skysight-inc/HackerNews huggingface dataset:
A _startlingly_ large number of people are (still) re-using passwords across multiple sites. The Gawker/Sony(/PerlMonks for me) compromises revealed a _lot_ of email addresses and passwords, some significant portion of which almost certainly allowed attackers access not only to the specific website that was attacked, but also to the email service of the exposed user.

I'm pretty sure none of Jeff's advice helps you against a government-agency level attack agains you specifically, but following it _will_ protect your email even if some other random website you once registered for exposes the login details you used there. I _hope_ that's not a problem for any HN readers (any more), but what about your partner/children/parents/coworkers? I'd bet good money that _someone_ you know and care about is reusing their email account password on random website signup forms.
See Ellipsis: http://listrophy.github.com/ellipsis/
Probably because that's not his point; he writes as if conceding that there was something superior about the major label system makes him want to throw up in his mouth a little, but that's better than eating out of dumpsters.
I love these types of easter eggs, made my night :)
How RocketSpace Is Building A ‘Hit Factory’ For Tech Startups
mmm....if i contribute 10 bucks, i would expect at least a copy of the software. Plus, the UI is not too exciting and their expecation for investment might be abit high IMO
would be a joy to code with this drunk
I used it for my low traffic personal site and thought it was great. But then one my posts got on the front page of HN and the traffic triggered CAPTCHAs for everyone. I dialed down the security settings and the CAPTCHAs went away, but still, that was annoying. And tech support wouldn't own up to their software thinking an HN spike was an attack.

Then I used it for my startup, which was using an SSL cert, and it had major problems on launch day because of that (ugh). It continued to have SSL compatibility issues for a week, so I've only been using it as a DNS since. As a test, I enabled it on staging and have left it off on production. To their credit, it seems like the SSL downtime issues have gone away.

It's been fine as a DNS, but I don't really have any desire to enable the CloudFlare features again. I love the idea of it keeping me safe from spambots and DDOS. At the same time, it really is a single point of failure, and it's failed more than any other technology in my stack. And the caching layer is way too brittle. I've set up rules to turn it off in staging.
Hacker hikeup: Get off your ass and go outside
hanging out for beers is great but so is exercising, so consider going outside for activity for a change. Don't pat yourself on the back too much though, walking only provides a low level of fitness.
In Praise of Idleness (Bertran Russell, 1932)
In which Bertrand Russell advises a four hour work day.
There is a huge value in preventing year-long problems and just moving on.

Google is in the business of making people use the web. More Solaris servers, more Java applications (I have some issues with that, but let's play along this line) can only be a good thing for them.
Appartments for Rent in Montreal
Take appartments for rent in Montreal is a best option to live a luxurious and happy life where people can get all the luxurious facility in very affordable prices that they never get it on other places.
I actually think the amount would be much higher had the $50 included beta.
If you take a look at the number of domains transferred out from cloudflare servers daily (just change the date in the URL below) while they have a net gain generally every day it's interesting (and confirms what you are saying) about the service. Why so many people leaving so consistently?

http://www.dailychanges.com/cloudflare.com/2012-04-14/
Beautiful surf forecast charts
Yes, and it is a trusted piece of software that has been around for ages and I can start using it right now.
Android 2.3 IPS Screen Tablet PC JXD S9000 Ultra Thin 9.7 Inch
Probably a stupid question: Does OpenFlow possibly change my home network setup in the future too? Or for a small bussiness? Coffee shops etc.
I understand that, and I maintain both that the term is invalid in the way it is commonly used, and that that kind of regulatory behavior shouldn't be part of the law.

I've discussed this quite extensively in other comments descending from the one you're replying to, which you can find if you want, and I don't really want to start another separate branch of commentary.
> any of them would be affected by a GPLed JVM

Do you mean I can make proprietary Java code GPL'ed by running it on OpenJDK? Wow! That would be great ;-)

Unless someone customized the JVM itself, nothing would have to be released under the GPL beyond the modified JVM itself.

E-mails like that were probably why Oracle assumed Google can't hire good lawyers.
Fitting for a javascript joke to be a callback.
"Getting to 400M uniques"

It's not even 400m uniques unless you consider delivery of a cached page a unique where the end viewer of the page doesn't even know he is served by cloudflare. Other than hijacking the 404 pages (which would be a percentage of the uniques) there isn't any value that I can think of to that. It's like serving up dns queries in a way.
Presumably, the intended usage scenario is when the student does not have access to the answer of the problem from a different source, like the back of the book. In that case, I would submit that being given the correct answer to a calculation helps the student FAR more than being forced to estimate it.

Suppose you are studying math, and come upon a question to which you don't know the answer. Which better helps you to understand, starting from "I need to figure out how to do this" or "I need to figure out why the answer is 0.0001."?

Further, this has little to no application in the real world classroom. For tests in which calculators would simply give the student the answer, students are simply not allowed to use calculators at all. I would argue that, in an exam environment, there is effectively no margin between "a normal calculator would be cheating so you have to use paper" and "this has multiple steps such that a simple calculator will not give you the right answer without understanding." In light of the existence of pen and paper, and simple 8-digit calculators, this product addresses a problem that simply doesn't exist.
Eventbrite: "One share on Facebook is worth $1.34, one Tweet is worth $0.80"
Do you have any idea how much mathematical knowledge you've deployed in coming up with ways to defeat this thing? Anyone can come up with all of that (or even part of that!) is either not part of the target audience or has learned enough that I'd be comfortable calling the experiment a success.

I don't think anyone's suggesting that this thing is a panacea. It's a tool, one of many in a well-stocked pedagogical toolkit. I think a decent teacher could make good use of it, and more importantly, I refuse to dismiss it just because the experiment might fail.
E.g., an HTML+CSS+JavaScript compiler that will take your web-app code and generate a native application for whatever target that behaves just like that source code would have if it were rendered in a browser.

You are looking for Adobe AIR.
I think currently the most convenient thing is to use HTTP internally and have something on the front end that does SPDY between end-user and server.

Seems like SPDY would be beneficial as a replacement for HTTP everywhere though, because the payload for each request is smaller. However, SPDY seems to be optimized for the longer, higher latency, and slower connection between user and server rather than the faster internal connection between load balancers and servers. Finally, all SPDY communication is encrypted via TLS, so that process might add to a slowdown between internal systems.

Guess we'll need to benchmark it and see! Looks like Apache and Jetty are the only supporters of this so far. And I'd never us Apache as a direct front-end.
What is the barrier to entry for CloudFlare? Putting a few servers in different colos, buying quality bandwidth, set up BGP anycast, get the IP Geolocation database from MaxMind. We are talking a service that could be duplicated with open source software and about $100K to $250K investment.
The other thing to realize about cloudflare is unless you play with your apache logs any hits coming in will show cloudflare Ip's as accessing pages as opposed to the end users. There are workarounds for this (if you know enough to play with apache etc. config) but the default state when you sign up gives you the cloudflare ips.

https://www.cloudflare.com/wiki/Log_Files
Deactivate WordPress Plugin Without Logging Into WP Admin
The point is that broadcasting the same message verbatim across every medium and community. removes one's ability to tailor the message for the standards of that community.
San francisco 49ers
The problem is that it appears that $50 is not a discount on the final price at all, so you really get no added value by pledging money to help him make this a reality more than a year before you'll ever see anything.
Basically I agree that "when in doubt, learn science." In American society, we have more of the norm of "when in doubt, don't learn any science." And that's counterproductive.

In other countries, there are explicit and implicit reminders that science students are smarter than non-science students. In my dad's (European) high school, students were literally tracked from A to F; A was math, B was physics, biology and social sciences were somewhere in the middle, and vocational school was at the bottom. Harsh? Yeah. But it meant that generically smart and ambitious kids wound up in the hard sciences by default.
Try InstaFetch.. There's a Free and Paid version.. Works quite well for me.. But using RIL or Pocket more..
IKamasutra: A Tale Of Sex, Love, And Apple App Store Rejection
Well this is almost similar to IBM saying COBOL being strategically important to their Mainframe sales. Although Java does drive Oracles sales indirectly, Oracle using Java as a bait for their business reasons will do good for Oracle but bad for Java on the longer run.

At the maximum what this would mean is Oracle will evolve Java in a way most suitable to their business needs.

For an outsider COBOL might be dead, but in BigCorp's I've seen IBM having regular COBOL conferences and people do attend them. But ask any COBOL only programmer and he will tell you how limited audience his resume gets because no 'state of the art' work as known to the rest of the world happens in COBOL.

OTOH Java is already the language of the corporates and the darling of layers bureaucratic management layers.

That's definitely not the kind of language I want to be associated with. I don't want to be in the next set of COBOL programmers.
You get a lot of passion at the moment the bargain goes down.
Dad sues Apple for pushing cash-draining 'free' games at kids
I don't think that option was there initially, at least not for the free tier. It's nice that it's there now.
Generation Y Collectively Squirms at the Truths in Lena Dunham’s Girls
+1. I am frustrated when I see discussions and demands made in the media that are fomented by SEO and marketers. They are strip miners of communities, who happily exploit loopholes for profit until no trust remains in the system.
Can I offer a slightly differing opinion and say that curated content would also add value and trust?

Marketplaces are great and scale well, but it's often hard (as it is on YouTube or any other UGC site) to find quality content.
Wow, that's really sad. Unfortunately as humans we don't react well to being attacked by animals.

Assuming you can't use your head to avoid being attacked, you need to remember to be merciless and beast-like in your counter attack. Otherwise, if you handicap your reaction you could end up severely injured or dead.

It's not that hard to kill a swan or to blind a larger animal. The problem is realizing you need to.

My Experience:
My dog was violently attacked by another dog when she was a pup. I stupidly jumped on the other dog and immediately went to work on prying the dog's mouth open. That didn't do much, it was a 50lb pit bull. Had I gouged its eyes out I would have gotten my pup loose a lot sooner (the attacking dog had to be put down anyway).

I learned my lesson after that. A few years later my dog was attached by a shepard mix (we're just lucky I guess). That time I reacted without mercy and kicked the other dog in the ribs as hard as I could which made it let go instantly. Then it lunged at me and I punched it in the face, again, as hard as I could. It hobbled away stunned.

It sounds terrible, I know, but compared to the first attack where my dog had several puncture wounds and my hands got pretty cut up, I didn't have a scratch on me and my dog was in pretty good shape too. Obviously, never do these terrible things to another animal unless you're defending yourself.
That's really nice. Would be great if Stinson beach or others near San Francisco were on there!
There's beanshell, but it really isn't all that great.

My big problem (I came to Java after learning Haskell) is NPEs.
Conflating the two just results in confusion.

Completely disagree with you here. I use "capitalism" to refer to an economic and political system, and I think people who use the terms the way you are are the ones introducing confusion. There are economists on both sides of this, as well as philosophers, so having clarified, we should stop this kind of discussion. What I mean is, if you are already so convinced of the rightness of this many things that I disagree with, I don't think HN is going to be a productive place for further discussion.

Monopolies and oligarchies and all sorts of anti-competitive structures arise naturally in unregulated economies.

I completely disgree, but I think we disagree on which usage of most of the words in that sentence is proper and which is invalid. (All the ones that aren't just glue words.)

I know you've read this stuff in economics textbooks. I'm already aware that I disagree with those particular textbooks.
What a senseless waste of power! Maybe we can use the spare humans to perform protein folding calculations while waiting for the bridge to be set.
there are several books including a "public book" that all exchanges publish and an "internal book" that each exchange has.

in case of the "internal book", it is always ahead of the "public book", as changes to it "published" after events occur internally and this "internal book" is updated.

this is important bit, as an individual exchange "knows better/earlier" than the "public".
Sleep is pleasant.
For what it's worth - and not to distract from your real point - Exponential (or the more general Lyapunov) stability are a better explanation of instability. Stiffness is more a property of the method used to solve the ODE, rather than of the ODE itself.
Two lines from the article:

Scientists and engineers expand the size of the economic pie; lawyers mostly work to divide it up differently. Whenever possible, work to be a person who creates things, instead of a person who tries to take stuff created by someone else. There is an infinite amount of work in science because the universe is big and we don’t really understand it and we probably never will. New answers to questions in science yields more questions.

Greenspun makes and attend to his discussion of what grad school in the sciences is like, especially this, his main point: “Adjusted for IQ, quantitative skills, and working hours, jobs in science are the lowest paid in the United States.”

In other words, science is good for society but bad for the individual, from a purely economic standpoint.
This is all BS. The tip off is the firms that are listed in his step by step guide as well as the impossible number he is claiming.

If those firms were real they would a) have a website not just gmail addresses and b) they would be doing this themselves.

And of course if he was able to really make 100k per month my guess is that he wouldn't be sharing that info with anyone.

Lastly there is no reason he wouldn't want to list the sites that he is selling on if they actually existed and were legit.

Added: This reaks of a "back in the day" type scam that has been run many times over in different industries and publications.
Yes, that's a feature I am wishing for too. I just hit 12k links. =) Coming in faster than I can clear.
That doesn't look right to me. Here's how it looks for me: http://www.dropmocks.com/mBiQ4E
Wonder if there will be any changes made to the Firefox extension?
This is my biggest concern. This means that whenever you want to run a simple HTTP server, you need a signed certificate. Well, thats a huge hassle. So its likely shortcuts will be adopted to make HTTPS adoption more practical for everyday usage. This could lead to the weakening of the entire trust based certificate system due to the demand/pressure of scale. Ok, so now you strengthen the trust system and inadvertently untrust large parts of the unregulated internet. Great, you have just implemented tiered internet. Those who qualify for the trust based system get rewarded with access to HTTP(S) 2.0, those who do not are condemned to HTTP 1.X. Congrats guys, great foresight.
Billige Sko Nike SHOX NZ Kvinner 36-40 Hvid Pink DK
Hvid Pink Nike Shox TL3 Menn 41-46 2012, Nike SHOX NZ Kvinner 36-40, Nike Shox Running Shoes Sneakers, SKO Nike Free Runs, Nike Running Shoes Nike Shox Sko R4, TL 1, TL 3, TL 4, Shox NZ! hurtig levering!
Ask HN: How to handle customers that I lose money on?
I've got a SAAS product that is doing pretty well. I've been getting better at doing customer analysis and I've discovered that about 8% of my customers who pay a monthly fee for the service actually cost me more than what they pay. Is this just a "cost of business"? Do I attempt to contact them directly to tell them I need more money from them? Can I tell them to no longer use the service because they are costing me money?
CISPA Foes Meet, Seek Common Ground
brainfuck itself is simply a minor variation of P", created back in 1964.
Not to mention that he would need a deal with the collection societies in each territory he wants to have business in, e.g. to serve UK users he needs a deal with PRS, in the US he needs to deal with ASCAP, BMI and SESAC, in Germany with GEMA and so forth. He would need to block the service in any territory where he doesn't have a deal with whoever is representing the publisher of the work in the given territory.
Sources: current Windows Phone devices will not get 'Apollo' upgrade
I spent many summers in research labs doing different kinds of scientific projects (mostly in chemistry and physics). It was not only fun, but very rewarding and resulted in a strong foundation in scientific thinking which has always been useful, regardless of the specific job. Part of the reasons I moved towards the biological sciences in grad school was partly due to reality. As a quantum chemist (which I was at the time), opportunities were limited. It was also the time that computational biology was getting really interesting. I joined a startup 2 weeks after finishing my defense.

Caveat: I haven't been a practicing scientist for a while.
How UserVoice use Trello & Google Docs to make UserVoice better every day
I'm surprised at a lot of the negative posts about CloudFlare. We serve around 100 million impressions monthly through CloudFlare, and have been doing so for the past year with no issues.
uhh, did we read the same article? he suggests that in all instances FRAND would be acceptable if there were not a truly open standard.

MS is still doing it's best to 'cut off the air supply' of a free and open IT ecosystem. Nothing new to see hear. MS fanbois will proclaim innocence until the last GPLed piece of code is eliminated.
In case it wasn't clear, the way I define monopoly is synonomous with coercive monopolies. So I would not consider 70% marketshare to be a monopoly, and in most cases I would not even consider 100% marketshare to be a monopoly. Likewise, in the vast majority of the types of cases you're raising, I don't consider it to be a problem.

With US Steel and ALCOA, if these companies were in any way not serving the needs of the market, it would be perfectly feasible for competition to successfully enter the market. (Maybe that's what you're saying too.) Assuming they were not using government regulatory capture to prohibit the operations of their competitors (which, actually, is practically universal these days, and is precisely what I do consider to be a monopoly).
Even as I share your distaste for (parts of) the libertarian ethos, I think you're largly blind to your own ideological faults. To wit, poor people are not stupid, and using "man-kind" in a sentence is not an attack on woman-kind.

I don't buy this idea that we have to educate the poor about their options like they are primitive tribes (note the code appearing here). "They" are perfectly intelligent and aware of their options in aggregate... just give them more options and more of a safety net. Or better yet, ask them what they need...

Likewise, I doubly don't buy the idea that every use of a word containing "man" is a form of patriarchal oppression. The same as I dont view sports analogies as oppressing those who dont play, dont watch and dont like sports.
One of the least informed opinions I've seen on HN.
Java wat
Was wondering that too; only thing I found was this: http://www.vh1.com/music/tuner/2012-04-17/whos-getting-paid-...

It says Dre got Afeni's blessing and made a contribution to Tupac's foundation for his image rights, but I now wonder if this gives him and Aftermath Entertainment unrestricted rights to capitalize off Tupac's hologram in all future concerts.
Yeah, but it isn't even remotely enough and the majority of what has already been pledged are from the hype wave of HN that will disappear in a day or two. You only get the hype wave once.
What's a good place to start learning Clojure?
The negative posts don't seem to be directed at the company, which probably is a solid company doing great things. Just the crazy $1 billion dollar valuation figure being thrown around.
I Feel Like I’m Getting Away With Something
To me, that is an odd reaction. Were you similarly sick when it was part of the 10 cent apps promotion?
Breasts lead to arrest of Anonymous hacker
Isn't this about the implementation of the virtual machine rather than the language itself?

Funny enough, thinking about a project over the last few weeks I found myself wondering if there were any legal restrictions to implementing your own JVM with commercial purposes. I couldn't find any guidance on this at the Oracle site. Maybe the answer to this question will be borne out of this trial?
not a bubble, not a bubble, not a bubble, not a bubble...

no but seriously. sounds like a CDN for your static URLs and maybe combined with a web throttler and web firewall in front of your dynamic URLs. I do see some revenue potential there, especially in providing service to companies with weak/no tech staff.
Why haven't they noticed that Blogspot layout doesn't render properly on Android?
Intel CEO: Our first smartphone launches this week
Learning Is More Important Than Knowing
But curl curve is inclining.
What to look for in an Email from a Recruiter
Ten ways to make money while growing your start-up
market makers work (have deals) with exchanges. e.g. a market maker M guarantees to provide liquidity (e.g. orders) for a certain set of securities to an exchange E, and gets certain benefits in return.

This market maker M makes sure that he is as close as possible to the exchange metal, so he has an upper hand.

The importance of colocation is directly proportional to the liquidity (amount of orders) you provide. e.g. if you send orders manually every minute or so, it does not really matter where you are in comparison to a large bank that sends orders every several microseconds..