skysight-inc/HackerNews huggingface dataset:
Methinks Apple's brilliant insight (other than profound supply chain management) is: specs shouldn't matter. Specs are an excuse for underwhelming performance.

Author touches on the point with “People don’t want to buy a quarter-inch drill. They want a quarter-inch hole.” Apple is doing what it can to ensure that users don't care about specs; the just want X done. Retina is a good starting point: the resolution is now so high that nobody will ask about pixel count - whatever it is, it's better than users' eyes. Likewise with other specifications which Apple is straining or succeeded at making irrelevant: iPad battery life is "charge at night, use all day", MacBook Air size/weight so low it fits in a manila envelope, pervasive use of wireless so cable compatibility is nigh unto a non-issue, progressive elimination of files & filesystems, instant-on behavior ... all vs. competitors' "no, really, it's good enough" specifications of "5 hour battery life if you're careful, 6 pounds and hope there's enough space in your briefcase, USB/Firewire/Ethernet/PS2/Centronix/RS-232/eSATA/XYZPDQ/OMGWTFBBQ ports, don't forget to put double quotes around the file path, 90 second startup..."

Users don't want to ask "is X compatible with Y?" and have to learn technical obscurities about what that question means. They have X, they want to get Y, and put together they should just work. Forget specs - if my mother-in-law has to know about technical specifications, the manufacturer did something wrong.
Google Trusted Stores Program: $1,000 Lifetime Purchase Protection
s/secure/crack.
What?!

This means next leak will be one million CRC32 password hashes?

Or maybe LM hashes. Or crypt on old /etc/password files
This is absolutely true. The opportunity to disrupt insurance is massive, and at this point, almost a certainty.

Through Leaky, one of the things that we've always liked is that there's room for disruption in all parts of the spectrum. Customer acquisition, retention, quoting, pricing, binding, billing, etc ad nauseum. You can even decide if you want it to be B2C or B2B.

For us, we've focused on 1) simplifying the comparing and ultimately the purchasing of personal lines insurance (auto, home, life) and 2) creating a real-time (truly real-time; not the "we'll call you back in 5 minutes" model) commercial insurance comparison and purchasing platform.

There are a lot of headaches to disrupting insurance as an industry, namely there are a lot of regulations and a lot of litigious parties. However, our view is that mounting public frustration (for all forms of insurance) and the current lack of software-based solutions make insurance a ripe industry for disruption.
Suddenly It Feels Like Google Is Actually Going To Buy Twitter
Excellent points. From a practical perspective not every website is going to get into the game of cryptography but its trivial to get into the game of salting. The fact that places like linkedin don't salt doesn't mean our algorithms are bad, it means the kinds of people who built the system there are bad.
Git-based backup with bup
Riot reported at Apple partner Foxconn's Chengdu factory
You're very welcome. You could also extend this to asking for email adrs to send an alert: "New items are up!".
Portland Seed Fund graduates new class of 9 startups
Last.fm sounds like the canonical example of a site that where it makes absolutely no difference if your password gets exposed.

Worst case, some malicious individual on the internet will learn that I still like the Beastie Boys, even though it's not 1994 anymore. And possibly they'll listen to music in my name.

This is why one has a throwaway password. For throwaway accounts at throwaway sites like this. Getting your throwaway password thrown away should by definition not be something you worry about.
This was funny, and I laughed, but the irony is that old Unix crypt(3) is probably better than MD5 or SHA1.
You can subscribe to notifications on http://status.heroku.com.
Interesting concept - I think a little more 'value' on your homepage would work for me -- it is beautiful and sleek, but not enticing enough for me to leave my email, because I don't see what it is...
To the contrary: "retina" is the opposite of specs. Resolution is so high users don't care what it is; like weight, size, and battery life, screen quality is now so good nobody cares what the numbers are because it just is.
to remove ALL CAPS you download this extension from visaul studio gallery: http://visualstudiogallery.msdn.microsoft.com/a83505c6-77b3-...
It can also make menu lowercase or even hide it altogether.
It would be very foolish, but I do wonder if they used Hadoop to compare their hashes with publicly exposed hashes after breaches of other sites (for example, Gawker or Zappos) in order to force reset affected users.
I feel like a lot of speakers nowadays, especially those at technical conferences, are aware that people just split their attention between presenters and their gadgets.

It's good to be aware of your audience, but not overly so. You can derail a good talk by misjudging your audience and making yourself look overly self-conscious and awkward.
Does anyone have a dump of the hashes?
Apple has the best hardware-software-service integration in the industry, bar none. So the fact that the new device wars are now actually fought not on hardware specs but on vertical integration accords Apple a unique advantage.

Apple's secret sauce is this realization: That customers want their problem solved, and the way to deliver that with personal computing is through vertical integration. I'm not sure anyone else gets it yet, even Microsoft and Sony, which already have retail stores.
Barnes & Noble Argues Book Settlement 'Punishes Consumers'
My mistake. You're right. There is ZERO SIMILARITY between the author's account and my experiences. None whatsoever. How foolish of my to question a comment written by a person on a web page.
Ask HN: I'm 15 and am looking for a long-term gig
Hey there,

I'm a 15 yo passionate developer. My primary interest is in Ruby, Rails, NoSQL (Redis, MongoDB), modern web (HTML5/CSS3, new standards), semantic web. I'm also in to discovering new things, whenever it is Scala, Clojure, Erlang/Elixir, or anything else.

I've also been freelancing for past 3 month (my rates are quite good, varies on the project, $60-80 a hour) but currently I'm left with no projects. Any freelance gig posting I'm facing is either somewhat boring, uninteresting or something really low paying (like $8/hr). As the result, I'm looking for a long-term exciting freelancing gig or something like a remote "job".

My goals are to participate in building of the awesome app (preferably back end stuff) and enlarging of my experience. Money isn't primary for me, tho I'm not willing to work for $8/hr.

Anyone would like to hire me for the project?

Some of my background:

* started coding at the age of 9 using PHP, soon migrated to Python, then to Ruby

* am not into open source yet (though I'd very like to)

* experience in Ruby

* passion to technology and new stuff

* desire to build great things

Thanks.
Well, the Gawker hack was DES IIRC.
This is awesome! Also, I was at MySql event at Oracle two days ago and I overheard MySql guys talking with the pinterest folks about their sharding and how MySql team was going to announce something soon and wanted to get the pinterest's team feedback.
MySql is doing their scripting on Python. So for a python shop, their release might be more interesting.
Or perhaps some eHarmony and LastFM employees used sensitive passwords for their LinkedIn accounts.
I love the anecdote (and loathe working with that stereotype), but don't think it applies here. We're not exactly drawing a box labelled "DATA", one labelled "SERVER", and drawing a line between them: these protocols are significant, incompatible implementations that do almost the same thing internally, and interact equally as badly with the remainder of the stack externally. To say the similarity is only superficial seems inaccurate.

It's a bit like redesigning a car from scratch just because you need snow chains for certain roads, and upholstery covers for certain passengers.
FWIW I believe the original promess of color, creating on-the-fly location based social networks, was a game-changing concept. It's bad they did not stick with it despite a failed launch.
I think that the site is just down. I can't get it either.
I don't see how that's different from what I'm saying. The seeds did accidentally get mixed into his own. Whatever steps he took afterwards to isolate them, plant them, etc. is just using the seeds.
They'll get your username, they might crack your password.

Do you use the same password/username combination somewhere else? If not, good for you. You're kind of a rare person.
Shouldn't Monsanto collect royalties from the plants themselves, which are the ones doing the copyright infringement when they pass their genes along to their offspring?
Flutter (YC W12) Raises $1.4 Million For Gesture Recognition Tech
How is this - or is it - legal?
Note that getting the client to send only the hashed password is incredibly silly. If there's a leak, the hackers do not even have to crack those passwords.
What if you want to get rid of the username field altogether?

For example, my typical use case: unique email address for logins, no usernames:

I suppose you could subclass User with a longer username, and sync the username with the email address using a signal, for example.

Still, it's a chunk of workaround I end up doing one way or another with each new project. Hopefully soon (based on discussions on django-developers group) we'll see some kind of pluggable User model.
> I can't help but feel that these people will someday look back and have great pictures of these events but no memory of them.

Their phone is their memory of it. We are outsourcing part of our brain to our devices. This is lamentable, but probably inevitable.
Scott Hanselman also got Tim Clem and Phil Haack talking about this on the recent podcast, http://hanselminutes.com/320/developing-github-for-windows-w...
Scvngr finds $12 million more to support LevelUp mobile payment product
The cost varies and we often pick cheap destinations, so it ends up being less than you might think.

Jet lag can be a drag for the people going transatlantic and you do have overhead at the location - getting setup, shopping / cooking, figuring out where you are and what to do in the evening.

But all travelling together, and solving those problems is part of the fun and team-building. We all look forward to the trips and enjoy the planning process, so it's not even just about the focus benefits on the trip itself.
Actually, not telling them may be illegal too.

This isn't legal advice, but as someone who worked when I was a teenager, parent consent may be required, so then they'd know you are a minor.

Under US Federal law, it is illegal to work under the age of 14. 14 & 15 can work but only during non-school hours. 16 and older are fine, but under the age of 18, parental consent is required.

Taken from: http://www.dol.gov/dol/topic/youthlabor/agerequirements.htm

The illegal-to-them comes from hiring child labor without the proper consent or regulations met.
Why Your Content Marketing Header Should Be Like a Gossip Newspaper
Three Steps from Paid to Freemium, by Rovio's Michail Katkoff
Amazon has a great vision, others are just afraid about people "stealing" their content. Probably companies need to be educated in this area
How much would corn cost if the completely insane policy of diverting large amounts of it to ethanol production?

It may be insane from a purely scientific point of view, but that doesn't tell the whole story. If you recall from around the 2006 timeframe, before the energy policy changes, we were swimming in corn. It was coming out of ears, sitting in massive stock piles doing nothing, and more was coming in each day. Even if you say ethanol is ultimately energy neutral/negative, it was still energy ripe for the taking.

Now the problem, even if you take away the subsidies, is that corn is still an important crop in a grain farmer's rotation. Looking back on the 2006 timeframe again, you might remember the farmers here in Canada losing their shirts over their corn production (we don't have the subsidies). But they still grew it, because there was no reasonable alternative. Not even leaving the fields fallow was an option, as the banks wouldn't hear of it (a loss on corn is smaller than the loss on no crop at all).

I've heard some suggest that farmers grow other crops instead of corn, which sounds good in theory, but those other crops require additional multi-million, even multi-billion, dollar outlay of new equipment and infrastructure to get started. Farmers are already operating on thin enough margins that it is financially impossible. It is cheaper to just take a loss on corn for the year.

It is just not clear to me what the alternative is, especially to maintain sustainable food production of other crops. It is far more complex than just the science of ethanol.
Two more risks: net neutrality and data caps.

If cable companies were to ever concede a direct-to-consumer offering from HBO, you can bet that HBO gets a smaller share of the cable subscriber revenue.

Without legislation protecting competition, the cable companies can easily stifle online competition with data caps and violations of net neutrality principles... this is likely because it is in their economic interest (albeit, in a subtle fashion) to do so. My guess is that HBO understands how much this would hurt their bottom-line just as well as SONY does[1].

Lesson: lack of broadband competition harms the consumer and stifles innovation.

[1] http://www.theverge.com/2012/5/2/2993265/sony-iptv-plans-com...
cool. do you still have that source? something to show your grand kids for sure :)
I have over 150k songs scrobbled to Last.FM and have been a member since 2005. I actually can think of very few other services that I would care as much as if my Last.FM was compromised/deleted.
> The best solution is to save the whole page, and annotate the bit of interest.

Agreed. That's definitely something I'd love to see Gimme Bar do: in addition to showing me the quote I pulled out of the page, also give me the option to see the full page, with the text I quoted highlighted.
A beautiful piece of software and a great help for those of us that loathe the command line. I was just looking through GitHub today trying to figure out how the look was achieved since I couldn't find any Metro controls in VS.
WWDC 2012 Photos
Open source projects, camps, etc. I wouldn't exactly say that I'm bad with people, but rather that I lack ... leadership skills.
The US border agents claim the ability to set up checkpoints as far as 100 miles from the border, as I recall. And they use this power. I live in Canada, but driving through Vermont I've seen "border" checkpoints located several hours from what you or I might think of as the actual border.
Fake 'Angry Birds' Developers Fined $78,000
I like using OpenID. I just use my domain name as a delegate and point it at my current OpenID provider of choice for authentication (which is currently my Google profile; used to be myOpenID 'til they went down for 1/2 a day). As long as I retain my domain name, I can control authentication, even if my current provider were to be compromised (just point my domain name/delegate at a different provider).

The problem, of course, is a lot of sites still don't support OpenID.
Paralyzed Man Regains Use Of Hands After Having Nerves Rewired
Educational tool cum Scala IDE which uses Scala to teach math, programming
ROT13?
NO POPERY HERE,?
ASK HN: A company I worked for owes me a paycheck, and now refuses to pay.
I recently left a job with one paycheck still in the works. Now, HR is saying they are unwilling to pay since I left after only a couple of months. No part of my initial offer said anything about length of employment.

What should I do?
You seem like you know what you're talking about. Why do you think the average live-blogger uses something like Twitter over a video app like Color? It'd take just as long to sit through a live-blogged session as it would to just watch an audience video of the same event.
I also think the idea that you can sue someone just for seeds that blew in is absurd. But as far as I can tell, that hasn't happened. In each case where someone was sued by Monsanto they were alleged to have deliberately tried to save only the GM seeds. And of course they denied it and said that it wasn't deliberate, but what they were charged with was deliberate patent violation.
Even if you don't use the same username, if they have your email, those are fungible with usernames on many sites. (And of course game over if you use the same or similar password for Last.fm and email.)
Chrome For Metro Set To Arrive In Next Dev Channel Release
interesting to me to see the parallels between music and books. seems that music has always been a bit ahead on the innovation curve for a variety of reasons and we're just getting to the itunes for books (eg, kindle), now...
Curious choice of title since it doesn't really tell if Facebook is doing better or worse (although the tone hints worse). It could as well mean 70% of users are using it more.

From the article we see that the actual results are:
- 34% use FB less than year ago
- 20% use FB more than year ago
- around 50% use as much as before
Who actually lost their LinkedIn password?
A lot of commotion around the LinkedIn hack - anyone here actually got hacked?
It depends if your goal is to have security for everyone right away or if it's to only use one hashing function. I don't see anything wrong with a round of SHA1 in your setup, especially when it allows you to secure everyone's password immediately...
FX and AMC don't really offer streaming of their shows either

Aren't all their shows available on iTunes, Amazon, etc.? I would also expect them to be included in TV Everywhere when that manages to fully roll out.
It matters because there was a failure and it could be in a technology or service you also use.

It matters because many users re-use credentials.

Scenario: You send a confidential email to a colleague, colleague has her lastfm compromised. Attacker scripts up logins against all common sites - including her Gmail account where you sent your confidential email. Script not only logs in and changes password, it also forwards to her friends and family all the emails containing some target phrases - including your confidential one.
Could data scientist be your next job?
Your question is confusing. Are you under the impression that Apple has somehow gained legal protection for all aluminum clamshell laptops of a certain colour scheme?

It's a laptop. Why wouldn't it be legal?

On a vaguely related note, the plaintiff lost in both Apple v. Microsoft (35 F.3d 1435) and Lotus v. Borland (516 U.S. 233). It would appear that you can neither patent nor copyright Look and Feel.
Dear Heroku: Quit blaming all of us when you fail. Do this instead…
More probably the same mindset regarding security. I wouldn't expect a company that stores unsalted passwords to invest much in security elsewhere.
You have to tell them your age at some point. In Germany there are restrictions in place to protect minors disallowing them to do certain kinds of works and restricting when and how long they are allowed to work. You really don't want to break those laws and not just due to legal repercussions. I would be very much surprised if the situation would be significantly different in other (civilized/industrialized) nations.
Yup, agree! We'll add the manifesto there in the upcoming days :)
I think Apple could easily win a tradedress lawsuit against this device. It's not legal to exactly copy the design of another manufacturer.
I can think of an extremely simple experiment that can be run on a field of unknown corn to determine if it is Roundup ready, in a few hours, with only the loss of a couple of corn plants and less than a teaspoon of Roundup.
IP Whitelisting in Django with Django-mithril
Why is it when people say things like "lack of respect for [insert language here]", it's always to defend their own lack of respectful behavior towards, you know, actual human beings?
> vs. competitors' "no, really, it's good enough" specifications of "5 hour battery life if you're careful, 6 pounds and hope there's enough space in your briefcase, USB/Firewire/Ethernet/PS2/Centronix/RS-232/eSATA/XYZPDQ/OMGWTFBBQ ports, don't forget to put double quotes around the file path, 90 second startup..."

Not to mention the PC MacBook Air clones, which in addition to questionable battery life, screen resolution, etc., ALL fail to have an actually usable trackpad. They've tried to emulate various multitouch gestures, but it all feels absurdly clunky and impossible to actually use. I tried one in a store and every time I tried to scroll with two fingers, it would intermittently zoom in like crazy. When it did actually scroll, it was laggy and choppy.

I know this is a bit off topic, but seriously, does anybody know what is up with PC track pad drivers? Why are they so laughably bad. Actually, it's not even laughable it's so pathetic... I'd cry (if I was a PC manufacturer).

Seriously though, I'm genuinely worried/curious about this. I am still looking for a Windows laptop that rivals the MacBook Air, because I do programming both on Windows and Mac (I by no means have an emotional attachment to any OS or HW vendor, so I'm pretty unbiased when it comes to these things). I'm still confused as to why this does not exist in any usable sense.
Putting some MVC meat into your app: Backbone.js
We've found it to be a lot less than that generally - almost half your estimates.

[Edit] re-reading, I think your flight costs are accurate from Chicago to Spain. They are less for us because half the team travelled from London. If you are all in Chicago, you should go to Canada or Mexico or Central America - lower cost to achieve the same goal.
Actually this technique is what rock stars use to do to record an album -- they'd go to a remote location to pick up on the vibes of the local music scene instead of the usual hubs of the industry like LA or London.
Glad to see the takeup of APIs by the public sector. Will be interesting to watch whether emerging API management solutions can help the open data movement by enabling smarter ways of accessing government data.
But how many people have throwaway passwords on sites like these? It might not mean much to the tech-savvy community, but I'm sure a lot of people use the same password for a lot of services.

They might not be able to do much with your account on Last.fm, but they have your email, for which you may or may not use the same password.
I can see it now...

Show HN: pclark listens to Miley Cyrus, A LOT.
Note that the quoted price is wholesale, in units of 500.

It's a 1.2GHz single-core Cortex A8 (not A9) with 1GB of RAM and a 1366x768 display. The article states 8G of "SSD" storage, but at that size and given the feature sets of these SoCs it's much more likely to be a SD/eMMC device. Frankly this is going to be a very poor laptop replacement, but as a browsing/messaging box it might make sense.

And of course it looks exactly like a Macbook Air.
I'm wondering after reading the article if I should be worried with the app I wrote, http://www.selinked.com to learn nodejs and mongodb. It's a dead drop sort of thing with chatting, all encrypted on the frontend so nothing get's transmitted in the clear. It's not open source per se but all of the magic happens on the front end so you can see the code. Backend just manages sockets and stores encrypted data. When writing it it did cross mind that governments could have an issue with it but after seeing that I was not the first one to do this I figured I was ok. Now I'm starting to reconsider this position, I already get enough shit at the airports due to the fact I'm a green card holder and treated as a third rate citizen, don't need more.
And with all the face-eating "bath salts" zombie stories in the news, practicing your marksmanship has never been more important.