skysight-inc/HackerNews huggingface dataset:
There is no difference between browsers implementing a locally encrypted resumption store for a nonce and for cookies (since again, most sites where security is important already use cookies purely as identifiers); nor does it affect whether sites will start requiring two factor for all logins. The two systems are equivalent except that one is simpler, but the (small amount of) complexity of cookies is not what's blocking these types of security measures.

I'm not saying additional login security isn't a good idea (although since local cookies tend to be compromised by malware running on the machine rather than offline attacks, it may not be that useful to encrypt them), and I'm not saying that avoiding cookies isn't a good idea, because cookies do tend to get bloated. But tying the two proposals together is unhelpful to both, because they're essentially orthogonal.

As for avoiding cookie request overhead, that is again something you can do by adding a standard nonce without actually removing the old mechanism; sites that want to be fast or have a standardized way to interact with HTTP routers, and most sites that use web frameworks, as the frameworks get updated, will use the new one. The only way removing cookies would help is if servers started translating cookies for legacy applications automatically, but I don't see that becoming prevalent because of document.cookie and related concerns.

edit: and again, breaking backwards compatibility is a great way to slow HTTP/2 adoption, not that it really matters unless it brings TLS to all sites along with it (but that's another story...)
guys, did they blocked the link on facebook ? http://www.lize.it/up/blockedOnFb.png
You know, I'm moderately baffled by why MS persists in maintaining IE at all - even IE 9 is considered "the problem child" by web devs trying to use shiny New Things.

Why DO MS persist in maintaining their own browser when they're manifestly not very good at it?

At the least, couldn't they make it easier all-round by following Google's example and base IE off Webkit? Better standards compliance, cheaper development, win-win surely?

Not a flame, I'm genuinely interested in why MS persist in (what seems to me to be) flogging the dead horse of Internet Explorer.
Skype Admits to a Glitch that Shares Your Private Conversations with Strangers
I agree with this way of thinking. phkamp has come up with some innovative ideas, but if it doesn't come easy for the rest of us there are lots of techniques to help e.g. asking, "if I was superman and could implement any solution, what would it be"
http://personalexcellence.co/blog/25-brainstorming-technique...
Android/Twitter integration: "OAuthNotAuthorizedException: Authorization failed"
WebEngage Launches Notification Tool : A DIY Messaging Tool For Your Website
> It's not enough data to be able to build solid science yet

And thus you shouldn't believe it. The fact that you add the yet at the end of your sentence shows that you have already made up your mind and believe that there are ETs and you are looking for the evidence to prove it, instead of looking at the evidence coming to a conclusion from the available evidence.

Also you have to think in probabilities: what is more likely - that a radars fail and people misinterpret readings or that there is actually faster-than-light travel and ETs are almost stealthily looking at us, trying not to be seen but still failing? The available evidence strongly converges to the first hypothesis.

I find it odd that a crazy-advanced civilization would do such boring and mundane thing like hovering in the sky and sometimes land on earth. What would be the agenda?
After the whole IPv6 story, I'm surprised the author ignores the political dimension of designing a new protocol. As Mitch Kapor said "Architecture is Politics". It's not just about what solution is best from a technological perspective, it's about what we want our future to look like.

The internet has become way more important than back when these protocols first became standard, and every time a protocol or standard is up for debate, political and commercial forces try to influence it in their favor. Some of the concepts they tried to shove into IPv6 were downright evil, and would have killed the internet as we know it. Personally, I'm relieved all that is left is a small, un-sexy improvement which albeit slowly, will eventually spread and solve the only really critical problem we have with IPv4.

I really dread subjecting HTTP to that process. Although I fully agree with the author's critique of cookies for instance, the idea of replacing them with something "better" frankly scares the crap out of me. Especially when the word "identity" is being used. You just know what kind of suggestions some powerful parties will come up with if you open this up for debate, and fighting that will take up all of the energy that should be put towards improving what we already have.

As techies we should learn to accept design flaws and slow adoption and look at the bigger picture of the social and political impact of technology: HTTP may be flawed, but things could be way, way worse.
So, there are multiple approaches to Linux software distribution (for free-as-in-beer closed-source software, like the Minecraft client, Skype, Chrome or Steam):

1. Pump out versioned tarballs, and let distro maintainers deal with packaging.
2. Create a very thin launcher, and deal with updates yourself in the Launcher. Minecraft does this.
3. Provide package repositories for Ubuntu and Fedora and deal with updates yourself. Chrome does this.

I think (1) and (2) are preferable. (1) is also the easiest to implement (!), but may result in delayed distribution to the end user.

It is possible to mix (1) and (3), of course.
Perhaps, but I imagine the number of people in the entire world like this are measured in the 100s.
Showing a contrived example for a selected case doesn't show the benefit of a language.

In that case, why not teach Basic? Its hello world is just,
print "Hello World"
Hints About How Used Car Parts
Shell oil company doesn't understand the Internet
"...I would send out security to escort the person out. But I would do so with a great trepidation, because of lawsuits."

This is what they did, but he did not want to go out because of the letter from his doctor(as his doctor's letter is something in France).

So they waited until they could suddenly remove the device from him, they not realizing it was permanent connected to the skull.

He wants it his way or his way.
Profiling express web framework with Notifymode
Still better than Word though.
Imagine if browsers reported a user-resettable uuid sent over on each connection open. Advertisers get the benefit of being able to track users, do it more securely since no data is ever stored on the client, and must eat the cost of actually storing the key-value pairs, instead of passing it down to users and expending massive amounts of bandwidth bouncing the data back and forth.

It's not about killing cookies, it's about finding a better solution that solves the problem better.

Note: I work for a startup that "benefits financially" from tracking users—a feature without which we would not have a business.
If we assume that the readings are actually showing a physical phenomena and are not technical errors or forgeries, they are still just that: an unexplained radar recording and an unexplained radioactive soil sample. There is no reason to jump to the conclusion that ETs are responsible.
Facebook Raises Hackles on Email
Become an Antarctic explorer with panoramic imagery
If you're at a party or event, having people take pictures is often expected (but not always) and so people will not generally have a problem with it. If someone happens to catch you while taking a general street scene or on the beach, its expected you might end up in their photo.

But if someone pulls a camera and specifically aim it at you, on the other hand?

I'd be pissed off too, as it is something that I'd see as extremely rude for someone to specifically target me for pictures without informing me about why they are targeting me specifically. But I've never had it happen, nor have I've been around other people who have had it happen to them, exactly because in the parts of Europe I've spent most of my life, it's pretty much considered totally unacceptable. People who want to take pictures of specific people generally do come up and ask.

Depending on context I might very well confront them about why they were doing it, and might very well be quite angry.

> Note; I don't take pictures, but to get upset about it; isn't that a bit over the top? You could kindly ask to refrain but actually spend energy and get upset for something so unimportant.

It's highly culturally and contextually dependent. If someone starts taking pictures of you specifically in the street somewhere where taking pictures of strangers is considered unusual and rude, there's every reason to wonder why someone is prepared to break strong social norms to single you out and somehow don't want to ask you first.

If you're somewhere where everyone expects to be photographed, on the other hand, and the typical purpose is known, most people will happily accept it, or stay away.
And it still had Linux specific issues. That weren't fixed for over a year (there were community patches though). Also, Minecraft's "graphics engine" (raw opengl?) isn't comparable to Source. In any way...
Of course this about the server speaking HTTP/2.0. We are talking about a potential client-server protocol upgrade. The fact that millions of applications are written to the 1.1 spec shouldn't be a factor in working on the 2.0 spec.

I believe that HTTP/2.0 will necessarily require applications to be rewritten. Or at least frameworks will need to be updated in order to take advantage of the new features. And you can expect some pain when other features are taken away. If there is a push to make cookies more 'optional', you can expect that clients will start to let users block cookies entirely. Would you rather your application kinda work for people but not those on 2.0 browsers? No, of course not, you'd rather it work for everyone. So why try to run a 1.1 webapp across the 2.0 protocol.

If you are hard-coding $COOKIE statements in your code, you aren't writing it to a sufficient abstraction to be able to survive a future major version jump. But there's nothing wrong with that. Major version jumps in a protocol are pretty rare, and your code will still work just fine as a 1.1 webapp.

If you're writing applications that expect to be dealing with HTTP requests, then of course you'll have to rewrite applications to run on a major version upgrade of a protocol. This is what will be expected. Major version updates shouldn't necessarily be backwards compatible, and that's the main argument of the post. If the update is marginal, there will be nothing to drive adoption of 2.0 over 1.1.

What I was trying to point out was that, (hypothetically) if HTTP/2.0 isn't backwards compatible, that doesn't mean that HTTP/1.1 and 2.0 applications couldn't co-exist on the same site (or even the same server).

Plus, let's remember, this is all hypothetical - we are still trying to figure out the goals of HTTP/2.0.
Adobe is something that makes me want to switch to Linux. I only use Flash from them though.
It only takes one random violent asshole in a position of authority to incite his underlings. That might not be the whole explanation, but the fact there were three of them doesn't mean much in a situation where one of them is likely to be in charge of the others.
I benchmarked AIR against Tcl/Tk on my desktop by implementing the same app in both - it used something like 80x the memory and 20x the CPU IIRC. It's not even a good GUI toolkit, let alone a good cross-platform one, compared to tech from the 90s.
I think that Amnesia has a native Linux support and it is a great game.

http://en.wikipedia.org/wiki/Amnesia:_The_Dark_Descent
Money spent cannot be eaten (or.. put in one's mouth)
It's mentioned the first time you post a question. It's also mentioned every time a subjective question is locked by a moderator. Heck, they even have some sort of real time NLP that detects and warns you if you try using a subjective title.
I'm going to be in classes for the rest of my life. Literally. I love it.
Business Card Printing by PrintPlace.com 
Make your first impression last with Business Cards from PrintPlace.com
Im sure you meant that in a sarcastic way, but that might not be a bad idea. A lot of the dotcom bombs were not bad ideas in a universal sense. The technology, culture, adoption & know-how just wasn't there in 1999 and wasn't going to be there by 2000.

A lot of people are still ordering physical products online for the first time. A lot of offices paying for a webapp for the first time. In a lot of senses 2012 is what 1999 expected 2002 to be.

If you grab a list of 100 failed 1999 companies, you have 100 things that people thought were going to be big in 2002. Worth exploring if you're looking for ideas.
You need to try this stunt in France then because you are totally misguided about "most people." I've had scared reactions from people in front of me just for looking at my own camera's pictures.

The climate in France is that people should not get photographed without their permission. Even further, some claim that taking photos of their house is too much. So the whole atmosphere is a by-default hostility to photographers, which should be extra careful.
No, I agree that HTTP doesn't make things easier on HTTP routers. Variable length headers that have to be parsed does nothing for speed.

However, this is the method that HTTP has defined for version upgrades, so if you want to muck around with the first line, you lose the ability to co-exist with HTTP/1.1 on the same port.

And I really doubt that they'll want to switch ports for HTTP/2.0.

One possible method would be forcing width padding of the request-path and Host headers. This would potentially make it possible to use fixed offsets. But this strikes me as inelegant.
I agree - just did this for vim. I don't think "move to end of whatever" I know what outcome I want. I never "say" it in my head.

To elaborate a little, I'd like to see a "you are here":

http://i.imgur.com/fDYEJ.png

you want to be here:

http://i.imgur.com/ijn0g.png

type thing. Not sure if this would work for other editors.
Or just being given some serious painkillers.

I had my wisdom teeth out a year or so ago, and after that I chewed big holes in my lip and tongue because I couldn't feel that I was biting on them. I imagine that's more or less what happens to them, all over their body, all the time.
What I find elusive is this polite society's fevered need to stomp down any finger-pointing in the direction of certain sections of society.
If one were to take a look at their irrational phobia of discussion concerning these sensitive topics it would appear that this brand of furiousness at the very mention of something disagreeable is nothing but an outward veneer to fend off further pointed & valid accusations. It's weak weaponry. It shows you're on tenuous ground. It almost always indicates that you're defending the indefensible. That you're arguments are at best propped up by popular sentiments and not by objective observations. That anything found objectionable by the educated segments of a society is necessarily odious despite the facts.
Are You A Blogger Or A spammer?
How Much Force Power Can Yoda Output?
I thought HN had a large preponderence of "engineers" (or at least they claim to be) I would have expected almost 100% of us sould have enough knowledge to understand the analogy.
He's very careful to represent storage of the images as an accident caused by the incident, which is slightly odd in itself - why not simply say it records everything it sees and that that was very useful in this case?

Probably because he either believes French law forbids recording people without their permission, or doesn't know one way or the other (I'm in the second camp) -- so he has to emphasise that it was not his intention to take these pictures, to make it clear that he wasn't doing anything wrong in that regard.
Marissa Mayer, the new CEO of Yahoo
Having worked in a few languages I can say without a doubt that MXML is one of the most fun languages I've used in a long time. How many times I've wished that HTML5 too had <HBOX> and <VBOX> implementations. They make your life so much easier (than floating DIVs, etc). The data binding of MXML and Actionscript are also one of the niftiest feature I've come in web development. It is like knockout.js only easier and implemented several years ago.

Even their web services like Adobe LiveCycle have been a breeze to use and were able to accomplish real-time collaboration in multiple Flash project with maybe 100 lines of total code. That's powerful.

Flash, esp. after MXML is an amazing platform for development but it is dismissed a lot by people who have never used it or maybe got biased using a poorly created end-product.

P.S. It's similar to how I used to think that Java was the worst programming language owning to regular "null pointer exceptions" and "slow loading" applets which I now clearly understand are not the fault of the language but the people who used it (esp after seeing awesome projects like Eclipse). Same goes for Flash. There are some super amazing stuff done in Flash, which is ultra fast, ultra robust and beats the pants down of any HTML5 application.
Great.

I took a Coursera course last month, and despite a couple of weirdnesses, it was a really enjoyable experience. I don't really get Udacity, but I'm definitely going to take a couple more of these courses.

It also appears as though they're starting to figure out how to mark essays, etc without involving huge numbers of lecturers. It's an exciting time for eduction.
Maker Camp on Google+ will be a blast
Vehicle and Boat Storage facilities
If you are having a devoid of space for the complete storage of your belongings like boats and vehicles, the self-storage services can take care of the same with great care. You can surely hire a vehicle and boat storage facility in your locality to ensure safe and protected mini storage services.
this is sad.... and also a result of a war on drugs. Decriminalization of drug use would actually allow people to get help without losing their job/life/everything. There is no reason for this senseless madness.

End the War on drugs. Portugal hasn't fallen apart because they decriminalized:
https://www.google.com/search?sugexp=chrome,mod=5&source...

... Why should we be any different? Clearly empowering cartels and criminalizing addicts is a problem. Help the addicted!
Kenyan and Ugandan start-ups make location pay its way
MVP Jenga - What's a Minimum Viable Product and How do I Get One?
Knuth's code has bugs. NASA's code had bugs. Programming as we conceive it is so close to impossible that it takes years of study and diligence to aspire to only being pretty bad at it. We're just reaching the quicksilver and bloodletting phase of our discipline's evolution, and someday our successors will look back and cringe just as doctors do.
London Olympics 2012: every UK Olympian since 1896 Mapped
I Don't Like SPDY
I see that interoperability is not much of a concern... everybody uses Outlook, right?
They are different because a server suggested resumable session nonce requires no form based authentication. User entered entropy never hits the wire. I do not know how to emphasize this point more strongly. Please read the research on trends in brute force and timing attacks vs human capacity for entropy memorization.

Evidence is clear: The majority of sites do not handle cookies securely. They do not handle user submitted entropy securely. Virtually no one supports 2 factor authorization (props to google on this point).

The scheme I am suggesting and the status quo are not equivalent as you suggest. I do agree that they are orthogonal, except at the point where we decide upon a standard.

I take it as a given that the status quo is unacceptable. If you disagree there's not much for us to discuss.

What I'd like to see is http/2 be a fresh design that is unwilling to sacrifice security. We can always assume http/1.1 or failback to it under negotiation. Because of that, there is no reason to burden a new standard with backwards comparability. Among the SPDY community you see this same perspective, often suggested as a tick/tock strategy where when version n+2 goes online version n+1 becomes backport only support and version n is abandoned.
This already exists in spirit, in the form of "Incognito" or "Private" browsing. This doesn't solve the protocol issues of cookie bandwidth and insecure storage, but it does provide a user-resettable store of cookies.
How To Reduce Costs Of Motorcycle Insurance Rates
There are different ways in order to lower the costs of insurance rates for motorcycles. It is indeed difficult to budget if insurance costs remain higher in addition to other financial responsibilities.
10 Google Features for Slow Internet Connections
you're confusing resolution with dpi.
Nor any harm, given nobody else had then it's relevance was tangable. Just appears people by default assume others are crazed nutters, but in my country we have not assasinated any of our Prime ministers and dont carry guns so the cultural aspect of such information is embrassed in the spirit it is bestowed - in good faith.
I wonder how much of this is really Valve's effort into making Linux a Gaming platform and how much is just to put pressure on Microsoft to relax the policies on Windows 8 that would make the Steam model invalid.

If this path will lead to a world where gamers don't depend on Windows, that would be awesome for users and really stink for Microsoft.
yes, basically if you use your smartphone to take a photo of a dish, they'll complain about it.
anyone for a ie general countdown ?
after the ie8
http://theie8countdown.com/

we can spread iex countdown
http://theie10countdown.com/
The TSA are operating in the UK 'for the Olympics'
Very nice, for what little I can see. One of those loonies who have deleted my facebook account. I have twitter, openID etc.
I'm sure he isn't going hungry!
the projects are available for download now http://victorantos.com/thursday.aspx
Jism 2 Movie 
Jism 2 is an upcoming Bollywood erotic thriller film to be directed by Pooja Bhatt.[4] It is the sequel to the film Jism which had John Abraham and Bipasha Basu in lead roles. The film marks the debut of Indo-Canadian pornographic actress, businesswoman and model,Sunny Leone in Bollywood. Jism 2 was launched on 1 December 2011, on popular Indian television show Bigg Boss, making the launch a first time ever in the history of Indian Cinema.[5] Mahesh Bhatt compared Jism 2 to Italian romance drama Last Tango In Paris
Mobile Statistics - Stats on the mobile Smartphone and App Market
I'm curious to know how are they marking essays. Can you say more about it? Links are fine, too.

EDIT: Oh, nevermind, I've found it. It seems that student grade each other's essays - one student grades three other students.

Look here, under Peer Evaluation:
http://spark-public.s3.amazonaws.com/fantasysf/Documents/Wor...
Painless API & Web Service Documentation
But you have still had issues. As I said if your choice, I was not advicating not, just saying personaly as a rule of thumb and not a clear cut don't.
New Renault Duster 2012 Image 
Download New Renault duster 2012 images in India, renault duster image galleries, wallpapers. Renault duster model pics...
I've got a cosmonaut stylus which I'm pretty happy with on the iPad.

Broadly speaking I don't like a the idea of a tablet with a stylus as it would be better for a small number of use cases but worse for a far larger number.

The screen doesn't handle detail brilliantly for handwriting but uPad gets round this by giving you a larger writing area which it then shrinks onto the actual document. Basically you write an inch high and it crunches it down to about 40% of that. It works pretty well, though I'd still use the keyboard for significant text input - it's completely workable once you get used to it.