skysight-inc/HackerNews huggingface dataset:
I gave up on Firefox a year or two back because of performance concerns - not raw speed but ram consumption (leading to thrashing when tabbing between ram-intensive processes) and its poor single-threaded freezing problems. Nice to hear that FF is getting better and I'll be able to go back to it - its extension community is far better than Chrome's, and Firebug is without peer.
By encrypted they probably mean they applied the most potent of all cryptographic techniques: base64 encoding!
Perhaps he didn't do cocaine, but friends of his said he would deny it even as he was in the middle of doing it. So the only people who will ever know for sure are Andy and his friends.

He was also have said to have to take obetrol (the Adderall precursor) as frequently as one might eat tic tacs, so he was still, by your own admission, a drug addict.

Really though, the point I was trying to make is that he wasn't a very good artist, not because he wasn't capable of it, but because he didn't really try. I could produce a dozen such works an hour (his commercial illustrations), and I'm not an artist either. The difference is, I don't claim to be a professional artist.

I'm not mad at him for making a living, or doing what he loved to do. I just don't think that he was a good artist.
Must be come cultural thing due to local network effect.
My wife exclusively uses facebook on her phone as do all her friends.
For two way conversations I exclusively talk on the phone.
There are tons of RSS apps with little or no syncing.

My app of choice is Reeder, which can be used with or without a syncing service.
Good thing for the internets
You do have Java expertise, so Android would be a logical step. Try out Jetbrain's and Google's new Android Studio to leapfrog over the Eclipse experience.
Alternatively learn AngularJS or a similar JS framework and use PHP to serve JSON to state-of-the-art single-page type apps. You can run such PHP scripts on the new Appengine for PHP, so you end up with a highly scalable solution that is also not bad in performance.
I think the best way to progress is take something that you know and combine it with state-of-the-art practises or tech.
Be glad that you didn't learn some of the technologies that developed over the past years (Rails for example is starting to get out of fashion since it is not so useful/overkill for JS apps) and leapfrog to the new ones.
Consider the 50+ doors the FBI broke down in response to operation payback, yet 0 prosecutions have occurred in the US. Before that happened it was widely speculated that ddos was not a crime in the united states, and that appears to have been defacto agreed to by the US Attorney in this case.
Online-Petition: Granting Asyl for Snowden in Austria (de/at)
No one encrypts passwords. They just refer to one-way hashes, typically MD5, as encryption.
You're thinking of OpenGrok[1]. I think the project is still alive, but the public navigation of Solaris code with it is dead[2] under Oracle.

[1]: http://opengrok.github.io/OpenGrok/
[2]: https://java.net/projects/solaris-userland/sources/gate/show
>modulo changing it to ');drop table students;-- )

As an aside, about a year ago I made a simple web crawler that got (among other things) HTTP headers from all the servers it found. After an hour of crawling, I took the headers to start working on a parser for them, and found 7 attempts at an sql injection. Do I get to prosecute whoever set up those servers?
Shipping with Stripe and EasyPost (YC S13) is cruise control for cool
Mickey Video For iOS Is Here
None that wouldn't be better handled with a warning of "excessive password complexity, we're not sure you'll remember this". Even truncating all password entries (create/change and auth) and simply taking the used subset would be better than blocking me from using my intended password.
Do you really think the fault is with a bunch of greybeards? More accurate would be:

"We know the guys who used to work here did some terrible things because they were told to by people who still run the company. We're changing that, because we're being allowed to for now, and we're here to tell you about it."

Ballmer: "I know, let's have a bunch of kids at CES promoting this fictional younger / hipper image because Apple is destroying us."
It shouldn't be a hall of shame for companies being hacked, getting hacked is thing you can only mitigate not prevent.

The shaming should be for storing your sensitive data in an insufficiently secure manner. If a company used scrypt to hash their passwords then they would essentially have no issue with getting hacked.
You're both right. There is no hard line between a contractor and a consultant - and you have highly-paid, highly-skilled people who are called either, or both.

This is part of how bad actors in our industry get away with the shenanigans they do. Companies that provide third-rate warm-body programmers at starvation wages call themselves consultancies, call their wage-slaves consultants, and try to blend in with the rest who are benign or good actors in the system.

Sometimes you bring in talent via contract because you don't have the ability internally, or you don't have enough of a need to justify a full-time hire. Other times you bring them in because they're cheap, abusive, but give you arms-length deniability.
The only reasonable restriction is in overall POST body length. I recall an exploit once on node.js where unreasonably large POST requests could DDOS a server with minimal effort.
In Britain we have a lower minimum wage for under 18s (and a higher but still low min for under 21s) which seems like a reasonable compromise.
I believe it's HN mods who change titles that don't comply to the guidelines (e.g. misleading title) usually they just change the title to the title of the article.
Using SVG as an Alternative To Imagemaps
I have my doubts. It never stated when it sent the passwords. Maybe it hasn't the UI overlay, but the social apps seem to be closely related to MOTOBLUR.
I thought GitHub is really missing this feature, so as a hobby project I built this.

The source code is here: https://github.com/anvaka/gazer/

Looking for your feedback :)!
I was looking at pricing on fire base and saw that you had a free option with a peak of 100 free accounts. I think a good option to have is being able to automatically upgrade the account if you are hitting the bigger connection level. I don't think this would be a good default option but a great one for some specific use cases.
Wow. An especially low brow comment. Thought we could do better than this.
Why Paper Is Still Your Best Design Tool
I'm confused by this. Pixate had an existing revenue model: selling their product. Now they've raised money (intent on expansion, obviously), but now their product is free. Their support is free too. What's the strategy here? Make new products?
These aren't the only companies finding loopholes to get around labor law (and it does seem like, for the long-term temp workers in this article, that's what it's about). In journalism, the preferred legal fiction is to call your employees "contractors", so that you don't have to give them time off or benefits, pay into workplace compensation, or deal with payroll tax.
I don't know how well it would have worked for Google (or not), but, personally, I am very, very "+1" on RSS feeds in social network streams as a general concept. No, you don't get the exact same experience that you get with a "conventional" RSS feed reader, but when your news stream can have arbitrary RSS/Atom delivered content, it opens up a lot of options.

This is why I was so happy that we just got RSS feed subscriptions incorporated into Quoddy[1] - our enterprise social network product. So many things that you might be interested in can be syndicated via RSS / Atom - new documents posted to a document management system, new customer records posted to a CRM system, etc. Personally I'm more excited about this feature than almost anything we've done lately.

What will be interesting, will be exploring how to utilize UI elements to give a user the ability to get the "best of both worlds" and view their content in a fashion akin to the way Google Reader (or other readers) work, OR view it "in stream" ala a G+ or Facebook style news stream. When you take a step back and look at it, in many ways, a "wall" or "stream" isn't that different than an "inbox", and one wonders if you can't find a neat way to collapse all of this "stuff" (email, rss feeds, social "status updates", etc.) into one interface.

Anyway, call me bullish on syndication, but I almost feel like we need a song titled You Can't Stop RSS set to the tune of Twisted Sister's You Can't Stop Rock and Roll.[2]

[1]: https://github.com/fogbeam/Quoddy/tree/prhodes

[2]: http://www.youtube.com/watch?v=GaehBH7DtR4
John Singer-Sargent is exactly the kind of artist that was replaced by the Photograph.

In my book he was, at best, a second-rate Whistler. I am unsure if he ever produced anything original in his career.

Warhol, in his perverse desire to produce the unoriginal produced something truly original.
I'm both horrified and intrigued by the idea of a Bluetooth lapel pin. It's like a smartwatch, but with other people as the target audience.
For those who are charisma blind, something portable like a Bluetooth lapel pin that dynamically displays Klout score/Twitter followers.
The root of the problem is not IE specific behavior, but lack of auto-updating feature.

If MS doesn't remove a barrier between versions, nothing will change.
Captour | collaborative photo book
Dashlane is pretty nice, I'm using it and RoboForm, which I've owned for years.
because it was designed just now?
The Steam forums were hacked in Nov 2011. The hackers got access to a DB with Steam users' personal information.

http://arstechnica.com/gaming/2011/11/valve-confirms-steam-h...
With iOS 7 and Windows 8.1, search could be Microsoft's new platform
How about a sign that says "if the government has nothing to fear it has nothing to hide"?
Not sure if serious ...
Customs & Border Protection Considered Weaponizing Drones
Winklevoss twins get into Bitcoin
They have a premium support tier.
http://sites.fastspring.com/pixate/product/supportoptions
Utterson - Jekyll Static Blogging via Email
There's no reason to limit the length of passwords whatsoever, except perhaps to be sure you're not trying to hash 20mb of text.
I agree. However, in every current case Steam is just making all these other platforms look bad.
MongoDB tips
It has nothing to do with the success of iTunes, just the digital storefront idea.
I received an email from them - the password was included in the email, in plaintext.

So I don't know exactly what they mean, but it's at best symmetric encryption.
I was aiming for the former myself. Sadly the latter is likely a large enough population to see something like this come to fruition.

Further along that train of thought, it would not be surprising to see Google Glass discounted for users who agree to display Plus numbers/info.
This is only true with the small instance type though, which is severely CPU handicapped. The larger instances (> medium) get the full CPU throughput. Their "EC2 Compute Unit" rating is mostly marketing, I could never verify it by practice. Some instances with twice the ECU actually give more than twofold performance, while instances with 1 ECU should be renamed to 0,25 ECU.

I would expect anyone who works with AWS to know this by now.
It depends on what you're doing. Yes if you're doing a large scale project that's mission critical you want a front end pro and wouldn't dream of going cheap. But on the other hand say you have to do a single simple landing page for a one time marketing campaign it would be silly to bring in the best.

Also as a designer I find myself telling potential clients that they don't need a designer and should just go with a template or a logo from 99designs. For the longest time I hated doing this, but I realized that if someone wants to spend from $10 to $500 to do something that I wasn't the right person for the gig!
I was actively looking for this type of feature. Is this what I think it is? finding repositories that have a shared overlap of people who starred them? e.g. "people who starred X also starred Y" kind of recommendation? If so, well done
PhotoShop In The Browser: Understanding CSS Blend Modes
Autoprefixer is a tool to parse CSS and add vendor prefixes by Can I Use
Driving adoption of WebRTC in B2B
I never see Gandi offerings mentioned. Anyone has a review / advice?
Modern ones. Checking for "Mozilla" is one (admittedly not very good) way to check if you're dealing with a browser or with some other kind of user agent, such as a search engine bot or something like that.
Yeah, I suppose this analogy is much more like const-correctness in C than it is like a truly immutable variable.
In the meantime, people could probably print up signs with a QR code and instructions telling people to scan the code, 'like' the store, and watch the sign.
Take, for instance, SQL Server. It's become quite an interesting and capable platform over the last decade. It used to be that Microsoft took the stance that hardware improvements were the customer's benefit, so they'd license per socket, full stop.

They used to mock Oracle with their licensing depending on what kind of CPU and how powerful it was.

Latest SQL Server? Yep, you pay depending on the CPU vendor (AMD or Intel) and the type of chip.
openssl rand 48 -base64
When our company decided to stop supporting IE.. I had the best day of my life at work yanking out all of the 'kind of' working IE quickfixes/hacks we had used out of the source code. I couldn't agree more.
"allow Tesla Motors to sell directly to consumers in all 50 states."

I fail to understand why people think that dealers make tons of money selling cars and "duping" the public (my words, a summary the essence of this story). Dealers make money doing service, financing and a host of other things. They will still be needed unless of course Tesla decides to duplicate dealers everywhere (something that's not going to happen).
What kind of profit are we talking about? I'd be content with 2k revenue a month.
There wasn't even one decent WYSIWG html editor ever. Either they keep close to html which is horrible because html model is pure crap from design perspective. Those editors end up being text editors that type some texts for you when you click the button. The other kind of html editors are just fancy wizards that allow you to generate some limited outcomes that are easy on the eyes but they severly lack versatility.
add in vi for VS and it's hard to use anything else: https://github.com/jaredpar/VsVim/
1,000,000 sold at $100 is still ...
I had (mistakenly) thought it's a commonly known term.

Wikipedia explains it better than I could http://en.wikipedia.org/wiki/Higher-order_function
SEEKING WORK - Remote

Front-end developer (HTML, CSS, jQuery, Bootstrap) (UK based)

Experience with Rails apps and also WordPress / PHP builds.

Portfolio: http://chrisloftus.dunked.com

Email: chrisloft@gmail.com
Thanks. I've found a few really good threads. What should I search for on HNSearch to final previous discussions about this? I can't find much but I'm sure someone has asked before.
This absolutely _is_ true, and in my experience it has been on AWS. Search for past benchmarks on HN for examples.

Regardless, we stick to AWS at work for the entire suite.

When it comes to my money though, DO is making very large strides imo
Blackmail and harassment are both crimes, you know. If someone is threatening to expose your private data, it makes no difference how they acquired it -- it is a crime regardless of whether or not they were authorized to have it.

The problem with charging hackers for having information they are not supposed to have is that it takes the responsibility to keep data secure away from those who are entrusted with it. Take medical records as an example. Yes, we want them to be kept private, but that should be the responsibility of hospitals, doctors, etc. If some hacker downloads those files, the hospital should be punished for their failure to keep the files secure. If we want to believe that hackers are magicians and that any Internet-connected system can be compromised, don't connect systems with medical records to the Internet.

What is wrong with making it the responsibility of anyone who has private information to keep that information private? If a hacker downloads a hospital's records, I think it is fair to expect that hacker to keep those records private, and to prosecute the hacker if they are revealed to anyone for any reason (even if the hacker is himself a victim of another hacker).

People should not have to be afraid to run a web crawler out of their own house. Yes, a web crawler is going to find private information that was not properly secured. That should not make the person running the crawler a criminal.
How to Stay Creative in the Start Up World
Announcing Puppet Enterprise 3.0
Oh, My Hand: Complaints Medieval Monks Scribbled in the Margins of Manuscripts
Yes. It's a DoS vector. The question is, what is a reasonable limit - and 16 characters fails horribly in that section.
One login button to rule them all
Common command line interface library for Node.js
For any debian package questions like that:

- go to packages.debian.org

- search by name or by file: http://packages.debian.org/search?searchon=contents&keywords...

- check the package page: http://packages.debian.org/wheezy/bsdmainutils

- in the column on the right, you'll see a "Download Source Package" section with all the relevant files

Or if you have debian/ubuntu running, just "apt-get source bsdmainutils"
Regarding the "workers who are worth nothing" - Zero Marginal Product workers:

http://marginalrevolution.com/marginalrevolution/2011/01/sco...

http://marginalrevolution.com/marginalrevolution/2010/07/zer...

From a societal standpoint, it's absolutely horrible. This train can't go on forever. At some point, the chorus of "basic income" from the large number of chronically unemployed will become too loud to ignore. For places that already have one, a recalibration towards an "Arts, Sports, and Lesiure society" should already be starting.
I am curious about this. No doubt the Amazon small is quite the laggard, but as price and capability scale on each platform, I would be curious to know what the results look like.

Secondly, if you wanted to get truly accurate results, doing this same test over an array of provisioned instances would be good, as quality can vary.

Still, interesting information nonetheless. Really surprised how much faster Linode was than DigitalOcean.
It would be really helpful to see a wide sample of applications that use it..
It's only easy when you use one browser.
India Turns Down Snowden's Request For Asylum
In my estimation, the award was not given in a fit of Obama euphoria as much as it was awarded in celebration of the removal of George Bush.

I have heard it claimed that the committee's choice of Carter and Gore as recipients were more criticism of Bush than they were in response to those efforts, but I do not believe that argument holds. Many of the recipients from the first eight years of this century were very much deserving.

http://www.nobelprize.org/nobel_prizes/peace/laureates/
Maybe something along the lines of http://youshallhear.us/PRISM, http://youshallhear.us/ACTA, etc?
I find that incredibly unlikely. I agree that the very small number of people who watch "sy fy" channel could be a perfect cross section of humanity, but that's not likely.

The appeal level is extremely low (99% of the population would rather do anything else) and the barrier to entry is extremely low (its marginal cost is "free" if you have cable and a tv, and how hard is it to turn on a TV?) and the marketing is extensive (who in the USA has never heard of CNN before?) The content is highly formulaic and repetitive, typical characteristics of things that only appeal to a small minority.

There are numerous business scenarios I can think of where a perfectly mainstream biz model fails because of problems with at least one of the above, but CNN and daytime news networks in general have no such excuse, they're just not mainstream anymore than sy fy channel or tennis channel is mainstream.
Not being very familiar with browser standards, I found this bit pretty funny:

navigator.appName is now set to “Netscape”

This may seem like a sneaky attempt to trick developers, but this behavior is actually specified in HTML5.
Internet Explorer doesn't need to worry about this. No one ever calls them.
I've got an account with them under two different email addresses, and have gone through the password change process with both. In neither case did I receive an email with my password in it.
It was just Instagram, apparently a lot of users were put "inactive" and it wasn't just windows phone users. Daniel Gary, the creator of the "Instance" app for Windows phone, even posted that OTHER people besides WP users were getting the same problem. And it was trending on Twitter for quite some time. You broke no rule... random accounts were being dealt the same situation. There is only one solution that's been found thus far...create a new account. Sorry to be the bearer of bad news.
Wow. I'm really not sure if this in jest or if it's completely straight faced. Either way, I have literally never heard anything like it, so... Great job! That's a really rare thing to do something truly original.
But by that logic, any kind of malicious web activity should be allowed. Once you remove all the abstractions, any kind of attack is just computers behaving how they've been instructed to. An injection attack is only a server processing a particularly strange request.
My thoughts exactly. Also, the AWS ecosystem provides quite the tool chain that is all technically intra data center. Just the S3 interaction is worth a lot if you have to deal with UGC or large amounts of system-generated files (like call recordings).

Another important aspect is ability to easily transfer raw data into an analysis tool, like Red Shift. Google also excels here with their Compute Engine and Big Query.
If you like HPMOR as entertainment (rather than just for educational value), then another fanfic you might enjoy is "A Study in Magic" [1].

It's a crossover between HP and the BBC's "Sherlock", where the Dursleys get killed before the start of the story in one of Moriarty's schemes against Holmes. Holmes and Watson end up adopting Harry and raising him. Harry learns a lot about observation and deduction from Holmes, and makes good use of this dealing with the problems he confronts at Hogwarts. Holmes is not content to act like a normal Muggle parent and ignore the wizarding world once his child leaves for Hogwarts. He takes an active (and not always welcomed) interest in wizard affairs.

[1] http://www.fanfiction.net/s/7578572/1/A-Study-in-Magic
Hmm, interesting. I have a lot of samples to organise and keep track of, so I started using a couchdb database to do so, but (simple though it is) it takes
time I'd rather not spend. That said, it seems like a difficult problem to solve for the general case. So I'll keep an eye on this with interest.
Electric vehicles need drastically less service than an internal combustion vehicle. Brakes every ~100K miles or so, tire rotations every ~10K miles, both which can be done by almost any shop.

There should very little need for as many dealers as there are now when electric vehicles start being sold in large numbers.
But the OP said he was using cyanogenmod before, is he claiming that the hardware phones home even when he's not using the motorola firmware?
Memtier_benchmark: A High-Throughput Benchmarking Tool for Redis & Memcached 
Garntia Data
Wow. The rocket exploded about 3 km from the guy filming it (from the speed of sound). It could have landed on his head...