skysight-inc/HackerNews huggingface dataset:
Yes, if they are implemented via hash tables and do not randomize their hash generation somehow.
The talk at 28c3 specifically mentions PHP, Java, ASP.net, Python. Ruby is fine, but other variants of Ruby are apparently also vulnerable.
Create a simple landing page describing your service and include a sign-up field to notify people when it becomes available. Then, run an AdWords campaign on Google targeting keywords relating to your service that people may be searching for. You'll get a decent idea of interest by assessing your click through and conversion data after about a month.
Would love to see a follow-up post detailing how some of the more challenging aspects were accomplished/derived/realized.
This is a particular case of http://news.ycombinator.com/item?id=3401900. Basically, weak hash functions allow you to create lots of hash table collisions, degrading performance to that of a linked list. It is common to put POST'ed data into a hash table (the equivalent of ?foo=bar&baz=qux becomes {"foo": bar, "baz": qux}).
Don't think so. Don't forget how many 'normal' phones there still are being sold.
What is Motion Design?
Looks like it's getting fixed:

>> Yep. Hang tight. v0.6.7 is coming up soon.
seems the guy nailed down many issues i have had in the past :)
> I am interested in learning clojure. Unfortunately the learning material online is very scanty.

You might give 4Clojure a try[1]. It's a series of programming problems that in the process of challenging you attempt to teach you the syntax and usage. It starts off very basic so even if you know no programming at all it may still be useful.

[1] https://www.4clojure.com/
Many years ago, I was told by a flute teacher that the main difference between beginner (i.e. cheap) flutes and the better models is that the inside of the air hole in the better models is shaped slightly differently to give a very subtle indentation just below the edge of the hole. Since this fine tuning has to be done by hand, it raises the cost (although I suspect that with all instruments now being made in Asia, the labour costs today would be negligible).

I'm sad that I can no longer blame my lousy tone on not having a solid gold flute. :(
Would you swap your country for America?
High Speed Reel 2011 (by Charles Bergquist)
Even if writing your own firmware would be illegal (would it be, really?), what prevents manufacturers from releasing the code for examination?

Also, radio firmware isn't the only one missing. I think drivers for video and other hardware are not released for no particular reason.

All this contributes to the fact that one cannot build firmware for any Android device from source. Accompanied by the fact that Google gets to do their mining on your data, Android looks just a little more open, compared to iOS. And it's a shame that there is no alternative in sight.
Invoking Godwin's Law.

Saying Stallman "was right all along", just because he's not completely wrong all the time, is a bit like saying "hitler was right all along". Complete and utter bullcrap.

Stallman is a tit. Being an unwashed dick is his god given right, I won't dispute that. In spite of his undoubtedly good intentions, however, the man has such a poor image that he's done "his" FOSS cause more harm than good. He should go away. Or at least shut up.
> I... usually just `git reset --hard`

This is still risky if your ~/.git had uncommitted changes. I'll admit to being a little paranoid but I spent enough time on the #git irc channel to learn that any advice that is potentially dangerous will _always_ be used in the dangerous fashion, often without knowledge of the risks.
> although I think you meant GIT_WORK_TREE, not GIT_WORKDIR, right?

Yeah, brain cramp on that one, sorry.
Forget the exits. The bigger problem is that the VCs were not earning their keep: (2010) http://hbr.org/2010/07/the-vc-shakeout/ar/1

10-year IRRs are negative during the period that Google went public! The customers of the VCs (primarily pensions and endowments) are beginning to look with jaundiced eyes...
That's right. In this case they have it in a recoverable format somewhere (symmetric encryption is not as useless as many seem to think). Thanks for pointing it out, I thing I skimmed that part this morning.

However, it is still just your wifi connection which has to be locally accessed still and not ultra-secret password. IMO the policy is not problematic and it can save you the need to write it down somewhere, which for a local-only resource might be a worse alternative.
12-inch tall Steve Jobs model to go on sale in February
Statisticians Reveal What Makes America Happy
The blogging platform you choose will be as much about you as it is the software.

* Are you a developer?

* How comfortable are you with the command line?

* Do you intend to display a lot of media on your blog?

* Do you intend to display code examples on your blog?

There is no "best" tool in any parlance. The tool you choose will have a lot to do with your preferences.

WordPress: Lots of plug-ins available; common, thus easy to get assistance for; supports a wide variety of blog types; requires diligent attention to security patches and performance tweaking (caching).

Hosted platform (like Tumblr): Zero maintenance; great community; easy to apply themes.

Static site generator (like Jekyll/Octopress): Very hackable; provides some level of street cred for devs; extremely minimal hosting requirements; easy to use your favorite flavor of markup (HTML, ERb, HAML, Markdown, Textile, you name it).
Bing and Decide and Get Free Coffee or a Amazon gift card
> "Wait a minute. Sure it's cool, but what's the point?"

Learning.
I don't see how that can work. What would the server compare the received salted hash with, if it has never seen the plaintext?
Putting the kibosh on the paranoia parade, huh?
Just click on the link and going to the home page — I have no idea what the site is about. I'm guessing it's like some talent show upload-your-own video type of site, but there's no hero text or call out that explains what the site is about.

My $.02
Educators create IQ tests; that they measure what educators value is hardly surprising.
Ruby 1.9 is fine, 1.8 has problems.
I haven't defended anywhere in my post stored passwords in plain text. Maybe you replied to the wrong post?
Ryan Dahl commented on the thread, and it's being fixed in node. Nice to see assessment and responsiveness at the core of the project.

I'm evaluating node.js as an application platform choice for a large public infrastructure project. One thing that concerns me is (my perception here) a lack of public hardening of the server that's yet to come. I've been around long enough to see that effect on PHP, Django, Rails, etc.

We'll continue our evaluation but it's encouraging to know that issues like these are being discovered and addressed.
I was playing around with a redesign of my car blog over the weekend with responsive design with a vertical rhythm (http://rockyroadblog.herokuapp.com/) I like the post's approach to navigation and didn't know about the 'aside' element previously. If anyone's interested, I can post the source files for my redesign on github.
Note that this is a list of "crazy" things implemented in JavaScript, not implementations of JavaScript.
Importance Of A Fashion Photography School
Write a Compiler in Python - The Experiment Begins
Bing Maps UK has OS Explorer and Landranger coverage as an option. It is extremely impressive, as the sheets (which are drawn to the UK National Grid) are subtly distorted to the projection used by the Bing mapping (for example the grid lines are not all straight up) and routes can be calculated against the layers - even though they're raster data.
You mentioned BSD and I'm wondering what's wrong with BSD? A lot of FOSS people are all about hating anything that isn't GPL but let's not forget that these licenses serve a purpose. GPL has its place but I personally distribute things I make under BSD all the time. I don't mind and in fact encourage people to take my source, close it up and make a bunch of money off it if they want or take it and give back better code. I like the idea that both of those very things happen under BSD. I understand that closed source can mean various nefarious (rhyming kind of on purpose) things go on but it isn't necessarily so.
Anything measured can be improved.
The Evil Side of CSS3
"Candy doesn't have to have a point, that's why it's candy"
Working for me in Chrome 15.0.
It is great to see this issue getting some media attention. There is no reason whatsoever to lock this bootloader.
Another useful feature of cloud computing this time in the car
I'm working on a startup. My to-do list accumulates tasks faster than I can take items off it. In fact, between starred emails, pen & paper, smartphone apps, web to-dos etc I'm accumulating to-do lists faster than I'm getting through them. I sleep 2 or 3 hours a night. I have no time for friends and my girlfriend is mad at me. I'm in a constant state of stress and anxiety. I can't figure out if I'm on the verge of success or a good for nothing mess.

Do I really have time for AwesomeButUseless.com? Why, of course I do :)
I have a few elderly relatives who I help with their technology issues. Clamshell phones are by far the most comfortable devices for that age group. They don't feel comfortable with pressing the green button to receive a call, but opening the clam is immediately second nature.
From the link you just gave. The emphasis seems to be more on teaching mathematics through programming.

Do you seriously expect me or any other serious programmer in a business environment sorting a million integers in a million different ways?

How do I open files, how do I search what I want through regexps? How do write back? How can I build socket based programs? How can I interact with databases? How can write to log files? How can I work with business logic? How do I interact with webservices? API's? How to I work with operating system commands? etc stuff.

I make a living programming for those sort of stuff and wish to leverage any language in that direction.

Perl, Python tutorials teach me to do real work in a real production environment now. Not mathematics for my college assignments.

I hope you are able to understand. If that stuff is absent, I have to now take the pain of figuring that out myself.
Wow those libraries are indeed great, amazing compared to the standard libs. Hope they'll be included in the standard libs one day.
Fatal error: Call to a member function set_defaults() on a non-object in /home/noeltock/public_html/wp-content/plugins/google-analytics-for-wordpress/googleanalytics.php on line 1517

Hope they're not paying for WordPress consulting.
Nmap 5.61TEST4 released - 51 New Scripts, web spidering, vuln library, and more
I was going to buy one of these...

Could it not be argued this is anti-competitive?
Thanks for the behind the scenes look at what you're doing. Restaurant websites are nearly universally bad - perhaps one of the worst industries on the web in proportion to how much people visit their sites, so it's great to see some good stuff going on.

I like how you're personally contacting clients. Obviously that won't scale once you've got dozens or hundreds of clients (and I believe you'll have that, soon), but for now that's a fantastic way to get great feedback and make those first clients feel very special.

You say you don't have a good way of explaining the importance/benefit of microdata to clients - why not? What have you tried, and what do they not understand about it? I'm curious as to what reactions you've gotten - I think that could/should be a fairly big selling point if you're able to execute on it well, but obviously it's not much of a selling point if the prospect (or client) doesn't understand the value.
Thank you, README is good now.
#OpFreedomPalestine ~ Francise server with 800+ sites Hacked
Good. Now I have a reason not to buy one.
What you say next may close or lose the sale
Customers Say to Cable Firms, 'Let's Make a Deal'
Audio is available here:

https://github.com/kennethreitz/python-for-humans
Should be working again, analytics plug-in couldn't deal with the heat ;)
I found making my own notes, and playing around doing things I've done before in other more familiar languages, while reading this:

http://java.ociweb.com/mark/clojure/article.html

..to been a nice soft introduction. Now I'm intending to go through The Joy Of book, but with more familiarity than last time I tackled it (and fell flat on my face!).

Yes, it's dry, but it's also very straightforward. Using the repl in another window while looking it over was key though. It really does become much more clear what's going on when you manually type everything out, and then poke bits of it with a stick until it clicks.
How about any case where you're doing cram-md5 or hmac authentication? Because one of the basic requirements of those authentication schemes is that both sides have access to the plaintext of the shared secret (a.k.a. password).
The books are really good. If you allready know how to programme all the clojure books that are out will make a good read.
"The only excuse for making a useless thing is that one admires it intensely. All art is quite useless." -- Oscar Wilde
> Unfortunately the learning material online is very
scanty.

> All Advanced Hackery is OK, but teach me the basic stuff
first.... If the barrier to entry is too high, you will
scare away new comers.

I attempted to address that very need in one of my blog posts http://blackstag.com/blog.posting?id=5 and there are many other community contributions listed here: http://blackstag.com/blog.posting?id=23. Personally I think there has been an overwhelming amount of community contribution - to a point I would find it difficult to agree with your comments.
Good point, richf. We're actually going to have a "Take the Tour" feature pretty soon.
I like your $.02. Do you have more advice?
Looks cool! Just a suggestion that it would be good to have the GitHub link on the home page. It took me a while of rooting around before I finally found the repo on the install page.
Web server based python object transport
One previous employer had a corporate policy that forbade having low-end computers for testing. The closest we could come was to test the desktop software in a virtual, and starve the virtual for memory. When we had to move to .NET 3.5 for some feature, there were about a dozen customers we had to refund because they were still using Win2k as late as 2009. This software was primarily used by accountants and actuaries, an audience well known for being technology laggards.
Funnily enough, I would be very interested to hear of the craziest implementations of javascript.
3D Sphere created using CSS 3D transforms
what you're describing is basically cram-md5. Which is nice if you're using plain http and don't want the password to travel over the wire. But both sides need the plaintext password. Otherwise the hash of the password replaces the password and is just as good as an authentication token as the password itself, i.e I just need the hash to authenticate, not the pw itself.
Exactly. The management of background apps is FAR from being impact-less as the author gives the impression. Try leaving Skype connected and see what it does to your battery (even when you DON'T want to receive skype calls in the background).

While he's correct in stating that the multitasking bar does NOT show apps currently running (just the apps that were recently used, regardless of state), he fails to point that deleting the apps there WILL indeed move the apps from Background or Suspended to Not Running, effectively freeing memory and CPU.

And this is exactly the intention of those "authoritative sources" that he criticizes. The recommendation to kill background/suspended apps is an effective (and the only official) way to manually solve battery drain or memory on the 5% of cases that iOS can't do by itself.
PHP already fixed this in the 5.3.9 and 5.4RC branches.
Hangs on the first slide unless I'm doing something really wrong.
ISO- mobile developers who love Swedish Blondes and New York City Brunettes...
Would you find it easier to read if the characters per line increased dramatically just to fit your screen?
Is what anti-competitive? Against what "competitors"?

Sounds like locking the boot rom is good for ASUS' competitors based on the comments there and here.
> Do you seriously expect me or any other serious programmer in a business environment sorting a million integers in a million different ways?

Well my apologies for not immediately understanding your specific situation... I can assure you I meant it as a kind suggestion.

Perhaps you could look at Clojure In Action[1]? It's supposed to be a pragmatic introduction for people with some existing programming experience. From the Amazon page, "is a hands-on tutorial for the working programmer who has written code in a language like Java or Ruby, but has no prior experience with Lisp."

[1] http://www.amazon.com/Clojure-Action-Amit-Rathore/dp/1935182...
Building a Web Client like Pros
FreeDOS 1.1 is released
Well, from purely an app developer's point of view, the situation with Webviews on Android is completely opposite to the one you describe! WebViews are power hogs and unbearably slow to render anything. Their only saving grace in that respect is that they share a common WebViewCore thread to perform most of the legwork behind the scenes, so you can have plenty of these with relatively low overhead, but they truly are to be avoided at all costs if your objective as a developer is low battery consumption and a responsive/fast UI.

The main problem with most android apps is that they still include a tiny WebView just for displaying ads, carrying with it its dreadful WebViewCore Rube Goldberg machine.

I find it sad that Android App developers in general are so poor that they can't figure out a way to make their apps run faster or smoother. Native is and always has been the way to go for performance, responsiveness, UI speed and power saving on those devices.

Here's to hoping that the Android team solves the horrible performance and compatibility issues on their Webview component so I can safely go back on my words in the future.
Ignore the Human Element of Marketing at Your Own Peril
If you're busy, you are very likely doing it wrong -> http://calnewport.com/blog/2011/11/11/if-youre-busy-youre-do...

I was a lot like you once, until I suddenly realized that taking a step back every now and then actually brings a net positive in productivity because a lot of the time when you're busy and stressed what is actually happening is you're just doing work but not getting things done.

My suggestion to you: take a look at your todo's, delete everything that's been there for more than two weeks. Then delete everything where people don't die if you do it tomorrow instead of today.

Or, you know, completely disregard this comment, get back to your life, and watch yourself burn out faster than celluloid film.
Try the arrow keys
Yeah, this is pretty damn cool.

http://notlion.github.com/streetview-stereographic/#o=0.000,... (times square)

http://notlion.github.com/streetview-stereographic/#o=0.000,... (arc de triomphe)
Physicists propose test for loop quantum gravity
Which font are you using on your terminal ?
I'm sure you could get a stock ARM Linux distro booting on there if you tried hard enough... Think Microsoft and IE.
Show HN: Tofu -- (Yet another) C web framework
Hey cool! My turing machine is second on the list :D Thanks for that.
The slides don't fit vertically on my screen, so some of the content is cut off. There's no scroll bar so initially it was difficult to figure how to see the info cut off from the bottom. Chrome's text zoom out didn't work either.

I had to highlight the text and drag downwards in order to see the content. But it was annoying having to do this for every slide with a lot of content.

Otherwise, these libraries seem really useful. Thanks for this.
An OODA Perspective on The One Week Book
A Short Explanation of Hypermedia Controls in RESTful Services
The Case for Tinkering
Measuring a completely different thing. This is mobile web usage, the Comscore thing is sales data. Android mobile web usage has never kept up with its soaring marketshare, for whatever reason.
> Learning.

Exactly. And just to expand on this a bit, the process and resulting value of an experience should not be discounted. This is the foci of experiential learning. I can only speak for myself here, but the way I've learned best has always been by getting into something and doing it! Not always successfully, but rarely without gaining some kind of knowledge in the process. Importantly, for me, an important aspect of this has always been because it was "cool" to me. It it weren't...I'd probably lose my focus or quickly get bored.
SOPA is business directed because it is intellectual property law. There's a clear difference here.
On the (rather dubious) basis that Oracle controls NetApplications, surely they'd massage Android numbers _up_, so as to make a case for greater damages?
Thousand-Year Game Design Challenge winner
The original Asus Transformer sold with an unlocked boot loader, and many linux distros can be used on it. The question is, since the first device had an unlocked bootloader, is it a reasonable assumption that the new model would too? Since it is not just a new revision, I don't think so.
Newbie Internet Business Entrepreneur? Study these Powerful Tips
Siri Android Clones Are Laughable At Best
UX Design: Planning for interaction
Worth noting that this has been "fixed" in Perl since 5.8.1, released over 8 years ago.

http://perldoc.perl.org/perlsec.html#Algorithmic-Complexity-...
Online and Enterprise Project Management Software Solution
I can't help but roll my eyes here: "I wish all those people painting canvases would paint my living room... now THAT would be useful." This seems to come up every time there's an art project featured on HN. It's art people; it's its own point!

Besides, the fellow did actually seem to have a use for this (scaling up/down, zooming) tho most of that stuff could be achieved more simply with image. Anyway: Hackers -> use tech for fun, not just utility.
That's why I clicked the link! I was very curious about what could be considered crazy about a language implementation and having a look at the code.
agree with this completely. i've tried a few and none of them work very well. need something that allows plain language and doesn't require special 'languages' or commands.
The only reason they could do this is to curb customer support calls.

I don't like what Asus did either, since this is supposed to be an open source product, but I'm willing to bet that Asus already believes that:

a. They're the #3 tablet behind the iPad and Kindle Fire in terms of sales and they may be fine with that as long as they're the primary Android-based alternative.

b. They're the only successful pure Android tablet maker whose design aesthetics rivals the iPad.
All of NetApplications' graphs wobbled a bit in October; probably a change in the way they do things.
PLY is a wonderful toolkit. I used it to write a compiler for ice9 (some made up language used for teaching) that compiled down to JVM bytecode (using Jasmin) for my compilers class.

See the code here: https://github.com/mdwrigh2/pyice
Blackout Forces Fred Wilson to Pirate The Knicks. What Would Congress Think?
Nice Clojure Year. One of my goals with clojure is to do more acctual programming in clojure and less reading and testing out stuff.