skysight-inc/HackerNews huggingface dataset:
> Does anyone honestly believe that these [two-factor auth] things provide additional security? It's like the TSA frisky-crotch-grope of authentication.

Yes. Especially as time-based passwords, a-la an RSA token or Google's two-factor auth, since they require something you know (your password) and something you have (the token). They expire and regenerate every minute or so, can't really be remembered or predicted, require access to a physical device that displays the password, and near impossible to predict without information about the seed.
Is there something wrong with what I wrote?
BitTorrent also solves this with, um, torrents.
is there a way to put an api key or something? I am not very comfortable putting my password on external apps.
You're probably thinking of Book It (http://www.bookitprogram.com/faq/). I don't think it is South East USA specific (we had it in the midwest and the website doesn't indicate that it doesn't apply nationally.)
Apkudo Wants To Handle Android Fragmentation So Carriers And Developers Don’t
I'll go one step further. Not only are deadlines necessary, but they should be announced to customers and stakeholders.

Being able to say, "We are going to release version 2.0 on June 24th, 2013" does a lot of things. First, it signals confidence in your ability to manage your time and resources. Second, it allows your customers to hold you accountable for missed deadlines. Third, it prevents cases where you con yourself out of meeting the deadline with seemingly valid reasons.

I refuse to buy products from companies who do not publicize their development roadmap. I'll give games as an example. Back in the day I used to play World of Warcraft, and whenever we asked Blizzard when the next patch or expansion was, they would reply with a flippant and condescending "when it's ready." This was such a common response that players would often use it mockingly and append it with a "TM", because it was a trademark of how Blizzard communicated with its customers. It was one of the main reasons why I canceled my subscription.

These days I play Planetside 2, and SOE is a lot better with communication and they go so far as to publish a list of scheduled features and their estimated timeframes. And if schedules change and something gets postponed, they update the list with an explanation of why that happened.

As a customer, I want to know what features to expect and when to expect them. Do not try to hide it from me because that will piss me off. The end.
Time to pay the employees more.
I personally don't care about it all that much, since I hold about zero affluence and clout on Twitter, but it's a stupid hassle to stay on top of for celebrities and the people managing brands and politicians.

I am a security zealot, and even I can't be bothered to have unique passwords on some - unimportant - websites.

It is so easy to set up for a user, and I might as well just have it, if it means all my sites are represented in Google's TFA app on my phone. It's no hassle to use at all, as long as the sessions last for a few weeks.
The poster may not appeal to a lot of people, but I certainly think it's pretty cool. Purchased!

It will look good on the wall with my 2010 radial world cup bracket

http://www.kickstarter.com/projects/hyperakt/2010-world-cup-...
Yes all SRAM
> especially in an age when running bots hitting every public facing piece of equipment is so cheap?

For me exactly that is a reason to disable versions. If I would be the attacker I would probably do a

SELECT hostname FROM scanresults WHERE webserver == vulnerable-version

Besides that, a header like:

Server: Apache/2.2.16 (Debian)
DAV/2 SVN/1.6.12 PHP/5.3.19 mod_ssl/2.2.16 OpenSSL/0.9.8o
X-Powered-By: PHP/5.3.19

...gives me a lot of clues for adjusting my exploit payload.

In practice it may be an obscure attack vector - who knows. But more information is always helping the attacker.

If there is a database somewhere (it is) - I don't want to have my specific versions in there. Who knows that kind of exploit is on the HN frontpage tomorrow.

"Security by Obscurity" is a concept used by bad cryptographic ciphers. See Kerckhoff's Principle. I don't see how this applies to server information disclosure.
Kind of reminds me of the movie "Taking of Pelham 123", where a stunt is created so that someone can profit by shorting the stock market. I wonder who made out on this one.
I use names from Alice in Wonderland.

whitequeen is my macbook, while my gaming rig is bandersnatch. The wifi id is throughthelookingglass, while the Timecapsule is called thecheshirecat, my iPhone is the dormouse.

I've some unnamed devices laying around that I've been meaning to get to :)
> Those in the closed Alpha have already synced more than 200TB since we started the program,” BitTorrent announces.

Umm, how do they know this if the sync is secure and only peer-to-peer?
CIA Drug Smuggling in Arkansas
There are automatic trading strategies that trade based on news events. Opinions on them are pretty mixed as none of the published ones show consistent returns above luck levels.

What is more likely is that human traders reacted to the tweet and caused microstructure changes that were amplified by algorithmic trading activity causing the rapid sell off. But then on the flip side those same algorithmic trades brought the price back to it's correct level just as quickly.

This is essentially a no harm/no foul event where the only people impacted are the game players.
'BadNews' Android Malware Briefly Bypasses Google Play Protections
The dumb things we say in the startup world
There are some benefits to removing things like banner headers especially where there is limited effort required to do so..

If the version headers are removed a manual attacker would have to try harder (make more requests) to attempt to identify whether the server software is a vulnerable version or not. this increases the opportunities for detective software controls (e.g. IDS) to detect the attacker and to potentially allow for defensive actions (e.g. IP blocking)

Also if a server version banner is present an at vuln. is discovered in that version its much more efficient for attackers to only hit known vulnerable versions and those can be mined from either things like shodan or the Internet census 2012 data.

A smart attacker would probably want to only hit known vulnerable targets to maximise the time before their attack is noticed and analyzed by defensive organisations and if you hit all servers, that'll include all the honeypots out there, making it more likely that your attack gets noticed and new signatures are pushed to alert/block it.
Ron Paul does not think Bitcoin "fits the definition of money"
It's an "honest mistake" only because we've accepted that "breathless-by-the-second-breaking trumps truthful" is an acceptable standard for news. The journos that hit "retweet" presumably did it because they felt their followers would appreciate the elite-ness of knowing 15 seconds earlier than their less-in-the-know friends.

IMO, there is not even theoretical public utility in immediately sharing a rumour, no matter how juicy, rather than confirming it and breaking it 10 minutes later. If you must, share it with a fat disclaimer that you're currently confirming it.
As A chem minor, I like anything chemical, Thorium is my most used VPS.
Population taboo isn't the problem. The problem is pleading and attempting to dictate to a person what they should and shouldn't do with their personal life. Considering the USA has actually had the fertility rate drop below replacement levels recently, I think it's a bit silly to tell someone to actually have less babies, and at the same time suggest adoption as a (more costly) alternative.

I'd sincerely suggest you reconsider looking into adjusting the quality of life in countries where high birth rate is actually a problem before telling someone how many babies they should or shouldn't have in a country with a fertility rate below replacement levels.
It's not far fetched to claim this. I'll admit it's unclear whether Posterous would have launched the way it did, or had any reaction similar to it, if we had not been through the YC program. The homepage wouldn't have looked the same (PG hammered us until it looked good). We may not have quit our jobs. We would not have been as aggressive about customer support. (Thanks Kevin Hale!) That's just n=1, but these stories are not uncommon among YC founders.
I tend to avoid giving estimates until things are very tightly nailed down. This because I know I am wrong in my estimates: wildly, horribly, terrifically wrong.

And I kind of have a problem giving wrong numbers to someone who will then use these numbers for planning. It causes dishonesty and error to propagate throughout the system.
Yeah I quit reading at "salespeople are competitive by nature"
Lawdingo: A Funny Ad For a Serious Business
Internet Explorer -- For everything you've done...
I agree with pretty much all of what you said about how a system like this should work. daemontools was next on my list of solutions to try out. I wish I had discovered runit before doing this rundown...my google-fu is apparently lacking a bit :)
Apple FQ2 results: 37.4MM iPhones Sold; 19.5MM iPads Sold
Yahoo updates Mail for Android slabs and iPad, to shut down 6 products
I, for one, would prefer getting my news from organisations that emphasise truthfulness over job security.
How to Think About Variables in C
Weird, if one's job is not plugin tester for nettuts I have a hard time imagining how Vundle could increase one's productivity. Installing and updating plugins is not something we do multiple times everyday. At worst, we do that every two months and it takes 5 (or 10, if we take the time to RTFM) minutes max…

> One of the first walls I hit was “how the heck do I navigate files in a project?”

Simple, just use or :Ex. Netrw, which provides the :Ex[plore] command, is a file explorer with a hell of a lot more features than NERDTree (browsing remote machines, for example) and comes with Vim. There's no need to install anything unless you really want something that is not in netrw. :h netrw

I second CtrlP. I love it. And both Syntastic and EasyMotion are pretty useful. Those plugins are worth checking if they solve a problem you have; otherwise don't bother.

But all those blog posts, always listing more or less the same plugins, may inadvertently make new/non Vim users believe that it's impossible to open files efficiently or do this or that with bare Vim which is rather unfortunate and… blatantly false.

Most of the time it's hard to say if the author knows about Vim's built-in navigation methods and decided to use a plugin instead or if he never took the time to learn them and just went with the most popular plugin out of ignorance and laziness. Like… if half the message was missing.
PS: If you think this is cool (and we do), then note that we're hiring Ruby on Rails engineers. And we're funded.

Reach out to russ@doubleup if you want to discuss. Tons of opportunity in this space for smart people.
Jonathan Blow - Conflicts in Game Design
Someone(s) also lost a LOT of money today. Given 2 scenarios:
A) A script kiddie had fun with a tweet just for the lolz and it had a short term unintended impact on the Dow.
B) There is a nefarious plot by folks who have the no how and infrastructure to pull off a highly risky, illegal trade who couldn't make more money just doing what they normally do.
For StackBlaze servers effectively had 2 available hostnames, the actual logical hostname (<function><id>.<lan>.<datacentre>.net.stackserv.com. e.g. wb1.g1.rbx.net.stackserv.com, db2.g1.stb.net.stackserv.com), then a cname'ed nickname (We used pokémon for the nicknames. pikachu.net.stackserv.com, charmander.net.stackserv.com).
Quick product feedback:

Needs an open recent or better yet, just open the last repository (I primarily only use 1 on a daily basis).

Other thoughts:

Move search to the title bar.

Closing an edit issue dialog shouldn't prompt if I haven't modified anything.

The issue preview (left column) seems a bit wasteful with space vertically (gap between issue title and authorship + timestamp).
If you are devastated by rejection, you are not getting enough of it.

It's very hard to get devastated by rejections when you follow 20~30 leads any given moment and getting rejected every day.
How to integrate Dailycred with an existing rails project
This reminds me of Daniel Pink's To Sell Is Human: The Surprising Truth About Moving Others. Worth a read if you like this.
The next billion dollar game company to be started will be built on Google Glass
This one makes a lot more sense than the yahoo acquisition considering Wavii actually developed their own algorithms
I'm not talking about tiger moms. The recent immigrants running a dry cleaner don't have a lot of time to over-schedule and over-pamper their kids...
get one of those Seagate GoFlex NAS and just install Arch Linux ARM and setup your domain and mail servers with it. Your data is saved with you portably.
first summly now this
It is better to start with small amounts, demonstrate viability of the concept and team, then work up to larger amounts. Even if someone would bet a large amount on you up front, you'll retain more of the company by raising most of the money after demonstrating traction.
Look under "What if several people make changes to the same file?" http://forum.bittorrent.com/topic/16410-bittorrent-sync-faq/
Are you telling me there is a market for laundering apps from the app store?
It seems they sold more iPad Mini's and their profit dropped. I imagine it would be even worse for their profit if they ever released an "iPhone Mini" or whatever that cheap iPhone everyone talks about would be named.
Ugh, I hate the attitude on display in this article.

The idea that everybody will benefit from your product, and that you just have to help them see the light is false and patronizing.

I would not benefit from a new iphone because my current phone does everything I want my smartphone to do.

"Uncovering problems for your customers" is newspeak for "selling a solution in search of a problem"
If you're looking for an all-in-one solution, there's FastSpring and its sister service for SaaS offerings, SaaSy.com
www.dnsimple.com
"least a few firms are starting to experiment with paying sales people a flat salary"

An "experiment" is all that will end up being.

I've been involved in selling and dealing with sales people (as a buyer) for a very very long time.

Simply not going to work at any scale. Goes against the psychological motivations of people and how they respond to rewards. Why not pay people for more effort? When you don't (say with a union) you end up with the postal system. [1]

Even with respect to sports people care about their individual performance greatly in addition to the team winning obviously.

Back to selling - Not that you aren't going to find a few people who don't fit the typical mold just not as many as you will need.

There is nothing wrong to tying compensation to performance and it actually works quite well. One of the things that I notice even when selling things is that if a customer paid me for 3 years in advance it more or less took the fun out of things and providing service that you have been paid for that way becomes much more of a drag than if you are earning it as you go along.

Money is a powerful carrot and for the right reasons.

Don't lump all selling and compensation into the mold of the abusive assholes portrayed in Glengarry.

[1] I was just at a high quality hotel where I noticed that the maids seemed a bit surly and uninterested when I asked them to make my room up or for extra towels. Seemed odd to me. Turned out that there is a room charge daily and that you don't leave tips.
Component Models in Java | Part 2
Duplicate your credit card with your phone. Just take a picture of it, upload and ....
Crashplan is great as a backup plan and offers a web interface for times when everything else has failed. I have used it to retrieve things a few times and I highly recommend it as a backup plan. But their web interface isn't their selling point, and you can't manipulate the files. It's read only access. It does track diffs, though, so that can be pretty handy.
Fuel cost is only 2-3% of the mission's cost, according to Elon Musk.
Rand Paul wasn't in office during PATRIOT's passing, so I suspect a troll.
Yep, Elon Musk has publicly mentioned that it will light up the engine to boost back to the launch site.

>So, I think, there's a number of improvements across the board, in structures, avionics, engines and then, as I said, this version [the Falcon 9 1.1] is really designed to be able to have the first stage come back - boost back – to launch site, deploy landing gear and actually land propulsively.[1]

With a flyback stage the optimal separation altitude and velocity drops, and the second stage gets even larger to compensate. But yes, the engine will cancel the downrange component of velocity and reverse it. Since the stage is empty the fuel requirements are actually quite modest.

[1] http://shitelonsays.com/transcript/crs-2-post-landing-teleco...
In what possible way did this impact the "average investor" (whoever that is)?

It seems to show a pretty stable market to me. Think of it this way, what would have happened before electronic trading if a fabricated wire release had made it into newspapers? It would have taken weeks to sort out and "average investors" would definitely taken a hit.
JavaScript Physics Playground
Is this the first time that a product has been launched with the primary motivation of showing that a particular protocol is good for things other illegal filesharing?

Up until now BitTorrent aficionados have tended to be forced back to the "I use it for Linux distros" when defending the protocol against ISPs and businesses looking to shape or block BT traffic.

If this takes off, then the "its only used for nefarious purposes" argument will be much harder to make.

I suspect that this is the real reason it's being launched - not that that's a bad thing.
Hi guys, this is Chris from Mashape. Thanks for all the comments and suggestions. We acknowledge the naming hoopla and are working hard to resolve it. But in behalf of Mashape I'd like to assure everyone that the library was created with the purpose of helping developers with cross platform HTTP requests. As such, we would like to invite everyone on 2 things: 1) Suggest a new name/branding for Unicorn, and 2) Contribute/suggest/fix the library as you see fit :) You can write to me directly too! chris@mashape.com . Looking forward to your comments!
> I have vivid memories of that time — my self-image had been wrapped up in being “a good programmer”, and here I was just hideously failing. I lost sleep. I had these little panic attack episodes.

I don't understand these people. If I'm in a situation where I am way above my estimate, I just accept that the estimate was wrong and make sure I make constant progress. It will get done when it will get done.
Not sure if serious. Investing long in e.g. the DJIA isn't gambling by any stretch of the imagination.

That's not to say there aren't plenty of other transactions that may blur the line a little more. Hell, entire options markets exist to make a commodity out of risk.
technologies of integrating multiple chips with tons of connections and speed(2.5D and 3D integration) [are] closing by

Just think of this move as part of the development of those technologies. And the $1 per 256 MByte doesn't apply to on chip integrated memory with high bandwidth.
From this I've learned that doctape sucks.
Perhaps another factor is the software's difficulty to successfully utilize more than a couple of cores? I imagine Intel thinking "We're a couple of process steps ahead of everyone else, we should take advantage of that. But adding more cores in the same package has reached dimishing returns due to pin count and main memory bandwidth. Most applications won't utilize that 13th hyperthread anyway. So let's improve the memory subsystem from within the package."
Kahneman's work was in calibrated predictions. We can view time estimates as a special domain of calibrated predictions.

Of course, time estimates are uncalibrated. We can fix this by adding some implicit calibration -- I will use 90%, because this is the calibration I have trained myself to feel such that it is 90% accurate.

If I make 100 time estimates (in the form of "Project X is completed at or before date Y") with 90% confidence, and 50% of them are correct, I'm overconfident. If 100% of them are correct, I'm underconfident. Both are bad.

To solve this problem in the real world, I'd bet that most people make wildly underconfident predictions externally, and make wildly overconfident predictions internally.

But yes, you will nearly always be wrong if you make predictions of the form "Project X with be done at unix time Y," and you can nearly always make the prediction "Project X will be done by the year 3000, assuming the organization is still there and has not decided to abandon the project."
Yeah, the dumb money lost again, as always.
I used the ARM binary. Log in to your NAS and use wget to download the binary, then execute it. That's it.
OpenCL is a standards compliant compute API that is supported by Nvidia, AMD, Intel, IBM, Sony, Apple, and several other companies.

Nvidia is in the slow process of eventually discontinuing further CUDA support, and it is recommended to write new code in OpenCL only.
Would you care to throw the offshore team some love by posting who they are? I have a web service and would love to use them if it cost $500.
this was all well and good to me until I saw that Google shut down someones account for violation of TOS. Im already mulling over alternatives. This might be one of them.
Pen to the Online Paper
Two-thumb typing sucks. Building a better smartphone keyboard.
It's a tough position. Do they also go after countries where subsidized plans aren't common by making a cheaper iPhone (Europe/India/etc)? The iPhone 4 which is 2 years old is still around $400 unsubsidized. Or do they try to keep high margins and let competition (which lets face it, is Samsung) dominate those markets.
The problem is compounded by really bad textbooks that are adopted by different universities.

The book "Let us C" is preferred over K&R. Let Us C does not teach the "C" as in standard but sticks to the specific Turbo C compiler (I think the newer editions have improved). When I learned C using this book Borland had stopped supporting Turbo C several years back.

Even today many Universities continue use Turbo C, teach Turbo C specific syntax.
> Men and Women (gay or straight is irrelevant) are inextricably linked as human beings that face the same problem of creating a future together that supports equality.

And gays and straights don't?
That's for Apple and the market to decide.
What other mental models do people use to think about variables and memory? I would like to hear about them.
A "good" old-school parent would ideally have limited after-hours work as much as was reasonably possible and imparted solid lessons about meeting commitments without compromising family values as well. All of that sounds like a separate consideration.

The question at hand is more: assume X hours of 'overtime' work needs to be done: would we rather have that chunk be composed of unpredictable interruptions of unpredictable length through any and all 'family' time? Or gathered up into larger, fixed chunks of extra 'at work' time with advanced warning, discrete start/end times, etc?
Hacker News: Where you can troll the hell out of libertarians, but don't you dare make fun of a hipster.
iPhone growth has slowed: http://www.theverge.com/2013/4/23/4258068/apple-posts-9-5b-p...