skysight-inc/HackerNews huggingface dataset:
I don't develop phonegap apps but I'll have a go at answering this:

> I'm still confused why this matters if you are packaging your assets with the phonegap build which I would expect most people do.

Ignoring download time, loading, parsing, and evaluating 250k of javascript is not free[1].

[1] http://carlos.bueno.org/2010/02/measuring-javascript-parse-a...

That article is on a desktop (well, laptop) processor. The timings on mobile are obviously higher. JS parse & load is mostly ignored on the desktop but I know I've read at least one article where a team was pulling down their JS as plain text and eval()ing it later to get their load times down.
I just made an online too to check if your password is in the list: http://billsnitzer.com/linkedin/
Twitter's Dick Costolo: Twitter Mobile Ad Revenue Beats Desktop On Some Days
No, exactly, for me it wouldn't.

For example, I'd type something like this:

function gogogo
cd ~/src/teh_project
end
funcsave gogogo

Then the "gogogo" function is available in all shells and loaded on startup - but not executed until I do so myself. From what I understand you wish to have the same functionality, and are doing the same thing, but are getting totally weird results.

Explicitly: No, it definitely shouldn't try to run functions right away. Bug!

FWIW I haven't tried the fishfish fork/update, just used the original version for a number of years.

It'd be greatly appreciated if you could spare a moment to send a bug report! (I'm not a dev by any means, just a fish lover ...)
Good on them for knowing their users?
Well, the software. IIRC, the Armadillo flight electronics use a Crossbow IMU, (which must be very accurate, endure a whole lot of vibration, and drift very little) which is $100k.
Of the implementations listed in the WP article, which, if any, are suitable for general purpose use? And what manner of implementation screwups are most likely|hazardous?

[With the obvious caveat: Advice not for production use, If you have to ask...]
I seem to require translators on HN a lot.

Thank you for explaining.
Why Facebook Should Build a Phone
>- As someone who works with city spaces - can I use the 3d data? How can I download it or who do I have to pay?

I don't work with city spaces and I would still kill to have access to the 3d data.
I love how scientific he is when he talks and evidently when he does his work. He said something along the lines of "if you can't decide which way to do something, do it both ways and see which is better".

Refreshing to hear a talk like that amongst discussions around language, platform wars.
Wired: Sci-Fi Scribes on Ray Bradbury
People say this kind of thing a lot, but I’m pretty sure it’s simply not true. bash-completion handles pretty much everything I can imagine already, and can be extended to handle anything you can express programmatically.
Partly to play devil's advocate and partly out of curiosity, do you know of a language with a JSON library but no SQLite library?
The Census Bureau has made their data available for download for a looong time, both over the Web (including a bunch of different interfaces for slicing out just the data you want -- see http://www.census.gov/main/www/access.html) and FTP (http://www2.census.gov/) All the stuff that's available via the Web service is already available via download, along with a lot more. They don't provide it in SQLite format AFAIK, but they do offer a range of other formats that should be easy to get into SQLite if you wish.

If there's any problem with their downloadable data offerings, it's that they have so many of them that it can be difficult to figure out exactly which one has the data you're looking for.
ZFS is very stable on recent versions of FreeBSD, I can't speak for older versions as I don't have experience. I at least haven't had any issues with it and we use it in production.

It is an older version and not as feature complete as what you will find in Solaris.
>"He abused his landlord's resources in the sense that his lease prohibited his behavior"

He signed an agreement with another party saying he would not do what he ended up doing, for profit. How are you equating that with the landlord collecting rent?

Maybe if the landlord signed an agreement with one rent price, then started charging a higher price, you could equate the two behaviours.
Cash Register of the Future
Build a Store for your Digital Goods
well, specifically it refers to a period of technology advancement so rapid that we entirely lose the ability to make predictions about the other side. (this is by analogy with the mathematical definition of a singularity, a point at which your equations break down, by way of the physics application of the concept to black holes, out of which information cannot flow)
I think I answered my own question, but I'll ask anyway - why does memory intensiveness matter?
Severely underrated author. Fahrenheit 451 to this day still is my go to novel that I've read so many times I've lost count. One of the best books I've ever read, the guys was a genius and he will be missed.
for you, and your repliers:

this data is already available as a downloadable file. Check out ftp://ftp.census.gov/
It's CSV, and it's kinda ugly-looking, but it's available.

The 'full' data set is ...rather huge. The full data set for any particular report is rather huge.

The advantage of this API, I expect, is it allows people to make quick, machine readable queries for useful subsets of the data. If you want a JavaScript mashup that tells you the number of people who live on your block, use this. If you want to know the population of every block everywhere for data-crunching purposes, just download the CSV.
Sure, but the number of those people should become vanishingly small over time.

HN is full of web developers rolling unnecessary username/password solutions. The fact that this is such a hot issue - as opposed to esoterica like TCP frame size - shows that far too many developers are homebrewing solutions rather than outsourcing.
Maybe he wants to hire them for below market salaries ;)
foreman or die!
Yup. I was searching for a hotel in Roswell, and a "sponsored link" located the Motel6 with a different pin icon than the others.

Go center the map on Roswell, NM. Search for "motel" and you'll see the ad, and it will come back as the default selected pin.
Exactly, most commonly with these things is that the db was dumped which does not imply that the source code was accessed. If the source code was accessed they normally don't need a db dump. (unless it was read-only)

The first section of the article IMHO was not needed in regards to a simple hash. Forums have been hashing their passwords with salts for how long now ?
Disagree. Love what I do but it's not all puppies and lollipops. Things can (and do) go wrong on a regular basis and you have to learn how to deal with that reality.
i'll warrant his ability to tap into his inner passionate, geeky 16-year-old is what has made him a legend in the first place.
Notch-interactive/django-chuck - [dynamic project templates]
I've always understood that IN clauses are hard on query optimizers and should be re-written as correlated subqueries with EXISTS/NOT EXISTS, often for giant speedups. But I've met lots of developers who have never seen this pattern before and get scared by it. Of course if you can also re-write it as a join, that's even easier.
We did it on Clojars, the Clojure library source, without much trouble:

https://github.com/ato/clojars-web/compare/68872652fc427cc1....

We had a month or two grace period in which anyone logging in would have their password upgraded to bcrypt automatically, then wiped the SHA1s.

https://groups.google.com/forum/#!msg/clojure/Xg1I0rgt85s/Vf...
I'm currently using a 13" MBA. It's a little bit tight on ram (only 4gig) but it runs plenty fast for rails development.

The real joy for me is that the size and sturdiness of it means I dont think twice about throwing it into my bag before I bike off . . . anywhere. It's always with me so it gets a lot more use than older chunkier laptops that I've owned in the past.
I disagree. If someone is providing a free app, it's essentially a honeypot. For what? Who knows.

Contrast with paid apps such as instagram or evernote or 37 signals: their business is to charge money. They have no interest in selling data because their customers won't like it, and you get probably an order of magnitude less money for data than by just charging for a product.
Evaluating the harm from closed source
You're right. The SF Rent Board does add some rules to try to ensure that a landlord can't evict a tenant simply because he's insufficiently profitable. But, from my POV, those are obligations that a landlord has to the local government.

"if there are multiple tenants in the apartment and their rooms are the same, they may not split the rent unequally. it must be split proportionally. so decreeth the rent board."

Do you have a citation for this? The only possibly relevant section that three minutes of searching turned up was 37.3(c) "Initial Rent Limit for Subtenants".

"[The] Rent Board ... declares random things legal and enforceable or not legal and not enforceable."

Law at all levels is more like quicksand than bedrock. At least the Rent Board has a consistent and public agenda. Do the Rent Board's actions make more sense to you if you view them as a Renters' advocacy group?

"If you're a landlord, you probably don't want to ... [end] up with a tenant that ... pays half of what you could get if you could legally rent the apartment to someone else."

Is this the meat of the "legal risk" that you were talking about earlier? If so, you're not talking about legal risk; you're talking about limiting earning potential.

For something like forty years it's been the position of the SF Rent Board that the renters of San Francisco should be able to find, secure, and retain affordable housing whose rental rates more-or-less track the -actual- increases of costs to the landlords who rent out the space. If you do even the smallest bit of research before you decide to become a landlord, you'll discover that the city will make it hard for you to throw people out of their homes simply because they aren't making enough money for you. What's more, you'll discover that things have been this way for decades.
Thanks for the tip! Good tactic. I'll certainly try that. I was also thinking of running local iOS training workshops too.
One thing to be careful is that you don't open yourself to a trival DOS. The default scrypt command line program will churn CPU for a full second when encrypting a file. If you use similar settings, it will not take an attacker many connections to reduce even a large cluster to tears.
Good news, the following passwords where not leaked:

password

asdfasdf (whew!)

linkedinpassword

The following were:

password1

password$

linkedin

a1a1a1a1

drowssap

12345678
Could you use e.g. bcrypt(SHA1(x))? I think that should be OK, and avoids the issues with switching over current users (just take the bcrypt of the currently stored passwords).
What is standard practice for a situation like if the users lost access to the email account they signed up with?

A large forum I post on was hacked recently and - after voluntarily shutting their site down for a month - they required password resets. If users did not have access to the email address they signed up with and couldn't otherwise verify their identity, they were not allowed to get their account back.

Unsurprisingly, post counts are down site-wide and the owners have reported a > 25% decrease in traffic.
GPUs (and similar hardware) have a very limited amount of memory per core. If computing a hash requires 100MB of memory, then even a 1GB graphics card can only execute 10 cracks in parallel, not hundreds or thousands.
Sure, but I try to not make any assumptions without being boring. I think the goto-link at the beginning works fairly well.
Is it scary to anyone else that LinkedIn can't confirm yet if their security was compromised?
symmetric?
No, not assuming that. It has nothing to do with the specific steps. To see why, try to imagine a scenario where there could be an operator== timing attack on a password hash.

It feels sometimes like people hear about the idea of timing attacks and then want to see them everywhere.
Which is why you use different passwords on different sites.
`password` was leaked. See this comment about the format of hashes in the dump:

http://news.ycombinator.com/item?id=4073928
Originate Labs and the LA Tech Scene
The beauty of fish is that it handles lists much better than bash - it kind of has xargs "baked in". If I understand the example correctly, it finds every file under the current directory and greps for "pat" in each file.

In fish you could do this:

grep pat (find .)

... or this:

for i in (find .)
grep pat $i
end

The first example would work correctly in fish, but AFAIK it wouldn't work in bash. The is because every line from the command substitution is automatically escaped and quoted in fish. The small drawback is that a symbol-heavy commandline sometimes needs a few extra \ escapes - the power to handle lists of lines (i.e. lines from stdin or from command substitution) is bought for a little extra escaping. And it's a good deal IMO.

And the for loop in fish is so elegant and convenient that it's worth using for small random stuff.

(Everything I say is pending that I understand the find/xargs/grep example!)
If you're going to use an SRP library, there's an open-source Stanford SRP library (most commercial systems derive from it) which deals with the obvious attacks.
Check if your LinkedIn password was hacked or not
I agree, but "outsourcing" includes using libraries written by people who know what they're doing. (And not using libraries written by people who know what they're doing, but which are the wrong tools for the job.)
Six Strange Things Worth Money Online
"...
'Live forever!'

I thought that was a wonderful idea, but how did you do it?

The next day, being driven home by my father, fresh from the funeral, I looked down at those carnival tents and thought to myself, "The answer is there. He said 'Live forever,' and I must go find out how to do that." I told my father to stop the car. He didn't want to, but I insisted. He stopped the car and let me out, furious with me for not returning home to partake in the wake being held for my uncle. With the car gone, and my father in a rage, I ran down the hill. What was I doing? I was running away from death, running toward life. ..." ~ http://www.raybradbury.com/inhiswords02.html
Cassandra stretches across multiple DC's nicely by design.
And of course this isn't mentioned in the blog post so Rogue Amoeba can play the victim.
What ugly blue scrollbar? Do you mean your OS native scrollbar?
Success Isn't Normal
Ladies Learning Code Team Launches HackerYou
ZFS is very stable on FreeBSD.
Exactly... Facebook's IPO didn't fail because Zuckerberg wore a hoodie. Facebook's IPO failed because the company was grossly overvalued. $42/share, really? I can't stand academics, his opinions are so misguided and narrow minded. I wanted to barf when I saw Vivek on 60 minutes a few weeks ago.
People sometimes have slow connections, particularly BB users who feel no need upgrade to the latest connection speed. The app has to be completely downloaded before it runs, unless you put external references in your PhoneGap packaged HTML, I guess, but then it would only run online.

Additionally mobile browsers are often slow to execute, so loading a lot of JS can bog down your app. For a while there was a big stink about iOS only using their best JS engine in Safari and not web controls, not sure if that every got solved, but laggy HTML based apps is a big problem.
The Nook and the Fire are "Android" devices not Android™ devices. While related and important they are not the Android ecosystem most people talk about.
I really like the logic this author used to counter the college graduate earning statistics. From a financial standpoint, this is brilliant:

http://www.huffingtonpost.com/james-altucher/dont-send-your-...
Personally, I've never known anyone that would treat a place poorly just due to a short stay. The people I know that would treat a place poorly are people would do so on a long or short stay.
Practical PostgreSQL EBook
Each pipe stage reads from the left and writes to the right. The eye goes left to see the input and right to see the output if it's redirected to file.

The input file is reliably the second word, so C-A M-f gets me to it if I want to operate on a different file. !!:1 gets me the file if I want to use it in a new command.
Yes, I made it up. Wasn't it obvious? What I meant was that the vast majority of terror attacks in Israel are committed by Arabs. That's really indisputable. Why are you going off on a tangent to talk about rape? What does that have to do with the Israeli/Palestinian conflict? Domestic violence is a horrible problem everywhere, but I don't see why you're bringing it up here.

Yes, there are Palestinians civilians killed by Israeli civilians. However, they are not state sponsored. When an Israeli civilian is killed in a terror attack, it is state sponsored. Palestinians democratically elected Hamas, a globally recognized terrorist organization. Fatah, in charge of the West Bank, also has a terrorist arm, called the al-Aqsa Martyrs' Brigades.

Arabs are an ethnicity. Egypt was an example of an Arab dominant culture that does not treat Israel well (even though they have a peace agreement!).

You're really grasping at straws. If you want to defend the actions of terrorist organizations like Hamas, go ahead, but I'm not going to pay attention to it.
Because he looks at it as a waste of human potential. Most rational humans are disturbed by as much.
If you're worried about quantum computers when thinking some website's security, you're either doing it wrong, or living in the future.

Post-quantum is cool alright, but it's not really a thing that implementers need to worry about.
I beg your pardon. It seemed to me like the author dropped the sarcasm near the beginning of the write up and he actually thought denying individuals access to the equipment would make it more secure.
Homicide verdict for texting while driving
I'm not making any blanket statements about regulation, I'm simply stating that in this particular case the safeguards provided to guests by the structure of AirBnB's business are superior to those provided by municipal hotel operation regulations. If you'd care to address this point directly I'm all ears.
> the oldest extant novel

The Tale of Genji is now generally considered to hold that title.

http://en.wikipedia.org/wiki/The_Tale_of_Genji

http://news.wustl.edu/news/Pages/11480.aspx
Processors get faster and faster, so we increase the work factor to compensate and keep it a time-hard problem. This has no real restriction on memory though, so the amount of memory only has to grow linear to the amount of time.

Making it memory-hard makes it also memory hard.
The pattern is to put the work in a queue, respond to the user immediately, then process in the background, outside the request cycle.

Regarding auto scaling, it is scaling your worker servers to work down the queues, but it is not as urgent/critical as auto scaling your app servers if they had to handle the load.
PSA: Stuff like rvm exists so that you can get your Macbook's software versions in sync with whatever BSD or Linux distribution you're using in production.

RVM in production is a case of doing it wrong.
Nope, press "Categories" at the bottom and select a category to see the "What's Hot" for said category.
Funding for Inventors & Entrepreneurs 
Anyone with a cool idea or invention can enter.
seriously... I have it as an autocomplete in chrome: hn[tab] and I can get community-vetted stuff ^_^
We used Chosen in an Australian news site which targeted South East Asia and Pacific island nations. 4 of the 11 language streams on the site relied on @font-face embedded fonts to provide support for displaying East Asian languages (Khmer, Burmese, etc).

Chosen helped us overcome a fairly major multi-browser issue where embedded fonts weren't being used inside <select> elements (oddly it seemed to work in IE6 but not IE7). Since Chosen transmutes the <option>s into style-able divs, this allowed us to use our @font-face fonts with very few issues. We ended up using it across the site for consistency (with a few exceptions) and all in all I think it provided a usability improvement for most of our users.
printf linkedintrouble |openssl sha1|grep -f - combo_not.txt
Learning from Hacker News
I don't want a clearer way to stop the audio, I want it to not start unless I ask for it. I honestly can't see any reason to have auto-playing audio on a web page unless that's the entire purpose of the page (audio or video player) or you're purposefully annoying people.
I don't understand your concern. How would it hurt if you're now using a different password from the list? If they don't know it's associated with your account, the only way they'd be able to use a password from the list to access your account is by trying all the passwords from the list in a dictionary attack. So in the worst case, you change your password from one that is definitely susceptible to a dictionary attack and possibly flat-out compromised to one that may or may not be susceptible to a dictionary attack.

In short, no, "Change your password" doesn't seem like bad advice to me.
It was mentioned that the affects of caffeine or decaf coffee alone don't seem to do the same work as caffeinated coffee.
Fast & Furious - The Secret Of Great Taglines
Highlight Cleartext Passwords FormFields
A lesson for NZ law enforcement (and in other countries): don't cooperate with US law enforcement too closely; don't let them take stuff (esp. evidence) out of your country.
Polishing a Pitch (A glimpse inside TechStars)
Factual.com serves their data like this too. I thought it was odd at first, but it does save a lot of bytes on the wire. I just parsed it with JSON.parse() and used underscore to map to my object format. You don't really even need underscore for that. It's just a matter of mapping an array of rows to an array of objects. It's nice there is an API now.
The study was over a short period. It's possible that coffee just significantly delays the onset.
This is misleading. Not being in the list posted in that forum does not mean your password wasn't hacked.

Absence of evidence is not evidence of absence.
I'm using the 2011 one, matte screen, Apple-installed 128gb SSD, and 8gb of RAM. It's the best laptop I've ever owned. I only wish I went for the 256gb SSD, despite the price.
I'm not sure why the recommended replacement string to use with xargs's -I is "{}". I just use "XXX" as the replacement string and stop worrying about how the shell is interpreting metacharacters in this particular case:

find . | xargs -I XXX grep pat XXX
Is this true? I was under the impression that Bertrand Russell was widely lauded as a man of integrity and clear thinking right across the whole political spectrum.

Perhaps this is a USA/UK split, or perhaps just some oddity of my particular friendship group.
I would love it if the OP would chime in here, so we could see what the RubyMotion folks are missing.
While dling: you have 44 five stars and zero four stars, which sounds like 44 good friends and zero good reviews.
Yes it does now. Thanks for your insight.
And how high can you crank the work factor for, say, bcrypt?
Sounds like to me all the executive management from the tech industry was on right after the press release to check it out.

I can't imagine the quality will be sustained. That said, if it could be then it would be worth a lot of money.
Crashlytics acquires Fire Tower
Booming Sweden’s Free-Market Solution
Commuter trains in Sydney (where the poster & I are both from) are double-decker where most people sit (except when it gets crowded). If his commute was anything like mine I get on when there's still plenty of seats next to a window and I can get out my laptop, pop in some headphones and get 45-50 minutes of solid hacking done without interruption.