skysight-inc/HackerNews huggingface dataset:
What? I simply meant that if some brainiacs think robots.txt can just be disregarded, it's time to make it a minimum requirement of every self-respecting webmaster to make a tarpit (disallowed in robots.txt) and ban any and all bots going there. You would exactly NOT want a human visitor to post, or ever see, such a link. So yeah, it wouldn't even apply to this github thing, but don't tell that other guy about it.

These are supposedly good guys. So my reaction was "You gotta be fucking kidding?! You didn't just say that it's inconvient how some sites use robots.txt, so you just throw it out altogether for your precious little bot and epically important link checking quest. No wait, you did. Oh well then, BYE."

Oh well. I guess this is hack news, not hacker news, my bad :P
Simple Rules for Starting a Company
Damn it, guys, this is very close to the idea I've been working on for a few weeks. Now I'm going to have to go back to the drawing board :)

But at least you have a well-documented API, so maybe I can build something on top of Gimme Bar. Anyway, looks great and can't wait to try it out
How To Win The Talent War - Hiring for startups
I use a really hackish perl script to wget, diff, and wget -r websites in this way, because articles disappear way too much for my liking. This product looks wonderful and I'll be playing around with the API as soon as I have a spare moment. Thankyou for this.
I know it probably won't happen this way, but I hope Netflix and Amazon pull together awesome original content and smoke these guys.
As long as HBO is owned by Time Warner, and the money left on the table from not offering an online option is less than the amount they're making from their own cable offerings, they won't change.
I work as a civil engineer and would be miserable without scroll wheel zoom in CAD. I automatically use it in maps.

I assume your concern is that it can scroll the page and the map. If that's the case, then the wheel zoom is not the poor UI, but using it on a page that exceeds the screen length is.
Product management doesn't have to exist
could be avoided with a more strongly community lead process

Would that have yielded something better? I would argue that it would have yielded nothing.

Though nonetheless I am a bit confused by your comparison of the two. WebSockets are not "another way of doing HTTP". SPDY is. They are separate solutions for different problems.
(Not an expert) The entropy doesn't change. What you get by adding another hash function is a slightly larger die area (and thus the cost) required for brute force attacks. By using scrypt instead of PBKDF2, you can adjust the die area required for attacks in a more flexible and safe way by just giving it a different parameter.

Hash functions have different requirements than key stretching functions, but if you're interested in the security of combining cryptographic hashes, Google for "combining hash functions" and "chaining hash functions" -- there's a lot of interesting research.
Contact me, please.
This is the future of this market. If they're not willing to move there, someone else will and eat their lunch. I like HBO, and they still have plenty of time to make the move, but if they fail to do so I won't mourn them.
How retailers can fight the Amazon Goliath
A Cheap 12-Core, 30-Watt Ubuntu Cluster
This is already happening. Search for "android hd gameplay hdmi" on youtube and you see countless examples of connecting an android phone to a HD display through HDMI.
Hell, there are examples of streaming Netflix on your HDTV.

Phones already support bluetooth, so there is no reason why a couple of dualshocks cannot work with my android phone for team gaming.

I daresay if Sony did not have its "sunken cost" pathology about the playstation consoles, it could rule the gaming world - it already makes Playstation phones and it is one of the world's largest game publishers - it is just too scared to take the final leap. In one shot, it could come up with a phone and game library that could cannibalize its PS2 range.
It's cool, they don't want my money so they won't get it. I'll keep getting their stuff from Usenet for free.
SCTP doesn't pass through NATs.
No, but it takes dedication and discipline, not necessarily brilliance.
Usually, when there are such transitions and the big guys wait it out, it's them who lose out in the end.
Opera Software is located in Norway. Let's see how much "respect" you have for the language if you have to write in Norwegian.

I bet their English is better than yours. You didn't even start the first word using a capital 'S', so you have a mistake already when writing a single sentence.
Judge estimates 30K secret spying orders approved yearly
I can't see any point in signing the params - an attacker only cares about the CC info, not some hash value. The only use for a secret key would be to encrypt all the params. But SSL already does that...
if( !Australia )
document.body.setAttribute("style","-webkit-transform: rotate(180deg);")
s/bigdata/tulipmania/g
Factory workers riot at Foxconn China
That it was the death of mankind/Earth (not as in evolution, but as in "doomed").
Isn't it going to affect performance to have your server talking to your DB over the internet (as opposed to a local network which I presume is the case when running EC2 instances in the same availability zone)?
Microsoft building an app ONLY on android and has ONLY facebook authentication and uses javascript for coding. What a combination!
Poor choice of words in "God's work." I didn't mean to insinuate that they had to be religious, just that they are hacking for some ideal(s) rather than personal gain or just to be a dick. Anonymous, for example.
Microsoft has officially opened its cloud up to a non-Windows operating system
TheSpec:Hamilton Business Magazine Rocks
That is a great story and sums up much of my perspective quite well.
Then they should expect piracy to continue.
This is the classic example of FOSS apathy towards users.
And thousands now feel completely justified in pirating their shows. I can't help but think that HBO is losing out here by not listening to their customers.
And here is the problem. If i dust your crops with my patented pollen, you are now in violation of my IP rights. How does that make any sense?
The problem with your article is this sentence:
"digital sales via outlets such as Steam not taken into account for this total"

Digital distribution dominates on the PC now, and if your figures don't take it into account, then your figures aren't very useful.
> Are you attempting to reencrypt the parameters with another key? If so then why run that through https?

I think they are talking about generating a hash from all of the parameters in the request + a secret, pre-shared key. Doing so prevents MITM attacks from changing the parameters.

IIRC, Amazon does this (among many others).
Nope, it's the second time they've brought a vehicle to production.

And unlike the Roadster, which was a $100K toy for rich people, the Model S is a practical $60K sedan for not-quite-as-rich people.

I worry that the market is leaving Tesla behind, though. With the Chevy Volt and Nissan Leaf on the market, not to mention the gorgeous Fisker Karma, the case for a Model S is getting weaker.
"Rushed" is the wrong opinion to have about it.

What's impressive is that at no other company you could wake up one morning and say, "HTTP is slow, so let's change that." Google, amazingly, can do stuff like that, and I'd rather them ship early than not ship at all.

(Well I guess Microsoft could have done it but they would have screwed it up like every other net technology they introduce and then we'd have two internets or something worse.)
I read until I stumbled upon that line:
"I've been a programmer since I was six."

You're NOT a programmer at six, you are a KID.

You can play with computers, but being a programmer is a whole other story.

You can tell yourself you're a programmer when you can code through a project by yourself, write classes, do OOP, implement basic concepts, differ public from static, know your data types, and more and more.

You are not a programmer until you work as one. That's it and that's the reality.

Nowadays kids called themselves programmer, guru, ninja, entrepreneur, etc and it makes me rage and laugh in anger.

I'm sorry, your article seems fine, but you've lost all your credibility with this very single line.
"CNBC - You got owned"
The problem about being a programmer...
I don't think it is meant to be taken seriously... "Venturius Capitalias Richium", "Creatorious Hipsternium", "Talkius Nonstopical"?
"You could argue that he was smart enough to say things like that."

Agree. There is a pattern with people with money who do this. Oprah on her show would take people to her Chicago house which was nice but not opulent in the same way as her other houses. And she would make random statements about the cost of things to try and sound like an ordinary person. As if we are supposed to believe that someone worth hundreds of millions really needs to care about the price of vegetables in the super market? People try to wear frugality like a badge of courage trying to seem like "real" folk. I know of a particular wealthy VC who talks about flying coach. They are trying to say "I'm just like you.." don't be jealous.

While I've seen many wealthy people give away plenty of money to charities I have yet to see one (while still alive) that gives away all of their money except enough to live like an ordinary person in suburbia would do. Or even a majority of their money.

Trump of course has made a good living out of trying to say what a "shitload" of money he has. That's because that is what he is trying to sell an image of being successful which has of course helped him become successful. That's part of his product.
I think the plan sounds great and would happily contribute to the effort, especially for the EtherCalc part. :-)

Have you considered EtherPad Lite? It might be a more appealing choice than EtherPad, considering the common Node.js codebase.
The issue is, to get the few hundred you would offer, they would have to give up the millions that the cable companies offer. The last time I looked, if every single person who pirated HBO shows were to pay per episode (wouldn't happen, many would still pirate) it still wouldn't be as much as what they get from cable now.
After the tide refused to follow his orders and stop rising, Cnut hung up his crown.

http://en.wikipedia.org/wiki/Cnut_the_Great#Ruler_of_the_wav...
By combining two or more standard functions you're creating a different cryptographic primitive, which must be evaluated accordingly.

For example (while collision resistance is not that important for password hashing), by chaining MD5(SHA1(x)) you've created a better chance of collision than if you just used SHA1(x).

If you use 10 hash functions in any possible combination, you must evaluate the security of every possible combination, or prove that your resulting function is secure with any combination of these 10 functions. And for what? For only a slightly larger, constant, cost of attack, which you can easily get by adjusting a parameter in scrypt.
Americans Are as Likely to Be Killed by Their Own Furniture as by Terrorism
I agree that this isn't directly related to the OP, but:

> Dow made Agent Orange at the request of the US military decades ago. Are they supposed to be considered evil because of that?

If you observe how even passing information to the gov't is condemned on HN, this almost seems like a rhethorical question.
So this is how they want to play this?

Ok.

UNLEASH THE TORRENTS!
This is a textbook case of innovator's dilemma, I think.

"... and there’s no way that HBO could make up in online volume the number of subscribers it would lose from cable"

This assumes two things:

1. That all cable companies immediately will cut HBO from their lineups as soon as it offers web only deals. This is insane! What else will keep up the $100+ cable offerings? They have nothing else other than sports.

2. Where does this "no way" argument come from. HBO's cut from each cable subscriber is, I think ~$10. If it offers, say, a $40 all you can eat online option, how much of that revenue will go down to infrastructure, etc?

With Netflix and Amazon rising on one side and more and more of the younger demographic watching web-streamed shows, HBO will change, the questions is: will it take five years or two?
Dear Mr. Stelter: Please link to the actual tweets. This is not 1972. I don't need you to read pieces of them back to me.
Spin structure reveals key to new forms of digital storage, study shows
From scrubbing floors to Ivy League: Homeless student to go to dream college
Buy these 9 things
"Specifically, the company is adding two new features to its product line-up today: iPhone patient payment processing, which allows doctors and staff to process payments using the Square card reader attached to an iPhone or iPod Touch..."

Isn't the whole insurance problem that I'm not the one making the payments, my insurance company is?
No, I understand the attack you're proposing. I just don't think it works, or, for that matter, buys you much of anything.

Some things a reader of this thread would want to know, to make sense of it:

* C memcmp (which is what Python uses) is below the known measurement floor for remote timing.

* With (many) repeated trials and statistical filtering, the floor is (IIRC, but just Google [crosby wallach timing]) hundreds of nanoseconds on a LAN, tens of microseconds on a WAN.

* The difference between 1 and 2 bytes of matched SHA1 hash is certainly not a millisecond.

* Even if it was a millisecond, which it isn't, you'd come to that conclusion only after many repeated trials.

* To make this attack appear worthwhile, you introduced an artificial rate limit of 1 attempt per second, but obviously ignored that limit when trying to measure the (very noisy) timing of each hash byte.

* Obviously, you can't time a randomized hash, because you don't know enough to generate proposed password hashes to match against.

* The 4-byte shared prefix you're looking for is probably not present in the set of all valid passwords; or, put differently, you'd have better luck just guessing likely passwords through repeated trials than you would making repeated trials to find a next prefix byte.

I'm not disputing that there's information of some sort "leaked" in a password hash comparison; I'm just disputing that it's valuable in any way to a real world attacker.

A more effective way to try to launch this attack would be to try to dump the set of all users known to the system. This attack, far more straightforward than the one you proposed, also doesn't work because of measurement difficulties, but it at least has value in theory, doesn't depend on arbitrary shifting obstacles for the attacker, and nobody in the history of web app development has ever tried to stop it.
As if todays car keys aren't big enough already!

Seriously, why is everything you have to carry with you getting bigger and bigger. Phones and car keys being the two main villains here.
Getting a good domain name isn’t hard but it's not enough
May be to work with Embedded Youtube videos on other sites
Random pedantic fact: Martin, and several of the listed contributers work in our office in Linköping, Sweden.
Nice comment bro!
Japanese dock washes up in Oregon
I was thinking the same thing. Given I use Evernote to save pretty much everything, why would I need a separate service that does the same thing?
Would love some crit on this as a business idea.. I'm heavily inspired by everything I see and read here on HN. If you have a moment, read the F.A.Q if you have minor questions. If you could leave any comments here, they will be treasured.

I'd appreciate it more than you could know.
Despite being entirely different beasts from a design perspective, they solve essentially the same problem: bidirectional communication designed to minimize latency over a single established TCP connection, with protocol-internal notions of channels and framing.
The author never used any of these adjectives to describe himself (except entrepreneur, which he is entitled to use since he started his own company). I agree with you that they are highly annoying terms to use and diminish our profession. That, however, does not excuse your hostile and unnecessary comment.
The Strip Mall vs. the Multi-Way Boulevard
>I think the problem is rooted in the business model that seems to be preached by Y Combinator: build a great product, choose investment over income, and exit as quickly as possible.

YCombinator never tells founders to "exit as quickly as possible". In fact, they and most other technology investors get 90+% of their returns from the home runs and encourage founders to go big if things are working. You can do the math yourself: how many talent acquisitions would it take to add up to one Dropbox ($4B valuation)?

While a lot of companies coming out of YCombinator (and Silicon Valley in general) are focused on the internet, there are exceptions. For example, there was a 3D scanning company in the most recent batch:
http://venturebeat.com/2012/03/27/matterport-3d-scanner/
I had a similar reaction.

I guess this would be for co-pays, or the balance owed for what isn't covered by the insurance company.
The difference is that DVDs do not make copies of themselves. Schmeiser simply used the seeds that ended up on his land (as far as I know, I don't know all the details of the case). Wouldn't the analogy then be, should you be able to watch the DVDs that ended up in your front yard?
The problem with Metafilter is that $5 over time hasn't scaled. It's been $5 since they implemented it way back when, and as the popularity of the site rose, $5 wasn't enough to stop people from registering to add their pointless commentary anyway.

A few years ago I used to really find value in their community and felt that the added registration fee filtered out people that were just there to give bad advice on the green or self-post on the blue, but for the two years or so, it seems as if paying such a little amount makes people even more likely to post crap because they feel some sense of validation or privilege after payment.

Additionally (since SA was mentioned), there are so few moderators at MF that subtle trolls and misinformation loudmouths are prevalent (some have been known for their antics for several years) and threads derail and turn into a get-off-my-lawn!-fest really quickly.
Quite right too. If somebody had managed to detect the subversive writings of that terrorist leader Benjamin Franklin in time, the whole revolution business could have been avoided.
Facebook’s woes add to fears on Wall Street
It's like someone going for a stroll at night in a shady part of town and then complaining they got mugged. What the hell did they expect would happen? Same goes for the US. Start paying attention to the news. It's been widely reported for the past decade, yet people still go there.
Ask HN: What is your single favorite song to listen to while hacking?
I need new music!

Limit it to your one best, as I'm sure we could all list twenty with no problem.

Mine is Aphex Twin's ".215061" from Analogue Bubblebath 3:

http://www.youtube.com/watch?v=HFYOiwH9EgY

http://www.discogs.com/AFX-Analogue-Bubblebath-3/release/28763

Cheers,
sneak
Ask HN: What should a 16 year old Python hacker looking for "a job" do?
Hi there, I'm Aviral Dasgupta (http://www.aviraldg.com), a sixteen-year-old with a interest in web development (in Python) and a passion for solving problems.

I'm not looking for something big (I already do some open source stuff); just something that can either give me practical experience or the kind of cash required to fund my own projects. So, do you have a project you need done? Please tell me about it here.

Also, what should I do next? What should I learn?

Thanks.

More about me:

- Started developing when I was 11 or 12, with PHP and created a (rather simple) Twitter clone.

- I was a Grand Prize Winner in Google Code-in 2010 for my work with open source software. (http://google-opensource.blogspot.in/2011/02/google-code-in-grand-prize-winners.html)

- Involved with quite a few open source projects like Django (Python), Tux4Kids (C/SDL), OpenIntents (Android/Java)

- Here's my SO profile: http://stackoverflow.com/users/152873/aviraldg

- I've got quite some experience developing in Python (and Django), I've also done some front-end stuff with JavaScript.

- I'm currently dabbling with Flask, SQLAlchemy and data visualization and working on a top-secret project (which requires aforementioned funding.)
I feel compelled to point out that what Steve Jobs said and what Steve Jobs did very rarely aligned all that much.
This will all crumble when live sports are on iTunes (or whatever service you care to use).
And I think that was the point of the site. It will take that level of enthusiasm throughout the long dev cycle to make a game. Even if you can do an iPhone game in 3 months, to someone who is new that is LONG, not hard, as some else said earlier.

Can I do a plug? I wrote a book for new mobile devs: http://ebook.greenlightevals.com
I certainly do, since I will never purchase a cable subscription and it costs me internet access and HBO nothing for me to pirate their shows.
Jetpants: a MySQL toolkit for managing billions of rows and hundreds of DBs
True, password re-use is a big problem.

Though, think of how much easier it would be to social-engineer a target were you to have full access to their LI account.
Markus Völter on DSLs, Modeling, MPS, Mbeddr
"first few simple games" ≠ "shipped products"
> You can tell yourself you're a programmer when you can code through a project by yourself, write classes, do OOP, implement basic concepts, differ public from static, know your data types, and more and more.

Knowing all that helps, but it doesn't mean you can't produce something meaningful without knowing all that. It would be hard, but doesn't make it impossible.

> You are not a programmer until you work as one. That's it and that's the reality.

No, you are a programmer when you understand the basics of programming. And that means the very basics.

If I consider your argument, then everyone can call themselves a programmer only after being employed as one. What about kids who build software at school? I started writing code for accounting apps when I was around 11. I built what I considered my best work then when I was 14 (https://github.com/jasim/EasyAccounts/blob/master/DOCS/WHATS...). That was a working piece of software that was used by businesses.

However - the fact that someone found use for the app is only incidental. The moment you know you can tell computers to do stuff you want to, however limited in scope, is when I would call someone a programmer. LOGO, GW-BASIC, dBase, VB 6, Rails or Haskell. It doesn't matter.

[disclaimer: I work with Sidu and when he says he was a programmer at six, I know it is true]
This makes me more scared living in the US. I am approaching the level of fear of the government that is close to what I remember having from the older Soviet Union (note: I never living the harsher political times there, mostly during the mid 80s when stuff was thawing out).

It is not a fear that legally I can't talk or do things. It is fear again irrationality and against bureaucratic mistakes. You pissed off one police officer or one border patrol agent and now you are on some kind of secret database or black list for life.
"Identify mature, experienced people who can give you candid feedback. It's even better if they're your colleagues. Favour a diverse group with people who have different priorities."

This is a great tip. I just realized that my more senior friends mention their "grey beard" older CS friends. I guess I need to pick up some mentors!
The most sophisticated crime ever committed
I think it's very important to distinguish "spam" from "scam".

What AirBnB did was a little spammy (and probably violated CL's ToS). Same goes for ODesk and other freelance boards (I got one from HireTheWorld just the other day).

When someone wants all your personal information or help moving (i.e. "laundering") money overseas, that's an entirely different animal.