skysight-inc/HackerNews huggingface dataset:
I wonder if any general-purpose OS kernel is ahead of Linux in this area.
Well it's not like they were short of money to spend.
Good for Boston & Google.

I guess nobody wants to administer mail these days...
Reddit:

$ curl -v www.reddit.com
> GET / HTTP/1.1
> User-Agent: curl/7.30.0
> Host: www.reddit.com
> Accept: */*
>
< HTTP/1.1 200 OK
< Content-Type: text/html; charset=UTF-8
< Server: '; DROP TABLE servertypes; --
That wouldn't have prevented this attack since it depended on compromising the payment processing company.
He only wears shorts? Is there any truth in this?
Keep them away from HN over a longer period of time.
BZCareer search engine is a new search engine that is taking the industry by storm. BZCareer offers the best selection of job openings in fortune 500.

Companies interested in posting jobs on this site you can contact us at admin@bzcareer.com .
return = 3 shouldn't work.
Examples:

Resource limit for SNAP: http://www.dpw.state.pa.us/foradults/supplementalnutritionas... -- translation: "Have less savings, get SNAP".

Patient Assistance Programs at hospitals: http://abcnews.go.com/blogs/health/2013/03/28/real-money-hid... -- translation: the government says your hospital has to "give back to the community" by not making you pay your bill if you say you can't.
People who know what they're doing don't design Bitcoin mining equipment

Why? Is it not profitable enough?
That would a case of people doing this to counter volatile prices if people also took advantage of the quite low gas prices they chance upon to fill it their car up completely.

But what the article says is that they don't put more the $20 at a time, period.

Such a behavior wouldn't see any advantage given volatile prices, because in the end you end up paying the same (you pay lower at some times, higher at other).

Which is the article points too: that they see the guys doing that end up paying the same amounts as the guys filling it up normally.

So it's not the volatile prices that get people doing that, it's perhaps a false idea of saving money, or that they infact do not have that much lying around and try to get to the end of week accounting for any emergency.
I'll expand on my previous comment to make this more clear: the grandparent's approach is terribly flawed because the Do Not Call registry only covers a narrow range of annoying phone calls.

Calls that are not covered by the Do Not Call registry include:

- Any survey by telephone (even if they are being conducted by a for-profit company)

- Any charity

- Any political campaign, candidate, or committee

- Any company with whom you have had contact in the last 3 months, or done business within the last 18 months

In short, saying let's always answer phone calls because of the Do Not Call registry is like saying let's open every email because of the CAN-SPAM Act.

The only way to reliably manage telephone interruptions is on the client side, i.e. the phone itself. When I don't want to be interrupted I send all calls on the landline to voicemail, and put my cell phone on vibrate--only picking up numbers I recognize, like family or friends, in case it is an emergency.
I think they only realized it happened after name.com was mentioned as a hacked site in HTP5.

http://www.exploit-db.com/papers/25306/
Interactive javascript charts for Java web applications
Second the Udacity courses. A lot more meat than the normal beginner stuff. If you're feeling ambitious the Norvig course is good.

https://www.udacity.com/course/cs212

The programming languages (cs262) or web development (cs253) courses would probably be a better place to start.
Damn. Missed out. All these are used again.
Looks like Jeff Bridges to me ...
Here's the cache: http://webcache.googleusercontent.com/search?q=cache%3Awww.n...
I only see the ascii picture of Paul Graham and his profile text.
http://en.wikipedia.org/wiki/Three_Laws_of_Robotics
Why would you even want to save a Netflix stream? You can generally find pretty good blue-ray rips of whatever Netflix has which would be higher quality since they don't have to be low-bitrate enough for streaming. Not that I'm saying Netflix itself is pointless, just that archiving things from Netflix streams is pointless.
Reuters: U.S. is biggest buyer of offensive security tools
One of the craptastic Blogger templates. I've taken to viewing them through Google Cache, when possible (and when I'm sufficiently motivated to not simply quit the item/site); unfortunately, more and more seem to be excluding themselves from said caching.

http://webcache.googleusercontent.com/search?q=cache:http%3A...
I have a high DPI monitor and need to zoom the text to 150% to make it readable. But on that website the text gets zoomed into the right margin in Chrome and off the screen in FF. Works fine on my iPhone. Something wrong with the CSS?
Next Target of IRS Robo-Audits: Small Business
Don't pull their pull request when they've put a lot of work into them.
There are a lot of cffi c bindings. I used with success:

* https://github.com/amauryfa/lxml/tree/lxml-cffi

* https://github.com/chtd/psycopg2cffi
Not exactly a source-code easter egg, but MySpace sends a random X-PoweredBy header with each request. A selection:

X-PoweredBy: Nerd Rage
X-PoweredBy: The fire of 1,000 SUNS!
X-PoweredBy: Interns

Of course it also runs on IIS, and this is MySpace we are talking about, so the geek cred is questionable here.
IOS 7 Concept Video
BFL actually moves very slowly (planned schedule: 4 months, actual schedule: 11 months); Avalon are the ones moving fast.
I would feel much better if passwords were just stored on a HSM (Hardware Security Module) instead of an local unix file system.

And, from a security perspective, it's mostly irrelevant as to whether passwords were hashed (where hash = MD5, SHA, or some other high speed hash function), or salted+hashed.

Why:

Look at two scenarios,

Scenario #1: The security of your Strong, high-entropy password.
Scenario #2: The security of all the n00b's weak passwords.

Then, look at two options:

Option #1: Hashed, no Salt
Option #2: Hashed + Salt.

In Scenario #1 - your password is secure in Option #1, because your password does not appear in a rainbow table.

In Scenario #2 - the vast majority (60%+) of those weak passwords can be brute forced with sophisticated dictionary attacks in a couple days even with a hash+salt - no need to use rainbow tables.

Ironically, Salt's offer no security for you (you don't need them), or the vast majority of people (whose password will be broken, even if they are salted+hashed). Salts+Hash were relevant from 1990-2010, prior to high speed GPUs and ASICs overtaking Rainbow Tables. People learned lessons then, that are no longer relevant.

Now, where Salts ARE important, is with a multi-iteration key-derivative function like bcrypt or scrypt. There, a salt (which is part of the bcrypt and scrypt algorithm) actually does offer (a lot) of security to the n00bs. Without salts scrypt/bcrypt would once again tip the balance back in favor of Rainbow Tables. But, of course, scrypt/bcrypt are inherently salted.

But your high-entropy password is safe regardless.

As always, http://codahale.com/how-to-safely-store-a-password/
I doubt that is a sign of D finally gathering momentum, though. Just a few D users discovering hacker news.

D is a failed language design (among countless others) if you ask me. I remember originally it was meant to be a "cleaned up, modernized C++ replacement" but these days it seems to lack any coherent concept.

Rust certainly runs circles around it if you want a "cleaned up, modernized C++ replacement" and thus already has much more momentum than - by now old - D.

Is there any reason to assume that D can still manage to break out of its "obscure enthusiast language" position? That is not a rhetorical question, I am genuinely curious.
I would say that so long as there are issues that have been identified to negatively affect performance, whichever issue has the biggest performance impact should always be considered worthwhile.
> at what point does it become not worthwhile

There is always someone who will want to do it if only to show they can. You only need to care about "worthwhile" if you're balancing it against other concerns.

Obviously people are generally going to be motivated to smash the larger ones first. But Linux doesn't run like a centralized project where developers are directed on what to prioritize.
Schedule meetings every 2 hours, just so that the programmer never gets any flow going. Then ask in the meetings why there isn't any progress.
Thanks for the kind words and feedback!

1) My cofounder Randy really emphasizes whitespace and being as minimal as possible. His argument is that the less you do, the harder it is to fuck it up. So thanks.

2) I could see an e-cig being a great reward because it's a discrete unit and something you really want. Though (and you've probably thought about this) it'd probably be ideal if you found a different reward/habit all together. And you could use this app to do that! =)

3) I wrote an entire post about this, but essentially, I think it's foolish to work in technology and not make an investment to continually increase your understanding and skill in technology. I'm also working on improving my marketing and sales skills, but coding is at the core of our internet/tech industry. Would you make someone an Army General if they didn't have any combat experience?

More here: http://www.jasonshen.com/2013/when-software-is-eating-the-wo...
Presumably users will gladly accept any positive % as long as it works, so the question comes down to what are the motivations of those actually implementing (or green-lighting) the commits.
Not a very general answer, many programmers use Windows. More generally applicable answer: hire programmers for a work environment on one OS. Announce one day that the company is switching to $newOS and all developer machines need to run $newOS as of next week. For bonus points, say that tools, etc, that are not available on the new platform will be worked out as they come up (and probably have no budget for replacing them).
My favorite source code easter eggs are all the odd little tidbits scattered throughout the Space Jam movie website...still up:

http://www2.warnerbros.com/spacejam/movie/cmp/lineup/lineup....
A common theme amongst depressed folk is that they see everyone around them being positive and feel subhuman because their experience doesn't match up; them trying to aspire to the brand their friends present and not realising (at least not accepting at a subconscious level) that there may be a lot of negative stuff their friends are hiding from them.
To "cure" this, one idea would be to create an anti-social network - somewhere where you present the worst possible image of yourself, a place to relieve yourself of the burdens you'd never pollute your positive image / good vibe feed presented on your Facebook stream. As well as giving people a place to open up to that side of themselves you'd see your friends being honest about their downsides so wouldn't have such a high bar to compete with, helping you to feel more human. People enjoy self-detrimental comedians for this reason (amongst others), so the idea has some validity. It would be interesting to see how this played out in reality. . .
should have added one more zero at the end to make it look more real!
PyPy has it's own implementation of Numpy (called numpypy). It's not 100% complete but quiet functional.

http://morepypy.blogspot.com/search?q=numpypy
This is a philosophical position that almost no one engaged in serious math holds.

This book has an extremely modern discussion of this

http://www.phil.cam.ac.uk/teaching_staff/potter/staip.html

Only lay people and arm chair philosophers passing through math land have this unfortunate view.
>Many people who live payday to payday will be the types of people who if they had there pay doubled would adjust into the same payday to payday model.

Yes, only in the first case they buy mostly essentials and they are fucked if they have some emergency, where in the second they buy more stuff, can take of their children more, and can use some of their paycheck (or the next one) if a need arises.

I don't care much for the morally scathing undertone of the comment.

>In general these will be young people who are out to enjoy life and whilst many adapt a more moderate balance lifestyle, there are always some who carry on.

Spoken like a middle or upper class person who has never come in contact with the large swaths of poor people out there before, or if he ever had, has long forgot all about it.

The US is like a third world country job-wise and living conditions wise in many places. I've been to all, from Mississippi to South Dakota to Georgia and Alabama to Idaho -- and I've seen and spoken to people in similar situations all over, from NY to Seattle.

Living from paycheck to paycheck is not about some ...hipsters ("young people out to enjoy life"). It's about the declining middle class and the new masses of poor. Including millions upon millions of blacks and latinos.
John McAfee answers your questions
[disclaimer: I work on the Dart team]

I talked to our VM engineers, and they mentioned that the Benchmarks Game does not perform a warm-up before it runs the benchmark. This affects the Dart performance, because the Dart VM does not yet have on-stack replacement (OSR). Both Java and V8 have OSR so they perform better in the Benchmarks Game.

If you look at Dart's benchmark harness, https://github.com/dart-lang/benchmark_harness, you'll see that we perform a small warm up before we start measuring. It would be cool if Benchmarks Game did a warmup, too.

We plan to implement OSR but it's not there yet.
That plus their DNS hijacking [1]. I really loved their UI, but have been moving my domains off Name.com as they come up for renewal.

[1]: https://duckduckgo.com/?q=name.com+dns+hijack
Right to the point.

The future is not in how our children use today's technology - they will make their own to feed their needs which most of us cannot yet imagine now.
D was overhauled a few years ago, and the result is quite interesting. I don't think D is a failed design, but that it was "just" an incremental improvement. That incremental improvement was in many different areas, but it didn't allow introduce fundamentally new ways to program. If you haven't seen the newest version of D, though, it's worth looking at.

But I agree that Rust gives me more hope. Rust's treatment of memory seems like it's obviously the best way to do manual but safe memory management.
If it's not automated, it requires to much additional effort.
It is worth to do for really big projects which can't be developed without community effort, but not for smaller ones which almost work and only require small fixes from time to time.

Also on such projects people don't know each other, and don't know how much everyone have contributed, so there's no way to have meaningful discussion and consensus.
Find out when they come in to work every day. Schedule a daily recurring meeting an hour or 30 minutes before then. (also works if you schedule the meeting right after they normally leave).
Meh. Virtualbox/VMware is a great detour around that now.
I wish I could tell you.
Hmm. It seems Google Cache doesn't help me here. Now I was able to reproduce the artifacts in the page header, but the huge header itself remains (too much screen space, literally zero value) and the content still fails to allow pinch/zoom to actually read the text in the illustrations.

http://db.tt/Yz5J6zd4
It's an interesting exercise. Any party with an interest in manipulating bitcoin can do the exact same thing. No governing authority means no governing authority.
Wiles was much more involved in the Math community at large than Mochizuki. He continued to publish non-FLT papers, go to conferences, etc. Even then, the general consensus is that FLT would have been proven much faster if Wiles shared his work earlier.
Still doesn't feel the same as running Linux on bar metal and also not accepted in every company.
(I appreciate it, but you should probably just use the vote up mechanism instead of adding a '+1' comment)
Bingo. My brief experience with Mongo a few years ago was in a situation where it got selected in order to use something "new and cool". My job was to produce some reports from the data. Guess what reports require? Joins. The whole mess was slow and sucked, and the client belatedly realized that MongoDB was a shitty choice for what they needed, which could have been handled by Postgres without breaking a sweat.
I opened https://github.com/xxgreg/deltablue/issues/1 to request updated numbers.
Well, scientists still need a means to communicate with each other - I wouldn't want to mix the needs of professional communication with that of popular communication.
Wait, what's the modern analogue for the boom box?
This is amusing because just today, while I was driving decided to attempt to use Siri (something I do about once a month to remind me why I don't use it). I said, "Nirvana Nevermind". "Sorry, I don't know how to do that." "Play Nirvana Nevermind". "Sorry, I don't know how to do that." "Search music Nirvana Nevermind". "Sorry, I can't search for music."

Great stuff, that NLP.
We actually had a very interesting page up for this in the run up to the 2012 election, comparing and graphing mentions of Obama and Romney on each network along with sentiment analysis of what they said about them.

The page has since been taken down but here are two of our blog posts about the analysis.

* http://blog.boxfish.com/post/30997338037/obama-vs-romney-who...
* http://blog.boxfish.com/post/32880728776/tvs-thoughts-on-our...
Destroying currency is not wasteful in the sense that destroying an equivalent amount of food is wasteful because the total value of all the BTC is almost completely independent of the number of BTC in existence: if there were half as many BTC in existence, each one would cost twice as much. Consequently, your destroying some BTC enriches everyone else holding BTC to almost exactly the same degree that it impoverishes you.

I anticipate objections to the above on the grounds that "deflationary currencies are bad". The most chartitable interpretation of, "deflationary currencies are bad," is "the downward stickiness of the price of labor": during a recession, unemployment tends to go up in part because most employees are irrationally averse to taking a pay cut when times get rough, and enlightened monetary policy can sometimes negate or ameliorate that particular irrational reaction by employees by inflating the currency, which has the effect of fooling the employees into thinking that their "real" compensation has not decreased. But that is a minor effect compared to the basic "invariant" described above -- especially since almost no employees are being paid in BTC.
I've used PyPy in production with success. The task involved implementing a worker which needs to process Wikipedia data.

http://rz.scale-it.pl/2013/02/18/wikipedia_processing._PyPy_...

Also I'm using it with my web applications.
My issue with gmail search is that it's incomplete, and I don't know how incomplete.

I've downloaded my mail to mac's mail app. With identical search strings, the Mail app finds more messages.

This includes searching by sender email, which yields incomplete results in gmail.

There have been many occasions where I've only sent someone one email, or vice versa. Gmail often misses these.

So for anything I must find (e.g. tax documents) I label them.
To be fair, often when this happens it's due to a lack of communication on the programmer's part. Giant pull requests out of nowhere (even well-crafted ones) may not always be what the project maintainers want or need. This is why it's useful to discuss (non-trivial) fixes or design ideas before attempting to implement them.
The economics of this makes 0 sense. Why wouldn't the company that built these just plug them in and keep the money for themselves?
How much do indoor pilots cost? Cheap pilots will probably end up being multi camera, no audience, outdoors, and overly pandering. Pilots need to be funded by people who aren't looking for high ratings within ten minutes. Netflix does look past that, but they do look at when people pause or stop, something broadcasters can't do.
they're unlikely to even notice if one or two videos (for
example, one of the Netflix-produced broadcasts like House
of Cards or the forthcoming Arrested Development episodes)
are unprotected. It wouldn't make a difference to them.

I'd notice. The only reason I'm considering getting Netflix is to watch Arrested Developent. However, I basically only have Linux machines and so I won't be able to.
That is brilliant! Thanks a lot, I'll get right on it :)
On Weed & Productivity
Best source code ASCII I've seen is from Rishi here: http://explicitly.me/robots.txt
http://en.wikipedia.org/wiki/Relational_database
> No, because I've seen this with my own eyes and heard it time and again.

This is completely irrelevant. The problem persists no matter what you think people 'should' do. The only thing that will change the status quo are laws that prohibit people from taking advantage of others.

Ultimately, this is just an instance of a classic conservative vs. liberal debate, so you may simply be incapable of seeing my point of view.

That said, I'm curious for myself how I might stick landlords on illegally high fees. In New York, what would be the best way to go about this? Is there a database I could refer to, or an agency I could get in touch with?
Can I get something clarified here, because I'm a bit confused about one aspect of this.

So these DRM extensions are platform-specific binary globs that will be simple to talk to via JS. The idea being that you write an HTML5 page that has a <video> tag in it, which takes content from a URI, passes it to this binary blog, which then returns you something to render. (basically, don't worry if I got the API wrong).

These binary extensions: who writes them? Is there going to be a generic "Windows" DRM binary blog that gets called if you're on Windows for YouTube, Netflix, HBO, etc? That's written by (e.g) Microsoft? Or are you going to have to install DRM binaries from each website, like drivers, into your system?

If it's the latter, how the BALLS^ does anyone expect that to work on linux, or more importantly (in terms of tasty tasty money) iOS? Do they actually expect it to work on iOS, or will they just deliver content through apps? If it's apps, what problem is this solution solving exactly? Is it just a way of getting rid of the downsides of flash? Because in terms of cross platform compatibility it's obviously creating its own issues.

^I wouldn't usually talk like this on HN, but I think it's warranted here
> We need an off-planet backup of all data contained on the internet in anticipation of an apocalyptic event

Well, that's cool and all.. but screw apocalyptic versions of myself. What about just downloading papers for immediate use, for ourselves? So that we can read and use them now? Plus, you can beam up as many copies into the sky as you want once we commit to building this collection. I wouldn't mind. I promise!
Most context switches are actually triggered by a thread blocking. In a completely tickless OS you'd also set a one-shot preemption timer whenever a thread starts running (this used to be expensive, but Intel recently added the TSC deadline timer).
http://shopify.com

Read the top comment, then scroll waaay down to the bottom.

Full disclosure: I work for Shopify
thanks so much for the backing. really excited to get this off the ground! please help me keep spreading the word.
Because people paid them for the product, and if they don't deliver, they could get sued.

As for why they sold them at all, I'd assume they didn't have the capital to build them on their own.