skysight-inc/HackerNews huggingface dataset:
Yes, it is incorrect to assert that overseas students pay the "real cost". They pay as high as the market will take. The real cost will be somewhere in the middle.
Gilt-ii Turns Flash Sales Site Gilt into Auction Marketplace
Yeah, it'll be be hard to integrate in existing systems, one way or another. Thanks for your compliment.
Hmm... I didn't say the salt was a key (since hashes are one-way that would be silly, right?). I was referring to using a salt to enhance security on stored passwords and, in that case, I don't think that a salt is a nonce since it's used repeatedly (in either per-account or per-application usage) to produce the hash value to match the stored password hash. In this case, it's certainly not a public value.

Of course, if you're using an algorithm that demands that you
decide what to do with a salt, you're rearranging deck
chairs on the titanic anyways.

I'll bite: how do you store passwords securely?
I'm stereotyping a great deal here, but it feels like Windows users with a bit of expertise inevitably:

1. don't appreciate nice software (it's a rare thing, most programs are considered good if they don't have malware in them)

2. don't pay for software because they're 'smart' enough to use BT

3. don't care a lick about decent UIs because there's inevitably a free/open source program with that skates by on virtue of being free

The OS, as of Windows 7, is damn nice (though the terminal is terrible). The UI of the apps is almost universally bad -- most apps disregard the system UI theme for absolutely no gain, and they end up looking garish. Many apps that target the 'power user' demographic fall into a pit of endless customization, which presumes that users want to tweak their software using components written by random people on the Internet. It's as if no app on Windows is content to just do its thing, it always has to be striving to do more in a thoroughly mediocre fashion.
I've never stopped reading something faster than I did after I got to "'Feels like' is an important disclaimer here." and glanced up to see that it was written by Sarah Lacy.

Dear Sarah: don't worry, I think that London will not be that pissed.
Another related ramification of doing away with heirarchy and unique identifiers (tree paths) is not being able to have files with the same filename.

Say you have: /photos/london/DSCN0001.JPG and /photos/berlin/DSCN0001.JPG
And the relationships: europe contains london, europe contains berlin

Now what does the 'path' /photos/europe/DSCN0001.JPG resolve to?
I think it's a nice overview. I don't mind that certain things appear more than once as "leaf nodes", because it shows that the same methods can be used for different things. Visualizing this with only one "leaf node" each would have been more messy in my opinion.
I also think the differentiation of Classification and Regression is justified, because while Regression can be used for Classification, it's not quite the same thing.

I'm not an expert, but in my opinion the difference is that Classification is sorting a basket of apples and bananas into two separate baskets, while Regression is predicting which fruit will come out of the basket after X apples and Y bananas.
I learned a ton in college that my job could never have taught me. I received an education. Of course, employers want training, not an education, and there the disconnect lies.
That's really cool. I might get in touch.
Motorola Droid 3 Specs & Features
You do not use a salt "repeatedly". The salt needs to be unique per hash. Maybe you should stop offering advice on this topic.
I live in Berlin. It's a pretty good place to work on a startup - great transportation, excellent & cheap infrastructure and cheap apartments/office space. Also, a lot of universities with cheap students to work.

Another advantage is that a lot of european young people go to berlin, for example from france, U.K, holland, poland and so on. It's a city that draws the young upwardly mobile crowd, rather than the working class. So there is the sense of a diversity of ideas, and many different people doing different things. It's a city that does not feel very "german", it feels very european.

Berlin is not so great for people looking to work in the tech industry because there is no concentration of tech companies. But for self-starters, it's quite conducive.

I doubt that Berlin will really become the mecca for technology though, because I do not think it's easy to learn the german language, and in the end, Berlin is in Germany, and Germany is not very multi-cultural. London feels much free-er, English laws are much more conducive to small companies, and people already speak english.

Berlin imposes berlin on you, you have to kind of be the berlin type to like berlin, but I get the feeling, you can just be yourself in London.
Space Invaders on the street. Run
http://joysti.cc/ clickable
Snipd: Handy code snippets
Obituary for Tom West (of "Soul of a New Machine")
As someone under a ton of debt, I'd like to know the answer to your question too.

For a fun-time experiement, plot college cost vs. :

minimum wage
inflation
health care

since the 70s or so.

Right around 1980ish, health care and college costs started heading for the roof relative to inflation.

edit: I haven't worked the math to differentiate between average cost of ivy league schools and average cost of state schools. I think the current difference sits at 4x or so for list price.
> 'In London nowadays it feels like the three choices for your role in life are "banker", "football hooligan" or "curry shop owner".'

This is actually the most ridiculous things I have read in a while. There is so much opportunity in London right now, it's a great place to be even for those whose aspirations differ from "banker", "football hooligan" or "curry shop owner".
http://en.wikipedia.org/wiki/Salt_(cryptography)

In a typical usage for password authentication, the salt
is stored along with the output of the one-way function,
sometimes along with the number of iterations to be used
in generating the output (for key stretching).

Salt is closely related to the concept of nonce.

Two important bits there: salt != nonce (closely related); salt is typically stored for future usage (e.g. repetition) (I quoted the iteration bit, but am not referring to that in my usage of "repetition").

Edit: replying here since the thread is too deep. You've got a couple of issues there: you haven't answered my question about storing passwords; you've committed the "appeal to ridicule" fallacy.

Further: I don't doubt you know more about this than do I, but I'd love for you to educate me rather than ridicule me. I assume your consulting clients receive better treatment?
At least 51% of interested Wikipedians also do not completely understand the concept of a "salt".
Aquinas covered this. "If the assumption is made, the sensible appearances are accounted for. But this is not strict proof since they also could be accounted for by different assumptions."
Microsoft was up nearly 100% on the first day, and closed somewhere around 50-60% up.
> There's this person you are thinking of who is actually vulnerable to something an SSH scanner is looking for.

The point is that if a vulnerability gets discovered in future, he doesn't want to be on a list of "servers that are now vulnerable".

When he hears about the exploit, he'll fix it. But if the bad guys hear about it first, not being on that list is useful obscurity.

> If you think I'm full of it on this topic, just say so.

You're probably not full of it, but it's hard to extract much value from your comments.
Not really sure I agree, they're more expensive than more powerful windows laptops in the same size class. And I think I recall hearing that the ipad breakdown per unit is plenty profitable.

But I certainly do have to give you that nobody seems to match them in the same form factor, so that's reasonable enough.

Meh, I would have to say in retrospect that itunes music pricing is (or was) there as well, though not by Apple's decision necessarily.

Ok, I guess I should rephrase. Apple does not cut prices to beat competitors. They may set a price point initially that only works at scale, and rely on competitors not being able to match. But if Dell comes out with same-but-cheaper, Apple doesn't do price wars, and if Apple enters a market it's generally at a premium to existing brands. I still wouldn't expect cheaper wireless from Apple.
I also disagree with you. I consider the tree extremely easy to follow even though is not perfect. I guess some people use visualization more than others, which is completely fine.
For X11 users, there's also redshift (http://jonls.dk/redshift/).

I use it when using the computer at night as it makes for easier reading.
It does not support our languages. Is there a Ruby module with no C extension? A C# library? Lua? What about that really cool language coming out next week? What about C?

Exactly. I love having JSON libraries at my disposal no matter whether I'm coding in Python, C, Haskell, Racket, JS, whatever. That's hard to beat for coders like me (generalists).
Shouldn't minifiers worry about all this stuff?
I am another fairly happy charles schwab customer, but their UI/UX is absolutely awful. I've used ING Direct, Wells Fargo, a local credit union, Chase, ING Direct, and FIA Card Services, and the only one that had a decent UI was Wells Fargo. With more and more banking happening online, it seems clear that there's some opportunity for a bank that understands online and understands UI to make a big play.
Once every ~4-6 years or so someone will find a vulnerability in OpenSSH. When that happens, the list of vulnerable servers is "everyone running SSH". Maybe there's some attacker that is keeping a database of every SSH server on the Internet, but I doubt it.

I don't think it's hard to extract value from my comments. I think you don't want the value that's in my comment, because that value is "you are spending time and energy doing something that isn't providing the security benefit you think it is", and that's not fun to hear.
Sony loses control of tens of millions of cloud accounts and their gaming infrastructure disappears for weeks, and people still think cloud = reliable and safe, huh?

Even giant botnet infections have nothing on that.

There's a place for everything, yes. Definitely convenience to cloud services. I am not of the opinion it should be the default answer.
> Why would I provide a service for free when I could do it for cash? I know this will boil down to some altruistic argument. The goal of (most) businesses is to make money, not improve the welfare of others through good deeds.

To increase your the user base of your product, increasing reliance on your product, and thereby increase demand for support and licensing arrangements for said product.

Countless business have build their products and their business on top of that pattern. Both at the consumer end and developer end.

This is, in fact, a feature closed software cannot provide. The ability to continue to use and upgrade software after the developer loses interest in supporting the product.

Basically, open sourcing allows you to add features that you cannot otherwise add. Features that are valued by consumers. No one buys a product because it's closed.

Finally, if your products only advantage is being closed, it's only defense against competition is patents. So, unless you are playing the patent game, someone at some point will come along and create a replacement. And that will affect the money coming in.

> We are talking about software, not food or clothing. Digital goods are not physical goods so the comparison is irrelevant.

Why? Because physical goods are a finite resource? Your argument of "go get it for free and piece together yourself" also discusses a finite resource, "time", as well as "knowledge".

The comparison is relevant unless you can explain away time and knowledge.

> That is purely conjecture.

I disagree. Remove open source, and the software engineering profession would be far different from what it is today. The software engineering profession of today is built on the back of open source. It's not the only element, but to dismiss open source as not being a foundation of modern software engineering as mere conjecture is ignorant.

I'm not of the belief everyone should be required to open source their products. They decide what they want to do. Open sourcing something might require a lot of effort and time that an ISV doesn't have. That's fair. However, outside issues like that, open sourcing makes a lot of sense. Look at Mozilla and Netscape. Wordpress. Apache. Linux. MySQL and Postgre. All these products make the people that build those products money.

Why should you open source your product? I don't know. I don't know your product, or the business. Or what you are providing. However, what I do know is that if it's merely the source code that makes your product valuable, then their isn't much value there to begin with.

Just my 2 cents.
All those concerns are possible to remedy.
There's this person you are thinking of who is actually vulnerable to something an SSH scanner is looking for. What I'd like to know is, what is that person reasonably going to do when his portscan detector goes off? Why didn't he do it a month ago instead of waiting?

Auto-ban the source of the portscanning, and limit what the now-known-hostile source IP can do next.

This person is probably doing nothing more than an automated nightly security update. Someone running an exploit against SSH which may work is bad, someone unable to run an exploit against SSH because they didn't find it before being blocked by an intrusion detection system is better.

And, because it wasn't scanning a month ago.

I hope my comments here are of the nature of "My mind is boggling as to why smart people think these measures are anything but laetrile." Also: do you think I'm just making it up? Don't be passive-aggressive. If you think I'm full of it on this topic, just say so.

They are of that "lol, dumbasses" nature. That's annoying and unhelpful. The submission is an article where the author explains some specific thoughts on some specific potential security measures, your replies are of the nature "lol no; ha ha nope; wrong again". I don't claim your view is wrong, but neither are you giving any of us mere mortals anything more to go on than trusting your reputation.

Great, "SHA-512 is plutonium", that's gonna help me what ... be afraid of it? "None of these security measures do anything to improve security"? Well that's literally not true, so are you merely claiming that they do to little to be worth it? Or what?

"People do things they think are heplful but which aren't helpful so we feel less powerless"? No, we do them because we think they help. That's just an ad-hom.

Changing the SSH port to a random one makes a scan to find it 32,000 times more effort, on average. The author claims that makes it too expensive for people to scan for. You claim it's "obvious" where you put it so it doesn't help. Well it isn't obvious where you put it. It just isn't. You do have to scan for it.
It seems unlikely that he would be referring to the Silicon Roundabout crowd by "they city", so I assume so.
> Berlin imposes berlin on you, you have to kind of be the berlin type to like berlin, but I get the feeling, you can just be yourself in London.

I was with you up until here. I've lived in Berlin for nearly two years and the number one thing I like about Berlin is that it's hard to stand out because there is no one culture or "thing" that defines what Berlin is. My girlfriend and I live very different lives here and enjoy it both the same.
Design is not just an option
I use f.lux, but I wish the transition were slower; I want it to gradually change color over the course of noon or 3 pm or so to sunset, not the 20s or 1 hour choice that it currently has.

But otherwise, it's a nice program and does seem to help, although I'm sure everyone will have varying levels of success with it.
It'd be tough to argue that Java is better than C# (the programming language). The benefits of Java come not from the programming language, but from the ecosystem, the JVM, the libraries, and the platform.
Yeah, but if the press didn't screw up it would be easier to combat that. There are two main errors the press makes repeatedly when reporting on the Supreme Court:

1. Not distinguishing between the Supreme Court taking a case and making a decision on the merits, and the Supreme Court not taking the case. There are only a few things the Supreme Court is required to hear. Most of their cases fall into categories that they are allowed to decide if they want to take them are not. There are many more cases vying for their attention than they can handle, so they tend to only take cases that raise important issues and that have been sufficiently explored in the lower courts.

When they do not take a case, it (1) does not set any precedent, and (2) does not indicate what they think of the merits.

Yet the press often reports these rejections as if the Supreme Court decided on the merits that the appealing party was wrong.

2. Not understanding the history of the case and what the Supreme Court's decision means in the context of that history. In Campbell, for instance, one the issue of whether the parody of Roy Orbison's song was fair use, the district court said that since it was parody it was automatically fair use and granted summary judgement for the defendant. The appeals court said the fact that it was commercial and copied the whole song meant it could not be fair use.

The Supreme Court basically said they were both wrong. Parody isn't automatically fair use, but being commercial and using all of the song doesn't automatically make it not fair use. The case was sent back down for the lower courts to analyze using the guidelines the Supreme Court set out. However, the parties settled, so we never got to see how the lower courts would apply those guidelines.
NerdNearby: See all the social stuff (instagram, 4sq, etc) going on near you
for those interested, everett's son is an indie rock musician who is (in my ever so humble opinion) talented at writing uplifitng music. check out "blinking lights and other revelations" if you ever need a pick me up.
Physical Exercise & Check Out  Specific Ways Exercise Can Improve Your Life
There is an underlying assumption here: that Apple and the AppStore have the user's best interest in mind. The assumption is that the developer and Apple are both working towards the same thing.

That's been proven untrue with walled garden providers over and over again. Ever see a commercial for an Apple product? Apple has one thing in mind: the farming out of development to tens of thousands of little starry-eyed developers scattered around the world. As long as those guys keep cranking out things that make Apple look good and advance corporate policy, they're there to help both you and the user.

If you want to write inside the walled garden, have fun with it. Providing value to the user is the goal, right? In some scenarios it probably makes sense to develop in that fashion.

But not in every scenario. Don't go into this thing either blinded against using an AppStore or blinded towards using one. The truth is a lot more complex. I could list a dozen scenarios that easily would lead me to choose a stand-alone web app. "Technopolitics" or my personal opinion of Apple has nothing to do with it.
How do you then evaluate that (at least in this case), the celebrity that cheated is protected, but the person that that celebrity cheated with is not protected? That doesn't make sense. Due the to high profile of the rich celebrity, the other person's name will also be dragged through the papers (especially if they have been banned from mentioning the celebrity in question). What about that person's 'right to privacy?'
You don't think an attacker would hold on to the results of scanning for SSH servers? They just scan for days then throw it all away?

I had absolutely no idea what you were trying to say with your first reply to me. It's only by digging through lots of your other replies that I got the hint that it may be an attempt at sarcasm, but I'm still not sure. You are not supporting your assertions, or even making your assertions clear.
Due to the structure of Canadian government, there is basically no stopping this sadly.
Objective-C Shorthand (a Ruby DSL)
Updated on 22 May 2011 (the source is now available at bitbucket).

https://bitbucket.org/wez/pengwin/src
On this line of thought, she sees my that my friends are successful and as a gal with a healthy sense of competition wants to live up to her ability.

Also, being an entrepreneur and taking risks and being bold about my direction inadvertently put's pressure on her to do what her calling is.
1. Your comments seems premised on the notion that OpenSSH vulnerabilities are routine. They are not routine. They are not hard to keep up with. And if you do not keep up with them, nothing you do is going to protect your server. I am reading tea leaves to arrive at this conclusion about your mindset, yes, but it's still worth pointing out.

2. Blocking sources is a silly way to defend against a server. Anyone who is actually using SSH exploits to break into servers has lots of sources. Meanwhile: anything a scanner is looking for, you're not vulnerable to; if you were, you're already owned. All blocking the source does is make you feel btter.

3. Yes, you should be afraid of using SHA-512. Yes, that is the point of that comment.

4. "32,000" sounds like a large number on a message board, but write an evented port scanner† and see how big that number really is.

† Programming Challenge Level: 3 (Casual Comment On Hacker News - http://news.ycombinator.com/item?id=2317547)*.
"The obvious question to ask about Ockham’s razor is: why? On what basis are we justified to think that, as a matter of general practice, the simplest hypothesis is the most likely one to be true?"

There is an argument from computational learning theory. Specifically, there are many complicated hypotheses, whereas there are few compact (simple) hypotheses.

If a simple hypothesis correctly models the observations, it is less likely to occur by chance than if we find a complicated hypothesis that can model the data. So, everything else being equal, choosing a simple hypothesis has less risk.
Turning News into Fun - 8minutes Beta Signup
I just manually changed the Gemfile to 3.1.0.rc1 and fixed things that broke.

My next step is to fixup my morass of CSS and JS files to use the Asset pipeline correctly. That's probably another hour or so.
I agree that a startup should hire multi-talented people. But it's a bit extreme to say that startups should hire people who can do UI design, backend programming, and do business deals. Certainly such people are useful, but they're incredibly rare and are probably more interested in founding their own startup.

Also, I don't agree with the "just contract it out" philosophy. The problem you run into with contractors is that even if they're good, they don't have anything invested in what they produce. They don't have to live with it long-term.

I'm not saying that it's bad to hire contractors, only that you have to be careful with them. And I certainly don't think that it's a good idea to hire contractors because they're easier to find and fire than full-timers. In fact, many times it can be harder.
Yes. They scan for days and throw away all the results that aren't "machine I can log into".
Yes, as an entrepreneur who is comfortable with rejection, I have recommended trying this. I think for now she needs something with a lower rejection rate.
How I built my own house - without a mortgage
If a company with a large and complex web property, e.g. Microsoft.com or Google.com, asked you if it mattered whether they allow DNS AXFR, what would your answer be?
She has considered starting a blog, I will see if she is up for directing it in this way.
If the Muslims didn't burn down the library of Alexandria I wonder if the Renaissance wouldn't have come much sooner.
The Future of Work is Play