skysight-inc/HackerNews huggingface dataset:
if you do not know how to use a tool then the tool is not useful.
400000 Israeli Credit Cards & Information Leaked by Saudi Arabia Hackers
IPad controlled dFusion AR [video]
Apple ipod touch 8gb with camera
apple ipod touch 8gb with camera
The worlds most popular portable gaming device is even more fun Now available in black and white.
It appears to use WebGL, here is a link to http://get.webgl.org/ which should tell you about software/hardware support.
USA v. USSR: Is life today in the USA like life yesterday in the USSR?
I disable plugins in Chrome and only run Flash as-needed, mostly for video and occasionally for something like the Facebook photo uploader. Life without Flash is certainly possible today.
The reasons these are not the least bit comparable are

a) Economies of scale - breaking into houses happens one at a time. Breaking into unsecured computer systems often lets you affect millions of people at once.

b) Jurisdiction - if a thief breaks into your house, he's local, and your cops can find and prosecute him. With computers, this is almost never true.

c) Personal Choice - You can choose whether or not to use an alarm in your home. When you use somebody's service, you have no choice over whether they use a level of security you agree with.

d) Personal Impact - When you choose to use an alarm in your home or not, that is a decision that affects -you-. When a service chooses to be insecure or not, that is a decision that affects -their customers-.

In short, they are nowhere near equivalent. If you want to make decisions for yourself on convenience vs security, that's cool, but don't equate that to a company making decisions on behalf of their customers.
Part 2: http://www.exilemm.com/e-sub-ussr2.shtml
Interesting. I appreciate the sharp feedback. We want our users to see Famocracy as a StumbleUpon or Digg/Reddit for talent. The most important part of the site is at the top - the Discovery Bar. Every time you vote, you are taken to something new, which hopefully you can enjoy.
I Got 99 Problems, But Creativity Ain't One
The problem is, the application fundamentally HAS to be able to access the password, either through direct comparison to authenticate, or some mechanism to mail out the password. This fundamentally cannot be separated, that's why hashing is always better, and why the risks are nearly impossible to meaningfully mitigate.
Most democracies I know are usually divided between conservatives of some sort and liberals of some sort, who agree and nothing, and usually just over 50% of the voters if not less, agree with their government's policies.

I totally disagree with the Israeli gov's policies and often protest them. Guess what? My personal info was inside those files (deprecated credit card and email though).

Attacking citizens of democracies because they are inseparable from their government and responsible for its actions, is a common argument for terrorism, btw.
Is this something you think people would use for their entertainment - and if not, what do you think is missing?
OS X Lion: Adding Custom Messages to the Login Window
Apple Media Event to Target iBooks, Publishing
RJMetrics Raises $1.2 Million from Investors On Both Coasts
Python for Humans
This is not a good analogy -- a more apt comparison to a network admin not taking correct precautions with user data is a storage facility not activating it's security system every day. These organizations are dealing with other people's security, not just their own.
WhoAPI hackathon - WhoHack #01
Draw retro style pixel art gif animations
Not a great article. It omits several relevant known mechanisms. The placebo effect is NOT "all in the mind"; some of it is (and some of the data in the article argues to that), but some of the placebo effect is "in the math" and some is "in the pill" and some of it is "in the measurement".

IN THE MATH: For depression in particular, regression toward the mean is huge - people tend to seek treatment when they are unusually depressed and thus tend to feel better at some random later time regardless of whether they get any treatment at all. You can verify this by having two control groups, one of which gets NO treatment rather than a fake treatment. Or assign different groups to start treatment at different times after a variable delay.

IN THE PILL: There's really no such thing as an "inactive" pill. The pill is made of something, and that something - even if it's milk sugar - might by chance actually do something useful to the condition you're testing. To rule this out you also need a no-treatment control - simply calling something an "inactive control" doesn't make it one.

IN THE MEASUREMENT: If you apply "a treatment" and ask people "is this better now?" the polite ones will say "Yes, I feel a little better" just to be polite, even if they don't. To tease this out you need objective rather than subjective measurements of success.
How is debian devlopped?
Hadoop for Archiving Email
You misunderstand the point of password hashing, it is not about preventing people from breaking into the machine containing the hashes, it is about limiting the damage they can do with millions of passwords as a result of doing so. Most people do not bother to change their password from service to service, login to login. So instead of a breech on one system, you potentially have a breech on thousands.
Export bookmark lists in Firefox before formatting your PC..
What's happening, I'm scared :-(

There's a lot of media deposited into my retinas, it's pretty but i feel overloaded to the point that it took me an inordinate amount of time to spot the buttons and even longer to figure out what they are for. There's nothing to entice me into participating.

I'd like to flick through to new things without having to vote, because I'm lazy like that and most people

Could be good if you got some indie record labels and studios on board and fed them people's submissions directly. Like every day, 10 top new liked videos/music goes to labels.
> Hashing is a good defence against DB harvesting but it doesn't stop a root level admin from listening to inbound unencrypted logins.

Forgive my ignorance of web authentication, but aren't passwords hashed in the browser before being sent to the server for authentication?

If not, why? It seems to me that it would be just as easy to hash on the browser side as on the server side, but passwords are less exposed if you do it on the browser side.

(Apologies for hijacking your thread, but I'm interested in the technical details here.)
Awesome but Useless
This is an open source project based on Sinatra, Redis and the canvas element, more details at http://drawbang.com/about
Try: stonehenge, england

Pretty neat...
The problem there is two-fold:

1. Not having done proper index analysis in the first place. While you can't get it right 100% of the time if you are expecting tables to grow that large you really should think hard about thsi sort of thing as close to the start as practical.

2. Using a database system that can't perform an online index build without locking the whole table. I know that such an operation needs to aquire some locks during its activity no matter what system you use, which will create performance issues for your live site if you are not able to schedule the index change in a pre-planned "maintainence" downtime (i.e. an application that has significant "high availability" requirements), but requiring a full table lock here seems to be a fault in a system that claims to be "enterprise ready".
Not sure how relevant this data is. Android became number 2 for a very short amount of time, and so I question how accurate this claim is.

This article suggests a different story: http://techcrunch.com/2011/12/29/comscore-apple-grows-market...
Boston Property Management
We are a full-service property management company, handling condominium complexes, apartment buildings, multi and single family homes, as well as commercial and industrial properties throughout Eastern Massachusetts, Boston and Southern New Hampshire.
Well given that free Splunk won't index any useful amount of data, and the pricing is so high that it can only work for corporations, I can only see Splunk working as a license-enforcing trial.
"(When Windows 95 shipped, my primary machine was a 486/DX50 with 8MB of RAM. My test machine was a 386 with 4MB of RAM. The combined computing power and storage capacity of all the machines in my office is now exceeded by your cell phone.)"

I love the pace of technology.
All Node.js servers are vulnerable to DoS
How do people try to justify storing passwords in recoverable form? So that they can remind users of the old password.

How do they actually send the reminder? By email.

But email is not secure, you should always assume that someone is eavesdropping on your email. Far too many users reuse a password from one service on others, so sending a password in email is a huge violation of trust.
Exactly, as the admin you see a potential vulnerability, as the end user, you just don't want to remember a password and as an attacker, you see an opportunity.
the numbers and claim are being massaged.. the tradeoff was iphone vs javame not javame vs android..

look for other questionable numbers coming as its right before some more court stuff via Oracle vs Google..never underestimate Oracle's desire to massage numbers
In that case come visit Greenville, SC. Small but it looks like someone sneezed on a map and drew the road lines from there. It's chaos but you get used to it.
Transformer Prime Sold with Locked Bootloader
Yes, exactly.

Let's assume Stallman had qualified as a Medical Doctor rather than a Computer Programmer.

Perhaps he would be making the same argument about pharmaceutical patents?
The point of hashing is from the difficulty of reversing it; generating a string that when hashed matches that value should be difficult. That way, even if someone has access to the hashes, he is unable to login - he needs the password.

If you accept the hash from the client, anyone having the hash is able to login, making hashing pointless.
Lazaridis and Balsillie to be ousted as co-chairmen, report claims
Not to detract from the coolness of this demo, but it looks like garbage in IE 8 (what else is new)
I agree they are different. Not having a physical security system may lead to violence against your family. Far more serious than almost any plain text password.

You got a lot of time at work to right 4 points as to why you think my point is wrong ;)
Thank you for rephrasing the headline before submitting.
Is it possible to capture right-click and make it erase? I'm used to that sort of functionality in MSPaint and other pixel editors and it makes it much easier to manipulate an image.
Before doing BDD, like you I was working on backend first. Since I experiment BDD, when I work on backend, I have switched my mind from "what could be useful ?" to "what is really needed ?". Writing UI first helps me to find the answer.

I am not sure that writing UI first is a common practice, but it fits good with development of web application which relies a lot on UI.
In some ways yes... America, by defining itself in opposition to the USSR during the cold war, became a lot more like the USSR. That's what happens when you define yourself in opposition to anything.
There's some serious spinning going on in that article.

The asthma study showed that (in that particular case) the placebo treatment did not work at all. The patients reported feeling as good as with using the real treatment, but it did nothing to alleviate the actual symptoms.

The last paragraph tries to claim that placebo (sham acupuncture) may be as effective as the real treatment (real acupuncture). That's not what the study shows. The result of the study is: the "real acupuncture" doesn't work either.

Placebo is the null hypothesis. It's something that all treatments show regardless of their actual effect. It's the level that you have to beat before you can say that your treatment has any benefits.

If something is no different than a placebo, that means that it has no effect other than the placebo effect. Therefore, the original treatment does not work. Period.

Placebo effect is a psychological hack. You get it regardless of the active component in the treatments. It's about the feelings and expectations of the recipient.

In sham medicine, all you get is the placebo effect. But when you get actual treatment, you're benefiting both from the placebo effect and from the treatment itself.

I'm not saying that feeling good is not a desired outcome. It's just that if you have real issues that won't be resolved by feeling better, placebo is of no help.
Startup Sense of Self (Infographic)
> Fuck off, Mr. Wannabe Censor

I'm not one who wants to impose restraint on others. I merely suggest a little bit of tact makes dialog possible. Or, more important, that its lack may make dialog impossible.

> Progress requires unfettered conversation of all types, not just the ones of which you approve.

It also requires the conversation itself, which may be rendered unproductive by the kind of comment made upstream.

> it reminded me of 2005's Syriana, in which there was a conversation between Matt Damon as Bryan Woodman, an energy analyst, and Alexander Siddig as Prince Nasir Al-Subaai

Is all your knowledge in Middle East affairs derived from a movie?
I love getting lost in cities too, but if I'm in a rush nothing beats the simple "streets go this way, avenues go that way" grid of NYC. (that's just what I say in my head with matching hand motions)
Apple would rather lose iPhones than endanger it's staff.
Freemium is not for us - A free trial is our way
It's not hard to fix that. You have the server send the client a random salt each time. The client then sends back a hash computed with that salt, and the server doesn't accept the same salt more than once. Done right, the server never sees your plaintext password and replay attacks still fail.
Is there any chance that this includes other uses of embedded Java (eg, Bluray players)?
UI first: also called "top-down" design.
You can use shift+click to erase pixels!
Is Now or Never for Enterprise Software
YouTube Upload Limit Increases to 15 Minutes for All Users
Clojure is on my list of languages to learn in 2012. I really dig the community and the fact that it runs on the JVM. I've been looking for a strong functional language to use for backends as an alternative to using Node, and Clojure seems to be the right fit for that.
Yes, I had the same problem. Ponyo (example application) code on github can give you some hints, I tried to make things clean and as light as possible.
https://github.com/gelnior/ponyo

For client-only JS applications, have a look at Brunch framework. It is really good to structure your app (Ponyo client side is based on it).
http://brunch.io/
Spammers propel India to junk-mail top spot
I'll take the network hit over the CPU hit (and thus battery life). This page is constantly using about 45% of a core on my MBP in Firefox 9.
So next time you see a job listing for a new start-up, just remember Amazon started the same way, and that new listing might just be for a company that turns out to be the next Amazon, or Facebook, or Google.

I think this is a little hopeful. Sometimes I'll look quickly on Craigslist just to see if there are any local projects, and there are always at least a handful of job listings read very similarly to Bezos' ad...
JsFiddle Tips And Tricks
One billion App download during “power week”
Didnt the Kindle and Nook come with some way of sharing books with friends? I also seem to remember that the Xune let you share music too.

You have to admit that going digital introduces problems that aren't clear cut. If you were to reproduce a physical copy of a book and give it out en masse for either free or a fee you'd be called a bootlegger. But when that same book or movie or whatever is a digital copy then the difference between lending out a copy innocently and distribution which violates copyright gets blurred. Lending something out used to mean one copy gets passed between people. Now it means there's a copy for each person you want to share with.

I think we're just going through some growing pains. I really don't see how anyone can say any one side is right. Theyre just competing interests that we will hopefully find a happy middle ground for soon.
I think in the context of 1994, there probably weren't many people posting jobs like this. But nowadays, literally tons of posts on Craiglist say the same thing as Bezos.

But it's just reality to me. People often point to one thing and make generalizations.
Fun with pop evolutionary biology
Passwords are rarely hashed client side. It doesn't matter, though, if you have enough control over a server to listen to POSTs for unhashed passwords, you probably have enough to inject some script and capture them on the client side.
If you ever have a chance to read the book "Showstopper" by G. Pascal Zachary (and haven't already), do it. Awesome book about Cutler and the creation of Windows NT.
Love the title! Sadly, it describes so much these days.

Now don't get me wrong, I'm a hacker at heart and love to get under the hood, pull things apart, and put them back together. But the more I do this, the more I hear this little voice in my head say, "Wait a minute. Sure it's cool, but what's the point?"

I have started using an approach that satisfies both my need to hack and my desire to be useful: I try to hack not the stuff that I find interesting, but that which my customers do. It took a little while to get used to (who cares about past due orders when I could be playing with HTML5?), but I have been pleasantly surprised. Grokking someone else's stuff may not lead to many happy dances, but it sure is fun watching someone with money to spend do a happy dance of their own.
Great Article - European and US Cloud and Data Issues Cleared Out
Disappointing to see the last sentence in the article is an ad hominem attack against all those who may be skeptical. Perhaps the article would have better ended with a link to the study or at least its title. (It's available here to read for 2 days for $10 : http://www.pnas.org/content/early/2011/12/19/1106077109.abst...)
I'm thrilled to be joining this team as an investor and board member. Incredible product. Fantastic team.
[Not answering the questions]

What I find interesting about the debate regarding password storage ethics is the question, "What is a website's ethical responsibility in regards to a user's password?"

On the face of it, one could argue that the extent of a site's ethical responsibility ends at their IP address -- i.e. a site is only responsible for protecting one's password to the extent that it reasonably protects the user from harm resulting from someone else using their credentials on the site. For example, under this scenario, HN's responsibility would be to take reasonable steps to protect my password in accordance with the level of harm I would experience should my account be compromised. HN's "reasonable steps" are different from those of Bank of America, and emailing my password in plaintext would not shock me (even if unlikely).

However, there is a tendency for people to argue that the extent of a site's ethical responsibility is to protect the user from harm elsewhere on the internet - the logic of course being that many people use the same password for HN and BOA. In some sense, this argument is premised on websites having some level responsibility for general welfare of their users (i.e. a website's responsibility towards users extends across the entire internet to some degree).

A weakness of that argument is that once general welfare of the user is the standard, plaintext storage of a password may promote the user's general welfare to a greater extent than more secure measures - security is just one criteria in regards to utility. A house with few windows is usually more secure but often less healthy for its occupants.

Although technical considerations are important, the issues surrounding password security methods for most sites are social: trivial passwords, password reuse, and "lost" passwords. Holding all sites to the standards which apply to sites with fiduciary responsibility such as banks or corporate IT centers is, in my opinion, somewhat asinine. Every web service does not need to be locked down, and good architecture will balance security with commodity and delight.
So are all string based dictionaries?
Thanks for the explanation. Don't get me wrong, I think the War on Terror is even worse than the War on Drugs. I'll try to be clearer next time.

"Bombs" is intended to mean "something that we can all agree is really bad". I intended to say "the costs seem acceptable if they stop something really bad" (exaggerating for effect, "nobody who's not already in favour of legalisation is going to buy this argument"). Remember that many think that drugs are really bad.

(Some of the data you requested, although I don't think it helps much: http://people.howstuffworks.com/police-dog2.htm suggests that a police dog costs $8500 to acquire. Housing a dog in a shelter costs ~$3000 over the dog's lifetime, IIRC; so $15000 seems a reasonable guess at a dog's lifetime cost. I didn't find the number of active dogs or the cost of officer training, which would be required to calculate cost/successful search.

From https://en.wikipedia.org/wiki/War_on_Drugs: "In 2008, 1.5 million Americans were arrested for drug offenses. 500,000 were imprisoned." Even if we assume that this corresponds to 1.5 million successful searches after a dog alerted, you'd get 6 million searches per year, or about one search every fifty years per American. Of course, that assumes those searches will be randomly distributed; but still, if I felt that drugs were really bad and could be stopped by repression, I'd consider that a reasonable price to pay.)
There is a gem called VCR that does this for testing. It's pretty sweet.
I am interested in learning clojure. Unfortunately the learning material online is very scanty.

Also the material is very dry. If you have never programmed in a Lisp language before it all looks greek and latin. This tends to be a problem with most Lisp books. They very soon go into the great aspects of Lisp.

As a beginner, I need to be shown how to do the regular stuff in Lisp. Like other languages tutorials.

One of the reason I like Python is really for the awesome documentation on their website.

Now the thing about clojure, is due to sheer interest and passion alone. I am being forced to take additional pain to continuously search and learn. Others may not do the same. If the barrier to entry is too high, you will scare away new comers. Especially Lisp new comers.

All Advanced Hackery is OK, but teach me the basic stuff first. I need to learn the if/else, for/do/while , functions, IO, regular expressions, Battery usage, socket etc kind of stuff.

After I'm through with this, you can rant as much about macros as you want, and I'm all ears.

But directly going to all this advanced hackery without me even knowing how to do my day-to-day tasks is what has kept Lisp in the lower side of usage.

It will be sad if clojure goes down this route.
Didn't I see this same thing about PHP the other day?

http://news.ycombinator.com/item?id=3403360

http://nikic.github.com/2011/12/28/Supercolliding-a-PHP-arra...
It's worth noting that Bob Parsons is no longer CEO of GoDaddy.
A New Year’s Survival Guide for Bloggers
Here's a post with 7 new year survival tips for bloggers.
Good point, Tauv. I may disagree about the overloaded part, but think you're right about people not wanting to vote. The thing is Famocracy is not only about entertainment. It's about helping talents be spotted through democratic voting. So, although the voting may seem a little burdensome, it seems essential to what we're trying to do.

About feeding people's submissions to the studios: wonderful idea! I think this would get a lot of users excited, and aware about the fact that they become famous through Famocracy. How would you go about making that deal with big studios?
https://github.com/gelnior/ponyo
npm install coffeescript

should it be :
npm install coffee-script?