skysight-inc/HackerNews huggingface dataset:
The fact Microsoft is the #1 requester isn't a surprise to me. The 2nd most popular search engine probably automatically identifies "bad" content then siphons off this list to Google. If Google had more paid products (that weren't ad driven), I'd expect Google to be the largest referrer of Bing DMCA requests.
So you can scream at the darkness or light a candle. It doesn't matter which is broken if you can only fix one.
It's almost like I acknowledged that there were ways of doing it but expressed concerns for/of doubt that it was being done in the proper fashion due to the misguidedness of it.

I'll say for a third time, as you're not the first person to reply in kind, I'm more than well aware of ways this could be done, but none of them meet the typical expectation of how passwords are hashed and I would guess/assume that someone is far more likely to be insecurely storing passwords than going out of their way to store a... reduced entropy version of users' passwords in their database.
4:12AM CT according to the NASA broadcast
Something that struck me recently while looking at a photo of Steve Jobs in his last days at his home office -- Jobs owned an iMac. The minute I looked at that I sort of realized that the Mac Pro will be doomed over the long term. I even wonder how long of a shelf life the iMac will have? Most computers that Apple is selling are portables -- and they seem to be the one company with the lease amount of sentimentality. It's going to be sad in the future when the company that commercialized the PC market with the Apple II will stop making PCs.
"Remote Timing Attacks are Practical"

https://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf
An IPO is firstly here to make money for the company. FB masterly made the maximum money they could, they sold as high as possible. It was a perfect IPO for FB. Nothing more.
Up in Bremen.
Well ok, you can explicitly ignore them, but not by being negligent.
Quality is not the same as quantity.
Tasks 4 Sneak Peek, open source drag-n-drop listview for Android
Computers = Trucks
It breaks my heart that what you're describing use to be Digg when they were at the top of their game.
Intel Windows 8 Tablets to hit retail stores in November 2012
The much awaited Windows 8 will reach retail stores through the Intel tablets by November this year, as confirmed by trusted sources. Apart from tablets, Intel will also be launching a hybrid device of ultrabook and tablet.
Eh? The sentence you quoted explains that putting domain logic in the persistence objects is precisely what objectify avoids. I do't see any examples of domain logic as separate from persistence logic at all in the examples, so I'm not sure where you're getting the idea that the framework encourages it from. If you're that tied to "how Rails works", why are we even discussing this? Objectify exists to change the way Rails works, because the way Rails works is broken.

I don't understand what you are trying to say. As far as I remember we are discussing here whether Objectify breaks encapsulation. In plain Rails you would have business logic together with persistence in a single class, and the data would be available to the external world only to the extent the business logic allows it. With Objectify all the data in the persistence objects has to be public for the services to be able to access it, and all the business logic is in many small services with only a single "call" method. Do you consider this to be good encapsulation? I am not tied to how Rails works, but I cannot judge all the possible ways of using Objectify, I can only judge what was presented/encouraged in examples and in the blog post and assume that you will use standard Rails practices in the rest of places, since it's in the end a Rails plugin and not a separate framework.

You are right regarding polymorphism.
Perfect, I haven't missed it yet!
> the evolution of the web is absolutely essential for the survival of free & open computing.

I don't understand the connection. How many of the web services we use are open source? A native program I buy may be closed source, but it runs on my computer and storage and is updated on my terms. I can even legally crack it if that's what it takes to keep it running (as far as I understand German laws). If I use an open-source OS and an open-source web browser to access a standards-based HTML5 web service, what interesting freedom do I have?

Now, Metro may offer a better deal by encouraging local HTML5 apps. But I still think the Open Web is something that underdog browsers should care about, neither users nor developers.
Going Public Means Never Admitting You’re Wrong
If fb was down to 14, many things about the company fundamentals would be different. There'd be a reason for it to have dropped by more than 50%.

Instea of going all in and buying the stock, consider options.
> but they lots of people on their payroll whose only job in life is to make sure nobody pays the price listed on those tags.

I could run that whole arm of their business with one employee.
Did Sony offer a free authenticator? At any rate I'm not shedding tears for Sony if that's what you're asking.

"Technically aware consumers have a responsibility to put pressure on companies to be secure with information."

No one's shown that Blizzard has been unsecure with anyone's information. I see a lot of people running around like the sky is falling when it's not.
My fault. I didn't explain properly. I didn't mean it in the normal way- to require strict passwords. I meant in the sense that users who do add a capital in order to up their account security don't get that security added. Only users who know about this bug and go the extra mile then will benefit from the view of "So just make a better password without."

I apologize if this is worded badly. I'm not feeling up to my usual ritual of rewording my post until I'm convinced it makes perfect sense to those who don't have magical insight into my mind.
So if we apply industry standard valuation techniques, tested against an existing listed tech company Facebook is valued at $13.80. Why did everyone buy it at more than double the price? Ouch.
Just another step towards a closed, locked down world where every app is vetted, approved and ultimately constrained to not compete with the business interests of the two largest tech companies in the world.

I know, people will say, this hardly makes a difference, right? But all the steps hardly make a difference. OSX Mountain Lion defaulting to only allow apps signed with a certificate from Apple? Why, the user can just disable that ... not including Flash or Java? Sure, just install them! It all hardly makes a difference. But all these steps put together - they make a difference!

Slowly and surely we're being led like lambs to the slaughter to a world where everything we say or do with our technology will be under the control of giant tech companies that ultimately care only about their own profit. This is just one more little step to ensure that developers preferentially make apps for Microsoft's walled garden rather than free apps that run anywhere and might compete with their interests.

Edit: correction about Mac App store vs signed apps
Headspace Analysis and Blood Alcohol Test Errors
Read how errors in sample handling has attorneys challenging headspace analysis in drunk driving cases. Learn more at the Innovatech Resource Center.
What, if not the ends, justifies the means? I understand that, from a deontological perspective, you might believe that certain means can never be justified no matter what the ends, but surely squatting in an office building isn't a means so immoral that no end could ever justify it.

Now, you might think that building an education startup is not an end that requires or warrants trespassing, and you're probably right. However, I hope that you would feel differently about trespassing as a means to protect oneself from a dangerous oncoming storm.

I'm not sure if this is what you meant, but too often I hear people argue that if a certain means is immoral in one circumstance then it must be immoral in every circumstance. These people have the notion stuck in their heads that "the ends never justify the means." IMHO this viewpoint is far too reductionist to be universally valid.
So I need to buy a smartphone to enjoy basic security features.
Interestingly http://github.com/president is guy from Russia
One of my friends also had his MacBook Pro with Prey installed stolen. However, the police did retrieve it for him (he used wifi scanning around the area to determine the exact location). The police also didn't share any information about the person who had it, probably since it was stolen then sold. From start to finish, the ordeal was probably two-three weeks (enough for a new one to be shipped). Although this is one of the good stories, he definitely takes security more seriously now.
Maybe desktop computing is a solved problem and we don't need more native apps for Windows, and we can enjoy teaching fruits of decades of labor.
My impression is local plumbers don't care about SEO. They don't care about scale.
They care about making money. They don't need SEO for it, they need to offer a good service.
Links with a no follow attribute do have some value, it won't do anything for PageRank but it's social proof. I haven't done the test but others did; it pushes someone higher in the search rankings. Hundreds of no follow links were needed. I'm not sure that's always the case. Let's hope not because my local plumber is never going to get that. Nor does he care.
That being said, I think Google has its own internal Klout system.

"With startups and side projects, isn't the end result of this sort of thing that people have to create blogs/guides/content that is outside their core focus?"

You're right. But it has to somehow relate to what your start up is doing, otherwise it won't get you a lot of traffic, nor will it do a lot to push you higher in the search rankings.

Edit: spelling The -> They
I'm surprised how often a mean is quoted without a standard deviation. Especially in an analysis like this. It's only telling you half the story.
Ah, sorry, I missed the top of this reply-thread. I was referring to the story, not Facebook. :-)
I think most would agree that this trend is there - the debate is how much it matters, how long it will last, and what, if anything, we should do about it.

One point however: in Mountain Lion, the default is to allow any signed app to be run. One alternative setting is to only allow App Store apps. The other, likely more popular, alternative setting is to allow any app.
There are two kind of journalism, opinion and report, while it's true everyone is able to give its opinion, reporting facts is a fulltime job. I worked in a newspaper and most people don't get how much work it takes to produces a 2500 characters story.
I am a freelancer and I will stick to VC++ Express 2010. It means that everyone who ever touches the codebase for whatever reason can just download stuff and hit compile. Ordering something as cheap as US$500 can still be a hassle in a big company.

Also, I only got into MSVC because of open-source/hobbyist dev in the first place.
compiling indefinitely...
These sales to obtain international
Thanks to Prey my friend got his laptop back, with the help of police. I'm pretty sure he was using the free version too, so there really is no 'cost' for an increased chance of getting it stolen. Of course, you should always ensure you have the serial numbers recorded so the police can verify it's the right laptop.
Maybe they will die quickly and cheaply when their problems are discovered too late. Beware the law of unintended consequences.
All of them.

cron sends a mail if: a) there's output (stdout or stderr) or b) the command exit code isn't 0.

So I really don't understand the post when it says "Now when your cron job fails, you will never know about it.".

Well, if you script fails and still returns 0, your script is broken. If you script outputs stuff when it's not supposed to, it can't run from cron.
thereis no multiple transformations, they just lcase every pwd input before hashing. the stored hash is a the hash of the lcase pwd.
I wouldn't call the authenticator "basic security"; it's a very high level of additional security. For a video game.

And if you don't have a smartphone (spoilers you probably do) and you wanted an authenticator you could buy the token or emulate it on the OS of your choice...

http://developer.android.com/guide/developing/tools/emulator...

or on any java device apparently:

http://arenabooster.marisil.org/bma.htm
What we hear: "Dear hobbyist coder. You're not welcome. We only care about developers who have employers willing to pay $500, or just pony up the $500 yourself."

Alternatively develop for Linux and other platforms in a language of your choice with a free compiler...
I'd say, launch it and keep close watch of your competitor. There almost certainly will be future opportunities where you can make a name for yourself, either by learning from your competitor's mistake or by generalizing and grabbing a bigger market share or perhaps by having better filtering and therefore more refined content or the like. And if you are planning to take away some of his market share make sure that switching will be a sweat less action.
Bonds should always pay more than inflation.
He was booed possibly more out of fanboy-ism than anything else. Remember, at the time, the "Mac Community" was tiny, tightly knit, and viewed Microsoft and Bill Gates as Satan personified. Hell, there was even a mailing list called the Evangelist.
<script src="/jquery.js></script>
They could normalize it in the following way before storing a hash:

1. If the last letter in the string is uppercase, flip the case of the entire string.

2. Make the first character lowercase.

This would allow for abC as well (if you "capitalized" the first letter while holding down capslock).
Facebook Camera: Instagram clone by Facebook
Plumber katy
Plumber Katy - Mammoth plumbing provides plumbing services in Katy TX. Our plumbing contractor provides you affordable solutions to all kinds of plumbing issues. Contact Katy plumber today for fast and reliable plumbing service!
If there is brute force protection on the login function blocking a username or IP from attempting x times in y hours AND there is a minimum of 8 characters then I can say thats strong protection on the backend. You are much more vulnerable to having your password phished rather than bruteforced.
Famous Software Developers In Toronto
Biz Technology Services provides Web Design, Web Development,Web Hosting, SEO, PPC, Newsletter,Web Content and iphone application development services at affordable prices in Toronto.please feel free to visit our website thebizservices.com for more information.
Chanel bags on sale
there is no multiple transformations, they just lcase every pwd input before hashing. the stored hash is the hash of the lcase pwd.
I have to agree that the reason I prefer HN so often to other sites (particularly Reddit) is that often, I'm just not looking for humor. Not everything has to have a joke with it. Sometimes I just want to read, or have, a serious conversation. Quora, you mentioned, similarly a great place to read on a wide variety of things; it's like an inquisitive Wikipedia.

I know it's a popular opinion that HN long-ago-reached/is-reaching a threshold in popularity that threatens to ruin it... But before people say that, again, take a look at some of the other sites. Judging relatively? The bar with which to judge a community's seriousness of the topic is lower than you think.

I'd hesitate to call it a "4chanification" of the Internet; I actually still often enjoy 4chan. It's the spreading of the culture epitomized at 4chan shows making people chuckle is often easier than making them think. And easy comedy, while not inherently a bad thing, is obviously the most plentiful. The prevalence of comedy is also easily to notice on YouTube or Twitter. And it's not that I have anything against fun or being funny. I love David Cross, Richard Pryor, 3 Stooges, etc. I just sometimes enjoy having fun in ways that doesn't include humor. There's also fun outside laughter.

This is what makes me less eager to log into an old forum I used to love. Once a thread entitled "you laugh you lose" repeating things I'd long seen on 4chan became required reading to get any other joke in every other thread, it loses something. I don't have that community feeling I used to.

And say what you will about the quality of HN, even considering the fact that a good third of us dream of projects that would probably put another third out of business, by far and large people here are respectful and contributory rather than angry and wry. We may not be as tightly knit as many, especially given our numbers, but we're a community of quality decorum. Despite what much of the Internet seems to think, there's value in that.

A few months back I actually considered making a go at a gaming news site that would function like HN or Reddit. The idea being to drive high minded people and experts to have serious and civil discussions. It's not only a love of mine, there's a large number of game developers that blog, tweet, and in general communicate with fans. I figure if you can hook a few, you're good. Of course, I dropped that during a rough patch. Things are looking better now...
With a spouse and two kids in tow?
Thanks - updated my post to reflect this.
Put a contact email in your profile and I'll give you pre-alpha access to my experiment. I would value an additional opinion.
The idea behind some of these countermeasures are so if someone steals your laptop, they can't access the data. The article comes from the 'beyond paranoid' side, since cold boot attacks especially are require a lot of setup (of course, once you have a laptop, take it to a lab). The firewire attack is as easy as plugging in a cable though, but still requires someone with the no-how to find the password.

For most people, just having an encrypted drive is enough, since their data probably isn't valuable enough for people to go out of their way to steal it. You are mostly trying to protect your data from ordinary thieves.
Precisely the same way, yes. Sony's network being compromised had absolutely nothing to do with password case sensitivity, and absolutely everything to do with shoddy practices elsewhere that opened a massive hole into their database, allowing them to download millions of accounts worth of data.

Millions of accounts from a single breach somewhere. Not millions of accounts individually brute forced because their case-insensitive passwords made them trivially guessable.

We should be worried that Blizzard will get hacked like PSN was. That would be potentially catastrophic. But case sensitivity has almost no effect on password security unless your users ALL use random passwords.
I think I misunderstood you, because it sounds like you're implying that these sites have "spray[ed] crap" all over their sites to look better in this newly released report?

You may know more than I do about the existence of pages of crap on torrentz.eu because I have never been there, but it's rather difficult for me to believe that anyone is intentionally gaming a report they had no way of knowing the existence of until Google's announcement.
Nike Free Run 2 Sko, Nike Free Run 2 L?besko
L?besko Nike Free Run 2 2012, Sko Nike Free Run 2 L?besko, nike free dame, nike free sko, l?besko nike free, nike mercurial, Nike Free Run 2 RUNNING Shoes!
Complete security newbie here. Doesn't it make brute force attacks almost worthless when you just have a minimum time between each login request after too many attempts per IP ? So you can only try to login every 30sec after you've failed 10 times in a row? I thought brute-forcing logins were a thing of the past after people started implementing this min time between requests strategy.

The only weakness I can imagine would be a massive botnet forcing logins, but even then it would be severely limited. Am I missing something silly?
Inflation and Trading Down Brands
Fly MC202 Price in Idia, Dual SIM Music Phone Features & Specifications
The new Fly MC202 is a low price basic Dual SIM music phone in India. It has 2.0 inches QVGA TFT display screen with 120 x 160 pixels resolutions. It is a bar shaped phone comes with 1.3 Mega Pixels Digital Camera with video recording facility. Fly MC202 is a GSM mobile phone which comes equipped with Video Player with recording, Audio Player with Equalizer, FM Radio with Telescopic Antenna, Sound Recording, 3.5mm Audio Jack, FM radio, Torch Light, Mobile Tracker, 20x30mm Speakers and 32GB Expandable memory. This entry level phone Fly MC202 also has Bluetooth, USB Port, WAP Browser, Dedicated Music Key, Call Conference and Auto Call Recording Option. The phone loaded with 1800 mAH Li-ion battery which provides talk time up to 15 hours and standby time up to 500 hours. The Fly MC202 Dual SIM mobile is available in Black with Red color.
One of the monitor feeds: mms://a1709.l1856953708.c18569.g.lm.akamaistream.net/D/1709/18569/v0001/reflector:53708

(opens at least with VLC)
Ask HN: What's with people postfixing 'hacker' to random words?
Growth hacker, product hacker etc. I'm seeing so much of this lately. Has the meaning of the word hacker changed yet again to be something else? Is it cool to be referred to as a hacker in popular culture now? (or are we all still members of a criminal enterprise who breach computer security with a few random taps on a keyboard)
The Apache config test does not catch every error and you can still cause crashes if you don't check it over by hand.
I think what you're saying really can apply to all ages. Different programmers have different skills they bring to the table. Some have an amazing ability to crank out a utility app that is easy to use. Some are amazing at complex algorithms and scary assembly debugging, but can't and won't ever be able to design a simple form-based app that makes any sense to normal humans. From a programmer stand-point I don't think either one is any better (although the algorithms guy is likely to think his work is more important :-) But depending on the job or position, one of them may be more useful than the other.
There is a reasonable line of thinking that the Internet and modern computer modeling and retail investing have had the effect of pricing in the future growth in equities, and so traditional growth will not continue.
New post with comment threads to look at.
This post has since been deleted.

http://img23.imageshack.us/img23/1380/peterirelandgotbannedc...
Well, that's what most of us here believe obviously. But are you betting against the Oracle of Omaha?
Why would a retiree need to keep their portfolio growing?
Do keep an open mind, but bear in mind that Haskell is a different style of programming all together and there are libraries to speed number crunching in Python (NumPy).
Apart from the fact that Python can be infinitely faster than rails, I'd just say that any more javascript is bad news, bee it coffee based or node based or whatever. Someone forgot to go back in time and shoot John "javascript" Connor.

On topic, your main problem is that you're playing the one man army with too many tools, that is obviously unrelated to CS or any language.

It's likely you wouldn't mind the additional complexity if you were only working on front-end.
> This doesn't really seem like news to me. I've never met anybody doing real development in the .NET world who didn't have a paid copy of VS.NET.

For C/C++ hobbyists and Open Source developers, MSVC used to be the compiler of choice on Windows. The Ruby community has embraced mingw more and more, and I think everyone else will (and should) do the same. Breaks my heart because MSVC has good C++11 support.

I don't think any professional will care about this. In fact, it's probably good news for them (us). Any barrier to entry means slightly less competition.