skysight-inc/HackerNews huggingface dataset:
Kurzweil has been getting it right because his near-term predictions are pretty safe bets, many of them true in some form even in 2000. For examples,

* Research has been initiated on reverse engineering the brain through both destructive and non-invasive scans.

* Autonomous nanoengineered machines have been demonstrated and include their own computational controls.

* People can talk to their computer to give commands.

He has crafted his long term predictions such a way that 8 out of 10 are pretty trivial and 2 most likely to go wrong. No wonder he often claims 80% success rate. For example, for 2020 he is predicting trivial stuff like this which has been in works already since he started predicting:

* Computers are embedded everywhere in the environment (inside of furniture, jewelry, walls, clothing, etc.).

* People experience 3-D virtual reality through glasses and contact lenses that beam images directly to their retinas (retinal display). Coupled with an auditory source (headphones), users can remotely communicate with other people and access the Internet.

* People are able to wirelessly access the Internet at all times from almost anywhere

* Nanotechnology is more capable and is in use for specialized applications, yet it has not yet made it into the mainstream. "Nanoengineered machines" begin to be used in manufacturing.

However his non-trivial predictions are almost guerenteed to be false:

* By 2020, there will be a new World government.

* The basic needs of the underclass are met.

* Most human workers spend the majority of their time acquiring new skills and knowledge.

* Phone calls entail three-dimensional holographic images of both people.

The point is predicting long term future is not just hard, it's impossible. But there is an expectation from long term future that sets our sense of progress and achievements.
rofl, I can't tell if the person who downvoted me is actually making a satirical statement about downvoting... which ironically would just be validating my initial satire! ;)
Even encrypting the password store on-disk? What's Keepass doing?
Deciphering Beanish - The Language from xkcd's Time
I really, really wish there was some way to set it so it wouldn't access your cookies or something unless you put in the master password.

Always seemed like a bit of a flaw that while you can't log in to other sites or view the passwords, you could still access any sites you were already logged in to.
Indeed, that doesn't point to a mistake when the right thing is 1. get the result from the query; 2. do nothing else because if the user choose "always allow" the OS itself will give Chrome permanent access.
Here's another one, I just made up:

- Aliens from billions of years into the future with an infinite source of energy and computational power have managed to slice the universe and put us into the solar system as a simulation. Everything coming back beyond the solar system is simulated, matter and energy alike.
Why would a non-technical user know that? Even if they could work it out if prompted to think about it, there's nothing to suggest to them that they ought to.
Not if their strategy was to obliterate a potential competitor from the market.

If that was the idea, their execution was flawless.
"Unauthenticated" except for the time you told Keychain to "Always allow" requests from Chrome.

However I'll admit that there's a big difference between what I expected Chrome to be using those passwords for (logging me into websites) and how it's ended up (making those visible to anyone looking at the settings page).
If this article is designed to promote the Business of Software I think it's failed entirely in my case. Working every day of the year aside from 3 days at a conference is not something I have any desire to emulate, nor do I want to hang out with people who think that's a good idea.

Work should be fun, interesting, challenging, and something that you can put away occasionally to do other things. If you can't, you're doing it wrong.
You can't open my chrome browser without unlocking my machine. You can't unlock my machine without 2fa. I don't walk away from my machine without locking it. So, technically, there is a master password if you lock your machine.

Nb:not saying it is cool to be doing what they're doing.
It's especially insane on OSX which already has an OS-wide and ~secure (more secure than this anyway) password manager: Keychain.
I'm not so sure. You have to deliberately write that code.
When Google phased out their undocumented weather API that a lot of people used[1], leading up to it for a few weeks they just randomly returned 403 to random requests. Good way to confuse developers and motivate them to use a real, supported API.

[1] http://thenextweb.com/google/2012/08/28/did-google-just-quie...
Show HN: Quick and simple JSON hosting, CORS enabled.
They are comparing static sites on Freenet with dynamic hidden services on Tor. Sure, hosting many hidden services with the same provider was dumb, but we're talking apples and oranges here.
At least on Windows, Chrome uses a provided API function which makes the encrypted data only decipherable by the Windows user account used to encrypt the password. So essentially, your master password is your Windows account password. As a result, once you are logged into Windows using your account this data is decipherable by Chrome.
Do you have the "master password" thingie in Chrome ?

Anyway...this is what happens when you optimize for "usability" over security. Microsoft used to get a lot of flak over this.
The per unit costs of a chip[1] are essentially constant per wafer. The smaller a chip is, the more of them each wafer will produce. Also, the smaller a chance there is that any given chip will be ruined by an imperfection. So then number of chips you get from each dollar of production cost is a bit less than linearly inversely proportional to the area of the chip. There are other factors too, though, and wafers from more advanced nodes will tend to be more expensive. However, the two examples being compared here were both from the 25nm nod.

[1] Which dominate with memory since production runs tend to be large and the regular patterns make for less design investment than, say, a CPU.
Beg HN: Please flag non-serious GitHub/Bitbucket/etc outages (1h+)
If we're up for changing the standard, why not go with something that's significantly better than pass the hash, like some form of public-key crypto?

Having <input type='challenge' algo='xxx' challenge='reallylongrandomchallengetoken'> would work better than yours, I think?

There's also nothing stopping the user using a "password", where that password is fed through a KDF and then used to generate the relevant private key (all done client side) -- but this is only as strong as the password used, so a really savvy user would just generate the private-key really well, and store that in a similar way to the way SSH keys are stored (i.e. passphrase). Non-savvy users can generate it a-fresh every time.

But aren't we just re-implementing client-side SSL certifications?
in this scheme the hash effectively becomes your password, how is this helping anything ?
> "Unauthenticated" except for the time you told Keychain to "Always allow" requests from Chrome.

1. that does not make it OK to display all cleartext passwords, Keychain requires the account password before displaying the cleartext. And keychain can optionally require the master password to be entered before providing a password for form-filling as well.

2. an other user notes above that, whether you "allow" or "always allow", Chrome will copy the entry it just got to a new keychain entry which it sets to always allow.
And, where possible, flag them. :)
The Sun's Magnetic Field is about to Flip
The "complication" is the standard behavior of safari and indeed of the entire OS as far as credential storage goes. So I'll go on a limb there and say that no, it's not.
Here's another "thought":

- If academics kept compiling the knowledge of the world starting at 2000BC, and everybody were taught the knowledge, we'd have reached our current level of science by 1000BC.
I'll drop a link to my (non-free) e-book:
http://arek-paterek.com/book/
The master password is that of your OS profile.
"This is the paper presented at the Second Scala Workshop to be held at Stanford on June 2nd 2011."

Not a good sign.
At the risk of sounding obtuse... When you say philosophical, do you mean non-measurable? (Such as parts of string theory?)

To use an analogy, why can't particle physics be like a Mandelbrot which doesn't have a bottom?
I wrote a blog post with some material suggestions to learn Machine Learning. If you want, visit my blog post:

http://pauloortins.com/resources-to-become-a-ninja-machine-l...
Youtube celebrates Geek Week
> They all store pwd in the same way

No.

1. Safari stores its passwords in Keychain (OSX's built-in password manager), in which a master password (the account's password) is required to get cleartexts. Safari itself does not give direct access to the passwords list.

2. Firefox has a master password option.
I agree that it's an important tool and should be discussed.

But...if you're a big company, who's doing serious work, then take advantage of the fact that git is a DVCS and have something as a failover measure. GitHub is great and has lots of great features, but there's nothing stopping people from having a mirror synced without all the sugar but to keep productivity going.
And a large part of what makes a better GPU is RAM bandwidth. If you're using integrated graphics there actually tends to be a quite large difference between using system RAM clocked at 1066 and RAM clocked at 1866. If you're using a discrete GPU card the RAM that makes a difference to your gaming performance is already soldered onto the card, but that might still see an improvement from faster memory technologies since the people who make those cards could use it.
If you're trying to put people off abusing it, wouldn't randomly failing make the situation worse? People will just code apps to try the request again until it doesn't. It'd be like inviting people to DDoS your API. So long as the display bit is asynchronous then the user will just see a spinner until it's worked and the results are sent across.
http://www.brainyquote.com/quotes/quotes/a/aynrand125008.htm...

Everyone's a criminal then law-enforcement selective enforces law on who they want taken care of.
You can create a filter that marks any mail containing "Re:" with a specific label (lets say Reply), and the search for -{label:Reply}

alternatively, skip the labeling part and search for -{"re:"}
In my country we use a phrase, roughly translated as: "Many midwives, tepid child". Sorry, we didn't have Indians to kill and them make a mockery out of them ;)
I had never given much thought to the implications of saving my passwords in Chrome so thanks for pointing this out.

Now I'd like to remove my saved passwords but visiting chrome://settings/passwords and removing them one at a time will take forever; can anyone tell me how to remove them in bulk?
More Than $1 Billion Spent on oDesk
This shows how far NSA is willing to go and there is no reason to believe that their morale has changed since then either
afaik, octave uses blas, which in turn should be using strassen's for it's sgemm, dgemm etc. computations. at least it would be very surprising if it didn't...
I haven't finished reading the whole thing yet (half way through) but that was exactly what I was hoping for. Thanks again.

One thing I don't understand is what happens to the supply line the decriminalisation case. Obviously trafficking is still illegal but is still happening. I guess there's still the same amount of money running back to the drug cartels.
They're importing Safari data, so I'd expect them to copy the credentials to a new item to avoid conflicting with Safari managing that data, and creating a new keychain item with permanent access would be the correct response for 'Always Allow', so isn't it possible that's a mistake that they don't correctly respond to the Allow button? I agree storing the credentials outside keychain is not desirable, but again probably that has to do with cross-platform requirements rather than malice on the part of Google.

Have you reported the bug and asked the Chrome team about it?

In contrast to adwords defaulting to automatic payments and auto-bidding, or tracking users across the web universally over all the google services, or pushing people to use G+ everywhere, this wouldn't really benefit Google would it? I'm sure Google do lots of evil things, but I can't see any upside to them in this, and lots of downside.
Firefox does it better, allowing you to set a 'master password'. A fresh launch of the browser can't autofill fields until the master password is provided. The settings page for saved passwords won't show them in plaintext unless the master password is provided again.

It's not very onerous and it prevents quick, casual swiping of passwords. (Sophisticated attackers could navigate to a fresh login prompt and use DOM-manipulation... but that's also more time-consuming and doable by far fewer people.)
Some people host websites/projects on Github pages. They definitely suffer when Github is out cold and might want to move to fallback.
Well, websites control their cookies, so it's up to them to determine how secure they want to be. They can even encrypt them if they wanted to.
Showed this to the team I work with. Never seen so many jaws hit the floor. This is really bad.

Passwords should never be viewable through a browser settings page. If you forget a password for a site, then the site provides a mechanism for password recovery/reset.
Show HN: I'm writing an ebook about adventure and giving it away for free
Wow. That's an absolutely fantastic idea, in fact probably one of the most interesting ideas for a YC company I've seen for a while.

There's a lot of risks involved, but if they do it properly and take the security risks, and system abuse risks seriously from the outset it could be a really useful tool in getting people help.
I mean an intermediary like java.

another option would be to have a <script arch='arm' src='compile.arm.bytecode' /> and compile for various architectures before hand.
So basically what you're saying is that it was the federal government's fault for giving states the ability to carry out civil forfeitures, therefore we need to transfer more power from the federal government to states.
> I got somewhere between 2.0 and 2.2 "milliseconds per ping" for Scala 2.9

The latest Scala is 2.10, which has a number of optimizations over 2.9...
and asm.js is optimised for those snapshots right?
The 362 days thing is (very) figurative, and was less aimed at "Days work versus days off" than at "Rough percentage of my time is spent dealing with daily tactical minutiae of running business versus get-away-from-it-all opportunities to think about where I want things to be in one year, five years, etc."
I think you are confusing RAM speed and the bus/PCIe bandwidth.
Other active threads on this topic :

- http://stackoverflow.com/questions/17860161/replacing-a-full...

- https://groups.google.com/forum/?fromgroups#!topic/jooq-user...
Note that Chrome is using keychain and that you can dump the complete keychain data with all passwords decrypted via terminal anyway. You don't need any third party software ala Chrome installed. E.g.:

security find-internet-password -g -s news.ycombinator.com

Klick allow and that's it. The master password question for showing individual passwords in the Keychain.app does not protect your passwords.

As others said: don't let anybody use your computer if you're logged in (have the keychain(s) unlocked).
Who killed the music industry? An interactive explainer
Teachers Don't Work Hard Enough? Think Again
>The second, is that feminism, and other socialist ideologies, need a high amount of state control, while IP laws need less

Thanks, that's an interesting observation I have not yet come across - I think you are on to something here.
I was reminded of someone who emails a list of thousands of people and this is the first Reply to All saying, "Can you please take me off this list?". Then there are many more such requests and then they will be followed by emails desperately asking people to, "STOP REPLYING TO ALL!!!!"
I don't think it would be a net win, though. Neither you nor OP has established that 30-40 minutes is a better threshold for when a story is made about GitHub being down than what it currently is (apparently 5-10 minutes when there aren't a lot of other good stories to compete with on HN). You and OP might prefer it, but you're just a couple of data points.
It looks like you have the equivalent of a new investor round, with a new valuation for the company, with all of the consequences of that new price/valuation. Already having other investors and option holders makes it a challenge to do any other creative things...compared to being or becoming the sole owner.

This is the standard state of affairs after a new investment round at a higher price. For example, not much different than the experience variance between a pre-series-A round investment employee compared to the new post-Series-A-investment employee experience in relation to options and pricing. Not much to be done about that.

I guess you could have a 100-for-one stock split, post buy-out for present owners and option holders, as a method to getting new lower priced shares for future new employees. A future new employee's likely option fraction of the total company are going to be smaller, post-financing on any new investment/pricing round.
> You can easily spot the trend if you read HN through RSS.

Why is it more easy to spot through RSS? (genuine question)
It's a shame BoS have started selling the videos of talks when most conferences are going in the other direction and releasing videos for free.

Given that many speakers are doing so to contribute back to the community and build their own reputations it would be nice if conferences like BoS would be run by the community for the sake of the community rather than by commercial entities.

I'd be curious to know what percentage of the video sales price goes to the speakers as royalties.
I did that course and it's very different. They are complementary, the one in Coursera being more introductory.

I'd recommend the Caltech course too, which is also tougher.
Ha! I read the first few paragraphs and then scrolled down until I got to the P.S.

Brilliant!
Visit The #1 Internet Marketing Training Blog And Learn A Ton
Select the first, scroll down, hold shift and select the last, click the delete button of any row and all will be deleted.

Don't forget to turn of the option to save passwords, and optionally install a password manager extension (I use 1Password).
Kickstarter in Canada
My only criticism here is the name, as it's implicitly suggesting that it's a good idea for people with anxiety issues to drink a lot of tea. (When in fact caffeine generally makes anxiety/depression worse.)
Show HN: First Google Chrome extension and it's open source
I can understand why they would want to lock it down simply from a security perspective. I don't want every piece of software on my network to be able to alter the software. Its bad enough with routers.
I've a feeling MBED would have been much bigger if they hadn't started off with the pure online compiler approach. That really scared off a lot of hackers. Thankfully they've fixed most of those issues (though I don't they've opened up the 'magic interface chip' firmware).
You don't have to pay for healthcare is the justification I believe.
I disagree. When Twilio went down a few weeks ago, the second place I headed to was HN, and found that it wasn't just for me. And since this is a meeting place for the kind of people I want to hear from (like Twilio's developers), reading the thread helped me a lot.

So I agree with the "if it's less than 5 minutes, don't report it" sentiment, but I do like it when larger outages are reported.
IMO if a user opts in for auto-fill, they admit that anyone having access to the browser can sign into any of their "protected" accounts. And thus, for a browser to store passwords and auto-fill them in (as plain text) is not the real problem.

The problem with what Chrome is doing is that it not only allows anyone to access your "protected" resources (if they have physical access to your browser), but that they can easily peek at, and possibly export those password for use elsewhere (say on entirely different machines / apps) without you knowing or detecting this - since by then, they don't need physical access to your browser. This IMO is the BIG FLAW!
The problem with Javascript Promises
In the future, there will be a more extreme version of rickrolling. People will send you links and if you open them, you will be sent to jail.
I think that is rather straightforward: http://elixir-lang.org/blog/2013/05/02/elixir-on-xen/

Most of the work really is on the Erlang side of things.
> I think C++ would have done fine with a suitable toolkit, which presumably they would have built based on the stuff from Be

BeOS, while a nice operating system, was notoriously difficult to program for, largely due to the use of an asynchronous API.

> because Apple doesn't seem to be very good at the things needed to make a language like Java run fast. Perhaps if they had contracted out the right bits to Sun rather than pulling a Google and building their own VM, it could have worked OK.

The "Apple" JVM pretty much is a licensed Sun JVM with extra bits. It's also of comparable speed to the Sun JVM; the performance gap between Apple Java 1.6 and Sun/Oracle Java 1.7 on a mac is comparable to that between Sun/Oracle 1.6 and 1.7 on Linux.

> But I don't think much of Apple's rise can be attributed to that choice of language, even if it did end up being a decent one.

Certainly not entirely. However, one advantage that iOS did have early on was that it wasn't totally horrible to write for, which had been a traditional affliction of smartphone OSes. Possibly they'd have come up with a decent C++ API, of course, but then again possibly they'd have come up with something like the Symbian API.
I really like when I goto download some new app and see that there is a simple executable .jar I can get. They are still bloated and slow though.. just so happens that we have workstations with i7s and 32GB of RAM.

We finally caught up to where Java is reasonable, yay!
As Patrick has already responded, I don't think there is too much to add but apologies if you feel the line is misleading. Anyone that runs their own business is likely to be spending a lot of time thinking about the detail of what they are doing and not have the time to step back and think about working 'On' their business. We try to create an environment that allows people to step back from the day to day, and learn from each other.

We also happen to believe that far too many people spend their time as entrepreneurs telling other people how hard they work etc, and that frankly is not healthy. This is also a little 'tongue in cheek'.
They do: it's your inbox. Once you reply, you archive the e-mail.
C++ and Java were first-class languages in MacOS until quite recently; while the intent was always there to deprecate the C++ API (Carbon), the Java Cocoa bridge was dropped more due to lack of interest a couple of versions ago.
The wind always blow somewhere and the sun always shines somewhere

Sure, but then your power supply is in the hands of other countries. What happens during war?
ThoughtWorks P2 Magazine, issue 3