skysight-inc/HackerNews huggingface dataset:
I taught myself to program when I was 11, using GameMaker, which had this neat scripting language called GML that hooked into the editor to control things above and beyond the simple actions built in.

Learning about functions and variables made algebra ezpz when we learnt it later on. Matrices were multidimensional arrays (I know, not quite the same in terms of maths, but hey I was young).

More importantly, programming taught me how to approach logical problems the correct way. I'm super thankful for it :)
My 'source' was merely hearsay :)

It seems there's a wikipedia article on the dispute:
http://en.wikipedia.org/wiki/Fewer_vs._less

Which mentions the 'rule' started to get pushed around in the 1800s, though 'Less has always been used in English with counting nouns.'

I suppose we'll always be stuck with this ambiguity in English since there's no formal authority to tell us how we should speak/write.

From my own observations, having grown up in Australia and since moved to the US, I must say the common practice is notably different, I almost never heard anyone say fewer in Australia, but have noticed that many Americans (like the poster here) seem to be on a crusade to ensure less isn't 'misused'.
The problem with having gradual engagement in something like OkCupid would be that the threat of a scammy bait and switch happening to you. For instance you'd be browsing the limited (curated / highest voted) list of people in your area, and then when you go to sign up they are no longer there or unavailable.
One way to submit your fingerprints into a single database for free in an organized matter. Good move!
Besides the problems with email delivery speeds, which tend to make this frustrating in reality, this also has the problem of being different. And users don't really want to deal with different just to log in to your site. They know userid + password, and there is no learning curve.
And a very-not-context-free grammar!
Reminds me of an old idea I had a couple years back. I assume it's a silly idea driven primarily by my own ignorance of these tools and EE in general, but it seemed fun.

The idea was to start out with some software similar to this. Something visually impressive to keep it interesting for beginners, but technically sound to make it useful to those who know what they're doing. It would be open source, internet connected, easily accessible and most importantly simple to create and share ideas.

From there, let people make some interesting things for school, work, play, whatever, ideally sharing said creations and try to raise a community around the tools and creations.

The next stage would be to add a 3D rendering component which would allow people to create "machines" that could be run by their virtual electronics. Something like virtual fabrication. The ideal being to grow those interfaces and try to lead the community towards building virtual robots (that are technically feasible).

The eventual goal would be to build a virtual world on top of all of the above tools. Something like MechWarrior, but with engineers and industrial designers building virtual mechs from the smallest components to the large mechanical fabrication and then getting into all out war against one-another, adding to the mix less technical players to partake in the human elements of combat (generals, soldiers, medics, scavengers for destroyed mechs, etc).

Probably ridiculous, and if all went well I assume it would take years of work and planning, but it seemed like a fun idea to ponder.
I submitted it too https://news.ycombinator.com/item?id=6352371

It's weird that it has received quite a few votes each time and never made it to the front page. Was it a timing issue (late night, early morning, non-American hours) or is YouTube "weighted down" somehow?
I agree with you. I came here for some insight on the new tech/software, got a mega long NSA rant thread instead.

It's like any new product/app created will now get some NSA snark unless its a link to a github repo. And even then I'm sure there are ways...
That is the maximum for the willful infringement of an image that is registered with the copyright office [1] and awards are highly vaiable. [2]

[1] http://en.wikipedia.org/wiki/Statutory_damages_for_copyright...

[2] http://www.ipinbrief.com/whyitsdifficultpredictstatutorydama...
A lot of cool rendering/modeling research seems amazingly well-suited for the film industry and this is a perfect example ... besides the obvious applications in making CGI versions of real-world scenes, you can just imagine the director saying "oh no, that lamp is in the wrong location in all that footage... move it (without reshooting)!"

I wonder if it's just a coincidence, or whether the mega-bucketloads of money the film industry throws at CGI are a major factor in funding related research even in academia?
Exactly. More Features != Better Product.
It's viable. Just don't replace passwords with it, offer it as an alternative way to log in alongside.
When you build iterations of the same app, you are essentially working on just one app, refining it, probably making it perform faster, look nicer or just architect it better. That, to me, indicates quality over quantity. That's pretty much what I meant in my original comment. The lady who posted this is building 180 different small apps in 180 days, many of them aren't refined or related to each other, that's quantity over quality.
Sorry, you aren't going to change anyone's willingness to talk about the NSA spying be complaining louder.

If you are comfortable with the current NSA behaviour, you are part of the problem.
Smoke and mirrors: The iPhone 5C was never the ‘cheap’ version
> They now need not implement any cryptography.

This sentence implies to me that under the current system, sites need cryptography, because sending login information in plaintext is not secure enough.

...and that the solution is to use email, because we already treat it as if it's secure.

...even though it sends the data in plaintext.

Okay, so most end-users probably accesses their email via https these days, but it's a (potentially) long journey from the website to the email provider's server.

Is any of that server-to-server journey ever encrypted? I'm no expert, but my impression has always been that it's not.
I have never seen another search implementation that only allowed you to search one word. You don't treat each word as an isolated search, you simply check that each word is contained in a field. I guarantee that almost any user will be confused by a search that works like this demo the moment they try to search for someone's full name.

But no, it won't work correctly just by adding spaces to the index. That will only work if the fields you enter are adjacent. So if you typed "Ona Bednar", it would work, but "Bednar Ona" won't. That's not how users expect search to work.

For a more ordinary example of what I mean, suppose the dataset included the middle name. Users will expect to find Ona Justine Bednar if they type "Ona Bednar". If it doesn't work that way, it's broken.
> This is backed by hard data on malicious attacks from the Dept. of Homeland Security and the FBI.

Poe's Law strikes again.
So I've been in the US on a H1B visa for more than 3 years now, and I believe some of the comments in here are misleaded.

First myth: H1B get lower salaries. For knowing a decent number of people with H1B, me included, I can say that's not the case. All of the people with H1B I know are paid more than 100k/year (some WAY more than that) at full-time positions with good health care and, for the people who work in startups, decent equity.

True it may be that the first job you get as an H1B might be paid less, I was at 60k when I started, but on my second job almost doubled my salary, and still got a significant increase in my second change.

Second myth: You cannot change jobs with an H1B. This is completely wrong. I have changed job twice in the past 3 years, and it's really easy. You just need to work with your new employer to get a new form which might take 2 to 3 weeks, but the process is pretty straight-forward, and even startups can do this easily without requiring armies of lawyers.

Of course I can't say that this is true for every single H1B employee out there, but from my experience I haven't seen much difference with US citizens/permanent residents, and would even go so far as saying that the most competent people I've had the chance to work with were on H1B visas.

Some people need to stop and learn before saying that "We need H1-B visas because there is a shortage of computer programmers living in the United States who will work for $64,000 a year when the average salary of all programmers is $94,000"...
The same government that backdoored the phone?
> Finding yourself in a situation with both a working and a buggy system is quite common.

Man, I wish it were common -- it's pretty rare, at least in my experience. From my experience, most bugs are introduced together with new features/functionality, and there was no time when the bug wasn't present.

But when you do find yourself with the working/buggy versions, a lot of the time source-control will make it quite clear what changed! Either that, or a hardware/os configuration changed...
This is actually the same method we use for logins, when the cookie is absent or expired, at a forum I'm currently running. They get sent a unique login token that expires in a few minutes (or is force expired if they request a resend of the login token) and get presented a CAPTCHA after following the link if they've already tried a few times.

Login email delay increases exponentially with each request.
There is a tilde in the full sample:

http://www.marksimonson.com/assets/content/fonts/AnonymousPr...
The number one way I have optimized my sleep lately is with The Original Bed Band. It keeps my sheet on my mattress, which is awesome because I am a toss n turner plus 2 dogs to boot. Try them out if you have a problem with sheets coming off the bed.

http://www.amazon.com/The-ORIGINAL-Bed-Band-Adjustable/dp/B0...
No, your point does not stand. You shifted goalposts, like most posters here do when they are proven wrong. Just admit your ignorance and move on.
Ugh. This is stupid. Seriously? The sheeple give the government everything including the pictures and the location of their kids willingly, and they hesitate to thumb scan in? Why? because you were soooo private and concerned up till this point?! Try not going though the TSA full body scanners and get back to me on this. Until then, the sheeple don't care as long as they saw someone else do it and they are told it's safe.
I don't think that this was a passing reference - a passing reference would have been him saying "I wonder if the NSA can read my text messages on this phone" when texting is an expected feature on any modern phone.

Fingerprint scanners are not yet prevalent in modern smartphones, and fingerprints are one of the primary ways that law enforcement can trace / track individuals. If the NSA, which has already been shown to have backdoors into Apple's systems, was able to access fingerprint data on a massive scale, this would be a massive affront to privacy for millions of users around the world.

pilif's comment was absolutely relevant to discussion of the iPhone 5S launch, as one of the phone's primary new features has the potential to be a massive security and privacy breach given information we've recently learned regarding Apple's close relationship with the NSA.
Most do not. But some of the most populous do. California and Texas are among the list that require thumbprints.
SSH keys and SSH agent are intended to solve the exact scenario in your caveat :)

1) No password stored in plain text

2) Still secure without having to enter your password every time
Unexpected Stories From a Hacker Inside the Government [video]
I have fought the encroaching light battle for almost 25 years. It's not as easy as the author makes it sound while still having a normal human looking room.

Here is the pack-rat/shut in version:
If you have any windows in your room the only real solution is some combination of a lightproof sheeting (light proof fabric, aluminum foil etc...) and light proof adhesive (black gaffers tape is the best or aluminum foil tape). Since there are very few window frames that give good clearance around them for affixing things, and don't have wild trim or corners the latter material really makes or breaks your situation.

Congratulations, now you have to work on your door. Door sweeps usually do a good enough job but those pesky door cracks can be a nightmare. The easiest solution to this is a blackout drape hung over your door as though it was another door. Reasonable people can disagree about whether to put this inside the room or outside the room - as long as you have a good "seal" on the sides and top it should be fine. This causes problems for egress if needed however.

The last and simplest thing is to just move all devices that cause light completely out of the room or disable their persistent light sources completely.

The good citizen version:
Using your standard draping you will need to sew blackout fabric to the back of your draping with basically no gaps. Stitch Witchery does not work. Hot glue peels away. Sewing is the only reliable option.

You will then need to choose your affixing method. I personally like using neodymium magnets, but in the quantity that you need them, they get pricey. They are also more complicated to line up. The easier version, which is still pricey is to use industrial strength velcro. You will have to measure and line up near perfectly where you affix the velcro on the drape to where your hooks/loops on the window/wall go. This is way more complicated that it sounds in practice - again because windows rarely are simple flat squares with no trim. Affixing to the wall/window is always a tradeoff. Anything that "sticks" will peel off eventually and take any paint with it. If you nail/staple it on, now you have holes in your wall. So pick your poison. Even after all this work, you will still likely have some leakage. That is where the extra fabric comes in handy to drape over the velcro sides. In general it will cover you night or day, but this one is really hard to get perfectly.

Treat the door the same - generally you can have the drape roll up during the day without issue.

This option lets you open the windows and drapes with minimal amount of tell to your mole-like behavior. It ends up being cumulatively a lot more work however.

I have tried to think up simple consumer solutions (I see lots of aluminum foil in windows -- watch you'll see it too now)to this, but windows are so damn variable that it is near impossible and the only major consumer solutions right now are not worth the price.
And believe it or not, some people do not use, like, or trust Facebook or Twitter.

Yup, I'm one of those people.

I don't use Facebook, and it's unreasonable to expect me to sign up for a Facebook account so that I can use your service.

I do use Twitter, but I'd rather not share my account details (even just the username) with someone I've just met.

I've always thought that being able to explore the web of information out there about me was kind of creepy, and I'm not about to make it easier for someone to do by creating connections between the accounts I have with disparate service providers. I like when my data is siloed, and only shared on my terms, with my explicit consent.
Not everyone has the aptitude to do certain jobs. I‘m never going to be a professional basketball player, and most people are never going to be professional software engineers. I think some of the best and brightest students who previously would have gone into fields like business, law, and medicine are now going into software engineering because of the hot job market. Additionally, some students who were considering graduate school end up going to work in industry right after they finish their undergraduate degrees because they’re effectively getting “bought out” by large signing bonuses and starting salaries.
Potatoes, milk and molybdenum[1]. Considering powdered milk is pretty light, this might be first-generation space chow. They've got a lot of free time to eat dozens of pounds of potatoes anyways.

1. http://www.straightdope.com/columns/read/2828/could-i-surviv...
For one thing, it doesn't allow someone who intercepts it to login to all the other sites the user has used that password (or password pattern) on.
Building Apps for Agile Teams
The Block Plan: Company-wide Sprints
I am very aware of TERFs, and I even referenced them in a post several weeks ago.
Having a 2008-tech-savvy cop in 2008 is just common sense. If the description is accurate, the two guys who came to confiscate the computers were completely clueless and would be easily fooled by anyone reasonably knowledgeable with computers.
I guess it is as good as sending an email with a link to reset a password. In theory, the link that gives you access to your account couldn't be used after X minutes and could be use only once, making it useless for future attempts.
You know, you're just another one of the tomatoes, like the rest of us.
Sexism & Tech from Pax Dickinson's biz partner
Arbitrary content injection into signed emails from Google, and it's not a security risk??? Incredibly poor response from them. Props to the author for being patient and trying multiple times to convince them to actually fix it.
NIST reopens draft recommendation on random number generation for comment [pdf]
Yes, you have the correct interpretation.
How Elephants Grieve
Is there a good reason they didn't include FirefoxOS on the list of alternatives?
They changed the image for other similar to the original. How that changed the value?
Oh I think you know.
I do open source software released under GPLv2 so, literally, be my guest.
it's cheaper than most per-seat licensing schemes.
Originally saw this on r/netsec.

A very good watch. You can tell Mudge is passionate about what he's speaking and the stories he shares offer some insight into the recent political climate.
Sometimes there is a significant delay in Gmail sending new emails to a desktop client. That can be a dealbreaker for this.
In what case would the data be "already sent to the client side" that doesn't involve essentially transferring the entire data-set?

The search is certainly useful with 100 records, but if I can return only the 10 matching records from an AJAX request, that's 90 records I didn't have to return in the first place.
"network-accessible fingerprint scanner as your new 'feature'."

It's embarrassing that even high profile people get this so wrong.
Scanners like the one used only work with live fingers, and read geometry deeper than the surface. You're not going to trigger it with an ordinary collected fingerprint.
> It would tremendously simplify for services. They now need not implement any cryptography.

Uhh.. I sure hope the cookie tokens are not stored directly on the server-side, but rather verified against a (cryptographic) hash of same. These credentials are as valuable to an attacker as a password (albeit relatively short-lived).
It'd be more nitpicky if the image were Creative Commons-licensed in the first place, but it wasn't. Buzzfeed linking back to the original is just pretending like it's CC and attribution is all that is required. (assuming they didn't just make a mistake)

Linking to the wrong page sounds like they were probably on that page to download the image, and when they went to get the attribution they just happened to have that tab open. Most likely laziness, not malice.
If you have some crappy early-generation CFLs that have been used a lot, they can take 10-15 mins to come up to maximum intensity (although that max is still pretty puny, output wise).
The intermediary part is a blessing and a curse. If the site you're logging into doesn't directly verify with your email provider, then if anyone gets your temporary signing token they can log in anywhere you use Persona, and you have no way to revoke it or even prevent future ones until the token expires naturally. Even if this is mere seconds, it's plenty of time for a scripted attack to try hundreds or thousands of sites[1].

This is noticeably unlike OpenID / OAuth[2] / many name/password systems, where you can revoke access to specific tokens / sites on the ID provider, and where many username/password sites reject all old cookies after you change your password. Anyone with your token / cookie / etc will immediately lose access with this, and the provider can prevent new sites from using old login info.

[1]: and remember that they don't "phone home" to the Persona provider, so there can't be any rate limiting. virus -> botnet -> millions within seconds is totally possible, if unlikely and costly.

[2]: yeah, OAuth ain't an ID system. same basic structure though.
> Is any of that server-to-server journey ever encrypted?

It can be, thanks to RFC 3207 (STARTTLS).

However, unless you configure your sending MTA to require TLS (and in turn give up the ability to send email to a large swath of the internet) you have no protection against a MITM adversary hiding the recipient's advertisement of STARTTLS.
I don't know if I would trust this as the sole authentication method for any of my online accounts, but this could be useful as a multi-factor authentication method instead.
You obviously don't need to turn the phone over to slide your finger across the reader. In fact, the reader is positioned on the wake-up button you need to press anyway. The location is convenient, and using the fingerprint sensor in Atrix is quite pleasant.

Source: I own Motorola Atrix phone. I used to be happy with it, but then the GPS broke, and camera became flaky, not to mention lack of Android updates.
I tried a similar approach on https://www.moraleapp.com with mixed results. It makes sense for a manager/boss to have an account, but I didn't want to have every team member sign up for yet another service. So each email sent out gets a randomly generated token that allows the recipient to "log in" (all responses are anonymous, each sent email has a token - not each email address). I think the idea is really great and helps with adoption within a team, but it has also led to some confusion because there is also a traditional Login page.

My take-away is that it is probably better to go all-in on one approach (all email-based or regular logins) than a half measure. It is kind of interesting because it seems to cause trouble for users that are semi-technical; the ones that know how a username/login works in general, but are thrown for a loop with this whole "email is how you login to our special app!" thing. Super technical users understand and super newbies don't really seem to notice, but those middle ground users are a bit confused.
Government has my fingerprint already. You need to give it to them every time you go through customs.
I think the FSF's caution is reasonable, but Thinkpads have had fingerprint scanners in them for years and it doesn't seem to have significantly impinged the privacy of people who use those devices.
The things you list would seem to be severe disadvantages. I doubt many would go this route exclusively but have a traditional site in parallel. I guess Google and other search engines will let us know when the number of pages turned up by indexing starts to decline or let us know when general web browser installation starts to fall. I don't see it happening.
hint: focus on learners, not educators