skysight-inc/HackerNews huggingface dataset:
I've been wondering lately if the time might be right for the re-emergence of "guilds" i.e. organizations that promote the mastering of a craft. Not really "unions" in that the primary motivation would be teaching and improving, not bargaining with employers (though I realize that many modern unions do both).

A software engineering "guild" would seem to me to be a way to offer structured mentorship and certification of mastery without the need to also pay for years of busywork in humanities courses that, let's face it, are never applied by the vast majority of people working in our field.
فيديو انسحاب المصرى كريم كامل من ستار اكاديمى 8
فيديو انسحاب المصرى كريم كامل من ستار اكاديمى 8
فيديو انسحاب المصرى كريم كامل من ستار اكاديمى 8
فيديو انسحاب المصرى كريم كامل من ستار اكاديمى 8
فيديو انسحاب المصرى كريم كامل من ستار اكاديمى 8
فيديو انسحاب المصرى كريم كامل من ستار اكاديمى 8
http://www.almstba.com/vb/showthread.php?t=21574
The CEO's job
> Universities don't charge enough [...] there are an order of magnitude more applicants than spaces at many of them.

And that's bad?! What about public schools―free tuition!

Universities―all education and knowledge―should be free. It's unfortunate teachers and teaching materials are in short supply, and hence we have to afford these to only those most "willing", but stratifying education by cost is a very poor method.

Look at the UK. Some institutions can now charge GBP 27,000 for a degree―which may or may not be of any use!―which students will repay the rest of their lives.
The trouble, of course, with Cory Doctorow's experiments in alternative publishing methods is that his fanbase is largely a bunch of copyright geeks who want this kind of thing to work, so the fact that it works for him (and I have no doubt that it will) doesn't really tell you anything about the broader world, and whether Jane Q. Romancenovellist can get by with a similar system.
His analogy to exposing password hashes doesn't really work.

The primary reason you don't expose password hashes isn't that someone will break the hashing algorithm. It's that users come up with crappy passwords, and exposing the hashes would let an attacker do a brute-force search on the likely password space.

His other points are pretty good, though.
Html2haml.heroku.com up 670% in one year
Not really a start up per se, though I am working on it full time:

http://shavevideo.com/

Just got a great review in MacLife:

http://www.maclife.com/article/reviews/shave_video_review
Yes, they could charge $35/mo and still make the subsidyback... provided it costs nothing to provide the phone service.

Back in the real world, why would anyone want to own a phone company? Even the phone companies don't want to be phone companies anymore.
See also: http://en.wikipedia.org/wiki/Cooperative_Linux

"Cooperative Linux, abbreviated as coLinux, is software which allows Microsoft Windows and the Linux kernel to run simultaneously in parallel on the same machine."
"Having critical services (e.g. SSH) on non-standard ports"

I routinely do this. Not because I think it will enhance security, but because it will reduce the tsunami of braindead bruteforce attacks on my machines, and the associated resource consumption.

One night I woke up because my bedside MacMini (which I use for watching movies and listening to podcasts) spooled up its fan and was making a vacuum cleaner sound, something that I didn't experience before with this machine. With sleepy squinted eyes, I inspected the output of 'top' and saw SSH consuming 100% CPU or something. I switched off SSH in the System Preferences and the MacMini returned back to normal; and I went back to sleep. Next morning I moved the SSH service to another port (in the router) and haven't experienced this again.

My FreeBSD home server was bashed by a multitude of foreign clients, all trying to break in on port 22. The /var/log/auth.log showed hundreds of thousands of breakin attempts. When I reconfigured sshd to listen on another port, this dramatically dropped to almost zero.
Good point. Let's say, for the sake of argument, that each of them have their own salt :)
Exxon's corporate propaganda blog
Is this really controversial? As a commenter points out, the "opposite" effect is well established. Go to Google Scholar and search [bright light therapy circadian], and skim the abstracts.

You can find papers there on color temperature affecting melatonin and core temperature, too.

Anecdotally: I'm a F.lux user and I haven't had a severe insomnia episode once since I installed it, and that it in any case reduces eyestrain.
Live from the Hackathon
Well done with the "Europe" tag includes anything with the "London" tag idea.
In a world of virtualized services, blocking IP or MAC will also only get you so far. It's fairly easy to switch servers onto a different IP address, a different MAC address by simply using a different machine or configuration.

DNS is the most vulnerable part of the stack simply because its the one thing in the stack that is centralized (loosely speaking).
Female teachers’ math anxiety affects girls’ math achievement
About Law School Essay
The application essay into law school needs to be written very carefully. If this letter is not written in the proper manner, students can be rejected from law school. Therefore, learning how to write the essay will prove beneficial for these students.
My friends and I are currently working on our first product retickr right now. Our Mac client will launch this summer and we are hoping to bring a Windows client to market this fall. Initially retickr will be "another" news aggregator but we are working closely with businesses and niche users to provide a tailored solution. http://www.retickr.com
The point of a lot of the techniques he mentions is not obscurity, but avoiding being "low hanging fruit" for non-targeted attacks

For example, running ssh on an alt port = less likely to be picked up in a scan = less likely to appear in one of those lists of attack targets.

It's the old two guys being chased by a bear joke where one stops to put on shoes, so that he can outrun the other. In non-targeted attack situations little "obscurity" enhancements may mean the difference between being attacked and being skipped over.
1000 Year old Design Patterns: Talk By Ulf Wiger
It's not that hard to find more conventional success stories, typically selling exclusively through Amazon.com (not completely independent, but good enough for most purposes).

I have no doubt that this model can fail, but it doesn't take Doctorow to pull it off.
Based on what was mentioned in the article, the 'refining' you mention might well be a plug in. Tagging anything can be a significant task---tagging many 'anythings' creates problems of scale. Another thing to consider; if this is in place at the beginning of the information cycle, I suspect that it would be easier than if this is used to convert from older approaches. Still for all of that, interesting idea/work.
Science and Islam (documentary) is a BBC series on the topic.

https://secure.wikimedia.org/wikipedia/en/wiki/Science_and_I...
The problem with this technique is that it will not work for large numbers (in my build of node, for example, the largest number it will work with is 2^31 - 1:

(Math.pow(2, 31) - 0.1) // base number
2147483647.9
~~(Math.pow(2, 31) - 0.1) // works!
2147483647
(Math.pow(2, 31) + 0.1) // base number
2147483648.1
~~(Math.pow(2, 31) + 0.1) // doesn't work!
-2147483648
I love doing stuff like this for fun. Sometimes I try to get nice algorithms into tweets. Here is one of my favorites so far, returns the powerset for array 'a':

function P(a){for(p=[],i=Math.pow(2,l=a.length);i;)for(b=i.toString(2),j=k=b.length,p[--i]=[];j;)if(b[--j]==1)p[i].push(a[j+l-k]);return p}

I know that there are some big gotchas here, such as b and p being declared globally due to lack of var...but I gave up trying to gain an extra 4 bytes for function(a,b,p). Also the subset arrays are in reverse order.
Lots of people seem to forget to configure their firewalls. Nobody should be allowed to connect on your ssh port, except from your office. On the road a lot? VPN into the office THEN connect to ssh.
Those are actually two wires, one is permanently attached so that you can’t just pick up the iPad and take it with you.
So how do you quantify "less likely to be h@xxored by some script kiddy's scripts" versus "actually able to resist a focused penetration test"?

Are you saying the zero-day exploit "todo list" isn't a valid concern? Mathematically, perhaps there is no difference because the focused penetration attempt overwhelms the equation, but if I'm just "some IP" on the Internet, isn't the less knowledge about me better?

It is very similar to the "secret military facility". The security of the facility is determined by what would stop somebody who knows about you, but you reduce the number of times that is tested through the "secret" (obscure) part of the base.
While I mostly agree that the cries of "zomg security through obscurity" that one mostly sees on the internet these days come from people who are really just parroting a catch phrase, one shouldn't forget that the industry came upon that aversion honestly. Mostly, it seems, the bad old days of raw security through obscurity are behind us. Examples like custom protocols substituting for authentication, proprietary encoding substituting for encryption, etc.

So it seems quite possible that those who might mock running ssh on a nonstandard port or omitting a service version might never have seen actual pure examples of the practice. Perhaps in some years "defense in depth" will have become such a saying that people relying solely on not having bugs in their application will get bullied in a similar way.
I think just a bit of refining may be required. The filesystem would probably come with a few tags already, so there's less chance of confusing the basic ones. With an easy-to-use tag manager that keeps track of all the extant tags, and the ability to do batch operations across all tags, I think it would work fine. The tricky part will be integrating with systems used to hierarchical directories.

Instead of having operators like AND be path components, I would have the path separator itself be an and operator, or use & and | to just make logical expressions. As long as you're throwing out the hierarchy, you may as well throw out the hierarchical syntax.
This sounds right. Berlin, unlike London, has the right vibe for doing creative work. In London nowadays it feels like the three choices for your role in life are "banker", "football hooligan" or "curry shop owner".

It's also, though it's not mentioned in the article, much cheaper -- I think you'll pay about one third as much for your apartment in Berlin as you would in London.
Free Culture comes to mind, along with the author.

https://secure.wikimedia.org/wikipedia/en/wiki/Free_Culture_...
Alleged drug dealers will get due process for drug charges. That is not quite the case for the seized assets since "proceedings are brought against the property itself, not the owner. Hence they often have odd case titles, such as U.S. v. Eight Thousand Eight Hundred and Fifty Dollars or U.S. v. One 1987 Jeep Wrangler." [1]

[1] http://reason.com/archives/2010/01/26/the-forfeiture-racket
It's becoming harder and harder to compete in the IT industry from this side of the border.
all security i've seen depends on the obscurity of passwords. There is no difference, except in how easily things are spread and cached and logged (i.e. the only reason to not put passwords in URL query strings)
You have a good point about giving it a positive connotation like that, but a name like Jefferson would be cumbersome, too. Perhaps something like SafeNet. Just think about it, even when someone would hear something like that they'd be intrigued.

"Oh? Safenet?Is it like a safer Internet? Interesting. Where do I find it?"

Plus, you could almost see what the news headlines would be like: "Government tries to take down the Safenet". "Government wants to make Safenet illegal", "Why the Government doesn't want you to be Safe online", "What's so wrong about wanting to be safe online?" etc

Pretty much anyway you'd spin it, it would make the Government the bad guy. Why do you think RIAA names bills like "Protect IP", which is about censoring the Internet, or Homeland security wanted to make the SHIELD law, which is about catching whistleblowers and such. They named them so anyone who "dares" to go against them would be looked at as the bad guy. "How could you want to stop something like SHIELD as its name??"

Naming is not everything, but it can definitely have a big impact on perception of the general population, which is all that matters in the end.
I have no idea what you're talking about. Nobody with OpenSSH zero-day is feeding it through an Internet-wide scanner.
Twitter user experience hypocrisy
I'm currently working on a hybrid app that's a desktop app and web app. The desktop code is mostly done, and the web code is coming along nicely. It's very interesting working on both sides of the equation; both have their challenges. While I'm still keeping the idea close to my chest, it's an untapped market which could potentially be very big.

I think there are plenty of opportunities on the desktop-side of things; millions of computers are sold every month. While we may be entering the long-tail of dedicated computer sales, being replaced by iPads and other specialized devices eventually, it's going to take a while for that switch to fully happen. At least 5 if not 10 years or more; the keyboard/mouse interface still rules for content creation, and many people spend their days sitting in front of one.

However, it's becoming very difficult to release a desktop-only application without some sort of web component. Everything from note taking software, to video games, to music software, is all expected to be connected online somehow.

I'd imagine a sticking point for some corporate software is security. Most companies are not comfortable having their data stored on someone else's servers, potentially unencrypted. Some even have special agreements with governments and businesses preventing them from doing so. A lot of these companies are being left out of the cloud.

Two possible solutions include providing server software for IT departments to deploy (been there, done that, it's not pretty or cheap), or to have some sort of encrypted solution syncing to the cloud. The trick is, data must be fully and securely encrypted "before" going to the cloud. If someone breaks into the cloud provider's storage, or intercepts the data in-transit, they must get gibberish. The cloud provider can't read the data either; only the business. Just an idea to think about. :)
We do WinForms apps in .NET over here at www.dextronet.com and .NET components, namely Better ListView, written in C#, at www.componentowl.com
What competition? Apple isn't going to let another app store on the iPhone so developers will continue to be forced to cough up 30% of their earnings. Even if the Android Marketplace fees went to 0%, consumers don't care. You may think developers will be more prone to writing apps for the Android exclusively but they won't because they would still be missing out on their 70% revenue from the iOS app store.
try
http://www.appcelerator.com/products/titanium-desktop-applic...
http://udeployer.com/ here :). I'm trying to fix Windows software deployment by providing an apt-get like tool for IT agencies but more targeted to deploying to multiple remote computers instead of only your local machine.
By different environments, I meant other workplaces.

Best of luck!
Exploits don't care about version banners. You know what cares about version banners? Nessus. If blinding your own security scanners makes you feel better, go ahead, I guess.
restoring a deleted file and versioning comes to mind, if i am not mistaken?
Yes and no. If fewer people have degrees, the status will go up. If more people don't even consider them, demand also goes down and hence prices. So status and cost can both drop until it becomes cheap enough that everyone gets a degree as a matter of course. And then the cycle starts again...
Right, it's a classic case of sampling bias: how many Jewish filesharing copyright nerds who wear red capes and goggles self-publish?
I agree. Changing your SSH port number isn't even obscurity. It's obvious which port you've bound it to. Nonstandard SSH port numbers are just security through idiosyncrasy.
Why? I can think of another quick rule of thumb: never trust anyone who doesn't give explanation of the statements one claims.
Just a guess, but between his indep contractors and volunteer moderators (as well as all those members), I'm betting he doesn't feel too alone. I have a tendency to say "we" when talking about running a group I started and it has < 200 people :)
Article does not explain the technology. This does a little… http://www.scientificamerican.com/blog/post.cfm?id=storing-m...

Think "reversible aluminum refining" where all reactants and eltrolytes are molten metal.

Heading for $50/kwhr, which means something like 1000 cycles to pay for itself moving wasted energy to a sellable time period.

As for the investing, this may or may not be the right answer for energy shifting, but the world is going to know the answer a heck of a lot sooner thanks ton the investment.
Reminds me of lxrun:

http://en.wikipedia.org/wiki/Lxrun
http://www.ugcs.caltech.edu/~steven/lxrun/lxrun-FAQ.html#Q0....

lxrun also trapped syscalls, and supported running Linux binaries on Solaris, SCO UnixWare, and SCO OpenServer.

I used it in the late 90s as a quick hack to run linux binaries that were a huge headache to build on weird systems like OpenServer.
My deepest sympathies for your degree in psychology.

It seems that the best thing we could do for the university system is to stop treating all degrees as equal. We need folks standing outside the university gates on day one of freshman year going "Hey you, what are you studying? Cultural studies? Hahaha, no really, here's a calculus textbook, get to work."
Zuckerberg Wants A Facebook For Kids Under 13
Show HN: dmangame - a python AI game
over the past couple months, i've picked up an old project around writing AI in python. the premise is to code a strategy for an AI player to use in a simplified RTS game. the AI basically takes the seat of a human player and the human codes its brain.

main site: http://okayzed.github.com/dmangame/introduction.html

app engine server and match archive that runs and hosts games: http://dmangame-app.appspot.com

github: http://github.com/okayzed/dmangame

more AI: http://github.com/okayzed/dmanai

i'm looking for players, comments, ideas, etc - thanks!
Well some apps are only possible if they are on the computer. For my case I created a tool for letting IT agencies keep their software up-to-date on all of their workstations... this doesn't really make sense to be on the Web.
> [Peter Thiel's Stanford education got him] a job trading derivatives at Credit Suisse before he returned West to join the Internet rush.

Thiel got this job by taking a math test and getting all the answers right.
Isn't a good password just a really obscure combination of characters?
"A good problem to have"
a 'programmers guild' would be awesome. imagine learning to code at 14 instead of going to some worthless high school. you would start as an apprentice, watching an experienced programmer write code, helping fix syntax errors and spelling mistakes, while learning through osmosis. as a journeyman, you'd write simple unit tests, then more advanced functional tests, and then graduate by releasing your first app into production. by age 18 you could have four years of real world coding experience, while having earned a salary (albeit a small one) from age 14.
Reversing hashes, even thoroughly broken ones, is still quite impractical - it's collision attacks that you have to watch out for.

Of course, you don't break password hashes by reversing the hash, you break password hashes by just trying (variations on) dictionary words until one matches the hash. For that purpose, SHA-256 is not a good choice, since it's too fast - use PBKDF2/bcrypt.
I prefer web apps and open standards as well, but I think another "feature" in this case is that users don't have to have an app labelled "playboy" on their phone. My kid is always grabbing my phone to see pictures or play a game. I won't ever download a playboy app! Lots of guys have wives that would be offended as well.
As someone who just dipped their toe into the startup scene, the number of networking groups in the city is amazing. But it seemed very chaotic. the entire time, I was trying to figure out who I should talk to, and where to find them.

Its a great place to try and start something though. The creativity, along with the cheapness of this city is fantastic.
Having operators be part of the path itself actually struck me as genius. This way tagfs is 'backwards compatible' with current file managers and you can 'browse' the filesystem quite naturally. Having the operators as path separators would require changes to the filemanagers and the host of tools we already use to work with our filesystems.
Only with FF 4 has the browser been speedy enough to run on the typical kind of hardware sold with a Win2K license. Chrome is extremely fast and would un-obsolete so much more hardware even than FF4.
If that link doesn't work, try this one: http://sethgodin.typepad.com/seths_blog/2008/06/the-power-of...
Some institutions can now charge GBP 27,000 for a degree―which may or may not be of any use!―which students will repay the rest of their lives.

Twenty-seven thousand pounds, in the scheme of things, is chickenfeed. It's certainly much less than the opportunity cost of going to university for four years.

Students need to take responsibility for their own education. You've got four years, hundreds of different lecture courses open to you, and a five million book library -- it's a huge opportunity to educate yourself, but it's up to you to actually extract education from it. Many students will acquire knowledge which will be worth hundreds of thousands of pounds, or even millions, over the course of their degrees. If you haven't extracted a mere twenty-seven thousand pounds' worth, that's your own damn fault.

People who complain about not getting their money's worth out of university education are like people who go to Disneyland, sit on a bench near the entrance all day, and complain that it wasn't worth the money.
yup, I'm already doing exactly that. I use my iPod Touch (4th gen) as a phone with a voip app and a voip subscription.

I'm always near wifi except when I'm in my car, and I have a pay-as-you-go cell for those times.
Zeta Clear
Don't Buy Zetaclear Until You Have Read This Zetaclear Review and Learn The Truth About The Popular Nail Fungus Treatment.
Browser exploit packs absolutely care about version numbers. It's how they determine what if any exploits to push to a client. Nessus, on the other hand, will never look at a user-agent string. So while you're probably correct for one class of threats and targets (targeted and enterprise servers) I wouldn't agree at all that the world is as black and white as you're claiming.
I see no problem with comments like this. HN frowns on funny-ha-ha, not funny-hmmmm...
Tools for making websites for less
OT, but: all security has obscurity and you can't have one without the other: Do you salt your password hashes and hide [obscure] the salt? Do you not share [obscure] your private key? Good security severely restricts the amount of info that need to be obscured; it doesn't mean you can leave behind obscurity.

At the same time, being secure doesn't mean you should be wantonly non-obscure. Even if you are using SHA-512, there's just no good reason to expose crucial hashes.
And burn their very profitable relationships with carriers? I already do this with my iPod, but there is no way Apple is about to make it easy to make calls with an iPod when they make so much more off of iPhones.