skysight-inc/HackerNews huggingface dataset:
The whole point of crawling and indexing websites to begin with is to simulate what users can and do click on. The fact that it is now technologically possible to actually track users navigation of the web doesn't change the intent of the robots.txt convention in controlling and limiting the way that search engines collect data from a site.

Bing/MS can choose to dishonor that convention, either directly or indirectly as they are now with the Bing toolbar, but I think that's a mistake on their part. Google (and Bing.com for that matter) has used the most widely accepted mechanism, robots.txt, for ensuring that content it does not believe should be indexed is not. It abides by that convention with other sites and expects other search engines to abide by that convention with respect to google.com in return.

From here the following things can happen:

1. Microsoft agrees that robots.txt should govern clickstream data from the Bing toolbar. The world returns to sanity once again.

2. The search engine community (MS, Google, etc.) agree on a new standard similar to robots.txt specifically for governing the use of clickstream data, sites are updated with new directives allowing/disallowing such use and the world returns to sanity.

3. Microsoft specifically denies that they should be limited in using clickstream data from any source, through convention or through any means. Search companies and other sites are forced to fall back on other means to achieve the same results and things get messy (for example, google blocks all users who have the Bing toolbar installed, they prevent the Bing toolbar from being installed in Chrome, MS retaliates, etc.)

For the life of me I cannot think of a sane reason why MS would choose option number 3 other than that they are insane, horribly myopic, or just plain dumb.
Nice - you should create a similar site for weddings at weddingli.st :D
Hello everyone. I'm part of the team developing the site. Gotta thank you all for the comments. We've already started making some of the changes thanks to what you've written (eg google.com not working for you in Chrome).

The site isn't officially launched just yet and we're aware of some of the issues. We've got another version waiting in the wings on a dev server but definitely going to take your feedback into account. Cheers!

And yes, the site's target audience are "older people" though we would include anyone not familiar with the internet. It also relies on an actual human who knows you helping out. Think of it as a jumping off area (both technically and for developing a relationship between the natives and the newbies)
Well, yes and no. scrypt is a very sensible design based on the battle-tested PBKDF2, but it's still a lot newer than bcrypt. That said, either algorithm should be totally fine.
How can they be using the gmail if you control the DNS MX records? I'm really confused..

If somehow it actually works, try emailing them (perhaps they have a catchall address). If that dpesn't work, then delete the MX records while you wait on Google to sort it out.
Al Jazeera.net has been hacked
> This removes the ability to move the database around easily.

Aren't warning in documentation "This setting requires this and that, so if you chose it don't expect your project to be easily portable. You have been warned." enough?
Just to add a different point of view: this was probably the first eyes-opener for me, both on writing and design.

I can only personally recommend it :)
Honestly, InDinero is just one of those genuinely good ideas that I would invest in myself.
I look at how hard it is to do one idea well and realize I don't scale well across multiple ideas.
List of PaaS web hosters
They Know What Boys Want
I'm graduating with a CS degree but I don't feel like I know how to program
<grin>

I was aware of the irony as I wrote that, but I have various tools that let me construct such responses quite quickly. Having done it this time I can simply refer to it and not have to go though the motions again.

And besides, I've only spent two periods, each of less than 3 minutes (yes, I'm sad, I did time them) to construct all the replies so far. Technically I've made one set of replies, and then seen the same post come back. Doing the same things again once to see if you get a different response is, I think, fair enough. Bt I won't be replying in detail again. (90 second reply)
My opinion? PoF stores password in plain text because it is an unprofessional outfit with no care for the security of its users or their data.

There is no valid reason for storing plain text passwords. Every time someone says "but we want it because we need to X" there is a better way to achieve X (or Y, where Y has the same effect as X in the end) that does not require plain text password storage (but may require a little extra coding+testing).

If anyone who says that the "but may require a little extra coding+testing" constitutes a valid reason, then they should not be trusted with any of your data. It is like leaving the office door unlocked because you couldn't be bothered to fish your keys out of your pocket and find the right key. It is an excuse (a pathetic excuse) for plain text passwords, but it is not a valid/good/acceptable reason.

Of course there are probably a great many sites that are unprofessionally constructed (in the auth credentials storage area at least) and you may never know until something goes wrong, so for safety you should not use the same password for multiple sites (keepass and similar utilities make keeping track of multiple password easy enough) then at least if one site is hacked the perp only gets access to that one site as you rather than potentially many sites.
It's closer to England than Paris
Symptoms of Vitiligo
White patches on skin. These patches are more common in sun-exposed areas, including the hands, feet, arms, face, and lips.
Ruby 1.9 changes, cherry picked
In this post I look at some hand-picked changes in ruby 1.9 including new features and deprecations. Ruby 1.9 brought forth some very nice and important changes which have been refined in v1.9.1 and v1.9.2. Naturally upgrades come with a cost: some of the new features might/will break compatibility with old codes and solutions. I’ll show you the most important things to look out for and also some of the awesomeness of this new version of ruby.
During my 20's I always used to have headaches and colds. I used to go to sleep somewhere between midnight and 1am. I'm a night person. At least that's what I told myself.

When I was about 28 I did an experiment. For one week I'd set my alarm for 6am and get up straight away. After a week I was used to it and kept doing it. It turns out I'm a morning person! I get my best work done straight out of the shower between 6:30 and 9am. I can fit an entire days work into that space.

Headaches and cold are gone too.

(I'm 38 now).
that sounds really expensive at $0.10/1000 if you want to do any serious analysis
Surely storing the passwords in plain text and making them available to users are two separate points?

If you really did want to be able to recover passwords then at least encrypt them and store the key(s) outside of the database (with options varying from "in a configuration file somewhere" through to hardware security modules at the other extreme).

[Edit: for the avoidance of doubt I think storing passwords in any recoverable form is highly dubious]
Ideally, you want both. The link being clicked on twice is a clear red flag for a problem, but if the user requests a password and then for whatever reason doesn't click on the link that quickly, how are you otherwise going to know who's done the interception? In theory your legitimate user will be clicking on the link quite quickly (because they know when they requested it after all), so combining both increases your security.
There is no such thing as negative chance.
In my opinion there is a difference.

A webpage author links to another as an act of conscious recommendation. The one who added the link added it for the sole purpose of others to make use of it. It would be a stretch to claim that Google serves search results for its competitor to make use of.

Next is the issue that Bing is not scraping Google but using user clicks. But here users are just a means to an end of scraping. That someone is doing an act by way of third parties does not take away from the fact that one is still doing it.

I am all for having someone give Google the run for its money, but I want that to be driven by genuine technological innovation. Not by being a El-Cheapo knockoff of the market leader. Some search engines are beating Google in niche markets by being better than Google, which is excellent.

I dont think, Bing re-serving Google results, brings any innovative pressures to the market. Especially when you know that whatever innovations one brings it will get replicated by piggy backing. I wouldnt want to be in a business where this is true.

What worries me is that the main players will start engaging more in how to inconvenience each other rather than building better products. I have been fearful of the fact that Microsoft would someday tweak IE so that Google does not work well on it. They have done this for a few other sites but haven't done it to Google. I think initially in fear of starting a race, but now with other browsers beginning to rule the roost thats moot.
How can Twitter sell content created by users?
Facts are pretty common in (good) software engineering, but they're rare in Internet discussion. Hence, solid facts in Internet discussion tend to rack up points.
A disturbing piece for HN parents about the coming of age for children.

Even though you know the Internet and technology has all progressed since we were kids, it is still disturbing nonetheless.

The hacking solution to help our youth is unlikely to come from 0's and 1's, but a hacker that could figure out how to address this--with 0's and 1's or otherwise--would be rewarded with more than gold and silver, they would be a hero.

It would be too much for a single person to figure out or a team for that matter. We could easily say that the solution is parenting, but I believe in many cases that isn't enough.

Our current social dynamic because of the Internet and technology combined is changing everything from bullying to coming of age to social skills and the problems have been coming to a head for years but only recently receiving so much of the spotlight, leaving it anyones guess what the future repercussions could be.
Nor is it a crop circle. Looks like a sports track to me.
New Digg gets a Makeover again
Features - Product Review and Rating module - osCommerce PayPal Payment..
This is a standard practice with all electronics manufacturers. I've been seeing it for decades at the end of component datasheets from Fairchild, National Semiconductors etc, even for things as trivial as discrete transistors, 555s and 741s. I think its primarily due to the possibility of contributory liability. And it also allows them to price discriminate and sell defense grade components at ~ 4-10x the price.
That said, you might want to scale it back a little. 2^12 rounds takes 1-2 CPU seconds (on a different implementation, but still.)
It's impressive that YC helps founders succeed by putting them through a short but intense program.

It's even more impressive that YC helps founders succeed by rejecting their applications, and motivating them to try harder.

The latter is a truly scalable business model. Maybe YC should get a chunk of stock simply for letting companies apply to the program...
Shameless plug:I made http://www.pepbot.com it's a temp mail service with the ability to automate the confirmation task that many services require to verify your email.
Can anyone provide the English version? Tried to use Google to pull it off but didn't work.
http://letscrate.com/settings lets me do that (linked to from http://letscrate.com/home)
> This morning I had a different thought though, one that’s completely reversed my thinking on the issue: People aren’t robots, and they don’t always click on the first result.

But people do have a bias to click on the first result because it's the first result. From http://www.useit.com/alertbox/defaults.html :

> 42% of users clicked the top search hit, and 8% of users clicked the second hit. ...

> [When the researchers] swapped the order of the top two search hits ... users still clicked on the top entry 34% of the time and on the second hit 12% of the time.
Up votes but no replies to actually take do it. I am no where near the ability of most of you on the coding side but can take care of any other aspect of the business.
So he made a bussiness decission: weighed the risks and went for the most profitable one.

Still, I think he's been careless. If you really want to give your users a "recover password"(especially after you have reached success), do it in a sensible way. Use hardened authentication servers behind inspection firewalls(preferably encrypted so filesystem access isn't enough!!) but don't store them in the same database as the rest of your data. Or use hashes and store the plaintext(encrypted) in another system which will do the mailing.

There are lots of options, none of them as good as slow-hashes-only solutions, but a better compromise between security and UX.
One mobile phone charger fits all: IEC publishes global standard
Is the Super Bowl 2011's Last NFL Game?
It's 150 miles from Paris, and it's not a crop circle.

It doesn't even look much like an Android.
Agreed.

How does OkCupid achieve the same thing? They use unique tokens in the URL's of their mails, so you are instantly logged in if you visit OkCupid through any URL in their mail. It's safer, and even easier than how PoF does it, because you can just click the link instead of having to copy/paste your password into the login form.

I think it's been shown that PoF is unprofessional enough times already to discredit this whole article. Judging the evidence, Occam's razor tells me Markus is an amateur who was in the right place at the right time with a poor product, and unlike Craigslist or other projects that started out this way, he hasn't improved it at all, and is riding the wave of success from his initial userbase.
At least Half Encode password, as a reminder. 50% plain text, 50% hashed out.
Or a temporary login token url.

Never send users plain text passwords in email.
A possible game changer for invalidating bad software patents
This article is a coincidence for me - since I started working from home full time, I've been going to bed at 4 - 5 AM and getting up at 2 PM every day, but I actually managed to pull off 11 PM - 6:30 AM for the last few days. I've been much more productive and felt a lot better about myself, so yeah - it's a good idea!

If you're on the 5 AM - 2 PM thing, an easy way to force yourself into a normal cycle (or at least the way that always works for me) is to do an all nighter and go to bed at 10 PM or so the next day. Just for god's sake remember to set an alarm ;-)
Y Combinator: Facebook
Bing didn't crawl Google's pages (so never reads a robots.txt file), they are collecting click stream data from users via the Bing toolbar as they browse a page.

It's voluntary, you can opt out of the anonymous data reporting. The data they are using belongs to the user, so it's the user that can opt out, not Google.
Think Murdoch's punt with The Daily won't work? You're wrong…
The git parable
running a little, walk/hike a lot, 3600km over the last 2 years, aiming for 2400 this year. weights a little, bit of swimming ~ high frequency, 5/7 days.
>But if that's true, then why bother taking your time to design good applications? Why strive for excellence when some random gimmick app is just as likely to make money?

You are making the error of assuming something isn't true because you don't like the conclusion.

And indeed, except for whatever personal joy you experience, there is no reason to strive for excellence.
Conversion Voodoo + GazeHawk (YC S10) + VWO will fix your landing page for free
This has been posted before, but I thought it was especially good, and the opportunity for comments on the older version (from over 600 days ago) are gone.

If you want to read the previous discussion it's here:

http://news.ycombinator.com/item?id=615308
It's still a bad time to look for a job.
Open Source GitHub-like file browser widget - just 1 page of jQuery
A friend's take on Facemash: Social Harpoon
Google was pretty clear that they would be harvesting the content of your gmail to target ads. The different here, is that MSFT did this "Google-search-Click-Tracking" thing on the down low.

I agree with you though, if I, as an IE9 user wish to submit my click track results to MSFT for analysis so they can improve search results - that's fair game.

But, It's not clear to me that MSFT should be able to review what the user was searching on before they clicked on that data. Now they are actually using Google's search Data + the user's click traffic. I think they cross a line there, particularly if they aren't willing to come clean and admit that's what they are doing, and make it clear that they are sending your Google Search queries + your click traffic back to Redmond.

How many people on HN were aware that Microsoft was doing that with IE? Click Traffic, sure - But I didn't know they were sending my Google Search queries back to HQ.
Beautiful Top Expensive Cars Designs And Pictures Collections
People tend to focus on the plug formfactor, and I am sure it will be convenient for every charger plug to fit.

But such standards inherently limit what you can do. By defining a charger you are also defining a voltage and current capacity of that charger. This means that you can't build bigger batteries or charge them faster than the lowest common denominator charger.

Apple, for instance, does this already. The iPad pulls 10W out of a USB port. This is more than the USB spec allows but apple built a special charger to support the iPad. (and has had higher power ports on their computers for awhile.)

The lowest common denominator is what USB was built around which is why it is anemic with power, unlike, say, firewire which provides enough power to drive two or three external 2.5" hard drives (often you can barely drive one from a typical USB port.)

Now the next iPad will have to be limited so that whatever lowest common denominator feature phone charger can charge it?
> you may never know until something goes wrong

There are some warning signs that clue you in. Any of the following are good indicators that passwords are not being stored properly:

- Passwords emailed in plaintext on registration (minor flag - may be stored properly, but not good practice)
- Passwords emailed in plaintext at any other time (definitely stored incorrectly)
- Maximum length
- Not allowed special characters
- Including a " or ' in your password causes an error
Neutron star seen forming exotic new state of matter
I think it would be rather short sited of Google to start getting into wars over permissions for mining clickstream data from the source page, given the amount of data mining they do on Gmail links and search result links etc.

I can imagine a reverse sting operation Bing could run:
1) Set up similar faked honeypot pages that only Bing knows about.
2) Send emails to Gmail accounts owned by the Bing management team.
3) Click on a few of those links.
4) Watch as Google mines the clicks and ends up with the links in their search index.
5) Sit back and accuse Google of reading private emails from Bing management to improve their search results.

It's exactly the same thing, the data is owned by the user, and in both cases the user will have agreed to a terms and conditions that allows the companies to collect stats from that data.
Even more important than setting alarms is actually getting up when they go off. A really bad habit to get into is the habit of sleeping through alarms. Never set an alarm unless you need to get up, and always get up when you set one.
Car locksmith | mobile locksmith
Miami Locksmith Pro provides complete lock services for businesses, homes, and vehicles. We have highly experienced lock and security locksmith technicians to meet your problems and provide you with complete answers through Online. To know about mobile locksmith and car keys replacement please visit us at miamilocksmithleads.com/
Using Code Optimization Software to reduce the size of JavaFX Applications
Is it just coincidence that I wrote almost-identical code about 7 hours before this? (https://github.com/playfire/django-bcrypt/)
Using git+dropbox together
You can store encrypted passwords without compromising user experience and usability so I am not sure what's this got to do with it?
On the other hand, when I tried Plenty of Fish, the fact that they sent me my password in plain text completely turned me off the service.
If it’s taking you more than five minutes to fall asleep each night, you aren’t sleepy enough.

Some of us aren't fortunate enough for that to be true.

If you simply go to bed when you’re sleepy and then get up at a fixed time, you’ll cure your insomnia.

Possibly true for some people, but it's an incorrect generalisation - certainly isn't the case for me.
HN does. Anytime you upvote a story, the HN thread can be accessed again through the "saved stories" link on your profile page.
If they are worried about user experience and that is the main reason they do not encrypt - then why not at the very least use a version of encryption that the site can decrypt? Sure, the people who grab the data can run some cryptography programs on it and eventually come up with the algorithm, but it is a hell of a lot safer than plain text.
Упражнения за гърди
Упражнения за стягане на гърди. Тези упражнения ще ви помогнат да оформите красиви и стегнати гърди.
I'd have thought that more appropriate ranges might have been:

8-15
16-31
32-63

Which are a bit broad, but why not:

8-15
16-23
24-31
32-47
48-63
64-95
96-127

Or something like that :-)
text-shadow: rgba(0, 0, 0, 0.01) 0px 0px 1px;

Would've worked better.
Maybe the guy has gotten a job in the past 6 months since this was posted?
Very true - there have been times when I've woken up hours late and found my alarm deactivated, with absolutely no recollection of turning it off. The things one can do while asleep are amazing..!
What about not having a password at all?
The user who wants to log in, request a login link to their email. And can click it within set amount of time.

Then the user only have to know the email-password. And that could be used to get a new password anyways.

Lots of sites I only visit once a year I need a new password to each time. And it would save me the trouble of making something up each time, and not remembering it anyways.
And if I would try to remember it, it would likely be a password I use on another site. Which would be bad.
The first step toward a 'hacking solution' would be to define the problem clearly. What are you trying to solve?