skysight-inc/HackerNews huggingface dataset:
You have to use the salt in a way that is not trivially breakable. Look up HMAC for the only approved way I know of to do it (whoops, dogma; you can probably invent many ways to do it, but HMAC is simple and considered secure, and I don't know anything else that is). Anyone suggesting just making the salt longer is missing the whole damn point of this debate: Cryptography is really hard to get right and smarter people than all of us have screwed it up. Thus, relying on only the best decisions checked by many others is not "dogma"; its the only sensible decision.
There are only two possibilities to get more security: either don't use password based authentication or force your users to pick passwords of 16 chars or more (or smaller if you can force capitalized letters, non alphanum chars...).

In general the math is trivial:

(alphabet_size ^ password_size) / hashes_per_second

gives you the amount of seconds needed to crack a password.
You can set hashes_per_second to 1 billion for attacks that a private can do with little money. Maybe set it to 1000 billions per second if you want to protect yourself against bigger entities. But once you enlarge the alphabet_size and the password_size it is fast to reach a point where no brute force attack is feasible at all.
The headline and much of the Engadget article seem to complete ly mischaracterize the quote from the book. The quote (and history) indicates that he postponed opening up for third-party developers, not that was "opposed" to the idea.
Groupon Roadshow Presentation Now Live
Don't like my comments in my code? Don't read 'em. They're useful to some people.
He doesn't have to run a company - that's what VPs are for - he has to LEAD a company.

In the 70s you lead by having the best hardware - you needed Woz at the head.

In the 80/90s you lead by having the best OS - that's why Next mattered.

Then you lead by having the best design - it would have made sense to have the designer at the head.

Apple is currently winning because it has the best production management in the world. It got their by having the best design but it's unassailable now because it totally owns the manufacturing business. Who else can get Samsung to produce cheaper parts for it's tablet than they can supply to their own tablets!
Cardiology EMR
The OmniMD Cardiology EMR addresses the vast information needs of the Cardiology specialty.
Could be an internal thing. I really can’t remember Jobs ever publicly and personally taking credit for design. But maybe he did inside the company?

I guess we will have to wait for the book for more context.
Are QR Codes a Real Security Risk For Smartphone Owners?
I agree - it is the old principle of least surprise. You should use comments when the code reader would be surprised...

Sometimes you have to do bad stuff and you should stick a comment in there so that when you come back to that bit in code you are forewarned...

Think of it as hic seunt leones on old maps (here be lions for all the non-latin speakers out there...)
"It assumes you don't care what is going on in any programs except the one you currently have focus on."

The menus for all programs are hidden. To even see the menu for the current app, you have to mouse-over the top bar. You have to select a window before you can see its menu.
Kind of ... but only because I was born in Ogdenville and went to college in North Haverbrook.
Moby Dick - a survival manual in times of crisis
Show HN: Crystal clear and natural sounding Google TTS voices
Google bought a company called Phonetic Arts last year to make their synthesized voices a lot more natural. I think they've just started implementing that technology in Google Translate. I don't think it works for too many languages yet, but English and Spanish voices sound very natural, almost real.

Write something in the text box and then press to sound button to check it out. I'm not sure if it matters, but I'm using Chrome. I know Google has just released some TTS API's for Chrome recently.
Yep, having a bunch of K-6 students on a bus at 6 - 8pm every night in the winter is a safety hazard. It gets dark early and school buses are not the best for long term warmth when they break down.

Working 11 months for 10+ hours a day is a nightmare for most parents. Add to that the inevitable homework and you get a "work" / life balance that is a nightmare. No time for friends, dance, music, or play. Wakeup, goto school, do "approved" activities then come home and eat, do homework, and go to bed. More hours are not the answer. We need creative workers in science, math, engineering, and vocational. Not a bunch of factory robots.
This discussion is one that will never die because people will always have entrenched, dogmatic viewpoints on this. I dislike comments that explain what you're doing. The code should be readable enough to see what you're doing. However having spent over a decade now maintaining code written by people that may not be with the organization anymore, it's always nice to occasionally get context on WHY someone wrote the code they did. Odd bugs and subsequent workarounds, weird client requirements, etc. I've spent many hours trying to figure out why someone did something because they're not around anymore to ask. We can go on and on about the purity of code and how readable it should be but no amount of concise code can replace "did this because of client requirement X,Y and Z" right there so I don't have to go hunting to find out. The gulf between how things SHOULD be and how they ACTUALLY are is pretty wide in my experience.
I've wanted to build a cross-browser BitCoin plugin for some time now, but the impossibility of it ever running on iOS keeps me from starting. Would such a plugin satisfy your needs?
There's a difference between not promoting someone from lead code monkey, and not promoting someone from head of industrial design at Apple. The latter is a valid landing point for the rest of your life.
+----------------------------------+
| TODAY'S LIVING SOCIAL DAILY DEAL |
| |
| 1 Share of Groupon Stock |
| |
| +---------+ |
| $9.00 | BUY NOW | |
| +---------+ |
| |
| 50% 224 2 days |
| savings purchased remaining |
+----------------------------------+
Why geeks should care about meaningful use and ACOs
antirez, while I really appreciate the sentiment that one should not simply follow dogmas but be curious/question/understand them, there is a fine balance. In your case, if it were a learning exercise, it's perfectly fine to invest time and understand why other approaches are bad.

But if you're writing a software that other people depend on, perhaps it's best if you follow widely accepted principles, but do the questioning and curiosity _later_. On a meta level, depending on a person's level of curiosity, it's very difficult to answer why certain things are the way they are. Sometimes, you just have to take the word for it. :)

I am not pointing fingers at you specifically, but it's just a general observation. I do not know if Lamer News was just an experiment, or a serious effort that others can use.

Cheers,
Well.. I can see that a problem for 0.5% of business's... maybe... I think he is over thinking this, most business do not need that kind of protection

There are better ways to "hack" a company that spoofing their websites analytic lol, people that got that large number of ips have better (worst) things to do than that..

Also how the f would you know they are ab testing something..
Definitely not limited to funded-startup. I have been either directly involved or personally seen a couple of bootstrapped startups whose co-founders left their startup within 1 year due to co-founders not working well together.

I actually thought it's the number 1 killer.
I'd really appreciate it if you could suggest why we couldn't implement similar algorithms as the brain, that possibly require a massive number of fetches & executions simultaneously (guessing this is where memory bandwidth plays in), but have the results show up much slower.

Shouldn't it be possible to have artificial AI mimicking human brain algorithms at 1/100th the speed, where perhaps a single thought based on learned information takes hours, instead of seconds?
>So the statement "In this way the bank could artificially jack up the new company’s price," is the opposite of the truth

You're taking issue with at what point Goldman Sachs takes their 6-7%, while totally ignoring the main point: Goldman Sachs has engaged in laddering which is considered fraud.
Yes you should. It is often the simplest way of discovering why it is there - you see what part will break.
He designs stuff that looks pretty, but you can't open it to isolate power or replace the battery easily.

It's dangerous. Having watched my MacBook Pro go up in flames and nearly take my house with it, I have first hand of how awfully designed Apple stuff is from a safety and engineering point of view.

Also, I want to replace my iPod battery after 3 years (Nano 4th gen). Can I? Nope, not without special tools, high risk procedures and a flipping soldering iron.
Re-inventing Android : Ice Cream Sandwich
Yes, that's true, though I think being a professional also includes the option of saying "no" (on how you say it, that's another question).
I think it's important to not confuse "dogma" with "development best practices," a lack of which is one of the problems that is hurting software development. People go off and do their own versions of password hashing because they don't know what's the best practice or think they'r e being safe.

Is it important that you know why brcypyt is a best practice? Yes. I understand that it (tunably) is slow and uses a random salt, which I also know is a best practice for hashing passwords. Is doing repetitive sha1s going to work well enough? Probably, but I don't know enough about cryptography to know fo sure. So when smart people say, "use bcrypt," I do just that.

Programming is too big of a topic for everyone to understand everything about what they're using. We have to trust others.
I have a lot of software installed that I use once a month or less. How do I search for something I don't know the name of? "I think I had some vector graphics programs installed. Or was that my other computer?"
vending machine hacks, although both illegal and immoral, provide an immense source of joy in knowing that you _beat the system_, regardless of what treat may come out.

here's my biggest vending machine hack: freshman year in college, there was a vending machine in our dorm building. it wasn't cheap (obviously), but it got lots of use because it had something extra: a card reader for our IDs. if we pre-loaded our card with money, we could use it to buy sodas, snacks, and washer/dryer cycles. very convenient.

but the vending machine had a quirk: occasionally, for reasons unknown, it would just start spitting out coins. it was a pretty rare occurance (and a very exciting one) that it became known colloquially as "hitting the jackpot". every time we went to the machine, we would cross our fingers, hoping to "win".

while it seemed like a random occurance at first, i knew it couldn't be completely random, and i wanted to figure out _why_ it was happening. so i began investigating. whenever i went to the machine, i would try different combinations of buttons, choosing different rows/columns, but i couldn't recreate the behavior. accompanying my friends to the machine, i paid attention to how they were inputting their order (and if they subsequently "won") to try and figure it out.

after lots of observation, i found a pattern: everyone who ever won used their card to buy something. focusing on the card reader, i also found that these people had accidentally put their card in _incorrectly _ before righting it. with a theory loosely in place, i put some money on my card and gave it a whirl.

and it worked! here's the behavior: if you put your card in incorrectly, the machine couldn't read it because the stripe was on the wrong side, so it spit the card back out and flashed an error on the screen which would clear after a few seconds. while the error was showing, the machine would not accept your card. however, if you put your card in _immediately_ after the error cleared, here's what happened:

1. screen displays the amount of money on your card

2. choose your drink

3. drink is vended while the same amount of money is displayed (i.e. not subtracting the price of the drink.

4. the machine begins spitting out coins in the amount of your card value minus the price of the drink

5. the card is returned with the _original balance_ still intact

so, if i had $20 on my card, and i bought a powerade that costs $1.50, i would walk away from the machine with a powerade, $20 still on my card, and $18.50 in change.

horribly immoral and illegal? absolutely. however, i still feel immensely proud that i not only figured out what was happening, but how to reproduce it.
I signed up for an account just to say I strongly disagree with this. I'm a sys admin who doesn't spend all day writing code, and certainly doesn't know all the common idioms associated with different languages. Leaving a comment about in the code about something that's not obvious to some one who doesn't code in perl/ruby/php (or whatever you're using) but if familiar with common programming concepts is beyond useful to someone like me.
I agree with you. The problem comes when we are so focused on proven stuff that we end allowing only one possibility at all, since the implementation I suggested was well established practice with an RFC.
The IMF does not exist for the well-being of (former) third world countries. It exists for the well-being of its masters, i.e. the US and Western Europe. This explains most of the policies that the IMF likes to push on developing countries.

Note that IMF-type policies of austerity can theoretically "work", if there are sufficient net exports. Even when domestic demand is savaged by austerity measures, the economy can grow by producing goods for the US and the EU at cheap prices. But net exports-led recoveries are a typical case of fallacy of composition: if there is a world-wide recession, then going for net exports will fail (unless we somehow manage to export to Mars...).

The problem facing the US and EU these days is that people seem to have forgotten that austerity was only ever a policy meant for the others.
Shouldn't that really be 0%?

Oh sorry, walled garden.
It actually reminds me more of a gOvt jobs creation program. But yeah, I'd short the hell out of this stock. I bet Goldman did the IPO for better info on pricing the CDS
Of course the onion will show you if the temperature sensors are working correctly ...
To me this says more about the attitudes of technologists than anything about OWS. I also note that there is no Occupy Palo Alto going on.

Tech startups are at the bleeding edge of capitalism where it is a fun game. Which is great to see The System work! We need a pluralist economy with all types of organizations. Startups have to challenge existing hierarchy in certain dimensions (business model), but strictly follow existing hierarchy in others (profitability, exit strategy). I'll cite the pg-Monsanto event here.

There will always be a need to reconcile whatever structure exists in our cultural hierarchy with the broad needs of everyone that has to bend to the hierarchy we've chosen (or let happen). Athenian style democratic action is great way to do that.

It is more meaningful to measure how cultural hierarchy responds to the incoherence that is real democracy (considering every person's desires equally) rather than how people's desires submit to the existing hierarchy.
That strikes me as extremely unlikely. Steve's superpower was never being intimidated by anyone, even in the early days when he had so much more to prove. It's hard to imagine his own image being something that could cast a shadow on him, especially as his successes multiplied.
If you can't remember why the onions are in there you've written poor documentation.
I'm sure that this is true, but it's awful and broken and we ought to find ways to fix it. There's way too much talent and energy spread all over the world, and frankly the group-think that melts young, brilliant brains into caring way too much about mobile apps for taking pictures of your food is sad, and boring.
The Inner Workings of IBM's Watson (Video)
The right to hyperlink - in response to the Canadian decision
That was surprisingly legible!

And I don't think it is because of my 'giant brain', considering how long it took me to understand Taylor Series in university.
If our highest priority was always "Don't break anything", we would never ship to production after the first move. "Make it better" is often a higher priority.
From what I and my fiance (pharmacist) have been able to gather about it, RLS only seems to occur in people taking a specific heart medication. So they (Merck I believe) made another drug to treat their own side effects.
There were plenty of boondoggles in the 30's too. We remember the dams and highways because they were the successes, not because they were typical.
Actually, that's very apt.

It's a way of justifying your preconceived notions without actually testing and (in)validating them.
Well, "If you don't remember why onions are in there, investigate carefully as to why they were added in the first place, then take 'em out if they're no longer relevant" wouldn't fit in the title!
I like unity, but it doesn't work on my quad-monitor setup. I know I'm in the extreme minority, so I stick with Xinerama and broken window managers for the most part. It mostly works, and I'm productive on four screens. Good enough.
If you wanted a tablet that had no compatibility with Windows - why would you get a Windows tablet?

You are stuck in the problem of either adding a 'bit' of backwards compatibility until you get into the state of supporting 1980s netware apps because some customer in one focus group mentioned them. Or you deliberately change things to differentiate it.
how would they enforce that? check the url's you are hitting? would love to get a tunnel set up on an ubuntu mirror server :P
I'll take a dishonest politician who votes for the right things over an honest one who is wrong any day of the week. Paul is a nut. The fact that he's right about a handful of things doesn't mean much: stopped clock, yada yada.
Comcast has gone from being synonymous with Bittorrent throttling to making the "best" list for lowest throttlers.
This piece of advice does not apply to legacy systems. There is a lot of stuff in there that nobody knows how it works or why it is in there, yet attempting to throw it out has led to so many disasters in the past that no one dares to even think about removing it. Of course there is no budget or political will to investigate - money comes in just fine even with the onion in the varnish.
They're not "skeptics" any more, they're "deniers" now.
Nah, it just doubles the likelihood that someone you're talking to is gonna say something you know is stupid.
Might not be government "waste", but it is a perfect example of government inefficiency!
Impact of 4S on App Sales
the ability to tell the operating system to open a file stored with FileSystemAPI using the default registered native application (it must be possible to get notifications when this file changes, for syncing to the server).

This is a seriously scary concept. It has all the same dangers as the automatic-file-opening did in Outlook.

It can probably be done securely, but wow, that's not an easy problem.
Everything I've read about that suggests its focus is on case studies of Apple business decisions. The how and the why of Apple's successes — and failures, as well, perhaps. Not an indoctrination in Jobsian thinking.
My pitchfork and torch is always ready but have they ruled out the possibility that the measurements are a result of something other than ISP targetting P2P? Something like ISPs just blocking bandwidth hogs? Have they tested various protocols with similar characteristics to see that only BT is throttled?
Better than before or better than Ruby?

I think you struck a valid point, though. There are lots of options for relatively small Python-esque web stacks, and considering that the architecture style seems to go that way – with lots of independent services and big JavaScript frontends – you're often quite well-served with Python.

But maybe that's just my somewhat biased perception, I wonder how the general trend of Python vs. Ruby fares in comparison to the trend of Django vs. Rails.

And speaking of bias: Once you get small services, interop features and libraries become quite important to save you work, and I have the feeling that quite often generic Ruby gems could use some work. Often there's a plethora of half-abandoned solutions for one task, all somewhat orphaned on Github.

Then again, both languages still don't come close to CPAN in that regard (then again, what does?).
I think there is still a difference between circumventing security, circumventing security without any tools and circumventing without leaving traces.

I can't see why you can't make an iPad everything-but-screwdriver-proof.
By "sensible" you mean "disastrous." Owning Sony Pictures has been a consistent money loser, and the studio IP concerns at Sony Music and Pictures hamstrung their electronics arm from innovating in the face of the iPod threat.
This looks neat. Definitely worth a look for some educational stuff.

It's not clear on the webpage but this was released under a MIT license
I think 4 is a bad interpolation!...Lets imagine that everyone had a highly intelligent MIT grad as an indentured slave who will do everything you say..Everyone will still choose to send their own messages.
The Coming Ubiquity of Video Communications
Precisely. Clojure was my first Lisp, and I got spoiled by the "every collection is a seq" uniformity. In Clojure, functions like 'count' can operate on all collections, whereas in, say, Racket, you have an explosion of methods like:

length

vector-length

string-length

hash-count

set-count

...

Clojure embodies Alan Perlis' idea that "It is better to have 100 functions operate on one data structure than to have 10 functions operate on 10 data structures.", which is one of the many reasons why I enjoy the language so much.
Betting Against Entrepreneurs & Hoping To Lose
Regardless of who is right or wrong on this issue, I have to say I'm pretty impressed with antirez for keeping his cool and being up for genuine dialogue in the face of some pretty brutal and abusive comments from Coda Hale and others.
Yes, I've used this and it's great for anything where you want a C-stack backtrace.

As a variant, if you want a language-level backtrace in an interpreted language, you can:

- set up a signal handler which dumps a (perl, python, etc) level backtrace

- hit the program with the signal a few times
If you jump into the [code itself](https://github.com/worrydream/Tangle/blob/master/TangleKit/T...) it mentions that it is MIT licensed.
The complaints are similar, the proposed solutions are different. Broadly, the OWS crowd proposes to solve the problem of corrupt government by making it bigger and more powerful so it would hopefully take on corrupt Wall Street, the Tea Party crowd would make corrupt government smaller and less powerful, and a significant percentage of them also are in favor of making it impossible for businesses to get "too big to fail".
Large corporations generally don't feel like they can get away with ignoring rules just because they aren't enforced. What if the Post Office suddenly started rejecting "packages" that their policy said they should reject? The corporation wouldn't be able to change their process quickly, and would lose a lot of money until it was fixed.
those don't seem specific to aquamacs. I also don't remap cmd to meta, i bind the most common things to cmd like this.

(global-set-key (kbd "A-j") 'find-file)