skysight-inc/HackerNews huggingface dataset:
Having gone through undergrad and law school I can relate to both the high cost of books and remember certain books that were never opened. Costing sometimes $100 for a single student, savings really add up when your talking about classes of 30, 50 or 100's of students.

I would have used this service if it was reliable, but if I ever had a bad experience - book was needed- I might not return.

One thought, next to the amazon hard back offer a digital version for various platforms (kindle, apple, android, ect...)
I'd suggest visting one of RT's reporters stationed at the Ecuadorian embassy on why no one else is running this story.
Is it possible to write an OTR plugin/extension for Google Talk that can encrypt the text locally before it's sent to the other person, who would also use this plugin? From what I'm reading Cryptocat already works in a similar way.

I know there's already Jitsi or Pidgini with OTR that can do this for Google Talk and FB chat, but those are just other apps that you need to install, and I think a Chrome plugin/"app" would see much wider adoption. Or should we just wait for web crypto before this can be possible (2014)? Or just wait until Google themselves to do it? (if ever)
Check Out This Tutorial 
The hair extensions trend is gaining popularity and fame among lots of people globally. It has been evident in several people including celebrities. It's possible to envy an individual who has long, straight as well as curly hair not knowing that they're just clipped.
The numbers are ... misleading ... and choosing NTLM hashes seems like bordering on misinformation.

Taking SHA-1 (which YOU MUST NOT USE for password hashing blah), it manages 63 billion a second. To try all the passwords for that in the alphanumeric space:

- 10 chars: 35 weeks

- 11 chars: 44 years

- 12 chars: 2,800 years

- 16 chars: 11 times the age of the sun

10 chars for bcrypt: 600,000 years...

http://www.wolframalpha.com/input/?i=%2865**16+%2F+63+billio...
> VCL makes load balancing across the cluster – once an arduous task that required months of custom scripting – a trivial matter.

Surely this is an embarrassingly parallel problem that practically balances itself?
basically the extension takes the embed script and uses Zepto (or jQuery for the other extensions I'm releasing now) to replace the flash warning vid box with the embedded script set to fixed width/height
Would SLOC suffice, do you think? Hit me up at aaron@brethorsting.com. Love to hear any other ideas you might have.
Restart a Node.js app when the server reboots
Alt-K and Ctrl-l will solve that :)
They did ask for your email so that you'll get notified when it launches.
The problem with PBKDF2 however is that if you pick a weak password it's useless. It would be better if they included an option for a key as well like other password safes do.
Manipulated photography from 1840 to Instagram
There were interesting encryption related cases already:

http://www.theregister.co.uk/2012/03/01/forced_decryption_ru...

However I think if some state is to ban encryption, it can be called a police state without any doubt.
>That said, I'd be curious to know how long it'd take a device like this to decrypt "secure" AES256 text.

Well, according to the article it tops out at about 340 Gigahashes/second. Let's for the sake of simplicity assume it can do about 1 teraflop (10^12 operations per second, or about 2^40 operations per second). The best known attack for the full 14 round AES encryption reduces it's complexity to 2^96 instructions. So you finish this in 2^56 seconds, or about 2 billion years. I recommend you either wait for an advancement in cryptanalysis or just 30 more doublings of parallel processing power.
Almost everyone is distracted from the main point:

"A declaration of rights is not a creation of them, nor a donation of them. It is a manifest of the principle by which they exist, followed by a detail of what the rights are; for every civil right has a natural right for its foundation, and it includes the principle of a reciprocal guarantee of those rights from man to man. As, therefore, it is impossible to discover any origin of rights otherwise than in the origin of man, it consequently follows, that rights appertain to man in right of his existence only, and must therefore be equal to every man."-- Thomas Paine
Because everyone else doesn't want to throw away the last 20 years of language design.

Go's search for simplicity is seen as a solution looking for a problem in the language design communities.
Don't know about Quark but InDesign allows you to create an RGB / pixel based documents (like Illustrator). Suppose Quark works the same way. It's all HTML5. Here is a tutorial I just found http://www.jamie-cross.net/?cat=26

From a developer's perceptive it might suck, but from a designer's perceptive it's 'good enough' and better than static PDF files like InDesign creates.
Hi. It is kind of confusing. When I come to the site I don't really know what to do. I think the logo is odd for a video sharing site. Also what has bothered me when I first saw it is the similarity between the Sign Up and Sign In buttons. They look identical and it's confusing. If you are using it as a landing page, the Sign Up should be more visible, otherwise it is confusing.
And the NSA, CIA, FBI, KGB, Honest Achmed, your crazy ex wife/husband/bf/gf/dog, etc.

K9Mail at least provides crypto support, though it's painfully awkward to make use of on mobile.

https://bugzilla.mozilla.org/show_bug.cgi?id=647959
I have seen a new Toyota Prius running Anroid myself. You can plug in a sim card and use Waze. Just awesome. I hope the trend keeps growing.
I agree in principle, but especially when I'm still getting up to speed on a complex code base (and when am I not?) I need something like a weekly summary to achieve a good balance between exploratory and goal-driven tasks. Not to say that every weekly summary is as useful – sometimes management turns it into Sisyphean labor.

For instance when I'm starting to learn a new language: I do a mix (whatever's comfortable) between exploring and goals. Explore: read some documentation, look at tutorials, make toy projects. Goals: figure out how hard it is to get "real work" done.

The weekly summary often is the catalyst for my mind to take the different small projects and find larger threads in them.
And the sim card was just a duplicate of the person's regular line, of course only one could be used for calls at a given time.
At the moment I'm using https://github.com/appsattic/node-awssum
It's fantastic and supports a billion services already, besides providing tons of useful examples. Before the AWS SDK matures, I don't think I'll be moving away from this library (even then I'm not sure).

What I don't like in this SDK it that it has its own promise thing. I just want to be able to write in a callback style, and IF I don't want that I can easily make my own abstractions. (more about this here: https://github.com/aws/aws-sdk-js/issues/2 )

Another thing to be considered before making the "final" release would be to support more services: Route53, SNS, SES etc.
well, crossrider is taking a while to update the latest package, i will post back as soon once its done.

extensions soon to be released:
- firefox
- safari
- internet explorer
I don't think you need to do that at the moment, this is just a developer preview. Just wait and see how things evolve. At the moment https://github.com/appsattic/node-awssum still seems like a much much better SDK for AWS ;)
Love the design and great landing page explaining the concept, so why would you send me straight to ask me to auth with github without my even knowing what I'm getting into?
Not all the owners go AWOL, especially for pieces of code that were created for the purpose of going into production. In fact, the lack of official SDK support is the actual cause of so many alternatives. For some of us, it creates a proper foundation in the long run. For example, I don't have the actual time to implement an end-to-end SDK. But hacking some code to get the job done was possible, while others found my hacks actually useful. It isn't ideal, but the World itself is far from that.
Timbuk2 Bags are amazing quality.
If you are interested in printing foldable paper models, also have a look at Pepakura Designer (http://www.tamasoft.co.jp/pepakura-en/). This takes 3d models and unwraps them to printable images.

No connection, other than having used it's output to entertain children at various times.
Well actually it is. This, not having to do with cars or anything like this, is because Germany want's to establish some kind of "tax" on sites like Google News, to subside it's big publishing-houses.

Google is aggressively lobbying for a "free" internet (free meaning, Google can make money as they see fit) and the publishers are lobbying aggressively for this law, to get some slice of the advertising-cake, that ends up in Googles purse. As the publishers are not able to build a successful online-business, they try to lobby for this subsidiary.

So some kind of "lobby-war" between Google, German publishers and the German Government going on right now.
> By hiring all the mathematicians in the world.

not even a little bit.

> Also, they are US-based, and have to comply with US cryptography laws

unless you're talking about sending encryption software to iran, huh?
Is the Google+ integration as evident as the web client?

I really don't want the distraction of G+ inside my mobile clients.
Do you accept pull requests? I've being maintaining my own node.js to AWS stuff for the last 18 months. I may know a thing, or two, about the AWS APIs.
Those who care anyway already use clients which support OTR with the same Google Talk or any other XMPP server like Pidgin, Adium, Jitsi and etc. Those who don't care won't use anything even within the Google Talk web application.

Standalone XMPP clients anyway are way better than Google Talk web application, since they are more flexible and allow using several accounts at once.
http://money.cnn.com/magazines/fortune/fortune_archive/2001/...

She's often considered the face of the irrational exuberance behind the first dot com boom/bubble.

Rating many companies that subsequently lose 90-100% of their market cap as 'strong buys' is a pretty scary track record. IIRC, her portfolio of 'outperforms-or-better' lost ~80% of their value in one year.

Granted that the 'market can remain irrational longer than you can stay solvent', etc so she may not deserve all the scorn heaped on her (I haven't done the research to know ...)
Incredible... this deserves a submission of its own.
There's a story by Cory Doctorow, in which terrorists blow up Bay Bridge and the US establish a surveillance state in the wake of those events. In response, the protagonist creates a distributed system using Xboxes that pretty much works like the way you're suggesting.
A lot of the new products, Google tries (and aggregating sale info on cars is just one of them) is actually not ready. It is not in a state, that is really usable, or has a good UX.

But non the less, other aggregation-sites are being punished by the differend Panda-Updates, for reasons, of too less content, bad UX, et al.

So practically Google punishes sites, throws them out of the index (or a lot further back) and then builts something, they did perfectly fine - just to make money on this.

If I would have to imagine, where the data came from... well why would Google have forced the microformats and machine-readable content... OK, forget that. Sounds just too much like a conspiracy... ;-)
Hm, ok. That's not been my experience. For example, I have definitely heard it used in Operations contexts to describe broken shit that needs fixing now -- things that are real problems and not drills. "Drill" to me implies preparation for an event in the future like a test or an emergency.
Like monkeys trapped in a little room, we killed ourselves until there was just 25 smart monkeys left. Kudos to us in markeiting and pricing strategy.

In this process we also programmed people to relate software to free content. Good luck trying to revert this damage.

We should all quit coding and go to business school. Rule or be ruled.
A lot of research time is spent on finding that "aha!" moment, where you everything you have thought of coalesces into a force that makes pursuing your educated guess worthwhile.
i sort of get it, but I switch the tone of how I respond depending on which of my accounts the email is received. Its seems more troublesome to look through them all and try to figure out after the fact.
For an embarrassingly parallel task like this why does there need to be any blazingly fast communication between the nodes at all?

My guess is that they've taken HashCat and not made any changes to it at all and just ran it on this virtual cluster so that it assumes that it's talking directly to each GPU/node.

For brute forcing things there's no need for fast communication between the nodes, you just split the work up into units of n seconds each and then have them poll for work from a central host. Sure it's a bit more work/complex as you're effectively running individual copies of HashCat on each node but that's just a bit of scripting and saves you the cost of Infiniband!

The Virtual Open Cluster and Infiniband solution would be much better for tasks that require lots of intercommunication between the nodes (e.g. block Lanczos of large sparse matrices) but brute forcing passwords/hashes isn't a great example.
Thanks for actually posting some numbers, but to me this shows the problem and not the absence of it.

It looks like you have 6 CPUs, and say you have 2e9 cycles per second on each of them. 46s * 6 * 2e9 / 1e6 LOC = 552,000 cycles to compile a single line of code on average. That seems 1-2 orders of magnitude off, no? When you had a 10Mhz computer, did you compile at 20 LOC per second? There's a scaling problem here.

(That's ignoring disk access, but if you did it multiple times I doubt it would go more than twice as fast the second time. And to read 1M LOC from disk cold I'd guess should take on the order of 500ms anyway.)

Is what you're saying is that those compilations are fast enough? You wouldn't want it to take 1 or 3 seconds and see no reason why it should?

Also, Postgres and Linux I'm sure have a LOT better physical structure than your typical industry project. Most industrial projects are bound by talent, I would say. If choosing Go gets rid of this problem, then I would say that's a definite advantage on the side of Go, to be considered when choosing a language for a new project.

And it's true that incremental builds are more important, but on projects I've worked on they take 10-60 seconds for a 1 line change in a .cc file and much worse when you're changing headers.
This makes a lot of sense to me, and might explain what's going on with the puzzling uses of "fire drill" I've witnessed in recent years. I almost want to say that there's been a shift in jargon going on, because I feel like I hear people talk about fighting fires at work less often than I used to say, a decade ago.
Thank You! I'll also ask for clarification, just in case.
C++ benchmark – std::vector VS std::list VS std::deque
Ecma Script Functions
also on the HN front page as we speak, beside this entry:

"'Everyone in US under virtual surveillance' - NSA whistleblower"

http://news.ycombinator.com/item?id=4874462
Go is really too general for that to happen. From my (still limited) experience, Go is a safer C with garbage collection, interfaces and goroutines. What I like about Go is that the authors did not over-engineer the language and is pretty much as simple as C as a consequence.

Obviously, things like the garbage collector and bounds checking make Go slower than C. On the other hand, although the Go spec does not mention the stack or heap, you still have pretty much control over memory layout. E.g. making a slice of structs will be backed by an array of (unboxed) structs, pretty much as you'd expect.
Yup, so then I think the advantage of Go is real (contradicting the OP). I mean it's not really something that's so awesome or innovative about Go -- it's just that C and C++ are so unbelievably backward in this regard.

On the HN and reddit threads about the proposed C++ module system a couple weeks ago, everyone said "this needed to happen 20 years ago", and that was absolutely true.
To be fair, mobile Safari does have the Readability-like 'Reader' mode that presents articles' text reflowed to fit comfortably on the iPhone's screen.
Show HN: AngelHackLA Hackathon capture of my work over two days
Strings Obfuscation System
Go's search for simplicity is seen as a solution looking for a problem in the language design communities.

But most programmers are not in language design communities. There is a big potential for a 'safer C' or a 'faster Python'. Yes, that's a simplification, but also how people will see Go.
I really love how the author has taken pains to ensure that everything works in browsers and Node.js. The demo is all client side code, which is truly impressive--there is no uploading to a Node.js server to retrieve SVGs or images.
Emacs' M-x spook command will paste some suitable words into the current buffer:

Croatian nuclear FBI colonel plutonium Ortega Waco, Texas Panama CIA DES jihad
fissionable quiche terrorist World Trade Center assassination DES NORAD Delta
Force Waco, Texas SDI explosion Serbian Panama Uzi Ft. Meade SEAL Team 6
Honduras PLO NSA terrorist Ft. Meade strategic supercomputer $400 million in
gold bullion quiche Honduras BATF colonel Treasury domestic disruption SEAL
Team 6 class struggle smuggle [Hello to all my fans in domestic surveillance]

http://www.cypherspace.org/rsa/spook.html
As an indie dev, I'm way more worried by this development:
http://www.usatoday.com/story/tech/personal/2012/12/05/new-a...

If everyone moves to this subscription model, the indies won't even be invited to the party.
The reality is that people working on non-google projects keep leaving because the community is being shaped by some toxic personalities. We get hooked by the evangelism, buy the party line, build a proof of concept, become disgusted with the community, leave, and concurrently realize that C++ is the way forward.
I guess the parallelism is why botnets are so good at it. I wonder if anyone's tried getting JavaScript web workers (or possibly, somehow WebGL) to poll a central server to do cracking. A site with just a few thousand visitors a day should be able to crack passwords faster than this machine.
> That renders even the most secure password vulnerable to compute-intensive brute force

No it doesn't. My passwords are 30-character randomly generated and look like this:

T7PN2m7Yju43IWtoBkwL6TLx18Rdyq

Do you want to guess how long it will take to bruteforce with that "monster"?

(26 + 26 + 10)^30 = 5.91 × 10^53 possible combinations

At 348 billion guesses per second it will take

1.53 × 10^42 seconds

or

4.84 × 10^34 years

That's quite a bit longer than the age of the universe.
Unless you start out with piles of capital, you have to get paid for doing something in order to pay for things like food. If your labor is worth almost nothing, you will be doing a lot of it in order to cover basic needs. That is only prosperity for people who have the capital to take advantage of low labor costs, for others it is hand to mouth.

There isn't any reason to suppose that demand for engineers and managers will ever come anywhere close to 100% of the working population.

Meanwhile, the advantage of theft, violent crime and the black market improves dramatically as wages decline to nothing.
For a beautiful stock info web app, try StockColor:

http://stockcolorapp.com/app

(Full disclosure: I built it.)
But this extra 1GB, that Mac OS X's 4GB/4GB split has over a 3GB/1GB split, is very costly as it forces a page table switch for each syscall. This is extra overhead that Linux doesn't have. Ingo Molnar, who developed a 4GB/4GB patch for Linux, explained this performance hit: http://lwn.net/Articles/39283/

This reinforces the fact that Linux's choice seems to be the better tradeoff between what Windows and Mac OS X do.
Shoopy gave the key term: checked exceptions. Your grandparent criticized unchecked exceptions, and gave praise to Go error handling for features found in checked exceptions.

There are obviously still non-trivial differences between checked exceptions and Go's error handling, but they aren't as world shattering as unchecked exceptions.
Sometimes it is a good idea, but it works only if:

1) You have a threaded implementation, otherwise your single thread blocks every time you access a page on the swap.

2) You have decently sized continuous objects. If instead a request involves many fragments of data from many different pages, it is not going to work well.

There are other issues but probably 1 & 2 are the most important.
I've decided I won't install the flash player plugin anymore.

So it's neither on my home or work computer and I just have to use Chrome for some of the Youtube or Vimeo videos.
One ambulance trip can easily cost $8,000. Now you are down to $20,000 for the year - hope you didn't have any kids.

But the point isn't whether $28k is livable in Nebraska, but how it compares to what people used to get back in the day.
The big difference is Go has Google+Pike pushing it and might actually get widely adopted.

I don't think it is just that. There is also a difference in culture and tradition. Roughly, Go fits more in the C and Python tradition, D and Rust fit more in the C++ and Haskell tradition. Simplicity versus formal correctness.

I think the Python/C pond is just larger than the C++/Haskell pond.
My motto is - "Where there's confusion, there's contracts"
Cloudflare is the no-brainer for DDoS mitigation on the cheap, too. $0-200/mo vs. someone like Prolexic for ...$150k/mo, or building out your own redundant PoPs (1-3 good engineers, half time engineer to operate, maybe $200-300k in capex, and a baseline opex...but it does give you savings on bandwidth overall, so at scale it makes sense.)
Look at me still talking while there's science to do.
Couldn't agree more. Plus, UW has an awesome startup culture!
To expand on that: one of the typical occasions you could use recover is in web applications, where you want a server to continue running even if something exceptional happened during the handling of a request.
Graffiti Concept Watch 
Inspired by the growing street art and graffiti craze, Andy Kurovets comes out with this clever watch design “Graffiti Concept Watch”.
totally uncool, sending people directly to github login page. i don't even know what to expect.
"The problem with INSERT-SOMETHING however is that if you pick a weak password it's useless"

When is this not the case?
Why does Google Search still not support infinity scrolling? Ads?
Its pretty ridiculous to think that the most visited web pages still doesn't enable users to scroll infinitely through search results. Is it to preserve ad revenue? Image search has infinity scrolling.
I am on a dual screen X terminal, logged on a remote linux server (virtual quad core) and using rdesktop to access my desktop PC because I am not in my office.
In front of me, all the worktations (38) are running linux.
X windows is definitely the tool I use the most.
Project Euler at Perl6 Advent Calendar: Slow but Fun
I have attempted this, and I believe others on the wider Internet have as well. Essentially it ended up being slower than if the central servers CPU was used to attack the hashes instead. With only JavaScript available to do the hashing, the maximum per client was disappointingly slow, around 2000 hash/second each if I remember correctly.

It might be better now with faster JavaScript engines, but I wouldn't bet on it.
IPhone Facil
this is just for renting content. While there is the possibility for games, I'd find it unsettling that an app is installed on my phone one day and they uninstall a bunch of apps if I cancel my subscription.
I wrote a fully featured X window manager in pure Go [1] that I use full time. And it was pure joy compared to doing the same in C.

[1] - https://github.com/BurntSushi/wingo