skysight-inc/HackerNews huggingface dataset:
Thanks for doing the calculation! I'm not checking it right now, but it's in the right range. However, in the tradeoff between shortest time of execution of serial programs and power efficiency per instruction, the i7 is way over at the shortest-time-of-execution extreme. Common GPUs are about a thousand times as power-efficient, and many embedded microcontrollers are nearly as power-efficient as GPUs. Check out the Bitcoin hardware performance Wiki pages for hard data.
Curiosity was built with 2.5 million lines of C
Intelligent Code Review Tool
> Supporters of Nokia's failed Meego need to understand that there just isn't room for so many mobile platforms.

What so no-one should try anymore? People said similar things about Android. I would agree that this is a hard fight to take, but it is not unreasonable. As the major players create more closed off ecosystems there will be a market for this. The question is how big and how well these guys can fill it. Given the audience size is in the billions, you only need to pick up a few % market share for this to be viable. So I would think the challenge is not market saturation, but building a quality system and not getting shot out of the water by competitors legal teams.
Google also has a rather simple process for getting your intellectual property back. It's been discussed on HN before:

http://news.ycombinator.com/item?id=4051325
What's happening at the beginning there with that disc-like object that looks like it's free falling towards the surface?

Edit: ah, the Youtube description says the beginning part is the heatshield separating.
That's unfortunate. I fit in your target audience and I deleted my facebook. A lot of my friends have too, two of which I had already sent the link out to before I realized I couldn't actually log in.

edit: If it comes up as a common complaint we will add a separate login.

I also like to think the fact that the article I linked to had 504 upvotes certifies that this is, in fact, a common complaint.
Actually I believe you still need to be an accredited investor to participate.

It seems like the benefit is 1) you can easily invest smaller amounts than typically required of seed investments, 2) you save time by choosing from the companies FundersClub curates, and maybe 3) they handle paperwork(?).
But you can charge for access to that information, and unfortunately for those who think they should have the right to free access to any information because it is in digital format are going to be on the wrong side of the law for many years to come I believe...
Horse betting tips
Australian Horse Racing Tips, Ratings, Articles |Champion Picks"
Marketing is about getting the word out.
Think about ads and blog posts.

That just sounds like advertising & PR. There is a lot more to marketing. To crib the definition from Wikipedia (which sounds pretty close to the one I learned):

Marketing is "the activity, set of institutions, and
processes for creating, communicating, delivering, and
exchanging offerings that have value for customers,
clients, partners, and society at large."[1]

From the same page, another way of looking at it is:

Marketing is used to identify the customer, satisfy the
customer, and keep the customer.

"Getting the word out" is important, yes, but that's not all there is to marketing.

[1]: http://en.wikipedia.org/wiki/Marketing
I think it's important for us to know how to show the power of computers and programming to kids. This is a great tool to achieve that since python is so abundant in the unix world.
I rarely tweet and have few followers. Every month or so, I get a new, usually female follower (whom I always flag) which I always presume to be the first step of some Russian-visitor-ish sort of scam. Perhaps I simply am being used to make these fake accounts look more legit?
Something that has happened in the past on more than one occasion.
I don't have a blog and I don't know the proper convention for those "Show/Ask HN" posts so I suppose a comment here is the next best thing because my question is related.

After reading the "Yes, I was Hacked. Hard." post I updated several of my passwords and found that Netflix enforces a 10 character limit on their passwords. Does anyone have an idea why or how this could be the case? I would find it very ironic if they did this to save a few bits per user in their database considering they're a media streaming company.
This is somewhat unresearched guessing, but hopefully it gives you some new angles to look at.

My first thought when I saw your page, was... tough crowd. By that I mean medical professionals are targeted by so many groups due to their perceived high income and ability to sell very expensive drugs to customers (think what pharma reps have to do to get in front of them).

Not only that, but you are probably also getting a certain percentage of share of people with no ties to the medical industry.

Further and probably most helpful for your plan, the doctors you do get may not have an immediate need for new staff so they may say, nah, I'll figure this out later.

Obviously if they are figuring it out later, they never do. So somehow you need to compel them to keep contact with you before they ever decide to hire someone.

I wish I had suggestions on that last point.
Open letter to W3C CSS Working Group re CSS Grids.
Samsung Galaxy S3, Galaxy S2, Galaxy Note and Note 2 will get Android 4.1 Update
dropbox plus either passphrase brute force (or guessing), or one of (keylogger, compelled disclosure, shoulder surfing, ...) + dropbox.

I consider the 1Password file sensitive enough that it shouldn't be online, especially not with dropbox. I'd prefer if there were physical protection for it somehow, too (like a smartcard or FIPS module, which wouldn't allow bulk-export normally, and which might impose other rules on use like 5 passwords per hour when outside my home network, etc.) Same way you handle high-security private keys.

(Ultimately I'm not going to be happy until I have a trusted tablet of some kind, but building that either requires being Apple or waiting for WP8 hardware to come out and investing about $5mm in some serious security upgrades. Maybe worthwhile, though, since it solves the general problem of trusting client devices.)
A Fancy Business Model
I share similar sentiments. Start-ups feel more fickle as of late... perhaps just chance with Sparrow's recent buy out, etc. Unless there's a real reason to keep going for the starters (monetary or personal drive/passion), then there's no fountain to stand on.

It's disappointing! I was really looking forward to trying this out... but I never made it past the waiting list.
Although enabling two-factor auth in gmail is great, I still fail to see how it would have protected his iCloud account.
Sure his gmail account wouldn't have been compromised, but what about his his iCloud and twitter?. Why doesn't apple and twitter provide two-factor authentication? Why doesn't everyone do it this days?
The kudos thing looks similar to the one used in the svbtle network
I've been known to follow up a couple days later with a concise report on some issue they mentioned having in-house.

It seems to be better received than null-content pings.
Have you encountered any other sites that allow you to use Google Authenticator to generate OTPs?

Part of the reason I think two-factor authentication is a usability burden is because each "identity provider" wants to use its own protocol. Google uses an Android app. PayPal sent me a card. My brokerage has a keychain token available. Other companies use a "soft" RSA token that runs on Windows. But if everyone agreed on a protocol, then I could have everything in one place, which would make two factor authentication significantly more enjoyable to use. (I know there are standards: the question is, who other than Google follows them? :)
A surcharge for using credit cards is fairly common here; as far as I'm aware it's not against their ToS within Australia.

Here's a relevant article which discusses attempts to limit the surcharges: http://au.ibtimes.com/articles/351577/20120613/rba-seeks-lim...
Oracle's Tuxedo 12c application server to offer mainframe-class performance
Myth: Right, but what happens in the very common scenario of my Android phone-- logged into Google with the Authenticator installed-- getting lost / stolen? Surely then 2-factor auth is basically useless?

(insert your answer below)
Yep but that's up to the banks and their bundles more than Visa/MC; the cards company's mission is more one of convenience.
All the major registrars I know of offer free whois privacy services.
Microsoft charts own path on privacy
Doesn't LTV stand for "[customer] life time value," i.e. the amount of money you'll be able to generate from a customer during his/her time with your business, and not "long term value"?
This is the most detached-from-reality crypto comment I've come across. Google Authenticator works. I really hate to break it to you - but it's actively working right now to protect millions of real users and saving enormous enterprises real money.

It seems like you refuse to accept any of that because if someone roots my laptop and proxies my phone's display over the internet then Google's 2-factor might as well be ROT13.

Maybe - just maybe - those two things don't need to be in conflict. But you're insisting on that conflict, not me.
Not just a price... http://negrielectronics.com/samsung-gt-n8000-galaxy-note-10-...

$750 (list $800) for a 16 GB 3G version.
100K in a day seems like sloppy astroturfing. Why not add on smoothly over the course of weeks? At only $800/thousand followers, perhaps $80K was spent by an Obama supporter to create a news story and discredit Romney? Perhaps Romney was the inadvertent target of these astroturfing firms' efforts to make their fake users seem more legit? I checked out Obama's follower stats, and he experienced no such bump. Why pick sides if your goal is simply to sell fake followers random folks?

[I'm not necessarily a fan of either major party candidate, so please don't consider this a political discussion.]
On Google's "Enter your code" screen, if you click the "Don't have your phone?" link, you get a pop-up that gives you the following options:

* Use a backup code. Learn more
* Send to your backup phone number ending in ##
* I cannot access any of my phones Learn more

I presume option #2 is the one cubicle67 is referring to.

So yes, if someone gets my phone, they can then gain access to my Google account. Grrrrr...
Can Google claim blanket ownership of IP in California? I thought such provisions were prohibited by the state's labor code.
Stars isn't a new feature, just a renamed one.
Ironically Fluent was a team of "disgruntled ex-googlers"
This is a problem with a solution: eschew credit for debit cards.

Mine is 'visa-compatible' (and others), draws from my checking account.
Visa's in it for the interest payments. For every consumer that doesn't pay their bill in full each month ... they've got months and/or years of interest piled on top of paying back whatever they spent.
> So yes, if someone gets my phone, they can then gain access to my Google account. Grrrrr...

If someone gets your wallet, they can use your credit cards to gain access to your credit. You cancel the credit cards. Move on with your life.

Your phone already matters as much as your wallet now - that's just reality. Secure your phone as best you can. Use full-disk encryption wherever backups are stored. Don't give your phone to people you can't trust. Change your password if you lose it or it gets stolen. Move on.

These are tools to solve problems, not shrines to worship.
From the Wikipedia page[1], I would say it was the heat shield.

1: http://en.wikipedia.org/wiki/Mars_Science_Laboratory
It was a tricky migration to make. We felt the warning would have just caused more confusion, and that it was best to get everyone upgraded at the same time.
I killed a MacBook Pro because I liked Ubuntu
Who killed YouTube on the iPhone -- Apple or Google?
Amazon AWS supports the google authenticator app.

It is an open standard protocol, but I don't know in practice how many companies have compatible implementations.
Typo. Thanks.
Cassandra is turning out to be one killer data backend. It's really exciting to see what's being built on top of it.

Hadoop, Solr/Lucene, and now Blueprints/Grapb DB operations are all available on the same Cassandra cluster, in addition to the stuff Cassandra does quote-unquote natively. Add Zookeeper for the few times you need an honest-to-goodness transaction and it's just crazy how good the tech has gotten on the backend in the last 10 years. :-)
Agree that marketing is not just about getting the word out. But the hard thing about the definition you quoted is that it doesn't lend itself to focus. Its too all emcompassing and things like "satisfy the customer" could include awesome product development and customer support.
A lot of the tokens(Google Auth included) follow http://www.ietf.org/rfc/rfc4226.txt. Problem is everyone has a different way of provisioning the secure key. Some of which are unsafe (I am looking at you Google Authenticator!. Yes a qrcode is kool idea but theres no guarantee that you are the only one who provisions the key using the image.)

I designed Authy with that in mind. I wanted a way to have a 1 token for all accounts. Maybe we will add support for Google Authenticator, so you could import your Google Auth token into the app.
I've always seen customer lifetime value abbreviated as CLV. That being said, I've never heard of 'long term value', and I think the author is mistaking this term for CLV.

Customer lifetime value is something calculable, even if crudely -- its amortized revenue per customer as retention approaches zero. "Long term value" is more of a concept.
Digg review
I just set up 2-factor auth

1) You still need to enter your password every time you log in.

2) You can add backup phones that can be called/texted with the verification codes

3) You can print out back-up codes that will always work (once)

4) If your phone is stolen and is using an application-specific password, you can revoke that password for that application.
'In Free Market America, banks own YOU!' would be more appropriate.

But wrong. Or at least 'they own the unwary and dumb'.

I bank with a credit union, got rid of my credit cards in favor of debit, and working real hard to pay down my debt. Already I've bought two vehicles for cash.

Now, granted, they were not _great_ vehicles, but they run and they're paid for. Looking forward to paying _cash_ for a really _nice_ (but used) car in a decade.
You should be using POP or IMAP only on your phone so that you can revoke permission after it is stolen (when you log in to your account from a desktop and use a backup key from the printout). If you are logged in to your main Google account on your phone you are asking for trouble. While I will be sympathetic after it gets stolen and someone ruins your life, I won't be surprised.
Lastpass also uses Google Authenticator. You can get server-side code so you can use Google Authenticator on your own server, or use it to offer two-factor authentication to a web service you are running. It's an open protocol, with an open source implementation. All you have to use it.
Appyummy - The best tech news updated every few minutes
Good point. But even two-factor auth wouldn't have saved him because the hacker got the customer support people to issue a temporary password. Apple (and others) need to implement better controls on how you reestablish identity once you've lost access.
Dead Trigger Now Free on iOS Devices
Why Most American's Retirement Plan will Fail them in the End
Want to know how to retire early? Who doesn’t? I’ll be glad to tell you but you might not like everything I have to say.
Good question. I have seen http://drupal.org/project/ga_login for Drupal, for example. Likewise, here's a write-up about using a YubiKey with Gmail's two-factor authentication: http://static.yubico.com/var/uploads/pdfs/Howto_GmailYubiKey...

I believe Google Authenticator is based on open standards and open source, so people could standardize on it if they wanted too.
OK, here's the script I had hacked together. It (or some previous version), successfully downloaded all of the images, and a timings.txt. It was then supposed to create a movie file of each slide of the appropriate length, concatenate them all, and add the audio. But my VM kept crashing, and then I never had time to get back to it. Plus, the movie file ended up being very large. But if you have python 2.7.2+, you can run it and grab the images.

https://github.com/nsp/gazpacho
The Google-Free iPhone, Two Down One To Go
it boils down to "who do you trust?" Ultimately you have to take some responsibility in ensuring the safety of your data and be cognizant of the weaknesses of each link. I backup my data onto an external HD. In the event of fire or that HD being lost or stolen, I have online backups of everything but video. I also have an older external HD backup stored at my parents house 2 hours away. I trust myself to an extent and the cloud to an extent, but never either absolutely. My life is not Google or iCloud or Dropbox or Drobo.
I picked up on that as well. Wikipedia seems to agree with us: http://en.wikipedia.org/wiki/Lifetime_value

I agree with their points, but overall the article is just a little bit "off". Maybe it's the bit about the integral. If you had a customer pay you $1 every month, and they on average stayed for one month, your LTV is $1, not the integral of 1*x (1/2).
PyCon Talk Proposals: All You Need to Know And More
This service is called a 'nightly drop box' or sth, I suppose it's useful f.ex. for for grocery/liquor store owners, I believe a successful branch or two can easily make 6 figures income in a day. This one was actually 7 figures (1m EUR ~~4.5m PLN), around here gas station networks have private security companies to handle the pickups and drops, and I can easily assume a 1hr ride around a few branches (gas stations handle CCs, so there's probably less physical cash while the income is bigger than a liquor) will easily make a few mil, but I don't know if the sad guys drop it nightly in bunches or secure it on their own and transport it to a bank vip area during the day.
There's something that bugged me about two-factor the moment I activated it. The application specific passwords are stored in plain-text. How does Google know that it's actually e.g. Chrome accessing my mail with a given application-specific password?

If a hacker gets a hold of an old backup of mine, which includes a Pidgin configuration file I forgot to delete, which holds a plaintext password, can he get into my account with that?
I miss Solaris for these. Linux has some of them (pstack, pmap, gcore) and some work-a-likes (strace, lsof) but they don't have the cohesive feel.

Lastly, you can implement pargs pretty cheaply:

xargs -0 -n 1 echo < /proc/$1/cmdline

or part of pargs -e (which I call penv)

xargs -0 -n 1 echo < /proc/$1/environ
> So yes, if someone gets my phone, they can then gain access to my Google account. Grrrrr...

Only if they also know your password. That's why it's called "two factor authentication". Simply compromising your password is not enough. They also have to capture your phone.

Now, if you're stupid enough to write your password on the back of your phone.... you deserve everything that's coming to you.
I use Google Authenticator for my gmail/google account, but it's not an adequate replacement for hardware tokens, for the reasons I outlined above.

Wordpress, Lastpass, and a few other sites seem to support Google Authenticator as well, but it has very little adoption in the enterprise (compared to physical tokens, x509 certs, and passwords).
I think the answer is that you can print out one-time codes on paper and put them into your wallet.

I would also recommend putting an unlock pattern on your phone to protect in case your phone is stolen.
Reddit’s “What’s the Most Inappropriate Time You Have Farted?”
Nature's Chief Editor said sorry for the accusations of Ye Shiwen
How the Associated Press analyzed Wikileaks[video]
Can anyone explain to me why the government issues currency for free, but doesn't provide for an electronic equivalent? Instead of having economic transactions being controlled by a giant corporation, shouldn't this be considered an essential function that should be handled by the state?
Governments tend to frown on the personal acquisition of radioactive isotopes. Well, there's a tiny bit in your smoke detector, but if you managed to get the eleven pounds that are in the MSL's RTG you'd make the international news.

Pu-238 isn't naturally occurring, and nobody makes it anymore. The US bought the plutonium that went into the MSL from the Russians, who are starting to run out themselves.

The other problem with RTGs is they get less efficient as they get larger. The one in the MSL only produces 125 watts, which will decay to about 100 watts at the end of its 14 year lifetime. That's not a lot of power.
Hermes Birkin Handbags Canada Outlet
Having struggled with depression myself, one of the most beneficial things I did to improve my state of mind, other than getting medical help, was to learn to play an instrument. For me it continues to be extremely therapeutic and a great source of joy.

Find something that you enjoy doing (ideally something you can do for the rest of your life) where there is no expectation from anyone else but yourself to improve. I think many of the people that frequent HN are driven to improve themselves, but are probably also very self critical. If you can find an activity/craft/art/sport that you find engaging and allows you to slowly grow in proficiency with over time, you may find it helpful.

In terms of your workplace scenario, I'd suggest just trying to do your best given the constraints you have. While your workplace is unlikely to wholesale adopt Clojure, perhaps you can use it to solve small problems, or failing that use what you've learned about functional programming to simplify your Java code.
While I appreciate the concept, I don't think Dropbox is the company to trust for this kind of thing: http://arstechnica.com/security/2012/07/dropbox-confirms-it-...
Most important lesson as far as reducing vulnerability to social engineering is concerned: whatever service we subscribe to - we should always find out about their account retrieval process.

In other words, we should always ask "what is the password retrieval process for the new account you just opened?" This sounds like a big task and one where not all scenarios can be covered. But I think this is a good first step - as long as we are still dealing with passwords, federated identity, half-masked credit card #'s and security questions.

I think this exercise would help us be careful about our choice of passwords, answers, email ids.

What would be the most obvious downsides to this approach?
There's many good reasons to make backups however, not just the chance that an advanced hack like this can occur. Definitely not wasted time.
Two-factor Google authentication would have had two benefits. First, the Gmail and Twitter accounts wouldn't have been hacked.

Secondly, the Wired article made this claim: "Because I didn’t have Google’s two-factor authentication turned on, when Phobia entered my Gmail address, he could view the alternate e-mail I had set up for account recovery. Google partially obscures that information, starring out many characters, but there were enough characters available, m••••n@me.com."

I don't know for sure whether that's true or not. But assume it is true. If two-factor authentication had been enabled, then the hackers would have had a much harder time guessing Mat's email address for iCloud and whether he had a @me.com email address at all.
Facebook doesn't even allow you to delete your account. If a site were to remove the account from the public view, but delay the actual deleting by a few days (I'd prefer a week or more actually), you wouldn't notice the difference unless you were malicious. But I don't understand what the money is for actually.
I remember feeling odd when Amazon moved beyond just books. Wow, I am old now.