skysight-inc/HackerNews huggingface dataset:
Ok, I'll assume you are Ben or Tom for the purpose of this discussion.

If I were in the position to really move the Khan system forward, I would focus on a few key areas. First, the teacher tools at Khan are fantastic for showing the flow of students through the material and tying in to standards based grading. But, and this is a big but, the tools for independent students are almost non-existent.

Our system is also self paced and one of the largest problems we had to solve was how to keep a self-paced system from being "I'll get to it one of these days". The Khan system, when it is outside of classroom pacing, definitely suffers from that problem. Our approach is to have the student set section or exercise deadlines for themselves, then evaluate them based on how accurately they meet those goals. It allows for flexibility in pacing but still taps into the motivation of a looming deadline. You can do this at the micro level (I will complete this exercise in 7 minutes), badge level, or group larger sections together for larger targets. Risk of just setting far future deadlines is mitigated by including data from other students to introduce competition. In addition to helping to motivate the student from a pacing perspective, it helps teach accurate estimation and integrity.

Second, and the only reason I am sharing this is because when we launch in a few days everyone will see it, is the concept of contextual notes. In our system, taking a note is not just creating a list. We tie that note to exactly what the instructor is saying and what was on the "board" when they were saying it, making the note system a way of building a reference library for each student. While you don't have to take the exact same approach we did, (as long as youtube is the delivery mechanism you wouldn't be able to anyway) you do have valuable data that you are not using to its full advantage - time coded transcripts.

Finally, if this is indeed Ben or Tom, please either fix the knowledge map or ditch it entirely. It's not helping your image to have half working features floating around.

Anyway, back to work.

-B
the code still has to run. stuff like this is trivial to invert using a virtual machine that records what executed and also records modifications to code. you also suffer from the problem / weakness of having the decryptor for your code, in the code you give out.

now if you can avoid that (by applying some transform that allows the program to function but without having to carry its inverse) then ...
It seems like there is a cultural shift from the tribe to the hive.
Shouldn't that be "perceived lessened ability"? Honest question: doesn't Chrome interop with Windows group policy settings?
Is the Web closing?
Within the tech community, there is much angst about whether the Web is about to be "closed." Will it be controlled by companies like Apple, Facebook, and Google, or will it remain "open" to all? Will individuals be able to reach any content they choose? Will developers be able to serve users on any platform?
Update: the Linode compromise first reported was that of the "slush" mining pool (mining.bitcoin.cz), reporting a loss of 3094 BTC. Second report was the donation-funded bitcoin faucet, reporting a loss of all of its 5 BTC.

Third report is the biggest, Bitcoinica.com which is arguably the second-largest exchange. Their main site is hosted at rackspace, but their 'hot wallet' was hosted at Linode, and contained 10,000 BTC which were stolen.[1]

1: https://www.bitcoinica.com/posts/warning-please-do-not-re-us...

EDIT: Those not following this incident on the bitcoin forums might be amused that the attacker used the stolen bitcoins to form a transaction with a size of 1337 bytes. That's probably not a coincidence, since the size of bitcoin transactions are usually under 1kb.

http://blockchain.info/tx-index/2893660/d9804de366aa4c2a0156...
No, consumer GPUs can do almost a billion SHA1 hashes per second now. We're talking seconds to minutes for "complex" passwords, not days.

http://codahale.com/how-to-safely-store-a-password/
I imagine that the answer is "less so than Microsoft is". What is with the hellish trolling on this story? Did every shill for IE get some kind of bat signal?
"first world problems"...only kid in highschool who's parents can't afford medical coverage? Or sending him to college?

Those are also first world problems.
What if the coat was full of diamonds?
Adidas adizero Rose 2.5 All Star
What would you recommend? Would you say the same thing if he'd been colocating and a data center employee had stolen his bitcoins? Because that seems far more analogous than any restaurant analogy, and I don't see any reasonable way for somebody who's not a huge corporation to avoid this kind of risk.

You have to trust somebody at some point unless you're keeping the server locked in your own closet. It seems really bizarre to me to say that a hosting provider doesn't have a responsibility not to steal your stuff.
Wait, you would make crime maps that showed areas that didn't report crime as having no crime? That seems like a pretty dishonest map.
I stopped reading when he discussed Joel's software pricing model, and then proceeded to make a crack about how Joel's model was more correct than "some mythical supply and demand model."

If you don't know enough about economics to recognize that Joel's pricing model is a supply and demand model, you probably shouldn't try writing about the subject.

(Disclaimer: Yes, of course this post is tongue in cheek. If you had any doubts, you may need to get your sarcasm detector calibrated.)
I posted about it yesterday http://news.ycombinator.com/item?id=3647991

OOT: Maybe I'm hellbanned so my submissions are not visible (I don't think I wrote anything illegal so far, but after the hellban discussions, I'm always afraid "it might happen to me anytime without warning"). How do I check that without creating new account to see how other users see me?
Jual Hand Blender  Multi Fungsi
Googles New Privacy Policy Rolls Out Today
I tend to disagree with the logic here. I think another way to frame this is that companies that don't NEED VC money (I emphasize NEED because we all know there are a lot of companies of late that aggressively go after VC dollars without any real plan for how it is to be spent) are going after a space in which it is probably extraordinarily difficult to build a $100k business, let alone a $50MM business. No matter what, if you don't need a huge amount of money to start, the initial barriers to entry in monetary terms are low. It is certainly not impossible to build a sizable business out of complete obscurity without investment (because money is just one barrier to entry), it is just extremely difficult to do.

If it is easy to build, there will be an enormous amount of competition until the ability to make any money is squeezed out. If it is extremely difficult to build, your competition will be very limited.

So I actually believe the exact opposite is true- the more investment money you NEED, the less competition you're going to face. It may be tempting to think that if you just go after a very small, niche market, you can corner it really easily because everyone else will ignore it in favor of larger opportunities, but that's just not realistic. Again, not saying there is anything wrong with this approach (I believe bootstrapping is better than trying to get overly aggressive early on in your career), but very few businesses are easily built and sustained for a long period of time.
"please think for a second what liability you would want for any mistakes that you make with your web startup or idea"

It seems to me that bitcoin wallets are a relatively new and not well enough understood risk. There are very few other "files" like them, in that an attacker copying them can deprive you of their value in a way that you cant protect with backups. I feel a big part of current "internet security best practices" are about minimising the risk of getting exploited - but with a pragmatic limit to how much effort you invest mediated by the excuse of "if we _do_ get rooted, we can always reinstall and recover from backups". It'll only cost you time, and perhaps some reputation, and may put assumed-private-to-you information in someone else's hands, but it hasn't deprived you of access to any of your data. That doesn't apply to bitcoin wallets, and example like this are pointing out flaws in assumptions people are making about appropriate ways to manage them.

It'd suck to be "that guy" who provides the object lesson in why we need to think differently about bitcoin wallets to just about any other file type we might put on an internet accessible machine, but we _do_, and I don't know whether we have an answer to the question "Is there a way to secure a bitcoin wallet on a machine someone else has root access to (either your datacenter's staff with physical access, or the people with hypervisor access to the hardware your vm is running on)?"

I _think_ the answer is "if you can't trust those people, you can't risk storing your bitcoins there". There's a reason people keep their money in banks, and not in train station luggage lockers. I'm guessing inexpensive commodity VPS's should be considered closer to storage lockers than bank vaults. I suspect the finance sector and/or fortune500 companies have hosting arrangements with companies offering bank-vault grade protection and reserve bank style insurance - but sure as hell not at $24.95/month.
Huge respect. I hope this will encourage more founders to follow.
The argument that vendors don't make any effort to prevent disassembly means that they don't care about piracy is flawed; the costs associated with additional protection may just not be worth it.

Adobe, for example, used to go to great lengths to prevent people from cracking their software. In the end, though, a crack still came out within a few weeks. Was it really worth months of highly-paid-developer-time to slow down piracy for maybe a month at best? (Evidently not, since CS5 and above can be disabled by adding a line to your HOSTS file.)

Even as an individual who's sold software in the past, it's usually not worth it. I don't have the time myself, and commercial software which does this costs hundreds to thousands of dollars. I may not be happy if people pirate my software (I'm actually fine with it), but it's not worth the cost to prevent it.

That said, I found the article extremely interesting!
I found it slightly annoying that each of my clicks automatically scrolled through the posts. This included any middle-clicks used to open a link in a new tab.
So this is the "trial-by-fire" approach. I inadvertently use it a lot as well. I'm trying to soften the approach however.

However, you can also wrap that in a friendly approach as youlost_thegame mentions - simply acknowledge the potential of the idea first (ie, positive energy) then go in with the tough questions.

I find even with friends and close colleagues, if I stick to the "nice first, then difficult questions combined with enthusiasm", I can often critique the idea while making the entire conversation positive. Often the faulty idea gets discarded by it's owner after consideration.
This looks incredibly useful and well designed. I've shown my CEO; perhaps we'll be incorporating Streak soon. Two copy niggles:

"Streak is great for sales, but did you know you can also use it for: hiring candidates, handling email support, organizing dealflow, fundraising and organizing your personal projects."

This is a question - add a question mark to the end (bonus, invented by Dr. Evil)

"We put indicators right in your inbox to show you which emails have to do with which deals you are working on."

Awkward / run-on. Try - We added email indicators showing you the association to the deals on which you are working. (remove the wordy noun modifiers and prepositional phrases)
"Pure" selfishness is simply the maximizing of one's own gain without regard for others.

But each of us lives in a world surrounded by other people, many of whom are valuable to us. How could I be selfish (that is, gain the most, ultimately) without regarding the effects of my actions on the people and things that I care about most? I wouldn't want to live at all without my wife, for example.

How could it be purely selfish to live alone, without anyone to interact with? That sounds like misery, so I don't think that can possibly be what "purely selfish" should mean.
Robot Quadrotors Perform James Bond Theme
> “This decision is a result of our strategy to protect the premium nature of our brand by preserving the appropriate pricing and packaging of our exclusive and highly valuable content,” Starz said last September.

And the movie industry wonders how to fight piracy... well for one, don't kill a legitimate and convenient way for paying customers to access your movies! "Protecting your brand" you say? You are putting yourself out of business...
How so? Google credibly claims (somehow) that they don't "read" customer email, even though they run the largest-scale automated email reading system on the planet.
If You're Using 'Password1,' Change It. Now.
We can't wait for a full postmortem before Linode says anything.

Linode can't just leave us all wondering about our own security while pouring over over someone else's Pastebins.
I've used it, and while I see some value in it, I'm not sure I see $142m worth.
It sucks that money was lost but I can't help but to shake my head at someone keeping something like that on a cheap VPS. It's just stupid to think that was at all safe. That's something you should do on your personal computer where you can assure your security.

I'm not really sure if the author of the article expects to be compensated but if so, he's dreaming. Just read through their terms.

Next time he won't be so ignorant as to put something so sensitive on a server like this.
Couldn't agree more. You also lose valuable debugging information, like crash reports, that aren't as useful when you've applied obfuscation techniques. You may very well wind up with a buggier product, and thus a worse experience for your actual customers.
Importance of 3D Animation Software in Designing Graphics for Movies
It is necessary to recognize that experiencing an online existence means your enterprise is open and communicate your message quite easily. Now since every website symbolizes a company and further assistance within drawing potential buyer's attention, a bad flash progress or design may discourage your clients to judge your online existence sincerely.
Changing Engines Mid Flight-How Google Search Really Works
Easy Ways To Create A Website With Grunge Looks
Glossy and shiny design elements used in so many websites can be dull sometimes, as the result; grungy designs are gaining popularity today.
I'm also interested in a similar service for a startup.

BeenVerified seems to fit the bill:

http://www.beenverified.com/home/web_service_api
Your previous comment seems to imply the situation that my answer assumed — that TV wasn't a big part of the culture where you grew up. (I got this from the statement, "Where I grew up, we got two channels.") But I didn't want to flat-out say you didn't know what you were talking about just based on an inference, so I phrased it in the form of a question.

If indeed TV wasn't a big deal where you grew up, replace "TV" with whatever activity dominated the social scene among kids your age. For example, it might just be hanging out and shooting the breeze, or it might be sports, etc.

As a former homeschooled kid, I definitely believe shared experiences and culture are important to socializing.
> One explicitly insures against theft, the other does not.

I'd take issue with that summary. If I put things in a self-storage unit, and it gets robbed because some employee left his master key under the door mat, regardless of how bad of an idea it was to store my money there, that's still their issue.

Think about it this way. I could store my money under a table at McDonald's, in a self-storage unit, or in a bank. Clearly the self-storage unit should provide me some more security than McDonald's. So when an attacker gets access through some really trivial method that they really should be protected against, that's their fault; it doesn't matter that there was a better security option, because it's still below what I was paying for.
There's currently no reliable way to predict what movie will hit the billion dollar mark and what won't. So I don't grasp why movie studios don't take "risks".

You can't dump $200 mil on a 15 minute silent short and expect to recoup your expense; unless you actually resurrected Charlie Chaplin.

However, I don't understand why Artist A needs $25,000 to make a multi-platinum record and why Artist B needs $2.5 mil. Personally I think you'd be better off spending $25,000 on 100 artists and see what shit sticks to the wall.

The irony is, if someone actually said "Hey we're willing to pay for you to write, but we're going to keep 80% of the profits" I'd say "fuck yes!" Because 1) I'm going to get paid less conventionally anyway, and 2) I might actually be able to produce something if I could quit my day job or even work 4 days a week.

When you only have time to write 1000 words or so in a week, how are you supposed to keep focus for 80 weeks to actually finish something. How are you supposed to focus on the same project, keep the same ideas/feelings/themes running consistent? In high school and college I usually got around 120,000 words written in the british summer holiday (like 6 weeks, if that). I wrote a novel and a half whilst doing a reviewing job after graduating. I can still do it, it's just finding the free time.
SEEKING WORK - South Korea or Remote (Canadian citizen)

Have experience with Java, Flex, PHP, MySQL, Oracle, iBATIS, spring, blazeds

Interesting in mobile development, currently learning iOS programming

contact: hkim85 [at] gmail
Being a immigrant (to the U.S.) I completely agree. Many people can't stop talking because of insecurity, a little of what Jason said in the article about himself.
A bank or safe deposit box business will most definitely have clear terms about how liable they are for if something gets stolen.

For a hosting company this is different. Especially because--it's hard to draw a line but I feel it's there--there's a difference between storing sensitive data and storing (what are practically) valuables/money.

I wonder though, I'm not clear on his set up (or business, even), but basically he was literally storing his bitcoin money on a Linode server? Since they're not a bank, nor a safe-deposit service, or are in the business of storing valuables (as opposed to sensitive data). I can't come up with a realworld analogy (they usually break down anyway), but wouldn't you want to wrap this data in an extra layer of encryption or something? It's not that hard to come up with some scheme so that people with root access to the Linode server can't do anything with it either. Since this is about (almost) real money, that's what I'd do.
Well, if I was a billionaire, most certainly my priorities would be pretty different.

However, if we're talking about people applying for a job in a field where a bit of grey matter is required, that's nonsense. Of course some of them are going to sign up to the highest bidder (like you, probably), but there are lots of us who prefer to be in a good environment, where we can grow and also have a good time while doing it.

Two years ago, I quit my job and joined a startup, taking a 15% cut in my salary. Today I make almost twice that in that same company, I've learned a lot, and haven't had a regret ever. I didn't do it for the money. I did it for the work environment and the chance to enjoy my work more.
So far there are 3 people who've reported their Linodes compromised. They all had popular Bitcoin services running on their Linode.

3 compromised emails? Very unlikely. They are all major contributors to Bitcoin, I think they know a little more than using the same password everywhere.

Linode will only send you a confirmation email if you enable the feature, otherwise tough luck. It's also been confirmed by the vice president of Linode to be a fault on their side.
Instapaper's response sounds sarcastic to me:

While “Add URL” feature was implemented to help users of Instapaper, we now understand that it was wrong to simplify the lives of the users.

I think they should have, at least, added an "in this manner" to the end of that sentence. Just sounds like they were saying "we tried to help you and you cried about it" instead of a sincere apology.
Correct me if I'm wrong (IANAL) but I don't think this is allowed by Pintrest's terms.

> You agree not to do any of the following:... Use the Site, Application or Site Content for any commercial purpose or the benefit of any third party or in any manner not permitted by these Terms;

>Encourage or enable any other individual to do any of the foregoing.
Fair enough. I stand corrected.

More plausible to have broken web UI security than an entire bitcoin-community-wide targetting.
What do I recommend? I'm really not sure…

Firstly, I'd start asking whether a $19.95/month shared hosting* account is a "reasonable" place to store $13k worth of (effectively) cash. I'd be _very_ careful if I had that sort of folding-money-type-cash on hand, and would under normal circumstances automatically deposit in a bank account to mitigate the risks involved with carrying it around. And I'd usually take steps to not ever have that sort of value of cash build up or be required - the only transaction I've ever done of that sort of value in cash is selling or buying a car from an individual - and that's always been a direct from transaction to the bank type of arrangement.

If I had enough bitcoin value that it'd hurt to lose it, I would not (at least now in hindsight) store that on a machine that other people I don't know/trust have root access to. Maybe I'd keep my wallet on a usb stick in my pocket or in a safe at home? I think though that at somewhere near the $13k value the "right" thing to do is convert it to cash and take advantage of the existing banking system and its time-tested security and insurability.

(* Which is fundamentally what a linode VPS is, at least from anyone with access to the hypervisors point of view.)
I'd like to know the performance of this compared to erlang and ruby
Then he should Colo with a hosting provider with a contract provision that specifically holds them liable for any losses related to problems caused by the host, and enumerates those possible losses beforehand.
Kim Dotcom Interview - I'm no criminal. [video]
This book will transform you
With the arsenal 37Signals provides, why would any company use Yammer? I found it as useful as Google Wave. Seriously, it could sort-of replace email if everyone in a company used it, and if Dropbox didn't exist...and of course Basecamp had never been dreamed up.
AOL to layoff 50
Obat Tradisional Untuk Luka Diabetes
telah hadir sebagai pengobatan alternatif yaitu Obat Tradisional untuk luka Diabetes XAMthone Plus Solusi terbaik dan yang telah teruji secara klinis sembuhkan luka diabetes tanpa harus melakukan operasi, dan tanpa efek samping.
1 25G SFP, 1 25G SFP Module
Buy high quality 1 25G SFP, 1 25G SFP Module from professional SFP transceiver manufacturer with competitive price and lifetime warranty
Adidas adizero Crazy Light Royal Blue White Mens Shoes Cheap
There are alot of people with computers on this planet. It's a testament to not only being a great game/experience out of the box, but also the constant updates and the lack of costly add-on content plaguing other games.
Facebook Party Invite Accidently Draws 15,000 People
I think this is part of a class of problems that delegate th responsibility of protecting data to the user. I find myself facing similar issues with my wifi for instance. In Ubuntu, showing your wifi password is also trivial and it does not prompt for a master password. that 17 kid will have uncle pete's data and free wifi.
Mens Scott Pants