skysight-inc/HackerNews huggingface dataset:
It reminds me of something my father told me when I was figuring out what to take in college..."Find something you like to do and you will never work another day in your life."

His advice was not absolute, there are bad days, but overall he was correct. I wake up almost every morning looking forward to what I will solve/build that day. He was a chef, provided a great life for his family and still experiments in the kitchen even in retirement.

I think the "software as a craft" argument also fits here as people who like to program like to tinker at home much like wood working in your garage.
Yes. An idea formed on a basis of scientific study.
"Idea" is just shorthand to cover what we colloquially know as theories, natural laws, hypotheses that haven't yet been directly tested, etc.
The history of password security
The only information available online is on http://mozfr.org/pipermail/tuppervim/

I encourage you to contact one of those guys.
Doesn't sound right to me, I think many european users are fine with an app in English (in fact, many probably prefer it)
Why not?

Work in the military for 20 years (ok, 22) in a communications or IT capacity, retire, collect pension. 20 years of military computer experience doesn't necessarily make you an expert or even employable, sadly.

You then get preferential hiring for other positions in the government, especially law enforcement. Working for ICE/CBP wouldn't be a horrible job (if you could do it for a few days a month, I think it would be fun -- you're basically the first contact a visitor has with the US, and you get to meet lots of interesting people from around the world. In most countries, this is a particularly well respected job, a whole lot better than being deep in the bowels of government bureaucracy.)
It's a nice idea to have a common app store for all platforms. I imagine the flow is supposed to be:

1) You friend uses Pinterest or Spotify and has a wall post from it.

2) You are interested so you follow the link to that app.

3) You follow a link to the new app store.

4) The app store provides downloads for iOS / Android / desktop / etc.

The point from Facebook's end is that step (3) would currently be a link outside of Facebook. If they can keep that inside, better for them.
Real world tasks or math tasks?
Chef’s Market Box a Perfect Marriage of CSA and DIY
See http://news.ycombinator.com/item?id=4083831
One way to fix your rubbish password database
PyBossa: open-source micro-tasking and crowd-sourcing platform
Good point.

What I would say is that my mobile apps have very large buttons. Any 'miss' could only really occur at the edge of each button.

So in that case I could use the event coordinates in contrast to the dimensions of the button to decide whether to revert to onClick() behaviour.

Edges ==> onClick()
Center/Sweetspot ==> onTouchStart()
Because you can't make money off somebody's creativity unless you can control and direct it.
Really nice site!
The bit.ly link is broken :/
The anonymity is off-putting. A more detailed post with known author, past work examples and preferred industries/product areas would act as a better filter for both sides. It currently reads as:
a) someone who just wants to go to Chile for summer then go from there
OR b) someone who was but no longer is, part of a StartUp Chile team and wants to remain in Chile for summer by joining another team.
Didn't work for me on Android 4.0.3 in either Chrome or the Android browser
Sessions should run from 9am to 6pm with gates opening at 8am but we don't have a precise schedule yet.
Why would a user leave the web page open through their sleeping working browsing schedule? Why would a dev use battery status to interpolate travel patterns instead of, say, the location API or your geo IP?

Given the other things available to a dev wanting to know about a user's behavior, battery status is a strange one to rant about.

> The security implications are vast.

No they're not. Battery status has been available to every app on your laptop for years without a problem. Web pages are ad hoc apps. If you're concerned, don't install the app, and use NoScript with a whitelist for browsing.
A fair point, but the sentiment I get from the most vocal people is that it's to do with their privacy.
To expand on that:

The second table on wazoox's link give the number of fatalities scaled to the population (in death per million) for European countries. It doesn't include the USA for some reason, but you can estimate it from Retric's info.

- 1990: 186.3
- 2005: 147.2

So, improvement there has been.
100 Euros is cheap compare to other Paris tech conferences (who often cost more than 500 Euros)
A sheet I made long time back and takes into account reserved instances as well. Making it public for you guys to use it. It is just for us-east for now:

https://docs.google.com/spreadsheet/ccc?key=0AhvNig7yndNZdEx...
Unfortunately, talks are not scheduled yet.
It's what programmers with iPads have been waiting for!
> How does that add value? Imagine 'x' is '(int)(aRec[RecIndex(p->handle)]->itemCountRef)'

That's a gnarly code smell and a Law of Demeter[1] violation. I suspect you could find a better way to express that operation without requiring that a single line of your code know so much about so many different things (aRec, aRec members, the return value of RecIndex, p, aRec member -> itemCountRef).

1: http://c2.com/cgi/wiki?LawOfDemeter
Bummer! Basically it was the link you got after going on http://www.meetup.com/find/ and searching for tech events (it's an item on the sidebar) in Paris, France.
Great author, I am a fan of his Martian Chronicles the most, there are so many short stories of his that I have come across that picking favorites is not fair.

Today CATO released an interesting story about Ray and the form of censoring he faced which is one many here would never consider. That being authors being coerced to include or exclude groups based on influence they exert within society. We even see that today with big name authors, most common is when their works are brought to screen and characters take on new traits; physical or otherwise; to fit politically correct norms.

http://www.cato-at-liberty.org/censoring-ray-bradbury/
I might totally be wrong, but for me the consequence of that approach are:

1. The attacker doesn't need the text the user entered anymore, just the precomputed hash

2. Probably the length and alphabet is fixed now, which might obfuscate/protect 'password' or 'test', but reduces the value of a strong password. Granted, this last part is a gut feeling.
After Raising $1.5MM IconFinder Aims To Take On Google
UK woman wins High Court Order for Facebook to reveal troll IP addresses
Noctua demos active noise cancellation on a CPU fan
This is why my new passions are business, marketing, and making money.
Yeah, I was talking about idea patents.

Being able to patent an actual implementation is somewhat ok, but being able to patent ideas is plain stupid, and they are in the prrocess of importing it to the EU
John Carmack talks about his work around head mounted displays
The screen is there for me. The size is fine, given the limitations of having a usable keyboard. The weight is fine, though no one would complain if it were even less.

Battery life? Not for me. Not even close.
On step 3, where you say "scrypt(s'i, md5(si, password))", don't you actually need "scrypt(s'i, md5(s0, password))", where s0 is the original salt? In other words, you still need to know the original salt you were using to successfully migrate.

Therefore, if you are storing the per-user salt as the first bytes in the hashed password field, then you have to be careful when you "throw away the old weak hash hi and forget it ever existed."
I think that business customers do care quite a bit, actually. If, for instance, your business customer experiences significant downtime, but loves you otherwise, a verifiable explanation as to the source of that downtime can be the difference between keeping that customer or loosing that customer.

If the customer attributes the downtime to your host rather than you, then your customer might tell you to switch hosts rather than fire you. If you have a good relationship, the added transparency can be the difference between keeping the customer and loosing the customer.

Of course, this line of thinking is no incentive for heroku to change its practices.
Brittany's Nestadio Capital launches accelerator for EU startups to go to the US
c is 299,792,458 m/s only because the meter is so defined; it makes just as much or more sense to say that the speed of light is 1, and this is where we get the Planck units.

From this perspective, it becomes obvious that the question, "Why is the speed of light one unit length per unit time?" is an absurd one. There is no other alternative.
Is there a security disadvantage to taking the MD5 hashes you already have and running those through bcrypt? It seems like that would let you get to a salted bcrypt implementation in one day as opposed to waiting for all your users to log in. Perhaps you could do the mix (md5 + bcrypt) until the user logs in and then switch them solely to bcrypt?
Except many of us don't have Tomato/DD-WRT capable devices, not to mention I can't be bothered setting up an additional router to my current two, flashing and securing it and then switching my devices over to it just to test something when this solution does essentially the same thing.
The original salt is s_i which you do need to keep around. The new salt is s^'_i.
Motorola Motokey 3-Chip Price India | Triple SIM Smartphone
The Motorola Motokey 3-Chip is a Triple SIM Smartphone that incorporates a wide range of features and innovative applications. It has a full QWERTY keypad with a large TFT Display Screen. It rMotorola Motokey 3-Chip offering some of the most useful applications like Document viewer, Loud Speaker, SNS applications, Voice memo, Predictive text input, and Facebook dedicated key.
Amazing Sites For Photos Inspirational Resources
GRC's Interactive Brute Force Password "Search Space" Calculator
Have they ever explained why Pi is the ratio of a circle's circumference to its diameter?
If you're using floating point, x * 0.5 is faster
Thank you, this is awesome. I'll be sharing this thread around the office in a few hours.
Does this handle cross domain errors? We're currently doing this in house but some of our script errors are very nondescript as some of our JS is hosted on another domain.
I know I only stumbled it across it recently. It's strange because as SPDY takes off SSL is going to be a critical part of the overall performance.

Apparently AES-NI is also available in version Xen 4.0+ for VPS users as well. Something to ask your VPS provider.
You seem to be looking at this from only your narrow perspective of your own development and hosting environment.

There are a whole bunch of places with mixed environment where this is extremely useful and can get Node.js approved for use by management who don't want to deal with the headaches of managing, hosting, securing and administering yet another database server like MySQL or PostgreSQL when they already do that for SQL Server and want to run Node on Windows to avoid having to deal with another OS like Linux.

>Except, this isn't so much openness as it is an underhanded attempt at migrating more developers to their proprietary platforms

In these cases, aren't they helping Node get a toe in the door which can lead to further Open Source usage(which in some cases can lead to ditching of SQL Server and going to MySQL or PostgreSQL to save on licensing)?

>but I wish they wouldn't beat around the bush. The "Open Source" community that they're trying to cater to is more bullshit-averse than they seem to realize.

Your comment comes off as incredibly short sighted and negative. If it doesn't work for you, just move on. Where's the beating around the bush? I don't see any claims on the linked blog that they're doing this for openness. Slagging on them for making things more compatible doesn't make sense. If they make it compatible with Linux, some people will say "they're trying to sell their stuff on Linux, it's on FOSS". I think some people will only be happy with open sourcing SQL Server and making it absolutely free which will make them lose 95% of their revenue and I am glad Microsoft is not looking at catering to RMS.
I want to Own a Franchise Franchise Appreciation Day 2012
What is the right UX Job Description and difference between UI and UX?
It's also 3-4 orders of magnitude more expensive to support: MySQL is an out of the box install of a single process which many people are familiar with and which has various well-known data warehousing techniques and many GUIs and other tools for casual analysis.

Hadoop + Hive is a beast which will require multiple high memory systems just to run without daemons crashing and mysteriously deadlocking the entire cluster (i.e. you'll be searching for non-obvious messages in log files, googling and reading the source until you learn that some Java developers are still struggling with 30 year-old memory management and error handling techniques). You then need to write custom data loaders, completely architect around the write-once file I/O model, and then learn Hive before you can get a single result.

If you actually really need the things which Hadoop can better, it's worth that investment - but the decision is akin to knowing that you need to haul a billion pounds of coal and thus building a railroad makes sense. If you don't know that - and if you don't already know your access patterns well enough to carve them into stone - the overhead cost dwarfs the benefit.
The Little Introduction To Programming
Did you get that from here?: http://news.ycombinator.com/item?id=4078751
I can't imagine that the 96 core cluster would be either power efficient or cost efficient compared to Intel offerings. Assuming 3 watts and $100 per core (which align fairly well to the figures presented in the article), 96 core cluster would draw nearly 300 watts and cost nearly $10000.

Contrast that to eg Intel E5-2650L[1]: 8 cores, 16 threads, 70 watts and $1200 price. Obviously the whole system cost would be much higher, but I find it hard to believe that you couldn't get/build two 2-socket systems with such CPU for $10000. The CPUs alone would draw 280 watts, which would put the whole system power consumption in the same ballpark as the ARM cluster.

Remaining question would be performance. ARM cluster would have 50% more (logical) cores, but I'd imagine that Intel would have far higher per-thread performance. And for lots of tasks the 100M Ethernet of the Beagleboard as an interconnect could become a bottleneck.

[1]http://ark.intel.com/products/64585/Intel-Xeon-Processor-E5-...
In this case it's because HN capitalizes the first letter of story titles. There should really be some hardcoded exceptions; it's surprising how often titles begin with iPhone, iOS, or jQuery!
No. I don't believe there's any disadvantage to this. An MD5 hash is a 128 bit random number; it's 16 fully random characters, better than almost any human password.
Henry Blodget was wrong; TV revolution will be in slow-mo, says Ashwin Navin
The animated footer is amazing.
"The introduction of good design is needed for a company to be successful."
Malcolm Gladwell: history will remember Bill Gates, forget Steve Jobs
Why do you have blind spots in the first place?

http://www.caranddriver.com/features/how-to-adjust-your-mirr...

"The paper advocates adjusting the mirrors so far outward that the viewing angle of the side mirrors just overlaps that of the cabin’s rearview mirror." I've been driving this way for a long time, and it's great. You can already see behind you: you don't need 2 more mirrors showing you the same thing.
6/8/2012-LinkedIn Breached;6M to Boast of Phony Accomplishments Elsewhere
No, I asked a question yesterday about this (http://news.ycombinator.com/item?id=4080823) and spent a long time thinking about it. Great minds...
I downvoted a few of your comments in this thread and all for similar reasons, but I'll just reply to this one.

You're putting forth your ideas about money buying happiness as if they were facts that you have proven or that have been proven elsewhere. But human happiness is much more complicated than you think it is, and I think the spirit of most of the replies are merely suggesting that things are not as black and white as you have made them out to be.

> the problem only starts when you start comparing the Ferrari guy and play-in-the-dirt-with-kid guy.

That seems to be what you're doing, is introducing this "problem" by comparing these two situations, or comparing some other abstract ideal rich life with the life of middle class or "normal" lives, when in fact comparing them and trying to find out who is happier is very hard.

Here's another one to compare: I hate driving, so I think I would rather ride a bicycle than drive a Ferrari. But that's just me; I can't even articulate why I dislike driving. I would never suggest that someone else isn't happy driving a Ferrari and would be happier on a bike, because it's a senseless comparison. Same with the dad and his kid playing in the dirt.
Dedicated providers don't provide SQS, SWF, S3, SimpleDB, RDS, DynamoDB, EMR, Search. Which for me anyway are essential as they are enterprise class, very cheap, managed, scalable solutions.

The best combination is a dedicated server for the app server that is close to Amazon.
You can integrate common passwords into your password choice UI.

These guys did a nice example: http://howsecureismypassword.net/

Lists are available from various sources. Here's a good page http://www.skullsecurity.org/wiki/index.php/Passwords
Rule of thumb in the area where my family lives, Hamilton County in Nebraska, is that 1000 acres will be required to financially support a family of four. Land has sold within the last four years from $6K to $10k per acre. Therefore, using the low number, one family will need to be able to raise crops on $6,000,000 worth of land by owning or leasing the ground.

We haven't gotten to equipment yet. Center pivots start at $35K, tractors are about $100K, combines are $250K. We still need heads for the combines for each crop raised, and of course plantering, fertilizing, cultivating, ridging, and discing implements to tend the land. Figure $25K apiece. Add 15% if they're the proper shade of green.

I could keep going, but you get the point, hopefully, that farming is an extremely expensive enterprise with relatively low margins.

"Should" it be that way? With respect, what ag should or should not be isn't irrelevant. It is that way, and this is not a function of ag but rather a function of an industry working to supply demand.

Ag is not remotely unique in the assets that are required to operate. Watch the first season of How It's Made on Netflix and be amazed at how much expensive mechanization and automation is required to make something as simple as a work boot.
Warnings, yes please. Allowing my brakes to be controlled wirelessly by anyone clever enough to spoof the right data, no thank you!
Seems tautological. I think what he's asking is, why is there to be a limit to how fast light can go, and he's looking for a better answer than "because there is one." I would love to know why there's an arbitrary speed limit to lights that (from our understanding) spacetime doesn't necessarily have to obey.
What was the difference between code from Sharp, IBM, STSC and MS?
Do garbage men and sewage workers love what they do? I doubt it. Are their jobs absolutely vital to the very existence of modern civilization? Absolutely.

"Do what you love" seems to fail if you wish it universal as a categorical imperative.
Yeah, I guess it's not that amazing a coincidence... Most people would arrive at that.
Fantastic tweak! Fast for good clicks, slow for more ambiguous ones.
Is there a good aggregator for that sort of stories that does add value?

(I don't visit either site, but an aggregator with that focus might be worth visiting).
... in a theoretical sense; it is comically unlikely to be a real-world concern.
I am too,

sometimes I go to Gaîté Lyrique / Mains d'Oeuvre / La Cantine for art&code

there is also a javascript mailing parisjs@googlegroups

keep in touch if you want to meet&hack:)
A more fun instance of this sort of thing on HN is when I suggested that HN might be attackable because of a flaw in random number generation and then someone else who hadn't seen my suggestion went ahead and did it.

Me mentioning it: http://news.ycombinator.com/item?id=596126

The attack: http://news.ycombinator.com/item?id=639976
Show HN: We Built a New Kind of Marketplace
A library implementing LINQ-style queries of IndexedDB databases
Let's see, each project usually has:

- Multi-site development at least in 3 countries;
- Sometimes up to 100+ developers
- CI systems
- Source code of several MB of source code
- Enterprise like infrastructures for Fortune 500 companies
- Different skill sets from the "just out of the university" to the "top developer"

Maybe YouTube beats this, but Google only has Phd guys able to crack out crazy algorithms/data structures in minutes. Not typical in most software houses.
How does this work with minified/obfuscated production code? Some of the other comments suggest that proxino is listening to and logs on 'window.onerror'. If that is the case, I don't think you can get stack traces in all browsers, and the line number for a minified file will alway be 1.
They are tied to the availability zone though.

Not a big deal if you are from the US but if you are from Australia for example then you wouldn't be able to take advantage of a Sydney availability zone if it become available (as it is rumored).
While I agree that the sites are useful, HN guidelines request that you submit the original article. That reduces the number of duplicate submissions.
Do This Before You Regret It: Export LinkedIn Contacts
Does this imply the client doing the encryption? I.e. the client creates a key pair and sends the public key to the server?

It sounds good but the challenge, as always, is the infrastructure. I think it would be great if I had a single personal private key from which I could issue chained keys for each domain where I have an account. But imagine managing this across desktops, browsers, phones, game systems, etc. ...
I worry with questions like this that we may never have a convincing answer.
There may be things about the universe that are simply ungraspable.
Our aim is to integrate with forums and replace their classifieds and offer a full-service solution:

http://partners.styckyd.com
This study is way to small and limited to show much of anything... but many of the proponents and historical engineering studies that advocate static typing don't claim that it reduces "development time" so much as reduce the times/costs throughout the entire life cycle of the product. In fact, the "development time" or in this case "prototype time" hasn't been all that terribly interesting.

What would be interesting is to take these same projects, and same team members and add some features a year later and see what that looks like and then take the same project and give it to a new team after 6 months and have them add some minor feature or fix a bug and measure that. Or double the performance of the project and measure what that costs, if it's possible. etc.. It's fun to argue and advocate for what you like though.
Or, how native development still beats "web apps".
Ah. my mistake. I completely missed the "'" as I was reading it.
I just ran the Phoronix iozone benchmark on a newly spun Ubuntu 12.04 Azure VM - it aint looking good...
Comparison against a local VPS provider here in Australia.
http://openbenchmarking.org/result/1206086-BY-1103157IV31
What to Know About Google+ Local
Duck typing requires more mental effort to track the variable types. And in python some type errors are detected only in runtime, like when you call a function with a wrong parameter count.
Building Your Online Brand Presence
I guess it still adds value (potentially? Maybe less so with IDEs and maybe not worth the language complexity tradeoff) if you use very long variable names, which do help somewhat with readability.