skysight-inc/HackerNews huggingface dataset:
I was expecting some insight about architecture or city planning, I assume that others just aren't as interested in life-affirming stories as learning about the world around them.
interesting thought: that the public ascribing events to incomprehensible forces is no better than cavemen inventing weather gods

never thought of it quite like that before
Developer of Kippt here. If you have any feedback related to Kippt, we would love to hear about you. We're making some pretty big changes to Kippt now and they should fix some of the most requested features and add more use cases.
Depends on the flavor of SQL. But also, might not be a totally missing where clause, but just an incomplete one.
- WOW. 1st of all, thank you for the response. I really appreciate it. So do you think that these companies will always be the best? Always be tech giants? Also do you think the best thing for startups to do is to get money from rich friends rather than get into an incubator's program? I will really like your answer on these questions.
or Austin... or Portland...
Kippt is quietly growing to be Pinterest for men and women who like to collect useful things.

I love this comparison because it's essentially Delicious but we've gone full circle to comparing a Delicious-like service to the much newer Pinterest ;-) What's old is new again! Hopefully they can keep up the quality and speed in a way Delicious eventually, and sadly, failed to maintain.
Hopefully this might mean BART runs past 12.

This is impossible. Unlike NYC's subway, there is not a third set of rails (in enough places, at least) to keep the system online 24 hours a day, while being able to perform track maintenance.

Washington DC's subway is the same way and will never be a 24 hour system.

It would be a better use of time to invent a teleportation device, than to wish that many of the country's subways ran 24 hours a day.

EDIT: typo
127 startups founded in NYC in 2012
I'd disagree that the order of those is irrelevant. Far and away the two most important ones are `Price' and `Community Size'. If it cost three times as much, the RPi wouldn't have been such a hit; if the community of users was tiny, it wouldn't matter how cheap it was because it wouldn't have critical mass. The Raspberry Pi managed to get out cheap enough and with enough support to make it a runaway success, which is why we now face a glut of similar machines.
> Republicans are anti-public health care because public care sets in motion a process that moves care decisions into federal bureaucracies, which is absolutely a problem that Canada and the UK have.

I thought that it was supposed to be state bureaucracies, rather than federal? Isn't that why states are supposed to set up their exchanges? (And the feds will only step in if they don't?)

Regardless, republicans say a lot about wanting a small government that gets out of the way, but their actions speak much, much louder than words, and they are not aligned with the "small government" mantra.
"In all fairness, I do not remember "the auto industry" almost bringing the whole capitalistic system (and with it our Western world) close to a grinding halt, according to what we were lead to believe, in the last 5 to 10 years"

Their finance departments were used for much more than car loans.
Release the kraken – 2,000 years of tall tales
Agreed, well written.

Moving to SF from Austin for a bit (before moving back), I have no idea what people see in this place. SF weather is pretty terrible, nightlife sucks and things are overpriced.
There isn't a 37 signals "voting ring" but pretty much we see about a blog per week from them of extremely low/general quality. Often they are of a lifestyle/why we didn't go big and why we are actually better than all the big IPOs changing the world nature. I mean this post boils down to "I love my company (that I own, not that I work for)". I think even if PG posted a blog so vapid, "I love Ycombinator, I can picture working here for years", even he would get a bit of fire. I certainly hope we aren't going to be seeing these vapid posts for a decade or more from 37S. You could randomly select a book from the self-help or business section of a bookstore, select a random page, and have a good chance of getting something more insightful than a standard weekly 37s post.

I seriously have nothing against them, I wish them more success even: just not success getting to the front page here because frankly they don't talk about interesting algorithms, technologies or business strategies. They are incredibly boring. No mobile, no Google glasses, no new computer game, no crafty actionable patio11 strategy, no raspberry pi hack, no programming language hack, no excellent presentation, no struggling story of success, no rejection and comeback, no scaling of servers, no clever command lines, no new SSH shell, no browser plugin, no investment philosophy, just "I love my business".

75% of their posts are simply not HN-worthy and there isn't a voting ring but there is probably a bunch of social contacts who are up voting this. Please just subscribe to their twitter or RSS because their weekly show here is frankly tragic and they should cut down to 1/4th as much and spend more time with their family.

Edit. Just to note I own a DHH book, so I will pay for the writing of this guy when it's actually worth it. I'm just saying this blog stuff isn't even worth free.
Why can't you stop making rhetorical arguments? Please, just say why you think something is good without attacking people who have a different point of view. Reading the sort of polemic above is exhausting and confusing.
#Start a password reset

@user = User.find_by_email
@user.update_attribute :password_reset_nonce, rand(16 ** 16).to_hex
#mail them the password reset email

#Look up a user for a password reset

@user.find_by_password_reset_nonce params[:password_reset_nonce]
#if nil, above line returns random user on some databases. Oops.
session[:user_id] = @user #Logs in user
#We assume if they know the nonce that proves they own email.
redirect_to passwordReset_url

I've elided additional code which might theoretically be used to make the nonce expire and to prevent re-use for brevity, but it's possible that neither of these measures would fix the issue.

Bugs like this one always make me think "There but for the grace of God go I."
But that would be making your code dependent on a particular feature of a particular compiler. If you then want to port your code to Windows (lots of open-source code runs there too), you'll have to deal with the problem again there. If you wrote the code with an explicit loop, it would just work everywhere.
Hah. I spent seven years of my life in Seattle that I want back. The weather and the dating scene up there made me want to stab myself in the face.

I will say this, though: I never thought Seattle was affordable until I moved down here.
VCs Think My Boobs Need An Algorithm
I can't speak on behalf of FileRock, but I suspect the following, based off of the blog post you linked:

While the PBKDF2'd password CAN theoretically be snooped (if this wasn't wrapped in TLS, it would be trivial), the actual password cannot be calculated from the derivation.

So yes, an attacker who listened to your transmitted PBKDF2'd password can theoretically access your encrypted files from the server. However, if they could snoop, they could have just watched those encrypted files as they came across the wire.

The client-side encryption is still just as effective. As far as I can tell, your data would still be safe.
Unfortunately, those same studies (you're referencing a Dun & Bradstreet study with that 18%) show that debit cards with a VISA/MasterCard logo on them increase spending just as much. It's all about the lack of transparency, i.e. it hurts less to pay with plastic.

I can't find an actual link to that study, unfortunately, but here's an article based on the info in that DNB study: http://seekingalpha.com/article/20333-guide-to-credit-cards-...
We actually started out with a fully fledged system, however we needed to drastically simplify things so we cut back quite a bit :) Had some help from some awesome folks and we got moving! If anyone has ?'s let me know, we've bootstrapped everything so far.

https://teelaunch.com
Use Jekyll, SCSS, and CoffeeScript without plugins
Being a Decider Takes Its Toll
"Nobody gives 100% raises every other year, but the market as a whole seems to be quite happy to do exactly that."

100% raises every other year? I should be making $30,720,000 a year by now! Gonna have to have a chat with my boss about this outrage!
Aside from imo.im, there's also plus.im [1]. I don't consider it better than imo.im but, you know, options.

[1] https://plus.im/
I recommend reading about the Fun Theory:

http://lesswrong.com/lw/xy/the_fun_theory_sequence/

> Fun Theory is the field of knowledge that deals in questions such as "How much fun is there in the universe?", "Will we ever run out of fun?", "Are we having fun yet?" and "Could we be having more fun?"
Currently in Color
It is very pleasing to see companies like heroku publicly thanking (we even got a blog link here) the security researcher that initially reported a vulnerability. Hopefully, we'll see more of this in the future.
Nobody ever gets password resets right. They're #1 in our list of 7 Deadly Web App Features. Even if you think you understand your password reset, and can fit all its workings in your head, I recommend you go look at it closely again.
Nice! I would love for computers to be more of a commodity!
Excuse my ignorance, but the prices for this event range from 340.00 - 525.00. Is this typical pricing?
If they want to be able to pay for it, why not buy out the land, build a cut and cover subway extending south from the new central line, and profit from the increased real-estate value around the subway. It worked for Manhattan.
Raspberry pi is helping people build cheap netflix settop boxes. ... edit: maybe I'm jaded. We've got about 4 totally idle raspis at our hackerspace that have been donated by people who have no idea what to do with them, but bought them anyway.

I'd agree with that, based on my own personal experience. Of the several people I know who have them, half have no clue what to do with it, and the other half are using them as tiny media centres. There's definitely not much hardware hacking going on.

And I can understand it, to be honest. I can't think of a good use for one that isn't already covered ably by some other computer I have. Media centre? Xbox plus external hard-disk does the job. Small *nix box? Better off using my MacBook -- it's got everything built-in.

The best idea I came up with was a mini backup server connected to my router that pulls power from its spare USB port, but even then, it's easier just to plug in an external HD once in a while, or dump things onto one of the SD cards I have in rotation.
Well, you educated at least one person :) I will stop calling Alexandria DC. My dad lives there, but I tell myself he lives in DC and not NoVa.
Ah, the age old "tort reform" line. Haven't heard that one in a while.

Your stats about Canadians is total BS.
Disclaimer: In Employee Benefits in Canada.

Canada's private health care insurance is very broad, and while you aren't necessarily incorrect about anything you are only giving part of the picture.

The "Employer sponsored" extended health coverage you are referring to is Group Insurance. It is a form of insurance that can be offered to all people aligned to an entity (employer, trust, association, etc) that removes the requirement for personal health questionnaires and medical assessments. The coverage you are offered by your employer as "mandatory" is guaranteed to you so long as you remain connected to the entity in question. There is a huge advantage to this and this is the reason it has become the de-facto standard for private insurance in Canada.

Of course the trade off is that the entity qualifying as a "group" needs to have an overwhelming percentage (often 100% if it is small) participating in the plan to mitigate the risk. Insurance breaks down if the only people buying it are high users.

That said, Private Insurance (i.e. not Group) is most certainly available and affordable in Canada. With private insurance however your rate is going to be based on your own individual heath assessment and life situation. That means that while your Extended Health rates might be lower, as a single 30 year old male your Life Insurance rates will be higher than a Female's, for instance.

Overall, for a majority of people Group Insurance has the benefit of spreading the fluctuating lifetime rates out so that they are predictable and more equitable. You aren't going to be 30 forever, after all.

People can and do waive their employer sponsored insurance all the time (with the exception of participation minimums). In addition, employers have started to introduce "flexible" group insurance that allows limited plan choices, based on fixed credits.

Not much beyond that is fixed in these group plans, so the variance in plans, costs, and overall benefit to the employee from one employer to the next can be huge. It is an effective enticement to have a good benefit plan, hence the interview question. There is also nothing at all forcing an employer to offer any extended coverage.

Personally, I think Canada is right on the money with regards to how we handle private health care services and insurance. Keep in mind that self management also presents a fair amount of improperly covered people. People are simply too ignorant of the situation. At least under an employer sponsored plan a trained professional is designing a plan that meets as many of the needs of the employer's workplace as they feel is required.
Well that puts a higher price on stolen student id cards!
The ultimate list of (online and physical) stores accepting bitcoins is https://en.bitcoin.it/wiki/Trade
Any good reference to look at in terms of best practices for password reset ?
This article is actually worth reading. It's actually written by somebody who knows what they are talking about.

"Buffy vs Edward remix was mentioned by name in the official recommendations by the US Copyright Office (pdf) on exemptions to the DMCA as an example of a transformative noncommercial video work."
It's interesting how differently Django handles password resets - no nonce is generated.

Instead, the user is emailed a token that's just her user ID, HMAC-signed with the last login date and a secret site key.

You can't generate valid reset links without knowing the secret key and you can't tamper with the one you got because it's HMAC-signed. By adding the last login date to the HMAC you make sure the link can be used only once. After a user resets her password, the last login date is updated to now so the link is no longer valid due to broken HMAC.

I like this solution because it doesn't rely on storing any state anywhere between requesting the reset and completing it.
It's the "if nil, above line returns random user on some databases" I'm curious about. What databases behave thus? It's a very problematic behavior.
Rick from Comprehend here:

Comprehend isn't a BI tool. If all of a company's data is well-structured in a single database, with a non-changing data structure and without missing or null data, then it's easy to use BI tools like Tableau, Spotfire, Excel, etc.

But this is not the case in the modern day enterprise. Instead, there are dozens of different data collection systems, with different and changing data structures. This is what Comprehend's core technology was built to handle, in real-time.

In order to get similar functionality, companies are typically relying on teams of programmers to manually write and run scripts over and over again. Or, they're trying to put in place data warehouses, which rarely contain everything required and are often out of date.
There is a reason most of the world's highly trained technical people immigrate to the USA. Because they get paid more money.

If you pay the teachers more, you will attract better teachers than other parts of the world. Thus improving your schools.
I wonder how they manage patching, resetting and general maintenance of the devices being rented.
Right, we agree on that. However, for the reasons I explained above, it's not because of regulations on the dollar.
If your only source of Lisp exposure is AutoLisp, that would explain the dislike.

AutoLisp is very primitive even when compared with minimalist Scheme interpreters.
Your stats are again, bullshit.
Asked this before, and got this nice summary from 'patio11

http://news.ycombinator.com/item?id=4940102
No doubt that the EU is a success. I'm just saying that there's a (high) risk that it will degenerate if political discourse doesn't change. Words may lead to hate and hate may lead to war.

I hope human progress will keep this from happening, but these are probably the most critical times for the EU since its beginnings as ECSC.
Kaiser is basically the public health care system of other countries, but paid for and run by a non-profit corporation. :)f

I've heard good and bad things, though (compared to Blue Shield).
Note: I am not an expert in the subject.

Think of it this way. At the basic level, you have logic gates. CPUs are massive ensembles of these which then run your program majorly sequentially. GPUs/GPGPUs are smaller ensembles that can be configured better for specific tasks, resulting in better performance/power ratio. At the other end of the scale is using HDLs to program the gates directly for the specific task at hand, which would offer best performance/power ratio. The development process is however more involved. In-between the last two is reconfigurable computing.

A MicroBlaze is just a regular CPU instantiated on an FPGA, most likely controlling other logic around it designed using HDLs -- HDLs portions taking over compute-intensive tasks while the CPU takes over (relatively) low-speed control logic. A reconfigurable computing environment would try to make this more symmetric.

In my opinion, there is a continuum between more complex units (CPUs) that have a large number of logic gates and offer lots of features, and between less complex units (logic gates directly) offering very small functionality. At the end of the day, it is all about finding the right architecture for this "unit", which may vary from application to application.

There is a lot of development going around these days for using OpenCL to program FPGAs directly. E.g.: http://www.altera.com/products/software/opencl/opencl-index....
Always pick the right tool for the job. If 500ma is not an issue for your particular project, then what is the big deal?

I am glad I don't go to your hacker space, that is a pretty unnecessarily nasty attitude.
the point is that in FileRock, several things depend on your password, and some of them must be kept confidential and never sent even to the FileRock servers.

You are right, from the only point of view of the authentication, using a password gives you the same level of security as using one of its derivations (given a deterministic generation of the derivations and a password with same length and randomness of its derivations).

The mechanism that actually protects your credentials from being sniffed and used to get the first level of access to your account, is the industry standard SSL/TLS.

But even if someone discovers which is the derivation that you use to authenticate with the FileRock servers, they won't be able to know your password. And that means that the other derivations of your password (for example, the one used to protect the encryption keys for your data) are not disclosed as well. Therefore, even the people managing the FileRock servers will not know them, and they will not be able to access your encrypted data.

I hope this will solve your doubts.

PS: I see now that evv and notimetorelax also replied and they are correct.
Smalltalk, Io and (possibly) Perl6 & Rebol are good examples of non-Lisp homoiconic languages which have full & robust metaprogramming.
This got me thinking - anyone know of an API or open source project that implements a browser-based IDE where you can make your own programming challenges or tutorials? Perhaps Codeacademy is working on something like that?
I don't think it's hard to imagine a near future in which the US Government outlaws the use of bitcoin within its borders. In fact I'd almost guarantee that outcome. Bitcoin is far too threatening to the establishment (from the likes of Visa and Paypal to the Treasury and Fed due to the monetary aspects). If they owned it or could control it, that might be a different story.

Indeed, I'll pin a time table on it. At the current growth rate, within 24 months the first calls to outlaw bitcoin will echo from some Senator or House member's office in DC. It'll lead to blanket legislation targeting bitcoin and any similar services that could exist in the future.
Don't forget the VA, too.

Our government only insures the absolute worst customers (old people, poor people, veterans), and STILL does it cheaper than the vaunted private sector. It's absolutely mind blowing how bad a job the insurance system does.
Or "all successful languages have large initial libraries, but not all languages with large initial libraries will be successful".
That seems pretty cool, provided the computers are cleaned regularly and one has a workflow which is sufficiently non-local.

Here are the primary reasons which always keeps me from using our university’s computer pool’s computers:

1. Horribly dirty keyboards.

2. Horrible keyboards.

3. The computers are outdated (as in: really slow).

Given these points are avoided — which comes at a cost for cleaning and up-to-date hardware — the offer is attractive to me.
And what about QNX, Aix, HP-UX, Solaris, VxWorks and many others?

Not everyone is allowed to use modern versions of clang and gcc.
There are good parts. But for me the "goodness" of a place trades-off directly with the costs.

In my world, a place that's charming at $1000/month is far less charming at $3000/month. But I also won't wait in line for two hours for Sunday brunch at the hottest new hipster restaurant, so empirically, I'm probably weird.

That said, I'll probably eventually move to somewhere that I can have a dog and a garage.
Here is a better description of Borph: http://bee2.eecs.berkeley.edu/wiki/Bee2OperatingSystem.html

Here is also a much clearer explanation taken from that link:

BORPH is an extended Linux kernel that treats FPGA resources as native computational resources on reconfigurable computers such as BEE2. As such, it is more than just a way to configure an FPGA. It also provides integral operating system supports for FPGA designs, such as the ability for an FPGA design to read/write to the standard Linux file system.

If it supports partial-reconfiguration (which it looks like it does), then it could be a very handy tool. Why? Hardware is significantly faster than software. While Linux is running, the ability to spawn hardware at will would be great for many applications.

At UCSB, some of the research I did related to this very problem. What I was trying to do was have a Linux web server running on an FPGA that could dynamically reconfigure itself for different experiments. I ended up choosing a board that has an FPGA that communicates with a ARM processor. Decent size FPGAs were (and still are) expensive. For all the Linux overhead and my budget, a hybrid FPGA-processor platform turned out to be the better solution. If anyone is interested, here is the problem we were solving: http://ece.ucsb.edu/academics/undergrad/capstone/presentatio...