skysight-inc/HackerNews huggingface dataset:
It doesn't want to read your Twitter direct messages.

Here's what's going on. The Twitter API currently has two levels of permission: "read" (can access your data, which includes your tweets and followers even if you have a private account, and unfortunately also your DMs) and "write" (can update your account, including posting new tweets, adding new followers, creating new lists etc).

Most Twitter users were unaware that granting "read" access to an application gave that application access to their DMs. This was a problem. Twitter opted to solve it by introducing a new permission level, "direct messages", which is write-plus-direct-message access. They plan to remove the direct message ability from the "read" access.

To give developers time to fix any apps that this would affect, the switch-over date for direct message access is set to June 30th.

Up until that date, the Twitter OAuth authentication screen includes copy that tells you that the application will be able to access your direct messages until June 30th.

This does NOT mean that the application author intends to access them - it just means that the permission level you are granting gives them that ability up until the cut-off date.

This issue is a big problem for people like us ( http://lanyrd.com/ ) who use Twitter for authentication, because it scares away potential users. At least after the 30th we won't have to worry about the DM clause, but we'll still suffer from users assuming that we're going to tweet on their behalf.

Unfortunately, we need "write" access so that the follow buttons on our site work (Twitter's new JavaScript follow buttons aren't appropriate for our attendee directory because we show 20 people on a page: http://lanyrd.com/2011/europython/attendees/ ) - we also need "write" access for our currently-in-alpha Twitter list management features.

The best solution I can think of would either be finely grained permissions (so we could ask for list and follow access but not send-a-tweet access) or the ability for us to specify a reassuring message to be displayed on the Twitter OAuth screen clarifying our intentions.
The money's in the picks, not the gold, son!
Are more billboards coming in the future?
When you sell things make sure they are yours, or you'll get burned by the decadent dinosaurs they belong to.
In-car big screen TVs, right in front of the windshield!
Two seater sized cars, but with only one set of very specious seats/recliners.
Great idea. Its already gone viral :) It might be better if you provide thin strips of each color rather than whole thumbnails as it can more accurately tell hows the skys colors is changing
I have no idea what "post cloud world" means, but other than that, I agree with your assessment. There's a difference between "your phrasing screams that you are an outsider and you don't have a full understanding of what you are talking about" and "I truly do not comprehend what you mean."

I would be surprised if readers of this site honestly could not translate the buzz-filled marketing speak into what they actually are doing.
at least, get in the line.
Five Reasons Domains Are Getting Less Important
$56K in 4 months from renovating Ecommerce sites
LuaJIT2 beta8 is out, with an ARM port and bytecode loading.
If brown dwarfs and giant wandering planets are as prevalent as we think they are, then there's almost always a port of call for humanity only 2 LY away for large swathes of the galaxy. If we can figure out how to create "seeds" of our civilization that are reasonably compact, we can send them across that distance in only a couple of decades using laser sails and other propulsion schemes not limited by the rocket equation.
If my understanding is correct that's not the issue here. Hashes are meant to be one-way functions, the developer can easily check if a user's password matches the hash, but it should be practically impossible to deduce the password from the hash.

What the user chose as their password should be irrelevant if using a good hash.

[Edit: I stand corrected on the effect of password length.]
Pity that this guy leans on McKinsey to support his argument. That will cost him some credibility, as recent events in the health care debate have shown that McKinsey is more than willing to discard any notions of scientific, impartial research if they have a political bone to pick.
I almost posted a new Hacker News story, but I saw this and figured my blog post belongs here better. It's an old post I dug it.

http://leftnode.com/entry/what-php-needs-to-change
> Salted hashes are a straight-up vulnerability.

I find this a bit of a misnomer. I understand what you mean in context, of course, but, strictly speaking, bcrypt is a "hash", and "salted" is always good.
So next: car alarm clock! So you don't end up sleeping half the day away in your work parking lot.
our 'niche' was the ability to adapt to a radically changed environment in all parts of the planet that we inhabited

That was probably the first time we transcended ecology. We keep on pulling this trick.
"What country is Nevada in?"

Spain for one. I know which Nevada the legislation was passed in, but your comment made the implicit assumption that everyone reading it is in the US.

"insufficient (read "nonexistent") public transportation is often noted as a predominantly (while not uniquely) American problem"

As is egocentrism.
No one said MeeGo was a bad OS. Nokia just didn't have the money to follow through. They ran out of runway.
Which currency is that? USD? I see Nokia E7 at $429 unlocked and Nokia N8 at around $379 at amazon.com. I don't see where that high 800s and 900s is coming from, unless you are talking about a different currency.
Sure, they can charge a monopoly price, and maximize their profits under a monopoly assumption. But with a good secondary market, can't they charge more, given that the product in question has more value?
Or you can do both, migrate everything to bcrypted SHA for now and then replace these with straight up bcrypt the next time the user logs in.

You ostensibly have a hash method identifier per hash, so just create "sha+bc" and "bc" along with your current "sha".

Also, why is the risk of a collision greater? It seems to me that, if anything, it should be lower, as SHA hashes always consist of a fixed number of bits, and thus aren't as likely to collide when hashed to bcrypt, assuming the length of a bcrypt hash is the same (or larger) number than a SHA one.

Basically, it seems to me that, if they're going to collide, they're more likely to collide at the SHA level, which is a problem either way.
Inexpensive DIY Tools for Open Technology and Science
Netherlands makes net neutrality a law
Settlements may not technically be in court, but they are the result of the court existing. (my comment about the $32,500 should have been attached to the comment above) Not sure how I clicked the wrong link.
Don't Cry for Argentina
OK. By the way, in case you haven't heard it lately, thanks for hanging around and demystifying this stuff for so many people. It's a huge help.
I would nominate Stuart's dependency mgmt blog entry for this page too:

http://stuartsierra.com/2011/06/01/dependency-management
Exactly, if these cars are statistically safer the insurance companies will notice that in a very few years. And then they will strongly encourage drivers, or should I say car owners, to get these.

Especially if you are in a demographic the car insurance companies consider risky, you'll get to choose between paying A LOT to dive yourself, or a hell of a lot less to have the car drive you.
There's something magical about watching patterns emerge from data
It's the same industry and same people. Also, our homebrew shows are mostly crap. Except Trailer Park Boys.
Solving CAPTCHAs using Probabilistic Programming
How many people would fall for it if it first asked for e-mail, said it was safe, and then "test your password too?"
They weren't embarrassed on the internet alone. It was in the local news media. Still not influencing the customers, but I'd imagine their parents were not happy about their kids buying 'racist' tshirts.
I think they understand this. What I'm not sure of is if they will have the sales ability to do anything about it.
the massive list of changes people want constitute a massive multiyear project. lexical scope....proper unicode...etc etc...these are not point release features

instead of waiting five years for these to emerge in php, why not just learn python now? everything on that list from what i can tell is tested and available in python today
Shouldn't you throw in a `sync` before halting?
As an American who is exactly as you describe, I agree. This may be a way to sell the idea to skeptical people of certain political persuasions, but the other benefits of driverless cars (greatly reduced numbers of death and injury, huge amounts of human time freed) will dwarf the gas efficiency improvement.
That is good info, but it still doesn't make sense that he didn't feel the need to license the photo.

Why did he think one type of art has more rights than another type of art?
I'm guessing they could have asked to take the whole rack as to not have to tell the hosting company about the raid and risk alerting the target. They also did the raid in the middle of the night which shows they were probably trying to avoid alerting the target.

They probably didn't have anyway to know which machine it was just which rack it was. They also probably didn't have to tell the hosting company directly just the facility that they were raiding.
It must be difficult to prove original art for something that becomes a meme, especially if it's created through a semi-anonymous forum.
Ask HN: Please review my project, picmos.me [Requires FB Connect]
Hello HN,

http://picmos.me is yet another easy to use Photographic Mosaic creation tool. It uses your Facebook graph, pulls your friends profile pictures and uses them to create mosaics of the photos that you select.

I'm well aware that this is not a great product and definitely not one of those things that improves lives. But the reason why I went ahead and worked on this is, I was obsessed with this idea and it became a kind of blocker to the other things that I want to do. I was also hoping that executing this idea will help me gain some experience building and launching a product.

I really appreciate any feedback/suggestions on the presentation and implementation of the idea.
A Trip Through Twitter's Lazyweb
Why Predictive Analytics is Important
Every time copyright comes up, there are always small, independent artists/programmers/writers who chime in and say "I love copyright! It protects me!" and every time I point out, no, actually, you only get screwed by copyright maximization.

I want to forcefeed this article to all of them.
"Corporations don't want LTS. They want RidiculouslyLTS."

Sure they do, but they also want 100% tax exemption, employees that will work 80 hours for 40 hours pay, and $0 fire and theft insurance. Companies want lots of stuff they don't get :)

My point is that it's not black and white unless Mozilla chooses to make it that way. Right now, it's white. For Mozilla to say: "Infinite incremental release is the way forward" is to say, "We don't care about your ability to plan releases in any way shape or form." That's pretty black & white. Any commitment to a release schedule would, at least, give them the ability to plan.

I agree that web browsers are not synonymous with word processing software, but the expectation that large corporations will simultaneously adopt web based technologies while throwing out decades of change-management process is just naivety at it's finest.

Large organizations benefit from economies of scale. This means reduced costs. This means one IT manager per five hundred PCs. This means you can't roll out software willy-nilly and expect your organization to stand. Any in-roads Mozilla gained with corporations will be quickly squandered if they stick to this strategy.

Again, I agree that the old pattern is not what we need, but this is upheaval, and that's not what works at corporations.
But there are rainbow tables, or tables of all of the MD5s/SHA1s/<insert favorite hash algorithm> for arbitrary strings. So the time's already sunk in.

8 days for one password is a very short amount of time comparatively (tiny for a botnet). If you use bcrypt, which you can force a certain complexity on, you can get that amount of time up much higher.
Pity that shouldichangemyemail.com doesn't exist yet. :-P
And not servers hosted in other countries? I'd be very curious to hear the thought process behind that decision.
This looks awesome. One thing I could see becoming an issue is in your best case scenario.

Say things are wildly successful and people come to expect that merchants will be taking a pic of your credit card with their phone. So you easily hand over your card to some random person to take a pic of it - assuming they are using Card.io.

However, what is to prevent nefarious people from just taking a pic with their own app or their own camera ?

So what would be good would be if there is some way to indicate (quickly) to the cardholder that the user is actually using Card.io to take the pic, rather than the Camera app - so they are not paranoid about people stealing their numbers.

Maybe turning the flash light red (is that even possible?) or something subtle that is a unique indicator that Card.io is being used and not some other app.

With Square, it is that little dongle - although I know that once Square gets big enough and the incentive gets large enough for people to create knock-offs of that dongle, I think it's much harder than say using a Camera.

Otherwise, awesome app.
There's lots of Exercise/challenge type resources for clojure online (and, very important, lots of devs doing them): Labrepl, SICP exercises in clojure, project Euler, 99 prolog problems

It's becoming a minor clojure tradition to port things from scheme and CL, e.g. Let over Lambda, Graham's On Lisp, Little schemer, etc.
LulzSec Attacks Brazil Gov, Petrobras
I was under the impression that DigitalOne wasn't even informed (they were in sweden or something) until 3 hours after the incident (from the NYT article).
Can't this entire site be replaced with:

<html>
<body>
<h1>YES</h1>
</body>
</html>
A new location software for Android
"Im Here Plus" is a combination of "I'm here" and "Where are you?"

"Im Here Plus" is a combination of "I'm here", "Where are you?" and SMS popup.
"Im Here Plus" allows you to use SMS text messaging to check the status and GPS location of any person on your contact list, as long as they have "Im Here Plus" installed as well. You may also choose to send others your current location via SMS, whether with just your GPS address or with an edited personalized location.
Anyone can also text you "where r u?" from any device and receive an automatic response with your availability (which you may manually select: busy or free), as well as your current GPS location.
It's great that it gave them TC airtime, but concrete traffic numbers would've been far more interesting to see.
I've found that you can just keep shoving marketing bullshit through badtranslator[1] until the message becomes clear:

> Salesforce.com remains a stock with much upside, according to analysts at RBC Capital Markets, as the company continues to control larger quantities of customer data and leads the way to a post cloud world.

becomes

> Royal Bank of Canada investment of foreign customers, Salesforce.com (NYSE).

[1] http://www.cheatingtranslators.com/bad-translator
Data without borders: why I want to change the world
Indeed. It is perhaps due to the 700mph, 6,000 feet in the air part that makes them especially jittery. True or not, I think most people feel safer in a car & probably feel like they are more likely to survive, due to 60mph 12 inches off the ground.

(While flying is safer in many ways like deaths per mile or per passenger, I would bet you are a lot safer in a car than a plane in the event of a crash. Car crashes are dangerous, but plane crashes are nearly guaranteed fatalities)
When injustice is law, rebellion is duty.
Imagine you have two hash functions F and G, both mapping from the domain of integers to integers mod 2^128. Imagine they are perfect in that if you hash all the integers up to some large N, each hash is expected to recorded exactly the same number of times (probabilistically).

Now clearly if I hash a password F(P) and another password F(Q) there is a 1 in 2^128 chance they collide.

Now imagine we do G(F(P)) and G(F(Q)). We first have the chance of 1 in 2^128 that F(P) == F(Q) which implies G(F(P)) == G(F(Q)). However, that is not all!

We now have a new 1 in 2^128 chance that G(F(P)) == G(F(Q)). So we have (about) a 1 in 2^127 chance that the passwords will collide.

But, none of this really matters. Collisions aren't what you worry about with password hashes.
Presumably most or all of these services will let you rotate your secret key, and Instapaper will do that. Assuming it was done rather quickly, then there would be no practical risk of unwanted access for any of the OAuth accounts. If the services don't let you rotate your secret key, well... they probably should.
It's not an argument, I'm just stating that it's not surprising to see push back when a wealthy person or organization goes after someone who's not wealthy.

Regardless of the merit (I believe it's fair use), Maisel was not harmed by this remixed album. Purely sending a cease and desist would have done the trick, there's no reason to try and squeeze cash out of it. That's why I think he comes out looking like a dick.
By him saying he's ready for the "post cloud world" shows that Salesforce is aware of the "buzz word" world we live in and that Salesforce is staying on the cutting edge.

It seems to me that they are interested in customer retention, being the go-to location for storing important business data, and that their business is much more concerned with having the best and most solid infrastructural, and they aren't simply creating a "cloud" for the sake of creating a "cloud". It's about what the "cloud" IS and what it's supposed to provide.

So, if the "cloud" isn't the best solution anymore, they will be ready for that.

I thought it was a pretty well done piece.
Linux_logo in 22 different assembly languages
It's hard for me to believe that bottleneck's recentness makes NO difference in the likelihood of the current observed amount of diversity (which is what "entirely contingent" means to me). I can buy "mostly", of course.
A Chinese girl exchanges her virginity for an iPhone 4
"...most applications don't use [Google File System (GFS)] today. In fact, we're phasing out GFS in favour of the next-generation file system that is very similar, but it's not GFS anymore."

what could this be? home grown? an open source project?
What was your goal with this comment?
A yes of Chicago's crime, in 30 seconds
This effort would need an analogous long term funding source.

No need to re-invent the wheel: turn the problem over to the religious.

The Roman Catholics has a long organizational history, millions of adherents, a large and functional bureaucracy, familiarity with generations-long projects.

Also, they speak Latin which will jazz things up.

I suppose Rome needs a reason _why_ to pursue this.

- Long-term people will be in space. They'll need ministry.

- If you're looking for the ultimate in isolation from wordly concerns for your religious, you can't beat the Oort Cloud.
The law has little to do with who the internet roots for. A rich guy can be simultaneously right and a dick.
Evil...but clever. Get that patent application going.
Data Without Borders
Rainbow tables don't work even against amateurish salted hash schemes.
3) Loss of jobs.
When we're heading to a future of robotic anything that will replace an entire profession, drivers in this case. What will be the economic effect of it?
FTC to Serve Google with Subpoenas in Broad Antitrust Probe
I don't think bureaucratic pedantry helps the situation; it's silly to call everything between 384 kbps and 100 Mbps "3G".

BTW, "true 4G" will simply be renamed to "5G" and there will be no confusion.
I am currently in the market to buy a car and couldnt agree with you more. I dont want my car to get obsolete because hdmi got replaced with displayport!
Nice article. I would've assumed you were so hungover, that none of that would've happened. (I would've replied that if someone had asked me).

It makes sense in a very practical way. You're a startup, and you really need to focus on that startup, no matter what happens.
It may be the fact that the airplane is in the air that makes the difference. Being 20,000 feet in the air is quite different than cruising along on the highway in a bus.

That being said, I wonder what the driverless cars would do for the blind/visually-impaired. It could be quite liberating for them. They wouldn't have to live near public transit/take jobs with public transit access. Neat.
The Home Computer Museum
This story has been hashed over and over again. Clearly it seems the best way to get information about LulzSec is to check their twitter account
A final nail in it's coffin.
No, this does not seem to be public knowledge. For all we know the Instapaper (and pinboard, etc) servers could have been included in the warrant.
> That might be just how I feel though.

No, I got the exact same impression. PHP is a language that takes away all the fun in programming for me.
I see what you mean, and I agree that it doesn't matter, but it's an interesting exercise anyway.

I disagree that there's a 2^128 chance that they will collide. Trivially, I can show you a hash that will never collide for up to some N, and that is F(P) = P mod 2^128. This will never collide unless P is more than 128 bits long.

My rationale, above, was that SHA constrains the space to 128 bits. Therefore, for different SHA hashes (ones that haven't already collided), the probability that bcrypt will collide might be smaller (or zero, as in my example above).

In reality it doesn't work like that, I know, but in theory you can't be sure that the probabilities of collision will add (or, well, multiply) up.
This is pretty much direct pixelated copy of the original photo. I think he deserved to get sued.

The derivative examples he provides below are copies of truly iconic images, while Miles Davis cover is a pretty mediocre photo by a commercial photographer.
A very old website, one of my favorites, that I thought would be suitable for sharing here. Please take your time to enjoy the images, in particular the exhibition photos of the museum :)
What are you talking about? There's no Nevada in Spain, GA. (Wait a minute... Oh. Gotcha.)

Seriously, though. "This country", as in, the country where I live, which is coincidentally the same one under discussion. You can relax a little with the righteous indignation.
> those artists are laughed right out of court

Not at all. ALL architectural works constructed after 1990 are now copyrighted in the U.S., so any photography of any vaguely new buildings/structures is an infringement. (Sculptures have long been protected.) Give it another 50 years and it won't be possible to legally take a photograph outdoors in any location where humans have built anything.

Since I'm certain people will downvote or post snarky "CITATION???" comments without googling, here's your preemptive cite:

http://en.wikipedia.org/wiki/Copyright_in_architecture_in_th...
The first car with Google Earth onboard, not counting all the cars with smart phone windshield mounts.
Our (CSS) Best Practices Are Killing Us
IPhone 5 Coming In September’s First Week
That's your new cover right there: http://marckremers.com/hn/md.png