skysight-inc/HackerNews huggingface dataset:
Is their site written in c/c++? (it's on the list of requirements for the dev position at the bottom).
Window Boxes gaining a lot importance as element of home and garden decor
nice list. thanks.
(Different poster here.) I like to call it "Moronix" because their analysis is so shallow, but OTOH they cover topics that no other site cares about, so it's probably a net win as long as you read with a critical eye.
This seems like a great change.

The 'Rejected' error message that shows up when you push from one branch and another branch hasn't been merged with the remote recently successfully confuses every single person I've ever introduced to git.
You’re welcome to download it, read it later, and if you like it later, “re-buy” and pay whatever you like. Since I’m the author and the one saying it’s ok to pay zero, I can assure you it’s ok to pay zero now and pay whatever you like later. I’m not offended in the least!
I'm quoting the actual paper.
I've used this on a number of projects and it's served well. Being able to customize the player interface using HTML/CSS is awesome after coming from Flash players with limited or difficult customizations.

One concern is that it hasn't been updated for going on 2 years, but if it's just wrapping the HTML5 <video> tag then perhaps it just doesn't need to be updated as it does it's job well...
there's no non-dilution clause. it's more that this never would have gotten off the ground without him, so we'd rather not knock him low.
Progress Software CTO predicts increase in penalties for high-frequency traders
It would be nice to have the video without the damn music so I can actually hear what he's saying :/
The one interview question I always ask
OK, it's in the Scrypt paper. http://www.tarsnap.com/scrypt/scrypt.pdf

Here's my opinion on this:

* These numbers are more appropriately expressed exponentially. I.e. "factor of 5" = 2 bits of security.

* 2 bits of security is not significant at all.

* The Scrypt x5000 seems to only apply when your attacker has access to a chip foundry and it buys you maybe about 12 bits of security against such an attacker.

* For comparison, 128 bits of security is often considered a minimum for resisting offline bruteforce attacks (e.g. AES has a 128 bit key). Of course passwords usually don't come anywhere near close to 128 bits of effective security, so 12 bits might make the difference for some of them if you're lucky.

* In a sense, table 1 in the Scrypt paper shows that the relative difference between the functions is less significant than even relatively small variations in password strength. When the defender has 100ms of CPU to spend authenticating each password, all three functions compared cost less than $200 to break an 8 letter password and more than $150M to break a 10 character password.

* Very few attackers are going to actually spend $M++ trying to break your password (cue XKCD strip). A relevant exception might be botnets, the operators of which don't pay the power bill for their computations.

Therefore, I conclude that for most purposes these functions are mostly equivalent and quality-of-implementation and password strength issues dominate in practice.
Clock Builders, Not Time-Tellers: Wisdom From '93
Yes, but the process then becomes biofuel, which also soaks up land area and has other issues (warping world food prices).

It would also be nice to be able to capture the energy output of other energy sources, e.g. nuclear in a nice, energy-dense liquid form.
http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=5358...
Or if the next iPhone gets blocked...
I'd say that + overall market moving upwards + the anticipation of a stock buyback and/or stock dividend.

I don't think we can attribute all this growth to any one thing.
I just read through the ClojureScript One source and read through their wiki and tutorial. The mini-framework they've developed borrows ideas from (at least as I gather from their docs) functional reactive programming and dataflow programming. You register handlers who respond to events, and it's mostly just functions calling each other, although obviously there's a huge pile of Objects with a capital O in the browser's DOM. But I think it's a pretty compelling alternative, and certainly interesting, although I'm not sure if it's actually better or not.
At the same time? Focus and time is limited.
Educational Infographics and Concept Art
tldr: I lied, but what I lied about is actually true, so there ... btw I'm kinda sorry I lied.

what a guy.
Under Windows 7 (and I think Windows 8 as well), I can just type [Start][w][o][r][d][Enter] and bring up word. How is this better?
Am I the only person that actually prefers an old school taskbar + launch panel to the various dock systems available today?

I prefer to actually see text containing the window title as well as an icon so I can easily distinguish between the different stuff I have open without having to hover/click on a dock.

It's a much more document focused flow rather than being based on what applications I have open.

This is one of the reasons I prefer gnome2 over anything more recent and want to stick with it as long as possible.
Was Jean Valjean really at the barricade?

I've been following Mike Daisey for a few years. He's really good at what he does and he's really open with his fan base. You can find a number of his monologues here: http://itunes.apple.com/us/artist/mike-daisey/id2085588?mt=1... (I particularly liked the Nicola Tesla Monologue)

Notice that he has one called 'All Stories Are Fiction'.

I think Mike got caught up in a multi-media world when he's a one media kind of guy. That media is theater. It is a world where people pay lots of money to watch other people try as hard as they can to convince the viewers that they are in the streets of Paris and there is a might battle being waged. In the end the audience feels something. And that is the goal.

The problem is that Mike let this 'feel something' get ahead of the burden that the programs he was appearing on are under.

If Mike Daisey comes to your town and you don't go because of this, you're being petty and missing a great show.

That being so, he should get away from journalism because people that produce that content have no room for theater.*

*of course there is fox news.
This is actually the first mobile app that my friends were using before me. Wordfeud was pretty big, saw a couple people every now and then playing it on the train. DrawSomething I've seen dozens of people playing on the train and lots of my friends play too.
Awesome, so we'll have the tech to consume the hydrocarbons, but where is the production side?

What do we need to be able to hook up a nuclear power plant, a supply of clean water and a big air pump and starting sucking in H2O+CO2 and piping out CnH(2n+2) and pumping out O2?
> Journalists do tell stories, but they make sure those stories are true, verified, factual.

Exactly.

I heard many horrible stories about Foxconn from my friends. They should be exposed and punished. But fabrication is definitely wrong. It is especially so for a journalist reporter.

For example, it is simply not true that factoreis could <b>force</b> abortions. Only the government has the authority to force abortion due to the one-child policy. Foxconn is a private factory. Pregnant women would for sure get discriminated against in Foxconn. They decide to either quit, or choose abortion to keep the job. Discrimination against pregnant women is definitely wrong. But such discrimination and forced abortion are completely two matters.

As a side note, discrimination against pregnant women is a wide-spread matter in private companies in China. A good friend of mine worked in the China headquarter of one of the "big four". Her boss gave her such a hard time when my friend got pregnant and could not work 12 hours a day. My friend simply quit. She is a happy mom now.
I still use it because it pulls up results significantly faster than the start menu's search bar on my machine.
Nobody's heard of Rofo.com? They're already doing this pretty well AND have the exclusive LinkedIn real estate app. I used to work there and it IS all about connections in the commercial real estate industry. Commercial brokers are still very entrenched and protective of their listings. The only value they have left is 'inside information' and they know they need to protect it.

Do some keyword research too, like the other dude said, mucho importante.
It's not "Moxie's argument". It's also Schneier and Ferguson's argument from Cryptography Engineering:

Event hough hash functions are used in almost every system, we know far less about hash functions than we do about block ciphers. This is one of the failures of the cryptographic community. Compared to block ciphers, very little research has been done on hash functions, and there are not many practical proposals to choose from.†

It is also the reason why we are sponsoring contests to replace SHA2, because the research horizon for the current generation of cryptographic hash functions is... ominous.

You're making a noncontroversial statement (ciphers are better studied than hashes) sound like a controversy. It's not really a controversy. And please note: I didn't bring "conservatism" into this discussion; the blog post we're responding to. If you put it to me directly, I'll say bcrypt is more conservative than PBKDF2/SHA2 (which is what every current PBKDF2 system is going to end up using). But I didn't write a blog post that says "don't use PBKDF2".

† I say this only to make the point that it's not an argument pulled from thin air or from Moxie comments; something that Schneier commits to writing is, I mean to say, very likely to represent conventional wisdom.
Great, yes there's been propositions made towards it for quite some time but no actual code so I was almost thinking it wouldn't happen, here's hoping it will happen now. Every other major compiler I can think of has it, GCC, ICC, Open64, MSVC, and the optimization often has a great impact on performance dependant code.
Apple has too much cash, can't invest it all -- stock buyback, pay dividend
Note that this changed recently: an upgrade was recently pushed through that made this change. The list used to be a list of 10 or so subreddits, but now the list has been expanded to include the top 30-50 or so reddits I think, including all the NSFW ones.

You could get to NSFW subreddits in the older version but had to know the name.
Light Bleeding, More Issues for The New iPad?
First off, we have the reddish patch that pops up on the top left corner and a lighter red patch located in the bottom of the screen that have been reported by many users that purchased the new iPad. Secondly, there’s the backlight bleeder, a problem that is not a stranger to Apple
It's Android's fault for not supporting the accelerometer in its browser.
It's not better than bcrypt for password storage; it's marginally worse. See downthread.
"Eventually" and "Is there a reason I should care about GCC anymore" don't mix well for me. Time will tell; GCC is definitely not out of the game.

That said, having a C++ compiler designed for humans and not robots is to be commended.
Introducing Ember FormBuilder
It was harder for Columbus to reach the west and bring back treasures than it is for us to reach the asteroid belt and bring back exotic materials. What is missing is not technology (need is the mother of invention) but a reason to go. Was Columbus 100% sure his mission would be profitable?

What if Columbus waited another 100 years for a safer option to cross the mysterious expanse? History would be much different.
For Two Quarters' Dividends, Apple Could Buy 77% of Netflix
Right; I ported it from the Dart implementation, not from the generated JavaScript.
Just to add to that, some common implementations of Bcrypt used by web apps are an extraction from the cracking tool John the Ripper.
Screenshots of Mozilla's mobile OS, Boot2Gecko
YCList (http://yclist.com/) is an unofficial list, though it seems to be a little out of date.
I've was bitten by this many times until I changed my global push setting to upstream, and I consider myself an advanced git user. One time I did a vanilla git push -f, wanting to add my amended commit to the remote branch. I accidentally force pushed our master, staging and production branches to whatever my local versions of them were, sometimes weeks out of date.
Actually, I think the rule is >500 investors, you have to publicly disclose financials a la Sarbanes–Oxley Act.

Different than being a publicly traded company.
They share names, but racing fuel cells are just small tanks.
Well feel free to let software rot into pure shit under these continued rationalisations. What a great service you're doing to the users.
Yeah, don't think about stuff.
Never think about stuff, in fact! Let us think for you! Or if possible, random self-proclaimed experts!

That's the way to go.

(and i bet many won't even notice the sarcasm)

Freaking hell, do critise, do research, and that apply to everything, not just crypto. It's not rocket science.
Cryptography is exactingly and excruciatingly hard to do at industrial strength.

Related: Which is why I'm against any and all forms of electronic voting. I've done a fair share of crypto (as a user of crypto libraries) and I barely understand how it works. There's ZERO hope for the layperson to understand crypto-based voting systems.

One of the central tenets of American style voting is a public vote count. Using crypto puts the "public vote count" into the hands of a the high priesthood (a few adepts), which is a really bad idea.
Paranoia can take you only that far. HN is supposed to be a place where smart people with big data in there minds hang out. Imagine when insurance companies has everybody's DNA - you think there's a perfect DNA? No, everybody has a different sets of risks. Again, just because you have a risk, it doesn't mean that you will developer the disease. For example, according to 23andMe, I have a lowered risk of Melanoma, yet, 8 years ago, I had stage 0 Melanoma. Genetically, my children are safe as their DNA is clear, but this won't prevent insurance companies tracing my kids health records to mine, if you know what I mean. If you look at the current research, risks are +/- a few percent, so, it doesn't really give you much except certain conditions. But it is much better for you personally to know what you're highly predisposed to than to be a paranoid chicken and not get your DNA sequenced.
Mobile Marketing with Facebook Timeline: Newsletter Integration in Tabs
Why WebMD is history: surveying the new Web-based health startups
I'm not very familiar with it, but doesn't C# or the CLR let you do something like this with managed and unmanaged code?
The Evolution of Location-Aware Services: From “Check In” to “Check Out”
NodeUp 15 - Bears, Wolves, and Poppins
SlideDeck 2 - The Web's Most Powerful Webslider
SXSWi Trends, Round 3: Humans Are the Key
Keep in mind, not-space is what justifies much of NASA's budget in the eyes of Congress. Not-space means R&D for the Air Force. Not-space means increased military capacity. Not-space means jobs in congressional districts. Space means spending a whole lot of money for little political gain.
SXSWi Trends, Round 2: Creating Jobs, Brands, APIs
For those of you that use OSX, Alfred is your man.
SXSWi Trends: From User to Creator
Use your Android / Joystick as controller for HTML5 browser game
No, combine the two played ideas into one novel idea. It's called synthesis, thats what constitutes innovation...
How about Siri?

The iPhone was the next step in omnipresent computing. You always have your iPhone. It's two steps down from laptops (leap-frogging the tablet, which has come after the iPhone). The next step is either glasses with computer screens (kind of geeky), or voice-interface computers.

With a voice interface, you can shrink a computer down to the size of a wristwatch. Getting data out is a problem (display glasses? some kind of projector?) is an issue, but not insurmountable.

15 years doesn't sound crazy.
Two important components of lectures are

1. Tying facts and ideas together in a cohesive "story" so that it sticks better in people's minds. Good books are supposed to do this too, but sometimes you don't have the flexibility to choose the best books. Also, as in any story, you have high points and low; important bits and those less so. Emphasizing these differences and making sure students understand which are the central points is another main goal of good lectures.

2. Explaining difficult concepts in different (often multiple) ways so that people can understand them better. For various reasons, books have a tendency to avoid "intuitive" explanations for many concepts, perhaps out of a fear of not-quite-perfect analogies. Such analogies can be given in class with the appropriate qualifications; doing the same in a book would often require excessive legalese.

Where appropriate, these explanations often involve visual elements -- animations usually, and not just pictures (which you can of course include in books).
By "link directly" we mean that a subreddit devoted solely to NSFW content appears as a default in a list of ones to browse from the moment the app is launched.

You've always been free to add specific NSFW subreddits that you know about after the fact. And NSFW links appearing on the frontpage is an occupational hazard, that quite possibly never happened during the App Store review process.
Small world, Dave and I just ran into issues related to this a week ago (I suppose it may have motivated his email). Namely that there was no single API to get the assembler generated for an RTL (register-transfer-language, GCC's final IR) node without going through some destructive APIs.
>colleagues often seem annoyed that I do this

What a peculiar thing to be annoyed by. I take it you are pairing?
Now I'm as much a fan of Moxie's as anybody, but I think one part of cryptography that needs to change is this tendency to excessively appeal to authority. Especially when speaking about practical issues.
Much like manned spaceflight the problems of public schools in America is not one of funding.

If you look at a graph of average inflation adjusted spending per student at public schools it's just a monotonically increasing line from the end of WWII until today, it just goes up, and up, and up.

But does average student educational outcome match such graphs? Not in the least. The problem is that the incentives are all wrong and the money keeps getting funneled to the wrong people. The ratio of administrative staff to students has grown and grown. The biggest influence that active parents have had on schools over the past few decades has not been on increasing educational quality but on driving administrative policy through excessive litigation. Increasingly K-12 public schools are little more than prisons where kids do busy work and if they're lucky the smart ones learn how to teach themselves and most of the rest pick up enough of the basics through repetition or osmosis.

Don't expect the results to change until the system changes.
Not on this hacker news page.
The whole point of this article is to say that, in fact, there are other options.

Then maybe it shouldn't have such an inflammatory title as "Don't use bcrypt". "Alternatives to bcrypt", perhaps.
Maybe they're using it as a filter for smart developers. There's a lot of shitty scripty developers out there, but if you can show you know C you're pretty much guaranteed to be at least decent.

But then again, it might be written in C++; some very very large sites are. For example, OkCupid.
> hopefully one of the .NET protocol buffer implementations will work correctly with the one I imagine exists for Go

That's one of the primary points of protocol buffers ;-)
There are plugins, one for example, so I can type putty[tab]servername.
You can also index more locations than your start menu.
I index a common shared documentation space, and can easily open files by typing their name.
Would you prefer Ono-Sendai, or Ice-9?
Interesting. I'm camping out in Chicago for the next few months doing some consulting for my $dayjob, and I'm hoping to learn more about the Chicago startup scene while I'm here. If the locals really do have that "pragmatic, Midwest mentality" it will be interesting to talk to them and see how their viewpoints contrast with those of us from North Carolina. I'm actually wondering if some of the investors here might not be more friendly to the kinds of things I'm interested in (enterprise software) than the investors back home.

At any rate, it's going to be fun meeting some Chicago based HN'ers and hanging out a bit.
Seriously, Stealth Mode is a Silly Concept
Cutting off the root: The future of community developed android
I agree.

I am going to add the PBKDF2 strengthening and fix the problem with the PKCS#7 padding mentioned in the article. We plan to submit the 1Password update by the end of March.

The support iOS 3 and the old devices really hurt us there as the performance gap between iPhone 3 and iPhone 4S is huge and so far we were targeting the lowest common denominator. I am still not sure what to do about the older iPhones. We'll probably try to adjust the number of PBKDF2 iterations based on the device. Unfortunately, the PBKDF2 calibration API is only available on iOS 5.
So, I agree, but am happy he took the time to comment and (reasonably) concerned that his comment would be buried somewhere in the bottom third of the thread. I'm appealing to high quality comments, not authority.
Sugar and Obesity: A silent killer making you gain by each day
I can sum it up in three words: Prarie Home Companion. Listen to that and you'll understand. Especially the part where Garrison has a fake phone conversation with his mom. We aren't raised to be innovators, we aren't raised to be on the edge. We're raised to do well in school, help our family, and just be good people. Can't say that about Zuckerberg. He dropped out of school. Not supposed to do that. Mom? Mom?....
Makers and Hardware Hackers at PyCon 2012
>> The SSA could administer the same program [ie a 401k investment plan] for literally 1/5th what people are being charged.

This is an odd thing to say, since SS is not in the business of investment. SS doesn't invest. It's a defined-contribution plan that takes the money in and loans it to the federal government. At some time later, they and Congress decide how much they'll pay you back. How can we know how much it would cost them to run investments?

>> Over the lifetime of many plans they extract 20%-50% of all gains

This isn't much of a statistic. If those expensive ones are charging lots of money for sky-high returns, then everyone is winning, right? But commonly, yes, they do take a big chunk of gains. But if you reframe your statistics to better show how hard it is to make money, it's really not so evil. If my investment manager is able to beat the Dow consistently, and takes a goodly chunk of the difference, then we're all better off.

Moreover, market theory holds that high profits are prima facia evidence that one is providing value to one's customers. Do you have reason to believe that this isn't the case here?

>> Bill gates connection to IBM

Yes, but so what? The only thing I can think to read from this is that the only people who add value are engineers; those who are able to see a need, identify a means of fulfilling the need, and bringing the two together, are irrelevant. But I think that this very story shows what a big difference such a role can make.

>> As for developer bribing local politicization's

I won't bother arguing, since again, I think you're making a point opposite of what you're trying for. Saying that government is corruptible and can be subverted to line the pockets of the unscrupulous is not a very good argument for having government step in to resolve putative differences in income inequality. Doing so would simply invite more abuses of power.