skysight-inc/HackerNews huggingface dataset:
It seems to me that the ascendancy of the Mac in the last ten years has a lot to do with them being in the "pro space" -- specifically software and web development pro space -- and being one of the best.

The geeks, that is, the mavens and influencers, folks whom others when to for advice about what computer to buy, were buying Macs because it really was such a nice environment. It still is.

Their strategy for ipod too reflects this as well: target the well-heeled, early adopters, people who like to chatter about their toys. Make the brand desirable through organic PR -- that is, build a truly desirable product even if it's not quite at a mass-consumer price point, and let the pent up desire sell the lower end, targeting various price points with well-vetted technology and UI.

I don't use Final Cut Pro, but it sounds like they're taking a different tack than usual. I don't understand it. This article didn't help.
Ghosts in The Code: vestigial 1998 government backdoor in Firefox
Mt.Gox really is an exchange; the whole point of the site is to convert between BTC and USD. If you wanted a bank, you'd use something else. It's also not clear to me that it's safer to store BTC on a server.
Nah, you are no crackpot. That is as good as any other theory I have heard. :)
The article claims it takes bcrypt 0.3 seconds to hash a 4 char password on a laptop.

How does a server authenticate users in high volume with bcrypt? ~0.25 secs per auth request might warrant having a separate server just for authentication.
This bug report reads like a report from an archaeological expedition.
You're about 2 years out of date.
Ideas are worthless refers to the fact that an obvious thing is obvious - I would argue that most ideas that go on to become successful products are obvious. Seldom are they really revolutionary. The implementation might be, but the idea itself seldom is.

In the current case, well just because it isn't perfect from a technical standpoint, doesn't mean it wasn't the best execution of the idea out in the wild...
This should probably be made more clear on our site: we're currently indexing AdSense text ads, with image/flash ads and other networks coming soon.

YellowBrix, for example, is currently running search ads, but not on Google Display Network. We're confident that we're finding practically every advertiser and AdSense text ads right now, so if you're not able to find any of your competitors in our index then they either haven't tried or weren't successful at it.
I like it a lot. It reminds of Whistler and Windows Mobile (yes, that's a good thing). The only thing I would change would be to tighten up the outside margins by about 50%.

My instant reaction to the lower visual density was negative, but after using it for a little while, I think it's dense enough to be usable but sparse enough to be calming. It's amazing what the removable of a few borders and shaded areas does to the feeling of apprehension about email.
We'll be implementing keyword search soon, but for now, a good hack is to:

1. Search some of your main keywords on Google.

2. Look through the organic results and find organic results pages running AdSense.

3. Search the display URLs of advertisers placing AdSense ads on those sites in MixRank.
You can use poll with ZeroMQ to efficiently use many channels in a single process at once; however, you don’t get to block on particular kinds of message, meaning you have to buffer messages you don’t want to deal with yet, or keep complex state around.

Well, actually, you can have as many ZMQ_SUB sockets as you want connected to the same ZMQ_PUB endpoints, and just set each to subscribe to separate topics.

ZeroMQ is not a message queue. It's sockets++.

If you want a web interface where non-programmers can log in and interfere with your message passing, you don't want ZeroMQ. If you are writing something like X11 or a web server, though, it might be exactly what you need.
It's mostly public. The data used for this discovery was taken from UKIDSS, an IR sky survey (you can get data here: http://surveys.roe.ac.uk:8080/wsa/SQL_form.jsp) and SDSS, an optical survey (you can get data here: http://www.sdss3.org/dr8/data_access.php). All SDSS data is available to the public. UKIDSS data can only be accessed by ESO member countries for the first year, but after that becomes public. (I worked on a similar project to discover a high-z quasar as a summer research project in college, though unfortunately with less success.)
Tell/Ask HN: An itch around advertising
I want to be able to support websites. If the website needs an income from advertisements to keep itself alive and I enjoy spending my time there, why not. We're both getting a decent deal.

The way the web works today, unfortunately it's not a deal I can accept. I simply will not let NetworkX throw some nasty trojan-infested advertisement at me (and this is only one of the reasons why I blacklist JavaScript by default). I may want to contribute, but I don't want to donate (one way or another it often turns into a hassle). I would like some innovation in how advertisements work on the web.

I don't want to feel like a leecher of your bandwidth and CPU. In return, you should give me the same benefit.

In fact, I want to see a friendly ad-network. Say, something like:

[] all dependencies are hosted by the domain you are visiting. This might even decrease bandwidth consumed by advertisements.

[] if you trust the domain, you trust their advertisements (even if you use various script blockers)

[] this might be deemed evil by some, though: initially (?) this would obsolete ad-blockers since it would become harder to determine what is an advertisement and what is normal content. But personally I do not mind. I would consider it a good feature.

[] a view or a click is verified by the user and the advertising domain, then signed and posted to "neutral place".

[] you, the user, can opt-in or opt-out to share information about you (e.g. should long lasting cookie be able to couple you up with your Facebook ID). Not entirely sure how to enforce the advertising domain to keep its promise here, though. It would probably	have to be based on good-will and since they are putting themselves and not the advertisers in the line of fire, it might just work.

[] ... more? I think this covers the bigger problems: Trusting the statistics and the user benefiting from friendlier advertisements

Slight tangent: This has been an itch of mine for so long now. It hit the top of my head again today when I could not see user-comments on a website. There were a slew of domains which wanted to run JavaScript on my machine and there was no way of telling which ones were needed to get the comments to show up (and this one is to Disqus et al.: does site owners have the option to throw me an iframe with dead content?)

Just because I trust you doesn't mean I trust the ones you trust.

Does something like it exist? Is there some little niche market here? How many of -you- are running NoScript or an adblocker as a mean of protection rather than (for lack of a better word) leeching?
Advertising industry trends from Google
I was more referring to the fact that we fail to produce proof of the limited amount of gold that we claim to have and every attempt to audit it is rebuked magically.

I think you're just rambling. Our currency isn't gold backed -- who cares how much the US govt. has in gold repositories and why does it need to be checked?
Personally, I'd allow it to be done non-anonymously together with allowing direct response to them.
If you don't mind me asking, how many vacation days did you take? Or the average taken in the company/department?
Which means that they're not using bcrypt, which means they still have no idea what they're talking about and are probably insecure.
I was replying to this:

There's a persistent myth that Facebook Group is the same as Google+ Circles.

I don't think that myth exists at all - I've never seen anyone say it until you brought it up. The parent post used the word "groups", but didn't specify they meant "grouping people" as opposed to the Facebook group functionality.

Further, I reiterate: Google+ does not work like Unix groups

Again - no one is claiming that. I used Unix groups as an analogy (because they let you group people together).
Let me guess - it is Java EE 6? ^_^
On a previous project for a very large automaker, it took me 5 full days plus a 1 week trip to 4 cities in China to change a single graphic. (The rational was that they wanted the client to talk directly with the engineers instead of having to go through all the corporate bureaucracy. So much for that. ;)

And then they changed it back to the original.
This is my main concern. The vast majority of the time, I'm browsing with text enlarged (without scaling up the rest of the site/images/css). I just hope it doesn't end up being a horrible case of DIVs overlapping, making things unreadable.
Rubik's cubes of any size can now be solved
That's correct, lensing won't affect the observed redshift. It will, however, affect the observed luminosity of the quasar and make us perceive it to be more luminous than it really is. This would lead us to calculate a larger black hole mass. The lensing effect only goes as the square root of the magnification though, so you would need an extremely strongly lensed quasar to be able to explain the black hole mass. If that were the case, the lensing body would also be visible, which it is not.
Most of your traffic should be coming from people with logged in cookies. If you make people enter their password on every page, you won't have to worry about high volume. :)

Note that bcrypt is basically insensitive to length of password. 4 chars, 8 chars, 32 chars, all take the same amount of time. And it's tunable. You could go down to only 0.01s per hash and still be a million times slower than plain MD5.
It depends on the work factor. On my dev server (a pretty old machine), with a work factor of 7, it's about 300 time slower than md5 (about 10ms per bcrypt hash). That's still plenty fast, and much more secure. Bump it to a work factor of 9, and I'm looking at about 1000 times slower (or getting close to 40 ms per hash).

Part of its beauty is you can adjust the work factor to match your hardware speed requirements.

If you really want ultra-secure, a work factor is 13 is getting pretty slow (about half a second per hash on my crappy machine), and yeah, that might justify an authentication server.

(note: my tests were not exhaustive)
Try FastSpring :)
*3. Being specially designed to employ anti-jam features (e.g. null steering
antenna or electronically steerable antenna) to function in an
environment of active or passive countermeasures.*

I find this one slightly annoying. So no matter what, you can't connect an electronically steerable antenna to a GPS receiver and export the resulting device?
We're tackling a very large market, and have big long-term plans. Stay tuned.

In the meantime, it's a very small time investment to keep an eye on your competitors' advertising strategies-- even if you're not currently running ads it's invaluable to know what your competitors are doing.
the weaknews is actually storing the salt or code or key with the password. using bcrypt helps a bit but doesnt truly solve the issue. i think thats important to point out. sha1 with a salt u cant find beats bcrypt with a key u know any day
Lensing will make light travel through only a very slightly longer path. At most the difference will only be a few light-weeks. (This is seen in objects which have multiple images. Occasionally you will see one of the images flare up for some reason, and a few days later the other image will flare up.) It won't be anywhere near long enough for cosmological effects like redshift to be important. The main effect of gravitational lensing is just to increase the apparent luminosity of the lensed object.
Don't confuse SHA-512 hashing once with SHA-512 hashing 1000 times though.
How are regression bugs more dangerous than other kinds of bug?

Here's how I'd rate the "dangerousness" of a bug:

1. How easy is it to detect?
2. How easy is it to reproduce?
3. What are the consequences of it occuring?
4. How likely is it to happen?

Look, bravo for all the TDD. TDD eliminates a huge chunk of bugs. But by definition, the bugs that you find with CI are easy to detect, easy to reproduce and 100% likely to happen. Sure, without a TDD/CI system, these bugs may not have been detected, may not have been easy to repro. But the reverse does not hold: a TDD/CI system doesn't make all bugs easy to detect and easy to repro.

So all the other bugs that your system has right now, are the ones that are left: hard to detect, hard to reproduce, and don't always happen. Now turn on a thousand users. How many users are you hoping to have btw?

Your worst kind of bug:

* Is not detected for months.
* Unable to reproduce.
* Company killer. (Reputation, lawsuits, whatever).
* Happens once every 40,000,000 sessions.

Not detectable using TDD and CI. Company still dead.
No. Making Blowfish faster is equivalent to solving a hard cryptographic problem. We have a much weaker guarantee about SHA-512. While SHA is probably good enough, bcrypt is definitely better.
Thanks. To clarify, certain classes of minorities, because of endemic racism, are statistically less financially able to work for free for a year. These are the sorts of types of minorities that certain kinds of firms don't want to hire, but also don't want to be held accountable. Unpaid internships, to which said minorities, and the poor (including white trash) do not apply, act as a filtering mechanism to make sure only the right sorts of blue blooded folks end up getting hired.
Obviously I do not mean that, but your point is well-taken.
The Neverending Nightmare of Amanda Knox
That's certainly a problem that exists, but isn't one that's terribly hard to solve.

Network programmers have had this problem from the beginning, with distinct machines communicating. The same techniques can be used when writing to a file instead of a network stream: Explicit integer sizes and endianness fixes this.
Yeah. The age of the universe is known pretty solidly. Galaxy formation theories on the other hand are still pretty shaky.
Employers see a college/university degree as a requirement, even for jobs that don't really need them

Don't forget the classic, which I've seen come up during two crashes now: "Only accepting applicants with a degree from a top-ranked school." I don't know if you get that over there, but it seems to get really popular as soon as the economy tanks.
One thing not mentioned is LightSquared misuse of the spectrum. The spectrum in question is the L1 band, which was set aside for satellite communications. These satellite transmitted signals appear weak from the ground.

A loophole in the FCC rules allows the use of ground based stations to fill-in weak areas of satellite coverage. This is called Auxiliary Terrestrial Component (ATC). LightSquared's plan is to use the ATC loophole to build out a terrestrial ground-based network with very little satellite usage. They are essentially getting valuable ground-base spectrum at the low price of satellite spectrum.

LightSquared blaming of GPS receiver manufactures is a bit ridicules. The GPS unit manufactures weren't expecting out-of-spec usage of the neighboring L1 band. The L1 band was set aside for satellite signals, not terrestrial. Somehow none of the press is pointing this out.

Here's a good write-up http://www.directionsmag.com/articles/whats-the-deal-with-th...
Try shift-refresh(!), especially after switching Standard->Preview->Preview(Dense)

I had assumed Gmail wouldn't need this, but it made a big difference. Looks like they have a slight caching problem.
How to make your site not suck
I hated it too, and then tried shift-refresh. To my surprise it actually worked, and now "Dense" is fairly good.
I might be weird, but I don't like coding in Java. That's why I write js. This sounds horrible.
I don't know why there aren't more low-level tech jobs for college students. I paid for a couple years of state school by working in a deli. The only jobs I saw that would hire a "college kid" were on campus, and those basically boiled down to having the right connections as soon as you arrived. No longer a freshman and nothing related on your resume? Not interested.
The real question should always be how you detect and handle these attacks. Allowing someone to attack your service for 12 years and eating up your resources in the meanwhile just sounds too passive a solution.
That's fine, but it doesn't change the fact that Mt. Gox is sitting on untold amounts of users' funds, in both hard currency and bitcoins.

I've got 70 bitcoins in their system, and they have not responded to any attempts to contact them for two weeks now.

I've even gone so far as to contact Mark Karpeles directly through LinkedIn, and nothing.

They have lost all credibility. Aside from the fact that no one will ever trade with them again, the most likely next scenario is a flood of lawsuits from Mt. Gox members who have lost their money.
yeah, I guess eventually it'll be the same pure black as in g+ everywhere. Also they should have it as a built-in in Chrome !
Possibly because your link is broken:
>...my new Tumblr <plug>http://corporatebs.tumblr.com/</plug>;

should read as simply http://corporatebs.tumblr.com/

(my apologies for further butchering the links; this is my !first! post.)
They could be using PBKDF2, but if they were, they probably should have said the magic words. Also, the iteration count is kind of important. If it's triple-iterated, that won't do much good.
Unfortunately, interns aren't going to be the ones to stop this trend. Unpaid interns do benefit from their internships. They mostly accept it as something that they have to do, and they know that if they refuse to take an unpaid internship, there are thousands of other students who will snap up the opportunity.

I don't think this will always be the case. As more people work on things that scale, the importance of quality will become more obvious, and employers will be more motivated to find the best. On the intern side, as it becomes more obvious to people how vulnerable large firms are to disruption by agile startups, the knowledge of how to price, value, and market oneself will become more widespread, and fewer grads will be taken unawares.
They would just call up the federal reserve and have them print money. When accounts close down it's money that disappear from the money supply that the fed would replace.
Watch'Captain America'online'free'megavideo
watch'Captain America'online'free'megavideo
nothing seems more puzzling than an attesmpt to ensure that the grandchildren of the world now have a new world for disappointment Christmas
It's a hash function and, at least over an insecure connection, you should not be transferring the plaintext password from client to server so it's not guaranteed that you will have the plaintext password.

Assuming you're using a secure connection and you're willing to send plaintext passwords over it then yes, you could re-hash the password when a user logs in.
Rainbow tables don't apply to salted passwords.
Markham Real Estate
www.the-toronto-realestate.com Markham Real Estate agent Tom Sachdeva offers you the most complete list of Markham homes for sale in Markham – view our Ontario MLS House listings search for your perfect home.Markham homes for sale ,Markham real estate MLS Listings & Markham houses ar
http://openiconlibrary.sourceforge.net/

http://commons.wikimedia.org/wiki/Crystal_Clear

These are my 2 main sources
Google Analytics is a way for Google to buy massive amounts of web traffic data in exchange for some pretty charts.

They use the data if sharing is enabled, which is the default mode: http://www.google.com/support/analytics/bin/answer.py?answer...

It's strategically useful for them to have so much visibility into the web.
In the industry we call the "Product Managers".
Successful Employee Induction Programme
Businesses must improve their Employee inductions training to new employees in order to create a productive workforce. Induction training can also take different forms, from vocational training, to learning skills at your place of business.
I don't know about that. My point was that by posting to StackOverflow you can do both more efficiently. I don't see much of a point in trying to trial-and-error a problem, hunt through documentation, etc, when somebody more experienced can just tell you what to do in a few seconds. The same lesson is learned either way.
Another thread where seeing Karma would really help...

Maybe it should be optional?
We can attempt to blame the owner of the compromised account for the recent events but at the end of the day the responsibility to secure the site and protect our users rests with us. The admin account responsible had more permissions than necessary, and our security triggers were not as tight as they could have been.

Those are good words to read. +1.
That's not the attack you worry about: instead, consider the case where someone somehow obtains the database and can do an offline attack on it. Be it a SQL injection or account compromise (or sheer negligence and publishing the database), once that happens you'd better handle passwords reasonably well.

If the only attack situation you're worried about is a online guessing attack, then there's no need to even hash passwords.
Actually the final bill is going to be north of $700m.
I once pair-programmed an IK animation harness. The math was hard (for me anyway). There were plenty of times where I'd have balked and gone and made a cup of coffee but my partner had the insight and we plowed ahead. Sometimes I was the one with the clarity. The increase in productivity is vastly more than just twice as fast. Sometimes it can mean that a feature that could not be done can now be done. Or take days instead of weeks.

For the other 80% of what goes into any software: total waste of time, or worse. Two people, independently, could get twice as much done. But worse: pairing on something like that can result in over engineering, language battles, just about any kind of drama to make the day more interesting. Seen it happen.

If I had to choose between 100% pair-programming or 100% single-programming, I'd have to choose pair-programming. In this artificial comparison, pair-programming is more productive. Which is why, I think, so many companies fall into this trap. 100% PP teams beat 100% lone-coder teams.

However, teams that pair when appropriate will destroy the zealots of either denomination. Rationality vs religion.
Our downfall has begun...
I don't know about that. I've been extremely reluctant to connect with my parents or anyone in my family on facebook, just because of all the possible social clashes that may occur once they have access to my profile. I don't think I'm alone in this situation and I feel that many people, like me, would really welcome an environment where they can truly and safely connect with the different people that color their lives.

Facebook has taught us a lot of lessons about having an online social life, but it appears to me that it hasn't learned much from us in return, other than what it wanted to learn. G+ feels to me like a second chance to get it right with better tools. To be honest, I would have no problem letting my facebook profile go stale, while I rebuild a better profile with G+. Something that prevented me from leaving facebook behind in the past was that there was no alternative. Now, I can gladly tell people "I'm outta here, if you wanna find me, I'm at G+", exactly like I did when I abandoned my hotmail account for gmail.
Funny, I did part of my M.S. coursework in Enterprise Management using SAIC as a case study in Enterprise Management Failures.