skysight-inc/HackerNews huggingface dataset:
Without seeing a transcript or video...

Or actually paying attention the article, apparently. "Poor Curious Dave" was a VOLUNTEER at the workshop. Just like the author of the article, Dave's purpose being there was to assist the students of the workshop with the projects (presumably, or to assist in some other capacity).

Maybe Dave thought his questions and comments would help clarify or improve the instructor's content...but on the other hand I really don't find the article author's evaluation of Dave as just a showoff/bully much of a stretch. I assumed that we've all seen this behavior tons of times and that it is pretty obvious when someone is being "That Guy" versus trying to clarify or expand on the material for themselves or others.

The fact that quite a few here are eager to challenge the author's evaluation of Dave and jump to Dave's defense is...funny, I guess.
I found the second video further down even more impressive in its more serious tone.
Well that's weird. There are two AdSense skyscrapers, one on each side of the table. How wide is your screen?
The supreme court is a court of appeals. If there is not a two person majority, Stare Decisis.
not a domain re seller myself, but I do have a few short domains I use for Air Mail, as Air Mail is a disposable temporary address it doesn't really matter , if I sell any of these I will make sure they are dropped from Air Mail in an orderly fashion.
Fortunately, human apathy does not yet rule all of reality.
Actually it's this: http://www.101domain.com/com_ng.htm

Like KingOfB, I wonder why "domain.ng" costs $50,000/year!

Edit: Apparently, they're banking on the extension being attractive for things like "im.facebooki.ng". Hmmm.

http://www.loyokezie.com/2011/01/05/at-50000-will-the-ng-cct...
I started a business text-messaging service, and succeeded in my first two sales calls with local businesses. It was instantly profitable and is growing. Currently I am not ready to sell it nationally, as I am refining and adding some new features for a new client, or I would link it.
Good, I've hated the meebo overlay since day 1.
This is quite interesting. I did some archery a few years back (recurve bow) and picked up a second hand, 50lb bow, which, apparently, for a slender early 20s female would be "quite tough" to draw, but I managed it, and got quite good (and strong arms). I never really took it very seriously though, but it was lots of fun. I can only imagine how hard it would be to draw an 81+lb bow (though perhaps longbows distribute the force differently? Otherwise that's going to be some sore fingers!).
Exchange email systems have web interfaces. They typically authenticate with AD.
What are passive ads ? do you mean more GoogleAds ? I'm not in it for the quick dollar, I want to get this service to as many people as possible and be in it for the long run.
>Really? You think this made #1 on the front page because people are excited that you can run ls from Darwin on a non-iPhone ARM7 system that's really running Linux? Which has its own ls? No, people saw the headline and voted it up thinking that "binary compatibility" with iPhone meant compatibility with iPhone 5.0, not just with Darwin. I bet most didn't even read the article first

Not that I agree with your explanation about why the article got upvotes, even if this was the case, it doesn't matter.

There was ABSOLUTELY no deception. The title uses a well known technical term, and uses it appropriately.

If _some_ people thought the title meant it can also run Cocoa Touch apps, instead of merely be binary compatible with them, that's _their bloody problem_.

This is Hacker News, they're supposed to know this kind of thing.

Should the title have been:

"Magenta - "It is fully binary compatible with iPhone OS 5.0, and by fully binary compatible, I mean it in the actual LITERAL technical way and NOT that iOS libraries are also implemented, which has nothing to do with 'binary compatibility' you newbs!", to avoid "deception"?
Just played Spades for 1/2 hour. Fantastic work! You did the right thing in allowing the player to jump straight into the game upon landing on the homepage. The games itself are so simple that the process of starting a game should be simple, and you've done that here. Job well done!
More importantly: What is the cheapest 3D printer that will reproduce all of the parts to assemble a working AK-47?

http://www.quora.com/3D-Printing/How-much-does-it-cost-today...
I think OpenID + owning your own domain is a good solution to this problem. You simply put some special HTML in the header of http://<yourdomain>; to create a "delegate" that points to an authenticator of your choice. If this authenticator goes down or is compromised, then you edit that HTML stub to point somewhere else. I prefer using my domain name as a single point of failure over my email address, because I think it's harder to lose control of my domain name (actually if I lose my domain then I've lost my email too, as that controls my MX record).

The problems are that not every site supports OpenID, and that owning/maintaining one's own domain isn't as easy as getting an email address (tough for grandmas to do). The former issue would solve itself if OpenID would become more used (kind of a paradox), while the latter is slowly gaining traction, I think (now with sites like GoDaddy it's not too hard for lay people to buy a domain and write HTML with a WYSIWYG editor). Remember, there was a time when getting an email address was not a trivial thing.
This is just a guess on how you would do it... but it would involve making many many many requests until you could establish a mean against a given confidence level. Then you could compare that mean for each starting character (once again, many many many requests for each character). If the mean of any of them (or heck, even the distribution of the timings) differ than the others, then you know you you hit the right mark.

This assumes that 1: you can reliably measure at that small of a time difference and 2: you can submit enough requests without being detected.
I have a reprap huxley, bought from reprappro. You have to assemble it yourself, but the instructions are very detailed. It's really high quality and makes beautiful prints. I can only recommend it.

The downside is that it's located in Europe. You can buy them here:
http://reprappro.com/

They also sell a bigger model (the mendel) now.

If you'd rather buy an american one, I've made no first hand experience with them, but heard good things from several people about maxbots. They sell the mendelmax, which is bigger than both of reprappros models, and more sturdy because it uses an aluminium frame.

Again, for under 1500, you will have to assemble it yourself:

http://store.mendelmax.com/

Disclaimer: I have not done any research on anything that isn't a reprap. I prefer RepRaps because they're open source and made from standard components, which means easy to fix yourself, and even if whoever sold you the machine goes out of business, you will still be able to replace/fix any part of it. Apparently makerbot support is good, but only if you have the latest model (or so I've read, but again, I have not done proper research, so take it with a grain of salt)
Intel Updates GCC and the Linux Kernel to Better Support Knights Corner
Looking at the headline, my first thought wasn't that I'd be able to run arbitrary iOS apps, but that it was a project with that goal.

To me it was a bait-and-switch, where not only was it not a goal, but Christina is somewhat rude to people who thought it might be a goal (sorry Christina).

"I have this cool tech that could be used to run iOS apps -- and I have no intention of ever making it run iOS apps, because that's a crazy idea, now go away for even thinking about it!"

System emulators (ahem, WINE, but tons of others exist) that do the level of emulation Christina scoffs at have been around for a long time, and it's very much not a crazy idea to start one. By yourself, maybe it is, but given the amount of hype this generated quickly, there would obviously be other people willing to jump on board.
>They dont open source the latest version.

I never said they did?!?

Doesn't matter though. Even the version before the current is still pretty new tech & interesting to study.
until Google buys them too and shuts them down a month later
You can get into some serious trouble. Stuff like voiding the whole contract and providing an easy way to sue. The problem is that nobody knows everything that is illegal, even lawyers and judges get tasked with determining legality and maliciousness. Heck, try to get the complete list of federal regulations.
A few people have mentioned that they might have just did it for publicity. Initially, I was skeptical, but I'm starting to think it makes the most sense.

Given the prospect of a severe revenue dip once Sortfolio is detached from the 37 signals brand, the asking price (450,000) is very high. Moreover, as far as I can tell, they didn't respond to bidder questions on flippa. To me, it seems like the bidders and the auction were ancillary to their actual intent. Like other posters, I think their actual intent was to gain publicity for the 37Signals brand (not Sortfolio).

I expect they will follow through on their original pronouncement by shutting down Sortfolio soon; however, I don't think they ever had any intention to sell it. I think they are smart enough to know that someone with 450,000 in cash is also probably smart enough to know that it was a bad deal. By providing a spectacle by way of flippa, the narrative is now more impressive, they reaped a lot of positive press, and they reinforced their commitment to their core products.
I thought it might be to gauge demand. Why spend a million dollars on an unannounced project only to find out no-one wants it? And if people really want it, they'll put up a few dollars, perhaps.
I guess you should evaluate his ideas for yourself, without bringing his mental state into it. If you disagree with Stallman, so be it, lots of people do for good reasons. But evaluate his ideas, not his personality because his personality should not affect whether you agree with him or not.
Aren't class action suits more of a punitive thing instead of actually getting people money?
This is actually something I think will go away once we manage to overcome sexism in society. There is really no reason for it at all.
If you look around Thingiverse, you'll find that most of the popular and non-decorative stuff is designed in OpenSCAD.

To the original question, MakerGear makes some high quality kits.
It's not just that...

The delay is there to allow you lift your finger and see the link turned gray (or whatever the selection color is). This feedback is crucial even in cases where you tapped on the right thing--how else would you know you got the right thing?

There are valid reasons to override this, but developers and designers should be sure that their tap targets are huge when they do. Otherwise they're depriving users of a pretty important piece of feedback.
I've used https://imo.im/ for a while now. No affiliation other than as a user. The service has worked well for me when I've used it in the past.
I started http://boxysign.com 2 months ago. It is a way to share and sign documents with just a link! It's been profitable from the start - ableit still on a very small scale.
Prestashop Cross-Site Scripting(XSS) vulnerability
Paging through my copy of AC, I think you're right. I'd been a while since I read it. PC is indeed the better book.
Thanks!

Funny thing is that I never play them myself after I've finished them. The interesting part for me is creating the computer player, and seeing if I can make him win more than the human players, I have some stats in Google Analytics that can show me that. Since the computer plays like I would play it's kind of like I'm playing against all the players :)

When I'm testing I usually let the computer just play against itself, add ?autoplay to any of the game urls and when you press Deal you'll see four computer players playing against each other...
store out of pure malice, not because of any law that was violated.

Two things no law broken, no charges filed no lawsuits presented. Pure maliace, hardly more like appropriate response to broken contract.
FYI, some people use NoScript to pick and choose which JavaScript they allow to run.
Unfortunately no.

The Supreme Court has already ruled that this is legal.

http://en.wikipedia.org/wiki/AT%26T_Mobility_v._Concepcion
The law is not supposed to be a lottery. You sue people because something is wrong, not in order to profit.

That said, the evidence is not on my side with that.
>"Binary compatibility" is routinely applied to libraries as well

Wrongly. Only the lower lever is or is not "binary compatible", basically only how the code is loaded and how functions are called.

All the other stuff (libraries, apps) just take advantage of that, and whether higher level libraries exist or not has no bearing on whether a system is binary compatible with another.

Not only that, but a system can have all the libraries that another has, but still NOT be binary compatible with it.

For example, a simple OS X QT app can be ported to Windows with just a recompile, but the two environments are not binary compatible.

Availability of the same APIs and binary compatibillity are two things are what hackers (as in "Hacker News") call "orthogonal".
450 people will result in a savings of $80 million per year? That an average savings of $177k per employee. Even with all the extra costs of employment beyond salary, like benefits and administrative overhead, that sounds like a pretty high average.
I launched a paid version (http://amon.cx/plus ) of my server and web app monitoring toolkit - Amon ( http://amon.cx ) back in February and have made something like $3000. It took me 2 months working full time to build it.
Any sane person does NOT see anything wrong with that paragraph, that is probably a paragraph that will convince anyone that putting such rules is for the best.

Well maybe not everyone, I guess pedophiles will be very disappointed and will play the card of freedom to convince otherwise.
Ask HN: Have I made a huge mistake getting an MBA?
First off, I knew what I was getting into when I was getting my MBA. I had read "Getting Real" and several blog posts discussing the mythical merits of an MBA.

Second, I found that as I looked through my employment and education history all the MBA's that I knew were complete jerks. The incompetency was rampant and the focus was always on the next ladder of their career.

I went ahead and did it anyway - it has always been a goal of mine. I thought I could break the mold. I even went and continued to accumulate other certifications.

I have a great job, but I want to know how to position myself in the future. How do I avoid the trappings of the asshole MBA? How do I write a resume that is not dependent on the MBA/PMP/CSM/PMI-ACP title? Can you think of any examples?
While I agree his analogy stretches it way to far, being in the app store says Apple approves of what you are doing(you know that whole approval process thing.) Apple doesn't approve so it isn't there anymore.
There seems to be some kind of impedance. I'm not suggesting you can avoid using an HMAC and get away with just a hash.

Let's be clear about what an HMAC is. It's pretty much what this article describes, but executed with a specific protocol that avoids exploitable weaknesses in naive approaches.

It is literally:

first_pad = a_constant_block ^ key
second_pad = another_constant_block ^ key
hash(second_pad + hash(first_pad + message))

It's that similar. The biggest non-security consequence is that you have to call your hash function twice. If that is a problem, you have bigger problems. If you are using a secure hash to authenticate a message, you should always use HMAC.

> In practice, attackers just guess the bit length of the message by writing the Ruby script that generates the 100 candidate messages at different expected bit lengths and feeding them to their fuzzer. The bit length issue is not a real one in practice.

You're closer to addressing the real complexity involved in cracking it than the original article. I agree that in principle it isn't hard to break a naive hash-based digest authentication. I'm merely pointing out that it isn't simple.

Also... not sure why they'd have to use Ruby or why that is relevant...

> It is a very, very bad idea to put off fixing a problem like this because you've been led to believe by someone on a message board that MD padding is going to be an obstacle to attackers.

No. It's a very, very bad idea to ever go down this road in the first place. Start with a MAC. If you think you can be more clever than the collective expertise of the field, study cryptography and prove it, but until you've finished studying it, do what they say. History is littered with people who thought they knew just enough about cryptography that they could do things their own way without consequences (WEP anyone?).

In general I'm all for encouraging amateurs to compete with the pros, but cryptography is definitely one of those fields where it can appear deceptively simple to achieve your goals, and it totally, totally, totally is not.
+1. This is truly sad. One can only hope that the more Google kill, the more enterprenours will be unwilling to sell them their project (baby).
You should look into constraint satisfaction algorithms and SAT solving algorithms. With these you can encode almost all logic puzzles meant for humans fairly easily. For example for sudoku you just say that each cell contains a number {1..9}, and that all the rows, columns and blocks cannot contain duplicates. This is usually done with a declaration like alldifferent(cell1, cell2, cell3 ..., cell9), where alldifferent is a built-in constraint in any constraint solver worth its salt. These algorithms usually solve the complete logic puzzle in less than a millisecond.

Note that these are algorithms for combinatorial logic problems/puzzles, not for searching game trees.
GMail does make some direct revenue for Google (ads and paid storage), but it was (and probably still is) their #1 method for onboarding users to the Google Accounts system. And that gets them access to pay for all sorts of Google products. GMail has been key in growing Google's active user base.
Unfortunately bad comments like this leads people into thinking that all or most comments are useless.

It's true that I don't want to see a comment like "loop through this 50 times". But what may not be obvious is the purpose of the loop, the significance of the number 50. Putting in "why" can save hours.

The only exception where I would want a comment that just says what a line of code is for a really complex line, like a complicated regex for example.
I haven't looked in to this particular instance, but in general...

why buy a company that has no significant revenue? It's not like it's some shock to google - "oh no, meebo doesn't make enough money!?"

So... yeah, the services were provided 'free' in some sense, but meebo was able to continue running before this. Just... yeah.. buy stuff, shut it down.

If it's not a significant source of revenue, it probably doesn't take a significant amount of cash to keep it running for another 6 months to a year.

EDIT: I should have added, I understand the logical reasoning behind buying a company for its assets/talent. Doesn't mean it's not annoying.
The real question is, if a site used a salt, was it a per-user salt or a global salt?
That's one of the main use-cases, yes. The worry is that, due to the overhead of filing a suit and little that would be gained from a 1-person suit even in the event of success, a company could deliberately cause many people modest damages, if there were no class-action mechanism. The class-action mechanism is what makes it risky for a company to cause 1m people $10 in damage each, because they could face a $10m-damages lawsuit, plus punitive damages if it was reckless/deliberate activity. Otherwise it would be relatively safe to cause modest damages here and there, because even if you lose a $10 lawsuit with tripled damages, that's still only... $30. So companies could routinely deliberately harm people (if they kept the harms relatively modest) as a business strategy.

There are alternatives; in some countries, the public prosecutors take a bigger role and will prosecute those kinds of things on behalf of the public, instead of providing a mechanism for the public to band together into classes.
Would you care to say why?
You can unfortunately no longer log into an AIM account in Gmail and have those contacts appear like in the blog post you linked to. They got rid of that feature a couple years ago.
You must be new here. But seriously this is a surprisingly fast phase out with no further announcement from the new owners Google. No publicly stated alternatives or transition plan.
Here is a good place to start! I am a front-end guy here with a foundation in design. I am a bit busy at the moment, thus unavailable, but there are many more like me that frequent the board. Good Luck!
Nah, they just want Microsoft to buy bi.ng ;)
I'm puzzled by the references to paper/scissors/stone. Why is "stone" the "most obvious move"?

Later on, the paper states that the game is "well known to be power law distributed". I couldn't immediately find anything online to back this up -- the first hit in google was a link to this paper. Can anybody provide some insight?
Please mail me if you want to integrate kaushik[at]cull.io
http://news.ycombinator.com/item?id=4089186

Earlier submission, with comments already.
Great work! I have one suggestion though. Let users immediately start filling in information and THEN let them create an account. I wanted to try it out, but then realized I needed to put my email in and select a password. Not a bad thing, but you'll get a lower bounce rate if you save the account creation for later.

(Also, this sort of thing would work great with Facebook connect -- you could pull name, education, work history, and phone numbers automatically. Maybe LinkedIn has an API to?)
I would add he is old enough that the appointment would have relatively limited value. In an increasingly politicized court, it might be better for a president to appoint someone with limited intellectual weight who will be a reliable (liberal or conservative) vote on the supreme court for a long time than a brilliant scholar who might step down in a few years, at least from a political power standpoint.
Well it makes sense to limit the number of NYC cabs -- except for the hour of handoff (~5pm) and in particular neighborhoods at night (Theater District, Greenwich Village, etc.), the number of cabs seems pretty good.

If anyone could drive a cab, the profession might only barely pay a living wage, as each driver would get less passengers, and you'd get a race to the bottom -- and the streets would be more congested too.

To me, the biggest question with taxis is scheduling and demand -- how to get extra cabs to the places/times people need to take cabs from, and the fact that this isn't really compatible with people who want to drive a cab on a predictable block schedule.
Now that Meebo found an exit, they ditch IM users who the acquiring company, Google, does not care either.

Nobody could be blamed. But perhaps one thing meebo could do is to coordinate with meebo messenger alternatives to help users to switch.

Personally I use imo.im. I hope it can stay long and focused. At least so far it has a very IM-focused name. :)
US Navy buys Linux to guide drone fleet
Goldbugs and Ron Paul.