skysight-inc/HackerNews huggingface dataset:
No, "the medium is the message", and not really "the consumers". Again, back to Ben Franklin, the "medium" was the printed word, and the media still has that. Last century we got radio and then TV. On radio, the number of stations is tiny: Drive across the US and see that mostly the content is pop music, sports, and religion. That's all folks. Long TV had just 3-4 networks. Yes, cable TV has hundreds of channels, but for information my TV gets just ABC, CBS, NBC, MSNBC, CNN, FOX, PBS, C-SPAN, CNBC, BBC business news, and Bloomberg business news. That's still not very many channels.

If I were an executive at the head of one of those, then I'd likely go ahead and upchuck and put out the same total BS they do now. Why? Because it's about 99 44/100% light enterainment instead of information. They have an absolute phobia at getting at any very serious information. In particular, they have to stay way below the average level of HN. As I wrote above in this thread, apparently hated by several people, the contents has to be at the 4th grade except math at the 2nd grade and sex at the 10th grade.

You want to blame this low grade nonsense on "the consumes". Well, with more channels, e.g., via the Internet, we can get, e.g., HN, and that's MUCH better, more technical, more advanced, more thoughtful, and MUCH less just formula fiction entertainment.

With still more development of the Internet, we will be able to get some really solid information. Some such information leaks out in places now via university material, some quite specialized Web sites, some industry sites, and more. E.g., there's a Web site that wanted to talk about electric cars. So, I got into a big debate with someone. We had to get into capacitor math. So, I got out my college E&M text, read up on capacitor math, and typed in the math to support my position. The other guy didn't like my math. Finally the site moderator found a good expert on capacitor math, etc., had my post 'reviewed' and
pronounced correct. Got'a tell you, won't see any capacitor math on ABC, CBS, ..., not even PBS.

The media WILL "reflect the nature of the consumers" when we can have enough channels and bandwidth to partition the consumers into many thousands of categories. Then in some of the categories we will be able to get some really good stuff. Actually we have the channels and bandwidth now, but the exploitation of the Internet is not nearly complete yet.
Just seen the live presentation in London and it really looked interesting, even if really in its early stage.

Two demos available so far: https://www.socketracer.com and http://ssdashboard.com.

Also interesting that AOL is officially putting money in the project, and with the intention to keep it under the MIT license.
Hi, this is Paul. Like Hugh Hefner, I will keep it up. Bear with me, I'm in the pub right now.
http://www.google.com/search?q=%22flip+sites%22&ie=utf-8...
How major ISP's are failing on their User Experience, e.g. 1and1.com
You mean web search, gmail, android and other crap they produce?
> I've also consulted for very large corporations. The same disruptive ideology that applies to start-ups falls flat with large corporations. The biggest mistake is to take a unilateral position with them. They will fall back to IE. They will stagnate on old versions if we don't work with them. Is that what you want?

What I want is for corp IT departments to not pretend as if this is somehow an insurmountable change. Yeah, corporations are slow and risk-averse. How risky is it to upgrade the browser once per quarter? Are they not testing and upgrading now for the sake of security fixes?

> Let me clarify: I don't think 3 years is a viable LTS schedule for browsers. I don't know what the time frame is, but I'm sure it's not 3 years, and I'm sure it's not "We release continuously." I should have been more clear about what "similar" means when referencing Ubuntu. By similar, I mean that they should continue their march forward, but that there should be an occasional LTS release that is maintained for a longer, more planned interval.

Okay, I can understand that. I can see the value in dropping a version every 9 months with a guarantee of 1 year of security fixes. Or maybe drops every 6 months that get 9 months of support.

I think if Mozilla is committed to backwards-compatibility moving forward, though, this shouldn't be necessary. If they can't avoid breaking changes for some reason, then it is an issue. (One exception would be breaking changes in beta/bleeding-edge features. If you build your product on unstable CSS or whatever, that's your burden. And if you built your product on features that were only around for 3 months, then you should be able to fix your product quickly.)

> I'm saying it's naive (showing a lack of experience, wisdom, or judgment) to expect that this new development cycle won't have ramifications. Mozilla is free to do what they wish with their product. What I'm claiming is that it will come at the cost of market share in the corporate world. If they don't care about the market share, then go ahead and walk on it.

Thanks for the definition of naive. :) I never said it wouldn't have ramifications. I actually said the opposite. Corporate IT shops need to find a way to move more quickly. They need to change. Running everything on a multi-year upgrade cycle is ridiculous, and borderline incompetent (though the incompetence might be coming from higher up than the IT guys).
Forbes Top Givers: 48 Heroes Of Philanthropy
There is no way to separate out security from the other software layers. In a web applications and user agents everything is involved with security. I agree it would be great if they provided security fixes for obsolete releases but let's not pretend it would be cheap or easy. Someone would have to pay for that, the open source community is unlikely to deal with that level of configuration management drudgery for free.
> So what? Just because other people don't do it doesn't mean you don't have to also. Fortunately for us, there are a lot of startup founders here who might read this and learn something.

Yes I hope there are.

> I disagree. I think most people use SHA-1 because they know better than to store plaintext passwords. What they don't know is that it's terribly broken.

SHA-1 is the default on django and its easy to break that my entire point. It leaves a false sense of security.

> There are two problems here. (1) If you have access to the site's password database, there's a really good chance you have access to the entire database, and can look up how they're doing it. (2) Even if you can't lookup how they're doing it, you just try them all and find which one it is. I'd bet you money that if someone's hashing passwords, they're using one of {MD4, MD5, SHA0, SHA1, SHA2, DES}. If, god forbid, they're not using one of those and actually wrote their own hashing algorithm, you have even more to worry about.

They might as well be using ROT-13 if they are using any of those. Now with todays GPUs and rainbow tables the passwords might as well be in plaintext. The real solution is site security not password security.

> Or, you know, you could use bcrypt and be secure about it.

For how long? 4-5 years? Who will be maintaining your site then?
Services offered on Global Property Guide
The Sleep-Work Transition
2011 WWDC Session Videos Now Available
You can look at history as well. Australian aboriginal homo sapiens were isolated for 40,000-50,000 years or so without any speciation.

You'd need an isolation event and a VERY long period of time; we have much more control over our environment than the aboriginals, which would probably serve to minimize differences in selection pressures between isolated populations to a far greater degree. 50,000-80,000 years doesn't come close to long enough, IMO.
Ahh "Geez" the start of every great, thoughtful language debate.
There are 218 videos this year.

Can anyone who attended recommend where to start?
Just throwing it out there...and the truth is...it might not even materialize...but you never know.
I've argued that the Lump of Labor fallacy fails because it considers workers to be more fungible than they are. It is possible to create jobs for which no one in the existing unemployement pool is qualified to fill. That is a structural unemployment of 0%.

When that happens competition for the qualified labor goes up, and salaries rise in response. While the structurally unemployed[1] remain so and remain poor. This leads to a building disparity between rich and poor and that the problems such a disparity creates are quite well known.

[1] 'structurally unemployed' refers to a person who is unemployed and unqualified for all of the employment opportunities in their area. It comes from a similar concept 'structurally fired' where a company removes the positions that are held by current employees without creating other opportunities.
Moving the explanations out of the blog posts into a separate page or pages makes the problem harder, not easier, because it keeps you from omitting parts of the background that aren't necessary to understand the relevance of some particular result.

If you want links, here they are:

http://en.wikipedia.org/wiki/Field_(mathematics)#Definition_...

http://en.wikipedia.org/wiki/Cubic_field

http://en.wikipedia.org/wiki/Discriminant_of_an_algebraic_nu...

The thing is, those articles probably aren't brief enough for many people to stay interested, and they probably also don't go deep enough to make any particular one of impendia's results comprehensible. (And I'm also not sure if they're readable to people with only an engineering background in math.)

(In case you think I'm being snooty about engineers, I dropped out of college and have never published a theorem; instead, I have made my living writing software.)
Google publicly shares popular queries in search box.

If you are persistent with testing your password hash you risk making that hash public.
That may be true, just saying....it could provide another avenue of fraud if the best case scenario does play itself out.

Not saying other avenues of fraud don't exist or cardholders aren't as vulnerable without it.

Just stating what I think will likely be a side-effect, that these guys should at least pay attention to.
Digital Receipts
I can certainly think of scenarios in which this action was reasonable from the FBI perspective.

I don't like to be in the position of defending the FBI (my own personal and professional relationship with them is complicated), but I think the following situation is plausible (which isn't to say it's what happened, as we don't know):

FBI determines the originating IP address of whatever their investigation is targetting (based on published information, it looks like a "scareware" operation").

FBI determines the IP address is "owned" by an overseas hosting provider, and that the physical servers are in a datacenter in the U.S.

FBI obtains a warrant for the seizure of all associated computing equipment (which may very well include the upstream devices used by the hosting provider).

FBI executes warrant at datacenter, sees that the servers are actually blades in a chasis; takes entire chasis (as reconstructing the data later on may require that the servers be bootable.)

The very last forensic case I worked involved having to acquire evidence from a server which was hosting a web application by a hosting provider. This was a shared hosting scenario, so in addition to acquiring the targeted information, all other customers on the server were also effectively offline (as the server was being imaged, and later as the original hard drives were entered as evidence).

Now, obviously, that isn't the exact same situation as what is described here, but in the event that the servers were blades, I don't think it's outside the realm of possibility to think that the entire chasis would need to be retrieved.
Craigslist is not a non-profit. Those dudes are raking home tens of millions per year in profits.
It just totally fragments the node developer community.

Imagine the confusion when you're working with or contributing to two different libraries that have different indentation or documentation standards. Now make the language different, and mix and match different syntaxes for different languages. Should modules in JS accept patches in coffee? What about vice versa?

Not to mention that coffeescript then becomes an additional dependency, and while in itself that's not bad, I still consider less unnecessary dependencies a positive aspect to a library/framework.

Edit: Why downvoted? Is this not a valid concern?
ICANN opens up the world of top level domains
Why you'd be an idiot to pick 1000 mediocre programmers over 5 great ones
What do you guys think about this project? Digitalizing your retailer receipts. It seems to me a huge project where they will be able to get SKU level data out of it. It seems to be very cool.
There are two tools that come to mind. One is behavioral interviewing (which is also IMHO useful for interviewing technical candidates once you know they can code their way out of a paper bag):

http://www.udel.edu/CSC/pdfs/behav_interview.pdf

The other is using your network and references to actually get informed opinions about candidates' long-term attributes.
Please help us change Learning forever.
I have to admit, I don't know that I'd be willing to put in the effort myself unless you first persuaded me why cubic field discriminant distributions were so much more interesting than the other thousand things I could spend the next hour reading about. (Or listening to you about.) This would indeed be much easier face-to-face.

I don't think that means the work is unimportant, but I think of math as being primarily a recreation like painting or singing, and only secondarily something that needs to be of service or interest to others.
thanks. that is something i did have setup. its a very useful stop-gap solution. but at some point one does inevitably have to work with the platform itself, and in all fairness, i just feel 'safer' in Windows. simply because its quite the learning curve to learn development but then to learn about a new OS adds to that.

I do see what you are saying though, and its ideal for someone that isnt as unfamiliar as i
I agree, I would personally prefer it to be pure Javascript.
How is cracking down on copyright infringement related to Lulzsec hacking into websites?

Trust me, they've been working on doing this for a while, and they're trying to do it in as many countries as possible in the same time, so that they can give each other as example, and hope that people will take the new laws for granted. It's their evil master plan.

RIAA and MPAA are by far the most dangerous entities for our freedoms online, more than the Government itself is with their own initiatives for censorship. But what RIAA is trying to do all over the world is at least one level above what governments were trying to do already. People must revolt and put and end to this before it's too late.
I don't know how Obihai works, but if it uses SIP to talk to Google Voice, this will not effect them.
Really...all the downvoting ? Is it unrealistic to see that by attacking all these large companies as a 'headless' organization that can't be tracked, would force them to join forces with each other and the government to implement more stringent IP protection laws and get rid of anonymity online ?
Yeah but programmers get up-close practice. If people gave instructions to people and got to 'debug' the results and did it over and over, they'd certainly get better at it. Not that everyone is well-cut-out to program (by my readings on theze internets), I'm just pointing out the weakness in your analogy.
I think you mean they'll work for a piece of the reward, not for free.
Did Gender Inequality Start With the Plow?
> The real solution is site security not password security.

That does not imply you don't worry about it though -- it's defense in depth. In the same way sometimes you'll need to go through two sets of doors locked with different keys to access a secured server room (or anything else, for that matter), it's worthwhile to protect everything you can as best you can.

> They might as well be using ROT-13 if they are using any of those. Now with todays GPUs and rainbow tables the passwords might as well be in plaintext. The real solution is site security not password security.

Exactly my point. That's why you use bcrypt.

> For how long? 4-5 years? Who will be maintaining your site then?

First, the premise of that question is that bcrypt is going to be secure for only 4-5 years, which is entirely wrong. You can modify the work factor on bcrypt as time goes by. I could, for example, make it take twice as long to generate a hash every year. I could have the program do this automatically. As for you actual question, which isn't terribly relevant, either (1) me or (2) the next guy, who I hope will have knowledge about security as well, but if he doesn't, then I just have to hope he'd keep the workfactor increases in the code.
No. Not as long as they embrace homegrown, proprietary technologies as opposed to widely-adopted (ala WebKit) or open standards. Interoperability is still their Achille's Tendon.
don't worry, I understand, I pasted it for others

Yeah, it's not perfect, but nothing we have is. I don't know what more to say. It works pretty well for most things I've seen. Do you have any examples of projects which can't use something like valgrind for some reason, not just those for which it wasn't magic pixie dust?
Who’s going to save the World Wide Web?
I currently use a sha hash (with salt) but rehash it x amounts of times. I have changed x over the years to be larger to get an acceptable trade off in computation time.
Why is bcrypt much better than this? Is it because the algorithm is less gpu friendly?
It would be nice to know what this is. Learning can change all it wants, but no one will care unless they know how.
Kinda like this:
http://xkcd.com/300/
And we'll all live like Eloi until the Morlocks come out to eat us. /nah
No.

It should be the artist's choice on how their work is released, but beyond that, they can do nothing.

Once an artist has released their work, the details of how it is consumed, how it is interpreted, and how it is used will always be well beyond their control.

Much like a startup must pivot, so too must an artist live in the world within which they create their work.
Downvoting? Come on - there is always delete button.
Hi Kyle, we're just doing the card capture today. Many of our developers already had merchant accounts and were just looking to get rid of the pain of having their customers type in the card number. We scan the card and return the number via SSL to the developer who finalizes the transaction.

-Mike from card.io
How to program independent games
Response to Stross’ - 3 arguments against the Singularity
Right, but for the courts the question is, did they intend to violate the 4th or did they just screw up? Intent matters - in this case, whether they intended an unwarranted seizure of the server racks or if they just screwed up. Because they had a valid warrant to seize some servers from that data center, I think you'd have a really difficult time pressing the case that they Intended to violate the 4th amendment rights of the other people whose servers were on those racks. Negligence, on the other hand, is a much, much lower bar, much easier to prove in these circumstances, and should be adequate to secure damages - and frankly, I've got a lot easier time believing it was negligence in this case than an intentional violation of the other individuals' 4th amendment protections.
Good, I was worried I had too much RAM.
What you describe is basically PBKDF1. If you wanted to make it slightly better, you could go with PBKDF2. It's true that bcrypt is better in some ways, but you're fine with what you're doing now. If you really wanted to improve on things you could go with scrypt which eats memory also, but it's more difficult to get things to work right.
Responding to Alex Knapp at Forbes
I agree! And we are REALLY excited to let people in on how fun learning can actually be when you can learn from the best instructors in the world.
1. Are you saying that multiplications have a specified order? I asked that but didn't get a response.

2. The compiler is allowed to either leave the float inside the FPU or store it back to main memory after each operation, is it not? These give different results.

Somewhere around here I have a chart of the differences in floating point outputs of different GCC versions. And no, fastmath is not on.
Mac Geek Gab Premium Episode 338: Recovering Files, Choosing a Mac & More
Two Approaches to AGI/AI
It would be a lot less work to convert the people into software, and then transmit them via a normal laser beam to a receiving station.
Wow I didn't hear about that. Can you provide a source?
EDIT: http://news.ycombinator.com/item?id=2672037
Okay, thanks for the links. However, I hate to say this: I code for a living, and I can't parse a lot of this *t. I read the hirelite blog post a few months ago and found it amusing, but not very helpful. The blog's subheaders are:

Traction (nonsense marketing term; immeasurable hyperbolic bullshit; what you're in after a skiing accident)
Domain experience (.com? .net? .social?)
Marketing ability (ability to talk BS -- covered)
Fundraising ability (as above)
Product skill (uses the term metrics way too many times; "skill" with our product doesn't require Skill writ large anyway; that's the point of our product.)
Respect for development (we hope so)
Relevant connections or following (Dad? Mom? Facebook? We have those).

This, in short, does not help because it reads like what a non-technical co-founder needs to know to get a job with us, not what we need to find the right NTCF.
Programming is quickly becoming the new form of literacy. I think eventually everyone will specialize but programming is going to be at the root of everything whether it's biology, chemistry, physics, or music. I think there will be many more interdisciplinary majors and professions.
I didn't realize NowJS was a startup...

I wrote my own equivalent of nowjs in a few weeks about a month ago... maybe I should apply to yc?
No, no, a thousand times no.

It's not "reproducing a work at a lower quality." That would imply that the artist was trying to copy the original but could only get those dang pixels because all he had was a 1980s era computer and couldn't do any better. That's clearly not the case.

It's a different work of art inspired by the original, meant to evoke it but clearly apart in purpose, aim, and audience.

It's like saying that "Pride, Prejudice, and Zombies" was a poor attempt at copying "Pride and Prejudice."
A Capitalistic Fix for America's Broken Immigration System?
Aimi Eguchi joins other virtual, fictional Japanese pop idols
Et tu, Biomarkers?
Redolf is a simple online music service with playlist support
Why is bcrypt better than simply recursively hashing SHA512 ~2^11 times to produce an equivalent work factor?

Assume wall time is held constant at 1 second per password using both methods: is there an entropy loss or weakness associated with recursive hashing that bcrypt avoids?
To clarify, I assume you mean that using secure password hashes instead of insecure ones does not help users who use one-time effectively-random passwords, because those users are already safe?

That is true.

However, it seems to me that the combination of an effectively-random password and password hashing does protect users, because their password is not effectively crackable in a situation like this. Additionally, there's a tradeoff between how secure your password hashing is and how much randomness users need to put into their password: every additional factor of 1000 in the iterations of the hash saves you a random character or two.
(Node.js Windows server side) + (HTML5 + javascript + CSS on Windows 8 native ) == really really interesting
Randfish on SEO: Interesting Data from the 2011 Ranking Factors