skysight-inc/HackerNews huggingface dataset:
This is a really fresh approach to asking for money, and also can be applied to art. It reminds of what my hero, Richard Feynman, who was reluctant to ask for a price for his drawings, later said about art:

"I understood that to sell a drawing is not to make money, but to be sure that it's in the home of someone who really wants it; someone who would feel bad if they didn't have it."
I am not advocating usage of passwords for encryption, I am saying that if you have to use passwords, this is how you use them. Obviously a strong random bytestring is the best key one could possibly have and should be used when possible.

Anyways, re padding - what if I hash the padding as well? surely an attacker would not get anything of value by playing with it?

Thanks
Ray Ozzie certainly seems to be changing their corporate culture for the better. On the provided examples, Natal looks like an unambigious winner if it delivers; Sideshow looks more in the pattern of MS delivering an awkward implementation of a basically good idea.

Let me rephrase that. Sideshow looks stupid and the name invites mockery. Make it a tablet touchscreen and say it's the future of the mouse, and then please send me one if this turns out to be profitable.
I Just Got Screwed in the Big Time in the Butt by Northland Cable Television
Portswigger is the author of Burp, which is the industry standard web application testing tool. Almost everyone I know in the field uses it.
How often do we make dynamic type checks [in ruby]? (Martin Fowler)
Are you saying that as long as our consumers want whatever they're selling, we shouldn't worry about whether they permit our companies to do business with their consumers?

Let's get around the argument about crappy vs. good products and talk about two fairly competent companies. If Canada refuses to allow Boeing to sell aircraft to Canadian airlines, is it still ok for Bombardier to sell aircraft to US airlines?
I don't think that's a good solution for a lot of cases. When a service is free and everyone gets the same thing, something usually has to change if you're going to get anything for it. It doesn't have to be a lot -- could just be to remove advertising or offer one or two extra-but-useful features -- but I don't get the sense that most users will give their money to get the exact same thing (for Web-based services, at least).

If your service is always free and you're looking to benefit from the people who are willing to pay to get the same thing -- even though they don't have to -- then TipJoy is a good solution.
Reminds me of a design client of mine... http://www.feedbackarmy.com/

Similar concept but a bit more information from the Turks at a slightly higher cost.
Press coverage: http://www.ottawacitizen.com/Technology/Online+Dancing+clip+...
Thanks.

Nothing personal, but I think there's a lot of trust involved in things like reminders, calendars, to-do lists, etc. Having a bad experience like this with my first try makes it much less likely that I'll give it another go.
I may not be typical, but of all the "review my site" postings, both good and bad, this is the first one I actually plan to use. Pickfu.com is now a Favorite.

1 vote with $ = many votes without $
http://www.isg.rhul.ac.uk/~kp/padding.pdf
This reminds me of the exploits I used to read in phrack back when I was still in college. There should be a book that collects great hacks like this one.
Poverty as a driver for innovation: India and China's startup ethic
Isn't a log-structured FS optimised for a disk with high seek time?

Sort of. It makes writes sequential (and thus fast) and reads nearly random (and thus slow).

Why is this approach fast on an SSD? Wouldn't the performance boost be more noticeable on a spinning disk?

Old, crappy SSDs have very slow random writes (which is like seeking), so log structuring increases write performance by orders of magnitude. Since random and sequential reads are equally fast on SSDs, the randomized layout doesn't hurt read performance as it does on disks.

Shouldn't someone try to make an FS optimised for SSD characteristics?

If the characteristics are different for every SSD model, no. Recent SSDs are becoming insensitive to access pattern, so the correct "optimization" is probably to perform no optimizations other than trim.
This is amazingly awesome. At the end it talks about how this device connects to the surface using cabling thinner than a human hair. Technology just blows my mind.
Interesting, I'm not getting this flaw at all. Which version of 2.3 is this addressing? Rails 2.3.1 only? I just tried this on a 2.3.2 app and got HTTP Basic: Access denied.
Ask HN: Why do airlines still use "black boxes" ?
Why not substitute a real-time satellite uplink? This would eliminate the need for expensive and often unsuccessful oceanic search expeditions of the kind we are now hearing about.
The data could be useful ...

There could a lot of data gleaned about TV viewers , for example .. by analyzing power usage trends during tv show times. If a show is watched more , then advertisers would want to target that show more ...
The Trunk Club For Men: Never Shop For Clothes Again
My first thought: Why can't I answer the questions?

I know you're going to say something along the lines of "we want to ensure that users are unique, and demographically diverse, blah blah blah."

Yeah, I know, but still. When I see "Mac or PC", I instinctively click on the "Mac" option, and when nothing happens, I think "Well, THAT's clearly broken!"

I know you probably don't want to create just another hot-or-not site. But, since you have public commenting that's separate from the "official" responses, why not also have public voting that's segregated? Maybe if I give you my demographic info, you could let me answer questions.

The bonus is that you don't have to pay me ;) So, perhaps you could offer a few options: $5 for "valid" demographically-distributed statistically-significant mechanical turk answers, or you can get all the answers you want for free from the PickFu.com community (still organized by demographics.)
I certainly don't think there's anything wrong with your opinion. It was a great way to explain the "other side of the story".

Thank you for taking the time to paint it in a different light.
You can do either in Lua pretty easily, too. Doing both doesn't make much sense, though - schlepping around large data structures in message-passing can be a performance problem, but unlike coroutines, can be very easily switched to a run over multiple machines.

Coroutines are in the core language, and there's also ConcurrentLua (http://concurrentlua.luaforge.net/) for message passing.
Rails 2.3.x. The app you tested this on, what's the password procedure like? One part of problem is doing a password procedure like "Users[name]" where Users is a hash of usernames/passwords. Also I believe this just effects folks doing digest auth (authenticate_or_request_with_http_digest) not basic auth (authenticate_or_request_with_http_basic)
Microsoft offers cheapish web app hosting with $100 search ad credit
but [steel cable] systems would snap under their own weight in the pressure conditions of the Mariana Trench.

Does that make sense? I don't see how pressure can make things weigh more... but I guess 10km of steel cable will have some weight. I'd have thought you'd make the cable have the same net density as water, so it is effectively weightless.
Off topic yes, I cruised through his profile to see what else he was involved with or does and found this small piece he wrote that I found to quite good. I would recommend checking it out.

http://dfranke.us/cfod.html
From : http://www.eng-tips.com/viewthread.cfm?qid=246491&page=1
Again, any single box is not the problem. It's the receiving end. Picture the FAA receiving 8000 planes worth of a minimum of 88 data streams at 50 Hz at 12 bytes each. That would be a minimum of about 4 Gbps data stream, and allowing for collisions and whatnot, you're around 20 Gbps datastream capacity.

Guess where the hackers are going to concentrate their efforts. And given the large number of access points required to make that all happen, guess how often the database will be compromised.
http://extjs.com/blog/2008/11/03/testing-ext-js-ext-gwt-appl...

Might be a good start.
> This, obviously, is not a cryptographically strong PRNG.

Why is this obvious?

The generator used is L'Ecuyer's MRG32k3a :
http://www.iro.umontreal.ca/~lecuyer/myftp/papers/streams00s...

Is there a known weakness?
There is constant data sent out by most aircraft already. The black box is for when shit goes very wrong, like when a plane is on fire, out of power, with a big hole in it, falling like a rock and spinning like a top.
As someone who received an MFA in creative writing I get nervous when this question comes up. I'm pleased, though, that the article matches my experience.

I think zimbabwe has a point that "the classroom rarely adds more than what students could get in a focused extracurricular group," but finding that group would be nearly impossible. Writing is a very solitary activity, and sharing unfinished work is (for the vast majority) a horrifying experience. You're not going to easily get those people together to recreate a regular (and good) workshop.

The workshop itself was pretty widely reviled by professors and students, and contact we had with writing departments elsewhere showed we weren't alone in that feeling. But I agree with the final thesis of the article that "workshops work". I'm pretty sure my stories and novel got better throughout, from criticism I received and from the sheer amount of practice I got. I ended up not writing after getting the degree (programming was more fun), but a few people I graduated with have started making names for themselves, and I feel pretty good about that. It suggests that maybe I could have if I stuck with it.

I sometimes think that a writing workshop could be nicely transferred to programming. It's been my experience that programmers are much more willing to share and accept advice on unfinished projects, and the little writing games that seem so lame to writers might translate better too.
Wow. This post has been sitting on my hard drive for a little under a month waiting for arc3's release, and the hack itself was a few evenings' work, so this was simultaneous discovery damn near to the day. I'm not sure who was first; I never saw that comment at the time.
The cost in retrieving the black box is the least of worries, don't you think?
Introducing PoshBing – The PowerShell library for Microsoft’s Bing Search Engine
depends on what you mean by "cloud" - if ec2 is the cloud, yeah, three guys in a basement can do a hosting company. Takes some capital, but not that much. EC2 is not competing on price. I believe few weeks of hacking on a good provisioning system is all that is stopping me from claiming to be a 'cloud computing' provider, in the sense that ec2 is a 'cloud'

The ec2 cloud is a lot like traditional dedicated servers, only with a nice provisioning interface.

The advantage of that is it's linux; and there are many providers willing to rent you linux boxes. you just need to modify your provisioning setup.

Now, if you mean 'the cloud' like google's app engine or something else that is a platform that is only offered by one provider, then yeah, I agree. you never want to be in a position where you are dependent on one supplier.
Thanks Catone. I linked to your comment here and clarified the post. I really want to get the stories on my site right, so this is very helpful.
I'm curious, did you submit a bug report for this patch? I can't find it on http://rails.lighthouseapp.com.

It seems odd to me that you would use Tumblr and Hacker News as a sounding board for a security flaw rather than submitting a bug report or notifying the Rails team through existing mailing lists.
Gah! Instead of copy-and-pasting at archive.org, I typed bitworker instead of bitworking. My bad.
Google Wave on Chromium on Mac
More screenshots available.
http://www.google.com/squared/search?q=programming+languages

Scheme comes out on top. Awesome.
Sounds like a job for some kind of distributed peer-to-peer (or is that air-to-air?) network. A bittorrent of the skies.
This is what you call the steep part of the sigmoidal curve.
You talk to a real woman about your taste and needs in clothing. She picks out a selection and sends it to you. You keep what you like and send the rest back.

This is interesting from a couple of points. First, I live 1 hour from the nearest clothing stores and 2 hours from the likes of Macy's, plus I dont like shopping for clothes. I have a live-in SO who probably wouldnt like another woman shopping for me, or maybe she would be OK with it. I'm sure she wouldn't like my paying full retail.

The second point is that this is an interesting business model, the customer service of interacting with a sales person and the ease of shopping on the internet. I could see the working with high end products like cameras and electronics, maybe even furniture. Probably not with dog food.
There are many innovative companies like Philips, Amazon.com, Yahoo!, Sun, formerly AT&T, but Apple and Microsoft are not among them. Their core competencies are quality and marketing. There's way more money in that.

Apple did not invent the phone, mp3 player, video player, application store, etc. They just perfected and skillfully crafted hypes around them. Microsoft did not invent the Office suite, IDE's or the hardware acceleration layer, but they did perfect and deploy them through aggressive business strategies.
The new planes like this Airbus do actually transmit real-time maintenance data. So, there were something like 10 transmissions from the plane that apparently include large amounts of data regarding the systems that were failing and when.
Rather than addressing such points in an addendum, you could also have simply rewritten your piece so it wasn't word salad in the first place. But I suppose you'd have to have been 4 times smarter to do that.
The real innovation of Web 2.0 (it wasn't all hype)
Google Squared is out
The black box is sufficiently rugged to survive anything short of a nuclear blast, including fire, crash, and falling to the bottom of the ocean. Real time broadcast telemetry might be the first to go in some instances, black boxes are certainly the last.

Addition: the NTSB is expert at retrieving data from severely damaged black boxes.
Ask HN: Anyone avoiding Chrome because it won't show your passwords?
This is very annoying and perhaps reason enough for me to not use it when it's released for the Mac.
Despite Wobbly Launch, Bing Will Steal Users From Google
"Security vulnerabilities should be reported via an email to security@rubyonrails.org, do not use lighthouse for reporting security vulnerabilities. All content in lighthouse is publicly available as soon as it is posted."

Yes, as I mention in the blog post, I've attempted to contact this security list and a couple members on the core team through their individual email accounts over a week ago. I've only received one response last Thursday that someone would look into it, but the issue seemed to die there.

Now that enough time has been given for the security list to look into the problem (and hopefully not ignore it), the best practice I thought would be to tell as many people as possible about it so the fix can be applied and publicized. I felt I'd get a lot bigger audience here at Hacker news than the rails bug tracker. The bigger the audience the more people that can get their Rails 2.3 instances fixed if they are effected and avoid a problem. I was also planning on posting it there, but feel free to do it as well.
I still don't see why only a black box should be used for that. As long as a satellite uplink is powered by a separate external power source, none of these factors will stop a transmission.
Since you're not asking for a living space, I assume you and your colleagues are living somewhere else. If so, then the obvious question is why you all can't just work from one of your apartments?
Here is a controversial thought: Your price is too low. You tell me $5 for 50 comments, and I think, these are low quality comments.

You're underselling yourself IMHO. Position your service as a more premium offering.

I'd do $50 for 50 comments. At least.
Aside from being a good hack, I really enjoyed reading your write-up!
Agreed. Still, I can't decipher the IKE spec, but does it really prevent this - i.e. do any of the other building blocks actually prevent the conversation from continuing using a compromised shared key?
Poorly described, but I take it to mean that the pressure on the cables themselves from the water would cause them to be destroyed.
If a plane travels over mainland, it would be no problem to store data only on the black box, as it would be easy to recover in an accident. We would have to enable the satellite uplink only on planes crossing the oceans. I don't think that would generate that much of data.
This reminds me of "I want Sandy".. which Twitter acquired and squashed..
What do you mean won't show passwords?

wrench thingy -> options -> Minor tweaks -> show saved passwords.
It's a great pretence, but they have done the same thing in the past to help home grown competitors. Look at the history of Google vs Baidu and once the home grown web search become dominant they stoped messing with Google.

Edit: I don't think it's 100% one or the other as they also like having the extra control that a local company provides. However, there are always reasons why countries want to help local industries the point of free trade is the idea that doing so always reduces economic efficiency.
Time to sell!
Guys, we dont need every failed/incorrect/strange result from WA. Even Bing is yesterday's news.
A Brief History of Microsoft on the Web
Where tweets get sent from
Hulu Still Going Strong, But Growth Is Dropping Off Sharply
>Apple did not invent the phone, mp3 player, video player, application store, etc. They just perfected and skillfully crafted hypes around them. Microsoft did not invent the Office suite, IDE's or the hardware acceleration layer, but they did perfect and deploy them through aggressive business strategies.

Is your claim that a company must invent something from whole cloth to be "innovative"?
Here's a ticket now though. https://rails.lighthouseapp.com/projects/8994/tickets/2755-s...

And I've also put it up on rubyflow.
Cause black goes with everything.
Try a newer version.
This is pretty neat. It's like Amazons Mechanical Turk except for clothes shopping. Maybe I missed it, but how do they make money? Do they just take a cut off the top of the clothes they send?
We Need More (PayPal) Mafias
This isn't a bug or a feature, it's yesterday's closing price.
E9-1-1 News
Without attached debugging tools (at least for DOM/CSS, if not Javascript), kinda elaborately pointless.
I'm glad to see new efforts in exploring deep oceans. It's amazing to me how little effort is spent exploring our own planet. We know very little about the deep parts of the ocean.

The world has had the technology to go there since 1960 when a two man crew in the Trieste went to the Challenger Deep. I think the reason new subs don't have a crew is because it's cost prohibitive. Since the median ocean depth is 1/3rd of the depth... most of these subs aren't engineered for extremes. My guess is the next time a crew goes there it'll be funded by some rich explorer looking for a challenge (Richard Branson, etc). Hopefully he'll make some real innovations and share them with the community. In the meanwhile it's good to see a new robotic sub visiting.

http://en.wikipedia.org/wiki/Bathyscaphe_Trieste

http://en.wikipedia.org/wiki/Challenger_Deep

EDIT: Added a few sentences.
My search for "freedom fighters" turned up Indians exclusively. I wasn't signed in. Strange. Are they not called "freedom fighters" in other cultures? It is a semantically dubious phrase.

http://www.google.com/squared/search?q=freedom+fighters
They sell it to you at full retail. They order just-in-time, so they dont have any inventory. The article didnt mention how they handle returns. The cynic in me says that the returned items go at the top of the recommendations.
Ask HN: Review my mini-app. Easily validate all the (X)HTML pages in a website.
For me it's 1. Pascal, 2. Fortran, 3. Scheme. Guess the order is somehow scrambled, which would explain that Yahoo turns out number 1 for "search engines" :)
Why does each plane have 88 data streams? Why 12 bytes per stream? Why 50 Hz? That's over 8 kilobits per update, 412 kbps.

With 16-bit precision, you can get 528 sensor updates for the same amount of bandwidth. Let's cut that in half (~250 sensors) and reduce the frequency to 30 Hz, then we've gone from 825 kbps to 274.5 kbps. Multiply by 8000 planes, that's 1.8 Gbps aggregate. With stream compression, a lot less.

Challenging? Sure. But I think even my restatement is too much data. Maybe send data less often if everything is within "normal operating parameters." I bet most sensors don't need 16 bits of precision, or to be updated even once per second. Cut my estimate to 10%, that's <30 kbps per plane, <200 Mbps total. Easy!
It doesn't really matter if our consumers want what they're selling. That's not the government's job to decide what consumers want.

But, yes, we should permit companies owned by people outside the US to sell things to people in the US, regardless of any policies in other countries.

Would you rather have better planes for all Americans, or slightly higher profits for a single company? It turns out it is almost always huge numbers of domestic consumers vs. a very small number of domestic suppliers, and NOT natives vs. foreigners as the suppliers would like us to believe. Also, foreign companies often employ very many people in the US, which means the labor interest component of the issue is very often blurred.
Technologier needs your predictions about what Apple will announce at WWDC.
Suggestion: Nominate For Color
I personally think the grey text is a good thing in the vast majority of cases. It discourages people from writing lengthy posts. However, why not allow people to nominate comments and submissions with text for color? With enough color votes, the text could be changed to a more readable shade. Make the threshold high enough so only the extremely high quality posts (like dfranke's recent arc hack) get colorized. I think it would be a great way both to honor excellent postings, as well as making the most popular posts on this site more readable.
Pretty, but of questionable utility.
BlackBerry Storm 9500 Unlocked
Blackberry Storm 9500 Unlocked Imagine the most advanced touch screen phone ever to be released. offers a number of great features like 3G HSPA network, high-quality voice, 3.2 megapixel camera. Combined with a fast smartphone’s 528-MHz processor.
or you are flying through an electrical storm...
I wrote this app to streamline the process of checking medium/large website for (X)HTML compliance... I basically want to get it out there so that other web designers/developers don't have to go through the pain of checking everything manually!

Let me know if you have any suggestions for improvements or find any bugs.
The post's argument appears to be that SQL (by which he means relational databases, as noted in the comments) are popular because implementing ACID is too much trouble, and because dealing with random file access is confusing.

It sounds like it never even crossed his mind that the relational model is a good fit for some problems. Wow.
This is an absolutely classic indie/startup security fuckup. (1) Have a security contact, (2) publish a GPG key and accept GPG mail, (3) respond promptly with a "security flaw ID".

You literally don't have to do anything more than this --- mechanically --- to get good-faith people not to publish flaws publicly.
Is it bad that I just don't get this?
Why don't they make the whole plane out of the black box?
What's a COW-tree? And which filesystems are COW-tree filesystems?
I think it's one of google's answers to wolfram alpha