skysight-inc/HackerNews huggingface dataset:
If you transmit the hash, it's either going to be unsalted, or the salt will have been sent ahead of time, leaving it open to being brute forced. Further, it's still a huge MITM attack because if you can login to whatever.com with theonewolf/HASHOFYOURPASSWORD then I can sniff that... and login as theonewolf/HASHOFYOURPASSWORD too.
malware is a numbers game. All you need is a few thousand older people that don't know any better and you can have your password sniffer / bot net , up and running in no time.

While poorly written english is a red flag to some of us. Not all computer users are native speakers of english even in english speaking countries. They are much less likely to notice usage and spelling errors.
...and this is why Windows 8 will crush iOS in the enterprise.
import cocoa_keypress_monitor.py
^

SyntaxError: invalid syntax

No surprises here; retarded comment with retarded code
I disagree that files are the only solution. Back in the 90's Apple had an OS that had fully interoperable data in applications and that OS didn't have a file system.

It was Newton-OS and it used something known as soups for persistent storage. Soups were discoverable databases that intelligently handled Flash cards insertion/ejection. The ability to handle Flash on removable media is still something that mobile OS's have trouble with to this day.

The OS could merge soups on different stores dynamically and detect if some data in a soup was currently in use on an ejected card and ask for the card back. This merging of soups on different storage devices is something I've never seen duplicated in the subsequent 20 years.

Files are not the only way to achieve the requirements in the article. They are just the common solution.
I don't get it...why can't LinkedIn show tweets via the API/widget like every other Twitter-integrated site?
You should consider a feature for coinbase to allow for btc to be sent (via lookup) to email addresses. For instance, the Electrum client allows this by the recipient hosting a bitcoin url on their domain. julian@tosh.us maps to http://tosh.us/bitcoin.id/julian which returns my bitcoin address.
Stock Market Analysis for Week Ending 6/29/12 -VIDEO
Tempting :) but same reasons here...
http://en.wikipedia.org/wiki/W%5EX
Obviously he means inside job, as the next point is "Profit". Was that not blatantly obvious?
It seems crazy, but it may be more intuitive for some people. People often use muscle and visual memory to remember where things are, not necessarily by name of location.

Edit: Plus, you can always add naming and search with it. And Microsoft has an interesting grouping concept in Windows 8 with grouped and optionally named sections, not folders.
"As of 10 June 2012, minimum transaction fees on the original Bitcoin client are:

Accept a transaction for inclusion in a block: 0.0005 BTC

Relay a transaction to other Bitcoin hosts: 0.0001 BTC

A transaction can be sent without fees if both of these conditions are met:

It is smaller than 10 (SI) kilobytes (10.000 bytes).

All outputs are 0.01 BTC or larger."[1]

Put another way as bitcoin grows fee-less transactions will become rare...

[1] https://en.bitcoin.it/wiki/Transaction_fees
It was put together by these guys: http://simpleshow.com/
There are 3 guys who've written an automated script. Can you figure? ;)
Actually they don't want to access your email, so they can't run a push notification service. And Apple Mail.app does the pulling thing, so allowing to change default Internet app or Mail app would not cause a problem : another app pulls, that's it
I'd rather spend 29 minutes coding a solution to a repetitive 30-minute task, even if it required more brainwork than just going through the motions. At least I'm getting some experience out of the grunt work.
Ask HN: Silo, project management for software web app - What do you think? 
I've built a team with perfectly complimentary skills. We're applied for an incubator. We're going LEAN. The marketing website (MVP) is online - http://getsilo.com - we're collecting emails and have two companies onboard for early stage customer development and feedback. We're building a V1. Things feel good.

I'm keen to get thoughts and feedback about the website, whether the problem and idea is clear, and get a guage gauge on the demand. Do you share this problem? Are Basecamp and Pivotal tracker letting you down?

Many thanks for your time, Ollie Rattue.
The difference between Twitter and Twilio or Stripe is that Twitter has a product that exists outside their API. In the case of Stripe or Twilio their API is their product, the dynamic between developers and the Twitter vs. Twilio is going to be far different.
TwitchPad for iPhone - A new physical control system
The OP's point is that displayed content can be made to be indistinguishable from visual elements of the browser even for technically sophisticated users in the near future.

This reminds me of login spoofing of yesteryear. How do you know if the login prompt on a shared computer or terminal is really from the OS or is a user-level program trying to steal passwords?

The usual solution was to hit a special attention key--like the "break" key under UNIX or Ctrl/Alt/Del for Windows--that user-level programs could not intercept.

Could we use the same idea here? Holding the "break" key will highlight genuine messages from the browser or the OS.
> I'm not sure I buy the premise here. UIWebView is a class to help developers show web content in an app. That's all it was ever about.

I'm pretty sure it's still the case that when you add a HTML5 app to your home screen (so your users see the icon instead of a bookmark in Safari) all of a sudden it doesn't get run on the Nitro JS engine anymore.
Google Wants To Make C++ More Fun
Well, you can already do that through extended validation. I'm not sure requiring it would be desirable, and doing this would need a better reason than it being better than nothing.

The philosophy of HTML5 seems to be allowing applicants to do a lot of things which don't require much trust to be placed in them (and most applications don't need much), rather than security through asking the user's permission (e.g. most desktop OSs), when they are unlikely to have much idea which developers they should trust, or through accountability/review (e.g. iOS), which adds barriers to entry.
Click on 'Developer Brief' for the full info packet.
Only if you can't live without some feature in 2.1 and can't backport it yourself.

What jQuery 2.1 feature can't you live without?
http://getsilo.com/
Good point. I helped run the contest, and want add a bit more background.

Robert's answer was in many ways an educated guess. He took some of the numbers, looked at other projects and put it together to get a good guess.

However his motivation for making a guess was spot on. We got a lot of answers that were more thorough. But just as Robert conjectured, these were all relatively similar, and all under predicted the true number of backers.

Robert's prediction was the highest prediction that we got, mostly because he was able to correctly guess that there would be another wave of supporters before the backing period ended.
Reminds me that crawling isn't a recognized developmental step, but directed movement is. Seemed little "S" has pretty good command of directed movement, by moving her target to herself.
Definitely a big feature request. Coming soon.
Designed to work over wan (if protected from PoV of security).
Odd, seems to be working for me. Could you try again?
Real-world cyrptography - Implementing SSL/TLS
Replacing !# Routes With PushState Using Backbone.js
Better handling how exactly? Either you send a login token over the wire in plain text, or you send it over HTTPS. It makes no difference if you hash client side or not, as it's still a login token that can be sniffed and reused.

Even sniffing is only really likely to be a problem if you're on a public wifi network.

It seems like you're blowing this out of all proportion. It was only relatively recently that Facebook starting forcing HTTPS for authentication, and many many sites (inc. HN) still don't.
And this is 100% correct. Nobody cares about technology while it works from the customer perspective and gives you enough momentum to evolve your product.

A great set of hints was also given by JHH in his widely known presentation: http://www.youtube.com/watch?v=0CDXJ6bMkMY (but still so valid!)
Not at all. Fully functional as well as visual.
I'm not talking about blind use of SSL, I'm saying users should always be cautious with their password. The burden of protecting your bank password falls on you, if you're using it on a third-party site, SSL or not, you're at risk.
http://c2.com/cgi/wiki?LazinessImpatienceHubris
This is ridiculous. Yelp is not down and even if it were the news doesn't belong here.
Thanks! Credit for that goes to twitter, as it's just customized Bootstrap.
Thanks for the suggestion. I was also thinking there may be contract manufacturers who already have their MFi certification, but since Apple does not reveal the specs, it is hard to tell whether my idea is feasible or not or whether it uses the full potential of the platform.
Why would you consider it fragmentation even if (and that's a big if...not going to happen) Apple allowed Chrome for iOS to use its own version of WebKit (and V8!) instead of UIWebView? That doesn't make any sense.
It's a little bit more difficult (especially since if you want to use Apache you'd have to configure it manually), however there are plenty of Python WSGI hosts out there that should make it simpler.
I personally love having Mac OSx and Ubuntu Server running in a VM. Best of both worlds, IMO. I don't have to mess up my Mac install, and I can dev in a "real" linux environment.
I'd suggest switching to JavaScript (or CoffeeScript) instead of Python or some other trendy language.

a) You need to know it anyway.

b) Node.js is awesome and works the way web servers ought to work.

c) JavaScript, if you avoid the obvious warts, is a really nice language. Every other language I've learned either has as many warts as JavaScript or isn't practical.

Having picked JavaScript, it turns out to be amazingly powerful. Need to automate content production? Adobe's stuff is all scriptable via JavaScript. Want to write a 3d game? Unity uses a dialect of JavaScript.
I think all project management SaaS have let me down so far, Pivotal I think is much superior, the issue is that all of them are around tasks and timelines, a project is so much more than that. If I need to put my documentation elsewhere, and track bugs elsewhere, this is just an overhead (pivotal as example, I stopped using it for bug tracking and moved to Jira)

As a feedback, I would at least change the bootstrap default colors, it's starting to look like all startups look the same...

And in my 5 seconds attention, I didn't quite get the main basecamp killer feature, but I liked the notion of the trees. you got my email...

By the way, would be happy to hear your thoughts on http://flashissue.com if you send newsletters and think it's too painful and takes too long
I've thought about this quite a bit. As HTML applications continue to evolve we should make them feel "appish". Things like selectable buttons take the user away from experience the app. Also graph labels shouldn't be selectable.

One of the big ideas of the web is selectable content. However UI elements shouldn't be included in this set.

I've written a little more about this (with some screenshots to illustrate my thinking) here: http://blog.dcxn.com/2012/02/29/selectable-elements-are-driv...
+1 !!!
I am considering Bluetooth Low Energy as an alternative; although, WiFi definitely won't work. Anyways, if it wasn't too bad, I may just give it a try and see how it goes.
The Internet vs. Hollywood
Interesting solution - this is similar to what I was referring to in the last paragraph that a traditional folder-based filesystem isn't necessarily the only way, but that a system-wide, abstract, and inter-operable content wrapper was the key requisite
Read the book "Thinking, fast and slow." We are genetically programmed (as are all living things) to conserve energy and make things easier for ourselves. I guess the author could more accurately replace "lazy" with "make things easier" and be more accurate. It drives everything we do as human beings, from politics (read Frederic Bastiat's works) to everyday lives (driving instead of walking to work, choosing to type rather than write a note).

It's the people who realize "this could be done more easily" that innovate. I guess lazy is just a simpler way of saying it.
Seriously, if that's the case then get the hell out. It's going to stifle your whole career if you stay in a place that is poisonous. And it will kill your confidence (if it hasn't already).
Matias Duarte on Jellybean and Nexus 7
Yeah, how dare Apple apply the exact same rules to Sparrow that they do to every single other 3rd-party iOS app!
We'll see how it plays out, but I imagine the notion of a file will continue to decline, and end up replaced by APIs.

APIs continue to provide interoperability, but instead of having the user select a file to upload, they select an image through the Facebook API. This should ultimately improve the user's experience, but there are some downsides during this transition period (IE: photoshop touch lack of sharing features).

While you could argue FilePicker brings back the file, you could also hedge your bets the other way, and work as much as possible to abstract away the file. Instead of grabbing Facebook photos as a set of files, what if I could easily grab the set of photos than contain me and a friend?
New espionage malware campaign targets users of Windows & Macs
M.U.L.E. Returns
I understand what you're saying, but you need to illustrate an actual problem beyond "technically there's two" that this causes in mobile workflows for typical consumers.

That the current Send-To idiom is limited is not under dispute. That it's worth changing is what's worth discussing.
Oh, that's because building a robot to automate house-cleaning is still kinda hard.
This release looks like a great upgrade to a great library. The idea of using python as my "one language" is really appealing, but I still find myself falling back on R pretty consistently when it comes to data manipulation/analysis. As pandas matures I see myself doing this less and less.

Thanks Wes and everyone else who pitched in!
Why I Don’t Use the Chrome Browser
Link Prospector...more like Link Goldmine
Ummm, while the findings are real (in the sense that they have actually been published), this is supposed to be humorous. I feel like I'm trying to explain a joke here...
Some people have decided that DDG's privacy is a must-have while others have decided that (at least for now) it is a nice-to-have. And DDG is of course betting that more and more people will arrive at the conclusion that DDG's privacy "feature" is indeed a must-have. I know I'm on the verge.
I think your name is great, and frankly I think the name means nothing if you have a good product / team

This is a very memorable name by the way... is the domain available? (just do me a favor and don't do a .ly or .io :))
I think the point is that if the password is one that's used elsewhere, if it's client-side encrypted, at least it can't be captured for use on another site by an eavesdropper.

It does nothing against an attacker who can get in the middle of the transmission though.
Thanks for the resources, unfortunately I need people who will give me more hands-on feedback about using the product, how it fulfils their needs, what else they need, etc.

Those sites are great for what they do, but my case is a bit more involved...
Maybe something like doozer[1] or zookeeper[2].

[1]: https://github.com/ha/doozerd

[2]: http://zookeeper.apache.org/
I am not entirely a sure what i am looking at. Give me a list of defined features and/or at lest some screenshots. it's hard to evaluate something when it's only "abstract".
I'm totally with you on this. People are confusing laziness with efficiency and smarts.

When someone works to make work more efficient, he is still working! By definition, a lazy person is unwilling to work (and that includes work that optimizes work).

I'd hire a smart hard-working developer over a smart lazy one any day.
As to MongoDB, in case you only have two members in a replica set, you add an arbiter, not strictly three members.

An arbiter is indeed a lightweight mongod process that doesn't have storage, and should be added to break the tie when you have even number of members. I like the MongoDB's design, and it is probably optimal for 99% of use cases.

There are three key concepts: Split-brain, Quorum, and Fencing. I find this article fascinating.

http://techthoughts.typepad.com/managing_computers/2007/10/s...
Frasier--no Mindless Sitcom
Thank you! will be looking forward to hear back
ZURB Launches Foundation 3 To Take On Twitter’s Bootstrap Framework
"Lean startup" already is a religion to some people
You mean prerendering every page which is linked to in the current page?
Cero Caza de Ballenas 2012
Perfectly fine. I got your email and I'll respond back as soon as I can. :)
Is "your mom" an acceptable answer?
We really need an "open standard" for CSS classes/ids. It would be so awesome if we just could change CSS Files, to switch (i.e.) between Bootstrap and Zurb.
Yep, that's planned but it's not ready for the general public yet (otherwise I would be less reticent about advertising it). Right now it needs some users who will help guide development, lean-style.
Velocity 2012 Postmortem
The 2 copies are not guaranteed to be in sync. If I modify data in App B, App A now has an old copy. I shouldn't have to explain why this is undesirable.
Wiretap requests from federal and state authorities fell 14% in 2011
Long time ago I wrote a small program that would mimic the entry point of a DEC terminal server, slow baud rates screen refresh and all, and with the permission of the computer lab manager I installed it in a few PCs, next to the original dec VT terminals that were actually connected to the server.

It didn't save any passwords or such, just display some random funny non-sense message to the user after s/he inserted login and password and then loop back again to the login prompt with a failed error message.

Even with this obvious message that would warn an alert user for the suspicious terminal, we (my friends and the lab manager) got a few laughs when people coming to the lab and finding all the VT terminals taken would use the PCs to login and tried several (many!) times until giving up, at which point we would tell them the truth. Mind you, these were people comfortable with VT terminals and unix cli and somewhat computer savvy!
Right. Ideally, everyone is willing to take responsibility for the work they do and are proud of it even when it contains flaws.

If you can't handle having bugs in your code without getting all defensive, you probably shouldn't be coding. The only way to get better is to get feedback.
The problem is that it requires each application to have to wrap each API. You end up with a huge amount of redundant work, and in general a dearth of integrations as developers are lazy/reprioritize. For example, there are apps that support integration with Dropbox, but don't support Google Drive, Box, SugarSync, etc.
Lustomer- That is both clever and hilarious. Probably won't get too much blowback. But, possibly might not be used by "conservative" companies. You should here the lyrics of the songs I listen to.
As C++ has taught us, the solution to the errors made in a badly misdesigned language is not to continue cramming every feature you can think of into it.
Thanks for the feedback.

Yes, we got lustomer.com (which surprised me)
Hopefully Chrome iOS gets to stick around for a little bit and soon get better Safari for iOS. A little competition is always good.
You see a sad comment, I see a 1 minute job that gave me $3 and a good incentive to learn a bit more about bitcoins. Also, I like money. boohoo.
The Case for E-commerce Acceleration (aka, Bye Bye BBY?)
Twilight of the American Newspaper
i think it's fine. we all know how hard is to find a name and i really do not see an issue with yours. ;)
Artificial Pancreas: The Diabetic’s Miracle
There's a simple adage that a good tool makes simple things easy and difficult things possible. By that measure, PHP is a pretty good tool. Yes, other tools are better in various ways, but ease of deployment is a non-trivial quality.

(I did like the quote suggesting AppleScript is "even worse" than PHP. I'd say it's far worse, since AppleScript makes easy things difficult.)
Unless the entire image is a clickable hotspot that starts the next step in the process of their evil. ;)
No, only links that are marked with prerender rel in the head.
"I still don't really grok what it's for or why I should use it, and that's why"

Uh, its for pretty much the same thing Facebook is for, except you can do lists and make them public or private, you seriously didn't get that?

Or did you just not use it because the people in your network weren't using it. If your friends are already on Facebook there is almost no reason for you to migrate to a new social network where your friends, or chosen thought leaders, aren't active. Maybe you will tack it on as a 3rd, 4th or 5th social network where it will mostly just consume more of your time.

As I said, yes network do rise and fall but it is enormously difficult to get that ball rolling and keep it rolling. FriendFeed was an awesome social network, with all star founders, but it never gained that critical mass, the founders gave up believing they could displace Facebook so they sold it down the river... to Facebook.
noduerme, it appears you have been hell banned.
I would definitely hire a smart hard-working developer.

But, aren't they little hard to come by?

People are lazy because they are not challenged by the things around them.
The key isn't the specific file abstraction used today. The key is being able to name data. Whether that is through a traditional hierarchical file system, through an activity log, through URLs, through some hash-based key-value store, the requirement is being able to refer to data independent of the application that produced it.
Playing with Riak and CRDTs - Counters
You should have a lot of external contacts who know you directly then, if there's similar turnover in your department.
Question: is there a Node.js package out there that lets me write in PHP style, without having to configure anything?

I mean, I install node, I install the node package, I start the server...

And then it just looks for an "index.node" file or something in a directory? URL's would map to node files? It would use some kind of templating syntax like <? ?> or whatever, but the point is, it would be as easy to use as PHP. (Each template could get the URL parameters, and read session variables, just like PHP.)

I've used Express, of course, but that's overkill for throwing together a little website. People love the PHP model of files. It's clearly not theoretically ideal, or particularly scalable, but it works and is easy.

Anything out there? Maybe I should throw it together myself...
A simple example is an image-cropping system. The user has to click and drag. If you don't disable the selection and the user clicks in just a slightly wrong way they can end up selecting or dragging the image, which looks totally wrong for someone who wanted to select a region of an image. Both actions have the same user input (click, drag, release) but your intent is that it have a very different behavior than the browser default.
Yes. Bad practices are bad practices. I don't think they should be maintained.

Just a simple warning to users that other people on the Internet could see their password might help in identity theft.

People would at least be cognizant that others can see their password.
Infographics are fine.

Just some people put too much photoshop and too little Tufte in their infographics. Filling the page with chartjunk and slathering on effects that lie with art instead of clarify with art.
Why do you have two masters in the same AZ?