skysight-inc/HackerNews huggingface dataset:
I do write for the same magazine as the moustachioed founder of hipsterdom, and my favorite Lisp is very obscure (Lush), but I fail to see any hipstery things in what I wrote. I'm a redneck and I lift weights. I don't use Lush for the reasons that skinny hipsters brag about being cool before it was cool; I use it because it's good at numerics.
How to upload DVD to YouTube on Mac
Would you like to have a personalized DVD menu while making a DVD from various videos? Actually, you don’t need to find out another DVD menu editor, what you need to have is a DVD Creator built-in with a DVD menu editor, which will help you to edit DVD menu during the process of converting videos to DVD. And in the following guide, I will show you how to customize DVD menu while converting vides to DVD on Mac.
A year ago I first used Parse for a fun side project to check out the functionality and reliability of the service. I was amazed at how quickly I was up and running with a cute little iOS app that collected user's answers to polling questions and graphed results.

BUT back then I kept running into things I wanted to do with Parse that were not yet supported. e.g. Users could like certain questions, and I wanted to be able to increment the like value. At the time this could have caused collision issues if multiple users requested the like value and incremented it, so instead I created an object for each like and queried on the number of objects. This, like most other hurdles I've run into while working with Parse for about a year now, has been resolved.

As a front-end dev, Parse has literally changed my outlook on what I can accomplish on my own or with the help of a couple other developers. With the cloud code announcement my mind is already racing with the possibilities this opens up to me.

That being said, it's not the solution for everyone. For bigger projects with complicated backend needs, I'd still go with a custom solution.
I started using Windows 8 a couple days ago and decided to try out IE 10 and Bing for a little while to see how it compares to my normal Chrome/Google search experience. I decided to end that experiment this morning. I actually like IE 10 and Bing is alright, but the issue is that for complex tech queries, I still get far better results on Google. I thought at first I wouldn't notice, but almost immediately I had to start entering searches in Google after they didn't work out to my liking in Bing.
>I'm not really impressed with the new phone. It seems like Apple will need to come up with more cool features if they want people to keep buying iphones.

I think they need more cool features for people to say that they are really impressed with the new phone. But they don't need to iterate more than they have been to keep people buying them.

Apple had its paradigm shift with the phone. You can't just have those every year. Outside of the initial introduction of the iPhone, and then allowing apps, it's really just iterating, and I don't see how one could expect much different. Their competitors certainly aren't shifting any paradigms with their competing offerings. I think the biggest splash Apple (or others) will be able to get for a bit will have to come from a stylistic redesign (Lumina got many nods for this). Outside of that, it's just the march of the features, apps, and ecosystem.
Streaming video requires Safari 4 or 5 on Mac OS X Snow Leopard or Lion, Safari on iOS 3 or later, or QuickTime 7 on Windows.

The nice thing about standards is that there are so many to choose from.
This is cool, but I'd like to be able to fork one of my own lists. Consider this use case:

I'm a freelance web developer, for example, and there are twenty things I need to do on every project. I could create a master list of things that need to get done, then simply fork that list every time I start a new project, which will inevitably have a unique set of other items to be completed.
New iPod Nanos Look Like Gorgeous Tiny iPhones
lucian303, your comment history is littered with uninformative blather such as this submission. Since you oppose "extra complexity" so much, consider this: the process of finding actionable information at Hacker News would be less complex for everyone if you were to stop posting.
I think they're skating to where the profit is.
Apple - Introducing iPhone 5 [Video]
Hadn't seen TermKit. Looks pretty sharp!
From the Hot Fuzz school of policing..
I got one of these notices today.

I'm also migrating my product over to Stripe for all new accounts moving forward in a couple of weeks.

I know those two events aren't connected in any way, but I wonder if they're starting to feel the heat a bit now that there are more viable alternatives out there for easy subscription payment collection...
Apple - Introducing EarPods with Remote and Mic [Video]
> But for this case, the salt generation is much better

This is the only question I was asking, and you haven't really addressed it in any detail. The reddit comment you linked was replying to some obviously bad code. I mean, limiting your salt to use only 16 possible characters? Really?

> you're using the wrong algorithm ($2y$ is the better one, the one you're using has a known bug)

I didn't know about that bug until just after writing my last comment (don't worry, I don't do this for a living). I just used `2a` because that's a) the example I see most often, and b) that's what was used in this HN comment thread.

The security fix notice[1] linked from the manual page for crypt() mentions that `2a`, on systems where `2y` is available, has countermeasures to try to combat the vulnerability for newly generated hashes, and even says "if the app prefers security and correctness over backwards compatibility, no action is needed - just upgrade to new PHP and use its new behavior (with $2a$)" which doesn't make it sound like it's a huge issue to use `2a` on newer installs, just that you should prefer `2y` where possible.

That said, I'll make a note to use the new one since it is superior. I do find your comment that "if you're on too old of a PHP version to use that (5.3.7 IIRC), then don't even talk about security..." to be needlessly flippant. You don't even bother to offer an alternative to the poor bastards that are stuck on older versions.

> You're not checking for errors from `crypt()` prior to storing the hash.

It's example code, not production code. Maybe I should have made that clearer, but I thought it would be pretty obvious.

> And the minor note about timing attacks...

What's the timing attack on my (non-production, air code)? Your comment on timing in the reddit comment was about verification, which my code doesn't mention.

> Not to mention that you currently have an issue in your code (it needs to be .= for a string, not +=)...

That's just a stupid typo/brain fart. I didn't actually run this; it's just "air code".

---

Can you elaborate more on the salt generation specifically, since that's all I was really trying to ask here? Is the point of using a more cryptographically secure RNG just to make it more likely that each new salt will be unique? How important is absolute uniqueness?

If you could also elaborate on the problems with mt_rand() while you're at it, I'd appreciate it. The only thing the manual mentions, as big a problem as it may be on its own, is that it prefers even numbers on 64-bit systems in certain configurations. Is there more to it than that?

I'm not a PHP pro, as should be clear by now, so I appreciate any information you can pass along. I'm just trying to learn.

[1] http://www.php.net/security/crypt_blowfish.php
I had a similar thought when I saw people angrily debating religion in the text chat of an online shooting game. Some venues are simply pointless to attempt to produce lasting outcomes in.
Rural migrant workers in China (who make up the bulk of factory labour) have less rights than people who are residents of the area they are working in. For one, it is very hard (near impossible) for migrant workers to send their children to schools near their workplace. As for free will, you will find many who move to the cities for these jobs are doing so under intense family pressure.

I'm not trying to draw a comparison to slavery, there is actual slavery in Southern China's brick making industry that is truly appalling.
So call it something else, like "an iteration".
OK, I tested this. No video controls in Safari or Chrome (Mac), but I get them in Firefox. How profoundly stupid that I cannot pause the video in Apple’s browser, I have to use Firefox to do that. But the video quality is reduced in that browser.
You could probably shave a few bytes off your URL's, while achieving the same collision resistance (or alternatively increase the collision resistance in the same number of bytes) if you base64 encoded the hash.
Flat earth economics.
It's actually a shame that this isn't a phone.
The Sky Is The Limit for Wind Power
Secrets of High-Traffic WordPress Blogs
Why the iPhone 5 makes me sad
Please sign up & any feedback would be greatly appreciated!
You don't need to rename the files. As of a few months ago, you can configure CloudFront to take query strings into account when caching, so you can simply link to the file as normal but append "?<your_hash_here>" to the filename. (I actually prefer using the last modified timestamp over a hash.) IMHO, this is better because it requires less magic on the origin server. And even ancient references to a file (a logo someone hotlinked, for example) will still render rather than 404, so long as the name hasn't changed. No need to keep tons of old revisions of files around.
That wouldn't be a one-time pad. It would be a substitution cipher. Substitution ciphers are extremely simple to break.

I don't think there is any way to implement an actual OTP with a font, but you could use the font as a code book, where each character in the cipher text goes to a random unique code point, with the font duplicating each character many times.
Anyone who argues for the first or second law of thermodynamics has poor reading comprehension.

Both of those 'laws' are meaningless.
what do they use then? intuition?

a bit of both maybe, everything around mental illness and disorders is full of blind spots.

There's big money involved, there's big holes in the reasonings, history shows it's been misguided/abused more than once... how can it be trusted?

a lot of living beings in the world have brains, they've come a long way of evolution to get to where they are here...how come all of a sudden, ours started breaking in every possible way since like 20 years ago? and it also so complex that although it sounds like bullshit it's not and you introduce brain-shrinking toxins(that brains would never produce themselves) to get them fixed.

There's too much bs smell IMO
What a throwback to the days of "Best viewed in Internet Explorer 5" that held the web back.
Perhaps my definition of prototype is wrong. I'm working towards a decent 1.0 version with very basic functionality that people might use.

I used to think that having a prototype was enough but now I hear that is not enough to talk to investors or people. I dunno.
What's an example of a bug in C that cannot be diagnosed without knowledge of assembly?
Confirmed on a MPB w/ Safari
Never used MPW nor seen it in action, but many people have told me there are similarities. Being able to type stuff and double-click on it, I think.

I'm working on making a page that highlights similarities between Xiki and various tools / paradigms.
The New iPod Nano
Caramel: Making Android Social and Rethinking the Inbox
1. The prices are on the apple website. They are the same prices as the 4S was.
There are actually a fair number of default rules you can use that way. Check the documentation for details...
You can type to narrow down after running anything. And its all just text so you can delete whatever you want, to narrow down the output (not practical on most shell consoles).
Just don't comment before reading the article or this place will turn into slashdot.
In emacs, there is often stuff going on in the background that you may not notice by just watching somebody use it. For example, I could be setting the region, copying it and saving it to a register, when it looks like I'm just moving the cursor around a bit. This is true for quite a bit of the commands I use often. I also don't like having too much visual feedback, so it's even harder for others to follow what I'm doing.

Also, one you get used to the commands, it's often easier to use too many without thinking rather than planning out an efficient way to do something.
I saw a screencast of that lately. Pretty awesome stuff.
Artist Takes Every Drug Known to Man, Draws Self Portraits After Each Use
Nopal suggests opening this in VLC: http://qthttp.apple.com.edgesuite.net/129opiygabsdvibsdfobsd...
You and I might use a niche feature like rsync

This is why I said it wasn't a feature; what you wrote implied it was. Stock Android has no rsync. It doesn't even have cp.

More importantly, I was trying to describe the structural strategic advantage I think Android has which will lead to it winning out in the longer term, in a similar way to how the PC beat the Mac.
This isn't recommended since many browsers and proxies do not cache resources that are referenced using a query string, even if a cache-control or expires header is set appropriately. Google says Squid up to 3.0 will not do so:

https://developers.google.com/speed/docs/best-practices/cach...
>This kind of arrogant hubris makes me really sad that this supposedly smart community can be so stupid with issues out side of machines and dealing with tolerance and the world as a whole and different societies. Such narrow mindedness is just... well it shows us up to be no better than those we are maligning despite all our supposed advantages

You must forgive me for being intolerant of intolerance. The state religion (which, btw, going against is likely to get you killed) is used, daily and regularly (unlike the USA where Christianity's greatest day-to-day crime is saying mean things and holding back progressive legislation) to justify barbaric acts of cruelty against women and others. Acid attacks, stoning, the works.

So you are damn right I maintain disdain towards such a culture. I identify as a moral relativist to a point, but I can't justify, under any possible system throwing acid in the face of a woman for having sex or saying something.

It is an utterly backwards, barbaric, hateful culture. If calling a spade a spade makes me intolerant, so be it.
But salts don't have to be strictly unique, they only have to be a barrier to rainbow tables. Even a 16 bit salt should make it enormously more difficult to try to precompute passwords. The chance of two hashes matching may go up marginally but that doesn't help you figure out the pass.
It certainly works back up the other way, lots of bits of Perl make a lot more sense with some C background.

And, FWIW, when I did CompSci back in the '80s, the first courses/tutorials involved building half-adders and flip-flops from NAND gates and wires on a plug-board.

You don't _need_ to know that sort of stuff, especially not in any level of detail, to build another CRUD webapp - and with luck a hugely successful business on the back of your CRUD app - but I think there's a personality trait that comes along with all the other stuff that makes some people "hackers" which characterises many of us as insanely curious. Many of us don't want to treat the latest Ruby ORM features or Node.js's async callbacks as a "black box", we want to "know how it works" - sometimes out of pure curiosity, and sometimes because it fails _hard_ and we can't work out why without understanding what it's doing "under the hood".
The ICD-10 is a diagnostic manual, when used by a professional. A professional psychiatrist (by that I mean a non-pill pushing psychiatrist) and psychologists are supposed to take long-term observations of their patients to evaluate the severity of the personality traits. In all of these cases it's the severity not the presence that determines if you have the disorder or not.

For those listed in the article, here's my winning score for presence of traits that I'm known to have IRL.

The ICD-10 requires at least 4 of the following for an SPD diagnosis:
1 Emotional coldness, detachment or reduced affect.
2 Limited capacity to express either positive or negative emotions towards others.
3 Consistent preference for solitary activities.
4 Very few, if any, close friends or relationships, and a lack of desire for such.
5 Taking pleasure in few, if any, activities.
6 Indifference to social norms and conventions.
7 Preoccupation with fantasy and introspection.

The ICD-10 requires at least four of the following for an AvPD diagnosis:
1 Persistent and pervasive feelings of tension and apprehension.
2 Belief that one is socially inept, personally unappealing, or inferior to others.
3 Excessive preoccupation with being criticized or rejected in social situations.
4 Unwillingness to become involved with people unless certain of being liked.
5 Restrictions in lifestyle because of need to have physical security.

The ICD-10 requires at least 3 of the following for an APSD diagnosis:
1 Gross and persistent attitude of irresponsibility and disregard for social norms, rules, and obligations.
2 Incapacity to experience guilt or to profit from experience, particularly punishment.
3 Markedly prone to blame others or to offer plausible rationalizations for the behaviour that has brought the person into conflict with society.

I'm 1 short on the others except histrionic personality disorder, which I'm at least satisfied I had a zero on.
Several comments about the notion that at some point you outgrow Scrum. For those who have reached this point, I'm curious what you've switched to? Or has it been more of simply relaxing some of the constraints/procedures? Asking because I've recently started to wonder if/when we'll need to modify our mostly-Scrum process.
If you had asked me about Uncle Bob and spending an hour with him, I could have spared you most of it. He is very opinionated, and often really quite wrong.
I live in Chicago and I can tell you for a fact that what he describes really is the The Midwest Approach (though I like to call it the Chicago Style because I love this city way too much). We say "show me the money" before all else. We don't get users first and monetize later. We monetize first and stay in business forever.
The agreement is technology agnostic. I had to escalate up a few times and after some persistance, got a call back from someone who was engineering level.
Cmd-return "launches" whatever line the cursor is on. It's analogous to what return does in a shell console. Ctrl-return and double-clicking do the same thing.

When you launch a $... shell command it executes it and inserts the results. When you launch a url, it opens it in the browser. When you launch a dir path it lets you navigate the dir contents, etc.
I came here to post exactly that and was wondering if anyone else felt that. I wish Tim Cook would speak in his natural style, whatever that is. On the flip side, other companies' announcements are similarly boring, so that's not saying much.
Sitting Down For Too Long Can Cause Death
Note that this uses the Bourne shell feature of modifying the environment of the make process by prefixing the command with an environmental variable assignment. The more portable/shell-agnostic version is to pass such assignments as arguments to make instead, i.e:

make CFLAGS="-g -O0" simple

(This also works with many other build tools like CMake or configure scripts generated by autoconf.)

If you're curious which rules exist by default, try running:

make -p

(This produces a lot of output; a bit much to study in detail, but still useful to scan just to get an idea of what default rules exist.)
My comp. sci. program stopped at the solid-state physics point in your recursion example. Every step has made me a better programmer.
Hmm, I just got it running in a VM on 12.04 a few days ago. I'll try it again.
I was pretty negative in the previous thread, but it seems like this is more than just PR. I will see this weekend when a project I was helping with goes live (well, hopefully the cash will come).
"The government has also interpreted the law to mean that as long as the real target is al-Qaida, the government can wiretap purely domestic e-mails and phone calls without getting a warrant from a judge."

So the fourth amendment doesn't apply as long a the real targets are terrorists? And we probably can't even take this to the supreme court since this surveillance is covert? Thanks!
Getting ready to jump on a train, but I'll try to pop in in a bit.
Why would you even worry about it not being a joke? Even if by some quirk of fate they were serious, the code would immediately fail and put no data at risk.
> I grew up in Milwaukee, and I agree, it only serves to support the strong division in that city.

Can you elaborate on this? Wisconsin has never struck me as a state with a particularly conservative streak.
My hopes weren't with the code, but with the fact that it is explained in the article.
CloudFlare’s Growth: Half A Trillion Pageviews, 70B Monthlies, 600M Uniques
Fair point and thanks for the link -- I've only seen this phrased as a warning against "some proxies" that I've never personally encountered. But I can live with it. If your proxy is broken in this way, you will have to fetch the asset from the CDN rather than benefit from your local proxy.
Is putting hash digests in filenames really easier than sending Last-Modified headers in the response, parsing If-Modified-Since headers and returning 304 when applicable, and/or using ETags?

I would have thought that most web frameworks do all these things for you automatically by now.
Well duh, that's Eliezer Yudkowsky. That's essentially his life goal.
Missing MOST WANTED page...? http://www.milwaukeepolicenews.com/most-wanted-page
11) Become the universe

Used to joke with my friends about this, as the most ambitious goal of any rational entity in maximizing the existence utility function.

"Happiness" etc are human factors, while obviously relevant to us now, and may not exist down the line.

https://en.wikipedia.org/wiki/Game_theory

https://en.wikipedia.org/wiki/Matrioshka_brain

Co-operative existence models of super massive intelligent entities (like Matrioshka brains), could equally end up being dominant vs 'last man standing' scenarios. But at least in LMS (which of course we are not fans of), there is no doubt as to the eventual outcome.
F# Templates and F# Tools for VS2012 Express for Web
It's not like the DSM is the be all and end all of psychiatric diagnosing, they spend years (just like any other doctor) at university and in residency etc.

None of this has happened in the last 20 years really, before then people with serious mental illnesses were living on the streets, in prison (well, many still are in these two categories) and in psychiatric institutions (that have since be deinstitutionalised), away from the general populace.

Maybe what you're seeing is that instead of being hidden away and falling through the cracks in society people are now actually able to receive treatment and (a lot of the time) able to function properly in society, so it seems like mental illness is more prevalent.

Yeah the treatment sucks (and from what I've heard it's ridiculously expensive, though I'm in the UK so that's not really an issue), but it's very rare for people to actually be forced to take it, so I think it's safe to say that it's a net gain for a lot of people.

To be honest I think it's pretty unfair on a massive segment of society (on both sides of the fence) for you to dismiss them based on what seem to be fairly weak arguments.

Maybe the problem's that for a lot of mentally ill people you can't actually see what's wrong (compared to a physical ailment), so unless you see/experience it for yourself it's hard to be convinced that it's real?
Putting the hash in the filename allows the browser to not even make a request that would result in a 304 request. It also works behind badly behaved proxies and caches that don't properly respect cache headers.