skysight-inc/HackerNews huggingface dataset:
Does it mention the company name? I couldn't find it in either the transcribed or the scanned versions.
Ironic so many years after this story, there still exists a huge gap between programmers and non-programmers.

Exhibit A would be some of the Java v. Javascript conversations I have almost daily with my PM's.
Offtopic, but has anybody used name.com for domain registration? I recently found out that namecheap bans the word "hacker" (you have to contact them to get a domain manually approved if it contains that word).

That rubs me the wrong way, and I'd rather not give my money to a company that thinks "hackers" are all criminals.
You're very kind, thank you. But you are still incorrect. I cannot register a gmail myself without entering a phone number. Your "workaround" of a captcha does not exist when I try. Others are talking about country restrictions - I live in Canada, if it makes a difference.
Do you think there's any chance that security researchers have disregarded UX factors?
You can't sort the results of a view by value:

http://www.couchbase.com/forums/thread/how-do-you-sort-resul...
I wrote kernel-level code for quite a few years. There, barebones C makes a lot of sense. (I can make a case for a subset of C++ that avoids many C++ issues, including use of RAII and similar things that get you into trouble in environments where /nothing/ is free, and you have to think carefully about the teardown strategy of every single allocation).

Don't confuse "easy" with "simple". That's my latest mantra.
I consider this in the same realm as storing passwords to plain text. People do it out of ignorance until they're learn the hard way not to (or some kind soul saves them from that disaster).
Or, stretching, Bert is Tyler Durden.
I seem to remember Google offering something very similar to this that relied on scanning a QR-code on a known device? (I could be mixing stories though)
Well, nobody's going to tout "Our language was inspired by this weird, unpopular little thing that lost hard to C++" in their marketing materials, which was pretty much the perception of Objective-C among the few who knew about it at the time. Remember, in those days, C++ was king — it was basically "the programming language for grown-ups" in a lot of people's minds — so Sun wanted to encourage that association above all others, even if it wasn't really where the designers' heart lay.
We're using it for Webpop (http://www.webpop.com) and have generally been very happy with it.

We were very well aware of its characteristics when choosing our DB, and didn't go in expecting any magic Web Scale or somehow getting a HA setup with plenty of durability with just one server.

For a multitenant CMS where you want to store documents with custom schemas, need more than just a key/value store and want some capability to do ad-hoc queries against custom fields, MongoDB is a pretty good fit.
So, we're degrading QR codes to make them friendlier now?

Yup http://research.swtch.com/qart and https://news.ycombinator.com/item?id=3836935
No thanks. The last thing I want is my version control host getting opinionated about my application domain.
Exactly!

https://github.com/LePartiDeGauche/pgonror/issues/2
Good point! There is still a phishing vector of attack that we haven't solved in this release (you call it MitM, but really it's just advanced spear-phishing). We're working on several ways to solve this problem using geolocation and on-phone-login confirmations for higher-security sites, and those will be released soon.

Phishing has always been a problem with passwords, and the fact that we are still vulnerable to it is something we take very seriously. Users are, however, protected from many other forms of attack and the phishing vector is less profitable because it is so hard to do in a distributed way.
Hunting for RoR secret tokens at GitHub with Google
If you have a flat sink, you need an aerator on the spigot. This doesn't solve everything, but it's a big improvement with respect to splashing.
Tesla’s solar powered super chargers hit the east coast
Ask HN: Packt eBooks on sale for $5. What are your top 3?
Packt Pub is currently offering $5 ebooks (if you order two or more by January 3). List your top 3 Packt books below for others to see and take advantage of the great pricing.
You're right. Google had an "Open Sesame" project a while ago that used a QR code on top of a password to make logging in more secure. Doing both was just an extra pain and users didn't enjoy it, so they gave up on it.
The biggest threat to this is that it's a 4 digit code to unlocked on the phone. A stolen phone would allow access to everything. Figuring out that 4 digit code is super easy from fingerprints.

To make it more secure it should be two factor. Users enters code, scan and then the phone gives him a unique to enter.
Prepare for:

1) Much more complicated URL recognition regexp

2) Much more big Ablock Plus filter lists

3) ftnn2lhnosm.youtube

4) www.apple

I'm joking. I really don't like the new gTLD thing.
I use Name.com for registrations. I've only had good experiences with them. Nothing bad to report.
I'm sure the guys at MongoHQ.com would be able to provide you with better examples of "at-scale" setups.
Could be a coincidence, but I've been chanting that mantra at everyone who will listen after watching this talk by Rich Hickey:

http://www.infoq.com/presentations/Simple-Made-Easy
That's pretty neat, thanks for collecting all of those. I've spent hundreds of hours reading newspapers from that period for a historical novel I've been working on for a long while.

It's equally fascinating to see the parallels and the divergences in our culture.
If anyone is struggling to find Python programmers shoo tme an email. I know of a couple.
I've seen them on here. They're excellent technical posts that probably don't interest many of the main-page viewers here.

Here's Jake Vanderplas on SVD algorithms for sparse matrices:

http://jakevdp.github.com/blog/2012/12/19/sparse-svds-in-pyt...

Excellent content.
Game Theory: A Playwright on the Art of Video Games
World Startup Report: a Mission to Document Startup Ecosystems in 29 Countries
Even in the best case, knowing what the four digits are, there are 24 possible options. We rate limit the PIN to 3 wrong attempts per day, so an attacker would need 8 days to be certain to gain access to an account. It is easy to remotely deactivate the phone from a computer, so the user's accounts will be protected.

That said, this is an area we want to make stronger. Using facial recognition and other, more secure, methods of user identification are on our roadmap as important improvements.
so based on that information, you're thinking the combination of the two was the major pain point ?
Blue christian louboutin shoes
What if they just gave you a onetime warning instead?
> Feels a bit like journalism in general has gone backwards enormously.

OTOH, the article is not so much journalism as it is a parable.
Is the app's data on the phone encrypted using the PIN? If the phone is found by an attacker which can access its memory, will bruteforcing the PIN slow them down long enough?
"Code Complete" by Steve McConnell. A practical tome on how to actually build large software systems.
In addition to what bravura said, Geoff Hinton's group at UT has recently introduced a new approach to training neural networks that they call "dropout". You can read about it in their paper (http://arxiv.org/pdf/1207.0580.pdf) or watch Hinton describe it in a recent talk he gave at Google (http://www.youtube.com/watch?v=DleXA5ADG78).

Roughly speaking, dropout training provides a strong regularizing effect through a sort of model averaging that is conceptually related to the well-known bagging approach from which random forests derive their power and flexibility. Dropout training has already produced state-of-the art results on several time-worn standard benchmarks and helped Hinton's group win a recent Kaggle competition (for an overview of their approach, see: http://blog.kaggle.com/2012/11/01/deep-learning-how-i-did-it...).

I've played around with this a bit over the last few weeks, and have a Matlab implementation publicly available from my Github at: https://github.com/Philip-Bachman/NN-Dropout.
Nah, just different domains that's all.

I work for a company where our "suite" consists of 3 large components: a back-end system, a web-app, and software installed to the devices.

The back-end systems guy read mostly Java, JavaEE, EJB3.x (the better one of course), JMX, PostgreSQL (admin, performance, the usual drill) and everything that DHH mentioned.

The web-app guys read mostly front-end stuff (JS, Backbone, Underscore, MVVM/MVC/MVP technique, CSS spriting, YUI compressors).

The software/firmware/hardware guys are reading what you listed above (including Advanced Programming in the UNIX Environments, UNIX Network Programming vol 1-2, Windows Internals, etc).

Still relevant :)
We have done a lot of security research and have written a paper which we will be submitting for publication in security conferences in the Spring. We are not smarter than everyone else, and are following the work of several people who are smarter than ourselves. Everything we are doing uses current standards and best-practices that were established by other experts.

What the security community hasn't done, though, is find a way to make all of those best-practices and security algorithms accessible and easy to use for a casual user. What Clef does is wrap up a lot of the security which we all know works for a consumer that doesn't have to understand it.
This reminds me of something a professor told me in my first Calculus course that the famous L'Hospital's rule, named after the French mathematician Guillaume de l'Hôpital, was actually discovered and proved by Bernoulli. The saying is that l'Hospital bought the rights to Bernoulli's mathematical discovery in order to publish it in his book Analyse des Infiniment Petits pour l'Intelligence des Lignes Courbes[1]

[1] http://www.stewartcalculus.com/data/ESSENTIAL%20CALCULUS%20E...
http://www.tempomail.fr/ is what I have been using for a very long time. You can have it redirect to your normal e-mail address and there is a nice chrome plugin for it too.
WordPress plugin W3 Total Cache critical Vulnerability disclosed
I like this game: What if that annoyed the pants off some people?
Many, sure. All, I am doubtful of. Social Engineering is one of the key methods of introducing security vulnerabilities into an otherwise secure system. A security researcher with this in mind would have to consider UX factors at least in the context of weather or not they could confuse the user into giving away vital data. (Example: People being unable to remember complex passwords and pasting them to their monitor with sticky notes.) So usability concerns are entirely in the realm of a security model.
You seriously don't think Linus is solely responsible for Linux, do you?

He should and does get the credit for having the insight and chops to have started it all, and is the single-most important person for Linux, but today's Linux is the result of the work of thousands of programmers.
The unemployment numbers always dramatically favor people with collage degrees. Even when adjusted for age, race, gender, and medical conditions.
Thank you :). It's just a silly project for a laugh.
Easy way to add collaboration rooms to website
I had an slight-tilt shower floor in Laos. No problems with the way the water hit the surface, but there were some problems with the way that the water was draining to a point two feet away from where the drain was.
Starting a company is still not that easy in the rest of Europe, eg Belgium there are capital requirements of EUR18000 to start a company still.
I'm seeing it on my Windows 7 device with Firefox (although I'm too lazy to try Chrome). It works fine with IE and on my Mac with Firefox. My guess this is a transient problem. Something has gone wrong with PlosOne site and I suggest we all keep trying until it's resolved. Has anyone notified PlosOne? I'll go ahead and send a message to make sure they're on it.
How an amateur balloon launched from SFBA was recovered in Morocco
We've actually done a lot of consumer research and there are a few things that we think made the Open Sesame project uninteresting to consumers. The first is that it was too early and too few people had smartphones, the second is that it only increased complexity for security, and the third is that it was replaced by the SMS message as second-factor which was more broadly available and more easily understood.
It would appear at first glance that thealphanerd found the article through a link on Facebook, so the URL contains their tracking code.
Huh? (I wrote one of the JS WonRT API and implementations)
US based, for me, the form element appears, also with country code pre-filled, but it is not required. Further down there is a CAPTCHA that you can elect to complete or tick a box for phone verification. Strange that it's country dependent!
When I look at the page of the book itself

http://shop.oreilly.com/product/0636920025108.do?intcmp=il-c...

what I noticed was

> Use Autotools, C’s de facto cross-platform package manager.

Seeing the word "autotools" sends familiar, but scary shiver down my spine. After some years with maven and CPAN, I don't ever want to go back to autotools, no thanks.
At the moment we're in the good situation of having good security that's hard to use, which is much better than easy to use but broken security.

UX stuff comes after the security stuff is sorted out. Having pretty but useless security is worse than no security. Unfortunately there is plenty of security stuff which looks nice but which is broken.

None of this is any kind of comment on OPs scheme! I'm gently worried about malicious people being able to shut down all my accounts remotely. And it's a bit disturbing that a lost phone means all my accounts are now compromised - but I guess that most people save passwords anyway.

I'd like to see other people prodding at this because passwords really do suck.
foursquare pretty famously uses Mongo, and they handle a ton of data.
There's one way to go overboard. My 8 year old just asked me to hook up his PS3. I said, "Kid... time is money. What's in it for me? Every day, I'm hustling."

I think people have learned to respect me so much they don't even invite me to parties or funerals anymore. Score!
A quick example of where circular references are an issue in C++, but weak references aren't needed in other languages. Consider a doubly-linked list, where you remove two nodes from the middle, and those nodes are not reachable from anywhere else. Each node, however, still has a reference to the other:

X<->Y

In any system with a full GC, those nodes will get freed; in a reference counting system, those nodes will stay around forever.
Giving a facial imprint is very risky for the user. I think it's wrong to add this to the system and force users to give this information.

Good luck though
If you make your base password "[X]" then for logging into facebook you can use "[X]facebook" and gmail could be "[X]gmail" etc.

If I did this, I would give Paul Graham access to my GMail, Facebook, and online banking accounts -- they'd all be trivially derivable from my HN password, which he has (in principle).

No thanks.
On the iPhone, all of the data on the phone is hardware encrypted using the device keychain. The Android app does use PBKDF2-derived PIN-based encryption to store the data. A rooted device would be cracked more quickly than an unrooted one, but the brute forcing process is quite slow because the hashing is iterated many times.
What if you want to sign in to a website on your mobile?
I've heard it's a 'spiritual successor' to Hornblower. Thanks.
The laptop I have now..or had..is an HP Dv7. I missed the recall date on the Motherboard problems and it just recently died on me. It lasted about 2 years but I'd like to avoid HP's if I can. I added the last part about linux distro because its why I tend to avoid Macs (the price too), but what about running a VM instead of dual-boot?

Anyway, thanks for the suggestions!
SF TV producer Gerry Anderson has died
I consider "use autotools" to be dubious advice anyway.
Pageviews are Easy, Readerships are Hard
>3) ftnn2lhnosm.youtube

At least I'll be able to blacklist dQw4w9WgXcQ.youtube in my /etc/hosts and be able to blindly click links again.
It's a non-quantifiable scenario, whether kids or wife come first. Who do you love more? Does your wife get more Christmas presents more of your time? Does she get more of your time?

In a divorce, both relationships have failed. The base purpose of marriage is to procreate, not that it is necessary, but on some level we realize that this is truth in Western Civilization.
I feel like there are holes in this but I am definitely delighted to see people experimenting in this space; I've been feeling like passwords need to die for a while now.

Q: How do you log onto a Clef-enabled site from your phone?
Time is money, family, and self :)
I've yet to meet someone who can keep the entire complex, humongous system in their head (we're talking about a system that have been developed for 5-7 years with at least 20 smart developers where things keep changing/updated/fixed, etc). I think you're stretching that point too far.

Point #2 is more in the experience, a good developer (not necessarily great) can do this in any given day provided that he/she has the right experience. You don't know what you don't know => all others would either be 50-50 or intuition (a.k.a luck).

Point #3 can be done by "good enough" developer as well. The fact that we have plenty "good enough" software systems that requires little to less maintenance running today is a proof of my statement.

Point #4 debugging is about focus and patience. Give it to a decent programmer without time-limit and he'll figure it out, eventually.

Point #5 any decent developer who have good communication skill can do this.

I think we are guilty of underestimating "good" developer and overestimating (or plain worshipping) great developer.
I think TLDs should represent something broad. I can see anyone getting .volkswagen except the car manufacturer.
You'd be surprised. Ambition is generally seen as bad. The best description of European culture(s) is the Law of Jante: http://en.wikipedia.org/wiki/Law_of_Jante
I agree, I don't want them using my card at all. I fund them with gift certificates instead.

I've tried the two iTunes accounts thing, and it became a big problem when syncing or downloading updates.
Sharp and pointy products vs Bloated and unfocussed products
Something fantastic I forgot to mention about Hornblower: I'd read several of the books, then picked up "Life of a Seaman", the autobiography of Lord Admiral Cochrane (one of the historical figures Hornblower is based on) and discovered that several of the episodes from Hornblower actually happened and were detailed in his journal. It's odd to read something assuming it's fiction before finding out it's fact.
"C/C++ are the building blocks for all these other languages"

Not necessarily. The SPARK compiler was originally written in Ada. Python is moving towards a bootstrapped model with PyPy. Lisp compilers have been written in Lisp. There was a Perl 6 interpreter written in Haskell. The HaXe compiler is written in OCaml:

https://en.wikipedia.org/wiki/HaXe#Compiler_implementation_a...

"your argument seems to suggest that it's impossible to write critical systems in these languages"

Obviously it is not impossible, given how many such systems are out there. It is just scary.

"what would the alternative be?"

Well, these guys may be on to something:

https://en.wikipedia.org/wiki/Altran_Praxis

"Surely if this is the case we can't use Linux as it's written in C"

Would you trust your life to the Linux kernel? Would you be comfortable with that? I still see the occasional kernel panic; how would you like a kernel panic that sent your car swerving into a tree?

"we can't use Java because it's C++ based..."

...or we bootstrap our compilers and programming systems, and let C++ fade away (as it should). What stops us now is the volume of code, but we could go a long way by just not writing more C++ code, so that the problem does not continue to expand.
Haha, I definitely don't take that as being an ass, it's an important question and it's part of an area that we're trying to improve.

We have a section of our website clef.io/lost where you go when you lose a phone. It asks for your email and PIN, then sends an email to you confirming the deactivation. If you click on the link in your email, the phone is immediately deactivated. If you open the app and enter your PIN, the deactivation is canceled. We want to make sure that an attacker has a hard time deactivating your account, but that you are able to quickly deactivate it when you need to.

In the long run, we do not want to rely on email, and so we will need to move to a paradigm of trusted computers or other methods of valid-user-identification.
Hi, I'm building something just like this called bip.io, throw away email addresses and identity protection are a 'feature' of a wider messaging API (its a glue platform, similar to ifttt or zapier or engineio). We're approaching a stable beta. If you'd like to try out the service, follow us on twitter @bipioapp and we will notify when the gates are open. Realistically about 4-6 weeks away, just putting it out there if you're looking for options...

(oh, and you can use whatever domain you can manage MX records for - its preferable in fact)
Do you use Folders or Apps to Organize your phone? Go
Bowei here. I just want to say major thanks to 500 Startups, StartupWeekend, StartupDigest, Dave McClure and Brad Feld for making this all happen!
Philips + Daniel Lorch announce OLED Desktop Lamp
To be fair, most people already do this anyways by using passwords multiple times. There are also two memory banks in a yubikey so you can set two different keys and alternate them using the schema I put forth above. On top of that, you don't need to use the site name, it is up to you what to chose, you can use something incredibly simple for each site and a simple password turns into a not so simple password.
No mention of depreciation? Plus ça change...
I'll give one for old-school: heap fragmentation. You can't fragment a stack, block allocators have predetermined fragmentation behavior, heap is "who knows" It is possible to malloc() and free() for a very small net-total, and yet be no longer able to allocate a contiguous region that is a significant fraction of the heap.

With a modern VM system, it's not quite as big a deal since your heap is effectively infinite for many applications. It is still an issue on embedded systems, and was a problem back in the day too.
Most Qualia are rather well understood an example taken from wikipedia "the perceived redness of an evening sky".

You can talk about why they sky has 'redness' but subjectively what's important is the sensors in your eye, and how what happens to the signal. If you look at the research, people have tracked what causes each receptor to fire and then followed colors back though the optic nerve. So, really the subjective feeling is a signal we have tracked what more do you want?

Often when people say science can't explain X, really what they mean is they can't follow the explanation.
Lenovo Thinkpad Edge430 looks like a great deal.
This is a feature which will be out with our next release.
When we detect the visit from a smartphone, we change the QR to a button, and when it is pressed we redirect you through the app, where you verify your PIN, then redirect you back to your browser where you are logged in.
Google Extends Free Gmail Voice Calls In The U.S. And Canada Through 2013
I'm not using this, for the same reason I'm not using FB to log in everwhere - I don't want anyone knowing every site I log into.

This is one of the big advantages of BrowserID/Persona, no individual site controls anything.
Maybe you can contribute some of your ideas to libsvm?