skysight-inc/HackerNews huggingface dataset:
I came up with number 7 (status update for mobile) about 4 years ago and would still like to see it implemented. Problem is too many carriers and kinds of phones out there. Would have to enter a site to access such data (FB?)

ex., "in the shower, be out in 10" with self-timer set to erase it in 10 min.
Don't use this for anything more then a playful lib. It's fun, and it's helpful for defining what browsers might want to do in the future, but its a toy, like a fisher price hammer.
Gamers solve long-standing problem in AIDS research
That looks convincing to me.
I'm a web developer @ Nicaragua. And I would love to have it.
Ask HN: What will the economy be like 100 years from now?
Considering how technology has come in the last 100 or so years (electric light bulb, telephone, and radio to computers, smartphones, and the internet), it's quite possible that in the next 100 years we will have computers with AI advanced enough to be capable of handling natural language conversations and carrying out complex tasks. Combined with advanced robotics, I can see entire industries being replaced with automation. We wouldn't need people to drive trucks, taxis, buses, trains, or planes. We wouldn't need checkers at grocery stores (assuming they don't get automatically delivered and charged). We wouldn't need thousands of agents at faraway call centers, or workers at factories stamping out products by the thousands. Maybe teachers will be replaced by interactive simulations, and surgeons replaced by intelligent robots. Aside from truly creative professions, there would seem to be very few jobs left for people to do.

What would our economy look like in that world?
There are far more damaging "malicious scripts" one could trick someone into running, such as "cd; rm -rf *".

Like I said, it's not good, but it's not what I would call a "security hole" because there is no escalation of privilege. I like Raymond Chen's take on the topic: http://blogs.msdn.com/b/oldnewthing/archive/2006/05/08/59235...
What's the performance penalty for wrapping every character in a span? Is it meant for titles only (honest question)?
Actually, there's no reason you can't use this on a real site. Sure, you don't want to use it on a long block of text, but it's great for headers and short copy. It doesn't break anything and the "fallback" if it doesn't work is just unkerned copy.
UK's Top 100 Private (Tech) Companies
I think the logical existence of a market for those new to programming [much easier to study cocoa set himself the task to improve an application], the existence of a logical place where you can find the source code of the old programs, the site can link to your blog with your Paypal account. In contrast to github - a space for soft that sooner or pity to let in the open access [copy protection is provided by the lack of anonymity]. I think my design advantage over http://codecanyon.net/category/mobile - facebook & google have very simple design [http://metrika.yandex.ru - way better for my taste].

about english i know
I am missing something.

The encryption key is the hash of a chunk of data, so for identical chunks the encrypted data is identical. Understand.

But suppose I want to decrypt. To generate the key, I need to hash the unencrypted chunk of data. But if I have unencrypted data, I don't really need decryption.

I guess my question is - how does decryption work when I have lost the files on my local machine, but I remember my password?
Nooglers, Beware
In hindsight decisions always horribly wrong/right. But more than always being right, I personally think it's more important to step back and admit that you might actually be wrong and take necessary steps to correct. This summer I was at MSFT as an intern, and I was quite surprised to see some groups which take bold steps despite many criticising them.

Unfortunately, the overlords with all their experience, should know better.
Not really, if you are using hardware of this size chances are you are hosting it yourself and can install SSDs.

Solid State Drives is the easiest solution to most problems requiring high I/O throughput and data persistence.

Too bad most cloud hosting vendors are way behind on offering anything like that.

EDIT: Not sure why this comment got down voted, but perhaps whoever did it might comment on why using SSD is not a solution.
Show HN: Calculate MD5, SHA-1 in your browser using HTML5 and WebWorkers
Here you have an other one from Bodo Thiesen, who is still active in the Pirate Party:

http://translate.google.com/translate?sl=de&tl=en&js...
Yeah i am greatly enjoying watching live CNN and The Weather Channel online. I'm using a friend's cable TV log in to watch them. I even ditched Netflix recently because Ive found myself watching more free things such as CNN, Youtube and Justin.tv. I use to love netflix but recently got tired of the B grade stuff they're pushing.
Jailbreaking: The community, the challenges and fighting Apple
> Disaster: MySQL 5.5 Flushing

> Disaster: MySQL 5.5

> MySQL

I found your problem right here.
terrific article by Matt Brian
Drug deaths now outnumber traffic fatalities in U.S.
In a nutshell, Mulberry is more opinionated than Sencha -- by being opinionated, it makes it much easier to get an app up and running without worrying about the underlying architecture of the app.

Mulberry expects that you're creating a content-centric mobile app, and so it expects you to define your application in terms of nodes that have assets associated with them -- assets like images, videos, audios, feeds, and data. Nodes are the building blocks of a single-page application that Mulberry creates inside a PhoneGap wrapper. Nodes are displayed with templates, and templates consist of components. You can use the components that come built-in with Mulberry and write very little code; however, you can also create your own components to add custom functionality to your app -- this is where Mulberry's true power lies (see the blog post for details).

Speaking more generally, Mulberry is aimed at developers who aren't interested in spending time on the low-level architecture of their application -- things like data stores, views, etc. Instead, Mulberry is aimed at developers who want to create their content, create their assets, create their data, and then write simple JavaScript and CSS that presents that content and data in the ways they need.

Hope this helps :)
The only way was to sneak it under a story about federal law. :)

self-solving problems like split ends

Could you explain that? I though split ends forced to cut one's long hair regularly.
I'd love to see a full list of all the books you read and the order in which you read them. I recently started reading The Story of Civilization and augmenting it with other works seems like a wonderful idea.
Let's see how much karma I can lose in one thread.

There's a difference between not thinking a joke is funny, and arguing against it as if it weren't a joke, a la tiles.
I agree, a mention that it's a PDF would be welcome. PDFs and browsers don't go well with each other (at least on my machines).
Apple doesn't compensate security researchers, so I am not disappointed or surprised. In fact, they just ignore people half the time.

If it was a bug in a Google product, you can bet that he would have coordinated his disclosure with a fix.
Good Job. Let's see how they will perform over time. At least there will be some very young and motivated people in the berlin parliament.
This pro-Internet wiretapping billboard is absolutely Orwellian
I don't have the specific page citation but I read it in Levy's In the Plex.

You can see that Kindle users have highlighted the passage here: https://kindle.amazon.com/work/in-the-plex-ebook/B003QJNVO4/...
I find keeping my eyes on the prize motivates me. I like watching interviews of people who've been successful its inspiring. ThisWeekInStartups has plenty of this. Keep long term benefits in mind, like having the freedom to do what you want, whatever that is. Combine that constant enticement with a regimented schedule and things begin coming together, at least for me they did. Plus once the ball gets rolling its hard to stop!
Despite all the ranting on HN about bcrypt, pretty much no one actually uses it. Not linux, not windows, not apple.
Even if it would be just A SINGLE PERSON who is denying the holocaust we should fought it. But I see that some people want to have better internet rights and willing to forget the most tragic event in the human history.

You can down vote me as much as you like but I will never give my vote to a party who has member who are just lying like that.

AND YEAH he is still active in the Piraten party. Source from december 2010:
http://translate.google.com/translate?sl=de&tl=en&js...
WhatWasThere - Put history in its place
How is this different in MySQL 5.1?

From the article I get the impression that this is a new problem introduced with 5.5.
I wasn't talking about the downvotes, that's to be expected. I was talking about the humorless replies :)

If we all acted our IQs, all the time, the world would be a very boring place. It's not responsible to buy myself expensive toys, it's not respectable to be sarcastic. Yet we do it anyway.

Trolling is meant to make people angry, I meant to to get a chortle out of at least somebody... but now I know, beyond a shadow of a doubt, that this is not the site for that. Thank you for helping me realize it.
The reason it doesn't get used for serious or complex projects is simply because of it's lack of capabilities. The big one is debugging and this is a huge reason for why you won't see EEs using these at their day jobs. Electronic engineers are accustomed to being able to step through code, watch variables and all the other niceties that in-circuit debugging offers. With Arduino you lose all of this, your flying blind with maybe a flashing LED or a serial output to help you out. Who knows how you will detect elusive bugs like out-of-bound array errors. The time you gain with some nice wrapper functions and libraries you will quickly lose when trying to debug a complex project.
Features wise, you can do things most of the more advanced features which require bit manipulation of the AVRs registers like interrupts, timers, etc. with Arduino. Though at that point the lines are so blurred because half your code is AVR-GCC and half is Arduino.
Why don't we see the simple consumer products using Arduinos? I don't know for sure but it's most likely because something simple is just as quick to code without the Arduino libraries.

Atmel and most other micro suppliers are now coming out with their own "frameworks" these days, which are similar to Arduino in providing libraries for common tasks with a similar level of abstraction to Arduino, without the loss of the higher level functionality like debugging. These are a lot more attractive to EEs than Arduino is.

It will be interesting to see how this changes over the next 5 or so years. By then most of the young engineers who grew up with Arduino or were even introduced to electronics with Arduino will have graduated University and will be working in the industry. It will be interesting to see the effects that this generation of new engineers have.
Agreed. However, even with that domain knowledge, an outside party cannot determine for one of the parties whether or not they find it "fair" or not. This is not the role of government. It's common knowledge that contracts require domain knowledge, and if you proceed without it, it's akin to riding a motorcycle without a helmet, eating foods fried in trans fats, or driving a car without a seatbelt.

Oh, wait. Nevermind.
Other than the draconian blackout restrictions. A truly impressive operation wouldn't require me to move to another state to watch my team's games. Actually, I live in Vegas and I still can't watch games for any of six teams that happen to be based in neighboring states.
Why is it considered bad form? Considered by whom?
What are best books to learn coding from?
I got into HTML, CSS, JavaScript, jQuery, PHP, SQL, MySQL and AJAX. What are best books on those topics?
I've seen DBs run on 128G machines on x6 and have no experience of such problems. Do you have a link or hard evidence of this?

I have seen throughput issues on VMWare machines (and false reporting on standard linux utilities, eg "time" output and various other issues that make me distrust it for performance-sensitive software), but don't know if this is to do with 128G machines; usually it's to do with contention on one network card handling all traffic to disks.
Video Games M.C. Escher Would Love
While that may be true, text search over documents has certain requirements that differ from the use cases being mentioned for homomorphic encryption over the past two years (since Craig Gentry's paper on fully homomorphic encryption). Although possible over structured data that you'd find in a database, I'm not sure if there's been a clear way to apply homomorphic encryption to search. If there has been progress made in this area, I'd love to know.

In documents, keywords are scattered through the plain text and conjunctive keyword search should be possible without giving way to dictionary attacks: If I search for 'fire truck' I want a sentence 'the truck was firing up' to potentially return as a search result, but at the same time I don't want to encrypt each tokenized word ('fire', 'truck') and pattern-match the ciphertext.

Encrypted search is an active research area. One of the more interesting/cited papers I've come across on the topic is Conjunctive, Subset, and Range Queries on Encrypted Data by Boneh and Waters [1] although there are several others. Boneh also authored an earlier paper on encrypted search involving public key encryption.

[1] http://crypto.stanford.edu/~dabo/pubs/papers/search.pdf

[2] http://www.cs.berkeley.edu/~dawnsong/papers/se.pdf
Why would I want this?

By this I mean, what's an end-to-end use case for it? In which a user wants a SHA hash of a file, uses this thing to get it, and then does something with the hash.
Video gamers take on protein modellers
Why Biased Minds Make Better Inferences
Be careful of your NUMA boundaries. 20-30% is exactly the cross-bank access cost.
Hey Thomas,
The itch I was scratching with this tool is that there isn't a built-in way in Windows to get a digest of a file, so... what better way than doing it in the browser?

Also, I'm the paranoid type and don't like the idea of uploading a file to someone else's server if I want the digest.
Good for the google wallet team =). I wish them all the best!!
Apple uses a key strengthening algorithm on their passwords, similar in concept to Bcrypt - I think they've increased the number of rounds past the 1000 mentioned since this paper came out: http://people.cis.ksu.edu/~sakthi/src/data/filevault_sakthi....

If you've already compromised an account and have access as that user, it's likely that what you're going after isn't going to be their password...

... although, if you were to nab the password file and their keychain file (which contains passwords to other accounts that they access) which is generally encrypted with the same password (the system nags you if it's not the same), you could potentially do some real damage.
Uhm, no, millionaires are people who have at least one million dollars in some form. The article is about people making at least one million dollars per year; a much smaller group of people.
I don't know what you mean by "90% problem", but unlike what your blog article suggests, Django's template engine escapes everything by default. You have to explicitly pass content through a filter to request that it not be escaped.

Based on the fact that the suggestions in your blog article could easily support someone forgetting the "|escape" on a variable, I would accuse your methodology of only solving the "90% problem".
I'm pretty sure having two Google Accounts is a violation of their policy too.
That is not true. The drift velocity is the average velocity of the electrons due to the electric field. If there is no electric field, the drift velocity is zero. The term you're looking for is the Fermi velocity.

If you really want to be physically correct we'd have to admit that it doesn't really make sense to talk about the velocity of a single electron, since you cannot really follow a single electron. But by analogy to a water hose, it is sensible to define the velocity as the average velocity of water particles, instead of looking at a particular particle which is also moving randomly due to heat. This is the drift velocity. An alternative is to look at the average speed (the length of the velocity vector). Then we'd be talking about the Fermi velocity (which isn't the speed of light either BTW), but from the quote in the article it's clear that this is not what they mean, because they are talking about the velocity at which electrons move through a cable as a signal, not the velocity at which one electron moves randomly due to quantum mechanical effects.

If you don't agree with these definitions of drift and Fermi velocity, check their respective wikipedia pages.
Why does he use flush_method = O_DIRECT?

Last time I checked that was a recipe for terrible performance. We normally leave the flush_method set to default and keep a couple slaves around to minimize the potential for data loss.
This could be useful to validate large files after downloading them, e.g. ISO files for Linux distributions--however that goes out the window with the 10MB size limit.

Why the limit? Does it take too long to compute hashes for larger files?
1/3200 chance someone will be hit by a satellite next week
I have been using Alt-Left for that. Backspace always sucks and it's too far away!
When the netflix pricing scheme changed, I personally switched from the 1 disc + unlimited streaming to discs only - simply for the selection it offers. I'd rather have good selection and have to wait a day or two than have limited selection instantly available (and for movies specifically, I think most people would agree with me on that). I'm wondering how many people also went this route, and if this change combined with the recent increase in competition from studios has taken a lot of wind out of the sails of Netflix streaming.

I say this because in order for Netflix to making a compelling argument to studios to distribute through them over some form of in-house streaming, they need to have good numbers for their streaming subscriber-base, both in size and growth. When studios decide to pull their content or go their own way, then the product suffers and Netflix loses some ability to convince other studios that it would be dumb to go alone.

Forcing subscribers to choose now between streaming and discs may have been a bad decision in that forcing people to re-evaluate their subscription options in a time when they seem to be hemorrhaging premium content may have forced some people's hand who may have otherwise seen the potential in the streaming service and stuck it out.

On a related note, I also had the unpleasant experience of getting really into in a show that was on Netflix streaming, only to have it pulled by showtime after I had made it mid-way through the second season (of 9 seasons). There was no way I was going to start a new subscription, pay for showtime, and download / use whatever client they have just for access to this one show, so I stopped watching it, sadly. I think that experience has definitely had an effect on me as far as willingness to pay for Netflix (and potentially other services) subscription content as well.
I'm surprised WalMart hasn't done this yet. I can already get my oil and tires changed there.
Good question!

[Wild thought] Create a file with a list of H(chunk) forall chunk you own. You encrypt this file with a local password that the storage provider does NOT see and plainly store it.
Either DepthHub or TheAgora, maybe.
Absolutely agreed. It is due to the immaturity of the browser implementations, which will hopefully be fixed soon.

It regularly crashes(!) Chrome on "large" files; thus, the limitation.
I'm not well aware of any iTunes competitor with the number of paying customers apple has or had when iTunes first came out - I'm guessing they just went where the money was.
You aren't worried that doing this via Javascript will make it insecure for that use? In almost the same manner as uploading your file to a server (simply to get the hash) would be?
That's what I was thinking. Need some analysis on it really. We throw money at the problem at the moment and it goes away :)
Hand-held Nintendo 64
I would add Jacob Burckhardt's The Civilization of the Renaissance in Italy to the book list. It appears to be a glaring omission.
I dont' really understand what you're saying here. Other services that calculate the digest of a file online require you to upload your file to the service/site where you don't know what they will do with it. With Browser Hash, not one bit of your file leaves your computer or travels over the network.
If the average consumer thinks the problem bitcasa is solving is a strong enough pain point and use bitcasa's product anyway, then I can see SpiderOak moving into this area regardless of the security issues it brings up. Unfortunately, the average consumer doesn't care enough about security for "implementation details" to sway them if they have a pain point that the product solves - even if those implementation details make a world of difference in terms of privacy. There are already products out there that store files from a user's devices (laptops, desktops, etc.) on the cloud with no mention of not having access to the encryption keys if they do do encryption: https://www.sugarsync.com/ is an example.

A little off topic: I do think that the community has done a good job drilling it into the average user to look for the green bar and padlock in their browser when they go to their bank's website. It means Security. heh.
I think the market for an a la carte sports offering would be people who are really only hanging on to cable for it's live sports. If that is the case, then these people could go from paying $60-100 a month to $20 - so it really depends how many of these cable-for-sports-only consumers exist.
Really excited about how this is all going to play out. I'm hoping for lots of NFC support with upcoming phones, but if the stickers are really easy to get I'd be willing to try them out as well.
In this world where everything is done through a browser, where would I drop my files from?

On a serious note, can one drop an attachment from say gmail onto that?

And dear someone, please tell me that sha1sum & friends exists for Windows!
Totally agree with this. Apple really ignore most security advisories, and I am speaking from experience.
There is only way - word of mouth. Me liked and tweeted. A small contribution from a fellow norwegian :)
I'm wondering the same thing. I use filevault, but I don't feel like messing it up by changing the password this way.

I wonder if you can reset the password and use that password to simply disable the filevault.

Btw. My five cents. Write a script to:
1. change current users password to X
2. sudo "something really bad"
3. use password X

And there is a virus that can do anything on a mac. If you can change the password of the current user and he/she is an administrator, then any application can escalate to SU.
It would be interesting to see if this was possible in OSX Lion Server.
I depends what it means to be 'authorized' to do something. Do your want to object to only 'know' how to do something it is authorized to do? You might be able to borrow some ideas from the Strategy Pattern to accomplish this. You could assign the object specific strategies for certain tasks based on the permissions you determined and then for the life of the object it would know what it could do and how to do it.
Split ends aren't even noticeable unless you look closely at the tips of the hair. And they don't travel up the hair or anything, they stay put, one side breaks off and then the other side breaks off. I've not even looked for split ends for years and I have fantastic hair. It's a total non-problem that you can safely ignore.