skysight-inc/HackerNews huggingface dataset:
think about this, apple not only provide browser for free (perfectly ok for me tho), but also shut off any possible competition, because only webkit can have JIT.

I totally get it that this is not antitrust issue by law since their market share is not over 50% yet, however for indie devs live on this platform, it means 100%.
Obat herbal infeksi saluran kemih
Atasi penyakit ISK dengan obat herbal infeksi saluran kemih

Obat herbal infeksi saluran kemih - Dewasa ini banyak sekali orang-orang yang terkena penyakit infeksi saluran kemih, kebanyakan kasus penderita infeksi saluran kemih disebabkan oleh pola hidup yang kurang sehat seperti menahan kencing, tidak membersihkan kemaluan setelah kencing sehingga terjadi infeksi, dan faktor-faktor lainnya.
I've never seen an 100b valuation IPO before either. I suspect both are related. :P
Correct, the heavy lifting for basic security is not done with a pw that has 50 bits of entropy and drives off your casual playerbase, it's done on blizzard's backend with lockouts after a few failed attempts.
OK then pay rent for an apartment for you and your kid to sit in while you never eat or do anything or seek medical attention. 20k/year
I know you can do timing attacks through the network, it's not even that hard in the simple case.

That paper, like most papers on timing attacks, was done on the local network, not the internet. They're relying on absurdly precise measurements of absolutely tiny differences in timing, which would be lost in the jitter and latency of the real internet.

As I said, you can certainly do internet timing attacks where you're looking for database access, because this can take many milliseconds, which is a delay which can be detected even on a crappy internet link using a bit of light statistics.
A quick question to everyone who is asserting that aggregation, social media, and citizen journalism makes traditional, for-pay news outmoded:

What if Watergate happened today? Who would break that story? Who would follow the leads? Who would protect the informants?

Before you answer "Wikileaks", keep in mind that one of their top informants is currently being held in military prison under borderline inhumane conditions, and their leader is currently being extradited to face trumped up charges of sexual assault. Meanwhile Bob Woodward has a book deal and is spending his retirement on the sunday morning talk circuit...
Which is 09:12 UTC.
Mumbai Escorts
Get a top contour Indian Escorts in Mumbai, we are arch provides of Mumbai Escorts, Get Independent Mumbai Escorts in your budget, we accept Hot Escorts in Mumbai who are top contour and affordable for you as well. Call us any time to book a Escorts in Mumbai and all locations of Mumbai. Mumbai Escorts is Top Contour Escorts Services
I have an account set up on reddit that only subscribes to r/python, r/redditdev, r/django, r/startups etc. The quality on the front page of that account is pretty good, and there are very few gratuitous memes tolerated in these subreddits.

I highly recommend having separate accounts for entertainment and work/serious news.
My experience is the opposite. Rich people throw house parties. Poor people go to the bar.
very true. i think there's a feeling with those guys that the work is inevitably dwindling away, but if they can ride the gravy train until retirement then they'll be just fine. It's a bit of a gamble that the work won't run out, leaving them with a skill that's no longer used.

Who knows in 20 years that may be the case with Ruby devs, getting paid huge amounts of money to keep ancient systems running!
From reddit:

I've reversed Battle.net protocols in full. Here's some facts:

Your plaintext password is never sent in plaintext. Old Battle.net clients (Diablo 2 and earlier) use what we call the 'old login system' (OLS), which uses Broken-SHA1 (SHA1 implemented with small bugs). Since Warcraft 3, the 'new login system' (NLS) is used, which uses SRPv6 (a standard for password exchange using public keys + RSA).

Under OLS, the Broken-SHA1 of the password is stored. Under NLS, a value called the verifier is stored, which is derived from the (actual) SHA1 of the password.

The protocols (both OLS and NLS) support case sensitivity just fine - the case insensitivity is a client-side issue. If you implement the protocol yourself, you can use a case sensitive password, but the game client won't be able to log in with it. We used to use that as a security feature in bots.

After a small number of failed logins, your IP is temporarily banned. That means that bruteforcing is nearly impossible.

Honestly, I don't understand why they have case insensitive passwords; but, at the same time, it doesn't make that much difference considering only a few password attempts are allowed before you're banned.

http://www.reddit.com/r/netsec/comments/u2168/blizzard_inten...
None of them are rich.
Health Tips Blog
When you become Healthier you feel the difference in your well being. Health tips are important for each and every living being. Health tips blog help you to improve your health and live a healthier & happier life. Learn at health tips blog how to improve your health and fitness that will change your life.
They limit to 16 characters silently. I used a 32-character password for quite some time and wasn't aware that it was silently being truncated to 16.
When the admins who run the "content providers" are engaging in libel themselves, about the people that use(d) their service, it's a whole different ball game.

In no way was it implied that an ISP or other information transfer network (ie. the post), had to moderate its data transfers.

This is about the specific service that uses the network, not the network.
let me know where the dime-a-dozen php coders are all hiding because we have a lot of trouble finding any to hire here in Chicago!
> A minor syntactical transformation of javascript just doesn't cut it.

If every CoffeScript program shared the same AST as its generated JavaScript program, i.e. if only the parse tree representing the concrete syntax differed, then your statement would be true.

However, that is not the case. The abstract syntax of CoffeeScript differs significantly from JavaScript, for example in CoffeeScript almost every statement is also an expression, which is not the case in JavaScript.
Remarkable. Three days after launch and they're about to hook up with a space station. One small step...
>Am I missing something silly?

Yes. It's not that the bad guys try bruteforce to login multiple times and wait to be banned. They could (will/might) steal db with hashed passwords, do their decrypting at home and then login with what they got. The stronger the password (or better, ie slower to calculate hash used) the more time they need for that thus giving more time for Blizzard to realize passwords were compromised and block all accounts/force global password change.
Really clever bad guys can do their homework before they have a chance to put their hands on hashed passwords by preparing hashes for say all passwords which are simple combination of words [1]. Now, once password db is compromised they just look for matching hashes and have instant access to some accounts. This is why you are told to use "strong" passwords, if they just try to "bruteforce log-in" that really wouldn't matter much.

[1] http://en.wikipedia.org/wiki/Rainbow_table
You want newbies ? go javascript.

I can't believe I'm reading an argument favoring Obj-C over (any flavor of) js as a noob turf...

The simple reason there's disparity is that github is not the center of the world and objC people mostly code for money, that's all there is to it.
I think differently in CS vs JS. I go for different solutions because they seem more elegant in CS than they did in JS. And if language shapes how we think, then surely thinking differently makes it a different language. Maybe.
In high school I had a sweet apartment and great food and I got by on a minimum wage part-time job which truth be told was mostly funding luxuries. Everyone should just stay do that, find some parents to live with and retire.
Watch Moonrise Kingdom Online Free
Camerawork of Watch Moonrise Kingdom is by Robert Yeoman and edited by Andrew Weisblum. The motion picture is distributed by Focus Features under American Empirical Pictures, Indian Paintbrush, and Scott Rudin Productions which is due to be shown in theaters on May 25, 2012.
Why is your heart breaking? The new version still supports c++, right?

Just because it's a hobby doesn't mean you can't pay a little money for things. I have lots of hobbies that are way more expensive than computer programming.

One surfboard costs more than you'll pay for a full VS.NET license. Over the 4 years this next version will keep you going, I'll go through thousands of dollars worth of rock shoes. A gamer will go through thousands of dollars worth of games. A mountain biker will replace his $1500 bike in that timeframe, and a snowboarder will rack up thousands of dollars in lift tickets and baggy trousers.

All these things have in common that: A. They're enjoyable, and: B. They cost money. Programming computers is no different. If you want to do it, and there's a good new tool out that costs money, why would you not buy it?
at least you can write an app and install it on your device without JB. That is already a huge advantage over iOS. Android is changing rapidly and we don't know what the future will be, however, we all know where iOS/MacOSX/windows will be heading. For me, it is no brainer -- i have to jump off their boats ASAP.
I've been waiting for this for a long time. I spent the past two summers working on the Dragon docking as an intern.
VCard Import
Batch vCard Import Tool to import multiple vCards to Outlook & Excel in instant clicks
Hopefully nodeJs will die within a year or two.

Apart from that, I believe you should try coffeescript or any language you become interested in, it's a very way to keep on improving, opens your mind to different paradigms too.
مسلسل فاطمة الحلقة الاخيرة مترجم  
مسلسل فاطمة الحلقة الاخيرة مترجم

فاطمة ,الحلقة ,الاخيرة ,مترجم

http://www.youtube.com/watch?v=KeV08589TOU
Run java?

http://arenabooster.marisil.org/bma.htm
And the rest of us define retired as not having to work to pay our bills. I like my job, but if I got hurt or laid off I would have trouble.
An interesting demo: [1]
By not doing all 3 hashes, an attacker might realise that the password they sent passed, say, 2 checks, but not the third. This discloses information about the relationship between the password the attacker just tried and the correct password.

[1] http://carlos.bueno.org/2011/10/timing.html
We're an easy-going group and we just mix about and discuss whatever the hackers and entrepreneurs there feel like talking about (just like hacker news really). If you're new, just ask anyone there for Jason or Paul (me) and we'll make sure you get introduced around.
Let us suppose that languages BE and LE were designed completely independently, but came up with the same semantics in a different syntactic packet. For arguments' sake, let's suppose Google made one and Apple the other. They had different marketing budgets, different logos, different conferences. Religious wars were fought over them. Even though they had identical semantics.

Are they the same language?
A hacker isn't something that is part of a criminal enterprise that breaches computer security, that would be a Cracker. I think 'hacking' can be used in other contexts and makes sense. I wouldn't say the meaning has changed as it was always blurred but people are using it in some places where it may not make much sense.
珍惜时间的名言
You find you are going to spend that unneeded money on yourself, it is disingenuous to say you are retired.
The killer
TVS Bikes are More Cheaper - TVS Sport Rs-48789
This story was on HN (albeit from a different source) a couple of weeks ago. https://news.ycombinator.com/item?id=3920918
Where did you find a link to this?
reminds me of this: https://idonethis.com/
Google Enters Payment Market with NFC Card
Ah, I missed that, sorry.

I think the point stands for the Blizzard case - there seems to be an assumption in some corners that the password is stored plain text, but I would imagine case neutralised (so to speak) passwords are hashed.
I think the point here is that if goofy capitalization is the only thing that kept your password from being trivially guessable, your password was only a little bit harder to guess. If your password isn't guessable, then it doesn't really matter if you have additional entropy, because the server smacks down brute-force attempts before they even get off the ground. In other words, it doesn't seem like capital letters make your password appreciably more secure in this context.
meefs mentioned it on #startups IRC freenode
N.B. also that dd on osx will EXIT IMMEDIATELY if sent a SIGUSR1. It double-sucks because one tends to do this on long-running dd processes that you're wondering are done yet...
Without FRAND, standards would be fine if they required royalty-free licensing instead, which is preferable.

Google/Motorola are definitely not the first to go to trial over high FRAND licensing fees (see below). The only thing remarkable with the Google/Motorola litigation against Apple and Microsoft is that it was a defensive move on being sued by Apple and Microsoft. It is true they didn't sue Motorola over FRAND patents [EDIT: or did they? see at bottom]... Not by moral virtue I think, but because their patents are far too insignificant to be required by a standard. Note that FRAND is a vague notion that doesn't say what "fair", "reasonable" and "non-discriminatory" should mean in practice. It leaves place for negotiations and even injuctions in case of infringement. Here's a good discussion of FRAND misconceptions:

http://blog.patentology.com.au/2012/02/fraught-issue-of-fran...

Excerpt:

Why should a company be able knowingly to use a patented technology while dragging out licensing negotiations with the patentee, secure in the knowledge that the greatest power the patentee has if agreement cannot be reached is to ask a court to rule on license terms and royalty rates?

Now it's true that the fees demanded by Motorola at this stage (2.25% of the sales price) are higher than usual. But that's after Apple and Microsoft violated their obligation to contract a license for the patents, and sued Motorola over their own patents. It is also expected for a party to start with a higher asking price than what they will eventually settle on. And it is not completely out of line with other FRAND licensing fees. For example Qualcomm routinely collects over 3% of the device cost: http://www.trefis.com/company?hm=QCOM.trefis&driver=idQC... (from http://www.hoista.net/post/17365252561/google-wants-1-7-bill...)

Another example is Nokia who recently settled with Apple for around 4.5% of an iPhone cost: http://www.guardian.co.uk/technology/2011/jun/14/apple-nokia... (this was also a case of FRAND patents, see http://www.scribd.com/doc/28285432/Nokia-s-Motion-to-Dismiss...).

How does that compare to what Motorola asks for? From the Guardian article, Nokia takes about 4.5% of the estimated average $264 cost price of an iPhone, which Apple sells to retailers and phone networks for an average of $660. Motorola asks for 2.25% of the sales price, which corresponds to 5.6% of the device cost. Not so different from the Apple-Nokia deal.

EDIT: According to Motorola, Microsoft used FRAND patents to seek an injunction to block Motorola's products:

http://www.itpro.co.uk/639088/motorola-slams-microsoft-paten...

And Microsoft’s complaint with the International Trade Commission sought injunctive relief against Motorola Mobility based on Microsoft’s own standards essential patents. With its recent actions, Microsoft has simply reversed its position on FRAND in order to suit its current litigation strategy.
Right; I guess my thought is that since a hash with a modest work function can also take many milliseconds, this would be meaningful. Not sure in practice, however.
> Must be a full time job to fill out all those forms.

If you look at the list of the top submitters of notices, you will see several organizations which do exactly that on behalf of IP owners, like Web Sheriff.
Cannes : voici le programme d’aujourd’hui 
Nicole Kidman et Zac Efron, attendus dans « Paperboy » de Lee Daniels, ou encore la présentation de « Post Tenebras Lux », font partie des temps forts d’aujourd’hui à Cannes. Demandez le programme…
If I use an open-source OS and an open-source web browser to access a standards-based HTML5 web service, what interesting freedom do I have?

You have the freedom to use a site built by anyone, anywhere in the world, for any purpose, using any tools or process they like. If you limit yourself to these new appstores you can't run anything that wasn't approved by the gatekeeper.

And if you think Microsoft or Apple abuse their authority now just wait until they have nothing to fear.
Ask HN: Is anybody else sick of the app store as a developer?
I've had the unfortunate chance of having submitted several apps and every time I look at the App store, I get a pain in my side. Here are the problems I see:

- a suboptimal browsing experience: a list?? Really? Sure the featured tab gives a bit of real estate to some apps, but what about the rest? They all just blend in with only the app icon giving any sense of identity/branding.

- the recipe for success: success is only rewarded for already successful apps. It's gotten to the point where devs are paying for installs with this formula in mind - pay for boost in ranking = boost in organic installs - rinse and repeat. Not a good model for discovery when there are over 200k apps in the store.

- a lack of analytics on the storefront: so many unanswered questions - where are my referrals coming from? Are my screenshots optimal for downloads? What does a change in screenshots reveal about the activity on my page? The app page is my app's storefront and the only info Apple gives me is how many people bought something. I don't even know how many stepped in the front door!

Please tell me someone else sees this too! Sorry for the rant but I really thinks its a bad experience and needs to be fixed elegantly.

If someone came out with an alternative portal to the app store with a better experience and these problems fixed, would you use that portal? Try to answer that without the old "yea that's cool!" bias.
It's not always about beeing able to afford something or not. I don't _want_ to support a business model that makes it harder for beginners. So yeah, when I have no choice due to project reasons I'll be forced to buy one obviously, but I don't like it and I will try even harder to get away from working on projects where I'm forced to do this in the future.
>After a small number of failed logins, your IP is temporarily banned. That means that bruteforcing is nearly impossible.

If someone in genuinely trying to crack passwords, I'm going to go out on a limb here and say that they know what proxy servers are and how to use them.
Apple and Microsoft don't have clean hands here - and that's even if you ignore their lawsuits against Android.

The history is very relevant:

1. Motorola had some FRAND patents (that are not part of a patent pool).
2. They contacted both Apple and Microsoft to get them to license them.
3. After years of failed negotiations, Motorola took them to court to get them to pay up.
4. Now, Apple and Microsoft are trying to use the FRAND offer that they previously declined as a get-out-of-jail-free card (i.e. no blocking current products) while they still fight over past infringement.

If that's how it works, why would anyone with even half a brain ever bother to license a FRAND patent pre-lawsuit? Best case, the patent holder doesn't notice or decides you're not worth going after. Worst case, you get to put off payment until after the patent holder sues.

Sounds like a great way to encourage future FRAND standards, right?
The author makes some easy to implement suggestions. However perfecting these methods takes time and skill. Growing traffic organically through SEO alone is tough. Kudos to those that do it well. However search engines are unforgiving on seo abuses.
Wow, it's 4:07ct and I just woke up (insomnia)...great timing. All I see is a small blinking light though.
University of Florida Honors Courses - 21st Century Skills in Starcraft
You're right. Whether or not the we should stick to what the founders wanted is irrelevant.

However that does not mean the founders' original intent for patents isn't a better interpretation, and that the modern interpretation isn't still a bastardization of that better interpretation.
You might want to check out Peter Norvig's CS212 on Udacity. From what I've seen over the past 6 weeks it's an excellent course problem solving and `good taste` in programming.
GP said: "Google treats subdomains as essentially entirely different domains." This is false. If a domain has a small number of subdomains then their authority is shared thus making it false that priceonomics.com would benefit from using a folder instead of a subdomain for their blog, their only subdomain. Fell free to recommend me a book that says and proves otherwise.

You could argue it would make sense to keep their blog as a folder like they do for /jobs and /about for coherency. I would agree.
I love this sort of grid.

Along similar lines, last year I made a grid of all the possible 3x3 weave mazes. I think it would make a cool poster. https://github.com/robinhouston/maze-experiments/blob/master...

(The classification is not difficult, in this case: https://github.com/robinhouston/maze-experiments/tree/master...)
anyone got a Youtube Live stream link? UStream is very slow here.
The criminal enterprise bit was my poor attempt at a joke :-)

But really, I have a feeling 'hacker' is going to be a Che Guevara. Random people proudly wearing it without the faintest clue of what it stands for!
> FB may be many things but average is certainly not one of them.

Do you mean the assumption of 212% growth over 5 years is lowish? If so, I agree.

As for the average return: the author is fixing a price at T+5years, so if you assume a higher-than-average expected return for Facebook, then its current stock price should be even lower.

Also note that even as a back-of-envelope estimate, his analysis is flawed because the 212% figure was calculated by comparing revenues adjusted for inflation, while the 11% figure is for non-adjusted total return. The corresponding real (inflation-adjusted) average return is 7%:

http://www.simplestockinvesting.com/SP500-historical-real-to...
Are you saying they have a number of proxy servers comparable to the keyspace? Because I'm pretty sure there aren't that many IPs.

EDIT: I just did a few calculations, there are 40 times as many elements in a 8-character password with only lowercase letters than there are IPv4 addresses.
http://www.nasa.gov/multimedia/nasatv/index.html?param=stati... works for me, even though the ustream one did not.

It also appears that the docking isn't really supposed to start for another 2 hours.
Tons of reasons to actually switch me to android.
The Birthday Problem
There have been so many articles speculating on the true value of Facebook shares. The truth of the matter is that the market sets the value - and it's just adjusting Facebook's, and other people's expectations at the moment. $13.80 is pretty good value for a share - it gives plenty of space for bumps upwards in the market (key sales, acquisitions and appointments).

The only way to go after an IPO like Facebook's is down. Look at the way the UK market contracted after Lastminute.com's IPO. These are more mature digital times, but there are still lessons to be taken from it.
This assumes they aren't salting the hashes. But Blizzard apparently[1] uses SRP 6+ which does salt the hashes meaning if you and me have the same password we will still have unique hashes.

[1] http://www.reddit.com/r/netsec/comments/u2168/blizzard_inten...
You can't steal abstract nouns.
Someone here submitted this last night as the low-def nasa-tv link. http://www.ustream.tv/channel/nasa-mobile