skysight-inc/HackerNews huggingface dataset:
That sentiment seems to be the general consensus. I've heard it repeatedly over the years, about various aspects of my life. But I am acquainted with a woman who wrote a book about her life and the publisher turned her down. It sounded too fantastical and they had recently been burned by someone else whose fantastical life story turned out to be all made up. I also get that kind of reaction a lot: That I am a liar, a teller of tall tales, etc. People frequently think I must be, at the very least, exaggerating. (The truth is, I do a lot of downplaying to try to minimize social problems.)

So it is unlikely that a traditional publisher will ever publish my life's story -- unless I get famous for something else first and publishers begin coming to me. I have found that it really doesn't work to try to 'sell' myself. When I go to them, people just think I'm full of crap and trying too hard. It works far better for me to wait for other people to discover me.

At work, I remain in that same entry level job -- a job that some folks have gotten right out of high school at the age of 18. (I have about 5 or 6 years of college, some of it the equivalent of graduate level work and lots of people hired after me have been promoted.) There are people in the department I work in that know I am bright. And I have submitted suggestions, proposals, etc. It goes nowhere, in spite of sometimes being initially met with enthusiasm. No one seems able to believe that some loser who can't get promoted out of an entry level job could possibly have meaningful solutions to systemic departmental problems (which is generally the scale I think on). And recently when someone did take a proposal of mine seriously, the implementation ended up bearing no real resemblance to what I was trying to accomplish. It ended up repeating the same systemic sins I was trying to redress. I take this as a hint that corporate America and me don't really mix that well. I'm disgusted and if I came into enough money say, this week/month, I think I would promptly quit my job and begin walking across the US. (Edit: The job I have seems to have a high-ish wash-out rate and I have kept it while recovering from being very ill. So I don't feel like a personal failure. I just feel like I have no real future at the company -- at least not one commensurate with my abilities.)

Which is to say "It's not like I haven't tried to go the traditional/conventional route." But it doesn't work for me. Most likely, I will need to go off and do something on my own. Winning over an audience single-handedly will probably be less challenging than winning over The Powers that Be in some existing bureaucracy (whether at a publishing house or at my place of employment).

But thanks for the feedback. I do appreciate it. :)
I hope that it is really true and that this is only the first of such discoveries.
Certainly would, although SHA1 is being phased out, it's probably still "ok" to use, but I wouldn't choose it if I wanted the project to achieve maximum longevity, I'd choose a later family of SHA, SHA2. It will be slower, but you won't end up looking like gawker. Since node just uses openssl you have quite a collection of message digest algorithms to choose from. Run an "openssl speed" on your server to get a benchmark of different algorithms.

Edit:

type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes

md5 24629.04k 83750.79k 226739.03k 391874.18k 509285.72k

sha1 24185.38k 75777.49k 177806.76k 263012.01k 305498.58k

sha256 17504.41k 42089.29k 84845.06k 108628.53k 120801.96k

sha512 13258.86k 57601.03k 101861.29k 155866.45k 188783.13k

Also, you're using iterating 1000 times for all users, you can mix it up and store that with the user in mongo. (1000-1000+). You might also want to serve up your login and any pages requiring some form of authorised behaviours using https. (Prevent auth token theft and password sniffing).

Also when validating user input for passwords, are you sure it's isAlphanumeric() that you want? Some users like to have non alphanumeric characters in their passwords. If it's just an attempt to stop xss/injection then I believe node-validator supports that without restricting you to alphanumeric characters only.
I stream my desktop when I work on personal projects. Some guys I knew in high school occasionally watch it.
The SMS alert is not in your face all the time though. You can't dismiss the dickbar, you can, however, dismiss the SMS alert.
This isn't true. Claims about something never occurring in the history of XYZ incredibly basic human endeavor should be taken with a tbsp of salt.
this is bad. If we're the only life in neighborhood it is evidence that life is rare and we might already be past the great filter. If life is relatively common it makes the fact that the sky is silent fucking terrifying.
I agree that it's an interesting problem, unfortunately client security is also a very hard one. While an emulator check sounds like a neat approach, it is hard to prevent things like that from ending as just another cat and mouse game. They'd have to run every major+minor version, and then what if the author just set it to not infect the first 1000 installs, or to only activate if another semi-common app was installed, or simply included a chrome frame that pulled an exploit only if the client was on a major mobile network, etc.

Most (though not all) malware detection, be it signature or behavioral relies on an engineer having analyzed it or a close relative in the past. When you have a sandbox model like Android, you really need to focus on getting exploits fixed on all your clients as a first priority. Until you get that straight you're never going to be doing much more than sticking your finger in the dike.

Right now every 2.2.x or older client is wide open to a drive by compromise when using chrome lite. So focusing too much on the marketplace may not be rational. All recent mobile Safari builds are vulnerable to a similar webkit exploit as well. Both issues were cleared in Chromium last year.
Check out the hg-git plugin. I use it all the time to clone projects from github using hg.
Why would you choose Github over Bitbucket for your FOSS projects? I haven't used Bitbucket yet, so I'm interested in a comparison.
You might also consider bcrypt. See:

http://news.ycombinator.com/item?id=762708

For a discussion on it.
Thanks for "getting it". Sorry to see you were downvoted.
elaborate please, I'm not following entirely
I bought my iPad from San Francisco last spring, and asked the Apple Store staff to activate it. That was the last time it has been connected to a computer. Calendar and contacts sync nicely from Google, as does email. And Kindle does its own syncing. What else would I need?
Yes, I've been scrobbling using audioscrobbler/last.fm since 2004 and this is quite bad for the experience. I've been listening quite a lot to a german dnb act called Panacea ( http://www.last.fm/music/Panacea ) the latest month. In my listening stats a picture of an american base hip-hop group shows up. Take a look at how Discogs (one of the best services I know) separates their artists with similar names ( http://www.discogs.com/artist/Panacea , http://www.discogs.com/artist/Panacea+%282%29 ).
I think the general consensus post Gawker hacking was that hashing alone was inadequate and that for greater security you should use bcrypt as it takes so much longer to run attacks.
yeah, http://www.python.org/dev/peps/pep-0374/
IE6 Countdown (a site by Microsoft)
I'm intrigued that no-one mentions launchpad yet, it has roughly the same feature set, but doesn't put the code on the front page.
When I tried to play that game in Chrome my computer locked me out! (yeah, that wasn't a failure mode I even knew existed).

So consider yourself lucky.
I'm someone who thinks that Facebook still has massive scale and hype on its side, but will struggle to deliver on the potential it has. But, I don't agree with the 'X is dead' contention - the media and start-up community seems to have embraced it wholeheartedly.

It is perfectly possible to have a world in which both Google and Facebook exists and exist as giants.

It is perfectly possible to have a world in which Facebook loses a lot of its current sheen, but still rakes in a handsome profit. Google will continue to be brilliantly profitable, but the blowout quarters will be harder to come by.

Most market segments are large enough to support, 1,2 or 3 profitable leaders. Even in a segment as niche as commercial aircrafts, you have multiple players. The entire contention of one killer market leader is the greatest eyewash of our times.
TweetViewer: curiosity killed the tweet
TechCrunch ha riportato che un nuovo worm si sta diffondendo su Twitter facendo leva su una della maggiori pulsioni umane... la curiosità!

Chi ha visto il mio profilo? Quanti di noi si sono posti questa domanda?

Prima o poi, quasi tutti...
Let me be the first to say, good job. It's great to see node and coffe getting more love as they're both really fun and neat. I see you're setting up a sandbox for us HNers which is probably best to show HN something they can actually use and draw some more attention towards your project.

Heres an idea for you, we all seem to love delicious and bookmarks. Why not integrate bookmarking into this project (private by default) but allow the use of 'publishing' to ycatalyst, or viewing previous discussions on already 'published' bookmarks/topics. You could then generate 'site' posts which are from hot/popular bookmarks, (I'd also try to keep who bookmarked it private by default).
I guess I just don't read it the same way. Maybe it's just because I already knew about the issue, but it seems obvious the security issue existed before they were informed of it. A security issue that was fixed within minutes of its creation wouldn't be getting device wiped, cleaners pushed, market changes made.

When you get security alerts from other vendors, do yours typically include the first known date of vulnerability or do they include the date it was first reported, or just the CVE assignment date? When redhat/apple/microsoft push a security update do they list the sites or programs that were known to be abusing the bugs? Not that I've seen. Hell it is rare to see anyone even listing the first date that they were being actively exploited.

All of that would be better, of course, but it hardly seems reasonable to call google out when they're acting at least as responsibly as all their competitors.
Firefox 3.6.13 is also very slow and hard to respond, but I guess that's not your problem.
Care to explain what they "lied" about? It's pretty well documented that the apps were gone within 5 minutes of them being notified of a security problem.
So link trading is "black-hat SEO" now?

Yes, link trading might not be directly relevant for the user, but i consider it much less bad than link farming and spamming, so I'd rather call it "gray-hat" or so.
Large Scale Machine Learning and Other Animals: Mahout/Hadoop on Amazon EC2
you'd be better served looking at Hanson's posts on the subject.

http://www.overcomingbias.com/2010/11/at-least-two-filters.h...

http://www.overcomingbias.com/2010/03/very-bad-news.html

http://www.overcomingbias.com/2010/11/beware-future-filters....

http://www.overcomingbias.com/2010/11/brain-size-is-not-filt...

http://www.overcomingbias.com/2010/12/berserker-breakout.htm...
Very interesting set of docs. However, I think the language misses in two areas that have shown to be pain points:

* Blocking resolvers. They are a royal pain in an interactive GUI app. But I guess here the language goes with what the OS provides.

* The app developers usually do not care about the dirty underwear of the address families, and addresses, in general, when all they want is to use the reliable stream to a host of their choice. Connecting a socket to a host should be one line, not a half page of alphabet soup.

Also: there's a mention of SCTP. Great! Finally the world is not just bipolar UDP-TCP, at least in the book. But how to use it from the language API ? Raw socket only has an example for ICMP.
Would have been great to see an example for SCTP. Or DCCP, for that matter.
I agree with most of this analysis, and it is why, even though iOS/OSX/etc offer great stability, are esthetically pleasing, and well-designed, I won't go the Apple way (I have been using Linux for over a decade now).

Zittrain, among others have written about this as well:

"As tethered appliances and applications eclipse the PC, the very nature of the Internet — its 'generativity', or innovative character — is at risk"

http://futureoftheinternet.org/
it is possible that the consequences of the competitive tendencies implicit in natural selection, notably conflict and resource exhaustion, often destroy civilizations before they transmit a lot of radio. if this is very likely then it is likely true of us.
fn+backspace is delete.
The number of new iOS features you had to pay for is literally crushed by the number of those you did not have to. Yet this "Apple are a greedy bunch making you shell out $$$ for every single new feature" is incredibly entrenched. Was it historically even ever true?
This would imply that your OS version is pretty out of date by now.
There isn't a Facebook style "Give me a chuffing great zip" option, but there are lots of API wrappers to pull down your scrobble history (for example). It could be friendlier to non technical users, but it's entirely possible.
It does say "before it is published". Presumably you would want to vet a paper with trusted colleagues before releasing it even semi-publicly.
Could you elaborate on why you say OkCupid was very good at SEO? Is it mainly because of their blogposts, or were they doing other things right as well?
I'm somewhat heartened by this. I really thought they were just going to sweep it under the carpet and say nothing about it which would have really left the impression that they just don't care about the market at all. I'm particularly glad that they are following up with law enforcement - as fruitless as it may be, the only up front protection that the Android market has is from the threat that attempts to compromise it will be aggressively followed up. This should at least ensure there's a first line of defense against basic idiots who might try to put compromised apps into the market just for sake of it.
Seriously. Ever write a check for 10,000 dollars or more? Then the FBI has a file on you. It's just the way it is.
The key strategic asset is the unbeatable user experience and the core functionality

The number of apps, which Apple mentions frequently in their ads, is one of Apple's key strategies to bring people in to make a purchase. You can't really say that the "unbeatable user experience" is as key because you don't experience that until you've made the purchase and used it for a while, and you'll never find out if it's unbeatable until you've used something else. Something like number of apps is easy to compare when making a decision among platforms, just like screen size is easy to compare, because it's a number. Unless you're in the lead on the specs, you downplay or don't mention specs because the numbers are not subjective like "unbeatable user experience" is. Number of apps is one of the few objective measurements Apple continuously uses when doing comparisons.
I don't see how anybody trusts a VPN or proxy any more than their own ISP. It seems to me that using a privacy-focused VPN (1) makes you stand out more to anyone looking to bring down the proverbial hammer of justice, and (2) puts all of your access history in the hands of a potentially-hostile third party (the VPN/proxy provider, who could just as easily be subpoenaed, or even be run by an intelligence agency, like Tor).
In older news, the Journal of Cosmology is going out of business:

http://daviddobbs.posterous.com/journal-of-cosmology-going-o...

David Dobbs's Wired article on the "meteorite life" story is worth reading:

http://www.wired.com/wiredscience/2011/03/aliens-riding-mete...
That problem is alleviated by the fact that, for libraries, updates to documentation are commits as well, so even a very stable piece of software still needs the occasional commit to update a FAQ or somesuch. All in all, I've been surprised how well activity meters work when vetting software.
Havok physics engine comes to Android 2.3, demoed on Xperia Play (video)
Creepy...
If you want a bit higher-level package web.go is interesting: http://www.getwebgo.com/

(I was going to say it is excellent, but I haven't actually had a chance to build anything in it yet)
Venezuela's squatter skyscrapers; as the country declines
But once it's published, it's (seemingly) most-often behind a paywall, blocking further access to those who could analyze or benefit from it.
I like the idea, but I don't think it would work. Let's look at the aspects of a Hackathon:

- People might not like it, but part of hackathons is the social side: meeting hackers and other like-minded people. Meeting them online you can do anyday, wether it's on HN, Reddit, Stackoverflow or whatever else.

- The woah, they're doing something, i should too" feeling. You can partially copy that using desktop streaming and that stuff, but still it's too easy to just walk away from it, when you're not around those people physically. For exactly the same reason as why people are so much ruder online than that they are in real life: you don't see the people on the other end. Introduce webcams, you might say, but still I don't think any virtual connection can fully replace the feeling of a Hackathon.

-It's also way too easy to cheat. Fair enough, it's quite easy to cheat at Hackathons anyway, but again, people are ruder online than in real life, and thus more likely to cheat.

Okay, it might turn out to be a nice little event for a bunch of people, but I don't think it'd come anywhere near a "real" Hackathon.
Time has come for Google to make serious changes.

This entire saga raises several questions. Obviously, as Android’s popularity continues to surge, more and more hackers and malware writers will target it. Unfortunately, it’s clear that Google is simply in no position to mitigate these attacks before they occur. The “openness” of the Market is becoming Android’s biggest security weakness. Although most Android users have nothing but disdain for any app review system, I would welcome a change in the Market policy, whereby all submitted apps are screened for signs of malicious or fraudulent activities. Google might also need to give a serious thought to how it deploys security updates. Apple and Microsoft have full control over deploying critical system updates, unlike Google, which is at the mercy of handset manufacturers and carriers. Although the bug that was exploited by DroidDream was fixed in Android 2.2.2, hundreds of thousands of handsets were successfully compromised because Android 2.2.2 isn’t yet available for a substantial number of handsets. Unless Google can reign in the fragmentation problem, it might have to start deploying hotfixes for different versions of Android to patch critical security vulnerabilities, i.e. employ a Windows like model of distributing patches to different OS versions.
[The above bit is a repost from http://bit.ly/g9xIfg , which is written by me]
I applied for an internship at Echo Nest and never got a reply. It's not a big deal but it does make life easier for job hunters if companies respond with a definite 'no'. Even a form letter would be fine.
Seems possible a fair amount of that 9% simply aren't using it.
It's slow for me too (Chrome on Linux) but I thought that was because I don't have hardware acceleration working on my Acer netbook. What hardware/OS are you using?
Given that paper, it seems odd they chose the image for the article that they did.

The image in the Yahoo news entry is an image of: "Giant bacterium Titanospirillum velox". There are quite a few pictures of life-like forms in the meteorites, why not use one of those?
Please submit this! I'd love to read qualified commentary on many claims this blog post makes.
Is gravity "left-handed"? If so, why?
An interesting point... I typically have an application per desktop, so I didn't encounter that.

I wonder if there's a simple-ish way to solve this? It seems like the sort of thing a daemon could resolve.
If you can give it that much credit, yes, technically they do.
I don't really get it. So it's a very big database of music metadata, where apps can pull information from, but it doesn't include the actual music. So if Pandora is a transistor radio, then The Echo Nest is a big encyclopedia. And in my world transistor radios play more music than encyclopedias.
Best way to deal with these discoveries is just to forget about them and in a few years time look back and see if anyone stood up to challenge them. Reviewers can only look at the sanity of the paper, not at its truth. Even if they are very sceptical, they typically decide that a paper should be accepted because it is interesting and opens discussion. It is not the first time that structures like these have been found and published [1].

[1] http://en.wikipedia.org/wiki/Allan_Hills_84001
Review my HTML5 game Orbium
i'm amazed anyone agreed to those terms. i'd be worried that they were so pathetic a company that they couldn't gain business any other way - not exactly confidence-inspiring.
If twitter really were just a protocol, they'd be super broke.

They need money somehow, and the service is the only way they can do that. That doesn't mean I think they're doing it particularly well.

On a semi-related note, I wonder how feasible it'd be for twitter to actually become an open protocol with distributed servers - something like wave was supposed to be, but leveraging the user base to make it an attractive proposition.
It looks much better than before. As a novice flash programmer myself, I'd love to know how you go about creating tile sets. I've never done a 4x game, but I used to love them and there don't seem to be many out there in recent years.
It does, yes. But I haven't really felt a need to upgrade. Actually, somebody in another thread here said that they can do upgrades for you in Apple Store
Did they have to make it look like a conspiracy website?
What does it do? I am not sure I understand what dynamic fixtures mean
The algorithm could literally take 1,000 years with an input size of 10. That doesn't matter. At some input size, it will run faster than a different algorithm in O(n^2) that completes in 1 millisecond with an input size of 10.

𝜪 is an indicator of work (number of steps) for a given n, not wall-clock time. This gets mildly confusing when you give each unit of work a value of 1 unit of time, and then talk about it in terms of time-like labels (seconds, hours, age of the universe).

I don't see that there's value is comparing an algorithm of n = "some input size" to another one with a different 𝜪 of n = 10. When comparing, you don't care about the value of n, you only care about how n changes the amount of work. When actually selecting and implementing, you care about n (because n will often be limited by something else, say available memory) -- if your n is small and pragmatically you know that even a terrible, brute-force algorithm will finish in a second, you use the one that is easier to implement and put an implementation specific limit on n (and you also put a TODO or FIXME on it with a comment that says if n ever needs to be increased, a different algorithm should be used).
Finding fossil microorganisms and observing that they look very similar to those found on Earth would be an indication to me that the rock may not be a meteorite after all, or that it may be a meteorite from Earth (i.e. blasted out into space by an impact, then fallen back to Earth some time later).
Thumbs up. I thoroughly approve of both the strategy and the resulting rant.