skysight-inc/HackerNews huggingface dataset:
This is just a life insurance policy being rebranded and puffed up by Google PR & Google HR.

Life insurance is a standard benefit among many top employers. What makes Google a bit different is that they're paying out 10 x salary, which is probably at the higher end of the spectrum of policies like this. I think my previous employer paid something like 4 x salary for death through illness and 10x for accidental death. Perhaps Google is happier to pay higher premiums or they've negotiated down thanks to a younger and healthier corpus of employees?
I suspect the quality of Pen-Testing being carried out or lack of is certianly an area of concern given the frequency.
LOL, don't we all wish we had enough karma to downvote...

But alas, we are all but weak willed trolls in a growing thread of fuck tards. Don't fret, I'm certain I can attribute your poor taste to your being a man and me being a woman. Sexist pig. Vaginas; Fist pump; HN; Fist pump;
> I don't understand this? A tab is a tab?

I think the parent meant that a problem could be if data itself contains a tab character, causing an offset during parsing.
I think there are many significantly more important reasons that differentiate Google and start ups that can not be compensated by paying into a private life insurance plan (that all start up's I've previously worked at had an option for).
Reading seems to be the thing they hate, because the vast majority them believe in their hearts that this site pirates their works. That or logically thought, but hey they are probably weak willed men incapable of logical thought in the first place.
Isn't that kind of the point of benefits? Make your company more attractive than the next, for potential new hires
Yeah, Verdana is fantastic on screen (this was especially so before anti-aliasing was standard), but looks awful in print.

EDIT: also, didn't know about IKEA's Verdanagate (from your link above). Fascinating!
It would be hard in the presence of parametric polymorphism (multiple functions having the same name but different numbers and types of parameters), as well as the difference between C++'s and Python's method resolution semantics (in Python, for instance, everything is virtual).

Also, templates.

Also, a bunch of other things.
Thats what I keep saying about Prototype.js
Two-factor makes more sense. Relying on your database never getting hacked is nonsense. Is not a matter of are you getting hacked but when are you going to get hacked... expect getting hacked.

(disclaimer: I am the founder of Authy.com a two-factor auth API)
Or not letting people paste into the field.
> Are there really no instances of rewrites succeeding?

The most famous instance of a successful rewrite was IBM's transition to OS/360 [1] in the 1960s, which was not just a complete rewrite but a completely new system to replace all the previous ones. (The "360" comes from the number of degrees in a full turn.)

Who spearheaded this huge effort? A certain Frederick P. Brooks, who used his experience with the project to write _The Mythical Man Month_, which coined the term "second-system effect" [3].

Of course, while the 360 project was _ultimately_ successful, they made all the now-familiar mistakes that Brooks documented in his book -- it was an extremely expensive and time-consuming project that was only possible thanks to IBM's enormous resources and strong leadership.

---

[1] http://www-01.ibm.com/software/os/systemz/pdf/360Revolution_...

[2] http://en.wikipedia.org/wiki/The_Mythical_Man-Month

[3] http://en.wikipedia.org/wiki/Second-system_effect
Given the well-earned hatred I have for GoDaddy, anybody who worked there has, in my books, a substantial credibility deficit to overcome.

But even without that I'm hugely skeptical of your "massive effort" claim.
Large Collection of Urd Poems
Large collection of top Urdu poems about variety of topics.
New computer virus hits Middle East - security firm
Note: I own registrar and we are a competitor of godaddy.

That said a few points:

1) As others have pointed out the sheer volume of domain lookups that are done at godaddy make it unlikely this would be profitable for GD to do not to mention the PR problem for that matter. Registrars do pay for domain names. Currently the cost (including ICANN fees) are $8.03 per domain (plus some other minor type costs as well). All registrars pay the same price .com .net, volume doesn't matter. Very often registrars sell below cost btw.

2) "but their employees certainly could be, or they could sell domain query data to a 3rd party to keep their hands clean. Some Godaddy employees certainly have access to the data of who is looking for what."

Is possible of course. So far no proof of that. Important point of course is that even the info (as I pointed out in another comment) when you do a command line whois to the Verisign whois server can be sniffed and/or it's possible someone at Verisign is getting at the data (or that Verisign is selling it for that matter). Since GD is the largest registrar it is quite possible the info is sniffed elsewhere and registered at GD.

3) "algorithm that looks that those domains for dictionary words and possibly look at Google keyword search volume on each one and only buy the ones that pass some minimum criteria" Exactly the way back in the 90's that I registered domain names. Except it was by excite or yahoo I don't remember. I can vouch for that personally although most good names as we know are taken long ago.

4) "or there isn't some low level tech or manager who isn't doing this on their own." Then the culprit isn't GD but someone who works for them (in all fairness). So this could easily happen at any registrar. It is possible to setup a system where a rogue employee can't get at the data of course. But that doesn't prevent what can happen as detailed in #2 above.
Nah dude, this one did happen. Google 'Joan Ginther', it's been written about everywhere.
I think it is allowed if they are engineering some sort of giant pivoting lever.
It's actually 5x salary, which for the typical highly paid google engineer is probably a life insurance policy which costs < $100 per month.
Disney can turn any plant into a multi-touch sensor
One of the many reasons using a password manager and having different, random passwords for each site is a good idea.
No imprecision here. You scorned the users for being consumers of "carefully curated" content. I guess the only way I was imprecise at all was that I didn't cater for you respect of those on "non-carefully curated" content, but given how incendiary the original was, I figured this was just splitting hairs. But you still didn't answer the question as to why not just be open about your position.
This once happened to me about 2 years ago. I got furious and called up godaddy wanting to talk to someone that could give me an answer. They said we don't buy domains but when a domain is looked up on our website sometimes it is publicly available and sometimes other people end up buying them on speculation.

I searched for the domain godaddysucksbigbigballs.com multiple times and it ended up being taken after 10 mins.

I assume that since there was a grace period where people could simply drop a domain and get a refund after a couple days that squaters somehow obtained the information and weree buying domains that people were searching in hoping to profit.
Hollywood movies to the contrary, archeological research is very concerned with avoiding contaminating the subject with crap from the researchers. Imagine if life was found on mars... and we introduced the diseases that killed it.
Why grad school is hard
Also I would love feedback about what part of this is confusing. We are still struggling with how to explain this crisply...
Half salary for 10 years would be 5x salary, nominally. Present value is probably around 4x salary.
Yeah, that is another advantage. I use a combo of commenting things out and storing all the changes in git, so I can easily pull back old stuff if I need to for some reason.

Git and LaTex play nicely together.
Show HN: Amazon.co.uk Live Search (beta)
App.net: A summary of the last few weeks
This is why you never use the actual answer to that question, but actually a separate password for those.
Thanks for the reply. I just spent the last 3-4 days hacking around osgswig, having a good (and simple) binding solution for C++ / python is still an open problem ...
Over the long term wouldn't a company lose money on life insurance policies such as this? If you are buying insurance then you are betting that you are better at actuary analysis than the insurance company. Insurance companies are for-profit entities.

Insurance is useful for protecting against large losses that would impact your solvency, so I don't understand why Wal-Mart would have had these policies in the first place.
There should be some kind of "reverse class-action" clause that enables a defendant to bring in every potential plaintiff into the suit: i.e. if I'm being prosecuted for stealing code by a federal prosecutor, I should be able to bind New York State to the same trial so that all the verdicts are delivered at the same time.
Life insurance is provided as a separate benefit.
You might have to try a larger number of things that would score higher in terms of domain value. If I were front-running, I might concentrate on domains that were likely to have resale value beyond the original purchaser.

Also, given that GoDaddy is being accused of this right now, they'd be smart to stop any front-running for a few weeks.
I imagine eventually they could do away completely with calibration stickers and just use regular surface tracking with any old plywood.
Is anyone familiar with the Secure Remote Password protocol, and how secure it is in comparison to hashing and salting passwords using algorithms like bcrypt and PBKDF2?
Most likely a VARCHAR(16) plaintext field.
This kind of stuff is great, and great is an understatement.

When my Dad passed back in the early '90s from cystic fibrosis, the company he worked for (for about 15 years) continued to pay our family his entire salary for 3 years.

That was what enabled me to be where I am today. It allowed my Mother, who was a stay at home Mom with two wild ass kids, to take the time out to get a solid vocational education and get a job that pays a decent wage.

Anyways. Good on google.
Represent PA: A Map of Pennsylvania’s Startup Community
It's already aware of its surroundings, and can respond to its environment.
Its true that theoretically the value of 3x up front is in the same ballpark - but only if you invested all of it wisely. But in reality my wife would need to use the entire benefit to pay down our mortgage and refi, so those theoretical gains mean little. Meanwhile, she has to somehow get enough income elsewhere to pay what is left of the mortgage, our kids college, etc. Knowing there is some real level of income security for 10 years is way way better.
sentience then
Where do you get the 10x salary number ? The linked article says 50% of salary for 10 years -> 5x yearly salary total.

I wouldn't say that on average my co-workers are "younger" (than whom?). Healthier, maybe.
APIs are key to Quantified Self
How does this affect users with Key Fobs?

http://us.blizzard.com/store/search.xml?q=authenticator
Elite int'l Guild raids Dotcom Mansion instance; Video Footage
Derek over at http://www.biospace.ca/ and http://makerspace.ca is trying to do some of that sort of thing.
Surprisingly a more popular phrase then one might have imagined.

From 2005: http://curmudgeonjoy.blogspot.com/2005/10/instance-of-lingui...
There was a blog post about Spotify by a musician which compared the figures, and IIRC Spotify's royalties were like 100 or 1000 times less, so yes, there's a significant difference.
I ran it a few times as well and most of the benchmarks seemed to be within statistically insignificant margins, except for three which were much faster -- including $('#id'), which has got to be the most common selector (at least it is in my code).

I think it's still worth the upgrade.
You know, you HN guys are super buzzword and design blind. This company slaps "bcrypt", "SSL", and "open source" on a decently designed bootstrap page and the response is "this will totally work!" Sad.

For example, this statement "Credentials are stored as salted hashes using bcrypt," means passwords are being passed to this provider, so you better trust them to not be snooping passwords all the time. Also, bcrypt is questionable http://www.unlimitednovelty.com/2012/03/dont-use-bcrypt.html Finally, it looks like your server is talking to them via SSL through a library https://github.com/hstove/omniauth-dailycred#ssl-error. If that's the case then when you try to do this with some SSL clients they don't validate the cert. Take Python's, where you have to do a backport http://pypi.python.org/pypi/backports.ssl_match_hostname/ to get that enabled.

I found these problems in just scanning through some links off that first page. Seems like this crowd would be able to pull up more, and definitely shouldn't just saying "Oh SSL, well then that whole thing is totally solid."
Freelancing 101: What You Can Learn From Million Dollar Firms
Full service marketing firms can handle everything from hiring actors, writing scripts and shooting videos to designing a website. They also tend to be ridiculously expensive. Several times in my career I’ve had the pleasure of being tasked with hiring a full service marketing firm.
Overview on NavigableSet subtype of Java Collections
New fossil finds show a new human species roamed the Paleolithic
Do these have to be human-confirmable? Wondering why they're stored in plaintext.. I've been curious about this before. Do you-folks store your challenge-question-answers in plaintext?
This is in addition to regular life insurance that Googlers get, not instead of.
1983 I was in College (one year course right out of high school) and we has access via a teletype terminal pool to a ICL 2903 running George. The operator console had a journal file and discs back then were the drum type and rotated to spread the wear and tear. These were not zero erased and you could create a file specifiy the size in buckets of all values how large and zeroing the space was optional. With this knowledge you could basicly go fishing, creating large files and looking to see if it was anything interesting. I was able to get the admin(aka root) password which was 5588. So I did chuckle when I saw the film Hackers and dumping the garbage file on the gibson.

Though I also had great fun with the spv command on george and knowing all the terminal ID's, but thats another story.
London 2012 football
Google Fined Over Safari http://news.psdmate.com/olympics-london-2012-usa-defend-womens-football-gold/
Google Fined Over Safari http://news.psdmate.com/olympics-london-2012-usa-defend-womens-football-gold/
Google Fined Over Safari http://news.psdmate.com/olympics-london-2012-usa-defend-womens-football-gold/
Google Fined Over Safari http://news.psdmate.com/olympics-london-2012-usa-defend-womens-football-gold/
I agree. As long as the password authentication mechanism is in place, unique, random, and complex passwords are the best way to secure yourself. Unless you can memorize each of these unique passwords yourself, the next best thing is to use a secure password manager program to take care of this for you.
Current Caller ID app adds social info, suggests a good time to ring back
Reset your password via your original email...
Microsoft's Bing funds Parse competitor
Following unwittingly, perhaps, the advice "be hated"?
This is all very amusing, but I have the other side of the story. A close relative of mine was the systems administrator for a large high school. The amount of grey hairs that sprouted in the few years they were in the job due to wannabe hero high school hackers is testament to how hard it is to keep a stable system running when you've got scores of hormonal hackers trying to outdo each other.

While this page tells of succesful hacks, it doesn't mention all the screw-ups whereby the payload didn't work but caused major problems with the school computers. Nor does it tell of the systems admin getting chewed out by school management for failing to play whack-a-mole properly.

By far the most common route of hacking was getting a teachers password, which was usually either easily guessed, or worse, written down in a notebook in the drawer.

As for me, I found that in university we had computer-based testing for weekly lab classes. When you submitted your answers, it printed the results and showed you where you were wrong.

We found that if we yanked the power cable on the workstation after the print job was submitted and the printer started, the results didn't commit to the database, you'd get a printout of the answers but your score wasn't saved. So then you'd just take the test again, using your printed answers as a guide.
A JavaScript security flaw
When the dust settles, we all will remember those crazy startup euphoria days and this article would be one of it. Pretty soon we might need to ammend the Dictionary with new words or spelling corrections
We'll ping you back later. Care to share the statute of limitations for the crime in question?
> Linux doesn't provide consumer class support.

OEMs do their Windows support too. Also, there is little space for Linux support for the average Joe because all Joes who install Linux are above average.
What software are you talking about? Why do you assume software makers will ignore a growing Linux market fed by traditional brands in the PC space?
I've called before to recover an account and the tech support guy asked for the answer to my security question.
> Do these have to be human-confirmable? Wondering why they're stored in plaintext.. I've been curious about this before. Do you-folks store your challenge-question-answers in plaintext?

I would hazard a guess that most sites store "Secret Questions/Answers" in plain text, or a two-way hash (that their support app reverses), as they are used to confirm identity along with the basics (DOB, address, email, etc).
isn't it inevitable? Rogue employees, dumb mistakes, passwords will always be stolen: what's important is they're stored securely enough that when (not if) they are stolen they are worthless to the people that now hold the passwords.
In fact, they compress to about a 3% of their size. Since they really only exist in text file form for a limited period of time before being moved on to a separate logging system, their exploded size isn't much of a concern.
I'm confused as to what this is, can someone help explain?

For example, what is a micro-app? How does it differ from just an app?

It says you can: "Engage with your fans and users by creating micro-apps that allow you to interact in a much richer way than tweets, ads, or email." It's lightweight but enables a richer communication experience. How? Do you have some examples?
Possibly. I've been on phone support with companies that require me to tell them answers to my security questions. Also, automatic security question checking would require support for soft matches like capitalization or punctuation. You could simplify the data before hashing (strip special chars and convert to lower case), or store multiple hashes to each variant.

I really wish a lot more work went in to security question penetration testing. It's relatively easy for a determined attacker to come up with the correct answers to these questions (or convince a human that they know the answers). The recent iCloud breach makes me believe that in many cases the "security questions" practice is by far the weakest link in modern web authentication.
How does the JavaScript Timer Work
Search engines are all about what people are looking for on the web. It's quite possible that more people are currently interested in Meteor the framework than meteors the objects, in which case I wouldn't call this result "pollution."

If you really want the Wikipedia page for meteors, nothing's stopping you from going straight there.
In high school, we had laptops provided by the school and imaged by the IT department, who had logged into them. All we had to do was use a tool to recover the Windows password (yeah I know, skiddie, etc.) and we could login as IT admins on any computer on the domain.

Was pretty innocent about the whole thing, changed a few backgrounds remotely, and sent messages and shutdown people's computers in class remotely. Unfortunately I changed a default Windows background image, which meant it showed up something unsavoury for everyone who logged in, and got caught, copped detention and a many, many page letter about how I shouldn't do it.
Why is $750 per book so outrageous? Books on average would make far more than that, so it doesn't seem completely out of the question.
I was a development manager there a few years ago, and they go to extremes to avoid anything that even comes close to looking like this.

This isn't true, at least as of Dec. 2008: http://domainnamewire.com/2008/12/03/standard-tactics-llc-ho... .
Can the micro-apps only run on the human.io app through your UI? If so, is the benefit you guys provide the fact that you aggregate captive audiences of mobile users and allow companies/developers to filter that audience by things like interest/location/phone ability?

Monetization isn't mentioned anywhere for now, but presumably eventually users will earn $ for each task they accomplish, and human.io is the platform that allows companies and individual workers to transact?

Looks cool! Just trying to get a few ideas clarified.

Edit: Would it be accurate to think of you guys as a mobile Mechanical Turk? A marketplace for lightweight, mobile-based tasks?
It's by now abundantly clear someone high up at Microsoft thinks the OEMs need them more than they need their OEMs.

It will be interesting to watch.
This article seems really weak on a number of points. It holds up the Nexus Q as an example that Google is moving into its own hardware manufacture?! And it claims that OEMs are unable to "innovate" - but when you look at actual hardware innovation they have been the only ones innovating in the phone space; Apple has produced about 4 devices with identical form factors in 5 years. Contrast with Samsung and Asus who have produced all kinds of crazy stuff. It's not so much about innovation but quality, focus and finishing that the OEMs are not set up to do.

Personally I think these things are just cyclical: it takes a vertically integrated company to really break through into a new domain, that much is true. But then that new area will always be commoditized and the most open, flexible and widely available platform will "win" in the end - until the next major innovation cycle begins. We need both the yin and yang of this cycle to move things forward.

I do think MS may have unintentionally saved Android on tablets - the mere hint that Microsoft could possibly go its own way and leave the OEMs with nothing to sell will be giving them such nightmares that they will be doubling down on their investments in Android if only to give themselves a lifeline to future viability if the unthinkable happens. Without that I suspect half of them were probably ready to completely jump ship and leave Android behind as a bad experiment.
It's much easier to make jQuery UI modular than it is to make jQuery core modular. You know that you're using autocomplete, tabs, sliders, or dialogs; you can see them on the screen. If you're including jQuery core with several jQuery plugins it won't always be clear which parts of jQuery core you are using, either directly or through those plugins. If you already know your project's dependencies, the grunt build option in 1.8 gives you that flexibility now so there's no need to wait. If you don't know those dependencies, a page of check boxes will just make creating and debugging a working build more frustrating. Closure Compiler Advanced Optimizations promise to automate that process, but we still have a way to go on getting that integrated into jQuery.