skysight-inc/HackerNews huggingface dataset:
How to Build & Sell an Internet Startup to Japan’s Biggest Web Merchant, Rakuten
While I agree that some of them are user friendly.

Think of the comparison between Microsoft Office and OpenOffice. I wanted to lay stress on the fact that mainstream developers/designers are simply not interested in Open source because it gives them nothing in return.

The very few that are, only do it for the traction.
> I often say if 51% of the population were psycopaths then they would not be psycopaths but normals and the other 49% would be the exceptions and outcasts in many ways.

There's good reason to believe that such a world would be unstable. When too many people are willing to take advantage of too many other people then you will most likely have a tragedy of the commons [1]. Co-operation and altruism appear to be very important components for the evolution of species and the advance of civilization.

> After all not all psycopaths are criminals

This is true, and as with most things in life what's important is balance. As the article discusses, psychopaths tend to live "in the now" and have a very present-oriented time perspective, which certainly has some value. But too much of a particular time perspective, in this case with no past- and future-oriented time perspectives, creates a distorted map of reality [2].

[1] http://en.wikipedia.org/wiki/Tragedy_of_the_commons#Applicat...

[2] http://www.thetimeparadox.com/
Since we have an interesting discussion going on, would you care to share a bit about the methodology?

How do you determine by external observation that a site's password handling is sufficiently bad to merit the Plain Text Offender title?
Please login to your Facebook account: the execution of a data mining scam
Yup. "Awkward"

That's the word. :P
AWS Android app puts sysadmins on call everywhere, all the time
And for the folks who didn't request their passwords via email, the passwords are stored encrypted on a disk, like their credit cards. That's not security theater. What you mean to say is that "this system has a downstream vulnerability for some use cases." That's a lot more accurate; why not say that instead of leaning on the trope of "security theater"? Obviously that vulnerability is pretty severe, but it still pays to describe it accurately.

The reason precision matters with security is because taking the "conservative" approach (also known as the "chicken little approach") ensures that normal people will tune out and ignore security altogether. When making security claims, it pays to take 10 seconds and write what you mean. It's not hard in cases like this.
Dependency Injection is a Virtue
This is precisely the sort of nonsense that made me decide to leave my job a few years ago. I used to work for <household name Internet technology company>. After some re-structuring I would have had to travel to the US a lot more often, or possibly even move to the US. For me it wasn't really worth it. The dehumanizing experience of subjecting myself to dangerously stupid, underpaid, over-empowered, assholes on a bi-weekly basis made the decision easy.

While I do love California, and the Bay Area in particular, it is still inside the US. And I do not enjoy travelling to the US. To get to the US you have to go through the twilight zone that is immigration and customs. Not to mention the TSA.

I can remember travelling to germany as a kid during the Baader-Meinhof terrorist era. I can remember that I felt it was somewhat unpleasant being pointed at by germans with sub-machine guns. But you know what: they were not even half as frightening as the sort of personel you encounter when travelling to, from or within the US. Because with the germans you at least have the sense that the people holding the gungs are not the lowest life-forms of their society.

But I am not complaining. Taking this choice meant that I had to figure out what to do. And now, some years later, over 100 people have jobs because I don't want to travel to the US ever again.
This may not be the value it seems to be. These are pretty antique as far as applications go, and might be okay to learn the basics with before getting a "real version," but you're going to have trouble working with industry folk using them. They were originally released in 2005. If you run OS X Lion or later, you'll probably have better luck booting into a Windows VM or using WINE or CrossOver than getting the Mac versions going:

Mac OS X v.10.2.8–v.10.3.8. PowerPC® G4 or G5 processor

Microsoft® Windows® 2000/Windows XP. Intel® Pentium® III or 4 processor

They're also not eligible for upgrade pricing to Creative Cloud (CS3+). Most professionals I work with upgrade every couple of versions; I don't know anyone still using even CS4, for example.
This is an objection without much substance. The main thing that you're worried about with a plain text password is that it will be obtained by a third party.

These are sites which are sending emails with passwords in the clear. They are also storing your password near the decryption key (if any), so a single security breach can compromise many passwords. That is to say: even if the rest of their infrastructure is NSA-level paranoid, whichever server(s) are sending out these password reminder emails are prime targets.

Please do not defend this behavior.
Don't smash your head. :-) Issues of authentication are inherently difficult for us humans to think about. Look at an issue one way and it's obvious, from a slightly different perspective it's extremely subtle.
The node.js equivalent for brainfuck.
There is something very wrong with this man. Whether it's drugs or mental illness, I hope he gets the help that he needs, especially since there is the possibility he may have already killed someone.
There is a term for this: "irony of fate" [1].

Which is presumably where the confusion with irony (as a stand-alone word) comes from.

Interestingly enough, the term exists in a literal translation in other languages, too: "Ironie des Schicksals" in German, "ironie du sort" in French, and "ironia della sorte" in Italian.

[1] http://www.bartleby.com/81/8963.html
3ND: Three-night long science and tech courses
There was a recent NPR interview with the author of this book.

http://m.ttbook.org/book/kevin-dutton-wisdom-psychopaths
This is the only real answer in the thread. "Next level" is code for "more revenue" in almost every scenario. How do you get more skrillos? Well, you can market the company more, or you can hire a sales guy, or you can add new features that opens up your product to a new market or wider part of your existing market, or you can...any number of things! It's hard to say what is "best" as it depends on the product and the target market/customer.
VT Touch
My site would fall under this and I use two layer sha-2 512 keys with unique salts... just because I send you one email does not mean I know your password (and for that matter somehow you have to be given an initial password in a lot of systems)
I like the idea of this site, but found it very frustrating trying to look at the list of offending web sites.
For me it's a sleep thing. If I enough/plenty of sleep then caffeine doesn't do much, otherwise it can help a lot.
Just to be sure, I had a look at the first 20 websites - 50% of them are password reminders, the rest are registration confirmation emails so it's not the majority of them.

In any case, sending a password by email is always bad, no doubt about it, but my point is that they claim these websites store passwords as plain text when, half of the time, they don't actually know. Although this is a useful website, they lose a bit in credibility by being more sensationalist than they need to be.
Sony's Exmor RS sensor already has hardware HDR, and can take HDR videos in real time. They should ship with many of the high-end smartphones this year.

http://www.dpreview.com/news/2012/08/20/Sony-Stacked-CMOS-se...
Look at it this way: at least they get to spend money and resources on you every single time. So they are practically shooting themselves in the foot every time you enter the country.
Very nice. If it had a key handler to collapse the current comment with all replies[1], then I think it would be heaven. (Helps with long tangent threads at the top of the comment page.)

I know, this should be a pull request...

Edit: BTW, I just saw '(-1 unread)' which I'm guessing has something to do with showdead being on.

[1] http://alexander.kirk.at/2010/02/16/collapsible-threads-for-...
I can (and will) speak and write for hours about authentication if you get me in the right mood. (Luckily I need to go to bed now :-)

But if you think that there's a 10 second formulation to the multitude of subtleties involved here, well frankly that's dangerously simplistic.
In general aviation the term "takeoff/go-around" or "TOGA" is used, with the go-around phase used for aborting landings.
yet another paper plane logo :-)
I'm unclear what you mean when you say "and I use two layer sha-2 512 keys with unique salts".

The Plain-Text Offenders site is concerned with web sites that can email you back your original password in plain text. Personally, I'd be most concerned when these emails are in response to an "I forgot my password" request. (Initial registration emails that send you back your plaintext password are dumb, but don't necessarily indicate that the site operator can reconstruct your plaintext password.)

If you are physically incapable of reconstructing the user's plaintext password and emailing it back to them then I'd say you're in good shape. If you have enough information to reconstruct the plaintext password then you're doing it wrong.
Immigration processes millions of people each day. There are going to be mistakes.

This sounds like they got a false positive, investigated, and released him. That's how the process is supposed to work. Making this into some massive anti-American rant says more about the author than America. This experience sounds unpleasant, but like it was handled professionally.

I've spent an hour being searched by customs. I don't know why - perhaps because I was returning from India and hadn't shaved in a month. It was inconvenient, but also the job of customs. This did not bother me.

I fly domestically and internationally at least 20 times a year. I get caught up briefly in all sorts of different ways all over the world. It's part of travel, and it's really not that bad. This is how nations protect their borders and enforce their laws, because not everyone is a saint like you.

All you idiots saying you won't work in or travel to the US because of the TSA searches - give me a break. EVERY country in the world I have ever been to has nearly identical search procedures as the TSA and most countries have stringent immigration checks. Many asking far more probing questions than American immigration, including Netherlands, Israel, and Britain. I was nearly denied entry to Britain because I didn't know the address of a friend who I was staying with.

Sorry, I'm tired of all this false outrage about minor f-ups with the TSA and DHS. These organizations have some major policy and procedural problems, but a few hours one time while immigration officials do their job of making sure you don't have false documents is not among them. If you don't like it, go somewhere else where a $20 bribe instead of an objective investigation gets you admitted - which is most countries in the world.
Actually one time, I was able to prove to one border officer that I really was the CEO of our startup by Googling our website and showing him the "about us" page. He even let me log into my Gmail account and show him proof of my company's existence (PDFs of lease agreement, incorporation documents).

Maybe it's just me but I have always had really good experiences with border officers and those guys have always been friendly to me.
In the particular case described above I ended up chatting with the guy about random stuff for like a few minutes after which he wished me a great day.

Don't forget those people are human too, and unless you act like a terrified robot, they will more likely treat you in the same way.
I have got impression that in the JavaScript/HTML5 world, there are a lot of beautiful demos/showcases available, but few people bother to write a handy API reference/tutorial.
That is why these fanciness bother me. Do they expect others to learn only by copy/paste-ing demo codes?
This is why wind and solar are good partners with hydro. They're more unreliable due to weather but if you have the wind or sun available to generate more power than you need, you can use the excess power to pump water uphill into a hydro lake and store it for later. So even though it's a lossy operation as you say you're basically getting it for free. And like the video showed, hydro is very responsive to short term load demands so if the wind falls off you can quickly start up a hydro plant, as opposed to something like coal or gas which takes much more effort to start/stop.

Theoretically you can put wind/solar much closer to urban centres but in reality the NIMBYs don't want them either near cities where they can be seen or in remote areas which are typically areas of natural beauty.
Personally I don't really see what's unclear about foo(a ? b : c)

In fact, I'd say your "trick" with using boolean operators on non-booleans that way is less readable.
Being accurate is not spinning. Accuracy matters, especially in matters of security. It's really not too much to ask for security alarmists to make precise claims.
> the initial setup is hard

Do you see what you're saying here? It means that the proven setup you describe here needs to be attained by the user. This is not something an average user will be able to do and even the tech crowd has many difficulties with it as shown in the other postz here.

And I disagree that it's the same as a clean windows install. See, for a clean install in windows I have a relatively well working to do list: the device manager. Yes I have to download the drivers manually, but IMO the package approach has one fatal flaw when it comes to built-in devices: which one will work for my hardware? If I just try, will removal still work afterwards? Usually it comes down to finding a community tutorial (which are often quite good, I admit). Of course, this difference comes from the fact, that most hardware vendors don't fully support linux. Ubuntu has made lots of progress here in that it tries to install the correct packages itself, but for bleeding edge hardware you're often out of luck.

Here's an idea: How about a webfrontend for that hardware auto configuration, Ubuntu uses? It would map some kind of hardware signature to package name, has some community mode built in as well as the vendor approved configurations (e.g. if distro+vendor mode fails, activate community. which configuration is pulled is being determined by 'votes' (does your sound work now? yes/no).
That is a shitty attitude. Just because an organization is badly run does not mean bad behavior and laziness are excusable. In particular not when the organization in question represents a nation. Just because it is a shitty job does not make it okay to do a shitty job. And it sure as fuck does not make it okay to behave like an asshole to other people.

If you worked for me with that attitide I would make a point of ruining your day every day until you quit.
Sorry, I got my headlines/articles mixed up.

The Tegra4 does indeed look quite stellar!
Does that mean that if/when an attacker uses a SQL injection vulnerability to obtain the contents of your database, will he then have a password equivalent that allows him to login as the users?

Will it enable him to mount brute-force attacks against the users' plaintext passwords?
How we could make it so that there could be the free movement of people? What would we need to do?

In my own personal experience I've crossed the US-Canada border many times, and I remember several times when the wait at the border was hours long. On top of that, I'm very frustrated with the immigration process to get into the US; it's something I think a lot about and I don't think this is for the better for anyone.

How could we make the free movement of people happen?

I'm going to think about this today and see what I come up with.
Maybe you could trick the system by entering without a passport check and then leaving with one. So score is 1:1 and the database record from 1995 get's the flag "departed" = true...
Maybe :)
Contrary, I rather have paywalls.

When data is being sent to my device, I want to be allowed to decide if it is shown on the screen. If executable code is sent to the computer, I want to decide if it will run. If code design to track and monitor my is being sent to my computer, I want to decide if it will be running or blocked.

When people have ownership of their device with the option to block ads, people will block ads. The only way to enforce ad-viewing is to take away that ownership. In that world, I rather take paywalls.
fun. thinking differently for some days.
If you're a lone voice in opposition to the medical and scientific establishment, then to take you seriously I'd expect to be seeing some pretty extraordinary evidence.

Things that would make me more sceptical of your claims would include:

1. A glossy website with slick before/after photos that appears to be primarily an advertisement for your (expensive) courses.

2. Putting all of your evidence in a non-peer reviewed newsletter that you then charge $7 / month for. He's clearly heard of journals (he's even published in some of them, although none of them particularly prestigious) so why isn't he using them?

3. The invention of bogus mathematical equations to "back up" your claims (Health = Nutrients/Calories... please).

4. Any claim to be able to cure a wide variety of unrelated illnesses with a simple treatment (cf. allergies, asthma, acne, autoimmune disease (!), chronic fatigue syndrome, depression, diabetes, migraines, and, somewhat mysteriously, "others").

5. Any association at all with Mehmet Oz.

This guy doesn't even begin to pass the smell test.
I didn't burst into tears. but i do have tears in my eyes. this is sad story. I am the same kind of customer who would jump to twitter, even if something little is not working right and whine that on twitter and putting company's twitter handle after . so that my entire follower could see it. meaning putting even more pressure on the said company. I don't think I would be doing it again. Unless there is a real serious problem that should be addressed right away.
Brainfuck is to Turing machines what Lisp is to Lambda calculus or Prolog is to predicate logic. There's enough syntactic sugar to make it a practical programming language that is based on a mathematical theory. Learning it will, arguably, make you a better programmer.

This seems to be like a conveniently sized practice project, a little I/O with the real world with a simple computational task that's fun to write.
Granted, a lot of this discussion is pedantic.

Devil's advocate: why is it pedantry to ask for security alarms to be precise? We ask for e.g. the TSA to be precise about what it needs, should not computer security professionals be held to the same bar? Making bogus claims about a system's vulnerability (be it shoes at airports or passwords) damages the credibility of the next security alarm.

Note: I'm not defending the practice of sending passwords in the clear. But I don't think it's too much to ask for security professionals to make precise claims, when doing so is a 5-second op.
I’m a Rails Tutors student and can have only nice words about the pedagogy, material and teachers (Kevin and Chris) used in this course.

Good material, project based course, interactive chat/forum with other students and live sessions (with live coding) done by teachers is a huge difference when you are learning new topics online.

I’m a self-learning guy but with Rails taking this course is one of the best decisions I have done.

I agree with you that watching the teachers coding the problem solutions is a big difference when you are learning. It’s much better than reading the result in a book because you can ask questions and interact with teachers.
Apparently, George Mason University is still on the list... two years after I sent them multiple emails and phone calls complaining about such a big security issue. It's kind of sad that you can't even depend on educational institutions to follow the security guidelines they probably teach to hundreds of students (even if that part of their website was done by a contractor).
Even funnier to see the contrast between the title:
"Amazon's top selling laptop doesn't run Windows or Mac OS, it runs Linux"

...and the claim in the body text:
"True, there is Linux under the hood but you have to go out of your way to find it."

So, huzzah for another great victory for Linux (like TiVo, Android...) made possible by hiding Linux as much as possible.
I can see the hotel in Hong Kong BEFORE I book it....sweet. Thank you Instago.
From what I worked out, if it is animated, you might be able to click on it.
Please read my comments: I'm not defending the sending of plaintext passwords.

But please do not defend sloppy claims of security vulnerabilities.
Creating beautiful login form using HTML, CSS3 and JavaScript
How to detect if you are slightly brainwashed?
another thank you from me as well. that was a great article!
a very interesting and valid point about mixing the text with graphics. Though I standard of PLAY/PAUSE/STOP/FWD/BACK icons on VCR a is a example of a standard that is embraced and known globaly, no text involved. That said the old stories of people having problems programming there VCR may well have roots in the iconic only introduction only to be dumped into the non-standard programming interfaces that changed from model to model.

I certianly do believe signs/symbols when known have a very intuative communication medium and once adopted and used the comfort value is as good and if not better than some words which are after all a collection of symbols in themselfs. Road sighs would be another area which has at least some universal symbols, maybe those would be more adoptable for a user interface.

Perish the thought that one day we have a computer that you set up and asks you how you the user would like certain common dialogues to be handeled and propergated that customised standard across all applications running upon them. I'm all for graphic symbols to indicate across languages the actions available as apposed to limiting to words alone, which are in themself (for English and many other languages) only a collection of 26 or so symbols combined in themself.

The example you give about the word Save with a icon with a floppy disc is very common in alot of applications, though I do wonder for a new user who is starting out with computers if they would even be able to identify with the image of a floppy disc, let alone know they ever existed and there use. So some symbols are, if not thought out limited in there use and some are timeless classics that still endure today, like some roadsigns. It is also worth noting that colours play a important part and with that also have limitations. If you saw a road stop sign in green instead of red you would think it was a go sign and not a stop one; So careful use is wise. With that the mix you say of text and symbols is perhaps not that bad an approach after all, albiet language biased it would still allow say a user of a mobile phone to navigate the menu's using the symbols to change the menu language back to say English with ease having been comfronted with russian text due to a child changing the settings or the like.