skysight-inc/HackerNews huggingface dataset:
Yep. To the State Department (and ultimately to the guys spying on him, the FBI), Feynman wrote: "I would be very grateful to you if you could give me any advise. I should like to cooperate with your desires in this matter. [...] I am willing to proceed in any way that seems to you to be in the best interest of the country, even if it should mean some personal danger."

Speaking of famous scientists, Chomsky mentioned: "Compare Russell and Einstein, two leading figures, roughly the same generation. They agreed on the grave dangers facing humanity, but chose different ways to respond. Einstein responded by living a very comfortable life in Princeton and dedicating himself to research that he loved, taking a few moments for an occasional oracular statement. Russell responded by leading demonstrations and getting himself dragged off by the cops, writing extensively on the problems of the day, organizing war crimes trials, etc. The result? Russell was and is reviled and condemned, Einstein is admired as a saint. Should that surprise us? Not at all."

(http://cognet.mit.edu/library/books/chomsky/chomsky/1/10.htm...)

Interesting how fame works.
Kanuni Web Sitesi
I was on a panel at CMU, as part of a NYC startup tour designed to encourage students to move to NYC and/or join a startup. Of all the schools we went to, the CMU event had the best attendance and students I talked to afterwards seemed the most interested in entrepreneurship.
You could have simply turned history sharing off...
If anyone is interested, the FCC has a fairly comprehensive list of Developers pages for other federal agencies: http://www.fcc.gov/developers (on the right column).

Also, for further reading on the topic of .gov APIs, http://ben.balter.com/2012/06/02/publishing-government-data-... is a great start.
If you try to use the spec'ed 32 rounds the code borks. I fixed it in my own version of jBCrypt.
I see your point and I mostly* agree. It's also true on Unix that you can use LVM but it's not (yet) for the non-technical user.

*mostly because real-life scenarios aren't as straight forward.
Architecting a startup in 2012
No, your conversion of ambient heat to drying the zeolite and the inverse release of heat when adding water; are both less than perfectly efficient. Entropy grows at each step. The retention of heat in the dried zeolite is not a conversion step, and the total entropy of the system doesn't change during that time.
The worst is I can't remember what password I used but don't want to change it because I want to know if it's one I used somewhere else not just reset it.
100 MB is indeed small but there are privacy concerns with storing hundreds of thousands of lines of history. Do you really want every command you've typed for the last several years to be visible to anyone with physical access to your box? It could contain clear-text passwords to other machines.

I'd be happy with 100 MB as a maximum size but there should also be time-based limits, like remove anything from history that is older than a few months.
They're not interchangable, but marcf's comment that you're replying to is correct. The settlements that Israel has (illegally) established within the West Bank are specifically Jewish settlements - Jews are allowed to settle there regardless of whether they previously had Israeli citizenship, whilst other Israeli citizens are not. Likewise for the Jewish-only roads, the different sets of laws and restrictions covering Jews and Arabs, the Israeli government's refusal to grant building permits to Arabs in Jerusalem and the West Bank whilst allowing Jews to build homes on land they don't even own...

There even used to be vast swathes of land within Israel proper that could only be leased to Jews, because the founders of the country had given it to a trust tasked with ensuring it remained in Jewish hands, though I think the supreme court finally put a stop to that a few years ago.
If someone has access to:

1. Your physical machine, or the LastPass/Dropbox server.

2. Your master password

3. (optionally) a second-factor auth source

Then yes, they have access to all your passwords. But this is vastly superior to having one password that alone compromised grants access to all of your accounts, right?

I mean, the most secure way imaginable would be perfect biometric signatures, or humans smart enough that they could perform asymmetric encryption in their heads to sign challenges in a verifiable manner. Outside of that, this is decentish.

You could use a text file in a Truecrypt volume with keys that are stored on separate jumpdrives (but what if someone compromises a machine that you plug those drives into), etc, etc.
First it giveth and then it taketh away.
The Sounds of French (aka "How to learn lots of new vowels")
Or do the easy thing and perform a chinese fire-drill whenever the user logs in and bump them to the new encryption schema.

Or invalidate and send an email.
Thanks, will definitely check those out!
Sunny sale: a clever use of QR codes
Nice interview with John demoing and discussing his work:

"So the way this has gone, is, I decided to treat myself after Rage on there, I bought a, you know, a head mount for $1,500 or so. It's a little cottage industry, there's a few places that do these things with integration, and... it sucked. It was really bad. It was everything that I expected it to be, that it, it didn't look like there had been any progress in 20 years, since... or 15 years since I had looked at these things last.

But, when I got that, then, I started taking it apart, both literally and figuratively, to go ahead and see what are all of the aspects on here, on the sensing side, where, when I wrote my own test software for this, using their library to go ahead and get the head-tracking, it had 100ms of latency, and this just didn't make any sense to me. Why is it so bad, did they need to have so much filtering?

And, I wound up, I took the software that I wrote for Armadillo Aerospace for our rocket control with fiber-optic gyros, I took that gyro integration software and took raw values from the micro-machine sensors on there, and all the sudden it got way better. You know I can only guess that they may have filtering from 10 years ago when they had really noisy sensors, and they're a lot better now."

[...]

Resolution is gonna get better. We're gonna get to 120Hz displays, I'm haranguing all the display vendors about this. [...] Removing the latency, one of the cases that I've been making that shows the ridiculousness of it all, where, I can measure 50ms of delay on this, and I do that by, I have a program that switches colors when I hit a button, and you put a high-speed camera here, you mash it, and you wait, you count frames until it switches, and it's 50ms for that over a very fast display. That's more time than it takes to send a packet from America to England, you know. That's just ridiculous! But it's because router people and switch people care about latency, they know it's important so they don't pile it up. Display people don't know yet, but I'm trying to educate all of them about that."

[...]

"And this field of view (90 degree horizontal field of view, 110 degree vertical field of view), you couldn't get in a $10,000 head-mount display; actually, you still can't today, it's that much higher."

[...]

"The head mount display stuff is, it makes even this 8 year old game a fundamentally different experience. It really is like nothing you've ever played liked that... 10 times more graphics power doesn't give you that level of intensity."

https://www.youtube.com/watch?v=NYa8kirsUfg
Noisy as hell though. Also, how robust are the pellets? Tumbling them may create a lot of dust. Damp dust would be tricky to control.

I used to have to dry silica gel bags. We'd put them in a temperature controlled oven for a few hours, it'd ramp the heat up and fans would pull air through. That worked quite well, but was only for small quantities.

I guess you could have many mesh racks with heating at the base (or even through the mesh) and fans at the top to extract moist air. Drying that air and re-using it would handy.
jQuery Mobile already handles taps and swipes for you: http://jquerymobile.com/test/docs/api/events.html
The stuff is fragile (or at least the 5nm molecular sieve type)- if you shake it too much you make dust which blocks the pores
Is it such a major problem that it leads to major efficiency losses (measured as joules of output energy over joules of input energy required to "recharge")?
The race for space - the potential payoffs and risks are Big
That's a great insight/tip - I wish there was a book with hundreds of those...
I've been doing this myself and it has worked out pretty well so far. My password is in the list of passwords released, but is uncracked and I can rest assured knowing that I did not use the same password on any other website.

A couple things to keep in mind:

1) The salt you generate should be put at the front in case the website is silently truncating the password to a certain length

2) The salt can be something more complicated than site name. I mentally calculate a fixed length salt based on the site name

3) You may want to still keep two separate "base" passwords, one for high value sites (banks, email) and one for low value sites (everything else).
No offense, but Facebook's webapp is stellar compared to the native app, Instagram can't stop crashing left and right and I don't even follow anyone, Twitter's app has taken it ages to get where it is today.
Seems mostly academic, no? Do you think fewer people will download a 1.4MB app versus a 1.2MB app?
http://friendsdontletfriendsjqm.tumblr.com

Jokes aside, yes... it is that bad. I help out in the PhoneGap IRC channel, and I see more frustration surrounding jQuery Mobile in the PhoneGap community than any other single tool.

One of the core PhoneGap devs even tried to use it just so he could try and help people who come to us with issues relating to it. The experience was so bad I think he gave up on the idea.

I ended up making the above joke tumblr instead ;) I just try and steer people away from it.

Its performance and (in my opinion) visual appearance bely it's post 1.0 version number.
Nintendo’s Coming Game System, Wii U
Microsoft Gives Windows Azure Amazonian Facelift
"Other people in my class aren't doing what I want to do, and this saddens me."

Startups aren't the One True Path of computing, and some people appreciate clocking out at a consistent time every day (or have an eye on a family, or whatever); the Silicon Valley life is not for everyone, and being saddened by other people not choosing your lifestyle is just silly. Why does this matter to you?
FYI Metafilter does the same thing.
He probably means newer browsers’ rendering for the HTML5 <input type="number">. Spinners are the little up/down arrows next to number fields that increment/decrement the number. More info: http://www.html5tutorial.info/html5-number.php
John the Ripper released a patch for this modified sha1 hash type today. So no need for any manual hacks. You may download the patch here:

http://openwall.info/wiki/john/patches
Welp, looks like they've got your password now ;-)
Alternatively, consider this Wikipedia page: http://en.wikipedia.org/wiki/Theory_of_value_(economics)

As the old saying goes, a little knowledge (e.g., an introductory course) can be a dangerous thing.
Larry Ellison's First Tweet
The Idiot-Proof Guide To Write SEO-Friendly Content
"specifically requires AIs that can build smarter AIs"

The trendy "rapture of the nerds" version of the singularity does.

The original definition is technology advancing at a faster rate than humans are capable of integrating and managing it. It was identified while trying to identify existential threats to humanity.

It's fascinating watching a warning about future dangers get repackaged by AI focused futurists into a utopian neo-religion.
Used AH43J9KA6ERN

Nice app. Simple, works. Just need to make it iPad compatible.
> The singularity specifically requires AIs that can build smarter AIs.

Not really. The singularity requires an intelligence explosion. A perfectly acceptable alternative route is human-intelligence augmentation, via some or all of biological hacking (genetic or otherwise), chemical hacking, and tool use. The former two are plausible but not yet off the ground, but regarding tool-based augmentation I think we're seeing meaningful, if preliminary, progress. (Then again, I think literacy counts in this bin.)

I think the key question is whether you think the self-amplifying returns of technology that we're already seeing will extend sustainably to amplifying intelligence (either human or artificial).
All good explanations, but I can't help but wish they had chosen a format like:

{
P0010001 : [
'710231',
'4779736',
// ... etc.
],
NAME : [
'Alaska',
'Alabama',
// ... etc.
],
state: [
'02',
'01,
// ... etc.
],
// ... etc.
}
The slavery-inducing AI is more like pandoras box. Inevitably someone will try to create and harness such tech for a competitive advantage, but they have created something they cannot control...
Even explaining why C-s searches instead of saving in Emacs is an immense roadblock for new users.

The guy you're responding to is suffering from this: http://en.wikipedia.org/wiki/Curse_of_knowledge

Not everybody that writes code needs to be using Emacs or vim.

Just the same, not every 6 year old kid learning to play violin needs a Stradivarius.

I've been using Emacs for counts in head 13 years, almost 14 now. I've also spent many years teaching new people to use it and I can tell you right now, most people not willing to dedicate some time independent of anything else to just learning Emacs will get any value out of it.

Don't distract them from learning to code. End of story.
I used it with PhoneGap. I had no issues with PhoneGap, and unlimited issues with jQuery Mobile.

Basically, jQuery Mobile wants your whole app to be on one page. You can either have one giant HTML file that has a bunch of divs representing multiple pages, or you can have several different HTML files and link them as normal. Then jQuery Mobile will take all of your anchor links and turn them into something that fetches that page's contents and inserts it into the DOM of the current page, instead of loading a new page. Then their "page transitions" are triggering hide and show actions on the various pages in the DOM.

This also makes registering event handlers awful. First, all of your javascript has to be in one file and it has to be included in every page that a user could possibly navigate to. This means that you can't just bind on document.ready like normal, because some of the elements you're binding to don't actually exist on the page until you try and navigate to the page.

Then, jQuery Mobile uses custom events to tell you when there's been a page transition. However, you can't put your event bindings in there, either, because then your event bindings will be reapplied every time the user navigates away from and back to that page - basically, every action will be applied multiple times. Terrible.

So this means that all of your bindings have to be live bindings. Oh, also, you need to make sure none of your elements on different pages have the same id since, in the long run, jQuery Mobile mashes them all onto one page.

Yeah, I may be a bit bitter.
$1?

I imagine the Shweebs' "new car smell" won't last long.
My dad has been a huge coffee drinker his entire life - He was recently been diagnosed with early onset alzheimer's. Obviously this doesn't rebuttal any large-scale scientific study, but this topic is of particular closeness to me.
Given that every great science fiction novel I've read is an essay on either how good the human race could be (often with some instructions) or how bad the human race could be (often with steps from here to there outlined), I think there are far worse things than being an adult who reads only SciFi.

Similar arguments hold for most forms of fiction, which is why I'm always unimpressed with people who don't read fiction because they "only want to read things that will help them grow". The fiction I've read has provided more avenues for personal growth than almost all non-fiction I've read.
By all means put the whole lot of your accounts passwords into a random website. lets see how things work out for you
ASK HN: One whole summer to learn/work on something new:  what should I do?
So, I just recently finished my third year of college and now have three months of free time on my hands. I'm working toward a CS degree, however I'm a little behind because I spent my first two college years taking some Biology courses (I originally wanted to go to medical school but... nope haha). Anyways, I didn't have enough CS classes completed yet in order to find myself an internship (I'm located in MN), and now I'm looking for something useful to learn/something cool to build with my free time. As of right now, I've only learned Java and Javascript through my school, but I've taught myself Mysql and PHP on the side.

Any tips/ideas on what I could learn this summer? I'm really interested in web applications and maybe even some iOS apps, but to be honest I like learning anything and everything I can. Thanks guys!!
Since most people who face a choice between bcrypt and scrypt will be the ones who are developing new sites or considering a major upgrade to an old site, I don't think they'll care about compatibility with anything older than PHP 5.2. Even if you don't control the server, it's difficult to find a reputable web host nowadays that still runs anything older than PHP 5.2, and your average cPanel host is most likely to support a wide range of crypto functions.
Using Git's Include for Private Configuration Information (Like Github Tokens)
Some of the things you mentioned that are broken do work on my browser (Chrome). I haven't had a chance to test this with other browsers, I'll try FF and Safari and see if those problems show up there.

Thanks for the feedback!
WHERE THE FUCK SHOULD I GO TO EAT?
In other news: A bag of rice fell over in China.
Instagram for Chrome
You might consider looking again. Check out this post (http://blog.iron.io/2012/05/new-ironworker-command-line-inte...) about new .worker files and ng gem (https://github.com/iron-io/iron_worker_ruby_ng). Docs are really improving rapidly too. Finally, don't hesitate to stop by the support channel (http://get.iron.io/chat) with any questions.
How Startups Can Apply The Scientific Method
And it looks like he used some tech from Armadillo in this unit. The software for the gyro sensors come straight out of the Armadillo rocket tech. Awesome.
(see the youtube video mentioned in another comment)
Please note that you'll need git 1.7.10 or newer for this feature to work. I wasted almost an hour because I was using OS X's default git, which was 1.7.3 I think. I re-installed git from homebrew and now everything is fine.
So something like a HMAC digest generated using a pepper stored in the source code/binary or on disk before passing it to bcrypt/scrypt? :)

This only really protects against SQL injection attacks, though/when there is actually a separation between where you store the bcrypt digests and where you store the pepper. (Granted, there are a lot of SQL injection attacks.)
Comparing 3 Human Genomes as R,G & B with Chaos Game
Why do languages succeed or fail? Cool data+visualizations from UC Berkeley
How embarrasing.. 1 MILLION dollars. [dr evil] I meant.
How about this: Don't store passwords at all.

There are a multitude of sophisticated third-party solutions to authentication. Facebook, Twitter, and Google all offer competent solutions. Don't like those? Use BrowserID.

Integrating any of these is actually quite a bit easier than rolling your own solution. It reduces hack risk, provides a better experience for your customers (what was my password again?), and almost certainly will be more reliable than your website.
"Traditional advertising methods (e.g. AdWords) typically don't work cause app prices are too low."

Have you gauged the efficacy of advertising on directly applicable sites, such as (for games) TouchArcade?

I can easily see the low unit pricing being a hindrance - I suppose therein lies the temptation to bolt on IAPs, which opens an entirely different can of worms.
Google Earth to get radically better 3D images, new UI on iOS and Android
Interestingly, when reddit upgraded to bcrypt, they refused to do this because so many users don't know their passwords and it would lock lots of people out of their accounts forever (remember, reddit doesn't require email addresses to register).

http://reddit.com/r/changelog/comments/lj0cb/reddit_change_p...
That's going to be a tough one. Are you technical yourself? Are you looking for free collaborators or willing to pay? I'd start with going to some meetups just to get more exposure to the community as a whole.

Beyond that, you should more actively/aggressively go through your circles. There might not be any tech people in your first degree but if you can cast a wide net, you'd be surprised who your friends know.
What can we do right now?
Chrome Releases: Chrome for Android Beta Update
iTunes is the place I buy stuff. So you can buy GOT for $28.99 a season, and when a new show is available, you can watch it at any time. Or you can buy say, just episode 6 for like $1.99.

You CAN buy stuff on the device if you like as well, in addition to watching previews. It's charged to your iTunes apple ID associated credit card (like an iPhone app is).

iTunes music is like iTunes music always is (and also plays on the same TV interface). YouTube is also available there (and looks great, if the video quality was there on the original video). You can also stream stuff from whatever computer (or iOS device. I use the AppleTv to play music from wherever using my iPhone and the remote "Apple TV Remote" app). I've also played settlers of catan more than once using an iPhone and AirPlay :D
SCS grad here, I echo your sentiments. There are lots of CMU grads in startups, though from companies like Dulingo, Homerun, Everlane, Gazehawk, etc. Seems that the school is doing more for the entrepreneurship program which is encouraging.
OpenID and OAuth really did a lot, but there's just nothing called "don't use passwords." Fingerprint readers suck. Anything biometric that doesn't suck costs too much, and 99% of people don't have them. A good KDF is not bad in comparison to a centralized authentication server considering other factors.

Someone, somewhere will be storing user passwords/digests for the foreseeable future. And they will do it incorrectly.
Yeah I'm aware of http://partmaps.org/era/unix/award.html#cat and choose to continue writing my scripts this way. My commands look more symmetric at the prompt, and are easier to manipulate.

dups is indeed a little helper of mine. Like uniq it only handles sorted input. Update: I see you edited your answer to include uniq -d. I wasn't aware of the option, thanks. Now I can simplify the implementation of dups. But I find the name valuable, and I think it's perverse to say uniq when you mean its opposite.
Now fixed in the source -- Chrome Canary v21 has 1 audio channel where earlier Chrome has 2: https://github.com/jsantell/dancer.js/issues/8
And when I close my eyes it's already here.
Its probably worth mentioning that one of the reasons SCS is so above others on that list is that unlike most schools in the US, at CMU CS is a separate school from engineering, and thus reports its own separate numbers. Not that the CIT (engineering) students are doing bad at #4 on http://www.nerdwallet.com/education/grad_surveys/top-salarie... , but CS grads at other top schools likely would see similar numbers if they reported individually.
Sure, get on with the right client on the right niche and you can do it easily.
Examples: Enterprise Oracle DBA, SAP, SAS, Peoplesoft
(basically stuff that big clients with big pockets need)

* The catch is having the right connections to get you in.
I'm using Google Chrome 20. Happens on my older Chromium too.