skysight-inc/HackerNews huggingface dataset:
I've read a little bit of the material, but I don't get the feeling that they looked beyond block-level RAID5/6 (which btrfs/raid5, as far as I understand, is not).

[1] mentions that RAID5 never checks parity on read, which is not an issue with ZFS/zpool (and, I think, the proposed BTRFS/raid5) because they verify all read blocks' check sum. Also the creeping multiplication of bit-errors on parity rebuild is a non issue because of this. [2] only mentions ZFS, but attributes copy-on-write as the remedy against distribition of bad data over the RAID volume.

[1]: http://www.miracleas.com/BAARF/RAID5_versus_RAID10.txt

[2]: http://www.miracleas.com/BAARF/Why_RAID5_is_bad_news.pdf

And, yes, I see this silent corruption problem, and the inabilty to identify the "wrong" drive in case of parity mismatch as a big deficit of block-level RAIDs, and I share their view on the abysmally bad performance of some degraded/rebuilding arrays. But that is mainly what the filesystem-integrated redundancy mechanism try to address with their "blatant layering violation".
Assuming they salt each password before hashing it and use a reasonable number of iterations, having relatively short password should not be a huge deal, right? The salt means that an attacker can't just use a rainbow table attack against a single password. In the event that an attacker does get ahold of all the hashes and salts, they would still have to brute-force each individual password.

Though I suppose having a maximum password length of 6 might correlate with not using other best practices, like salting the hashes...
Brian, whenever we bill the monthly subscription fee to our users for our saas app, we send them an email with their username and the amount. I get a copy of each such email in my gmail inbox. Is there a way I can use Zapier to parse the amounts into a google spreadsheet so I know the total amount billed for the day? (Currently I have to do this manually by opening each email and copying the username and amount inot a google spreadsheet).

I should have our dev build this report, but don't get me started on that rant :-)
Which totally makes sense, and I'm unsure why students don't think this one through. It's like saying, "I want to be a career musician", spending 4 years learning music theory, and then expecting a job playing the piano with an orchestra.

If you want to make great music, you've gotta spend a lot of time playing the piano.
I'm not sure there's an agreed upon design pattern. At Prismatic we've adopted a component-based system where a component is essentially the MVC for a single logically-grouped part of the application. Its defined as a record that binds its own events and renders markup from it's template. We try to push mutability and asynchronous functions (xhr, file io, etc.) as far up as possible to avoid unnecessary state manipulation and callbacks everywhere. The idea of reactive programming in ClojureScript is also very interesting as it would make event-handling much more manageable, simplifying event-dom glue code and removing unwieldy callback chains.
Its rumored that the next Apple Cinema and iMac screens will be Sharp IZGO panels.

Delicious 4k in 32", I can't wait.
Ask HN: What are your best Android app marketing hacks?
Looking for white hat best practices, great directories to be listed in, and anything else that has worked and won't get you booted from the app store.
Would be nice to have the postulate backed by something other than proximity in the poster's posting, and the poster's speculation, however.

While such wild speculation probably can't get you in trouble in the US of A, some European libel laws probably would require a little more than "seemed like it to me" as a reason to publish an assertion of an association.
If this is the case, it seems that Facebook, Google and Microsoft should be campaigning to have the H1-B quota allocated to whoever is willing to pay the highest salary. That seems like it would be much easier to sell to Congress and it would have the nice side effect of pricing sweatshops like Infosys out of the H1-B market.
E-Ink Technology Transitions from eReader Screens to Keyboards
Yes, through testing, followed by inspections, followed by endorsements or shutdowns as needed. Also, since the sequester, I wouldn't trust that they aren't putting asbestos into your muffin.
This is a good example for Paul Graham's "middlebrow dismissal" data set. Generic negative comment about the subject of the article that could be copy-pasted into any article matching a "Wikipedia" string search by a bot.
Back in days when I was looking for a job, Infosys was the dream company to work for in India for a lot of top talent. They would hire only the toppers from top 10 colleges in India and that too with a proper puzzles test like all top US companies. So they hire people based only on academic credentials and then train them for 6 months in a "Infosys University".

I think the perception in US about the unqualified Indian engineers is because you might have seen engineers mostly in their budding years(1-3 years). As with everything else, those people do learn a thing or two as they gain more experience.

I came from India(never worked in Big Bodyshop like Infosys) and have been in US for 5 years now. I have seen really a lot of really dumb people and some really good people on both countries.

Check out the puzzles book that Infosys uses to hire people in India. http://books.google.com/books?id=F-idu9oxkdgC&printsec=f...
Most people using 50+ character passwords or phrases often use password management software like 1Password, Keepass, or browser-based, etc.

I do think an upper limit is valid, as allowing an arbitrary long string could be a form of DOS (imagine someone sending the library of congress as a password), but 64 characters seems kind of weak.
Popular Websites Displayed in IE 5
I'm curious as to how the situation will look 20 years down the line as the current (young'ish) workforce grows up. My hunch is that as the industry matures, the current trend of age discrimination will gradually fall by the wayside.

There will always be some predisposition, as within most industries, to tend towards age discrimination in certain situations. However, my guess is that software will begin to look more like established engineering professions, demographic wise, as time goes on.
IMO, it shows that we really aren't that good at securing our data. BC is basically data that is worth cash. And that's a huge incentive for criminals to go after it, just like a thief would prefer stealing $100 cash than stealing a bike they can sell for $100.
What about injecting custom text into the clipboard via flash?
With the low low mark up of only 78% over current market value!
Then why isn't that the default?
I've adopted:

#if 0 /* reason /

lines of messy stuff
...

#endif / reason */

That short comment makes it easy for me to find the ends.
Another link with a video: http://www.nasa.gov/mission_pages/cassini/whycassini/cassini...
Why is a 3 month old CES review on the front page? Considering this is the only result in Google Shopping, and they have a stock of -1, I don't think this is even available yet:

http://www.shopblt.com/item/sharp-electronics-32in-igzo-lcd-...
Staying sane while defying Joel Spolsky with Django (slides and audio version)
Yeah, there's that as well.

Also, if you're interested in that sort of thing, two other projects you might find interest are:

http://stanbol.apache.org

and

http://uima.apache.org

Both involve extracting semantic meaning from unstructured data. It's pretty cool stuff.
Oops sorry, I am not talking about prisoner recidivism so perhaps recidivism was not the word for me - I just meant that these crimes are becoming more repetitive as time goes on.

As for the second sentence, Canada doesn't have America's gun rights and we haven't had all our rights stolen due to a lack of our own physical enforcement (guns). It must be a fear based notion, because it doesn't make logical sense.
Infographic on Chef Recipe for CopperEgg Server Monitoring
Infographic on how to integrate Chef with CopperEgg cloud monitoring for your Linux or Windows servers, plus website monitoring and custom app metrics
CSV files are simply lists of tuples. You can do lists of lists in JSON. Your overhead will be two characters (opening/closing braces) per tuple (one if you skip the newline, which you can't skip in CSV), plus a dozen characters for the whole file. I don't think that's a lot of overhead, seeing that you get the benefits of a format that is actually standardized.

Example (CSV):

name,age
James,32
Nina,10
Helga,90

JSON:

{"fields":["name","age"],
"content":[
["James",32],
["Nina",10],
["Helga",90]
]}

Don't tell me it's harder to parse, cause you'd have to do the index→fieldname conversion in CSV too.
Good. For quite some time, census data was incorporated as a one-time substitution into geographical articles by a bot. With this new development, I suppose that census data can be incorporated as a "transclusion" that is updated automatically either on schedule or on demand.
This seems like a proof-of-concept - it doesn't even throw up iOS notifications. Integration into Chrome for iOS would probably be a better way of gaining a persistent presence in front of Google fans with an iPhone.
Imagine how easy it would be changing from QWERTY to Dvorak or whatever other keyboard layout. I want it and I want it now! =)
I Wish I Knew
Very interesting :)

I can see why most were deleted, I chose to view a few pages at random and they were:

- a really non-notable musician (probably self-promotion)

- a hoax ("The Independent City-State of Sonora")

- a game guide to Super Smash Brawl, this is probably something that should have gone on a blog / GameFAQs

- a witty bio about a non-notable person (probably self-bio, or a friend's)

I believe the four of them were deservedly well deleted. Two of the cases, the musician and the game guide, should be hosted elsewhere (personal blog or website).
> if users don't like entering certain characters on a mobile phone, they can pick a different password

Fundamentally, I don't think it's unreasonable to try to protect users from themselves.
Assuming you can automate the task completely, you'd get the added value of not having the context switch to and from that task. That alone would might be reason enough to automate something, even if you lose time over it.
I'm led to believe the issues with Clojure (and other JVM languages) on Android are due to Dalvik not being as friendly to other languages as the Sun JVM. I don't blame Google, but it's unfortunate.
Isn't it a stupid decision? Why would they release two of their best selling points - first Google maps, and now "Google Now" to iOS? They could have been two of the biggest USPs for Android, and they destroyed it all.
Ha, I thought I put in the asterix-esses. You know what I mean, but I bet cpp actually ignores e everything after #if 0 and #endif, don't do that please ;)
It does this sort of thing to me all the time. When I'm at home, it thinks I should go "home" to my girlfriend's. When I'm there, it tells me to go to my actual home.
What does willingness to circumvent arbitrary systems of rules - which may or may not be aligned with desirable outcomes - have to do with ethics?

To me, ethics seems to have more to do with the good vs. evil dimension than with the lawful vs. chaotic.

In fact, doesn't the term "sociopath" seem more appropriate for people who source ethics in external rules rather than native conscience?
I would suggest taking copius notes and using writing documentation to get over the switch.

For example, when I get started on a project, I normally sit down at my computer and surf the internet for maybe 20 minutes and play around in the command line. This "down-time" helps me get into the flow of things. Plus I normally try to avoid tight-deadlines so I don't really care if I spend 20 minutes dinking around on Hacker News.

If you have a similar work-pattern, maybe those 20 minutes could be spent instead reviewing a README.md or working on a Trello board, or adding new links to an internal wiki you've set up for the project.

I've found that touching the documentation that I've created really helps me snap back into a project since I can see exactly where I left off. And if I don't know what to do, I work on planning out the project.

Also, if all of a sudden I have a great idea of what to do, I'll spend half and hour or so making files and directories and writing the code entirely in comments. Then, when I come back to the project, it's only a matter of replacing the comments with real code.
Does anybody know if there's a project out there that's the union of Wikipedia & Deletionpedia? Or, IOW, "Wikipedia with deleted pages preserved"? If not, that would be an interesting thing to create...
Umm, great reporting Ars. Schwab actually has a limit of 8 characters, not 6:

http://www.schwab.com/public/schwab/nn/legal_compliance/schw...

Still crappy and their password policy is terrible, but it's better than what Ars is reporting.
This is awesome. It would be cool to see neighborhood names, too, when they aren't linked directly to a street
Can someone point to an example wikipedia page that's actually drawing from wikidata? When I hit wikidata and look up random items (say, item 1000, the country of Gabon: http://www.wikidata.org/wiki/Q1000 ) and then look at the source for the English wikipedia page for Gabon, I don't see anything that suggests any of the facts are coming from wikidata.

This seems to be more "all wikipedias can now draw facts from wikidata", and certainly isn't "all facts in wikipedia come from wikidata." The former is cool, the latter would be mind-blowing - but I'm not sure how far along we are on the path to "{all|most|some|a few} facts come from wikidata"
I'd like to add, using http://qz.com, or Quartz to host content so that it can't be read on an Android device is pretty effective too.
I guess if you look like you're on the way, and it looks like you're going to make it on time then it shouldn't prompt.

If you do get to the restaurant around the corner and stop then it should realise that it may need to remind you.

Anyway, I've signed up for it today. I like the idea in principle, and I understand how hard it is to get this right. I assume it will get better over time as they tweak it, so it's worth giving them a fair crack of the whip.
I got it from 'tptacek. Some examples of him using it here: https://news.ycombinator.com/user?id=tptacek

I'm not sure if he originated it, but it seemed useful to me so I borrowed it.
Try logging in with just the first 6 characters of your password and see if it's really looking at all 10 of them.

Edit: Someone else commented saying it might actually be the first 8, so try that too if you want.
I know, pulling over for flashing lights and sirens, what BS is that?

Seriously though, it often makes sense to build in affordances for enforcement. We may not agree what laws exist, but if they're going to be enforced, they should be enforced uniformly and efficiently.
There are a few machines designed be similar experiences:

There's something called the Maximite, which is a single IC computer running BASIC with output to VGA and SD storage (http://geoffg.net/maximite.html)

There's something called 'petite computer' for Nintendo DS (http://www.petitcomputer.com/)

But it'd be great if someone started a hub for this kind of thing.
Rats reveal: Forced physical exercise reduces anxiety
Wordpress bug fixing service
Hello,

Because I am quite good in finding issues and quickly fix them, I was thinking to offer a service with a fixed price for fixing website issues.

I have worked several years as freelancer and ther e was a lot of clients looking for quick fixes to their issues.

I was thinking to have a pricing model based on how quickly you need it done and for start we could focus on wordpress/ php/jquery/mysql .

IS this something that could work as a business model ? I am asking here because I haven't seen any website that offer this service.
Is it possible to easily buy fractions of a bitcoin on mtgox? I think I'd rather go through the trouble of getting a verified account then deal with such an insane markup.
Err on which mission exactly? http://en.wikipedia.org/wiki/List_of_Pok%C3%A9mon
I've noticed that the quality of Ars' work has been getting worse as they've widened their coverage. Much of it now seems to be either simply regurgitated PR garbage, or the lightest rewrite of PR garbage, with a sprinkling of "some people like cake; others, pie. You decide!" sort of non-journalism on top. It's a shame, because they have had excellent writers in the past.
If the salaries haven't reflected the shortage, it's not a shortage. It's just a bunch of people unsuccessfully trying to buy something below market price.
Only in america. Because people in other parts of the world actually have a brain.
I'm talking about a managed server. No root access. If there was root access, I wouldn't be listening to their "we can't limit access because that's how our management tools work".
Heroku Scheduler now classified as "Best Effort"
I wonder if the author actually tried Google Now before writing the story, or whether this was solely based on press releases, videos, and other comments elsewhere? Maybe I missed it but I don't really see it here where the author says, "I tried it and I had this or that opinion".
How Retirement Fees Cost You
I talked to a guy that worked on Windows Live about the 16 char restriction. Microsoft Accounts also do not support Unicode, or anything but a small subset of ASCII characters.

First, there must be a maximum size. Obviously, you're not going to allow allow 2^64 byte passwords. So it's under that. But, sure, 16 characters is pretty low.

The actual reason seems to be lost to time. The password code was originally written well over a decade ago, when things were less security focused. For all we know, some part of the auth pipeline (even if the passwords are stored hashed) might have sent the user data in a space or comma delimited, using 8-bit chars without UTF-8 support.

He explained that every time they've reviewed it, the password restrictions haven't been close to the top of things they can spend their time on to improve user safety.

I've run into other companies that limit symbols, citing problems with users on mobile devices messing up and generating support tickets. That sounds reasonable for lower-security assets.

Evernote's space explanation sounds really silly. Why not just include stripping spaces as part of the password "hash" function? That's gotta be easier than using Regex.

I remember reading a story about Facebook, where they flipped-case hashes as well, again to help the user login experience.
>If someone does not intend to profit off their own work anyway, what is it to them then that someone else profits off their work?

I would not want any of my photos or content used without my consent, even if it has nothing to do with profit and money. A while back photo I posted online was used by someone with regard to subject matter that offends me and i categorically disagree with. Thankfully my work is protected by copyright so i was able to use the DMCA to force its removal.

> Sure, you say there are moral issues of profiting off the backs off someone's hard works. But such a law allows you to also do the same.

If i make my living doing photography or some other art form, i don't want to lose income because others are copying my work, nor do i want to profit off of others work because that is not my area of expertise nor likely what i want to do for a living.
A few more mobile specific ones:

1) Not showing me the regular site when I'm using a high resolution tablet. I don't need or want something mobile optimized on an iPad. (At the very minimum though, allow us to switch back.)

2) Have a modal popup that says "This site is best used via our iPad app. Do you want to download it now?" whenever you visit it.

3) Disabling zoom.
Having the back button refresh the current page instead of GOING BACK kills me.
WordPress Free Themes – don’t use them
Is it actually using all 10 characters? Can you log in with 6 characters of your password, or 8 as zrail indicated?
A random note for those who might wonder what "N" and "S" mean on another planet.

Take your right hand out. Stick your thumb up. Curl your fingers around. Your thumb represents a planet's N pole, and your fingers point in the direction that the planet is spinning. (The Earth moves from W to E, and the result is that it looks like the Sun rises in the E. Sit down a globe and a flashlight if this comment makes no sense.)

For any spinning thing we can do the same exercise. Just wrap your fingers of your right hand around in the direction of the spin, stick your thumb up, and that is the North pole of that spin.

Now for the fun fact. Most of the stuff in the Solar System rotates roughly the same way. It doesn't matter whether you take the rotation of the Earth, the rotation of the Moon, the orbit of the Moon around the Earth, the orbit of the Earth around the Sun, the orbit of Saturn around the Sun, the rotation of Saturn, the orbits of Saturn's moons around Saturn - the north poles of all of these are reasonably well aligned.

They are not exactly aligned. For instance the Earth's rotational axis is tilted 23.5 degrees from the axis of its orbit around the Sun. (Hence our seasons.) And not everything follows the rule. Uranus is the best-known exception. But most of it lines up fairly well.

The only actual use that I've ever found for this fact is being able to explain to my son why the Moon rises later every night, but I've always thought that it was pretty cool.

EDIT: glurgh below corrected my understanding. It happens that for most of the planets, North corresponds to the right hand rule as I described. But that's not actually the way it is defined and Venus in particular does not work that way.
There's a lot of research dating back to the early days of hypertext on automatic link insertion, but afaict it hasn't really caught on in any system, whether hypertext or wiki-based, with the exception of those somewhat spammy content farms that auto-cross-link their articles. Wikipedia has indeed spawned a new wave of such research, e.g. (random example pulled out of Google Scholar): http://www.cs.waikato.ac.nz/~ihw/papers/08-DNM-IHW-LearningT...

I'd be curious how good the results are. I've found a bunch of articles, but no live demo. If someone set up a small-scale version where you compare the auto-linked version of a few hundred Wikipedia articles with the existing manually-linked version, I think that could convince people it was worth adopting (if the results looked good).
Interesting use case!

Unfortunately we don't have that clever of a parser. We've definitely talked about it but aren't 100% sold on any sort of internal implementation.

We've thought about a "reverse template" where you would mark blocks of text as "variables" across a few examples and we'd parse it out. Not sure if that is feasible though...

Any HN'ers done this before and have ideas or tips?
Also violations of EULA should be punished.

Most people don't really know or understand what facebook is doing. That is why it's unethical to hide under privacy policies that state how non-private everything is under the guise of "your privacy is our highest concern".

Personally I agree with you. Modern OS's actually police and inform users of just how overzealous these programs are, and give you an opportunity to reject the terms the program sets.

Programs in response, refuse to work if they can't get access to your data, even though that data has nothing to do with the service they provide.

All of this is wonderful.
less talking, more doing
Shame it's not a wide angle shot. Would have made a beautiful desktop background.
Sounds like lack of technical thinking if it actually reduces support burden. It's trivial to just remove spaces before storing the password, allowing authentication with or without spaces. I'm not sure why people don't realise that normalizing the password before saving the hash is acceptable, so long there's still enough password material being used.