skysight-inc/HackerNews huggingface dataset:
You need to explain what you mean by friendly filesystem. As it is, iOS is too complex for a majority of its users.

For starters, they don't understand what a file is, they don't understand what a folder+directory is, they don't understand what metadata is, and they've never had to know what we understand as a filesystem for the last five years in order to use their phone effectively.

You and I could figure out anything Apple offered instantly, and it wouldn't be difficult for them to program at all. But for the 95% of people who conceptually couldn't grasp what it's offering, it's another mysterious button on the screen that is taking them to a place they don't get. It adds to the cognitive load of the experience, adds to the UI, and makes them feel less 'with it' when their son or daughter tries to show them how to use the paperclip to attach multiple photos. They struggle with cut and paste, they struggle with how to search in Safari mobile (YES), they struggle with settings, and even things like multiple email accounts can get unmanageably complicated for them.

Even if the filesystem implementation was utterly neutered and bumpered, it is still fundamentally not making iOS a better product for the great majority of those who would use it. I would strangle for a real filesystem, believe me, but Apple and the market have spoken on this.
That's... intuitive.
Chosen.js has a great UI, but I found it challenging to do customizations to the library. I wish that the authors of the library had exposed more event hooks or built it with more modularity.

Also worthwhile checking out https://github.com/meltingice/ajax-chosen, which adds much-needed Ajax support to Chosen.js.
Google Maps for Android Labs Offers Offline Caching
> Evidence against that thesis is that password of one person that I've asked is not in the list.

Mine isn't in it.
As someone whose job it is to keep peoples' PostgreSQL instances happy, this list is fairly comprehensive, and much of it is good. His advice about configuration directives towards the top of the article, however, is terrible.

In particular, work_mem: the article suggests setting it to 2-3x the size of the largest temp file you see. The thing you need to be mindful of with work_mem is that the limit is per sort. I have a process on one of my masters that periodically regenerates a materialized view. Each run leaves hundreds of mibibytes of temp files. Configured per the article's advice, it's eminently possible to exhaust physical memory on sorts (100 connections each doing 10 sorts, for example). Unfortunately, the Linux OOM-killer is naïve about postgres; it tends just to thump the postmaster. Fun times.

To the contrary, something low like 16MB is the general recommendation. You can tweak that per session, if you know you'll be doing larger sorts and don't want to spill to disk ("SET work_mem = $desired_value"), but there's no need to allocate 100s of mbytes to sort tens of tuples.

EDIT: Heed the advice about transactions under Django. At a previous gig, correcting the default behavior to leave a transaction open for sometimes days at a time reduced the amount of bloat on some hotter, but small tables, by three orders of magnitude. VACUUM can't do its job if there are transactions open to whom the dead tuples it's trying to reclaim might still be visible.

Also important, the bit about IN() clauses. A few months ago, I was given a query that hadn't completed overnight and asked to make it go faster. It contained a moderately sized (but not massive) IN() clause, which I refactored into a JOIN. That was the only change I made, after which it ran in 3.7s.

EDIT: clarification.
Just Landed for iPhone helps you pick someone up from the airport.
Just Landed is a new iPhone app that makes it easy to pick someone up at the airport on time - just enter their flight number and we'll alert you when you need to leave for the airport. We take into consideration your location, current traffic conditions, and real-time flight data to remind you to leave at just the right time.
I can confirm that my password was in there. I have changed it. My password was "98mnja6z" which hashes to 6475590bc1407aa98c8b022230292cce3d8528b3. I used this for no other sites, so I'm not concerned about it leaking.

It is inexcusable that LinkedIn hasn't alerted their users yet.
Did not find my password in the list in truncated or original form. Member since April 2010, did not change my password even once.
This offline maps stuff is just them launching a feature that's been in Labs for the last 6 months or so.
“If we listened to our intellect, we'd never have a love affair. We'd never have a friendship. We'd never go into business, because we'd be cynical. Well, that's nonsense. You've got to jump off cliffs all the time and build your wings on the way down.”
Looks like they've just pushed an update with "calendar improvements"...
Launch within 6 weeks, as a non-developer
When I wrote this I wasn't looking for sympathy. Most hosts probably have nothing to worry about. What's interesting is that my landlord became my Airbnb rival. The internet's magic is enabling disintermediation -- as the tenant, I was the middleman, and my lease gave him a way to cut me out.
A great secondary benefit of this advice is that you're more forgiving to your body. Push yourself to hard too fast and you'll be ignoring the track and back in the weight room recovering from something like patellar tendinitis. (In which case you'll be glad if you have a fallback outlet like swimming.)

http://en.wikipedia.org/wiki/Patellar_tendinitis
She got clients through other means... primarily by writing e-books that demonstrate her value and expertise. The e-books serve as a sales tool for her freelance services -- but they also generate a nice monthly income.

Joanna (my wife) stays far away from sites like eLance, because those tend to be the places where cost-conscious people go to find freelancers. The heavy focus on pricing (by both buyers and sellers) on eLance makes it challenging to sell yourself based on other benefits (like writing copy that actually converts).
Lots of his stories are inspired by his family, hometown, and they all show up here and there in his stories. I always saw him as writing humanist sci-fi.
Ancestry.com Said to Be Working With Qatalyst to Find Buyers
This crashes chromium for me
I don't think it's that much of an issue, really. The problem isn't on Airbnb's end. It's on the renters that are giving up their rental property without examining the contracts that they signed. Airbnb could probably be treated the same as subletting or renting out the property, so any clauses in the lease/association contracts that covers that should cover Airbnb.

The important thing for you, as a landlord, should be to make this clear on the contract. Whether it's increasing the deposit or rent if the renter wants to open up the property to Airbnb-like usage or just not allowing it period, it should be clear in the contract.

EDIT: Airbnb actually does state this in their terms of service:

>Accordingly, you represent and warrant that any Listing you post and the booking of, or Guest stay at, an Accommodation in a Listing you post (i) will not breach any agreements you have entered into with any third parties and (ii) will (a) be in compliance with all applicable laws, Tax requirements, and rules and regulations that may apply to any Accommodation included in a Listing you post, including, but not limited to, zoning laws and laws governing rentals of residential and other properties and (b) not conflict with the rights of third parties
I love ruby and I would like to support any effort to dispel the myth that Ruby is slow.
Sorry where is the list?
This is not necessarily true. Some people rent out the living room couch as well as the spare bedroom. Besides in the second lessee case, the landlord at least gets to vet the second person.
How to use Twitter to publicly humiliate an attempted adulterer
Generally, the shorter time you're staying for, the less invested in the property and community you are. For an example, a guest will on average think less of making noise when coming in late than a tenant who will be having a longer term relationship with the neighbours.
I'd also be interested to see Pypy's experimental JIT compared here (or pypy at all, for that matter).
Is 'change your linkedin password' bad advice?
I'm going to assume the leak is real, and that Linkedin is currently storing unsalted password digests. I'm also going to assume that people will continue to use poor passwords, just different ones.

If a non-tech user changes their password after reading http://thenextweb.com/socialmedia/2012/06/06/bad-day-for-linkedin-6-5-million-hashed-passwords-reportedly-leaked-change-yours-now ("What should you do? For starters, change your password."), have they improved their situation? I think there's a good chance they have not, unless their new password is significantly longer -- which is unlikely. Their situation might even be worse, if the old password wasn't on the list but the new password happens to be. Or just because they're now more complacent and assume everything is ok.

I think people should wait to change their passwords until Linkedin acknowledges the leak and starts salting passwords. Or change to a really long (12-16 character) password. Can experts weigh in on this analysis?
All attractive places to work but not sure any have higher ratios (except Craigslist perhaps, which has its own peculiarities).
https://news.ycombinator.com/item?id=4074288

Your logic works if you only are going to listen to a song a few times, but after a certain threshold, the artist would receive more money than from a CD or iTunes purchase.
One of my favorite Bradbury stories: "The Rocket", in The Illustrated Man. A junkyard owner tries to save money to send his family to space, but can't afford it, so he builds a replica rocket with some kind of 3D windshield display to convince his kids that they are flying through space.
An Open Letter to Zee Kane and TNW Regarding Proper Attribution
Zee and TheNextWeb's writers, editors and contributors,

I apologize for the public nature of this post, but at times it seems a public call to action is the only way to ensure some degree of accountability and a timely response. I am writing to call to your attention the unprofessional (and at times illegal) manner in which image attribution is handled at The Next Web by, it seems, a manner of policy.

Last night I noticed in one of your articles posted to Hacker News that the creative commons image used was credited only as "SOURCES: IMAGE CREDIT", when the photographer clearly states that attribution by name is required for use of the image. I should also point out that this "SOURCES: IMAGE CREDIT" appears only at the very bottom of the post, far from the image itself, possibly causing confusion about what image is being credited without clicking the link. In this case the author of the article saw my comment on Hacker News and corrected the attribution, however it called my attention to a disturbing trend. I noticed that nearly all creative commons licensed images were credited only with "SOURCES: IMAGE CREDIT" and not with the photographer's name. In some cases this may be technically legally allowable since not all copyright holders know to clearly express how they wish to be credited under the CC license, but it does not follow industry best practices, and if not befitting of a high profile and widely read publication such as The Next Web. It is clear from what I have seen that it is The Next Web's policy to deliberately leave out a photographer's name from image attribution unless they are caught doing so.

The photographer whose work was used weighed in on the HN thread and noticed that his photographs have been used by The Next Web without attribution in another 9 articles dating back to early 2011 (original thread here: http://news.ycombinator.com/item?id=4074535). He has requested that proper attribution be given, and I hope you correct TNW's mistake, but my point in writing this is that he shouldn't have to. TNW should have policies in place that ensure proper attribution to sources is given.

So, what I would ask of you, and my purpose in writing this letter, is that you give us, the greater Hacker News community, your word that you will work with your staff to write and implement a policy for proper attribution of images, and that you will provide some outreach and education to your staff on how to properly credit images. In the meantime myself, and hopefully others, will do our best to hold TNW accountable to the high standards that any respectable news organization should be held, by notifying your writers as well as copyright holders when TNW fails to meet those standards.

Thanks for listening, and I'm sure you'll do the right thing.

-rjsamson

TL;DR - TNW has not been properly crediting image sources unless asked to do so, I've kindly asked Zee to look into this and update their internal policies appropriately.
South Korea surrenders to creationist demands
Google Maps For Mobile Gets Offline Maps
LockerDome Secures $1 Million In Funding Over Six Week Round
This has nothing to do with science. It has to do with complaining about a matter of taste, and dressing it up with scientism.
stef25, this is known as key stretching, as others have already explained elsewhere in this thread. Essentially the idea is to make computing the final hash of the password slower by iterating the hash function many times.

This additional slowdown is unlikely to be noticed by a user during an interactive login (hashing the password may take 1ms instead of 1us -- an imperceptible difference to a human) but it dramatically slows down the speed at which an attack can compute hashes to try and recover the password for a leaked hash. It also increases the amount of storage space required for (a naive implementation of) a rainbow table since the attacker would need to store the output for 1, 2, ..., n iterations of the hash function.
Finderous - Multilevel Location based Q&A iOS App

http://itunes.apple.com/us/app/finderous/id520384764,
http://www.findero.us
You say you want to use fear to influence the society of which you are a part, because you think that it's general attitude towards security impinges too much upon your own personal freedom and you also don't trust anyone else to be able to deal with honesty. And so you are actually attacking others who are trying to be honest, for not just ramping up the fear in the direction that you perceive would most satisfy your own self interest.

Remind me where the surgeon metaphor fits into all of this horseshit.
Yep. Same here. No error is being displayed. I am just being taken back to the same page over and over again.
Crashlytics Buys FireTower, Gears Up for WWDC Bash as Post-PC Era Dawns
John Carmack is making a virtual reality headset
Not in programming, which is one of the few lucrative careers where you can do it just as well as a hobby.
Despite the irritating and condescending tone, that’s a good argument.
postgresql.org seems to have the AAAA record.

My linode seems to have an ipv6 address, but I can't ping6 any of the hosts you mention above from it. Haven't investigated beyond that.

My home router doesn't seem to support ipv6. I think my ISP (comcast) does though.
I'm on the fish mailing list and it has been well received by current contribs and the original author. I expect that the two forks will be one at some point.
I just downloaded it and while it looks awesome, I see the rvm problem. I haven't used zsh but I'm assuming from your comment that zsh is compatible with RVM. Seems like it shouldn't be too hard to write a fish version of the script that sets up your rvm environment, but if you've gone down that path and it proved too painful I won't bother. However, perhaps fish + rbenv works. Has anyone tried that?
LeakedIn Passwords Linked
Yeah, memory is important. It's easy to hack, though. The techniques are called mnemonics. Learn and practice a bunch of these, pick a few that work well for you. Eventually they will be very natural to you.
Data Modeling: Sample E-Commerce System with MongoDB
The study was only needed to quantify it. This is obvious to anyone who has spent time in any chatroom.
Dreamhost enables multifactor authentication
Startup Videos Interview: Adam Lisagor from Sandwich Video
Has Microsoft Leapfrogged Apple?
> How could that ever be distributed fairly?

One possibility: http://cabalamat.wordpress.com/2009/01/27/a-broadband-tax-fo...
Last paragraph:

As for what the app will do moving forward: "We will no longer send data from the meeting notes section of your calendar event. There will be a new 'learn more' link to provide more information about how your calendar data is being used." LinkedIn says these updates are already live on the Android app and will be coming to the iOS app shortly.
>> Even if they started with an unsalted password system, users can be migrated to the newer more secure system on next login.

In thinking about this, I wonder if in that scenario you'd even have to wait until next login. You could just use the weak hash as the input to your salted hash function and keep a flag of whether or not you need to 'pre-hash' the password before using your v2.0 salted hash. As users log in you could replace slowly replace the double hashed entries with single salted hash versions and flip the flag.
1 Hour in Square's World
Sure, but why not actively reach out to landlords (and city governments, etc)? Wouldn't it be better for Airbnb and everyone else if both (a) and (b) became less likely to be impediments?

I am in a fairly rare position where I'm feeling that I would actually be receptive to advocacy (and I'm a very stubborn person), but nobody's advocating anything to me yet. I feel like a music publisher in the year 2000 saying "Great idea! What would you like to see in a downloadable music service?"
Yes, I'd be far more interested if the author spent any time analyzing the data rather than dancing gleefully for a dozen paragraphs.
Yeah, even I, a newbie Rails programmer, going through the Agile Rails book learned how to salt. It isn't rocket science.
"You're like a prepubescent teenager who doesn't understand the context of social situations..."

The hypocrisy is so unabashed my brain might explode.
Cool, now if it could do a lattitude like thing and let you know where on the sidewalk they were, that would be epic.
Your comment is incredibly relevant and insightful because the world is black and white and our current regime, which is perfect, is all that stands between us and _The Jungle_. So-called "sensible" reforms to hotel-related legislation and economic freedom in general will only doom us all to accidental cannibalism in our hamburgers.

Seriously, this is flippin' AirBnB, not the slaughterhouse industry. I only asked you to think about the costs, not to roll everything back. Is this a knee-jerk reaction to straw-man arguments which you happen to imagine coming from your least-favorite Republicans, or what?
Mine is also in there. It was also a randomly generated password used only on LinkedIn.
No. I prefer its syntax, but since it is different from anything else I find it hard to remember. So I write my scripts in bash but use fish at the command line. Best of both.
If we can't trust SO for security questions, where do we go to get them answered?
This is cool. I wish it could work on youtube videos. I would like to use it on tunesicles.com!
The description of the automatic collection of surface feature data from flying airplanes in tightly-controlled patterns makes me wonder if their activity has been part of what has been driving the pseudo-scientific alarm over "chemtrails" recently.
1 apple? No.
100 apples? Maybe.
1000 apples? Yes.

You don't even need these "boxes" because you can apply common sense: you are selling a lot of apples. This makes you a "vendor." Apples are food, hence you are a "food vendor." At that point, you have a substantial number of customers.

If the apples you sell are contaminated (by your or a supplier), we need to be able to track down your customers for public health reasons. Hence, the license.

This does not require massive government intervention. That exists because of all of the cruft built up over decades to prevent bad apples (pun intended) from abusing loopholes in the rules.

Food vendor licensing has a common basis with hotel licensing. SOPA is a red herring, as there is no public safety basis that ties it to food or hospitality.
I'm also using this and would like to point out that by default chosen does its instant search using "begins with"-type semantics. To get chosen to do the search using "contains"-type semantics you have to activate a little switch like this:
.chosen({search_contains: true});
which isn't immediately obvious from the docs (I had to sift through their issues on github to discover this).
All About Unicode, UTF8 & Character Sets
I didn't do the math but it sounds right.

But suppose tomorrow it takes 10ms. Also, tomorrow, available spaces will increase, so the likelihood of a space vs time tradeoff (even partial) increases

WEP was considered "good enough" at first (even though it had obvious problems at first like key size), WAP was considered unbreakable at first, today it's feasible with cloud computing or GPUs.

And then we'll be complaining on HN that they didn't use xyzcrypt or something instead of bcrypt.

" it seems to me that leaking non-salted SHA1 hashes is virtually the worst case disaster scenario"

Yes. Salt is password storage 101!
Is it unique enough that you can be sure it's your password, and not someone else's? I ask because the cracked passwords seem to be the simple/obvious ones that are likely to be used by multiple people. If it is strong/unique though, it would effectively confine the hack time to the last 2 days.
Last time I used AirBNB, I rented an apartment, and 1 hr after I arrived the landlord showed up banging on the apartment door, furious, threatening to call the police.

Thankfully, my social skills calmed her down, but now the apartment leasee (lessee?) is knee deep in legal matters. Clearly the lessee broke the lease, however I'm sure she didn't really understand so at the time.

AirBNB needs to be much clearer in the listing process of the possibility and legal ramifications of violating one's lease. Especially since it ends up hurting not just the people listing apartments, and apartment owners, but also AirBNB customers who trust the listings on the service to be legitimate and lawful.
You should consider zlib, it's compatible with everything and has very nice options. Also it's very low in memory usage (around 500KB vs *MB). Check out how pigz implements it with pthreads (one thread per block).
Sorry for the stupid question, but where did you guys find the list of hashes? I didn't see it linked in the article.

Edit: found it in the Slashdot comments, it's: http://www.mediafire.com/?n307hutksjstow3

For the record, my password's hash was not in the list.
Are you going to pretend that there is much difference between owning it and having a license to use it however they want?

Your last point is noted, hence why I do not use their site... It's the most interesting point in that most people never think about it. That's why Facebook is evil.
By 2017, The Number Of Smartphones Will Increase To 3.8 Billion
I'm not a fan of the music playing automatically. The app looks great though!
Nasdaq Setting Aside $40 Million For Facebook IPO Screw Up
Not right away, and not without DRM (i.e. as a portable file). So it can't compete with pirated copies that way.
agree; don't just delete, suicidemachine.org
> If your landlord was interested in running a tenement home/boarding house/hotel, they wouldn't sign you into a year-long lease.

But they aren't running a hotel (their tenant is), so what're they complaining about?

If I was a landlord I'd have no more problem with this than if I was a wholesaler whose customers resold the stuff retail.
Mine is there.

(email me if you need proof)
There are plenty of eng jobs at Facebook that require no PHP. In more than two and a half years there I wrote probably 50 lines of PHP.