skysight-inc/HackerNews huggingface dataset:
I agree. I was using the term "OEM" in the same sense it was used in the article, as a stand-in for "PC company which purchases Windows OEM licenses in high volume," e.g. Acer. These companies generally are branded in a way that an automotive OEM such as GKN is not.
Rather than doing this by hand via Firebug/Chrome Inspect Element, it might be worth looking into creating a quick Chrome Extension or Firefox Add-On (or even a userscript) to do this for you.

I understand the initial rationale behind not allowing you to paste a password:

(1) Pasting a password can allow a malicious user to find your password somewhere and paste it in (as it would take much more time to type by hand).

This doesn't make any sense - as you pointed out, there are programmatic ways to avoid actually being unable to paste. Furthermore, a malicious user going through a password list would likely be using a command line interface or script, and not bothering with a GUI anyway. I'd call this issue completely moot.

(2) You could accidentally paste it somewhere else.

This has a little more value, but it doesn't come anywhere close to being a valid reason to disallow pasting. The security benefits of using a secure password manager (like KeePass or a TrueCrypt volume with a password list) are so much greater than Blizzard (or anyone) worrying about what you're going to do with your paste buffer.

The problem with putting any limitations on passwords that a user can use is that they almost always backfire. Sure, it might have made more sense when hashing algorithms crapped out after several characters, but in today's world those hashing algorithms shouldn't be used anyway.
The point still stands, though. There is way, way too much potential variation to hash that stuff.
Zack Bogue and Matt Ocko launch Big Data-focused venture fund
Everybody here loves bcrypt, but you don't hear about how it has a max input size of 55 bytes >:)

There's no good reason the max should be so low, but you should not hurt your users by silently truncating input or exceeding the entropy limit of a fixed-size scrambling mechanism.
Yubikey works just like Google Authenticator, except it is a little more convenient to type in the code. (you touch a physical button on the dongle, and it types the code for you)

It does not actually save any passwords. It would replace Google Authenticator or an RSA SecurID FOB.
He's already a legend in my book: http://www.guardian.co.uk/film/2012/mar/26/mariana-trench-ja...
USA Store Society
USA Store Society Qualified Orders over $25 Ship Free just for you USA Store Society
And obj-c? Also hard?
Bad judgment takes you to all the interesting places ;-)

Results in an odd resume, sometimes.
I imagined blowing up the bad guys = cheese.
And thus: Linux is neither capable of supplanting Windows' broad base, nor analogous to Android. That being the thrust of my remarks.
I started with the OTF files here:

http://canopus.iacp.dvo.ru/~panov/cm-unicode/

Then I messed around a bunch with the advanced options on the Font Squirrel @font-face generator:

http://www.fontsquirrel.com/fontface/generator

I don't remember the exact settings I used, but it needed a decent amount of tweaking to end up looking acceptable.

The base64 encoding doesn't contribute to anything other than website performance. It saves an additional request in modern browsers. The other linked fonts are for IE/Older browsers.
I definitely DO NOT want that; siloing is the expected behavior for my use case.

Thanks for doing this, BTW. I was JUST working on an MVP and dreading writing the user auth part. I'd even been pricing SSL certs!
If I were to release any of our internal code to be open source, I would do the same. Nobody really needs to know I get lazy on EVERY Friday afternoon and check everything in as WIP.
I think the way it works is the company sets up an offshore subsidiary to provide life insurance to its employees in a low tax jurisdiction. Next, they pay life insurance premiums to the offshore subsidiary, and the offshore subsidiary books the profits on the life insurance policy offshore.

For example, suppose they pay $1,000,000 premiums to the offshore subsidiary, and then pay out $800,000 in claims. The offshore subsidiary has a profit of $200,000, and the on-shore company has an extra $200,000 to write off.
Working link on mobile: http://m.thestar.com/business/companies/walmart/article/1239...
I was a TA for some computer classes at Stanford a little while ago. Part of that meant that we would spend many hours grading exams at the end of the term. Every time I wondered to myself how much student handwriting affected their grades. How could a student write almost entirely illegibly and expect to get a good grade on the exam? Sometimes I couldn't find the correct answer even if it was there on the page.

Other students had very clear handwriting, while others had very crisp and confident handwriting. I'm sure there are numerous subtle cues in handwriting that give it the air of professionalism or confidence.

Handwriting differences could easily account for a few points on an exam, which might translate into a few crucial percentage points.

Soon we'll just have to force everyone to type their answers in a standard format and then the graders can view the results in the editor of their choice.
But then you might want to use it with lets say glossy plain-coloured melamine sheets - most surface trackers have a lot of problems with this, so the calibration stickers are a cheap and reliable solution.

The only issue I can see is kick-back from the router bit, especially if you use larger diameter bits - this can throw the router significantly, and unless the control system compensates quickly yet gently, you may well lose tracking, leading to undefined results.
http://security.stackexchange.com/questions/17949/why-are-pa...

If you are to abide by CWE-521: Weak Password Requirements. Then all passwords must have a min and max password length.

There are two reasons for this. For one, hashing a large amount of data can cause significant resource consumption on behalf of the server and would be an easy target for Denial of Service. Especially if the server is using key stretching such as PBKDF2.

The other concerns is hash length-extension attacks or the prefixing attack against MD5. However If you are using a hash function that isn't broken, such as bcrypt or sha-256 and you aren't using an HMAC, then this shouldn't be a concern.
OAuth at CloudBees, by Steven G. Harris, CloudBees
"As security systems get increasingly difficult to crack, hackers are turning toward a new source of information: people."

Social engineering has almost always been the most productive way to gain access. Jessica McDiarmid does her credibility a disservice by indicating that social engineering is a new development.
Ah, I misread you; apologies. I'm sorry it doesn't work well for you. It's a godsend to me (sensitive to most other deodorants), but I do find that although it works for me, it doesn't last nearly as long. "all day", but just; if I have a long day I always wish I had a spare. The travel size ones are great though; and solid so you don't need to put them in the silly US "quart ziplock".
If Apple's percentage market share was flat in the last 5 years I'd agree with you.
Google-plus Requires Facilitating Independent TLDs Along With Google Adsense
Massive DDoS attack hits Chechen news agency
Xmen?
Please also use a T between date and time parts, per the standard. Making stuff up requires everyone parsing your timestamps to use custom parsing.
"You can go on Vastrm’s site and take a short quiz, entering height, weight, body type and waste size.."

What does that have to do with anything?
As for the 3D factor, given the way the Curiosity can move, can't it just snap one image, move slightly to the side and snap it again for stereo LR?
Why should a cross-platform editor be important? Any job I do these days allows me to work in my preferred system. The code is just ASCII and it can be shared easily.
Perhaps they have more interesting problems to solve than "how do we build our UI in HTML5"?

Getting a shirt that will fit well ranks much higher in most people's priorities than using only HTML-based webapps.
Nice job! Do you have this on github? I'd love to use this code on a similar movie search project.
With enough supplementary shipments, and enough patience, a rover could stroll all over the planet.
But secrets for the mobile authenticator are much less sensitive than passwords, which are prone to reuse. It does, however, defeat the security advantage of two-factor authentication.

(I always thought the really smart crackers would break in, modify the application code to weaken the password encryption, and then re-encrypt every password when the user logs in. Come back a few weeks later and collect a bunch of working passwords, with nobody the wiser.)
How do Zynga employees feel about the company's stock price drop?
Exactly - if it worked, it would be a solid Windows server replacement for storage focused deployments.
Blizzard is _literally_ under _constant_ attack and has an incredible security team in place. Obviously the only acceptable result is 100% attack deflection, but the idea that this could be or could have been anything short of an absolute top priority for the company is a ridiculous assertion that I'd expect on any other site, but not HN.

I'm a former Blizzard employee with knowledge of the situation and internal workings. EDIT: I am, of course, not remotely qualified to speak for Blizzard or the security team.
Rails 3.2.8 has been released. Includes a security fix that impacts all users.
It very much influences the fit of your shirt.
In the Find in Project (in TM1, I've not used 2), just cmd-click to select the found instances you want to replace, and the Replace All button because Replace Selected
25k cells. Even if the brain is fully connected bidirectionally, it has at most 625M connections. Can it be simulated by software?
Review of Tufte course
Can you elaborate on your aluminum complaints? I like Apple's metal-centric industrial design there, and have ever since they introduced the first Titanium PowerBook, but I'd certainly be interested in another perspective there. I haven't seen a plastic machine that seemed anywhere near as solidly built, but I may simply have never been exposed to the right hardware.
Perfectly fitting clothes is a pretty hard problem to solve without human intervention (a tailor). Sites like BlankLabel do a decent job at getting you a dress shirt that will fit you alright, but it's not quite there yet. The shipping times are quite long, and the cost is very high unless you go for the rather disappointing fabrics.

Affordable, rapidly produced and perfectly fitting clothes would be a dream.
I think the bigger point is that a ton of signups use this question. Whether you say 'Mr. Smith' or 'Pecan Pie' isn't going to save you if you use it for all of them.
If Craigslist claimed ownership of the content, wouldn't that make them responsible for the content and open them up to the lawsuits surrounding criminal activities initiated through a Craigslist posting?
So those names were indeed terrible. But how the hell do you name things well? It's really hard.

The second you write some code you have to call it something, and I imagine that's the point where people think up janky cute names, and then it's in the codebase and that's that. I know for me I think up something stupid and then roll with that, presuming that if it ever makes it out of localhost it will be renamed to something sensible.

These people are just pitching, no wonder there names are like AwesomeSaucr and CakeBacon and what-not.
Sometimes, unfortunately it gets the music wrong--I think what may have happened with Hump De Bump is that it takes the MP3 from the official video (http://www.youtube.com/watch?v=KxEZVM84J28) which takes about 40 seconds for the music to start playing.

I'll play around with the code that strips out bad search results and maybe get this to change.

Thanks for the feedback / taking the time. As for the legal complications, I'm genuinely not sure--it's available on YouTube and downloading from YouTube is fairly trivial, but it's not like it's a functionality placed front-and-centre on this site. You'd have to be more tech-savvy to download music via this site than from any of the many YouTube to MP3 services on the web.
I have an idea, let's make the entire site using Flash, it will be super awesome!

cache:vastrm.com = "get adobe flash player"...

Fail.
During one of the press conferences Ravine mentioned they had hundreds of images of a single spot on the ground taken by MARDI, the descent camera, after it had landed and that a member of his team was working on using those to build a super-resolution image of the surface. I like the idea of a competition though.
yeah, because YOU, are controlling every interaction of the trillion-trillion cells in your body
Also I'd like to point out that even on the forums where a lot of noise was made, there were plenty of authors who saw reason and tried to talk others down. http://jeannetomlin.blogspot.com/2012/08/lendink-and-twitter...
I've never done an A/B test on typeface, specifically, but I've made a few over the years on e.g. font sizes. No major results to report. My intuition is that I'm extraordinarily skeptical that this would matter and largely think the only people capable of perceiving strong differences in the character of a typeface are people who do that professionally plus Thomas. I'm prepared to be wrong about that, though, as six years ago I would have told you that colors could not possibly meaningfully impact conversions and that's just catastrophically wrong.
I tried my best to defend this site. I was in the thick of it with many of the authors that frankly were quite simply, technically challenged as to how the site would work.

I was in the accusation threads on Kindleboards ..

You can see a lot of the back and forth there. It was really spiraling out of control. So much so, it was ripe for disruption (it likely still is) as many of the authors were (and are) looking for methods to have essentially DMCA takedown notices on cruise control.

(seriously, there seems to be a big market for this amongst the indie authors that don't have a handle on some of the more technical and copyright issues at hand. ps. if anyone wants to know more or talk through ideas, reach out.)

Anyway, I put forth quite a bit about how the whole Amazon associate world works (in plain terms) and how other sites, that have been around much longer and were MUCH bigger (no offense LendInk) such as lendle.me (which if memory serves had their site name challenged because they got on the amazon radar back in the day).

I dunno.. I was pretty amazed to see how quickly it all unfolded and how others jumped on board without a full understanding of how the site functions worked.

Sorry to hear about the whole situation. I have a site in the same space (but not lending) and its unfortunate to see the door closed on what could be a very good (and profitable) promotional engine for both the site and the book authors.

EDIT : a bit more of the backstory

I can add something valuable from being a part of the thread. A big problem for some of the early authors was that their books were NOT available to be lent (as per author -- I didn't verify).

ASSUMING this was accurate of some of the initial outraged authors and not the "hey get my book down" others that came along in time, I put forth the idea in multiple threads that perhaps the devs of the site got too much data in a sweep via the API.

In other words, they didn't bother to get books that were available to be loaned. And, did just a big sweep across the Amazon API looking for any and all Kindle books.

Somewhat makes sense -- the more books, the more opportunity for affiliate tag clicks. And, it probably errors out (or did) saying this book is not eligible. I believe an author even confirmed this early on.

It was this simple oversight that REALLY added the fuel to the fire.

Hope that gives some additional insight to those that weren't part of the madness.

Enjoy! :)
The fit of my shit, maybe.

Because it doesn't say "waist", see.
I agree. Sublime is targeting cross-platform compatibility. To me that's diluting the virtues of all the systems it works on. It's not the best editor for Mac OS X, it's not the best editor for UNIX. It's not the best editor for Windows.

I prefer stronger opinion with an editor. I don't care if you have an awesome editor that only works on Windows as long as I have an awesome editor that works on my preferred OS.

Awesomeness is what editors should be about. I have to work with it all day long, it better be.
My guess: almost zero impact, long term.
I think a good balance between usability and security is to normalize the answer (discard case, punctuation, etc) and then hash it.
the singularity is near...
Nike lebron south beach sale,lebron 9 galaxy cheap sale,mvp james shoes 2012
NB: This article is from 2008.
So I went to update my password for my World of Warcraft account after I saw this.

And guess what I discovered, my current password is more secure than their current password policy will allow. So I filled out a support ticket with the following question (which all Blizzard account holders should ask them)

I was wondering why even after you discovered a security breach you have not updated your password policy to actually allow secure passwords. Your current password policy only allows password that will take a day or two to brute force crack. see http://xkcd.com/936/

These two rules totally nullify any security of your passwords

"Your password must be between 8–16 characters in length.
Your password may only contain alphabetic characters (A–Z), numeric characters (0–9), and punctuation."

In fact my current password is better since I apparently created it before your policy changed to not allow non alpha-numeric characters.

The only reason to have those two rules is because you are storing the password in plain text so anyone who gets access to the database can read them freely. Please update your password policy to

"Your password must be at least 20 characters long."

That is it, let me make a 400 character password if I want, let me use cyrillic, chinese, or whatever other unicode characters I want to use. If you truly care about security you will fix your broken password policy!
Improve Business Performance? Go for Qualified IT Sales Leads
A company that seeks to improve their business performance would stand to benefit from the use of appointment setting services to support their operations. Learn more here.
Thankyou for the feedback, I'm really sorry about this--I'll go back and check everything. It may be that you were playing songs that are a bit uncommon and it was taking some time to load them, or plain just couldn't find them.

I'll work on the side-bar music queue--you're totally right that clicking the song name and it adding itself to the queue is ridiculous--not at all expected behaviour--more an unforeseen consequence of re-using the same template for all track displays.

Just curious, what was your particular expected behaviour? To jump to that song in the queue and start playing, or to remove the song?

Thanks again for letting me know, I'll triple check this--I was stupid enough to only bother testing Chrome and FireFox on a Mac and just IE9 on Windows. Sorry!!
Justice Department Won't Prosecute Goldman Sachs for Financial Crisis
Inbound bandwidth is free.
Dell Support Hell #DellSucks
This looks like it could be really useful, although the pricing is a lot worse than my current "buy 20x Lands End polos when they go on sale" strategy.

For dress shirts/buttondown or suits/pants, I haven't found any of the online vendors to be as good as W W Chan in HK or Shanghai.
For future politicians - Is living life online good or bad?
Security has nothing to do with preventing the attack, it's more so protecting the data much like a bank protects it's assets. It's pretty easy to break into a bank (they're merely glass and brick after all), but there is no way you're getting into that vault once inside and even so, if you get into the vault there are secondary security procedures in place to ensure that nothing is easily taken.

So regardless of whether or not Blizzard is under constant attack, just because someone can get in doesn't mean they should be able to take anything.. I really do hope Blizzard don't go into the banking industry because everyone will be lining up to steal what they can from the easily penetrable building and vault inside. There is no excuse.

If Blizzard is under constant attack, you'd think they'd be smarter about how data is stored and just what an attacker could see if they gained access to a database of any kind. So once again, my point was not about deflecting attacks because that's impossible, it's about making it almost impossible for the hacker to use any of the information he can access.
Open Source Legal Documents
Don't forget the civil option!
I'll need to give Chocolat a look. Also, seeking not so much a replacement for Textmate as a product with a promising future. (I don't think this would be news if Textmate were going in a productive direction.)
I remember watching Shark Tank a while ago and one of the pitches was perfect fitting jeans. The idea seems quite similar (but for jeans). The investors didn't really think it was viable due to the turn-around time (if I remember correctly).

Edit: It was actually Dragons Den (Season 2 Ep 6 I think)
Vim does have snippets, the plugin is called snip-mate. Why do you suppose that is? ;)
Warn HN: µTorrent unsafe, crafted URL allows remote execution
Tried resetting my password. Blizzard limits it to 16 characters. Why?!
David Gelernter: The Friendly, Neighborhood Internet School
I'm running Chrome on Win7 and I'm seeing approx 80-90% faster for the id test, but no real difference in any other test.
Ask HN: Software for managing a "Lean Startup"
I'm considering taking some software I've started building to manage my own "lean startup" and turning it into a startup of its own. I'm trying to find out what software or other tools exist for helping people manage their own lean startup and/or perform customer development.

Also, if you are willing to take a few minutes, I've got a quick survey asking a few questions around this topic: http://www.surveymonkey.com/s/F7W9P5P
Jeff @ MakeGood; I pitched yesterday at StartupRiot.

For what it's worth, 'makegoods' are old ad-industry jargon for extra ads which have to be run to literally 'make good' on what you've sold to an advertiser... plus a half-way decent play on words. Our target clients instantly get what we do, and want a t-shirt = mission accomplished.

The article has exceptional wordcraft, that's true. However, of all the potential angles or stories he could have written, he simply phoned in this bashing of the attendees for wearing khakis and using "TPS Report" industry jargon. If he'd actually bothered to talk to any of these companies he could have written so much more.

I'm going to dust off my khakis and get back to coding up our solution for our clients who love us now.

PS: i hadn't looked at the author's bio until I saw the comment of someone who did and called the author a "hipster twat." Thanks for that, our office was rolling.
The only problem is that in 5 years you'd have no idea what you answered there. And that's exactly when you'd need it.
Clickable link for the survey: http://www.surveymonkey.com/s/F7W9P5P
Search Engines Log the Fearsome Journeys of War Families
YouTube simplifies video editing interface, adds new real-time previews
Well, depending on preference and opinion, a Linux desktop can arguably be better than OSX for development. I applaud that they have a Linux version.