skysight-inc/HackerNews huggingface dataset:
How does this benefit someone who is trying to access an account? There are no account names tied to these hashes. So even if you managed to find the clear text of each of these you would still be in a position where you have a list of over 6,000,000 passwords to work through in order to brute force your way in.
And RIM is going down the same path with BlackBerry 10 and BlackBerry Payment Services. :-/

Not a fan of the trend, but I suppose it does unify the user experience.
With their format, it is an easy matter to mechanically turn the first item into:

INSERT INTO table ('P0010001','NAME','state') VALUES (?,?,?)

and then loop through the remaining items using that to insert them into a database.
> The goal is to make it much easier to pay for in-app purchases. It is well known that the more steps users have to go through to verify payment information on a mobile device, the more likely they are to abandon that purchase halfway through the process.

I wonder how Apple will react to that. They're pretty keen on banning apps that don't give them 30% of in app purchases. If Apple doesn't reject this they will have some explaining to do.
This is not about Django and why it sucks. It's a refreshing take on monolithic vs. micro frameworks and it's nice to see that a micro framework like Flask gets the attention it deserves.

I believe that monolithic framework are aged too. Django and also Rails as monolithic as they are force you into given patterns, even if you can choose specific modules. I made my first experiences with a highly modular micro framework (Node with Express) some weeks ago and I have to say that I don't want to go back. Even if it seems that you have to reinvent the wheel sometimes (but in reality you don't) your application reflects your use case much better, it's more fun and you are again programming yourself—deciding on architecture, structure and design patterns.
I'm not really up to speed on the differences between browsers, but the Dev Alpha does use Webkit. Unsure what build we have, and what audio APIs are actually supported. The fact that I hear the music and see the particles moving is a start at least.
AT&T: troubled in the "Windy City"
Traitor scum! Such an intense title after such a nice conversation on the Django Podcast... [1]

Of course I'm kidding because these are valid critiques. Django's code base has a bad case of introducing really hard to debug interactions. But, to be fair, those are fairly rare.

However, as a Django lover I must say that Flask is missing a lot of what I love about Django: sane pre-built options for getting you to 90% functionality quickly. That last 10% can be difficult, but that is better than a more difficult 90%.

One thing that is rather annoying with Django is the learning curve (there's a lot in there), but the docs are so good that it isn't that bad (and one could argue that Flask is harder to learn because it means learning SQLAlchemy, Werkzueg, etc... too).

As he mentions in the slide, best tool for the job. Flask is certainly more Pythonic (IMO) and beats Django very handily for simple apps, but the ability to skip reinventing the wheel will keep a lot of people in the Django camp for the foreseeable future.

[1] http://3rdaverad.io/shows/django-podcast/episodes/deployment...
"Kara's credit card has been stolen :(" 4 likes
Soccer: Euro 2012 Free Kick - Free Online Games
I don't think google is going to be the one leading the charge against targeted advertising.
Citation: http://missionlocal.org/2012/06/tenants-raise-rents-on-new-r...

I suppose "political risk" would be a better term than "legal risk" per se. Subtle differences in the lease and established law increase the risk that the landlord has an unfavorable outcome (possibly including earning potential loss). As a consequence, they are unwilling to consider any changes to the lease, even a minor one, not simply because they may be screwed, but also because there are hundreds of other prospective tenants who would jump at the apartment who won't present them with any such risk.
Student Concierge
With 24/7 support exclusively for international college students, Boston Collegiate Consulting Group is the only service of its kind.
It says they shouldn't do that. But you are never going to see enforcement, stripping headers can be sold as "security" to hotels who have no clue what they are doing.
Ok, I just tried it on my desktop, and it works perfectly in Chrome. On the Dev Alpha, like I said, I see rotating fuzzy balls, but not the beat synch'd animation like I see on Chrome.

At the top, I see the spectrum scrolling by, with it averaging about 20 FPS. I cannot click on toggle FFT spectrum, it doesn't recognize my tap. Like a limitation with the WebGL implementation.
The parent's point is that some of those IE10 users aren't just stuck with a default, they really did intend to turn DNT on.
Of all the comments I made today, this was the one I least expected to be downvoted...
I realise this, I used Chrome as the example as I imagine it has the largest audience of users here. I wish I could set incognito per site. I.e. opt in to cookie keeping. e.g. set cookie_keeping=true for gmail.com.
Top Mobile Internet Trends — Kleiner Perkins Caufield Byers
On the other hand now every single line of code that gets changed has to reviews by a lawyer to make sure it is compliant with the DNT legislation. And if your a startup, the best way to take you down is probably a couple of frivolous DNT lawsuits.
Or if a large portion of the industry decides to voluntarily adopt the standard, to counter the threat of legislation.

A number of large ad networks have already announced support for DNT. Sure, there will always be sites that ignore the header, but there's also a realistic chance that it will give users a meaningful choice about how their behavioral data is used by many of the biggest sites they use most often.
Well that's strange because Django didn't use much OO either when I used it in the past, only for the ORM.
Probably a noob question but... How does this account for any salt that may have been used?
Ask HN: Best intro marketing books?
Hello HN,

I just recently wanted Drew Houston's talk at Stanford where he mentions that early on in his career he had to learn a lot of different disciplines such as sales, marketing and so on.

I figured out that I need to understand a lot more about marketing than I do now (zero) and I need a good place to start. I think Drew mentioned Guerrilla Marketing as his first text, but I was hoping that you guys might recommend something even better to me.

What should my first intro marketing book(s) be? Seth Godin's stuff? Guerrilla Marketing? Others?

Thank you!
'Also, the author apparently found the hard way: don't use Django as an api server'

Is this true even if you use Tastypie with Django?
> Suddenly you have to pay for everything.

I wonder if we'll see sites who honor the header, but require that it be off in order to access content.
That's the Geneva convention. It's right after a chapter of Frankenstein.
Policies like that dissolve on this scale. It's not like some random auditor in a cubicle in the app store division pulls up the next app to review in their queue (hm... next is "Facebook"...) and rejects it because it has a payment option that doesn't go through Apple's process.

What happens is that Mark calls Tim, their people meet, and a bunch of lawyers write up a contract that the rest of us will never see.
I believe they are saying keep the transactions the same (so 1x $10) but label the stored value as dollars instead of credits.
If too many people turn on DNT websites will start ignoring it.
It's an interesting move, my concern would be that Twitter is talked about enough by name that people know the name but might not necessarily use the site and will no longer make a connection when they see Twitter online (outside of Twitter.com) because it's a logo that doesn't represent the name.

For example if someone watches CNN and they hear Twitter mentioned they might not think "that's something I should check out" but then if they're browsing their favourite bands website and see "Find us on Twitter!" they might think "I heard about this on TV and my favourite band uses it, I should check it out!". With the logo not representing the name they remove the possibility of this happening. Maybe it's an inconsequential amount of users but there are multiple products and brands I've heard about but not been compelled to check out until I saw them mentioned somewhere else.
Quora : What is it like to lose all of your investors' money?
Speaking Of Crappy Facebook Ads, I Hope They Can Do Better Than This
Cara Mengobati Tumor Lambung | GLUX | 085219946055 / 085322379603
Cara Mengobati Tumor Lambung

Ada masalah pada lambung Anda ? Baik itu tumor lambung atau yang lainnya ? Segera atasi dengan Cara Mengobati Tumor Lambung Jelly Gamat Luxor. Ada apa dengan Jelly Gamat Luxor ini, sehingga sangat ampuh untuk dijadikan sebagai Cara Mengobati Tumor Lambung ? Penasaran bukan ? Untuk itu, simak terus penjelasan kami pada artikel ini mengenai Jelly Gamat Luxor sebagai Cara Mengobati Tumor Lambuung.

Konsultasi dan info lengkapnya hubungi ==> 08521 9946 055 atau 0853 2237 9603 [TLP/SMS]

Pemesanan dengan FORMAT PEMESANAN sebagai berikut :
GLUX : JUMLAH PESANAN : NAMA : ALAMAT LENGKAP : NO. HP / TLP
kirim : 08521 9946 055 atau 0853 2237 9603
Board and Advisor Communication: Keeping them in-the-know
I'm looking through the top free iPhone apps in Germany and I can't see a clear trend. Also, I'm not sure how to prove or disprove my point - because being a top app is orthogonal to looking like an amateur effort. WhatsApp has long been #1 here, and while I welcome its stock navigation UI for usability reasons, I think their tacked-on timestamps are as "amateur" as their name.
Square doesn't give Apple 30% too. It wouldn't be the first.
I've always suspected there is no à la carte cable because it is not revenue maximizing.

My argument: with bundled cable you can segment the market by selling the same product at different prices. If I offer a bundle of sports + movies for $100, I can sell to a subscriber who is willing to pay $90 for sports and $10 for movies, and also to the subscriber who is willing to pay $90 for movies and $10 for sports. I get $100 from both in this scenario.

If I wanted to sell sports à la carte and movies à la carte, both the avid watcher and the casual fan would have to pay the same price for the same content. In my simplified case above, each product would have to be priced at either $90 or $10, and I either lose the casual viewer or leave money on the table from the diehards.

If this is true, then regulation effectively decimates the profitability of content, meaning less good quality content (though you would be paying less for it). I think the best way to get à la carte is to preserve market segmentation by adopting some kind of tiered pricing structure--maybe time delayed releases, maybe different quality levels, or maybe Priceline-style auctions. But none of that may work as well as bundling.
Pakistan vs Sri Lanka 1st ODI Live Score Match
There's a crucial difference: it's easy to tell when someone violates a Do Not Call list. They call you.

It's a lot harder to detect, and probably harder yet to prove, when they're engaging in illicit tracking.
I lol'd trying all kinds of nasty sexual passwords, and seeing people have actually used them.
Thanks. I was a victim.
If a large portion of the industry adopts it and that prevents legislation, the end users have an even more false sense of security.
I will believe you when you hack that password.
why in the world from a brand perspective would they do this?!? They have an established logo that everyone recognizes, why change it!
a lot of brand guidelines are super restrictive
In the top paid apps in the U.S. the trend is overwhelming. Think what you like about the aesthetics of those apps but they're the ones making money.
There are far more job listings for C# and C++ than for C.
C is very important for the software that forms the underpinnings of just about everything, but application level software seems to be written in easier languages.
It doesn't, LinkedIn didn't salt the passwords.
Or the hundreds of millions.
When said person is occasionally and randomly having friends or guests over, sure.

When said person is making a fulltime income solely from renting space in an apartment that he is only leasing, well, "most people" would think "I should probably take a look at my lease first"...
For a demo of what this will look like, try Nokia's WebGL-based mapping demo: http://maps3d.svc.nokia.com/webgl/index.html

They only have 3D imagery in a few cities so far (click on the city markers).
Does graying out a downvoted comment attract less or more attention to it?
All frameworks are horrible. Because there is no 1 ring to rule them all.
The more "powerful" frameworks become, the more abstract and detached from reality they become, the more you end up solving problems that exist only because you are using said frameworks.

Clearly, there are building blocks that are useful across most applications. You can gather those into libraries and reuse them over time.
But, frameworks...no, there are no silver bullets, no fat-free fat, no sugar-free sugar, etc.
There's so many Guerilla Marketing books out there that it's easy to get lost reading forever with no return on your time investment. I found one Guerilla Marketing book that's like a 'best of' called "Guerilla Marketing Remix- The Best Of Guerilla Marketing" By Jay Conrad Levinson & his wife.

The Guerilla Marketing Handbook by Seth Godin seemed so dated it was hard to get through, but there were some gems in there. I think Seth's book 'Permission Marketing' is a classic & doesn't get old (not yet at least), I learned alot there. Purple Cow & Free Prize Inside are my favorites of his, still marketing I guess.

Good luck.
> I think we all know how horrible Java apps feel on OS X, because it uses a slightly different UI paradigm (one menu bar).

When this is brought up, I point people to Cyberduck. http://cyberduck.ch/
How does this work if you want to use a different machine?
Excellent reading - I spent countless hours researching all this stuff for a project few years back. After my research I came up with very similar protocol than SRP but I find that SRP is a nice POC for both protocols.

One thing I didn't find solution for is keyloggers and other similar attacks. If you look at the whole securing your service as a whole, you have to acknowledge the risk of keyloggers also. Now with Flame, Stuxnet and all the other nice things still in the shadows keyloggers can suddenly become also a risk in a large scale.
What do you use now? And why did you switch?
I'm glad someone made the connection; if his landlord is going to Airbnb anyway, why not cut a deal?

If I was his landlord, I would have more than enough leverage with the breech of contract to get him to sign a new similar contract, this one charging maybe 2 times more rent. The landlord gets paid more, which in turn covers his slightly higher (or possible the same) landlords insurance and then some. The landlord lets his tenant do what he's good at (maintain a sterling Airbnb profile and choose good renters) and the landlord takes a larger cut. Worst case scenario, his tenant doesn't take the deal and the landlord proceeds to kick the tenant out for breech of contract (could possibly lead to a court battle, but breech of contract is a pretty cut and dry phenomenon and the contract most likely has breech of contract clauses built into it) and do was he was going to do anyway (rent it out through Airbnb or otherwise).

As it stands the landlord will be throwing money at lawyers (possibly covered by landlords insurance, but could effect the premiums later), which may not turn out favorably for the landlord in court, to ultimately do something that is outside his area of expertise (act as an Airbnb hotel himself).

That's what I think at least.
jumping into the shark-infested waters of TV set production

Agreed. It doesn't pass my basic test of rumored products. Would I buy it? The answer in this case is no. I have a relatively new 1080P TV which works just fine. It cost me less than $500. I don't think there's anything Apple could do that would entice me to replace it. This coming from someone who owns a wide variety of Apple hardware. If they can't convince me to buy one then we've got some serious problems.

I'm really starting to think the TV rumors are just total misdirection. I think Apple is happy to let everyone assume they are slaving away to compete with Samsung, Vizio, LG, etc when in reality they are preparing to compete with Microsoft's Xbox and Sony's PlayStation. This won't just be a software update for the AppleTV. Has anyone else noticed the Mac Mini is absent in the rumors of updated Macs? Wouldn't surprise me if it's redesigned, renamed, and becomes the new iTV device running iOS6 with an entirely new TV UI to ship late this year. This will give Apple the horse power to really compete with high end console games in a box that is still quiet and small enough to be in your living room. In the short term there will be lots of iOS ports but by this time next year I think you'll start seeing some serious high end console games appear. (the existing AppleTV sticks around as basically an accessory to the iTV and iOS devices)
i've had good experience using KeePass
http://keepass.info/

it is open source, and supported by all platforms i use (windows,osx,android,ios) and the interface is pretty well designed.
Once local database is open, simply doing ctrl+c on any of the sites copies the password to clipboard for a very limited time.

this is still a major pain, especially since you need to protect the safe with a long password and this is particularly painful to type on mobile devices.
Django Unchained Trailer
My per-site hash is only salted with the site's name. Hence, there is no state stored on my machine.

Personally, I use (and prefer) LastPass to this approach.
Ask HN: How would u reassure that a convo w/ u isn't a waste of time?
I read from literature that important people hate having their time wasted (it's worth more than anything else). If you have something to contribute that's of use to both you and the person you're trying to talk to, how would you reassure that this fear will not happen for them?

Thanks in advance!
So instead IE10, on first run should just pop up a very scary looking dialog filled with text on why the user should choose the "do not let websites track me" button instead of the "Let websites track me" one.

It is not default, the user has to choose.
It's annoying that Select2 and Chosen don't create a 'close menu' transparent overlay over the rest of the page, so the menu closes if you click outside of it.
Probably more. I'm looking at -40 from that comment alone, hah.
Ask HN: Is there a market for freelance algorithm design and implementation?
I've been considering freelance work because I want to travel, but I'm not sure whether there's a market for what I'm interested in.

I like solving algorithmic problems. I enjoy it so much that I do it for fun. I know there are plenty of people offering web design/development service, but about algorithm design and development?

To clarify: I'm looking for work where I get to work with a lot of companies that do (hopefully) interesting work. My specialty is taking a problem specification and providing a solution by designing an algorithm and then implementing it for the company. I wouldn't be opposed to helping the company integrate this algorithm into their system and providing follow-up service and maintenance, but I don't want to develop entire products.

I have a hard time staying focused on anything for more than a few weeks, so I'd like to get it, do something new and interesting, and then get out.
"...if you have practically nothing to lose."

My student loans say differently. :)

But honestly, so many factors go into post-undergrad job hunting these days that it's difficult to simplify the issue into "go to a startup" and "don't go to a startup."

I also wouldn't say that 100K is "slaving your life away" if you want to raise a family and live a comfortable life. I went to a small school in southwest Indiana (Rose-Hulman) and most graduates want nothing more than to work a 9-5 engineering job and find the love of their lives.

And frankly, I can't find the heart to advise them otherwise.
Two issues:

* No typeface is interesting, but, logo-only does not lend itself to "super-wide formats", such as 200x100 banners.

* The bill and wings are detailed at high-res, and become muddled at lower resolutions.
It closes when I click outside of it.
Which is why DNT makes zero sense to be on by default.
CHANEL 6009 50187
CHANEL 6009 50187
Yea, the whole idea of "They are not following part of the spec so we can treat them differently" seems like a sketchy argument.

Is there a clearing house for certifying browsers as DNT compliant? Or can the websites just say "Oh, THAT browser? Well I don't think it is DNT compliant so I am going to ignore the DNT headers even though they are perfectly to spec"
Nm. Got it.
Tangential, but ever since browsers started to implement the behavior: if a select is selected and start typing, it automatically starts matching options, I don't mind them as much. It's a feature for power users and there are definitely cases where it doesn't apply (e.g. you don't know the options), but it's a big usability win.

Also, for what this is doing, I think comparing it to a <select> is wrong. It's so much more powerful and really shines (and is worth 50k of JS) in situations where you couldn't even use a <select>.
I totally agree with this example. Both eBay for iPad and Facebook use that concept too, so to most users it will probably feel like a stock widget already. I hope it will eventually become one :)
IIRC, most credit card fees are percentages, so the number of transactions wouldn't matter. I've never dealt directly with it, so I'm not 100% certain though.
YCombinator deal is aproximatly 20K for 5% equity, perhaps you are giving too much.

Exact numbers from: http://ycombinator.com/apply.html

We usually invest $11,000 + $3000n, where n is
the number of participating founders, up to 3
(i.e. 2 founders get $17,000, 3 or more get $20,000),
in return for between 2% and 10% of the company.
The average is 7%.
I'd be interested to see the actual numbers for jqm here but I don't think the 100-150ms initial load time is a deal breaker for almost any app.

Your point is well taken though, and thanks for the link.
Minified and served compressed it's 8.51k for the JS and CSS together.
As if that would be appropriate or necessary to solve whatever privacy problems we have.

It's the U.S. government trying to take anonymity and privacy away from the Internet; do we want them making weak, unenforceable, irremovable laws on how to implement an HTTP header?
The twitter bird doesn't actually apear that much on the site, mobile app, etc. I barely even tie it to the brand, and it doesn't feel like twitter does either[1].

Compare that to Octocat and GitHub. Octocat is everywhere; I feel like the logo, dressing it up, referring to it is more a part of github than the doodle is part of Google.

[1] On the login screen the new bird is small and in the upper left hand corner. Once you log in, it's inset black on black and I actually had to look for it to find it.
GaTech ranks very high (inter)nationally in most engineering disciplines. Resulting salaries are not surprising.
SomethingAwful forums does it too ($10 i think?) -- with the additional caveat that 'bad' posters can and do get banned.
Much as I like bcrypt/scrypt, I generally just recommend PBKDF2 with a large number of rounds. It's not perfect, but it's more than good enough.
Most websites will just ignore it from day 1 anyway.