skysight-inc/HackerNews huggingface dataset:
I highly suggest doing the labs of MIT's 6.858 (Computer System Security). I'm taking it right now, and it's one of the most rewarding classes. The labs can be found here: http://css.csail.mit.edu/6.858/2013/schedule.html. In fact, the first lab is all about buffer overflows and return to libc attacks. All labs come with autocheckers or sufficient instructions to check your answers. The first lab can be found here: http://css.csail.mit.edu/6.858/2013/labs/lab1.html. Highly highly recommended to anyone. I wish more people knew about this class because it's class A, absolutely awesome. Very practical and informative.
Thanks. You might have just stolen all my freetime.
Github is not the only one. There is also Codeplex, Bitbucket. Some projects are even on Google Code.
LOL, good point. I never thought about it that way specifically before, but I took typing my freshman year of H.S., and ya know what... I think I would make the same observation, now that I think about it.
Bribe developers to fix bugs
We are creating Bribe.io for Startup Weekend. It is a service which allows users to pay developers to prioritize bugs that need fixing. We'd like to get feedback from users and developers who would use this new service. Please check out Bribe.io and fill out our survey.
Tons of fun for a while, but way too easy. I got to wave 22 without any of the ships getting more than one ship-height down the screen. Would love to see them moving a lot faster.
I have some equally simple, but networked examples here:
https://github.com/moloch--/Exploit-Demos
If you can steal the password hash database, stealing the shared "salt" is usually going to be trivial. Second, lots of hash functions are vulnerable to length extension attacks, so even if extracting the shared secret directly is hard, you can probably exploit the system to see what an empty password hashes to and then use that as a basis for brute-forcing the rest.

In other words: there is a reason why security experts and cryptographers recommend the password storage mechanisms they do.
Ask HN: Cloudflare not letting me through?
Right now I can only see HN via a proxy. My normal connection has been giving me an error all day - is there anything I can do to fix it. The proxy is not allowing me to use search, even though I have theoretically enabled Javascript, so I can't see if this has been asked already.

Yeah, that didn't work. Try again, perhaps later?

Web server is returning an unknown error

There is an unknown connection issue between CloudFlare and the origin web server. As a result, the web page can not be displayed.

Ray ID: [some hex stuff]

Your IP address: [my IP]

Error reference number: 520

CloudFlare Location: London
You see the problem?

Not really. If you don't like windows, use Linux or OS X and Mono.
You are definitely right about that last thought. "90% of all businesses fail". People forget its not random like a lottery but rather based on many factors, only a portion of which is luck.
Is this killing all the benefits of iCloud keychain or am I missing something?
I'm in a PhD program for chemistry, learned calculus when I was 25, and I thought PChem was pretty intuitive.
I don't think the article has any intention to depict Bogotá as a happy city in absolute terms (although yeah, the author calls Peñalosa the "Mayor of Happiness"), but rather that the changes brought by its mayor in recent years have made it happiER.

I would be curious about your opinion in this sense: despite the rampant corruption and all other problems, has the city's quality of life actually improved over the past years?
It's funny how you managed to make a powerful feature sound like a flaw. Just forget "tons of methods" exist and code your implementations then. In a Notepad.
Microwaved Pumpkin Pie Spiced Kettle Corn
Has someone told you about "we blog" yet?
Perhaps just let people skip levels once they have completed them, then everyone can find their level and restart there? It does get a bit tedious going through the easy stuff after you've played a few times. I do think sentences would make it fun too, perhaps something from Gutenberg?

Great effort though, thanks!
Is there a typing game out there that focuses on characters? I.e. : ; [] {} () \ ?

etc.
Play the expert mode.
i changed my linked in password with icloud keychain tool to a super-duper complex high secure one. But trying to login from my iPad was disappointing
I'm pretty sure "current" in this case is supposed to mean "branch you're currently on", which I'd definitely find more intuitive than "default".

On the other hand, apparently that meaning isn't actually as clear as I'd have guessed, so maybe my intuitions about intuitiveness are off-base.
Thin Film Electronics raises $24M for paper-thin printed electronics
Yeah, it's probably not trivial to test and get the algorithm, perfect, but I think the basic calculus would be incredibly easy and would almost certainly beat baseline:

var wpm = getWPM();
function levelDifficulty(num) {
return getOldLevelDifficulty(num) * wpm * SOME_SCALING_CONST
}
The point is that there are always going to be people that live outside the city. Period.

Banning cars from the city means anyone not living in the city simply won't visit, which for most cities will result in too few people spending money inside the city to sustain the businesses that make living in the city attractive.
That sounds great. My problem is that I can't think of a good cause for a soul bubble in hell. It'd be good to tie it to some historical event, but what could I say was clearly a failed demonic soul investment scheme?
The real challenge comes from the font choice.
....and? Do you have some comparisons you wanted to share?
Which code would you rather refactor in 5 years? Make no assumptions about willingness to unit test.
I love the efforts to build these types of resources, I just hope this isn't redundant with Michael Hartl's tutorial.

Also, I'm not a believer in TDD, especially with beginners. I find it tedious especially when prototyping an app, which I almost always do before starting a non-trivial project. Once my prototype works reasonably well, I do a refactor with good test coverage in an effort to produce production ready code.

I'm a huge believer in testing, just not TDD.
I added 10mBTC a few hours ago, and they haven't turned up on the site. Is there a long delay or something else?
I got 60 wpm, but in a normal typing test I'm doing 110-120 wpm.
Canvanizer: http://canvanizer.com/
I stayed at my first job for three years. It was a mistake. I could have gotten way more money by switching.
I've seen many more people say that it's a waste of time, so I can't say I'm surprised (unless the "online job applications are usually black holes" cohort has changed their tune).
well, no, because you do need that working knowledge. Don't know what DAST is? Then you'll never come up with using it in a reaction. You won't have saved the company a load of money on a route to med-chem up a compound.
Not grading on a curve is a horrible idea.

Maybe I misunderstand what this curve grading is all about, but doesn't grading on a curve mean the grade is not a measure of how good one is, but how one compares to other people who happened to be taking the exam at the same time? So you don't have to be any good to get a top grade - just better than other people taking the exam at the same time? And likewise, you could be the world's tenth greatest living chemist, but if the other nine people taking the exam are the world's top nine, you'll fail.

And not doing this is "a horrible idea"?
Settings->Safari->Passwords and Autofill->Always Allow
That is what current means right now.

His proposal seems to be "call whatever happens to be the default 'current'". This of course gets you into a non-intuitive "The king is dead, long live the king" sort of situation.
> "Pretty much anyone out there is infringing," said Rockstar's CEO, John Veschi.

In other words, the law is totally useless and needs to be modified if not totally revoked ASAP.
@FooBarWidget, does the scaling/load balancing feature support sticky sessions?
MonoDevelop is free, but if you have a large code base, it's very slow. As in "wait 30 minutes for MonoDevelop to start and analyze the entire project" slow. And then the crashes...

Xamarin fixes all of these problems. But then, the free version is limited and the paid version is very expensive. When it comes to IDEs, you really do get what you pay for.
You are not forced to use it. Pick any of dozens of others.
Guns don't kill people. People with guns kill people.

Apple does not have to participate in this. They chose to cause they anti-competative to the bone.
I took grad-level orgo. It was a firehouse of knowledge. One of my professors was Phil Baran, who just got the MacArthur award (for his work in orgo)... Literally got hit by a car the day before the final, (went to the ER and everything, but no broken bones); came hobbling in to the exam. First time I ever failed a class in my life, but I came back the next year, and passed. I'm so glad I did it; though I don't actively use organic chemistry in my day-to-day I can go to conferences with organic chemistry and understand 90% of what they are saying.
Fluid Sites just work across screens. So shouldn't this be a no-brainer?
And a Scala dev will find it strangely familiar :).
bad title, for EU only 100 eBooks for 1 EUR+Tax , not 16000 eBooks : http://store.elsevier.com/coArticle.jsp?pageid=18100024&loca...

-Offer valid until November 5, 2013.

-Limit 10 books per order with this offer.
> [Apple is] better than this. They don't need to sully themselves with this cage-fighting behavior.

I think the source is Steve Jobs’ pride, not rational business decisions. Jobs saw iPhone as something completely new, a smartphone that everyone could use – and the combination was something he felt he had invented. In the keynote where he announced iPhone, he went out of his way to point out that Apple has the multi-touch patents and that they filed for many more covering the gestures.

By that time, Google had already purchased Android Inc, but it had no actual product. Eric Schmidt was on Apple’s board so he knew about both projects. When Google did show an Android phone, it looked nothing like iPhone, with a hardware keyboard, no multi-touch, and an OS akin to Blackberry and Symbian. Apple obviously had no problem with that iteration, as Eric Schmidt remained on Apple’s board and Apple didn’t sue anyone.

It wasn’t until Google changed Android in such a way that it was meant to be used with multi-touch when shit hit the fan. Eric Schmidt was suddenly a traitor, a spy, and Google became the enemy. That’s when Schnmidt was ousted from the board and the lawsuits targeting Android started.

If Google had waited a year or two to make Android more iPhone-like, I believe Steve Jobs’ reaction would’ve been way less severe. And given that Nokia, Blackberry, and Microsoft (the mobile OS market leaders at the time) were asleep at the wheel, Google could’ve easily have competed in the market without stepping on Apple’s toes.

Alternatively, Eric Schmidt could’ve left Apple’s board as soon as he knew Apple and Google were going to compete by both making a mobile OS. He must’ve known by 2006. He also knew what Jobs was like and could’ve seen this coming.
Many countries have usable public transport (buses, trains, metro, trams, taxis). London already imposes a punitive levy on private cars within the city, the result is a slight reduction in car traffic and no appreciable effect on shopping or pedestrian traffic. It would be very interesting to find out what a complete ban, or a much higher levy, would do to the city, but I doubt very much it would kill it. Do you have an example not in the us where this has been tried?

As long as there are other ways to get around, a city does not need cars, in fact cars are a negative for most denizens.
Yeah, the bigger ships that spawn the letter waves caused me problems. Though I'm probably not a 110 WPM typist.
Heh. Western? Because Russia and China and Iran and Saudia Arabia and India are exemplars of trusting their citizens.

You don't know how to fix it? Here's a start: stop grouping people into ridiculously large categories like "Westerners" or "politicians" or "terrorists". How do you think this starts?
F# supports piping to a level that Bash et al can only dream of.
> over time the Kalman filter would "learn" which sensor is lying and adjust its accuracy estimate down

No, it won't. The plain old Kalman filter believes precisely what you tell it. In this scenario, the Kalman filter will oscillate about the mean of the two measurements, with the amplitude of that oscillation depending on the relative sizes of the measurement variance and estimate variance. A smaller process noise will cause the estimate covariance to shrink faster, which will dampen the oscillation faster. The oscillation will eventually settle on some minimum amplitude.

An important point here that many don't realize is that the covariance of the Kalman filter is completely independent of the residual. Go ahead, look at the equations - covariance is a function of the measurement model, the prior covariance, and the measurement covariance. The actual measurement doesn't matter.
You realize that there are millions of questions about .NET on StackOverflow, right?
Healthcare.gov failed despite agile practices
Well, I picked Tungsten because... well, it was pretty. But you're absolutely right. I changed it to Deja-Vu now. Please refresh!
A cold war is not as bad as an open war. The cold war is caused by the existence of the weapons. The open war is caused by launching the first warhead.
You have your entire life to make money. First, get experience and show you won't jump ship for no good reason.
You should probably assume that they have your password too. Since Adobe encrypted the passwords instead of hashing them, all of these passwords will be known once the encryption key is discovered. Someone could possibly use the method in the article to guess your password as well.

So if you use the same password on any other websites, better change it.
Bad idea. You would still have different people in different places experiencing different parts of their day, even if you put them all on UTC or had no clocks at all. You still have to figure out what they are doing before you call and figure out whether it is too late to call, or too early, or they ought to still be in the office, etc., one way or another.

So what do you optimize for? For the ability to live your life anywhere you go with the same basic assumptions you and everyone else grew up with about when people wake up, are at work, eat, etc., or do you optimize for the convenience of the occasional synchronization of multi-locale events?

If your wake up, jet lagged, look at your watch, and it says 1800, are you too late for breakfast? Are you too early to call someone you came to visit? The fact that you didn't have to reset your watch for the local time means you know exactly what's going on back in the place you left. Great. Too bad you don't have any idea what's going on where you actually are. You can save yourself the trouble of setting your watch, and be confused about when to do what all day long, or you can set your watch once and be completely oriented to your new locale by lifelong instinct.

Given the choice of having to do a clock calculation to synchronize occasional events versus having to get used to a different daily life pattern everywhere you live, visit, or even call, I'll take the former.

Use UTC for synchronizing events. Use local time for living life.
Perhaps famous quotes about security (or programming) with common/small words removed.
Same problem for me. I couldn't make out the letters in the word I was typing because the word was hidden behind other words.

The word that is being typed should automatically move to top z-index. Maybe that word could also get a little larger than the other words to make it more obvious which one you are targeting.
>If Adobe have been using the same key for each part of the triple DES key
This doesn't strike me as a problem.

Everyone makes their own productivity app because everyone has their own style of time/task/goal management. Do we not always say something along the lines of, "build something for which you're the first customer?"

This is the most common result of that stimulus.

I often encourage people who are just starting to program to make their own CLI productivity app that mirrors their existing GUI or paper productivity system. It gives them both the motivation to complete it and a reason to keep coming back to the command line after they're done. I wish that more introductory language and framework tutorials were structured around this.
While I have become a proponent of TDD and have come to appreciate it in larger projects, I agree and remember the tediousness of it as a beginner.. It is good to inform the beginner of its style and merits, but not to enforce it -- rather let them decide for themselves if it helps them and their team in the long-run; experience is a far superior teacher
I wasn't trolling. It feels positively deranged. Like having all numbers be written in Roman numerals for instance. I don't get your point about Fortran. Deeply flawed languages have existed for a long time?
Thats a solved problem in many places; it's far more efficient to have deliveries than everyone going in a car to a huge supermarket every week. Home delivery of groceries can be great, I've used it for years without problems, and you can buy your eggs and veg from a local walkable market if you have one (many large cities have weekly markets as well).
Adjusting the measurement covariance to fit the residuals is not part of the Kalman filter algorithm. One could make the argument that any real-world implementation needs to address this problem, but as far as the algorithm is concerned, the measurement covariance is externally computed.
I am interested to know more about developer experiences with Xamarin. can you share some apps (ios, android ) that you have developed using xamarin?
Is it normal for people to realize that someone stole her phone only after it has been missing for 4 months? My naive assumption would be that people tend to report these kinds of things within a few days, or a week at most (if for no other reason than to prevent theft of service).
> health is the easy way to a fool's wallet

No it's not, especially with a preemptive health solution (solving a problem people don't feel they have).
The 'server' in this case is a remote repository which has some commits you don't have. If you force push to this repository, these commits will be lost for you - only the person who pushed these or someone with access to the server can restore them.
The levels should increase at a faster rate if you don't make mistakes or clear the screen early.
I really like the idea of inline calculation which is a feature that's missing from Evernote and that exists in OneNote. Another feature that's missing from EverNote is FREE FORM NOTE TAKING. I would drop Evernote in a second for a platform that does freeform notes as well as MS OneNote does (disclosure, I use OSX primarily and thus I can't use OneNote natively).

I disagree with the "yet another" comment because the more high-quality choices there are out there the better. I think this looks like a promising product and, if nothing else, is a great way to see what the market wants because they will be able to make faster changes than someone like Evernote can.
Want to sell more?
Would like to get feedback on this concept:

ProfitBooster allows you reward people if they sell your product. We handle all the hassle, you sell more. We focus on small businesses.

How does it work? You provide a link to your product and a % of your revenue you want to share. We provide a dedicated link that you can send to your affiliates (or recruit affiliates for you).

Link: http://profitbooster.launchrock.com

Thanks!
Thanks for this post, especially for all the details. Been building a site as a side project, mainly to get it out of my head and the incidental learnings. Reading about your strugle and the hardship of moneytisation was very enlightning.
> If the NSA does not justify it's existence in an open forum then we must dismantle it.

Wow. Please justify your existence or face dismantlement.
Dear Amazon: Thanks for taking a dump on my ebook (Formatting)
From the perspective of "trivial software patents are bullshit", violating software patents does not in any way make you a "bad guy".

Furthermore, google is actively lobbying to weaken software patents.

I would say, then, that in this case, they are certainly my ally, or at the very least, the enemy of my enemy.
The recent MongoHQ breach is a counter example.
And submit your key to Phuctor: http://nosuchlabs.com/
have you tried our thinkery.me yet?
It is meant as a joke -- but also planning to fix these issues ... apparently this was the right place to bring it to find all the situations where it doesn't work correctly :)
Wolfram Problem Generator - Unlimited practice problems and step-by-step answers
Microsoft to retire Skype Desktop API
Scientists Use Computer to Mathematically Prove Gödel God Theorem
licencing SQL Server(s) for production use can be very expensive & convoluted.

It's not convoluted at all.

Want a free on-premises database? Simple. Use SQL Server Express. That will handle a database up to 10 GB.

Want to have Microsoft host your SQL Database for you? Simple. Use Windows Azure SQL Database. $10 per month for 1GB and then $3.96 per GB per month after that up to 10 GB and then cheaper from there.

Have you ever even looked into using Microsoft software or did you just immediately dismiss it without looking at it?
I like the design except for one thing. It was unclear to me to what fields were editable. It would also be great if you could add a menu bar icon for quick note taking. I use an App now called Notes Tab and its great for accessing your notes without actually opening up a window.
lol; "should have used a salt" is one of the most hilarious HN memes.
Aka, extort users to pay for bug fixes :)
Things the Google Play Store Should Add, Change
Password hints are simply multi-factor passwords with, when used as intended, really crappy entropy and often crappy back-end handling/storage.

If you must suffer them, use random values that you note locally and store safely (just like your password). (Or that you don't store at all, simply foregoing ever being able to use the password hints mechanism.)

And, adjust your level of trust in and comfort with the site, accordingly.
Because this litigation began before the acquisition of Motorola Mobility?

Or because the patents in question were H.264 ones, which the defendant themselves already collects royalties on?
My point wasn't that using a salt is good practice, just that Adobe's method was so bad that even a salt+hash would have been better.
Look here for samples:

http://xamarin.com/apps
To make it harder and simultaneously a better learning tool for touch typing you could add a penalty for typing mistakes. The real guru mode would be if a hit is only a hit if the word was typed completely correctly. I mean, first letter selects the target and then you have to press the keys so that the word would correctly appear in your editor, e.g. if you type a wrong letter you'll have to use backspace.

Then we could even have CUA, Emacs and Vim key bindings. The lower levels will be manageable with just backspace and cursor keys. The higher levels will require advanced editing skills.

There could be two high scores too. One for the player and one for the editing method (like drivers' and constructors' standings in Formula One racing).
The big difference is that authoritarian regimes make no secret of their collecting information. They also do not come with a check-and-balance mechanism precisely supposed to prevent the emergence of the new Stasi we're seeing here. This not a characterization of the people living there, but a simple fact: there are a number prerequisitives in order to avoid this kind of issue. It is unfortunate that there seems to be more of them than you would think.