skysight-inc/HackerNews huggingface dataset:
That's sort of an interesting thought. Being the buyer for early sellers as a "user acquisition cost." Clearly this can't be done on a large scale, but I don't think anyone would plan on doing a national craigslist rollout. I wonder what kind of budget you'd have to have to do this for 1 small city for a few months.

Keep in mind you don't have to keep people's stuff, you can always re-sell it on ebay or craigslist :-) (and re-list it on your mythical new site. now you have inventory for the buyers and you are the buyer for the sellers)
LesPAC.com is popular in Quebec (Being French). Kajiji and LesPAC both get buyers up there.
Retina Images in Webkit
Yeah this is a pretty common artifact in EEG studies - it seems like subjects were encouraged to keep their eyes closed for this exhibit, but blink artifacts are often pretty clear.

The plus side is that (it least in my experience) when there was a muscle artifact, it was super clear in the data, as the impulses appear much larger than the brain activity and they are easy to filter out, even interactively as the data comes in. You do end up losing that short piece of data though, which is sad.

Definitely note that the number of electrodes you use is not a direct correlation to the quality of the data. Using more electrodes will give you better spatial resolution if that's what you're going for. But for many studies and for exhibits like this, spatial resolution makes no difference at all - they are trying to measure overall activity. I have worked with an eeg cap that had 128+ electrodes though - it was cool, took a long time to set up and had lower data quality per electrode.

I have produced research grade EEG data which is being published, and subcutaneous electrodes are probably more than you need. I got the data I needed with 10 electrodes, although it did take about a half hour to set up each subject, apply the electrode gel, move hair out of the way, and make sure the data was coming in clean.
I actually despise Moose as much as I despise blindly over-doing OO. To me Modern Perl meant tackling problems in a much more Lisp-inspired way (via lexical scoping, anonymous functions, closures, lists, etc) ... but in Perl. Kind of like "Higher Order Perl."

I had the impression it was more a cultural shift, a renewed interest in Perl and people wielding it much differently. There's a different CPAN web interface[1], a lighter cli client[2], and everyone is on GitHub and writing hundreds of tests. I guess Moose is part of that shift but I'm torn a lot of the time - I support modern Perl but I hesitate to support blindly copying the warts from other languages just to appear modern.

This[3] is a result of searching for common::sense ... yikes.

[1]: http://metacpan.org
[2]: https://metacpan.org/module/App::cpanminus
[3]: https://metacpan.org/module/Real::Handy
I'd also say that a lot of startups don't do a very good job of competing. YardSale launched a big press push last week saying that they'd post your listing to Craigslist for you. The contact link in the Craigslist post goes to a sign-up form for the Yardsale app. Pretty much useless for selling anything and mainly just a user acquisition ploy.

I was actually pretty disappointed because I really care about how hard it is to post to Craigslist. I think that's a huge issue right now and will be for them going forward. As more people rely on smartphones as their primary computing device (and selling device for that matter---phone, sms, camera, email, etc.), there will be more opportunity to create something that takes casual sellers away (who are also buyers, wink). Obviously at niches at first, but it's going to be a serious weakness (if an 800lb gorilla can have a serious weakness). Call me crazy, but their complete disinterest in mobile (not Mobile, AL - http://mobile.craigslist.org) is IMO their Achilles heel.

Payments, reputation, spammers--I agree that none of that matters because it introduces way too much transaction friction (and annoying things like taxable income!)

What I do care about is that fact that in 2012, people try to sell their couch without a photo, when nearly everyone on an Internet-enabled smartphone has posted a picture to Facebook/Twitter/Instagram without even thinking twice about it. That's just weird.
I agree, it should credit OpenStreetMap :) .
Not all of these are actually even the case, to say nothing of the responses being correct. For example, wedding clothing isn't that expensive, and the people I've wanted to date have for the most part never been cruel or aloof. Just because an explanation sounds obvious doesn't mean it is correct.
Okay, so Craigslist's big advantage over everybody else is its user base, right?

But at least in my experience, most people who use Craigslist wish that there were something better that had a large user base. They don't like the UI, they don't like how many scammers there are, etc. They tolerate Craigslist because that's where the results are, but they would be happy to jump ship if they could get those results elsewhere, but with more pros and fewer cons.

It seems like this would be a good case for "conditional commmitment."

Kickstarter is a great example of a service that allows conditional commitment. Here's the problem it solves: People are reluctant to donate to a cause unless they know there is enough other support to make the goal viable. Kickstarter lets them conditionally donate, and their donation is only collected once some threshold of total pledges have been reached. (Side note: A Kickstarter for politics would be a great way for a third-party candidate to make inroads, don't you think?)

In the case of a Craigslist alternative, perhaps one strategy would be to have people commit to a proposed new service -- on the condition that some threshold of other people also commit. Once the threshold is reached, boom, it's like Black Friday, with a line of people at the door waiting to rush in en masse.
Using Web Design to Solve Creative Problems
They're relying on two classic attacks, one on AES-CBC and one one RSA with PKCS1.5 padding.

The former is probably the best known cryptanalytic attack in the world (it's the one Thai Duong and Juliano Rizzo used against J2EE and .NET 2 years ago, and there are publicly available attack tools that will attempt to exploit it against arbitrary targets.

The latter is Bleichenbacher's, very well known in the literature but not widely exploited (this is a crypto attack that involves some linear algebra).

The rough sketch of both attacks is similar. It exploits a target that holds a secret key and reacts to arbitrary attacker-chosen messages. The attacker has no knowledge of the key, but might have knowledge of a known-good message. The attacker modifies the message in targeted ways and sends to the target; the target attempts to decrypt the message; the decryption goes haywire (because the attacker has modified the message without knowing the key); the target's behavior changes visibly as a result of the decryption going haywire.

The attacker knows (1) the nature of the targeted change they made, and (2) whether or not the target reacted weirdly (raised an error, took longer to respond, failed to respond).

The attacker continues changing messages and collecting 2-tuples of [change, result]. The whole cryptographic attack then analyzes the list of 2-tuples and from it discerns some secret.
| Colivia
Better Visibility Into Partition Transfers In Riak 1.2
Why not just pre-allocate the objects and reuse them?
I think the motivation behind RSA tokens is that while you can steal them, you shouldn't be able to silently copy one. That's not something you get with an OTP on a USB stick, unless you invest into tamper-proof hardware.

Aside from that, I'm not sure why OTPs aren't more commonly used. They're easy to reason about, and while you still need some protocol to use them correctly, it would seem that protocol would be much simpler than for fancy crypto like RSA.
I think this a sound strategy in the beginning to keep the lights on. In the end, though, there's more glory when you land and maintain the clients you want with no middle man.
Re: clearance, while .001" clearance isn't something I'd want in a design particularly, modern machine tools are good enough that you get flatness and surface finish good enough to not have problems at .001" clearance basically free on any machined surface.
If it can be compressed, you should probably not trust your pad ;)
Transferring heat with a smaller fan requires less power to run the fan. For a given amount of electricity, the Sandia Cooler can extract more heat from the processor, so it requires less electricity to keep the processor cool.
Perhaps provide some interesting piece of code to look at?
Now, quickly release 0.8.1 and make sure you beat everyone ;)

Joke aside, thanks for the great new release. I'm running 0.6 in production sometimes with 3000+ connected users and will soon need to scale. Being able to do so just by upgrading to 0.8 will make my life easier... until many more users come, of course.
Apple Releases iOS 6 Beta 2 to Developers
Added the credit as a main feature. Now that I think of it, it is a feature rather than just a credit. OpenStreetMap is indeed better than many commercial mapping data sources for some of the cities.

The app has the credit as an overlay in the map screen so it's very hard to miss. I'd missed it on the website. Thanks for pointing out.
Still sounds crazy. We cruise in between 9 and 10, bail between 4 and 5 and take an hour lunch. Also we tend to work from home 2-3 days a week.

Then again, they realise that we generate about 650k a year in real hard cash per head which is pretty good :) That's how a company should look.

we have to buy our own lunch though and spend our spare time doing some reading and self tuition.
No; ECC is better. But as an implementor, if you're hoping to DIY, you're even worse off with ECC than with RSA; there are more parameters and validations steps you can get wrong with ECC that will result in a flawed implementation.

The security of these hardware devices is not tied to the RSA algorithm per se. The devices might not be more resilient against these attacks simply by using ECC instead of RSA.

Either way: don't implement RSA or ECC yourself. Use something like PGP/GPG.
Any experience using Emacs with "cl" (a package to add Common Lisp functionality to elisp)?

(Now that it has lexical scoping...)

I would rather avoid installing anything else than Emacs before I write the first program that must be efficient. Is cl good enough for that? Or should I go straight to SBCL or similar if I don't want to restrict myself to writing emacs packages?
Supreme Court upholds key part of Arizona immigration law, strikes down rest.
Four laws of robust software systems
It's pretty clear that the next Microsoft v. Apple war is being waged in the tablet market (the show is over for cellphones -- Apple won). Traditionally Microsoft hasn't done well at competing with Apple on their own turf (mobile, mp3 players, etc), but it'll be interesting to see what the Microsoft Surface means for all of this.
I think they're referring to the heatsinks _in_ the air conditioning and refrigeration systems. The higher efficiency of the cooler itself would allow these devices to operate more efficiently.
How do you connect the chip to the motherboard though?
Catapult: gem provides asset pipelining/compilation for front-end apps
> I am the world's leading expert on WordPress sites for

I'd tune out the second I saw such a marketing boast; the odds of being pure b.s. are through the roof.
How not to do science journalism: Guardian screws up group-selection debate
I clicked on this when it was still Light Table Playground and that was interesting to me, but "It's Playtime"? What the hell is that? It doesn't tell me anything at all about the article and I only figured it out by clicking on the comments.

I don't see anything wrong with having a title that is different than the source's title if it gives CONTEXT, which it did in this case.
http://en.wikipedia.org/wiki/ECC_patents
The original title ("Light Table Playground released") was significantly more informative.
Show HN: Responsive Design Boxes Demo
If you want the average consumer to weigh in, fine. Look at download/purchase statistics, canvass users or do focus groups. If you want qualified, passionate and experienced programmers you're out of luck, those are mostly men. An overrepresentation (compared to the total number of candidates that would be good enough, of course some of them are women) it is bound to cost you something. Is having 50% (or whatever) women in open source related activity more important to you than having the best possible open source software?
This new heat sink / fan is like the heads in the hard drive: it floats on a thin film of air. Consequently, it does not need any conventional bearings. The video describes it as "using an air bearing".
There is a big price difference with the iPad and it's "just" a bigger iPod Touch (it per-dates the iPad). There also aren't many Touch competitors at that price point, it's aggressive (the iPhone is almost identical plus $10-20 of hardware for radios, but is 3x the price).
Can anyone confirm if maps is usable on an iPhone 4? I had the first beta on for about 20 minutes before I had to take it off as most of the apps were either extremely sluggish or nothing loaded at all (i.e. mail and maps). And yes, I'm a developer and have had every beta of every version since the first one, so I know to expect beta software to be, well, beta - but I felt that the first release was truly the worst one I've come across. What was your experience like?
Yep. If it can use a lower power fan/impeller, then there would indeed be less heat expelled into the room- a very tiny bit less, but the principle holds true.

The major energy savings would come from large implementations such as air conditioners.
What is a two stage downloader? Serious question :)
What kinds of structural remedies for this sort of problem exist in today's programming languages? That is, constructs (I assume as part of a type system) which make it impossible for this sort of thing to happen. (I realize in this case they were starting from assembly code -- I'm thinking about how to eliminate this kind of error in new, high level code.)
How SSDs conquered mobile devices and modern OSes
Apple’s Insanely Great 1986 Clothing Line
It's because Law Enforcement in the US has been lobbying for longer times. From the article:

DJ: I would speculate it would be an unpopular move that might result in more friction with law enforcement. Law enforcement has been lobbying to pass laws that would require service providers to keep 18-36 months of logs. It’s in their interests.
It'll be interesting to see if crowd-sourcing can work for PadLister here. CL's incumbency gives them a strong monopoly on the small independent landlords and subletting.

Power of the social media vs. power of the network effect. Rooting for PadMapper on this one.
Cool. An article on how it's designed might be just as good.
"The centennial of Alan Turing’s birth brings us the news that Alan Turing probably did not commit suicide by eating a poisoned apple, was not depressed at the time of his death, and that the hormone treatments intended to suppress his homosexual urges had been discontinued a year before he died."

Raymond is referring to this BBC article: http://www.bbc.co.uk/news/science-environment-18561092

It was (distastefully IMHO) published on the day of the centenary and makes a number of schoolboy errors about Turing and suicide:

1. It omits to mention that a significant amount of cyanide was found in his stomach in liquid form. But does mention the fact that the 'apple was not tested for cyanide'. If you omit the former and mention the latter it sounds suspicious. And why would you test the apple for cyanide?

2. The article makes great play of Turing's happiness shortly before his death. This misses the fact that many suicides are outwardly 'happy' before taking their own lives and is so basic that I'm amazed the BBC allowed it.

3. The article plays up Turing's mess in the house and mentions: "The electrolysis experiment was wired into the ceiling light socket.". This was a common practice in those days and I remember adapters wiring things into light sockets as a child in the UK.

4. The article also likes to try to downplay everything negative. For example, "It is often repeated that the chemicals caused him to grow breasts, though Turing is only known to have mentioned this once." The second clause seems to be the most important.

5. The article is rather ugly in that it engages in a bunch of speculation and then ends with the 'expert' saying it's best not to speculate.

But the worst part of the article is that it contains nothing new. The doubt about Turing's suicide is well known and documented by his mother, Hodges and Leavitt. There was nothing newsworthy in the story.

"More: behind much of today’s hagiography there seems to lurk a sort of perverse insistence that if Turing hadn’t been gay and a suicide he would be less apt for veneration, as a founder of computer science or anything else."

I'm not sure where Raymond gets this.
YouTube RealTime Shows Time-Stamped Comments as You Watch
That is not all. If you're criticizing the author for omitting facts, it should go without saying you need to cite them.
TicketLeap Relaunches with Reserved Seating + New Brand
It brings to mind the old infosec adage: What's the difference between hacking and pentesting? Permission.

The best hackers learn quickly to become security researchers/GRC/application security/etc. The rest end up in jail or swimming in debt from the lawsuits. It's okay to break things as long as you've been given permission to break them, and generally that permission comes with a clause to give advice on how to make sure it doesn't get broken again.

It's natural selection in the hacker realm. If you want to survive, you have to play by the rules.
The script that you download and execute goes back out to the internet to download the real executable, so it makes it (somewhat) difficult to review beforehand or to make sure you're running the official version
The "some protocol to use them" part is where the crypto in the hardware devices in this attack fell down, which is one of the many reasons people don't use OTPs: they shift all of the security of the system from the cryptographic algorithm itself to the protocol, which is the most error-prone part of the system.

Neither RSA nor AES were damaged by this attack.
Ask HN: Please review our site and provide feedback
Yesterday after fighting fires for hours and number of coffee cups, we finally launched (http://jackpotbuddy.com). Please review the site and provide your feedback. I'm looking for:

1. What you think of the idea
2. Does the information on landing page describes the idea
3. What do you think of the UX (you'll need to signup :))
4. What do you think of the design
5. Anything else we could improve on.

Thanks a lot in advance.
The demo unit is presumably rated for about 150 watts. A unit rated for the ~40 watts that a laptop creates would be smaller and shorter.
You would need a OTP for every one you wanted to talk to. If I had a OTP for every https site I visit, I'd need hundreds. Facebook would need hundreds of millions. They're not going to be mailing out USB sticks on a weekly basis.
http://money.cnn.com/popups/2006/fortune/how_i_work/frameset...

"My day starts around 9 A.M. and meetings finish up around 8 P.M. After that I stay in the office to do action items and e-mail. I can get by on four to six hours of sleep. I pace myself by taking a week-long vacation every four months."

and thats just the first google result for "marissa mayer sleep"
http://cr.yp.to/patents.html

Patents used to be the reason ECC was rarely used (that and novelty), but there are ECC systems in somewhat wide use that aren't patent-licensed.
Show HN: Movie Recommendations for several people to watch together
We've been working on a custom engineered collaborative filtering algorithm not only to recommend movies for one person but for several to watch together, at the same time.

We're still in closed beta but would love to get feedback before launching.
Depends where you are. Vancouver and Toronto Craigslist activity is very strong in the "For Sale" categories with many thousands of new postings every day. Maritimes, Quebec and some western cities are quite desolate, except for ticket-selling bots it seems.
You need an RSA token for each server you talk to as well. It's not a replacement for asymmetric cryptography.
7% of the electricity in a data center goes to spinning CPU fans? I do not believe that.
I was on the Irish team of the IOI in both 2003 and 2004. I wasn't good enough to actually win anything :-( but the experience was amazing and I met some very very smart people!

Some of the problems were fiendishly hard though!
The Importance of Degradation
It isn't an air-bearing by any normal use of the term.

It still needs a radial bearing to attach it to the motor - especially if you aren't mounting this perfectly flat and level. It can use an air cushion effect to reduce the planarity demands of the bearing to keep the heat transfer surfaces parallel - but this is very different to 'floating' a 10mg sprung drive head
Python!

Sorry couldn't resist.
I just don't understand the hostility toward someone who has worked ridiculously hard and has achieved a demonstrable level of success. She did it, she talks about it, she's happy with the choices she made.

Why so judgmental?

Working hard at things increases your likelihood of success. Is that notion in question here at HN? True, there is a diminishing point of returns for everyone where working hard doesn't yield more returns or even produces overall negative returns... but how can you categorically decry her and her choice to push her own limits?

I worked crazy hours before I got married and have a lot of financial and experiential success to show for it. I did it then out of choice. I don't do it now out of choice. Was I doing something inherently wrong when I was younger and working so hard?
My friends and I had a startup idea in 2007 that competed with Craigslist. (I didn't follow through, but one of them is still in that space) I can't believe that five years later, no one has managed to push CL off the top. It was a bad user in 2007 and still bad now. Everyone I know tolerates CL. No one likes it. CL refuses to add new features that would improve the user experience and benefit customers.
> Relevant to Hacker News... debatable.

So debate. I have used sounds and music while hacking. I know video game developers whose job title is "sound designer". This link, while not particularly advanced or profound, still inspired me to think about creating sounds in a way I hadn't before.

http://ycombinator.com/newsguidelines.html

Seems well within the guidelines to me.
Agreed. I'd rather see all of them go down with lessened punishment than one go down while the rest are off the hook. Although I don't like plea bargains which let the squealer off the hook.
No, those two functions are unrelated. It's a two-in-one: smart card w/ signing key and one-time-password token.
Living in Vancouver, I disagree. Craigslist is still the main buy/sell website here. I've tried to use Kijiji a couple of times with the same results as the original poster - not much response.
That would be interesting. A more efficient way to heat the planet. :) It sounded like they were only talking about CPU/GPU coolers, but I suppose similar ideas could be applied to AC systems.
I agree, that's part of what's going on. A big company is going to have a hard time making an exception from it's salary curves to attract a top candidate.
The "it's cheap to form an LLC" mantra is common, but not always correct. In NYC it costs well over $1,000, and can easily approach $1,500, because of "publication" requirements.