skysight-inc/HackerNews huggingface dataset:
I've try to do some hacks today, and the best I can do is to create a fake cursor, and generate click on specific DOM elements.

It's impossible to fake a click on a precise screen position.

The only way I think that it can be done:

- Create a dom selector that will gets all the links and inputs.

- For each elements, verify if the pointer is inside (over) the element.

- Then create a fake click for that element.

I just thought about it, I don't know if it could be viable/fast enough...
The purpose of the NSA strategy is not to decrypt all collected data. Its to store all data collected and decrypt priority data.
OKC Advances to NBA Finals
It's pretty cool that they are putting up the machine time to run queries on the data. I wonder how long it will last if someone makes a popular web app using the census API.
Gattaca: http://en.wikipedia.org/wiki/Gattaca
No more than paying with Paypal is... Meaning, they're not too worried about it, is my guess.
LinkedIn didn't use a salt. Hence the easier-than-it-should-have-been password crackfest.

(However, could everyone please stop making random websites encouraging people to type in their passwords from third party sites!)
I can confirm this having submitted a popular app that was borderline violating itunes T&C. While we never had the honour of Steve giving us a call, PR and product people were talking to us in the background. I expected them to be the toughest app store to deal with but they were really quite good.
"About a week and a half ago I gave up drinking coffee due to the withdrawal symptoms I experienced if I went a day without it (fatigue, headaches). It feels a lot better not to be addicted, but now I'm not sure whether I should resume."

You do realize that that thought pattern is probably influenced by your psychological addiction, which you really cannot say you got rid of in a week?

I should know, I go through it every third month or so :) Sometimes I have gone for a month without coffee, but always that idea, "it's not so bad, everyone's doing it and there's health benefits" pops back. I don't know why we don't call it a (marvellous) drug, really.
Is that a Masonic Chapter? Did that happen before or after they started the alamo?
I agree - but I'd say Google is a bit of an outlier. Many software companies have non-competes with more limited scope by virtue of their product being related to one specific industry that you can't compete with.

So maybe its more of a "maybe you can" thing.
Good point. Thank you for the explanation.
Am I the only one to find a research saying coffee is good for xxxx one day and after a month another research comes and says coffee is bad for xxxx because ...
The Unreal Office Of Nike CEO Mark Parker
Fast Company named him "The World's Most Creative CEO" and so we wondered, what kind of office would someone with that distinction work in? Would it be like Facebook's open plan office? Would it be sharp and corporate or maybe minimal and angular? Would it be something unique & left of field?
Here is a quick example I put together this weekend (using data from their Excel files, not the API - didn't know about it!)
http://babelverse.com/linguistics/funfacts/

Looking forward to many more visualizations and analysis thanks to the API :)
ChartBoot: Embed Google Charts in your site in seconds
And eventually: https://xkcd.com/1058/ (fetus grown from 100% synthesized DNA sequence).
> Google could have just as easily bargained for the same kind of terms that Apple gets on iOS devices with carriers.

Right, and what about the hundreds of other manufacturers of Android phones?
It's more like 800-900ms. Here is a link to the jquery init time on Android: https://docs.google.com/spreadsheet/ccc?key=0Aq_a4WNAMuCEdDd...

I don't recall when this kind soul made this document public, but I believe it was in a similar discussion on hacker news and I've had it bookmarked since.

I have also done my own tests, and the iOS numbers are similar (depending on the device of course).
I can't think of any reason not to salt passwords at this age.
There are new giants! Greg Egan, William Gibson, Charles Stross, Vernon Vinge - to name a few. Also, don't forget Larry Niven and Joe Haldeman, they are still around!
EHarmony confirms compromised passwords
I thought it was interesting that it doesn't look the the favicon was updated.

I think it needs to be reworked for small sizes. It beak and wings look very fuzzy at "normal" desktop resolutions on my Macbook.
Foursquare Gets A New Look: Redesign Makes Checking In Stickier And More Social
Dual Sim Lemon B129 Mobile phone Launch in Malaysia & India
Lemon B129 is Dual Sim GSM mobile phone Launch in India. It haS 1.8 inches TFT Display Screen & VGA Digital Camera as well as other feature of Torch Light, Music Player, 4GB External Memory, Audio Player, FM Radio, Auto Call Tape and Bluetooth. Funzone applications available in this Handset. Lemon B129 is powered by a Li ion battery.
This is sad. DNT is may be a good thing.

Whenever you visit a website with an ad, DoubleClick knows you looked at that article, and uses that to build a profile about your preferences. I don't think when your average joe reads an article that it is fair that their preferences are being tracked in this way.

We should survey the public and ask: "Do you think it is okay that internet ad companies use the type of article you read to target ads that are more likely relevant to you?"

That is a reasonable question that gets to the crux of the issue. Retargeting and profile targeting may be borderline unethical, but Google and I both make good money doing it. I am not sure it is right, but we both have a vested interest in making sure we can continue.
There's no "better / worse" framework. Django and Flask are two tools that try to accomplish the same thing in different ways.

Django:Ubuntu::Flask:ArchLinux

Django gets you 90% of the way from the start, it's in the tagline: for perfectionists with deadlines. However it's difficult to change certain parts of Django.

Flask gives more control but comes at a cost. Each framework has their uses.
Your point being that Cyberduck is not 'native', but people still like it because it gets the job done? Sorry, I'm not familiar with cyberduck but that's what I gleaned from looking at that site.
Isn't that basically Quora's own issue?
The New Twitter Logo in CSS
While it's always good to have people exploring improvements to UI elements, it would be superior to have those improvements show up as patches to WebKit or Firefox or GNOME or whatever else. Native UI elements need the improvements; that's where UI actually belongs.

On mobile in particular, there's a couple of problems with the web-page approach to UI. One, it adds yet more stuff to download that "shouldn't" be necessary just for a page to be functional. And two, if the interface is too desktop-like I bet it'll either behave badly or not work at all on an iPhone (there's a reason iOS' scroller-menu-thing looks nothing like the Mac's pop-up menu interface despite both using Cocoa). Theoretically the second problem could be addressed by code that detects the device type and presents yet another web interface for mobile, but that'll probably make the first problem of page bloat even worse.
There's a New Foursquare, and You Should Care
Probably not. It's important to distinguish the storage of heat and power because the efficiency of converting heat into electrical power depends on how big the temperature difference between your heat source and ambient temperature is.

The easiest way to understand this is the formula for Carnot efficiency: 1-(Ambient temp/Heat temp) which is the maximum theoretical efficiency that can be extracted from a heat engine to do useful work (eg. produce electrical power)

So I don't know how fast this Zeolite releases heat, but let's say it does so gradually so that your working fluid only ever gets to 90 degrees C or 363K. The maximum Carnot efficiency on a 20 degree C (293K) day would be 1-(293/363) or around 19%. And that's the theoretical max - a practical engine would be much lower.

So if the Zeolite can release its heat fairly quickly at a much higher temp it could be useful for power generation, but basically it's more likely to be useful for releasing low level heat again when it's needed.
Let's do some math here, shall we. Oil has an energy density of 45MJ/kg. Water has a specific heat of about 4.2 J per gramm-Celsius. So if ambient=20C and heated water=100C we have 4.2*80 ~= 340 J/gramm => 340kJ/kg. These zeolites are claimed to have 4 times that capacity => 1.3MJ/kg.

Now we have yet another effect: The mass density of these zeolite balls is probably WAY below that of oil. Let's be generous and say it's a factor of 2. That means we would need 70 times the shipping volume of oil tankers to replace oil as our primary energy source. House tanks would need 70 times the volume. Car tanks would need 70 times the volume. Let's put it another way: For every liter of oil you use to transport them, you would need more than 70 liters of these transported JUST TO BREAK EVEN. I therefore heavily question whether this is useful even for the applications they claim. If anything they would have to be used very locally, not much more than the range we have today with isolated water pipers for transporting heat.

So yeah. These funny balls might be interesting for SOME applications, but they're far from being efficient enough for mass adoption.
Agree on Django auth; it's horribly designed - need an extra field - use a separate UserProfile - really? Need to login with unique email address - which EVERY SINGLE client asks for - you're going to go down a rabbit hole. A group/permissions system almost nobody uses outside the admin.

Django auth was designed around the typical use case ca. 2005. The world's moved on a bit since then.

What I end up doing nowadays is roll my own (and re-use bits of contrib.auth where appropriate, such as password hashing) using a custom auth backend and keep a separate site for the Django admin which uses contrib.auth models. As long as I don't have to use 3rd party apps that rely on auth.User I'm fine.
The Daily Ittefaq | বাহরাইন থেকে লাশ হয়ে দেশে ফিরলেন ১০ বাংলাদেশি | News
I'll make one more attempt. I don't think I can explain it any clearer than this:

http://pastebin.com/MYT9kpgZ

Here I model the server as a simple function that takes a password, hashes it, and compares it to a known digest with an '==' substitute. The function returns true or false, but also leaks information about how long the match was, through a simulated timing leak.

This lets me identify the dictionary word that was used as a password using just 23 login attempts, instead of the expected 19300 from a brute force attack.

In effect, you're giving the attacker the ability to perform an almost offline attack, as if they possessed the password hash, by supplying however much of the hash they need.

I don't see how this would not be a security problem, if you acknowledge that testing a HMAC with == is.

Again, this is trivially preventable by using a timing independent comparison.
FREE Shipping-Nike Free Run 3 Mens Blue Silver Nike Free Runs 2012 Sale
FREE Shipping-Nike Free Run 3 Mens Blue Silver runners on Sale, Nike Free Run Plus Running Shoes, 2012 new colorways, Nike Free Run 3 Mens US7-10 trainers outlet!
I've seen FB payments hyped to the moon lately as a revenue solution to Facebook's advertising 'problems' - my two cents are that Facebook is going to completely flop at mobile payments.

I don't think they can execute the product properly, from either a point of purchase proposition or from an easy-to-use perspective. PayPal struggles with complexity, and I believe Facebook's offering will not only be more confusing than PayPal but more complex. The world only needs (and or will use) more payment solutions if they're radically better, I don't see Facebook building that product, despite the user base they can tap into.

I think Facebook is failing to fix the problems in their existing core product, while they lurch forward into areas they have demonstrated a limited ability to deliver on.
Note that it's based on MD5, which is somewhat unfortunate, if unlikely to be consequential in practice.
Rather Than Share Your Location, Foursquare Wants to Suggest One
Not trolling, but didn't we go through this with rails a few years ago and the result was, as usual, it depends upon the context?
I just want to echo want apike is saying. There are several comments here incorrectly stating that this much javascript doesn't matter. It seems pretty obvious that those commenters have no experience developing mobile web apps. Loading jquery is a huge hit, taking anywhere from .5s to 1.5s to initialize, depending on the device and what else is eating up resources at load time.
What do you think they are going to do with your money exactly ?
Cyberduck is a Java app. It looks decent and follows the OS X paradigm of a single menu bar at the top of the screen.

My point is it's possible to do a functional and native-looking app with non-native tools. But of course, not all tools are equal. I was just answering to Java on OS X.
Well you said amateur, I thought that was about aesthetics. :)

I took the time to analyze Top Grossing US without games. I've gotten a lot of inquiries about HTML5 based apps recently, so this was interesting.

#3 MLB, stock; #5 Pandora, stock; #12 MotionX GPS, custom; #17 and #26 comics, slightly customized navigation bar & stock tab bar; #27 Zoosk, faux stock UI; #30 eHarmony, stock; #38 TeleNav, stock; #46 WhatsApp, stock; #52 iTranslate, custom; #68 Nike+ GPS, stock; #72 Camera+, rather custom; #74 MyCalendar, stock; #81 Pages, stock; #83 DC Comics, slightly customized navigation & stock tab bar; #85 Grindr, sotck; #86 Instaframe, custom; #88 Badoo, stockish; #90 Free Music Download, stock; #93, Palm Reader, custom; #96 TurboScan, stock; #97 iMovie, stock where applicable.

Some of the UIs are badly imitating UIKit, like Zoosk. They still often replicate the navigation concepts, UIKit shadows (skeuomorphism), widget sizes … - I don't think the stock look & feel is dead yet.
It's an old sampling, and even with or without wow it makes no difference.

As I have said elsewhere you can go to the dwarf fortress forums and you will find status to be a far lesser motivator than doing cool stuff.

Gaming is studied pretty extensively nowadays, I pulled the first result you get for video games plus motivation. A few further google searches will help illuminate this further for you.
Ask HN: Where to get quality market research data and analysis?
If I wanted to research a specific market are there any good sites or resources you'd recommend?

I'm okay with paying for good stuff.
I still find it hard to believe Apple will produce a full TV set. I think an Apple projector is more likely for the simple reason that LCD TVs are big and heavy. The problem with LCD TVs are:

* They take up a lot of space in store. Having two large TVs set up takes away space from 2-3 iMacs or 4-5 MacBooks. That means only two individuals can enjoy that square footage instead of 4-5. Not to mention that enjoying the TVs actively takes away from the experience of others (A/V noise). How annoying is it when someone turns up one of those iPod docks at a store? Now imagine that happening all the time with two sets of audio clashing with each other.

* Getting them home from the store is a pain.

* "Normal" people would need installation services (wall mounting and/or discarding of an old TV set), requiring Apple to build out their own "Genius Squad".

* Repairs would be a pain. How do you lug a 42" TV to the Apple Store to be checked out by a Genius? Will Apple ship around huge empty boxes for you to pack your TV in to send it out to them? And then you have the trouble of getting it to the UPS guy and then getting it re-installed when it comes back. In-home repairs would be something new for Apple and again would require them to staff up a "Genius Squad".

* Apple hardware generally moves faster than TV refresh cycles. Want the software features of the 2015 Apple TV? Sorry, the A6 chip in your 2013 model can't handle it. Time to throw out that 30-pound piece of aluminum and glass and replace it with a new one.
python -c 'import hashlib; from getpass import getpass; s = hashlib.sha1(); s.update(getpass()); print s.hexdigest()'
Direct links

App Store: http://itunes.apple.com/us/app/id306934924?mt=8&src=af&#...

Google Play: https://play.google.com/store/apps/details?id=com.joelapenna...
Ray Bradbury – Andy Ihnatko
The gist of your comment is that you think they can only create something that's more confusing and complex than what PayPal offers? But they already have given a mockup of their two step simple procedure.
Considering the transport cost and equipment needed, I'm not convinced that would be economically viable...
In Python, you wouldn't reroll your own ORM, routing and templating - you'd use SQLAlchemy, Werkzeug, Jinja2/Mako/whatever.
Resources for online social science
A hash is not a password.

At worst you're giving the attacker a hash target to try brunting. He still has to brute it, and that takes time. Select your plaintext from a large enough keyspace and it's astronomical time.

I'll need to review their policy more closely, but DDG claim fairly minimal tracking. At best someone might be able to correlate hash lookup with some IP space. That's a long way from handing over passwords. And as I already indicated, you could cradled the queries to make the search space much larger.
Add a `from getpass import getpass` in there, replace your password with `getpass()`, and you'll be set :)
> not if you're using sqlite, since alembic doesn't seem to try too hard supporting it.

Because its brand new, written by pretty much one person (I'll give you a hint, it's me), and also sqlite barely supports migrations itself (http://sqlite.org/faq.html#q11). You're trolling pretty hard in this thread, maybe you should let other toolsets besides django have a chance.
Check out LinkJS. That's the project goal.

https://github.com/pfraze/linkjs
Infinite Sightseeing Gems Popularize Air Tickets to Hong Kong
Hong Kong bursts at its seams with infinite attractions, tantalizing resturants, animating shopping and pulsating nightlife. No wonder, thousands buy air tickets to Hong Kong to get swept away in the maddening frenzy of its inundating delights.
I think the considered opinion of "the people in the know" is that getting the code is just not that hard, and the global secret technique offers more illusory security than real security.
No, no, no. You're 100% completely misunderstanding this.

When you search for 'sha1 foo', that query ("sha1 foo") goes up to the server. They know your password is "foo" and that you're attempting to "sha1" it. They don't have a hash, they take that data and perform the hash, then send that down to you.
So, no changing of email without changing the password then?
This wouldn't surprise me.

Given the small amount of money Apple makes from the store I would imagine that user experience is a higher priority for them. It reflects very badly on Apple if their users are able to hand over credit cards to dodgy third parties through 'their' apps.
Good points but I think you're preaching to the choir. The bottleneck is the W3C which is probably bogged with all sorts of red tape and politics.
ASU's 7.4-inch full-color flexible OLED display is the world's largest
I'm a fan of [name] ... [email] (I.e. joe22 ... yahoo). Gets the point across in a safe way.
Am I the only one who looks at foursquare and goes, "Meh?" I know some people love the service (the reason I checked it out was because Woz uses it all the time), but I just can't find a use for it.

Regardless, the redesigned application is really slick by any standards; awesome job to the team for making the UI much better than before (maybe that's one gripe I had that ruined my initial foursquare experience).
Before and After screenshots would be nice...
I'm the guy (from OpenSignalMaps) who found the 3997 Android devices, but I also love developing for Android. I think 3997 devices is very cool and just a tiny-tiny bit terrifying. So I love this post. Buying a low-end device is a great policy policy for two reasons. 1.the market for low end android devices is growing faster than for high-end devices. So if you want global traction that's what you should target. 2. If your device works well in Cupcake at 320x240 it's probably going to be even better on ICS at 1280x720. My three favourite devices for developing: HTC Hero (low-end although actually pretty great), Nexus One (workhorse), Galaxy Nexus (system is surprisingly buggy, but still super fast).
Kids.

They don't have credit cards but are now able to make in app purchases.
It breaks normal usage. Tab to a normal Select, press 'n' 3 times and you get New Hampshire (the 3rd item starting with 'n'). Tab to Select2 press 'n' 3 times and you get nothing.
Headline should be rewritten to include "aims to." I'm not sure how you can claim a redesign does something before it actually does something. This writer's opinion is not evidence that the design is working to keep users around or make them more social.
What you're asking for is awesome, but.... it's really hard to do well. The extra abstraction is hard to get right. Instead a bunch of decoupled components playing well together, you can wind up with a bunch of chaotic components having their dependencies changed out from under them, and seriously raising the barrier to entry for newbie developers who need to figure out how to put humpty dumpty back together again to actually build an app.

Rails 2->3 tried to the general route you're talking about (but still with language API connections, not REST. That would be even harder in some ways) --- with, well, mixed success. And Rails starts out lower level (much less UI built-ins) than django, another thing that would make it even harder.

I've had many failures in personal homegrown projects. :)

Abstraction is hard. To do super high level of architecture abstraction _well_ takes experience and skill, as well as more developer resources. It's easy to go off into architecture astronaut adventures, and you end up spending all your development time trying to keep the parts working together, significantly sapping resources to actually, you know, provide new functionality.

That said, there is certainly such a thing also as too little abstraction and too much tight-coupling too, obviously. There is a happy medium.
The amount of energy you can store in this type of interaction is not very significant compared to other forms of solar storage. Batteries are one class of storage methods, but what's even better is to use solar energy to split water molecules and store it in molecular hydrogen and oxygen (H2 and O2). These can be recombined in a fuel cell to produce water (with no loss in molecules) and produce electricity. A much, much greater energy density, far greater than any existing battery would be in such devices.

Water-Splitting using natural sunlight is a difficult problem and many research groups at top institutions are working on it. The best known group in this field is Prof. Daniel Nocera at MIT. His research is being commercialized by the company Sun Catalytix and there are plenty of YouTube videos of him speaking and explaining his research. There are other research groups as well. The vision for the future is a distributed electrical grid. Each home or building would have a reactor on top that would contain a water-splitting catalyst producing hydrogen and oxygen gas, which can be stored indefinitely under pressure and then released into a fuel-cell device that would recombine to form water (that can be placed into the reactor) and electricity (for consumption). This would be an efficient way to capture much more of the sun's energy than current photovoltaics and is an entirely closed cycle.