skysight-inc/HackerNews huggingface dataset:
I'm not sure I agree, for many reasons.

1 - a lot of grads have loans to pay off, and that $100k/yr job sure helps get it done quickly so you can focus on anything you want without that on your back.

2 - That $100k/yr job can help you meet a lot of great people to work on projects with at a later time. A lot of SCS grads come out having done nothing but stare at code for 4 years (I'm one, and I was saddened by the number of my classmates who made no connections on campus outside of SCS, connections that would be vitally useful in a startup). Working at a great company in the valley can help get you into the startup scene in a way that Pittsburgh might not.

3 - Nothing says you can't work on a startup outside of the 40-50hrs/wk you put in at your 100k/yr job. SCS grads are used to loooong work weeks; a normal work week seems short in comparison, especially right after graduation when you aren't (probably) supporting a family or anything else. That leaves time to make money AND try out some projects.

4 - Not being part of a startup =/= slaving your life away. There's a lot of great, rewarding work to be done in the valley and in the tech industry, it isn't an all or nothing thing with the all being becoming a startup founder. Being part of a company growing quickly and doing cool things can be just as rewarding as being a founder.
A better solution:

www.wasmylinkedinpasswordleaked.com
Spikability - An Application's Ability to Handle Load
What is most troubling about this post is that it appears that LinkedIn still at this time doesn't know the attack vector.
wrong and gay and broken
If you leave the page opened long enough some random(?) characters fill the input field. What for ?
The best way I've experienced is using a kanban board even for projects of one person. I use agilezen.com (free for 1-person projects) but there are a lot out there.
Many timing attacks are viable in web applications. But there aren't timing attacks against password hash comparisons, for obvious reasons.
I also found this odd, but I can think of two reasons,

1. CSV is not a single well-defined format. Some people use rfc4180, but not everybody does.

2. JSON is easier to parse than CSV for JavaScript clients, i.e., browsers. On the other hand, JSON is not a subset of JavaScript.
"All States shall be entitled to lay submarine cables and pipelines on the bed of the high seas."

oh dear.
> While you still can, while the market is still hot, why not aim for something better like creating the next instagram or dropbox?

I guess not everyone wants to build yet another website/app. A lot of interesting/hard/capital-intensive R&D is done outside of the startup bubble and there are only so many job openings at SpaceX.
I think your chances of succeeding in your startup increase tremendously if you've taken a couple of years to work at another startup, see what is required to make it work, and see what problems you want to avoid, before starting your own. I also think, for CMU in particular, students have less exposure to the Silicon Valley startup culture than Stanford students. Hopefully that is better now than when I went, but being naive about the business side of things can have some pretty negative consequences when you try to start your own thing.

Of course, if you really have an idea you are passionate about you should go out there and make it happen. But maybe find some other more experienced CMU folks to give you some advice while you do it :)
The ontouchstart issue can be avoided by using the ontouchmove/end to check of the user is scrolling. Infact zepto.js has a custom event called "tap" which does exactly that.
I apologise for my immense lack of knowledge of current password storage applications (i'm not a programmer and come here for the other stuff), but what is the benefit of these services (lastpass etc)? This is a genuine question.

It seems to me that instead of having several passwords in my head (i can remember random long strings of characters pretty well, and have a heirachy of randomness/longness depending on what I care about), I only have to remember one. But if that one's compromised, aren't all the rest then available?

Reminds me of the bit in hitchhikers guide to the galaxy (life the universe and everything i think) where passwords and biometrics etc had become really difficult and secure, so a datacube thing was created to store them all. Which was then found by a character before hilarity ensued.

thanks
You're right. That was an unfortunate choice of words.
They are probably using ZFS also. (my guess)
Their decision makes perfect sense, today. But, my guess is that cable subscriptions are decreasing, they have just hooked their little red wagon to a sinking ship. I think HBO are overlooking an opportunity.
Lenovo x220 is the best laptop I've developed on. My requirements were that it has to be very light yet solid.
Everyone doesn't, and shouldn't. That's why the best practice is not to implement your own hash function, and instead use a third-party library written by an expert.

I'm not sure that password-as-a-service would be worth the overhead involved, but password-as-a-library is functionally equivalent from a developer's perspective and is already the norm. The only question, then, is "which library?" which is what this article attempts to address.
Assuming all the steps in the article are followed, yes, you are correct.

I still think any article talking about verifying credentials is obligated to mention that string comparison could be an attack vector.

Like I said, it plants a seed. And, I've seen way too many naive implementations where it is needed (like simple token-based auth systems) to know that this seed needs to be spread a lot more.
Looks like a cool app, but these guys need to implement some basic SEO. A google search for "Interstate project management" doesn't put them on the front page.

They need to do the basics like have helpful title tags so Google can provide decent link text.
How stormpath could make a more legible website: avoid text of color on a similarly-colored background, especially with a single-pel wide font. (In this case, blueish text on a blue background)
It's very simple to transform that kind of data into $your_preferred_structure.

It's also a very agnostic format.
1. I don't see any results. Even the supplamentary link [http://www.nickyee.com/cpb-supp.html] doesn't break down, say, top responses as fractions.

2. In the list of MMORPGs WoW is not listed. That seems strange, casting doubt on this study.

3. The word "status" is the 5th word in table 1.

It's great that there are multiple motivations, but I'd like to see which motivations are most prominent in the sample. That is, are 80% motivated by achievement, 50% by social, and 40% immersion? (And note that in this case, the percentages don't need to add to 100).
John Aaron's "SCE to AUX" Call Saved Apollo 12 From Mission Abort
A drum dryer like you use for clothing sounds built to take water out of these things (with grates smaller than the pellets of course).
If you happen to have a web app that stores passwords in clear text or SHA-1 hashed, all is not lost. You can apply further secure hashes to the existing value stored on db and update your authentication validator.
Thanks for the kind words, very much appreciated!
The downloadable files for this dataset are much larger than anyone would want to download at one go.
Zappos turns over Kentucky operations warehouse to Amazon
I recently made a very small jquery mobile web app. It still feels like alpha software, I was on an extremely tight deadline so I persevered with it, the end result worked out ok. I would be interested in other javascript framework recommendations that perform better, however from my research they all seemed to be at a similar stage to Jquery Mobile, either that or they were abandoned. If I was spending a lot of time on a mobile web app I'd probably invest the time into writing it without the layer of abstraction.

Two big tips:
1. Turn off the transitions, they perform poorly and look out of place on most devices.
2. Don't use the navbar, it just doesn't work properly on all devices, I wasted so much time trying to work out the issues with it before changing my navigation scheme.
Would be better phrased "try to find a better job."
In the Kickstarter Future, Hardware Is the New Software
Thanks and you're 100% right. We pretty much haven't done any SEO work yet (we've spent the last several months just rebuilding the app) so SEO is definitely on our internal roadmap.
Even opting for bcrypt can be sketchy. Native support only appeared a few years ago, older versions rely on the OS - many of which didn't support blowfish without a patch. Fine if you control the server.
A bit by accident, but then I realised I was in <80 lines and decided to compact it where I could. I wanted to keep it fairly readable, though, so didn't go too far.
If this article is of any use to you, you are in the wrong field.
> Grounds for more research for sure.

I'm surprised the seriousface brigade on HN hasn't lynched you for saying that in a thread about coffee.
Dislike Google Maps API? Use this wrapper
I am quite partial to my current 2012 15" MacBook Pro. Only Apple-supplied upgrades are the 2.5GHz i7 and the high-res screen.

Replaced default hard drive with Corsair Force3 SSD, purchased from Amazon (iirc).

Removed optical drive & placed default hard drive in its place with aftermarket drive bay kit.

Ignored Apple's RAM upgrade & bought 16GB RAM from third party (Apple only sells 8GB, even though 16GB is supported). Love the RAM.

It is a dream. Development has never felt better.
Cool, especially since the census is one of the main reasons why we have computers at all.

I went to the Computer History Museum a few months back, and when we were looking through the origins of the modern computer, a lot of it traces back to census needs: we needed to automate the counting of large quantities of uniformly formatted data, so we used punchcards to tally up the data.

Fast forward to 2012, and the census is now getting an API. Weird how that works.
You should also check out Glympse which is what I use for this kind of thing. It is sufficiently real time and accurate that the people I'm picking up surprise me at my car as I park. It also helps when you get unexpectedly delayed by traffic.
Solar power storage for night/clouds - solved?
Agreed. However, I don't think we really want AI. We want IA (Intelligence Augmentation). AI leads to slavery or at best pet-ness. IA leads to godhood (maybe?)
Breaking Technology News Blog
This doesn't seem unreasonable.

1) Whether it's user-friendly or not, it's still JSON, which makes JSON-P possible (they support JSON-P).

2) It probably mirrors the way they store their data (in tables, whether SQL or Access or Excel, doesn't really matter).

3) It's more compact than traditional JSON, which means less bandwidth, which means less cost. Keep in mind that this is essentially a not-for-profit API from a not-for-profit organization with the worst possible budgeting scenario. Yes, Gzip would basically eliminate this benefit, but they don't have gzip enabled and enabling it may be difficult or impossible under whatever constraints they operate under.

Also, it's entirely possible that this API has existed privately for a long, long time in a CSV format, and they simply made a minor enhancement to make it JSON and JSON-P compatible and open up the endpoints to the public.
Spreecast Quietly Continues Redesign to Hone its Video Broadcasting Niche
You have created a two word combo never seen by Google, "obedient Feynman". http://www.google.com/search?q=obedient+Feynman

It sounds like Feynman was suspicious of the Soviet Union.
sensics p-sight was the best available last time I cared to look, in the $100,000+ range =/

http://sensics.com/products/head-mounted-displays/pisight-ul...

the trouble with stereoscopic curved displays seems to be keeping them calibrated to your eyes properly, slight shifts of the head clamp messes things up pretty badly
Should You Hire a Fresh, New Graduate or a Firm For Your Social Media?
The entire television/sports/web video/publishing industry may be able to find a use for such a thing
C3 has had essentially tech demos, just as Microsoft Research has. For that matter what Google has shown thus far is nothing more than a demo. It's really up to who can scale it up in a fully usable mapping technology, and I have a lot of faith in Google on that front.

3D imaging alone is close to useless. Google already has superb mapping, navigation, traffic and information systems, and layer that atop just ensures that they miss no checklist items. It's going to be incredibly difficult for Apple to compete with Google's offering, especially given that the gimmick (which it really is) of 3D has been diffused.

I guess losing a significant amount of traffic (all iOS users) will do that to you.

I honestly don't get this line of thought. The rather terrible iOS mapping application has zero Google ads or integration with other Google services. Where is Google profiting from that situation?

While everyone is busy firing up the conspiracy that Apple is dumping Google, it seems far more logical that the dumping is going the other way, and has been underway for years (the Android mapping app is literally years ahead of the iOS mapping proggy).
2009 17" Macbook Pro would be the winner for me if not for the keyboard.

Second favorite is a 17" Dell XPS M1730. Great screen, decent keyboard but... Heavy as hell.
Roaming updates of Facebook and/or Twitter via SMS while travelling
http://news.ycombinator.com/item?id=4073309

LinkedIn's password database leaked earlier today.
another useless use of cat

cut -c7-40 combo_not.txt|sort|dups|wc -l

what the heck is dups?

cut -c7-40 combo_not.txt|sort|uniq -d|wc -l
Fyi, scrypt is in the Debian testing and unstable repos [1], and Ubuntu's universe repo [2]. Not sure about the RPM ecosystem, but I'm sure it's available there too. And there are a bunch of bindings and libs in various languages on github as well [3]. And there is always the source [4].

1. http://packages.debian.org/search?keywords=scrypt

2. http://packages.ubuntu.com/search?keywords=scrypt

3. https://github.com/search?q=scrypt&type=Repositories

4. http://www.tarsnap.com/scrypt.html
Let's be frank: landlording has never been socially productive. All the actual services provided by a landlord can be provided by a homeowners' association in a condo or cooperative building. It's really just a class division, an issue of bad public policy, and an issue of the balance of local housing markets between renting apartments, buying condos, and buying houses.
$ cat combo_not.txt | grep `printf linkedintrouble | sha1sum`
3ac85868a20c977661a12f770f0d116f87c74831
$ cat combo_not.txt | grep `printf nathanlinkedin | sha1sum`
a4d28368130ad555c77ec6a4dd18b8977ac0f589
$ cat combo_not.txt | grep `printf mypassword | sha1sum`
$ cat combo_not.txt | grep `printf yourpassword | sha1sum`
$
LinkedIn Confirms Millions of Account Passwords Hacked | The Hacker News
I wonder how many home owners renting through AirBnB properly report commercial use of their home to the property appraiser for homestead exemption purposes. My guess is zero.
Indiegogo Raises $15M To Make Crowdfunding Go Mainstream
37signals Pow no longer automatically supports RVM
Thank you. I am short of sleep and just didn't put 2 and 2 together. Duh.
Exactly, because the hacker only posted the passwords he neede d help with.
None. There is profoundly little value for Google in having Google serve the mapping for iOS, unless Apple is paying the big dollars (I suppose possible given that Google has started monetizing mapping), though we know in the net exchange Google pays far more to sit as the default search for iOS Safari, having nothing to do with mapping.

I've seen the "mobile wars" bit about Apple dumping Google across the news world and it's a bit bizarre really as no one can state what Google gains from the current situation, but I guess just the glory of being iOS' mapping technology?
As interesting as these results are, I don't want to play the game of keeping score of what foodstuffs, activities etc. cure and cause various illnesses. I will try to have a balanced diet and keep active in mind and body. Beyond that, I have yet to be convinced that power playing my lifestyle according to such research papers as happen my way would provide a statistically significant improvement to my long-term quality of life.

I hope doctors are able to make more effective use of these results than I am.
If you could figure out a good way to integrate the heating element and the the zeolite on a surface like a menger sponge you would have a very high surface area and good thermal response characteristics.
I was going to use iron.io for a Hackathon, but didn't end up finding a way to use it in my project. I looked through the docs though and it's really interesting.
Is ZFS stable enough on FreeBSD? Seems to be an unofficial port.
No, I don't think. If they're data-mining against, say, what conferences you attend to see what adverts to show you, I seriously doubt that they're differentiating paid and unpaid users.
I can only speak from personnal experience: the first time I used a microscope I did break a glass by trying to zoom in first. I had no manual but I wouldn't have read it anyway (nowadays I do read instructions before using anything). When I read this particular article I "played" the game and answered correctly (hooray for me). I agree this kind of test has nothing to do with STEM because it is interchangeable and could be devised for any courses ; my point is that it's "just" a comprehensive reading test and if you fail it it means you fail at comprehensive reading which is one of the most basic skills one pupil should acquire. I agree it has nothing to do with validating specific STEM knowledge but nevertheless the explanations are correct and useful in the STEM field and understanding them is important. Now, if american science courses are only about those kind of tests it's a little bit concerning: Scoring A's in every courses just because you understand the questions versus scoring A because you understand the courses.

Not: I am not american so I don't know how education is organised in the US.
Yes, I switched from rvm to rbenv because rvm didn’t work with fish. rbenv did work with fish.

I switched away from fish after that because go (a directory-jumping tool) required bash to install (http://code.google.com/p/go-tool/wiki/InstallNotes). I didn’t know how to port that bash code to fish, since I don’t know bash scripting, and I also anticipated that I would keep finding cool programs that didn’t work with fish.
Awesome! I'm thinking about doing a Gopher client for B2G, so thank you! ;-)
thanks, this actually shows the helmet in action. I think I'm gonna buy this kit.
or just change your passwords and be done with it.
I'm confused: how do you use message queues to handle traffic spikes? If a user request is sitting in a queue, aren't they staring at a white screen until I get back to them?

edit: "And you can launch more servers to eat away at the queues if they keep growing." sounds a lot like autoscaling to me. The graph is misleading.
Shweeb [overhead monorail] wins $1m from Google in 2010
I think basically these people are a tad too aggressive, to the point it could be viewed as bad manners and poor boundaries. But, as the army would say, you have to break some eggs to make an omelette. By that I mean that if you are going to break new ground, you are highly likely to step on some toes.

Does that make a little more sense?
It's indeed easier to downgrade from high-res to low-res. Although non-native resolutions tend to have a blurry render.
Indeed. There's a developer bubble around Hacker News and websites like Stack Overflow, where topics like bcrypt have become second nature. Whereas standard developers, i.e. those that program solely as a job, they don't inhabit these places.
Where they benefit is brand recognition. It has ensured, at least up until now, that everyone and their grandma – with an iPhone – thinks 'google' when they think 'maps'.
Aha. I was wondering why they had such a Google-esque look and feel.
I'd have to do some more math since my cable, internet and phone are all on the same bill. I don't recall what the exact break down is. With all the channels I get and the HD and the DVRs (plus the internet and phone) my "cable" bill is like $200/month

Is AppleTV ala cart or buffet? Meaning if I want to watch all season of Game of Thrones (and Shameless and Weeds and whatever) am I paying per episode or is it a monthly fee? (I assume Apple != free content)
"click instead of tap"

Do _not_ assume this will always work. If you bind to the tap events and change content positions you _will_ end up firing the click on an unintended element. Remember the click almost always trails the tap (save for on the Windows Phone platform). He mentions that jQuery Mobile does some "magic" to deal with the click and tap. This is the vmouse module and you can use this independent of the library for just this purpose.

"JQuery is enormous and has no business being on a phone"

It's a phonegap application, the assets can be packaged with the application itself which means that in many cases this doesn't apply.

"Massive Footprint. 248k wowsers"

I'm still confused why this matters if you are packaging your assets with the phonegap build which I would expect most people do.

He's very right. Phonegap is no trumpcard, but I'd appreciate a more thorough treatment of the "best practices" he espouses.
As if this speaks for all start-ups. Look, if you don't value time away from business or if you ascribe significant meaning to the results of an A/B test, you should sit down and think very hard about the world around you.

With regard to this specific article: this guy needs to realize that there's many, many fascinating aspects of life outside of the data entry business.
From what I understood, the water comes out when you heat it.
Ghost-phisher - GUI suite for phishing and penetration attacks
Re-editing the address after providing one doesn't work. Hitting enter or clicking the search button doesn't work in this case either.

Using an intersection like "California and San Antonio Rd., 94043" sorta works but the map is centered incorrectly and doesn't use locations near that actual intersection, mostly just where the map is mis-centered.

Clicking on an pin, then the name, breaks and takes me to a url with "undefined" in it.

It is unclear what this is supposed to do and what value it's supposed to provide.

It is unclear where the ratings/stars are coming from and what they mean.

Clicking "let us locate you" prompts me via the HTML5 location API, but it doesn't actually work and does nothing after I provide it with permission to use my location.

This functionality works outside of your app.

That's the last feedback I can provide, if you want more, I can tell you my billing rate.

Back to my startup. Godspeed.
0. you must play the game

1. you can never win

2. you can only break even on a very cold day

3. it never gets that cold
head -5 /usr/share/dict/words

same result as with xargs

grep petard /usr/share/dict/words

same result as with xargs

not sure what you are trying to demonstrate here

useless use of xargs?
#3 seems a likely reason. and like I said, having a harder to work with data structure is still better than nothing. and it is free.