skysight-inc/HackerNews huggingface dataset:
Hi there

I have to interject here - not to blow my own trumpet, but as a 'point of fact'. (Oops... once you start correcting misinformation on the internet, you are going to be busy for a long time.)

I wrote about this in 1998, when I released source code that did this on the bugtraq mailing list - http://gray-world.net/papers/dnstunnel.txt has a copy of my mail.

Before that there was a long standing existing technique to tunnel data through UDP packets that simply pretended to be destined for the DNS port (53). That stopped working if the network admin filtered outbound UDP and forced people to use their local DNS server instead. My method still works in that scenario though.

(If anyone knows of an earlier reference to the method I posted about, please let me know.. for all I know it was a well-known tactic in the underworld before I posted to bugtraq.)

From Julian's post, it's not possible to see which of the two methods his code used, since the rb file seems to have disappeared. I suspect it was "my" method.

I do like the ppp interface through - mine just tunneled bash commands + responses.

Oskar
I'll use myself as a proof by counterexample. When I was buying my t-shirts from places I actually wanted to support, like ThinkGeek, or buying solid colored t-shirts with no logos, I found that the poor fit of the t-shirts was making me look bad and feel uncomfortable.

Eventually I was talked into going "shopping" by a couple of female friends (actually, I talked them into being my guide), and found that the only t-shirts I could find that made me look and feel good, with a wide range of prices, also happened to have well-designed corporate logos on them.

So, until it becomes technically possible and socially acceptable to have custom-tailored t-shirts that fit perfectly, have the right fabric, pattern, and seam/collar/hem, and are emblazoned with my family crest or personal corporate logo, I will continue to buy whatever looks and fits the best within my price range.
The answer is: these days you wouldn't need a study. All you'd need to do is cause a PR ruckus and it would change.

The issue with ethics in this experiment is not "the researchers might be creepy people", it's that it violates the basic idea that human experimentation on non-consenting people shouldn't cause harm (which includes negative emotions like fear, embarassment, etc). Sometimes such experimentation does get past ethics committees, but it generally has much more stringent reporting requirements and control, plus it usually has to answer a useful question and not something trivial. If kids are getting locked in fridges, this is not something that particularly needs an empirical study, just change the fridge doors.
"You entered too many characters too quickly."
Comparison and Analysis of Managed DNS Providers
Dropbox Pro with the Packrat addon claims to store all version indefinitely.

That said, we still keep multiple backups.
Sorry to be a noob, but how does one get that glowing button effect as seen on http://rc.getbootstrap.com/index.html ?
They could provide salted hash verification: send some salt, get a list of files with SHA1(salt | filedata) via email some hours later (so they can do the verification as a low priority job).

The salt is used to prevent amazon from just keeping the hashes around to report that all is well.

To avoid abuse, restrict the number of free verification requests per month.
great CDN for all the stuff that you want that isn't on google or other CDN's.
Federating that power of censorship, e.g. by weighting down-votes by karma (for HN), could help the community scale. Then one just needs to keep an eye on the most powerful censors and ensure they (a) aren't abusing their privilege, and, (b) are effectively policing along the right metrics.
You can build it on top of Glacier.
Sorry, what I meant by "stable" there is countries that have been relatively stable for a few hundred years and seem reasonably likely to continue that integrity for at least a century or so.

Of course, predicting future stability is complete guesswork!
I'm unable to access the article but I'm very surprised by many of the comments in this thread. A large number of articles are posted each month belittling (at the very least questioning the value) of non-technical founders. These and similar posts are then filled with sermons advocating individuals learn to code.

Apparently, OP took these statements to heart, put in the effort/time, and what does he get as a result? Derision. What is this community about if it isn't about personal and financial growth coupled with creation?

Perhaps in his post, OP makes some grandiose claim about being a master programmer, okay fine, cut him down. But I suspect it is far less egotistical and merely his way of celebrating a small victory brought about by what is so often advocated: That learning to code really is a way to improve your life.
It doesn't matter whether he notices it or not, you can't count on social factors when it comes to backup systems. He might notice it but then he thinks, oh no problem, it's all in Dropbox anyway, I'll talk to Dylan16807 when he gets back.

I've never had any complete data losses until now, but I've had this situation where the Dropbox cache was the only place to retrieve files twice and it showed me that it can't be trusted this way. I'm certainly not gonna wait until the real deal happens just to have a personal story on how Dropbox can go horribly wrong. I've been shown the possibility and that's enough for me.

As for specifics, the case I mentioned is the one I saw where it can go wrong. IMO the only really save way to use Dropbox without additional backups is if you never share folders and only ever use one system with write-access at the same time - which is not the usual use-case of that product.
Agreed. Although one option would be to require all two year old children to escape a refrigerator or die trying, in order to evolve out of this problem.
Not soundproof, but certainly sound-dampening. Quality speakers have an airhole to allow movement of air in and out of the box, for example.
Assuming the conclusion is true, this has interesting implications for our highly connected political media environment, which suffers from similar positive feedback loops with a preference shown to cheaply produced vitriol over informed debate.

I'm not suggesting we censor, in fact I take this articulation as a reason to be sceptical of the author's conclusion, but any policy for managing a medium-sized discussion-oriented community should be at least in part scalable to the national stage.
4bit - Terminal Color Scheme Designer
That looks like they're using unsalted SHA-256 as a password derivation function? And they reimplemented every cryptographic primitive themselves?

I'll pass.
Hi J_col sorry to reach you like this (you did not put an email). Remember http://DidThis.com discussion on HN back in February: Fyi we build the website I hope you'll like it (still rough). my contacts denis @quantter com. Cheers! (just want to prove some real karma here: you asked, we did :)
Hi all. I think I did something cool and I want to share it with you. Who loves Linux knows, that customizing things sometimes takes too much time. Customizing terminal color schemes is one of these things. I present you the 4bit - Terminal Color Scheme Designer, which allows you to create your own theme and generate .Xresources / .Xdefaults config in just few minutes:). Thanks for voting, digging, tweeting, liking or whatever - I really appreciate it! Enjoy. :)
You've just suggested solving the problem of positive feedback loops by adding a massive positive feedback loop in the moderation system. That's not going to work.
Python, Django, Ruby, Rails, Node.js, jQuery all have multi-version docs online. I'm sure there are plenty more examples. Yes, I do feel entitled to having support for outdated but still relevant software. This is standard.

The latest version of bootstrap only just got released. I think a majority of users will still find the old docs relevant, even weeks later.

Yes, I realise I can still download the docs. But it's more convenient for some people to have it hosted online.
You ignore the effect of feedback loops. You are also making the fallacy of reification (market doesn't want anything).

They key part to this lesson is that valuations are essentially arbitrary (not about market manipulation - although market dynamics are an interesting subject). Take no stock in them (pun intended) - just like you should ignore the predictions of pundits.

The following examples exemplify the meaninglessness of valuations:

If I had a kid, he/she would be worth more to me than anything else in this world. But as much as I'd adore him/her - he/she ain't worth jack to anyone else. If I'm dying of dehydration - the next cup of water is worth most of my future earnings. If I just had a glass - it's worth next to nothing. Dying because a fire is burning and you're running out of air? Oxygen tank would be pretty handy right about now. Got enough oxygen? Pfft don't need your tank.

Valuations are and will continue to be meaningless.

> try to bring the situation from the market's desire

I doubt it - you need regulatory agents to rein it in (security). Also - you are making the fallacy of reification right here.

Otherwise - it's a free for all.

Audiences love that stuff.

PS: Shorting a billion in Apple would seriously depress its price as feedback pulls in (stop losses and latent short orders) - and if you hook it up to another one - like say a debt crisis - well now you have some fun on your hands.

Also your name reminds me of that dancing monkey problem I must write about some day.
I m in favor of things like browserid, provide a centralized point of failure. It's futile to assume that because people can have different passwords they will have them. Most people use 1-3 passwords, and it sucks whenever you have to learn a new one.
This is essentially the luxury of a successful company. I think they take time off because they are successful. They are not successful because they take time off.
A 10x reduction from Java->Clojure is IMHO suspicious. A ~2-3x reduction I would (just about) believe.

It's possible that some of the improvement came from having solved the same problem for the third time.
Replace "discomfort" with "trauma", especially once they find out that their parents heard them crying but decided not to come.
Literary Oppression
Decent article, but I have something a little off ... it's an honest question though:

What compels people to use words like "grok"? Is comprehend, digest, understand, follow, etc. so insufficient that it necessitates an ugly sounding word meaning emotional absorption to be misappropriated as mental absorption? There's no good tense rules established and it's not widely known outside the domain of nerdom. So I ask, to what ends?
I've always liked this visualisation too!

I like to think of fmap as a converting a normal function into a function that operates "through" a functor. This is clearer looking at the Haskell type signature, which can be written as:

fmap :: (a -> b) -> (f a -> f b)
Americans own less cars per captia than western europeans
Anonymous hits UK government websites in Assange protest
I would rate that level of coder as a 'good' coder. I would rate 'decent' as 'the level at which I don't wince when I hear who has been assigned to the project'.
Apple fails to become the most valuable company
bcrypting your md5 hashes is much better than having the md5 hashes around for various reasons. The major reason is that there are many md5 rainbow tables, and if your md5 hashes ever leak out, a huge number of your passwords will be known almost immediately. bcrypt+md5 rainbow tables are much less common.

If you can, also add a user-specific salt (username is the obvious choice).

In theory cracking bcrypt+md5 is easier than plain bcrypt, because users could have passwords with greater than 128 bits of entropy. However, the vast majority of users won't, and generating a 128-bit rainbow table isn't practical.
This is a great idea, with a compelling story behind it. I'm wondering what the thinking is behind making it a funded startup. Wouldn't the pressure of returning investors' money in a limited timeframe make it hard to focus on solving the actual problem? Wouldn't this work better as just a community website?
Howto migrate Riak from 0.14.2 to 1.2
Romney-Ryan Say Obama Raided Medicare: But Are They Truthful?
He does not mention that topic at all in the blog post.
What Does Groupon's Collapse Mean for Tech Stocks? How About: Nothing
will give this a shot for sure!
The article talks about brute forcing hashes. This is why a good login system will rehash the password multiple times to exponentially increase the length of time it would take to brute force the passwords.

Accounts could still be cherry picked but it would stop blanket brute forces. This is why BCrypt is good.
Hunt is on for gravity waves in space-time
CSS Box Shadows: http://css-tricks.com/snippets/css/css-box-shadow/
Linkedin sends thousands of invites out in error
You should try to extract the ones from iOS 5. They're hardcoded in Twitter.framework (simulator versions as well) and can be extracted with the simple "strings" tool. I'm not going to post them here though.
There's a difference between bandying around ideas and simple facts. 'Population of Greece' is a simple fact. 'Ramifications of overpopulation of Greece' is an idea. Making a conversation out of trying to guess at simple facts is like making small talk, in my opinion. Sure, it can grease the wheels if you don't know someone well, but among friends, it's a waste of time.
http://news.ycombinator.com/item?id=2828516
I've been using IRC to talk to people who built some of the tools my company uses in our technology stack. This has been an amazing opportunity and a learning experience. You also learn a lot when you hang around and help more novice users with their questions.

I'd say if you don't start talking OT in a IRC channel dedicated to a piece of software/tech, it has a direct positive influence on your skills, which in turn directly influences your job seeking chances. Also, you can meet prospective employers that way.
You have a pretty niche (but interesting!) use case. An LTO-5 Tape can store 1.5 Terabytes Raw [1] - Call it 2 Terabytes with a bit of compression (your Video probably doesn't losslessly compress at 2:1). 60 Terabytes requires 30 Tapes - around $15/month to store at Iron Mountain. [2] . The Glacier Charge for 60 Terabytes is $600/month vs $15/month for Tape Storage.

Also - upload/recovery times are problematic when you are talking 10s of terabytes. Right now, the equation is in favor of archiving tapes at that level (Even presuming you store multiple copies for redundancy/safety).

Glacier is for the people wanting to archive in the sub-ten terabyte range - they can avoid the hassle/cost of purchasing tape drives, tapes, software - and just have their online archive.

The needle will move - in 10 years Glacier might make sense for people wanting to store sub 100 Terabytes, and tapes will be for the multi-petabyte people.

[1] http://en.wikipedia.org/wiki/Linear_Tape-Open

[2] http://www.ironmountain.com/Solutions/~/media/9F17511FA1A741...
Perversion of Intent
What are the differences, advantages or disadvantages compared to livereload (guard-livereload)? I don't have a full grip on how that works to compare. It's certainly a much better way to work, f5-less
I agree - software/web development is relentless in its changing and evolving technologies and tool sets. I don't think there are many other professions where the tools available change so quickly and often.
Graphchi - analyze massive graphs on a laptop
Positive feedback loops are heterogenous - there are sensible discussion and down-vote taunts and reciprocation. If people can be reliably categorized as promoting desirable loops and/or dampening undesirable ones, selectively amplifying their voices will promote quality.

Instead of modulating input, which is not scalable, I'm suggesting modulating the dampening power (and potentially amplification power, e.g. upvotes from high-karma users counting for more) of a select and active minority.
The report authors seem to be arguing that income inequality in USA is so bad that an emerging lower/middle class cannot afford cars and the rich have all the cars they will need.

This strikes me as plausible.

The Atlantic is saying actually our young people aren't poor, they just want iphones instead.

This strikes me as implausible platitudes.

Is the Atlantic a Left / right wing paper (it appears on HN a lot so I would like to know)
Correct, taxonomy and SI units are not science, but they are not psudo-science either. The periodic table is though - it has an actual testable criteria: That this is the full list of elements, and there are no "in between" ones.

Observations are part of science, but they are not science in and of themself. Just because you used one doesn't make your science "tainted" as you seem to think.

But to declare that the observation is the complete package is wrong.

Those case studies are called "case studies" for a very good reason: They are not science. If they were science then the exact cause of the disease would be known, instead only correlations can be found - this can lead to science, so it's part of science, but it's not the end result, it's a lower level category. (I hate using the word science this way, but I guess it makes my distinction clear.)

There is no such thing as "exploratory science" unless you mean the science of how to design an exploration. What the rover is doing is called cataloging. From a catalog you can gain scientific conclusions, but not directly. For example you can see that this type of rock is found in this situation - then you find another location and predict the type of rock.

We want to know "what is on mars". Just because that's not a science in and of itself doesn't make it bad. If it were science you could develop rules and laws from it. And maybe we will - like ideas on planetary formation. But right now the rover is doing history - we want to know "what happened" not "what fundamental rule can we learn".

Again, this isn't a bad thing. But it's not at the same level as hard science.
This is brilliant. Awesome work dude.
> ... just change the fridge doors.

That's what this research was intended to answer: change the fridge doors to what?

At the time there was no such thing as magnetic strips. To seal the fridge you had a rubber seal, and then you had to close the door with significant force. The handles were effectively levers so an ordinary person could provide enough force to open them, and fridges were advertised with elephants standing on them to show how strong they were, and, by implication, how well the door seal worked.

This research was intended to work out what kind of internal release mechanism could be provided to allow children, in the dark, to release the door quickly.

So yes, "just change the fridge doors".

Using 1958 technology - how? In what way? To what?
Sorry, i did not make myself clear. It was more a general question. I was under the impression most webdevelopers still try to support IE7.
Site seems to be down, here's a cached copy:
http://webcache.googleusercontent.com/search?hl=en&clien...
According to the linked abstract, the study considered how to change fridge doors. In other words, the question being answered was, "What style of door is easiest for children to open from the inside?"

Given that many (most? all?) fridges of 1958 had locking latches that opened only from the outside, it's not inconceivable that moving to a magnetically sealed door like modern fridges was not seen as a trivial, or the most obvious, change at the time.
Might be there is some civil servant who's computer doubles as a webserver. When he leaves at 5pm, down goes the server.
Could be an ADA issue... ADA (or the state's interpretation/augmentation of it) may say that they need to have live assistance available and they don't want to staff that 24/7 (this is a business registration site, most usage probably happens during business hours).
...bcrypt+md5 rainbow tables...

I don't think this is possible, since bcrypt has a built in salt.

Does the fact that you bcrypt and md5 undo this salt? I.e., is bcrypt(md5(password), salt1) == bcrypt(md5(password), salt2)?
The need for "defense" implies an adversarial game with an opponent. I'm betting that the people who set up this security policy did it out of negligence rather than actively looking at port 22 and deciding not to allow it.
Instead of giving us pity and RTFM, it would help if you clearly specify what you think are the defining and distinguishing features of the cathedral and the bazaar models. There seems to be a lot of confusion around that.
I have the exact same opinion, the new doc page is a step backwards...

It make me close it in 10s and I use TB in 2 of my projects and I love it, but that layout is simple terrible for people with smaller than 20" screens... please provide us another site with more reading area and minus menu.

Anyway thanks a lot for this, I love TB it's great and you guys are my heroes :D
There's more to monads. One important feature is separation of composition from execution. Second one is that the composition can do some extra things automatically, for example the Maybe monad composes functions in such a way that if the first function produces 'Nothing', the second will not be evaluated.
I know plenty of programmers without degrees, I was extremely surprised some of them didn't because they were so bloody good! The thing is with having an IT degree, this industry moves so quick how much of what you learnt is still relevant (aside from the OO and SQL)... You have to be CONSTANTLY re-learning new tech otherwise you're not going to be a very good/relevant programmer for long!
It's a bit more powerful than that - consider what would happen if, every time you sequence two statements together...

doThingOne(); doThingTwo()

... you get to pick what happens during the semicolon depending on which Monad you happen to be working with.

For example, like praptak mentioned, maybe during every semicolon you can evaluate the failure state of your program and decide not to continue. I.E., "Maybe" the execution worked, and "Maybe" I have a valid computation at this point, but "Maybe" not!

The power here is that while you are really operating in this context with an implicit possibility of having failure, you can program as if each step succeeded. So now we can string together a whole sequence of possibly-failing computations, and create a bigger possibly-failing super-computation that error checks under the hood.
Thanks! I spent the last three days coding this, and now I only hope it will stand out anywhere:).
Rails, callbacks, workers, and the race you never expected to lose
Once there's support for Glacier in boto (https://github.com/boto/boto) I would imagine a duplicity backend would be easy to implement.
How (and When) to Reignite Your Work Day
He probably just used standard language constructs (hasmaps, vectors, sets) instead of custom classes like in Java or Scala. In Clojure it's "idiomatic" to do that, and I believe it can make 10x difference in short programs.

Yeah, some of the improvement could be because of better understanding of the problem.
If you read past the title you'll notice that the guy got a job as a JUNIOR developer. The email he sent out was looking for an internship/apprenticeship/junior programming position open in the area. Doesn't look like he is trying to run before he can walk...
What's holding up .NET 4.5 support on AppHarbor?
XKCD What If: Everybody Jump