skysight-inc/HackerNews huggingface dataset:
That's not macroeconomics, that's classical economics. You do not get macroeconomics by applying microeconomics to everything at once.

Macroeconomics is concerned with things like money, interest, employment, and aggregate supply+demand of whole economies. Macroeconomics became popular once it became clear the the classical theories couldn't remotely explain the Great Depression. You don't get a 25% aggregate shock because people stopped innovating or a production glut or "illusory growth" or whatever the Internet libertarian crowd feels like blaming today. In the classical theory, you don't get people starving because bankers misjudged their balanced sheets because classical theory is not capable of explaining how the two are connected.
My (German) bank only allows passwords up to 5 characters.

When I ranted about it on twitter some IT guy from a local branch commented about that is totally enough since they do an hour lockout after 3 wrong tries.

I'm thinking about switching banks now...
What delay would you tolerate? One minute? One hour? One day?
"I remember getting an email from Sequoia asking for my personal presence (ie don't send a VP in your place) to some sort vaguely positioned mandatory meeting."

By what mechanism can an investor in a firm, presumably an investor with less than 50% equity, make attendance at a meeting mandatory for the CEO of said firm?
True, though the dev has the same relationship with Heroku.

I agree with the content of the article, but you're right -- users don't wanna hear it.
OneRead.co #4 - The Education of Student Athletes
Don't forget last year around this time when Sony's PSN was cracked into and it turned out they were storing the cleartext passwords.
I believe the phrase you're searching for is "awesome applied crypto research." :-) http://www.win.tue.nl/hashclash/rogue-ca/

We don't yet have details on the differences. I've looked at the evil colliding cert and, AFAICT, the "MD5 Considered Harmful" technique would probably have been sufficient to pull this off.
I'm working on writing up how to add tracing to a library/protocol. Should be in the readme later today.
I think you misunderstand. It's like saying I'm more afraid of twisting my ankle than getting struck by a meteorite; It's not that the latter isn't worse than the former, but rather that the latter is less of a threat when actual probability is taken into account.
That depends when this attack was first conducted and when this variant of the cryptanalysis on MD5 was made as Marc Stevens sums up [1]:

More interestingly, the results have shown that not our published chosen-prefix collision attack was used, but an entirely new and unknown variant. Therefore it is not unreasonable to assume that the particular chosen-prefix collision attack variant underlying Flame had already been in development before June 2009. This has led to our conclusion that the design of Flame is partly based on world-class cryptanalysis.

[1] http://www.cwi.nl/news/2012/cwi-cryptanalist-discovers-new-c...
A cloud hosting model subsidized by hardware sales would have many advantages.

For one thing, it would feel "free." People wouldn't be explicitly paying for the privilege of listening to music they already own. They'd be implicitly paying for super-convenient hosting and access from everywhere.

In effect, it would be almost the same thing, but the spin on the two models is vastly different. It could be entirely hidden for someone who buys a new Macbook every two years with AppleCare.

Come to think of it, maybe it would be a good idea to sell such hosting included as a part of AppleCare. Cloud hosting of user media data could well reduce the warranty related costs for Apple.
Datamining and Visualization with the Yelp Academic Dataset
Ubuntu Quantal Quetzal Alpha 1 released today
B R A V O !!!
We came up with the name by putting all kinds of words into Google translate and making sure they weren't trademarked. Zipkin seemed short and sweet and wasn't widely used before.
What's their new approach to async?
I agree. I love indie games and I think they are important.

I'm simply noting that many indie game studios would kill to have this kind of revenue.
In regards to "what to do with the existing hashes" bcrypt can detect the original work factor and hash to that. Not sure how you would upgrade that for users, however.
Never, Ever Use Clustered Indexes
Suppose some of your customers see an error message and report it. You could deliver valuable uptime to them that much faster when you know it's a bug in your code and not Heroku.

When you know it's Heroku, you can deliver valuable uptime to your customers faster because you don't have to spend time testing for bugs and checking server logs--jumping straight to what you would do: contacting Heroku.

Your customers won't be just as screwed--3 hours of down is not the same as 6 hours of down.
All this ruckus for 18 mins of downtime? Moved my main app off heroku this monday for various reasons (mainly to get better log access and to run the app in europe).
Customers usually don't care about the reason for outage. They gave you money. If the service is running, good. If it's not, you screwed up. No matter what actually happened, you should've been prepared. Sad but true.
The response wasn't too bad. I didn't get a whole bunch though. I didn't try to spam em either. Here is the post:

http://www.reddit.com/r/techsupport/comments/js3d7/service_m...
Top Internet venture capital firms interactive catalogue
RESTing Anywhere: Using Kinvey's API with the Lua Programming Language
Death to the Startup Press Release
I totally agree with you (the first part). It's all calculated risk, and evaluation of cost.. you keep it up when the math works out. If it's down and it hurts your customers to the point that they'll walk.. it's on you. Bad math, your problem.

I speak as someone who's worked primarily in healthcare building services where I assure you we held ourselves personally responsible for natural disasters.

So it depends on your app. If my startup lets people take photos of their dessert and paste lolcats on them, then maybe my hosting goes down and I show my users a page that says the server must have farted, who cares.. but the last thing I'd do is show a page that said the people I pay with their money must be fucking up at the moment and we'll all wait together for things to get better.

Point is: My users are not my peers, they're my responsibility and livelihood. Even when something totally out of my control occurs. Fuck, especially when something out of my control occurs.
good point. we're on posterous.
between $8 and $15 trillion... (total deficits + Fed bailouts)

I was thinking that we got lucky and TARP ended up not costing much (not counting 2nd order effects pushed into the future). Also, I'm seeing 'only' about $5.3 trillion of new debt from 2008 to now: http://www.usgovernmentdebt.us/federal_deficit_chart.html
With my client-side encrypted pastebin & discussion board, I'm not going to the USA anytime soon.
( http://sebsauvage.net/wiki/doku.php?id=php:zerobin )
50 KB for a select box is silly. Having a post promoting native HTML 5 and css3 that uses jquery to throw an alert based on selection is just pricless.
Vivitek Haptic Headphones
However any salting tactic that can be pushed and used on the client side would have a tough time using a salt that is on a per-user basis. This means that if you could salt it client side, you would need to have a static salt, which is significantly less secure than a unique salt per user.
Only in the Valley:
I'm continually amazed that iOS developers demand more from apple. It's not enough to simply provide a lucrative marketplace, I guess.
Apple goes Baidu in china will it be worldwide soon?
Dalton, I don't know if you remember this, but I used to a major imeem fanboy, wrote a personal blog (freshbreakfast dot com) to count the ways I loved imeem, the links for which I spammed to team/all/dalton/steve/gina/matt@imeem.com.

Anyhow, I ended up becoming employee #2 at Ustream. So I was at that presentation, doing them a favor running a private live stream for the CEOs that couldn't make it. Not to sound creepy, but I observed for your reactions quite a bit at that Seqouia meeting, and I even introduced myself to you after the presentation. It's true, your mind seemed to be elsewhere, but you were still very kind.

And if that many full circles aren't enough for ya, today we're both trending on front page of Hacker News :-). This one's mine: http://news.ycombinator.com/item?id=4080074
Announcing Pow 0.4.0 with xip.io support
My beef with XAML is it's a whole other language aside from C# into which the semantics of C# and WPF had to be mapped. Worse, the constraints of XAML affected the design of WPF itself. I.e. the tail wagged the dog.

If C# had hygienic macros, I think the syntax of C# could have been extended for WPF specific needs, without having to resort to an XML based solution.

With a few extension methods, C# can come close and sometimes exceed XAML in its concision. I've been collecting these in a FluentWpf (https://github.com/dharmatech/FluentWpf) project on GitHub.

An example:
http://stackoverflow.com/questions/1347219/are-there-any-flu...
Naive Bayes Classifier in Haskell
As one of the commenters on the OP mentioned, live-tweeting is often used as a means of note-taking, and much like the commenter in question, I find it's crucial if I want to stay engaged with both the presenter and the content. I could keep it to myself, but if it's contributing value for others by making it public (and it usually is), why not? I do have total empathy for the agitation it can cause a presenter, though, so I do my best to model attentive behavior anytime I'm not jotting down a note.
I think what he says has a lot of truth, and the word 'amoral' doesn't get enough association with successful business'. But at the same time, I think he's painting with very broad strokes, when he essentially implies that to be a successful entrepeneur you need to do business with Nazi's, and that necessary requirement for any successful business is to abandon one's morals.
Why aren't you already assuming that the majority of those viewers are paying for it?
Its an information network for humans and otherwise. Its simplicity + #hashtags makes work well for distributed messaging.
That problem is pervasive with any sort of private key system, as well as the password databases becoming popular.

Private key files pose a challenge, absolutely. But is it so much worse than having every company Jack store passwords in $non_crypto_hash_system?

(begin-rumination....

Right now, compromise risk for credentials typically lies on the companies. They frequently fail in protecting these credentials. However, your credentials are - inadvertently - distributed out between multiple companies. When one goes down, the other credentials are considerably less affected.

(More so if you've been bad and used the same password everywhere).

Examining a local store, we centralize risk onto the local desktop. Suppose that in order to log into the user's central system, the user had to provide a password. (Example: gpg-agent). Then, to log into a remote system (web, ssh, etc), the user's credentials get passed into the remote system via some well-known private/public authentication scheme.

Points of failure here:

- user forgets own password. All credentials are lost until they manage to get reauthenticated into the system.

- Malware hacks the user's keystore and uploads private keys to $malware_database. Case 1: in-memory hack. Case 2: hacks system database.

- Case 3-ish. Malware injects dialog requesting system password and gullible user enters it. Upload commences...

I am sure other scenarios can be imagined. In these scenarios, the risk is shifted from the company onto the user (and the key storage engineers).

I can imagine that password forgetting would be heniously problematic and cause PR disasters: many people don't like to take responsibility)
Mad Men, Breaking Bad are. The new episodes are released right away. 4 seasons of Mad Men are on Netflix, 3 seasons of Breaking Bad are. I can't speak for FX and AMC's other shows.
Yeah, it would be weaker against a collision attack. But that shouldn't be a concern as the purpose of the password hashing function is to protect against a preimage attack: finding the password given its hash. I can't see how the composition could be more vulnerable to a preimage attack than its parts. (Provided that the inner function's output is evenly distributed.)
Part 3 of 3 on Marketing to Your Customers
"But then only the last chip of the cube will reveal what’s inside, and only to the person who performs that last chip with their chisel."

So is this a one off game? Once the game ends, it sounds like it's over for good. So if someone spends $20-$30 on this, the game could end in the next few hours forever? Makes the prospect of the $77,000 pickaxe this seems insane. Plus I don't understand the idea of getting everyone to pool their money together to buy the pickaxe when only one person sees the ending.
I don't buy it. The world used to let highly interconnected financial institutions fail and we had sharper, nastier recessions (we called them 'panics') but they were over sooner. I think that, much like the reaction to the WTC/Pentagon terror attacks was worse than the attacks, the panicky reaction - bailouts and stimulus - has been much worse than the problem they tried to fix.
If your government starts sending hellfire missiles in people's homes (well, on your territory), that might get peopled worked up.

But if it's something that can evade detection for years, you have no idea you're being spied on. That's slightly unsettling, no?
swang - thx for trying it out. We do get false positives and are working hard to make it even more robust. Did you download from app store or our website? Try the version from website, it has some improvements that are yet to reach the app store.
Wouldn't that same argument work for any major record label in 1999?
It's definitely not for everyone.

However, one of the reason this often works for small startups is that we hire our friends. From among my friends, I find the people whose abilities I know best, who I trust the most, and who I'm confident I can work well with. Thus I hire friends, thus I am happy spending time with them.

But yeah, I've worked plenty of places where spending 10-15 days in another country with my coworkers would've been a nightmare. And once a small startup becomes a 50+ person company, this gets really really hard to do.
Thanks for writing about your motivations for going to JSConf! If I may, I’ll describe my own motivations for going to a conference. I do so not to contradict your opinion, but simply to offer another perspective. For me, a conference has to do the core things well. Everything else I can organize myself – without the risk of someone else choosing badly for me.

- Destination: I considered both San Francisco and the venue to be perfect. For me, a destination mainly has to be easy to reach. Tourism is a plus, but ranks a distant second to the ease of getting to the venue. Additionally, San Francisco has the advantage that many important JavaScript people live close by which increases the chances of them speaking.

- Parties: Agreed. At least one evening event for everyone would have been nice.

- Food: I’m a bit difficult with food, so I often buy my own and don’t care about conference food much.

- Significant others track: I’m single. As long as my money isn’t spent to support other people’s partners, I don’t have an opinion either way.

- Spectacles: Again, I bring my own, so I don’t need a video game lounge etc. All of these things cost money.

- “Free beer / drinks throughout the day”: I am a beer drinker, but would only want a conference to serve alcohol in the evening.

- Schwag: please no. I always have an incredibly bad conscience when I throw away (most of) the stuff I get at conferences. After a certain point, one has enough toys, bags, pens and paper. That being said, a B2G phone certainly would have been cool.

- Community / Speakers: I like JSConf’s egalitarian approach. Not sure how well it scales up, though.

The biggest problem with JSConf is that it’s nearly impossible to get tickets (I tried twice). So where JSConf wins with regard to its egalitarian speaker/audience approach, it loses with regard to tickets, where it can feel a bit elitist: Some people will easily get a ticket, others won’t.

You might completely disagree with my taste as outlined above, but then the conclusion is easy: The JavaScript community can only profit from the increased conference diversity that is currently developing. In my opinion, Fluent should mostly stay as it is, as probably should JSConf (which I haven’t been to, yet).
Ask HN: Books for Software Developers on Electronic Circuit Design
Hey Everyone!

I've been in Software Development for over a decade but I've always had a place in my heart wanting to design simple electronic circuits.

Are there any books that you could recommend me in getting started with taking my programming knowledge and transferring it into some resistors, LED's & 555 Timers, if that's possible.

Thanks

Chris
Using IRT Instead of Traditional Grading to Assess Students
not always true, as a freelance dev I tend to give options to my clients so they end up owning their hosting, something happens I'm authorized to get in and contact support, but I always make it clear to them they are responsible for it
Using advanced game theory, and based on what the Metro interface looks like right now, and how it evolved in the past 12 months, I can accurately predict that winpho's marketshare in 2016 will be exactly what it is today.
Needs a date in the title. This is from 1999.
(Relevant in response to your earlier 1)...)

Yeah, if you plan on getting pulled over for speeding. Or accidentally getting your car towed, or accidentally getting into a bar fight. Or getting pulled over for driving, ahem, suspiciously. If those things, you should definitely always have your papers on you.

Or witnessing a crime. Or being a victim to a crime. Definite situations where you should plan to have your papers on you.

Most people are not violent criminals. Most people still have run-ins with the police at some point in their life.

Particularly if you have darker skin.

That's why my housemate can't go into Arizona, despite being here legally.

The Soviet Union also had perfectly valid reasons for requiring that everyone have their papers on them at all times. There were genuinely foreign spies moving around, and the government of the Soviet Union had a genuine interest in doing everything necessary to capture and neutralize them. That doesn't change the fact that it's a terrifying encroachment on your freedoms if you've always got to have your papers on you. Particularly if you're a dis-empowered minority.
Agreed. The last thing a customer cares about is vendors pointing fingers at each other.
the great thing about the internet is that it puts you as a citizen in a superior position to your local government (assuming you can somehow hack your way thru government controlled routers, which is in most cases trivial), because thanks to the anonymous nature of the web and the global access to it you can circumvent any national censorship and expose any kind of unjustice happening in your own country. those kinds of cryptographic attacks reduce anonymity on the web and make internet users an easier target for national espionage. as internet citizens (or netizens) it would just be nice if we could keep the upper hand in this game.
Flower startup looking for a fantastic sysadmin
H.Bloom is fast on its way to becoming the Netflix of affordable luxuries. With accolades in the New York Times, Wall Street Journal, and Fast Company, and funding from Battery Ventures (Groupon, Skullcandy) and Shasta Ventures (mint.com, taskrabbit, Jamba Juice), we're scaling fast, and are in the process are building industry-changing technology from the ground up. We're looking for an on-the-ball Systems Engineer to ensure it all runs smoothly, efficiently, and reliably as we grow.

With our first product line, flowers, H.Bloom has experienced fast traction in our four current markets, New York City, Washington, D.C., Chicago and San Francisco, growing revenue over 700% from 2010 to 2011. We're poised to massively disrupt the fragmented $32B+ flower market.

By joining our growing team now, you'll be instrumental in paving the way for our expansion, touching both front- and back-end systems that are vital to the way our business runs and grows.

Responsibilities:

- Architect, manage, maintain, and monitor our cloud infrastructure such that it provides best in class availability, latency, scalability, and security.

- Build monitoring tools to allow us to know the state of our systems real time.

- Provide guidance to software development on how to architect systems to operate most efficiently and most securely in our - infrastructure.

- Respond to emergency system issues and drive them to resolution.

- Corral our developers - if someone doesn't take away our root access on production boxes soon, there's going to be trouble.

Requirements:

- BA/BS in Computer Science or related field.

- 4+ years experience configuring and managing UNIX/Linux OS.

- 2+ years working with cloud based SaaS providers.

- Comfortable with Windows Server administration.

- Proficiency in one or more scripting languages (shell, python, ruby, etc.).

Preferred:

- Experience with EC2

- Knowledge of MySQL administration.

- Familiarity with OO programming (C++, Java, C#) is preferred.

Perks:

- Choose your own hardware setup

- No dress code

- 100% company-paid health and dental insurance options

- 401k

- Flower discounts, always

Apply here: http://bit.ly/LwI49c
My perspective on this letter and the issues around it - http://blog.nitinkhanna.com/who-innovates/

I believe that companies need to give people the freedom to innovate. Otherwise they're just code monkeys who care only for the paycheck at the end of the month.
Talk Submissions for C Conf End June 8th
It depends on how one defines "wealthy." The IMF has Iran at 25th out of 182 wealthiest in the world, World Bank has them at 29 out of 190, and the CIA has them at 25 out of 191 (source: http://en.wikipedia.org/wiki/List_of_countries_by_GDP_(nomin... ). I think they're using "wealthy" to mean "wealthy enough for the government to fund non-trivial computer science research."
It's clearly more of an art project than a game, or maybe a sociology experiment. I'd suggest the title of "curiosity" refers more to Peter's curiosity than those who play.
Yes, I certainly do remember you. And I do remember you being there that day as well. I read the hypebot post this morning, didn't notice your name on the byline :)
Securing industrial systems is a major problem. Security - when not done perfect - is a disruption into efficiency, usability, and functionality.

If you calculate the expected cost of a hack vs. the expected value of rebuilding the electronic infrastructure, in some situations being hacked is cheaper.

Further, being hacked is rolling the dice... there is a probability it won't happen. Whereas, an electronic infrastructure rebuild is a guaranteed expense... and expensive.

Then there's the Columbine mentality, "It could never happen here". That's pretty pervasive.
Nice get-rich-quick-scheme for Molyneux.
Now if only they can fix the constant crashing and then I'll be happy. No point in having a nice design if the application crashes so much that people can't see it.
Thanks for the clarification.

The rogue-ca thing is awesome indeed! :)