skysight-inc/HackerNews huggingface dataset:
I agree with that headlines must be catchy. But I talk about the article and not about the headline. If after clicking I would've read a great, meaningful article, which analyses the pros and cons of bargaining peau a peau and/or comparing both strategies with each other, giving the reader a better sense of when to use which, I would've silently "upped" the article. But the text itself is flawed with that idea, that there is this one strategy that beats all the others and is always correct. At least that is how I understand the authors point. And that is also what I can't agree with. That thinking itself leads to bad results, because after making mistakes (and everybody does) you think "oh gee, I did the wrong strategy again, which else can I choose?", which won't get you anywhere.
Because for most Americans, the names of the services are meaningless. The comparisons convey more information about the story's context.

And a generic term like "microblogs," while somewhat better, doesn't capture information about the relative importance of the service.
Which hash function did you use?

You cannot use a cryptographic secure hash function to calculate a distance between data. If this were possible you could use a gradient descent like algorithm to find pre images. (I.e. the whole hash changes if you change one bit in the input)

And when I tested it, it looked like the symbol was completely random. (As it should be)

Edit: It's called the avalanche effect http://en.wikipedia.org/wiki/Avalanche_effect
Awesome. It needs a little polish, but I am looking forward to tweaking it and trying it out.
Fear – The Reason Why Most Of You Won’t Start A Company
Agreed. There are a million area's to focus on, I've focused on getting the site online first as to be able to get the site to grow using feedback like this. So thanks!

The solution itself is indeed difficult, the key is providing information by something other thank color alone. But as you mentioned, you're bound to a single basic shape that can't really differ from the rest.

A clearer color palette might work, but there is no guarantee that it might work for every possible type of colorblindness in every possible situation.
What point were you trying to make by mentioning the BBC? I though you were suggesting it as a model for overcoming the free rider problem.
If you take away the parts that relate to software developers, GitHub TOS is pretty straightforward: http://help.github.com/terms-of-service/
When a Robot Is the Life of the Party
I was in Berlin in the fall of 2010 for several months and we went to visit the DDR museum. (This is the museum about the former East Germany, which was the communist controlled half of Berlin and Germany.)

One of the things they had in the museum was a simulation of exactly this situation. You got to be the commissar of an industry and you had to centrally manage the economy. You almost always failed completely. (You had to deal with more than production, though, you had to deal with worker housing, and stuff like that.)

It was very educational. I'd say that at least the curators of the DDR museum agree with this parable being relevant.
Kudos for saying better in 3 sentences what the whole article meant to teach. I totally misunderstood the blog post. Understanding the article as you explain it, I have to agree with it.
STOP STARING AT ME DANIEL TENNER! I CANNOT STAND IT ANYMORE!

click
Can you give some free entry points in this topic? I have a book (Shells Bargaining for Advantage), but the scientific papers I read where all not worth the read,at least in time spent vs content learned.
When Is a Game Not a Game?
I'm guessing nothing has really changed.. Rasberry pi ?
You are calling me arrogant for something I did not say. I did not claim that the US is the world's police. My point is that if we were as morally bound as we claimed to be, we wouldn't deal with the Chinese in the first place. We live in a world where corporations are the new countries. Years ago, companies felt a loyalty to the country they were based. Now, companies do whatever is necessary to achieve the highest possible profit margins. Do I blame them? No, not really. If I were in their position, I don't know how I would do it. There's definitely something to be said for trying to make as much money as possible. Greed is what makes the world go round, whether we like it or not. Do I think it's right? No, not really.

I just think it's a shame that companies are so willing to sell out for short-term profit without thinking about the long-term consequences of their action. I believe that if the US wants to sit on its' moral high horse and play world police that we should at least hold ourselves to the standards we expect the world to follow.
While this is possibly an interesting UI experiment, this paragraph says everything you need to know about real-world use:

Utilizing something like bcrypt as a hash function
is not an option, because the number of rounds needs
to be reasonably low for it to work in real-time in
Javascript.

If you're not using a slow hash function like bcrypt, you're doing password hashing wrong. Your users' passwords are vulnerable to brute-force attacks as soon as your database is compromised. (And "my database will never be compromised" is not a valid response.) Before doing anything with your users' passwords, read this:
http://codahale.com/how-to-safely-store-a-password/
I haven't tried this yet, but you can now share a $200/month dedicated database across multiple Heroku apps, and since I think that most Heroku users have multiple apps deployed, that helps mitigate the cost.
Beware: Top Scams of the Year
Wasn't this kind of feedback the cause of the recent WPS flaw? How do you stop this from being used to brute force passwords?
Glad to hear the self-filing process is not too bad. Thank you for sharing your experiences and advice, it's greatly appreciated!
I suspect they are matching bits.

Though since this is going through hashing, the number of matching bits has (by design) zero correlation to how close the P/W is. In which case, yeah, I think the binary indicator would be more useful and intuitive.
Do you really believe that social mobility is comparatively rare in the US?
While I don't disagree that humans are essentially at the lowest level of intelligence that make civilization possible (else why would it have taken hundreds of thousands of years to get started?), this claim has no bearing on the claim that the upper limit of intelligence is immediately above human genius level.

But there's no particular reason to believe that the upper limit of intelligence is pretty much right where we are, either.

In fact, I'd argue that based on what we know about other evolved systems, our priors for "the biologically evolved system that does X has plenty of room for improvement" should be much, much, much higher than "the biologically evolved system for X is almost optimal for achieving X".

Like, a thousand to one or more - there are very few tasks that evolution has found optimal solutions to (which is not surprising, its "goal" is gene survival, everything else is an accident), and most of those are extremely low level physical things, chemical processes and the like. I'd need to hear some really strong argument that suggested that there's something special about human intelligence that should make us think it's near the limit, otherwise the odds ratio is just too hard to overcome...
Geotagging poses security risks
Right, as long as you remember not to look down on yourself, or more importantly, on others, if you or they do not succeed.

But my second point was a general comment about the popularity of the self-help/corporate/utilitarian discourse of "success", "usefulness", "improvement" etc.. You should improve yourself (if that's what you want), but don't become obsessed with improvement. There are other worthwhile and meaningful ways of living - just consider other options.

I'm afraid to sound new-agist ('cause I'm not), but let me suggest that the desire to improve is often the result of an external motivation such as competition. Also, "success", and "improvement" are common words in corporate-speak for two reasons: people who build corporations are often those who are obsessed with success to begin with, and second, people thinking about success and improvement tend to make better employees and better consumers. In general, people overly concerned with success and/or improvement either create authority or serve it well.

So improving yourself is certainly a great goal, but as you do it, make sure that you're improving yourself in order to serve yourself and those you love better - not someone else.
This doesn't make any sense. There is no "reduction" of a cryptographic hash that shows you anything other than "100% match" or "not 100% match". Essentially this is just displaying a random symbol along the side until the password matches completely.

EDIT: I'm surprised more people aren't commenting on this. It should be clear that if there were any way to tell if a match were "close", that would totally defeat the purpose of a cryptographic hash.

Essentially all this does it check the password (well, with extra meaningless false positives) without you having to press return.
Ask HN: What came first: the hacker or the program?
In other words, do you define hackers by what they do or how they think/act?
How to install Itunes in Ubuntu Linux
not just comics and books go watch Aliens or Tron again..the effects were more than just inspired by him..
This is interesting, however the fact that the password indicator gives me a more positive reading for 'qwerty' rather than the correct password minus one letter ('inconsequentia') means to me this is not really 'hinting', just saying yes or no.

It is nice to do this on the login page itself (rather than the usual click and 30-seconds to load a 'your username or password is invalid' - where you need to retype both again), however I assume that you probably have unlimited attempts to 'guess' the password, and thus it is probably quite susceptible to abuse.
[EDIT] Again, I really don't understand why I'd be downvoted for asking a legitimate question like this. It's rather disconcerting. While it's great to think about a future in which this technology is safe and widely available, it seems to me I'm being attacked for simply asking basic security questions that I would ask about any large system that was going through trials prior to mass rollout. And rather than hearing any specific answers, I'm just being attacked and voted down. I think anyone who's spent time in IT would probably ask these things first before they deployed a new system in their company office, so I don't think it's unreasonable to ask them about about a potentially game-changing social innovation.[/EDIT]

That's true. But blowing up a diesel truck is hard to do remotely, and requires someone to actively attack at a specific place and time.

I'm not sure why I got downrated for my post; I'm just asking, doesn't this create a lot of security holes and attack vectors that need to be studied before allowing it? I mean, I haven't heard anything about security, at all. The focus seems to be on a safe driving experience, but where's the white paper on counter-hacking measures? Can you imagine if Google launched Gmail without any kind of plan to mitigate stolen passwords or hijacked accounts? As it is, there are plenty of people who do have their accounts hijacked. Luckily, that doesn't lead to collisions and deaths.

Consider for a moment how many people run Windows and IE, with the latest security updates, who are still vulnerable to zero day exploits. Consider how many don't update their software and get swept up in botnets a few days later. Now imagine each and every compromised PC has physical control over 2-3 tons of rolling aluminum and steel, that can go anywhere on a public highway, with human beings inside it.

An attacker who had taken control over a botnet of compromised autonomous carscould drive swarms of them wherever they wanted by remote control.

Now, rather than downvote me, tell me what security protocols will be in place to prevent the scenarios I've outlined.
Does anyone know if Nevada or California have discussed operating an autonomous vehicle while intoxicated yet?
I was surprised at first too, but after all this hassle it seems like one company with a domain name trademarked prevents others from buying domains that sound, are spelled, or are somewhat similar selling relatively similar products or services, so now I'm not so surprised.

I agree, dilution are an even bigger can of worms...
I'd love to try Blueprint out! I'll send you an email right now!
You could look at this by viewing negotiating as a way of arriving at a globally optimal solution that maximizes everyone's happiness, rather than as a way to allocate surplus that's inherently zero-sum.

When you negotiate piecemeal, there's little room for prioritization. There's give & take on each individual issue, and one person is the winner and one person is the loser on that particular issue, and you don't have the flexibility to make sure you win on the issues you care about and lose on the ones you don't.

When you treat the agreement as a whole, you can look at it as an effort in prioritization. Each side will care more about certain issues. You want each side to win on the issues they care about, and lose on the ones that they don't. The negotiation, then, is just a way of teasing those priorities out effectively and making sure that everybody's needs can be met at once.
I was born in 1974 so I was too young to see them on their first run but I've been lucky to catch lots of reruns of "Tac au Tac" in the 80s. This incredible TV show was based on the surrealist concept of "Cadavre exquis" and made a bunch of cartoonists work together on a large drawing board around a common idea.

Jean Giraud participated in a number of episodes, including this one with Joe Kubert and Neal Adams:

http://www.dailymotion.com/video/xj263p_joe-kubert-neal-adam...

Moebius leaves a long trail of beautiful work behind him.
Scientists Claim Brain Memory Code Cracked - 6 bit bytes
Star Wars and Alien drew from his work indirectly. Notably his work on the scrapped Dune movie that started Salvadore Dali and was directed by Jodorowsky.
Yep, this is an endemic problem with end-to-end verifiable elections everywhere: it is easy to invalidate whole segments of votes. For example, in the wombat voting scheme, if one of the people who holds a decryption key refuses to divulge it, perhaps by "losing" their key, they can invalidate the whole election. Typically to minimize the chance of this happening you make sure that everyone with a key has a strong commitment to the election and make not divulging the key a public shaming event. "OMG, the Democratic Party refuses to decrypt the vote in this Republican-dominated area -- they must be corrupt!"

It's an awfully sticky situation, because the A (availability) in the CIA principle is so critical in elections, where it typically is compromised the most in encryption schemes. (i.e. Quantum Key Distribution ensures that Eve can't listen in on communication, but doesn't do much to stop Eve from making communication impossible).
Usually nobody will recomment a good babysitter, because they'd want to keep it for themselves.
Everything Your Employees Need to Know About Social Media
On Mac OS X most recent version of Firefox it sometimes shows the shape to the right as entirely darkened and other times not when I type "inconsequential". Any reason for this?
Not sure if it was implied, as the message above is ambiguous but, but I believe `the metabarons` was drawn by Juan Giménez, though published by Moebius' publishing company.
I hope criticizing the link itself isn't considered trolling here (I'm still new), but what I see here is an article that is 90% a quote from a different article and 10% pretty uninspiring commentary. Why link to this particular site instead of the place where the actual content is in?

http://blog.intercom.io/criticism-and-two-way-streets/
This is old, and there are no mentions of Erlang, Haskell or Scheme.

Not even PHP which while it isn't perfect it's still pretty easy to learn.
It just further spreads archaic sex and gender stereotypes.

Those are not at all "archaic sex and gender stereotypes". The sex trade, including the sex slave trade, is a multi billion dollar industry all over the world, including the US. As is pornography. With surrogate mothers, gay adoption, etc we live in a world where a couple can even get (or in cases, practically, buy) themselves a baby because they just want so.

Those issues don't go away just because we close our eyes.
You could still use bcrypt and do the comparison work server-side.

Depending on work factors and whatnot, it's now a backend load balancing issue. But it's probably solvable.
Yes, this is correct. It can still be useful to look for things that warrant further study, but it won't be proof of something in and of itself.
The language is really just awk.
One thing though, when you increase the speed that cars go at on a road, you decrease the bandwidth of the road (due to the way halting distance increases with speed, the cars have to be further apart).
It is not the voting system that needs to be changed -- counting and sorting is an embarrassingly parallel problem -- it is the voter or at least the distribution of votes. It is simply insane to give a homeless alcoholic the same influence on how the country should be run as you give a chemistry professor, a factory worker or a librarian.
Domain Names 101: How to Avoid Dot-Com Disasters
> I'm uncomfortable with naming a nation.

This is the sort of a true lie ("prawdziwe zmyślenie") that accurately describes the situation in the People's Republic of Poland, no need to pretend otherwise.
The author appears to have given some consideration to security implications (one-use tokens, demanding relatedness, delays, presumably some protection against timing attacks, etc.); my main concerns are:
* This approach requires granting access to read the raw password hash to the password-tester application
* High resource cost for marginal user utility
* These password-check attempts do not count as logon failures, likely defeating intrusion detection measures

There are probably more issues but there are top-of-head. FWIW Lotus Notes has always done something similar as you type.
>Nobody will ever produce an album on an iPad.

That seems like an extraordinary claim. I'm positive somebody will eventually produce an album on an iPad if that hasn't already been done. Whether it'll be a good album is another question of course, as is whether that'll become a highly popular way to do things...
The point is that there are humans who will refuse to have that machine hooked up, even though they understand completely that it'll make them feel so good they won't care if they use it.
A poor article based on a very selective and introspective graph.

1. The graph shows there's been a mere 25% increase in manufacturing output value since the 70s. The economic value growth of other sectors has been far greater than that.

2. It does not show the vastly greater growths in manufacturing from other developed countries, including the US!

3. How manufacturing behaves in a downturn is very closely related to how the business is managed (i.e. during the boom part of the cycle). If industries or many companies take on large amounts of debt and merely trim costs in the name of efficiencies during booms, instead of optimising for cash, new investments or your best assets, they will suffer in the inevitable downturns, etc. The former practices are common in Anglo-Saxon capitalism.

Thus, the implication that manufacturing necessarily is more volatile during a downturn than services is superficial. It may be for the UK up till now, but it does not have to be that way and, even if it were, it may not be enough of an issue. How do you think some of those productivity gains were previously made - low hanging fruit?
The babysitter is the hard bit.

Since couples tend to collect a small number of sitters and stick with those - frequently friend-of-friend's older children within social groups (church, suburban neighborhood, etc.) - the most tractable approach is more likely to be a calendaring and booking system for sitters vs. a "vetted employee" paradigm.
Throughput still increases because each car won't need to be on the road as long. And computer-controlled cars can potentially have less spacing and still be safer, because they'll have much better effective reaction times.
Hmm... 1,000 clients trying to log in from machines with pretty fast CPUs, and you want to shift this highly compute-intensive, uncacheable, froo-froo-feature support load to the 1/5/10 servers on the backend?
Extreme Manufacturing
Just for fun, I found a hash collision (hardly surprising on an 8-bit hash):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

Copying/pasting the above password doesn't immediately get you the full square - something to do with the security provisions mentioned later in the article. Deleting a character and re-typing it works, though.

Is the complex pattern really necessary for this sort of thing to work? If the password doesn't match, why not just show a big red cross (or other form validation error)?

Taking the idea to the next level, why not just auto-submit the form when there's a good likelihood of a match? (Apart from likely breaking user expectations, and the possibility of some unlucky users having a hash collision halfway through their password.)
Internet Explorer 9 hacked by researchers during Pwn2Own 2012 contest
Android App Store: Eric Chu Steps Away; Jamie Rosenberg Expands Role
Recent studies show that it's lower than in Canada and Western Europe, certainly.

New York Times link included below less for its mediocre writing than because it actually links to PDFs of several of these studies.

http://www.nytimes.com/2012/01/05/us/harder-for-americans-to...
I think in that particular section he is referring to the possibility of allowing to client to validate the hash, which would be bad because it opens up the possibility of brute forcing. I don't think he means you shouldn't use bcrypt on the server side.
Characteristics of a developer
Enterprise Software: Predictions on its Future
tldr: an illustration of http://en.wikipedia.org/wiki/Goodhart%27s_law
Jeez, samdk.

It seems like you Ctrl-F'd for bcrypt and didn't read anything else on that page. The part you quoted explains why moving hash checks to the browser is not a practical option. It has nothing to do with storing passwords. Moreover it has nothing to do with actual (complete) password hashes either.

PS I've been dealing extensively with applied cryptography for over 10 years, and I happen to know few things on the subject. Don't assume ignorance by a keyword match.
the 'Automatic medical diagnosis' suffers from a common misconception - that people want to 'go to the doctor'. It's pretty rare that people do, and in most cases they avoid doing anything medical unless they absolutely have to.

How would you gather the information to make the 'ongoing diagnosis' if the people aren't going to come to you to do it? And that's just getting the symptoms - what do you do for tests for more info, which people like doing even less?

I also think there are some seriously fundamental technical issues, but I'll leave those off due to 'ambitious'.
Furthermore, if someone is using a password manager like they probably should be for most sites (since average people are not going to remember more than a few passwords, and password reuse is bad), there is no benefit to this system.
Exactly, it's just testing 8 bits of the hash rather than the whole thing. So there is a considerably greater than zero chance of a false positive on totally unrelated words... it's all quite silly.
You could use black and white patterns, so as long as a person can distinguish contrast, they should be able to differentiate between the pieces.
French Team Brings Down IE9 At Pwn2Own Hacking Contest