skysight-inc/HackerNews huggingface dataset:
Why is it unethical?

Many people are nervous - even scared - when purchasing online, because of the numerous stories of "having stuff hacked".

Live help lets them know there's a human being at the end of the line.

Abandoned carts are often a manifestation of that fear - so again, contacting them afterwards lets them know that there's a real person there.

And many people like the idea of something but when it comes to the actual commitment get cold feet - discounts can help in that case.
The problem is simply that if things are easy enough to remember, they're easy enough to crack or brute force. If they're too hard to remember, people will forget them and have to recover them.

I use LastPass and just generate a new random password for every new account. If I ever forget my LastPass password, I am boned (since it's the encryption key for my data!), but I don't worry about forgetting passwords anymore, and I don't worry about RandomSite getting hacked and my password being leaked. It's not perfect, but it's good enough.
Given that my startup is heading towards an area with a historically high rate of chargebacks and I was facing the nightmare of fraud detection, this particular article is like a nugget of solid gold that has descended from the clouds with a heavenly host providing choral music.

Thankyou.
Then we should probably move towards (something like) OAuth in all our apps, be it web, desktop or mobile. This way a potential evildoer is left only with a very limited token. Even more, we can invalidate tokens based on time and device used.
I agree with @cynicalmood that if you don't know what it takes to pull this thing through, don't trick the users into believing you're have got solid plans. Experimenting is always fine as long as everybody involved is on the same page.
I think a lot of people are missing the forest from the trees in this discussion. The real interesting question is not how he got hacked, it's why it doesn't happen more often? None of the tricks listed in the article are particularly time sensitive, the fundamental patterns behind this hack go back at least several years and they relate to fundamental design interactions between complex systems that are difficult to impossible to change. So given all this, why him? why now?

The answer doesn't have anything to do with how he should have set up 8 factor authentication or how he should have had a Swahili-numeric password. The answer is that his hacker had extremely atypical motivations and that's the reason his life got destroyed.

The goal of this hacker was to pwn this guy's short, valuable twitter account. It's unlikely there's really any other hacker in the world who has that goal which is why such attacks are so rare. For most hackers, there's some sort of rational ROI calculation and if the ROI is negative, the hack isn't worth doing.

Nerds often have a hard time seeing that security is a holistic system. It's often comprised of many flawed layers that are layered in depth to provide a statistically secure system. In real life, security comes from being able to push down the ROI through institutional mechanisms rather than personal ones. Credit cards are designed to be stolen and recovered from, investigations are able to target key players in the field and tough penalties means that the negative effects outweigh the positive gains.

All this has lead to a black market rate of merely $2 - $3 per stolen credit card, meaning that there's not much motivation to hack in the first place.

Nerds naturally have a libertarian bent which makes them more inclined to believe encryption and technology is the solution to the problem when, in reality, it's a beefed up police state and American hegemonic decisions that can span the globe.
>IMO people just use it for the wrong things

CC's and Replies aren't what email is for?
could anyone explain the use for this library ?
What makes up a successful person? Confidence and Humility
At best: not proven. At worst: "no smoke without fire"--style prejudice.

A couple of high profile criminals haven't had Facebook accounts. From this some people have inferred that people without Facebook accounts are up to no good. This is incorrect reasoning.

It would be an interesting study that compared a random sample of people with Facebook accounts to a random sample of people without Facebook accounts. But no such study appears to have contributed to these claims.
2FA is equivalent to changing your password every 30 seconds. Yes, it's "only" as secure as that single token, but the entire point of doing 2FA on a separate hardware device is that even if you have every piece of malware installed on the machine you're logging in to, there is still an analog transfer of information from your phone(/keyfob/whatever) to your computer via your brain. It keeps your "password" in two parts, one of which lives in your head/password manager/muscle memory, and the other of which lives on your phone.

ASPs are certainly less secure than 2FA, but they only permit services access, rather than account administration access.

2FA is slightly more hassle for the knowledge that you are effectively protected against a wide range of attacks. It's very worth it.
In case you're interested; I've been using GMail + Attchments.me + Dropbox. Works well.
Ask HN: Is it possible for a EU student to get an internship in the States?
I am a EU citizen studying in a university in the UK. Having seen plenty of posts here on HN about the stringent visa requirements, it left me wondering if it is possible for someone like me to get a summer internship in the States? I have been given the impression that it is feasible, but usually it involves too much paperwork to be desirable, especially with smaller start-ups. Leaving me wondering if it is actually doable?

Do I understand correctly, this case should fall under the J-1 Visa which requires a third-party (a sponsor) to monitor the intern? (this sounds rather off-putting from the company's perspective)

Any help or information is appreciated :)
MGWU founder here - one more bullet point to add, we promote the games as well. We've found students want to write great games, get great art, and then have people play their games - it is of value to them to have someone offer the whole package and worry about promoting the game. We don't take ownership of the code so the developer is free to reuse and/all their code in a different game as long as its not with our art/title.

Also - analytics have been incredibly useful in spotting steps in tutorials that have been too hard or levels that need to be tweaked or reordered.
Antique Tables UK - French Farmhouse Tables
Specialise in supplying antique tables and old country tables which mainly include farmhouse tables, refectory tables, antique dining tables and antique kitchen tables. We sell tables in various woods like trestle tables, cherry tables, ash tables, elm tables, chestnut tables, walnut tables.
Download Facebook posters for print media.
If i remember correctly, rover has a 720p video camera that records 10fps. And considering the speed of the movement of camera or robotic arm, any higher fps would have been redundant. I don't know about microphone though. Plus there is a novelty factor. The first full HD 3d 60fps video with 6 channel sound will probably be the most popular YouTube video of the year. But that's it, no one would watch the second video because all of it would be same. largely because rovers travels very slowly and also because it's just rocks and dust, just like any desert here on earth. The cost of the added weight and volume of more capable camera for just one popular video is not justified IMO.
hi all, just signup (with twitter or github - takes 10sec) to use the awesome labs, kthx.
I don't like C libraries that use longjmp for error handling. It's like killing a fly with a bazooka. There are some cases when longjmp is useful of course, but If you want proper exceptions, use a language that supports them.
The German Model
Loved the write-up. If you expand outside paypal/ccs into other methods like direct debits (common for Germany) I would be curious to hear similar stories. Accidental chargeback rates are way up on direct debits so any stories for dealing with that efficiently would be very interesting.

One thing I didn't really see was "previous successful purchase" - that should be a strong indicator of "not fraud". Even if other details look dodgy.
Ristoranti milano
Berbenno on line , Vivi lo Shopping e scopri i locali ed i ristoranti di Berbenno. Cerca i tuoi negozi e scopri tutti i servizi su Berbenno.net.
ASPs are 16 characters. That's 26^16 - 26^15 = 4.19315 * 10^22 (41.9 sextillion!) cominbations. If you aren't confident in the size of that keyspace, I'm not sure what to tell you.

The point about permitting a password to be used for only certain services is absolutely a valid one, though.
If you enter the site via a google search you don't get the paywall just do a search for the title: https://www.google.co.uk/search?q=Facebook+ventures+into+onl...
The major parser libraries that I could find don't allow adding syntax at runtime or to add operators to the expression hierarchy at runtime. Many (though not all) of them also make it difficult to do custom error reporting. These were my major motivations.
The Python Shell as a Chrome Web App
I completely agree. I can only imagine the whole thing turns into chaos.
What It Feels Like To Be A Freelancer
What about those with non Active Facebook account? Same Treatment?
Antique Dining Tables UK
Antique Tables supplier in West Sussex, UK offers wide range of antique dining tables which mainly include antique oak dining tables, long dining tables, large dining tables, 8 seater dining tables, 10 seater dining tables, 12 seater dining tables, etc.
That's basically a "Monkey Cage" answer.

http://paws.kettering.edu/~jhuggins/humor/banana.html
Not sure if "previous successful purchase" is enough of an indicator. If someone can hijack a Paypal account or obtain sensitive credit-card details, you should assume he can also hijack an account on your service.

Glad you liked it, we had to learn most of this stuff the hard way :)
Ah, yes, if you go home the next day.. good point.
Another similar tutorial (by us/AppCod.es):
http://slideshare.net/kolinko/app-store-seo-tutorial
Well it's the Daily Mail, innit? What else did you expect when you clicked the link? Sex offenders aren't allowed on facebook, so expect a headline very soon that anybody without a facebook account is probably a rapist or a paedophile - if not both.
4chan: Beyond one billion
To boost memory, shut your eyes
You're not supposed to hang on to it for years. Surely you have to pay for transportation to the airport at least?
"I am not easily emotionally moved by git command lines, but" - best part!
This is how they took down Megaupload's Ad.
@dhanji - thanks for all your work on this - you've inspired us all.

This post read a little bit like "This is more expensive to run in time and money than we thought - so we're shelving it for now."

Can I ask - was this move triggered by
(a) Google buying Sparrow? (and thus shelving other email acquisition plans)
(b) Marissa Mayer moving to Yahoo (and killing a potential purchaser strategy)
(c) The release of outlook.com (creating a high speed competitor with lots of resources for distribution and support and marketing).
I'm by no means an expert on Web Development, but I have done 2-3 websites for businesses as a sideline.

One CMS I like is CouchCMS - http://www.couchcms.com The reason I like it is because a lot of website dev (at my level of expertise :-) ) seems to go like:

1) Find a CMS you like and can use
2) Find a template for that CMS
3) Hack it around a bit

Whereas with Couch, I can do the following:

1) Find a template you like (plain html and css)
2) Hack it around a bit
3) Add in Couch to make the necessary bits editable

I find the "hacking it around a bit" easier for HTML than I would for, say, a WordPress or Drupal template.

You can also, as in your example, choose exactly which bits are editable - heritage recipe no, bagel of the week, yes.

NB: No financial connection with Couch, other than a happy user. Also, if you are planning to re-write something that gets 1000's of hits, I have no idea how it scales.
There's a Google Authenticator WordPress plugin: http://wordpress.org/extend/plugins/google-authenticator/
NLife - New navigation app from NDrive
Toronto Airport Limousine - Details -
Windows 8 loses 'boot to desktop' option Software
The Mozilla Foundation choose the rewrite path, it's true. Yet, the Sea Monkey project [1] is still alive. It's not like the code base vanished in thin air.

[1] http://www.seamonkey-project.org/
I would love to chat with you about LikeALittle. Your email isn't in your profile so can you please email me at inlith@gmail.com if you have the time.
oAuth, preferred for it's simplicity.
Complexity of simple data types
Basically, the general idea of parser combinators is that you want to be able to express your parsing grammar in the sort of high-level description that people actually talk in, not in the low-level description that you get when you are constantly looking at the element string[i] in some switch statement in some function. Here is a simple example:

parseAddress = let
hexStr2Int = Prelude.read . ("0x" ++)
in do
start <- many1 hexDigit
char '-'
end <- many1 hexDigit
return $ Address (hexStr2Int start) (hexStr2Int end)

(taken from http://therning.org/magnus/archives/289 .)

In actual words, "here is the function for converting a hex string to an integer, now define the variable `start` as the parse of many (or one) hex digits, then there is a hyphen, then the variable `end` is another parse of many (or one) hex digits. Convert `start` and `end` into numbers and put them into an Address object."

There are three further blog posts on Haskell+Parsec from the above blog: http://therning.org/magnus/archives/290 , http://therning.org/magnus/archives/295 , http://therning.org/magnus/archives/296 .

If you are interested about how such things are generally implemented, this Strange Loop talk is interesting: http://www.infoq.com/presentations/Parser-Combinators

What's probably the most interesting thing to speak of here is simply the fact that it's written in C, rather than in a "normal" functional language. You'll see in the latter presentation for example that there is a sort of "circuit wiring" approach which you can do with Lisp functions, essentially using function calls a(x) in order to describe a directed graph vertex from x to a.

I knew that you could pass pointers to functions in C, but I was not aware that it was sophisticated enough to build a parser combinator library, so I might brush up on my rusty C skills to see if I can understand the details of the implementation here.
Link to the article that works:

http://www.google.is/url?sa=t&rct=j&q=&esrc=s...
Followup on ORMs for Batch Performance
http://3taps.com/stats

Scroll down to the "daily report" and they've dropped from almost 2 million posts a day to 153.
Same in Sweden as well.
Yes, it's the Daily Mail, and yes, it's a headline ending in a question mark. But I'm not the person who trawls the Daily Mail for links to post to HN.

I was curious about what their rationale was. I wasn't expecting it to be particularly justified.
Using Rex To Automate Your Datacentre
So this is what business people mean when they say programmers need to understand business?

Apart from not knowing the exact nomenclature, it's embarrassing if programmers don't know these things. It's pretty much common sense.

But now we know.

So, when will business people understand software development?
A Letter to The President
They probably did it through the webmaster tools portals provided by the search engines themselves. 3Taps has gone from indexing ~2 million posts a day to virtually 0. I did a couple site:cityname.craigslist.org searches on Google, restricted to the past 24 hours, and got no results.
A Primer on How to Work With the Usenet Community
Interesting timing on this; I just starting using almost this exact command (`ls -1tr`) days ago. Great for checking the last few things in that giant `Downloads/` folder
Yeah they for sure can. They just don't tend to bother I think. Hijacking an account and the payment method used to pay on that account to go with it is a lot of work to do something you can do with less work.

May be business dependent tho. I guess selling source code means the people interested in defrauding you are fairly tech savvy too.

And yes, really liked it :)
Facebook's first real-cash gambling app launched
"Developed by UK online gambling operator Gamesys, the Bingo Friendzy app allows UK users aged 18 and over to play online games for cash prizes."
He probably doesn't want to risk further attacks. If he did want to get the police involved, I bet the attacker wouldn't be too difficult to find with all the services they logged into and phone calls they made. I mean, they could have used Tor for all of their Internet activity, but I bet they still used their home land line to make the phone calls.
In Australia, Pin (https://pin.net.au) is very similar service: no merchant account required, nice API.
I wouldn't. I would go with spark ada. No doubt C has better tooling, though.
The focus was mainly on the machine and not the results, as they can still be improved. But i've added a section on the Github website with pictures of print results. Hopefully this proves that it isn't a hoax ;)
Indeed, I've used an earlier version of Nicolas' inkshield for the Pwdr machine, it works great!
Yep, the Galaxy Nexus. I specifically wanted a stock Android experience, and it was 2x as cheap as the other phones, so I got that.
"The common concern among bosses is that a lack of Facebook could mean the applicant's account could be so full of red flags that it had to be deleted."

"lack of Facebook", is that some kind of newspeak, as in "not enough Facebook", or "take 200 grams of Facebook every four hours"? DailyMail, you go lower and lower.
I was going to make a library joke, but seriously, your local library has access to an amazing amount of books.

Even if your particular library doesn't have a particular book, there is likely a library somewhere in their network that has it, and will ship it for free.

All you have to do is ask.
I guess you are referring to version 1 of oAuth?

Seems like there is a lot of talk regarding the 2nd generation of oAuth.

Do you have any insight to share regarding that?
CLI is itself efficient in the sense that you're not lifting your hands from the keyboard to manipulate the mouse. Beyond that - scripting makes it more efficient.
Scalability in Cloud Computing
Scalability is a feature of Cloud Computing, But what is this terminology Scalability actually means ?
London 2012 hurdles
London 2012 hurdles http://news.psdmate.com/london-2012-hurdles/
London 2012 hurdles http://news.psdmate.com/london-2012-hurdles/
London 2012 hurdles http://news.psdmate.com/london-2012-hurdles/
London 2012 hurdles http://news.psdmate.com/london-2012-hurdles/
I signed up for Dropbox maybe 2+ years ago, the onboarding was pretty good then so it seems like they've been doing it well and improving from there at the very least.
And more people who can write it or prefer writing in it? Technical problems being people problems 90% of the time or whatever it was the fella said.
Matt, your list of objections and counter-objections is great – too good to be hidden away in a Hacker News comment thread and on your blog. It belongs somewhere within the sign-up flow itself:

http://support.google.com/accounts/bin/topic.py?hl=en&to...
A site crawler that collects meta, title, and open graph tags from pages on a site. Primarily targeted towards sites that don't have an inbuilt capability to report on this data (particularly legacy, non-CMS powered sites).
Dot Net Developer India
ASP .NET, C Sharp, Java Development in India company offers .NET Web Software Development Services to clients located across the globe.
Since I can't believe that someone linked a Daily Mail article on HN for the content, I assume this was posted as an example of how incompetent reporting can lead to the spread of ignorance?

It is quite an interesting example of that.
550-C-Textile Jacket Women
Combine watch with ls -ltr and you have a neat little way to keep an eye on a given file or directory:

watch -n 1 ls -ltr
and in the USA at least the IRS is very lax in clamping down on "benefits in kind".

In the UK HMRC wanted to tax us on the free tea and coffe that the company had introduced so that was the end of that. This is not hearsay I saw the letter from HMRC
It turns out, remarkably, that intrinsic motivation is far more powerful that extrinsic motivation. The intrinsic motivation comes primarily from enhancing a sense of self-worth. Good things: employees learning new things (skills and knowledge), employees allowed to self-direct (micro-managers sap morale), employees feeling a sense of challenge (tasks not trivial, but also not impossible and progress being made), employees having a sense of purpose, and employees being recognized for their contributions.

I don't have my source, sadly. It was probably and article in Harvard Business Review.
Very nice, thank you!

Didn't mean to be too cruel about it, it's just that with a new 3d printer announced almost every day I always look to see what the achievable print quality is like.

It's a great project you're working on, I'm sure many people (me included) will be watching closely.
Cranial Drilling Device puts a hole in skulls, not brains
And a white paper as well:
http://biorobotics.harvard.edu/pubs/2012/contrib/DMD2012_Loschak.pdf
It was written in MSDOS Q-Basic
great response! NP-problem discussions make me happy. for those not understanding a word:
http://en.wikipedia.org/wiki/Boolean_satisfiability_problem#...
I will likely remove the global state at some point, but the garbage collector is not something I plan to implement myself.
The First Image of Earth Taken From Space (It's Not What You Think)
Dental Lab
Barth Dental Laboratory provides complete solutions of Captek Crown, Crown and Bridge, Zirconia Crowns, Dental Crown Procedures, Zirconium Crowns, Emax Crowns, Dental Lab Products, Flexible Partial Dentures in Indianapolis (IN) - USA.
CSS3 folding effect on rollover
Google-Backed Asteroid Mining Venture Attracts Billionaires
It's possible that they do know that it's a "trick", scientifically speaking. According to this [1] article, Robbins does not attempt to explain one's ability to walk on hot coal as something accomplished with the power of one's mind; rather, it's a ritual focused on overcoming one's fear.

[1] http://www.skepdic.com/firewalk.html
Laptop Backpacks 
Laptop Backpacks

Laptop Backpacks

Laptop Backpacks
Same thing with credit cards. Most vendors don't event check if you signature matches the signature that is on the back of the card. (not that it proves ownership.)
I do basically the same thing. In fact I have 'ls -cr' automatically run after every cd.

The problem with aliases of course is that you end up typing them on other people's systems and looking foolish. Still, I use 'lcr' for 'ls -cr', 'll' for 'ls -alF', etc.
Yes it does have a 720p 10fps camera; it actually has 17 camera's in all: http://www.wired.com/wiredscience/2012/08/curiosity-mars-rov...
The Photo-Geek’s Guide to Curiosity Rover’s 17 Cameras
I think you are misleaded by the branding on your debit card. Most transactions are not going through Visa, but a third-party solution that the banks them selves run. I might be wrong, but I think Nets delivers the solution in most of northern Europe. They call it NetAxept.

This is a direct pay solution used with online terminals, the Visa/MasterCard-part of your debit card is just for offline transactions or credit.
While I appreciate the graphs, I'd also like to see the numbers if I hover over wording that says "Very clearly significant". What confidence interval are we talking about? 95%?

If I was you, I'd hide this information from the average user but make it available in a tooltip to those of us who care.