skysight-inc/HackerNews huggingface dataset:
No, but it has a claim to the "american dream" of hard work ending with success, a white picket fence and the like.

Whereas in real life you see people working their ass off all their lives still working at Walmarts at their 70s, while heirs, privileged slobs and frauds who haven't actually worked a day in their lives are living the dream...
4 Reasons Why Hacker News Readers Need More Sleep and Honey
Personally, I'd rather not have to go log in to my email because a site decided it would go passwordless. From a usability perspective, you've greatly extended the amount of time it takes a user to log in and do what they wanted to do.
There are at least two major indignities connected to a conventional life and career. The first is that mainstream education is about winning prizes rather than learning what is interesting to you, for its own sake. The second is that most people don't particularly enjoy their jobs, they're only working for money.

Although there's still a taboo around not working, it can't last. The future, as Arthur C. Clarke said, is not full employment, but full-time playing. (Some of that playing will resemble what we now call 'research'.)

Meanwhile, there is work for anyone who has minimal food, shelter and web access. There are many unsolved problems out there and not just in open source software. With dignity galore, because they're important.
Facebook buys Whatsapp for $19 billion: Value and Pricing Perspectives
I think it is in the spirit of basic income.

Basic income allows people to better choose their own destiny. I can move from London to Wales, or move from Wales to London, knowing in both cases that I'll at least have a basic income to cover moving costs and minimum expenses while I set myself up.

That nets me a different quality of life in each place, exactly as it should. Choosing to live in London means you share the resources with a much higher population density and take the (many) positive and negative consequences of that.

You still need to work, but you have more freedom to negotiate; at least, you have gained a decent Best Alternative to Negotiated Agreement (BATNA) - if things go horribly wrong you can still move to Wales :)
Node.js password hash module, node version >= 0.11.11.
https://github.com/fundon/pbkdf2
I work at coffee shops for one of a few reasons, depending on the day. Sometimes I just want to get out of the house, and it's good to see what other people are talking about and doing.

Other times I need to get away from my very needy, very rambunctious dogs (we have three) but it's raining or really cold outside so they want to stay in and play. That gets very distracting.

Finally, sometimes I drop my wife off at work as she's a professor and it's difficult for her to find parking. So I'll take her to work and then camp out at the coffee shop where they know me and immediately make my order without me even asking.
Not many people are going to be running the unstable branch of node in production.
I implemented the same thing for reddit a while back, and learned the same lesson :)

However, I haven't completely given up on the idea. The point is that while limiting news to things you've liked in the past is a terrible idea, helping you find good articles isn't.

The question is, what constitutes a good news item? I think the key is that there are many answers to this question:

1. Something very specific to your interests (your classifier should be good at detecting this)

2. Something big that everyone should hear about (the HN frontpage is good for this)

3. Something about a new concept you've never heard about. I've implemented this by keeping track of popular words on reddit and giving a boost to words not seen in the past, with some success.

4. Probably others I haven't thought about.

I'd love to hear your thoughts on this.
Caveat: Not a professional analysis, and not the OP.

There's 248 million people ages 16 and older in the US, of which 63% are in the labor force[1]. So 156 million people are available for work (not all of whom are employed).

Total population is about 330 million.

If each of them were to get a basic monthly stipend (this is everyone, including infants) of $1200, that's $396 billion per month in payments.

Per working individual, that's a tax burden of $2538 per month. And that's just for this program - there's also the rest of government to pay for. Military, roads, police + fire protection, and so on. This also assumes that the basic stipend replaces all other existing entitlement and welfare programs. Which isn't likely, because politics.

Yes, the working individual will also receive a stipend payment, reducing their net tax burden to $1338. But for an hourly employee, that comes out to about $8.35 per hour worked that goes to tax. Even with the new $10.10 minimum wage proposal, that leaves them just $1.75/hr as incentive to work, vs. just staying home and living off the stipend.

[1] http://factfinder2.census.gov/faces/tableservices/jsf/pages/...
How is this better than the built-in pbkdf2 in node?

http://nodejs.org/api/crypto.html#crypto_crypto_pbkdf2_passw...
I'd love to see the git blame logs for that one.

Whoever wrote that code even before it had the bug was an incompetent cowboy hotshot who wanted to show off how pedantically he knew and could surf the nuances of syntax and optimize the code to have the smallest source file size by penny pinching brackets.

"ALWAYS USE BRACKETS" is one of the oldest and wisest rules in the book, and this shows why. Anyone who actually writes security related code like that, blatantly ignoring important coding practices in the name of "aesthetic beauty" or however they rationalize omitting brackets, should be fired.

I bet they're the same cowboys who fanatically prosthelytize JavaScript automatic semicolon insertion too, because that's another outlet for their obsession with showing off how clever they are to write code that requires them to deeply understand and consider every nuance of the syntax at every keystroke, instead of facing the fact that they or somebody who comes later might actually make a mistake, and coding defensively.

Maybe they really are fucking geniuses who never make mistakes, but that's not true about everyone else who has to read and modify the code.

Apple should go through all their code and fix it, and dock the salary of anyone caught not using brackets.
This is only needed once on the same browser. Once you do this, it will store it as a session or something. The text is not very clear on how he imagines this to work but that is what I can think of would work.
Is it still a scam if the idea is plausible/useful and the product created is actually profitable for the investors?
The linked post says : "I think we shouldn't release 9.4 unless it goes in."

I haven't been following the PG developers mailing list that closely recently and the article doesn't go into any details as to why it may be delayed.

From the link that @masklinn posted (Thanks, very interesting!) to a hstore presentation, it looks like the hstore side was developed by November last year, so I'm wondering why it wouldn't be ready for release by this September or whether its just the integration of hstore/JSON side of things that is the hold up.

For me, the new PG feature - although its an outside project - which I am most looking forward to in the 9.4 time frame is a newer JDBC driver for Postgres ( https://github.com/impossibl/pgjdbc-ng ).
> I read articles ... and then proceed to ... ignore it.

> ...unable to motivate myself to actually go

> don't even feel in control of your own thoughts

> I always fall back into the same patterns.

I'm not a doctor or professional, so take this with a huge grain of salt and get help outside of HN:

Did you consider having adult ADHD? - maybe the inattentive type? Do you have some disciplines where you still able to excel besides having problems with motivation and procrastination everywhere else?

I've lately read an adult ADHD CBT therapy book¹ and I was really surprised how it explained a lot of things in my life.

Depression is a common co-morbidity and while I'm more on the anxiety side your description sounds pretty familiar.

Knowing about these things accepting that I have to attack certain things from a different angle helps me a lot recently, I also don't feel like a stranger in the world anymore - I'm almost 30 years old and I have not much academically to show for in my life.

Maybe it's bullshit and you are better off ignoring it, but from your description I'd considering checking that angle too.

1: http://libgen.org/book/index.php?md5=b8e7b20b602fee2b1bdb1b1...
My understanding is that recent (13.10+) Ubuntu ships with an AppArmor profile that blocks known ways of escalating out of the container. So, LXC under Ubuntu is in better shape than LXC on other distros, where you can use the uevent_helper trick[1] to easily escape the container.

It sounds like your use case could also use the new unprivileged containers[2] feature, which is going to be a dramatic increase in security (since even if you somehow get access to run a command on the host container, it would not be as root).

[1]: http://blog.bofh.it/debian/id_413

[2]: https://www.stgraber.org/2014/01/17/lxc-1-0-unprivileged-con...
Sexists, police, and Ferengi.
http://en.wikipedia.org/wiki/List_of_urban_areas_in_the_Unit...

Greater London, bigger than the next ~7 largest urban areas in the UK put together. A lot of infrastructure would need rebuilding if 10% of the UK population were going to quickly up and move to the remote hills and North Wales towns.
I think your idea is pretty good, and I wish you luck in getting in wherever the hell you want.

Also, I'm probably about 7 years older than you, and yeah, high school was fucking stupid. Moving on with your life is gonna be awesome.
site down.
yet again a static html file is served from a private server.
Node.js stable version(0.10.x) can not change algorithm.
http://nodejs.org/api/crypto.html#crypto_crypto_pbkdf2_passw...
Which cryptographically strong hashing algorithm to use? It depends on situation. I think adaptive one ( PBKDF2, bcrypt, and scrypt) should be used all the time. PBKDF2 if you want to hash on devices with limited computing power, bcrypt and scrypt on standard servers.

Other one like SHA256, SHA512 are supposedly for fast, cryptographically strong hashing. At least that's how I view it.

> If you have special security needs, enforce a minimum length of 12 characters and require at least two letters, two digits, and two symbols.

I hate when passwords require certain patterns. See http://i.imgur.com/hvyziAx.png from USCIS.

And I think there is one point missing: limit the max number of characters for the password. As shown in Django's password DoDS attack, don't allow long password takes up 1MB.
KDE Plasma Next
And just how far would £3000 go if you had anything at all serious remember that US guy who had to pay $50k for a one night stay appendix removal.
Or we just discovered how useless the marketing metrics for a large number of companies can be. Probably a couple product ideas in this problem...
It depends heavily what sort of things you're aiming to do.

Personally, my advice is: university-level science/engineering/math classes are going to be, on the one hand, a damned hard weed-out filter the first couple years, but once you get to the advanced stuff, it's going to be one of the only opportunities you ever get to learn truly high-level, difficult, interesting material with actual human guidance, rather than having to just pick up a stack of books and work through them on sheer hope and grit.
Ask HN: Do you have startup ideas to share?
yes, it turns out we laugh at the mactards not just because they bought an overpriced intel laptop, but also because it is full of now publically known security holes.

Shiny but insecure - the agony of choice!
Facebook is an untrustworthy company.
App.net Broadcasts is pretty cool, using it on my Android: http://blog.app.net/2013/11/21/announcing-app-net-broadcast/
How a couple of Punk-Ass Kids dreamed up a new Design Framework
Too much news? Looking for a good read?
"The model can only get better with more training data, which requires me to judge whether I like stories or not. I do this occasionally when there’s nothing interesting on Facebook. Right now this is just the above command-line tool, but maybe I’ll come up with something better in the future."

If you let your program log into HN using your account, it should be able to tell which of the stories you've up-voted there. If you use that as the input to your classifier, as you read stories on HN, simply mark those that interest you by up-voting them.

I'm also curious to know whether the stories are weighted by age to account for changes in what you find interesting.
> Washing dishes is so incredibly dumb. What should have been done long ago is standardising plates, cups and cutlery and creating integrated dish cabinet/washer that can wash those standardised items and store them. The fact that in 2014 we still rely on manual work to wash the dishes is a disgrace perpetrated by oversupply of cheap human work.

And what, exactly, do you propose that we do about this "oversupply of cheap human work"? If we simply ignore it, there'll be hell to pay. The old saying, idle hands are the devil's workshop, is based on millennia of human experience.

Suppose that all the dishwashers in the U.S. were suddenly to find themselves both (1) out of a job, and (2) as a result, unable to earn enough money to feed themselves and their families.

Now consider that for some of these people, retraining them to seek out and hold other jobs might not be much of an option. There are some people who, for whatever reason, simply can't learn the necessary skills / behaviors / motivations. (If you're inclined to scorn that notion, or such people, consider how little we really know about human learning abilities and motivation; such people are more common than you perhaps imagine.)

Are our unemployed dishwashers going to sit around passively and accept their fate, watching their families do without while they see others around them prospering? Not bloody likely --- they're going to try to do something about it. And some percentage of them are going to make trouble, e.g., by robbing or cheating others, dealing drugs, rioting, etc.

From a purely-pragmatic perspective, if we want to keep our vaunted social order intact, then we're going to have to figure out how to keep people (A) occupied in reasonable contentment, and (B) reasonably-well fed, -clothed, -housed, etc. This is a brute fact, which we can like or not, but which we disregard at our peril.
Disagree. Windows .net devs shouldn't use Bcrypt. The .net bcrypt port hasn't been verified for .net, so they should be using pbkdf2 instead, as per the article.

The most recent version of the ASP.net Membership provider offers this hashing algorithm as a built in option.

http://stackoverflow.com/questions/481160/is-bcrypt-a-good-h...
Over-simply, because they do not want to indicate that their site is about those pages, for whatever reason.

In practice, I'm not entirely sure but it looks like it's quite old since those pages don't seem to exist anymore, even as folders which don't exist as pages in themselves, and they aren't 301-redirected to the current relevant pages.

In fact, they're all 404's. So perhaps they used to be pages, were deleted, and kept being crawled which made their site look crap (because of the 404's). Now they could use 301's, but I assume that the reason they didn't is because they might want to restructure the site in the future and re-use those pages. They don't use 302's because 302's are unreliable and freaky.

Does that sound right to everyone else?
I am talking about welfare not healthcare - different budgets.
From the slide on your very link: "The initial release of DROPOUTJEEP will focus on installing the implant via close access methods. A remote installation capability will be pursued in a future release."

Basically how it worked was they jailbroke your iPhone and installed spyware on it. Is it quite likely that today, 7 years later, they have a remote 0day to do the same? Absolutely. But there's no proof that "the NSA has total control over all iPhones".
My Facebook Like Website – HTML
made from HTML. Facebook like, no scripts only the contact from is in PHP
Whether it was incompetence or malice, whoever was responsible for the extra goto, as well as whoever was responsible for ANY of that code not following common practices including ALWAYS using brackets, should be fired.

And that fact that this bug and terrible coding style was in the publicly available source code for so long totally disproves ESR's "many eyes make all bugs shallow" myth. Thanks for the false sense of security, Eric. The chickens have come home to roost again.

If "many eyes make all bugs shallow" were true, somebody would have raised the flag "Hey everybody, these Bozos are actually omitting brackets in their SSL code! Somebody could carelessly insert a statement and accidentally (or maliciously) introduce a hard to see bug some day!"

Hardly anybody actually bothers to read code in the real world. So there aren't "many" eyes, and even if there were, many bugs aren't shallow even to expert eyes, and "all" bugs will never be shallow to most eyes.

That's why it's important to pay competent security professionals to actually take the time and effort to audit source code, which is difficult work that requires much time and effort that takes them away from other valuable, high paying, less tedious and mind numbing work.
I am kind of amazed that that works. What's going on - does the baseband have its own IP stack, which it somehow shares to the computer, which then declares its own mini-lan and lets the iPhone on at a higher level such that iOS uses that preferentially?

That's bizarre; I'm tempted to try it out when I get back to a country in which I have mobile data.

"More happening in this iPhone, I feel, than has been revealed"
1. People have more than one device.

2. People use different computer.

3. People who likes to sign off.

4. People who likes to use private browsing.

5. People who create new profile.

If you are Facebook, try that. Passwordless will not scale. Of course, passwordless scheme only works for very limited, selected websites.
Windows 8.1 Spring Update to Focus on Non-touch Devices [MWC 2014]
How to tell – Is my rental car's gas tank diesel or gasoline?
We eten teveel zout: wat zijn gezonde zoutvervangers? | Leef Nu Gezonder
> I'm anti-huge power lobby, unless you can find one that does much more good than harm

This is the core of the thinking behind a dictatorship

> People are under pressure to be sheep already if you work one of these 'jobs'

What pressure? People are asked to work in exchange of money. Which means this system, however imperfect, still sees people as useful and productive and, thus, still gives them a chance

And it's elitist because you are creating a clear division between those that are productive and those that bring no value and that actually are a negative investment (because they do "fake" jobs). You really think you can put a mentality like that in place without creating elitism and potentially an even more uneven society than today?
> So what?

He's pointing out that it's a practical impossibility. The money for UBI has to come from somewhere, and any money a government has at its disposal comes from: 1) extortion (ie. taxation), 2) printing, 3) borrowing.

Those are the three options, and none of them are a sustainable way to fund UBI, because the amount of money needed is so massive. You can't get something from nothing, and everyone can't get something from everyone else.
https://groups.google.com/forum/#!topic/vim_dev/x0BF9Y0Uby8
> could replace C++ either for systems programming, scientific libraries

AFAIK Julia is GC'd and is only embeddable, so meh.
"Acting like an idiot" for building a nice app ass a free open source project and sharing it? Come on, let's be constructive here! That wasn't necessary!
So Oracle, Google and Microsoft have a larger install base of their mobile OSes compared to their desktop OSes?
Oh wow, I didn't realise my robots.txt joke had spread!

I added that to the last.fm/robots.txt many years ago (http://www.wired.com/business/2010/08/robot-laws/all/), and have just been made aware that it appears to have spread across the internet:

https://www.google.co.uk/search?safe=off&q="Disallow%3A+%2Fi...

Favourite sites I've found with it so far: php.net, princeton.edu, nest.com, songkick.com.
> Postgres is now the default open source database

Really ? I still see MySQL and MongoDB both being the two most deployed.
Simply ignoring your feelings to get a job done is just a tactic, and IMHO, not a very good one as it is not sustainable. You should always want to do what you are doing; not necessarily in the sense that this is what you would like to be doing for the rest of your life, but in the sense of recognising that this unpleasant task will get you closer to that something you would like to do the rest of your life.

I think the best method to get something done is to first have a clear vision and passion for the bigger picture. Then, understand how this unpleasant task gets you nearer to the goal of that bigger picture that you want. If it does, you won't need to ignore your feelings. On the contrary; your feelings will push you to do it. If it doesn't, there's a good chance you should be doing something else.
Yes I know this. I do use steam and every time I change something, I have to activate the new device with a mail. I personally hate this but some could actually have use for it.
>> "many of them rarely install updates."

Not true, at least on iOS. iOS 7 is on over 80% of devices less than 6 months after launch.
Telegram gains 4m new users in 36 hours
Off topic: Watching the picture, do people realy code in their tablet (ipad, etc)?
The Umbrella Corporation
404 for http://www.gstatic.com/trends/websites/sitemaps/sitemapindex...
> How do you know that you recieve VP9 and not VP8, is there some download script for this?

Right-click on a video, click on "Stats for nerds", see if there's VP9 on the "Mime type" line.

> As long as there aren't any compability issues I can't see why not, that said when playing some of my vp9 test encodings in VLC (which I believe uses ffvp9) I sometimes get decoding errors causing huge macro-blocks etc, when playing through Chrome or if I decode the vp9 stream to another format they play perfectly.

Assuming these issues still happen with a nightly build of VLC (http://nightlies.videolan.org), you should report the bug to FFmpeg: https://trac.ffmpeg.org/
Just had a quick port of his example to Go.

https://bitbucket.org/pkg/passwd/src/27f970fbcc05c0c6c258600...

Anyone fancy taking a look to see if I understood correctly?

EDIT: Specifically, should the PBKDF2 "key", not be used for something (like HMAC) rather than being used as the hash itself?
A comparable situation would be Microsoft patching 7 & 8 desktops before patching Surface because there's many more PCs than Surfaces out there.

I'm not saying it's a great move, but if you're going to prioritize, doesn't it make sense to start with what you know will protect the most users ?
No mention of C++ Primer? A rather thorough (if a bit overwhelming) introduction to the language. And it teaches idiomatic C++, not just C with classes.
Show me where it says that PostgreSQL is the default.

https://docs.djangoproject.com/en/dev/ref/databases/

I've only used Django with SQLite but I would be shocked if it was actively recommending a single database. It would imply that somehow Django doesn't work as well with the others.