skysight-inc/HackerNews huggingface dataset:
Sorry. I should be more clear.

The initiation of an HTTPS session is expensive because it consumes a large chunk of CPU for a real-world-measurable chunk of time, all at once, in most libraries.

Everything beyond that point you're dealing with <use algorithm of choice> over <max of 32kb> of data. It does indeed consume CPU. It does indeed consume perhaps 8x MORE memory than a typical http connection - but the memory side here is completely dominated by the fact that we're trying to cache multiple gigabytes of data.

You can serve HTTP faster than you can serve HTTPS with less CPU - this is objective fact. But if we're talking about CPU utilization? I can't speak to whether this argument has traction right now, for large connections, relative to the claimed 'non-problem' position of several companies who serve small sessions dominated by that connection time, but as time passes it's going to be even less coherent a position than it is right now.
Everything was on http://chat.youporn.com/tmp/ completely open to the public so this is an even bigger screw-up than the fact that they didn't hash their passwords.
>First, before Tesla people thought of electric vehicles as ridiculous DIY golf carts driven by treehuggers. They were utterly uncool and stupid.

Absolutely not.

http://www.gizmag.com/go/3889/

Tesla just had the Silicon Valley hype machine on its side since inception, a super-wealthy owner proclaimed the next Henry Ford, and hundreds of millions of dollars from American taxpayers.
Anything which is going faster than C in one inertial frame of reference, is going backwards in time in another inertial frame of reference, which allows for a violation of causality. I'm sure the experimental set-up would be complicated as balls, but a qualitative property like causality is probably more robust to measurement.
Thanks. Definitely bears some more research.
Wow, that looks awful. I'm sure it's terrible for battery life, too, so why not just use a screen that's designed to be more than static paper? I guess this is kind of clever... what will be really amazing is when LCD/eInk hybrid screens become a reality.
I appreciate your view on that, but I'm expressly not posting on behalf of Google or in my role as a Google employee. I don't think it would make sense to clutter the HN threads with disclaimers considering that just about every topic here that involves a tech company will have folks from that company posting, or who have investments in those companies. It's not as if I keep it secret who I work for.
> In order to "fully open source" it, they would have to include an open source H264/mp4 decoder. Which would probably not be allowed by everyone who owns H264. Alas.

There are existing open source implementations of H264. Even the best encoder (x264) is open source. But I guess there are license issues with third party code/libraries used in Flash.
Having LOTS of fun with StackMob. They are great. Support team is wonderful and documentation is plentiful (usually)
Yes I know. Parse and Kinvey are extremely focused on Mobile right now, even thought their technology could easily be used in Web apps. They use REST and JSON just like we do.

In the case of iKnode, we are focusing mostly on web sites. I have to be honest. We don't particularly like the mobile environment so much, specially because it feels like a step backwards for standards. We believe firmly in the Web. So we do support mobile environments, but we are pushing for the web to be successful. Even if mobile is hot right now.
The Icon Factory does (highly acclaimed and visible) work. The new icon is about a million times more polished than any of those options, in my opinion.
Jordan Franklin Discusses How to Setup Split Testing for Facebook Ads [video]
How do passwords get leaked? Does it mean they were stored in plain text?
I just hope this machine is isolated from Stripe's network, in case someone makes it to secret level 99.
(As transaction costs (search costs, costs to contract, costs to outsource, etc.) go down, optimal firm size goes down.

Optimal size will still depend on the industry.

Seventy guys can operate a dropbox.

You'll need a few thousand guys, minimum, to run a shipyard, assemble tractors, extract oil.

Doesn't mean they are inefficient - just that some tasks require a lot of capitol and manpower.
Related, I never really got the point of "Github for mac". Do we need a fat-client app when we already have a first-rate web app? What does it do/enable/make easy that github the website doesn't? A Mac or PC isn't a tiny phone screen with no keyboard, where native apps are more usable than websites.

I use TortoiseGit as well for the rest of the github experience, since I'm not a git master and I can pretend it's SVN with pull requests.
I love this editor, it's fast with big files. Bought my license last week.
Some useful shortcuts here https://gist.github.com/1207002
Wolfe-Simon and NASA is an absolute disgrace.

I think they could gain far more with a mea culpa than with living in denial, which is what they seem to be doing.
I would love to see a BaaS that have a visual interface and supported a work-flow. Somewhere between a rules engine, a workflow diagram and a object diagram, where scripts (my preference a Lisp, but I don't see why a variety of languages could not be supported) could be inserted into the workflow.

For a good deal of small mobile apps and simple web apps this would be a great tool for modeling simple CRUD workflows. I have several apps that this would be great for where 90% of it is just save and retrieve data where the other 10% need transforms or business logic, hence being able to place small transform scripts in the workflow. Now granted it's not going to scale to an enterprise solution, but there would be a lot of value to being able to stand a back-end up in a few hours by diagramming it out. I think of it as kind of like BPEL for REST services. If it existed I would pay for it, and I can't imagine that I am the only one.
Hint: not all shells blindly run scripts as the setuid user.
So you haven't looked for 5 minutes at the new free course, but are happy to waste your time belittling his efforts on this thread.
I've got 25 tabs open in FF for ya. If I was on my desktop I'd max it all out. Query: Do you need browser sessions specifically, or would writing a node app to open a few thousand simultaneous websocket connections help?
Neither can I... ):
Of course, the premise of cryonics is that at some point in the indefinite future, civilization will take far more heroic efforts to restore injured and frozen people to health. What it achieves is pushing those costs into the future. Either medicine will advance far enough that healing the frozen people becomes a reasonable act of social generosity, or they never get unfrozen, in which case cryonics is equivalent to plain old death, plus some relatively small costs for preserving the body.

So, it sounds like cryonics is worth it if you think the probability of being revived and cured in the future is high enough to outweigh the marginal increase in costs over having your body buried or cremated.
1. Sorry you thought a comparison in which your program doesn't come out on top is a flame. It wasn't. Don't know what's unfair about comparing out of the box, default install performance of two systems.

2. Yes, I sent it, sorry you didn't receive it.

3. I did a standard apt-get install for stunnel on the Ubuntu Oneric system.

4. Sigh. I'm not going to comment on that one.

5. Really don't know where you would get this idea. Also don't understand why you get so upset. As I said, I was more than happy to discuss this with you ahead of time. Let me try to explain this again: I suggested that most real-world data is already compressed, thus the benefits you could derive by doing compression on the wire are lessened to the point where compression won't get you anything. For any compressable data, compressing it before sending is great and beneficial and I never stated otherwise.
Yep, it's completely isolated. Someone rooting the machine is very much within our threat model :).
Ask HN: Would you entrust your entire build process to a SaaS?
Think end to end from source control, code review, build and CI, versioning to deployment management? This means the SaaS being aware of server passwords in order to deploy the code, all build properties, the code itself etc.

Most of us probably have a hacked together suite of all the above in-house. Would you, or do you already, use a cloud provider for this?
Back to Basics: DevShop JS Framework of Common Design Patterns
Based entirely on the format of the data that was publicly accessible, it looks like this data, including usernames and passwords, are raw $_POST server variables spit out in a debug log. All the hashing and encryption in the world can't protect you against saving the data to disk, above your webroot, in plain text before you hit your security component. This was pure programmer error, a form of ignorance, but not necessarily a sign of incompetence.
A similar case is Hubble's measurement of the expanding Universe. The Universe is expanding, and Hubble's linear velocity = Hubble_constant*distance law is an excellent first approximation, but:

1. Hubble was actually measuring the local motion of nearby galaxies, the so called Local Group. These galaxies are too close for Hubble expansion to matter, they're just gravitating.

2. The actual value for the Hubble constant he measured was way off, by something like 10x.
Your Life as Data: The Rise of Personal Annual Reports
I now feel like the most awesome tutorial following script kiddie ever.
Life expectancy is actually a backward looking number. Eg: life expectancy of 78 years is only relevant for people born ~78 years ago. For people born after that, it's unknown.

And looking at the health of the middle age people today, I say life expectancy for most people is about to plunge into the 50s. It'll be a rude awakening.
The venerable CMU binary bomb assignment covers a lot of useful concepts.
aespinoza, good luck in your endeavors!
Yep, this happened to me as well. There seems to be some confusion, which no one is addressing because they want the virility, around the initial "User signed up for Product! Try it out!", and then future pushes based on user interactions or automagic sharing.

You have to remember too, that we are the minority, and most users (especially of services like Pinterest, which people absolutely love) don't really care about this stuff, or think it's normal.
Yelp: From Scrappy Startup to $100 Million IPO
the trouble is that the Cogs Model (as it is put here) allows you to get shit done with lower skill levels. sure, it won't be perfect. and yes, if you had better programmers you could do it better. but these are pragmatic timse for most of us.

so he's right (in the abstract).

but for the reality most of us operate in he's wrong because Done is Better than Perfect.

that said... the "New is Good" thing needs to die. We're not freaking magpies people.
Gotta think that Intel and Apple must be having discussions about moving successors to the A5 chips over to Intel's process.

Getting Apple's ARM processors moved to 22mm would be a spectacular coup for both Apple and Intel. You'd think that the volume and funds Apple brings would paper over any hard feelings about not using x86.
Colorado woman must unencrypt hard drive
Studies have shown that you can NOT stave off memory loss and general degeneration of cognitive ability by keeping your mind active.
I regret writing the title. It is linkbaitish and does seem close minded.

There is a market for these, but it is small and personally I hope it doesn't last long. After using a kindle I will never buy, rent or checkout another paper book again.
Yep, that's why you're seeing that error message rather than the machine immediately grinding to a halt!

(Please don't forkbomb it, though.)
All for naught? Certainly not. Significantly wasted, on the part of, y'know, the important people--the consumer? Hell, yes, I would.

If you go out of your way to shaft your customers--and deceiving them, as it really sounds like Tesla is doing, is certainly that--you're dirt. Tesla apparently qualifies.
We're going through this exact problem right now. My partner and I are working on a new service for photographers and videographers, http://lazyscout.com.

The question came up about whether to have the Like button work for the site, or for the Facebook page for LazyScout.

We discussed it briefly and decided to have it focus on the Facebook page for the time being. Our reasoning is that since we're trying to bootstrap awareness of the site (currently a landing page with interested signup form), our Facebook page will be a more useful marketing tool for now. Since we get no SEO benefit of people "Liking" our domain, getting as many folks as possible to like the page helps us inside the FB ecosystem. We need 25 Likes to get a public facing page, for example.

Now at some point in the future, we will revisit this decision and decide if its worth switching the Like button back to the domain to direct traffic there.

Its all a balance of how you're trying to leverage your zero marketing dollars, like us.
Everything You Need to Know About Wireless Spectrum
I wonder what types of exercise trigger this effect and to what degree. Off the top of my head (going by their descriptions) team sports would be ideal not just for the exercise but the constant situational analysis, team work, running plays etc would increase the workload on the brain.
ZmEu @ WhiteHat Team – www.whitehat.ro

is probably one of the more common ones. nessus http://www.tenable.com/products/nessus looks for published vulnerabilities as well, but that would be more along the lines of using an exploitable pop3 daemon or having phpmyadmin visible from your site. Zmeu does some of those scans, but, will also try to do SQL injection.
Read this if you're stuck on level 3: http://destroy.net/machines/security/P49-14-Aleph-One
Always good to have a throwaway email, username and password for sites like this and others you care little about.
5 Key Components of a Successful Interest Graph
im so glad you noticed this, because it got me laughing but i couldnt decide if it was on purpose or not either! A good joke on words makes the world a better place.
YouPorn: where everything is exposed.
Right, YT is one among a handful of exceptions that serve HTML 5 to a desktop browser. That doesn't really change the general argument -- almost all sites are not going to give HTML 5 video as an option to desktop clients.
"The biscuit itself is round to represent the wheel of a wagon"

Really? They must have gone through great lengths and a lot of experimentation before they were finally successful in creating that shape.
so who is going to be the first person to parse this out and determine what the most commonly used password is?

Any bets on asdfghjkl;' ??

i think i'll do this tonight
The best comment on this, courtesy of Ars Technica:

>At the AAAS meeting's discussion, CERN's director of research, Sergio Bertolucci, placed his bet on what the results would be: "I have difficulty to believe it, because nothing in Italy arrives ahead of time."
We tried this and found the response to it very minimal. It's probably better than nothing but I wouldn't expect it to do wonders.
Besides "use bcrypt" I've never really seen decent guidance on how to actually store passwords (what sort of salt to use, where to store the salt, if and where to store the hash method, how/where to store the key, etc).
I'll ask him for links to his papers, but the bottom of the corporate site has a bunch of links:

http://pulsarinformatics.com/fatigue-facts.html
This has been passed around a certain anonymous messageboard for the better part of a week now, i'm surprised sophos has taken this long to write anything about it!
I don't want to diverge too far of topic but do you know if there is a way to support Clojure on StackMob? You guys are definitely the closest to what I am looking for, but I would really like to use a Lisp for my logic. Given that custom logic is added via a user supplied jar, can the user supply the Clojure jar in their environment and get "unsupported" Clojure support on StackMob?
5 Tips for Reaching Voters in the Social Stream
Scraping Data from College Bookstores in the Hunt for Cheaper Textbooks
I don't understand how this makes it to Top News. I think at this point we are all well aware that no user-password store is impenetrable or invulnerable and porn websites would hardly be an exception. If you do not know by now that you should not be using the same password across multiple accounts, it seems like there is little hope. There is no lesson to be learned here. Is it not an implicit assumption that if you subscribe to a porn website someone is mostly likely going to find out one way or another?

1. Don't reuse passwords.
2. Don't subscribe to porn sites if you have something to lose from someone finding out.
> oversleeping causes dehydration? The latter makes little sense to me

Well, when you're awake you will get thirsty and drink if you overheat. If you're asleep you won't.
Anyone having trouble connecting to this?
there is sparql
I actually agree with you completely: at this point you'd just assume that text editors would be free.

That said, I work faster in ST2 than I did in Emacs and I can very quickly repay its purchase price in increased productivity. Should ST2's author get hit by a bus tomorrow and every copy of ST2 in the world instantly stop working, I could go back to Emacs and still have benefitted from having ST2 in the mean time.

Suppose someone offers you a golden goose that earns you $1 an hour but costs $100. If you get your $100 back out of it before the goose dies, you've broken even. If you get $101 out of it, you've turned a profit. If you get $500 out of it, you've made a good investment. I've already made my money back on ST2. If I lose the use of it, I've still come out ahead.
Mashable Is Hiring — Apply for Jobs in Editorial, Biz-Dev and More
We should even better than that and create an artificial intelligence for us that can eliminate aging and that eliminate any need to do work, and also upload our minds to it see we can live until the heat death of the universe with every luxury.
Someone already fork-bombed it ;-)
Aw, sad. The server seems to be non-responsive.
It looks like the machine is under heavy load. My shell just stopping responding and now ssh hangs while connecting :-(.
Thanks I really appreciate it.
Make a Good Search Impression with Bing’s Linked Pages
Someone should make a site where you sign in with your Gmail account and find out how many of your contacts have youporn accounts.
I am. I think their server must be overloaded. I bookmarked the blog post announcing this and I'm going to try again tomorrow.
I was in there 5 minutes ago, did cat /levels/level02.c and then it stopped responding. I don't think cat could crash the server, but if it did, I'm sorry?
This doesn't look like a problem with password hashing. This is what happens when you get careless with debug logging.
Bah. Looks like the server is now not responding. Bummer, because this is really fun.
I can't connect to it.
Participants of secret santas, probably.
Interesting German VC take on cloning
Based on Google's "What Google knows about you" page[1] I would have to conclude that their logs associate your search behavior with your account either way.

[1] https://www.google.com/settings/ads/onweb/
Doesn't work for me as well. I managed to login an do one ls, but since then it's dead.

Can someone share the source and program of the first level so we can have a look?
I suspect this issue is endemic to any situation where the judging is timeconsuming and occurs in private. Typically an organization giving out awards doesn't have much leverage over the judges. This is a very rare case where the judges were 'observed' unknowingly in a way that was perfectly legal and only implicated their judging behavior.

Now if only we could get this kind of telemetry from reviewers of academic papers...or politicians voting on legislation.
people were having fun with forkbombs a bit ago.

Presumably we're on the synflood stage now.
A few other amusing notes:

1. Hubble's draftsman made an error while preparing his famous diagram. From Figure 1 of his paper (http://adsabs.harvard.edu/abs/1931ApJ....74...43H), you'll notice that the vertical axis is in "km" rather than "km/sec."

2. Measurements of the Hubble Constant over time: http://www.pnas.org/content/101/1/8/F2.large.jpg For some reason it's not plotted logarithmically so it's hard to see the convergence towards ~70 km/s/Mpc in the last twenty years.
6 Tips For Hiring a NodeJS Developer
Is this based on the classic digital evolution wargames? :D
Yeah, my connection froze, and now I cannot connect, ssh or http...
I think we ended up dDosing the machine...
Any link to the password dump from the Brazzers attack referenced in the article?
Yeah, we're rebooting. Should be up in a few more minutes. Sorry about that.
I'm also 41. The part I love most is that age and treachery own youth and enthusiasm.

Jokes aside, I've managed to live all of my life day by day, in the moment. I see many who don't, so I'm grateful. My code only ever gets better. And I do Krav Maga three times a week, so am as fit today as I was during the bush war in Angola in 1989.

Another cool thing about age is that it's inversely proportional to giving a shit.
Must be fun watching all of the attempts... Do you have any way to monitor progress?
ScreenLeap Drastically Simplifies Basic Screen Sharing
Let me flip that around: why not have all the most recent files you've worked on open at once? It's easy to navigate through them, you get to keep undo history, and you can always close them later if you get overwhelmed. There's not a huge advantage to keeping them around but the penalty for doing so is trivial, so I default to not closing tabs unless I specifically need to.
Aging is a much easier pill to swallow for nerdy guys- you get smarter as you age, and dont get that much worse looking, at least for a while. For athletes, models etc, your raison d'etre might not have anything to do with intellect or wisdom. Its got to be tougher in that case.
Official: Anonymous May Be Able to Disable Power Grids by Next Year
I was thrilled on the self-describing appropriateness of the term "double entendre" in this context until I found that "entendre" didn't actually mean "enter" in French. If it would, the term itself would be hilarious.
<3

I read this back in college, ages ago. Still relevant - not quite up there with K&R as far as technical writing goes, but it does indeed do the job of making a theoretical problem into an understandable & exploitable one, and for that reason "Smashing the Stack For Fun And Profit" is a phrase that has a special place in my heart.
For level 1 to 3, Google those: system() exploit, never trust user input, buffer overflow
Was up and working, got to level 3, and network died. I love CTF's.. Got a chance to do the CTF @ Sans (netwars) Orlando in 2011, and it was a blast.
You'd still need something to handle transactions which can not be allowed to be performed by a user, such as credit card transactions

This was the issue I had with Parse when looking at it, while I think it is a great service, we need more than just a data store, there has to be some way to perform logic behind the REST service, because it is just not an operation that you can trust the client to do. You may be able to get away with a mobile device to card authorization but a JavaScript client should not be trusted to orchestrate it. So for me, with these services that look like a data store there is a core piece missing and that is the ability to perform business computation and orchestration that the client should not be responsible for.
i think you meant https://www.tinfoilsecurity.com/
You from Australia/NZ? Wikipedia's "wowser" has your background explained.

It also has my background: '"Wowsers!" is also a signature expression used by the cartoon character Inspector Gadget.' i.e. a techy-pop-nostalgia reference to someone saying "WOW!"
Maybe they should just publish a VM image.