skysight-inc/HackerNews huggingface dataset:
I won't be open sourcing it, but I might consider writing a small tutorial at some point.

For now, you could dig into the Android source code to learn how to modify drawing, layout and touch events of Views and ViewGroups. Here's also a good post on Animator: http://android-developers.blogspot.com/2011/02/animation-in-...
This is a completely irresponsible headline. If loose claims of "theft" like this were directed at my company, I'd sue for libel.
The fuckers will keep it all secret anyhow - or worse, patent it. Zero net benefit for the world.
Google files patent application for touch-based, full-finger keyboard layout
Not only did he build the worlds largest technology company

With what tactics and strategies, though?

he's making a global philanthropic impact.

How would one measure the destruction Microsoft caused? The wasted time? The wasted money, the wasted lifes? I mean, if HNers can scream bloody murder about Shirley Hornstein "stealing jobs that would have gone to others" ( http://news.ycombinator.com/item?id=5135436 ), surely that should enter into this as well. If someone takes with one hand and gives with the other, you can't just count the giving. Well you can, but I can't follow. Personally, I judge people solely by how they react to a pie to the face, and Bill Gates scored quite low on that.
Google images takes over fullsize content
http://www.schneier.com/crypto-gram-9902.html#snakeoil

See: Warning sign #9.

Read the whole thing, of course. Holding a contest doesn't make it snake oil...
It's like a quieter version of candy crush, awesome!
For Windows developers I would advice to use F# instead.

Being a Microsoft language helps smuggle it into the work environment of the enterprise.

It has become my scripting language for Windows tasks.
CodeProject: Memory Analyzer x86, 32-bit
What is it really like to be a female programmer working at Facebook?
I suspect whiplash from the fall caused trigger points in your neck and shoulders. I've had similar issues caused by RSI and stress. I highly recommend giving this book a try:

http://www.triggerpointbook.com/
I dunno if I'd call it magic, per se. Netty is a big library and it has good reasons for behaving this way. I just don't think I came through the right documentation path is all.
How To: Animation with HTML5 Canvas
You should check out WeeChat as it's a modern and actively updated terminal-based IRC client. Irssi is definitely not the only acceptable choice.
If you're counting total companies he's involved with:

1. Zip2

2. X.com -> PayPal

3. SpaceX

4. Tesla Motors

5. SolarCity (albeit his idea, he doesn't take cofounder title here)

But currently, yes, three. However I believe majority of time is spent mostly with SpaceX. I do agree he should have won Founder of the Year.
This is the best game I've played on Android. Just wish that I could get more Kiip rewards in it...
There's a big post-holidays suicide bump, as well as one in the spring. Events that are supposed to mean things are getting better and then don't.
(my tinfoil hat mode: I don't even have any important secrets but I believe in knowing how to protect them)

Use /dev/urandom, not a website. Make sure you have configured your text editor not to automatically save any backup files, cut buffers, or the like, and never write it to disk in unencrypted form. (I use vim >= 7.3 and its blowfish encryption; see encryptedvimrc and random_alnum in my scripts https://github.com/idupree/scripts ) If you copy/paste passwords, make sure you don't have a clipboard manager that persists recent history to disk. Also, encrypt your filesystem in case you screw up on any of the above. If you have swap, make sure that's encrypted with a generated-per-boot-from-urandom key generated after loading last boot's stored entropy from the disk. (A dedicated password-managing program might do some of these things for you. I haven't looked into their security methods yet; have you?)

If you can, use an email provider for your acct-registrations that uses decent security practices; use a high-entropy password for it; use different email addresses for every site, to make it harder for social engineering attacks (someone calling, say, Amazon or Apple's call center pretending to be you). The latter is probably hard unless you use your own domain or think '+' addresses are sufficient. If you use your own domain, you're vulnerable to your registrar or your account with them or your DNS being compromised, but you should have rigorous passwords and good registrars here because losing your domain name stinks. If malware gets on your computer, it can watch you and steal your passwords, so keep your system and browser up-to-date with security updates, disable riskier parts of your system that you can live without, prefer OSes/systems that are more on top of their security, and don't make enemies.

I don't understand why password managers like OnePass store passwords online; everything else they're doing as browser plugins is fighting the good fight. (True, there are risks of giving the browser the ability to access your passwords at all; but they're probably less than the risks of password reuse and low password entropy, and greater convenience means more people will use the system for more sites. Firefox Sync is the only consumer-friendly online storage that I've seen and consider well-engineered-&-documented enough to consider trusting. Tarsnap and Tahoe-LAFS also meet everything but the "consumer-friendly" bit there, and have a somewhat different focus. It may be worth considering encrypted online mirrors legitimate (online mirrors, not sole copies) for the sake of people who don't do backups, have multiple devices, and/or have their disk fail or device stolen.).
For OCaml, check out http://ocaml.org for examples and tutorials. There's also http://try.ocamlpro.org where you can actually try some things out without the hassle of installing. OPAM [1] is new package manager for OCaml which, makes dealing with the libraries a lot easier (gotten v popular quite quickly) - it's available via homebrew which made it v convenient for me.

Also, it's worth being aware of the differences between the languages e.g. Haskell is purely functional whereas OCaml allows imperative and OO.

I'm learning OCaml (slowly), and may have a look at Haskell later on. People I'm working with view OCaml as a much more pragmatic language than Haskell, in terms of building real world systems (e.g. Mirage [2]). However, people make cool things in Haskell too, e.g. pandoc [3]

[1] http://opam.ocamlpro.com

[2] http://openmirage.org

[3] http://johnmacfarlane.net/pandoc/
I think the best way to see the benefit of languages with static type systems is when you work in large team projects.

I do like to use languages with dynamic type systems when doing quick prototypes or small programs on my own, but I wouldn't dare to advice doing our multi-site enterprise projects in such a language.

Specially given how lax offshore teams write unit tests, if ever.

At least with static type languages the product does run. If it does what is required is another matter.
It would have been hilarious if grindr had won best mobile app...

Oh well, next year!
I had great feedback from the community but our startup is just not marketed towards the type of people on here. The feedback was very good and certainly helped, also the spike in traffic showed me that I really didn't need to worry about the site becoming overloaded.

The next day I placed some adds on AdWords and we have been raman profitable since.
Hot sex toys and sex news introduction.
What are the benefits of using an icon font compared to just using svg icons? As far as I can tell, the only thing that a font can do better is get served in a single http request. I'd love to know what other differences are.
TypeForm – Building the next generation online forms
Indeed. The client "mIRC" has a few well-known security bugs and hasn't been maintained for ages, but there indeed is nothing wrong with the protocol when using more modern clients. It can be as secure as necessary through various extensions, and ofcourse running it over SSL.
> I would have hired an attorney before blowing the whistle

Seems like good advice if you're about to embarrass the government.
Clearly this guy doesn't know the legal grounds for libel. You can't throw unfounded accusations of malicious intent around. He deserves to be sued for publishing this BS.
Most of your points actually mean that Jekyll is fairly simple and customisable, which is user friendly for some users. (Others don't want/need this customisability and so it is unfriendly for them.)
I'm not understanding how this techcrunch post was posted two hours ago, and has only one comment (and rather spammy)?

I haven't been there for ages, so if someone could enlighten me to whatever happened there?
guys, please refer to Amazon book review for more regarding to liar Ping-Fu. http://www.amazon.com/Bend-Not-Break-Life-Worlds/dp/15918455...
How does Google glass win runner-up for best tech achievement? Very few people have actually seen what it is capable of and what it actually looks like.
What problems do you see that would stop you from posting everyday?
Proposed EU data protection reform could start a "trade war"
Looks visually like letterpress. Very different gameplay I imagine.
A Chatty Atmosphere - Scalable Chat Using Athmosphere and Hazelcast
HMV Employees Hijack Company Twitter Account Amid 'Mass Execution' Layoffs
Oh, yes, absolutely, post this again. It's only been posted to HN about five times so far.
It looks very much like Letterpress to me. I assumed they were both built using the same framework. Although the developer's comments seem to indicate otherwise.
10:30pm. Wake up at 7 although I'd like to get that earlier now that the sun is rising earlier.
Some lesser-known truths about programming(2010)
> Symantec… found just one of the 45 pieces of custom malware installed on the Times servers

Obviously general-purpose anti-virus software is completely ineffective against purpose-built malware.
GAS: Connectivity with Google Cloud SQL Database that lives in Google’s cloud
Ask HN: What todo app do you use?
I need a simple, clean and good looking TODO app for IPhone, IPad and web.

What is your preference?
I assume the comment above is facetious but, as someone who would like to move to the US for work, I'm curious why people living in other big cities dislike Boston?
Thanks for the data link. I'd consider the difference of 6.1 vs. 4.1 per 100k comparable. I was right about Oakland, though, at 26.3. Even Stockton is higher than SF at 19.7. I'll use that one to back up my fear of bored kids in isolated towns.
Show HN: MusicPlayrPlaya - A musicplayr.com weblet for your Mac Taskbar
Chris Lattner takes control over "entire Developer Tools department at Apple"
(defn execution-handler
"Creates a new netty execution handler."
[]
(ExecutionHandler.
(OrderedMemoryAwareThreadPoolExecutor.
16 ; Core pool size
1048576 ; 1MB per channel queued
10485760 ; 10MB total queued
)))

It is a farce, isn't it?))
I recall that sub-3.x Androids are about 40% of the market in Google Play, so yeah it's worth doing. (I'm sure there are many more low Androids out there that are simply used as phones and never touch the store)

Game looks great! I'm installing it remotely on my Nexus 7, but from the screenshots I was instantly reminded of Letterpress' visual design.
Quote: 'The source page will no longer load up in an iframe in the background of the image detail view.'

Protest is growing as the traffic to the source sites heavily decreases (see the comments section).
A quote from the article, from a master's degree recipient: "Instead, things got worst."

So when was basic literacy dropped from the list of preconditions for the label "educated"?
Right. Someone obviously needs to utter "snake oil" when there is a mention of a peer review invitation that involves a bounty.
> If I’m to achieve my statistical quota of 15 more years of life, that means about 15 times 365, or 5,475, more showers.

Or, take fewer showers. You don't need to shower every day in winter, do you?
When your stop-loss order executes, it's not going to execute at a smoothed minute-resolution price. It's going to execute at a price that's currently in the book. That means that it's not going to stop your losses if you trigger it with smoothed minute-resolution data. Twenty years ago, it would have. But today it won't, because anybody who took your smoothed minute-resolution price would be giving you an exploitable arbitrage opportunity.

I'm not claiming HFT causes securities market price crashes; maybe it does or maybe it doesn't. I'm claiming that, if a security is crashing, HFT gives it the chance to crash in milliseconds or less, rather than minutes.
| And if you can't trust the browser plugin, you
| can't trust your browser either

Depends. Adding plugins extends the attack surface area. Also, the plugin author(s) may not be as diligent at stamping out bugs/security holes as the browser developer(s).
Heh, I originally cargo-culted this line from somewhere in Netty's docs: https://github.com/aphyr/riemann/blob/732a6e8986f75c638c30b5...

After finally digging into how execution handlers worked, the puzzle started to unravel. Netty's docs are pretty good, but you have to understand what all the names mean before you can understand, well, any one part of the system. Bit tough to piece together, at least for my little brain. ;-)
Letterpress on iOS was custom OpenGL [1], this one is native Android UI

[1] http://www.macstories.net/featured/a-conversation-with-loren...
only 10K?
Exactly. So far they've demonstrated nothing more than a camera.
GIF doesn't support alpha channel transparency, so you won't be fixing the same problem.
You actually patent running the algorithm on a general purpose machine, not the code itself. Code is unpatentable.
Haskell has HalVM[1], which is sort of like Mirage, I believe.

[1]: http://corp.galois.com/halvm

As far as pragmatism and practicality in general, I think the two languages are about equal.
Database level joins are toxic for scalability

Tell that to Teradata.
Instagram was bought in April. Does it really qualify as startup?
Maybe, though with today's legal climate such a thing would be extremely, extremely risky. Gaining unauthorized access to a computer system and exploiting it in a way that potentially causes loss of revenue is not something you want to do lightly even if it might be the right thing to do.
CAPTCHA May Finally Be Dying. May It Not Rest in Peace.
Salvation Army on line 2 would like a word.
C++Builder, 64-bit software build and Viva64 renaissance
The blimp stunt was pretty nice.
Viddur: Easily Upload & Share Videos
If you're a fan of imgur and have a similar need but for videos this site is awesome!
Go Grandroid!
They have one of the biggest logistics systems run by a large amount of software in the US, one of the biggest robotics deployments in the warehouse, AND they developed AWS on the IT side. Amazon's software is largely behind the curtains but they are definitely a tech giant.
Try looking at Oblong.com

Chat is a good human comm method - but the interesting and cool visual stuff that looks a hell of a lot like Red Alert happens on Oblong systems...
No, the statement is correct. They definitely do have prescription methamphetamine: http://www.fda.gov/downloads/Drugs/DrugSafety/ucm088582.pdf
Funny anecdote:

I checked out Twitter for the first time in a while to see if anyone was talking about the Amazon outage. I ran a search for "Amazon", and one of the tweets I saw was Scott Hanselman linking to his review of the Amazon Kindle Paperwhite, which included a review of the Kindle Cover. The review was pretty convincing, so I ended up buying the cover yesterday night.

So in a way, Amazon's outage yesterday directly resulted in me ordering a $35 product from Amazon.

This probably (inconclusively of course) confirms what other people are saying here - I'm not surprised that Amazon gets some free PR from this mess, which earns evens out any potential lost revenue.
Some pirates are paranoid. That's why Usenet providers[1] started offering encrypted Usenet.

[1] EG Giganews, 2006 (http://www.giganews.com/news/article/encrypted-usenet.html)
We walk blocks, not as the bird flies.
> Or, take less showers.

Would that be showers taken with reduced water pressure? Or do you perhaps mean fewer showers?

http://en.wikipedia.org/wiki/Fewer_vs._less
November 5, 1999: Burn All GIFs Day.

http://web.archive.org/web/19991127200821/http://www.interne...

Anyone else remember this?
Microsoft, TechStars bring outside startups to Silicon Valley
I'm not too fond of printing out passwords. If I forget, and I'm extremely forgetful, that's just a disaster waiting to happen. I know my brain and I know it can't be trusted with physical security. Also, I'd rather use /dev/urandom instead of simply /dev/random.

Considering my aversion to using a stranger's computer to login to my accounts and the fact that I never use an open WiFi connection for anything without Tor, I'm much happier using a local copy of the encrypted file or at the very least a secure offline mirror(s) to download a copy of the encrypted file if I don't have it handy.
does this have anything to do with me getting a 403 from http://kim.com/mega/ ??
Save a couple of bytes here and there, and you may save a whole packet; saving a packet when your packet count is small can make a big difference in download times, since TCP slow start means lots of round trips in the beginning of a connection. Also, less data transfered is good for people with data caps, and lets your server do less work. That said, you'll probably get more out of making sure your images are optimized, and apparently changing from sprites to fonts (if your target audience supports it).
I have to say, I never understood the need for a gif-like animation in a png-like format. Gifs have incredibly basic animation that's difficult to control in most (all?) browsers, and it's pretty useless for everything except brief clips on tumblr.

Here's your animated png format, put all frames of the animation in a png sprite sheet, and fill early pixels with metadata. Add in a small library and you've got a format that's allows for more advanced animation than gifs, with the better compression and alpha of pngs, and is supported right now in any browser with decent canvas support.
Similar/better performance, dirt cheap prices, practically infinite scalability and (potentially vastly) increased simplicity.
Agreed on the tactics. Of course we've seen incredibly rich people set up charity funds before. Like Alfred Nobel who invented the peace price after he became wealthy because of his invention of the detonator for dynamite and nitroglycerin.
That's a good summary. I answered a question on Quora about this which goes in to a bit more detail: http://www.quora.com/What-is-the-history-of-the-Django-web-f...
In my opinion, code is never fully tested unless it's produced under extreme clean room conditions (i.e. autopilots, nuclear plant software, space shuttle softwware), or has been used in production for a fair amount of time.

Even if your code has full path coverage, you're almost certainly going to interact with an unpredictable outside world that can cause code to fail in novel and interesting ways.
I didn't really care about who has what money. I just agreed with his point that 10k doesn't beat the black market for something this high profile.
Reading comments in this thread have been very enlightening. I am wondering if there is a best practices or guidelines for password storage for web service operators.

I currently manage a web service that has about 1,000 registered users. I have taken the most restrictive path to storing password in database except I need to make sure user/password database is portable from one host to another. Reading the comments, I am getting the impression that such portability may not be a good thing. But then how can I migrate from one host to another or restore backups?

Are there documented good practices for storing passwords in database that also allow portability.
Stop-market orders, which turn into a market order when the stop is breached, are obsolete. Worst case one should set a stop-limit order, which "becomes a limit order that will be executed at a specified price (or better)" when the stop is triggered. "The benefit of a stop-limit order is that the investor can control the price at which the order can be executed" [1].

Your asset manager should know this and broker advise you of it. Then again, I don't think retail traders should have such unrestricted, unsupervised access to the exchanges.

[1] http://www.sec.gov/answers/stoplim.htm
Brogrammer Killed The Requirements Engineering Star
Ask HN: Startup or relationship?
Had a great relationship. Recently founded a high-profile startup. This has put a tremendous amount of strain on my personal relationship. I just don't have enough time for everything, and as a result, I'm having to choose one over the other. Any advice?
With a very corrupted definition of "usable".
Betfair offers exchange sports betting. There, you always have 5 seconds to cancel an order even after it's match, and they suspend trading near a major event, like a goal in a football match. This seems to work quite well.
You mean ... you people in the US don't all have rubber anti-slip mats in the showers ?
I know it can be easy to mistake that, but i said calculations intentionally. I was not asking for the code.
My prediction is that Bitcoin will neither be illegal, nor will it replace the U.S. Dollar, like some of its proponents hope. Most likely, it will continue to be a useful vehicle for transferring money online.

I see it competing more with companies like Western Union and PayPal than with the USD.
Simple rules for the bare minimum

- never store plain text password
- never store direct hash of password
- use a salt (must be stored) and hash password and salt

Ideally salt and hash of password/salt are in different databases.

Avoiding MD5 is recommended, but if you are at the point of worrying about that, you have bigger issues.
No. And preliminary research suggests that they are easier to crack.

http://arstechnica.com/security/2013/01/grammar-badness-make...

Legitimately randomly generated passwords still win, as long as the server uses a salt with bcrypt or iterated hashing like PBKDF1 or PBKDF2.
That seems great but how do you get it to show you a notification like that? The only way for me to see the cards is to manually go into Google Search and scroll down to them.
Yes, that's roughly what it feels like. Bruised the hell out of me. That said, it's reduced my neuropathy and pain by at least 90% - I had tennis elbow badly enough it was starting to affect sensation in my hands.
@HeyImAlex A week ago I would have totally agreed with you. I asked a friend and he told me "replace the user-agent with a misconfigured upstream proxy and you run the risk of serving an uncompressed version to end user that supports gzip, and vice versa."
Which is the core problem with your post. You can't prove malice or even rationalize why they would be malicious, yet you go ahead and post accusations of theft anyway. It's clear libel and defamation, and you deserve to get sued.

There are more responsible and tactful methods of resolving privacy concerns, if this even is one. You should take some journalistic ethics courses before vomiting your opinion out to the world and claiming it as fact.
How do you tell whether it's self signed? There are two certificates so maybe one is not self signed?