skysight-inc/HackerNews huggingface dataset:
There could possibly be a solution that has to do with legislation forcing game developers to be upfront and transparent about the kinds of purchases in their games. Lots of games, for instance, might have a very reasonable limit on in-app purchases analogous to paying for "the full game". Other games have no limit on what they'll let you buy. It could be done by an independent ratings board (much like how movies are rated for age limits).
It's hard for me to gauge whether this is true or not. There are some amazing deep games like chess and bridge that have extremely simple controls. Do these counterexamples disprove the rule, or are they rare outliers?
There's a lot of fake review spam. It's pretty blatant too.
Is there a solution that prevents carriers from privileging different types of data but maintains ability to peer at no cost?
They're mostly addicts who still have room left on one of their credit cards.
That is actually good in my opinion, because of how static records are expected to be in structure. You shouldn't be able to reload or proceed with data dating from an earlier version as if nothing happened.

You have to think about what changed and prepare for an upgrade from any version you may encounter, rather than move along with incorrect data, similar to if it were corrupted.

I fear Erlang programmers will use maps in a way that allows them to be sloppy, rather than just exploiting the flexibility they allow. Double-edged sword, in a way.
There is another reason why downloading software from "somewhere else" is less than ideal in a case like this. The reason is that the pirated download might not be the original software as provided by the developer; there is no guarantee that it doesn't have, for example, some virus in it.
Harvey Keitel, CEO, Or How To Pull Off The Impossible
What? Are you sure? Can you give us some details?
The problem is just: "You have old software, which was distributed on CD/DVD and have no drive anymore."
The solution: get a drive or use another Mac's drive via Remote DVD.
The problem is not only with Adobe, but with others too. Like there is no MS Office download, AFAIK.

Yes, Adobe has a ridiculous pricing policy, especially if you live outside the US (yeah, translating from English to English is expansive, UK version, AUS version, I get that </irony>). But that is a different point, I think.
Lyft - https://www.lyft.com/jobs - San Francisco, CA (SoMa)

With the tap of a button, passengers in need of a ride are instantly connected to nearby drivers. We currently operate in cities all across the country, and with your help, we’ll take Lyft worldwide!

If growth excites you, this is the place to be! We're looking for:

- Software Engineer
- Senior Web Developer
- Android Engineer
- iOS Engineer
- DevOps Engineer
- Data Architect
- Data Scientist
- Technical Recruiter

Stack: AWS, MongoDB, PHP, Python, Go, AngularJS

Interested? dhochman a/t lyft d/o/t com. Open to coffee/tea or a Hangout to discuss. Incredible team, top medical & dental, open vacation policy, catered lunches, snacks, dogs, equipment, etc.
Bright.com tried to do similar thing [1], and shortly after sign up, I had a bridge construction job sent my way as a great potential fit.

[1] Heard this directly from the founder about a year back.
I like the idea. I'll try it! For now, I'm big fan on "tree oriented" todo lists, so I'm big fan of workflowy.com
Host's. Stopped using it once destroyed, just ended up re-installing Arch and thanking the gods I had backups.
First, you're assuming that the interview process reliably distinguishes between "qualified" and "easy to talk to", but in practice not only do engineering interviews not do that, but in confounding the two they also drastically over-weigh the "easy to talk to" attribute.

Second, you're assuming that the way a candidate interacts with your team in an interview is an accurate representation of how they'll gel with the team down the road. Some of the shyest people I've interviewed have gone on to be the ones I actually end up talking to all day. Part of that is because interviews are hostile and make people shy, and part of it is that different people take different amounts of time to open up to strangers.

Finally, you're describing the "gut check" interview process used by almost every engineering team since the 1990s. We have evidence for how well that process works. Answer: not well.

As an aside: the idea of hiring candidates based on how well team members "get along" with them is repellant to me, as is "culture fit", since they're basically ways of making sure you have a team full of people who listen to roughly the same music, drink roughly the same beer, play roughly the same X360 games, and like roughly the same technology stacks. But that's an emotional argument; the real argument is that it doesn't work.
it would suck for them if all students started using GIMP, get hired and ask their boss: Can I use GIMP for this? It's absolutely free.

Then you start seeing job postings looking for "GIMP experience required."
To counteract such bugs I usually try to use as short names as possible. I mean, there is no point in writing productionDatabase when prodDb works just as well. It has several advantages but one of them is that the latter is much less likely to be misspelled.
I just don't get such people, how can someone be so persistently annoying instead of just downloading the damn software somewhere else?

Or maybe connecting an external DVD drive/using Apple Software to connect to some DVD drive over network.

Instead this guy wastes his time calling hotlines and writing a pointless blog post - I guess that's what it means to be more productive on a Mac. (Of course, there are people that don't know how to solve such an issue, but this person is probably not one of them)
ruined quizup
Yeah to those who see it as some catch-22 that was forged at the dawn of man, sure might as well "legitimize" IAP...

For others, like myself & Phaus, apparently, we'll just play a different damn game. I think the disconnect here is that people are like "well look its still working, isnt it?" but the idea of "ruining" a game isnt that the thing is broken now, its that casual players dont wanna get involved cuz its an all-or-nothing shitshow where youre not sure exactly when the menu is gonna pop up saying "give us more money or your time invested is now a complete waste".

i only play single-player story titles now for the most part because i know that pretty much anything else is gonna try to mess with my mind & prey on the consumer. COD & Battlefield are the best examples i can think of. They keep game prices high, get players addicted to repetitive mindless multiplayer, then charge $15 for a change of scenery (should 3 or 4 maps cost 1/4 the price of the game itself?)

If you buy, you know beyond a shadow of a doubt that you're being ripped off & it makes you resent the gamemakers. If you don't buy, you're left with a limited set of maps that is getting duller by the second, lol

I'm avoiding by just buying downloadable PC games for between $1 - $10 each & then when its over its over. its the skinner box games that overprice DLC and this alone should be a trigger that makes people see them for what they are & have the willpower to opt out
SEEKING WORK - New York or Remote

Full-stack web developer who specializes in the front-end, loves vim and TDD/BDD, and who wants to help make your fledging idea a digital reality.

GitHub profile: https://github.com/thirdtruck
Personal project: http://rubyai.org

Experienced foremost in:

JavaScript/CoffeeScript (Backbone.js, node.js)
HTML/CSS/Sass (Bootstrap)
Ruby

Also experienced in:
Python
Perl
Java
MySQL

You can reach me at freelance at thirdtruck.org.

---

Are you a fellow freelancer here in New York? I'm new to the city and would welcome the opportunity to meet a cohort in coding over coffee or tea.
Dropbox's website used to say: All files stored on Dropbox servers are encrypted (AES256) and are inaccessible without your account password.

This was changed to simply say that they are encrypted after this FTC complaint was filed: http://www.wired.com/images_blogs/threatlevel/2011/05/dropbo...

Luckily for them (and unluckily for consumers) they got away with that particular lie during the early years where it was most valuable.

There's also a fundamental problem that Arash doesn't understand security. This was clear after the incident where no password was required in order to login.

Arash claimed that this was only a problem if you were one of the unlucky few who was actually hacked. He didn't understand that a risk exposure is also a serious problem, even if you happen to dodge the bullet on that particular incident. In fact, he seemed to get quite angry with paying customers who were upset by it because in his mind you don't have the right to be even slightly bothered by a major screw-up unless you were affected that time.

I understand that at this point Dropbox is huge, so it's full of people like you who don't have anything to do with the customer-hostile bullshit that the founders did... but it's still impossible to trust anything you guys do. After all, when the CTO is untrustworthy, only a very, very naive person would trust the product as a whole.
Accents from Around The World
Didn't know enough at the time to be able to diagnose what had happened, and I had just started playing with containers so doubtlessly I fucked up somewhere. But it seems so utterly weird that (a) it could happen and (b) that a newbie could easily accidentally stumble on something that'd cause everything to go to shit.

I just ran lxc-destroy on what I thought was a container, started running into lots of issues in Chrome running on host so I closed out Chrome to try to restart it, at which point its binary couldn't be found so I blindly restarted hoping it'd fix it. And... there was nothing.
I think D3's AH failing was using real money, not just balancing or buying gear by default.

Buying gear in WoW is easy and a given up to a point, but limited to in-game currency. To buy some of the best gear, you just have to be the owner of enough gold to buy something from one of the two auction houses if it shows up. That meant you were active in your server's economy (helpful) or you were buying gold from scammers (which a lot of people are scared to do) - or you were raiding at a point where that gear was equivalent to what you can get, so you just ignored it (a small minority of raiders, not just WoW players overall). If real money was involved, it'd probably turn into something worse than D3's AH fiasco where people would quit playing since everyone playing for non-RP/solo reasons would eventually be forced to spend a bunch of money on top of in-game time to be on an even footing.

Not that I think D3 should have followed the same exact footsteps as WoW in terms of how to make money, but I'm looking forward to next month to maybe get around to start playing D3 again now that the AH will be gone there.
Show HN: Open source WebRTC powered Skype/Hangout alternative
I just presented at FOSDEM a personal project I've been working on. Give it a go and tell what you think. Cheers!

VMUX is a Skype™ alternative that runs in the browser. It's built on top of WebRTC so you don't need to install any plugins or use Flash. You can do one-to-one or multi-party video calls and all the communications are P2P and encrypted.

https://vmux.co
I dont understand what's the problem with truffles. I mean, is it impossible to grow them on farms? I don't believe you can buy only wild growing truffles found by trained pigs. If this were so, truffle would be an extinct species long time ago.
Where there is a market problem, there will be a market solution.
You are assuming that ecommerce as it exists today would have happened without RSA (or DH). Maybe someone else would have created it, maybe not. Maybe someone else would have created something else to facilitate ecommerce, maybe not. Maybe we would never have created it and instead relied on some cumbersome form of symmetric cryptography (yuck). At the very minimum, ecommerce would have been delayed.

We need to ENCOURAGE investment into innovations. Without patents, investors hesitate investing into costly R&D which can be easily copied once seen.

Innovations of the 70's like asymmetric cryptography led us to Internet ecommerce which have led to the flourishing world of online startups which we today take for granted. It's all connected.
California threatens to shut down coding bootcamps
Calling, works, and is far more effective than clicking a button, says Alexis Ohanian, in this fireside chat at the NationBuilder HQ.

Uploaded a couple of days ago:
http://youtu.be/ybXKBJ0xDNU?t=10m35s
Cigital is hiring software security folks

What we do: We're a software security consulting firm that helps build security into the SDLC. We work on a wide variety of projects involving static analysis, penetration testing, architecture review, threat modeling, red teaming, network pen testing, etc. We deal mostly with the private sector and the types of applications we work with are varied from mobile to webapps to video games.

DO NOT apply directly to our website. Email your resume to dirtyb1t34@gmail.com, along with a desired position and location.

We're all consultants so we tend to travel a fair amount. As I said, the work is varied and you can really focus the type of work you do based on your interests and skills. It's definitely a fun place to work. The people here are really smart and there's lots of room to grow your skills. We're looking for everything from interns to principal consultants and we have positions open all over the place including:

• Northern Virginia
• Boston, MA
• Santa Clara, CA
• New York, NY
• Bloomington, IN
• London

You can read more about the jobs here: http://www.cigital.com/careers/jobs/
It seems to me that if you're planning to apply your serial to a piece of software that you download off The Pirate Bay then that software is not an illegal copy. It's only illegal if you breach your licensing agreement.
Bad analogy. Treating your /etc/motd as a scratch space is a perfectly reasonable thing to do. It's not the difference between shitting in a toilet and a hole in the ground.
I think the comic is suggesting that the words are selected at random, and not by a human so the distribution is even. That is how you end up with the expected entropy.
Implementor here. Richard O'Keefe deserves all the credit as he had the idea and suggested the syntax (EEP 37). I just noticed that it was easy to implement it through let rec expressions in Core Erlang. No VM changes were required.
I hope this only applies to apps targeting the next API version. As of now, Clojure apps have issues with ART:

https://groups.google.com/d/msg/clojure-android/J4cxkMRW2QA/...
WebAction (www.webaction.com) in Downtown Palo Alto - Full Time Hiring UI Developer, Platform Engineers, and Application Developers

Jobs@WebAction.com

WebAction is a real-time streaming big data company based in the San Francisco Bay Area, providing an end-to-end platform that aims to enable the next generation of real-time, data driven applications. Founded by a team of Silicon Valley veterans with proven track records, WebAction is backed by some of the most respected names in Silicon Valley. We're also well funded (recently raised $11m Series B by a private equity firm with a $15 billion fund).

We offer a competitive salary, excellent benefits package, generous equity for the right candidates. Our office is also a short walk from some great restaurants and coffee spots on University Avenue in Downtown Palo Alto.

For the UI Developer Position:

Responsibilities

- Code user interface components for a real-time big data dashboard

- Optimize code for performance and usability

- Contribute innovative ideas for new dashboard features

- Collaborate with platform engineers to coordinate user interface with back-end functionality

Requirements:

- Strong knowledge of Javascript, CSS, HTML, and jQuery

- Enthusiasm for working in a startup environment

- Portfolio of deployed projects

Nice to Haves

- Experience working with real-time, data-intensive user interfaces

- Experience with D3.js or other data visualization libraries

- Experience with Backbone.js or other front-end MV* frameworks

- User experience and design skills

For the Platform Engineering position, we ask that you have experience writing clean code in Java and have a strong desire and skills to work on a scalable, highly optimized data management infrastructure. We ask that you have the following skills:

-Large-scale distributed systems

-Highly available, highly scalable architectures, Hadoop (MapReduce / Pig / Zookeeper),

- Data Serialization (Avro / Thrift / Protocol Buffers)

- Experience Optimizing HBase Performance

-Real-time messaging (0MQ / Kestrel / Kafka or similar), Real-time event processing, Continuous Queries

For the Application Development position, please follow the link to our detailed description of the role:

http://www.glassdoor.com/job-listing/JV.htm?jl=887065158&...

If this sounds like you, shoot us an e-mail at jobs@WebAction.com.
Wouldn't that be tantamount to Michigan shutting down car manufacturing?
Perhaps. Unfortunately, that's probably a pretty big "if".
I think the comparison was between paying and not paying for Photoshop, not between Photoshop and Pixelmator.
Browser side certificates only work in the browsers you install them in; the average computer user will need tech support to help them copy a key/cert pair to a new browser. The key is also probably not encrypted on disk (by default).

Emailing a login token to a user every time they want to log in requires that their email is working and that they can get to their email, and would slow down the login process. It would waste everyone's time. I think it only makes sense as an additional authentication measure for high security applications where logging in at a moment's notice is not a necessity.

Yubikey is okay for one or two sites if you have one[1]. They cost money, and serve no purpose other than improving security of logins. Compare to a smartphone running a TOTP app. Most people already have a handheld device, and a TOTP app and setup for a website is a free one-time install with one-time setup and no ongoing overhead. It also doesn't require working email or even working internet, which doesn't matter in the typical case but matters a lot in edge cases. Email might be down. SMS might be down. You might not have cell coverage at all.

[1] Yubikey only has two slots, and so you can't store unique OATH seeds for more than two sites, right? How many yubikeys do you expect people to carry around? How many sites even implement HOTP rather than TOTP? If every site implementing 2FA implemented challenge/response for yubikey, then yubikey would be great. However, TOTP is the dominant form of 2FA, and that limits the usefulness of yubikey.
Completely agree. In terms of buzzwords, "passion" is the new "disruptive".
Its especially sad i think because old-school PC gamers probly remember when COD2 & the like were very DIY, moddable titles for nerdy WW2 enthuiasts.

Now they are a massive corporation with nothing moddable & the balls to sell simple gun skins in like $15 packs :D
The marketplace isn't viable. Refunds aside, people aren't willing to spend that level of money on a mobile game when they don't know if it's going to be good or not (and many are not).
Indianapolis, IN - JacobsParts Inc https://www.jacobsparts.com

We're a small and growing e-commerce company. Since 2006 we've been developing all of our own software. We're an all linux shop and we develop in Python and JS. We're seeking a full time developer. The job offers interesting work and good pay.

For more information contact me directly: jacob@jacobsparts.com
That's the entire reason the rules were originally put in place, no matter what they say, it was to avoid said lawsuits, not to protect children.

Nobody wants to see a kid hurt, but rules only get teeth when money is on the line.
Sadly, portability trumps everything. The thing is, most people will never experience a identity theft. But most people will want to lock in to some service from a friends computer at some point. So immediate experience, as opposed to analysis, favors passwords over your suggestions.
What are Entrepreneurs in Residence?
I agree, but haphazardly shaming products/developers is not a way I want to do it. I don't know how long such a statement is going to hold true once I have made it. Also glass houses and all.

If someone maintained a database of products and how they interfered with the use of a password manager or good password hygiene and there was a way to get off the naughty list then that would be great, but that is a lot more work.
I'm working on a game data project and one of the things I'm trying to figure out how to track is exactly this difference.

How can you tell whether a game with IAPs has "good" IAPs -- and the critical path of the game remains free -- or "bad" IAPs, paywalls/gating/pay-to-win? Also, how do you decide whether a content gate is a "bad" IAP or a "good" one?

I'm coming at it from a value-for-money angle at the moment, but I've learnt that people's definitions of "value" vary wildly. Some folks are more than happy to boast about completing Candy Crush without giving a cent to the developer.
Third on #clojure being welcoming
How to Increase Your Google Page Rank
Create an app in AngularJS – practical step by step walkthrough
This multi part blog series takes you step by step into building a app. Learn concepts as you need them when building the app.
"I had a talk in 2005 and the person was saying passwords belonged to the past. 2014 and we're still there: Why?"

Because passwords qua passwords are not the problem. The security skill of the median person is. I honestly don't know how to secure people in general, even making the blindingly optimistic assumption of perfectly secure authentication code.

2FA has the problem that to work properly, you must also print off one-time-use reset tokens and properly keep them. (If you can just reset via an email, well, you've just returned back to auth-by-email-account and the second factor is of dubious utility.) Specialized hardware is problematic because it really ought to be open to be secure, but if it's open, it's hard to make the profit enough to make it work... and users would still have to do something to properly prepare for losing their token which is going to be nontrivial.

(Login by email tokens, BTW, is not a great idea in general; obtaining an email account fraudulently should not grant you access to everything the user has. That's a problem with the current system, not the solution.)
How only Ubuntu ever works
By that logic there should have been no problems whatsoever before the creation of the rules that generally obtain at schools today. One has to ask what created the pressure for those rules in the first place.
I don't totally disagree with you, but suppose IAP was not an avenue these could have gone. They may have been better designed games as a result.
The diaeresis in this context is not an Umlaut. It has similar roots as on ï which comes from French, I think. While äöü in German are letters with distinct sounds, the diaeresis on vowels in English usage signifies a short pause before that vowel.
Installing old-school, shrinkwrapped box software onto computers that lack disk drives is a real pain point for a lot of people.

I made a little video[1] explaining how to install MS Office Mac 2011 onto a MacBook Air -- for my own use, in case I ever needed to do it again -- and it's received over 36,000 views.

LOTS of people have trouble with this. The Microsofts and Adobes in the industry don't appear to realize the difficulty their customers face.

1: http://www.youtube.com/watch?v=nz3hloQl_qs