skysight-inc/HackerNews huggingface dataset:
I recall in a previous thread jgrahamc promised a single, illustrated document with this series, very much looking forward to that so I can hand it to someone like my wife and have her truly understand how this works. Thanks for putting it together, great series.

I could see a similar set devoted to explaining things like PGP or PKI
A fascinating comment, and now I want to watch the documentary! Could you clarify:

"wooing consumers with short-lived products instead of forcing them (reminds me of STEAM)"

There might be a typo or I might just be not reading it right, but I can't seem to parse this, probably due to confusion about who/what "them" refers to and what action is being "forced". I want to understand it though because the comparison to Steam could be an interesting one! (Assuming that is Valve's Steam - another slight confusion, I'm not used to seeing it written in all caps so perhaps you're referring to something else.)
I was trying to find reviews of a couple of technical security books this weekend and found I had the option of reading fairly short reviews on Amazon, or finding disparate reviews on the web. Given that there wasn't a dedicated review site I thought I'd put this up.

Does anyone on HN have any requests for reviews or suggestions for the site?
List of Pseudo-Elements to Style Form Controls
If anything the people move on, its politicians and those in power who seem to want to exploit a situation. I tire so much of being told I should be scared, let alone how they very same people who could not prevent the issue suddenly more than willing to disrupt my life going forward and tell me its in my best interest they do so.
Twitter is a culture, and bringing money into the culture of favoriting and retweeting could change it, possibly for the worse. Twitter has a right to stop that. I'm not saying their intentions are necessarily so pure (probably not), but it's also not out of the question.
I would have tortured him then executed him by slow pig blood transfusion. But I am not a good man. I like revenge.

And yet I think that the most powerful and expensive military in the world should have found a way to properly extract him. I am not convinced that the way it was handled brought the needed closure to the 9/11 events. It just proved that US was better at targeted killing than Al Caida or whatever that ragtag bunch was called.
Also, if it works for them, it may not be financially viable to rewrite all of their code. For example, I work for a large company that uses Perl for all the backend stuff on our website. If we were to change to a more "modern" stack, we would have to stop and focus on that for a period of time instead of pushing the company forward and improving the customer experience etc.

In the meantime, Perl works for us. It's not cool or sexy but it gets the job done. Probably a similar situation at Linode.
Well, in my opinion, a patent like this is well deserved. I could be wrong, but the researchers have spent significant time on it and have discovered/invented something really unique.
Yes, I'm working on the PDF. I intend to leave the series up on my blog but charge a small fee (probably $0.99) for the illustrated PDF.
> in our heads

So it's short enough to remember and likely has some sort of pattern. There's a limit to what a person can remember, lower if there are several people that have to remember it.
I think this kind of explanation is brilliant. One on public-key cryptography would be really good but i'm not sure where to start.
If it is AS important, why make the text secondary (hidden) when you click on the comment?
Oh. my. god. American airports are not the best. Quick, everyone stop EVERYTHING your doing, we have a crisis on our hands.
This is true - entering the US can be a very painful experience (despite SFO being quite a nice airport I've still had a two hour plus wait on occasion), but Heathrow was just as bad last year at certain points, with two hour plus waits to clear immigration.
"And even when they are salted and hashed it's worth asking (or wondering) whether they used a scheme that could beat Carla's computer equivalent by hashing multiple times."

Using such a scheme is generally called using a "key derivation function". Commonly known ones are PBKDF2, bcrypt and scrypt.

What worries me is that most competent people in the industry still ask whether passwords were salted and hashed, rather than whether they used a key derivation function.

This suggests to me that even generally competent developers are not aware that salting and hashing on its own is considered weak. PBKDF2 is over a decade old now!

If you want to educate people, please finish by suggesting that developers should not be rolling their own, but instead using a key derivation function that wraps the knowledge of the state of the art so that developers don't have to worry about the details any more.

"Be on the look out when a password database is reported to stolen to see if the press reports that the passwords were 'salted' and 'hashed'..."

Instead, I would be on the look out to make a note of which key derivation function they were using. If they weren't using one, they were doing it wrong.
Very interesting. I recall watching an interview with Sam Yagan and he said they were about to give up, but that blog was the one thing that saved the company. The guy writing the blogs had a math background, and it worked tremendously well.

I wish I had that link, but I'll have to look it up.
Excellent suggestion. Will add.
Sure, it's all optional. But if all the miners are charging a small amount, and you face a choice between "wait a week for the transaction to complete" or "pay 1%", then BitCoin essentially has fees.
I have one,try adding an index or table of contents with all the books you review, also the "upcoming" ones.

It will became handy in the future.

Regards.
Amnesty Int'l: Don't Call Female Genital Mutilation "Barbaric"
This wasn't just a few hundred people being injured or killed: This event, by its targeted and spectacular nature, negatively affected hundreds of thousands of people. Add together the costly, chaotic disruptions for all those individuals, and you don't need many of these "rare" events to make terrorism a much more significant problem than you're making it out to be.
Erm - 140k? Actually, 14,000K!

Anyway, while it was a - slight :) - exaggeration for effect, even in well-factored code small changes can have a wide-ranging repercussion.
Here's to hoping more effort goes in this direction, and to improving the general cases of performance over special cases like ASM.js.

But I hesitate to get very excited over a few micro-benchmarks, particularly without a release.
There's nothing in-between? Nobody's panicking, as far as I can tell, but an awful lot of people seem ready to describe any response as panic-inspired.
> In the meantime, Perl works for us. It's not cool or sexy > but it gets the job done.

What is not cool about Perl? You don't need to transition to a new framework outside of Perl. You can upgrade your backend by investing your time in rewriting the Perl code to newer standards.
What about Favstar and its pro features? The service makes money of people's favourites, albeit less directly.
I dunno. I spent 2 1/2 hours in a line at Heathrow for "Non-EU" citizens because only one agent had been assigned to us for the entire 747. The flight got in just before 10, so I missed the last train ride into London. Had to spend the night in the airport because I couldn't afford the 60 pound taxi ride in.

I don't think the US has the monopoly on crappy government services.
I did something similar to this the other day, accidentally tweeted the release of my metal band's new music video to the followers of one of my Android apps... Neither have more than a few hundred followers, so not too bad, but deathmetal certainly isn't everyone's cup of tea.
My experience with JFK airport (New York) is not so good, too. It's very chaotic, staff at the helpdesk doesn't listen to you questions but fill in what they think you want, everybody seems to be at their first day on the job, they can only do what their screen says, some places are dark (no lights), airline desks are/seem to be made from cardboard, etcetera.
If you pick just the right thing to break, the corner cases break as well. (Sometimes you do need to temporarily break a few things in order to figure out where extra changes need making.)

I'm not saying it can't go wrong when you're finished - it just usually doesn't. And it just doesn't take much effort to fix when it does.
For those who don't get your reference, Waiting for the Barbarians is a poem by C P Cavafy.

http://www.cavafy.com/poems/content.asp?id=119&cat=1
more likely not. it's called a "correction".
The idea seems great, but in first review I've read randomly I've found something that makes me wonder how valid are they - it's mentioning that Backtrack 5 R3 is now heavily out of date in the "Violent Python" review, while, according to Backtrack's website, its the latest version available.
I haven't used Flattr in a few years so I'm not sure exactly how this feature works. However company's features or businesses being destroyed through failure to read the rules/guidelines set out by the company they are working via is becoming more and more common. If you are developing for iOS, Twitter, Facebook etc. read the rules first. If there is anything that could be interpreted in any way to affect you get clarification.
As someone who runs ecom for a jewelry company on Amazon and eBay, I know that you mean.
This is a non-sequitur. Just because people in London didn't panic (and neither have I seen much that could aptly be described as "panic" in the U.S.), it doesn't follow that the British authorities didn't acquire more security and policing powers to deal with the IRA.
Well, Wikipedia estimates the world population at ~7 billion people, and the US population at 315 million. So, "almost everyone" in the world is not an American citizen.
that's the tragedy of it. something cool is invented and now it'll be fenced off and buried for 25 years in all likelihood, and/or becomes part of a big patent portfolio.
Streisand effect incoming.

Clearly the only answer is to engage in business with this entity for lowest value items available and then post negative reviews of their legal behavior.
That sounds like a great idea thanks, I think I'll steal it if that's ok with you!
(http://www.kali.org/news/kali-linux-whats-new/)
Could be that the passwords were hashed, but something logged a password, or there was leakage somewhere during the login process.

All it takes is one debug log statement to leak through from development and you can be logging plain-text passwords on every login.
time to get an app.net invite and abandon twitter i guess. At least for me.
NuoDB Techblog with great new articles every week
Vet Groups Press Obama to Downgrade Drone (& Cyberwarfare) Medal
You can't assume this. It could be ridiculously strong, and, with a lot of use, has become remembered.
You are plainly and simply wrong.

I was not sure what you meant and that's why I asked, especially given that you gave no extra context or argumentation for your position.

If that bores or tires you, stop answering instead of derailing the conversation with anger stemming from paranoid delusions about second and third intentions.
Port Monitor public API released
Integrate website, server and port monitoring in your app/site.

RESTful API, JSON for data-interchange.
Backtrack is about a year old which is a long time in security tool terms and people are being pushed towards Kali Linux[1], by the same authors. This isn't a pop at the author of violent python and it's a problem that affects anyone choosing a particular distro version. I should also add that to be fair, it's hard to write something like violent python in an agnostic way.

[1] - http://www.kali.org/

__EDIT__: Perhaps I should've made this clear though, thanks for that. I'll update the review accordingly.
This.

Also, thanks for a good read John.
Earthquake (magnitude 8) hits Iran, Pakistan, India, GCC countries.
SFO has scanners, at least for international flights. No idea whether they are operated by the TSA though.

The airport itself is pretty nice by the way, if you forget about going through security. I haven't travelled to any other US airports, but SFO is way better than some of the (mostly smaller) European airports I've been.
This may seem overly pedantic (or ideological) to point out, but needing a license at all indicates the need to cater to at least one, major piece of centralization. Otherwise, yes, radio is a technology that still works.

My point may have had more "meat" to it, had the rumours been true that government ordered local cell service to be shut down in Boston. That rumour has since been debunked. But if government can shut down cell service, surely they could order some sort of ham radio shutdown as well? It doesn't mean that it would be easy to enforce, of course.
Echoing other comments about the scrolling, but wanted to add that I'm not strictly against the pagination.

For me, it's simply that the trigger is both unpredictable and way too insensitive. It takes two very large scrolls of the entire height of the trackpad on my MBP, and it doesn't respect the scrolling momentum. It just feels very non-native.

Overall, I like the design.
What do people love so much about Incheon Airport (South Korea)? I've been there at least a dozen times or more and never noticed anything special about it. It's better than U.S. airports for sure but wouldn't really imagine it as a top spot or even #2.
I had to go back further than I thought to find an off-cycle charge, but I did find one from January 2012, for a plan upgrade, 10 minutes before midnight, for $6.77. It looks like that was the last plan modification I made.

They may've changed their billing system in the last 12+ months.
So far it seems yes. There's a reasonably established alternative at identi.ca, but so far it mainly has users who're there for "ideological" reasons, so it's a good place to follow e.g. Debian developers, but hasn't succeeded in attracting the broad range of people who use Twitter.
What you are describing is quote stuffing. Nearly every participant in HFT/algo trading agrees that it is a problematic practice. Nearly every venue has either enacted or is enacting policies and procedures to either prevent it or severely penalize it, because that is what all of their customers want.
This should be the top comment and the reason why companies should disclose this information on time and more often.
Just like you would block your card if you get robbed, you should block your card if someone steals your cc data.
I think people don't always realize the scale of Facebook's user base. With one billion people if 99% approve of a change you've still upset 10 million people - 90% 100 million.

And the approval rating is probably much lower than that.
Ruby Doc Server Down
Pocket Lint closes down without warning
I don't know why so many guys here who obviously are not customers of linode care about this case so much, I've been a user of linode for 5 years, it's a company that you know you can trust, that's simply what I can tell from my experience.
7.9 Earthquake
Foreign terrorism is rare, because it's hard to carry such a thing out in an alien land, and very few people are interested in foreign aggression that is clearly (a) targeted toward civilians, (b) illegal by any national standard, and (c) not part of any coherent political agenda, but merely an artifact of unfocused anger. Domestic terrorism (where the foot soldiers believe they're an occupied people and often see themselves as a legitimate military) depends on where you are and the political climate. That can become a recurring threat, as in Israel.

For all the flaws of the U.S., we have one of the most ethnically inclusive societies in the world. We're far from perfect, but we don't have the specific class of injustices, at a high enough level, to produce the simmering grudges that cause such a thing to happen. Most of our terrorists are lone nutcases.

Relatedly, Americans and Northern Europeans tend to be culturally individualistic, so the people who would be domestic terrorists tend toward spree violence with either no political mission, or one that is not charismatic enough to post a threat of recurrence. For example, as horrible as Breivik's attack in Oslo was, it didn't motivate a wave of similar attacks. He had a political agenda, but not a coherent one that many people would follow.

TL;DR: Terrorism has many forms, and some pose high rates of recurrence, but foreign terrorism tends to occur in one-off attacks and the U.S. does not presently have the conditions (or, at least, does not seem to have them) that would cause recurring domestic terrorism.
I think quizzes/etc. on LJ got them early users, but then there was a big decline in LJ around the time MySpace got popular (2005-2006?), which probably hurt OKC. FB becoming popular essentially killed it. The blog, IIRC, was around that time -- so for a while the "dating" site had a bunch of accounts of people who were originally there for quizzes, many of whom were no longer active.
But still, considering the significance of this bombing, some people are reacting so emotionally, it's almost pathetic. Compared to 9/11, this is nothing, only 3 people died. Even if we ignore predictable deaths that you mentioned, there similarly tragic and unpredictable deaths happening all the time that get much smaller attention.
Flattr's blog post seems to have a bit of that "not fair!" tone to it, which they - for better or for worse - don't actually have the right to say.

I can definitely see the argument from Twitter's side, even if I don't agree with it. But more than that: these are Twitter's terms! You can't roll in and start arguing for benefit-of-the-doubt with the people that wrote the terms for their own platform.

If you build your app on another company's platform to monetize their platform and they decide you can't, you're just falling into a trap you set for yourself. Even if it would be cooler if they allowed it.
Congrats Paras, nice to hear that you share the same urge for independence as myself as well. Can we perhaps arrange a meeting, if you live near Delhi? Add me on skype if so.

My skype: carl.theteuton
We do have progress by fixing broken things and by gradually improving working things. This did happend already over (quite some) time with the current notation.
NovoEd brings collaboration to MOOCs
Printing classic novels onto one poster or t-shirt
It looks to me as if Facebook is attempting to represent a product that immerses the user into any experience that they desire, regardless if it's "social" or not. It's obvious that by presenting the viewer with fast-paced, exciting content ready at the flick of a finger, it in turn captures the viewers attention enough to evoke curiosity of the product's possibilities.

If Facebook were to take an intimate social approach with the ad campaign, it could lead to negative results as well. Although I don't have conclusive evidence, I believe a large portion of Facebook's user base uses the platform to feel closer with people and organizations that they don't have immediate relations with - or an actual follower base that will appreciate what they post.

From my point of view, Facebook is more of a content consumption platform than a broadcasting platform -- that's kind of a weird statement, but I'm just partial to believing that most people use it to consume than to produce, hence presenting all of these immersive experiences that users can escape to.

I should add that I agree that this may be harmful for Facebook's long term image, but if the campaign's goal is to get this app into users hands and trap them into the operating system, it seems like a good approach.
And ideally, too, "the little man" should also have a gun, for a course of action against aggressive entities.

I'm an European, I guess we just don't get it (the US legal system or the gun laws).
He's making some valid points. But it's far too black and white. And insulting for a lot of journalists who do care about their work.
>> (As a Dutch person I believe The Netherlands is the greatest country of the world)

>Why would you do that? For real now. It is highly unlikely that exactly the country one comes from is the greatest, bestestest, whatever, in total or only in any way.

No need to be so rational. I happen to have grown up in a way that's enabled by only a few countries in the world for which I am extremely grateful. I am sure you could be as happy in any other country.
But because it comes with a small core, the time you saved will be spent searching and learning userland modules, written with wildly varying degrees of stability and coding styles. Unless, of course, you just use your own, then your time has been spent there. Much more of it.

I'm not trying to put node down, I'm a fan (switched to Go for most of my needs about a year ago, though), but this argument (small core so less to understand) just isn't valid if you're going to do anything more involved than learning the language and writing hello worlds.
Agreed.

American airports generally do a bad job is many areas. The number and access to electrical outlets can be awful. WiFi is usually nonexistent or for-fee and lame. And food is often just sad.
If I Made Another Monkey Island...
Link Building Lessons – An Interview with PaddyMoogan
There is literally zero evidence to suggest they compromised anything more than a webserver.
YAPC::NA generally accepts one talk per applying speaker if we have the slots; some years this has meant we've added an extra track or too to do it, some years this has meant leaving 20-30% of the potential speakers out.

We always schedule at least some first time speakers, because, well, that's how you get your next batch of experienced speakers.

On top of this, anybody whose talk isn't scheduled tends to be encouraged to give a lightning talk (5 minutes), and anybody who gave a particularly memorable lightning talk one year is almost certainly going to be accepted the following year.

I would expect that a lot of non-profit community conferences end up along these lines; the expensive commercial ones much less so.
Sony Launches Worlds Fastest Personal Internet in Japan
No, but I also don't expect 4 links on Hacker News about a bombing that killed 3 people.
Bourgeoisie don't know the value of the culture. They only know to make profit.
> (As a Dutch person I believe The Netherlands is the greatest country of the world)

Uhm, really? As another Dutch person I now suspect you to be a member of some extreme rightwing ideology (PVV?) because no sane Dutch person I've ever known would say such an absurd thing.
I know everything you're saying is tongue-in-cheek, but I will point out to those who may not be 'in the know' that you can always opt out of any intrusive scan for a pat-down instead. Perhaps not any more comfortable, at least the sweaty TSA agent brushing your inner thigh is just as uncomfortable as you are. Hopefully.
Now do you propose that a municipality create a startup accelerator with the requirement for funding being that you are willing to relocate?

I think that could work. I'd focus on long-term projects and an "autonomy fund": $100,000 per year to 100 top-notch engineers. The city gets a non-voting 37.5% stake (implied valuation of $266.67k per year) in whatever you build, and you have to have at least half of your employees working there at least 45 days per year, or maintaining a residence (tax base).
Iran struck by large earthquake
Free spaces to sleep, free showers, free internet, easy navigation.