skysight-inc/HackerNews huggingface dataset:
If you can manipulate a DH exchange, you definitely have bigger problems than forgetting to check DH parameters. It's worth noting that DH is one of those crypto building blocks that by itself provides basically no security (for instance, DH in SSL/TLS is secure because it's backed by an RSA trust anchor). It's just a tool for making other crypto primitives more flexible.
You're basically going to get the same response quality as Amazon Turk. We use them a lot, but the quality is pretty average so there's still some amount of manual work or quality checking needed.

What would be truly amazing if this service could work with non-mechanical turkers...
20 Lines or Less #24
Why not just link to the original:

http://python-history.blogspot.com/2009/01/personal-history-...
The issue is relevant for stock photographers who were the audience of the RT since the price is considerably less than traditional home page logo licensing. that's all.
I kind of like the idea of a "global internet maintenance day". Sysadmins get to do patches, upgrades, and backups with the sites offline. Sweet.
The problem with this, and the other services that already exist, is that they only give you a static image of how the page renders. If the only thing interactive on your page are plain text hyperlinks I guess you'll be fine. Otherwise, you've got to verify everything is actually working in a real browser anyway.
Right. And clearly the best way to avoid reminding people of the totalitarian state they live in is to step in and shut off their internets.

The logic is just awful; but nonetheless you're absolutely right about the reasons.
What....what is this? Why do we care?

I feel like there's some joke that's going right over my head here...
I believe the implication is that you'd have a sessionid. Effectively, the username and password rolled into one unique number, stored in the cookie.
The DMs keep pouring in, and I'm unable to unfollow for some reason :(
A 12-Foot Raised Floor?
Note that NILFS makes old, crappy SSDs scream. Also, the article makes NILFS look good by comparing it to old filesystems, not COW-tree filesystems that are the current state of the art. NILFS may have merit, but this article doesn't demonstrate that in an honest way.
With any survey you always have the possibility of disingenuous answers, but we require them to put a comment/rationale for their answers, which is where the most interesting data lies. Here are some examples: http://pickfu.com/IOHSK8 http://pickfu.com/JWQFLA
I would personally find it more compelling, but I'd suggest that it shouldn't be a premium feature.

When it comes to consume research, demographics are everything. Statistical significance of sub-samples can plummet quickly.

If I'm marketing a product specifically to, say, 30-44yo men, it would be valuable to restrict the sample exclusively to those men and I think i'd have a better chance of seeing statistical meaning in the sub-samples I'm looking for, eg, income, marital status, etc.

It seems to me now that I'd have to post it "at large" and the 30-44yo demo I'm looking for would itself be a sub-sample.

I am not a marketing professional, but as a small business owner its one of my many hats. I have used both Maritz and, more recently, Pinecone, and I'm probably wrong but I don't remember even being presented with an option to open the surveys to everybody.

And what I'm saying is.. I wouldn't even consider using your product without that ability. You have a fantastic 1.0, though, so I'm not knocking the product, just offering my $0.02.

And some demographics of your own: We've got a dozen of us on the payroll with 2009 sales looking to be a bit over $2MM.

And no joke, if I were you, I'd eat your dogfood and put up a survey to determine the importance of this feature!

EDIT:

I do want to add that I get that your site is supposed to be intro-level market research. But if you're going to limit to 50 replies, demographic targeting would be very important to me, for anything other than a "should we get thai or pizza for lunch" questions.

If you do let me collect 500-1000 replies, I'd probably have more statistically meaningful sub-samples, so as long as you give me a nice drill-down interface I'd find it useful, even if i couldn't target my question.
I like Dafydd Stuttard's "The Web Application Hacker's Handbook", despite the title. Work through the examples.

A lot of people will direct you to OWASP, which is not a bad free tertiary source (owasp.org). There's lots of HOWTO stuff there. Be careful about the OWASP Top 10. You want to know what it is, but it's showing its age.
This is awesome! Gotta post it to TNW - thank you!
>> "They've run almost 23,000 contests instead of 14,561 according to their homepage."

I figured not every contest would end with a successful award - hence using the other data as an estimate. Maybe it's somewhere in between, idk.
Nice!

Even if "Sorry to burst your bubble, but this wasn't spontaneous. It was staged by a group of people similar to what 'Improv Everywhere' does." - @FreedomUSA1 is correct, It's still a nice example of something gaining traction and taking off. (I wonder what pct of the ultimate crowd was "in on it" and how many joined once it'd been started.)
oopsy .. BUG found and killed.
"If it's one thing big companies know how to do, it's leverage this." Or it happens automatically for them: Nobody ever got fired for buying IBM.
I think by 'specific account' he means 'chosen account', in which case he'd be correct without more targeted social engineering.
A few things left out of this still-good article, which take the blame off Enterprise Software Companies (somewhat):

1. Google runs its own servers, and has been quietly building a cloud. ESCs have traditionally installed their systems on corporate networks by necessity. It would probably not be easy for Google to offer 'Wave in a Box' and stick on shelves at Office Depot, or come in, install it, and then walk away. If I had suggested to a corporate client in the 90s that they put their mission-critical enterprise software on an IBM or MS server somewhere in Montana they'd have asked what I was smoking.

My current non-tech boss still wants everything emailed as a Word document because he 'owns' MS office and the hardware it sits on. He simply doesn't get the concept of Google Docs and is hostile to the idea of not knowing 'where his files are'. Because it's free, in his mind that means it lacks value.

2. Enterprises are about work. Wave is innovative, but as with many other net things, 3rd party innovation will play a key role - and the 3rd party innovation comes from people playing with freely accessible tools, and re-purposing them in unforeseen ways. Now if you work at MegaCorp and you've just installed Softosaurus across your enterprise, with all the huge deployment and training costs, the last thing you are going to do is say 'play around with it - it's OK if it breaks, as long as it does so in an interesting way'.

If you find a way to set up Notes such that it allows you to play Tetris, this is more likely to get you fired than to earn you a personal espresso machine and a pat on the back. Innovation within the enterprise is disruptive of the enterprise's goals, and looked on with extreme suspicion. When I was still working for multinationals, I got disciplined more than once for over-customising my workstation because my increase in productivity came at the expense of the standard build...

3. and violating the standard build is an intensely political act, because it implies that someone in a decision making role was wrong. This is client-side politics: deviating from the decisions of the IT strategists is looked on as hostility to their goals, and thus towards those of the organization. Of course, when I was in tech support I regularly moaned about users who wouldn't do what was good for them, so I'm guilty too.

The bottom line is that enterprise clients do not reward experimentation or innovation until they see the resulting productivity elsewhere. Curiosity is not a valuable trait, what they want is focus and diligence. You can't really blame enterprise suppliers for choosing to cater to this primary demand of their customers.
Lol, I first read that as kid v2.5

Sometimes I do feel that kids deserve their own version numbers. After potty training you jump from like v.95 to v5.0 ...or so I felt :-)
Cute. But I can't help thinking that there's something creepy about that "me too" component of the human psyche.
"starting with the Tıаnanmen anniversary", and it's renewal kind of behavior. is this a clever way of protesting without getting sent to prison?
The nondeterministic characterization is easier to work with.
and yes.. Sorry about the inconvenience.
The Next Bubble
Ooh! Ooh! I just remembered another cool thing about the "polynomial-time verifier" formulation of NP. It makes it possible to phrase the P vs. NP question much more starkly.

The standard formulation of P vs. NP is something like "do deterministic polynomial-time Turning machines have the same power as nondeterministic polynomial-time Turing machines?" A deep question, but not a very snappy sentence.

But the alternate formulation is something like: "is it always as easy to find a correct answer as it is to check if a given answer is correct?" Really brings home why it seems so painfully obvious that P is not equal to NP (of course it's easier to check an answer than to find one), and makes it seem that much more profoundly strange that we haven't found a way to prove this.
Also see http://ask500.com
How about change "upsetting" to "motivating" and you're good.

The world is a big place, and competitors mean the market exists.
hm. a little bit of notice might have been nice :)
I really like the site, and it is well executed. I think I'll certainly use it at some point. Good price point.

I completely agree that there needs to be some way to restrict who answers questions.

Another example would be if someone was making a Twitter application, they might want to restrict people who answer the question to only those that use twitter.

Or if you were doing something aimed at webmasters, you might want to restrict the responses to people employed as such.

As also mentioned in other comments, use your poll system to do your own poll on how desirable this could be.
It's funny because Palm has actually been saying that corporate customers shouldn't be buying the Pre - that they should be getting one of the Treo models instead.

I don't think the Pre is really an enterprise device. It just isn't boring enough ;-). Really, it's that it has untested support for things like Exchange (other than Palm's internal testing). I'm sure businesses will support it just as they've started to support the iPhone, but even Palm is saying that enterprise customers should go with a different device (at least for now).

What makes you think it has a corporate angle? Specific features? The way it's being marketed? The real keyboard? I'm curious since it's not how I see the device, but when I see the device I think about what I'd do with it as a consumer. It would be really cool if Palm carved out a chunk of that market.
Our respondents don't get paid unless they actually explain their answers - which both reduces false responses and provides unique value and insight to the service.

For example, we used this feature to dogfood our own FAQ page: http://pickfu.com/4UQM7U
I think Derek Sivers has a lower marginal utility of income than your average schmo. :)
Not to feed this rant too much, but I believe the cookie would be used for verifying a cross authentication attempt. Not exactly sure how it would be used but I'm pretty sure once you've got a session going on both servers the original token would be removed.

Also processes vs threads was just another interview question, it was only slightly more relevant to the story than unicorns in space.
Tipping point at 1:30
Anything they forgot to ban?
Build spaceport: You do not have enough points to do that.

It is very impressive, although I would have liked to be able to rotate around the compass - but presumably they are using the fake 3d to keep load times down, especially given the potential for traffic spikes on the Chinese internet. Obviously there is some potential for painting over any underisarable information (no half-finished buildings here, everything is neat and shiny!), but there is also utility in the 'cartooned' abstraction. I wonder to what extent it was generated vs. hand-textured.

Also a good excuse to repost this: http://www.c3technologies.com/ (warning, noisy video autostart). Astounding working demo under 'Reference' menu.
Thats fun
Pardon my ignorance of SSDs and how they work, but aren't seek times supposed to be low or negligible? Isn't a log-structured FS optimised for a disk with high seek time?

I guess my questions boil down to:

1. Why is this approach fast on an SSD? Wouldn't the performance boost be more noticeable on a spinning disk?

2. Shouldn't someone try to make an FS optimised for SSD characteristics? Have someone already done this?
Very nicely done. This is precisely the attack that I described in a HN post a month ago. Glad to hear that it would have worked if I'd had time: http://news.ycombinator.com/item?id=596126
I am getting tired of the cutesy easter eggs on Alpha. I suppose it's good for marketing, but every time I see one it reminds me of how limited expert systems are and makes me think how shallow their lexical analysis is. 'What is skynet?', like many other things, produces only an error.
I spent some time in Hangzhou (near Shanghai) last year, and remember asking around about online maps -- none of the usual suspects like Google had anything for China at the time. Everyone pointed me at the edushi.com (which means "e-city" in Mandarin) and it truly amazed me the first time I saw it! It reminded me of the Sim City scenarios that were based around real cities.. All of the buildings are modeled quite accurately, even individual trees and small landscaping details are represented. I guess that's what happens when labour is cheap and there are lots of aspiring art students without many good job prospects. :)

(The company behind the maps, Aladdin Information Technology, is based in Hangzhou. I can't wait until they expand to non-Chinese cities around the world!)
I have a problem with this way of thinking about NP. Just because it's "harder" to find an answer doesn't mean it can't be in P. Maybe it's just n^127 to find the answer, but n^2 to verify. I don't think it's so obvious that P!=NP as you say it is.

Also, being as that it's not proven, you wouldn't want to teach that it's "so painfully obvious that P is not equal to NP" in a classroom.
Studemts looking for free space in NYC to work on startups over the summer
We're a group of 3 to 5 students / recent grads and looking for a space where we could work on our startups over the summer (ideally for free). All we need is a place to setup our laptops and do phone calls.

Do you have an empty room, an unused desk? In return we would love to support you with fresh inputs, new ideas and our knowledge of the new technologies and trends we observe.

Any ideas or hints are greatly appreciated. Please contact me at fabian.pfortmueller AT sandbox-network.com or 646 673 23 29 for detailed information.

Many thanks!

Fabian
http://www22.wolframalpha.com/input/?i=what+is+best+in+life%...

What is best in life?
This sounds the most promising one. But say I have an Extjs COmboBox and I want to select a particular item in it. It becomes too difficult to do it your way. I have to use the Selenium.Eval function and write some javascript in it.
this is not HN-worthy..
Thanks! We definitely have personalization features that we want to build, right now there's just so much to do. :) Promise we'll get to it soon, though!
jsunity I feel is for unit testing only, that is where when one has many functions with strict parameters and return values. I am not sure how it can be used for GUI testing.
These are pretty, but they are not accurate. These are not just inaccuracies due to omission, either; there are innumerable added elements that don't actually exist.

The inaccuracies are actually very interesting since I can't fathom why the creators think it's OK. The high level of detail on a map suggests accuracy, which is deceptive. It's one thing to add obvious design elements outside of the context of the information, but in this case they've actually decided to be creative with the information itself.
Federal Antitrust Probe Targets Tech Giants' Recruiting Conspiracy
I agree. They seem to have spent a lot of time entering silly Easter-eggs. Perhaps they should have invested that time in loading more data into the thing, so that it can actually return useful answers to my queries.

I still don't get why queries like "yearly income vs age" can't find any useful data.
A very unuseful comment indeed.

It is a wrong perception that JS needs to be used only for portability, light weight OR "scripting". AJAX frameworks exist for a reason.

The reason being they are far more scalable, modifiable, flexible, compatible and most importantly they have seamless integration with any server side technology. Also the development is possible to break into distinct task and get them outsourced/shared as required.

I am not claiming that other technologies cant do all this but, JS based AJAX frameworks make your life easy.
Rom Machine by RomFab
Is Microsoft Actually Innovating?
Security hole found in Rails 2.3's http_authentication.rb
Amusing set, actually.
Brilliant sir!
I'm your slave.
Your welcome :)

I knew from previous discussions with you that you did work at this level, but this is the first time I had actually seen for myself. It read almost like a mystery and I found myself guessing what you'd do next. So I thought I'd pay a quick tribute with what came into my mind first.

AFAIC, you don't need a proposal or resume any more. Just email any prospect or prospective employer this link. If they don't see what you can do from this, you probably don't want to work for them anyway.
I didn't mean to come off as short.

This seems to be a mutually beneficial service. The users stand to gain as can be seen from the testimonials here http://www.google.org/powermeter/demoproject.html

So the users aren't giving away anything freely.

Google obviously gains , with hard data about consumer usage.
Google Squared is Live
How did SQL get so popular?
Is there a shorthand name for "the industry standard answer; the cookie both apps honor to let you in, encrypted so users can’t change their account to someone else’s" pattern, especially that pattern 'done right'?

What's the best battle-tested library (and call) for implementing exactly that, without making any of the common mistakes?
Yep, looks real enough to me. Confusion between "nil" and "false" in Ruby, where an assumed true/false return value actually takes on a third value that also matches a nil password.
Microsoft's Unparalleled Devotion To Simplicity
Except in this case it's being used to gloss over any coverage of the anniversary of a horrific event.
Yes, they're sleazy: http://thenextweb.com/2009/06/03/bad-news-ibm-apple/#comment...
What algorithm did you use to extract that conclusion from this data? I probably have a few customers for you.
Django-Based Blog on Google App Engine Tutorial, Part 2
FogBugzMiddleware for Django
I do feel like Microsoft has been listening to what its consumers are asking for more than it used to. I think they got humbled by Vista more than they'd like to admit.
I misread it the first time and wondered what you had against Pi.
You're just making it harder for me to decide which #1 crypto post for today is my favorite.
The site looks interesting. Do you have any page view figures related to advertising?

Found one issue: our app (Movies Now!) is indicated as being released on May 13th. However it was actually released on the 27th May.

http://www.appstorehq.com/moviesnow-free-iphone-34716/app
I re-read, here is what you said "but I am comparing causing visible public scrutiny while being an asshole vs no public scrutiny"

This is a false choice as is clear by your statement that zed is high profile. If he were polite there would still be public scrutiny so your binary hypothetical is meaningless.
Clearly a bug - but entertaining at the very least.
They really need a query builder and refine search tool. It's hard to browse the data to see what's there; every time I search I feel like I'm throwing dart while blindfolded.

Additionally, when I mistype things like 'us pgdp / population' it comes back and asks if I meant 'US population'. What I want is a little form saying 'hmmm... US [pgdp?] / US population ?' where [pdgp?] is an edit box where I can correct my typo.

I approach fixing broken things by beginning with the assumptions that they are designed to work, and that examining each subsystem for damage will get me there. In the example above, 'US', '/' and 'population' are working query terms, so why doesn't W|A keep those current while highlighting the need to repair the meaningless 'pgdp'?
Meta-comment: I think people are being excessively harsh in downvoting you. Your comments are contributing to the topic at hand. People shouldn't be downvoting you simply for disagreeing.

Back on Topic: But as you said, I don't think we disagree all that much, though I do feel that brilliance or genius can be attributed to something that is extremely funny at first, but may diminish in strength over time. Indeed, I have a feeling that perhaps the funniest stuff (laughing out loud and peeing your pants funny) is the stuff that eventually gets old, because it becomes overused.
yeah well, yes, no, sort of...this view of it being a cover-up of a horrific event is not exactly how the majority of Chinese view it IMHO. The Chinese certainly know why the Internet sites are down. The general population are not ignorant of this history.

Do you consider the U.S. Civil War a horrific event? Certainly lots of people suffered; it was a war. But lots of change occurred (still occurring).

I don't consider June 4th in China "as only" a slaughter of innocents. History might show it to be one of the least bloody events relative to the significant change that happened as a result. 2009 China is far different from 1989 in part because this event happened.

Please do not be upset with me for my opinions. My view has come after a very long time of me holding my U.S. views while living in China and coming to understand that most local Chinese do not agree with me.
10 Lessons Learned in 22 Years of Bootstrapping
Unmanned sub touches deepest part of world's ocean
Well, there's no use summarizing Wave itself. Protocols aren't able to be grasped easily without examples of clients that use them. What really needs to happen to show off the power of Wave is for Google to create a few other Wave clients.
While looking at the recommendation, I noted that the book's website has a page of links to tools:

http://portswigger.net/wahh/tools.html

Nothing eyebrow raising, but if you're starting out, worth knowing about.
Sure, of course. I'm not out to convince anyone that P != NP here, especially not using Proof By Obviousness. I just meant to underline one of the intuitions that makes so many people believe they must be different.

Also, like so many terms in computer science, "harder" has different meanings in different subspecialities. To a complexity theorist, a problem that takes O(n^127) time to solve is not any harder than one that takes O(n) to solve -- they're both in the same hardness class. Just one of the many warpings in perspective that staring too long at P and NP can give you.
Slides cover newest web2py features
The Nation’s C.T.O. Lays Out His Priorities - Aneesh Chopra Interview
Microsoft Research has some very cool stuff. But that technology gets into consumer products very slowly, if ever.

http://research.microsoft.com/apps/dp/pr/projects.aspx