skysight-inc/HackerNews huggingface dataset:
"Today I went to the grocery store and bought a few bananas."

"I just got back from the store. I picked up some bananas while I was there."

Both sentences say the same thing. No, they are not completely the same, but neither are the logos in question.

If you want to talk about precise combinations of visual elements, there are LOTS of differences.

Look closely at the logos. The Tox logo makes the person more like a keyhole. The Secure Chat logo uses something more like a natural human silhouette. The ratios of the arc to square are different. The spacing is different. There's a bunch of differences. Frankly, my eye appreciates the the layout and design of the Secure Chat logo... the weights of the Tox logo are a little off... I DO really like the keyhole/person combo, though! So each design has its merits.

The only similarities are the padlock, the chat bubble, and the person.

Just like how in my textual sentences the only similarities are "store", "multiple bananas", and "at some point today".

The point is, the two sentences, one textual and the other visual, both "say the same thing" and are made up of "the same concepts" and "predefined elements of language"... and neither should be considered plagiarism or even that unique to warrant talking about originality...
"To my readers from long ago: I've missed you. More than you know."

-- http://seriouspony.com/about/

...

She's back. I'm giddy as a schoolgirl.
John Sculley's new startup
tala:

I'm guessing you know it means 'lock' in Hindi? http://translate.google.com/#en/hi/lock
Cod-Latin is fake Latin so cod-Platonism is fake Platonism which comes from a simplistic understanding of Platonism.
This is why I'm terrible to my bank over the phone... I always ask them to prove to me they are from the bank and when they can't - i hang up. It's kind of annoying except I work above my bank so it's pretty easy to walk downstairs. Maybe someday the bank will implement a kind of certificate to help me identify i'm really talking to the bank...
The fact that this has obvious military applications suggests to me that if it was practical, militaries would have already done it.
It's missing the most important ones: Scrypt, PBKDF2, Bcrypt.

https://en.wikipedia.org/wiki/Scrypt

https://en.wikipedia.org/wiki/Bcrypt

https://en.wikipedia.org/wiki/PBKDF2

Scrypt being an absolute nightmare to bruteforce, even for short passwords.

http://i.stack.imgur.com/sOMvu.png
Excessive punishment can be a consequence of artificially limiting entry.
So if the limits are removed or relaxed, we might hope that the risk/benefit converges to an ideal.
"rapidly heading towards the limits of material strength"

indeed. tho, we should also note that we are looking at a weakest link thing. can that one bolt sustain that much pressure? or maybe that one weld? or any of the concrete parts that attach to the earth itself?

shrug

m3mnoch.
VW needs to come up with an immediate workaround that they can publish to owners or allow dealers to quickly hack in, then come up with a permanent fix after that buys them some time.

The immediate workaround may not be possible. In that case, they're just screwed. A company is not entitled to be able to save themselves from the consequences of their past fuckups in all situations. Sometimes, a mistake costs a lot of money or even kills the company. Perhaps this is one.

I find it unlikely that it's impossible to disable the keyless entry system on the cars in question. Surely there is some fuse or wire that can be pulled to shut it off. But it ultimately doesn't matter. Finding a workaround quickly is what they need to do, and if they can't do it, that's not his problem.
Consider fail2ban.

It can be configured to automatically add (and later remove) ip addresses to iptables based on login failures (found by running regexes on logfiles).

I've got rules blocking ip addresses with multiple failed ssh or wordpress login attempts for an hour to be very effective. I've still got a bit of "brute force poop" in the logfiles, but much less than before. I've seen a suggestion for adding an additional fail2ban "recursive rule" - dropping any ip address with repeated fail2ban lockouts for much longer times - if you trigger multiple 1 hour lockouts for ssh auth failures, you might get dropped for a week or more. I haven't felt the need to implement that one yet.
Like I said, "Sometimes they can prematurely bucket ideas into relevant/not-relevant, but usually not." I wrote that hoping to preempt your exact response. Alas! ;)

Even if I grant your premise (which I don't), just because a breakthrough is likely to be written in crazy-talk doesn't mean something written in crazy-talk is likely to be a breakthrough. At that point it becomes a question of opportunity cost, which is exactly where heuristics come in.

In fact, what you said could be true and it could still be true that

P(breakthrough | does not seem crazy) > P(breakthrough | seems crazy)

So, if I were on the hunt for breakthroughs I'd still be better off ignoring the crazy-seeming things.

Regarding your premise, can you name, say, ten mathematical breakthroughs since the Enlightenment that came about the way you described?
Benchmark your personal time developing a Twitter web scraper similar to this one to the time to follow the (2) approach. The code of the article was done in a few hours while the (2) approach would require further analysis and risks (analyzing protocols can be very tricky). Google Chrome and Firefox are very fast and one developer day may cost more than one PC.
Facilitating take on the age old problem of management and leadership. The best managers I have known have always known when to fight and when not to fight.

But I feel like there is a deeper trait that could be pulled out of this. Perhaps it is "understand your staff's emotional states" or "how to effectively persuade".

After all, "winning" an argument is rarely about proving who is right and who is wrong. A lesson that took me way too long to learn alas.
MS is not changing their tack because there is a vibrant big business community with budgets that depend on MS SQL and it fills the need.

Which Open Source DB does everything that MS Enterprise SQL does and why aren’t you using that instead?
I think the key to emailing cold is that you have to make it plausible that the other person can get something achieved for you in your connection. If you approach genuinely but don't know what you want out of the connection, then you're making it a risky endeavor for them in giving you their time. (and ain't nobody got time for that)
I suspect this kind of thing happens with other companies, but can only speculate.

Somewhat related: chicagovps gave me a 'fresh' gentoo vps, and the default provided root password was identical to the original one from several months ago. I assume it is one gentoo image with the same password (for all customers)?
unfortunately, devops (like me) need to ignore these as part of our work system.

i need to automate deployment / reprovisioning of 30 digital ocean servers. as reprovisionined servers frequently use the same ip address, i always run into this. for me I had to disable the check :(
Straw man. Curiosity is good, but it's foolish to rule people out because an obsolete network model hasn't caught their interest or made it to the top of their research queue yet.
Somewhat relevant xkcd, the more things change the more they stay the same: http://xkcd.com/1227/
Came here looking for 7 layer model. It seems to be the only surviving legacy of OSI. From memory Computer Networks by Tanenbaum mapped every protocol into that damn model. Typical of committees to have 3 more layers than needed.
use perl with HTML::Robot::Scrapper
You know what, as someone interested in everything possible, I probably would have bought some, experimented on myself with it and then flushed anything left. I find the whole area absolutely fascinating.

That's not to say I expect everyone to be like me, but I guess it may go some way to explaining my attitude of "don't blame the drugs, blame the people". ANd now that I write that out I can see how much it looks like something the NRA might say.

It's a tricky area and no doubt.
C'est la normes
This is an interesting study of markets. I fear that those who propose that markets are the solution are ignoring these cases where a large enough mover can manipulate the entire market.

After all, for commodities, it is in the best interest of nearly everyone for the prices to be as low as possible, but still enough so that the manufacturers can still find it valuable to do so. Traditionally, markets existed so that farmers could get assurances of prices for goods. How does that ideal translate to what is happening here?

Markets are a good way to decouple and avoid command economies, but problems like this need to be taken seriously and addressed. Ideally by alignment of incentives vs regulation, but hey, if it's christmas I also want a pony...
Mugging:

- Less effort but requires willingness to use force.

- Doesn't require any knowledge of the phone system or victim's details beforehand

- High risk, since violent crimes can go bad.

- Police care more (although depending on jurisdiction they may take a report and be unable to do anything unless you get lucky and there are leads for them to follow).

Con game:

- Requires more preparation and knowledge

- Allows more time to abuse the card because the victim doesn't know anything's wrong for days.

- Virtually zero risk during the acquisition of the card

- Police care less... these crimes are more difficult to solve/clear.
Yeah that is pretty damn awful, if only due to heavy compression and artifacting. I've come to expect more from my free encyclopedia :)
think of this more of a way to extract payment from people/companies, on fear of violating law X,Y, or Z
Does it scrape Javascript/AJAX sites?
Yep, the API powering the UI actually supports it already, we just need to expose it in the UI. We're madly blasting through missing features, so stay tuned :-)
Vagrant setup for The Foreman on Debian Squeeze
Hey, I made this. Trying the HN 'selfless' promotion. Let me know if this helps you!
A Lost Scottish Island, George Orwell, and the Future of Maps
The official ubuntu AMIs generate a new key pair on first boot. The AMIs provided by Amazon do the same.

If you're using AMIs from some other third party you should verify that they do the right thing.
Can you explain why a 40 char text is 1000 times easier to crack than a 10 char password according to the graphic?
Is it assumed you don't use any numbers/symbols and the attacker knows your dictionary?
I love pretty much any time Kathy Sierra writes. So ditto here, I'm glad to read it.

As for the willpower situation, on a tangent, I really believe that the notion of willpower as a useful ANYTHING is outdated and badly needs to be replaced.

The reality is we are smart people who understand our brains, and can reprogram it. Using emotions and basic urges to create motivations and positive feelings about the things we NEED to do but typically dislike doing is the key here.

Luckily there is a group that is teaching these skills outside the normal context of "self help" that turns off oh-so many people.
You don't even have to compare the keys. If they exist at all, they are probably copied from the image itself. The first time you start up sshd, it will create new keys. If you are unable to witness this, assume that they are not trustworthy, delete them and restart sshd (or replace them with keys you've generated locally).

The common problem is that sshd was started before creating the final image, so it has keys that are duplicated by provisioning. Always delete the keys before committing the final image, so that sshd will create new keys the first time it runs.
Akamai Q1 2013 Report "State of the Internet"
The Old Reader migrating limited accounts to private site.
The Old Reader is migrating limited accounts over to a private site. Providing rss service at a smaller scale. Overwhelmed with increase in users after google reader shutdown.
As they point out in the paper, there are some cases where risk is intentionally removed, such as through bankruptcy for businesses to protect entrepreneurs. I think that can have positive effects.

Perhaps the point is that the risk is not removed in those cases, but reduced. Entrepreneurs clearly do have skin in the game, and bad decisions will affect them. At the same time, having a "safety net" that ensures bad decisions will not completely destroy an entrepreneur's life is clearly beneficial because it allows more people to try their hand at it.
You don't need the OSI model to understand layers of abstraction. Since the OSI model doesn't fit the observed layers very well, it seems pretty useless from that perspective.
User activity based triggers to make apps smarter
Not really, actually mugging someone would be a lot of risk for unknown and surely lower return. What these guys are doing won't work all the time, but when it does the return is very high as they can steal money you don't even have if they get a credit card. They also wouldn't have to deal with any issues like getting caught by CCTV, a group of well wishers or the ever elusive police patrol.
I'm thinking about heading up from the Baltimore/DC area. I was going to go up as a single but if there is anyone from the area or looking to form a team drop me a line at jhavila2(at)jhu(dot)edu or the email in my profile.
I think "text" is english + whitespace + punctuation only, whereas "password" is any kind of character.

I didn't create that image, so I'm not 100% sure.
Er, well, I was using the function as an example of something which is f∈O(n^2) but not f∈Θ(n^2) under the assumption that when the OP reads the symbols "f∈O(n^2)" he's really thinking something more like f∈Θ(n^2).
On the internet, nobody knows you're a dog.

Or something. I'm glad you're not a terrible person.
Why Aren't People Buying the $1 Detroit Houses?
Militaries develop strategic plans for wars that will never occur all the time. It's an effective form of contingency planning, and an effective way to practice strategic planning.

I believe there have been plans developed by the Pentagon for a war with Canada, too.
One good thing to note is that any VM image using cloud-init (a package for debian/rhel systems) should automagically generate a new host_key set for any new system image. Basically if you build a system image for EC2 or any system that uses the EC2 data format (like Openstack) for host instantiation, then you should install cloud-init. It would prevent something like this.
SSH host keys are problematic on cloud servers, not just because of this problem, but also because if the cloud provider does the right thing and generates the SSH host key on the first boot, the key is generated when the system has very little entropy available. The primary sources of entropy on Linux are key/mouse input, disk latency, and network interrupts. There's obviously no keyboard/mouse on a server, and in an SSD environment like DigitalOcean, disk latency is quite uniform and thus useless as a source of entropy.

Linux distros mitigate the cold boot entropy problem by saving some state from the RNG on shutdown (on Debian, it's saved in /var/lib/urandom/random-seed) and using it to seed the RNG on the next boot. On physical servers this obviously isn't available on the first boot, and on cloud servers, the provider often bakes the same random-seed file into all their images, so everyone gets the same seed on first boot (fortunately this doesn't harm security any more than having no random-seed file at all, but it doesn't help either). What cloud providers should really do is generate (from a good source of randomness) a distinct random-seed file for every server that's created, but I haven't seen any providers do this.
There's so many articles full of analogies and fluff in UX, sometimes I read a post and wonder if I'm in the same industry.
This won't change because large companies don't like open source.
How is orchestration handled?
Truly great to have Kathy back. She gave an awesome talk at BoS 2012 on the "Minimum Badass User" that subsumes this post. Well worth an hour of your life to watch:

http://businessofsoftware.org/2013/02/kathy-sierra-building-...
I've heard of a similar issue with a wireless data link across a river that would cut out once or twice a day, but not everyday, and no one could figure out why. The answer only came after a few weeks of monitoring and an ametuer fisherman saying "hey, those are all high tide times!" at which point they realise that high tide was causing the mast of a docked boat to rise up enough to interfere, and that the boat was not always in its dock which is why some days were fine.
Kathy Sierra: Creating the minimum badass user
It's slow, and manual, but this gives me one more reason to like prgmr, at least for my little side projects. You generate the keys, and send the public key to Luke. Your only access to the control layer is via public_key auth from that key you generated. Presumably on a laptop, with gobs of entropy available.
Things we do that don’t scale but help us succeed
One could probably do backprojection with the otherwise useless Leap Motion controller and get 3D reconstructions of your hands... or other things.
So you are the reason I started getting these error messages, I noticed the change on June 2, great work.

If you are still reviewing salt, I just wrote a post about salt-cloud and DigitalOcean that you should check out -

Create your own fleet of servers with Digital Ocean and salt-cloud:

http://russell.ballestrini.net/create-your-own-fleet-of-serv...
Your life is not a joke. You've sacrificed tremendously to help someone who doesn't even seem to appreciate it. Your desire to sacrifice repeatedly for someone else is incredibly meaningful and rare - and such actions are far from mistakes. Empathy and compassion are the essence of meaning and you have an incredible ability to provide this love even when it is not reciprocated. Someone who lives this way could never be a joke.

You deserve happiness and you deserve to have your tremendous compassion recognized and returned in kind. I hope you will be able to put yourself in an environment that is free of negative individuals, because anyone lucky enough to be exposed to your tremendous selflessness could not help themselves but to respond with love and appreciation.
heh.
yes, I could setup a guest network to workaround the fact that google stores my network access passwords in plain text on their servers whenever I allow someone using their software on my network.

or they could stop betraying the trust of their users.
I mean, seriously.
It would be one thing if they were 'only' totally compromising the network security of people who chose to use their software.
But they are compromising the security of anyone with a network who lets their friends and family on board.

My network isn't a problem one way or another, I am actually fairly comfortable with the protections it has.
OTOH the networks of non-techy people and family across the entire world that have been compromised by google's astounding arrogance(?) and stupidity(?) kind of bother me.

Honestly, I do not understand how an entirely tech oriented organisation like Google could do something like this. I am Jacks bewildered confusion.
I believe it's 90 seconds in Australia.
I don't see how this statement applies to Dart or NaCl:

"the Internet philosophy has always been you have extremely bright, non-partisan researchers look at a topic, do world-class research, do several competing implementations, have a bake-off, determine what works best, write it down and make that the standard."

I think it fails on "non-partisan" and "competing implementations" for sure. Maybe Mozilla is whiny. I don't know. But these aren't great examples of the benefits of the Internet philosophy as stated above.
Como Agrandar el pene
En este video te enseño las técnicas que yo personalmente utilicé para agrandar mi pene 3 cm en solo 2 meses y lo único que utilicé fueron mis mnos
That was before the internet.
I think this a very interesting way of funding an open-source project, and I'm glad it worked out. Excited to see how Flynn turns out!
Orchestration of containers is the purpose of Flynn. We'll create detailed architectural documents in the coming weeks.
Investors need to act as if they could stomach a total loss on the investment, founders need to act as if they can't survive failure on the venture.

Now imagine that these two roles usually exist in the same person, to varying degree.
Whew, that's awesome =).

I was watching it lately - and it seemed to be hovering around 91% for some time...

Looking forward to seeing great things from the project.
True, but much less of an issue than just leaving the same version of keys in place. In case you're curious, here's how the cloud-init library generally used for ec2 and ec2 compatible clouds works: https://github.com/number5/cloud-init/blob/master/cloudinit/...
Not my experience.

Government dislikes open source (you know, communists).
Where it really gets amazing is when you discover that the GPS signal is around 20-30dB below the noise floor. That is to say, ambient noise drowns out the signal by a factor of 100-1000. Long-term correlation manages to pull out usable information from this extremely noisy signal.

An interesting consequence of this is that you don't need a very fancy receiver, hardware-wise, because your software already has to be extremely sophisticated. For example, you can use a 1-bit ADC rather than trying to be more sophisticated about exactly how strong the signal is at any given moment.
I think this thread is increasingly unlikely to be productive, but I'm puzzled why you think I've changed the meaning. I think it is accurate to say that the expert panel concluded the threat of BPA ranges from "some concern" to the most vulnerable groups to "negligible concern" for most healthy adults. Are you suggesting the expert panel found that BPA posed more than a "minimal" threat to adults in regards to something besides reproductive harm? I don't see that in the report...

Anyway, I think you nail the exact point I was trying to make: no studies have shown BPA to be dangerous in adults at the levels that are actually encountered in the environment. (There's little doubt that BPA is bad for you at doses orders of magnitude higher than those normally encountered, but that's true of a great many things.)
It's handling financial information, so I believe the answer is yes, but would be glad to be wrong!
These aren't cryptographic hash functions exactly, though, at least not in the sense that a cryptographer would think. I mean, they will fit just about any definition of a cryptographic hash function you can think of, but really it's not that useful to label them as such. Instead, they're usually called key derivation functions.

On top of that, even if we were to include these in a hash function list, they're decidedly not the most important ones. Most important for password storage and other key derivation, perhaps, but the applications of hash functions are far more general. The preimage resistance of scrypt is reliant on SHA256, for instance.
By disabling that check, you are destroying a huge component of the security that SSH provides. Perhaps you could clean up the authorized_keys file as part of your teardown script?
We figured out we weren't using most of SQL Server's features and didn't want the mental overhead of MSFT licensing. We switched to Postgresql and haven't looked back.
https://github.com/golang/groupcache/blob/master/sinks.go#L5...

Uh oh. The dreaded cast we see here http://how-bazaar.blogspot.co.nz/2013/07/stunned-by-go.html
Show HN: New Agile invoicing and time tracking for agencies