skysight-inc/HackerNews huggingface dataset:
Yes, still the #1 choice in my books, especially if your APIs do not match your models 1:1. Tastypie is cute but gets in your way a little too often for my liking. Django-rest is another contender but I haven't tried that yet
Where did you get a 7KiB version from? If I download Select2, the select2.min.js file has 22KB
The benefits of using Django include not having to rebuild a lot of boiler plate features again and again. Things like the admin panel for example. When I used web.py I always had to build some kind of way to manage users easily. Login pages, logout pages, error pages.

I do not know much about Flask and it looks like it has some bare bones middleware and context processor tools, but it doesn't look like it does much more than what web.py offered, well except for all the testing tools (which look pretty cool).

Sure the article has a good argument about separating components, but before you propose your alternative you should include all of those features (decoupled I suppose) that Django does for you already. In addition the patterns page[1] on the Flask documentation is basically a cookbook for things that Django already does, and by the way encourage the one code base architecture this presentation argued against.

[1] http://flask.pocoo.org/docs/patterns/
I think it might be http://pective.com/ , been around since 2008 or so it seems.
You just posted what I had intended to say, only you said it better.
Web Caching with Consistent Hashing
My current landlord in Chelsea walked me through the exact same process. Took 10 minutes.
I think you are being a bit harsh by using the quickness of Django as a 1 line throwaway - the entire purpose is for it to produce quick, simple applications.

There is an entire class of problems (mainly enterprise-related) for which the simplicity (ORM / Auth / etc..) is great. I managed to tie Django Auth into Active Directory which made the user's experience (relatively) seamless, as opposed to the previous reality (everyone with a different password for different applications).

Can't you also use Jinja templates in Django?

I'm not convinced that I would use Django on a large project where I get to cooperate with 15-20 other programmers, but if the scenario is 3 people with relatively normal business requirements it makes a lot of sense.

YMMV.
Worth noting that some passwords belong to the dating website eHarmony. The dating site had a password beach last year.

http://arstechnica.com/security/2012/06/8-million-leaked-pas...

http://www.theregister.co.uk/2011/02/11/eharmony_data_breach...
Facebook Camera iOS App Knows Who You Are On Install
On the other other hand, I don't really like the idea of 1) tying all my accounts to Google (what happens when I want to get rid of my Google account? Or my Google account gets locked?) or 2) having Google / FB be aware of other websites I log into,
Mozilla Firefox 13.0 Final Release on Downloads App
Where is the domain registered now? You can find this in the WHOIS.

Most registrars either own or have a relationship with a service which auctions off all of their dropped domains several weeks before they have even expired (if they are renewed the auctions are voided). If the domain is with one of these registrars, join the auction on their site (or partners site) and hopefully pick it up for the minimum bid.

Here is a partial list:

GoDaddy --> tdnam.com
Moniker --> snapnames.com
Fabulous --> namejet.com
eNom --> namejet.com
tucows --> namejet.com
I think the content question will never be solved as long as

a) Cable companies put the squeeze on content owners to give them exclusive rights

b) Netflix religiously clings on to both commercial-free and buffet-style pricing

It's tricky. You have a movie studio that pumps out AAA features that cost upwards of $200 Million to make, then Netflix comes along and says "hey, you mind taking this really low price for your content, hopefully in perpetuity?" What would your response be? So, it may be awhile before Netflix gets the big-budget blockbusters quickly. That is, unless, their subscriber base goes over 50 Million, then by ALL means game on.

I think that, in the interim, a dynamite move for Netflix would be to acquire a music streaming company like Pandora or Spotify, then a streaming game company like Galkai or OnLive. Push it out on a set top box, a la the OnLive console, charge $19.99/month with the opportunity to rent premium newly-released blockbuster movies, hot records, and AAA games on the day of release for the same prices that redbox or gamefly charges to rent them per day.
The individual salts are added only to prevent an attack with a list of pre-calculated hashes.
You could also store another common salt ("pepper"?) in the code.
Linkedin Password Statistics
Which Comcast says isn't happening.

http://blog.comcast.com/2012/05/the-facts-about-xfinity-tv-a...
I read a similar argument against git recently: too many things to do manually, but the counter argument is that at this level you need full control on what happens and there should be no magic.

So If you have counters table you need to analyse it more often, by hand, because you don't want your rdbms to guess on your behalf if a table is a write only or update only. MySQL do a lot of guessing, like, say, PHP.
A new take on the 'Was my password stolen?'
Exactly, and I have exactly the same eye twitch every time someone recommends tearing out Django's ORM "because it's shit" and replacing it with SQLAlchemy.

Each of those arrows from slide 25 on should have a little label: "Things that you have to write yourself in Flask."
I think his point is that this: "You have to go get a third party auth system" is a good thing. That way if the auth implementation needs to change, it can more easily if it's loosely coupled to the application.
And that's a big part of my question... given that in the abstract water can store any amount of heat (between absolute 0 and the point at which we can no longer call it "water" due to being a plasma of some form), what exactly does it mean for this material to be able to store 4 times as much?

I'm sure there's an answer, because I'm sure the journalist got that number from somewhere, but I lack the connections to know where to begin finding this information.
"The fact is that Google has handled the Android ecosystem poorly and reflects where their motivation lies."

Google has handled the Android ecosystem neutrally, not poorly. It is the device makers and the carriers that are responsible for the situation you're talking about with updates.

It is in Google's interest for device makers to support updates to the latest Android release so long as the hardware is capable of supporting the newest versions (of course, limits to this sort of backward compatibility would always exist, just as they do in the iOS world).
Heh. Who needs

python manage.py syncdb

when you can write a function:

from contextlib import closing
def init_db():
with closing(connect_db()) as db:
with app.open_resource('schema.sql') as f:
db.cursor().executescript(f.read())
db.commit()
Using PhoneGap at all seems like half-assing it to me. Just because some people think iPhone and Android apps should look the same doesn't make it so. A native app for each will look and perform much better.
Ah... yeah, okay, I really should update that. SixOrNot used to be DNS only, but now it monitors connections too.

There's also 4or6, which has easy access to the IPv6-related preferences.
What fonts were used in this? I like.
The World Tomorrow : Cypherpunks Part 1
This. Since February 2009, when Google released Google Earth 5.0, adding the animated waves [1], I've being thinking that eventually, they could actually make a nicer animated coastline, like in so many games now. But comparing the satellite view, with the map view, maybe the resolution is not currently good enough to make the simulated water overlap perfectly the pictures and make the coast look nice.

[1] http://www.gearthblog.com/blog/archives/2009/02/post_3.html
> Presumably Google, not Apple, is profiting from those sponsored links, but I've never seen confirmation either way

I don't think that's correct. Apple makes the application, not Google. It's possible, but it seems unlikely that there's a clause in their contract that says, "we'll give you map tiles, you also have to show these sponsored links."

It would be great if Google brought a Maps app to iOS, if only for the competition.
Thanks for submitting this. I did say 1.7.10 was required in the article.
Django's auth system is not that hard to hack on if you need to - in most cases you just need to write a custom backend and implement a few methods on it. It's certainly comparable to writing your own, or downloading something and integrating it.
I'm amazed someone took the time to develop this without thinking of the potential trust issues involved.
Disrupting Vinyl: VinylLoop
ASK HN: Need help with determining equity split for seed funding
So this is where I stand. I have an idea for a mobile app in the property management industry. I have it spec'd out and potential beta customers. The only thing holding me back is getting it built. A property management company has offered to invest (30k) to get the app built.

I am trying to determine what a fair equity split would be. In my head I am thinking 80/20 but I believe he is leaning towards the 60/40 range.

What do you guys think?
Nike Air Foamposite One Shoes For Sale
BrowserID specifically addresses these concerns.
Cool!
I've used Google voice on a throwaway gmail account. But this is easier.. Can it receive text messages?
Census Bureau Developer APIs
cool, thanks! what did you do for page transitions? we see that zepto handles the touch events and dom events.
Theoretically and even practically, MD5 has other issues. It susceptible to collisions:

http://www.mscs.dal.ca/~selinger/md5collision/
> or provide DR consulting to HFT joints

Unfuck this jargon for the rest of us please.
wtf is that ?

edit: using the current toolchain it's:

alembic upgrade head
For a "worst-case" attacker -- one who can fab his own ASICs -- cost is proportional to the area of silicon used. RAM takes up die area, and it's something commodity systems have plenty of.

Basically it's a matter of "what do we have which they would have to pay extra for".
I met the OP
Spoelski has a great rant about frameworks and the concept of abstractions ad nauseam: http://discuss.joelonsoftware.com/default.asp?joel.3.219431.

In a way, frameworks are inherently stupid, but who's to decide where between assembly language and x layer abstraction people should work in?

I think people who criticize Django have yet to make up their minds about what a framework is all about, and what, if anything, it's for. They just hold on to their utopian idea of what their framework should be.

Django was created for practical purposes by people who used it in publishing. I think that's a great foundation for a framework - for some people - and piling on it is just a stupid bandwagon.

---

EDIT: I found a better way to put this: the author doesn't have a problem with Django; he has a problem with the concept of frameworks.
I don't know much about Django/Flask, but the arguments presented seem to apply to Rails as well. At my company we're moving off of Rails completely in favor of SOA structured architectures where the web views and APIs are built on Sinatra.
Divvy Review
I don't disagree with you!

You can certainly use Jinja2 templates on Django, for most uses Django templates are ok
I'm really tired of seeing memes & my little pony references in presentations. I thought we were adults?
Kahneman is a must read for founders trying to better understand users, or more accurately, the complexities of trying to please users...
Upvoting you for asking the question.

Too often people assume one way or the other (and come up with their own hare-brained password encryption scheme, defending it from all-comers).
I don't believe this is correct. I can't think of any instances that sponsored links have been inserted into my maps, and the terms of service still say that they reserve the right to insert ads in the future (with a 90 day warning), but that they don't do so right now.
Wow, you were right: They had a bunch of stuff on Einstein.

http://vault.fbi.gov/search?SearchableText=einstein
Thanks!

Titles are High Tower Text (Flask Logo Font): http://www.fontyukle.net/en/High+Tower+Text.ttf

Text is Gaudy Bookletter 1911 (Open Source!): http://www.theleagueofmoveabletype.com/goudy-bookletter-1911

And code examples are Monofur: http://www.dafont.com/monofur.font
The life of a 'booth babe': high heels, long hours and leering visitors
It's from Flask's recipe section: http://flask.pocoo.org/docs/patterns/sqlite3/#initial-schema...

edit: not if you're using sqlite, since alembic doesn't seem to try too hard supporting it.
Found there is also a third party module, made by the same guys who made LIKE able to use pg_trgm indexes, called wildspeed. http://www.sai.msu.su/~megera/wiki/wildspeed

It may be faster than using pg_trgm but I have no idea if it is still maintained.
the actual slides are currently #1 on HN
Wow, this is good government. I can nitpick the API details, but this is one giant leap in the right direction.

Under US law, the federal government can't claim copyright on works produced via tax dollars (makes sense). Since the feds can't require us to provide attribution for all this helpful data, how do we as a community advocate for more open data like this?
I just tried fish for the first time, and it couldn't do the very first thing I tried to do, which was source my .zshrc. It doesn't have 'export', has some kind of nonstandard syntax for 'alias', and that was enough to get me to give up.

Since there are many fish fanboys here, and since it seems like it would be cool if it worked, I'm hoping someone can tell me the simple obvious thing I should have done. Can you help?
Likewise, my password (MybXy836YCza), which wasn't used anywhere except my LinkedIn account created 29-Jan-2012, and has been stored securely at my end, wasn't on the list (either as a full SHA1 sum, or as part of the SHA1).

As you probably guessed from the fact that I posted my old password, I changed it just in case the list that was shared is only a partial list of what was obtained.
This is a really good example of the kind of app that users want now. A completely custom UI with a distinct style is what it takes to get attention. For better or worse the stock UI is out and it's actually easier in some ways to build this kind of UI in HTML/CSS.
And thank god for that. Android started out ugly, but I don't hear many people asserting that iOS apps are de facto better than Holo-themed apps for Android anymore. Frankly, I feel like it's 2003 when I pick up an iPhone. Plastic and faux-wood. Comforting.
How much do you expect it to make annually ? If it's millions then 30k doesn't mean much. If it's 5k then 30k means a lot.
Your calculation doesn't account for the artificial barriers that some ISPs put up by charging the CDNs to peer with them (see Comcast and Level 3).
Apple seeks to block sales of the Samsung Galaxy SIII in the U.S.
Adults can't have a sense of humor?
love it , on the side note , it might help to train fresh developer, example create series of request and get the fresh grad developer to go through ?
This was my exact thought about leakedin. One of the easiest and best methods of scraping real passwords. Even if it is just the hashes.
Linkedin still has no idea how the attackers got their hands on the passwords. What if the backdoor is still open?

The primary issue here is that the passwords are hashed unsalted, not that they've exited the building.
http://pydanny.com/choosing-an-api-framework-for-django.html
Columbus Plastic Surgery
I found my lost iPhone thanks to 'Find My Friends' App
> try to imagine a scenario where there could be an operator== timing attack on a password hash

Sure, that's simple. You're leaking information about the password hash to the attacker, which they can use to speed up an attack where they have large offline resources but are limited in their online guessing capacity.

Let's e.g. assume we have an unsalted hash, but the system limits us to one guess per second. The password is hashed, then compared with ==, taking some variable time we'll assume can be measured.

We use an iterated timing attack to discover a prefix of the password hash, then run an offline dictionary or brute force attack using that prefix. Passwords that match the known part of the hash are tried online, potentially revealing more of the hash as we go.

> It feels sometimes like people hear about the idea of timing attacks and then want to see them everywhere.

When it comes to side channel attacks, "vulnerable" is the default state.
Not listed in Google Play? :( I would have even paid for it to try it.
echo abc > file

1. cat file

2. cat < file

3. echo abc|cat

4. echo abc|cat - file

cat can take input from the left, the right, or both

same goes for cut
Can someone explain to me why FB chose to use credits over just actual money balances? Is it psychologically designed to get people more willing to fritter them in the same way it's easier to blow chips in a casino than real cash? Is it a way to funnel multiple currencies into one global currency?

It just seems like an extra unnecessary convoluted layer to me. Having a credit balance over real money balance is unnerving for me and would mean I would never put too much money on at any one time, there's too much risk of something bad happening like quick devaluation. Also it would probably be far less liquid and harder to convert back to cash.
What if my password contains % characters?
Zepto is 24k. Does that extra 70k really make that big of a difference? A single retina resolution png is going to be bigger than that. I think there are other reasons to consider a library that's tailored for mobile webkit but size doesn't seem like a dealbreaker.
if it's getting to your client via HTTP there will be a way to get at it, legit or not.
How is this better than the yelp search functionality (other than the fact that I'm not a fan of Yelp's UI)?
Ray Bradbury: Take Me Home
Google's New 3D Maps
So here is a question that I've asked and received no good answer. Why size of the salt doesn't matter? Wouldn't salt be used in every hash computation? Wouldn't large (megabytes) salt slow down this computation and require more memory to perform it? I'm not advocating the use of large salt as opposed to specialized functions, I'm just curious as to why it doesn't work. The article doesn't explain that.
This opens my mind up to a whole new slew of ideas using their information so easily..
Or the fact that Carmack has driven a lot of innovation in 3d hardware for that matter. (Tim Sweeney likewise.)
Hi, ridi here!

This bug is actually fixed with my changes (see the release notes at http://ridiculousfish.com/shell/release_notes.html). The maximum history length is now 250k unique items, with an LRU discard policy. A full history would be around 15 MB.

Processing time is one concern. fish doesn't do anything as clumsy as keeping the entire file in memory, but scanning a large history file can still add up.

But the larger concern is writing it out. fish saves its history atomically by writing an entirely new file to disk, and swapping it in. You may not notice a 100 MB file, but you would probably notice a frequent 100 MB write!
performance issue, all this javascript code has to be parsed by the application before it is able to execute it. So you might end up parsing 95% of jquery/jquery mobile code that your application won't use.
I'm heading this way on a PhoneGap app I'm working on right now. Once you give up the goal of a pixel-perfect emulation of a stock iOS UI the combination of Zepto/Backbone/CSS is pretty powerful and much, much faster than Cocoa for prototyping.
You sound institutionalized. Django is indeed awesome for having a ton of features immediately. Of course, once you need to start changing those features you realize you have to dislocate your shoulder to do so.

Django is badass for what it is intended to do: be a kitchen sink. Flask is badass for what it is intended to do: be a platform for composable applications. If you ever need to reason about the internals of your web framework, you want the latter. If you don't, the former is great.
The problem is that it's hard to tell when value arises from the elimination of a deadweight loss and when it arises from externalization of costs. E.g. environmental regulation generates some deadweight loss in the form of compliance, etc. It also seeks to internalize inherent costs of activity that would otherwise be externalized. If we got rid of the regulation, a factory owner would see a small amount of benefit from the elimination of the deadweight loss, and a very large amount of benefit from being able to externalize the inherent environmental costs of operating a factory on the local community.

In the situation of AirBnB, the externalities are imposed on all the other residents of the building and the neighborhood who signed up for apartment leases on the assumption that random people would not be coming and going. The value that accrues to the AirBnB host is generated partially by the loss of value to his neighbors. So what you have is not a creation of value, but rather the opportunistic transfer of value.
nice article from a magazine i wasn't familiar with.

does anyone have any more recommendations for "in-depth general interest" magazines? the classic is the new yorker, and the one i (re)discovered recently (mostly through links from places like HN) is the atlantic monthly.
I think that it's not just blank passwords, incorrect ones too.
Here's the standalone vmouse I use. It can be dropped into any project alone whereas the jquery team's vmouse cannot. https://github.com/michaeldhopkins/jquery-mobile-abstract-to...
It's difficult to refute this line of thinking, except in practice.

In practice, I think large frameworks are eventually pretty terrible. It's too easy to compromise your business needs in small ways because the framework offers you something close-enough. Whether those compromises come in the form of over-coupling (which they always do with these frameworks), or in other ways like compromised URL design, query performance, or authorization plumbing.

Great at first, but in my experience a project run long enough in one of these ecosystems tends to outgrow it.

Being faced from the beginning with more of a blank sheet of paper and open ecosystem of solutions to choose from (or build) tends to make you more aware of the trade-offs, and how well the solution you're implementing fits your business needs. Costs more up front, but you're less likely to grow a hate-tumor during years 3-6.
It's easy to make a boring but informative presentation. It is much more difficult to make a funny but informative presentation. Of course, if you have no sense of humor, I must assume you are a lost traveler from Boringland.
The FBI is nervous about IPv6
As landlords, we obviously have language prohibiting these sorts of actions on the parts of our tenants. But that isn't just because of our own greed. Tenement homes/boarding houses get worn down quite a bit faster than rentals. It's easy to end up with the property completely trashed, it's easier to get sued or otherwise in trouble, and it's easy to end up with neighbors complaining and disliking you.

In addition to all of that, often codes simply don't allow boarding houses, regardless of who is running them. One of our renters tried to run a boarding house without our knowledge, and when the police were called to one of their parties, the city threatened to levy considerable fines against us for running a boarding house, regardless of whether we were actually running it or getting any money from the tenants.
Really, drunken pony parties are 100% relevant to a talk about django. I don't think the slide deck would be complete without it.