skysight-inc/HackerNews huggingface dataset:
I'm not convinced DuckDuckGo is such a great search engine. If I do a search for "Newtown", the first returned item was for the Newtown in New South Wales.

A search engine which knows that I live in the US and am interested in things in the US can more easily figure out that the Newtown that I'm interested in is the one in Connecticut in the United States.

Everyone tends to talk about the "filter bubble" as if it were always a bad thing, but editorial decisions are a good thing. To say that you always have to "teach the controversy" means that you fall into the trap that newspapers in the US have fallen into, where they feel obliged to give equal time to people who deny global warming, or people who try to argue that you need automatic weapons to hunt deer, or people who claimed that tobacco doesn't cause cancel, as people who have the backing of science behind them.

More positively, is the fact that newspapers to refuse to print stories about the moon landing being faked, evidence of the "media bubble"? If so give me more of it. I want more editorial filtering by the media, not less.
That's like saying we should assign real estate to the public domain on bankruptcy, because people will still develop land even if the can't liquidate that real estate in bankruptcy.
When I worked with people who wrote hardware crypto for a living, the book they recommended was Brush Schneier's Applied Cryptography [1]. It's __excellent__. It's the best technical book I've ever read. It's more readable than the Perl cookbook.

The first third (half?) of the book is devoted to explaining (not with code) the various complex interactions between parties who need to trust one another -- lots of stuff on key exchange, and then only later on the different types of ciphers (block vs stream ciphers). The examples are clear and well-written, and VERY memorable. Bruce explains very well what the pitfalls are in each scenario, and all the ways in which malicious attackers can try to break your trust.

The second half of the book is implementation of most of the algorithms in C.

Other books may cover the topic be better, but I haven't read them. (Sorry.) I like that Applied Cryptography gives a good noob-friendly introduction, and builds from there, yet also has depth and source code.

1: http://www.amazon.com/Applied-Cryptography-Protocols-Algorit...
Just checking my email now. I got spammed as well. They certainly scraped emails from GitHub.
Did you sign any agreements?
Twitter Suspends Anonymous’ Most Popular Account, @YourAnonNews
> 198. In the United Kingdom, it is a criminal offence under the Regulation of Investigatory Powers Act 2000 to refuse to hand over an encryption key when required. Care must be taken, however, to ensure that suspects do not seek to evade the provision by utilizing several layers of encryption and multiple keys to protect different data sets. For example, a setting of TruCrypt, a common free encryption tool, allows a suspect to encrypt a hard drive and create two passwords: one for the “clean” drive and the other containing the incriminating material. This can be circumvented by ensuring that the forensic examination of the hard drive takes into consideration whether there is any “missing volume” of data.

If they had actually installed TrueCrypt and created a hidden partition or read the documentation, they would see that the other partition lies about space usage to prevent its existence from being provable
and since FSA maximum got cut and HSA maximum increased, it makes a lot more sense
> do not write a 100 page business plan does not mean don't write it at all

Who advices against a 100 page business plan? Is there something wrong with it? (besides spending too much time on planning?) if you could write 100 pages about your domain, wouldn't that be a good thing?

As a foreigner looking at the US I sometimes get the feeling a lot of SV startups don't work with a business plan at all, is that customary?

Shouldn't any startup at least make an 8 section business plan? (summary, idea, team, marketing, business system / organization, schedule, risks, finance).
Ask for Criticism
I don't understand where your malware remark comes from. I've visited his website (albeit with noscript on) and it looks a lot more readable than your average news site. Seems like a low blow to attack him over how the website looks, especially when you mention you were surprised it didn't serve malware.
Those problems are the creditors' problems, and it matters not a hoot in hell how many billions Kodak spent previously--look where they are now. Better to make the world a better place than try and help some creditors recoup a percent of their investment.

EDIT: It doesn't matter to anyone who isn't on the Kodak board or a creditor that those patents aren't being wrung out for every penny they're worth. Let's not pretend that to everyone else in the market free access to those ideas wouldn't be somehow a preferable state of affairs.
I think when most people ask for "private companies" they mean cheaper, less intrusive security theater, in the pre-2001 vein.
Qt 5 Launch Demo [video]
I care. Or well, I care if there _aren't_ tax breaks for this. People who complain about this being a PR stunt or driven by self-interest are missing the point. If appeals to self-interest are what it takes to get people to do good, then we should appeal to people's self interest and applaud those who give in to those appeals.

This kind of dignity just doesn't apply when it comes to solving certain problems. I doubt the kids with new opportunities in Newark, or the people without TB or Malaria in Africa give two shits about what motivated the people who helped them.

Edit: One other thing worth noting is that tax breaks for charitable donations in the US are actually a really, really awesome thing for the government to do. It's basically Uncle Sam saying "yanno what, we understand that there are certain things that government doesn't do well, so we're going to approve you diverting some of your taxes to these other organizations who do it better."
If you think "I'm moving the camera on this tripod" it suddenly becomes very natural. It worked for me anyway.
The idea, from what I understand, is that a 100 page business plan is ultimately wasted time as a good chunk of that will change very quickly. So rather than writing 100 pages of, what will inevitably become obsolete, you should write a shorter one and focus on actually creating the business.
McDonalds fried for serving spam
I don't think its dismissive, The truth is Scala is _not_ complicated. People can do complicated things with it, but in general the language poses no real barrier to entry. Now the second point you bring up is more of an issue that I run into at times as well. Where I find a solution to a problem that presents itsself as the "Scala" way of doing something, and After i close my browser and go home for the day I forget about why I did that and show up the next day staring at magical Glyphs on the page that appear to work ( ohh i needed :>> not >:> ). To solve that problem you need to stop doing things you don't understand and instead take the long way around and write out function names instead of using the shorthand operators that your provided with. Once you get used to a library you will commit the operators to memory and you will know that :: is cons and ::: is list append and you won't have the "what did I do here" problem nearly as much
Android applications with Ruby
Nearly impossible. Every single sentence in the post provides evidence against that theory. (Dave "Insists on using a home-brew script" / use of "Homebrew" vs "Standard solution" / Dave's "primary hang-up" became clear after he "immediately balked" / Ridicule of Dave's code is "sincerely appreciated", etc). It's so over the top that the entire post may just be an elaborate troll.
New Years Lucky Foods to Start 2013 Right
You should definitely add some short video or other type of media to quickly showcase the whole process.
Dave's mentality about having hashing that is unpublished is also known as "security through obscurity". Relying on the fact that nobody can see your source code. That's generally known to be a poor strategy.

Ironically, if he would just substitute bcrypt for sha1 in his function, it would be a great crypt function!
Very nice. It's good to see a lot of rich folks, both young and old (Buffet, Bloomberg, Gates) donating their money. When you're young it's all about accumulating as much money as you can from others in the form of businesses. Then as you get old, you start asking yourself what good all that money is when you're going to rot away in the ground like everyone else. After you win "the game" and enjoy the prize, you might as well disperse it. No use holding onto green paper if it doesn't change the world or make it better. At least Mark, at his young age, will get to see his donation actually used over the next few decades.
Main discussion at https://news.ycombinator.com/item?id=4942739
"Where did do-no-track even come from?"

Well, the argument from the advertisers is this: they have no idea whether or not people want to be tracked, so they don't know when it is not OK to do so (i.e. they are claiming to be autistic). Maybe some people really do want to be tracked and given advertisements that are more relevant to their interests, according to the advertisers, and so having browsers block tracking systems would hurt those users; also, they like to remind us, invasive advertising funds the web (but I have my doubts about that point). DNT is supposed to give users a way to opt out of invasive advertising that does not involve simply blocking ads; we are supposed to accept this compromise, because otherwise we'll just be in another arms race (which I suspect we will win, given how effective ABP is at blocking ads).

The theory is that the industry can self-regulate, because we are holding the Sword of Damocles over their heads: we already showed them that we can block pop-ups, pop-unders, hover ads, Flash ads, Java ads, and the numerous other things they came up with. We also showed them that we can win an arms race, by making spam filters so effective that the volume of spam actually began to decrease.

Of course, for DNT to work, the number of ABP installations would have to spike whenever the advertisers prove that they are not acting in good faith. Which is what they did when they tried to claim that DNT meant users don't want to see targeted ads, but that it was still OK to collect tracking data. To me, that suggests that DNT is already over and that we need to finish the game by making ABP a standard feature.
I wonder if someone had it backwards? That is, use the "main" volume for your secret stuff, and show the "hidden" volume for plausible deniability? Because I agree it wouldn't work the other way around.
So this is a little off-topic, but I read an article the other week that i haven't been able to shake about the number of people that have died on Everest and whose bodies have never been retrieved (warning, morbid and slightly graphic):

http://sometimes-interesting.com/2011/06/29/over-200-dead-bo...

Just a reminder that those little dots are people who are taking a very real risk by attempting to reach the summit. I'm not sure if I'm envious of their drive, or if I think they are absolutely crazy.
Is this good or bad?
Does Firefox support H.264 on other OS like Mac or Linux without flash, too?
Using Chrome Devtools to get 60fps out of a juddery snow animation
Apple makes the left turn at Albuquerque
So the TSA is like some kind of rogue AI just "tryin' to survive" - except that unlike an AI, it's incredibly stupid on a massive scale.

Doesn't bode well for our chances of fighting a real intelligent AI when it finally creeps up on us.
I questioned their commitment to Python since there have been some commitment questions raised about IronPython, SilverLight and such. There were bugs and a "alpha" quality to the management tools that were demoed. The presenter wasn't skilled with Node.js and replicated a SQL statement with 50 lines of code. I felt like there's a "Me Too" attitude with Microsoft and they are struggling to figure out how to deal with OSS.
That's a poor example. Patents are almost always way more broad (and far-reaching) than real estate holdings.
I couldn't find it because I couldn't comprehend the sheer size. I came to the the realization that HUMANS ARE TINY, no really, we're insignificant.

Thanks for the pointers, never would have found them.
Wow. Wow. I thought their goal was to create a searchable repository of objective answers, not spam it up with useless bullshit.

In terms of nerd culture, I guess image macros are the new version of endlessly quoting Monty Python, except the internet memes weren't even funny the first time.
Cartoon about current events and the holidays
Export, Download and Backup Instragram images
Not really.

If you throw methods and functions at everything all you are doing is adding the processing overhead of the entry and exit from the method or function. These are not magical entities. There's a time, a place and cost to using them.

Having come up from assembly and, in general, low level coding, one becomes very aware of what is being created behind the scenes. Unless something like this contrived bounds-check test will be used multiple times across a module or modules there's no reason whatsoever to add the overhead of entering and exiting a function for a simple couple of if/else-if/else statements.

I see this all the time. Everything has to be an object and everything has to be a class with a pile of properties and methods. No it doesn't. Massive projects --critical projects-- have been done over the years without any of that. Be careful not to engage in creating a monument to a coding paradigm rather than a tight, fast, practical and sensible solution to a problem.
(At least) one of the WBC member's twitter accounts was hacked. If Twitter determined that the new, illegitimate user has the same IP as the hacker, they might have disabled the account as punishment for ToS violation.
"the $199 Kindle Fire HD 7-inch offers much better value than getting the $329 iPad Mini, unless you need an app that's only available on the latter."

this sentance made me want to rush out and buy one, but I'm curious on how it compares to the also $199 Nexus 7...?

it seems like the nexus 7 is still a much better option.
Just because a company offers a service for free does not give it the (moral) right to try to sneak in changes to what you signed up for as a customer. Unfortunately, legally they can pretty much do whatever they want as long as they include enough fine print that nobody ever reads in the ToS. I think you are arguing from a legal perspective, which you're absolutely right about; I'm talking about "the right way to treat your customers" perspective.

If I as a customer pay any amount (including $0.00) and agree to the terms of service, the company should honor those terms, or, at the very least, be forthcoming with how they will handle my data.

The reason people are angry is because:

a) They didn't have any inclination of how Instagram will try to monetize. I think you are giving users way too much credit in how these startups work (ask your non-tech-savvy friends how Facebook or Google make money; I guarantee you will get blank stares). The customers who joined before Facebook took over signed a completely different set of ToS. Again, there is nothing obliging them legally to grandfather these customers, but it's not a nice thing to do "Thanks for the ToS. Btw, Facebook took over, so good luck!"

b) They tried to sneak in the changes and got caught. Nobody likes to have stuff done behind their back, so a big announcement with enough lead time to switch services would be nice. I don't use Instagram anyway, but I think this applies in general in how to treat your customers.
This is absolutely something we're working on right now. Both a 'how to make a coursecraft course' course, and a landing page video are the first things on our mind. Thanks!
Does inverted mean 'move in the direction you want to go'? I thought it was the other way around.
Intellectual property is not the same thing as physical property. They serve entirely different purposes.
Wow...not sure how I completely missed that. But I did just hear the sound of a "whoosh" as the original thread went right over my head :(
That CEO is Kevin Systrom, my peer because he is a programmer and entrepreneur. Your whole argument is baseless. He wrote Instagram with his partner Mike Krieger.
McKinsey's Starting Up [1998]
I'd recommend taking a look at GWT - it is pretty much for your exact situation and works very well for that. You will still need to convert from Swing to HTML elements, but if you have done any sort of separation between UI logic and Swing itself, this is usually not too bad.

This way you can swap over your existing java apps to one of those fancy HTML5 clients you're talking about. ;)
> It's really hard to say.

I think most folks here have missed it so far: They had shitty management. For god's sake, they hired Pat Russo as President and COO. Hilariously, Lucent hired her back as CEO; her performance was so miserable that Lucent had to sell itself (Alcatel bought it).

Let me repeat that: Kodak installed a top-level person who later killed a company that invented the transistor, solid-state laser, Unix, and information theory.

In another anecdote: Through a circuitous route, I got involved with a presentation to George Fisher (Kodak CEO) around 1996. They were looking for how to allot their $400M research budget between old-fashioned silver-halide films and digital photography.

Suffice to say: They absolutely saw the writing on the wall and were pouring money into the digital imaging revolution. They had very serious engineering talent, which brings me to my original point: Their management sucked.

Edit: Search for Kodak on the list of all-time worst CEOs here: http://www.businessinsider.com/the-worst-ceos-in-american-hi...

(Side note: Guess who is Lead Director of the Board at GM? Just how badly do you need to fuck up in the corner office before people go find someone good?)
First release candidate of KDE Software Compilation 4.10 released
How to Clean Makeup Brushes | Clean Your House Today
God forbid that we lose the paladins of security that are the TSA representatives!

Given the odds of actually needing them vs. the continued inconvenience of travel, I'll go with the convenience every time.
Samsung will patch malware exploit affecting Galaxy S III and Galaxy Note II
You trust a private corporation to strap you to a flying hunk of metal, but not to ensure your safety? Sounds logical..
The main problem here IMO is that this thing will be used to store passwords for a longer period of time than anyone will spend bothering to break it now. So you store your entire password database this way, then two years from now you get breached, and both your database and your code gets exposed.

Then, you might benefit from nobody wanting to bother to spend the energy to reverse-engineer your one-off GoofHash(). But, then again, maybe not. Maybe the fact that all of the passwords have been effectively hashed using single iterations of fast trivial algorithms like SHA1 and MD5 will mean that a ton of your users' passwords could be calculated in a short period of time.

In that scenario, you're gambling instead of relying on battle-tested approaches. Maybe the gamble will pay off, probably it won't, but when the battle-tested approaches have been examined by a lot of really smart people and found to be solid, why not use them instead?

Or, put another way: you're going to have to play a game of dice against Death. You have a choice between playing with a set of dice that thousands of people have rolled over and over again and found to be fair so far, or a set of dice that some dude just rolled for the first time a minute ago and declared to be fair. Which do you choose?

edit: I am an idiot. If someone gets the code and DB, they won't have to reverse-engineer anything; this is just a fast MD5/SHA1 combo, a bunch of passwords could be brute-forced in a short period of time.
I flew yesterday and found a rifle bullet+cartridge on the "secure" side of the TSA checkpoint. Yet somehow the gift-wrapped paperbacks in my checked luggage were deemed suspicious and unwrapped. Useless fools.
There are good private companies and bad ones. A good company is going to cut costs where costs need to be cut without sacrificing the quality of the product/service. I'm sure there are a number of good security companies that would provide excellent security, and do it cheaper.
My gut tells me no. If your password process is to take a string, get the MD5, then call bctypt on the MD5, then you are essentially doing the same as calling bcrypt on the string.

If the USER takes a short string, and MD5's it then sets the MD5 as their password then it is more secure, but that is only because it is a longer password to begin with.

If I'm wrong I'd be interested in knowing why.
Yeah I'm struggling to determine if this really is a big step. I'm not sure what the difference is between "Firefox Nightly" and regular old Firefox. But honestly, most browsers support H.264/MPEG-4 AVC at this point(especially mobile). I would really like to see this become the primary codec for streaming web video. It has excellent compression ratios, much better than webm or flv and it's the perfect encoding type for HD videos.
What's wrong with that? They failed to monetize their innovation now the rest of the market should have a chance.
I have apple to thank for not making this annoying. I didn't get what all of you were talking about because the movement was normal/intuitive to me...
The only instance in which homebrew password security isn't wrong is if you are actively involved in research and experimentation, destined for publishing and peer review, into better security methods.

We don't publish security-related algorithms to make them stronger. We do it to weed out the weak, and it is remarkably effective at doing that. If you're not confident that your algorithm could survive in the open, then chances are it can't.
At my university there is a course on entrepreneurship, and this small book is the learning material.

I feel I have learned a lot about planning for a startup from this book. Some things that years of reading HN posts have not taught me.

It sort of led me to believe starting a business without writing a business plan with these 8 chapters (so at least ~8 pages) is a fools errant, and at best is taking needless risk.

Is there anyone who has experience with writing a good business plan before going into business, is there a sort of business that just wouldn't benefit from this at all? Why?
Facebook serves their own ads, so blocking servers won't help.
"How to make a coursecraft course" course. This would be gold.

Sidenote -- the draft -> publish mechanism is very unintuitive.
How Patio11 built a product business (part 1)
I use their medical imaging software daily, and its so awful. It requires IE6 and is a bug ridden usability nightmare. I hope no one has bought this part of the company, although I suspect Carestream Health or some such crown have.
Doesn't help nor hurt. (If for one reason or another bcrypt would be unsafe for short input strings then every implementation would already automatically apply the needed preprocessing step)
As an e-course creator, some quick feedback:

* My very first question: What's your cut? Have a FAQ page listed prominently.

* Have a public, no-login, sample course so I can see what it looks like end-to-end. How are courses branded?

* How can I access my customers, esp. ones I refer from my site? Do I get an email list? Will you be sending them info on your own mailing list?

* Can I sign up with Facebook/Google/Twitter (I don't want yet another account)
This is true of almost every government entity.
That's what I was attempting to sarcastically point out :)
Learning Functional Programming without Growing a Neckbeard