skysight-inc/HackerNews huggingface dataset:
While I agree that Twitter's mechanism addresses the vast majority of potential attacks against a person's Twitter account (which would almost always be remote), it's not hard to imagine a scenario like Authy describes.

Imagine you're at work, logging in to a two-factor system. Now imagine your attacker is sitting 15 feet away from you. All the attacker needs to do is wait for you to attempt to login to the system before attempting to login himself.

When we have penetration tests run against us, this is exactly what is happening. We give the penetration tester a desk, a connection to the internal corporate network, and the same bare level of access we would give to a temporary contract employee.
It depends on the application that you are working on. The more you rely on geographic information the more strict you must be.
So let's review why you need all that info. If you don't include the zipcode with all the rest of your information, you run into the Washington Township problem. http://en.wikipedia.org/wiki/Washington_Township

You can't infer (reliably) your exact location from a zipcode because of the reasons listed in the other comments linked to your parent comment.
and I ask, how is that the use of open source software can guarantee privacy? from the article

"OpenMailBox is an recently email service (June 2013), which promises to respect your privacy thanks to the exclusive use of free software "

and the business model? bills needs to get paid...
Like it, but why do you care how long my damn password is? I have a short one that I like to use for stuff where I don't care about security, and I hate having to manage/remember longer ones. So far I don't value the service enough to want to do that - my attempt to sign up has resulted in an annoyance rather than a benefit.

Needs on-screen genre tags, also needs submitter ID so you can spot people whose taste you know you like. Otherwise clicking on an unknown artists is a complete crapshoot.
People who need to disable Javascript are a vanishingly small portion of any potential market.

Depends on who your target demographic is. I'm a "no-javascript guy" and my cousin is as too (well, "gal") for completely different reasons. She's on a rubbish computer not living in the U.S. (read: developing country) so often it's just faster and smoother to browse on a wireless connection with JS disabled. You'd be surprised at how common this is.

I frequently disable it while browsing casually and, for about a month or so, it was policy at work until we sorted out a few in-house security issues (namely browsing etiquette for some of the folks). Our CMS was broken during this time and the front UI was quickly re-written in plain HTML. After that, we sorta left it that way.

1) Web applications...

The original post makes no mention of "application" or "web site" for that matter.
I meant to say Freenet is a Java browser, not Firefox.
There have been others, but this was a pretty good example of 1.) munging data easily 2.) having libraries available that did what I was looking for

https://gist.github.com/pschmied/5903410

I make no guarantees about the quality of my hackish code :-)
I'm I the only one who read the headline and thought it was some awesome addon for Arduinos?
Some vendors follow your suggested model, and are very open with support and documentation. Other vendors (some of the biggest are in this group) have terrible/non-existent documentation and provide application-specific support by shipping an engineer with the product.

Modern SoCs demand thousands of pages to cover all available features and possible applications, and putting together that documentation in a self-consistent way is a challenge. Some vendors have decided that supporting low-revenue clients is not worth the cost of putting together said general-purpose documentation and providing support to each and every buyer. They'd rather not sell you the product in the first place than sell you something and stiff you on documentation & support, which is a reasonable position.

Often when you're a low-quantity company you deal with low-quantity vendors who are willing to support you. When you move to high volume you might prefer to keep working with the chips you know. But when your operations guy comes back to you and says that the Big Co (who wouldn't talk to you in the past) can sell you chips for $5 less, that's $50M you just saved (given your 10M unit quantity). So you switch. In this example you have two different vendors: high cost / high support, low cost / "exclusive" support. Both have markets, just different ones.

TI is an example of a vendor that is very hobbyist / small quantity friendly. Even that wasn't enough to save them - they've pulled out of the phone SoC business.
Bloggers RSS Feeds Theft Sites Beware
Many private schools (including UChicago) supplement FAFSA with CollegeBoard's CSS PROFILE, which is more encompassing and looks straight through retirement savings, business assets, trusts, and everything else. My dad is a CPA and it took him several days to fill it out. He said it was very clearly designed by experts who are very good at finding hidden assets.

Before someone turns that into an argument for state schools, remember that it's really only private schools which give any financial aid at all to middle-class kids.
The cult of Reagan is less powerful than the cult of private companies that exist due to government money funneled through DEA programs.
> an optimized C compiler won't always write the best code in a best practice way.

Aaand, therefore, you might not suggest to people that a good way to learn to write good asm would be to study the output of a C compiler. However educational that experience might be.

> Also true: no matter how good something is, there'll always be someone eager to put it down.

Not sure where this is coming from unless you think we're having a conversation about the merits of a language, instead of the merits of learning another language from the output of a transpiler.
That's true of moderation in general though - it's pernicious because it conceals from the community what exactly is being concealed from the community. I've seen this become a problem on sites as diverse as Groklaw, Jezebel, the Adafruit blog, and a number of other places.

HN is relatively transparent in that it has showdead. On most websites there's no way of telling what's missing.
Gallery: White iPhone 5C Back Housing
Hope is not rational, which makes it sort of a challenging topic for LessWrong.
Here are some summary snippets from the post -

"That summer I started my first engineering internship for six months from June to December, making $25.85 an hour working for a well-known tech company.",

"It made no sense for me to stay in school; the financial stress was affecting my ability to get work done, and subsequently my GPA dropped.",

"This June, I was notified that my financial aid was reduced from $16,000 to $104 because I had made too much money in 2012, which put me in a higher income bracket to receive less financial aid.",

"Every attempt to contact my financial aid office has been unhelpful.",

"They have parents that pay for school and all their expenses, which makes their internship money pocket money."
How The Curiosity Rover Sang Happy Birthday To Itself On Mars
They sent the document as a Word document and I changed the document ... In the past I've done the strike-through and initial way too. They initialed each page and signed the last page and I've got a fully executed copy. They didn't lose their copy on purpose and when the HR representative pointed out that they could inform my new employer about the terms of the NC and NDA, I told them I'd altered the original and that they didn't have my permission.

As I said before, I wasn't interested in taking their IP but rather eliminated the parts that are onerous to the employee and that might put my side projects at risk. I should also point out that I'm still on good terms with this company and have helped with various IP issues that weren't finished when I left.
The Zumwalt class destroyer, the next generation of U.S. navy ships
Geolocating the timezone based on IP is so fragile and likely to fail that IMHO it's not nearly worth the time to implement.
Nice benchmark! Hopefully the asynchronous lazy decoding in Clank lands in Chrome soon and improves image decode blocking.
In my experience, most Canadian businesses won't consider you without the correct visa. I haven't really heard of too many companies sponsoring someone.

Have you considered doing some contract work through oDesk or similar? If you establish some contacts with American / Canadian companies and prove your value, they may be more inclined to help you come over.
Well, none was available as far as my financial aid office knew. ALL the school's financial aid was needs based, so there were no scholarship or school grant options. It was very expensive (and worth every penny) so "small" checks like $4K wouldn't have helped much. And my parents certainly wouldn't have filled out a FAFSA/College Board CSS PROFILE (I believe the latter was required; it is now).

Only other option was the military, but my eyesight was too poor to even enlist in the Army (and this during the Carter nadir of the military).
Not according to my attorney ;)
A bit of a pre-cursor leading up to this, from Roy Bahat (head of Bloomberg Beta): http://www.linkedin.com/today/post/article/20130801174730-38...
Broken (or why college as we know it doesn't work)
It would be cool if it was a portable Steam console.
Ah, that makes sense, thanks, in my mother tounge there's no specific word for "reciprocal", we just use "inverse" for both meanings.
They are not supposed to know, the government is attempting to cover up it's crimes again[1] until it can work out immunity and monetary compensation for the actors involved[2].

[1] http://www.independent.co.uk/news/world/americas/cia-chief-w...

[2] http://www.theguardian.com/commentisfree/2012/oct/10/supreme...

Edit: To the user below, this is various arms of the government passing around information amongst it's branches to avoid accountability and exposure as much as possible. Rather monolithic.

Keep the ready made mantras out of this please.
I'm more interested in the other side - becoming an advisor. Is there anywhere to go to offer up my services as a large-scale technical resource?
They aren't. The point of parallel construction is to ensure that they cannot.
How to Fatten Pigs and People
I have to agree with the other posters. Ask people to pick a random number 1-20 and they will tend to pick prime numbers such as 17. http://prasoondiwakar.com/wordpress/trivia/17-is-the-random-...

>The most random two-digit number is 37, When groups of people are polled to pick a “random number between 1 and 100”, the most commonly chosen number is 37.

http://www.catb.org/~esr/jargon/html/R/random-numbers.html

Unless the lottery pickers aren't trying to pick a "random" number. I have no idea what their logic is anyway.
In Germany, there's the Duale Hochschulreife, where students apply to companies and colleges. The company will then pay for your degree in exchange of your working for them during the breaks and some additional periods fully sanctioned by the University in question. They also pay you a wage for the time and usually offer you a full time job after you've graduated.

The benefit for the companies which do this is that they've essentially trained engineers allready familar with their company culture, technology stack and working procedures, which require no additional time to train. Also it's beneficial for the image of the company.

The benefit for the students is that they graduate debt free and with solid job prospects (since they allready have one).
I would use Promises to handle the situation of "returning early." Essentially, you create recursive function, and execute it in a setInterval (don't forget to bind the scope if you're doing class references!). Manage state outside the scope of the function and create a deferred object outside the scope as well. When it's done, resolve the promise and kill the .

Elsewhere, use the resident "when" function to capture the resolved state. This helps create a very secular structure of code where each method is purposeful.
Fab CEO Uses Ludicrous Euphemism When Laying Off Employees
"The federal government will let you and your parents borrow as much as you need to pay for school"

If that is the case, why is Ingrid saying that she cannot?

"All of my debt is government loans, but this time around I don’t even have the option to take those out."
Repost of https://news.ycombinator.com/item?id=6176411
I think average Americans do care, especially older ones who have a better understanding of the thinking led to America's founding. That understanding is that those in power always try to get more power, so our system of government was set up to prevent any person or subset from getting too much power, through balance.

The ability to spy on anyone's current and past internet activity and past phone calls is an impressive power.

One could hope it would be used responsibly and not abused, but those with a good understanding of the founding of the country would recognize this as too great a power for any group within the government. Even if it isn't being abused now, the risk it will be in the future is too great.
No, I was so disappointed. I had images of some sort of fantastic mini-GPU shield.
This is what we did on a recent project. The times were left at UTC with a hover tooltip (JS with a fallback to title="Coordinated Universal Time") and we used the "timeago" plugin for jQuery http://timeago.yarp.com .

So far, no complaints.
Yes, but ALEC-affiliated legislators tend to trot out the Gipper when they're on the stump rather than talking about how many lobbyists they're friends with. Money talks but ultimately it's the votes that count.
I'm not sure that's actually the wisest course of action at this point. No matter what, it's almost certain she won't get as much aid as before, and completely certain she won't do any better than before, and what she was getting before clearly wasn't enough.

It sounds like the author is now extremely well-positioned to get reasonably good jobs and really start her career. Doing so and continuing her formal education part-time may be the best choice.
For the nth time, government is not monolithic. It's misleading (mainly of yourself) to operate on the basis that it is.
The US university loan system is fucked.

We have a government-run loan scheme called HECS. You defer your university fees throughout the duration of your studies, apparently no matter how long they last. The programme is not means tested at all, so it is available for every single domestic student studying uni here, no matter what.

That loan is then paid back only once you start earning more than a threshold amount of taxable income (this year, $51,309 - it's not a low income by any stretch) and the payment amount is graduated depending on how much over you earn, from 4% of your income at that threshold amount to 9% once you hit $95,288 or above [1]. There is no real interest charged on the debt - the loan is only indexed to CPI every year, so that the real cost of the loan amount doesn't change. The repayment is treated like tax - either taken out as you earn your wage or squared every year upon doing your tax return.

The perk that rich people get is that if they pay their bill upfront (that is, each semester as they study), they get a 10% discount on the total cost of the tuition for that semester (apparently, off memory it was 25% when I went through about 5-10 years ago). If you put it on HECS, you instead pay the full amount.

Oh, and also for every domestic student, a semester of full-time study costs on the order of $3000-$5000, so a 3 year degree is about $18k-$30k of the above debt [2], depending on what you study. It's heavily subsidised by the government.

The system is funded, in part, by international students, who pay the full fee amounts (no government subsidy) if they choose to study here.

The major criticism of the system is that students can just incur this debt then flee the country. If they earn no taxable income here, they never have to pay it back no matter how much they earn overseas. I can't really think of an easy way to resolve this because it's impossible to garnish income from another country. Nevertheless, the system works reasonably well.

[1]: http://studyassist.gov.au/sites/studyassist/payingbackmyloan...

[2]: http://studyassist.gov.au/sites/studyassist/helppayingmyfees...
This is an a very strange launch and I'm not entirely sure who the target market is.

Serious gamers -- I doubt they'd be happy with Android games.
Kids -- no killer marketing/mascots.
Casual gamers -- likely wouldn't care enough, their phone is good enough.

However, if this gained an install base, I'd assume it would drive the nearly non-existance premium purchase market on android games up.
Sendloop Engage has a REST API which means you can integrate to your web based app, desktop app, iOS app or any other platform which can communicate with a REST API.
move to the Germany or to another country in Europe, (almost) free education is still huge benefit when you compare it with states
3d Printing at UPS
The thing is, the details of the 9/11 attacks were known to the government well before and were ignored or discounted. That actually argues the point that SIGINT like that of PRISM and XKEYSCORE is incredibly dangerous if it is seen as a panacea to the problem of human failure. Our signals intelligence is still susceptible to the vagaries of the humans on the receiving end.
I wouldn't blame just Republicans for drugs not being legal and the DEA being intact. Democrats get campaign contributions from police unions, private prisons, alcohol companies, pharmaceutical companies, and prison guard unions too.

The fact of the matter is that our politicians don't work for us they work for corporate interests. Also, before someone says we should elect politicians, please realize that the problem isn't the politicians. It's the American people. Americans are dumber than a box of rocks. They love their low prices they get at Walmart and don't realize how much we subsidize the company's employees via welfare programs because they refuse to pay them a living wage.

The baby boomers (and possibly my generation) will have to die off before cannabis and other drugs are legalized.
Uh, what? The only GPL code in Android is the kernel.
I often think about finding a winning lottery ticket for the same reason.

I find the odds indistinguishable from winning after purchasing a ticket.
Office for Android: Pretty but woefully incomplete
With this man in charge, virtual reality might finally go mainstream
It's actually the cult of law enforcement that we have to worry about.

Also- consider whether or not your mainlining of the 2 team ideological spectrum is a result of efforts to keep you the citizen from really pursuing meaningful change. You're right to blame the s/republicans/democrats.
If you are a SaaS owner, you can easily track your users and setup different "smart" emails to be sent to the right person at the right time;

- Sending a "come back" email to slipping away users

- Sending "Getting Started" email series to users who are in trial period

- Sending "Welcome" email to new users

- Sending "Share your thoughts with us" email to "loyal users"

These are just examples, you are limitless.

Sendloop Engage aims to maximize your SaaS business retention and engagement rates.
'Old' movies 'eh? Damn youngins.
Where are the users that come in to say "I disagree with this, but consider it's validity because.."

I would love to hear a thoughtful argument for how hiding the source of an investigation, including evidence used, is just under the letter of the law. Followed up with how 'overreaches' are bound to happen but are acceptable as long as results are shown(but evidence is not).
Referring to my post above, excluding the obligation to work additional years, a similar system is in place in Germany. Of course American tuition fees seem to make it infeasible.
Call me a jaded but 60k a year in revenue isn't won't pay the mortgage or put food on the table or clothes on your back. And if you wanted all three... forget about it.
This annoys the hell out of me. "Retirement account" here is a tax deferred account like a 401k or an IRA, right? There are limits to how much you can put into accounts like these, and in today's world it can be difficult to adequately fund a comfortable retirement on these savings alone.

If you make a modest income but are careful about your spending, it's not unreasonable to have leftover after-tax money that you can invest in other ways. That doesn't mean it somehow ceases to be retirement money.

> where they could use it for things other than retirement

Retirement isn't some thing you just go to the store and buy. There's no clear split between buying goods and services that are "retirement things" and "non retirement things."

Some people retire by quitting their job once they reach some magic number in an account, and then hope that they die before their balance goes to zero. This is increasingly harder to do if you don't want to be working past 70.

The age threshold for withdrawal from some of these tax deferred accounts can be a significant hindrance if you plan to fund your retirement in other ways such as by buying a rental property. You don't want to be buying the property at 60, you want to have already bought it, done maintenance, allowed it to depreciate a bit, etc. so that you can actually make a reasonable profit by the time you're 60.
Scandinavia is a possibility, since there are many degree programs in English. Germany is a fine choice too, but only if your German is sufficient to do coursework at a university level in that language; English options are more limited.

However not all programs will be free if you come from outside the EU.
leap.fm is a missed domain name opportunity... but fun project!
The U.S. has a really helpful student loan repayment program — and no one's using it:

http://www.businessweek.com/articles/2013-08-07/the-u-dot-s-...
Of course the discussion here has made be a bit curious, I wonder if you could "sign up banks" instead of having them sign up you. Lets say you mail a bank your preferred credit card contract to the bank, which basically said "by sending me a card you agree to the terms of this contract." and then layout the card contract you would be willing to accept. I wonder what the conversion rate would be. I'm guessing 0 but without evidence that is just a guess. Might be fun to run the experiment.
I have started a bunch of companies, mostly in services. The very best way to get into freelancing is to get work from your current employer. This assumes they like your work, they are not mad at you for leaving, etc. But often they are happy to pay you less (in total) to maintain things you have created for them. It works for you because you get your start in freelancing, often at a higher hourly wage.

Just don't be fooled by that higher hourly wage. I left my first job out of school (we are talking 1983 here) to double my hourly rate from $12 to $24 as a contractor for CDC (old mainframe computer company). But the lag in cash flow was a killer. As a freelancer you have to invoice for your time and wait weeks to get paid.

I cannot emphasize enough the need to sell. To get your first freelance job try calling a bunch of people. Heck, call me! I am looking for help on several sites. LAMP stack plus WordPress stuff. I would LOVE to have a reliable, responsive, developer working on my stuff.
How UrgentRx Crashed the Party at the Cash Register
At this point, can anyone debate that we don't have a rouge criminal element to our government? These guys are breaking the laws left and right and getting away with it.
I quite agree, but the 'morality police' stance is something I associate with the right (though not exclusively).
I'd also be interested in an email parsing library for Python. Last time I used Twisted to read email the parser was completely worthless and could not be fixed other than by rewriting it from scratch.