skysight-inc/HackerNews huggingface dataset:
The problem with blocking common passwords is that quite often you just end up creating a new set of common passwords.

I had to set up a management system a while back, and given the sensitivity of the data, it seemed prudent to block passwords such as "password" and "123456". The result? The most common password was "drowssap", even after an email explaining why they needed to use strong passwords.

I could have gone back and added something for permutations of common passwords, extended my exclusion list or any number of other solutions, but it seems like every time you find a way to stop a user being a security problem, they find another way.
Is there a well know central place for this? I once considered starting a web site for this sole purpose - to let people publish their ideas to establish prior art - but I don't have time to manage yet another web.
This 'secret' advice is pretty old and it's very useful for prompting a perspective shift. The version I have in my quotes file (from 1998, surely not the first time anyone ever noticed the trick) is:

"Beware 'We should', extend a hand to 'How do I'... --Alan Cox, from http://news.slashdot.org/story/98/10/13/1423253/featurecathe... (The rest of the paper is pretty good too!)
Still waiting for HTML 5 audio to happen
Do you know about OCaml? It shares lots of Haskell's type system, but it's strict.

There's also lots of work being put into Haskell right now, to make it more suitable as a low level language---some by direct work on Haskell, some by making it easy to embed DSLs that compile to carefully restricted low level code.
nope, but a better fallback would probably be:
http://tools.ietf.org/html/rfc2549
Digital Art Store + AR Startup = Augmented Reality Art Exhibition
http://www.nytimes.com/2009/09/11/world/asia/11military.html

http://clerk.house.gov/evs/2008/roll681.xml
Yeah - I've tried that in the past:

mbf041:~ shephard$ ls -lart ~/.hushlogin
-rw-r--r-- 1 shephard staff 0 Apr 23 21:36 /Users/shephard/.hushlogin
mbf041:~ shephard$

But it still didn't help. I ended up having to sudo rm -rf /private/var/log/asl/*.asl to fix it on my system.
it's impossible to "distribute" a modified version of the app to iOS devices without going through the App Store

Y'know I'm not sure this is something the GPL would care about. I mean if Apple sell GPL software (gcc), but if I modify gcc Apple are unlikely to sell my fork on apple.com, that doesn't mean Apple are breaking the GPL.
Good Business Plan, Good Exit
Baccus: Open Source Robot Arm
Is that star trek music? I wonder how quickly this video will be taken down.

I swear I've heard that music in star trek!
I just wish someone would please think of the children...

Seriously though, we restrict slot machines in pubs in New Zealand. And now we have slot machines on computers. Some of the slot machines look like slot machines and some look like Farmville. No difference really. The legislation will catch up.
Well, it can be as easy as 'sudo apt-get install mydevenv'.

Create a corporate apt repository with your custom modules/libs/ets and mydevenv module that includes all the dependencies. And that's it. You can recreate the environment with one command...

Edit: Uh. Deployment environment. Sorry. Yes. Having QA/Deployment env. in VM is a way to go.
Specification of Apple iPhone 5
There was a Python interface to Storm announced at PyCon called "Umbrella", but as far as I can tell it was never released or heard from again.
my question might sound stupid but how can you guys develop on such a small screen? I use eclipse and running that on anything less than 14inch seems like a struggle to work with. especially at 720p resolutions.
Valve is not a good example for anything. They do things other companies can't, or won't, and at any rate, don't. They are the exception that proves the rule, in most things. In the TF2 case, they went to that model as an experiment, after TF2 had already been paid software for a long time and had made a lot of money for Valve. So, you don't see much of the annoying 'monetization' bullshit that you see with other titles, because there wasn't any pressure to put it in. Instead, they sold things that people wanted without impacting core gameplay which is something that no other freemium developer seems able to pull off.

I haven't encountered other examples of freemium games of that type, that weren't utter garbage.
I know a fair bit about this.

It's only there to restrict people's access to uncensored information. Cyberattack etc is just an excuse to make people think it's something for their own good.

Since they can tightly control it and it is a national network, they will offer very fast speeds with attractive prices, the actual internet is terribly expensive and incredibly slow, then they'll slowly expand from there, similar to china, they will make their own versions of Twitter and Facebook and Gmail and offer those at very cheap prices with great speed.

Banks and all government organisations are soon going to require people to use a 'national email'. If your emails is @gmail.com they'll simply refuse it and will ask you to open an account on this new email site.

Once it gains some momentum it'll snowball from there. Those who only want to send an email and send a couple of messages to their friends will prefer the national network because it is much cheaper and a lot faster.

Having said that, the whole thing is destined to fail. People will find ways to fight it. At this point there's not enough information about the network architecture but most probably there will be a large pool of computers with high speed and unrestricted access to the internet as part of this network.

They will be the gateways to the internet. For example an Iranian bank will transfer its 'netbank' to the national network. But the server that is hosting this netbank still needs the internet to operate so that server will be connected to the internet with a high quality link.

There's a possibility that people will manage to gain access to these nodes and use it as a proxy to get high speed internet. Obviously if someone manages to do that they'll probably try to stick to it as long as they can so it wont bring the internet to everybody.

The network is being laid out from next week all across the country. We'll see.
>Skitch was perfect

Really? While I'm somewhat fond of Skitch, some of us find the UX rather confusing. The menu's were cluttered, and for the most part does not operate on common design patterns.

For example, nearly all image apps allow your to draw a box to crop. Skitch re-invents the wheel, and asks the user to learn their method: Dragging the inside border of the inner canvas. Yup.. actually had use Google to figure it out :/
And here I came to the comments to read about people's thoughts on the article...
Obviously. How would you ever be able to say such a thing with absolute certainty given the number of possible hardware/software combinations?

I can tell you that my specific installation of Debian works flawlessly on my specific Thinkpad T420s, but what does that help you?
Okay. I wanted to see the App Store in action; and ... I'm confused. Is there any sort of YouTube video that has the more recent app store? I was watching this review http://www.youtube.com/watch?v=wO-vcmBjN50 which is allegedly about iOS 6; and ... that App Store doesn't look bad at all. I mean, I prefer up-and-down scrolling over horizontal scrolling when I'm looking for things, but that's nowhere near what was shown in the article. ... Help?

Edit: found one.

http://www.youtube.com/watch?feature=player_embedded&v=M...!

It looks like it works better on the iPad
If you're walking around Shinjuku on foot (as everybody does), Apple's map is basically useless. Note how the Google map has all the exits marked, the different stations (JR vs Metro vs Keio line). The whole red area on the Google map is the station, part of it underground. Navigating around Tokyo, maps of stations are essential.
If you like the hardware, try Linux on a Macbook. Ubuntu works perfect on the latest Macbook Air, even better than OSX in some ways.
I don't really see the issue. Prep an ogg ant a mp3, include both sources in the audio tag and your golden.
The thing is, if you're shooting yourself then you need to own some sort of camera, be used to using it and be used to thinking like a photographer. Obviously if you hire someone to shoot for you the camera becomes their problem; but you can shoot digital video so cheaply now that you'd be crazy not to own one. I use a DSLR because I want a lot of control over the image, but something like a HTC hero will 'just work' and may be perfect for documentary work. An iPhone...possible, but painful.

Absolutely true on the sound. Bad sound will kill your production faster than anything else, and there's an art to getting good sound, just as much as there is to getting good images. Zoom's H4N recorder is not the most user friendly but it's small, cheap, and sounds very good. It also has surprisingly decent built-in microphones. It sounds as good as the military-style DAT recorder I used to lug around, even if it doesn't look as impressive.
Index Ventures is helping build an IPO market in London for European startups
I, for one, find it refreshing to see a community of hackers (HN) going back to its roots and upvoting the struggles of a major anti-hacker corporation (Apple).

Because, sorry, but Apple's spirit is in direct opposition with the natural grain of hackers, even in a broad and "entrepreneurial" sense of the word.
It's "Fanfare for the Common Man" by Aaron Copland:

http://www.youtube.com/watch?v=zEro8pG0hiE
India collecting biometrics from every one of their 1.2 billion citizens
Yep, same layout exactly.
Creating a Life You Don't Have to Escape From
On the OSS side of things you could take a look at Blender: http://www.blender.org/

While Blender is known primarily for the 3D modelling/animation side it also has a non-linear editor and compositing capability.

The most recent versions have focused on the motion-tracking and compositing needed for their most recent live action+CGI film which is due for release shortly: http://www.tearsofsteel.org/
I was thinking you should collect email and start a "top 10 reddit images of the week" email or something to get return visits over time.
Researchers Create Silicon-Based Quantum Bit
They could use DECnet for it, now there was a proper protocol. And LAT for the "last mile".
What's a 'Linux Laptop'?

Wasn't Linus Torvald using a Macbook Air ... with Linux?
I'm sorry...but I can't control my laughter...hahahahahaahahaha...seriously...best news I've ever read this week!
It's pretty trivial to block a satellite.
How are the chances of a version working with libvirt/kvm?

Would be willing to help.
Why can't they use Bing maps? Going to MS is not a new thing for Apple and it would also mean fighting a common enemy for them.
Here's one example: some twenty years ago, "science" was a dirty word among liberals, Newton's Principia was a "rape manual", quarks were "constructed", and "scientism" was but another tool in our evil western civilization's arsenal for oppressing minorities and other cultures.

Nowadays, liberals are all about science. Anyone who'd dare to question the scientific method is corrupt or crazy or both. All it took was the climate change and the controversy around teaching evolution in schools.
You missed one, critical:

- does it handle GPU switching (Optimus&al) without piles of hacks?
I think part of the problem is that people think of as "go to gym x number of times, shed x number of pounds". It becomes a short term and very result oriented solution. If and when it doesn't work (because creating a formula that works for everyone across the population is very hard) people become demotivated and give up. If you could come up with a way of making people view movement as fun and enjoyable then they would probably have a better time of it. Not to get sentimental, but look at kids in a playground - run, jump, climb....and they just have fun playing catch or exploring a climbing frame or jumping from here to there. So there's a startup idea - playground for adults - adult sized swings, roundabouts, climbing frames and trampolines.....get the adults to play like kids. Change their motivation from "weight loss" to "have fun" and they will more likely stick with it.
http://freemoviesite24.blogspot.com/2012/09/cleanskin-2012-b...
For now. Linux DEs are very close to full support for variable DPI, much better than Windows.

It'll change as high DPI devices become more popular.
I'm saying I haven't tried to crack a password in about 12 years :)
The disappearing web: Information decay is eating away our history
Exactly. Using science and technology to restrict access to more science and technology is not only pathetic, but also funny.
I remember a paper, from Microsoft I think, where the proposed method was to keep a list of all passwords and prevent any password to be used more than X times. This way no password becomes common. But it would likely be frustrating for users who try to find a password (like trying to find a username on Hotmail: everything is taken!).
I get about 6-7h if I don't do much more than use a browser, on a Thinkpad E325 (AMD).

Playing a game it's about 2-3h, but it doesn't seem to ever overheat.
Compass API browser
Alternative browser for Compass (SASS) API.
This is bad for developers and users. Users see less results and will miss out on quality apps. And do you really think it's good to reward app store SEO??

>> "This will raise the bar for developers. It'll force them to do better app store SEO"

How is this a good thing? Would you not rather spend time developing a great app. This just creates an opportunity for people to become more successful through gaming the store.

Trust me, after you've released your app to the store and you see the importance search ranking has (and how difficult it is to acquire the things you need to rank high) you will change your opinion on this.
Top Ten Things To Do in Iceland
X230 is reported to have freeze issues with ubuntu 12.04 though
Case in point: http://i.imgur.com/MyWGT.jpg
All observers are equally valid under SR; it would be very arbitrary to say that some of them are seeing "artifacts". Physics is based on observation, and the natural way to interpret our observations is to say that what we saw really happened. (Obviously this isn't true if some observable effect is distorting our perception, but that's not what's happening here - the observer who sees the person arrive before they left is a perfectly normal observer using perfectly normal equipment). Now if you want to say physics works differently for observers in different frames, that's fine, but it goes against relativity and all known physics.

Now assuming we accept that FTL-traveller really did arrive before they left, if that's all they do it's a matter of language as to whether they have violated causality by so doing. But it would take some very perverse physics (again, basically discarding relativity) to say they couldn't simply jump back, again going backwards in time, and arrive back at their starting point before they left it, at which you definitely have causality violation.
X220 is not available anymore, X230 is. And if I configure it close to the Macbook [ssd, bluetooth, display, web cam, etc.] - it's almost as expensive - which leaves me with a tough decision :(
How to Track Your iPhone 5 Shipment Without a Tracking Number
Get a Linux box you can run VMs on then (ie non virtualised), or use a cloud service?
Adobe Fireworks CS6 Features and Tutorials
This article contains some interesting and very useful Adobe Fireworks CS6 tutorials. Advanced functions of CSS extraction, a new palette called CSS Properties.
On the other hand, my G530 works just about flawlessly, although a separate wireless keyboard was minor trouble to get set up.
Wow. That is art!
Doesn't that mean that you keep the passwords in clear?

They don't have a user => password relation, but having a list of passwords to go through will make any bruteforce attack extremely fast.
Yes they are horrible machines. I don't think Lenovo actually manufacture those themselves.
Reminiscent of Central St. Giles in London:

http://www.centralsaintgiles.com/building-gallery

And in fact, roughly the same three colours: red, green and yellow.
The primary workflow promoted by github seems to be to fork (using github's sense of the word) and use pull requests to contribute. This workflow, I imagine gets you to spend more time on the site, as opposed to using github simply as an ssh endpoint. This workflow also seems to be the biggest complaint about github by hardcore git users.

The change then looks to be simply an effort to highlight the workflow they want you to use.

I must however note that any effort to shout conspiracy should be tempered by the fact that github makes its money by selling private repos, so the above change, while reinforcing their suggested workflow, does not necessarily benefit them directly.
It's pretty easy to tell if you're a "python hacker" or a "C hacker" etc. with a quick glance over your repos and their descriptions.
It's the story of my life - I got Apple initially because I wanted a 'Unix' laptop without the hassle of dealing with Linux drivers for laptops. The Powerbook G4 was awesome for this.

Now if Linux drivers for laptops have finally settled down after 11 years, I can see myself move back to Linux. That's an interesting alternative if the hardware is as good as Apple hardware and less expensive.
Of course, all those rich people in blue states who pay a huge slice of the federal income tax take are also effectively disenfranchised. Their states are blue, and their red votes are meaningless. Harder to get upset about all the poor lawyers and bankers who don't have their votes counted, but it's just as real.

Democracy is funny.
So as far as B's concerned, when he sends the FTL courier to A that courier will goes slower than a light-speed message? He could send a message at tB=53,tA=26.5 and it would reach A well before tA=106.

This only works if you assume the FTL drive is fixed to some sort of absolute reference frame (which happens to be the same as A's frame). At which point you've given up on relativity, and I'll bet it's possible to come up with some cute paradoxes
In one sense, it's actually the opposite. In iOS 5 and earlier, they were at the mercy of their arch-rival.

Now, by doing their own map, "crippled" or not, they're independent. They're less at Google's mercy than they were before.

If the Apple Maps app someday becomes as good as (or better) than Google Maps, this move will be seen as genius.
It's awesome, but the guy who coded it forgot to replace the all black squares by <div class=black> . that would've loaded so much faster - and even better with class=white above the earth.
VERSUSIO  3x Traffic In 3 Months, Now Supports For Cameras, Camcorders, & Apps
Heh. In the last month I've used/seen/heard or heard all of:

* tape salad (been unpacking some old boxes recently)

* a pump screwdriver (I like things that work without batteries)

* record needles (we've got about... four? five? record player in the house and own about 16 foot of records)

* CD’s (burnt one last week - did feel rather retro doing so though :-)

* anything using film (again - digging out some stuff from the garage last week)

* A phone booth (used one last night since I managed to leave my iPhone at home)

* A letter handwritten just for you or by you (still get 'em. still write 'em)

* Trying to re-fold a map (a few weeks back at a conference)

* Steam trains (we have http://www.swanagerailway.co.uk/ nearby and fairly regularly see steam trains in the area)

* a type writer (still got my grandfathers portable. still works too.)

* tipp-ex (is in the desk for when we need it)
Http://www.poltin.com/
Car Electronics, Audio and Video Online Store - Kcardirect.com
Hacking the organisation
There are lots of little answers to that question. For instance brew is a third party addition to OS X whereas its equivalents in Linux-land are integrated into the main OS. Brew does a surprisingly good job, but it still has to work around the fact that the main OS wasn't installed with brew.

But there are two big meta-reasons:

The first one is that since much of Open Source in general is done to "scratch ones on itch", Linux can be seen to be "by developers, for developers". This is generally seen as a negative for non-developers, but for developers it is a positive.

The second one is that if you're a web developer, your deployment platform is going to be very similar to your development platform. This means that you only have to deal with half the number of platform specific bugs and configuration. More importantly, you discover these platform specific bugs and configuration issues sooner.
We use the freemium model with our time tracking/pm/billing app Paymo succesfully. I don't think the model is finished, it really has great potential BUT it's not a magical formula that works everywhere.

The way we do it with Paymo is that we offer basic functionality for free to people who can't afford the software at that point in time. (eg: someone who just starting freelancing). In time some of these users convert to paying customers.

The major problem developers face at the moment is the huge availability of "free" - some users just assume that they are entitled to free software no matter what. You really need to provide real value and have your users perceive this value in order to make money.

At the moment we have a bubble forming with huge amounts of cash poured into businesses that will never ever earn any real cash and i think it will pop pretty soon. This creates a lot of problems both short and long term which we'll have to deal with.
iOS6 - ugly maps, ugly dialer, ugly appstore. 'nuff said.
They're complaining because the article is light on the why he made the choice, just that he made the choice.
I would expect that you'd just compare the hash, effectively performing half of the log in process to check if the password's okay. I imagine it'd be pretty costly in terms of performance if every time you wanted to create a new user you had to hash the password, then check against a (potentially huge) table to see if that password had been used >X times.

Hopefully I'm being short-sighted or missing something that'd mean this could be done simply and quickly, because in theory it sounds like quite a good idea.
Wordrobe: linguistic Game With A Purpose
It's what Yahoo has been doing for a while. They call it "Sign-in seal" and it's basically a custom picture you select yourself.
Thanks for that explanation. Being accustomer to a UK keyboard layout this didn't occur to me (as shift 1-3 is !"£ here).
The article said "if you’re born today". So in other words it's a list of stuff that will be gone from the mainstream 2020 or so.
I love my G570. Great value for money. My expectations aren't higher than the price I paid for it.
If you're using per-user salting (and you should be) then you have to do n hash calculations, not just one calculation and n comparisons.

Might be feasible for a small number of users on an internal app, but unlikely to work on a big or public site.

I'd also be worried about information leakage. If you tell me that I can't use my password then I now know that it's used by someone else. If I work out who that is (which could be quite easy) then I can impersonate them.
The profile is a real improvement (although it might be preferable to fit more repos into a smaller space?), but the public activity stream still seems as hopeless as before. I pointed out some reasons with pictures for the older version, but the points still apply: http://pygm.us/RFLFk4nt.