skysight-inc/HackerNews huggingface dataset:
Actually i meant the GP to my post -- wisty. Not that it matters, of course, I'm just clarifying so my post makes more sense to you.

I generally disagree with your sentiments in your post but had nothing to add that really interested me to say.
The problem with this article's claim is that you can't precisely say what an entrepreneurs "idea" is. It's a problem of definition. What if facebook's idea was not simply to make a social network, but to make by far the largest social network in the world? In that case, their idea was paramount.
What's to stop you? the government making it illegal to run hacking tools like "tor" (see the silk road/bitcoin post on HN from earlier) etc illegal and forcing your ISP to record any use of such and block you off the internet (see france's 3 strikes, you as a person are not allowed on the internet law) and report you and then possibly criminally prosecute you as well.
That's what I was getting at. Too big a swing could, for example, hasten the expansion of the Gobi Desert, destroying millions of acres of arable land and endangering the food supply for a billion people.
Its nothing new to Groupon. Its a classic retail strategy - have sales or discounts on a continuous basis. In effect, many people do not pay the high-margin MSRP price.
Importance of Target="blank" when Blogging
Is it me or do the pictures portray a vastly different level of social prospects for each of these categories?
I can't speak for Groupon's financials (that S-1 is horrifying), but the other end of it can work quite nicely :)

It looks like Grouponomics applies to Groupon itself!
There is almost nothing HTML5 about this.
RockMelt Beta 3 adds deeper Facebook integration and chat
Apparently the SDPY spec is not finalized yet, so if anyone has an expertise to contribute, see here:

http://groups.google.com/group/spdy-dev/browse_thread/thread...

http://mbelshe.github.com/SPDY-Specification/
> After reading all of this, I'm leaning towards Python/Django but haven't used neither web framework I'm curious as to people's opinions.

Django has a good reputation for API stability, and has fantastic documentation (Rails has caught up, but for a long time Django was a standout). My 1.1 books still work for 90% of 1.3, and the 1.1>1.2>1.3 release notes explain and offer solutions for any changes they make (such as class-based views).

I dabbled in Rails & Django over the last 2-3 years, and took a big detour into Rails a few months ago. I like the conventions, but it's easy to get distracted when looking for plug-ins/gems to solve your problems. Every time I look back at Django, it takes me half a day to get back into the flow. Rails, not so much.
Sure. If they're doing that, I'd be tempted to call shennanigans.
I really love the distinction that a programmer programs, writing code and making executables, while a developer builds a product, and a software developer builds a product made out of code.

Programs and products are two different thing in this metaphor. A program is just something a machine can read while a product is something a human can use.
Well... bartenders make pretty good tips.
I'm wanting to rent a node on a microserver:

http://www.informationweek.com/news/hardware/unix_linux/2294...

http://gigaom.com/cloud/with-sales-booming-dell-sees-a-micro...
Didn't understand what you meant, care to elaborate?
Very astute. Gruber gets it.
Curiously, do you ever sell any shirts w/o a coupon? I mean literally, not figuratively, have you sold 1 w/o a coupon?
You'd think but as a Canadian who hates the cold but lives on a flat (400ft is the highest spot) island I won't be living here if the sea rises even a bit more.
This. If you want to tinker -- these things are a gold mine.
It was an asinine blog post, Cody. It strongly implied that the author of py-bcrypt intentionally sabotaged it. And, I disagree with your security analysis. Truncating an otherwise secure 192 bit hash to 185 bits is not dangerous. You are talking about percentages of quantities denominated in atoms-in-the-planet-core.
When they're attacking Sony it's "righteous" and "good", when they're attacking companies we like they're "bad" and "immature". They've always stated their intention is to create "lulz" and just do whatever damage they can, apparently people overlooked this when they were attacking people everyone "hated". Luckily Minecraft wasn't down for too long, some of us are directly affected by this stuff, sigh.

The internet is a shitty place.
David Pollak, creator of the Lift framework, on recent security breaches
Honestly (ex-Riot Games, League of Legends contractor) I wondered how well the infrastructure choices for their login server would hold up. There was a huge amount of complexity involved in it, which is REALLY hard to get right.

I just hope it wasn't code that I actually wrote that let them in. :) If I was betting, though, I would bet that it was a vulnerability in Adobe LiveCycle Data Services.
1) Agreed. Fully. Of my outside work time messing around on projects and such, 50% is reading HN, 50% is experimenting with new Rails plugins, or Ruby gems, or databases. I find on average, I end up finding something I prefer every 1.5 years as well.

2) Disagree here. Sure, you can't forget about it, but Rails 2 is perfectly useable. I'm currently managing a fairly substantial mix of Rails 2 and Rails 3 apps for various clients. If 2.3 works fine for them, and they want a minor feature every few months, it's just not worth the cost to them to upgrade. Sure, if major security holes emerge, patch and upgrade.

3) Agreed. I have a big gap between "things I play with on personal projects", and "things I'd use when I'm being paid at work". When I'm writing things for a client, I want battle tested code that I can predict against. I want to be able to say "That will take me a week", so I can bill, without the risk of going overbudget. If I take a new and shiny framework, and as a result of bugs in their code, or lack of documentation/6 month old blog posts being totally redundant and wrong, I end up slipping on the deadlines, that's not a situation I want to be in.

The thing that I really like is that Rails 2.x worked. I've got github, which stores old versions of gems and plugins for me to grab. I love Rails 3, and I teach new developers on it all the time, as I think it's far easier to learn and far more intuitive than Rails 2, but with Rails, I can take advantage of a fast moving easy to write system on new projects, while not getting screwed over on the old ones.
تحميل برنامج ريال بلاير 2011 -2012 تنزيل RealPlayer 2012-2013 
تحميل برنامج ريال بلاير 2011 -2012 تنزيل RealPlayer 2012-2013
Would you like to expound on why it doesn't appeal to you? I would recommend using the application as your main RSS reader for some period of time before making that assessment.
>>>Since you're relying on the cinemas' cooperation anyway, why not sell them a button to be installed under each armrest?<<<
Seems to me that you can have the same effect with Tattlr without having to hard-wire an entire movie theater with additional hardware.

There can be no abuse of the system because the theater will have access to the exact seat positioning of the complainer. Remember, people must check-in in order to use the app.

>>>Instead of relying on users downloading the app, and annoying their seatmates...<<<
I'm not sure it'd be that big of an annoyance for seatmates. As I said in a previous comment, users wouldn't be creating an additional disturbance by pulling out their smartphone and using Tattlr, they'd simply be piggybacking on an existing disturbance that created the need for Tattlr in the first place.

Example: Guy talking on the phone in the auditorium. Everyone is distracted by him. You covertly pull out your phone, and with a few screen presses you alert theater staff. Your seatmates will be too annoyed with the guy talking on his phone to be concerned with your antics.

Example 2: The sound in the theater goes haywire or projector goes dim for no apparent reason. You whip out your phone to alert staff with just a few button presses while everyone in the theater grumbles about the horrible sound and/or picture.

In short, you're not the origin of a new annoyance, you're simply piggybacking on the existing annoyance.
I guess David or Niels thought that 60 character hashes were a more manageable length.

That's a pretty weird design decision to use a 128 bit salt and then chop bits off the actual hash value to make the result a "more manageable" length.

The 128 bit salt wastes 4 bits in the base64 encoding. The 31 character base64 discards 8 of the 192 bit output bits (31/4*24 = 186).

If they'd just used "only" a 126 bit salt they could base64 encode it in 21 chars with no wasted space. That would allow them to store the full 192 bits in 32 chars with no wasted space.

So they threw away 8 hash output bits in order to save 2 salt bits.
no, you can force the browser to another port thusly:
68.231.158.1:553
The prices listed on everything is inflated $5, but we don't even bother 'redeeming' the coupons, the prices are just $5 lower in the computer. We really don't care, we just want people to feel like they're getting a deal and to think harder about looking at the shirts and buying one.

We also spent a lot of time and money making them cool, attractive and well made.
> UPDATE: The group now claims to have taken down the League of Legends login servers as well as eight other sites requested by users phoning in.

Their claim is to have taken on phone-in DRM that pissed off users -- to the point the users wished the servers to crash and burn. Pretty much similar reasoning to Sony hacks, if you ask me...
There has been an annual BRICS summit attended by the leaders on the 5 nations since 2009. Clearly it's a bit more than a clever media acronym.
I have evidence to the contrary.

I just went to a London Clojure User Group meetup on Monday. Stuart Halloway gave a talk on 'Radical Simplicity' which was well received. The event itself had 105 attendees and was free of charge. This was the first London Clojure User Group talk.

I wouldn't say it's losing steam. If anything, it's just getting started!
Why? It's not hard to write a quick and dirty levenshtein function, but when google gets it for me in 1 minute, why do it?

edit: just for fun, as a one-liner:

def levenshtein(a,b): return sum(x!=y for x,y in zip(a, b))

edit 2: and just to clarify, I know this fails if the lengths of the input strings differ, they were guaranteed to be equal in my code.
The making of iPad social physics puzzler Casey's Contraptions
When one has cookies disabled (and those days I believe everyone should) it throws Django error page:

> Forbidden (403)

> CSRF verification failed. Request aborted.

They should've checked that cookie exists. Or, better, not rely on cookies.
I think they want to project power. I don't think they want anyone to be indifferent about them.

Beyond that, it's almost impossible to know their motivations.
You're not anti-gun. You're anti-'private gun ownership'. You're fine with the state employing guns. It's an important difference.

Bongs are legal in the US. You just can't advertise them for use with pot. They are sold as water pipes.
While this may just be temporary, I don't see why it would matter if it wasn't. Apple probably also uses Linux and FreeBSD for things.
What you're suggesting is impossible.

>the government making it illegal to run hacking tools like "tor"

Do you think that there is nothing illegal that happens on the internet now? How long was it illegal to export encryption? How many people actually cared?

>forcing your ISP to record any use of such and block you off the internet

The encryption standards that we all use are the same encryption standards that are recommended by the NSA. Unless my ISP knows something that the rest of the world doesn't, it's functionally impossible for them to see what I'm doing if I'm either using tor, or tunneling out of the country on the back of a VPN.

Tor was invented by the NSA, by the way, for exactly this purpose.

Look at what Iran/Egypt/etc have done to try and crack down on internet usage. Or even China. Look at how successful that has been.

(It has been a failure)
HushMail has a java based browser that's supposed to be all client side, but last time I tried hush, they generated keys that were incompatible with GPG2.

But yeah, like you said, if you're only checking emails on machines that are secure and in your control, you might as well just install Tbird/Enigmail. And if you're at the library or a computer lab, you can't trust the client to be secure.
I don't see how that can be, given that the character that's chopped off can take one of 40 values... Or is it case sensitive? Still, nowhere near 256.
Reeder is my main web browser, actually.

It's how I access 90% of online textual content. I do not want to be presented with inconsistent, poorly thought out, ad-ridden web site designs. Just the text and images for articles and blog posts. Reeder lets me get in, read, and get out.
> Upgrading an app or parts of an app that have great test coverage is really pretty straightforward. It's only more difficult if you weren't following best practices all along.

Like people working with Rails in the the real world with real, less-than-perfect programmers.

Yes, if I'm an ideologically pure, saint-like programmer with 100% test coverage and purely idiomatic ruby, then upgrades should be a breeze.

Except the plugin ecosystem problems still arise-- even the 'perfect' programmer has to be perpetually upgrading to the latest-and-greatest plugins since the last authentication/taggable/whatever plugin has been abandoned in favor of the flavor-of-the-week.
Internet activity to a significant extent does not have national borders.

Mexico might be a good if rather simplistic "gun" analogy. Tons of illegal weapons flowing over from the U.S., arming drug runners and other criminals who are terrorizing (hmm, I suddenly realize the additional nuances that that word carries these days) the general population.

Back to computers: You can't make secure systems without having appropriate tools and research at your disposal. And we've yet to see any security effectively "legislated", especially world-wide.

So, make the jobs of those who are effective difficult or impossible -- or highly restricted and privileged through special sanctioning and/or the requirement of having very significant capital, investment, and influence -- while gaining no real security advantage. Yeah, that sounds like a good plan.
No problem. In order to use Tattlr, you would have to "check-in" using the app. The theater, thanks to the complementary Tattlr web app, would have instant access to the basic info of each user including their seating location. It'd be impossible for a person to submit bogus complaints without getting called out for it
I wish I could publish it, but my company isn't very much into open source. It's a standard context free grammar framework modified to generate output in a stochastic manner. So it's basically a stochastic context free grammar (SCFG). I can go more into depth in private if you like.

The phrase for finding word pairs in text corpora is "cohort analysis". I was a on research team that did studies of that; mostly finding them, not generating anything with them.

It's an interesting subject area.
Fun challenge, but not too difficult. The largest challenge was making the intuitive leaps to discover the missing information in the questions, especially for problem two. A bit of trial and error, and a few lines of Python made for quick testing of those assumptions.
Anyone willing to suggest something we could do?

Because the title on the top of this site will get very unpopular in the next couple weeks.
You know these concepts are explained in any first-year economics textbook, yes?
Muze: a musical instrument that plays with you
Obligatory link to Nate Lawson's article on in-page crypto: http://rdist.root.org/2010/11/29/final-post-on-javascript-cr...
I agree that implying the creator of py-bcrypt was malicious is asinine (although that was apparently not his intention), but dropping 8 bits off the hash could be dangerous. When you're talking about an attack against a perfect hash function, it would mean nothing due to the large size, but in conjunction with theoretical flaws in bcrypt it could be a big deal.

All that said! Bcrypt is still secure by all means and better off than damn near anything else out there.

Edit: note, such theoretical flaws in bcrypt have not even been proposed. Didn't want to make this seem worse than it is.
United States v. American Express, MasterCard, & Visa
I guess we will find out how this works with the next release which some informed people say it's going to be called 4S...
Maybe we read different posts, but I didn't get anything like an implication that the author of py-crypt intentionally sabotaged it. What I got was more of a "I'm not taking anything for granted because that would be a good attack vector."

I'll leave the rest of the analysis as to the effect of the problem to your much-more-knowledgable hands.
That gives me a good idea for further research, thank you.
Like others have said, perhaps biking isn't your thing. For me, I like to keep my workouts short and intense (<20min) and make sure I get the most out of them.

Here are some things that I do:

* High Intensity Interval Training. Basically I sprint for 10-20secs, walk for 30sec-1min, 8 times.

* Density Training. Set a timer for 15min, do 3 pushups, rest 10secs, repeat until time runs out (once you cant do 3 pushups extend rest period to 20secs)

Best part of each of these is they require no equipment, can do them anywhere, anytime and you really only have to do them once or twice a week.
Loyalty Should Be Reserved For Humans
It's not b64 encoding the final byte of the hash, not dropping a b64 character.
Scientists create hottest substance on Earth
For me, I honestly can't see how that's supposed to comfort you. They're gone from you now. It doesn't fucking matter if you're going to see them again, because the hurt is all about the actual data that you currently have. I can't wait to see my family again, but I still cry about them on a monthly basis, if not more.

Maybe I'm a more "thinking" guy than other religious types, but for me, religion is about understanding who I am now, how to deal with life now, how to treat people better now, etc. It's not about some mysterious heaven / hell thing that scares you into being a good person. Religion for me is separated from mythology, though they do play into each other. (IE the nuts and bolts of how a religion comes into being are important, but the teachings and purpose of said religion are much more important.)

Given that perspective, with a catastrophic event, "now" will always suck, without exception. You have to work through now in various ways. The new reality is what you need help with, not perceiving the person in some sort of blissful future state.

That's why things like "I love you", etc., play so much better for me. I need a shoulder to cry on when I dream about my brother as if he's still fine and was hiding. I need people to help support me through hard times, not people to deflect reality and pretend like it's all going to be ok.

</rant>
They can't overlap! I don't think the problem specifies that?

You have to interpret "break up" to mean "non-overlapping" to claim that the problem means what you're saying it means; I found 341 "contiguous subsequences such that the sums of each of the subsequences are equal", but they overlap.

(If you had said "partition" I suspect I would have got what you meant)
Out of curiosity, what percentage of people never redeemed their groupon purchase?
In the future, every startup will be funded for $15.
around 25-30%
The internet brings out the worst in people.
I don't think there is a correlation between quality user experience and desktop software. He breaks down the difference between desktop and web-based software only to falsely associate one with user experience and one with mass-adoption.

I think choosing between the two depends on what type of app you plan on making, the type of users you target, business goals and a ton of other options.

I love how he's correctly reframed the native vs web discussion but am disappointed he decided to make it a war again. It's not a holy issue: choose what's best for your business.
Wouldn't this make a successful iCloud even more embarrassing for Microsoft? They have the technology, but can't market it or make it easy for consumers to use?
Ah, I see. You are correct, then. Also, that would make it 64 times, if I were right, it seems.
>>...so based on this standard we would get around $50-60 for each Groupon (the TOS precludes us from talking details, so I am not going to say what our margin was)....The cost: Groupon is expensive. If someone buys a Groupon and jumps without buying anything else, we lose about $20...

Well that settles what your margin is...
No I meant must charge more than cost of production.
I think you're both right -- you in that joe is definitely an atypical small business owner, if my experience is anything to go by, but he's right in that a lot of the businesses that get crushed by Groupon aren't being run real well to begin with.

We do a lot of one-on-one B2B work. I really, truly, dearly love our clients. However, it's definitely true that most (nearly all) of them handle their business as though it's a 9-to-5 job. They come in, open up the shop, place orders, deal with whatever needs attention, and practice their trade for the day.

And that's fine! There's nothing wrong with that. They're happy, it's great all 'round. But, then they often get wind of the "next big thing", and they ask us how to get involved with that, without really thinking through whether or not it's the right fit for their business. They aren't maintaining the kind of customer tracking they should be, or follow-ups, or the kind of cross-promotions that joe described.

(We aren't yet, either, which is the only reason we haven't run a Groupon of our own. I'd love to, but we're not ready for it yet.)
How To Sell a Startup
It was an asinine blog post, Cody. It strongly implied that the author of py-bcrypt intentionally sabotaged it.

The guy found a design bug/implementation discrepancy in a bit of software with high security requirements.

He didn't know how to evaluate the security impact or what to do about it. But he knew enough to know he should take it seriously. This is commonly referred to as "being paranoid" and is a natural reaction given the situation. Commendable even.

How many people before him spotted this and didn't speak up because they (rightfully) figured they'd be ridiculed by the OpenBSD hyenas?

And, I disagree with your security analysis. Truncating an otherwise secure 192 bit hash to 185 bits is not dangerous.

I agree, especially given the relative sizes involved. But until recently there was debate about the safety of truncating hash values in general. Noting that NIST didn't specify any form of truncated SHA-1, people would say there was no guarantee that the "entropy was evenly distributed".

You are talking about percentages of quantities denominated in atoms-in-the-planet-core.

This is a common fallacy. There is no relationship between the cardinality of the possible hash values and the number of atoms in some planetary body.

In many (perhaps most) contexts, the critical security factor is the square root of that number. Shall we then look for another smaller planetary body with which to consider that number?
Gruber: ... Apple’s vision for “access anywhere” is “iPhone everywhere”.

I'm reminded of how Jean-Louis Gassée, head of Apple's Macintosh development in the late 1980s, responded when asked how they plan to connect Macs to the network. He held up a piece of phone wire and said "this is our network". This was a reference to Apple's proprietary LocalTalk protocol which could be used over regular RJ11 connectors.

The gist of this story is that Apple completely ignored the need for interoperability with the Mac. The iCloud has a whiff of the same hubris.
Contemporary Strategy Analysis: Text Only / Edition 7