skysight-inc/HackerNews huggingface dataset:
One of my college roommates grew up close to Salinger. Many years ago (he told me the story in the mid-90s) he had heard from a local firefighter that after a fire at Salinger's house, it had become apparent that there was a large safe in his house that contained a number of unpublished manuscripts. We had read all of Salinger's work at the time so we had a lot of fun speculating about when and what would eventually be published.
I think it's important to pick a password that isn't in a list, or likely to be 1-2 transformations away from being in a list, and it's important to use a longer password, but apart from that it shouldn't matter as long as you use a different password for each service, and as long as the apps you use use bcrypt or some other real KDF.
Im in Mountain View and I can tell you that at least half of the problem is shoddy construction. East Coast houses are made to keep out weather and West Coast houses are made not to hurt when they fall on you.

And this issue is going to make someone a billionaire in the future. Urbanization is well under way and people are only getting noisier and more crowded.

Also, another area for huge improvements is in the legal system. Basically you're screwed if you have noise issues due to anything "normal" - e.g. music, talking, babies...etc.
right now I'm thinking ... h e l l o n s a
Always watch out for the use of the word Intelligence ... it has special meaning to them.
I would work for the rest of my life to pay for a device that turns my ears off temporarily. YC2020?
Getting A Job Was Supposed To Be The Easy Part
Facebook is looking for an ARM SoC server hardware engineer
How Technology Wrecks the Middle Class
Yes. Fewer arrows has worked well for Apple.

We _are_ taking machine learning more seriously (I claim some credit here). My team is integrating ML into Mathematica 10 as we speak. And we've experimented with deep learning. I think some interesting things will come out of that in the future.

I think a hybrid approach is pragmatic. There is much computational knowledge that can't be assembled from web scrapes, as Google's purchase of Metaweb indicates (anyone remember Google Squared?).
"appeasing Mozilla" is not the reason that trigger these warning or errors. Privileged apps have access to more powerful apis but are also subject to a more stringent CSP (content security policy) to prevent running malicious code that would potentially hurt the user.

If jQuery's build system has options to create a version that is compliant with our CSP, I don't see any reason to be up in arms.
Scott Forstall?
It sounds like you'd be happier without any government, period, which makes continuing this discussion pointless.
"the material (of the book) focuses so much on Java,"

This isn't really true. There is one section of the book (section 2 in Chapter 1 iirc) that details the minimalistic subset of java used, and there are a total of four interfaces used in the book (Comparable, Comparator, Iterable, Iterator) and each is explained very clearly. The code uses no inheritance, no fancy types, no design patterns. Input and Output are abstracted away by author provided classes with the minimal methods required to read in and write out strings, ints etc (vs struggling with BufferedOutputStreams or whatever in mainstream java).

In other words, Java is used as a very minimalistic pseudocode. (e.g http://algs4.cs.princeton.edu/11model/Shuffle.java.html). It is almost python like.

A simple imperative language is best to learn the basics of algorithms in. You can't appreciate functional datastructures before you thoroughly understand imperative ones..

Something like SML may have been better, but the minimal 'loops + classes-as-structs-and-no-java-heavy-machinery' approach in the book works fine. There are certainly valid criticisms of the book to be made, but an 'excessive focus on Java' is not one of them imo (and I don't even like Java fwiw).

PS: Thank You for your book reccommendations. The "Metric Data Structures" book looks really interesting. Ordered.
Anyone interested in getting a private mesh network set up in Silicon Valley? Seems like it would be a fun and educational project if nothing else.
Similar thing exists in Melbourne, Australia: http://www.melbournewireless.org.au/
Functional Reactive Programming on Android with RxJava
Microsoft Research is actually more about scoring government contracts than it is about making amazing products. Microsoft has worked on smart houses, wireless sensors, iptv, all kinds of things and they end up with products like the Kin...

And to the point of maximizing profits as the goal of capitalism... well if you care about only having rich shareholders and think investors should be the only meaningful winners in the equation, well then short term capitalism will continue to wreak havoc every few years.
Is money able to solve this problem, through better sound insulation in one's house?
The Clojure inventor (Rich Hickey) took most of the good ideas from arc and all the arc enthusiasts have pretty much changed horses long ago to Clojure.

I think arc still has some good points related to code brevity that noone else has fully duplicated yet.
I agree with you 100%. For those of us needing to run MySQL, what would be the best ways to minimize the dependency on EBS and maximize HA?
I watched the video (but didn't take part in the class assignments) last spring, and I want to paraphrase an important remark by prof Sedgewick that really struck a chord in my mind:

> Though we have faster computers, algorithms remain absolutely essential in our field, because the amount of data that we process is greater than ever before.

It was nice to hear someone in a position of authority clearly explain why this field of research is important. It also helps understand why he prefers tilde notation to big-theta notation; the former takes into account the constant factor of the fastest growing term, thus allowing us to compare different implementations that are all O(n^2) in theory.
Or even better dont't even store them at all.

If its an internal app use LDAP, Active Directory, or whatever other centralized ID system your company has. If it's a public app then consider using a federated approach like OpenID. It doesn't make sense for everything but if you can avoid storing passwords entirely then it's one less thing that can go wrong[1].

Course if you do store them then yes:

scrypt > bcrypt > PBKDF2 > ... If you get to here then you've got a problem!

Just make sure you choose a same number of rounds. PBDKF2 is fine for most folks if you have a large enough number of rounds. The old recommended default of 1K is not large enough. Ditto for bcrypt with a work factor less than 10 (or better yet 12). Your bet bet is to either use scrypt (who's defaults are paranoid enough) or choose a work factor for bcrypt/PBKDF2 that's has a decent CPU time (say .5 to 1s).

[1]: Though you do have to worry about the risk of compromise of the party your delegating too. For apps where this makes sense (say Google+ login to a Grouppn knockoff) that's a fair enough trade off for you an your users.
Google should be doing the same thing, and ease up on the incestual relationship with Intel.
Hint: if a half-dozen different people misinterpret your point, it's not them, it's you.
Moral of the story? Just use a password manager for your accounts if your biggest threat vector is someone getting a hold of hashes on a compromised server. You can make them as long and random as you like. And unless a major breakthrough in crypto occurs the attacker can waste eons trying to break it. Of course, securing the key to the password manager becomes that much more important. But if compromised hashes are your biggest concern, Ars rightly notes that password managers are by and large the best solution.
Sounds like you're an "anything that doesn't have static compile-time typing is dangerous" kind of guy.
In Nimrod, when you are declaring a variable with an explicit type, the syntax is:

var x, y: int

as opposed to the more concise C family way of doing it:

int x, y;

In C, there is no keyword needed to signal that this is a variable declaration. Similarly, in Nimrod, if you declare the return type of a function, you write it in addition to the "proc" keyword.

IMO, the C++0x/D way of declaring a type inferred variable/function, using the auto keyword, is superior, because it is an alternative to specifying the type, not in addition to specifying the type. The Python way, omitting the type entirely, is not really suitable for a statically typed language but at least has the advantage of brevity.
I'm now imagining a science-fair / makerfaire type demo project – some Arduino and RaspberryPi pairs with a few RC servos, modulated laserpointers, and webcams – with a "ground station" searching for a "satellite" which might be a quadcopter or a kite or a helium balloon…

(And there's a Maker Faire here in Sydney later this year…)
Vim Recipes is a dead link. There's still a pdf and a github out there, though.
Ok, I may be confused. I thought that with an unsalted list, you could try a password (generated by your algorithm of choice, whether that be dictionary based or brute force) and compare it to the entire list of hashes, because Alice's "123456" would hash to the same thing as Bob's "123456". But if the list was salted, Alice and Bob would have different stored hashes - and so you would not be able to parallelise cracking across users.

Yes, if you only want to crack Alice's password, the salt will not slow you down. But if your goal is to crack a million, wouldn't the salt slow you down?

If I'm missing something, I would really like to know. Always good to learn something new!
agreed, this plugin is good and getting better.
You might hope that we would become habituated to reoccurring noises in our environment, but the opposite has been shown empirically. [1]

The study showed that while regular office workers become habituated to office chatter after 20 minutes of exposure, their habituation resets to baseline after only 5 minutes of quiet (measured via memory tasks). The irregularity of the noise is what kills us.

The only effective solution I've found against ambient ear-shocks is to overpower them via headphones and regular white noise.
Artist gets a tattoo only visible by smartphone
Yes, but Xbox did well in spite of Ballmer. I believe Ballmer and Gates were pushing for Xbox to run Windows XP on launch (like actual Windows with Office) and the Xbox team had to fight hard for it to be a game console.

The only reason Xbox even happened is that Microsoft management was terrified that the PS2 was effectively a computer being sold by the millions - a real threat to Windows and Microsoft. If the Xbox team didn't stick to their guns, the original Xbox would have been a monstrosity.

You could say the Surface was a poorly executed version of the same idea. iPad is killing PC sales, so try and jump in and take market share. Too bad Microsoft doesn't have people who really "get" the iPad building and selling the Surface. They eliminated the Courier team.
This Guy Has a Digital Tattoo Viewable Only by Cellphone
Wrote this on the topic:
https://news.ycombinator.com/item?id=6078124
So sad, it would have expired last year if it had been filed only 6 months earlier.
The threats to passwords are generally two-fold:
1) SQLi leaking the contents of your database to the public.
2) Malicious insiders with access.

Blocking SQLi should be every web developer's first priority, not debating the efficacy of password hash algorithms, salting, and so forth.

Preventing malicious insiders is more complicated and requires other defenses besides the underlying choice of password algorithm.

scrypt, bcrypt, pbdkf are all fine in preventing the ill effects of #1 as it pertains to passwords, but prevent #1 at all costs nonetheless. Not only are your password hashes at risk, but your entire serving infrastructure and everything you consider sacred behind your firewall. Game over.
Hi Jenna,

Disclaimer: I am a Mozilla Rep. When you face this kind of issue there are some quick ways that you can reach us for feedback and issue solving:

1) You can write to app-reviewers@mozilla.org
2) You can talk on IRC channel: #app-reviewers on irc.mozilla.org

The IRC is the best option in my opinion because there are always a bunch of people there and its quicker to talk to a human than to exchange emails.

Some marketplace tools are still evolving and its only getting better. Whenever you find false positives or bugs in the app submission process, you can fill a bug report on bugzilla. People will notice and act upon it.

Also remember that the Firefox Marketplace is not your only venue for distribution, you can distribute your app on your own site using the Open Web Apps API (http://wiki.mozilla.org/WebAPI). This API works well for hosted apps and even though it is documented for packaged apps as well I am not sure it works for privileged packaged apps yet.

Firefox OS is a great system with lots of potential and Mozilla is more open about its processes than other vendors. I hope you stick around with us and keep developing great apps. I am sure your RSS reader will be aproved soon, can't wait to use it (and I like the flat version more than the previous one).
Uber To Purchase 2,500 Driverless Cars From Google
I'm sorry if I'm misunderstanding, but are you saying that application developers should not use salts at all?
Simply plan your next day. That’s how I finished my app
I know some (most?) of you reading HN saw this last week, but remember that you can use Coursera-dl[1] to download the material for offline reference.

[1]: https://github.com/dgorissen/coursera-dl
I found this link which is basically what the prof said: http://www.bbc.co.uk/science/humanbody/mind/articles/persona... and an actual study: http://psycnet.apa.org/index.cfm?fa=search.displayRecord&UID...

Of course you should keep in mind potential confounding factors, but it's certainly interesting as an explanation. I'm not sure if there've been any studies where they took fMRIs while doing the lemon juice test, which would probably be a bit better.
That's basically the consensus among professional academics on the matter. Also among well respected programmers in senior roles like Joshua Bloch and John Carmack.
It may be perpetual, but it does loop. Now of course if it were a fractal, you could dive forever :)
I haven't implemented this on EC2 myself, but Galera Cluster is a godsend for MariaDB/MySQL HA. Multi-AZ is probably viable, but multi-region may hurt.

A multi-AZ cluster with ordinary binary log replication to another region (with preparations to launch a new cluster in that region based on that slave on short notice) might be a good solution.
Remember: you'll be hard pressed to buy a quality wrench for 5 dollars, and - perhaps more importantly - why are you breaking them in the process?!

I suspect your process should use the wrench on lower wear items than computers, for example the desk (if plastic or wood) and things sitting around it.
Villa tadilatı ankara
A response concerning the claim that Borges was not political: http://lareviewofbooks.org/essay/borges-politics-and-the-pos...
I live in the mountains (Central Arizona) and I have garnered some interest of other people in my community to set up a local mesh network. Really good in emergencies (e.g., east coast during Hurricane Sandy).
I don't particularly think the situation at present is good, or that we should rest on our laurels. I just take issue with that way that it's presented as a decline from some golden age when we knew how to educate people properly. I don't believe humanity as a whole has ever been that smart.

The issue, as I see it, is that there are ever more jobs requiring intelligence, and ever fewer that don't. Employers complain about the shortage of people with technical skills because they need more of them, not because there are fewer than there were in the past.
It doesn't, or at least it is not obvious from the documentation how to do it (yet).

As the one person on the list mentioned, the warnings should not be the reason for the rejection because they were kind of false positives, the only problematic thing is that they were.

They are still working out the issues I assume, it is a really young platform yet so it kind of could have been expected. I just wish there was a possibility to talk to the reviewer and ask them more questions.
Wow I haven't used jQuery Mobile in over a year and it's still slow and terrible as ever? Well at least it wasn't just me.
LastPass has a secure password generator that lets you specify character set, length, etc. It has extensions for all major browsers, support for two factor auth, form fillers, one time passwords, great iOS and Android apps.

http://www.lastpass.com

Big fan here. Just thought I'd throw in a little discussion from the user side of things, as I see some great points about being a responsible maker.
There're also Node.js bindings for Gumbo if folks want HTML5 compliance:

https://github.com/karlwestin/node-gumbo-parser

It might be interesting if someone were to implement a Cheerio-like API on top of that, as Cheerio has a nicer API but Gumbo's parser is more spec-compliant.
It's funny to see Firefox turn this back into HTML, CSS, and JavaScript with PDF.js...
No, it is a comment about the idea that the failures come from it not being free enough.

Saying that something demonstrates the dangers of x by saying that the things that are wrong with it are features of it moving in the direction of x is not the same as saying that the thing is x.

I could say that something nearly catching fire and getting badly scorched is a perfect demonstration of the dangers of fire, but that would not mean that I think that the thing has actually caught fire, it just means that I am using a perfectly normal rhetorical device to describe that I think that the fire is a danger.
Indeed you can self-host and use the owa API to let user install your hosted or packaged application. This will not let you install privileged apps though since they have to be reviewed.
From the end of the article:

"Whatever the shortcomings of the Foreign Intelligence Surveillance Act oversight system, at least there is, theoretically, a check on the agency’s activities. But in New York City, for Muslim citizens and activists of many stripes, there is no such outside system meant to safeguard their privacy. The NYPD conducts its oversight in-house. City Hall doesn’t review intelligence programs the way Congress does. Courts can step in to settle questions about constitutionality, but only if somebody finds out about programs that are designed to remain secret forever.

In 2010, the Demographics Unit was renamed the Zone Assessment Unit over fears about how the title would be perceived if it leaked out. But rakers still troll Muslim neighborhoods, filing an average of four new reports every day, searching for hot spots. The Muslim community is marbled with fear, afraid to speak openly because an informant could be lurking near.

Kelly is unapologetic. Like the department’s use of the tactic known as stop-and-frisk, raking is a tactic Kelly maintains is legal. He said the program is operating just as it always has. “Nothing” has changed, Kelly boasted to The Wall Street Journal earlier this year.

In many ways, Ray Kelly has been a remarkably successful commissioner—but when it mattered most, the Demographics Unit was a failure as a matter of police work. And now, the lawyers in the Handschu case [which resulted in the original prohibition of the NYPD spying on people not suspected of crimes] have returned to court, arguing that Kelly and Cohen, in their effort to keep the city safe, have crossed constitutional lines. Regardless of the outcome, the NYPD’s programs are likely to join waterboarding, secret prisons, and NSA wiretapping as emblems of post-9/11 America, when security justified many practices that would not have been tolerated before."
When I truly want to concentrate and need silence, I wear noise-canceling ear plugs. The same type you use to protect from a chainsaw-sounding snoring roommate.
I wouldn't assume most readers of HN would be using these kinds of passwords for anything important, no?

I've been using SuperGenPass with one of the XKCD 4 random word style passwords for years and it works great. I don't store it anywhere, just type it in to the bookmarklet.
Microsoft, infamously, has been willing to lose billions year after year on new products in the hope of future success. They spend as much as anyone on basic research and incubations with no certainty of productization. For better or worse they've also taken on major redesigns of existing products focused on future scenarios at the risk of damaging short-term success (e.g., Windows 8, office 2007). None of those things fit his narrative about narrow short-term profit maximization.

(The example of the above he does mention - Xbox - he dismisses because it's not that profitable! So when something is profitable it's a sign of narrow short-term profit focus, but if it's not it's irrelevant because profit is what matters. Huh?)

Microsoft does seem to have trouble turning its R&D activity into breakthrough products, but his attempt at a narrative explaining why just doesn't fit the facts and doesn't make sense.
The comments here are better: http://climateecology.wordpress.com/2013/08/19/r-vs-python-s...
What backbone protocol is largely used for these projects?
I only ask because the range of even 802.11ac would be a limiting factor in these sorts of networks.
> Without Objective-C

GNUstep.

> it is no better than using a *BSD.

Actually it's quite likely to be worse. Is there any good reason Apple is using that Mach stuff other than momentum and having developers who know it well? IMO any given BSD project has a more coherent design than XNU.
If you want to fix the memory leak, I remember you need to do `window.close()` after the job is done.
Is Instagram An Identity Theft Goldmine?
I meant that you can find quiet when you have the choice of where you want to be. If you're in an office that's noisy, obviously you can't really leave and work somewhere else. But even in a noisy office... you could just use earplugs. Because it's so easy to find or create quiet, it doesn't really seem worth it to restrict noise.
Those projects drive Google's vanity and are ambitious in their own right without acknowledging Google's recent massive failures.
MS was not convicted for including a browser. They were convicted for telling computer manufacturers that they could not buy Windows if they were going to also install Netscape at the factory. That is illegally using a monopoly in one market to interfere in another.
Static typing is greatly beneficial, with HM it doesn't require a lot of annotation (people that use it find type annotations to be beneficial anyway). Languages that don't offer strong typing and GADTs are blub languages.