skysight-inc/HackerNews huggingface dataset:
Timberlake is such a successful artist it is beyond reasonable doubt that all deals he has are on favoured nations terms so what he actually made is likely at least on the high end of your estimate, and circa $7MM in a WEEK is a fortune whichever way you slice it.

Also, Suit & Tie had 9,394 radio spins in it's first week, which is the most in the chart's history, that's a first week audience of 93.4MM people [1]. I'm not sure what the royalties are for radio play in the US, but I imagine it's nothing to be sniffed at.

Keep in mind, this is the first week; Timberlake is absolutely going to make a complete killing from this album and all the related opportunities that arise from it, e.g. touring.

[1] http://mashable.com/2013/01/21/justin-timberlake-suit-and-ti...
The $32000 for 7.7 million plays might be pocket money for Timberlake, but it's still a pretty good payday compared with the £17.68 per minute he'd have earned being played to (coincidentally) ~7.7 million listeners on BBC Radio One[1]

Justin Timberlake is also an outlier: he has a huge existing fanbase, had positive reviews for the album and received an avalanche of conventional publicity, including a systematic Clear Channel[2] campaign. It stretches credulity to suggest his popularity on streaming services was more a cause of than an effect of the demand to buy his album

[1]http://www.stevelawson.net/2009/11/if-spotify-is-the-new-rad... ... the author's revised opinion of Spotify is also interesting reading

[2]http://justintimberlake.com/news/2013/tune-into-to-your-favo...
I think there was a Wedding-related startup who released their similar pitchdeck awhile ago. Anyone remember what it was?
And if you have SSL anyway, why use passwords when you can use certificates?
Well done BBC, they could really be onto something big!
I once won a US-only Blizzard contest. When I unexpectedly won, I sent them a mail, and they agreed to ship it to my country (France).

I'm probably the only EU winner of this contest !
He and Jimmy Fallon did a History of Rap performance that is also pretty awesome.
http://www.youtube.com/watch?v=2EPl0OGz2Cg
LuaJIT may make the performance of Lua better or even just acceptable in some cases, but it does nothing to help ensure correctness. Correctness is almost always more important than performance. It most cases it is useless to do something quickly, but to also be doing it incorrectly.
Probably the best point made in this article is that universities aim for "surface" diversity: they take the easy route of pretending that picking enough students of enough different racial backgrounds is actually making their school diverse. Its not. You end up with a bunch of kids from the same upper middle class suburbs. They might not all have the same skin color, but they will have the same accent, culture, and their version of a summer job in high school was at a shopping mall.

I felt like an alien at school. Rural communities have a much lower cost of living, but also a much lower income. A rural kid who makes it to a university will almost certainly have to work an almost full-time job just to cover their living expenses, books, tuition, rent...etc. This divide was apparent to me as a student at Virginia Tech. 80% of VT's students come from the wealth DC suburbs. Yet wherever I worked when I was a student, the vast majority of my coworkers were from rural parts of the state. The "NoVa" kids in general didn't have to get jobs at all due to their parent's earning power. For them, rent was a joke. For rural kids, rent for a room is half what their parent's pay on mortgage or rent.
Take this single piece of difference, and then extrapolate it to every other aspect of culture.
First of all thanks for doing what you're doing, trying to make a positive change. I can imagine it requires a lot of your time, financial resources and causes additional stress. Most people (including me) would probably just give in to avoid the hassle.

Nowadays I only fly to the US if I absolutely have to. Being treated as if you're a criminal and having seen how the US border control shouted at a woman in a wheelchair and made her cry was enough for me to choose other holiday destinations in the future, where you are more welcomed as a tourist.
I don't really get the "legacy" systems bit. Are you passing around the person's password to every back end server? Why? Just auth once and pass around the user id. You should trust your internal systems, not require each system to reauth. Security around the perimeter, once you're in, you're in.

Though to be fair, when's the last time you heard about a bank's password database getting stolen?
Some context: a libertarian think tank recently named North Dakota the freest state [1]. Salon ran an article on this disagreeing somewhat [2].

[1] http://freedominthe50states.org

[2] http://www.salon.com/2013/03/28/libertarians_name_north_dako...
The Next Big UI Idea: Gadgets That Adapt To Your Skill
2. Is the fundamental deal breaker. They're impossible to use in a multi-developer environment, because of the absolutely guaranteed merge conflicts at every turn.
First Public Use of What Became Proxima Nova
You Need an MVP
That is only from Spotify streaming for the 1st week (not his total sales through Amazon, iTunes, etc).
Machines of Laughter and Forgetting
We use on-line standup meetings. Notice people are meeting in the Teamspace standup room, click in, chat briefly until all are there (about 30 seconds). Then call out your issues and blockers round-robin for a few minutes. Then click backto your home office.

12 minutes, a team of 8. Every time.
My question: How much of this is Timberlake leveraging his success in careful, well-calculated ways—and winning big, and how much is it the streaming? The scarcity of new Timberlake material for seven years probably created an atmosphere where fans were super-curious.

There are broader lessons in marketing here beyond just the streaming. The streaming is one element.

A recent Billboard interview with JT's manager, Johnny Wright, sort of underscores this: http://www.billboard.com/biz/articles/news/branding/1552474/...
there are many apps built around mongodb that it would be interesting to do a drop-in swap with postgres (assuming protocol compatibility).

hell, ill personally pay a lot to have a mysql compliant interface just for WordPress!
Skycons: ten animated weather icons, generated by JS using the HTML5 canvas
What UI really is (and how UX confuses matters)
Or they could generate say, 10 masks, hash them along with the password and then only present you with one random mask from those 10.
Why do you need me ? I am just that crazy troll who believes that no database is perfect for all use cases and that making blind generalisations like "all NoSQL is bad" is stupid. Especially since MongoDB is as different from Cassandra or Riak as it is from Spanner as that is from the other 120+ odd NoSQL databases.

And if benchmarks impress you I suggest you take a look at Cassandra sometime.

http://techblog.netflix.com/2011/11/benchmarking-cassandra-s...
> I am - without being an expert - pretty sure there is a procedure for care givers.

I think half of the problem is the plethora of examples where the TSA does not even follow their own procedures, making this moot.
12 Google Web Font Alternatives to Helvetica.
I don't quite understand the maths behind all this but it certainly sound positive overall. It normally takes a while for things to get to the consumer but how long do we think it'll take to get to us or cars? Will it even get to consumers?
Here is the attack scenario: Alice is trying to login to server Bob, but her WiFi access point Eve is running a protocol-mismatch attack: Alice communicates to Eve by HTTP, which Eve records and then transmits to Bob by HTTPS. We'll assume that Eve does not inject her own scripts but just eavesdrops on the conversation.

Your problem: clientHash is "password-like" and Eve can use it to log in.

One solution: use the HTTPS auth methods. Unfortunately, this is not the standard in the industry because the GUI is ugly.

The reason why this is an even bigger problem than you might think: what does the login method do? It probably sets a "remember me!" cookie, which is also "password-like" for just about every purpose. Eve sniffs the cookie and can use it to compromise the account in the future.

Also the 'remember me' cookie is probably stored in the clear in the database. So much for that, eh?

What you really want is a system based on digital signatures: whenever I make a request I digitally sign it. But the core problem is that I don't want to type in my password for every damn request, so this is being cached between requests and between page views. Depending on how it's cached, there are vulnerabiities -- especially if you just have your browser automatically fill in the password blanks, but also if you carry these "password-like" login cookies. A system of delegation and revocation can be done, but you come dangerously close to reinventing a public key infrastructure if you go too far down this road.

HTTPS auth methods can help out quite a bit, but can be hard to set up with a custom backend and hard to test against that sort of "downgrade attack" I mentioned in my first paragraph. The best of these ideas is to give your users client certificates and thus be safe forever, but nobody has found it useful enough to actually do this.

The only real alternative has been to remind the customers to always look for the s in the "https:// in the location bar. This is stupid and now there are some proposals for browsers to ship with lists which are "Expected to be secure", to avoid it, but yeah, we never really outgrew it.
Django's CBVs were a mistake (05/2012)
Some people apparently ask for votes, and some people apparently have voting rings.

On the other hand, during last year y submitted ~20 stories and probably ~4 of them were popular enough to reach the front page. But I never asked people to vote, they get to the front page alone.
http://skeptics.stackexchange.com/questions/6828/was-the-exp...

Funny that the experiment was mentioned many times in different occasions, and it's not clear if it was ever conducted. Still Bears around the Internet believed it and just kept repeating it in every opportunity ;)
Agree completely about bundling and the mobile phone industry. However, the point of IE was that it wasn't a standalone browser but a set of components that could be used by many other applications. For example, Microsoft Office didn't need to have its own HTML rendering engine, but could use the same rendering object as IE.
<i>If it were a prescribed liquid, they would have let him on no questions asked.</i>

This is incompatible with juice just being silly - unless they test both the prescribed liquid and the juice for absence of explosives, they have no way of knowing that the liquid in a prescription bottle is in fact a prescribed liquid.

Do you think terrorists just wouldn't think of labeling their mythical liquid explosives? Or do you implicitly believe that defying authority is what is "silly"?
> My latest project is INDOCTRINATOR: http://indoctrinator.com but I've developed other successful products.

"INDOCTRINATOR is an email program that reveals the secrets to becoming obsessed over anything, even something you hate."

Pass.
I now have a one-VC per storyboard rule, which helps. I wouldn't use them all if I could design custom table/collection cells in xibs.
While i understand how important writing skills are,one should admit that they are heavily culture loaded.The very bright poor that i personally know avoid the top schools because they require too many essays and instead just fill out the short objective application forms that most state schools provide.At my local college i usually try to find out high rich someone is by comparing the mathematics/critical reading scores vs the writing score.The smart but poor have high critical reading and Math scores,but very low writing aptitude test scores.
> PS: Oh, and you'd think the fact Secure Boot "CA" is controlled by an American company would raise some eye brows at Bruxelles ...

The CA is only controlled by an American company if you, the user, choose to stick with that CA. You are free to reconfigure your system to use a different CA.
“Sometimes, the elegant implementation is just a function. Not a method. Not a class. Not a framework. Just a function.” — John Carmack
In the comments, someone says: "We were campaigning against Restricted Boot 10 years ago..." and gets the reply:

"Yes, you were campaigning against Microsoft. However, when Apple implemented the Palladium spec to the letter, most people folded because they were more anti-Microsoft than pro-freedom and were taken by the shiny stuff. Now it is acceptable to the public to buy locked down devices."
What's Better? Early Revenues Or Rapid Growth?
Or you can use a build system like Tup, which uses inotify to notice when any dependencies change: http://gittup.org/tup/
I'm sure it doesn't scale perfectly. However, it is not unreasonable to think that lending small businesses money can spur job growth. If you need that 100k to expand your shop and pay for a new hire to help, it totally can work. This is how capitalism and economics work in general. Someone borrows money to start/expand a business. They hire someone to work, that person makes money that they then spend at other businesses, which then gives those businesses more money to expand and hire. If lending money didn't create jobs, we'd be back with horses and wagons.
Hi, I filed the bug. I definitely don't think that Microsoft deliberately went out of their way to cause issues for LibreOffice. I am surprised that they basically allow untrusted input like a font to be passed to a kernel function, which can then cause the kernel to panic.

I don't think I've seen any kernel deal directly with fonts. I understand the reasoning they added the GDI to kernel space, but IMHO it seems to me that they should seriously reconsider their reasoning.

At the very least, they need to relook at their glyph parsing/building algorithm and perhaps look into better fuzz testing around these routines. Just my 2c :-)
Interesting article. My wife grew up in rural Iowa and told me the same story. Nobody even applied to the elite east and west coast schools. If you were a great student you applied to the university of Iowa.

She also thinks that elite colleges undervalue the kind of extracirriculars common in rural areas: FFA, 4H, etc. When I was in HS, our extracirriculars were things like robotics club sponsored by the DOD. In a way, both are representative of their region (middle America versus inside the beltway).

I think ultimately its bad for diversity to take ECs into account. Too much cultural and social bias inherent in that. Think about the kind of ECs elite colleges like to see: concert pianist, interning at a research lab, community service, etc. Unless you have a real sob story, "work" is not very high on that list. But by and large people who can spend all summer on community service projects are not people who have to work as teenagers to help support themselves.
Boston Startups mapped - Infographic
"Fair use" is, by definition, an issue involved in copyright. But I see your point- if APIs are copyrightable, then uses of that API may be "fair use." But then someone's got to drag all the potential uses through the courts to determine what's fair use and what's not (because apparently fair use can only be determined by the courts...) I would surmise that, in this dystopian fantasy world (and I hope it remains such), 'interoperability' would be the de facto fair use and any other use of an API would legally require a license. What a nightmare.
Google's 'If I Had Glass' winners: celebrities and popular Twitter accounts
Looks like an issue for Mathematica users also:

http://mathematica.stackexchange.com/questions/15456/version...

Mathematica even had to release an update for it:

http://support.wolfram.com/kb/11160
Good Designing, Bad Designing
One of the things that I've known for years but has become increasingly evident is that there's the social nature of academia and then there's academics.

We live in the age of the net. Knowledge is out there for the taking. Communities of people? Different thing entirely. Physical communities of people have value.

So when we say "college", we can either mean learning that knowledge and skill which will prepare you to begin really learning in the real world, or we can mean a place you go to appear smart, hang out with famous people, and make friends that can do you favors somewhere down the road.

We use "college" to mean both things, but more and more these are vastly different concepts. As students, it's probably important to understand whether your goal is to position yourself to actively engage in a discipline, or position yourself to actively engage in a community.

It's important to know that because most elite colleges are starting to look pretty generic in terms of politics, philosophy, and worldview. Either it's worth all of that money to hang out with the right people, or you're better off picking up classes at the community college for your undergrad and then taking a look again at where you are.
Easy and Practical Web scraping in Python
Can a malicious (or unfortunate) webpage bluescreen your computer, just by serving this font as a web-font to render a page?
The key to proper analyst of data is deciphering what is correlation and what is causation. The article mentions that in Spotify’s home of origin Sweden, where it is extremely popular, majority of people stream music, and do not pay for individual albums sales. Easy to argue his album popularity on streaming only services was mere correlation and did not lead to increase album sales. If you follow the industry closely, you’ll notice the article left out the well known sales boost Grammys performers get. This post Grammy Awards sales boost is a know fact. Justin Timberlake had an advantage, he was the only popular performer at the Grammys releasing something new after the Grammy Awards. The other performers albums were already out for a year a more. We can also argue that the free streaming on iTunes also help lead to sales. The streaming on iTunes is ideal, it is only temporary, so if you really like the album you’ll have to buy it. Another important data point that was left out of the article was Justin Timberlake's album was heavily promoted on the new Myspace. Despite Myspace seemingly zombie status it still has millions of users, many of whom still go to myspace for music.
The problem lies in the information gap that exists between rural communities and wealthy communities. The wealthy communities have people that have gone to top colleges providing information and knowledge to young kids, and rural communities don't, plain and simple.

Technology has the opportunity to change this, and although it hasn't drastically altered the information gap yet as it relates to college counseling, it is starting to. ConnectEDU is the most interesting technology company working on this problem that I'm aware of right now, but I'd love to hear about others as well.
Jessie J Official website has been Hacked by Hackers
Have dinner with other founders in your area
Most parents like mine, who had never gone to college,
were either intimidated or oblivious (and sometimes
outright hostile) to the intricacies of college
admissions and financial aid. I had no idea what I was
doing when I applied. Once, I’d heard a volleyball
coach mention paying off her student loans, and this
led me to assume that college was like a restaurant —
you paid when you were done. When I realized I needed
my mom’s and my stepfather’s income information and
tax documents, they refused to give them to me. They
were, I think, ashamed.

Almost painful to read that. Hit close to home a little too much. Sometimes I wonder whether it's simply willful ignorance by the upper class to ignore the realities of the poor class.
Have to admit that has also been my reaction to some of these javascript async frameworks based on promises or deferreds. Congratulations, you've reimplemented a quirky ad-hoc variant on the continuation and error monads.

Perhaps people don't spot the link as easily because monads are usually explained in terms of a type system, and javascript is untyped? (Or perhaps just because Monad is a very abstract abstraction :)
while inotifywait -qe close_write $(SRC); do $(MAKE); done
there is also a third approach for those who want to write composable, functional javascript http://dfellis.github.com/queue-flow/2012/09/21/tutorial/
I hope Android turns out to be a profitable platform for Paradox Interactive. Paradox is known for pushing creative game ideas and is not afraid of niche markets (like historic politic simulators). They have earned a lot of credibility in the PC market, both as a publisher and a developer.

Its good to see that they now look beyond windows, and most of their own games are perfect for touch based devices.
"1. overestimate the size of your data, (especially since relational models by design squeeze out all duplicated statements of data)"

Of course, this is opt-in in a SQL world, more's the pity. I've seen some nightmarish ActiveRecord spawned Postgres monstrosities.

I wonder how much of the attraction of schema-less DBs comes from the lack of friction between the largely guarantee-free idea of data storage precipitated by Rails misfeatures -- there's much less distance between a MySQL or Postgres database as "designed" by ActiveRecord and a NoSQL instance. Having already opted out of your database's particular guarantees, there's very little keeping you there.
Huge Christian Holiday Today and Google Celebrates Cesar Chavez?
Huh?

I'm not a Christian, just wondering if there were some sort of policy at Google that prevented them from celebrating the obvious holiday today for so many of the world's peoples.

https://www.google.com/

Anybody know anything about this? Cesar Chavez? If I didn't know better, I'd say Google was picking a fight simply looking for more PR, but that couldn't be it.

ADD: Please no religious bickering. Google could have posted a picture of a bunny, or a couple of Easter eggs. My point is that they run so many obscure holidays, why miss one of those celebrated by huge numbers of people?
As you apparently haven't done any research, you might start with the relevant Wikipedia article. It starts "Rice burner is a pejorative describing Japanese-made—or by extension, Asian-made—motorcycles and automobiles. The term is often defined as offensive or racist stereotyping."

In your continued research, please examine the full etymology of the term rather than your most proximate use and address how "rice" became part of the pejorative.

Bear in mind also that the practice of putting stripes on a car to give the appearance of speed is 40+ years old. They are called "go-faster stripes", and the practice is applied to a much wider range of people than your example. Most of the people who follow the practice are not "ricers", so your definition here is necessarily incomplete, and I would say negligently so, though apparently due to ignorance and not malice.

To highlight some of the history, consider a 1968 usage: "A Show surprise was the hotted up Rapier H120, breathed on by Holbay, jazzed up with Epilogue Earls Court Yankee-style go-faster stripes along its flanks" or the a 1989 book on the 25 years of the Mustang: "There were no significant changes from 1976 through 1978, only a selection of dress-up kits, go-faster stripes, and big, bad snakes splattered across hoods." The term even entered more widespread use. Quoting from "The limits of administration" (1976), "British Rail and the Canadian Post Office have responded to criticisms of delay and inefficiency by adopting 'go-faster' stripes as their motifs."
I put a super basic human authentication system on my wedding website in the online guestbook. It was just a simple form that was getting hit with spammers, so I added a super quick "What is the groom's name?" field to the form for authentication. Spam stopped completely. Sometimes, depending on the website, a super secure captcha isn't needed.