skysight-inc/HackerNews huggingface dataset:
IMO they're both creepy, and using one to justify the other isn't helpful. Apple has already come out and admitted that was a mistake and they will be rectifying it, so it doesn't really help your case much.

In both cases though it's not the action so much as it is the fact that you weren't able to opt out of it, or in many cases you aren't even aware of the possibility of it happening.

It's the same violation, and in both cases it's equally creepy. Apple got called out and did something about it. What will Tesla do?
IFTTT Recipe: When a new Show HN item appears, send an email.
A neat way to fold a sheet of paper
> I think they could gain far more with a mea culpa than with living in denial, which is what they seem to be doing.

Scientists are humans too. I can understand why they prefer to live in denial, even if that doesn't make them better scientists. Or humans.
Tinytrunk - Hyperlocal Flea Market
I've seen those referred to as "Notpologies": http://skepticlawyer.com.au/2012/02/23/the-notpology/
I think it also depends how much light you have in the room. I think you would find it easier to sleep longer if the room was still dark after 8 hours.
Just a word on level2, I don't think that's a hint, if you think so I'll remove this comment asap.

The login to get on the page is: level02 and the password is what you've found in level01. I.e. The challenge is not to crack that "Authorization required" dialog.
Usually this is only in the form of a header on the block device. Dm-crypt on linux has a mode called 'plain'. This uses the sector number and passphrase/keyfile to generate a unique encryption key for each sector. This means there is no meta-data, and corruption of any physical sectors map directly to the unencrypted block device. In this case, it does look just like random data.
It sounds too absurd to be true, but they are selling olive-oil and olive-oil derived foods and cosmetics.

Anything food-related, cosmetic-related, or even just olive-oil related is likely to have some arcane regulations, especially in the Mediterranean. (I've occasionally heard the olive oil industry being associated with cartels and frauds.) That goes for double if they are – or get confused with – a manufacturing facility which formulates its own products onsite.
Cloud vs Own Server - what's the best choice here? 
Hi and thanks for your attention. I'm from Brazil and right now i'm working at one startup that's building an online education system that will change the way people learn on the internet.

As a founder, i'm in a very difficult position. I know that besides code, i need to get business and technical skills in order to make this dream to come true (you know, millions of students in my country using the site to get good quality education).

So every time i take a decision, i'm always thinking in the future. And now my question is: should we host our application in the cloud (amazon, heruko, linode .. ) or should we invest in building hardware infra-structure and know how with our own Unix (FreeBsd) Servers ?

I mean ... we want to create something big like Google (please let us dream ok?)but Google did not start with EC2, they got their own blades (oh well, towers ... ) from the beginning. In my country it's not easy to get great hackers that will build the network for you, so we have to learn everything by ourselves.

How good this idea can be in the long run, in our context (poor country context, not San Francisco) ? Should we drop this and go for cloud services and change after we got bigger business?

Thanks and sorry by my bad english.
Obviously the lawsuit was a non-starter, any company that realized this would retract the complaint, but I was impressed by the apology.
It seems like in every suit I hear about where the company was wrong, they lose the case but still try to say they did nothing wrong and refuse to apologize. I was impressed this company did.
The welcome message says:

> This one is a web-based vulnerability, so go ahead and point your browser to XXXXX. You'll need to provide the password for level02 using HTTP digest authentication.

so no, it's not the challenge. :)
Rise of the Independents (Response to DHH's startup culture post)
Polyester stripe scarf
polyester stripe scarf
I have a 50/50 chance of traveling through Montreal & Ottawa later this year. I'd love to buy you a coffee and pick your brain a bit about your tech stack and the IT challenges you've faced at YP. May I contact you?
Remote vulnerability in Plesk Panel
>> read-only devices like TV and newspapers

Their beauty is not only in their read-only nature, but also in the fact that their number and content can be controlled.

Losing control of the narrative means the end of the narrative.

In our case, the concept of centralized power is dying, because the tales that justify it are dying in unwatched TV programs and unread newspapers.

Unfortunately, their dying will take some time.

Fortunately, any measure taken to save a dying narrative hasten its end.
Chrome only future for Flash on Linux
This is an interesting point and something worth digging around for (the answer). Though the "super users" may know the difference between this and that, the average user, and even above average user may not. The "reasonable expectation" of an average user might be that turning off web history would cause Google to stop tracking.
Your verification code is wrong. See
http://codahale.com/a-lesson-in-timing-attacks/

Edit: I'm wrong, sorry.
A link to a link to the actual source:

http://www.centives.net/S/2012/how-much-would-it-cost-to-bui...
In Colorado, it looks like the maximum sentence for contempt is 6 months. In Wyoming (my state), the max is 90 days or a $500 fine. I would choose contempt.
It's fine to show off what you play around with in your spare time, but the very best and most productive workers actually won't have an extensive up-to-date Github repo. This is because they're been gainfully employed and have spent the vast majority of their coding time kicking ass at their real job.

Coming from the Rails world, this isn't true. Through my job, I fix problems with Rails or plugins I encounter. This may only account for say two percent of my development time, but that is significant enough to have a trail of pull requests.
This is a bit off topic but my Kindle Touch makes a high pitched squeal every time the E-Ink display updates (It sounds sort of like a muffled hard drive seeking). It's only possible to notice when it's really really quiet, and it might be high enough that adults can't hear it. I've been wondering if this is specifically a Kindle thing or an E-ink thing in general, and if the screen didn't refresh the noise might become extremely irritating if used in a quiet setting.
> I haven't found CS degrees to be very well correlated with being able to program,

That's only true if you artificially restrict your population. It's like saying that music degrees aren't well correlated with being able to play an instrument or sing, because most people I meet at my local jazz joint (including customers) can play an instrument, though only a minority has a music degree.
Released my first ruby project, need some advice
The project that I created allows people to share files using DNS. A file is pushed to an authoritative name server and can be pulled back down with a file key. If it's pulled back down from someone's normal name servers, it will (depending on DNS server settings) be cached on that name server. Subsequent pulls from that name server won't need to hit the authoritative name server for records as long as it's cached (usually TTL, sometimes not). You can find it at: http://sendtodns.github.com

I think the idea is fun, and I've been able to pull down an Ubuntu ISO using only DNS as my source. The problem is that I'm learning ruby in the process of writing this so the code is pretty ugly.

Questions

- Where do you "publish" new projects so that others can find out about them? I was told by someone on reddit that here would be a good place, so I'm doing that now.
- What are some ways I can find people to give advice? I put a disclaimer up stating basically "Code is ugly, please fork with suggestions."

Thanks in advance!
Ask HN: how to get the most out of college?
After a short hiatus, during which I started up a small consulting business, I'm going back to school in the fall.

I'm not really interested in programming as a profession; I'm more interested in being an entrepreneur in general. Which means that I'm learning how to code, how to design, how to sell, etc. As such, I'm a philosophy major, as it lets me pick and choose the classes I'd like to take (a CS major wouldn't.)

Any specific tips on how to get the most out of my time here? I've got about 2 years left. I'm planning on getting more involved and possibly studying abroad for a year.

Thanks!

---

This can also be a general "college-advice" topic, so feel free to respond even if it's not to my specific situation.
or, for a slightly less advertising-ridden interface, http://www.google.com/patents/US6205469
This would hardly solve the problem. By the time they would have you decrypt, they would have made a disk image of the drive in question. When you enter the killswitch, they could simply restore, and request that you try again, not to mention that that is then suddenly better evidence against you.

The best solution seems that it may be nested encrypted partitions. ala, the trucrypt solution: http://www.truecrypt.org/docs/?s=hidden-volume
It looks like it's just returning my watched repos -- what type of recommendation algorithm is it running?
Sure no problem. You can reach me at: pstatho at gmail
Try reading this on an iPad.

Dynamic Views in Blogger require the use of a modern browser, and are not currently supported on mobile devices.

You can visit a non-dynamic version of this blog, continue unsupported, or upgrade your browser by clicking on one of the links below.

Ridiculous.
I feel a personal obligation to meet with any YC company that wants to meet with me, the same way I would if a good friend asked me to meet with someone. I've taken enough from that network that I want to give back.

If someone cold-emails me, or has a mutual acquantance do an introduction, I usually don't feel as obliged.
I disagree. In cases of fraud, logs, emails, and spreadsheets could all be used to guarantee a case— especially if it's the online variety.

From my understanding, you're basically asking for the prosecution to prosecute a murder case but not allow them to use the murder weapon— with the person's prints on it— as evidence.
Deep corporate hierarchies encourage politics and associated power struggles. Part of moving up in that environment is to have others perceive you as an "air-traffic controller" of a segment of the company, a master of your domain. This sometimes results in people in "manager" roles with 1 or 2 direct reports, where the "manager" does no actual work, but spends inordinate amounts of time coordinating with other teams or politicking. Honest work avoided.

I'm not excusing that behaviour but if you've spent enough time at a big company, you'll see motivations for it.

Contrast that to pg's air-traffic controller role in the YC network, providing value to all the startup people he connects.

It will be interesting to see how well pg's positive influence scales as YC continues to grow.
Insane. How can that be called an invention? That's like patenting 'Stepping over obstacles in order to avoid tripping'.
The US is your democracy not mine.
If you're building a distributed KV stores, you should benchmark against other distributed KV stores. Mongo and Cassandra aren't really. But Riak is.

Plus, since its "distributed" here's the benchmark I'd like to see:

1. Set up a cluster of 8 nodes. Set data replication to 3.
2. Load 3TB of data into the cluster, across 1M documents (or some data set of that order)
3. Run your tests. Optimize each of the DBs for the best way to access them (Eg: link walking vs. map reduce on Riak if that's faster, or secondary indexes if that's faster, or Riak Search if that's faster-- there are many ways to search Riak.)
4. Throw out the results of #3.
5. Pull the plug on 2 nodes. EG: Shut down completely, no longer on the net work at all. Poof, gone. Pick the two nodes by rolling the dice. If you have SPFs, and a bad role of the dice would have brought the whole cluster down, remove the word "distributed" from your marketing.
6. Let the cluster sit for 30 minutes.
7. Run your benchmarks.

The benchmarks developed in #7 are the ones I want to see.

I have no clue how HyperDex would perform in this situation. It could kick Riak's butt (but then, small cluster performance is just one of the criteria that is important to me). I just wish people did benchmarks like this (though I know its a PITA to do it this way.)
EInk is screwed right? Am I right in thinking that its only advantages are superfluous readability and battery life?
>(Anything that you'd want to encrypt is going to get you life in prison these days, so it's not like you have anything to lose.)

There's more you can use encryption for than just illegal activities. Personal and financial information comes to mind, as do company secrets.
Were you the CTO at YouPorn back in 2010, when the company abused a flaw (css sniffing) in web browsers that allowed your company to covertly determine what other porn sites users had visited? See:
http://www.forbes.com/sites/kashmirhill/2010/11/30/history-s...

Do you think that it was reasonable behavior to engage in without telling your users?
If anyone should be punished, it's the lawyers who enabled them to persist in this course of action.

Perhaps basic facts can't be copyrighted, but sometimes collections of facts are given some protection. The telephone directory is a classic example.

Given the sincerity of the apology, I think it was a honest mistake and a welcome example of the legal system working the way it should.

At least after EFF is on the case. We should go donate to them. Right now.
AppHarbor introduces community program for free app hosting
My advice is: take advantage of what you've paid so much money for.

Read the textbook. Do the exercises. Go to the tutorial sessions. Spend as much time with your professors as possible.
Agreed on most counts: I don't really have an issue with loss of state when switching apps either. It probably varies depending on how many you have going.

While I wouldn't sell the Transformer as a netbook replacement universally, it really has completely usurped my old Eee PC and largely replaced my Macbook Pro as the device I take with me when I go somewhere. Sure, you need a distro chroot (I use Debian, personally, but there are a bunch that work) to do anything useful programming-wise, but I don't really see that as a hindrance: I can compartmentalise that to a MicroSD card and it doesn't affect the usual operation of the tablet as a tablet when I want that.

Basically, I love my Transformer to an extent that I'd have found surprising before I bought it. I've done real work on it, and it's a pretty good tablet even without a dock.

(All of that said, the trackpad is completely useless, sadly.)
I'm not sure how the patent relates to the question. The UI issue is that a user traverses to the 2nd or 3rd page of viewing, go reads some articles or whatnot, and then comes back to find that he or she cannot move onto the 4th page.

It's frustrating.
this makes firefox more attractive again. ^ ^
And unql: http://www.unqlspec.org/display/UnQL/Home
Amazon Pulls Thousands of E-Books in Dispute
No. My point is that search warrants should cover decrypting your digital data in exactly the same way that they allow the police to search your home, your office, your storage locker, your safe, etc.
Chaussure Running Nike Air Max BW Homme Blanc Bleu Marine Taille 41-46
One can make a honest mistake about the facts and the law. If every time that somebody is mistaken were to be severely punished, suing a large well lawyered entity would be completely impossible, since in the event of loss one will be surely ruined financially by the mandatory punishment. If however one can see that the suit is frivolous or malicious and it was known and explained to them and they still chose to proceed, then the punishment may be due. But in this case it still can be argued that they honestly thought the law was on their side, even if they were wrong.
Sorry I forgot to mention in the original post...the app is free!!
I guess Airbnb and Dropbox could go public if they wanted. The stock market likes companies that print money!
One reason for this is that many companies review and reward employees based on their "influence" or "visibility" -- what better way to maximize both than be in the air-traffic controller role?

I can attest to this firsthand at both Microsoft and IBM.
How to listen to your Customers better - while avoiding Bad Online Review
Repeating-characters in Lion
My UX senses are tingling all over! I have just uncovered a crazy ninja feature in OSX Lion and I needed to share it with the world. Go to an input text field or a textarea - any one will suffice (even your address bar). Try pressing and holding a key on your keyboard. What happens? Well, depending on which key you held down, it'll be different. For the majority of them, Apple has secretly killed off fat-finger syndrome by not allowing you to enter repeat characters without lifting your finger and pressing again. From now on, if something is over 9000, that's four individual keystrokes...

Letters that still allow you to press/hold: e, y, i, o, a, s, l, z, c, n. In addition, all symbols (tilda, comma, etc.) still allow you to press/hold. The other letters (and all numbers) are one-and-done. Apple, you crazy.
That sounds both interesting and non-intuitive. Can you go into more detail about how you have been using ElasticSearch as a k/v store?

EDIT: Color me surprised. I didn't see it mentioned at all in the ElasticSearch docs or in their Github repo, but apparently this is a fairly popular thing to do.

"Elastic search as a database?" http://stackoverflow.com/questions/6636508/elastic-search-as...

"ElasticSearch, datastore for user and social data?" http://stackoverflow.com/questions/8190288/elasticsearch-dat...

"Elasticsearch and NoSql database" http://stackoverflow.com/questions/8026880/elasticsearch-and...
There's no way I would be able to form a reasonable opinion about an online course given 5 minutes. I had no intention of "belittling" anyone's efforts. A large part of my purpose in posting was to spark a discussion and possibly find out if those efforts have improved. From what people have said, it sounds like they have. So it was by no means a waste of my time to post my comment.

I don't know why you decided to be a jerk about it.
Yeah.. but I somewhat didn't realized it was the same l/p of the ssh and was trying to crack it ;) Or, more particularly, find a way around that protection to access the challenge behind it.
I was not aware of that. Do you have any details on that arrangement? I don't see any record of that in any of their earning reports for the last two years.

My understanding of that arrangement is that it is a mutually beneficial relationship that guarantees that Chrome users have the latest version of Flash (and Chrome is thus more secure) and the Flash Player update adoption happens faster. It makes very little sense to me that Google would pay Adobe for that since Adobe benefits just as much as Google.
Steganography FTW, here. "Here you go, I've decrypted my hard drive. Now, somewhere in my gigs of cat photos and music lie the documents you're looking for. Have fun."
Jayride.com raises $400k from local investors
It may be a strength in your personal life. But as an employee, my commitments are a weakness. As much as employers may laud good parenting in the abstract, it is far from the top trait you want in an employee.
The five keys to ensuring your business doesn't crash and burn
Oops, thought that no one had commented when I deleted. Sorry.
Arc server stores closures on server (see the patent for the similar technique). Links include unique ids of these closures. Closures expire. This has been explained numerous times here on HN, see the search link in my different comment.
I'm curious about these:

23 melinda
16 allzen

Seems odd that so many people would end up with those passwords. Maybe these represent multiple accounts by the same person?
Real housewives orange county
Cheap Beats By Dr Dre,Monster Beats Headphones
Online Sales Beats By Dr Dre Cheap,Monster Beats Headphones,Beats By Dr Dre Studio,Fast delivery,best service and 100% satisfaction guarantee.
Birkenstock Hunter Black Leather Boston
As you can see, after publishing this article I received some feedback and questions about the comparison, including from the author of stunnel himself, Michal Trojnara. Even though the stunnel website itself states that the default is ‘no compression’, this apparently is not so. It appears iperf’s default data seems to be highly compressible, thus heavily skewing the performance numbers: stunnel was performing very different work than native networking or vCider. To arrive at more realistic numbers, I used a large image transfer (a JPEG) instead, which by its nature is not much more compressible. I transferred this file with iperf (which can use file input) as well as wget, The results? stunnel is much more comparable with both the native and the vCider networking speeds.

Interrupts and context switches are now roughly the same for all three solutions. stunnel still exhibits a significantly higher CPU load (20%), but certainly does not max out the CPU anymore. I suspect that the higher numbers of context switches and interrupts result from iperf’s default behavior of sending as much data as it can in a given time interval. And since stunnel can easily compress iperf’s default data, iperf was able to send a lot of this, which also explains the results reported by iperf.

While I maintain that a setup consisting of multiple nodes is much easier to maintain with vCider – which also provides a number of other interesting features – it must be noted that stunnel does indeed perform very well for point to point connections. Note to self: Be sure not to use synthetic data for performance tests like this.
Disclaimer: Shopqi's author is an acquaintance.

Imitation is the highest form of flattery.

Seriously though, the backend can't possibly infringe on your intellectual property right?
A Case Study for Building Advanced Windows Phone Applications
Why not treat cryptography as a novelty?

A nice outcome is that it avoids all the issues surrounding guessing whether the key to the random bits even exists, and what form it takes, and whether there is more than one key, and so on.
with google's oauth you wouldn't have to give them access to your account ;)
Are Funny People More Successful In Business?
How do you justify that very strong assertion? What's your definition of "far out"?

The past 100 years are a great example of how a lot of change can happen in a short amount of time.
No I wasn't, our company had no involvement with YouPorn at that time.

We spoke to the owners about the issue and they are really some of the nicest people we've met. They really did not have malicious intentions.

That issue brought the privacy flaw to the forefront, and certainly the adult industry pushes those limits. We always strive to respect industry best practices regarding privacy, especially around cookie handling. We constantly review privacy policies around the world.
Wait, what? What's the attack you're thinking of here? How would it actually work?
It does not necessarily allow for a violation of causality.

As an example, suppose that we were able to go faster than C in the reference frame of the fixed distant stars, but not in other reference frames. There are reference frames where you can go backwards in time, but none in which you can violate causality.

(That said, General Relativity allows for causality violations. However setting them up is well beyond any engineering ability our species is likely to develop...)