skysight-inc/HackerNews huggingface dataset:
This is Bilal from Science Exchange, and we greatly appreciate your support for our initiative!

We will provide the methodology of the original study to those reproducing the results, while the results we believe will be helpful to check against.

For conflicts, it's true we can't force an investigator to publish or note the lack of reproduced outcomes. We do hope they will through the PLOS Collection, for transparency. We do feel though it can provide a valuable check for 'failing fast', for those investigators who want robust results.

In this initial stage, we also agree that funding will be difficult. That's why we hope to focus on small biotechs and research labs that are interested in commercializing their research, and need to show robustness of results for licensing opportunities.

Hopefully then, it can serve as a proof-of-principle for funding agencies to provide a requirement or increase support for reproducibility.
This is really helpful, thanks.
There is one aspect there that may or may not be important

I don't know if the "Program files" path (or the full path) is added to the hash calculation, but at least in Windows XP this is localized

Or who knows, the secret is that it only works in systems where Program files is in D:/
Hey, it's a pithy one-liner (two-worder) -- and like any such chestnut is going to be wrong a lot of the time.

Even so, learning from someone else's mistakes is "cheaper" than making mistakes yourself. The further you can get by avoiding mistakes others have made so you can get to your own personal mistakes, the better.

I'd say "err vicariously" gets better the more you think about it, rather than needing to be nitpicked.
Building apps for Facebook: A dance with the devil
Perhaps it's time to consider another host? I've been happy with Dreamhost as a bargain-priced hosting provider.
If it sounds like "pot", doesn't matter if he really said "pie"; chances are many kids are going to hear "pot" too unfortunately.
I get that but maybe put those keywords as examples of things you do. I'd imagine you want to take any design work possible so at least make sure you have an easy process to make inquiries. Also your pages are basically the same which just strikes me as kind of weird.
> Help me HN. Has anyone else had experiences like this with 1and1? What did they do to get things resolved?

I use 1&1, and I ran into the same situation a couple months ago: I was terminating one of my contracts, and they asked for my password over the phone to verify. To be clear: I was not closing my account, I was only terminating a single contract.

The way I "resolved" the matter was quite simple: as I am not stubborn, I just gave them my password. The person sitting on the other end of the phone call already certainly has godlike access to my account anyway, I am not stupid enough to use the same password for multiple accounts, and barring insanely epic hacks I know they are a real representative as I called them at their phone number; so, there is really very little to lose handing over my password to the customer support person.

In the end, rather than getting morally outraged and posting an article asking a question to an online community in the hope of unblocking your ability to conduct what is fairly simple business, you should just change your password when you are done with the call and move on with your life. It will save yourself a bunch of time and frustration.

Then, afterwards, if you don't like the way 1&1 operates (maybe you believe that this is indicative of a more underlying set of security mistakes, or maybe you simply don't agree with the practice and don't want to support it), you might then consider moving your accounts to a different provider: there are tons of people you can use to host servers, domains, or whatever else you may be using 1&1 for. However, it shouldn't block your ability to make things happen right now.
Bilal from Science Exchange here. Definitely agree that Plasmyd is a valuable service. We feel this Initiative operates in complement, providing a mechanism for independent validation.
VAT is a tricky area with a lot of special rules - this is why most recurring billing providers don't take it on.

After hearing additional requirements from dmarinoc and a few other merchants located in Spain, we have since implemented a solution for merchants using VAT.

Diego - I'll follow up with you directly about the changes :)

Rachel - Recurly Support
I ported this to the newly announced Khan Academy CS sandbox :)

http://www.khanacademy.org/cs/lorenz-attractor/966338554
Sure. All files stored on disk. Meta data stored in memory using prevalence. I used JSP and custom tag libraries.
JRE & JDK now available to OS X developers
US Court: Pinging a Phone to Determine Location Isn't a 4th Amendment “Search”
I've avoided using 1and1, but I recently made the switch from GoDaddy to Hover.com for my domains and it was like an amazing breath of fresh air followed by a clear mountain spring water chaser.

Seriously. There are way better providers out there.
1and1 is a hosting company for the uneducated masses. Those do not care about telling some 1and1 employee their passwords because they think it is safe to do so.
1and1 is a great hosting company for someone who just needs a website. Nothing more. No Dns handling, passwords over the phone. Great advice has already been given: Leave them and make sure your account is terminated. And I mean really terminated.
The site is still down for me, but I'm looking forward to checking it out. Thanks for sharing!
Show HN: My 2 Day Project
My Other Projects
http://whatnextplus.com
http://testmetrics.in/
Ember.js Data Adapter for elasticsearch
Give Badger a try... we salt and hash passwords. http://badger.com/
Bilal from Science Exchange here. The validations are blind in the sense that we match an investigator who has submitted a study to a provider who can validate it. The investigator doesn't have a choice of who validates their study though.

The fee-for-service actually helps to guard against biased results in two ways. Firstly, providers who validate studies are paid on completion, regardless of a reproducible or irreproducible outcome. Secondly, operating on a fee-for-service basis allows providers to operate outside academic incentives for publications, ensuring no incentive for biased-positive results.
Uber Boston Has Been Served
That sounds good. Building apps to boost your resumé is never a bad thing.
I asked the rep if I could give any other form of identification, guess what - your email address on the 1and1 account would do. I tried sending them the html file from the same email as the one on my 1and1 account and they did what I requested. This boils down to - they really don't need your password.
Definitely pie. On Tau Day the Khan Academy office was graced with a wonderful tau (two pie).
PSA: Don't feed the troll.
What you're working on sounds like it will make hosting much easier. Keep up the great work!
Why is his mother referred to as "Ms Assange"?
Pretty much every CS paper I've read that was full of equations could have easily done without them. There certainly are sub-fields of CS where complex equations in papers are justified, but far too often it is laziness, and hides assumptions or imprecise descriptions that makes implementing the described methods harder.

Mostly, when I come across complex equations in CS papers, I tend to skip over them and only go back to look at them if there are parts of the paper I can't make sense of without them - it is very rare to find that they are necessary at all.

The cases where I find I need them are usually a sign of trouble - it tends to mean there'll be a lot of guesswork to figure out parameters and parts of the algorithms that are not spelled out in the paper at all. But usually the same ideas will be expressed in English, code or pseudo-code in much simpler ways.

My research for my MSc involved a bunch of papers on error correction in OCR, including a ton of image processing and statistical analysis, and not one of the 50+ papers I reviewed actually depended on the equations present in them for understanding the ideas, but I quickly learned to appreciate the ones that were light of equations for the seemingly substantially higher odds that the algorithm descriptions would be pretty much complete and precise.
This is really cool. I wanted something like this a while back, and began looking into implementing it for nginx. But one of the services used websockets, so I ended up building a node.js app that combined everyauth (oauth for about 50 different web services) with node-http-proxy. We released it as Doorman:

https://github.com/movableink/doorman

The one problem that I've had with it is many oauth providers only allow you to specify one allowed redirect URL per app. So it makes it difficult to run a single doorman instance for multiple services.
I think it depends on the person. I'm self taught but I know the rudiments of compiler design and significantly more mathematics than is covered by a standard comp sci course which tend not to get into topology, analysis, or set theory.
Interested by non-code projects. Got some examples? Right now I can only think of the German law and that Wired article about Github.
This. I appreciate the goal of the program most certainly, but I'm having a little trouble seeing a road map from the current spot to something like the theory of computation or complexity theory. It'd be cool if once the KA people have sort of a direction or loose map of how this is going to work that they could blog about it again.

It's cool, regardless, I'm just personally a bit of stickler for calling things Computer Science. I think the term is overused to the point of losing its original meaning.
I am preparing for GRE exam this year, i found the softwares i was using were too clumsy , This may not be best in initial version.
Google Panda and Penguin: What are they and How to recover from them?
How 0xdata wants to help everyone become data scientists
Beautiful documents with Markdown, LaTeX and little printers
Interesting read: http://www.pbs.org/wgbh/nova/physics/absolute-hot.html
Scout - Compass and Sass without all the hassle
Is it entirely coincidental that within an hour of posting this, I finally get a dribble of new posts in Bloglovin? I wonder!
Ahh, that's awesome and I haven't seen it before.

I'll add that in later when I fix my omission of git add -p.
Thanks for sharing. Review19 looks interesting and the site design is fantastic. Keep up the great work!
Show HN: Melt - the coupons you want, when and where you need them
The problem is not when programmer (A) writes the code and the comments correctly.

Nor when jackass(B) updates the code and not the comments, making them misleadingly worse than no comments at all.

But when the code now has to be maintained by programmer (C). This means you.
MetaLab's Andrew Wilkinson: "I'm a porn profiteer"
JavaFX 2.2 available New: Canvas, H.264 and touch gestures
Microsoft reveals Windows RT OEMs, device specs, battery life
Probably like many others, I learned to program first by developing web applications. The mass of information and multiple moving pieces frustrated me almost to the point of quitting. There are probably many people who did quit when introduced to programming this way.

This CS learning platform brings programming education back to its simple roots, back when your first program was as simple as drawing a circle in BASIC. It also leaps it forward, borrowing ideas from Bret Victors responsiveness talk was brilliant and I hope sets a precedent for programming education moving forward.

I really admire what you've done, Mr. Resig and the Khan Academy team!
It's great to see a service like ReKognition offering a Face Recognition API in the wake of Face.com closure. Keep on doing what you're doing!
That sounds really awesome. Now to find the cheapest hardware to get me on there.
I was gonna say the only reason I can think of to not load the software before it takes off is because it isn't finished yet. I'd imagine memory is pretty small/inexpensive even if it has to be specially fitted to get blasted across the solar system and work next to a nuclear power plant.
Oversharing Prompts Shutdown of Dell Daughter's Twitter Account
Yes, but SSL connections are fine once they get going -- the nasty part is how many round-trips are needed to complete the handshake. Any latency between the client and the server is going to be multiplied several times over as they do the initial ritual of verifying public keys and establishing a session key.

The trick here is to cut down on the latency of establishing the session.
Yes, but it's not possible to run Dr. Scheme in the browser. So there would still have to be a fair amount (ie almost all) of reinvention.
As the article says, the intermediate traffic happens over long-lived HTTPS connections.
Nice! I'm looking forward to see WODAcademy launch.
> you must trace the entire system

No, just the part you care about. You do need a high level mental model of the system. I've never seen a system where this is not the case, regardless of the number of comments. Even literate programming -- or at least, the examples of it that I've seen -- suffered from this. (Amusingly, I found literate programming examples were often easier to understand by mostly ignoring the prose and looking at the code.)
If you host the domain there, shouldn't you already have access to put the file in the right place on your own (i.e. without help from CS/TS)?
You say "we" as if you were speaking for all artists, but you do not speak for me.

In my view, the current model of selling a copy of a work to a customer as if it were a scarce good was dubious in the past and is downright unsupportable now. It simply doesn't map very well onto the underlying reality of effortless, unlimited digital copies.

What makes more sense is a patronage model - that is, have the customers fund the production of the work, rather than buy copies of it. (Think something along the lines of Kickstarter.) Once the work is produced, it is free for all to use at no further charge. (Though of course premium products could still be made - for example, signed, numbered, or customized editions.) This has a number of advantages: it eliminates the whole mess of DRM and copyright, it democratizes the process of allocating funding for artistic works, and it diffuses the risk of producing a large work among a potentially large number of people.

There are, of course, downsides to this model. It will generally be necessary to produce some initial portfolio of work unpaid so that the customers can trust that you'll be able to deliver. (Though really, an analogous situation exists in the current model.) And there are legal questions to iron out over what happens when a work doesn't get completed.

Still, I think that over the long term this will prove to be the right approach. It suits the reality of the products that artists are selling, and it is fair to everyone involved. It also makes it possible to cut out a whole gaggle of intermediaries and bureaucracy that stand between the artist or artists producing a work and the public. Not to mention eliminating the conflicts of interest that can make an artist the enemy of their own fans.

edit: Heh, you keep editing your comment, and I see that you too have noticed that artists have patrons now rather than customers in the traditional sense. The difference is that I see it as an opportunity and a good thing, and you see it as exploitive. And indeed, it certainly can be exploitive if one doesn't use a business model that suits this reality.
As far as I can tell the adjustable height desk mechanisms are several times more expensive than a decent drafting chair. With a desk that moves I'd also be worried about cords being pulled out and similar issues (my desk especially underneath is a maze of wiring).
I completely understand your point, but I'd like to see things change rather than just abiding by this ridiculously bad practice. As you say, the rep obviously has full access without this so the whole act is pointless.

Even if not for me alone, I'd like to see this resolve as it's just bad form. A company culture that allows this cannot be good for the security of all domains held with 1and1.

I may well move away anyway, as you say, as I'm just so disappointed, but I'd like to see change anyway.
What were you doing one year ago today?
Very nice! I think this could help out lots of different offices.
It's kinda like http://www.openfusion.com.au/labs/mod_auth_tkt/ but with more google sauce.
But after skimming over the tutorial my impression is that the concepts are so simple there's even less excuse for that horrible syntax.

Uncomfortable syntax can be excusable if you have a clear rationale for it, but I can't for the life of me see why this syntax would need to be this awkward.
I probably will do, I just want to make sure that people know about this bad practice, and hopefully encourage 1and1 to sort this out.
Restitution Mode: 3 tips to improve your life while you sleep
You're right about some of the warts of javascript. John specifically discusses these in a different blog post. http://ejohn.org/blog/javascript-as-a-first-language/

Some of these warts are surprisingly easy to work around: for instance, they always use "===" and don't even tell the student about "==" until much later.

In other cases I just think you're wrong. For instance, I think that the prototype system is simpler and easier to understand than classical objects, while at the same time being more powerful.
Why Klout's CEO Fixed His Company's Online-Reputation System
That doesn't (technologically) stop you from asking for a password to verify, though.
Where Do Sentences Come From?
What's wrong with Google Fiber?
"I absolutely applaud the effort, and I sincerely wish you success."

I wish all trolls applauded effort and wished people success.

I may not be expressing it well, but I honestly think calling this "Computer Science" is absurd. Feel free to call people who disagree with you a troll any time it's more convenient than actually having a conversation with them.

I wish we could discuss the wild success of One Laptop Per Child, which tried a similar approach. But we can't. And I personally believe it's because of this "tinker-toy hand's on" approach that One Laptop Per Child has failed so spectacularly. I fear that this approach will shove Khan Academy's "Computer Science" section into a similar footnote of history.

I also think all of this is too important to do wrong, so it pisses me off to see a group so prominent make such a misstep.
Uber runs afoul of Massachusetts regulators
orz: the person maintaining this code

:)
Facebook Phone: What to expect, and why
If you can get your transfer codes from them without having to give your password over the phone then start transferring now. You lose none of your registration period and you can find other registrars that don't suck. Even if you find a way to get what you want done with 1&1 you probably don't want to be doing business with a company that can't follow the most basic of security best practices.
Wow, this is actually really clever. Kudos to the engineer who thought of this.
Perhaps I'm misunderstanding the nature of this complaint, but it sounds like this guy is dealing with a service at which:

* Tier 1 customer service people do not have plaintext access to customer passwords, and

* Tier 1 customer service people do not have the ability to manipulate customer accounts without their passwords (and thus consent).

On the scale of security/customer-service interactions at service providers, this sounds like MONUMENTAL EPIC WIN. What exactly am I missing here?

And,

How on earth could you possibly input a password into some random text field in an application that you would not provide to the CEO of the company hosting that text field?
while I agree 1&1 shouldn't ask for passwords... why not just temporarily change your password to something stupid, call support, and then change your password again?
Hustleboards - Disposable Forums
MemSQL Architecture: The Fast(MVCC, InMem, LockFree, CodeGen) and Familiar
There are so many correct spellings in this question that I don't know where to start.
Britian will have no direct contact with Iran.

Iran says, "Whatever"
Braintree sucks, perfect match!
Although I like Javascript and its tools have improved dramatically in the last few years, a number of cases (like [] + {} vs. {} + []) are decisively non-ideal for teaching people who are not somewhat versed in programming languages. It's this kind of thing which gave Javascript a reputation as a kind of client side PHP.

I would be very happy if these kinds of irrationalities could be ironed out in a future version of the language, even if it meant backward incompatibility.

If the language is thoroughly rationalized and there is a simple, beautiful API for graphics then I think it becomes the beginner's language to end all (since client-side web is such a nice platform to target). But for now, it isn't there... I'd be happy to hear that it was a priority.

Perhaps something like Dart will pick up that quest.
I use http://www.filesovermiles.com/ for this.
"Err vicariously"

Loved that. Subtle, yet deep!
This post shows off how engineers aren't the best at showing off their work. I think if the author abstracted this post and didn't dive so far into the technical aspects of the problem, it could appeal to a much wider audience.

For example, the discussion of nginx could be abstracted into a discussion of graph theory, where a handshake has to occur with a secure cluster of nodes.

This is all just IMHO. Great post though!
I also really enjoyed the interactive numbers - I thought that it'd be overkill and not at all useful, but you're really more likely to try things out if it's dead simple.
We could probably resolve this aspect of the argument by teaching novices that a perfect/great/accurate/otherwise-superlative name(s) is better than almost any comment.
A use case that might make more sense (though would still require trust) could be things like posting messages to Twitter, Blogs, etc. about your death.

Once it earns some trust, it could offer to sell your startup/website/app to someone that would do a good job of maintaining it (or release it as open source).
Love to know when I'm already ahead of the curve: http://www.lanceramoth.com/blog/2011/09/how-to-successfully-...
I'm not convinced that the Tier 1 customer support reps do lack access without the password. It just seems to me like a misguided attempt at verifying identity.

As for your second point, all that is based on trust in the company that they're not storing in plain text and opening it to the CEO...which I hope is the case for most companies. I was more trying to give a sense that I'm really not happy giving my password to any person. When it's a web form, you just have to have trust or the whole idea of passwords is broken.
What To Do When Someone Tries To Poach Your Best Engineers
Effective use of macros or inlining could solve that problem.
What registrars are good who support *.uk domains? I've had good experiences with Gandi previously.
Yeah, there's a strange sense of danger in north america, my father used to play in bomb craters out front of his families' apartment.

Sucks to grow up in a town that makes ball bearings.
Hm, guess that means I don't understand the article I linked to.
I disagree. From my experience as long as the keyboard is at a height so that your wrists are relatively neutral and the monitors are at a height where your neck is relatively neutral, I've had no issues with back soreness.

I haven't experienced this need to be exactly right with measurements myself.
In case you missed it, the subtext of my comment is that neither of those bulleted items are true for most service providers. At most large service providers, you can count on tier 1 CSA's having direct plaintext access to your password and those CSA's being a mouse click away from taking any action on your account you can conceive of.

Your first point is just innuendo, right?
Askscience is heavily moderated.