skysight-inc/HackerNews huggingface dataset:
The custom kit allows you to choose the number of available .COM names you want. You can select the amount you want in the Quantity drop down menu. Based on the amount it should show the Total Price. The Starter Kit is an introductory kit which offers a 20% discount for a set of 5 available .COM names. Hope this helps!
Govt plans 3000 cars that avoid crashes by talking to each other
Death of Retail
"We've implemented many different security measures, but talking about them on camera would be insecure" (Paraphrased)

Yes, because security by obscurity has such an awesome track record. In fact, if whoever is responsible for this fiasco had asked on Stack Exchange how he best store passwords, this whole hoopla could've been avoided.
"Our team has a combined 25 years of programming experience"

Irrelevant, and wrong.

Take 100 people, teach them CS for 3 months, you get 25 years of programming experience. But I wouldn't want to have anything to do with their code.
The main area I have complaint with is the discovery process for finding digital videos to watch. Once you've used something like Netflix, the Amazon process is awful.
>Making them install through the Web Store will increase confusion and hurt conversion rates

will it really? do you have any metrics or research that backs that claim up?

I would have hoped that users would be more trusting of an installer from a vetted source like the app store than they would be of an unfamiliar file extension from an unknown website.
How come Christ Church Meadow, Oxford, is also in Venice? See http://mostbeautifulplaces.org/item/5291686 vs http://mostbeautifulplaces.org/item/5291685 ... Hackish indeed... ;-)
Direct link to the original Quora answer: http://www.quora.com/Apple-Inc-2/How-does-Apple-keep-secrets...
Nobody would steal hashes without the rest of the data, i.e. user IDs and emails.

And as for the security measures that he "won't put on camera because that would be insecure"... wow.
Oh, good point, this is definitely true. I have Prime, but Netflix is so much easier to find stuff on (or even remember that there's stuff there to find) that I've never used any of the included free Amazon video stuff.
I'm not so sure, the extension still appends DOM elements, I'm sure those are just as susceptible to sniffing...
For the love of God, please switch off "mobile enhanced" versions of your blog. You can't pan around to view the tables because that switches to another article, complete with sparkly transition
The linked post also uses a cultural explanation for the high Chinese savings rate, when James Fallows demonstrates in this Atlantic article: http://www.theatlantic.com/magazine/archive/2008/01/the-14-t... that the state engineers an artificially high savings rate in order to keep its currency relatively weak. The mechanism is too strong to describe here, but China in essence forces manufacturers and other exporters to save instead of spend.

A mistake of this magnitude doesn't automatically discount the rest of the original post, but it does make me suspicious.
Agreed, I had originally planned to use infinite scrolling just like Facebook. Due to time restraints it had to be altered to what it is now.
Yes. http://www.notaplex.com/can-app-be-used-external-keyboard
Chrome has supported inline extension installation for a few versions now: https://developers.google.com/chrome/web-store/docs/inline_i...

That should address any user confusion, while still hosting the extension in the WebStore. It also saves the hosting bandwidth and guarantees that your extension updates over a pinned SSL channel, which protects your users in case your key is ever compromised.
What are some of these Facebook "like" selling sites that allow installing extensions?

(merely curious, and completely off-topic)
I guess that makes sense. Been trying to revamp my coding environment, and decided to go with drbunsen's text triumvirate.

http://www.drbunsen.org/text-triumvirate.html

For now since I'm just working on a RoR app as a personal project, I don't really have a server and tmux's capabilities are limited on my end. So I might give tmux a go first and familiarise with it first, so i'd be more up to speed when it's capabilities can come to play fully :D

Thanks (:
And I think the concern is that a closed ecosystem might gradually replace the open one that exists now. I don't have a philosophical problem with protecting users from themselves (or even being protected from myself).
To be fair though, all security is about obscurity. The questions is just how obscure. One could certainly argue that using bcrypt instead of SHA-1 without salting is a lot more important than not disclosing your security practices but they are not mutually exclusive.
I’m not sure his generalisations were really overgeneralisations. When you have a strong intuition about something, it’s going to be a real challenge to cast it into words for an audience that lacks that intuition. You can impart understanding but not sense—like explaining colour to someone blind from birth.
Is this just dead? Is it open source? Is there anymore info? It sounds interesting.
I don't have the stats yet because I haven't yet made the change. With the inline installation that Justin mentions above (thanks, I hadn't seen that yet), I'd guess that it'd be a wash.

Still, it makes me nervous to be building a startup around a platform that can make such major changes so quickly.
I was specifically asking about jonknee's use case, I never claimed that this would be an ideal solution for every other possible scenario. That said, your request to have a mouse-free way to install extensions is totally sensible, and I would be surprised and disappointed if they did not think of alternate ways to do that (perhaps using the command-line).
Yawn.

Here's a better list in 5 minutes.

Vim + pathogen + NERDTree + CtrlP + CTags + surround.vim + whatever shortcuts you're comfortable with mapped to <leader>

Git + "git config --global --add color.ui true" + Tig

XMonad

Microsoft Ergonomic keyboard

Trackball mouse

Arch Linux

Grep + find

Ditz to track bugs for small projects

Sphinx for documentation

Jenkins for CI

Konsole

Ofcourse, Oh-My-Zsh + Zsh's vi mode + a good font too.
Hmmm ... that's actually a good idea for a tiny portion of the deployed Chrome users. Wrap the extension in a .deb package.
ooop how come there was such a mistake hmnnn. The Venice one is replaced by the correct one now.
> This is basically the same model that every Linux distro uses

If that were true, to install google chrome/earth or whatever on ubuntu I would have to

- get google apt repository

- add it to my list of sources

- import google repository key

- run apt-get update

- run apt-get install google earth

instead of simply doubleclicking on the the downloaded deb.
Thank you, I hadn't come across this yet. This should mitigate the changes to the user flow.
I didn't say DEBs can't work that way, but they sure aren't assumed to work that way. Whereas the act of installing a CRX is assumed to configure an update source.

That's the real point here. For the average user, disabling off-store installs by default is much safer, and it will dramatically reduce the number of compromises. For developers, it's a simple matter of passing a command-line switch.
Awesome project. I've been using this since that hacker news post. How often do you find yourself updating the code due to gmail changes?
This is very similar to issues in W3C specifications. I just think a bug tracker should be the primary reference material to track discussions around a specific bug. I wish there was a way to link to IRC channel discussion around this bug and otherwise if possible.

But nevertheless, I think it would be better if implementors summarize discussions outside of the bug tracker into the issue itself.
I dug the spec I wrote off my backup hard disk and posted it here: https://gist.github.com/2907123

I also planned to define a standard set of tags for the "tagged value" type, but never quite got around to that.
Nice save.
Purported iOS 6 beta download links leak ahead of WWDC
Thus, it is highly recommended to use a strong random password generator that is known to be actually random.

The whole point of a password is that you can remember it. The moment you need software to store and retrieve passwords, you're better off using asymmetric cryptography. That said, I really dislike the idea that it's the only way to achieve security. I would really like to see more discussions and propositions for solving this problem.
Yes, but I also want some kind of enforcement: for short phrases I want to check for being in corpora, if it is clearly in a language I don't want to say "write more," but just identify the language and only in dubious cases put the blame on the user. Ahh, if I had more time and less projects I'd finish this right now :)
PyPy Status Blog: STM with threads
I'm currently using a HTC Flyer. Kinda regretted it... Only drawback was the fact that the apps really kind of sucked.

There's this really good (currently beta) app called "Write" though. Not sure if they'll be extending its consumer base anytime soon.

https://www.youtube.com/watch?feature=player_embedded&v=...

https://play.google.com/store/apps/details?id=com.styluslabs....

its a fantastic app that works with my stylus so i'm pleased.
I don't know why you're claiming this wasn't developed openly. The bugs are all public (the first was filed ~2 years ago); the code is checked into the public tree and has been enabled on canary for almost a month. It wasn't a heavy-handed or rash change, and the impact on both users and developers is minimal.
> What makes you certain you have identified the process required to be religious? "Required" is a strong word, implying that it is impossible to become religious through any other process than the one you assume.

I was probably ambiguous, but I didn't mean to imply that there was only one process to be religious. Only that the processes to be religious aren't compatible with the processes that one uses to accept science. If you used the same level of scrutiny on religion as you do with evolution or gravity (or luminiferous aether), you'd reject religion.

> Some may begin from premises that are not falsifiable, but it's quite a stretch to say that's required.

Are there any falsifiable assertions that can convince someone to rationally become religious, and which address religion itself rather than the social and mental effects of being religious?

> You don't need to think that even if you're a total Bible-thumper. As long as your Bible-thumping includes an appropriate understanding of history, such that you recognize the creation story as a response to the Egyptian creation account [0], rather than as a response to Darwin.

Assuming said Bible-thumper doesn't interpret the Bible literally, I suppose so. But there's still the problem that they started with a religious belief and were able to mold it to fit evolution in - they didn't apply the same base standards to both ideas. I don't believe that's rationally consistent.
Sounds slightly less corrupt than Wall Street.
> So I bought both - confident that I would return whichever one was inferior or the more expensive one if the cheaper one showed up on time.

And people wonder why there's global warming.
Stupidly tossing out a couple of thoughts, in spite of long experience telling me it will most likely not be appreciated. But I am having one of those days and bad habits die hard. Apologies in advance.

Celiac causes wheat and dairy intolerance. People with my disorder are at higher than normal risk for also having Celiac. An alternative med group I know of suggests that Celiac has a genetic component but is triggered by metal poisoning -- I mean having active symptoms is triggered by metal poisoning. Chelation makes some sufferers of Celiac asymptomatic. I have not done a formal chelation protocol but I have reason to believe I have reduced the metal load on my system. I tolerate wheat and dairy better than I used to, have improved appetite, and have shrunk dramatically. My hypothesis is that my genetic disorder involves misprocessing metals and thus involves increased vulnerability to metal poisoning.

FWIW: People with CF tend to run warm. I do not. I have a long history of being cold natured (including an abnormally low temp when not feverish), something which has improved somewhat with getting healthier. Given that CF is a salt wasting condition and salt changes the boiling and freezing points of water, it kind of makes sense to me that it appears to typically alter normal body temperature. If you wanted my advice, which you most likely don't, I would suggest you get tested for Atypical CF if you haven't been previously and look into the possibility of metal poisoning as a factor.

Congrats on your improved health. Best of luck. Apologies for my compulsive helpful streak. I am working on it. I'm just extremely stressed out today.

Peace. And thanks for contributing to the conversation.
The reverse is also true: Chinese and Japanese web companies have a high language/cultural barrier to entry in Western countries.

So does anyone have any good examples or suggestions? :)
I cannot think of a single objection you have raised that is to do with 3d printing rather than to do with quality control and process tracking, and quality control can be made far easier with 3d printing as you can change production as soon as a fault is discovered, so you don't end up with a warehouse full of a million faulty pumps.

And tracking could be achieved by embedding rfids mid-print without a problem.
Ever notice how all Go tutorials are just about Web servers somehow?
How ironic. Wouldn't it make much sense to enable it per lexical scope?

Or as Perl did it (18 years ago) with a new keyword, so that you can use both dynamic and lexical variables in the same file? Best of both worlds.
OSX build seems to work really well:

./configure --with-gif=no --with-ns
make
make install
Pinboard is offering a free account for any one who cracks this password
They make it sound like implementing salts is some kind of rocket science they needed an elite team for, and not one of the most basic and well-known security measures.

Also they act like the file that was posted on that forum is the only information that is out there. Everything indicates those were the passwords the hacker couldn't promptly get and needed assistance for.
Note to anyone attempting to build this on OS X: If you're getting strange errors when running make, ensure that you don't have the Mono framework installed as well. If you do, move it out of the way ( from /Library/Frameworks/Mono.framework to some other directory) before you try to install. After the install, move it back.
I'm not saying there are no examples. In the one you bring up, though, I recall the piece and ensuing hullaballoo: The original NYT author, Charles Duhigg, basically admired and defended the Forbes writer's job (re taking the story in a different direction; providing more exposure to an audience outside his own; providing a prominent book plug), and then O'Neill backed off his own "link-baity" headline.

http://jimromenesko.com/2012/02/21/nyt-reporter-defends-forb...

In general (though, agreed, ~off-topic here), more can be done w/r/t quality assurance of a distributed content network. Something like "report blogspam" is highly subjective and rife with abuse potential. Slashdot's moderation / meta moderation, in combination with straight up and down votes by the wider community, can be effective. Relying on a "central editorial functions" to handle it all is inefficient and doesn't scale well.

This - reputation, rewards, quality (of writers, content, community) - has been an area of interest for me for years. I'm actively working on same currently. I'll put an Ask HN together and see if it gets any traction.

(Disclaimer: I work at Forbes and speak here only for myself)
given neither dropbox nor airbnb was sold yet, would they classify as "returns" yet? It seems more like unrealized profit to me...
Let's be honest: The average user doesn't expect anything at all to do with CRX files or extension updates. They just expect an extension to install when they click install, and to work from then on.
But what happens if someone complains about my extension and Google decides to pull it from the store?
I would like to see him explain why they weren't using salts before and why they thought that was acceptable.
Or go completely nonsensical. "Vanilla elephant trampoline inverted cork routine" contains no common phrases and is just as easy to remember.
Ask HN: Current Chatbots/Natural Language Processing etc
Hi. I have recently got interested in chatterbots (like cleverbot etc). I found a Ask Hn about them from about two years ago (http://news.ycombinator.com/item?id=943590) but wanted to see if anyone has done any more (exciting) work on things like chatterbots/natural language problems.

I have run into a few cool sites like cleverbot and jabberwacky but their code is not open source. I was hoping to find ways I could learn to make ones like that!

So any thoughts on the idea of chatbots or projects or tutorials related to chatbots or natural language would be greatly appreciated.

Thanks!
Is there anything of value on LinkedIn though? So while no users were harmed on LinkedIn they might have been harmed somewhere else if we assume that also email addresses were leaked.
Linus Torvalds on Windows 8, UEFI, and Fedora
TLS is secure, right? TLS is by no means obscure. Good security does not need to be obscure. If it does, that means that it can be defeated if its methods are known, which doesn't sound like very good security to me.
I've been trying to ignore this particular flame-war, but your example is doing fundamentally less, because it's not binding objects to json (which was what you originally asked for).

I actually cannot write your example easily in Sinatra/Ruby/etc, without making my object either a Hash or an ORM subclass, customizing serialization, or pulling in uncommon libraries.

Here's your complete example, in reasonable Ruby. It's longer than the Java.

class Greeting < Struct.new(:content)
def content
"Hello, #{super.content}"
end

def to_xml
{:content => content}.to_xml
end

def to_json
{:content => content}.to_json
end
end

get '/hello' do

response = { :content => Greeting.new(params[:name]) }

respond_to do |wants|
wants.json { response.to_json }
wants.xml { response.to_xml }
end
end

If I create an imaginary library that does exactly what we'd want here, it'd look like the following. It's marginally shorter than the java, but hard to argue anything about it being fundamentally better.

class Greeting
include JsonObject
field :content
def content
"Hello, #{@content}"
end
end

get '/hello' do

response = { :content => Greeting.new(params[:name]) }

respond_to do |wants|
wants.json { response.to_json }
wants.xml { response.to_xml }
end
end
No. -Betteridge
> Well it was published by CNN, which is one of the largest media organizations

true

> and generally considered reliable.

CNN may be considered "reliable", but it isn't.
"because security by obscurity has such an awesome track record."

Please elaborate on how you feel that security for linkedin would be better if they talked about the new specific security measures they've implemented.
It will get to the point that we need biometric scanners or implanted RFID chips with private keys to do authentication, since brute forcing even unrememberable passwords will be trivial eventually.
Why do we have the treasury market at all with the government paying interest to private individuals who do nothing and have no risk when the government could just print the money like China? People who own government bonds (the ones that are not the fed) are getting paid an enormous amount of risk-free interest courtesy of the taxpayer.
...except for the stuff they'd rather not talk about.
BBC has been doing this lately, too.
Global warming aside, what a pain in the ass customer. He was decided from the get-go that he would be a customer service issue for Amazon.

@jason_shah There are worse things to be than a pain in the ass customer, so please don't think of this as an insult to your character.
They did it for the iPod, why not its replacement.

I swear I am going to write a rumor / stupid article bot for Apple news and make a fortune on link bait. If you see the "by protomyth" then you know I actually did it.
AFAIK Firefox already has the ability to blacklist offline extensions.
I'm getting this:

checking host system type... i386-apple-darwin11.3.0
configure: error: Emacs hasn't been ported to `i386-apple-darwin11.3.0' systems.
Check `etc/MACHINES' for recognized configuration names.
Thanks! I'm definitely planning on adding gps as an option so people don't need stickers to post on a stall.
Its a poop joke... lighten up.
I put a lighter theme, and increased line spacing a bit
Ask HN: Best way to learn Ruby on Rails?
Recently dived into Ruby on Rails, with no prior experience of ruby. Only some background in C++,C, php and the likes.

I'm still juggling between learning RoR, CSS, javascript and hacking at vim, and it's really difficult to do so since I still have to focus on my studies (i'm still 16 ><). I need to learn all those to build a decent well-rounded app.

Any suggestions on where to start? It's not like I'm short of time so a long-winded but good way to build a strong foundation would be good.
Undoubtedly it would be an invocation of the startup timecrunch trope, hence the honest mistake. It's analogous reasoning to large data breaches being successfully handwaved away. Heck, even the US Government says "...nobody could have known [things would get this bad]"
This is why I use LastPass. I can log in (securely?) to their website and pull up the password out of a database in (rare) situations like that.
I'm tired of this. I am not going to pay for any product I can pirate anymore. I don't even feel guilty about it. If the artist wants money he should set up a donations account so I can pay him directly. I'm tired of these middlemen.

I'm also tired of people preaching about how piracy is unethical. A copied piece of data is not equivalent to a lost sale. People cannot own information. You cannot own an algorithm or idea. Imagine if Newton owned the laws of motion, imagine if he owned calculus. How can someone own an arrangement of words or sounds. If you think piracy is unethical you are either a dolt or benefiting from current copyright and patent laws.

edit: And let us not forget the primary purpose of these laws. The purpose wasn't so you could get insanely wealthy off of an idea. It was to provide an incentive for people to create and learn. Copyright and patent laws are now doing the opposite.
I do a lot of work in Python now, which is great. But the one thing that I really really really miss from Java is better dependency management and packaging.

I wish I could just create a .war file for my Python project and copy it to a deploy directory on a server to get it going.

Using a virtualenv and pip or easy_install works ok but a simple maven config to define my project and it's dependencies is still lightyears ahead of the mess we have in Python now.

It is really difficult to beat: 'mvn package && scp target/my-app-1.0.war server:~/deploy/'

I hope Python will get there.
I like it even better when in one of their blog posts they tried to twist the issue around and make it actually good that this happened cause its a perfect reason to update your old insecure password.

What a joke LinkedIn is! I wouldn't be able to stand embarrassment of a hacker-joker to send to all my connections some ads for Viagra (knowing some non-tech people would really believe I start selling Viagra), so I deleted my account.

But ain't that breath-taking that a 10 years old revenue-positive company with NASDAQ presence would not even salt password. [speechless!]