skysight-inc/HackerNews huggingface dataset:
> I can rely on the two factor auth of my Gmail account for security.

Does Gmail now support 2FA? The last time I checked, Gmail supported Google's 2-Step Verification. 2SV includes backup codes, which cause 2SV to be 1FA:

Password + Backup Codes = Something You Know + Something You Know = 1FA
Agreed. And considering the low probability of such a breach, my next assumption was some password storage service being breached.

The real story: Personal computers were infected, passwords were keylogged. yawn
Funny that example@example.com has been pwned twice.
Swedish Pension Agency shares code
70% of feature-length silent films made in America have been completely lost
Also in MI, they have been saying things like this since the Industrial Revolution and the job market has adapted. Auto industry jobs have been automated since the auto industry has existed. They even said these things about the Fordson tractor.
What platform(s) was the keylogger written for and how was it spread?
The Nike Fuel of cycling: Copenhagen Wheel turns your bike into a smart hybrid
Sorry, what's the difference bretween Cisco and um, non cisco i guess?
Time = Money only for ideas that are easily reproducible. if you truly found a niche it's nearly impossible for another business to execute it the same way.
> The REPL lets you test any call sites immediately after you make a change. I do this all the time at work. Let's say I change a function that accesses the database, I can update the function then update the call sites and run them right there and then.

At least the ones you know about. Now, take your codebase to 100k lines, 75% of which you didn't write. Good luck.

Wrt to integration tests: they're a pain to set up, and the complexity creeps it really easily. It's straightforward to unit-test edge cases, but the combination of layers makes it much more difficult to rely on integration tests for this kind of thing. Plus, integration tests usually take a long time to run. Rapid feedback is important.
Nice project but i think steroids js is the best out there at this moment!
i did not even read it as a pronoun. i just assumed the thread OP was called 'zir', that is until i read your post.
You're right, nobody did say that. The point I was trying to make is that with the absence of data, you have to make assumptions and they should be clearly defined. My assumptions defined his starting age and how he obtained the first 2 sheep and the fact they were his.

I guess I would want my kids too look at any math problem with the following things in mind:
* identify units of measurement
* identify useful data
* identify non-useful data
* identify assumptions needed to complete answer

There are more or different assumptions I could make, such as cooperative breeding amoungst other breeders or a larger flock to start with, or a completely different model of breeding sheep. I could have described a scenario where he started with 2 sheep and went through several trading and auction rounds until he had 125 with some bonus dogs like the guy that got a house from a paper clip.

We don't have a time measurement in years, so we need some type of sheep per time or time per sheep unit. I choose an assumption of breeding and came up with about 1 sheep per year per sheep.

The original question is very close to a nonsense question, which requires so many assumptions that probably most answers can be well defended with the right set of assumptions. But at the very least you would hope a student could identify an answer in years could not be obtained with the given data of # of sheep and # of dogs.

(And, no, I don't think the units method is beyond an eight grader, even if the educational system thinks it is. The fermi problem may be.)
Chief asks to be paid in Bitcoin, city approves
Yes, "steal" is definitely the wrong word here. Being unable to pay a debt due to bankruptcy is not theft. If it were, there would be lots of people in prison for not being able to pay their credit card bills.
This is an impressive service (the speed, especially)...collation of different data sources into one easily accessible form is a hugely useful and underrated service. That said...there's no such thing as better security without an equal tradeoff. Here, it's now much easier (especially with the site response speed) for a third party to look up email addresses, see who they've patronized, and aggregate them into a database of less noble intent.

To check if a given email address was an Adobe/Gawker/whatever customer, you would've not only had to query every separate form but you would also not be guaranteed to get a definitive response (because some services will be ambiguous to whether you got a password wrong or whether the account exists at all). With the OP's service, with positive hits, you not only get confirmation of patronage, but knowledge that they are vulnerable, even if in a small, outdated way.

It's likely something Troy has anticipated but didn't want to outright say...In the end, knowledge is better than ignorance, and the correct response is for more rapid response to hacked victims and better security awareness. But I also wonder if there's a way to provide the OP's service with more (beneficial) obfuscation?
have not been particularly terrifying.

well that's not quite true. For mankind as a whole, no. For people who's livelihood has been automated ... its been pretty terrifying.
As this is looking like a AMA for jber, I will ask:

How many brazilian startups have you funded? I understand that you are investing everywhere, but the country counts? I mean, bigger markets = better chances?

Also, just to reassure me, can you completely guarantee that if I don't have an answer in 5 five workdays is because I didn't pass? Just to control my expectations and illusions here if that happens.
Techmeme finally posts stories to its Facebook page
Highly anticipated VSCO Cam now available for Android
A tale of two emails
The writer (Scott McKelvey) dissects two Black Friday promo emails and how one got him to purchase. I personally rarely open newsletters. In general we're bombarded more and more by newsletters from online tools and stores everyday - communicating more effectively is crucial for survival.
I have been working on a new steganography algorithm that I believe is secure. I plan to make it open source in the new year. Would you like to review the design and code when it is released?
> In short - robots still look like a hobby that will pay off the same way writing games for the ZX 80 or Atari will pay off.

You realize that that "pay off" is entirely social, right? For people who made careers out of game development, it wasn't because they made an early investment on the Atari. It was because they developed a passion.

If robots take off the way computer games did (and they probably will), the fact that you tinkered on them twenty years ago is not going to be good for anything other than stories over a beer, the same way my dad likes to talk about programming with punch cards. (Spoiler: tmk, my dad hasn't programmed anything in maybe 30 years. Kept up he has not.)
2 Factor Authentication, 2 Factor Authentication, 2 Factor Authentication!

I've had 2 factor authentication enabled on my gmail account for over a year now, and once you get past the initial setup phase, it's really not that inconvenient.

I have even been able to train my parents to use 2 factor auth, I just need to get them using a password manager now...
Is there a list of providers it supports? And I'm wondering if Evernote can be one of those providers (not sure if they even have this type of API).
Apple Buys Real-Time Access to Twitter Feed With Topsy
>> I apparently have 272 games on my Steam account, and of those 121 run on Mac.

How many of those 121 are AAA-titles? I'd like to be a Mac gamer too, but it seems to me there are extremely few AAA grade games available for the Mac. What else is there besides Valve, Blizzard, and .. Borderlands 2 & Arkham City?
Nicely said. I'd just add that if people are still doing simple, easily automated jobs in a few years, that is terrifying. We can do much better as a society than that.

All that said, there may be a new class of unemployable people that will need to be accounted for in some way. Not sure what that is yet. I can say that I find it unfathomable that government will work on the problem prior to it becoming an issue.
your email is not a secret.
Add to the list: mild winters. Just returned from Seattle to the warm Texas sunshine...
Testing the Resolution of the Human Eye
Drupal Security Guide - Mostly LAMP but geared to PHP & Drupal
The New Yorker is a very affluent magazine for a pretty upper class crowd, in general. Its likely that these findings would put a lot of those professions (such as hedge fund traders) low on the list of social worth while listing much poorer classes (like teachers) on a higher tier. This would not be a popular view among members of that hedge fund trader class.
A New Top Bar for Stack Exchange
First principles and step back and look at the raw materials cost just sound like crude aping of Elon Musk
Have you been pawned? Yes, now that you just gave us your email address to sell to Russian hackers.
If you look at the history, I believe you'll see that automation of any sort has resulted in the movement of jobs, not a lack of jobs.

Think back to the Horse & Buggy days, when cars came along, I'm sure people were saying "with all these cars not needing horses, all those people that care for and breed horses will be out of work", but look at all the jobs that were created, and particularly the jobs you're now concerned have been lost in Detroit.

I think Detroit may be a bit of a special case as the population boom there was driven by the growth of the Automotive industry at a time when everything needed to be centralised. Almost everything was decentralised before (with the majority of jobs being in Agriculture I believe), so we had a short period of history with mass centralisation and we are now able to decentralise again, so the places that amassed workers geographically look so much worse off by comparison, while going through massive change.

Unemployment may be high now (tough to get a good number showing the difference over the last century, but at least one of the brilliant people on HN knows how to do it), but I suspect that if you exclude the last 5 years, unemployment was fairly flat as a percentage over the last century.
Perhaps schools should adopt the IIHS ratings scale: Good, Acceptable, Marginal, Poor. Doing away with letter grades that have strong historical bias and cultural signaling might be useful.

Example: http://www.iihs.org/iihs/ratings/vehicle/v/toyota/4runner
You could write a short Greasemonkey script to ensure that you never have to see them.
You're saying, then, that a 4.0 at a community college is not even a 2.0 at Harvard? But how could it be? It's the opposite! 4 > 2! Those universities are trying to redefine numbers... Or maybe it's in the units! Ohhh, now I get it: Given CC=Commmunity College, then 4.0 GPA CC < 2.0 GPA Harvard. This implies: 2.0 GPA CC < 2.0 GPA Harvard. Now we drop 2.0 GPA from both sides and we get CC < Harvard, or Harvard > CC. But wait, is that true for every community college and for every class and for every course at Harvard and at all those community colleges? So maybe it's not 100%, so maybe 4.0 GPA CC > 2.0 GPA Harvard in some cases. so, the answer, as usual, is "it depends".

What does it depend on? It depends on how things are measured.

Woooooooooooo, wait a minute there Sherlock. Harvard is Expensive man! And hard to get into... How can there possibly be cases when Harvard < CC? Since Harvard is so 1337, there's no way that Harvard < CC, right (in some cases)? But then since it's impossible to measure (accurately and without bias) all of the community colleges out there, it's theoretically possible for CC > Harvard, especially when taking into consideration the tuition paid. So, in some cases, (CC+small_tuition) > (Harvard+expensive_tuition), and thus CC > (Harvard + expensive_tuition - small_tuition), so then one could say that CC - expensive_tuition > Harvard - small_tuition in some cases.

So, when you wrote "it's not a stretch to believe that 100% of the Harvard kids would have gotten As had they taken the same class." You're actually trying to disprove that "CC - expensive_tuition > Harvard - small_tuition in some cases", but that can't be, because there's no way to measure all. Thus your statement "it's not a stretch to believe" has to be incorrect (since can't be verified as correct). Anyway, 100% gotten A? Really? Are you a betting man? What if one student had a bad day that day and got an 89?

Be careful making generalizations, man. You can't know until you measure; and then you can't know until many other people have also measured, and then you can't know until many years have passed and nobody had come forward with substantial allegations of study bias in your field of study.

Find those
well, if you decide to list it under your HN bio, then obviously, it's not :)
If you use LastPass, then their security check will run these checks automatically against all leaks and email addresses:

http://blog.lastpass.com/2012/01/new-years-resolutions-with-...
> Certain things cannot be translated, whether they are idioms or grammatical constructions.

The cool thing about languages though is that they evolve. English is a prime example of this: things that can't be translated just end up being imported and becoming new English words.

The end result is a more powerful language, where you can express the combination of certain ideas and concepts that simply couldn't be expressed in a single language before.
Right now it supports Dropbox, Box, and Google drive, with SkyDrive coming soon.

We'll take a look into evernote - Hadn't thought about that before.
Giving up 15% of your company for $150k? That's the amount you'd expect to give up, roughly, in your seed round. It's hardly worth considering if you think your company has any value.
You can't steal somebody's email just by knowing their address.
Eclectica’s Hugh Hendry: I would buy Bitcoin if I could
As the editor of the post, I'd love to get technical feedback and happy to answer any questions.
Interesting! I was skeptical of the GMAT until I studied and took the test. My personal opinion is GMAT is a very difficult test and studying for the test sharpened my own writing, logic, and reasoning skills. I am very impressed with the cognitive ability of the test takers in the very highest percentage.
You are assuming that community colleges and Harvard have the same distribution of academic skill in each classroom and that the difficulty of the courses are equivalent.
yes it's real but it's useless and unused.
mentioning it without disclaimers is confusing.

that wikipedia page was mostly written by one of the people behind the hoax.
I've implemented it thrice. Easy to get working, surprisingly tricky to balance all the space/performance requirements. You do get better at it!
> You don't think that "this is an article", "this is a paragraph", "this is a link", "this text should be emphasized" is an abstraction?

It's not. There's many different ways to do this with HTML/CSS. You can use bold tags or spans. If you use spans, then you have to understand the class and the CSS before you can tell that this text is supposed to be bold-faced rather than colored differently.

Links can be specified in the HTML or added in with jQuery. An article can be described with a semantic HTML tag or a div with a class. If it's the latter, you've got to parse the class and figure out what it means. If you're lucky it will be 'article'. But you probably won't be.

HTML cannot be looked at as a data type. Markdown specifies one and only one way to do all of the above. That's a proper abstraction.

> Telling people how to make web pages isn't a problem - that's what the HTML standard is.

You can announce a set of 'best practices', but that's not a standard. A standard is an abstraction that you can rely on other people using because otherwise the vast majority of software won't work with it. Best practices cannot be relied on, you follow them for your own benefit, not others.

The HTML standard is insufficient for this kind of use. And it will remain this way because HTML isn't intended the way you seem to think it is.
I think you meant "antidote" instead of anecdote?

Nice post, thanks for writing. It's interesting how we don't then focus (at least in the now secular West) on ways for morality to be seeped into our collective consciousness. The answer historically has always been religion (at least in the last few millenia) but today people get all jumpy when even trying to talk about it.
Karl Denninger has pointed out [1] that these pension benefits that were cut as a result of the bankruptcy were effectively negotiated "at gunpoint and by fraud," and there was no true adversarial process in the negotiations, since the people negotiating for the wages and benefits could and did elect the people on the other side of the table. That alone should render the pensions unenforceable.

However, the judge had to rule that the pensions were not enforceable, Michigan's constitution notwithstanding, because bankruptcy is black-letter Federal law. [2] The pensions are debts like any other, and pensioners have to get in line with all the other creditors.

Anyone with a government pension had better pay attention, and, as the saying goes, "conduct yourselves accordingly."

[1] - http://www.market-ticker.org/akcs-www?post=226468

[2] - U.S. Constitution, Article I, Section 8, clause 4 - http://www.usconstitution.net/xconst_A1Sec8.html
Unity, KDE, LXDE, XFCE, Cinnamon, Mate, Gnome 3, and I have tried to just go with openbox and Tint2.

First - it is different than windows is absolutely valid complaint. Having to tweak muscle memory is highly unpleasant.

A single problem with KDE - windows key cannot be mapped to show the start menu without extension.

Second is that all the taskbars that I found for it were just worse than the windows one in multimonitor setup or ugly.

Also Alt+Tab worked inconsistently.
from page... zOMG this is evil!

CODE THAT MASQUERADES AS COMMENTS AND VICE VERSA

Include sections of code that is commented out but at first glance does not appear to be.

for ( j=0; j < array_len; j +=8 )
{
total += array[j+0];
total += array[j+1];
total += array[j+2]; /* Main body of
total += array[j+3]; * loop is unrolled
total += array[j+4]; * for greater speed.
total += array[j+5]; */
total += array[j+6];
total += array[j+7];
}

Without careful attention , would you notice that three lines of code are commented out?
I realize the subscription model is likely more attractive from a business standpoint, but as a consumer, I don't see why I would want to pay a monthly or yearly fee for this app - I'd prefer ownership to leasing (which is the norm for applications not requiring server usage).
Pretty sure dependencies can come straight from a git url, bypassing npm. Put something on npm, and in your package.json you can depend on something straight up from github. npm will install and build that and it may break your stuff, it's a gamble. Given how dependencies nest into a massive web, you don't have to use many things before you end up with something that breaks you.
Algolia raises a $1.5 Million seed round to make Search not Suck
Wow. Bring some number which proves they're not (mostly) nobody. Then I will apology for ignorance.
Counterproductive in the sense of making it harder for people in general to get closer to the truth

I disagree. In noting that a doctrine has no foundation, bearing, or interest in the truth or verifiability, you're saving a lot of wasted time and breath.

As for collectives, last I checked most humans were collectives of a few trillion or so individual cells, comprising multiple gene lines and species.

Do you want?
But it's not public information either, unless you choose to make it public.
No, but it can be harvested for directed attacks or spamming. Entering it would basically 'prove' it's a valid address.
Whoa, slow your roll buddy. This could be really easily done by preprocessing the data and creating simple objects in redis. One object = email, sub objects of email could just be flags for the service it's on.
Not smartphones themselves, but the technology which enables smartphones also enables automation of lots of jobs.
I actually don't think that this is wrong. A complex API is a creative expressive work. Now there might be a good fair use argument allowing copying of API's for compatibility but that is a separate issue.

Note that I don't like Oracle but if you imagine the same facts with the protagonists being old Sun and MS instead of Oracle and Google would you still be cheering for the MS side?
You have too many chat apps. Can Layer connect them?
I agree.
However for people just not interested in tech stuff, teaching them how to use 2 factor authentication is pretty hard. I tried writing out the tutorial for friends but realized it's pretty daunting for regular users.

What if Google started charging people (only ones with credit card on file which means they are in place with necessary infrastructure) $5 a year for NOT using 2 factor authentication... I guess I can dream...
One way to approach this problem is to have accreditation bodies require a more equitable distribution across the student body.
This is exactly my problem. I have an iPad 2. I know that if I move off iOS5 I have to move to iOS7, which really wasn't designed with the iPad 2 in mind.

I'm now stuck between a rock and a hard place. Stay where I am and many apps (like Spotify which I pay for) no longer work, or upgrade to iOS7 and know that the iPad 2 just isn't powerful to run it in the same way in runs iOS5 (for which it was designed for).

I'm desperately waiting for a jailbreak so I can install iOS6, which I see as a half way house.

The reality is that Apple are deliberately degrading older devices, in order to make them obsolete. Of course I understand they are just building software that is designed to run on the most current and powerful of their devices, but the deliberate prevention of installs of older iOS versions when a user specifically wants it is frustrating.

In hindsight I shouldn't have bought an iPad, but there wasn't a viable alternative at the time.
This is so awesome. Is there anything like this in San Francisco?
Indeed, API keys make a lot of sense for a lot of cases.

The API key is to prevent someone from coming and taking all the bread at once and leaving none for everyone else (i.e., computation/network capacity).

Your bakery gives out slices of bread, but it only dispenses these slices at a set rate (i.e., the anti-DDOS mechanisms built into most large sites). If you want to get a lot of bread at once, that's okay, but you need to let the bakery know.

This isn't an adversarial system, in most places this is a cooperative system. Without a key, if someone is taking too much bread, everyone suffers and the bakery has to start banning people they suspect of taking too much bread. They might ban the wrong people, and the only solution is adversarial.

With a key the bakery at least can know who's been taking the bread, and call them up to ask them to slow down. Nobody has to get banned, and the solution can be a win-win for everyone instead of a win-lose. In a lot of cases the bakery can even figure out what the person is doing with all that bread, and figure out solutions where less bread is required to begin with - thus increasing availability without actually stopping anyone from doing what they want.
Depending on the level of comfort you are used to, you can go a lot cheaper. I shared a room in Bed-Stuy for $350 / month and biked to Hacker School.

I did then blow the money I'd saved by eating out every day, but that's a different matter.
I got my Adobe account pwned, apparently.

I didn't even know I had an Adobe account, I don't use any Adobe products.