the first sentence in the Executive Summary:

Cyberspace – the interdependent network of information technology components that underpins many of our communications – is a crucial component of the Nation’s critical infrastructure. We use cyberspace to exchange information, buy and sell products and services, and enable many online transactions across a wide range of sectors, both nationally and internationally. As a result, a secure cyberspace is critical to the health of our economy and to the security of our Nation.

As I posted on twitter after seeing that: The use of the word "Cyberspace" to refer to the Internet helps us identify the idiots, old white guys and just generally clueless people.