skysight-inc/HackerNews huggingface dataset:
I know HN is a very pro Apple crowd, but I wanted to share that I have had a very similar experience. Windows 8 is actually incredibly solid, fast, and has a ton of great tools available.

SSH on Windows works just as well as OS X, and sleep / resume etc is a solved problem, with the added bonus that you can run any game that comes out. For a developer who wants to focus on getting things done, it isn't that Windows 8 is so much more compelling than OS X, but the price and compatibility make it worth using.
Computers are the new Freud of Dreams
This is something that confuses even veteran Mac users, but the green button is not for maximization. Every application defines a "standard state." This could be hard-coded or, in the case of Safari, the standard state can be defined dynamically in terms of the content you're viewing. The green button is supposed to toggle between the standard state and the user state (that is, the state you've manually put the window in).

If you want to just redefine the meaning of that button to be "maximize," you can use something like Right Zoom: http://www.macupdate.com/app/mac/30591/right-zoom

In my case, I just use Slate and have Shift+Cmd+Enter bound to maximize the window. Then I've got Shift+Cmd+(H,J,K,L,Y,U,B,N) bound to what you'd expect based on the vim keybindings. That's just the absolute beginning of what is possible with Slate; I'm sure there's vast potential I'm not yet tapping into.

Slate: https://github.com/jigish/slate
If you enable the toolbar:
https://github.com/Yaco-Sistemas/django-inplaceedit#install-...

You have a button to enable/disable the inplace editing. When this is enabled every thing that you can inplaceedit are indicated. So you don't have to scan the page

Please use the application
If I had to guess - it was done long ago when SHA-1 was what you used because it wasn't MD5, and nobody thought to change it since it was working.
The Apple II had modifier keys called "open Apple" and "closed Apple", which occupied the same keys used for Command and Option on the Mac respectively. Many Apple keyboards printed both symbols.
I knew a guy that would spend half the year living in Bali. He's a trippy-hippy dude who makes his money doing astrology readings.

Even though it didn't really fit in to how he wanted to live his life, he ended up getting a local housekeeper. She'd basically just do all of his shopping (groceries, clothing, whatever) and pay the local price, rather than the tourist price. With the money he saved, he paid her above market rates and still managed to save money on the whole deal.
Some ORMs support the Query Builder pattern which does the exact thing you want. http://www.yiiframework.com/doc/guide/1.1/en/database.query-...
Financing a car isn't a decision that is solely based on the amount of money you have saved.

I have a healthy rate of savings, but still decided to buy a new car and finance part of it. I'm happier and safer than I was in my old car, and the rates are pretty good. My V8 gets the same mileage my old 4-cylinder did, and hopefully I helped create some work by buying a model designed & built in Detroit.

So, stop conflating living month to month with having debt. There is a happiness component that doesn't show up in your spreadsheet.
About my new Bitcoin vulnerability: get your peer public addresses
Here's a more realistic experiment about being poor (in India): http://www.thehindu.com/opinion/columns/Harsh_Mander/barefoo...

Appendix:
Rs. = Indian rupee;
1 USD ~ 55 Indian rupees
There probably isn't one best marketing method, and there's no way to know. Try a small run of all of them and see which work.

As far as getting press coverage, you're better off writing a guest post about something valuable and interesting, then tying your site in at the end. For example, you might write about "10 best ways to get hired", then have the last paragraph be about you and your site.

Source: I asked a guy how he got on Venturebeat. http://venturebeat.com/2012/12/05/getting-a-good-deal-on-seo...
So, this isn't a bad recommendation, in that PBKDF2-XXX for any XXX is much better than "salted hashes", but I'm confused about this meme that recommends PBKDF2 above bcrypt and scrypt, both of which are better, marginally in bcrypt's case, and significantly in scrypt's.

SHA2-512 is designed to be fast on hardware.
That's brilliant. :D Perfect example of HN's contrarian nature. Looks like the commenters will never be happy, so keep the affiliate links and hopefully get a beer out of it at minimum.
Rewriting for new hardware is totally different from rewriting business logic. In the first case there are sometimes no other choices left.

Also, the code that usually goes into hardware microcode and firmwares is much more tightly coupled.
Have you ever worked on a project that has to build on diverse systems that you may not control, like most open source projects?

Inflicting -Werror on yourself is fine, but inflicting it on others is onerous, because there's no way you can guarantee that your code produces no warnings on their compiler with their library and header versions.
Seconding interest on more info in the facial recognition domain and PCA.
I think it's probably better for Google to stage it with a higher price at first (for early adopters), get a lot of feedback and spend a couple of years to improve the voice commands and then release it to the mass market.

I know for me when using Siri, I am disappointed 80% of the time. Siri fails actually at least 80% of the time when I use it, so I really cannot use it, because it's too annoying to keep trying until Siri gets it right. Much easier to type than to try and talk to Siri.

Google glass is going to have significant challenges with the voice commands and early adopters will be willing to go through the pain of asking it several times, but the mass market will quickly get frustrated if the voice commands do not work 90+% of the time.
Sorry if this has been asked, but I haven't seen anything on it yet. What about users that only signed in via Facebook? Any actions I need to take?
“Ultimately I needed to use Word, the Windows version, for page layout, indexing, etc. Nothing else does the job (I’ve tried, and keep trying the alternatives). The waterfall model of “first finish the book with one program, then do layout with a different program” just doesn’t work”

The entire publishing industry would beg to differ. While MS Word (but preferably InCopy) is fine for copy, you won’t use it to lay out a cookbook and directly send it to a printer. If you supply a Word file to a printer, they will likely convert it to an InDesign file and charge you for it.

Source: I publish books for a living and have been since 1996.

“an equivalent-horsepower Mac is 3 times the cost of a Windows 8 machine”

I thought OP was trolling, until I read the following passage:

“I also wanted something with at least 4 cores, in order to do more concurrency programming experiments with languages like Scala and Go.”

Not exactly typical use, but if the highest clock frequency and cores is what the author wants, then sure, he can get more bang for his buck with a Windows box than Apple’s offerings. Macs are made for small size, low weight, and power preservation.

Many consumers won’t look at just clock frequency or the number of cores to make their purchasing decision. I bought a new notebook 3 months a go, a MacBook Air. It has a 512GB SSD, a fast CPU, and a decent GPU. I mainly use it for image and video editing, but because of Apple’s choices, I get battery use of 6-8 hours, while it’s not much larger than my tablet. That’s what I care about. Ten years a go, to do the same work, I had to lug around a notebook that weighed twice as much and had half as much battery life. With many Windows notebooks, that’s still the case.
This isn't a bad idea at all, but if you lose control of your database, you need to assume you lost control of your app servers and your database server.
Of course. This is merely a tradeoff between performance and developer time. 99% of projects will never have HTML autoescaping as a performance pain point. Then again, you're going to need tens of hours to review all templates to make sure you're escaping everything. If your hardware budget is greated than what it costs to audit the code, it's the proper decision.
https://news.ycombinator.com/item?id=5617429
https://news.ycombinator.com/item?id=5617165
I think that what the main argument is, when one gets a Windowd laptop ,one can get something really powerfull and cheap. Macs are not that powerfull and not cheap at all. I bought my Mac a few years ago, I could have bought a x2 more powerfull Windows laptop at the same price. But i must say ( dont know if it is still the case though) Apple has a better customer service than any other computer brand out there. My keyboard went out of order 4 years after I purchased my laptop ( it was my fault, i dropped it) , and Apple replaced it for free.
The problem is that "they all look the same" is actually a factual observation about how our brains recognize faces. So, if you label it as a "racist trope" you end up implying that racism is part of human nature... which I'm sure is not what you want.
Woah. I'd never heard of this shortcut, seems to work perfectly. Now to see if it still does work when my PC is frozen. Thanks for the tip, though.
You need to use one for a bit and fiddle with the settings. Most store models have the speed jacked up and I can understand why you'd feel it's weird. Once you get it adjusted to your liking, I've never used a trackpad that remotely compares... Everything is incredibly smooth. Clicking on the trackpad itself, including right clicking... genius. Gestures are simple and intuitive. Two-finger scroll is just buttery smooth and precise, and to top it off the two-finger back/forward.
IU’s petaflop supercompter is the first to be a “dedicated university resource”
I thought duplicated were automatically removed? Bug with hacker news?
postgres provides encryption functions but you still have to take care of your keys.
If you like such pictures, check out the pictures from moving "Bagger 288" (http://en.wikipedia.org/wiki/Bagger_288) over a mere 22 km in 2001 (https://www.google.nl/search?q=bagger+288+2001)

I remember seeing a nice writeup of what that move involved, but cannot find it anymore.
Nah, Google+ links can be very irregular.
why the jpeg part ? would be nicer without adding that extension
I'm going to try to be nice and give you some advice: don't write like that. Constructing these overwrought sentences with the dashes and the semicolons and the vocabulary and whatnot just makes you look like an insecure sophomore trying to cover up inexperience with excessive verbiage. Which is probably accurate, but oh well. The purpose of writing isn't to make you look smart, it's to communicate your thoughts clearly and convincingly, and writing to show off all your fancy college-boy book lernin' is just going to antagonize your audience. You're still in school, my advice is to take a writing course and listen to what they say.
"At some point you'll have to parse out result and build an object graph anyway"

This type of thinking has to stop! Sure, some times it may be necessary to extract data from SQL and turn it into some type of object. However, most of the time it's enough just to get the data and work with the data directly.
Maybe - but you would think that a company with "Tech Leads" would think to check that kind of stuff. Or some new hire would come in and ask innocently "Hey what do we use for password hashing".

I find it pretty hard to believe that no one would ever poke around the User model in a Rails app :)
The "one database login" rule (a.k.a. trusted platform design) doesn't necessitate reading the raw password hashes; the app account can be granted only permission to run a stored procedure that does the comparison yielding a yes/no answer, and denied 'select' on the views/tables/etc.
Thanks. I think that's a good idea.

I also thought about writing a longer and high quality blog posts which offer a lot of value for job seekers, and then promote the blog post via Facebook Ads.
A very interesting article.

Though I felt that this part:

"If at any time during his or her life, the person commits a crime or aberrant social act, the individual is called to the center of the village and the people in the community form a circle around them. Then they sing their song to them.

The tribe recognizes that the correction for antisocial behavior is not punishment; it is love and the remembrance of identity. When you recognize your own song, you have no desire or need to do anything that would hurt another."

was the writer interpreting the practice through their own values. "The tribe recognizes that the correction for antisocial behavior is not punishment" - do we know that this is what the tribe thinks? To me, the practice sounds more like a mix of punishment and rehabilitation (in a lot of shame-based cultures, having family and friends remind you of your wrongdoing would certainly be seen as a punishment). I'm not saying I'm right, either, just that you have to be wary of the "noble savage" delusion, the idea that more traditional societies show us how our society should be structured.
I could think of a few reasons:

1. user management is a pretty trivial thing to code and one of the first things you do when you set up any site. It could have been a simple oversight before a rushed launch.

2. Playing off of 1), once you have any users in a database using a particular system, you have to go through a bit of a process to convert people over (you can't convert from one hashing algo to another yourself since you don't have the original passwords). That involves creating a concurrent password table, creating login hooks that force the user to upgrade their password on login (especially a pain if they're using native apps -- i'm not sure if they are), etc. Making sure that 50 million users migrate over without a hitch is a potentially site-breaking undertaking that could have serious impact on the site's success. Given the rocky climate LS currently faces, you'd have to have nerves of steel to lead a n initiative like that.

3. Depending on how LivingSocial has their code management structure set up, there may only be a few devs who actually have access to the user login system (you really don't want an intern or freelancer to be able to modify those). Given that the same devs who have that access probably have more immediate issues to deal with day-to-day, something like the current hashing algorithm might not be on the top of their priority list.

Not that any of these are very good excuses, but I could see how it could happen.
Ask HN: Move to San Francisco from Chicago?
I currently work/live in Chicago as an automation test engineer clocking in at just over 100k per year. I'd like to take my career to the next level in terms of technology skills and expand my entrepreneurial network.

Chicago is a great city and although I've enjoyed my time here my impression is that people in the valley are a lot more passionate about technology & innovation and embrace failure.

So if you've made the move or live in San Fran, I'd love to hear your thoughts of pros & cons of work/life in San Fran. The rent costs are a bit concerning and not sure how much this position will offer, other than that it seems like a great place.
You have to wonder if face recognition will become regulated in some way. For example, if it becomes OK for police to ID you by face, but not OK for you to know that the policeman talking to you has lots of complaints filed against him.
But is it?

If the only way your production server can check passwords is by sending hash(salt+pw+salt) and getting a true\false reply from a piece of external hardware...then even if an intruder got complete control though some exploit or injection, he wouldn't be able to dump the database for later cracking with rainbow tables.
Linux is not even UNIX.
> And perhaps also a bit sexist? I dunno, maybe I'm overly sensitive.

Well we are talking about Korea. You would probably have a heart attack if you watched even 60 seconds of Kpop.
I don't buy that this will make people want to Google+. You can't change the fact that there just aren't enough people on it. Outside the tech community I literally I don't know a single individual who uses it.
I ended up watching that movie on Netflix after reading some article about the Alec Baldwin speech popped up here on HN. Fantastic movie and fantastic cast. Highly recommended.
I was dealing with a similar issue on a project that all id's are UUID's because I wanted non-sequential id's.

I found it was just as simple of selecting ranges based of their date_created attribute.
My understanding is that the first time you are big enough and screw anything up (leak some PII, mess up your privacy policy, etc), the FTC gets involved on behalf of the citizens, and then you settle with them, the terms of which include ISO-whatever compliant audits for the next few dozen years. So Facebook, Twitter, Google, Dropbox are very likely getting audited yearly. I don't know whether e.g. Pinterest has screwed up yet, so they might not be.
Could you elaborate? I have no idea what you're referencing.
Thanks. I switch between being overly concise and overly verbose. Today is an overly verbose day. I'm working on finding a cool median.
Leadership and Creating a Movement
> "The risk of developing either diarrhea or ear infection increased as the amount of breast milk an infant received decreased."

Yes, but by less than a factor of 2 for a digestive condition that, while a killer in the developing world, is at most an inconvenience in the developed world.

> "The crude incidence density ratio (IDR) revealed a protective effect of breast-feeding on respiratory illnesses (IDR=0.66; 95% confidence interval (CI), 0.52 to 0.83), on gastrointestinal illnesses (IDR=0.53; 95% CI, 0.27 to 1.04) and on all illnesses (IDR=0.67; 95% CI, 0.54 to 0.82)."

It's interesting that you leave out this part of the text: "The protective effect of breast-feeding on respiratory illnesses persisted even after adjustment for age of the infant, socioeconomic class, maternal age, and cigarette consumption (adjusted IDR = 0.78; 95% CI, 0.61 to 1.00)." There is no reason to ever report IDRs not adjusted for socioeconomic class, maternal age, and cigarette consumption, because breastfeeding rates are not uniform among these groups. So the first set of numbers is meaningless. An IDR of 0.78 is not a big benefit. It means that if something happens to bottle fed infants 10% of the time, it'll happen to breastfed infants about 8% of the time. And remember, this is just the first six months of life--the available studies show these sorts of effects diminishing as the child gets older.

> "Infants exclusively breastfed ‘at discharge from the obstetric hospital’ (odds ratio [OR]=0.52, 95% confidence interval (CI):0.35–0.71) and during the last 2 days (OR=0.65, 95% Cl:0.46–0.91) had a significantly lower risk of SIDS than infants not breastfed after controlling for potential confounders."

The number of babies that die of SIDS each year in the U.S. is about 2,500 out of 4,000,000+ births each year. With an OR of 0.65, we're talking about a roughly 0.075% risk versus a 0.050% risk. For comparison, your child has a 1.2% chance of ever dying in a car accident.

> "Exclusive breastfeeding (EBF) may substantially reduce breastfeeding-associated HIV transmission."

This is the only one of the lot that's actually worth talking about. We're talking about OR's of 2.5-4 for something that has an overall incidence rate of 12.1%. So if you're HIV positive, exclusively breastfeeding can substantially reduce your chances of transmitting the virus to your child.

Your Bangladesh (my home country!) example is irrelevant to people in the developed world. The water in Bangladesh is full of arsenic and disease. Of course breastfed infants, who don't drink the water, are going to be much healthier than bottle fed infants who do.
A lot of those links completely ignored caveats he said. The Bangladesh one in particular is DIRECTLY addressed in the comment you're replying to.
Ah I was curious as to how this wasnt submitted already. My bad.
Hello, i'm developer in the IT Team of mangopay, and the Credit card fees are included in 1.8%.
I would be hesitant to talk to anyone wearing the google glass about any controversial subject matter. Big brother really is watching you... As for price, if google thinks it can make money off of it, the price will indeed be $200 or so.
Smart kid. It took me 20 years to figure this out.
It totally is about the mindset. And it's a combination of being properly motivated(intrinsic interest), and also seeing different ways in which to navigate the subject, and also knowing which ones are suited to your abilities at that moment.

With all of those traits, it's easy. If you miss one, you might be able to slog through. And if you miss two, it will be extremely difficult.

And our educational systems really don't encourage anything but memorization, despite ample PR otherwise, so there's a selection bias by the time you hit college level courses.
> (photos, groups, messaging

Wow. These are things I find absolutely terrible on Facebook. Photos are compressed to the point of being unprintable, groups are okay but nowhere near as nice as Google+ communities, and Facebook messaging to me is far behind Gtalk/Hangouts. Also calendar integration with G+ events is magnificent (party mode in the mobile app is amazing as well).

I guess I'm just surprised to hear such positives about these particular bits of Facebook which to me lag far behind at least one competitor.
True true, all of them are better than just salted hashes. It is much harder to brute-force bcrypt and scrypt in hardware (ASIC, GPUs, etc...).

It's just important to understand the differences and trust behind the different algorithms. PBKDF2 is NIST recommended, which I would say speaks to its strength (unlikely it will be easily cracked). It can also be used with any input size. Though, calculation requires little memory, so it can easily be implemented in hardware.

bcrypt has been around since 1999 has is still going strong, but is limited to input sizes of 55-characters.

scrypt is fairly new and I don't feel has been wrong long enough to be vetted by the security community.
Anecdotal confirmation: I probably wouldn't have clicked through (or found it) if the only link was the blog image - despite the first thing I did being to look for the link to the product. (Which is great, and might replace my current 'go-to' for this!)
Don't read TechCrunch. It's a cesspit of hype and sensationalism. Any plan which involves "get on the front page of TechCrunch" is a horrible plan, IMO.

I still occasionally look at TechCrunch, mostly because it's a good test site for browsers (because it's really memory-hungry). And every time I get sucked into reading an article, I inevitably end up feeling dirty. It's similar to how I feel after reading the covers of the gossip magazines when I'm waiting in line at the supermarket.
I like the concept (and I like the name a lot, excellent find). As the comments here make clear, many people experience the same "funk" and would be interested in paying for such a product. Hope you get to raise money and make progress on this very soon. Much sillier ideas have been funded before..
I find the modern synaptic trackpad on my Thinkpad X1 carbon to be amazing, it worked well under windows and runs very well under Linux (maybe even a bit better as I am more familiar with how to configure it).
You say it's "unlikely it will be easily cracked", but, obviously, it's demonstrably easier to crack than bcrypt and scrypt.
I wish this comment stood out more but HN has eliminated displaying of points.
previously posted and discussed: https://news.ycombinator.com/item?id=5616462
It used to be only at sites where I have to give (often mandatory) PII and CC/payment information but these days I get annoyed when at least the login page of the site is not HTTPS.