skysight-inc/HackerNews huggingface dataset:
This easily is my biggest reservation about Bitcoin. There are huge huge security requirements on the storage and use of Bitcoin.

And frankly (I'm sure tptacek or someone will come in here to tear me a new one for saying this) but the state the art of computer security is a complete joke. These systems we have are just too complex, and it's a statistical impossibility to close all the security holes in the operating system and all the software on top. You can never predict when and where the next Goto Fail or Debian Random Number Generator flaw will show up. And that's for gigantic corporations and governments. And people are telling end users to keep Bitcoin safe on their home computer instead? Home computers will NEVER be safe.
Argh! It's comments like this that make me wonder if you history buffs out there will ever understand that we're entering a new phase of economic history: a trustless one.

All of these spectacular exchange failures out there have nothing to do with Bitcoin itself.

Go read up on trustless cryptographic systems, and understand that we're entering a different era. The failures that occur around the periphery of Bitcoin are nothing more than a fault line between the old system (trust in failing institutions) to a new one (trustless).

Signed,

A humanities major back in college (yeah, I studied economic history, too)
What I don't understand is why are Bitcoin sites keeping such amounts in their hot wallets in the first place? Bank robberies happen, that's why traditional banks don't keep a huge amount of cash in the teller's office. Why not just transfer almost everything into cold wallets immediately? This way, the worst that could happen is every once in a while a human needs to bring a cold wallet online for a big withdrawal - with the added benefit that, you know, an actual human would check if the transaction is actually valid.

It seems to me the solution to this problem (which will keep on happening apparently) is not primarily to make a site that is absolutely penetration proof, but to devise a system where the scope of a breach is guaranteed to be very limited.
All right, I'm game. How about function compositions? :-)
4 rupee price was before, when he first went to buy them. Years passed, and India has crazy amounts of inflation, and now it costs 2.5 rupees. I think if calculated, he probably made somewhat of a 70+% discount or more.
Ay, there's the rub: what should we work toward?

The first thing is, as always, to think about the current situation, and analyze its politics. See who the parties are. What their interests are. Whether their interests are authentic, or merely a result of many years of social pressure. What power is in question? Who has it? Who doesn't? Why? Once you understand the politics (which isn't easy because we often confuse politics with authentic will, merely because we've been subject to that politics for so long that we don't know anything else), then you can have people argue over values and how they believe things should be.
> rubber hose cryptography

Shouldn't that really be rubber hose cryptanalysis?
The Hard Thing About Hard Things: Building a Business When There Are No Easy An
Well, at least you know who is running the show.
That's not strictly true, people lose money above the insurance limit all the time. The reports here frequently discuss it:

http://www.fdic.gov/bank/individual/failed/banklist.html

If you go here, you see depositors not being made whole:

http://www2.fdic.gov/divweb/index.asp#bottom

But $250,000 of insurance for each account is much better than none.
9. People buy at low prices when disaster strikes - https://twitter.com/SMTDDR/status/438404079438422016

10. Eventually price goes back up, as it _always_ does.

11. ????

12. Profit
The user would get a blank look in their eyes if you told them that !
Yeah I did an image reverse on a couple of her pictures earlier: https://www.google.com/search?tbs=sbi:AMhZZisLJGBQtjlgs7XolU...

Most of the stuff she sends you can see the pixels of the computer screen she is taking them on haha
Windows 7 crawls on my personal laptop and office desktop. Both have i5 processors and 4 GB of RAM. It takes several minutes to cold-boot or wake up from hibernation and load Chrome. Minutes of non-stop HD reading.

OTOH Linux Mint boots up faster and is way more responsive. It's actually faster to cold boot Mint than to wake up from hibernation on Windows.

It's anecdotal evidence, but for me Linux is very superior in this aspect.
Thanks a million, Drupal
I might have been making assumptions on CouchDB which aren't valid - that remote users could query all documents (== pages) to get the comments.

With my thing yes it can be crawled, since requests to /comments/ID will return the JSON comment-data. However there is no enumeration of the valid IDs possible, short of a dictionary attack. (This is where I was thinking that exposing CouchDB might expose more data.)

I did consider not storing emails, and for my use-case that's fine, but I figured sooner or later somebody will want to access them so ruling it out unduly would eventually result in a bug report.
Everybody gets what they want out of dating.

If you want excitement, you'll get excitement.
If you want stability, you'll get stability.
If you want to confirm an opinion of yourself as undateable - guess what, that's what you'll get.

Most people say they want one thing but actually don't work towards that thing. They just pay it lip service.
Wanted: UI Designer in Munich
"When the H-1B cap is reached, large companies like Google often look to L-1s instead, moving new employees to their Canadian offices for a year to make them eligible."

Huh. I knew Microsoft did this in Vancouver but hadn't heard about Google also using it although it makes sense. As a Canadian I'm not sure if the country really benefits from it, although I guess it boosts the Canadian offices.
China’s Largest Exchange, BTC China, Adds Support for Litecoin
"The trustless economy" must be like "the paperless office" because everywhere I look around Bitcoin I see people losing money because they trusted someone.
"If you get rich, you have an apartment with an extra bedroom - and then you die."

"I've accumulated no money but I accumulate a lot of happiness."

-Arunachalam Muruganantham
Or cold wallets done properly.

For larger amounts cold wallets are better. No US$ 100,000 FDIC cap.
I know what JSON is :)
Who needs OpenStack?
Maybe ... but the governments are terribly keen on Bitcoin and it would be easy for them to say "we don't believe a crime has been committed". I think it's far safer for the Bitcoin community as a whole to police themselves, but determining how to add "self-regulation" in a decentralized way may take some time.
Armory is notoriously bad on Mac. Why are you using Armory?

Use Electrum, back up your passphrase in a secure location, and be done with it. Unless you're storing your inheritance, that should be fine. There have been no security flaws in any of the SPV clients on desktop, including Electrum.

If you're storing a huge sum, you should be using Linux.
What is wrong with China's health service? It is far more affordable than US
"have nothing to do with Bitcoin itself"

While that is technically correct, don't you think to most people Bitcoin is rather more than the protocol - it is the entire eco-system of applications and services that have been built over the last few years.

If the "fault line" between this "trustless economy" and the vastly larger "normal" economy isn't pretty painless then I can't see much of a future for Bitcoin and exchanges seem to be a pretty important part of that interface.
How to Love Yourself
Ask HN: does transparency scares us?
We have been working in workmeter.com for 5 years comercializing it for 3 years and we are always getting the same trouble in new implementations, people are afraid of being shown what they do. Employees of companies which choose our product get in rage over their bosses with privacy accusations and whether it is legal. These are really out off topic points, whenever one is using a company device even if it is not a comapny's device there have been for years firewall logs which allow admins "spy" on companies employees, windows log data,... But whenever they are told we will show you your activity using a software which aims to make this data more transparent people start getting mad about it.
I think this reaction is totally wrong, i think i would rather prefer having more transparency into my company than being "spied" opaquely.
Or maybe just people don't realize they are continuosly spied (see NSA).
We have a SGI machine (wights like ton) in our shop. Can't remember the exact model but I remember how someone mentioned it's the exact model used for animation in the movie....we use it mostly as a chair XD
Integrating Arquillian and JBehave
"I agree there are cases where skimming and speed reading make sense...The great works have many layers and are worthy of repeat trips." - The author, in comments.

I can't help but wonder was his article title clickbait, his article premise born out of ignorance, and his comments indicate his journey to learning that, in fact, speed reading is widely used as a learning technique in conjunction with what he terms "deep reading".
6 Books Every Mobile-App Entrepreneur Must Read
Ukraine hit by cyberattacks: head of Ukraine security service
You were recently promoted?
I hate to be all, my pile of spaghetti is bigger than your pile of spaghetti, yet I just can't help myself

- 2 decades in development

- just under 3k "scripts", mixture of php html "fusion", php classes, and last decade or so templates have been added

- last wc -l check, was well into 1m lines in house code

- database (we have a few), >300 tables, it used to be around 4 but we culled some tables / systems

This is our oldest system, still in use, still extremely business critical, we're doing a similar thing to you moving things out, cleaning house so to speak. But its going to be ongoing for a long time to come thats for sure.

Some of the people in this thread should get together and start a new dailywtf clone. Pretty sure we could preload a years worth of content with nothing but grep and git-log.
> And honestly, Rails already has something that works beautifully for an “interactor” extraction. It's called ActiveModel.

The thing which Rails and DHH offer no guidance whatsoever is the separation of persistence from the domain model. The Active Record pattern is itself a conflation of those two things, so this is an opinionated choice, and I respect it as a sane default for a wide variety of applications. It works perfectly fine up to a certain scale but when the business logic reaches a certain complexity and the persistence logic reaches a certain complexity then it makes sense to separate them. A lot of proposed solutions might be overkill, but keep in mind that DHH and the company formerly known as 37signals specialize in minimalist software, so they combat this complexity from the UX down rather than conceiving architectures to support it. I agree with this philosophy insomuch as all else being equal, simpler is better, but the problem is that some applications are necessarily more complex than Basecamp, and sometimes we need more than what Rails provides out of the box. Convincing DHH of this is pointless because he doesn't have to deal with it and he has no incentive to understand anyone else's pain in this regard.
Can this use the default bitcoin wallet or does it create its own?

I have the main Bitcoin app (which takes up almost 20GB on my SSD with it's blockchain) and I have a few others, like multibit. There doesn't appear to be any wallet management, each app creates its own wallet and can't open the wallet from another BTC app.
But algorithms don't create an economy – people do (and I actually have a degree in Mathematics). I don't have a problem with Bitcoin being hacked: that can and will be fixed. I do have a problem with the very notion of a "trustless" economy for two reasons: first, there ain't no such thing (it's like a worshipper-free religion). Economy equals trust. An economy needs credit and it needs insurance, and you can't have those without trust (heck, the word "credit" literally means "to believe"). Second, even if you could imagine such a thing, where a robot would compel you to pay up, or an algorithm would make decisions for you, why in god's name would you even want to? Why take away the freedom of people to come together and make collective decisions about the economy (say, like devaluating a currency) for their society's benefit? Why, because some people are crooks? The kind of society you picture is, literally, an autistic one.

While you don't want people to think that Bitcoin is failing after ceaseless thefts, you call our institutions "failing" based on what? I don't know about you, but my institutions aren't failing. They just require regular maintenance.

Also, if you think Bitcoin is about creating a new kind of trustless economy (in other words, the very same economy that existed prior to the modern one or in lawless frontiers like the Wild West), you are mistaken in believing that most people will follow you. That is precisely the libertarian politics that hangs around Bitcoin's neck, and if anything will choke it, this will be it. Forget about who's right and who's wrong. The reality is that most freedom-loving people aren't libertarian. They like their institutions and want to fix them. They don't want a trustless economy. We may be misguided; we might be wrong; but we're the vast, vast majority.

And if you like history, you probably know that people have been warning about the collapse of modern institutions pretty much since their inception. There were always those who wanted to grab their gold and head for the hills because the system is falling apart. And let me tell you that there were times the system was close to crumbling, but today we're not even close to such a big crisis. Nevertheless, the vast majority of people have put their faith in their institutions, and for about 500 years now, they've been right (well, more or less).
Use your own wallet. If you do not own the Private Key - you do not own the Bitcoin!

Sad this has to happen again and again.
Postfix Code Completion in IntelliJ IDEA 13.1
Ask HN: Why are you using recruiters for recruitment?
I'm trying to understand why companies seem to use recruiters exclusively. I've worked for small to medium sized global companies, that have always offered a way around using recruiters (careers page etc), or not used them at all.

Looking through LinkedIn and various other job sites, there appears to be little way to apply for some of the jobs there, but through a recruiter. Do technical recruiters really offer value for money over a standard HR department filtering applications?
This comment would be more valuable if it contained any actual argument to support your hypotheses.
That is one reasonable interpretation of "accompanies", but it is not the only one. Hence the existence of debate. (Consider, for example, a CDN that happens to distribute both a Linux distribution that includes OpenSSL, and an unrelated GPL project not included in the distribution and written by people who don't contribute to the distribution. You surely would not believe this meets the definition of "accompanies" as used in the GPL? Now, figure out where the line is crossed.)
Shea Hembrey: How I became 100 artists
You must have some other issues then. I have the same setup and the system just flies, and I'm not even using a SSD. Boot and wake happen in about half a minute.
I'm Canadian and worked for over four years a software engineer in SoCal on work visas (TN then H1B).

My wife, an Aussie and high school teacher with several years of teaching experience in top international schools in Asia, couldn't legally work in the US. So she volunteered teaching ESL at a local adult school. Ironically many of her students were Hispanics who had originally entered the US illegally. Doubly ironically she got a special commendation award for her volunteering signed by George W. Bush's signing machine.

Eventually I got fed up with the bureaucratic farce whereby US visa regulations provide compliant, indentured foreign programmers to US businesses at below market salaries in exchange for the remote possibility that they'll eventually get a green card.

So I left and now live in Australia, where I am self-employed, can take time off to work on my own side-projects, and pay less than $300/month for private medical insurance for my family of four. American exceptionalism? Sure--if you're a sucker.
Yes, and the thief in the night will use rubber hose cryptography on you.

Yes, that's not absurd at all. These blockchain-monitoring, bitcoin-wallet correlating cyber-thieves with their rubberhoses are a real plague.

It's just so much easier than, say, robbing people near an ATM at gunpoint...
Dropbox Vs Secured Managed File Transfer
Interesting infographic if you use cloud for file transfers.
Man, that's some cool software ! I love it when I see software that's simple yet high quality. Good job.
Good job, mate ! I love it !
NAFTA treaties have options for US and Mexico citizens.

For the rest there is the temporary foreign worker program. Your Canadian company has to do labor market opinions and all that stuff - could be time consuming. It is valid for 4 years. After 1 (one) year of starting your job, you can apply for permanent residency under the Canadian Experience Class [CEC] and it is self directed (no employer help needed at that point). Current processing times if you have applied within Canada is 13 months.

If you have not got your permanent residency by 4 years, but you have applied for and have a reference number, you can get a renewable 1 year open work permit that lets you work for anybody.

Computer jobs are covered by CEC, but not all jobs are.

You are eligible for health care after 3 months of being on the job. Until then you can get private coverage.
http://en.wikipedia.org/wiki/Einstein_(US-CERT_program)#Eins...
TED.com: No Comment on Hacking?
There are some absolute, rather than relative measures that you can use to gauge your skill. For engineering fields (not just software) the 'toolmaker' analogy is a good one i find. Until you understand what involved in making the specialist tools you need for your field, and can actually make those tools yourself then you are far from mastery.

This is not entirely straightforward though - a bit of a rabbit hole you could say. e.g. should a programmer stop at the compiler? The CPU? The circuitry? Electronic components? The laws of nature? Tools are built with other tools after all and some tools are provided by nature...

On the other hand, if you haven't made even the first step towards understanding your tools then thats not really a problem to worry about.
Well, the UK Revenue and Customs service seems to have a pretty clear view on Bitcoin:

http://www.hmrc.gov.uk/briefs/vat/brief0914.htm

If the government regards something as having value it wouldn't seem unreasonable to expect them to regard theft of assets in this form to be a crime.
Ethereum - A Smart Contract and Decentralized Application Platform
I'm so glad this made it to HN. From an Indian societal perspective, what he achieved is just marvellous and outstanding! It takes tremendous courage and determination to do something like this in India! Salute to this man!
Yes I can't believe he stated this without at least warning to be careful about this.

If an immmigration officer asks you at entry point "So why are you coming to San Francisco?" and you answered "I was going to interview with a few companies"? then they could quite reasonably refuse entry based on the idea that you are trying to gain entry on the wrong visa.
COME PUOI FARE BUSINESS ONLINE?
>10. Eventually price goes back up, as it _always_ does.

So my tulip investments are safe after all? That's certainly a load off my mind.
The new "trustless" systems don't seem to have solved the problem of transactions at all: bitcoin may be trustless, but if I'm purchasing something with them (such as USD) I need to have some sort of guarantee that it will arrive.

There's an argument that we're entering a "low trust" society, and this is not a good thing: http://fistfulofeuros.net/afoe/high-trust-and-low-trust-soci...
You speak as though zero-trust crypto currencies have a page in the history book already under proven economic technology. Bitcoin does not exist in a vacuum. It exists as a tangible implementation on top of physical infrastructure and, in the case of Bitcoin, infrastructure failure has many faces. You can balk at that by claiming special foresight or acknowledge that even good ideas take time to mature before they're viable.
Try out my guaranteed chat up line: "Polar bear! It's just something to break the ice..."

Then laugh drunkenly at your own joke - that bit's important.

Worked for me - married over 10 years now.
Well guns kill, NDAs do not.
Answer: It won't ever go mainstream.
>> the caste system that provides separation (even tint of skin can)

are you suggesting that caste system is related to skin color?
File History in Windows 8 is nice, sort of. It takes snapshots of changed files every hour. Sadly you have to enable it first and it's sort-of treated as a backup (so you have to store the copies on a different volume, etc.). So, not exactly what people have in their home unless they know about such things.
How can you be so sure that your wallet software doesn't contain any exploitable bugs? No matter what scheme you use, it doesn't seem safe enough for storing large sums of money.

At least Debian have had their repositories hacked in such a way that the hacker could have distributed tailor made exploits users would receive by running "apt-get upgrade". It's not so hard imagining someone inserting code in a bitcoin client to send all your coins to one specific address. If it's not a hacker, it could be an insider at Debian or the author of the bitcoin client themselves.

I haven't seen any bitcoin advocate solving that conundrum. If the supposed experts of securing software can't keep their free software safe, how on earth are regular users going to keep their life savings safe on their own?
A trustless economy would be one without credit or debt. Can you explain how a society that doesn't live hand-to-mouth can exist without credit?
Great guide, I'd love a similar one for Green Cards.

For instance, does a Masters in CS qualify you for an EB-2 filing? A search shows that the employer would have to give evidence of the advanced degree being necessary for the job. Usually you wouldn't need a Masters degree for a programmer role but I'm wondering how strict this is in practice.

Concretely, if you were to enter the US on a H1-B for a SDE role with BigCorpA and had a Masters degree in CS, could you immediately file for a Green Card under EB-2 category?
Neither of those two citations actually list or enumerate people losing any value of their deposits. They just describe the process by which it would happen.

(That's a lot of banks! The US system seems quite fragmented?)
OP's link was about clients' bitcoin in hot wallets hosted by the bank/exchange. That seems to be a huge risk.

Recent events provide strong support for exchanges and banks to work with insurance houses and develop insurance products. Flexcoin shouldn't be shutting down and telling its customers "oh well" over their hot wallet theft; they should have an insurance policy paying out value to their customers.
Rise of the human exoskeletons
I just got my bill for Feb. I am currently storing 15gb, and it cost me $0.21.
There's not much sign of this happening so far ...

Besides, isn't lack of effective prosecution of failed financial institutions a reason often cited for using bitcoin?
There are all sorts of people who have thought they lived at the end of history. To date all have been wrong.
I am an American working and living abroad. I am very interested in your comment about being self-employed in Australia. Can write up about how to start a business there and the pros/cons?

I would love to read something like that.