skysight-inc/HackerNews huggingface dataset:
MFA and Authentication has a much larger scope than what you've brought up here. I should start by I think passwords have atrophied and should be replaced, and MFA is the best option we have to replace passwords at this time. However, MFA has flaws many people are unaware of.

I apologize for starting with a contradiction to something you state, but MFA does not neutralize most hacker threats. It only addresses authentication, it's unable to help against software compromises or user compromises -- Phishing attacks would still be effective, as the user will input a valid temporary token. What is MFA effective at preventing? Brute force password attacks, and users choosing bad passwords.

An attacker who compromises an internal system or is successful in egressing a login database will gain the session tokens for logged in users and be abel to use that to access compromised accounts (subverting the entire logged in process.)

But, you covered this, so I will digress to mentioning MFA's authentication concerns:

The "forgot password" or "lost my token" systems are always a weak link. Frankly, it's improbable (due to overhead costs) that any bulk service provider (twitter, gmail, etc...) enact a strict verification process beyond automated email/phone verification (and this has been compromised before, lookup the attack against cloudflare's google services.)

Second to the "lost password/token" attacks, there is the simple attack against the session ID/token. Remember, once you're logged in, your computer will store a token that it shares with the service to verify you are still authentication. While the token will expire, if the token is active then system will accept the session ID or token to verify you are logged in. The egress of data from the twitter login database included these session IDs. Of course, this requires a compromise of the system and not a MFA login compromise.

Finally, on your discussion of using an MFA token for every login, every time. This is actually not true in all cases. A reasonable approach most implementations use is to require MFA for logins from unknown computers/IPs, once a system is verified via MFA a user would likely have a grace period when they would have to enter only their password until that grace period expires and then they would have to verify via MFA again, this could be 1 week, 1 month or 1 year+

Of course these statements I've made are really up to the environment's configuration, ideally in a very strict environment it's expected you verify via MFA each and every time, session IDs are updated automatically with every action and users are aware of security risks. But we don't live in this security/paranoia utopia (and perhaps that's all for the better.)

Hope I've helped spark some discussions on MFA here. Bam, i'm out!
Oh man, this is really cool. Great job. I'm the co-founder of http://SpanDeX.io (which I see someone already commented about) and we love seeing this kind of stuff. Great to see LaTeX getting implemented in a really useful way!
Have you ever heard of watsi(https://watsi.org/)? Its not my app, but its evidence enough that apps can and will save worlds.
How Amazon Trained Its Investors to Behave
Are there big gaps in the early user ids? I'm 4145801 and received this message.
What is the point here? What actionable advice are readers supposed to glean from reading this article? It just sounds like you're being different for the sake of it. You're not really encouraging or discouraging, offering any advice or your own personal beliefs of how things should be.

Might be a bit harsh, but nothing bugs me more than a hater or someone with a dissenting opinion that offers little-to-no actionable suggestion or thought-provoking message. I read this and think "Hm, ok".

I agree that there's an issue with grandiosity, but I'm still unsure if it's a net positive or negative for society. Out of the millions working to change the world, maybe one will develop a solution that will truly affect the lives of others for the better. Or perhaps if we lower expectations and live life only to survive, we may be happier with ourselves overall. Who knows. Perhaps the trick is both raising the bar and lowering it and pushing ourselves to be content with falling anywhere in the middle.
I decided to delete my last comment because I don't fully understand your point. My stupidity for trying? I've been flying for 20 years! and have been flying models since a kid, my father is also a pilot and taught me to fly RC planes when I was young, at 11 I was flying his (real) cesnna 150 without intervention.

No one could ever take off without some instructions, try to use your left foot to brake your car and see what happens.
North Korea Covers Tunnel at a Nuclear Site
That sounds odd, 250k out of 500m sounds like way too little data for even a single shard, no? And why would only a single shard be vulnerable?
Why would adding it for men matter? Why wouldn't there be a dynamic where men simply don't take the paternity leave and life goes on as usual? Much the same way as maybe you don't technically have to work any overtime or past 40 hours a week (but everyone understands that if you do so, your career will go the way of the dodo and you'll be on the first list of pink slips).
If "safe" wants to compete, it should do so by being more fun than "dangerous". No one stops anyone from making any "safe" system (automobile or recreational drug or whatever) and why should anyone stop someone from trying to make a "dangerous" system.

One of the best uses of law is to place limits, regulations and standards on what businesses are allowed to get away with.
Just a guess here, but maybe to get the emails out to users fast they re-used an existing template that was intended for resets due to 3rd party incidents.
I'd endorse all of that. America isn't completely homogenous, but it's far more so than many other places. As a European I've certainly noticed (and been fascinated) by the different cultures and so forth in different US states, but they're more the same than they are different.
To reiterate what I've been posting elsewhere, I'm sure there is a lot of compromising material in the Direct Messages of certain well-picked accounts, for a wide range of motives.
How did the IE Conditional Classes Get on the HTML Element in HTML5 Boilerplate?
Excelerate Labs Becomes TechStars Chicago
I think that what's important is not that this particular example has a short Guava equivalent but that, overall, Clojure code seems to be way shorter than equivalent Java code (even if you use Typed Clojure).

A lot of people are talking about a 10x code size reduction, which is amazing.

Also, it's not as if the Clojure code was some obfuscated brainf*ck-style unreadable one-liners. It's very easy to read for anyone remotely familiar with Clojure.
Well, I think this is somewhat tricky. If CBS truly decided on their own to not do this, it is within their rights. If there was any coordination between CBS and a competitor of SodaStream, then things get a lot more questionable.

Much like the CEO of a company selling all shares right before bad news hits is not necessarily illegal. Is a pretty high sign of insider trading, though.

Of course, usually caveats about random internet person possibly being completely confused on some topics apply. (And please, if I am, correct me.)
My guess was that the Good/Bad rating is to help with some sort of Machine Learning going on the background. E.g. the way I draw my Ampersand might be slightly different than yours, so if either or both of us see the result we were hoping for (&), that should get our Good rating. If it returns an (8), it may or may not deserve a Bad. If something way off appears as a top result (^), that would be pretty Bad.
I'm guessing they got a non-anonymized mini dump of the database for local development. An engineer may have had a small subset of data on his local machine.
And if you install the command line tools they live in /usr/bin.
At the very heart of winged flight lies the banked turn, a procedure that by now seems so routine and familiar that airline passengers appreciate neither its elegance and mystery nor its dangerously delusive character. The author, a pilot, takes us up into the subject - http://www.theatlantic.com/past/docs/unbound/langew/turn.htm
I wish they'd just fix the bug where typing "~" crashes Terminal.app (depending on your keyboard language) :(
Here are links to Alan Kay's project's technical reports:

http://www.viewpointsresearch.org/html/writings.php
I wish them a joyous Streisand effect.
Thank you I think I'd tried this before but given up once seeing no "Library" folder. Now I see it's just hidden in Lion! (I'm doing this on my gf's computer so I'm not too familiar with macs... about to get one for work so a good time to get used to it!)
Have you tried iTerm?
Looking into the timing of this is borderline conspiracy theorist. Would you rather they have sat on the post until Monday?

With incident response for an active service. Priority one is segregation and mitigation, priority zed is writing a blog post about it.
This also happens in the address bar of Chrome. Great fun.
I would've sided more with you if CBS were a cable network, but it uses the public airwaves. That isn't to say that it should be forced to show every ad, but I think it raises the bar needed to refuse an ad.
Maybe I should, but 10.8's Terminal.app seemed to have everything I need (well, except for the crash reporter ruining my work every time I forget and type ~)
Interesting, I, like you, didn't get to Mad Men until very late since it seemed like a mundane concept. Of course I was converted by word of mouth cajoling and one episode did the trick. I guess Netflix hopes for the same kind of thing here
The GP also said that the FBI investigating WikiLeaks in Iceland was somehow pushing Hollywood's agenda, which is a pretty weak position.
Wow, and it takes down the entire browser, too, and not just the tab!
Worst Easter Egg ever.
Sam here, ran out of money midway, but did attempt landings, and it's stupidly hard. So hard, in fact, that if you're in a Cirrus just pull back on the throttle and deploy the ballistic chute, I bet your odds are better.
I'd have to guess that there are significant costs associated with producing a commercial for the Super Bowl, and I'd have to think SodaStream had some sort of arrangement with CBS to air the ad, perhaps even paid for a Super Bowl spot. Even if there aren't breaches of contract, it's still pretty crappy behavior.

This could still work out in SodaStream's favor. The public outrage against CBS and big soda (?) creates the sort of David vs. Goliath dynamic that people gravitate to.
Interesting! It would not be correct in American english generally speaking.
What a strange rhetorical style. Terse certainty, unimaginative characterization of the human possibility field (via maneuvers to things like "human nature"), short summations of complex historical turns... plus the loud graphic design/quotes. I feel like you've got some points in there but the piece betrayed their communication and a richer exploration.

I do believe a lot of (most?) startup culture applies powerful minds to small problems... which is in support of your headline...

However - why not think of capitalism (and the apps it rides in on) as a medium, or a technology? In this way, it can be used to transform culture. This may not change "human nature," whatever supposed boundaries that has (fwiw, I think it will)... but capitalism&tech applied as such can absolutely save lives, if not the world.

Whatabout an app that uses our network culture to problem solve something like the spread of disease? That counts as "saving the world" in my book.

Of course, "saving the world" usually comes with a shadow of imperialism, but that is another story for another day..
This comment will be probably be unpopular but I think that root access is overrated. Not that it isn't useful in the appropriate hands, just that people make it out to be more than it really is. Like it is some magic wand that grants wishes.

The fact is that there will always be gatekeepers, whether it be the OS maker, the firmware maker, or the chip makers -- root be damned. You'll never have true ownership of your device unless you created, understand, and own those three parts. Maybe I'm stating the obvious but, I think that phone OEMs and OS makers would do better to focus on making more function available that don't require root access. You shouldn't need root to install a tethering app or be able to uninstall some shitware that comes pre-installed by the phone carrier.
Love the explanation, thanks!
Maybe because the product in question completely sucks.

I'm reasonably sure that it belongs in the same dubious category as that other great 'money saver', the FoodSaver.
Ad firm makes ad they already know CBS wouldn't allow. Ad gets rejected. The outrage! The controversy! Ad then gets 10x more exposure and they can resell the spot.

SodaStream, like Godaddy, Peta, many others before. Pretty smart.
Video: Fish Neurons Fire in Real-Time as It Stalks Prey
I switched to iTerm a long time ago and never looked back. I recommend it.
For all the problem the US has, we still have much better universities than most countries, the effect that Indians would rather come here to study and get a decent degree which is actually quite a value compared to some of the shadier options back home. If you can't get into an IIT, which is very very competitive, there simply aren't any other decent options. Its not a serious option.

If you are going to go abroad to get a degree in a technical subject, I wouldn't recommend India or China. Singapore, Hong Kong, Austrailia, New Zealand have strong English speaking programs, Japan and Korea also have strong skills if you are willing to learn another language.
This is awesome. I've watched some of John's AngularJS videos before, and they've been the best resources on the subject that I've seen.

His earlier stuff on ActionScript 3 and design patterns was superb, too.
Help me win this web contest (Vote for beer)
Fellow HN-ers. Just entered a contest with Appfog and Rackspace to vote on the beer they want to serve for their after party. If you want to enter, you can go to http://get.appfog.com/appsandbeers

Anyways, I'd really like to attempt to win. Go ahead and check out the page and possibly help me win! Thanks!
> I wish they'd just fix the bug where typing "~" crashes Terminal.app (depending on your keyboard language) :(

How did this bug survive the testing process?

Wait. I think I just answered my own question.
How does using public airwaves change the bar? I don't see how using tax payer funded spectrum really affects the situation at all. It isn't like it is in the American taxpayers' interest to have an Israeli company's interest put over three American companies' interest.
No crash for me. Google must have patched it.
What an interesting bug.

Just tried in Mobile Safari and Noted in iOS 6.1, no problems there.
I've always worked remotely. The lifeblood of every company I've worked at or know that has remote team members is chat. IRC in my experience, though I hear google hangouts are becoming popular now too. When people "get to work", they say Hi to everyone in their team's channel. They say when they are going to/return from lunch to create virtual presence.

There should be at least one "water cooler" room where people are free to share youtube links or BS about non-work stuff. In short, the chat system becomes the virtual office. The team room becomes the virtual shared room where anyone can jump in on a conversation that interests them, or start one up casually.

The company MUST have a day to day internet communications based culture for a remote team member to be successful. If a team has a key remote member from the start it's easier. All remote teams are of course the easiest.

It's hard to add a remote member to a team that is used to being in the same offices. A lot of people will resist changing the entire culture for one "new dev". Office members will talk about a design problem at the physical water cooler instead of the virtual one. The on site team will go for beers together after instead of having a couple on a google hangout/skype video chat. The remote member will feel more like a contract dev assigned work than a creative member of the team. This is no good.

Where I've seen adding a remote member done successfully, requires management and team buy in of remote working. The manager/team lead should work a few days a week, or even a week a month, remotely. So should the other team members. After the team lead sees what it's like to be the lone person on speaker phone while everyone else is in the meeting room, you understand why if a remote member is in the meeting, everyone should be using skype/google hangout for it. The offices should become more of a shared coworking space that happens to have your company name on the door.

I myself prefer to work remotely. It's not for everybody or every company though. For a startup I think a remote culture from the beginning makes a lot of sense. Unless you require it to show off to investors/clients, skip the office. Have the cofounders work from home. Meet up atleast once every 3 months in real life for beverages and discussion. Talk on chat, every day. That's my thoughts.

One last thing worth mentioning, chat logs are great for when the new guy wants to understand a design decision. Why did we use $nosql instead of $nosql2? Here, read the logs from 6 months ago. For operations events (downtime etc) the timestamped chat logs are great for after action reviews. Can you brainstorm better in a physical room or a chat room? I've found the ability text chat gives you to allow everyone to talk at once, without talking over anyone, allows for discussion to proceed at a more rapid pace and more paths followed. This can be of course good and bad, such is life. :)
Another downside is that I have completely lost perspective on how long it takes me to "get ready" to go outside the house if I have to be somewhere early in the morning. My routine is that I get up, feed the kids, eat breakfast, read the Interwebs, check up on the night's disasters at work, then move upstairs to my office. I often don't get myself groomed until lunchtime or so.

To those that I work with...don't worry. I always wear pants. But don't expect me to want to video chat with you too early in the morning. :)
You mean iTerm or iTerm2 http://www.iterm2.com ?
In the UK this is not legal. It's not even vaguely close to being outside IR35.

While I have no familiarity, I doubt it is legal in many other countries with a socialist state that requires employers to pay things like national insurance.

Basically if you walk like an employee, and talk like an employee, you're an employee and shouldn't pretend to be an independent contractor and you probably should not set up your own company as you'll be double hit with taxes if they catch you (company taxes for employees and standard employee taxes). That could leave you with several years worth of some serious taxes to back pay.

Don't want to be doom and gloom, but be aware what you're getting yourself into if you're going to pretend to be a consultant/contractor when you're not.
Spotlight, Finder, Chrome & Activity Monitor all crash; Terminal, Firefox & Sparrow are fine...
I think the complacency you describe is only side of the coin. People are happy as long as knowledge doesn't empower other people more than it does them, but as soon as you see and say that the emperor has no clothes (especially if they're the emperor), the lawyers and the Luddites descend like the four horsemen of the infopacalyse.

Admittedly, I don't think general purpose computing will in any sense "disappear," but I do think that we are already in a technological depression ("where's my flying car already?") and the witches metaphor is particularly apt. Until "normal" people catch up on the details of general purpose computers ("what's a filesystem?") and feel empowered by them (confident enough to secure their own systems, and write software to automate their lives), we will continue to stagnate, and embedded devices will thrive. The proliferation of embedded devices is a barometer of the public's aversion to generality, pure and simple... I would even expect a new model for general purpose computing to result from the current Cambrian explosion eventually, and be a net win. But I think it's important to realize we spend less time inventing today than 5 or 10 or 20 years ago, and more time dealing with the political and social response to the full implications of the current breadth of computing if only because it is still entering the mainstream. Anyone interested in pushing the limits today has to focus as much, if not more, on addressing the distaste for change, as on the underlying technology (at least if they want to put their name on it). Designing and coding Bitcoin is the easy part...
What version of chrome? Does not happen with 24.0.1312.56 or 24.0.1312.57
Oh, your app can save the world; it just depends on the app. I was trying to save the world with my pet-project http://theboycottapp.com/ but the execution has been poor.
> Most people don't work.

Now that's just absurdly wrong. Come on, you can do better than that.
It's quite terrible. I even reported it on bugreport.apple.com on 10.8.0, but neither 10.8.1 nor 10.8.2 fixed it.

I can't believe there's no-one at Apple using i18n keyboard layouts and Terminal.app.

It's not like typing "~" is an uncommon event on the command line....

Meanwhile, VLC fixed the same bug (typing ~ in the VLC.app UI textfields) in about 30 minutes.
Happens with 24.0.1312.57 on osx 10.8.2.
yeah generally i've preferred fiddle, but this is a nice redesign. might give it a whirl the next couple of times i need it, see how it goes.
Google's Eric Schmidt calls China 'most sophisticated hacker' in new book
There is nothing clear about this attack at all, thus it's grossly unfair to cast aspersions on any country or select group of individuals unless there is hard evidence.
Look at how the Chumby is now useless, as an example.

The original iPhone is still useful if you are a dev, but not so useful for regular people, as many apps can't run on it any more.
Oh that may be a mountain lion issue. I tried with Snow Leopard 10.6.8 and Lion 10.7.5
There is absolutely a demand for it, though. Especially with small business owners. I know a couple that have asked if something like it existed because come tax time, sorting the large number of receipts to either do yourself or hand off to someone else is difficult. Or if they choose not to do it, their tax people have charged extra for having to sort it all out. an email system would probably allow for better sorting too, I'd imagine.