skysight-inc/HackerNews huggingface dataset:
We kept the insurance we had in the states before. Due to obamacare our previous plan was shut down (as it became illegal to sell lower cost plans like it) and we were put onto a more expensive plan. We're researching our options. But we may end up buying insurance in the USA and then supplementing it with World Nomads coverage. They charge around $50 a month and provide $500k emergency transport back to the US (where your insurance will cover you) plus a variety of other benefits. WorldNomads.com

Some of the other companies we've heard about are mentioned in this article, but we don't have experience with them:
http://www.nomadtopia.com/faq-what-do-you-do-for-health-insu...

Sorry, I can't give a definitive answer on the solution, but this is an area where we're still learning.
Just like sites that can't handle a capital letter in a username. What is your database doing?
Unfortunately the silent limits of the password fields are very prevalent.

I found out the hard way after I'd started to use Keepass to generate and manage my passwords.

There are even sites that have different limits for the "Change password" and "Enter password" input fields. Eg change accepts up to 30 characters but enter accepts only 20 chars.

Obviously they don't even know why it matters.

I think the developer just silently presumed that no one would enter such long passwords.

The problem is really prevalent.
Simvastatin side effects - simvastatin drug review
Google voice is similar, most video conferencing is similar. Customers are not going to not buy something because of company shenanigans, most people wouldn't buy most things if that was the case. (Nike, Monsanto, Dole, Chiquita, etc)
My bank limits you to 20 characters, which I'll grant is decent.
But: NO non-alphanumerics, and, get this, is case insensitive.

This may just convince me to switch banks...
Gah, what can I say - it's our secret hot sauce...

We're working on it, and will try and have it shipshape asap.
As is the way it should be; by befriending you on Facebook I'm not saying that you are free to import my contact information into any old service that may use it to spam me.
Respectfully, I don't think you actually read my comment in its entirety. You can import email addresses into FB, but you can't get them out, along with a whole bunch of other info. FB UUIDs have zero meaning outside Facebook.
YouTube - Introducing the Chromebook
Facebook would pass over business deals to serve a grudge of one of their low level employees?
It's a good post and it reminds me a little bit of those old tv commercials from Qwest and AT&T about how you'll be able to "watch any movie ever made in any language" in a dumpy roadside motel or 'send a fax from the beach' that were run in the 1990s.

But that's not really science fiction to me. That's just iterative and incremental improvements on a global network.

There's not a whole helluva lot functionally different between Windows 3.1 and Windows Whatever (in that they're all WiMPs).

There's not a whole helluva lot different between a Mac Performa and the iMac I'm using to type this message (drive bay, hard drive, ram, cpu, etc. Similar designs and similar interfaces).

Yeah, Google Maps and GPS are neat but a real "the future is now!" moment to me would be man walking on Mars or being able to fly from LA to Paris in 45 minutes.
CSS lessons learnt the hard way
The power of CSS is overlooked at times. Having worked on a variety of websites, in this article I wanted to share some of the valuable lessons I learnt about CSS
As an engineer, I love statistical data or numbers I can crunch and use to make a supposedly more objective comparison between things. I believe the problem with standardized testing is we are trying to take that idea and then apply it to something inherently non numerical--the acquisition of knowledge. Contrast this with economics and I think there's a startling difference. In Econ, we participate with numbers, something easily quantifiable. In education we participate with our minds and we have no easy, objective, way to quantify this into convenient numbers. For instance, standardized testing is inherently biased against people who don't take tests well meaning the test will not accurately represent their level of knowledge which could then have further repercussions when they apply to college.

The problem is we are looking at this through an engineering lens. When looking for a quality teacher, other factors than results on a silly test should play a role. How do the students respond to the teacher? Is the teacher usually well prepared? Do they have a good reputation with the students for being fair? Are their lectures interesting? At some point, on the local level (individual school), I think parents and the administration have a good idea of who the good teachers are and who are lemons and I don't know if you could quantify this into a statistical system that is "impartial".
Where can you find a MD5 hash-to-source dictionary ?
The problem with that theory, is that no employee below a senior CXO position will ever get an employee contract that provides them _any_ level of protection. If you can't trust your potential employer, that employee contract doesn't give you, or your so called equity, a spit of protection. In a Private Equity, you can, at the drop of a hat, be diluted to nothing. A new round of funding can come in at a 2X, 3X, or, in some vulture rounds, 5X liquidation preference - effectively wiping out any value your common has.

Employees get no almost no protection from their employee contracts - 99.9% of the signing employees didn't write them, the company's who are hiring them did. 99% of those employees don't negotiate terms to their benefit based on that contract. Other than the Founders and other groups with controlling shares, most of the common is worthless while the venture is private, subject only to the good graces and manners of Sr. Management.

So, respectfully, I'll have to disagree with patio11 - when signing an employee contract in the valley, it's all about trusting the founders, and controlling parties - your contract isn't going to do anything whatsoever for you should Scrooge McStealYourEquity take over.
Thanks! This is perfect, I dislike that Readability redirects you to their own server. I know they have to adapt their business model, but it's killing the usability factor.
BTW, my favorite podcast is The Lifestyle Business Podcast:
http://www.lifestylebusinesspodcast.com/

The hosts are two guys who have created a million dollar business in the last three years while traveling. Their business is not some bullshit "blog"/earn money by selling tips on how to make money thing, it's a real business that actually sells physical products.

Everybody should check it out. It's a shame that they're charging for the first episodes since it makes it kinda hard to recommend to people (I discovered them before that), but their content is definitely worth paying for. It's probably the best audio-only business content I've heard.
The important thing with features like this is that you can't allow the user a way to disable it.

If it can be disabled, the first people who disable it will be developers, who will proceed to continue building websites that pop this up for everybody else, oblivious that it's pissing off every one of their users.

We already went through this cycle once with javascript error popups. Developers turned them off, then pasted in crappy 3rd party dhtml menu code, which in turn threw up warnings for every regular user to come down the pike.

These warnings need to be prominent and painful. And they need to stay that way for everybody, otherwise they'll just be an annoyance for non-savvy users, rather than an incentive to fix the 400 million sites that are currently getting this wrong.
Wow, didn't really expect hitting the front page, even less #1. Thanks for all the encouring comments! They're really motivating when you spend your spare time developing an Apache module to generate QR-codes.
In 4 hours we have had 32308 generated QR codes and 5656 visitors!
I intend to keep the service just as simple, but will likely add lilqr.com/qr+ for some of the more advanced features pointed out here.
Once again, thanks!
Yes, absolutely.

Although MD5 is a little on the short side and collisions can be generated for it easily, it would still be a noteworthy breakthrough for someone to produce a primary preimage for MD5.

That's what it would take for someone to find a working password for your account given your salt and MD5 hash.

In other words, there are still no known cracking tools that can do much better than dictionary or brute force against MD5, so a very strong password is still very strong and a salted SHA-1 password would be only slightly stronger.
It is quite possible to be displeased with the increasing erosion of privacy by both corporate and government entities while also finding most of these hacker groups to be juvenile at best.

Reality isn't black and white.
Who cares about password security? NatWest (UK Bank) don't
> I think the developer just silently presumed that no one would enter such long passwords.

But they had to make a specific decision to forbid long passwords; "lazy developer" or "silent assumption" doesn't explain the extra effort.
http://www.freerainbowtables.com/en/tables/
It depends how often I run the commands. Subversion -> darcs, git, etc. was like a breath of fresh air. I know that was going out to the network but still latency can be a killer.
https://launchpad.net/screenkey/

Had to hack it up a bit to show the shift key, and only the most recent keypress.

And gnome-shell-list has built in screen recording.
Would not « print0() { tr '\n' '\0'; } » work in most cases? Does your utility do something special to existing instances of \0? That's the only case I can imagine where the transformation is necessarily lossy and it's not clear what to do. I suppose in theory you could have newline normalization or something too.
For the simpler passwords, google.

I'm serious, I've had to reverse-engineer projects I've inherited with pre-set administrator users, and simply googling the hashes reveals the password to be "elm", "password", or "9234" or something.
He certainly wouldn't be in the wrong. 5k won't get you anything as far as medical care in the US goes. If he were unable to do anything, how could he possibly be in the wrong for not doing anything?

He could have continued to pretend like he only had 5k, and like someone with only that much money been unable to do a thing, but then he would be wrong. What he did was not, and what anyone else would have had to do wouldn't be either.
The strenght(randomness), length, transfer and storage is essential. Its the product in itself here thats limited and should allow better security for its customers.

So when talking storage... go that nice looking search field in your imap interface and type "password", any results? I guess its pleasant to never feel the need to delete any mail when you can search for it. Nice collection when attackers breach due to limitations in product.
Note that the first three examples can also be written in a much shorter form if you use zsh:

wc -l **/*.py
rm **/*~
grep 'import' **/*.py

I like zsh a lot for this small feature.
In my opinion it makes no difference that we have several fast engines where some are faster at some things than others. When executing in the browser you don't get to pick and chose how and where your application will be executed. If you run into performance problems on one of the engines you can: A) dismiss a subset of your users and their performance problems, telling them to use a browser with a faster engine (they wont), B) only allow certain functionality based on a user agent string, or C) limit your applications scope to one that runs suitably in the slowest of the engines you're willing to support. In essence, if the application runs great in browser A but chokes in browser B, are you willing to say bye bye to your A users to take advantage of performance gains on B? I've been in this situation, and in my experience I've always had to look away from the faster browser rather than the user.

Outside the browser you probably have a little more freedom, but it's not like you get to pick and chose in the style of "Oh, I'll execute this function in V8 since it does this faster, and that function in SpiderMonkey since it's faster there". For this reason, I don't think the fact Alioth only has measures for one engine would make a significant difference in the overall comparison. You'd be, for the most part, gaining performance in one place by sacrificing in another.

Anyway, in my personal experience, I've ran into performance problems in JS a lot more often than with C#. I also have to go through a lot more tedious practices to ensure my JS code runs as fast as it can, where as in C# Some.lookup.with.lots.of.dots.does.not.scare.me(). That's why your claim sort of surprised me. Then again, the last serious JS performance problem I had was 6 months ago (before FF4), so maybe a lot has happened in those 6 months.

By the way, I'm not too informed on how type inference is done in SpiderMonkey, so I may be completely wrong in mentioning this, but it sounds like they're trying to speed up a dynamic language by mimicking static typing. If that's how far they're going to improve performance, maybe soon enough JavaScript will in fact sit better in the Mono/.NET/JVM?
> About the "the Valley is moving to X" I can tell you our objective is not to move the Valley here

And yet the subject of the OP is: "Say hello to Appsterdam: developers aim to move the Valley to Amsterdam"

Of course, if it was a less clickworthy title like "Amsterdam trying to increase number of tech jobs", we wouldn't have seen it upvoted.
The correct answer isn't to click "yes", the correct answer is to click "no". The problem is that the correct answer doesn't give someone access to the content, and many, many sites are not in a position to do things correctly or don't understand what the correct thing to do is (I don't know why this is the case), so if the user wants to make any progress at all, even if they end up doing so insecurely, they have to answer in whatever way allows them to make progress.
Those bug reports should go to the site, not the browser. That's part of the problem.
The layout behaviour in both shellahape and bluetile is per-workspace.
For some people we're already there, just read this today: http://prog21.dadgum.com/101.html
Anybody interested in helping with a Ruby Google Chart Tool gem?
We're not living like tourists, we're working, a normal life. It is essentially the same as if we'd remained in the USA and done a startup. Yes, it is true, we do take longer and more frequent "vacations" than others (but that's in part possible because we live like raman lovers the rest of the time.) I think that's just part of a good work-life balance. The thing is, if we were in the states it would still be good to take such breaks, but it is much harder.

Whenever you decide to start a company with your partner, you're making a big commitment. You're taking risk of future reward in exchange for giving up immediate high salary (but horribly no-fun corporate jobs.) Previously we'd done the corporate jobs and the startup thing, and it was time for us to do our own startup.

For anyone out there considering doing what we're doing, the budget is what matters. If you can do this for the same cost of living, or less, than living in the USA, then why not do it?

What I didn't talk about is how much income we're currently making. And I didn't mention whether we were profitable or not, or whether we've passed the income we would have been making if we'd stayed in our corporate jobs. I don't want to go into that, because it isn't really useful for anyone considering this, as you have to make your own determination, but I feel safe in saying that I expect to live more comfortably in "retirement" than I would have if I hadn't done this startup.

Finally, I'm not sure what retirement is, really. I took a long break before, and travelled, and within a week of being on the road I was exploring ideas for starting a company. I had set aside 6 months for myself, didn't have to do anything (and when I came back, I got a job quickly, with the interviewers seeing my "employment gap" as something to be jealous of.) I don't expect I will ever stop working.

But, in my "later years" I do plan to travel more luxuriously.
Show HN: A naming service for Bitcoin user
I had a similar issue a couple of days ago. reddit let me set a password that was longer than what the login box would accept. I used the email password reset instead of firing up Chrome Inspector so I don't know if it would have worked had I got rid of the maxlength attribute on the input tag.
That's correct, the US does taxes by citizenship, whereas most countries do it by residence.
Usually something like this is just a sanity check. 16 characters is definitely a little stingy though, but I'd wager that a very small percentage of their user's ran into this limit (mostly those pre-encrypting locally like I do), so I think we're overblowing the issue a bit.

Those character restrictions are just silly and annoying though.
Can anyone explain why would you want a password longer than 16 characters? Even if it's unsalted, all lowercase letters and md5 hashed, it's impossible to bruteforce crack it. And people who use 16 character passwords are unlikely to have them all-lowercase-lettered so it's even worse for the crackers.

Sure, the 16 char limit may be arbitrary but even if you make it 50, tomorrow some outraged blogger will be complaining that he can't enter his 100-character password.
This is a purely ad hominem argument. His arguments can be assessed on their merits, you shouldn't dismiss them because of who he is.

And his central point seems to me to be pretty good: in a bubble like the 97-00 bubble, you'd expect newly IPO'd tech stocks to be soaring, not sinking. It doesn't appear that's happening.

There's a different question which is whether two or three specific companies (Facebook, LinkedIn, Twitter) are overvalued right now. But even if they are, that's not really evidence of a tech bubble unless tech stocks in general are overvalued.
My exact story.

Before I started making things for profit everyone just saw me as extremely good with computers. After people found out I made XX dollars, everyone started calling me the overly clichéd "next [Steve Jobs|Mark Zuckerberg]".

Because of this, I prefer not to give out sales figures anymore. When classmates ask how many people have bought my products, I respond "A good amount." and leave it at that. Being called the next Steve Jobs by someone is being alienated by that person.
Just put it in a GAE project I've been working on for the past couple weeks. Looks great so far!
Philosophy & Bias
Databases are stored all over, the user creates the md5 from a string and the webpage collect. When you reverse, they only check the hash against the database.

http://www.google.se/search?q=md5+reverse&ie=utf-8&o...
I would not be surprised if the subset of allowed characters was motivated by ensuring easy input cross a variety of gaming devices and console UIs. Of course, I also would not be surprised if this was due to sheer stupidity.
Also of interest: http://www.tuhs.org/
How is it growing in a hub exactly? Where do all founders of successful startups hang out? There are some startups out there in Amsterdam, but there are many in other cities too (Utrecht, Delft, Enschede etc.). Amsterdam is definitely not a clear winner as location to found a startup among cities in Holland.
Agreed, but only up to a point. To program it is fundamental to have a strong intuition as to what should happen, why, and how to get there. Doing that without some amount of manual computation is temerary.
A few differences, yeah. You get to keep the gnome bling (eg the overlay window). It also supports direct manipulation (mouse moving / resizing) and overlapping windows. Oh, and compositing works.

Plus, the floating mode isn't bad ;)
Quick question for you. Who was the second astronaut to set foot on the moon?
I use 16 letter or longer all lowercase passwords. They're easy to type and easy to remember. For example, my HN password might be ishouldbemoreproductive. It's hard to crack, but doesn't require finger gymnastics to enter.
Well, I'm not sure I agree. The correct answer is determined by how much they care about the risk that someone might be feeding them a malicious script. I think most users care more about the convenience of accessing their favorite site with full functionality than this security problem, as demonstrated by most people's totally lax regard for security in other ways.

(Of course, I'm sure that most users have no idea what clicking 'yes' entails -- I'm just proposing that if they did, they would probably click 'yes' anyway.)
Your example shows how the author's conclusions are wrong. IMHO the biggest milestones of Javascript life have been his libraries and the creative uses we have seen around them. From XMLHttpRequest to jQuery (and Prototype, Mootools, etc) and now Node.JS there have been highly disruptive innovations over this basically flawed language.

Maybe we should give more attention to the basic process behind this, creating libraries aka Programming Motherfucker.
It was just a metaphor, and while imperfect I think it does express some grain of truth (not all of it, naturally).
The World at War is a series that I believe shaped large parts of my life. It still colours my thinking to this day; particularly with respect to the Middle East.

I was 11 or 12 when this series first aired in the UK. It was on quite late at night, but my parents decided I should "stay up" and watch it. Good parents. The war was still raw with them, though they were tiny kids at that time. My mum was born in 1937, my dad was as bit older.

It is graphic, honest, and a since folk rewrite history as time passes, an essential historical document of what transpired in those times.

I urge you to watch it. Our recent history is the most relevant.

But let me put this in perspective. The American Civil War started 100 years before I was born. WWII started 72 years ago. What seems almost unreachable history, becomes almost tangible as you get older. And I'm not that old!
As an example, I use Evernote on my laptop and phone. I never need something like this, though, because Evernote synchronizes my data across devices. Likewise, if I want a convenient link for a long, hard-to-remember url, why not just use a url shortener?

EDIT:

Ah, I think I see your point now. The hypothetical website doesn't have an associated mobile app. If I'm reading the site on my laptop and want to switch to my phone, I could scan the QR code rather than typing in the url.
Gamezer, قيمزر
I never wanted to retire at 60, I wanted to retire young. I picked a date in the 1990s by which I wanted to travel full time.

We missed the date by a year-- exactly the year it took us to get ready for this.

Takes a lot of time to get rid of a couple decades of accumulated junk. That's one of the bigger inhibitions. We didn't put anything but a couple small boxes in storage with friends, we got rid of everything.

Sort of our "burning the ships" moment, but also, the thing is, it was mostly unnecessary.

Like in fight club - we thought we had the sofa thing covered. Forget that. There will be more sofas in the future.
Yes, and running a marathon is just putting one foot in front of the other over and over. Everything is incremental. It's how we get from "here to there" in every conceivable sense, but it's ok to step back sometimes and marvel at how far we've come. Just because we're not colonizing planets doesn't diminish all of our other accomplishments.

The glass is half full. I'm certain of it.
I just googled "md5 decrypt" and used http://www.md5decrypter.co.uk/
I have often seen password fields that are only limited by their attribute. Eg

<input type="password" maxlength=20>

You're right, if they actively limit the character set and the length, it must have been a conscious decision.