skysight-inc/HackerNews huggingface dataset:
The basic stuff really.

Keep your software up-to-date (older versions of OS X get less love from Apple as fixing vulnerabilities goes).

Turn on OS X's FileVault and firewall, install LittleSnitch [1]. Turn on 'Ask for password on wake'. Create a user account to work in, don't use your Admin account for everything. Don't install Java Runtime, Adobe Flash Player, Adobe Acrobat Reader, Microsoft Office, MSN/AIM Messenger, or Microsoft Windows (Bootcamp, VM, or otherwise). Disable Flash plugin in Chrome. Only install signed apps.

Run good AV on your incoming mail server. For testing on Windows, use a separate box or host it remotely.

[1] http://www.obdev.at/products/littlesnitch/index.html
Let me try to explain this better

Suppose you're doing the byte shuffling right? Or you split the hash value in two and you concatenate them in the reverse order, something like that.

Now here's the thing: if you have a determined attacker, they will figure out your code does that. So you gain no extra security from it

For a casual attacker this may be a bigger deterrent. Now, this casual attacker may try to create (or already has) an account, for which the password is known. So he goes and compares it trying to figure out your encryption mechanism

It's slightly more difficult than the guy that just used MD5 to hash the passwords (let's assume that's the minimum security people use - "in theory")

So, it's all fine and dandy until you have another 'increase the security' idea that actually decreases the security. And this is more common than you think.

Example: taking the hash and encrypting it (for some choices of hash and encryption)

(Not to mention when people think that because they use this 'improved security scheme' that they invented they can be lax in security elsewhere in the chain)
I'm all in favor of letting people work from home and facilitating remote work for certain kinds of projects, but if you seriously think remote work is no less collaborative or technology can replace "face time", I assume you're missing a lot of human communication skills.

Not only does physical interaction have a much higher bandwidth, it goes well beyond just the work. The more you interact, at lunch or in the hallways, the better you will be able to communicate with each other on all levels, and the better you'll be able to collaborate. And this is not a one time thing, this is a continuous process.

I would never hire people who lack the ability to recognize that vast difference to work remotely. For one thing, you don't have the ability to compensate if you don't even understand there is something to compensate for.

Hell, I wouldn't even hire a person like that to work on site.

And the fact that there appears to be a strong overlap between people who favor remote work and short-sighted people who seem unable to recognize its disadvantages is not exactly encouraging companies to hire remote workers.

Yes, hiring managers read HN, and these kinds of comments aren't helping to promote remote work. Quite the opposite. The pro remote working crowd comes across as a bunch of immature self-entitled whiners.
To me, google glasses is worth a buy for just only one reason: sousvelliance(or inverse survelliance).

When somebody crashed into your house, or you witnessed a crime taking progress, or remembering an important details related to business dealing, it just may be worth the 1500 dollars you spent to get a Google Glass.

Other application of google glass may provide utility on a daily basis. I can imagine getting 10 dollars worth of useful service from google glass everyday, and 5 dollars in security benefit for the surrounding society. Multiply that by 365 days which is 5475 USD in term of economic benefit every year. Don't forget to mention high value recordings such as record of criminal activities, abuse of authorities by cops.

(Of course, if you're too poor, than google glasses isn't worth 1500 USD even if it may be someday worth 1500 USD of value to you.)
If you think that's cool, someone will be around shortly to explain how gcc will use SSE opcodes to improve the speed of string handling functions.

"He's honest, but you gotta watch him a little." - Tony (Chico Marx), "A Day at the Races" (1937)

Everyone talks about how close C is to assembly, and that's often true, but here we see how we benefit from how far it can be from assembly as well. The switch-to-jump-table trick is common enough some will claim it's obvious, but it isn't. Not unless you already know it, anyway; for a lot of newbies, the very idea of being able to jump to an address contained in a register is a non-obvious concept.

This is precisely the kind of trivial but non-obvious knowledge that should be encoded into compilers so the rest of us don't have to know it. That's a big reason why we have compilers in the first place.

Here's something that was on Hacker News a little while ago:

http://prog21.dadgum.com/166.html

http://news.ycombinator.com/item?id=5224576

"The Highest-Level Feature of C" is the switch statement
CMU undergrad and 15-122 (intro to CS) TA here.

As far as I can tell, there's a lot of awareness against cheating here. Most, if not all, of my professors have gone out of their way to stress how cheating is a terrible thing, devalues the degree, etc.

As a TA, I've seen some cheating on homework, but not nearly as much as described in the article. Our professor certainly does NOT turn a blind eye to it, assuming it's caught via software or we're able to catch it on the written part.

One of the worst parts of CMU is this weird aversion to seeking help. We try our best to hold a lot of office hours, especially in the lower level courses, but a fair number of students don't take advantage of them, or of the other helpful opportunities (e.g. one-on-one tutoring), because they fear some stigma against them. The worst part of CMU academic culture is that attitude: that it's not okay to seek help if you're struggling.

Shivak (another responder to your post) put it pretty well: academic stratification is what happens here, as well as some social stratification. If you're part of that group of people who fits well at the Gates 3K cluster, then you can get basically all the help you need from the myriad of upper level TAs who hang out there (hay geohot how do i kernel???). Also, CMU can be pretty fucked up socially in general, but that's for another post.
Quoting from the article it says "We are in compliance with DMCA as all companies, world-wide, must be." I didn't know that it's applicable worldwide. Wikipedia article states that it's an American law. Is there some kind of International treaty or that assumption is false?
> know that you'll get your payments eventually, so arrange for backup financing.

How easy would you say it would be to get a loan with "I have $N-thousand dollars stuck in my Paypal account, expected to clear" as collateral?

...actually, wait, that sounds like a [banking] startup idea:

> "We accept payments for an event into an escrow pool, then lend you (with interest) a percentage of the escrow-pool as an advance to set up the event, then release the escrow-pool to you automatically if-and-only-if there aren't too many complaints after the event [otherwise the issue goes to a set-length arbitration, and then we either release the money to you, or refund it in its entirety.] For trusted repeat event-creators, we may increase the loan percentage up to 100%, and may delay loan-interest accrual until after the event-date. We're also partnered with an event underwriter who you can allow us to ensure your event with automatically, in case of black-swan event failure."

Is anyone doing this? Is it even feasible?
The Science of Sinkholes: What You Should Know
That sounds like a reason to run every event as an individually-incorporated LLC, and then, in such a situation, let it go bankrupt.
Just configure Unicorn workers to that

Did you bother to read the article before spouting off half-cocked? RG apparently can't even run Unicorn because they don't have enough available memory.
Worse case, you have two pins, one on each side like any other, that are both actually the same pin.
Amazon is such an enigma to me. There are things about Amazon I really hate. The silly patents. The absolutely non-stop ad-retargeting. The often intrusive marketing emails.

Yet if you asked, I'd rate them as my absolutely favorite online company.

There is something extremely compelling about their brand. When my wife signed us up for prime, I actually became an even bigger fan (and I paid for the privilege!).

At the end of the day prime has been the thing that has made me into a internet-first consumer. I know I'll get it in two days, and it turns out that is soon enough for just about everything.
PHP Direct Variable Is Faster Than Getter-Setter
Very cool. How is the ink used? I think I will go read about offset printing. I mean we see the result every day, but just take it granted. Interesting
Announcing ReDonate: Recurring contributions done right.
Google search, that is how I found some places in London. And it was really great way to go, and some where very cheap. £50 a month!
Speak.js-- 100% clientside JS with eSpeak: C++ -- emScripten -- JavaScript
>> Reality check: if your credit card details are visible to a third party - you're not anonymous.

I totally agree. Luckily more and more VPN providers accept Bitcoin payment, so that problem is solved (if you don't connect your wallet to your ID, that is) [1]. I think the more challenging part is not sending personally identifiable information through your VPN or encrypt it properly. Much of the Web is architected to identify you based on the most mundane technical information, like your browser string, cookies, the way you type or those little data leeks that happen here and there.

[1] http://www.bestvpnservice.com/blog/vpn-providers-with-bitcoi...

ps. No, I don't use a VPN. But I like to stay informed.
The historgram seemingly fits Zipf's law. I am not shocked. That is a law after all.
I know, it borders my state. But the article specifies the one in Western Australia. Seems OK; but maybe I'm just getting too accustomed to the unhelpfully concise style of mathematics papers.

It was surprising to me too, but concluding it to be "so obviously false" seems unwarranted, especially online - where it's so easy to check. Dismissing surprises as incorrect narrows the world into one's model of the world. And to me, the unknown is more interesting than the known.
A16z ‘Decode’ Groupon CEO Andrew Mason’s Farewell Memo
I'm going to assume this was meant to be insulting. A lot of that is going around on HN these days. It's really too bad.

I'll just leave it at this. Isn't inspiration often the end-result of careful thought?

I don't see what about an office makes it the right place for the thinking you see in programming environments. I've solved more hard problems in the shower than I have at my desk.
The granularity and consistency of the ink I suppose.

What I don't understand is I'm looking at my CISS tank next to my printer, and the ink is an almost non-opaque liquid and it is not thick like paint at all.

My guess is that the ink in this video is not used for commercial computer printers, but rather larger machines that are used to print news papers and the like.
Maybe I'm traveling in the wrong tech circles, but I hardly see insufficient confidence in the greatness of ourselves as the major problem facing techie culture, such that we need more encouragement to cultivate such a self-appreciation. How great and ahead of our times we are, especially compared to all those rubes who aren't techies, is sort of an axiom of the culture.
In the open floor plan offices I've been in, those "focus rooms" quickly become de-facto offices for whoever can stake a claim to them first.
At a guess I'd say the whole place has really decent extractor fans as no one really seemed to be wearing much protective gear... and I assume there would be ample chemicals n the air. I'd also guess fans would do a lot for clearing dust as well as stray chemical fumes.
If they said, within hours, "We know they took nothing", they'd almost surely be lying, intentionally or otherwise.
Maybe use a more appropriate tool? That would be your life way easier anyway? LastPass? 1Pass, etc?
>I thought about saving this file on google drive, but their 2-factor auth doesn't seem to apply for drive (only gmail).

Huh? All of Google's logins are through their single-sign-on. TFA protects everything.

Also, please, just use LastPass. I don't know why everyone has it in their head that password managers are a hassle. It's literally easier than using the same password for everything AND more secure.
Doesn't look that good, could be scamming. Be warned!
You suffer exactly what you criticize. You preach cross discipline, yet make an absurd generalization that people from a single domain are the best at not being in a single domain.

Do you have evidence to back this up? Something more then anecdote?

You cannot know everything about every domain. There are people better than you at everything. The balance between specializing and diversifying depends on so many variables. This isn't something you can make a trite generalization about.

edit: And out of the professions I've experienced, the most widely diversified one is "I don't have the data to tell you."
NYT article on the single-word press release: http://www.nytimes.com/1998/11/09/business/media-talk-bookst...

Can't find the press release on Amazon's site though.
I am now patiently waiting for this cable to be jailbroken!
I had a spare domain and used it to poke fun at my girlfriend
I think eyestrain would be a factor if you're using these systems as an augmented display that's constantly on, but I don't think the point of these devices is to be constantly looking at them, but rather, to engage them as needed, otherwise, let them get out of the way.

His devices in the pictures are shown to get in between the eye and the external world, whereas, if you look at glass, the screen is up and out of your line of sight.

I think if your wearable tech display is always on and continuously visible, it'll be a problem, battery life will be negatively impacted, and the device will distract you constantly.
No government understands IT the slightest, because of that I don't know of a single governmental entity that cares the slightest of the rights of its citizens when it comes to computer and internet stuff. They don't even understand it so how can they be respectful of it?

As a Swede, I certainly wouldn't trust the Scandinavian countries for this. It's not uncommon to hear politicians claim that internet anonymity and encryption altogether should be completely abandoned.

Also, ISPs typically have numerous laws that forbid eavesdropping, VPNs don't. And seeing as how the government can always ask to get any information they want from any VPN provider (and that the VPN provider is, supposedly, legally obligated to keep records of their customers (in many countries, including Sweden)) using a VPN might be the worst thing you could possibly do, if you want anonymity or integrity. I'm guessing that most VPNs in Sweden straight up Lie about this, when this issue was hot a few years ago you either couldn't get a straight answer or you got one that admitted to record keeping - many (including many of those on torrentfreaks list) just stated that they had to, by law, keep records and that they had to hand them over if asked (with a court order). The law hasn't changed what I know, the PR department of VPN providers probably has though...

And even if they don't have any records to share, who is to say they can't, by request, eavesdrop on current traffic.

For it to have any real effect I'd choose a VPN that is in another country than the one you are in. Although this will probably not have any real effect either if you attract some serious attention, especially considering that unlike an ISP, a VPN provider could legally betray it's customers without an court order (in exchange for being quiet about it).
All I really want from computerized eyewear is telemetry for sports.

Current time/pace/distance/route/whatever when I'm running.

Current speed, next corner severity/distance when I'm longboarding. (http://swizec.com/blog/ifihadglass-the-app-i-want-to-build/s...)

That alone would be worth the money to me. Such things already exist for skiing goggles, but those aren't extensible and only really fit one sport. So that's no good.
Your comment would be so much better without the last sentence. As much as we all like Stripe, they didn't invent a new technology or kick start an industry.
Bradley Manning Wikileaks Court Statement full transcript
I think the list of examples could do with adding hobbyist unmanned drones and high altitude balloon and rocket launches.
CloudFlare was down
Yep, any website using CloudFlare's DNS is not resolving.
The second issue, the eyestrain from trying to focus both eyes at different distances, is also one I overcame—more than 20 years ago! The trick is to arrange things so that the eye behind the mirror can focus at any distance and still see the display clearly.

Sounds like he has some great insights here. He's also known as 'the worlds first cyborg' (http://en.wikipedia.org/wiki/Steve_Mann), and the lonely trail he seemed to be on is now shifting to the mainstream.
Cloudflare CDN has gone down.
It seems that CloudFlare's DNS is down, and affecting NameTerrific as we have a CNAME record pointing to them. I had to change the CNAME record to get our site working again.

EDIT: Based on Twitter search, all CloudFlare sites seem to be down.
Didn't William Gibson foresee the need for a "shared killfile"?
For those of us using cdnjs.com, hopefully you have local fallbacks.
Confirmed, several of my sites are down.
Wikipedia is right, they're idiots.

Related: https://thepiratebay.se/legal
Was just about to post this. All of my sites are down. :(

Edit: 5:01 EST ..seems to be up and down according to mass pingdom messages.
I really wish someone would make an early-adopter version of his EyeTap v4/v5 and sell it.

Would I pay cost plus 50% for one? Absolutely. Up to and including car-level prices. This is HN, a startup, anyone?
>> (if you don't connect your wallet to your ID, that is)

Which is not easy.

Either you have to mine your bitcoins or you have to trust a third party to exchange your bitcoins in order to disconnect the transaction history from you. But you do have to trust that third party.

Those are the only solutions that I know of.
Interestingly, Steve Mann coined the word Sousveillance
At its heart, though, this isn't a service problem; it's a customer service and UX problem.

Imagine that instead of the current Paypal interface, you had the following:

> Instead of having one email address to accept all payments, you created a new sub-account for each event/product/other "stream of payments" that you want to send/receive.

> Creating a "receive payments" sub-account pops up a wizard, that asks you what these payments are expected to be relating to--a product you sell, a subscription service, an event, donations, etc.

> If you pick "one-time event"--the fraud department is called down to verify you and your business up-front. It all gets explained in the interface, your sub-account just will be in a "verifying" state for a few days/weeks, you'll get phone calls and have to submit paperwork to make it "active." Meanwhile, the rest of your account continues to work and none of your other payments get frozen.

> This is on top of the fraud detection that already happens. If you suddenly receive $50k, no matter what the sub-account said it was for, then sure, pause that sub-account and have the fraud guys take a look. But if they pull up the account and the payment pattern exactly matches what they themselves already OKed you to do up-front--then turn right around and unpause it.

...

Now, this all already happens with Paypal! Big corporations know what to do to make Paypal work like this--create a new Paypal account for each venture, get Paypal on the phone yourself and submit all the paperwork and get them to OK it before you declare it safe to start using that account, etc.

But none of this is obvious to the average small-business owner who may have never used an online payment system before. They just use one account for everything, get popular for whatever reason, accept a bunch of payments or donations all at once, and get their entire funding stream suddenly frozen while Paypal does due diligence that should have happened at the beginning of the process, not right when the money is needed most.
Of course I am doing it ironically. That's not the point though.

If you think that someone at Coca-Cola Co. is going to wake up one day and say "you know, we are going stop making soda drinks and lay off thousands of people and cause unemployment for hundreds of thousands because after all,we produce a drink that's no good for anyone", then I think you are(just like OP) being naively idealistic.
Why use a forum? It'd be much easier to just set up a blog and anonymously write heavily baited articles for other site's communities.
There is a good chance I will not attend your conference if it's not payable through PayPal. As a customer the extra safety net is very reassuring.
I think that the problems you mentioned are either obvious (clearly being on always will reduce battery life) or just require better design: if the device is distracting, it needs to be adjusted so that it isn't (as an example, it could usually be pass-through displaying only a tiny information panel out of the line of sight like Glass, and only expanding over the whole field when some special feature is activated. Being artificially limited to never being an overlay isn't better than being able to be both an overlay and also just an info panel.)

The author posits that Google placed the screen out of the line of sight to avoid vision misalignment and misadjustment problems.

(Also, the eyestrain due to focus distances was mentioned, and apparently solved by using an "aremac": a pinhole camera in reverse which means the video is focused at every distance.)
On Equal Opportunity and Telecommuting
https://twitter.com/CloudFlareSys/status/308154786316963841

- There is a global problem that affects the CloudFlare proxy and DNS services.

- The problem appears to be due to bad routing.

- We are working to restore correct routes in order to bring both DNS and proxy services back online.

- The operations and networking team are all online and treating this as an emergency.

- We do not have an ETA on the response time but will continue to post updates via Twitter as we learn more.

UPDATE. Sites are being restored now. DNS is operating.

I don't know all the details as bugging the network team while they were fixing wasn't going to help. We'll get a postmortem blog post up.
Even their status page is down. And sure - all my sites too. And funny part is that for most of my sites i have stopped Clouflare features and use just their DNS. Never thought that I will fail because of DNS not being available.
It lets you read only sample content of the book. You can read it on Amazon site for all books by default.
This is what happens when people don't trust newspapers (for good reason).
This is down as well:
http://www.cloudflare.com/system-status

They should host this page on a third party provider.
All I really want is a network connection, an 80 chars wide Emacs terminal in the window and a chording keyboard strapped to my hand. This assumes a small Linux (BSD?) distro installed. The rest is trivial.

(Iirc, this is a setup one of Mann's students had.)

Edit: OK, I do want a camera too. And video log. And... But 80+% of usability would come from Emacs lisp (or short scripts run from shell)

Edit 2: Love HN. I comment about a setup I read about years ago and have been waiting for buying the hardware -- and of course get answers (I assume that w/out employment contracts, they would have been more detailed). Thanks.