skysight-inc/HackerNews huggingface dataset:
Oh but I'm not color blind :)

Also solarized comes with various different "contrast versions" have you tried them all? By the way, what's your choice in color scheme being color blind and all?
Since MD5 hashes and bcrypt hashes are recognisably different: when the user next successfully logs in, check if they have an MD5 hash; if they do, use the password they just submitted (that you know is correct) to generate a bcrypt hash and then update your password database with that.

If you have a large number of inactive users, this might not be as effective (you'll still be left with lots of MD5 hashes in the event of a dump) but for other sites it can be quite useful.

You can also use the same strategy to increase the work rate of your bcrypt hashes in the future.
Thanks again, I appreciate your help! :)
I don't see the programming language set. Is it one of the ones that shows up on the front page?
"This website is offline
No cached version is available"

definitely missing ;)
I'm waiting for the great network printer security apocalypse. A bunch of these things are in a great position to turn around and launch attacks on the "chewy on the inside" networks of so many companies. Maybe this has already happened.

My printer has a dumb little print server running an embedded flavor of Linux and a publicly known hard-coded (!) root password. While mine is going to the slag heap sooner or later for that and several other fundamental problems, you can guess that many many more of them are out there just waiting to be taken for a ride.

These dumb little boxes may be underpowered, but once you get inside and set them up to forward packets for you, their raw CPU speed becomes less of an issue. You can run all of the fun attacks from a "real" machine and just let it bounce you to the inside world.

Hypothetically speaking, of course.
That is one thing I don't like about the shoot out, even when you don't want it to be about performance it still is. When they measure code size they only measure the best performing app. They don't have a separate set of measurements for concise code. So most of the FP entries are C in an FP skin.
This is almost an understatement.

My home servers get SLAMMED on a daily basis by a whole wonderful plethora of bots. Most recently has been Muieblackcat. Going on the whole salary analogy: I'd make my current salary plus a bit if I had a penny for ever scan on the box in my living room. I keep the Ukrainian IP's off my blacklist just for fun. Nothing sensitive on the server, just my web playpen. I kind of hope that one of these exploits works one day so I can see where I've slipped up.
Rotary Dial
cdnjs has been around for a while already.
"The whole password-cracking scene has changed drastically. In the last couple years. You can look online and you
can generally find passwords for just about everyone at
some point. I've found my own username and passwords on
several different sites. If you think every single website
you have an account on is secure and has never been hacked,
you're a much more optimistic person than I am."

This guy is realistic. And he is right. I started revoking access for my google account from a lot of websites.

BTW I've seen a blog post that a guy was able to access his stackoverflow account by getting the session cookies (which was very easy, the parameter names, etc) just by using a cookie chrome extension.

This guy is totally right.

"If you think every single website
you have an account on is secure and has never been hacked,
you're a much more optimistic person than I am."
already commented in The Big Bang Theory - The Excelsior Acquisition (S03E16)
The strings contain "sqli" which some of the posters inferred to mean they were experiencing a SQL injection. I doubt this is actually the case.

I'm certain you're correct. I've seen many SQL injection attacks, and not one of them has ever labelled itself as such.
The programming language set are free for download after login!
You both raised good points. I guess I was more responding to the implications around ethics than the design.
I find the 7th point to be really great piece of advice, I simply love the subtle way, in which author is pointing out advantages of functional programming.
I'm not sure if it would be a good idea to switch the algo behind HN.It worked well for several years,but the spectrum of users changed. I'm not against a new solution, but you will run into this issues again and again, because it are social problems, not technical ones. Just my 2 cents.
That begs a couple of interesting questions regarding how crowdfunding LPs will be able to add value to their investments, and what companies will be inclined to disclose.

At the onset of crowdfunding, less sophisticated transaction arrangements are likely to not prioritize those two scenarios. But it makes sense when we think of crowdfunding at its maturity.
You probably won't need 2000 icons on a site? We normally just pick the icons we need rather than the whole pack.
Firefox 17 javascript performance is getting as fast as Chrome
I've got a HP printer pretty similar to the one mentioned in the thread. In the course of trying to set it up, I by chance pointed my browser to the printer's network printing port. Interestingly enough it printed out all my browser headers. It seems like these printers just spit out anything that hits that port.
JL7 is an HL7 library for Java.
I can't help but wonder if tptacek has ties to the government. He's always defending The Establishment in whatever comes up - be it banks taking away people's homes, or now Assange.

It's just weird. He's smarter than I am, and I can see bullshit for what it is.
you mean the mobile phone who's data can be accessed remotely by apple, google, htc and god knows who else?
have sex twice in a row except she decided that the second one was rape? she didn't even get out of the bed, i don't recall reading that he was restraining her or that she truly was disagreeing with the act.

That Assange is arrogant shouldn't come into account here. Else we'd just jail all arrogant people and be done with it.

with these arguments, any sex before marriage sounds pretty dangerous to me.
Sure, I'm not saying parents have to come running every time or anything. The point is that letting a kid cry until he goes back to sleep is consistent. Locking your kid in a box to see what happens is not. How will the kid know next time he gets stuck, that it's not just another test? And since the kids are still learning how to communicate, adding a continuing doubt that maybe their parents understand them fine but have chosen to ignore them isn't going to help.
Disabling a website during certain hours is not a massive feat of engineering.
Paul,thank you very much for getting back to me with the above.Some very good advice which has got the creative juices flowing.

I thought google had down graded the importance of keywords in the domain name? This was meant to combat people registering exact match domains to rank for specific terms.
So, there have been a lot of negative comments and I understand where they are coming from. I will try to address them as best I can.

"Seeing a self-taught guy with 6 months coding experience writing software at a medical lab testing facility makes me a bit nervous."

I am working mostly on internal systems and when I venture outside of that I have my own branch write thorough tests and have multiple people check my code.

"I shudder to think of the quality of his code and the projects he or people like him are let loose on."

My code is pretty shitty. But, I know how bad it is, I know my limitations. I work long days and more after work to improve. I am not pretending, I am learning.

"Very fancy, but I am a software engineer, or programmer, as you prefer it to be called. Engineer means that I studied 5 years at university (Bs + Ms), and I know what I have learnt there, and I wouldn’t want to work with someone that doesn’t know about algorithms, algebra (it helps you understand a lot of things and opens your minid), compilers, statistics, concurrent programming, software architecture (1 full year course), UI designing, networks, databases, etc, etc."

I disagree that amount of time in a University is what allows one to become a programmer, it is the skills and knowledge acquired at the school. I didn't have that option, I needed a job in under six months or I was going to have to get a job doing something I didn't love. I worked hard and got the job. Am I a master? Nope. But, I have put myself in a position to become one with continued hard work.

I think that is all of them. Many people glossed over this line, "When I started this search I thought I would be scrubbing toilets in exchange for nightly code reviews."

The fact that I am not doing that is a mixture of my willingness to clean toilets to learn the craft I love and a market desperation for developers.
How about http://fortawesome.github.com/Font-Awesome/ ?
MochiKit isn't listed:
http://mochi.github.com/mochikit/download.html
This is from the point of view of an outsider, but I get the impression that YC's operational costs are substantial at this point. Aquihires might look good based on cash valuation of YC investments, but that hides the investment of intangibles and overhead, which I could easily imagine to dwarf the cash injection. Additionally, a set of founders tied up in a big company are probably less able to contribute to the alumni network.
That's because it's based on something out of Dune: https://en.wikipedia.org/wiki/Bene_Gesserit#Litany_against_f...
Isn't this the same pattern as yesterday's "bozo" post? The general principle there was "B players hire C players and so on". Granted, we're talking about posters and topics instead of "players", but couldn't it be the same thing in a nutshell?

"People are voting up comments or submissions that don't fit..." sounds just like "People are hiring people who don't fit..." to me.

Or am I wrong?
I am very surprised nobody has picked up this line for discussion:
"
Success in escaping [..] was also influenced by the educational level of the parents, a higher rate of success being associated with fewer years of education attained by mother and father combined. "

There's no attempt at explanation for this in the article itself..

Would it be safe to deduce that the more educated "you" are, the more passive (or "inactive") you are in the face of danger?
Why you should never, ever, EVER use linked-list in your code again
ClojureScript is a potential way around the JVM; but there's the disadvantage of less libraries (since cljs tends to be used more in the browser), and you can't easily edit scripts in place since they have to be run through the (JVM) compiler first.
There's also "nmap" in the output, so this could be part of a combined port and vulnerability scan that hit the network printer.
Unfortunately he is in vast minority. Only when you start using NoScript or generally paying more attention to your browser's status bar do you start to realise the scale of the ridiculousness.
Interesting.

There are too many non-interesting, but pedantically correct comments that derail discussions. The community goal of an HN comment thread should be to unearth the most interesting, useful aspects of the submitted content. Correct but non-interesting, non-contributing comments should be down-voted.
There is a lot. But that still doesn't explain why Microsoft has canceled some actually interesting projects just because "they weren't Windows" -- the Courier comes to mind.
After reading tezza's explanation [1] of how they're probably using tape storage, this makes sense; Amazon wants the mechanical robot arm to spend the majority of its time writing to the tapes. If you're constantly tying it up with writes/deletes, you're taking time away from its primary mission: to archive your data. Charging you for early deletes discourages that practice.

[1] http://news.ycombinator.com/item?id=4411697
The Fair Tale of Hadoop Scheduling
> Maybe if people knew that their reputation and voting influence are on the line, they would try harder to write more constructive comments. Thats all speculation of course and the only way to find out is to experiment :)

You could ask folks first. Not as reliable, but a lot less expensive.

Here's an unsolicited data point. I've got reasonable karma. I don't care about karma. And, I'm pretty sure that the some of the most interesting folks don't care either.

That's not quite true. I do care about all the karma whinging. I dislike it.
It seems to me that someone was scanning their network for specific services- probably, some DBMS. Printer received the initial communications packet(s) and happily printed whatever was received.
Given that these are connected to Airports, they are probably using Back to my Mac:

http://en.wikipedia.org/wiki/Back_to_My_Mac
No one expects the Scott induction
Show HN: Manage your social accounts, privacy and permissions from the url bar
Yes, I used to do a netcat on printers to print for free in college.
I always liked the idea of adding meta data to your up vote (funny, insightful etc) just choose from a list, and people can filter out category's they have no interest in. together with a system where you have to earn voting rights (to become a 'citizen' of a site), for instance: you have to be a member for at least a year and you start with a veined number of up/down votes.
"Big Blue still reigns supreme." but.. whatever.. =/
How does using CDNs make you distrust a website? If someone is loading jquery.min.js from Google shouldn't you trust it more?
I think it makes more sense to just update the posting and commenting guidelines to more accurately reflect what kind of posts and comments are "desired" by the old guard. Not all of us have been around silicon valley for 10 years and understand the unwritten etiquette of HN!
> As for Cloudflare's speed, you can see cdnjs's average ping time as measured by pingdom here: http://stats.pingdom.com/4jg86a2wqei0/362854

If I'm guessing what the names of your Pingdom checks mean correctly, they seem to show CloudFlare making your response time 10ms slower. I'm assuming that cdnjs.cloudflare.com is the site with CF in front, and cdnjs.com is without, not sure if that's correct.
Ask PG: Why did you disable iframe viewing of comments?
Hi PG,

I use the excellent Hacker News reader by Josh Huckabee every day - http://hn_reader.joshhuckabee.com and a few days ago it stopped displaying comments of HN stories. After getting in touch with him he says there is now a new HTTP header preventing HN pages being displayed in an iframe.

Can I ask why this is and whether it would be possible to reconsider that decision? Part of the beauty of HN is that even if someone doesn't like the format/design, there are a myriad of other ways of accessing it. Especially only being displayed in an iframe, it wouldn't be placing any extra load on your servers right?

I would really appreciate it being looked at.

Thanks!
We need to extend the baseline notion of what the web is. If some nontrivial number of sites are using (say) jQuery, then it would be a good idea to have a way to declare "SCRIPT SRC jQuery version x.y.z" and let the browser figure out where it lives. Then you fetch it once, parse it once, and run it many times, no matter what site you may be visiting.

Or at the very least, we need some way to say "get this script from this URL, but only if it hashes to <this value>, since otherwise it's been compromised". Why worry about CDNs when you can design the script-switcheroo attack right out the system in the first place?

I wrote about this in June: http://rachelbythebay.com/w/2012/06/27/src/
Designing Screens Using Cores and Paths
These two 28C3 talks[0,1] discuss the precursor to such an apocalypse.

[0]: http://events.ccc.de/congress/2011/Fahrplan/events/4871.en.h...

[1]: http://events.ccc.de/congress/2011/Fahrplan/events/4780.en.h...
Yes I do it, I have the weekly and monthly.

And yes, I might have daily-monday / daily/tuesday.... and so on, and it would work better, but this way works for me. There is a lot of room for improvement, and it is not hard to implement with cron-jobs and more buckets.
Udacity Cancels Free Online Math Course, Citing Low Quality
Not trying to answer for PG, but the reason I think FundersClub is different from other crowdfunding options is that it does NOT result in the company having a large number of inexperienced shareholders. Rather, the company has just one shareholder -- the FundersClub fund. That way the entrepreneurs don't get distracted by having to deal with a ton of individual shareholders -- no updates, no chasing them down for signatures/approvals. The company gets the benefit of a much larger base of capital but only has to deal with one experienced shareholder.
I'll post something about it soon - while the changes were wide-ranging for us (because these post-action tasks were initially scattered throughout our app), the extra infrastructure required was really pretty minimal. Most of the actual time spent in this refactoring was writing new tests for code that we'd previously been unable to practically test.

In the meantime, the pub/sub setup we've got is pretty similar to the one presented a little way down the following article:

https://www.theagileplanner.com/blog/building-agile-planner/...

Our listeners sit completely separate from the controllers, though, and we're not using them for anything like handling controller response logic (I'm not sure how I feel about that, although the idea is certainly interesting).
My friend just had a kid and they are training the baby on this exact thing... So I guess it isn't intuitive after all. There are even experts on how to train your baby to "interface" with a nipple.

Weird!
Hire Sander to your awesome team
That's true but it's not the only reason. Note that there's still a social cost to firing people.

I believe another major reason is that software companies in the US are in average more profitable and more productive than in other countries.
There are known attacks on printers eg via firmware upload https://lwn.net/Articles/469865/

Although this mostly looks like scans.
If you've decided to cripple your browser, that's really not anyone else's fault. I use RequestPolicy with a hand-built whitelist of domains, and sure it breaks some pages, but I don't whine about it because that's my problem.
There was a huge error in the OP as explained in http://news.ycombinator.com/item?id=4411478.

If we correct the error, we conclude that in 1967, IBM's market cap was approximately 3.3% of US GDP.

That seems much more reasonable to me. Although IBM owned much more of the market for computers than Apple does, the role of computers in society has expanded drastically. E.g., there was no consumer computer market at all in 1967.

P.S. MSFT’s 1999 high of $620.6 billion represented 6.5% of 1999's US GDP.
Perhaps we need a jerk flag. If enough people flag a user as a jerk for making inappropriate comments, then that user would be banned. People could upvote the offending comments all they like, but after X many jerk flags, that user is no longer a HN'er.

Edit: You could say that only experienced users (members for several years with X many points) may use the jerk flag. Or something like that.
Don't do it. It wrecks your site. Those link building packages just cause your site to become awash with spam. To the point I've had to turn comments off on the one affiliate site I tried it with.

700+ junk comments every DAY and no discernable difference in search engine results. Lingering somewhere on page 3.
Plenty of traffic, several thousand per day, none of it genuine users though.

I built another site that I've carefully optimised myself, I'm constantly in the top 5 results for my phrase on Google, 300+ uniques per day which has lead to a genuine community and just 1 spam comment in 6 months which was actually an advert for a link building service!
Not sure where you got that idea, but the Passwordmaker Pro chrome extension I'm using, let's me specify a different salt (domain of the site is the default), let's me pick the hashing algo, the length of the hash, the modifier, characters to use, etc.

You might want to look at it again.
See also "Working Effectively with Legacy Code" book by Michael Feathers, IMHO _the_ book on this topic.

http://my.safaribooksonline.com/book/software-engineering-an...
MIT is bioengineering bacteria to turn CO2 into fuel
Nice, although I prefer "solarized" http://ethanschoonover.com/solarized blinks theme with zsh
Introducing SQL Server to MySQL Migration Tool from Oracle
Shame the topic of the link is hidden behind a sign up requirement.
I don't think that's the case now... I wary of people with a bunch of certifications and college degrees when I'm hiring for my department. I tend to look more for the small details that let me know that the person is up to date and loves programming more than if they have been taught "classically" .

Interestingly enough, almost every "computer science engineer" with 11 page CV's I've interviewed have not been able to pass a basic test I get all possible recruits do. Be assured though, it's just a filter to get the people that just don't know enough, not an actual "test" per-se
You're projecting. I have no degree. I've taken the time to teach myself the fundamentals. Dueling anecdotes here obviously but we all know plenty of people with CS degrees who are worthless when it comes to tackling a problem, and plenty of people without who are credits to their profession.

Programmers program. If someone programs, they're a programmer. My daughter uses scratch to write software. She's 8, the software is not sophisticated but it's software. She's a programmer.
It's because the linked article double counted inflation: "IBM’s 1967 market cap was not $1.3 trillion in real dollars, it was $192.3 billion"
Better scraping tools than wget are needed
While I agree that the Atlantic tends to have good journalism, that's most true of its feature-length articles from the magazine proper. Imo these blog-style posts that they also do have more mixed quality.
I use the Gnome Tango colour scheme http://tango.freedesktop.org/Tango_Icon_Theme_Guidelines
where possible.

I find it has good contrast between colours in general. In particular I can actually read the blue it uses on a black background. Most of the colours have good contrast with each other even at extremely low saturation too.

For my vision there are some small tweaks I sometimes make to it but it is generally the most agreeable match to my abnormality I've found in a preset so far.
If they were science then the exact cause of the disease would be known, instead only correlations can be found

Again, your definition of science is too strict. Do you really think the known faulty model of the atom was 'not science'? We didn't exactly know how the atom was pieced together, yet we had a theory that was best fit. The idea that a theory has to be an absolutely perfect fit for it to be 'science' is garbage. Case studies do form part of science in that properly done, they represent our best informed knowledge on the matter.

Also, cataloguing is definitely science. Science is about trying to collect information that is as true as humanly possible, and catalogues definitely fall into that basket.

But in particular, I find it weird that you consider taxonomy as 'not science', but the periodic table as 'science'. These two things are one and the same: a human-ordered list of natural phenomenon. We chose the way we arranged the elements in the periodic table, just like we choose the way we arrange species in taxonomy - each list being grouped in a way that makes the information more digestible to us.
Stewart Brand Wants to Revive Extinct Species (Interview w/ Kevin Kelly)
http://stats.pingdom.com/4jg86a2wqei0/362854/history
Interesting. I'm still not going to install it on my gaming machine, though.
4G comes to the UK. Meanwhile, in the rest of the world...