skysight-inc/HackerNews huggingface dataset:
What if i lost my phone and didn't print backup codes? Will i lose my google account forever?
What does such a privacy service entail?
Introduce this to analysts at IBanks & you will see productivity collapse. Very interesting, I look forward to playing with it.
Cara Herbal Mengobati Kista | GLUX | 085219946055 / 085322379603
Cara Herbal Mengobati Kista

Ternyata kista tidak hanya satu jenis lho ! Ingin tahu apa saja jenis-jenis kista ? Mari kita bahas di kesempatan ini dalam Cara Herbal Mengobati Kista bersama Jelly Gamat Luxor. Simak dengan tuntas dan temukan kehebatan apa dalam jelly gamat luxor.

KONSULTASI LEBIH LENGKAP HUB. : 085219946055 atau 085322379603 SMS/TLP

FORMAT PEMESANAN :

GLUX : JUMLAH yang dipesan : NAMA : ALAMAT LENGKAP PENGIRIMAN : NO. HP/TLP
kirim ke : 085219946055 atau 085322379603.
There are easy trade-offs one can make between convenience and security. For example, identity verification on the phone with the last four digits of a credit card (Apple).

But then there are policies and technology that increase BOTH convenience and security. Say the difference between using SSH these days versus using, say, paper and an Enigma machine.

The inconvenience of Google Authenticator is minimal and the security provided is huge.
Reality: You go into Google account security and choose 'Clear the phone info and printable codes' and 'Forget all other trusted computers. Require a verification code the next time I log in from any other computer'.
These "security" questions are usually, IMHO, the weakest link.
since someone is going to ask this I might as well be the first: why not try and sell it?
Cool video on how Curiosity landing must have looked like
WebGL mandates that the user agent check indices: http://www.khronos.org/registry/webgl/specs/latest/#ATTRIBS_...

As I alluded above, the current WebGL spec is actually fairly well-designed with respect to trying to crash display drivers.

The word "undefined" actually only appears once in the current spec, in a bit about canvas drawing buffers being preserved across frames. And, in fact, in that case it mandates implementations to clear the buffer before any WebGL call can read the contents to prevent leakage.

Most of the claims of WebGL security issues are either to old versions of the spec (which leaked data to shaders and led to things like timing attacks) or are currently a bit on the hyperbolic side.
There are plenty valid theoretical cases being made in this thread that the phone is not a fully-independent second factor from the password. Syncing phones to laptops is a big one. If your phone is compromised and you're concerned at all, you really should just reset your password.
Ay chance of open sourcing it? Maybe the community can carry the torch forward?
Anyone know what picture compression format they are using?
I like the feature. I've watch really a lot of projects.
but I really didn't want every feed show up in my timeline.
If only all vendors adopted their drivers... (as I write from a Mac OS X 10.7 with an embarassingly old OpenGL implementation)
I was reluctant to setup two-factor for a long time, perceiving it to be an unnecessary hassle. Then somebody tried to gain access to some of my accounts through my Apple ID. They were unsuccessful (I don't have any common passwords these days so managing to send a password reset to my GMail wasn't terribly helpful) but it certainly made me paranoid enough to switch.

I currently have two-factor setup on two accounts. I won't say there's no hassle involved--authorizing a machine via SMS so that I can login and generate an app-specific password is a chore--but the peace of mind is well worth the hassle.

Did you also know that you can re-assign your Apple ID to an existing e-mail address? Like, say, one you have two-factor enabled for? Now people can socially engineer Apple's flawed policy all day but they'll need to steal my phone, too.

EDIT: Also, if you don't have backups, you might as well just delete everything yourself right now and use that as motivation to prevent the same thing from happening again. Hackers, tornadoes, spontaneous combustion and ghosts are all conspiring to destroy your data sooner or later.
This is almost exactly my life story, only that I haven't reached my 30s yet.

Reading about all the 18- or 19-year-olds forming million-dollar startups really does make me feel like an underachiever sometimes.
As far as setting it up, usually just a checkbox somewhere on the registrar's admin panel.

As far as the results, all of the contact information in the public whois record is replaced with the registrar's contact information. They will forward information on to you if absolutely necessary.

I keep whois privacy turned on for all my clients just to protect them from that damned Domain Registry of America scam.
Very likely its just some sort of limit imposed by a security API or library call. Definitely not a way to save space. Its really idiotic - they should be extending it out to longer than that, but there are still some banks around that impose shorter limits than this (8 chars) so they are in good company.
FTA: (You still need to be an accredited investor, though).
They didn't need a sky crane for the Viking landings.

http://en.wikipedia.org/wiki/Viking_program
>"the very four digits that Amazon considers unimportant enough to display in the clear on the web are precisely the same ones that Apple considers secure enough to perform identity verification"

I don't see how this is an Amazon security flaw. The last four digits of my credit card is printed on receipts from just about every merchant I transact credit card purchases with. Treating such public information as if it is a PIN places the flaw clearly in Apple's court.
The problem with selling other stuff is that you can never corner the market with it alone.

As the Kindle book store has taken over, publishers have started actively resisting the store - giving better deals to competing stores, or even leaving the "Amazon network" entirely out of protest. A content distribution network is self-limiting since content producers are scared to death of being stuck with a single de facto monopoly distributor.

Hence why the studios tried to kill Netflix, and damn near succeeded.

If you want to have any hope of becoming the dominating, go-to distributor for all media of a particular sort, you'd have to drag a lot of producers in kicking and screaming - this means absorbing said creators into your fold, and also "incentivizing" dissidents by having so much grade-A content on your network that it cannot be ignored (see: Hollywood's relationship with multiplexes).

This move makes a lot of sense if you consider also that Amazon has tried to open their own movie studio also - they're clearly trying to create AAA-level media as a way to bootstrap their distribution network off the ground and make it harder to ignore/protest against.
"Myth: I've heard two factor authentication doesn't work in IMAP and POP"

I've found this to be true - to a certain extent. I had two factor authentication turned on and found it to be a nightmare in OSX Mail. Failures to retrieve mail, asking for my password constantly, etc. I was resetting the application passwords every two days. I tried to research a fix, but in the end it became less of a hassle just to turn it off and have my email work 100% of the time.

It's probably a bug in Mail.app in Lion, but I can't say my experiences with two factor auth have been positive.
Not only that, but I have my own domain name which forwards anything@mydomain.com to my primary email. And to keep spam under control, I use a unique email for each (low impact) service. Therefore, I often forget which email I used when signing up for that particular service (unless they sent me a conformation mail, then I can usually dig it up).
> I believe Google Authenticator is based on open standards

The standards implemented are bonafide RFCs - HOTP (counter-based) was published in 2005, no less. I'm not sure how much lower the barriers for integration could be.
School of Henry Ford
Advertising: Model T for less than a $1000
Marketing: If I can figure out how to make a car for less than $1000 I'll sell millions
http://code.google.com/p/google-authenticator/issues/detail?...

The inflexible account ordering in Authenticator is bugging me, since I recently added a 5th account (not 5 google accounts) and my phone only shows 4 at a time. I don't know if you have any influence over the people maintaining the app, but it looks trivial to fix, given the comments.
Housing is probably 1/3 or 1/4 the cost (or less), so I guess it depends on whether you can compromise heavily on housing while doing a startup vs. other things. Certainly iPads and Macbooks cost the same in both places. Income taxes maybe not so relevant.

1/2?
Meraki (full disclosure: my employer) has two-factor authentication for their network config/admin web interface; whatever the tool used (I haven't worked on that part of our codebase), it is compatible with Google Authenticator.
> Email is quite clearly a thing that needs fixing

Honestly, I've never seen it that way. Email continues to work fine. It's platform independent and easy to use/setup. It's probably one of the best things on the internet ever.
Does anyone know how these DCMA/ ContentID calims work in practice?

As I understand it currently, the news segment was probably send to someone who fingerprints it and crawls youtube for infringement. They then send Google a take-down notice and some bot at Google takes down the video and sends a mail to NASA, where for the first time a human notices that some news segment did copy a video from NASA.
While I agree with what your saying in regards to not reasoning about the larger situation. Initial A/B testing should just be to get a sense of the magnitude of increase (if any) in conversion rates when you do the discount.

Only then can you reasonably discuss the issues presented. If your results say 'this is definitely a good idea for increasing purchases', then rather than do long term A/B tests it would be better to just monitor overall trends in potential abuse.

So there are really two separate issues: Do discount follow ups to abandoned carts create a large increase in purchases. This is easily answered with an A/B test

Are people likely to abuse this discount system? And how do we stop it if they do? This is hard to test with a simple A/B test and is much better answered just by monitoring the purchases and looking at the extreme cases. Also this is pretty easily solved by just adding limits to when the system grants discounts.
> This is what pays for the Olympics even occurring

Even conservative estimates of the final cost of the Olympics are around 10bn. Visa paid only 100m so I think the games would have been fine without them.
How to Recover from an Abortion?
How are they enforcing that? Please don't tell me it's actually illegal to sell french fries in London right now.
I found it fascinating that the most productive C programmer on the team was a Python script.

Go Python! ;-)
If I'm reading the blog post correctly, his Twitter account was compromised via GMail. If his GMail account had not been compromised, they wouldn't have gained access to his Twitter feed (which was the true target of the attack).

They would still have been able to compromise his iCloud account and thus destroy the data stored on his computers.

Unfortunately, I think that in this particular case, having two-factor auth on GMail wouldn't have helped. His account was compromised by having a password recovery email sent to his iCloud address. Presumably, password recovery bypasses two-factor auth.

In this attack and the earlier CloudFlare attack, the attacker took advantage of inappropriate recovery email settings. While it's reasonable for consumers to enter recovery emails, I think that professionals should avoid enabling them. When a @gmail.com sends recovery mail to @me.com (or vice-versa), the attack surface is greatly increased.
Cool video on how Curiosity landing actually looked like :) http://youtu.be/UcGMDXy-Y1I
How do they enforce that? It's not illegal (yet) to emit WiFi signals, or is it?
40% of the Olympic costs are funded by The Olympic Partner (TOP) program, of which Visa is a charter member. I was making a general statement about exclusive sponsorships making the Olympics possible, not Visa alone.
many, if not most, ibanks have twitter blocked.
How so? At first I thought it was a renamed 'watch', but since it doesn't put any data in your timeline, I can't figure out what it is for at all. I mean, it's a pretty button and all, but...
Another interesting "feature" of credit cards is that they tend to charge a percentage for foreign transactions, and so do the banks that back the cards.

http://www.creditcards.com/credit-card-news/foreign-transact...

The only major one that doesn't is Capital One... and they mostly issue mastercards.
I live just beside Victoria Park, about 0.5 miles away from the Olympic park. You would scarcely even know the Olympics are on by what I see in east London. If anything, it's much quieter than usual. Staying away on account of it isn't necessary. At worst, there's a little bit of delay on the A12 as it goes past one of the park entrances and narrows down to a single lane for 200m or so, but that's about it.
It really depends who you talk to. At Groupon EU, Japan, Korea and USA we called customer life time value "LTV".

Also, Avinash Kaushik, author of one of the best books on Web Analytic and previous Google Evangelist, uses LTV as well.

http://www.kaushik.net/avinash/analytics-tip-calculate-ltv-c...
Ask HN: Does anyone else not like LinkedIn's redesign?
I'm no designer but to me I think it's a step backwards.
I agree with you but I think the idea of having a credit card just for online stuff is to limit the ways in which someone can get access to any information about your credit card, like the last 4 digits. For example, someone who finds your credit card receipt at a restaurant would get the digits of a different card and couldn't get access to your AppleID.

It's actually a good idea. I'll think about doing that…
Then why are you not using POP or IMAP with a separate password? What are they going to do with the auth code when they don't have your original password?

I'm not trying to defend their stupid choice of offering option #2, but rather trying to offer a solution to your current problem.
Theoretically (and likely), this could be applied to anything that involves convincing: politics, debate, etc., of course with different media of action e.g. voting. This is basically all you need to know about marketing, the science of interest.
when marketing Filepicker to enterprise users, how successful was referrals/friends/valley connections vs coldcalling, percentage-wise?
Why would you do it this way??

If its correct a child could spot problems in all that data. I thought American politics was smarter then this =(
I've found that there are generally two definitions of what "marketing" really entails:

1. Generate brand awareness, get people interested in your product and bring in leads/customers (depending whether you're B2B of B2C)

2. One that includes all that, plus the market research necessary to figure out how to do all that stuff

For lots of startups, the second part is really part of the entire product/customer development cycle, where product managers figure out what the customers need and how to talk about it in their language. This leaves the "marketing" people to really just focus on the more narrow definition. But in more traditional businesses, lots of that market research falls under the label of "marketing."

As a guide for hackers, the most important two marketing activites are "getting the word out" and optimizing your funnel from visitor to lead to customer.
In the late 70's Viking had about 12 KBytes RAM (6000 WORDS) and 5 MBytes (40 MBit) tape storage.

http://en.wikipedia.org/wiki/Viking_program
The type of Uranium used in nuclear weapons (fissile U235) isn't created in reactors; it's purified from natural Uranium, which is almost entirely non-fissile U238 but contains a small proportion of U235.

Most commerical enrichment of Uranium uses gas centrifuges to separate the heavier isotopes from the lighter.
Tods Outlet Offers Discount Tods Shoes
Really, really cluttered, but probably really, really functional. It's probably (and hopefully) the result of mining through a lot of analytics data.
Is Working at a Startup a Waste of Time for Future Founders?
Maybe somebody can translate the last paragraph into English for me. I read the preceding paragraph several times and I'm coming up empty:

Based on our experiences at Filepicker.io we learned that
it is important to delineate the differences when
planning initiatives that drive growth, the amount of
resources needed and the profile of team members required
to drive the initiatives.

While we're going for pompous titles, how about "What newly minted MBAs don't know about writing"?
Hm. In North America, the surcharge is against VISA terms of service (linky Canadian government resource below - the terms of services are largely the same within North America). In addition, surcharges are illegal in 10 US states.

http://www.fcac-acfc.gc.ca/eng/resources/faq/qaview-eng.asp?...
Cheap Women Tods Sneakers Outlet For Sale
26er Carbon MTB Mountain Bike Clincher Rims 25mm « Carbon Bicycle Online
Maybe one of these: http://en.wikipedia.org/wiki/ICER http://en.wikipedia.org/wiki/CCSDS_122.0-B-1
UPDATE: The benchmark in this post shows write performance on standard EC2 machines to be:

"Titan's performance under normal (5,900 transactions per second) and peak (10,200 transactions per second) load..."
I'm confused, who's picking sides? I just read an article about twitter followers based on observable statistics. Why are you talking about hypothetical astroturfing, and how does that relate to or discredit the article?
DreamHost use Google Authenticator.
Yeah, smells like over-engineering to me. At most they need to put the "which floor" button on the outside where you wait. They don't need RFID cards that track history and use heuristics to predict where you are likely to go.
SimTower was /actually/ just built around an elevator simulator. "You guessed right," she said. "Sim Tower was built around a real elevator simulation program we bought from a Japanese guy." http://www.gamasutra.com/view/feature/2150/the_designers_not...
Are you asking if a hacker could use the application-specific password to access your email account? I'm pretty sure the application-specific passwords are only good for the service using them (e.g. the first service to use a newly generated password is the only one allowed to ever use it), but that would be trivial to test for yourself.
Quick Square Root method inspired by fast invsqrt
P90X Legs and Back Routine Too Easy?
I've seen Lexus sponsor parking lots or garages at sporting events, and lexus owners get to park for free. everyone else pays full price
I was about to ask why IronSpread was not used but I just realized they are now one and the same!
The Viking photos taken on Mars in the late 70's are pretty cool too.
The Best Kept Secret – How Your State Will Fund your Startup's Cash Flow Gap
Hm... this isn't very scientific, but I've read through a bunch of Wikipedia articles on the topic and nothing says explicitly this will be possible. Everything appears to be written under the assumption that a physical check exists to begin the process, and the article on substitute checks [2] explicitly refers to a "digital reproduction of an original paper check." Maybe someone who knows the actual regulation can chime in.

[1] http://en.wikipedia.org/wiki/Check_21, http://en.wikipedia.org/wiki/Remote_deposit, http://en.wikipedia.org/wiki/Cheque_truncation
[2] http://en.wikipedia.org/wiki/Substitute_check
Strictly speaking, this is with a Python plugin in Excel.

That said, Excel is pretty capable on it's own.
Android Appstore Download Analysis tools
On Page Optimization SEO Services  
We offer on page optimization services, our SEO on page optimization work according to Google algorithms. Per website on page service charges is $56.

http://no1searchengineoptimization.com/on-page-optimization-services.html
Sort fast.
I can't help but briefly consider the proportion of existing iOS (or Android, for that matter) developers who are high school kids.
Thnx for the tip. You are right.
a complexity theory error: "Just as you can reduce all NP hard problems to 3-SAT..."

you can reduce all NP problems to 3-SAT because 3-SAT is NP complete. you cannot reduce all NP hard problems to 3-SAT. for example, all problems in NP reduce to SUCCINCT-SAT, an NEXP-complete (and therefore NP-hard) set. good luck reducing SUCCINCT-SAT to 3-SAT (despite how little progress in separation of classes we've made, the time hierarchy theorem still indicates this is impossible)
Email is great. But long threads with various forwards and cc's become incredibly painful. Gmail have gone some way to fixing it, but Fluent.io looked like they were doing a great job (Judging by the demo videos)
experienced -> experimented
Again, if users cared enough they would vote with their feet. It seems like no-hassle, low-ads video playback is worth more to us than playing it more efficiently.
So much so that the classic (spinning platter) disk scheduler is named 'The Elevator Algorithm'[1]

[1] https://en.wikipedia.org/wiki/Elevator_algorithm
> First you call Amazon and tell them you are the account holder, and want to add a credit card number to the account. All you need is the name on the account, an associated e-mail address, and the billing address. Amazon then allows you to input a new credit card. (Wired used a bogus credit card number from a website that generates fake card numbers that conform with the industry’s published self-check algorithm.) Then you hang up.

> Next you call back, and tell Amazon that you’ve lost access to your account. Upon providing a name, billing address, and the new credit card number you gave the company on the prior call, Amazon will allow you to add a new e-mail address to the account. From here, you go to the Amazon website, and send a password reset to the new e-mail account. This allows you to see all the credit cards on file for the account — not the complete numbers, just the last four digits. But, as we know, Apple only needs those last four digits. We asked Amazon to comment on its security policy, but didn’t have anything to share by press time.

> And it’s also worth noting that one wouldn’t have to call Amazon to pull this off. Your pizza guy could do the same thing, for example. If you have an AppleID, every time you call Pizza Hut, you’ve giving the 16-year-old on the other end of the line all he needs to take over your entire digital life.

This part seems relatively bad:

> Amazon will allow you to add a new e-mail address to the account. From here, you go to the Amazon website, and send a password reset to the new e-mail account.
Ask HN: Which YC companies are in the video space?
I don't really understand why people complain about this.

Because it's a largely artificial restriction imposed by Apple to further their business interests at the expense of users. As noted below, the iPad form factor would be great for a programming environment like Squeak, but Apple says no. Now that we're starting to get Android tablets that don't suck, I'm hoping that we'll see some tools like that.
You'll be needing centralised scalable servers to make it work :(
Absolutely, there are different levels. However, for all levels you have to do some work to achieve PCI compliance (and overall security of your system). There is no magic in this world :)
So then the answer is to more strictly enforce the stated age warning. The gift shop should be fined. Bucky Balls doesn't need to be shut down. Stores disregard age ratings on so many things because I don't believe they ever get punished for it. Parents also disregard age warnings but that is their call to make since it is their child. But if they do, there really shouldn't be much they can do about it. That is my opinion. You think whatever you wish.