skysight-inc/HackerNews huggingface dataset:
Discover (the credit card company) doesn't allow non alphanumeric characters in their passwords. I harangued them until I got a reason why: that way, they got fewer people bothering customer support with password problems.

(I wonder if they got any other people besides me bothering them because of that rule...)
LevelDB vs Kyoto Cabinet my findings
Unrelated to the topic at hand, but I've been happy with SmartOS. It's firmly and solely an OSS server OS, it's easy to use, many of the uglier Solaris legacy bits have been sanded off, and it has a decent package system (pkgsrc).

My earlier experiences with Solaris and OpenSolaris were mixed. SmartOS has been uniformly positive. Perhaps give it a try, although be aware that it (like everything illumos) is picky about the hardware.
Nice quote:

'outsourcing your trust' ...to the... 'morality of crowds'

Mik
I'm pretty sure this is no longer true. I use my strongest password (techniques) at discover, including symbols.
The need for that form of reasoning seems to me to be a symptom of the way that we go about writing code. We don't need to worry about if line 10 executes before line 11 within a given scope -- we just know this. If we come up with a similarly simple way of writing asynchronous operations that have dependencies then we can read it just as fluently.

In my experience, promises do fill this role if they're used in a suitable scenario.
Report says – Involve in Social Marketing or Lose Out
What kind of security is that? Don't you think an attacker who can install a key logger could also install a screen grabber? This definitely smells like a false sense of security.
http://lukeplant.me.uk/blog/posts/djangos-cbvs-were-a-mistak...
http://lukeplant.me.uk/blog/posts/class-based-views-and-dry-...

IMO, CBVs are good, but for many cases FBV are simpler to code and easier to understand.
Natwest do exactly this.

They also require two factor authentication for all actual money transactions via a chip-and-pin card reader they ship to all customers. You only authorise one transaction for a specific amount/destination at a time.
Parse: Best Practices for MongoDB on AWS
SBoC: RedPhone Call Quality
Reliability is gold.

Thanks for the pointers. I will read up on GIN and hstore.

If nothing else, duplicating an element from a doc column to a first class field seems reasonable. Also, even in mongo one must define indexes which is a schema of sorts and can be non trivial to change.
Yes, what about them? Who studies WebKit? Or the Kernel for that matter? A minority? Because that's perfectly in line with "not so much".
Disney lobbied heavily for the 1998 Copyright Extension Act to prevent Mickey Mouse entering the public domain, but as mentioned the copyright duration was already insanely long (70 years) by then.
On the flip side, the lean approach typically results in a new product that is only incrementally different than the one it replaces whereas in a more top-down approach, there is the possibility of creating something game changing.
Why don't you just tell them that for technical reasons, the lowest you "can" limit it to is 12 characters?
Justin has a series of videos on the fretboard organization [1]. From looking at the contents of the linked book, I think it covers similar material. And he sells an ebook Chord Construction Guide [2].

[1] http://www.justinguitar.com/en/TB-030-CAGEDsystemVid.php

[2] http://www.justinguitar.com/en/PR-011-ChordConstructionGuide...
>That assumption is that you have something to learn from the market that you don't already know.

In the Lean Startup book, Eric Ries defines a startup as "a human institution designed to create a new product or service under conditions of extreme uncertainty". "That you have something to learn from the market that you don't already know" isn't an assumption, it's a premise. If you already know about the market, then you aren't facing conditions of extreme uncertainty and you aren't, by Ries' definition, involved in a startup.

Lean startup doesn't claim to be the solution to every business' problems in the world. It's a solution that works really well when you're dealing with a lot of unknowns. One way that entrepreneurs deal with unknowns is by speculating and acting on assumptions, which often turn out to be wrong resulting in waste. Ries argues that this excessive waste is avoidable by taking a more scientific approach: identify your assumptions, validate them through measurement, adjust your product/strategy according to results, and let that process of validated learning pave a clear path for your business through the shadowy unknowns.
No way to filter by DRM free criteria there?
SCO was a dying company that tried every dirty trick in the book to blackmail the world into giving it a free ride to newfound riches based on ridiculous claims.

Actually, ironically, it's not SCO that tried to sue every Linux vendor, but the Linux company formerly known as Caldera Systems (of Caldera OpenLinux). They purchased SCO's UNIX business and renamed themselves to The SCO Group. The real SCO was renamed to Tarantella.

It's sad, not only is the name of 'old SCO' forever associated with attacks that they did not participate in, the Linux ecosystem was actually under attack by a (former) Linux company.
Um. There are certainly smart people in the Reddit crowd, but the average is decidedly sub-par. For that matter, HN is a pretty good site as far as scientific discussion goes, but it's still total garbage compared to a grant review panel.

If you want to be viewed as a source of legitimate scientific funding, you need to solve the credibility problem. If you get tagged as the funding source for crackpots, you'll never shake the rep.
All the other programming languages. What makes C# and Java particularly special?
Couldn't you solve that by hashing it again on the sever?
That depends on what you think is important in Java. The language? Plenty of alternatives. The virtual machine? Not so much. Or perhaps even the class library?
Try something like this, off the top of my head: http://pastebin.com/srYteiXQ
It's a wonderful counterpoint to the "old innovators" piece earlier . . .

That snark aside, I commend Smit on his (meta?) self-promotion. He's "hustling" a blog post about "hustling". And we all read it. Success! I don't like the content much but there's a certain poetry to the whole thing.
what spam???
Care to elaborate on your last sentence? I'm really curious about some corners of software history and this seems like a hint of a corner I never knew existed...
The smaller the commit, the more likely that it needs a proper explanation of why it was made.

When you find a commit from two years ago that changes a constant from -1 to -2, and the commit message says "constant change", or "bugfix in floobers" you're left with no context.
Hey, this is exactly what I was looking for! Thanks. Can someone explain why css animations are more efficient than javascript animations? Or is it just a matter of preference
Unfortunately Steam remains DRMed, so it's not going to "cut it" for Linux gaming (i.e. to be a presentable selection of Linux users), since Linux crowd has little respect to DRM and many aren't using Steam because of that. The only hope could be GOG, but they aren't itching to start selling Linux games yet (feel free to let then know if you are interested: http://www.gog.com/wishlist/site/add_linux_versions_of_games ).
the edge goes both ways - if it somehow (hopefully, now its false) judged that API's _are_ copyrightable, then what?
If you don't use the full hash, I believe you can't really make any guarantees about the variance and distribution of characters in the hash. So not sure that's such a good idea.
SBoC: Highly Unconventional Suggested First Aid
I'm just not part of any of those discussions. Besides, the code around passwords and their configuration has barely changed in the last decade; and the people who wrote it are now the ones discussing security with the banks.
SBoC: Dirigibles, Chinese Junk Rigs, and Surfboards
How would it compare to OpenBSD of FreeBSD? Both beat Linuxes at "stability" and security, but there seems to be easier to find docs about them and software guaranteed to work on them. Why would I learn/use it besides for the fun of hacking on it and the support for exotic architectures?
You mentioned "Microphone and codec performance" as well as device
details (vendor, model, OS, etc.) but I'm wonder if you'll try leveraging
multiple microphones (on handsets that have them) to help eliminate
echo?
Secure Boot and Restricted Boot
I use Wine with Windows games from GOG. Many games work great (from time to time you get exceptions which don't work with Wine, like this one: http://www.gog.com/gamecard/heroes_of_annihilated_empires ).
Rebase is polite, imho. You probably want a pull request that is "clean" for the code reviewers. And future bug chasers. A bunch of interleaved commits makes it harder for anyone to reason about the code history.
I didn't mean to imply that you'd just store the hash the client comes up with. That's idiotic, of course. Not everyone uses SSL, even though they should, and it's not always secure, and even with the use of SSL, it seems that there would be a potential length attack that could be employed to effectively guess a user's password length. So in all cases, IMO, it makes more sense to be receiving a fixed-length thing that is fairly insensitive to attack in itself. So perhaps a user has 2 salts associated with their account, per password: an auth salt and a storage salt. Then an auth looks something like this:

hash(saltFromServer + hash(password))

And then the server would do

hash(user.salt + clientHash)

I'm not sure, but this seems reasonable to me.
You know, it could have been gone this way:

Manager: Make me a captcha.
Dev: We don't really need one, all we need is a simple way to avoid dumb automatic submits.
M: Use a simple one, then.

... a few minutes later...

D: Here it is, the user just has to copy over those four letters.
M: Hey this is not a captcha. It does not look like a captcha.

... a few minutes later...

D: Here it is, now it looks like a captcha.

On the other side, it could be very true that if you don't put some annoyances behind it, "normal" people don't recognize it as a captcha... And most of the time (on most custom low traffic sites...) you don't really need much more that a static "write the result of 2+2".

I've been there, I've already done it :-)
I think the upvotes work it out well. It isn't like the front page is inundated with personal life stories. If one in a while is voted up it likely left a mark on people.
If you do a copycat with the sole goal to copy a business model that works for someone else or might work for someone else in the future (exit driven) it might be a "top-down" situation.

Let me make an example: There is Stripe.com and some German clone called paymill. Of course the clone didn't need to start lean because Stripe already validated the market for them. On the other hand beeing non-lean and non-agile will be very painful, when the "original" pivots or expands into new markets/offer products that are not validated yet)…
On mobile safari it seems to keep opening and closing the menu as I scroll, seemingly randomly.
Could work as a non profit like Watsi, people could donate to keep the site going if it helps them.
SBoC: Streamlining TextSecure Settings
That's what we said.
Responsive Design for Apps
Some context here:

http://khitchdee.forumatic.com/viewtopic.php?f=21&t=297

(The site is a forum being used as a blog / CMS.)

I have my own reservations about the Lean Startup book -- but most of it comes down to an allergy to it that I developed from reading HN. I got around to it last week on a personal recommendation and it wasn't half bad.

I'd say the biggest problem with how people approach it is that they fixate on the MVP rather than the cycle. The MVP is just a particular cycle.

As benjaminsull pointed out, the Lean Startup disclaims coverage of domains with well understood product models and mature feature-development ecosystems.
If you're planning to startup, what you'll here from most people is how you should follow lean startup principles. The point of this writeup is to give some breathing space to those entrepreneurs who have a top down idea. It's to encourage them to go for it instead of questioning themselves. Typically, the game changing ideas come top down and not bottom up. If you want to change the game everyone's playing, you have to step out of it first.
Just plain-old native functions - that's the whole point.
The central question of the Lean Startup book is: how do you know that your top down idea is correct? Strictly speaking, until you go to market ... you don't.

There are two basic classes of strategy to doing anything:

* Commit all your resources in advance

* Incrementalism

In situations of uncertainty, the latter is a simple risk management strategy. Armies have scouts, marketers work in test markets, engineers build prototypes.

What Eric Ries is selling isn't strictly new. But it's a cohesive repackaging of extant ideas that in my opinion is useful for making a single universal feedback loop the basis of a business.
I'm too young to have been aware of this part of computing history as it happened. But I did at one point go back to run photoshop 2 under emulation just to get a feel for its abilities. The amazing thing is that provided you understood the underlying mechanics of how effects like drop shadows or smoke halo's are done you could do them in photoshop 2 (and I assume version 1 as well). Instead of layers, which version 2 did not have, you would just put each "layer" in a separate image and then periodically combine them all in the right order into a target image through the filter effects. You could do reasonably modern effects on machines whose speeds were measured in mhz, not ghz.

I often think about how incredibly inefficient modern software is given that we've had roughly the same level of productivity software ability (with varying levels of usability) for a few decades now. I distinctly remember my NT4 system of the late 90's, and how it was roughly as productive as my current machine, and I wonder just how much cruft is inside modern operating systems and applications.
Tell HN: I will never buy and will never suggest  to anyone any Mac computer.
Recently my Macbook Pro (7,1) Mid 2010 started to freeze out of nowhere and it turned out it's logic board which needs to be replaced. It's been 2 years since purchase and it has this creepy thing. I expected it to run for 5 years against the money I paid but then what do you expect. Then I googled for how much logic board cost and whoop! More than the cost of the new upgraded Macbook available in the market. That's a shame!

This is now decided. I will never buy any Mac computer because there is no chance of getting them fixed neither I will suggest anyone to do that as previously my brother and few friends bought one because I said so.
Why does a site limit password lengths at all? Because at some point, some other limit will be exceeded. For example, HTTP POST size or even working-set size. But the question is specifically about low maximum password lengths. This boils down to hashing vs encrypting. Hashing (with or without salt) will produce a fixed-length output. The size of storage for this hash output is pre-determined. For example a varchar(20) for SHA1. For encryption, you have to take the plaintext bytes and produce a ciphertext of a maximum number of bytes to store. Now we have both a limit on the number of input characters, but also on which characters are permissible. Let's say a site allows the Euro symbol, passes that UTF8 byte stream through an encryption algorithm, base64 encodes the result and stores it in a varchar field. The trouble is that the Euro symbol is composed of a 4-byte multi-byte UTF8 sequence - F0 A4 AD A2. If a password system didn't take account of this, they could easily overflow the storage limit and potentially expose internal details via an error message to the user.

The simple answer is just to hash+salt and then to limit the input length to some large value to prevent blowing HTTP POST or process vm limits.
Modern browsers can hardware-accelerate CSS animations. http://blog.teamtreehouse.com/increase-your-sites-performanc...
It’s Big TV vs. Big Telecom Over Broadcast Spectrum
LOL, I'm just waiting for some crooks ordering $200 or such to a remote address, beating up the carrier and taking the money.

Also, chargebacks - they're giving up hard cash in exchange for a card swipe? LOLOLOLOL (but okay, I come from Germany and am used to proper card payments with EC cards)
That might not be good for the phone. The benefits achieved by having the microphone slightly closer to your face are more than outweighed by the damage of leveraging the microphone out of position. It's probably best to leave that decision to the end user rather than try to implement it in software.
Lookin' Good.
I love ponies!
Will I have a chance at building this in 2-3 months?
I want opinions from others who have seen students do startups. I am a first year CS student and this summer I am planning on creating an e-commerce style web app. That is the best way to describe some of the technical challenges, additionally, users/sellers will be able to create accounts, rate sellers, rate products. There is really more to it but from a technical perspective it is comparable to what I describe.

Anyway - I want tips on building this thing. Just general advice. I am working with a partner, who is handling the business side of things, all I have to worry about is the product. About my experience - I really don't have much, but I have read a lot about the development process. I have learned Java and C++ in school, but I have been programming in Python on the side and I am most comfortable with it. I'm currently reading a book on creating a Django app, which I hope to have done before the summer. Other areas - databases, taking a DB design course, have played around with Postgres, but have not implemented one in production. Front end - I know my HTML and CSS, I'm not familiar with Javascript but I figure if I know C++,Python, and Java I can pick it up quickly. As far as hosting platform I plan to use Heroku.

So if I have 2-3 months to build this, do you have any tips on how to succeed in general - what am I going against. I feel like I'm in over my head, but each of the concepts individually is very simple. I have only been programming for 2 years, and the first 6 months of that was extremely laid back intro, 1 year of CS seems to help tons, but as far as managing a huge project, I feel overwhelmed. The other part of me says - go for it. I know it is the best way to learn. I know I am going to encounter technical problem after problem, and I am going to just hack it. I didn't discuss the idea, but I am really attached to it, and I plan on putting 110% effort into this things even if it means I am working on it non-stop. Even with this mentality however, I realize I am attacking a huge problem with no practical experience.

Learning as I go, the name of the game...
Basically, hierarchical and network databases were around before relational databases.

Both of them have the problem that they require a lot of up-front planning. When you build a hierarchy, you need to know how it's going to be used as that will determine the structure. Turning hierarchies into networks -- ie trees into graphs -- eases this a bit but you still have the problem of arranging things for easy navigation to nodes.

Say you build a project management system. Under a hierarchical system you might build it around the central concept of a Work Breakdown Structure. There are standard ways to produce these and they have a strictly hierarchical structure.

But here comes trouble, because now you've privileged the WBS over all other views into the model. So if for instance you're interested in an activity-based breakdown (percentage $ spent on documentation vs manufacturing etc), you're going to have to walk the entire WBS to work it out. Lucky you.

If you've ever queried an XML document in a way it wasn't originally set up for, this will seem familiar.

When relational databases introduced joins, lots of heads exploded. Pretty much anything that can be logically derived from relations can be expressed with joins, projections etc, without having to modify the database structure to accomodate those queries.

Now you can create a schema that relates WBS items to activities to cost accounts to whatever else. Now you can query them in any direction you like. Relational algebra means that the database can provably answer questions without having to waste time walking through a graph or visiting, potentially, ever node.

The historical systems to look for are IMS (the original hierarchical system) and CODASYL (a standard for network database programming).
There is no such thing as an entrepreneur with a top down idea. You can be an ideas guy, but you can't be an entrepreneur without taking what you have to customers and iterating on it until it's right.

Please give an example of a game changing idea that came about 'top down' ? Where do these ideas come from, in your opinion?
hammock polygon!
You know, this is really looking _good_.
YYYEEESSS!!!
Lisp: A Language for Stratified Design (1987) [pdf]
If you'll go as far as saving a truncated hash, it's better to just save the whole thing. I don't see any good reasons not to.
Which version of FreeBSD are you running? Usually people get that because freebsd-update cannot fetch metadata for the release they're running.
Apple is smart in that they let everyone else do the iterating for them, then extract the parts that work best with a laser beam focus. Apple have no original, 'top down' ideas.
The reusability test of function nails it. Thanks for clarifying it. Sometimes we just need to go back to the basic definition to make things clear.
Even if you do you'll still need EDITOR for interactive rebase.
I would guess it has something to do with Vim having a console version and Sublime not. Commit messages are so short he probably just wants it to pop up in his shell, rather than in another window.
Talk to Apple about it.

The logic board on my old Macbook Pro failed, I didn't have any receipt available. Took it into my nearest Apple Store and a day later they had it swapped out and working again at no cost to me.
Bitcoin transactions are instant. Satoshidice, a major bitcoin business, accepts zero-confirmation transactions.
Show HN:[Botcoin.js] Auto-trade bitcoins while sleeping
How To Choose The Right Face For A Beautiful Body
Ovalia Egg Chair w/ Integrated Speakers, Orange Interior
I read the whole article. My conclusion was that it was weak. But thank you for the condescending comment.