skysight-inc/HackerNews huggingface dataset:
I run an online portfolio service FolioHD (http://foliohd.com) and we get that question a lot: "Can people steal my pictures?" We've gone the extra mile to make sure saving pictures is a lot harder than a right-click and Save As, but it seems like lot of people don't even bother trying that first before asking. All the while, a simple screen capture of whatever you're looking at is just as easy, yet no one seems to know about that trick. The assumption is that Flash is safe, but not even Flash can protect against a simple screen capture.
Mexico vote annulled over Juan Manuel Marquez shorts stunt ~ Daily World News
Manually inspecting the price of each purchase, as an alternative to doing a server-side check? That would be the equivalent of being able to change the price associated with a product barcode and asking cashiers to verify the prices for everyone's purchases.
Bug report: I am using Opera 11.60 on Linux (64-bit). When I click on "blank" pack, Opera hangs and I have to terminate the application.
Hi everyone. We've been away from our computers for a few hours but wow, thanks for the feedback (good and bad). We're going to go through all of your comments (and those that have been submitted by email and Twitter) and prioritize our efforts.

We know there are still lots of things that need improving (handling lots of feeds, how new items are displayed, organizing feeds, etc) - we'll do our best to get to these asap, but wanted to get this 'out the door' as quickly as possible to get your feedback.
That's why I would keep a hash->key table. If the hash matches but the key doesn't, it's a collision.
Ask HN: Amazon web services for static web site?
Hello HN,

I'm building a really basic website with some lightweight Javascript for a small business and am mostly expecting traffic from SEO or by word so nothing crazy like a Slashdot/HN effect.

Taking this into consideration, would it be more cost-effective to have the website hosted on Amazon? I'm predicting large periods of time where people won't be visiting the site, so I feel like going with a traditional dedicated host would be a waste.

Thanks!
The UI part is easy if you are using Three20 (while some people might argue :p), the backend part seems very attractive as you don't need to have the knowledge to setup the web server/storage for serving the data, and need to worry about the scalability issue etc.

Would be great if you also provide a CMS for editing the data.
Correct me if I'm wrong, but I'm under the impression that government employees' correspondence with a private company is confidential.
For only 25 dollars i'd love to have one as mpd client connected to a drive with all my music. It would be fun to have a portable computer and script an interface accessible for parties where people can cue up music on their smartphones. If i really got after it, I could script location of songs i dont have via youtube...lots of cool possibilities.
Show HN: Tabletop Roleplaying with jQuery & Node.js
I've just launched Fabletop, a web-based "virtual tabletop" for roleplaying. It was created with jQuery on the front-end, and Node on the back end.

When you register, you get your own "table" page, which is a kind of persistent chatroom where you can GM games. The miniatures, dice, battlemat, and chat system are all built in.

The default ruleset (d6 dice pool + trait-based characters) is intended for quick, mostly freeform games. This sidesteps many of the common problems with chat-based gaming, and should make it easier for players to join any game posted on the site.

I'd appreciate any feedback.

Thanks!

http://fabletop.com
I still don't get what was wrong with Stratefor. I subscribed to their newsletter a long time ago and the content was somewhat on the Foreign Affairs magazine level.

Sure, some military and secret service personal were among the subscribers, but they are most likely among the subscribers of the Wired magazine as well. I am truly looking forward to the email leak and what kind of secret in formations they are able to reveal.
We do. It still has a long way to go but you can edit the data via our data browser.
No I was not arguing against weak typing, just taking the opportunity to highlight how these kind of questions are used. I have no issue with weak typing. I don't get too dogmatic about such viewpoints. My comment was rather an attempt to highlight where a lot of this type of trivia knowledge is used and misapplied.
Powerful actors must be held accountable for the use of their action. To believe otherwise means that might makes right.

Private actors, whether they be firms or well-connected individuals are (and always have) attempted to influence those holding power. It is in the public interest to expose power and influence-mongering. Government, by virtue of its power over individual citizens needs to be held to a higher standard of openness. Private parties should be held to the same standard, when they choose to deal with the government in a manner that may influence its actions.
Love his post on how he got it all started: "How I Started a Dating Empire" - http://plentyoffish.wordpress.com/2006/06/14/how-i-started-a...
It would be unethical if the tables were turned and ordinary citizens were getting their emails released.

What do you mean, "if" the tables were turned?
That's exactly what hashtables do. When they find collisions, they add it to a list of keys that hash to the same value. They do this to be able to return valid data when you request a key - otherwise, you'd find them rarely and seemingly randomly forgetting data or overriding with unrelated values. It's a useful behavior, and it's the very source of the problem.

One way to prevent this attack is to use a hashtable that has a limit on the number of collisions per table, or per key, and throw an exception when it's exceeded. The problem is that doing so by default would break valid uses in very surprising ways in favor of protecting against an unlikely and probably unknown (when designed) attack, which you won't do, because that shouldn't be handled by basic datatypes.
> If you're against SOPA, you should be against tyranny like this. This is the tyranny of the minority, of anarchists who aren't doing this for moral value or just cause. This wasn't even done for retaliation or idiot bashing like hbgary. This was done for no reason but to cause harm and mayhem.

In normal circumstances I would agree with what you say, any sane person would agree with you actually, but these are not normal circumstances, what with all the TSA crap, the Iraq war that was started based on a huge LIE by the US Government and happily backed by the British, and I could go on and on.

At some point, better sooner rather than later, we the citizens of democratic countries should realize that our Governments are not there to rule over us, they have no special privileges, they have been chosen by us just to be mere executors of statutes and laws. They're not there to (tacitly) rewrite the Constitution and take away our rights (see the Guantanamo debacle in the United States), if they start doing that we as citizens have every right in our power to take actions against our fellow citizens who don't respect the fundamental laws of our countries (what most of them call a Constitution).
Is it? If it is, it shouldn't be. If the matter concerns clear and present threats to national security, then why is a private firm involved at all? If there is no clear and present threat, then why bother with secrecy?
As it is advertised, the subscription info is stored locally. How can it be deleted? I tried to delete the cookies, but it didn't work.
Please, don't tell me you are using those naughty evercookies.
This makes it no different from most programming languages. De-obfuscated code still takes a ton of work when you've lost all variable names, comments, and formatting.
> lets wait till these horrible abuses happen and then decide if we want the government involved.

In other words, wait until the RIAA/MPAA/etc negotiate a functional equivalent of SOPA with the major ISPs and payment networks and then decide whether or not not legislation about it is needed? Doesn't sound that different from passing SOPA and seeing how it works out, does it?
Is there something wrong with type 4 GUIDs?
Add to that a total bitch-fest, cliques, heavy-handed mods.
Finally, the untethered iOS 5 jailbreak.
I believe a number of us have been waiting for this. Great to have my iPhone 4 untethered already.
Sure my case is anecdotal at best, and maybe I have just been lucky, but my experience has been that implementing UI's with JavaScript is as fast of a development cycle as doing it in Java or C#. In fact the UI space is dominated by languages such as JavaScript and Objective-C where type safety is loose. I don't believe that fact means that they are superior, but they are as productive as strong typing for UI development in my experience. That being said, I do prefer strong typed languages for middleware and server development, some will differ on that, but it is what I am comfortable with and it works for me.
The future of moral machines
Not to be a pedant, but it should be "among", not "between."
I was curious and went hunting, and I think it might be this: http://en.wikipedia.org/wiki/Consumer_Broadband_and_Digital_...
It sounds like the proposed bill that Stallman complained about at the end of his right to read story. Here's that bill: http://w2.eff.org/IP/SSSCA_CBDTPA/20020321_s2048_cbdtpa_bill...

However, it doesn't really match the GPs description--I don't see anything about licensing compilers.
Good God, what a comedy of errors. First, that WPS even lets you get around a 256-bit key with a 10^8 PIN (like others, I thought WPS was pushbutton-only), but second, that this vulnerability brings the brute-force complexity down to 10^4 + 10^3, or 11,000 attempts: http://www.kb.cert.org/vuls/id/723755
Thought some and came up with an way to convert whichever natural number you want into this form.

https://gist.github.com/1531201

It depends on underscore.js for the functional bits.
It's not clear which parts of AWS you're thinking of using.

If the Javascript is client-side only, then you could host this on a combination of S3/Cloudfront pretty easily.

A full EC2 instance seems like overkill if this is a simple static site - I would look at traditional webhosting, or a small VPS instead, if you don't like the S3/Cloudfront approach.
They'll clamp down regardless. If anything maybe they'll try a little quicker this way, but they'd also run the risk of shooting too quick.
They will "get it" only if the video is accompanied by campaign contributions.
Blip.tv Just Raised $6 Million, But Where Is The Audience?
I was also somewhat confused. Just got my first DSLR and was hoping I would learn a few tricks.
> What they could, and are discussing doing, is defining Hacking as terrorism. I heard this from my own congressman's mouth and that's why this scares me. Because there were a log of Senators and Congressman subscribed to Stratfor and this is exactly the type of incident that might push them to act.

I'm not a US citizen and I don't live in the States, even though I am a huge admirer of how your political system was first set up (the Founding Fathers and all that), but all I want to say is that if you, as a citizen, have started to be afraid just at the mere mention of something possibly passing into "terrorism" territory only because one of your elected represantives hinted about that then it means they've already won.
So, lost profits due to being in a worse bargaining position is hardly a "harm".

You might not agree, but there is plenty of case law against you.

If you don't like that example, there are plenty of others showing the value of private information regardless of its destruction (for example, there is a whole genre of entertainment build around the spy novel|film).

The real issue is the fact you disagree with that, and are presenting your opinion as fact.
Nice. As a gluten intolerant person this is awesome. However, I don't have a WP7 yet to buy this. Waiting for the next version of Nokia's phone next year.
The presentation is worth reading. Scala is an awesome language whose main disadvantage is that it is a language for smart people.

http://www.paulgraham.com/vanlfsp.html
My first photowalk with the Lytro lightfield camera
The Dead Sea in Jordan – Natural Wonder of the World
Devil's advocate here:

If you want photographers to update their websites, vote with your wallet.

If you're not a consumer of professional photogs' products or services, you don't really have a dog in this fight, even if Flash blows.

To those who have used online portfolios to make actual purchasing decisions, was that a task you want to perform from your phone or tablet, or something for which you are content to use a larger display?

Absent that, please ready a trove of anecdotal evidence from other professional photographers, of the form: "I migrated my Flash web gallery to <insert alternative here> and my business grew by X%"
You do know that without the "government granted monopolies and handouts" there never would have been an Internet in the first place, right? Even putting aside the research dollars, AT&T would have, among other things, happily strangled the (end user) modem in its cradle had they been allowed to.
Actually, after having used it for ten years, I think C++ is the language which should be deemed obsolete. We don't need such a complex language anymore.

Long live C!
Worst case, even if you hate MacOS, you can just install Windows on the Mac after you get it.
He's also answering many questions in a 30+ min video

http://www.youtube.com/watch?v=2DVDI-HF4Eg
5 gadget predictions for 2012
Every time someone asks me if I'm coming back I answer that I would love to have a reason to, and I really hope the small business ties I have made here will pan out. As it stands, being an "internet company" (as you mentioned in a different comment) means I'm not tied to any location. I have no business reason to stay here, which is unfortunate, and it's not from lack of trying. I've met a lot of awesome people, Chilean and otherwise, but they aren't reason enough to remain uprooted from my life back home.
Yes, I was all on board with a possible "it drowns out the color."
They used Diffie-Hellman to prevent offline cracking.
Last I looked, it was a bit hard to follow, but iOS seemed to be storing reference counts separately from the objects. I think you could do (and maybe iOS does?) this on a per-thread basis, to reduce the need for locks.
If it's totally static you can just host it on S3 and it costs pennies per month. Here is a how to:

http://thechrisoshow.com/2011/06/05/how-to-host-a-static-web...
Isn't it trivially easy to defend against by adding a secret character/number to all of your keys, eg.: "dog" becomes "dogu" and "julia" becomes "juliau"?

In fact, why not do this at the language level? python could pick a random character at startup, and use it for the duration of the process.
Bike handlebars
It's interesting that he's using a freemium business model: the commercial version supposedly has more features and speed improvements.

I don't really care whether he does that or not, but I see it as part of a larger trend: open source software supported by a freemium business model.
Browsers are implementing full-screen for any HTML element. Firefox, Chrome, and Safari already shipped it and IE will in 2012. Try that for modern browsers and fall back to Flash for older browsers?
Really it all boils down to there being no VC opportunities. The only angel/VC investor that was formally arranged for us to pitch to has left the country.

In fact, the Demo Day needed to be arranged by us instead of SUP staff taking the initiative. Hell, they were actually against it when asked on multiple occasions for their support. In the end all they did was blog about it as if it was their idea.

The above two paragraphs really sum up the problems. Reimbursements are tough, without clarity, etc., but the program will surely fail if they don't figure out the above.
Secret Service gets password by letting foreign police torture the subject p19
We need to take back the concept of the government serving the people, they are our employees, we pay taxes that go towards their salaries, last time I checked, my boss has the ability to read emails I send from a company email address.
A single character wouldn't be any good, since it would be trivial to discover which one was in use by brute force.

A longer salt would probably work, but there may well be ways for an attacker to discover the salt in use, and longer salts mean more overhead.
Use Gistex.js to load up Github Gist Snippets
Mexico to slash weapons-grade uranium
If it starts skipping characters in longer strings then I'd say it's trivial to find collisions by simply constructing strings that are identical in the bytes that are examined and differ in the bytes that aren't.
Reddit has pagination, unlike HN. Sort the comments and you will find more answers.
I take it back. Now that I read this through to the end I no longer want to ask more posts like this on HN. Few posts like this exist anywhere; asking for them regularly is too much. This may be one of the best mathematical essays I have ever read. I see others commenting about one section or another which could have been left out, leaving a straighter path to the conclusion. But the amazing, intuitive leaps that allow to lay out the answer and then prove it are great for making professors look brilliant, but they don't teach anyone how math is actually DONE. In contrast, this essay motivated each tiny baby step along the way and illustrated how one might work out a new algorithm. That is even more valuable than learning one algorithm.
I don't know if you realize this, but the Galaxy S meets your criteria. The Galaxy S was released with Eclair (2.1) and got two major upgrades: Froyo (2.2) and Gingerbread (2.3). I'm not sure what this means for your definition of reasonable support, but I thought it was worth noting.
Nice article, Dan.

We have recently taken a huge step toward being truly lean at Earbits, and it's not easy. Particularly when you've got as much product as we do, and have goals with deadlines, it's hard to say, let's stop for a minute and position ourselves to start doing this smarter.

I think it's easiest to get it wrong if you are more focused on mimicking examples from the book instead of applying the underlying principle, which to me is: Validate or invalidate your assumptions with the smallest application of resources possible, and double down on things that move the dial.

In our business, that can be pretty tough to do. There are a lot of moving parts to our product and it's not exactly a funnel. But you have to break each experiment into parts. For example, we have an assumption that people want more things to do on our site, and that they want more control over what to listen to. But before we go building a bunch of complex things for them to do, we decided to see if they would click on a series of tabs that seemed to "do something cool". And they did. So now we know that they're looking for more to do. Next, we fake a few different things that they could do, with real features when easy to build, and smokescreen tests when not. Only if a big percentage of users try to use a feature do we truly build it, and perhaps then we'll try skinning it different ways, since that's easy. If the final feature increases our core metrics (a whole other discussion), we keep it. If not, we don't, because maintaining a feature that doesn't improve our company health is a waste of resources.

Admittedly, you still have to take leaps of faith. The point is to make them as short a leap as possible. But I'll tell you that while it can be a bit painful to work in this manner, I feel huge validation killing features, running A/B tests and making decisions based on data. We may have come a long way flying blind, but I have a feeling 2012 is going to yield unreal results for us thanks to this disciplined approach.
Would be nice if you didn't remove the session id from the URL. I would like to bookmark the URL so I don't have to keep the e-mail in my inbox.

Also, frictionless use is cool and all but it would be nice if I could just create a username and password so I know I'll always have access to my feeds.
I don't understand this obsession with QR codes. Why not just generate a short code and have the user type it in.
I believe this is similar to what Ruby 1.9.x does, and why it's not vulnerable - it uses a varying initialization value for the hashes, so you can't collide every time. When they initialize it (per process, per initialization?) and what exactly it does, I don't know, but yeah. Greater overhead, less predictability, greater complexity, though all of them are essentially minor. It's not the sort of thing that tends to make it into a library until there's demonstrated need.
In the long term, the problems that led to it IMO should be fixed if possible.
Digital free-for-all may loom
enterprise at parse :)
Very vulnerable, it uses a variant of DJB's common hash functions. Check out the youtube video posted elsewhere in the thread for a great summary
Those monitoring platforms if they emit any signals they can be detected and destroyed. During the early days of Iraq war, Iraq had a GPS disruption device that floods the wavelength with their own GPS signals. The first thing US did was to send a missile that use disruptor's own signal to track it down and destroy it. Establishing enemy's fog of war would be first priority.

It is very unlikely battle's will occur in open space if both sides knows each other's capability. The side with slight disadvantage will seek to level the playing field by heading towards asteroid field or unmonitored planets.

Once they arrived at the planet, one strategy for the orbital battle field is to go into an extreme elliptical orbit. The more skilled pilot will be able to calculate the opponent's possible orbit and tries to outwit his opponent. As the pilot approach the perigee of the orbit, the cinematographic tense scene panes to the pilot's face as the ship slows to the escape velocity in the upper atmosphere. Only to escape tattered and draught, and approaching the enemy hidden by the planet horizon.
Residential Indoor Accessibility Solutions
DAY Elevator and Lift's residential indoor accessibility product list includes stair lifts, vertical and inclined platform lifts, elevators, dumbwaiters, automatic door openers, ceiling lifts, seat lift chairs and tub lifts.
Ha, I know. I wasn't stating my own opinion there though. Adding in a server-side check seems to be the only way to solve this (Note: My knowledge on this subject is limited), but doing so removes the advantage they have, which is the easy implementation. This would be cool if it worked flawlessly, but then again, it doesn't (yet).
The classes were presented as being the same as Stanford classes, and in the AI class one of the professors claimed to be surprised that the online students were doing better than the Stanford students. As if the comparison was valid based on the difficulty of the material.

You can't make those sorts of claims and at the same time try to protect the reputation of the institution by saying that the online class is not as rigorous as the "real" Stanford class.

There's some actual danger in devaluing Stanford's rep here.
first of all why would I have to grab my phone, unlock it and run a code scanner if I already have my hands on the keyboard? it makes totally no sense.

qr codes are cool so you don't have to type adresses when you see a poster, billboard, etc. or a mobile link on a website
I was more interested in the source for the specific number you gave. Should have been less snarky, sorry!
Summer internship for master degree students in cryptography 
is there any opening for summer internships(2012)
in good industry or university in U.S in the area of cryptology and network security or Algorithm analysis and design .I am Ashutosh sahu doing M.Tech in computer Science at ISI Kolkata.