skysight-inc/HackerNews huggingface dataset:
I think the large source of problems for password resets is not how the flow is designed from the user perspective, but how it is implemented to handle corner cases that normally rarely occur. Such corner cases are likely to be not well though-out and poorly tested.

For example: A user with a valid session cookie for one account, follows a password reset link for some other account. Or a user generates a password reset link, logs in with an old password, changes the password and follows the reset link.

There are many such tricky cases and the challenge is to explicitly design how they should be handled and cover them with tests.
CoinBase doesn't mention it on their site, but in addition to the 1%, you are also paying the bid/offer spread. So if a bitcoin is worth 13.5 US dollars, you will pay 13.6 at CoinBase and only get 13.4 when you change back into dollars.

BitMe.com lets you deposit cash at any Chase branch for free, and you can take money out via ACH for 25 cents.

All of the ways you suggest are fine for small amounts, but if you are trying to move thousands of dollars into BTC, percentage-based fees matter.
Old debate of fast vs slow growth.

spolsky: http://www.joelonsoftware.com/articles/fog0000000056.html

pg: http://paulgraham.com/growth.html
My guess is that the statement

"I’d be happy if 37signals is the last place I work."

is very similar to:

"37signals is the last place I'd want to work"

...which is quite a polar difference from the first statement.
enrolled!
President Clinton Tells CES the World Needs More Smartphones
How long does it take Google to mark a page as a "phishing" page?
Submitted http://ddsw.fav.cc/ more than an hour ago and it's still not warning when I go to this page.
I wonder how physical security is handled. Losing a student ID is a not too uncommon for college students. Without someone checking to make sure the person holding the ID matches the picture on the ID, what is going to stop someone from finding/stealing an ID and using that to "borrow" a laptop from this machine?
Do you disagree with the actual argument, or just how they said it?
- lol.
They absolutely do! If you have watched even a single episode of What Not to Wear you'd have known that most women, especially ones with breast sizes a couple of sigmas away from the mean, have no easy way to buy a well-fitted bra. They either have to go to a fancy store to do personal fitting (may be expensive) or go to a place like VS and hope for the best.

A suitable algorithm, based on Kinect 3D models, say, would totally take this market by surprise and make a huge splash.
You aren't confused, though apparently that is sarcastic?

Windows 7 automatically logs into Messenger if you follow the default behaviour and associate your hotmail account.
The changing face of computers on the movie screen
He's gone through multiple rounds of appeals and much legal wrangling. Exactly how patient would you recommend being?
hmm, I can't change it. is it not possible at all or do I just not have sufficient karma?
Have you considered linux?
Presumably it's legal for Microsoft to publish them.
If your margin is 10% you would.
ITunes turns 12: An image gallery
Instead of pushing harder for a higher salary push the company towards more adventurous things such as the last week of each month being a "hackathon" week in the company.

If the founders have a problem justifying the cost make the "hackathon" week around using any new technology but it must provide some feature/fix/optimization to the current products.

I feel like you're not totally filling the shoes of your title because what you're complaining about is the tech stack which is what you should be making the decisions for...

If you want new technologies, you, as the lead have to push the company towards it and instead of debating jumping ship you need to ask yourself, "How do I get us away from legacy code and move towards a more robust newer stack".
>And yet, the US system is the most expensive system for what it gives...

I was making a generalized comment. As you said, the US healthcare industry is extremely regulated, which is what I believe is the root of the problem we face.

People who want a the government to control health care are pointing at a system with a ton of government interference and saying "Look that isn't working well, we must need more government."

>How do you think that affects choice?
Poorly. But they're exempt because they're also force to take all comers. It's a water fall of faulty logic and regulation.

I'm not defending the current system. I'm advocating a free market system, which isn't anything like what we have right now.
That was exactly the case at my last job. We used only a small subset of C99, primarily stdint.h.

From a technical perspective, though, the latest standards are easily usable on AIX. IBM has done a good job of keeping XLC up-to-date, and it has supported C11 since May.[1]

[1] http://www.ibm.com/developerworks/rational/library/support-i...
Some vendors only accept check or paypal since they don't have a merchant account to accept credit cards, so this isn't a complete workaround.
If you expect to have to do any iOS development (even using the C# cross over) you'll have to have a mac, which is kind of obvious.

I love the hardware of my macbook pro, but being a windows user my whole life took plenty of awkward forehead banging. Now I tend to do all of my development on it and leave my windows 7 machine relatively untouched (although I'm hooking up an external monitor to it tonight).
What am I missing here? This is what I do;
- User resets password, email link to user
- User clicks link, random temporary password emailed to user
- User logs in with temp password, system then asks them for new password.

This way there is no risk of someone somehow guessing the reset link. Even if they do, all it does is email the user, so they gain nothing...
Firstly, that can happen with fixed-length arrays or even without arrays, too.

Secondly, I don't have access to the official standard, but it would surprise me if it required VLA's to be stack allocated. That would give implementers of the language too little leeway.

In fact, I see no clear reason why the standard would mention the word 'stack' at all. A quick check of the candidate PDF of the standard seems to confirm that, but that's not the real standard, and it may be a shortcoming of the iOS PDF reader.
> the razor & blades model is ripe for disruption

Bordering off topic, but the smart people realize that you don't need to throw away your blades every time they get dull; that model is only successful because people don't realize you can restore a set of blades to service with a few minutes and some jeans.

So, you could say I've already disrupted it just in my own life, and the wider dissemination of that knowledge would just disrupt it further.
Well, Common Lisp is Lisp, Racket is Scheme, they are different. This perpetual confusion is just useless. Let's call things by their names. You don't call C++ C or php perl, right?
Can't we convert 1000kg (1Mg?) and use 50% of the energy?

Also why the gamma radiation shower?
I don't disagree that VCs are susceptible to fads and trends. A few years back, it was "We're X, but social." Then it was "We're X, but with geolocation." And who could forget the wave of "We're X, but with gamification," or "We're the Groupon of X?" And right now, the "subscription box of crap" model is still pretty trendy.

That said, the real question we should be asking ourselves isn't "Does the subscription box model work," but rather, "In which markets does it actually address a big problem?" Trends can be useful, but we need to read them with better common sense than we do.
> Net consumers are typically very happy in socialist environments, no shock there.

99.9% are net consumers when it comes to healthcare. So you're saying we shouldn't do something that makes everyone happy?

The 0.1% providers should be made happy. Apparently, despite the claims laid by many Americans who argue this, almost every other western country has managed to make those providers happy enough to not all quite en masse and leave everyone without access to healthcare.
Probably the dollar amount owing by the account.
I think you find this attitude a lot more in Europe than the United States. I see it in ZenDesk a lot too, living here in SF and having visited their offices a fair number of times.
Looks like ARM is getting to Intel!

When a company resorts to gimmicks to make its products looking better than their main competitor, you know they're in real trouble.
Type systems are, in essence, automated mathematical theorem provers designed to prevent certain classes of bugs.[1] The functional style is also a bug-reducer in that you can reason more accurately about the state of your program, because you have limited state-changing code to particular places. Certain language features like Lisp's restarts or garbage collection are bug-reducing because they give you concise ways of expressing features you might otherwise have had to implement by hand, and every line of code you write is another line for a bug to hide in.

Yes, testing is invaluable and should not be omitted. No, none of these are silver bullets that eliminate the need for testing. But it is false to say that "...the only economically practical way to reduce bugs is to test thoroughly." There are many ways to reduce bugs that can help alongside testing.

[1]: If you've only ever used C++ or Java, this sounds hilariously weak, but in languages like the ML, the type system prevents null pointer exceptions, and in Haskell, the type system goes further and separates effectful and non-effectful code to ensure you don't cause side effects where you don't expect. Even more powerful are languages like ATS, which give you compile-time type errors when you've forgotten to allocate space for a null terminator for strings.
to_hex does not seem to be in the standard library, but these will work and are rather elegant to get a short random string. Thanks, Patrick!

rand(16**16).to_s(16)
rand(16**16).to_s(36)
"Private health insurers haven't been able to run anything efficiently as long as I've been alive. My premiums go up by double digit percentages every year because "costs" keep increasing, but at the same time, insurers' profits go up by double digit percentages every year. It seems like this is simply a money transfer to health care executives."

If they could compete across state lines, this would be different. You also seem to leave out the government regulations in place, which many times hurts the consumer rather than helps (see: Obama care).

"The more private companies run our lives (especially something like healthcare), the more they will be able to dictate our choices (what we eat, risky behavior etc). Oh wait... corporations already do dictate what we eat, what sort of medicine we use, where we work, how we communicate, how we move around, what we wear...The only difference between corporate control and government control is that we actually have some say in how the government controls us because at the end of the day we control the government."

So you are saying because all of the people here on HN and in the US that want MJ legalized, it's magically legalized? That's not how the government works.

What about the TSA and all of the control they have over us? We have a say..right?..right??

"The only difference between corporate control and government control is that we actually have some say in how the government controls us because at the end of the day we control the government."

The government can send you to prison for not doing what your are told. A corporation can do no such thing. If you don't agree with what a corporation is doing..you can just stop giving them money. Is there an opt-out with taxes? or following the law?

"And the downsides to private health care: all of the above"

With private health care, you have no choice. Yes, there may be private care, but it's so expensive..only the truly wealth can afford it (see: the UK). I still want a choice.
Thurrott's 2012 software picks - Windows 8/RT (Metro), Windows, & Windows Phone
Are there any ISPs or hosting companies that accept BTC?
I think it really come down to what you will deploying on. For me (a PHP/MySQL dev) I work primarily with Unix boxes so switching to OS X made a lot of sense as my laptop shares a lot in common with the servers I deploy out onto.
Common Lisp.
Everything else is so much Lisp as php is perl or C++ is C.
SGen – Concurrent Mark
> Those are mutually exclusive, so one language can't really have both.

There are Lisp computer algebra systems like Maxima and Axiom that can be used for advanced term rewriting operations. Referential transparency, which is replacing terms with their definition, is just a very simple term rewriting operation.
I have a Mac with 16GB memory, running a Linux VM. (With that much memory I can run two easily.) I still find Linux preferable for Java development. The Mac isn't bad, but little things don't work quite right for me -- Mac keyboard bindings, Gnu Emacs (especially the font). When I want various open source goodies, I usually find that they are more readily available on Linux.

For me the biggest issue in this area is profiling. Solaris Studio is the best Java profiler I've tried, and I believe it is not available on Macs. This is the thing that really pushed me off the Mac for Java development.

Why not Linux on bare metal? VMs are convenient, and I find that multimedia, VPNs, wireless networking, work better on the Mac.
Diagnosing and Treating the Ophelia Syndrome
No, this is unnecessary. An attacker who can pull tokens out of the database already has a terrible vulnerability and can probably avoid the need for passwords altogether.

I've tested many many many many applications in the last X years and not one of them has ever done this, nor would I ever recommend that they do it.
Do any 529 plan providers have a good API?
I'd like to open some sort of savings fund for a new baby's college expenses, and, hacker that I am, I want an API I can use to extract account balances, etc. out of it.

Does such an animal exist?
Your tunnel-vision is absurd. Not everyone is interested in tinkering with the lowest of low in their projects, some people want to be able to use USB peripherals immediately with zero hassle, and have a handful of GPIO pins if needed. Yeah, you can do those sorts of things with an arduino, but why bother if the power is not a concern and the hardware is cheaper?

And yes, the power is not a concern for everybody under the sun.

So in short, development is easier and more flexible (obviously), peripherals are cheaper (for the difference between the usb adapter I got for my Pi and a wifi shield from sparkfun, I would have $75 left over for an "expensive" PSU for a Pi... I mean come on... At least with the Pi you have the option of just using ethernet if you want to be cheap, with an arduino that will still set you back more than the price of a Pi), and the devices themselves are more flexible (get tired of your project for some reason? No problem, just ducttape it to the back of your TV and use it as a media-pc whatever.).

Downsides are... worse GPIO and you need to feed it 500mA. Wow. Anyone who does not find that daunting is surely an idiot.

Nasty attitudes have harmed peoples' development far more than $35 computers ever have. Your vitriol is baffling, how could something so minor evoke this? How have raspberry pis really wronged you?
If it doesn't have to be HTML, LaTeX Beamer works well and lets you create a PDF that is portable and easy to distribute.
I'm going to use Kippt as a way to collect all the highest-quality links I've come across, with good descriptions on all of them. That collection will then be a public profile of links that I love that represent me.

The only thing I find lacking is the public profile view. It doesn't show all links on one page, but rather only shows 3 per section, and then you have to click links to see the whole section. It also doesn't show descriptions on that page for the links.

Fortunately, they have an API so you can make your own beautiful page to show all that, which I might do and embed onto my blog.
The pitch contest is for startups that are working on products that enhance the sports fan experience--broadly defined.

E.g., a pure-play video startup who has a product that could be applied in the sports vertical would certainly be eligible
Looks like it's going to be a great course! On an unrelated note, how did you generate the slides? They're very cool.
thanks; that makes more sense.
Show HN: Introducing the switch() statement : C Programming, conditional logic.
Hardware-based random noise generator
SexBots Will Satisfy Our "Sick" Fantasies
It's a currency that can topple governments.
The only way this fiddly scheme could be secure is if the randomizing information (that prevents an attacker from brute forcing the hash against all possible email addresses) is different for every token and thus stored somewhere serverside. It is no more secure than simply sending the user a random token, but has all the logistical challenges of storing a token.

So just use the token.
Get Notified in Real Time with Gumroad Ping
revealjs https://news.ycombinator.com/item?id=5025839
Man, those textual pop-ups are annoying!

ADDED. Version without the pop-ups: http://www.rebelliouspixels.com/downloads/Buffy_vs_Edward_36...
I recently purchased a 17" MacBook Pro and am in the process of adding more RAM and an SSD along with Parallels. Parallels lets you install linux or Windows alongside OSX. Meaning, they run at the same time. Alternately, you can just run VirtualBox and load all the other OSs you'd like.

Previously, I had a 17" Dell Core2Duo. It worked fine for development, but it's a boat anchor and had to go.
I'd like something in this form factor that I could run XBMC on. Any recommendations?
I'm saying both are possible answers but we can't know because the article doesn't have enough details.
I'm sure that you're aware of this (and is why you used the word "many"), but the fundamental problem with this is the assumption that you're saving when young for what you need when old. There are those of us who aren't particularly healthy through no fault of our own.

While I'm sure no system under the sun could be made universally fair, it seems particularly unfair to saddle people with vastly different costs based on purely external factors. With nearly every other expenditure I can think of, a person has a choice whether to pay it or not, or at the very least whether to pay more or pay less. If I wind up in the hospital, there are a certain number of things that need to be paid for no matter what. My employer gives me an option for a regular PPO and an HSA-based PPO. The latter would have cost me several thousand more a year.

And all of this notwithstanding, this methodology of health care payment doesn't appear to me to work for people who actually have no or very little money. I'm fortunate enough to not be one of those people at the present, so I couldn't say for sure how an HSA-based health care system would be any better or worse for them than our current system.

Of all the things I'm thankful for, being thankful that it's not my job to try to figure this stuff out is near the top of my list.
Innovation is a really scary thing for public agencies. Democracies and public bureaucracies are set up specifically to mitigate risk. Yet risk is an essential factor in the success of innovative companies, many of which are now all dealing with gov't regulations and bureaucracies (think Uber or Airbnb). Here's how New York City Mayor Michael Bloomberg put it in the Aug. 2011 issue of Fast Company:

"The public," Bloomberg says, "insists, and arguably has a right to insist, that it knows where its money's going. [They] have a very high expectation of results." He is talking about how the government spends its funds. "That is not the way innovation works. Innovation--the essence of innovation--is you don't know what you're going to build, what it's going to be called, how much it's going to cost. You cannot use public monies unless you can answer virtually every one of those questions, which is why government tends not to innovate. The public wants that accountability in advance, that justification in advance. But that's not going to work for certain things."
"stored somewhere serverside"

So you are a strong advocate of generating the token and storing it in the db.
You've heard they're not the best dev machines? Really? I find that pretty weird. Any unix-based os is going to be hands-down easier for development than windows. Just go to /any/ tech conference, all you will see are mac and linux laptops. Maybe a single windows dude.

The only real exception to this is if you're using a fully microsoft-centered stack, like windows development with C# and such. Their internal dev ecosystem is pretty good.
Most major existing industry events in sports & technology have registration costs at or above $1000 per attendee:

http://goo.gl/HoLTJ

http://goo.gl/iQIWL
WRT Dollar Shave Club - "What are they up to now? Sucking"

Does anyone have any evidence of this? I'm curious about how they're doing, I haven't seen anything online about them delivering bad news. Just because they aren't offering new products (less than a year after launch!) doesn't mean that they're failing...
Specifically, I'm curious how online marketplaces like Etsy, Taskrabbit, and Airbnb handle this problem.
I think you may be ignoring the shadow that long-standing laws cast on culture and practice.

The benefit from merging to monopoly is that you can avoid all the negative pressures that come from extreme competition. You can work 40 hours a week and not cut corners without worrying that someone who does will beat you to market. But that only works if you merge to monopoly -- two competitors merging when there are still five others doesn't get you that. And even if there are only two competitors at present, having them merge doesn't preclude the possibility that some others will spring up as soon as the ability to charge monopoly/oligopoly prices is on the table (which is why the antitrust authorities may not bother you in that case).

To get the benefit (and thus make it worth doing at all), you have to know that you can keep doing it -- that if another competitor shows up with the credible threat of breaking your monopoly, you can merge with them too. And if you can charge monopoly rents then that is exactly what would happen: Anyone qualified and willing to pose a credible competitive threat will threaten to enter the market and then it will become worth it for you to buy them out because retaining the ability to charge monopoly prices and continue working "only" 40 hour weeks is worth having to share the market, provided there are a sufficiently small finite number of such qualified people who would have to be cut in.

But you aren't guaranteed to be able to keep doing that without inviting antitrust scrutiny, especially after you become established. And if you can't be sure regulators will allow you to do it as many times as necessary then there is no incentive to start because the benefits only accrue as long as you can hold the monopoly.
Ok, this is insanely cool. This is the kind of thing I could get lost in just sitting around week after week figuring out new ways to utilize this sort of technology. About 8 - 10 years ago when I talked with the Stretch guys (they did dynamic compilation into FPGA "hard" logic and computational "soft" logic) I was wondering if anyone was thinking about a general purpose approach. An argument I've had off and on with various Intel and AMD account managers has been "What if my app doesn't use the FPU, can I turn it off entirely? Then what is my TDP? Could you give me a switch so that I could add another compute core if I didn't use the FPU? Or GPU?" Their response was Larrabe and the APU stuff that AMD/ATI has done, "lightweight" reconfigurable cores for either graphic type operations or integer operations.
Real men don't fight straw men. You're the one disregarding a well thought out, informative post as 'smug heteronormative privilege'.