skysight-inc/HackerNews huggingface dataset:
See the chart here: http://blog.asmartbear.com/wp-content/ss-images/lifestyle-ve...
from http://blog.asmartbear.com/rich-vs-king-sold-company.html
Report Shows That 7 of 10 Apps are Developed for iOS
>looks like a macbook air

Oh the Apple lawyers will be pissed about that.
I answered almost exactly the same question on Stack Overflow once, except the asker was comparing (x / 2) to (x * 0.5). Someone had previously advised him to use the latter, on the theory that multiplication is cheaper than division. I disassembled both to show that (x * 0.5) is absurdly less efficient: http://stackoverflow.com/questions/895574/what-are-some-good...
The shell really is inexcusable.

Ever seen this? So close yet so far:
http://en.wikipedia.org/wiki/Windows_Services_for_UNIX

I moved to cygwin+bash years ago which is 95% there -- and boy does the 5% have really sharp edges.
New evidence of Flame malware 'suicide' code
The Brainstorming Myth
"	In Math You Have to Remember, In Other Subjects You Can Think About It"

Most math geniuses I know (including however much of a genius I am) know the exact opposite! Other subjects are memorizing facts; you can noodle through math problems using logic. In fact, much of our success in other subjects is in weaseling through multiple-guess tests using mathematical logic!
Well, I mean there's always the possibility that you'll have users that won't log in any time soon, and you don't want them to be vulnerable in the mean time, right?

If it were me doing it, I'd take the article's approach as the first whack, and then as each user logs in, validate their password (as per the article), and then also set their password to scrypt('salt', 'password') vs. scrypt('salt', md5('password')), so that they were current. Then just set a flag on the user record like "new_password=True" or something.

That gets you the stopgap without having to muck around with scrypted hashes forever. Send out a few emails to your user population with a note that you've upgraded your password strategy and that they should log in. You're still not going to get 100% coverage, but at least for whoever you don't get to log in, their passwords aren't 'in the wind', so to speak.

Edit: I'm not sure if you edited yours, or if I just read it poorly, but I think we're saying the same thing. Note, the article's strategy is basically your first scenario -- just bcrypting (or scrypting in the article) the existing md5 hash.
I assure you, if she changes her mind and wants to wear something else, no one will think less of her for not staying true to a blog post she once wrote. Maybe it took her time to put the post together, but that was more about writing something interesting than building a how-to doc for the fashion-casual.
>like Pi is always 3.14159265, to us or to hypothetical aliens.

Unless you're counting in base Pi, then Pi is 10.

Pi is only 3.14... in base 10. Just like the c is ~2.99 * 10^ 6 m/s because we define a meter that way.
If only there was a technology by which anyone could buy anything anywhere.
Thanks for the correction. This mistake and the correction would be a good memory tool for me in the future!
I use MSYS right now, which does an okay job for what I need it for, but it can be confusing when the MSYS grep isn't the same as the GnuWin32 grep (GnuWin32 has -P, MSYS grep doesn't).
Getting the best out of BYOD and overcoming the security concerns
Speak.js: Text-to-speech on browser
... have you tried PowerShell? It's actually more like a scripting language. But if they called it PowerScript we'd just make fun of it for being bad Python. And the command window itself still sucks. I use cygwin/rxvt/screen/bash and only get burned a few times a week.
I love seeing stories like this. Too often VC funding or cashing out are seen as the primary measure of startup success, rather than building a successful business.
Here is another way http://blog.jgc.org/2012/06/one-way-to-fix-your-rubbish-pass...
If you want to reduce implicit interactions between components, using FP over OOP will probably give you larger gains that static typing over dynamic typing.
An MD5 hash is not a random number; it is generated from some text string. It's possible that bcrypt(salt + MD5(text)) opens you up to collision attacks that are not possible with bcrypt(salt + text). It seems unlikely that it would open you up to attacks that are not possible with md5(text) but MD5 is not a random number so I'm not too sure.
Should This Logo Be Illegal?
Right. I hesitate to call it "sexism," as there's no adverse discrimination going on, but the double standard here is turned up to 11.

What is described in this article is, basically, the way almost every western man in a casual profession dresses. I wake up in the morning and pull on jeans, a t-shirt, and top it with a long sleeve, sweater or nothing depending on the weather. Yet no one would have any interest in reading a blog post about it.
I was looking for actual information. Nice page and all, but it would be nice to see what Jodd brings to the table up front, rather than being distracted by lots of CSS/JS fx.

Take a look at the Play framework page. Starts with an elevator pitch and as you work your way down the page, you get more more details (without going into a lot of detail), enough to get a nice overview.

There's a time and place for heavy css/js effects, but I'm thinking this is not one of them.
Hunting for child porn, FBI stymied by Tor undernet
Thanks for this tip! I guess this is more secure than just opening up all rebind from the wild.
It is in the non-rebellious parts of the British Empire :-)

https://encrypted.google.com/search?q=I+try+to+learn+the+ans...
GarlicSim is dead, long live Python Toolbox
All the best transit of Venus pix in one place
Men have it easy. A well fitted Saville Row cut suit has been relatively fashionable for at least a century

Though, they have also cost a small fortune for at least a century.
And the converse: avoid spending time with slackers.
The cat can never be put back into the bag.
TrueCar CEO: We suffered a boycott on our way to IPO
Define "make an effort." This gray area is an automatic settle out of court auto-win button.

If i'm a good farmer, wouldn't i be trying to isolate the best crops from my fields? And isn't there a high chance that the best ones were the genetically modified ones?

I think if they are going to claim IP rights over the natural reproductive system of these plants, that they should be able to be sued for massive damages when they knowingly "pollute" other people's crops with their genes. Property rights goes in both directions. Fine, it's your property -- why are you polluting all of my crops?
No, Microsoft has made some extremely serious mistakes in the past (eg. like repeatedly leveraging their monopoly to destroy competitors). And pretty much anything do won't make up for it.

Microsoft worked very hard to earn their hatred, and they absolutely deserve being shunned by the entire development community. I really wish this company would completely go away.
FirstEnergy Says It’s Fixing a Leak at Ohio Nuclear Plant
..amortized over several weeks. People don't log in every day.
Who told you it was your data? It's a networking site, not EC2.
Can someone with VC experience (on either side of the table) explain what part of an investment goes into the founder's pocket? Does it change with each deal or is there a standard percentage?

Obviously a $10MM investment does not equate to a $10MM deposit in the founder's personal bank account, but at what point is the founder no longer expected to live on Ramen?
EzEditTable – Enhance Html Tables in jQuery
I don't think the goal is to remember all the moves, just the final one which is based on a hash of your password. If she doesn't end up in the right pose you typed wrong.

Still, of dubious worth IMO.
You're not the only one who was there. And some of us discrete with your interpretation(s). When Microsoft included TCP/IP in Win3.11 for Workgroups, they killed a lot of proprietary, expensive products. Should that have triggered an anti-trust investigation, too?
It's how to fix your rubbish password storage, not LinkedIn's or the others who've been compromised. That's the difference.
Here is the real page: http://jodd.org/
I thought DPReview would be near the top of the search results because their reviews are absolutely excellent, if a little impenetrable to newbies.
Oddly enough, that's precisely what I do.

I make minimal use (essentially none) of third-party computers outside my own laptop, personal desktop, work desktop, and phone.

I have key passwords on my phone (encrypted, KeePass).

I have a more comprehensive list on my laptop (and stashed in a few other places), GPG encrypted, dittos work system.

Works for me.
A lot of your examples could be used against current darling companies.

Cutting a sweetheart, loss-leader deal with AOL to replace the browser with their own? Isn't that pretty similar to what Google is doing with Firefox to the tune of a couple hundred million a year? (And something that Microsoft has been banned from doing with their own proprietary browser?)

They refused to update Java -- Apple refuses to even allow Flash, which is elsewise standard on something like 97% of computers.

'Pushing IE4 as a part of OS updates' -- wait, they're not supposed to promote their own software (notwithstanding the business with uninstalling Netscape, that was indeed evil).

Trying to kill off the web? Okay, at this point you've lost it.

Stop seeing things in purely black and white.
Joe Celko is bald. Do not underestimate how much cooling this buys you. :-)
Are you sure about that? Because I think you can find similar such themed articles in any given mens magazine, and unless the economics of print have changed, such articles require significant amounts of ink and trees to produce, so someone in the audience is interested in it.

Perhaps this article attracted attention because it was well-written and well-produced with a liberal use of attractive graphics...as opposed to the 100% width Times-New-Roman-400-word-paragraph format that many bloggers use. Why were you so quick to jump to sexism?
Nobody would make this argument if, during testing, it transpired that reading files over a 100Mbit network connection was faster than reading files from the local SSD. Sure, one should always measure rather than pontificate. And yes, in this hypothetical case, one has measured, and it truly turns out it's quicker... to read over the network. But one should always consider: do the results make any sense whatsoever at all, or do they suggest that further investigation might be warranted?

And similarly, it would be an unusual CPU indeed - so unusual in fact that you'd probably already know that you were working on it, and would mention it as part of this crazy story of the time that divisions were faster than shifts - that managed to mess up single-bit shifts so badly that they were slower than an integer division.

Perhaps in a higher-level language, one might find that x>>1 were faster than x/2, for some reason unrelated to the relative speeds of the two operations. But if one is working in C or C++ (and I assume this is the case, if one is bothering with stuff like replacing divides with shifts), and yet the shift is still the slower, then this is most unexpected, and probably evidence that something has gone wrong.

(The division algorithm is inherently more complicated than a shift, and so divisions are always going to take more time than a shift. You can expect a shift to take 1 cycle on a modern CPU. A division would take more like 20. It will probably be the slowest integer instruction possible, and it might not be accessible from every pipeline. Sample division latencies for vaguely modern CPUs: 20+ cycles on x86, ~35 cycles on MIPS, ~20 cycles on POWER, ARM doesn't seem to have it. Shifts, on the other hand - always 1 cycle. ARM even gives them away for free.)
I can't imagine that the person responsible for the database can look his colleagues in the eye. He must have called in sick the day after the leak and is not coming back to the office.

You can only imagine how many times someone noticed that passwords weren't salted (by comparing stored passwords to a leaked set of hashes or raibow tables after another announcement from some company being hakced) and complained, and got brushed off.
Congrats on making it to the first page! :)
Took ages before I figured out how to flip pages O.o
It helps if you know where it is ahead of time.
My point I guess was that with proper abstractions and duck typing you really don't have to care about the type. I only notice something isn't a duck when I try to use it like a duck and it fails - which is surprisingly infrequent.
Only the hacker community could think so.
> But they've maneuvered themselves into a position where they are no longer dominant

That's a fantasy. Microsoft still dominates their core market (the Office Suite) and they also dominate the enterprise server market. There's really nothing that can match Exchange + ActiveDirectory for ease of use and setup, both on the end-user side and on the admin side. Google Apps is nice, but it's got some shortcomings, and you can't host it on your own hardware.
Big Brother is watching, and he wants to sell you a new car
it depends on how much money matters to you
It seems you are excluding by default that their mindset may have changed and that everyone who work or will ever work will always behave like their predecessors.

Shouldn't they at least get the benefit of the doubt?

(yes, I was around in the '90s and hated MS with a passion)
Chris Brogan, Outer Space & The Secret of Blogging
In python if I was trying to figure out something complex 20 levels deep, I would stick in an "import pdb; pdb.set_trace()" to get a REPL at that spot. There's probably an equivalent for Ruby?

(Off-topic, the werkzeug debugger even lets you debug browser apps by jumping into a REPL anywhere in the stack trace, in the browser, after an exception is thrown. I think it also has a command that bakes you a pie.)
According to their statement, they started salting some time recently. I guess you got a salt when you next logged in?
You say: "when features look like they'd be useful to integrate into languages". How do you know a feature would be "useful" without compelling evidence that this is really a problem for programmers? Now you're back to the original problem of figuring out what the most significant problems are for programmers. Wouldn't it be better to figure this out BEFORE PL people plunge into a particular topic?

Remember all the research done on typestates? The motivation section of those papers was usually a few paragraphs of total BS. AFAIK, there was no real data nor experiment that demonstrated this was a real problem for professional programmers.

FYI: I like static type systems and used Haskell et. al. But no one has demonstrated that it is better than even Visual Basic!
If it is a pure function it makes the call depth irrelevant. While not always the case, it seems to be pretty common in Ruby development to keep things as pure as possible.
> Men have it easy. A well fitted Saville Row cut suit has been relatively fashionable for at least a century.

I'd be laughed out of the office if I wore that.
He's talking about the "price to grower per pound". I guess that would be the price paid by the people at the top of the distribution chain, far lower than the retail price on the street. But I'm not sure that's what he means, because the phrase is not completely clear.
Your session was probably stolen by the man in the middle :o
Ok, sorry for the harsh response, but i don't think that anyone is using it for "common purposes." Everyone should be using strong crypto, because it is inexpensive to do right.

I would argue that almost everyone that is storing passwords should start worrying about people bring racks of GPUs to bear against you, because it is so cheap. At 33.1 Billion MD5 hashes/s with 4 dual-linked GPUs (one machine), you can eat through all 8-digit alphanumerics very quickly for a few thousand dollars. (of course that is using PBKDF1 or less). I had done the calculations in a spreadsheet and forget how long it would take, but it is way shorter than you'd thik.
So state-sponsored malware writers should seed their payloads with misleading targeting information, but have an option to download other targeting code dynamically. (And erase such the moment it's not needed.)
The problem with web apps though is that they aren't really local to your computer. We have all kinds of sandboxes to prevent, say, a web page from opening up a connection to talk to your PCI cards.

I wouldn't say that this is the same as giving battery status to every app on your laptop. A closer example might be smart phones. But there's a presumption that if software is running on your laptop or smartphone you have at least some idea of what it is and what it can do. In practice not so much and such apps could misuse this data along with others.
1. Wouldn't it be better if they used openid like stackoverflow?

2. Any advice on encrypting passwords? We store passwords for some 3rd party services for our users.
Did you even read the linked paper? They did exactly what you described.
>Cutting a sweetheart, loss-leader deal with AOL to replace the browser with their own? Isn't that pretty similar to what Google is doing with Firefox to the tune of a couple hundred million a year? (And something that Microsoft has been banned from doing with their own proprietary browser?)

What's the loss leader in this analogy? Google makes money off both Chrome and Firefox.

>They refused to update Java -- Apple refuses to even allow Flash, which is elsewise standard on something like 97% of computers.

I'd agree that this is exactly the same thing. Apple is hoping to replicate Microsoft's success, forcing businesses to choose which platform they develop for so that they can chase their competitors out of the market due to a dearth of choices.
Why do people still think that not believing in something must be an active position to take? Atheism and agnosticism are not mutually exclusive, and in fact, most people who identify as one are also the other.
As someone who doesn't keep up with the crypto/security communities, one thing that has surprised me is how the cutting-edge news on this Flame story has been coming from antivirus vendors like Kaspersky Lab and Symantec. General sentiment seems to be that AV vendors are low-tech operations that don't have the best people when it comes to security. Other comments even on this very thread reflect this sentiment "timaelliott: Symantec is just jealous these guys can remove viruses from a machine so damn efficiently." Do these guys deserve more respect than we give them?
The Future of Exercise (And It's a Flying Drone)
I can only share our experience: Friends and family were concerned about hurting our feelings and/or encourage us blindly. The tech community was almost evenly split between go forward and stop now. The users have been the ones to offer constructive comments about what they want and when they get it ... they tell their friends.
Build, Measure, Learn – Announcing Appraiso v2
Yes, while driving, use cars in the lanes beside you. As a car passes you can adjust your side mirror so it catches the car just as it leaves your rear view mirror. With this setting, the passing car will enter your peripheral vision before it leaves your side mirror.

Once set you can find a head position that allows you see your own car, and you can use that position to reset your mirrors after the wife drives your car.
It still is much worse than most of Europe except Greece which just qualified in the last decade as a developed country for road infrastructure.

From my personal experience, the average American driver seems to have a frighteningly low driving ability coupled with a surprising self-confidence; and I've seen more road rage in 6 weeks in the US than in 40 years in Europe (apparently tendency to reckless driving is proportional to distance from the Ocean, too; Californians seem reasonable enough). There are probably lots of progress to be made in teaching and punishing there.
EmotionML 1.0 - Emotion Markup Langauge
I learned this a long time ago: "If you want to get something done ask a busy person to do it."
I've got no question with your first point -- leaks happen. Elements of our hosting environment, regardless of that environment, mean we have lapses in control, whether it's on-site office cabinets, hosted colo, or cloud provider.

Our backups management is pretty solid, with backups encrypted, and even DB systems using on-disk at-rest encryption via an ecryptfs tool.

You did raise the valid point of sensitivity of identity data among some of our clients. While the general case is that PII (personally identifying information) disclosures would largely be embarrassing but not harmful, there are cases in which harm, or even life-threatening risks could arise.

I'm leaning to your conclusion but I'm looking to be able to quantify that more robustly.

And as I noted in my original question: if we were getting pressure from our clients on this, the case would be far easier to make. Market rules.
> You wrote a poor DNS server. Read the spec, study BIND's or NSD's source to understand the years of work that went into this before you, and understand the problems I've pointed out.

Why? xip.io exists and works. If he had to read hundreds of pages of technical specs or thousands of lines of source to implement it, it wouldn't exist.

Feel free to make your own spec-compliant or better-working version though; Sam's done the same for RVM, and I'm sure he wouldn't have any problem with better software existing.
http://github.com/pekim/tedious is a pure JavaScript implementation of (some of) the TDS protocol.

[Disclaimer: I'm the author.]
TCAS is definitely useful but it's not be-all end-all in collision avoidance, and unfortunately I think that translates well to automobiles as well. There's always the possibility of failure with the devices or perhaps sending erroneous(perhaps malicious) data that could screw with the system in other people's cares.

That said, I do like seeing these kinds of innovations!
Looks familiar:

http://blog.nametoolkit.com/domain-names-taken
Symantec is gobbling up headlines specifically to make you believe they are a high-tech operation. There are many other private firms and state operations which you will never hear about, running rings around Symantec.
How did her sitting down and thinking about her clothes sudden "consume all her time?"
Ah, I hadn't considered that... That's a shame...
"no radiation was discharged"

Note massive trading spike late afternoon yesterday with minor drop.

http://finance.yahoo.com/q/bc?s=FE&t=5d&l=on&z=l...

Makes you wonder if daytrader types knew about it on Thursday.
> Most of my history/english/social studies consisted of rote memorization of facts, dates, and obscure words. I'm still flabbergasted on why the SAT has middle school level math problems while also testing you on an intractable memorization problem: vocabulary.

As someone who still has the SATs fresh in mind, vocabulary is actually a very small, and very easy, portion of the exam. It's a subcomponent of the Critical Reading section, which largely concerns itself with drawing conclusions from a given text. Anyone even moderately well-read should be capable of acing CR, and it was a not unusual occurence at my gymnasium (~5 out of 15 students in my year managed 800s, IIRC)
That is interesting, I was under the impression the North keeps up education for a decent amount of its people. I thought they were one of those countries that forced its people into engineering and science as a facet of its national security policy.
> What will he do with them anyways?

He'll sell them to a state actor. Even if something is non-monetary, if someone with money wants it, it can be monetized.