skysight-inc/HackerNews huggingface dataset:
Nice little intro. I'll use this material when my son comes of age :)
Here's a worked example of a similar technique I wrote up ages ago:

https://gist.github.com/1051238
There are no non-"idea" patents. By their very nature, patents are there to provide a monopoly on novel ideas. If I come up with the design for a new gearing system and patent it, then you have an idea for a substantially similar system and build it, you're violating my patent. It's all about ideas.
Not sure why this is news. They've existed in Europe for over a decade. i've had them on my VW Golf almost since I bought it (Mirrors: http://www.ecstuning.com/Volkswagen-Golf_VI--TDI/Exterior/Mi...) they're convex, and variable radius. They're great. MUCH better than the "Car and Driver" technique.
The problem is, as usual, regulator - DOT requires carmakers to sell new cars with a flat drivers side mirror.
Re the gut feeling – this is only a problem if the password has significantly more entropy than the hash. So, worst case MD5 (128 bits), this is potentially bad for people with printable ASCII (97 chars) longer than 19 characters.

But it's still not a real problem since 128 bits of entropy is unguessable in the lifetime of the universe (checking 2^64 hashes a second, which is obscenely many – perhaps every processor on the planet dedicated to the task would be enough – covers 5% of the search space in 34 billion years.)
This is a good step, but unfortunately all of the actual passwords are still out there, so they need to be changed.

I think a better idea would be to establish an easily implemented pattern for "password bankruptcy" that companies could follow in the case of a leak.
The plural of anecdote is not proof. Heck, it's not even data.

Heck, the examples you give aren't even anecdotes. They're just name-dropping. One would have to be pretty familiar with the codebases in question and the history of their development in order to be able to give a clear assessment of what, if any, impact dynamic typing might have had on them.
They're using pigz on [1] so they are compressing?

I thought it wasn't a great idea. OK for an on-the-fly solution to the problem but bittorrent or multicast would seem better; the serial route between machines isn't very fault tolerant requiring a start-from-scratch on failure.

socat > nc BTW, and does multicast.

As for ssh, it's a shame the "no encryption" option was removed.
Hacks For WordPress Development
That is an pertinent example because during the 2008 crisis, there was a news report that ships were refusing to leave port because of the lack of certain routine financial documents (letters of credit??). That was seen as evidence that the crisis was spinning out of control.

But even in a worst-case financial crisis, there will still be money! Governments might make mistakes that worsen the crisis, but the governments in control of the important currencies like the dollar and the euro are unlikely to make the mistake of hyperinflating the currency, which is the only thing I can think of that would make dollars and euros almost useless. And in the (very unlikely IMHO) event that dollars and euros and pounds sterling do become useless, such a situation would provide a fertile environment for some alternative like e-gold and bit gold to become widely adopted (even if the alternative have no chance of wide adoption in the present environment) because necessity is the mother of invention and of flexible attitudes.

But that is a bit of a side issue. The main point I wish to make now is that I never said that a financial crisis could not impose massive disruption and massive human costs in the short term. Instead, I gave an argument for why I thought we are unlikely to see a repeat of the Great Depression of the 1930s -- which I will point out lasted about 10 years. And in particular that no matter how misguided the monetary and fiscal policies of the major governments and no matter how greedy and destructive the decisions of the financial professionals, it will take a lot less than 10 years for most of the loss of human prosperity caused by a financial meltdown to be worked around -- because, like I said, one important difference between 1929 and now is that it would take a lot less than 10 years for the people reading this message board to devise services running on the internet tailored to the needs of the captain of the ship, the owner of the goods on the ship and prospective buyers of those goods that allow complicated continent-spanning positive-sum exchanges of value to take place.
You guys are missing the point. It's intended to be used with Pow. This way you don't have to bother with manually starting & stopping servers or remembering ports or whatever. This domain allows you to have access your sites in the same way from any device in your network. Not just your dev machine. Handy! And it works. What's not to like then?

http://37signals.com/svn/posts/3191-announcing-pow-040-with-...
38 Studios files for bankruptcy, creditor targets relocated workers
Same here; maxthon on android.
RIM Blackberry Playbook 16GB Stop Production Gadgets
Can anyone recommend a service/person that can properly install a virtualization service on a Hetzner server?
One more issue...if you login with a non-ec2 amazon account there's no logout link. I end up having to clear my cookies.
It wasn't the method of authentication that was the problem, it was that the stored credentials were inadequately protected against brute force attacks.
I don't have a chromebook but on my chromeos I can press ctrl-alt<F1> to get to a command line. From this I can use the normal ssh. To get back I can press ctrl-altF7. Using this I can use several different TTY to get a couple different ssh connections going. You could also install screen on the remote host so that the session stays live even if the connect drops.
Wow, I completely missed pigz in there for some reason and had to look it up.

I agree with you on all counts though!
In Math You Have to Remember, In Other Subjects You Can Think About It
Flame Malware Makers Send 'Suicide' Code
Reasoning from basic principles is a valuable tool to evaluate conclusions. Sure, it has strong weaknesses (hidden assumptions which are wrong, insufficient imagination about what could happen, rationalizing one's biases). But it is useful, when you dont have complete trust in the quality or the scope of the experiment. For instance, claims about quantum computing solving NP complete problems are legitimately held in doubt because of theoretical reasons. Also, whenever there are short term positives hiding a long term negative, like say unsustainable financial or ecological behavior, the negatives might be only seen by a chain of reasoning and not by direct experiments.

I agree in the sense that we see so many cases in the other direction - reasoning full of holes being trusted over empirics. The interesting thing is in any given situation, how much trust to give to the different tools that we have to evaluate a claim.
The static versus dynamic typing "battle" is kind of from the kindergarten. You need both, similarly as to how both boys need their fathers even though both of them get declared the strongest in the world in turns.

With dynamic typing it's much more difficult to create large, reliable codebases. There's too much implicitness among the interactions of different actors, modules, and programmers.

With static typing it's much more difficult to create any codebase. The exploratory nature of programming means that you will have to constantly change and redefine the static types, signatures and interfaces.

What you want is a language where you can start prototyping dynamically and later on when the APIs stabilize gradually you can then stamp static type checking on top of them for cementation without actually having to rewrite anything, possibly in another language. When you can selectively force a freeze on a certain piece of code or API then you can gradually move from dynamic to "static enough" typing as the part of your development process.
Perhaps thinking about it as an optimisation and not a standard operation is not the best way to look at it.

For example 99% of the time I want a binary shift and not a /2.In a dynamically typed language 201/2 will give you 100.5 when you'd prefer to keep it integer.
Really? Has there been that much criticism from the science community? I though everyone with respectable opinions thought it was handled exactly like proper scientists should have handled it.

OPERA had unexpected results contradicting the status quo of our understanding of fundamental physics. They did everything they could to determine and correct and calibrate possible errors. They published the results and methodology in hopes that their peers could either help them understand what went wrong, or confirm it. An they did (the former).

I saw it as the science community at its finest. Sure, there was a lot of skepticism and disbelief in the accuracy/correctness, but that is part of the game. You don't take things at face value, and you don't ignore unexpected results.

-----

So, I don't have any objection to what you wrote, but, is my impression wrong?
Does anyone have any idea what kind of salary a mathematician in NSA can expect? Unfortunately I'm not a US citizen, so I cannot apply, but I'd like to compare it to what they would pay me in my home country.
37Signals - Please give Sortfolio to OpenDomain
Humanoid Goes Swimming, Last Moment Robot, and R2D2 Sells You a Prius
Yeah, we did. http://meta.stackoverflow.com/a/132677/6212
I wonder whether they are actually measuring the right thing here. I think the real value to static typing is not so much the initial development of small (tiny, in this case) programs, but rather large systems that have long lifetimes and maintenance periods involving multiple developers.

I just started diving into Ruby. I'm about a month into it, after having spent over a decade doing Java and other static languages. The productivity boost for new development in Ruby is very real; I converted a 10K LoC java program to < 1K LoC Ruby in about a week, despite not knowing the language well at all. It almost feels like a "runner's high" to be so incredibly productive. But there are several things that I find frustrating about dynamic typing.

In dynamic languages it's very hard to navigate existing code and libraries. In Java, you can click on a variable and instantly navigate to its declaration and class definition. In a well-configured environment (say Intellij + Maven) you can even click on imported libraries and drill right down into their source, even the JRE. It's totally natural to know exactly what a method takes as arguments, and what it returns.

In Ruby it always feels like a mystery. When you ask the IDE to jump into a library, it pops up a dialog of 20 choices and makes you guess which one to open. It feels like the old days of running find/grep over the source tree. And if you somehow manage to guess correctly and find the code you're looking for, you often have to read the comments (if they exist) to figure out what it expects/returns. I'm sure a lot of this is due to my inexperience, but code navigation is really painful in a dynamic environment. I can only imagine how hard it would be in a non-trivial project after a couple of years with a few different devs.

Of course refactoring is way better in a static environment. Even if you throw out the IDE, you can more or less instantly find where a piece of code is used by simply renaming it and recompiling to see what breaks. In Ruby you have to rely on tests for that kind of thing, instead of getting it for free from the compiler.

Don't get me wrong- I'm excited about Ruby, and I think dynamic languages will play a major role in the rest of my career. I just wish that code navigation could be better.
Great resource! Where's that source code/content on github? Link seems to be invalid (no link at all).
This site might not add anything, but it's not blogspam. It includes the full text of the press release. Blogspam is like this: http://www.reastech.org/best-android-phones-available-today/ It just gives a piece or a summary of the article (so they can't be accused of copyright infringement) and is only meant to funnel your eyeballs past their ads.
> 4. If, like last.fm, you were also allowing third-parties to authorize users...

... then you should stop doing that and you should start using OAuth, so the client application never sees your user's password.
I agree with the GP. I'm currently planning out a migration to EC2 for my company and having all this information in one place would be a great help.
Might be newer and better alternative, but I'm a fan of Logo as a learning language for kids:

https://en.wikipedia.org/wiki/Logo_(programming_language)
As long as you're collecting feedback, please have the console default to an interesting page. 98% of the time I'm opening it, I go to look at the instances tab. Then I experience a brief moment of panic when it shows I have no instances, because it shows some region other than the one with my servers.
Quite the contrary, the term "anti-competitive" is entirely correct here. Abusing the patent system to unfairly crowd out legitimate competition is no different than abusing tariffs or other legal constructs to achieve the same goal.
Consider the possibilities: (1) if the key is captured by the attacker the system is just as strong as SHA256, (2) If the key is not captured by the attacker then the system is as unbreakable as AES.

Many of the attacks that lead to password hash exposure involve a SQL injection that dumps the password table. If you store the password in the source code an attacker must then capture both the source code and the hashes. Furthermore, if they leak your key, you learn that they have gained access to your source code.

I agree that this is a less than ideal system. My point was not to design a better system, but to point out that composing permutations with a secure hash function is at least as strong as that secure hash function. If you disagree consider the identity permutation. Really you'd want to implement it like SHA256(AES(key,SHA256(password|salt)).

If I wanted to design a better system this is what I would do. Put the hashing system on a dedicated box that maps passwords to hashes. To compromise the hash key an attacker must compromise your hashing box and your database. Locking-down a box that performs only one action, hashing, is significantly easier than locking down a complex web application.
Sorry about that, put it in, but it's:
https://github.com/karlseguin/the-little-introduction-to-pro...
Kata Motivasi Bijak Penuh Makna
Funny, when I was a student and worked at a hardware store that was almost the exact example they gave as encouragement. You want the customer to trust you and the store and so most of the time their projects start with a box of nails. Do they need the tinpenny, concrete, roofing, anchor nails, or tacks? Most people who know what nails they need don't bother you. But the guy/girl starting on their first renovation or garden are practically begging you to take their money. Personally, when I step foot into a hardware store it's a given that I'm leaving with $100 worth of stuff.

Now a better example would be consumer electronics. It's expensive, most people don't know what they really want they read some review in engadget, and the margins on the name brand stuff is extremely low ($5-10, on Sony TVs for example).
Im in the same boat, got laid off when the company ran out of money, haven't yet found anything decent.
LinkedIn, eHarmony, and Last.FM hacked - How to not be the next victim
Here's the best explanation that I've seen:
http://www.reddit.com/tb/fjym4

And what do you mean "spacetime doesn't necessarily have to obey"?
The scope of the study also seems suspect to me. From the paper:

"The introduced study is a relatively large study with 49 subjects and required for each subject approximately 27 hours pure development time. Including the teaching time for each subject, between 43 and 45 hours working time was required per subject."

If I were working on a software project where I expected 30 hours of development work, I'm not sure static vs dynamic typing would matter at all. I'd pick the language that would get the job done in 30 hours.

I'm surprised this was accepted in a peer-reviewed conference. I'd give this study more credence if this involved the same number of subjects working on or inheriting a much larger, longer-lived code base. Though, based on the subtitle of the paper, it sounds like the author could be convinced otherwise.
Isn't the fact that s/bcrypt is by design costly preventing this idea from being executed?
The question isn't absurd from a lay persons point of view and the explanation falls short.

What Cushman means is a number like Pi is always 3.14159265, to us or to hypothetical aliens. Whereas the speed of light can be just effectively represented as 299,792,458 or 1 depending on the units you use.

What you are effectively asking about ck2 is calculation of dimensionless physical constants which are of ratios of like-dimensioned physical constants, for example the fine structure constant. These could in theory be calculated one day without using experimentally derived values . . . maybe.

The wikipedia page on the physical constants has a good run down on this: http://en.wikipedia.org/wiki/Physical_constant#Dimensional_a...

As does: http://en.wikipedia.org/wiki/Fundamental_physical_constant
Not at all, that study was not well conducted, it compared people just learning to program with people that already had experience, in a time when programming was much different from what it is today... Just go read the damn paper...
> Even if it was, we don't typically give out patents for mere solutions to novel math problems.

Actually, we do give out patents for solutions to problems that involve math (the soluions involving math). Those patents do not cover using the same math for other problems.
It should be noted that the AES-NI TLS speedup only occurs if you are using AES. If you are using RC4 (Google and Facebook use this), you won't benefit from the new cpu instruction. Here's another useful TLS benchmark I came across:

http://zombe.es/post/4078724716/openssl-cipher-selection
Doesn't say that in this thread! (prior to your reply)
Slave cloning is performed by shutting down mysqld on a standby slave and copying its raw data files. There's no dump involved. This is widely regarded to be the fastest possible way to clone a slave in MySQL.

This is explained in the deeper doc files -- didn't want to bog down the top-level README with implementation details.

Meanwhile, data exporting (for shard splits or table defragmentation) is done on a standby slave with replication stopped.
20 Apps, 20 Teams from New Rails Developers
The car-analogy is false. Or did you get your car for free and will it be replaced with a better car next month?

From his video: "Actually one of the core values of Facebook is is "Move fast." And we used to write this down by saying, "Move fast and break things." And the idea was, unless you are breaking some stuff you are not moving fast enough. I think that's still basically true. I mean, right now, we've optimized so much of our culture around just making it so that people can come and build things quickly. Right, whether it's everything from having the right tools in the right development environment to build things quickly, to nightly code pushes, hiring the best people who have a bias towards just pushing things very quickly, very entrepreneurial. The whole culture is tuned around that. And I think there's probably something in that for other entrepreneurs to learn which is that making mistakes is okay. At the end of the day, the goal of building something is to build something not to not make mistakes." http://www.sweetspeeches.com/s/1889-mark-zuckerberg-moving-f...

I didn't think anyone would argue against it as it's how most startups build. Besides software is never 'done' correct?
Thank you for the clarification. So current x86 desktop apps won't run, but some might be retargeted and they would work.
website: http://OpenDomain.Org

Not sure if my website will be able to be able to take the hit, so I will copy the story here:

Dear 37Signals,

Please give Sortfolio.Com to OpenDomain

I have been a HUGE fan 37Signals and when I heard you were looking for a new home for it, and had not received any offers for it, so I would like to ask you to donate it to OpenDomain.

OpenDomain is "Open Source for Domains" - we give domains to Open Source groups for FREE! We are the ‘Anti-squatter’

We gave Drupal.Com to Dries Buytaert: "OpenDomain's generous donation will enable us to extend Drupal's presence and facilitate continued growth of the Drupal project. We are very grateful for this contribution."

We gave Ecmascript.Org to Brendan Eich, OsCon.Com to Tim O'Reilly, Xmpp.Org to Jabber, FosDem.Org to the Free and Open source Software Developers' European Meeting, and Schema.Org to Google and dozens more.

We have NEVER sold a domain - we give them to support Open Source or charities.

We promise to give Sortfolio.Com a good home and will give 100% support to everyone that uses it. We will never sell it - we will use it to promote open source.

P.S. We also own Ohprah.com and OMagazine.com that we would love to give to Oprah Winfrey - if anyone would let her know, we would be very grateful!

Update: we have also been featured on Linux.Com for another high profile domain we donated
You're being sarcastic right?
You could create something on this model, but you're not going to get 5-10% of shares without opening your wallet and you'd be hard pressed to put together a group that is as engaged as YC.
These photos to me show that we are in the age of hardware, where the cost of producing high quality images of this caliber are possible by a dude, with a truck, in Australia.
Swiss Supreme Court eases terms for Google's Street View
The original generated lots of discussion 8 months ago: https://news.ycombinator.com/item?id=3029922
Good luck!

Let me know if you see anything and I'll grab it first!
Pipe Dreams in Ruby
Assuming you use 0.01s per hash settings, you can upgrade somewhere around a million accounts per hour.
I didn't get it but I changed my password as soon as the leak was announced. When I logged in this morning, there is an "announcement" that says "Important notice about password security" that leads to a blog post here:

http://blog.linkedin.com/2012/06/07/taking-steps-to-protect-...
The idea is you do this before the password database is stolen. It's too late for LinkedIn, but not too late for you.
Sorta, but chances are you'll be generating way less then an attacker would need to do. More importantly, you owe it to your users to keep their passwords secure.
Do you know of anyplace that quantifies the actual performance difference of the different ARM versions? Just want to see the general improvement jump over time
Ask HN: Do you think Ubuntu has lost its way
Recently Microsoft Azure started supporting ubuntu and Mark shuttleworth praised microsoft, does Mark shuttleworth stand has shifted towards capitalism and forgot how often microsofts threatens GNU/Linux with patents.
I would say network with developers/contractors that don't want to do that work. Let them bring you in mark up your services and everybody wins.
I wish Facebook would just go away.
HTML 5 - online course with 17 free videos
You can scapegoat groups or individuals, the word itself applies in both contexts. If you want to find examples of scapegoating of individuals in India, then that isn't particularly hard either. Not that India is special in this regard.
I'm really glad that the guy who picks up my garbage doesn't do what he loves full time.
Thanks for pointing that out. For some reason, when I read it earlier, I missed the bullet point about the conversion process.
For me one of the worst offenders, given theaudience and content, is HN.

This story for example - http://news.ycombinator.com/item?id=4077891.
Hmm thanks, I'll look into that too :)