skysight-inc/HackerNews huggingface dataset:
Doesn't that still leave the door open to database compromise?

What are the practicalities of distributing the system among various technology stacks, minimizing the damage caused by a 0day or single engineered attack vector? Really thats just security by obscurity and the solution should be a robust system to begin with but I'm wondering about anticipating the human mistakes that render an otherwise secure system into a series of news articles like we're seeing.
"A Million Bucks Lying on the Ground! Not Exactly"

http://cityroom.blogs.nytimes.com/2011/10/24/a-million-bucks...
You're thinking of AGPL for requiring source distribution when offering a service over a network.

IANAL but I don't believe GPLv3 changes anything over GPLv2 in this case, although it does tighten up some loopholes in v2 over what does and does not qualify as "distribution" (although in all cases the end user is still sent the software to run on their hardware, not just the results of the software.)
Can't do that on an iPhone or iPad
That's actually a by-product of prohibition. When they reversed prohibition, a regulation was put into place that the manufacturer, distributor and seller of alcoholic beverages all had to be separate (not owned by the same company or individual).

The gov't decided to step in and do all three after prohibition and it's been a VERY slow move back into the private model since then.
The AGPL variant has a clause for web services, AFAIK the vanilla GPLv3 does no such thing.
I don't really know, thanks for pointing out, I'll google that. I thought it would be wiser to search for a professional to do this. I can maintain my own VPS, but managing a virtualization box seems to be a complete different beast.
I'm somewhat confused about B. The monetary base is indeed expanded through the issuance of debt in fractional reserve banking, but when the Fed pursues expansionary monetary policies to keep the interest rates low doesn't that increase the money supply without the creation of debt? Or is the effect on the money supply of the expansionary policies of centrals bank small in comparison to the effect of leverage ratios of fractional reserve banks?
Haha I love the commentary in the JS source:

"Hi there

You are here for one of two possible reasons:

1. You are creating a card game yourself and want to look at the source
to see how it's done.

2. You're trying to figure out how you can cheat.
.
.
.
.
"

http://www.spades-cardgame.com/scripts/spades.min.js?1338670...
We all do it daily with Facebook et al delegated authentications.
Emergency Use Glasses, You Can Take Anywhere
That's actually very interesting, I was unaware of that.

I wonder if the very difficult examination serves to act as a natural limit on the number of taxis?

Because my question is, what is the supply-and-demand reason that there are only 21,000 cabs in London, instead of, say, 50,000 or 200,000?
Programmer's dark side
After your comment I was expecting a homepage with irrelevant information. Maybe some's blog.

I will not spoil the surprise for others but I will say that I did not expect what I did not see.
Some firms may have lumpy cashflows and are unable to put up all of the cash at one time for a purchase or they simply just may not wish to part with current cash holdings.

Often if a firm is willing (able) to pay upfront in cash they will receive a discount such as being required to pay only 0.8x, for example. The key point is that the true cost of the goods is in fact 0.8x. while x is the financed cost.

Net 30,15 and so on is a form of financing the purchase to the purchasing company. The rate that one must pay to get the goods today and pay in thirty or fifteen days should be compared to other forms of financing. A firm should consult a bank for instance to determine if they can finance the purchase at a lower rate.
It was an acqu-hire exit and was for $25m.
By the way, I'm seeing lots of broken images on your homepage. Just FYI.
Gource-like commit animation
1) That'll be cool and in fact easily implemented. One of the reason why it din't do it was Candidates need to setup the server and stuff. Some might readily have it, some might not, which might skew the overall time taken.

2) Agreed, may be ask them to login through facebook or twitter before solving the challenge?

3) Launched it like 20 days back :). I wanted a more complete demo with voice over but some suggested that my indian accent would turnoff a lot of audience. Have mailed a few voice over guys.

Over all, all the 3 can be done, will mail you once I have them in.

Thanks for taking the time to checkout cull.io!
Isn't that just natural supply and demand at work? You will get the equilibrium when the price of the cab fare is equal to the real cost of it. There are not 50k cabs, because there are just so many guests that want a cab. Or do I misunderstood you?
It's not much of a critique to say that one thing is bad and another one is better. Batista didn't really give any explanation for why he thinks Pixar films are bad, which when you're talking about some of the world's highest approval-rating films, tends to be a bit content-free.

A detailed critique would be interesting; simply to say they're "naive" is... I dunno, naïve.
To elaborate, it's rude to take someone else's project, and under the same name, publish it elsewhere. This has been a rule of open-source for a very long time.

If you're going to fork someone else's project, either rename, or call your github fork a mirror (and treat it purely like one).
asked rms few months ago if it wouldn't make sense to change the gpl in the direction of "no military use allowed". he replied that would destroy the "free software philosophy". i disagree. hate the idea that human beings are killed with the help of gnu/linux and/or free software.
Due to network effects, some developers can only create the app they want and have it succeed by making sure they can get users. Excellence for such software is dependent upon adoption.
I think we should seriously rethink regulation within the cab market. Yes, we need to ensure some sort of standards for security reasons, but shouldn't the cab market be prime for the traditional free market theories?

I don't get this whole licensing deal, fixed tariffs and medallion system
Same here, but mine is

nnoremap <Tab> gt
nnoremap <S-Tab> gT

Normal mode tab switches through tabs. One (and two) key goodness.
How much coding experience do you have? Are you able to list all the projects you've worked on and what you did for them?

If you're looking for a corporate job of course they will screen you out because you don't have a cs degree. This is one of the reasons they're terrible at hiring.

I have done lots of resume reviews, phone interviews, in-person interviews, and hiring for a big company. When you're looking at a stack of 500 resumes your goal is figure out how to filter that down to maybe 20 or so of the best looking resumes. It's dumb I know.

The most effective way of getting noticed is through a strong referral. Otherwise, you have to figure out how to really stand out. Do you have a portfolio to show projects you've done?
I wonder if GPS has downplayed the role of having to memorize the streets of London.
I'm curious; do you have a source for this?
They usually use less than one bit per password.
"The markets will choose the currency, which they think is the best for them."

This is true, but that doesn't mean the currency will actually be better for them. Deflationary currencies are attractive to sellers and employees. They will choose them if given the option. The ill economic effects of deflationary currencies have been demonstrated.

Your phrasing seems to indicate that you believe that market-based outcomes are always ideal outcomes. I think that is incorrect.
In my business float is the big one - we pay our contractors at completion of work, which means if our clients pay us when they receive the goods, we’ve got to come up with the money to pay the workers before we’d gotten paid. This can get quite painful quickly, and meant in the early days we’d have to turn down large orders because we didn’t have enough float to pay the workers.
Kids & In-App Purchase on iOS
Yeah, I feel like it's one thing to offend us, we're adults. It's a little too late and at the very least, we can harangue someone or something or punch 'em in the gulliver and effect a (little) change. But kids? An entirely different thing.

I grew up in the 80s, feeling that I could do anything and be anyone I wanted to be. A scientist or a singer? I was going to be both! Also, a writer! I feel really blessed by that; but my biggest worry looking around at TV and toys and games lately is that everything's so horrifically A/B tested that any kid who feels other (due to gender, race, or other differences) is marginalized and subtly given that "you can't" message.

I don't have the data, but it really feels like we're in retrograde (like what's up with the "So simple your Mom can use it" crap? My Mom ran an ISP in the early 90s & she's an XML nerd, simple is just going to turn her off...my Grandma was on AIM before most of my friends). I'm hoping there's something we can do to stop this cruddy discouragement--we really need everyone firing on all cylinders and diversity only strengthens us.
You're dealing with a higher quality build, so I would imagine you would have a bit more free space and bit more battery life.
W3 Total Cache Settings
I'd imagine he was also tired (travel and new people/circumstances do that), plus perhaps a touch of blaming the victim (himself), and realising the implications of letting down other people/places on the rest of his tour. An emotional reaction like a facepalm means he is human with feelings, something some people are forgetting.
There is no difference between a browser and an app store.
(Upvoting this post so others can see the context -- don't let your disagreement rob others of being able to follow the conversation, HN!)
Think about this for a moment.

In some Microsoft Office, they must have had a meeting, went through the plan and said: "Yes, this is a good idea. This will get people interested in Azure. This is awesome".
Doesn't that still leave the door open to database compromise?

Well, if you have it in the same DB table you are still at the mercy of database compromise. Better would be to store the salts in a separate table from your password hashes. Better yet, store it in a different database. And even better, store it on a different server.

What are the practicalities of distributing the system among various technology stacks, minimizing the damage caused by a 0day or single engineered attack vector?

Yes, having the salt in a different type of db from the hashes adds protection from zero day exploits exposing one brand of db. A combo of NoSQL and SQL seems logical.

Really thats just security by obscurity

Security through obscurity is not a bad thing, as long as it is not the only measure you are taking. But anyway, you need to have security through obscurity - or are you suggesting that making your salts and hashes publicly accessible would be ok? Or is it a good idea to obscure it?

and the solution should be a robust system to begin with

Of course, you should do everything possible to make system secure. A big part of this is to try to minimize the number of single point of failure attack vectors.

but I'm wondering about anticipating the human mistakes that render an otherwise secure system into a series of news articles like we're seeing.

Well, a lot of these news articles could be lot less worrying if people were salting their password hashes properly.
Why not use lazy rehashing? On login, the password is availible and so can be rehashed properly.
Just use a hardcoded application salt (significantly large, >128 bytes is more than enough) in addition to your per-user salt (stored in the DB, or derived from a DB field). That way, an attacker would need both code access and DB access to crack the hashes, and if that happens you're basically screwed beyond redemption anyway.
Linus himself said that emailing tarballs and patch files is better than many source control systems (he said this about SVN)

I myself have seen (and had the mispleasure of fixing) many tangled git history trees.

In all cases, you have to be responsible, which neither influences or is influenced by your choice of revision control.
> If you were paying them and they were making a profit then you might have a better chance.

Not necessarily. A non-free service is unlikely to get enough traction to remain alive.
It seems the relevant quantity is whether

P(important outcome | work on unimportant project) >
P(important outcome | work on important project)

I doubt it.
They're using Unity. Check the jobs page.
Not necessarily. A non-free service is unlikely to get enough traction to remain in business. And I can't think of a single paid messaging client.
It doesn't really matter if you're salting or not when you use really fast general purpose hashing functions. Consumer video cards can calculate half a billion SHA/MD hashes per second nowadays. You're talking minutes vs seconds. Unacceptable.
A lottery would be terrible for this in my opinion, especially for individual drivers. Who would invest in buying a taxi if they could potentially lose their medallion the following year? Not to mention the rediculous position to put a driver in if he loses the lottery next year and then is forced to find a new form of income. Just imagine the implication for any other profession: tomorrow you may lose the programmer medallion lottery and be forced to learn something completely new from scratch. It would be bad for the industry too since churn would happen randomly vs organically, meaning unecessary amount of "green" new drivers who don't know the streets as well, etc.
She.

http://crna.cc/
It doesn't seem like many video game battles last more than a minute. If you're still fighting somebody after a minute, that's either a very slow game or one or both of you are playing very conservatively.
Hm. I found it pretty entertaining. On a side note, I visited your site, fractalcat, and got "Unhandled Exception" when I tried to check your blog.

So, cool comment, bro.
I have to agree with rms here. No X allowed is inherently anti-free software. In cases like this one has to think long term, as in how freer software can lead to freer societies, i.e. societies that escape government coercion. That itself I think will lead to a significant decrease in military activity because free uncoerced citizens can stop their governments from engaging in such self-destructive acts.
On Simplexity
They are also protected by it; the sword has a few edges.
Why is it named clang? So very very confusing.

http://en.wikipedia.org/wiki/Clang
Another Shoe Drops on Facebook
First of all, how in the world are they "buying" Linux from Raytheon? They're apparently buying 28M of "services" from Raytheon, not "Linux."

Second of all, what's up with all the stuff that one would think should be classified info showing up all over the media lately?
Just wait until someone names a whizbang plugin "nerdsboggler-jimcrickey.vim" out of sheer spite!

Nowadays I do load a few plugins myself on the machines where I do a lot of coding or writing, but the only one that's useful every single day without fail is Tim Pope's Surround [1]. It's so useful so often that I've often thought Bram should simply ask to make it part of Vim's core to supplement the very cool idea of text objects [2]. Even if you're a crotchety old raw-Vim man, I really would say that you've got to try this out.

There are other very good plugins out there. Fugitive [3], also by Tim Pope, comes to mind if you do a lot of Git work and care about crafting really nice commits.

[1]: https://github.com/tpope/vim-surround

[2]: http://vimdoc.sourceforge.net/htmldoc/motion.html

[3]: https://github.com/tpope/vim-fugitive
I think tgakick.com and the return of Sierra games is more realistic. Pledge today
Good question. It has not changed because of that. Drivers are supposed to be able to immediately choose routes without consulting any kind of map.
Even if the government was buying it from Raytheon, this would only mean that the government must receive a copy of the source code under the GPL. It does not mean the software must be distributed freely to everyone.

As I understand it.
This page, when I read it a couple days ago, was pretty bad.
Now if only I could get Linux on my Navy desktop, instead of winXP under NMCI. I have all but fired my issued desktop and do as much as possible on my iPad and MacBook.
Humble Indy Bundle V receives $4 million in one week
First Streaming Video iPad App to allow in-app Purchasing of Subscriptions
"Someone I know, gender unimportant, that only reads the ads and the comics. I'm just asking if you're doing similar."

This is not a sexist line of thinking. I would, however, consider it somewhat rude. No, it's my paper and I bought it and you have no right to expect any share of it ... unless I'm kind enough to drop it when I'm done or take only the sections I want.
Fiat is money without intrinsic value or deriving its value from law. For bitcoin, that law is code (ht Lessig).
Which smtp server are you running and what language are you using?
BEM - CSS/JS practices from Yandex
My understanding is that back in the 80s & 90s when he was being considered for the Supreme Court he was repeatedly blocked by Joe Biden then chair or ranking minority member on the Judiciary Committee. Not sure of the exact issue that drove this.
Don't get bogged down in the pedantry of realism. When 'realism' is mentioned in gaming, it really means 'realism that assists immersion'. You'll occasionally see articles about balancing realism versus gameplay - if something is real enough to turn you off the game (like boredom from slow movement speed), then it's reducing your immersion.
My first thought was "this is sad news for users of their great IM client, but at least it means no more Meebo Bar."

Then I read: NOTE: The Meebo Bar will continue to be available to site publishers and will see continued improvements and new features in the weeks and months ahead.

So, basically, the worst of both worlds.
verification comes before payout
Slice, dice, and julienne enemies in Metal Gear Rising: Revengeance
Any suggestions on getting started with emacs and evil?
Why do you need medallions at all? The drivers already have licenses - just make the background check part of getting a license, and just charge 100$ for a license. Let as many people be taxi drivers as want to be.

We don't worry about reducing work to a living wage in any other field - we allow free entry into carpentry, construction, business & don't require them to buy medallions before starting to work.

It's a general problem of resource allocation - just like cancer. Some group or cell identifies a resource and starts diverting or blocking it for their own benefit, and this increased power/energy is enough to protect the problem from unmotivated defenders.
i'm wondering if for the content submitters, it gives them added motivation to get paid as soon as their content gets verified.
Or you could just buy a bare-bones cellphone from Amazon and save yourself the trouble?
I basically always assumed that, in huge cities like NYC and London, because streets are a fixed resource, the only way to prevent severe congestion by cabs was by limiting the number of cabs available. In other words, that the natural economic supply-and-demand of cabs would be a number too large for the streets (or at least annoyingly large), thus the necessity of limiting them. But perhaps my assumption is wrong, and the limited number of NYC taxicab medallions has nothing to do with fear of taxi congestion.
i know this all-or-nothing-argument and yes it is correct. it's about purity of the idea of free software, but killing humans is not pure. so how can the idea stay pure therefore?

and what do i tell my grandchildren if the ask me one day: "grandpa, why exactly did you write that big while-switch-statement which killed 6.000.000 people in 2016?"
A minute is a long time for a single fight in a video game.
Vim only seems hard because it's so profoundly different. If you persist for even one or two evenings, I'm pretty confident most Hacker News readers are easily sharp enough to be back up to their old speed in Notepad-type editors, and from there you only get faster.

You don't have to learn it at work either. I find it's helpful to make Vim the only text editor you ever use with a dark background. The visual cue seems enough to put you in "Vim mode" so you press i before you start writing. When the background is white in your whizbang C# IDE or a Hacker News comment box, you just use your old editing habits.
maybe they were able to shut down an office or two? I don't know... $80 million does seem strangely high
Russ Cox finds the 'hardest' 5-variable Boolean function
Speaking of google, when the hell are they going to release a GChat app for iOS? The GMail web page on iOS doesn't have GChat, so I went searching for an app on the Apple App Store a while back and found one. I'm pretty sure it was just a UIWebView wrapper which sent a different user-agent to fetch the desktop version of GChat, and it wasn't long before it broke (I think google had changed the GChat URL).
Political cheer-leading in an election year.

http://hotair.com/archives/2012/06/08/obama-im-offended-that...
I'm very pleased it was useful. I'm surprised to see it hit HN; I wrote it back in January and it had a lukewarm reaction on Reddit and not a peep from HN. Then again, I normally don't submit new articles to HN.
Adobe patches critical Flash bugs, ships sandboxed plug-in for Firefox
Using Chrome and Vimium on sites like Reddit and Hacker News almost feels like cheating -- "I shouldn't be able to consume this amount of information without even having to move my wrists."
$3.5m for lunch with Warren Buffet
Where I disagree:

End of line comments are very useful when grepping.

No space inside curlies: {a:b; c:d;}

80 chars is not a sensible width, too short.
I found NERDTree had no advantages for me over just plain :Vex. I'm sure it does have other features, but how whizbang does a file browser need to be, anyway?

Besides, anything you want to do outside of choosing files to edit in your editor should be done in a shell: http://blog.sanctum.geek.nz/unix-as-ide-editing/
Are you ready for Windows 8?
// While i goes from 0 to 50.

// --------------------------

for ( int i = 0; i < 50; i++ )

Well, doStuff() only happens while i goes from 0 to 49, so maybe this comment reveals a bug.
Good idea, will try it out next time I'm in it.
A field which 3D printing will really change is aircraft components. In conjunction with computer based topology optimisation (using simulations to find the absolute optimum 3D shape for a component), 3D printing will allow us to produce really, really light components. CNC mills are quite limited by tool paths, something which doesn't impact 3D printing at all.

There's also a huge amount of potential in advanced materials. Titanium is really, really hard to machine and also very expensive (lots of wastage = lots of cost). 3D printing titanium (with lasers for sintering) is much easier (although quite slow) and can lead to very low material wastage.

It probably isn't going to change an average persons living room in the next 20 years. It will change (in some cases significantly) the design of lightweight components on aircraft and other weight critical applications.
What reference would you recommend instead?
I get the feeling that a swordfighting game as described in the article is going to pander more towards "be a medieval knight/brigand/samurai" than "be an Enlightenment dandy/fop"