skysight-inc/HackerNews huggingface dataset:
It recently occurred to me that we can see what "appropriate" security measures would be by looking, even within the US, at what security is in place at sites that are not targets of mass hysteria.

For example, subways are generally known to be good terrorist targets. What's the security level on subways? In Boston and NY, it's a bunch of signs saying "if you see something, say something" and "we reserve the right in principle to search your bags (penalty for refusal: leaving the subway)".

Intercity trains are sometimes suggested to be terrorist targets (I'm not sure whether they are). What's the security level on Amtrak? Well, I've seen K9 teams at Penn station. I've noticed that K9 teams are a damn sight less intrusive than airport security (and K9 dogs are a damn sight cuter than X-rays).
>"Consumers are using technology on a scale never seen before. Our lives went from ONLINE to ONLINE ALL THE TIME. "

I see your point, but this is a hair too close to the "this time it's different" argument. The fact is, we're ALWAYS using technology at an increasing rate. The name and industries change, but the game doesn't.

The web as we know it will come and go. The jobs will shift from skilled to low skilled, and the industry will become far more capital intensive. Remember, at one point in time, the ability to use a computer was a highly sought after skill.
If you don't like it, just switch to the old view. I don't understand these people.

I like calendar's new look.
I love Gmail's new look.
Counter-post : http://antirez.com/post/take-advantage-of-redis-adding-it-to...
It's been around for years and remained solid. It's implemented in every language under the sun. It can be tuned to be plenty slow, even today.

That said, there's nothing wrong with choosing another password derivation scheme. glibc's crypt() provides three: PHK's MD5 scheme, and Ulrich Drepper's stretched SHA-{256,512}. Just don't roll your own and you'll be ahead of the majority of programmers.
I think that may well be purely mechanical or actually osmotic.
I don't understand. For one thing, Google wasn't "the early front runner", they were the stalking horse bid--essentially the minimum. There seems to be this retroactive meme going around to the effect that Google was expected to win with that bid or that they somehow deserved to. It's an auction, folks.

It's not clear to me that that was their final bid, either. Maybe it was, but I can't imagine Google letting something important to them climb at auction from from $0.9 billion to $4.5 billion without staking another bid.

The second thing I don't understand is the connection between the price paid by a consortium of major tech companies[1] for a collection of patents from a formerly major tech company--only a few of which are even software at all--to Fred Wilson ranting about Lodsys. Who is the troll here? Nortel? What is the significance of the dollar figure? How does it "echo the sentiment" of Wilson?

[1]:BetaBeat says "...a coalition of Microsoft, Apple, RIM, and Sony...", while the actual press release[2] states: "Apple, EMC, Ericsson, Microsoft, Research In Motion and Sony."

[2]:http://www.marketwatch.com/story/nortel-announces-the-winnin...
It's been officially supported in GCC since about a decade ago, I believe. It's not part of the C language, so if you're writing this code, it's no longer C. It also requires executable stacks.
Read http://www.stevenlevy.com/index.php/05/10/why-google-does-no... to find out why it was that Google didn't buy Skype.
> It was a huge mistake to respond to the first letter, no matter what they could have said.

And even more so because their response utterly blew.
I clicked thinking that this was podcasting software written in node. But it looks (sounds) cool regardless.
You're not passing a compound statement expression as a function pointer. You are passing the result of the evaluation of that expression --which is a function pointer -- as a function pointer.
You obviously have no frame of reference to this conversation. This isn't Hawking writing to the masses, he's talking about technical presentations.
Looks interesting Des.

How are the users' social media details accessed? Do they opt-in and supply Twitter/LinkedIn/FB credentials themselves or are they acquired by other means?
How Much Does It Cost To Make A Hit Song?
The guy above me who mentioned Groovy got downvoted, not me. I only commented when I saw his relevant comment starting to grey out.
I think the most significant issue is that JS on the client is an absolute minefield for cryptography. Apart from the speed issues, it's impossible to secure...
Best Hot Penny Stocks & Stock to buy (July 2, 2011)
Show HN: Affililink - An automated way to monetise your site
Hi all,

This past month I have been working on Affililink, a way for blog and forum owners to monetise their site without the need to display adverts.

With a small javascript snippet, Affililink will scan all outbound links and where possible, add your affiliate code, effectively automating your affiliate scheme.

The idea came to me when I noticed a number of users post ebay links on a forum I manage. As ebay runs an affiliate scheme, I soon realised these links could help cover the running costs of the site.

I'd love to hear your feedback on this as it's my first serious project launch.

Thanks,

Dean

http://affililink.com
Oops, sorry, I just deleted my comment because I thought that wingo's comment covered my thoughts and more. For posterity, I had previously written:

I do not find it obvious from that documentation that you can pass a compound statement expression as a function pointer.

And touche', I just glanced at the contents of the macro before replying.
Clicky: http://affililink.com
Now, how do I explain to my girlfriend that picking longer, more complex passwords is a realistic security precaution and that I'm not just a paranoid nerd?
i dont understand the identity function that uses just C and
S. :(

C x y = x

S x y z = (x z) (y z)

\I = (S C C)

so uh... that would evaluate to (\z (C z) (C z)), right? and then to (\z z z)? but then you got z twice. what does that even mean? applying z to z?
Atwood's Law alive and well.
Kinda language driven. The haskellers, erlang and clojure people are heavily invested in emacs, I use intelliJ for scala, komodo and textmate for ruby/python, and I've always used vim on whatever unix boxes i found myself on.

(Still waiting for MS to gift me a free copy Visual Studio Ultimate :)
Where's Outlook?
Same. The design needs a few tweaks here and there, but it looks very nice overall. I like the direction Google is taking.
lfilipe
Agreed. I love nothing more than waiting five minutes for Outlook to load just to see that it's got connection problems.
So, Haskell without types and monads basically? ;)
Why You Should Pay Attention to Google Swiffy
One process per tab. Firefox constantly stalls up on me while a background tab halts it. Rather infuriating.
The big question is: how proficient are you with Vim?

Some people adapt very well to Vim's method of input and control. If you're one of those people, it's doubtful that switching to an editor like Sublime Text or TextMate will benefit you much.

I'm a TextMate user first, but I do so much Linux sysadmin work that I need decent Vim skills. I'd estimate my skills at about a 4 out of 10. I use some plugins and have some of my own custom key bindings, but I take the long way around to many operations, and I've seen people closer to the 10 side of the scale that run circles around me. I like Vim. I like it a lot, but I feel like I'm the limiting factor when I use it, and I can't seem to get over the hump on my way to 5+. It's probably because I don't use it enough.

TextMate (as is any good GUI editor) for people who do a lot of text editing, but not a lot of text editing. I'm not a full-time developer. I'm a manager who knows how to code and is responsible for sysadmin duties. GUI editors have the advantage of guiding you through menus, on which the keyboard shortcuts are shown, so you get continual reinforcement.

TextMate has "Bundles", which are similar to Vim plugins. My favorite feature of TextMate is cmd+control-t. This brings up the "Select Bundle Item" dialog. You type words in to the box and the dialog box filters all available bundle commands for the current "scope" (e.g., ruby.source, html, ruby.source.string). This offers a high degree of discoverability for Bundle items that have either key bindings or tab triggers. It's a kind of training wheels for Bundles. Great for learning, and great for digging up features you know exist, but can't remember how to trigger.
Just tried it. Very nice!
can you be more specific?

currently the adapters mostly implement the input methods of each device (touch, tv remove, mouse, ...) and most of the styling is left the the developer with CSS/Templates.
This geek elitism is tiring, and I find myself unwilling to filter it out so I can evaluate the actual message.
better to pickle a frozenset and use that.

import pickle

# initialize:
wordset = frozenset(line.lower().rstrip() for line in open('/usr/share/dict/words'))
pickle.dump(wordset, open('/tmp/wordset.pkl', 'wb', -1))

# when you want to use it:
wordset = pickle.load(open('/tmp/wordset.pkl', 'rb'))

'bear' in wordset # == True
Are you a Calendar power user though? Seem to me like they made it look nice, while breaking functionality for power users. If you're not a power user, then you just think it looks nice and lose no functionality.
I tend to avoid them all. Though the other day I had to make a simple chart with excel (no problem for me in libreoffice or in the old versions of excel), and I just couldn't figure out how to change the scaling of an axis.

Eventually I found it. Not in a context menu anywhere, but somewhere in the ribbons, through an obscure "current selection" area, a place I would have never looked at on my own.

On the other hand I was pretty impressed by the change tracking feature in Word. Much more understandable for non-geeks than traditional source control.
Oh god, Access. I still occasionally get people ask me to make them a db in it.
Would you actually? I think most people would be surprised by how much money exists at the intersection of crafts+tech. I know a company that added a thin software layer to off the shelf hardware and built a $500MM business on that. If you want to know more shoot me an email.
Not really. For me, the design of the calendar is really ugly (in terms of usability not aesthetics).

I can switch to the old view. But if people don't let Google know that their design sucks, then sooner or later, Google will just shut down the old view.
It'll take 2 minutes to pull these emails out of the post anyway so I didn't feel this was much of a issue.
Plus I don't know about you but my spam filter is pretty good :)
It depends on what nix skills you're looking for.

Basic shell and command line tool use? Yes you can get those, if you stick to using those tools and not the GUI.

Working with the operating system and/or administration experience? Not as much, or will be OSX specific.

I work on a mac frequently and heavily use the shell. The generic things are easy and are the same on every system, you'll be able to pick them up anywhere. There are things that you won't be as exposed to on the mac that you would be on a different nix, as well as things that you could be exposed to, but probably wont unless you go digging.
Heh, I wish mothers were that predictable. I have a single data point that shows the opposite.
Does it do language autocomplete?
If you want to stand by that assertion, please provide some information to back it up. You'd become very popular in this community (and the security community at large) if you could provide a good basis for that statement.

Otherwise, you're just trolling, and I've committed a cardinal sin.
Airplanes Can Actually Lead to More Rain and Snow
No luck clicking "Join Google+," but thanks Dean.
I thought this would be more specific so I could say "the awful way word converts docs to HTML".
I don t like the new visual of google. I don t like to have a menu like this. It looks to serious...
Of my friends, the list of people who have been somehow burned by misconfigured or misunderstood Facebook privacy settings is growing steadily.

In general, I'm bullish on G+. A reviewer linked here made the best viral case for it I've seen so far: He hadn't made a profile or put any information out there on G+ but his friends with Gmail accounts added him to their various circle's and he, even having not yet chosen to participate in G+, got a big red notification stream in the top-right corner of every other Google service he uses.
I don't watch YouTube much, but that feature of inline YouTube is surprisingly valuable. I switched to a different browser on my iPad (iCab Mobile) that supports it and the experience is markedly better.

However, listening to a singer repeat "Flash" over and over does absolutely nothing to make me want a Playbook. I run into flash problems one a week at most; I'll glady trade it for battery life, performance, and stability.
That's fair, but it doesn't change the insanely wrong statement that triggered this comment chain:

"sha1 with a salt u cant find beats bcrypt with a key u know any day"

This is fractally wrong.
I appreciate your response.

So no iOS.. Rails =]

And ill probs use textmate?

Now what about some of the equivalent operations to GREP and AWK? Or are those *nix based..thus you'd use them as I would regularly?

..and lasty a tool that I use constantly:

Is there any function for multiple desktop support?
I don t like at all the new visual of Google. Too strict, too serious. Don t like the menu box.
Along the lines of pancake art, this site is amazing:

http://www.jimspancakes.com/

This guy hand makes them all, but it would be cool to see the technology in this post applied to a similarly creative endeavor.
I don't think the analogies are helping you here. Real Bitcoins exist in the block chain, and fake ones don't.
I guess I'm luckily in that at my work, WebKit (Safari+Chrome) represents 60% of the visitors, with the rest being split among Firefox (20%) and IE (10%, which we don't even bother testing for)
This has to be the best post on HN for the full year 2011. Just do it. Start something. Scramble and find a way. Hire offshore and just get it done.
Really? You just described a KDF, and advised people to use it without providing any references to implementations. "Just leave out k bits of salt and brute-force it" -- do you really expect non-cryptographers to be able to correctly implement this algorithm? If you insist on using hashes, at least you could tell people to use PBKDF2 to turn a standard hash into KDF.
If an anonymous function can capture state from the enclosing code block, and outlive that code block, then it's a lambda.

So this probably isn't really a lambda.
Not sure why this was downvoted. I'd hope to find real solutions to practicing this sort of viewpoint within social systems that value power.
Can't navigate the presentation because I disabled the arrow keys with a user script the day Google hijacked them. I hope this trend of interfering with standard browser functions ends soon.
I clicked the big "View Tour" button and the site returned a 404 error...might want to look into that.
JSIL: Compile .NET to Javascript
Or you could switch bosses and come work at Yammer where we use Scala to ship infrastructure services every week: http://jobvite.com/m?3m785fwq
Or you could use something like bcrypt with a configurable 'cost' and stop making up things that you think will secure your passwords.

Anything you can brute force with your hardware can be brute forced on someone else's hardware.
With a discoverable, well-designed GUI, you shouldn't need one. Emacs and VIM are very powerful, but not very discoverable.
I hate it too. Not enough contrast, except for (as pointed out) that big blue stupid search button. Too much white and light gray.

And on a small screen, the 'Other calendars' scrollbar disappears.

Even the copy is goofy - who decided that 'Create' makes more sense than 'Create event'? How about 'New event'?
Sounds like the complaints are visual. (As it was a visual change, that makes sense.) Google should provide a skinning mechanism like GMail already has. And some proper skins, of course.
Saner keybindings some will say.
I'm sure they'll continue to tweak the new look for "power users" but they didn't actually "break" it if power users can switch to the normal theme. Breaking it would be forcing the update.
Our field is a little bit weird.

Twitter "success stories" (yes, with quote, since we never actually see the internal code of Twitter, and considering that they have many developers since that is their core) is probably not applicable to "business enterprise software". I believe there are attempts to fit solution for case X to case Y already in the history of software projects. I'm not sure if that went well.
It's fast.

It does not take ages to start especially.
Probably because it will take you between 3 to 5 years less time to learn how to be proficient at your text editor if it's ST rather than emacs?
There is only a $1 billion difference between the two agencies budgets (2010).

TSA is $8billion, FBI is $9billion, DHS is $55billion.

As the US military uses less air conditioning in Afghanistan, that should free up at least a couple billion.
This internal drama is blowing my mind.

Here's what's wrong, RIM: you're not presenting your products right. Your business audience doesn't care that the PlayBook has true multitasking, nor do they care that there's Flash on-board. They want a device to manage their emails and make running their business easier.

And the BlackBerry is really sad to see in my eyes. You buy this nice software company and their HTML5 browser, and then put it in a crappy phone that has half the specs of the competition? You have so much potential, I can see it and feel it... but you're not utilising your resources properly. Study the iPhone and Android and see why they're popular.

BGR's original leaked letter mentioned that RIM was advertising its products wrong. I agree completely. Whenever I see a RIM ad, I just shake my head. They really aren't advertising the right things. They're putting good things like BBM aside.

I don't have a RIM device, but almost all of my co-workers do. I like my iPhone, and I'm not trying to sound like an idiotic fanboy, but RIM: I used to respect you a lot. You ran your business very well, and your devices could have been considered revolutionary. Get your shit together.
Side thought: I've watched a lot of companies become horrible places to work because of process strangulation. The problem is a small, vocal group saying how much better life would be with one more piece of information...

The way I combat that is by documenting what is working right and determining what I don't want to change. Your process requirements then become "Learn/Enable/Etc this" and "Leave that unaffected".

It becomes surprisingly good at checking rampant process growth because you have an anchor.
I am aware that hyperbole is the best thing in the entire world, but does the definition of 'terrible' really stretch this far? How about 'Google Calendar has some design decisions that I disagree with, mostly on the basis of some colors being different."
Any other good examples of responsive design used in emails?
I can't stand the black tabs.
TextMate had a peepcode screencast. In fact, what launched textmate was probably DHH using TextMate in his "blog in 15 minutes" screencast.
It doesn't seem like you understand how this would be a useful. This is not an explanation for slipping in the water and wrinkling to climb back out, it's for spending long periods, perhaps for fishing or during the wet season, and still being able to grab and manipulate objects.
So, how would you compare your site with http://www.viglink.com/ or http://skimlinks.com/?

Edit: Never mind. I posted this before checking out your site. I see that you provide the Javascript to perform the URL rewriting but require webmasters to register separately with affiliate programs. A very different model than Viglink or Skimlinks ;-)
Store unlimited contacts with this easy-to-use CRM Tool
Which affiliate schemes does it work with?

http://affililink.com/how-it-works gives a 404 error.
Papuan weevil has screw-in legs
hungvdang
We're using a third-party service to find the social data from their e-mail address.
Israel's population is less than 7.5 million people.
The question was what Chrome does differently to Firefox. Firefox had adblocking before Chrome ever existed.

IMO Chrome:

- Feels faster

- Looks a bit better

Firefox, on the other hand:

- Has better extensions

- Has a better URL bar search function

I actually use Chrome nowadays. It turns out that the speed and looks of the UI are important enough that I can put up with less polished extensions and a slightly inferior URL bar.

I wish Google would make their URL bar better though. Surely it can't be that hard to match in the middle of URLs rather than just matching from the beginning? :/
RIM makes excellent business phones. My BB is tougher than most and the keyboard is excellent. Exchange integration works. As a private iPhone user I want apps. As a corporate BB user I just want something that is tough and works.

They should not try to be a better Apple than Apple.

Focus on their market.
No. This is very likely true of the schmucks who blow themselves up, but those people aren't so much Al-Qaeda as they are victims of Al-Qaeda.

Did you ever notice how UBL never participated in any suicide attacks? Not saying he wasn't crazy, of course, but he was crazy like a dictator. Like, say, Hitler, he was shrewd in pursuit of his bizarre ideological objectives. You can't look at him and say Al-Qaeda had no political strategy.
You're misunderstanding how tread works. It is active only as it is pressed down; it allows water to rush away from under the contact patch more quickly and easily as pressure begins to be applied. It does not actually increase mechanical grip, and in fact serves no purpose once full contact is established. So, it does not matter if the treads get flattened by full pressure- it has already done its' job.
It's not like the old view is going to be around for a long time though.
You know what's goddamn terrible? When you design your site so that middle-clicking on an image doesn't open the full-size one in a new tab, it just shits all over the current tab.
But if these patents were say, automotive in nature, and a coalition of automotive companies bought them for 4.5 billion, would we immediately jump to the conclusion that automotive patents are bad? I wouldn't (necessarily).

I have to agree with the parent comment.
Structural Templating with jquery.expand
Because it is tied to your clicks, most popup injections now happen when you focus on a search-like field or click something, this is not an automated popup that the browser can block, the browser does believe you wanted to open that extra window.
"A singer"?

That's not just "a singer".

It's Freddie Mercury himself.
Microsoft Excel is a big win for me.
People don't fly into Israel now? :)
Honest question. Why would someone who handles more than a couple-dozen login attempts per second choose to use bcrypt? It would seem that the computational overhead of supporting bcrypt at scale would not make a lot of financial sense.
That's a great progression you've outlined there (and looking at your work, it has clearly worked well). I think the whole process will go more smoothly if there is a framework within which to make those observations. Understanding the philosophies behind design principles, typography, geometric relationships, use of white space, composition, and color theory will make it easier to understand what you're observing.

So, I also suggest my own book, which comes out in September, and will hopefully provide such a framework for programmers learning to design: http://designforhackers.com