skysight-inc/HackerNews huggingface dataset:
SEOmoz hacked?
Nothing on the website or blog, but received this:

On Friday, May 31st, we discovered that an encrypted portion of some of our member passwords may have been made public for a brief period of time. Within minutes we were able to remove the potential vulnerability. Fortunately, Moz uses a two-part hashing scheme for our passwords, so there is little risk of an account being compromised.

As a precautionary measure, we are implementing a password reset. Please log in to your account at https://moz.com/login where you will be prompted to start the password reset process.

Further details:

No plain text passwords were exposed or stored in our system, and in our investigation we have found no evidence of any unauthorized access to user accounts or credit card information (we never display credit card numbers).

We were not hacked and our systems were not compromised. This is a precautionary measure to ensure your account integrity.

Like many companies, we use a two-part process for password encryption. This makes it significantly harder for security breaches to occur when this type of vulnerability is exposed.

At Moz, the security of your data and account information is a mission critical priority for us. We apologize for the inconvenience of changing your password, but we want to take every precaution to ensure your data is safe!

Accessing your account at https://moz.com/login will prompt you to change your password. If you have difficulty changing your password, or any questions or concerns, please be sure to contact us right away.

Thank you for your patience!

The Moz Team
Entertaining the idea that QR codes should be deformable onto curvilinear surfaces, couldn't this be done by the QR reader, so that it's more "readable" to a person that it is a QR code?
I do often opt for the slower, pure vimscript extensions in order to avoid having to remember to compile specific ones. Hypothetically, if vim had an embedded form of Lua, it could satisfy the people who want a familiar scripting language and it wouldn't be dependent on whatever version of the language the system has installed. I think that would be a excellent choice if you were writing a brand new editor.

To be perfectly honest, I think so many vim users (including myself) don't know vimscript [in depth] because they can easily find everything they need already.
"But I cut him much less slack than I was given as a kid."

Could work great. Could also end up inhibiting his executive function and turning him into a heroin addict.

The formula for success is multiplicative: Ability * Motivation * Opportunity.

If any one of those factors is zero, success is zero despite how much of the others you have. The thing about forcing kids to do their homework is there's no such thing as a free lunch. Whatever you gain in terms of extra external opportunity may be easily offset (and then some) by reductions in intrinsic motivation, executive function, etc. Or not. The point is that it's a wicked problem[1], and as such there isn't any simple and/or one-size-fits-all solution. Keep in mind also that doing well is largely beneficial because it gives you more opportunities to do various things. But thanks to new social structures that are being built on top of the Internet, those sorts of opportunities are becoming less and less valuable every day. While having them will always be better than not having them, it may no longer make sense to optimize for them either, especially when you're young enough to have a decades-long arc.

http://en.wikipedia.org/wiki/Wicked_problem
> he's at least going to be familiar with what it takes to play the system.

That comment makes your perspective the complete opposite of the author's. The author kid moves his chess pieces randomly and the author writes a blog post about how the rules are not fair. You likely teach that sometimes you have to follow the rules to play the game.

This blog post reads like like a fool arguing that the rules of chess are stupid.
What would you guys like to see in an anonymous company wall?
Unfortunately that is how the hiring systems for most things work.
Study Concludes Internet Explorer 10 Offers Best Protection Against Malware
The Mersenne Twister is not a cryptographically secure random number generator.
What if he doesn't like "playing the game"? No dinner?
The unfortunate reality is in a lot of (big) organisation people who can bullshit progress the furthest.

I've worked with plenty of managers that would rather not know the truth if it meant having to deal with a problem.

To them denial is bliss.
Not as fun!
> Winning is easier than being right, and winning is much more fun.

Hence why we have a society full of puppets with new cars in the garage.

What an awful way to think, I'm disgusted by your reasoning. For whatever meaning of "winning" you have, life only matters if you do what you believe in, otherwise it's not worth living.
maybe they figured it was the best option? if you want to experiment and find a better solution, you are welcome
Ruby on Rails flaw being used to recruit servers to botnets
Ask HN: What's Your MacBook* Desk Setup
Assuming your laptop is Macbook(pro|air), I wonder what's your setup when you are at your desk.

Using any docking solutions?

Which monitors are you using?

I recently switched from ThinkPad/Ubuntu to MBP with virtualbox as my Linux machine and willing to make this my main development station, so I'd like to learn from other's experience.
That is to make a syrup concentrate, which you then dilute further.
I used the word wealth because I was replying to another post which used it when trying to set up a false dichotomy between political freedom on one side and "wealth" on the other, as if they're opposites and you can have one or the other, not both. I wasn't trying to say that the sole goal of government is to get everyone rich.

But I did say long term - long term the Nazi "wealth" turned to ash. For that matter the nordic social experiment cannot be said to have succeeded yet. Really, none of this has been around long enough to make any final conclusions about anything.

Anyway. Instead of "wealth" you might want to read "social wealth" - the ability of a society to provide good jobs, education, social mobility, health care, long term satisfaction, security of state and person, those kinds things.
We mainly used github and one of their last updates, our entire repository turned to blank. Nada, no file, no wiki, nothing... We emailed support and tweeted their account. After one week, someone replied asking "is there problem still there?" I thought that was funny in term of how immature this company is. They eventually fixed it after like 2 weeks by restoring the backup database.

Anyways, Github is nice. Use it with caution. It cannot be full blown Enterprise ready grade service yet.
Good point, although based on my experience using onionbrowser on an iphone over a year ago, id say lahana or jabreaking seem to be better choices for someone wanting to use facebook, twitter, or youtube, since using any of these on a mobile phone browser can be hell without tor.
Probably because it doesn't matter if it was one of the instructions or not, because it's entirely irrelevant to anything other than an arbitrary "follow instructions" assignment. Coincidentally that sort of assignment is precisely what the author complains about.
I agree. The approach I'm taking is a semi-educated guess. I could well be wrong.
Apologies, let me clarify. I'm not trying to justify spanking. I'm arguing that the occasional spanking from loving parents doesn't cause the horricific long term psychological damage everyone seems to think it does. A couple of spankings over an entire childhood, while an arguably poor parental decision, does not equate to child abuse.

Edit: softer tone and spelling
PHP development: Mastering the skill of the moment
I have a two arm Ergotron stand. One arm holds a 24" display, the other holds a laptop tray that I put my Macbook(s) on. I don't use a dock, just plug/unplug cables as I need them.

I use a program called Jettison that unmounts external disks on sleep or command. It comes in handy when you have drives hooked up via USB/thunderbolt.
I'm biased because I thought of about making an app similar to twist, but I think this is a great app, and not just something that appeals to "techies" or whatever we are calling nerds now. In fact, I think it has the potential to reduce road accidents by reducing unnecessary phone calls while driving.
Doc-To-Help 2013 Releases the Industry's First HTML5 Editor for Content Authors
I posted this already. To answer your question: The email clearly reads "We were not hacked"
Emacs is an RMS-run GNU project.

Back in 2002, the better choice was Common Lisp. One of CLISP's authors even made it work with Emacs over the course of a week-end [1].

There's never going to be the perfect fit for an embedded extension language. Hey, wasn't that what Lua wanted to be, and Tcl before it?
Guile certainly isn't the easiest fit, but it's the only one that will get accepted.

At least, if they slowly change the actual extension language away from ELisp, all extensions that rely on external programs will survive better.

[1]: http://lists.gnu.org/archive/html/emacs-devel/2002-08/msg000...
LinkedIn Connects with Two-Factor Authentication
Non-swipe: http://www.treehugger.com/natural-sciences/researcher-decode...
You're making a flippant comment, but as I think all parents know, there is a baseline level of compliance you can safely expect to achieve for reasonable effort. What if your kid doesn't like "going to school in the morning"? What if your kid doesn't like "turning the lights out and trying to go to sleep after 1:00AM"?

It is worth recognizing the difference between compliance that comes at great cost and compliance that doesn't. In my case: I'll live with late assignments and mediocre grades, as long as the assignments eventually get done, in one giant batch with me checking them off if need be.
Top 7 website hacking 'trump cards' turning your life into hell
Oracle's Java Not Copyrightable, Google Tells Fed. Circ.
Fascinating, something I've played with in my spare time for a while. As others have pointed out the Mersenne twister isn't cryptographically secure so in this case you can attack the shuffle by attacking the PRNG. However it is an interesting cryptography problem to create an ordered sequence of tokens where nobody trusts anyone else to pick the order. To be really useful in cards you would want some other functions too of course.
Just in case you don't know, cocoa and coca are two very different plants. Cocoa (or cacao) is the one chocolate comes from, and I'm pretty sure you can own leafs of that.
We are planning to open-source our code on github so we can get feedback on best practices.
The pieces of golden advice here...

- "Avoid jobs at either big non-software companies" - As cool as it may sound to design websites for the NBA, or design systems to help market movies, neither will teach deep technical skills. You'll outgrow your mentors quickly.

- "The vast majority of senior hires into good positions are done through networking your way to a hiring manager who then sets up the interview" If you don't know people once you hit your 30s, people will wonder what's wrong with you. Why can't someone vouch for you? It's a form or ageism, and it may be morally wrong, but be aware that that's what you're up against. It's even more true at 40 or 50. This means networking with your customers, being kind to your suppliers, knowing who your competitors are, and making acquaintance with folks who could be one or two degrees away.
>You know, free elections, the right to arm yourself, the right to buy chewing gum.

It is easier to get chewing gum in Singapore than it is to buy kinder eggs in America.

Additionally, the reason for banning chewing gum was a whole lot more reasonable (it makes the streets dirty & jammed train doors).

>I wouldn't want to live in a place like that, clean streets or not.

And I wouldn't want to live in America either. I'm happily trading chewing gum and semi-automatic pistols for affordable healthcare, summer every day and clean streets.
This was more interesting/informative than logos-in-CSS posts, and yet many of the comments are negative.
Got it. Yup, right now the site is only interesting if you have someone sitting next to you to share the computer with. The next step would be to add a server-side backend and allow playing online, if I end up revisiting this project.

FYI, if you and the other commenters just want to play Hex, there are existing sites you can play it on, like http://www.iggamecenter.com
Dude… you get "personal" all the time. It takes a pretty serious double standard to be so sensitive about it when its aimed at you, versus when you are dishing it out being fine with it.

Not sure I've actually seen much aimed at you on here that is "personal". Its mostly a lot of people frustrated with you for being the actual troll while accusing everyone else of being trolls.

As for people using aliases, I think you should have actually learned the value of them considering how much time you spend on the internet trolling. Its a really, really bad idea to troll under your real identity. Its why so many people are permanently irritated with you.

At this point I think I will stop trying to offer constructive criticism. Its becoming really obvious you are a pretty classic troll, and quite good at it too. You are mostly wasting everyone's time as only a good troll can.
Do you do remote or sponsor H1B?
Yes, a danger to the old ways!!!
Marxism is a political theory, or if you prefer ideology. Therefore the statement: 'Marxism has a lot to do with freedom.' is a theoretical one. And the reason of it is, that the basic idea is to free the workers not only from government oppression, but also ( as much as possible ) from oppression created by the economic system.

However, to answer your criticism, there are similarities between the already tried forms of socialism, namely that they were tried by states that were part of the eastern block and as such under the influence of the Soviet Union. And I think that the problem is specific to these similarities, not to Marxism. To convince me otherwise, you would need to show that other forms of socialized ownership of capital, for example employee owned companies, produce also disastrous consequences.

About your last point, I actually agree. Marxism proved to be a rather dangerous ideology. But I think that it is at the moment more dangerous to forget Marxism, than that a second coming of the Soviet Union is imminent.
I still wonder how they discovered that the passwords were exposed.
Aside from the practical interest in defining zippers as noted in another response, isn't it enough that there be this interesting and (by many, anyway) unsuspected correspondence, that holds fairly deep down? I mean---taking the Taylor series of a type! After all, we are told that "anything that gratifies one's intellectual curiosity" is suitable for an HN submission, no?
Review article in Startup Dating.

Wri.pe: A simple and handy note-taking app from Japan
http://www.startup-dating.com/2013/06/wri-pe-note-taking-app
I remember reading an interesting article which said that hex-grids were overrated, since each hex was adjacent to only 6 spaces, whereas square-grids have 8 (including diagonals).

I just tried to dig up the article, but failed. It was a pdf, and it was his investigation into attempting to create the most balanced turn-based strategy game he could. I remember the first-player would move once, and then the second play twice to offset the first-play advantage. And the board wrapped around top-to-bottom and left-to-right. Shame I can't remember the name of it!

EDIT: Found it: http://www.symmetryperfect.com/shots/texts/descript.pdf
SpeechJammer: Speech Disturbance using Delayed Auditory Feedback
Does it need to be for this use-case? As a way of "cutting the deck" that results in an unfeasably-computationally-large variation on the "ordinary" card deck cut (which has only 52 possible changes to the allegedly shuffled deck) - doesn't it satisfy that goal?
This solution would necessitate buying an entire set of new shopping carts (or at least, shopping cart handles).
Yes, as far as I've heard,

VPN -> TOR = DANGER,
TOR -> VPN = PROBABLY_OK

You should probably make the 'Lahana is not super secure' really BIG and BOLD for the reader so they can understand their risk.
Considering the level of grade inflation today and the number of students who cheat in college and/or to get to college, I can't imagine taking GPA seriously.
The video on their site doesn't do it justice. There is a great example here: http://www.youtube.com/watch?v=oU9EGeMP5n4

They also have a program available to try it on yourself: https://sites.google.com/site/qurihara/top-english/speechjam...
I hope I would be brave enough to laugh in that man's face. If he wants to take off points for making the summary the wrong size, fine. But to throw it away and pretend it didn't exist? That's a petty abuse of power that nobody should tolerate.
We don’t allow adults to strike one another in anger or as punishment for a mistake or wrongdoing. We don’t allow children to hit each other — indeed, we actively discourage it. Then why is it okay for an adult to hit a child?
By your definition Brin and Zuckerberg (two hardworking billionaires) are middle class. And that is fine, but if it is true, then class isn't the problem after all.
BBC News' Response-ish Web Design
I'm not sure what this sub-Breivik material is doing on HN, but there we go.
I'm far more interested in conversations regarding where we are headed, rather than from whence we've came

Can you have the former without the latter?
I can imagine it's frustrating, but are you suggesting that the father shouldn't have written it, or that coursera shouldn't have reposted it to their public blog?

Both of those seem a bit ridiculous to me, particularly given that it's very clearly a story about one kid with a particular set of autism-related symptoms, and no claim or suggestion that coursera is, in general, helpful for folks with autism.
The title is linkbait, but I think (as a two-decade emacs user, mind you) that the technical points are actually pretty sound. Emacs absolutely is crufty when you try to stretch it beyond its original paradigm. Elisp, as an environment, is woefully primitive compared to the kind of elegance and integration you can achieve with more modern languages. The example of code completion is actually pretty informative -- this is something that IDEs were doing routinely 15 years ago that emacs still doesn't do well, or in many cases at all (for languages other than elisp, of course).

Now, that doesn't outweight the good, and I still use it, and probably will until I die. But I think if you want to be honest about things you need to think seriously about what emacs would look like if you "started from scratch" with the same philosophy but with modern goals. Probably not like Eclipse for sure, nor even Sublime. But it probably wouldn't look much like GNU Emacs either...
I read the article closely enough to come to believe they could have used a CSPRNG but opted instead to use MT19937, considered that the title indicated that the approach was an application of cryptography, and decided to keep my response simple.

MT is really, really bad. We don't see it too much in the real world, but it's so easy to attack that we have several attacks on it in our crypto challenges.
If the world actually followed school-like rules, your analogy would be useful. But it doesn't.

The recipe for "winning" the game of school is:

- follow directions very carefully
- be good at memorizing things
- never challenge authority

The market value of being able to carefully follow directions is nearly zero, and falling fast. That was a useful skill back when there were lots of good-paying factory jobs. Now it just makes you an excellent candidate for being replaced by software.

The market value of being able to memorize easily searchable facts is nearly zero, and falling even faster. Any test that can be "cheated" by using Wikipedia is testing a totally useless skill. (Useful tests are still hard when you have access to all the internet.)

As for obedience to authority, I'll stick with Thoreau: "Disobedience is the true foundation of liberty. The obedient must be slaves."

The evidence around us is overwhelming. Look at all the unemployed college graduates: those are the people who learned how to play the game, when they could have been learning something useful instead.
How to view Blu-ray on iPhone 5
You have a habit of collecting high definition Blu-ray movies so that you can enjoy crystal clear images and astounding audios of Blu-rays at home? And you are also an iPhone 5 owner who happened to spend a considerable long time on the move, on a daily basis? Why not kill your time watching Blu-ray movies on your iPhone 5? With DVDFab Blu-ray Ripper (3D plus), the outstanding Blu-ray ripper software you can find, watching Blu-ray movies on your iPhone 5 becomes unbelievably easy!
This is an irrational model for evaluating a candidate's talent. The best way to evaluate a candidate's talent is to make them code for you, plain and simple. Many people's motivations in university diverge from their motives in the professional world. Some people will work much harder when the result is a paycheck every two weeks, or when they have to feed a family, or because they see their work career as distinct from their academic career. But for the sake of argument, let's play along with this naive model.

The university they attended matters almost as much as their GPA, as we all know that professors will tend to curve the difficulty of their course to conform to the quality of the students they are teaching.

And you have an illogical attitude towards 3.9-4.0 students. Almost every student who attends an Ivy-caliber school had a 3.9-4.0 in high school. Surely, you aren't implying that the quality of a CalTech CS graduate is lower than the quality of a UCLA CS graduate, because the CalTech students' one-time GPA was likely a 4.0. And you certainly can't be saying that Ivy-caliber students are sheep who blindly jump through hoops.
If I can impart one thing I've learned in my life to my child, it will be this: no one cares how smart or talented you are. They care about what you do. What you accomplish.

Some of the things you accomplish are great things that only you could do--your life's work. Accomplishing these will among the greatest experiences of your life.

But a lot of the things you accomplish will seem pointless and boring. Doesn't matter--you still need to do them. In school it's homework; in real life it's time sheets, contracts, taxes, auto registration, insurance, memos, etc. Accomplishing these will suck...but you still need to do them. In fact failing to do so is a good way to keep yourself from having the opportunity to accomplish great things.
Here is a photo oh my setup in the Mozilla Toronto office: https://www.flickr.com/photos/19132706@N00/8867085758/

Very basic: I do all my work on the MacBook (I love the Retina display) but have a browser with devtools open on an external 24" display in portrait mode.