skysight-inc/HackerNews huggingface dataset:
Assuming you mean the positive sense of 'hacker', the basic concept predates computer software. The MIT model railroad club is the best example off the top of my head.
Shit, I would use this for regular dating too. You'd just have to ensure that it doesn't make the girl feel like the guy's taking her on a "packaged" date (no common branding or anything).
This is a useful for playing around with code on a commute or making a tweak to existing code. I don't believe they think people are going to be writing entire large apps with this.

I used to use a program called OnboardC on the Palm Vx some 13 years ago that compiled PalmOS programs on-device. It had its uses, as does (say) the ConnectBot ssh client for Android. Sometimes you need to make that quick change on the move.
Indeed, the audio tag is basically entirely broken and unusable in a general sense... Most comical is android supporting the tag but not any audio decoding codecs.
This space seems to be crowded lately. There's also the newish rbfu[1], which also aims to be a lighter tool.

It's not directly relevant to Ry, which doesn't use such files, but there's now even a proposal to standardize around a .ruby-version file for these env managers[2].

Also tangential, but Mislav Marohnić probably wins the prize for simplest Ruby version manager[3].

[1] https://github.com/hmans/rbfu

[2] https://gist.github.com/1912050

[3] https://github.com/mislav/dotfiles/blob/93c0cd3/bash_aliases...
Yup. Last time I opened it up (to replace the optical with a second SSD), I placed it electronics-down over open space (propped an edge against the table, held it up with a hand) and air-canned all the crap out of it.
I'm not the original poster, but MoinMoin is widely considered mature and featureful. I'm guessing they had a good reason not to use it; it may be worth asking them.
My understanding is that killing accounts isn't based on karma, but on how many times your submissions and comments have been flagged.
There's no need to derive hinting (reduced) hash from the bcrypt hash of the password. Since all that's needed is even distribution of password space into 2^N classes, it can easily be done by looking at N bits of any password hash. Since N is low, even something like a now-obsolete MD5 would work.
I wish there were more tools for Firefox 11 and SPDY, absolutely no way to tell what is going on.

But I guess the beta and SPDY support is far too young for now.

The only indicator I have is the response headers will add

X-Firefox-Spdy: 1

...which I see on Google services and now twitter.

I guess someone could write an extension to watch the response headers and show an indicator.
With these provisions in place, the password hinting should provide brute-forcing protection comparable to that of regular authentication mechanisms.

VERY bold statement and directly false? Since you a) also hints the hash and, indirectly, b) are forced to use a fast hash.

If there are 256 classes of hashes it is trivial to detect which class belongs to the user, I don't get the brute-force mitigations that is presented. Since this is done for every character sent you could just precompute 256 different passwords that generate the 256 different classes. And brute-forcing 256 passwords is trivial, especially since the current implementation request a new (reduced) hash for every character.
> This approach requires granting access to read the raw password hash to the password-tester application

No, it doesn't.
http://wiki.lesswrong.com/wiki/FOOM

It appears to be a word made up to explain a rapid growth in AI due to the fact that such an intelligence can rewrite its source code and modify its hardware, whereas humans are relatively stuck with the limitations of our wetware. A take on the onomatapoetic word BOOM I think as it represents an explosion of intelligence/capability. By contrast, MOOF would be subverting the reward mechanism that underlies the FOOM growth, thereby resulting in a whimper (MOOF) rather than an explosion (FOOM).
Can’t Download iOS 5.1? Try These Fixes
The myth I'm referring to is that if you speak to geeks about the inception of the home computer, people often claim Apple and/or specifically Woz created either the first one, or the first mass market one.

To give a concrete example: Movies such as Pirates of Silicon Valley which presented the first West Coast Computer Fayre as some sort of triumph for Apple where people where flocking to their stand, when contemporary accounts, including press accounts, makes it clear that the big attention was around Commodore at the time, and attention for Apple was lackluster at best.

That Apple deserved credit for making it big later is not in dispute, but we're talking about history here.

And they receive far too much credit for their purported impact in the early years, when they were selling an over-priced (for the market at the time) product in tiny quantities while other people and other companies were laying the groundwork for the home computer market.
Odd. The DC28 (Animal) when i bought it (5 or 6 years ago) was rated a very good (and is still kicking VERY well). I wonder if quality has decreased.
Not just the caption though - the images too are on separate tiles. Watch carefully, they don't all rotate about the same axis or at the same time.
> Why would it want or not want anything, if it doesn't have a pleasure construct

Why does a calculator want to add, without a pleasure construct? If it doesn't enjoy giving the right answer to 2 + 3, what motivates it to choose 5? The answer is it doesn't necessarily 'want' to do it, it just does it. That was how it was programmed.

You program the AI to choose the plan that maximises the expected utility function. Someone looking at that AI in action might suppose it 'wants' to maximise the utility function. Whether they'd be right to suppose that is a question for the philosophers, but the point is, the thing doesn't just sit there apathetically just because it has no 'motivation construct'. You could say that the AI follows its programming, but it would be more accurate to say the AI is its programming.
Thanks for a great post Paul.

I had a similar experience when I was in college. I was close to finishing school, partied a lot and generally went through life without a care. One night, we were at a bar, and the trains ran right through town and right behind the bar we were at. I was waiting for a friend. When he finally got there after work, he walked up to our table like a zombie, he was completely pale, like a ghost. We asked what was wrong, and he said he just saw a guy kill himself by walking on the train tracks as the train was coming. He was just getting out of his car and saw the whole thing but was powerless to stop it. He said he didn't feel like drinking tonight and turned to walk out of the bar. My group of friends all looked at each other and we all had the same reaction. Time to go. The rest of the night we talked about the fragility of life, and to make sure you tell your family you love them everyday and to enjoy the time you've been given.

Needless to say, that night was a wakeup call. Ever since then, I try and keep a good perspective on what's really important. It's always nice to get a gentle reminder though, so thank you.
Not the author, but from the description, you can only request one check at a time. When you get the results of your current check back, you get a new token.

I'm guessing that the server got too busy to serve a request, either the last request, or any previous one, so that you broke the token chain. Another possibility could be a bug with the timing of events, such that it doesn't realize the field has changed.

The author seems to be lurking around here, maybe he'll have a better idea.
The Drone as Privacy Catalyst
Android custom dialog example
Drones, Dogs and the Future of Privacy
I don't understand what you don't understand, sorry.

Think of it this way - for every new password that you put into the database, run it through some function that spits out N bits. Remember these bits. Then, when you have a password candidate, pass it through the same function and check if the bits are the same. That's all there's to it.

The main exploitation risk is that hinting can be used to quickly reject candidate passwords when running a brute-force discovery (so that only remaining positives need to be run through the full authentication process). The provisions listed are to mitigate this risk, i.e. to make hinting unfit for the quick pre-filtering purpose.
We tried this about a year and a half ago, and it has been fairly popular:

http://www.makeyourgirlfriendhappy.com

The idea could be taken much further, lack of time on my part really. Feedback welcome.
A different approach to Rails mass-assignment security
TED Talks: 3 UX Takeaways
But these "classes" have no meaning. The only thing that means anything is whether the entire hash matches or not. Comparing a subset of bits just gives you random results, (aside from the case where the entire original hash matches).

If something like this worked, it would provide a method of breaking the hash in a piecemeal fashion, which would mean the hash algorithm never worked properly in the first place.

EDIT: reply to below: The only thing it can tell you is that two passwords don't match. It tells you nothing about whether they're similar. (And also doesn't tell you they do match, for which you need the whole hash.)
I'm used to H, J, K, L now. But when I wasn't aware of the history of vi, I always wondered why on earth he didn't use J, I, K, L!
Think of it this way - for every new password that you put into the database, run it through some function that spits out N bits.

And since those N bits are based on the password those N bits tell you something about the password. Directly or indirectly you leak information about the password.
> Which hash function did you use?

There's nothing on the backend, just one hardcoded username and password. All it does is takes an sha1 of statically salted password, adds up all bytes and masks with 0xff. This yields 1-byte hash reductions, which are compared for equality.
Cryptographic hashes generally are selected for avalanche; changing one bit in the input should change about half of the output bits. This won't work as described with normal crypto hashes -- there are some hashes which do "nearness", but they have other tradeoffs.

I wouldn't do any of this, but if you really want to, it's interesting to think about the tradeoffs.

The more sane way to do this is to store some related hashes during original password creation time, or data about the password. The lowest hanging fruit with the least security risk is "is capslock on?" -- Mac OSX indicates this locally in the password dialog box. Next, just knowing the length is probably the most useful thing -- revealing that a 14 character password is 14 characters cuts the search space. This may or may not be acceptable. An attacker exhaustively brute forcing normally starts with "enter" and then moves up to single character, double character, etc. Say it is 4 character numeric only -- knowing it is 10^4 vs. (10^4 + 10^3 + 10^2 + 10^1 + 10^0) only costs you 11%. (obviously in real life you use common password lists, data about the user, etc., but for a 4-digit pin, especially one known to be randomly assigned, this is valid)

The next thing would be some kind of "finger alignment check" i.e. warning you immediately if the first character doesn't match -- maybe revealing the first character of the password, stored independently from the rest of it. Assuming it's random, it reduces the effective length of the password by 1 character -- taking an alphanumeric 14 down to an alphanumeric 13, or 62^14 vs. 62^14. Possibly ok.
Total bullshit, it was a lonewolf...

I love how the media, and even HN is treating EVERY fucking hack like it was ANONYMOUS...

ANOYNMOUS, ANONYMOUS, ANONYMOUS, ANONYMOUS....

FEAR, FEAR, FEAR, FEAR.... Destruction of rights....
I see. Come to think of it, it was a bit rude to assume that you didn't know about the extent of Jobs' early success. Sorry about that.
> But these "classes" have no meaning.

What do you mean? They work for my purpose, which is being able to tell "password" and "passwrod" apart. There will be false positives, of course, but an (educated) assumption is that they are not going to be frequent for lexically related inputs.
I don't normally comment on articles unless I've read them in their entirety, and this was no exception. I've re-read that paragraph in context several times, and I don't think it's entirely clear that you only meant it can't be done browser-side. That paragraph reads to me like you're saying bcrypt can't be used at all.

I don't think using bcrypt for this is feasible in any case. From a UI perspective bcrypt hurts you in the first place, because your feedback is going to take at least a few hundred milliseconds, so you lose the instant feedback that makes this potentially.

From the perspective of the person hosting whatever service is using this there are problems too. The first step from your "How It Works" section is this:

On the server side, it first hashes entered password
the same way it's done when doing regular authentication.

I'd say this is likely to increase the amount of time you spend hashing by about an order of magnitude. When you're using bcrypt, which takes a lot of computational power, I think that's likely to be significant. Especially because, in this case, you really can't afford to be queuing up requests--if you don't have the computational power to process them immediately, you get even worse at giving instant feedback. And again, that defeats the purpose of having this as a UI feature.

You having 10 years of applied cryptography experience means very little to me. Cryptography is one of those things it's very easy to get wrong even with experience. And getting it wrong has potentially very dangerous consequences.
Moebius about his experience with psychoactive mushrooms:
http://youtu.be/guF1jN2xw-Q
No network access. The computer that controls the car doesn't need to talk to anything other than the car. That eliminates a slew of attack vectors right there.
Languages for Bad Programmers
Agreed, I bought a Dyson to replace a 10-year-old bagless Hoover, but the Dyson doesn't like my deep shag area rug and trips a blinking red light. So, the Hoover soldiers on, and I feel foolish for buying a vacuum that has no commercial counterpart.
In particular, if you just type "qwertyuiop" or "asdfghjkl" or the like, the password looks at least as good (better, really) than when you type the correct password, right up to the last character. So, not very useful?
Battleheart developer drops Android as 'unsustainable'
"Essentially all this does it check the password (well, with extra meaningless false positives) without you having to press return."

You're absolutely right. That's a far clearer explanation of what's happening here. A standard login form is rate limited to protect from brute force attempts, when calling a url for each character entered, this is problematic. I think the value in his approach is that it makes it significantly harder to brute force the password.
It's a trade off. There's a lot more money in the first-world. But there's a lot more users in the third-world. That's why the third-world is called the majority-world.
Couldn't you just build more robots to do install, removing, r&d, etc
Think and act
This is what I DON'T like about paper and pen methods of voting: "About half the time these numbers don't, so we recount everything a few times until they do."
There are errors. How can you guarantee that when the numbers finally do match, that there still isn't any errors on the count? Maybe +1 was added to a candidate, -1 for another, and now the numbers match.
The fact the author can think of one particular way to design an AI that would result it in falling over and dying once it figures out how to modify itself does not imply that all possible intelligences would behave similarly.

I was actually surprised a bit to see that the author was somewhat familiar with Eliezer Yudkowsky's writings on the topic (he cited http://lesswrong.com/lw/wp/what_i_think_if_not_why/), because the line of thought doesn't seem to incorporate a real understanding of what he's said on the topic (which, to be fair, is a huge body of work...).

Most of EY's "Friendly AI" worries are rooted in this idea that when considering the entire universe of algorithms that could be described as intelligent or self improving, we need to be exceptionally careful not to assume that more than a negligible percentage of them share anything in common with human intelligence, because for the most part, they won't, unless they're carefully and explicitly designed to do so.

Here, the author assumes that the AI is simply trying to optimize some internal measure of happiness, with complete disregard for the meaning of that measure. This is an incredibly naive view of how deeply important and carefully constructed any optimization target would have to be in any self-improving intelligent machine; it's literally the core of the entire problem of friendly AI, and to trivialize it by assuming that such an AI would ever even consider rewriting its "happiness button" to be always-on is to miss the entire difficulty of the problem.

Hell, it's even the core of the problem of non-friendly AI, because it doesn't even require human level intelligence to realize that if you rewrote your own code so that you were always thrilled with the result, that's the easiest way to increase "utility". Any self-rewriting algorithm that's capable of real self improvement has to, by design, be able to consider the likelihood that changes to its objective function will end up with negative expected value.

None of which is to say this isn't a valid concern, by any stretch. But it's not a proof of universality; in fact, getting around this type of problem is exactly what any real AI designer must contend with. It's an issue that's very well known, and it's certainly not well-accepted as an insurmountable hurdle.
Glad you asked :)

Indicator has two states - gray and black. Gray is further animated as a visual gimmick, the actual arrangement of it has no meaning. The idea is that the animation gives you visual feedback on typing and the change of color confirms that the password is not definitively wrong. And the assumption is that after some use, the users will get accustomed to seeing black indicator immediately prior to hitting Enter.
Pretty cool. I cant wait for bio-hardware to become the norm. The day of a laptop that has never ending storage that self heals (assuming there are no nasty laptop eating viruses/bacteria around) could be very handy.
Analytics from HN vs Techcrunch
Get of your high horse. Yes theoretically you should use bcrypt. Just as you should exercise and eat healthy. In reality very few people do that.

And for those who don't, this is a real possibility. That said I don't think this would be impossible to use with bcrypt and a reasonable load-factor. JS on a virtual machine is pretty fast these days.
2012 Chrysler 300
The 2012 Chrysler 300 is obtainable in rear-wheel or all-wheel drive, with V6 or V8 power. The 3.6-liter V6 sends power by way of a five-velocity
Learning some basic game theory (lots of online sources accessible from Google) will probably go at least as far. The prisoner's dilemma is also a nice metaphor for a lot of human behavior. In various experiments, even without iterations and such, humans tend to cooperate with each other. But if you're ever dealing with a lawyer, a sociopath, an economics professor, or anyone else really who's determined to optimize their share of the chips on the table, you need to know how they will think and game theory's a nice way of letting you know, which lets you know how you should reply so that you're not made into a sure loser.
The War on Comments Isn't Over
> The US [...] are still the world's largest manufacturing nation (ahead of China, we export less).

are you sure about this?

I recall china took the lead a couple of years ago, and if I understand the UN data[0] correctly they seem to confirm this.

[0]http://unstats.un.org/unsd/snaama/dnllist.asp
> displaying a random symbol along the side until the password matches completely

This is exactly what it does. See this comment for details - http://news.ycombinator.com/item?id=3689051
The reason this naming convention (omitting the number) works for Macs but not for iPhones and iPads is that iPhones and iPads come with a lot of accessories (cases, car kits, etc) that need to be form-fitting.

So, you want a case for iPad 1 and not a generic iPad case. You want a car kit that fits the iPhone 3GS and not a generic iPhone.

For iMacs, you don't really need any accessories that care about the shape of the iMac, they only care what ports you have. For MacBooks, usually laptop cases just care about how big the laptop is (i.e. 13 vs 15 vs 17 inches), and don't have to be as form-fitting as iPad or iPhone cases.

As a result, it's more important to know exactly which iPad or iPhone model you have, than it is to know exactly which iMac or MacBook model you have.
When I was a teen and was moving rapidly between artistic movements (I still moonlight as an illustrator) I was generally not fascinated with too many comic artists per se (most of what I saw was "good enough" in the spandex-tight world of the Big 2 companies at the time) but Moebius was one of a few that just stuck with me. Elegant, thoroughly idiosyncratic stories, both as a narrative and as visual spectacle.

What a bummer to hear.
Help us build great UX
We are an early stage startup going where no hackers have gone before: the agricultural industry. That’s right, we are building software for farmers! We strongly believe that our users deserve better technology than the market currently provides, and we are giving it to them. Bold? Yes.

The average farm has vast amounts of underutilized data because they don’t have the software tools to help them analyze it. We provide incredibly fun and intuitive ways for farmers to get all their data in one place, and then extract meaning from it. In the process of doing so, we can deliver innovative new approaches to boosting productivity on the farm, and we are able to gather mass amounts of statistics on the agricultural market.

If you can find a passion for bringing innovation to the industry that feeds the world and want to get in early at a YC startup, then this job is for you. Designing UX for farmers isn’t easy, and that’s why we want to make you a core part of our team. Let’s make something people want!

What we are looking for...

Requirements:

-Talented front-end developer with experience building great UI/UX

-Proficient in HTML/CSS/JS (Frameworks: jQuery, Backbone.js)

Bonuses:

-Graphic design talent

-Mobile development experience

-CakePHP experience

-Grew up on or have a connection to the farm

Email us at vollmarj@gmail.com
WaTCH Manchester United vs West Bromwich Albion live
Manchester United vs West Bromwich Albion
Home - Away
Match schedule:
Barclays Premier League
Date: Sunday, March 11, 2012
TIME : 14:00 GMT
LOCATION: Old Trafford
Watch Manchester United vs West Bromwich Albion live streaming and
also watch English premier league full season live streaming online.
You can enjoy this game on your PC, So why you miss this exciting
race? Get the best online sports coverage on the net directly on your
PC. Download software to English premier league all Live soccer match.
Watch HD TV on your pc
> it's all quite silly

Which part exactly?
I never knew about this tool--my mind has been blown. Thank you OP!
> How do you stop this from being used to brute force passwords?

There's the whole section that talks about that.
3D printer, custom pieces with inset shapes, give containers a tab and mark the tabs with shapes as well.

Or just use a Sharpie, or tag problem colors with nail polish. Many ways to hack it.