skysight-inc/HackerNews huggingface dataset:
Pics from last year's

http://bambax.smugmug.com/Other/2012-10StartupSchool/2708004...
Yeah, I also found it very well-written, reasonable and honest. I'm in a kind of impressionable phase, in a good way, where I look at things like this like "whoa, minimize time sinks, that is a great thing, let's do that."

One thing I've started to learn in my 20's is to really enjoy myself. Seems fairly important, don't know why I didn't think of it earlier...
The title page credits the document to a presentation by a detective in Oregon. Have any journalists tried to verify the source and accuracy of this document? It's unclear from the article submission why it was submitted or how the submitter found it.

Edit: I just read the current top comment listing the names of the supposed presenters.
otpauth://totp/johndoe@google.com?secret=SECRETKEY1234567
I don't have root on this system, and installing Firefox without root is such a pain I haven't gotten around to it.
I've once come across:

if (!Boolean.FALSE.equals(aBoolean)) {
// ...
}

I was pretty baffled.
I cannot fathom why people still rely on Google for their core business needs.

At my last place of work I built an SMS system to be used as the second factor in the intranet login. I _could_ have used a 3rd party 2FA, but the most _logical_ reason to have our own system was ... well.. we didn't want to rely on anyone except ourselves.

Didn't take me long and the most difficult part was finding enough USB-connected phones to be used as SMS senders.

Guess what? The system still works today, why Google is broken.
(I've studied two-factor authentication using HOTP and TOTP, and built a node.js implementation of it.)

The QR codes simply divulge a URI with the secret key for generating tokens. They look like:

otpauth://totp/[keyname]?secret=[secretkey]

The secret key is used in the app in conjunction with a moving factor (usually 30-second intervals of time) to generate a numerical hash of sorts for that interval of time, which is then truncated to 6 characters.

The QR code itself doesn't have any sort of time limit on them; they only serve to transmit the secret key.
VRFY is usually disabled. The only way to verify an address is to send a message to it. If it doesn't bounce back, it... well, probably exists.
Unless it's clearly stated sarcasm gets garbled over the wire. So in the hope of helping those who don't get it I decided to do the right thing just to be on the safe side. ;)
I'm using an older WDTV LIVE and indeed, I never had issues with decoding stuff. The downside is that it's somewhat limited, e.g. I cannot adjust audio sync which sometimes gets quite annoying. Being able to jump 30s (and such) back and forth instead of "analog" rewinding and fast-forwarding would be nice as well.

I'm still waiting for a device that handles XBMC well, is responsive, has an optical audio output and offers DTS pass-through -- apparently there's no such thing. Lack of support for DTS/DD 5.1 pass-through is the main problem; last time I checked Minix seemed to be close, but not there yet.
High time! This is good news for Google
This is a great read. I'm 27 and struggling to come to terms with many of the issues OP listed. Being naturally introverted, socially awkward, and overly elitist, (4), (5), (7) and (10) really struck a chord. My younger sister (at 23, she's virtually my opposite) is social, has significantly more friends than I do, and is probably much happier; I've always been jealous.

When I was younger, I thought that my intellect would take me more places than it actually has. I was never social (and we moved around a lot), so - even now - I find it very hard to figure people out. It's something I try to work on every day but it's very much a work still in progress.
The protestor at Tiananmen Square changed nothing. Twenty-five years after the incident, most chinese have no idea it ever occured; If they've heard about it at all, they heard about a minor student riot. The rest of the world has seen that totalitarian tactics do work, and that false promises and imagined enemies are the best ways to control a population.
To get back into your account you're provided backup codes that you're supposed to store somewhere safe. Otherwise, if your phone were stolen you'd be out of luck, yes.
Almost as if Apple is twisting the knife.
> You can't really fix that level of sheer incompetence, ignorance, and arrogance all wrapped into one.

Sure you can. You can tell them why it's wrong and point them at reading material to fix it. Fixes incompetence and ignorance, and if you're lucky, arrogance. All wrapped into one.

Everyone had to start somewhere.
wow! Google's come up with something new again.
New location from previous years at Stanford.

Flint Center
21250 Stevens Creek Blvd, Cupertino, CA ‎
This. I scanned one QR code with a regular QR code reader and came to the same conclusion...

I haven't actually tested it though. :-/
if input_email in valid_emails_set:
send_email(input_email, another_param, etc)

Their solution, while isn't wrong, could still be improved. With a somewhat modified 2822 regex with a more strict domain rule. But I would also assume you could just query the db.
It's #1 on HN, it has plenty of exposure already.
fine, outdo me haha. Saving the Key is useful with AWS MFA because if some reason you loose your MFA Virtual Key (app updates and you loose the key) you have to contact AWS to have it reset, Can't just do it yourself.
I think it's just the image of the cleverly re-purposed interstate 404 sign. I wonder if they did that for other status codes (like 503), too.
Yup. I don't use tramp that much (well, in the last 4 months I used it daily, but...), but having it is great. Every time I have to edit more than 4 lines in a server I resort to it (if it's less I use nano or vim, because it usually means I'm in a ssh session editing some config file)
In my opinion a great developer is the one who finds a solution to a problem. It doesn't matter which technology he/she uses. If your organization is already using some tech then you expect the developer to use the same tech so you don't have to hire 10 people for 10 different techs. Any any decent developer should be able to look at any code and figure out what it does and be able to tweak a few things here and there.

More important things are proper comments, readability of the code and documentation. If there's a bug and you are not around, someone else should be able to fix it by looking at your notes. The bug fixer doesn't need to be a guru of that tech.
Our company started writing their own verilog & soon we'll have chips for our custom designed smartphones. Yay !

Till then, we are stuck with silly can phones :(
I had a look at god mode when it was posted in r/emacs and it looks neat. I'd choose it above sticky modifiers if it wasn't because I use evil which kind of supersedes (or more precisely, covers most of it) them
I was about to respond "Haha, no big deal, I use my Google Voice number". The flaw in this was readily apparent.
To disable auto-update on recent Android:

Play Store -> Search "Authenticator" -> Select "Google Authenticator" -> Press "Menu" -> Deselect "Auto-update"
> Microsoft clearly did not need to purchase Nokia to have a Windows Phone.

They could not afford having anyone else buying Nokia. With the low stock valuation of Nokia, that was a realistic and very scary scenario for Microsoft. I see it as a pre-emptive move of Microsoft, and a move of Nokia (the non-phone part) to preserve their long-term independence.
Working long hours as a matter of course is really bad for you, and your company.

There's of course the personal cost you carry, being stressed and overworked constantly affects your health and happyness adversely.

Productivity also suffers, intraday productivity drops off sharply after more than 4 hours, and you should really stop after more than 8, especially if you're a knowledge worker. Over long periods of working long hours, your productivity becomes permanently depressed, where you might start your day already with only 1/3rd of the productivity a non overworked, rested you would have, which is basically worse then what it would be if a rested and non overworked you would do after a single 12 hour day.

If you let your employees work long hours continously, you are basically accepting that for the price you hired them, you will only get about half to a quarter of an employee. That's heck of an expensive way to run a business.
Errors Cast Doubt on Japan’s Cleanup of Nuclear Accident Site
Man. Reading posts like these has several effects on me. One is utter shock that anyone could be so stupid. Another is to remind me of how little I know (because I'm sure in the eyes of someone who actually knows anything about security, I'd probably provoke the same reaction). I'm also amazed that some of the people responsible for these things can still find work.

Here's my own personal story. The other day, I had a brain fart regarding my password for my online banking account. So, I got lazy and just clicked the "forgot password" link, answered the security questions, and within seconds, I got an email. It had my old password in it. Yes, my bank stores passwords in clear text. sigh.

BTW, I'm also looking for a new job right now, so if you're after someone with 2 brain cells to rub together who also happens to be a decent Python programmer, shoot me an email. (It's in my profile.)
Yeah exactly. This should be a top comment. But apparently everyone is moving on, business as usual, as if the case were closed. And a lot of people could not access your accounts. And read your email.

Apparently some UI-issue is a bigger threat to user-satisfaction.

Weird.
Have you tried evil? I mostly live in insert mode in emacs and when I need to do "something" I press Esc and do the magic
For a story like this I'd go to the NYT not "rap genius" http://www.nytimes.com/2013/09/03/world/europe/russia-issues...
Can anyone comment on how this will do as a media server? I.e. will it be able to decode 720p and 1080p h264?
Hopefully that venue will be even larger, so that more successful applicants can attend for the truly awesome experience.
My two cents : My grandfather runs a small vending machine business.
A few years back in France, snack vending machines were forbidden in schools in France. My GF replaced the snacks with fresh stuff (fruits, healthy juices, ...).
The problem was not so much the feasability than the fact that students wouldn't be ready to pay for healthy stuff.
He ended up removing the machines, relocating them to companies and putting the snacks back in.

IMHO the idea might be interesting, but you probably have to make it "cool" to buy your products, which means build a real identity around your stuff.
How to spot a fake Canon flash
Userscript: Expand the tiny guess map on GeoGuessr.com
It is. Here’s the science of why by Heidi Grant Halvorson PhD citing research by Carol Dweck PhD. http://www.psychologytoday.com/blog/the-science-success/2011...
Awesome. Yeah I clearly am out of my depth :)
From the linked discussion ([3] above):

> 1. We use a 256 bit key derived using a salt and PBKDF2.

> 2. AES is used in CBC mode with a different IV for each account.

> 3. The key is store on the cellphone only and is never transmitted
It looks like US commentators are confused.

1. Microsoft did not buy Nokia.

2. Microsoft did not buy Nokia's patents (it only bought licences).

3. Microsoft did not buy Nokia brand (it can only use the brand in smartphones for short time, in S40 and S60 longer time).

Microsoft bought only Nokia phone business. What is left is Nokia Networks and Solutions, HERE (maps) and Nokia Advanced Technologies (research and development arm of Nokia). Nokia is also prohibited of making it's own phones until 2015.

Nokia could buy Jolla (company founded by Nokia engineers) and be back in smartphone business with Nokia brand in 2015. I don't think it will be, but it could.
here are some other graphical illustrations of the operators from relational algebra - http://bandilab.org/bandicoot-algebra.pdf

It's focusing on bandicoot language, but concepts are taken from the relational algebra. It should match the logic of SQL.
Multi-Agent Simulations of Scenarios for Syria
What is the benefit of applying the glue in a "delicate grid" of "fine, intersecting lines" (as opposed to the bad "solid slab" of glue)?

Also, how are the "fine, intersecting lines" of glue extruded?
Frightening Digital Faces That Morph Based On Mood | So Bad So Good
You have your own mobile network? Sweet. I just use this open source thing that doesn't rely on anyone else
OP here.

I created this little script out of my own frustration. The game is great, I shared it with a lot of friends. But what really annoys me is that the guess map is not expandable. It's just tiny.

This userscript tries to remedy that. It adds an "Expand Map" button to the UI and makes the map almost fullscreen (http://s3.amazonaws.com/uso_ss/23108/large.png?1378278171)

To all the fellow hackers: it has an unfortunate bug. The Google Map does not resize automatically when the window is expanded, the browser must be slightly resized to trigger the Google Map to expand as well. Since the author used Backbone to write the app, it's completely encapsulated and doesn't allow access to any variables. If you know how to fix this, I'm listening!
SpaceX to Test Reusable Booster Technology During Launch of Weather Sat
I don't think this is happening on Android, seems to be an issue with an iOS update.
Not an iPhone user, but I wonder if you could access the key data manually and restore it afterwards?

On Android that's possible (if you have root....) by accessing the key database (sqlite in that case). I did that to duplicate the keys from my handset to my tablet.
I concur. If another laptop of the same model doesn't show the problem, that points to a manufacturing defect.

It can be easy to route noise through an area the designer didn't intend with a simple solder blob or a defective power supply bypass capacitor. 24MHz could just be a frequency of a crystal oscillator.

I'd want to know the actual power level of the transmission, but to measure that accurately, you'd want to put the laptop in a shielded chamber.
You know what would be awesome?! If the developer in question happens to frequent HN and responds to this thread, eh?
> "The topic at hand is power emailing. Not people who write a message to their family once a week as the majority of their email."

That use-case is completely valid. Unless you're going to argue that GMail is meant to be a'power emailing' tool, which I'd disagree with. Optimising for something that doesn't suit the majority of users is usually a mistake.
wooooow
I think this is a good reminder to use the auto-update feature wisely, on all platforms.
So your account has not gone away, nor has it been deleted, nor has any magic happened; your account is still there safe and sound on Google's servers, it's just that the settings in this one mobile app have been wiped, correct?
Same with Windows, and Linux as they just copy Windows/Mac GUIs and never bother to finish them off. The problem is Raise-on-click, means you can USE overlapping windows, and drag and drop breaks. My theory is all GUIs are fundamentally stuck in the year they were first designed, so 1983 or so for Windows/Mac. Full screen, almost single tasking. RISC OS, being designed in 1986, is better, as a GUI.
I feel like it's a valid concern for someone to want to know what's on their system. Sure virtualenv is a great solution, and I'm sure the person you're responding to knows about it. But there is a place for skepticism in required dependencies, and perhaps the OP parses Perl better than Python.
Probably closer to 1 in 20 if you really get to #1 for that long. It also depends a lot on topic, and how many people it strikes a nerve with.

https://news.ycombinator.com/item?id=2057706 had 12 votes and only made it to the middle of HN frontpage, but got written up in TechCrunch on a slow news day.
I switched to HDE-OTP[0] a while ago and never looked back. I've not encountered any bugs with it and it's also better looking.

[0]https://itunes.apple.com/gb/app/hde-otp-generator/id57124032...
On HN, karma is a commodity. You've put the time and effort into growing your karma legitimately and if you don't have a problem - why would anyone else.

Think about it, how do we know this isn't the person who bough it having doubts about the purchase?
Yes, I agree. Probably not into the more philosophical objections and assessments. But there's probably a stark difference between being aware of riding a wheelchair and riding another human body...The latter being aware of what has been done to your body..
Things I've Learned in my 30's

1. My only true regrets are the opportunities I failed to take.
> didn't want to rely on anyone except ourselves.

And the remarkably secure telecom system, of course.

Google's style of 2FA is IMO technologically superior in that there is no communication after the initial seed. It also appears to be somewhat standardized -- see others posting about Authy. You could have your own handwritten program running the algorithm if you wanted to be independent.

The real screw up on Google's part is not instructing users to have an encrypted backup of their 2FA data.
Three of four comments you left in this thread call Jason's name and attempt to discredit him, with little substantial criticism addressing Gmail UI.
Oh okay, not a big dog person here. haha. Interesting.
This isn't addressing the (obviously rhetorical) question of whether they knew in advance, but now that they do know, fwiw:

They have the ability to yank the updated version any time, 24/7, at a moment's notice, until a fix is available.

They also have the ability to update the release notes after the fact.
Ads can't be effective, if you'd made a product that was better than what I use, and specifically targeted at me, via magic(?), I'd already know about it because I would have read a review. Ads are just lies. But the question was about popups asking you to sign up, do a survey, etc. I already block ads.
The problem with token reuse is the same as with password reuse: If a site gets compromised, your token is worthless. If the token is burned into hardware, then your hardware is now worthless.
looking forward for spacex/elon musk to post the video after the launch
Yeah, but how many go on to major media, like Fox Business News? I suspect that had a lot to do with the success.
> Every single legacy application I've ever worked on has had analogous code buried in it somewhere.

I'm not old enough to be responsible for stuff like that but I am incompetent enough.
s3cmd has a sync option that will do this.

If you're looking for something a little more robust, I just released this a couple of days ago-

https://github.com/HeyImAlex/s3tup

It's still in a really early stage but I've been using it to sync and configure my personal site that's hosted on s3 and it's worked well so far.
What is the official name of the most popular work visa in the United States?
Yes, but most HD content is delivered with DTS audio, and the CPU chokes hard on that. So either you output directly via HDMI passthrough(which in my case means a long ass cable from the projector to the speakers) or reencode.

Also, even if HDMI audio works for you, XBMC interface is sluggish in the RPi. I'd check anything else for serious XBMC use.
You assume "in valid_emails_set" doesn't make a query.

It's fairly trivial to define your own __contains__ in python.
They have the ability to yank the updated version any time, 24/7, at a moment's notice, until a fix is available.

Not when iTunes Connect is down for maintenance, they don't. Worst possible timing.
Global CTF challenge
Forgive my beginner question:

What makes clock gating of SPI & I2S difficult?

As an example component, here's a SPI mux by Maxim that has 8 separately-controlled SPST switches for <= $3.30 (probably much cheaper at scale). http://www.maximintegrated.com/datasheet/index.mvp/id/1281 So, if you utilize this fully, you could clock-gate 8 separate SPI components for < $0.42 each, right?

Is a mux the wrong way to do it? What's the proper implementation?
Apple Announces September 10th iPhone 5S / 5C Event
I don't see how regular expression come in here. They'd have a list of valid addresses (in a Python dict or in a database or wherever) and they check against them.
That link isn't really relevant. It's about probabilities. Of course women can pick up a gun, or make fancy careers, or murder people, or abuse kids, or whatever else you can imagine. The likelihoods for them doing it is differrent than for men, and the reason is partially in incentives.
They mean different things - reaching out is more specific about who is initiating the conversation, and it also doesn't necessarily imply success. I may have reached out to Bill Gates yesterday to see if he fancies giving me some career advice, but it's unlikely I talked to Bill Gates yesterday.
Redis plugin for Dokku
I wrote a small plugin for dokku to easily create redis containers and link them to deployed apps
For example, you can buy a Nokia 520 for $100 without contract. You get a well-built phone. Add a 64gb Micro SD and you have a very capable device. You can download worldwide HERE maps on it for offline navigation, for free. Or use it as a music device with one of the available Music services.

And you can expect it to be updated for one or two versions of WP ahead.

I'd say Windows Phone is a much better value than people know, and for most people, better value than Android.
Supposedly yes:
https://community.freescale.com/thread/301478

Don't know how stable Linux support is, though.
What do you guys do that duosec doesn't?
> mmariani 41 minutes ago | link

> Clearly you must be joking

No shit.
Without the settings in your authenticator you're locked out of accounts that require a 2-factor token from it, unless you've got backup tokens printed out.
Yes, but this is the mobile app that lets you log into your account on Google.
I hate code names, they are meant for the developers but still get used after release. Then you get support calls from people saying "Oh, yes I've got that Lion computer."

Stick with a simple number, people generally can count and know how old something is by its number. Who knows (without looking it up) how old Oneiric Ocelot is?
Related: will iOS 7 let you turn off the auto-update feature?
>Apparently people are having issues with GA on iOS7 though (it tends to forget the keys),

Yep. I opened mine one day and all my keys were gone. It's a real pain.
Well, a rant:

* Why does each one of them use different parameters for the same stuff? WHATEVER_URL could be REGION (WHATEVER = EC2, ELB, ETC, ...). One uses a config file for ACCESS_KEY_ID, another one wants a environment variable. Plus they use different names for common stuff.

* Why do are the command line arguments named inconsistently across these tools? --whatever, --what-ever

* Why don't they fail on command error? Right now this only happens if there's a configuration problem - if you send a command and there's a problem (like S3 access denied), it still returns 0.

* Why don't they provide synchronous commands? Right now I have to do the polling myself. Super annoying.

Anyway, I've been using the ones included in Amazon Linux - I hope they were the latest version. If the new version fixes this problem, feel free to correct me :)
Correct. As long as you have a backup method of logging in (one time use password, phone # recovery, etc) you can get back in and register new 2FA.
What 3 Words - A Standardized, Accurate Address System (Anywhere in three words)
Thankfully yes it does.
Code-sharing site GitHub now offers two-factor authentication to its users
well nokia is the number one supporter for WP.