skysight-inc/HackerNews huggingface dataset:
The last I checked (a few years ago), there were two versions of the ThinkPad stand-alone keyboard (old, and new). The ergonomics differed enough that there were plenty of comments on this. So, when looking at information on it, make sure you know which revision the person is talking about.

I seem to recall:

+ Differences in the flexing of the keyboard
+ Differences in the "wrist rest" shelf in front of the keys.
+ Perhaps some differences in keys / key placement / layout.

But it's been a while.

(I never ended up buying one, myself.)
EFF, ACLU argue e-privacy case in VT Supreme Court
A huge point this article is missing is just how dangerous open data is to the government. Imagine having a central place where you could vote and discuss legislation. You'd be able to see just how much politicians vote in the best interests of their constituents. This would have a major effect on re-elections and the way politicians voted.
Can someone explain what this does or point me to an explanation?
On my collocated server, I use encrypted LVM for all of my filesystems (except /boot, of course). On my next hardware upgrade cycle, I'm going to install a USB gyroscope (inside the chassis, using one of the front USB headers) and write a daemon that will issue a `umount -lfa && halt -n` if the box is ever moved.

Note that this isn't simply to keep prying eyes off my data; I live near an overdue earthquake fault line. When it does finally give, I should have a (slightly) better chance of the machine coming through intact.
EU to Web Companies: "Sort out Privacy by 2012, or Else"
That wouldn't get them a share of the momentum and mindshare that node.js currently has.

Perhaps they'll help get it working as-is, then help with a project to make the framework more engine agnostic, then move over to using theirs instead of V8.

The cynic would suggest that "extinguish" comes next, though I can't see that working for them in this case in this day so maybe they'll be sensible/good enough not to try that one...
This is already sort of happening on turntable. The other night Sir Mix-A-Lot was DJing in one of the rooms.
scrypt slides: http://www.tarsnap.com/scrypt/scrypt-slides.pdf

Takeaway: Cost to crack one MD5 password: $1. Cost to crack one scrypt password: $50M to $200B.

You want your login to be slow compared to the rest of your application. It's okay to take half a second to verify a login.
And in the even farther future, people will look back on the time when it was legal to have a human driven car the same way we look back on safety standards in the early 1900's
if i'm understanding you correctly, you're wrong. it's just another layer in the system (one more function in the mapping from your data to magnetic patterns - a function that's completely reasonable, predictable, etc, just hard to guess). the problem is that you need to enter the password on boot, which makes automated startup difficult.

for example, my laptop disk's main partition is encrypted. i need to enter the password when i boot, but nothing terrible happens if i lose power or the system crashes or whatever.
I wonder here if a "loser pays" rule, where the loser pays the other party's legal bill in part or in full, would have encouraged the author to pursue his defense longer.
As much as I like MySQL for a lot of purposes, it still has some catching up to do on PostGIS for applications requiring massive amounts of geospatial queries.
Good point. It also means that it's not a repeatable marketing angle for us.
AMA: Meetup founder & Polaris Ventures EIR Matt Meeker (mmeeker) on Sprouter
They'd reduce traffic jams simply by behaving consistently over time. A very large number of traffic problems are caused by distracted/daydreaming drivers, aggressive drivers, overly cautious drivers over-braking, etc.

Consider the situation of lane-merging. Studies have shown a zipper-merge at the end of the disappearing lane to be the most efficient method. Yet human drivers create huge traffic snarls in these situations based almost entirely on their emotional reaction to what they perceive as 'fairness', which hinges on a thoroughly baseless concept of 'winning' in traffic.

Introduce driver-less cars and --with no other changes to traffic patterns at all-- the rising incidence of proper zipper-merging will reduce the frequency and severity of traffic problems.
"Beware of false clouds" is my favorite line. It should continue, "They come to you with miracle solutions, but inwardly they just want your money."
Thanks for the links, geekfactor! Yes, it's a few domains...

http://SpotBanks.com, http://SpotBanks.in, http://Manage.SpotBanks.com, http://Manage.SpotBanks.in all the the technology, trademark, twitter account, FB account and content. Previous sale was a marketing ploy.
Should they get better forensics people? Absolutely.

But, steel yourself: a very good forensics pro would probably have them acquiring expansive warrants for hardware seizures, because very good forensics pros are paid to foresee all the crazy things colluding providers and criminals can do to hide evidence.
Prior releases of oil from U.S. emergency stockpiles
Hi gang, this is Mike from card.io.

socmoth, CrazedGeek, and tbgvi are right that this is considered a CNP transaction and rates are higher. However, our focus is on mobile developers, not retail merchants. By taking friction out of the mobile checkout flow for those developers (because customers don't have to type out their cc number), conversions are higher, and thus revenues are higher.

Regarding the user experience: folks are used to scanning barcodes with RedLaser, business cards with CardMunch, and checks with PayPal and the Chase mobile app. If we can make credit card purchasing easy and fast on the phone, that's a good user experience.

Thanks for the feedback!
The CIA doesn't even need warrants.
I was actually aiming towards general project management. But, I can see how it can be integrated well with zendesk/sifterapp.. I'm not really sure how integrating with github for would work for project management.

thanks for your feedback! :)
Maybe measure your BAC according to your breath or something.
Make your team feel respected, empowered, and genuinely excited about the company’s mission.

- Tim Westergren (@timwestergren)

http://startupquote.com/post/6832810913
To anybody considering OFBiz... I recommend you run away, screaming in terror, and get as far away from it as you can, and stay there. Seriously, looking at the code for OFBiz is like reading from the Necronomicon... it exposes you to horrors that mortal men were never meant to be exposed to. Read from the OFBizicom and your eyes will start bleeding black oil, your skin will break out with festering sores of malfeasance, and your dreams will be plagued by nightmare visions of death, devastation and destruction for all eternity.

OTOH, if you REALLY like XML and think that XML is a good way to do everything under the sun, including defining the syntax for your own bizarro programming language... then jump right in.
That brings up an interesting point: can the FBI seize EC2 servers?
is there a better solution that encrypting data and putting the password in the source? obviously this is for cases where you can't use a hash.

it seems to me that, at least, it would make sense to have the db and web server physically separate in that case (although i guess someone stealing hardware is not normally a common scenario).
There has been some academic work on this (CIDR'05), but I'm not sure if it has been used in practice.

http://ilpubs.stanford.edu/659/
scrypt is better than bcrypt, but not by the same margin that bcrypt is better than salted hashes. Salted hashes are a straight-up vulnerability. bcrypt is a best practice.

Note that almost nobody uses scrypt. We don't recommend it, not because it's insecure, but because it's painful to implement for most companies.

But use either. Or just use PBKDF2. All of the adaptive hashes are fine.
It's doubtful the evidence was illegally obtained. The warrant was probably for the hardware, and was probably overly broad allowing for the removal of more than was necessary. That's been the routine since at least the mid 90s. There are plenty of cases where the FBI has walked into a data center shown a warrant and walked out with complete racks of equipment most unrelated to their actual search because the warrant allowed them to do so.
If you have nothing to do this weekend, help us log some speed limits at wikispeedia.org .

Advertising is not our model, saving lives is.
So, basically a RAID array? You'd have to have a fair amount of redundancy, to make sure that if your Dystopiastan server gets taken down, your servers in Freedomia and Libertania have enough data to continue serving your users. (And yet you can't have so much redundancy that a single country could rebuild your database if they take enough servers.)

Not to mention, latency issues would be a problem.
You know what's even more awesome? That I can see that the journalist thinks he makes sense but clearly doesn't. I guess apparently you're not the target audience for this blog post.
Also did you notice its 15¢ per scan!! I believe it will add on to the 10¢-15¢ + percentage merchants have to pay to the processor per Transaction.
How reliable is this? I can barely read my american co-founders credit card numbers on his card.
Ask HN: Consultant as tutor?
A while back I started a project as a way to learn mobile development (specifically iPhone). This project has grown into a series of apps that now support me and my brother full time and pays a part time contractor. We have 30k iPhone uses a day and are partnering up with some big people in the industry.

Our next push is to build up the social aspect of the app. Right now we can identify many channels where we can connect our already established user base. Our users are asking for this so we know it will be used. The concern I have is I'm still the only person that has touched the code for the mobile devices. I feel I am capable to accomplish what we've set out to do but I realize that mistakes now will be much more difficult to fix compared to the simpler features. We almost hired someone for the summer but that fell through. Being a bootstrapped startup we're finding it difficult to find our first employee but I don't want that to be a drag on development. Is there a service that exists in the bay area that can do like a paid code review? I'm looking for feedback on what I've already done and provide direction on how to accomplish our goals for the future, all as a learning experience for me.

tldr; My first iPhone project has turned into my first business, looking for a consultant that can act as a mentor/tutor in the bay area.
Downvotes? Care to explain?
Of course, this points out a failure in public engineering, not the need for automated cars. (As much as I'd love to have them)

Urban sprawl is a gigantic problem that we need to address, and soon. It not only affects transportation - there's general maintenance cost, social effects, land use, etc.
CardMuch, Checks are both examples of me taking a picture of something I own (check, biz card) using my own cell phone. Card.io is someone else taking a picture of my credit card, using their cell phone. In the first two examples, I have control and ownership. In the last example, I have ownership (of the data/card) but no control of the software.

Anything that increases conversions is great! Best of luck! I look forward to seeing it in the wild. In fact, are there any merchants in SF I can watch use it yet?
Useful, even if I thought I'd see a big-ass "YES" and nothing else.
Hoverbike
More likely, driverless cars will be programmed to make really, really long commutes.

How far would you be willing to commute right now? OK, what if you could sleep or play videogames en route?
So can a DJ on turntable actually DJ (e.g. transitions, mixes, effects etc)? If not, did Mix-A-Lot just put on cool songs in sequence or did he have a prerecorded mix or what? I mean for the regular facebook-crowd just putting on playlists for each other is cool, but what I was thinking was more focused towards people who enjoy live DJ sets. Alas, I have not been able to get into turntable.fm yet, so I have to ask :/
I've always thought it would be neat to combine the public transport with the public car idea. Have parking lots full of public cars available at the station stops (and really big ones at the end of the subway line).

You'll have to be able to keep one of these public cars at your place overnight for it to work (unless it drives itself home empty!).
Digital Signage: It's all around us [Infographic]
Free online video tutorials
I really think it should be the user's responsibility to figure out the details, as long as no effort is made to cheat on the provider's part. Market efficiency will end up dictating the progress in the end anyway. Having laws like this just makes the services more expensive overall, and does no good to the majority of people.

How many people who don't at least have a basic understanding of 4G transmission speeds will know what a megabit or megabyte is anyway? Even in an university setting (which should represent a highly biased group of overall educated people), the majority of students just know basic facts like "my song is 6mb".

But hey! On the bright side, creating useless jobs will add to our GDP. Props to modern economics.
the video was shot by Nokia, not some random reporter.
It wasn't marketing. When C++ took off as a language, such memory safety was a luxury. I've read Stroustrup's Design and Evolution of C++, and I don't think strict memory safety was even considered. Saying it was "excluded" implies that it was considered, when I think the kind of programming they wanted to support - systems programming with minimal performance overhead - precluded it from consideration.
All credit for this one goes to @samuelclay -- He's been smoothing the rough corners and stomping on IE bugs for weeks now.
Yeah, this matters way more for transactions less than 5 dollars where it starts to be a large %. If you go to 100 dollar range, it doesn't matter at all. The 10-15 cents just means they are looking for people who sell big things, not coffee shops.
At Google, groups are key to the company's culture
It's 2011. Don't you think "where's my flying car" is getting a bit played out? It's in middle school.
This is huge. I've been mulling some ideas for awhile that would require music fingerprinting, but I've always been too overwhelmed by the available options, from a licensing and implementation standpoint. I can't wait to play with this!! :D
Riak isn't in the same ballpark as MongoDB. They are closer to Hadoop.
Like it or not it's still the wild west, and I suspect most people here trust their own ability to protect themselves more than they trust the sheriff who only investigates crimes against the mayor and can't even ride a horse or shoot straight.
Wow, that's great! I'm trying it now, and it seems smooth'n'snappy. It also pointed me to Perian (which I'd forgotten about after a recent re-image) and MacTube (which I'd never heard of), and reminded me that my Flash Player wasn't up to the latest-and-greatest-for-PowerPC. Thanks!
That was my first thought too. Not only does the FBI have the salted hashes, but they also have a copy of the code for the website. So they know what the salt values are. This makes it even easier to brute force the hashes.
I didn't mean to mock you and I really did like your comment about how do we profit from this. That really is the important question for HNers. That and "how do we fix it."
Quite interesting to me how the HN demographic has changed. Oracle usage is up dramatically from a year ago, and I don't think it's because Oracle has grown :)
Come on guys, no William Gibson references yet? - "The future is already here — it's just not very evenly distributed."
I dont understand. If you can use mixed-cased, letters and symbols you have 26 * 2 + 20 = 72 possible characters.

72^8 >> 1e9

It would still take more than 8 days to brute force at 1 billion/sec. And using a longer password (16 chars?) would make this a very long time.

Or is there other trick that makes this fast? Or, is it simply that people don't choose random, long passwords?
Gudka- gudka international
Gudka International commenced operations in 2008 with a vision to give people what they want, what they are looking for and what they cannot find. The business is located in Western Australia, the most famous commodity country in the world.
Even without the magic printer, you'd probably be stepping on a number of patents by reverse engineering a Porsche (not to mention copyright/trademark infringement for things like the emblem). You could still be found to be infringing upon patents if you were only using the duplicates for personal use (IANAL, though).

As far as the length of copyright (which, I agree, is currently too long), you can thank Disney for that.
I commute about 1:15:00 each way, each day. I carpool, so I can read my iPad for two hours a day. It certainly helps with the drive time.

But you can do the same on a train or bus already. I think part of why people don't use them as much is because of the inconvenience of working around their schedule, and first and last mile commutes (because the train doesn't go to your office). Networked, driverless cars could play a part in the larger public transport system to alleviate these two points of pain of commuters.
4chan trolled them in a very public and embarrassing way

And I suspect the majority of Hot Topic customers do not know 4chan, hence it does not matter. On the internet it is very easy for a group of people to overestimate their impact.
Why PaaS? Focus on Innovation, Not Infrastructure
It's not that predictable - try changing bar() to

static int *bar(int dummy)

and call it with

bar(10);
PHP is an open source project, sure. But really, have you ever tried to volunteer for the PHP core? I've never gone through a more painful process -- so much political bullshit, resistance to change (even backwards-compatible change), and echo chamber nonsense. I attempted to volunteer on PHP for a long while, but finally realized it just wasn't worth it and gave up.
I've always been curious about how many Etsy-type stores sell video game trinkets referring to classic video games without asking for permission from the original game makers. Somebody recently told me that the general rule is "if they havent't made a similar product in the market, then go right ahead", which didn't comfort me much.

Are there any landmark cases that have set good precedence for fair use online beyond allowing for parodies of works?
Vidyo, reliable video conferencing
I was referring to the colors in the original picture, not the four-square thing. The four-square is merely a distillation of the original photo (and no it is not algo-correct but who cares?)
Thanks. I am just trying to navigate the sea of misinformation that spews forth everywhere about salted hashes vs bcrypt vs scrypt. I can see that lots of people claim that bcrypt is better, but I am not aware of anything about it other than the original paper. Basically, I want to know what the chances are that two months after I implement bcrypt a huge issue with it will be discovered and I'll have to move everything to some new scheme.
I'm disappointed in the people who put disparaging comments in as ideas, and the people who voted them up.

This was an attempt to generate awareness and that kind of behavior doesn't help anything.
As an individual who is legally blind and cannot drive, I very much welcome the day when this technology becomes wide-spread and affordable.

It is extremely annoying to be in your mid 30's and have to rely on/inconvenience someone else to drive you around.

So whether it were getting my own vehicle or seeing vast improvements made to less-than ideal public transportation systems, either would be great.
He's wrong because he's a highly successful artist (http://twitter.com/danielpunkass/status/83909442583793664) and @waxpancake is a cool web dude who is friends with other cool web dudes and that seems to be how the internet works now.
The 'obviously racist' remark comes from something similar 4Chan did to Hot Topic when the store began printing memes on tshirts. 4Chan created incredibly racist rage comics and submitted them to media outlets, accusing Hot Topic of promoting racist memes.
Wealth and individual vs corp is not relevant, laws are, or should be, applied equally.
Meh. That's not even 200 years. Short by Cathedral standards.

Cologne Cathedral: 1248-1880

My favorite example to bring up when my boss complains about schedule overrun :)
Avoiding email bankruptcy (part 1)
Meet a Hacker: RubyShift 2011 — Non-Profit Ruby Conference in Ukraine
A two-day Ruby conference in Ukraine on October 22—23, 2011
Secure password hashes don't protect users, and particularly not users who use one-time effectively-random passwords.

Secure password hashes protect application developers from the disclosure of hundreds or thousands of user passwords from their database. It allows them to attest to their userbase "your password is cryptographically stored in a manner that makes them hard to break even by dedicated hardware; you should consider changing your password if it's weak and shared", instead of, "expect to see your password on Pastebin any day now".
Analogies like this are stepping stones, not the destination. I try to both use an analogy and give the fullest explanation that I think they can handle. The analogy tells them the structure of the complete answer. The complete answer often has concepts that are new to them, and the more unknowns in something, the harder it is to learn. The analogy allows them to understand the structure of the reason, which removes an unknown.
We expect people to be frightened of robotic cars for the same reason they are scared of dying in a plane crash: Some deep-seated fear of dying in a manner that isn’t our own fault. Thoughts:

1) Marketing/PR for autonomous vehicles needs to really drive home their safety, so when you hear “robot car,” you think “… saves lives.”

2) Is it hard to imagine the opposite fear in children born 10 years from now? Having seen mostly robotic cars in real life, and human-driven cars getting in accidents on TV and in movies, might the child of the future react with terror when the robotic chauffeur intones, “human driver detected, approaching from rear”?
That might be the most awesome page I've ever read.

Bcrypt it is :-)
I'm originally from Dallas; pubtrans there is a joke.
> Or, is it simply that people don't choose random, long passwords?

That's always part of the problem.
A closure is the hotel room key that you kept so you could always access all items you hid in there, and the hotel personnel cooperating with the whole ordeal.
You've been downmodded because password hash salts are public nonce values; usually, schemes that depend on "secret salts" are crackpot alternatives to secure password hashes.

(I didn't downmod you).
This is great news, i cant upvote this enough. Ever since learning what Node is, its always excited me.

I'm only into part-time/hobby development and so havent been able to justify spending the time (or the money) to do a Unix based OS setup for this, since all my machines run Windows.

With a node executable and native Windows support, it means i can have a dabble more often, which could lead to completion of a real project, even if im only working on it part time. I think for that reason alone, it will increase adoption of Node many fold. Not that i have anything against Apache, but it might just get unseated as the hobbyist's first choice as multi-platform web server (assuming its still on the top spot. I havent used it in ages).

I just hope it doesnt get restricted to the Windows Server family of OSes. I did a quick dig, and can see Windows 7 supports IOCP, so i'm hopeful.
What kind of lunatic would try and drive to the Louvre?
My Closed-Loop Research System
Some very interesting insights into the development history of Windows at Microsoft and the future architecture of Windows 8, particularly the new WinRT runtime.