skysight-inc/HackerNews huggingface dataset:
ChromeIPass (Keepass autofill for Chrome) just ignores this as far as I know.
I was never familiar with it nor with the responsibility in detail of individuals there, but the parent comment makes me think of the old Bell Labs. (And/or parts of Xerox, etc.)

Highly capable people given and environment that fostered their production.

Not everything generated was immediately commercial. But it was a very productive environment, and this had strong commercial implications. It also created a lot of public good, immediately and/or eventually.

Not every institution can afford a Bell Labs or a PARC. [1] But letting people do what they are good at, is perhaps not such a bad idea.

--

[1] P.S. I suppose that from one perspective, not even Bell nor Xerox could... although I don't subscribe to the argument, at least and especially not at such a simplistic level.
Since we are talking about phishing in Google's domains, can someone explain me why http://www.blogspot.co.uk (and .ie, and .fr, etc.) leads to someone's specific blog, instead of doing like the http://www.blogspot.com site does, which leads to Google's login?

What prevents this "www" Blogger user from mounting a phishing attack?
Last flush of code?
There was a comment in a piece of code I was looking through once which read, "Except here universal time is actually Pacific Time, maybe they will get the prime meridian moved."

Much of the code assumed that all times were in PST and the commenter had apparently been incorporating data sources from other time zones into the code. I thought it was pretty funny.
Google Drives drastically drops pricing
I read the headline and thought that it's about Stallman becoming a Congressman. I'm slightly disappointed.
Is that the equivalent of saying, "They're shooting us. Let's taze them right back!", since they are "superflaggers" and you're just a normal "flagger"?
FYI - doesn't seem to install with python 3.3
Duhh, right you are. I keep conflating the two.
When people start describing how Node works rather than bloviating blind praise, the first thought I have is, Windows. Yeah thats how windows works too. Im totally sold now!
My bad anyway, it's just (yet) another one of those sites that looks like it's completely hung if you happen to have cookies blocked.

Is this even considered a bug anymore?
They're not talking about strings in JSON; they're saying that a JSON-serialized blob must itself be valid UTF-8. So, to decode JSON, you first have to parse the whole thing to convert it to codepoints (and possibly bail at this step)—and then (lex-and-)parse those codepoints again to turn them into a data structure, making sure to pass through things that turn out to be strings as the same sequence of codepoints you already parsed out rather than passing them to a UTF-8 decoder there and then, like you would in any other format.

Erlang's internal serialization format, meanwhile—and all the language's native pattern-matching constructs—are built on what are basically "generators" that consume a (possibly-infinite) binary stream, and lex tokens directly out of it. JSON doesn't really work with this approach; what you end up doing is having one generator that consumes the binary stream and emits codepoints, and then another generator that consumes codepoints and emits tokens. This introduces a lot of intermediate allocations and message-passing—whereas, with most Erlang protocol handlers, your TCP handler passes you a slice of a VM-managed shared binary, and then you just pass around and re-slice that slice.
Why does the menu on wekeroad grow larger as you scroll down the page?
I've seen friends get labeled "brogrammer" just because they wore polo shirts instead of t-shirts with gaming stuff printed on them, and because in university they belonged to a fraternity instead of the anime club. These people don't spend all day in the office doing kegstands, they work just as hard and just as effectively as anybody else, but they are derisively labeled "brogrammer" and the depth of their skill is routinely questioned.

Above a certain age, 30-35 or so I'd estimate, not being "nerd/geek/gamer" seems to lose it's stigma as "family man" becomes a more common occurrence (but of course with that comes age discrimination).

(I believe the tie-in to sexism is fairly complex. Selection for "nerd/gamer/programmer" probably causes a gender imbalance in the industry, but I think that genuine sexism and not just prejudice against lifestyles/fashions also plays an important role. Evening out the gender imbalance would likely have the effect of loosening prejudices against lifestyles/fashions, even if those prejudices were the cause of the gender imbalance in the first place. I believe the issues are related in a more complex manner than "one caused the other".)
IBM Model M from May 1987 that I've had since the early 90s. I guess this makes me a) old and b) in possession of a keyboard manufactured before many posting on HN were born!
Maybe read your own citation on my citation?

> According to American Enterprise Institute fellow Edward Pinto, Bank of America reported in 2008 that its CRA portfolio, which constituted 7% of its owned residential mortgages, was responsible for 29 percent of its losses. He also charged that "approximately 50 percent of CRA loans for single-family residences ... [had] characteristics that indicated high credit risk," yet, per the standards used by the various government agencies to evaluate CRA performance at the time, were not counted as "subprime" because borrower credit worthiness was not considered.[125][126][127][128] However, economist Paul Krugman argues that Pinto's category of "other high-risk mortgages" incorrectly includes loans that were not high-risk, that instead were like traditional conforming mortgages.[129] Additionally, another CRA critic concedes that "some of this CRA subprime lending might have taken place, even in the absence of CRA. For that reason, the direct impact of CRA on the volume of subprime lending is not certain."

So if you're basing your argument on the authoritative application of the label "sub-prime," please feel free to indulge in as much or as little semantic pedantry as you like.
This is relavent to my interests.
I can't even tell if you two are actually disagreeing about anything, or just escalating for the pure joy of it.
I'm sure this was mentioned in The Mythical Man Month - the need to have a technical promotion track instead of just the managerial one, for exactly this reason. There needs to be a path to seniority that does not involve accumulating underlings.
A sophisticated attack can completely imitate 2FA.

The first bit: It starts by asking for a username+pass and it uses javascript to async-post it. The evil server then tries to login to google. If google returns that a 2FA is needed it prompts for it.

I have no clue what you mean by "through google's api"... An attacker does not have to follow an api. Anything the user can do with their browser, the attacker an imitate on a remote server. Absolutely anything except source ip.

Your entire "no way of doing this using code" makes no sense at all. Posting data is something that can easily be done programmatically. Posting data through a middleman is similarly easy.

The only way that 2FA helps (edit: as alcari points out, this doesn't help much) is that the attacker can't change your password because on initiating that, I believe google asks for another 2FA code, and I don't think the attacker could reasonably expect to get you to enter two 2FA in a row.
It also does make it harder for the attacker to code it up, but it's not even that much harder.
Repository metadata and plugin support for GitHub Pages
Secret raises $8.6 million Series A
If you want a 5 minute video digestion of this, including who Stafford Beer is, I gave a lightning talk at Liverpool Ignite.

https://www.youtube.com/watch?v=CJkxvVOm01g
Ask HN: Why hasn't the email client been reinvented lately?
For a tool we are all required to use but hate using, I'm surprised there haven't been huge improvements in email clients since Google introduced Gmail 10 years ago.

There have only been small features added over time, like inline attachment viewing, and minor UI tweaks, like matching OS UI trends, but for the most part it's the same Outlook, Apple Mail, Gmail, etc as we had 10 years ago: a bunch of folders, a single column for the inbox, a box to read or write mail, some icons to delete, forward, reply, etc.

There are plugins, like ActiveInbox and Rapportive, but these can be kludgy or not well integrated, especially now that we expect to be able to seamless jump from desktop to mobile email.

Am I alone in expecting a significantly better experience from my email client than where we were 10 years ago?

Is there somebody out there working on a new type of email client?
I thought he did a good job explaining why those laws were put in place and why they're not needed to be applied here. Even if you don't agree it's a monopoly, clearly in this case the law is not being applied as it should be.
Interaction ProTip #4: Nobody Expects 3D
I agree with emhart -- this was my exact reaction. Of course I understand that you can't launch beta with all your features, but please consider this another vote for a more robust matching mechanism. Other than that, great work! I think this sort of opportunity to get our hands dirty is exactly what a lot of people are looking for.
Hyperinflation is a symptom of a collapse in output. Taxes bind the value of the currency to that output. If the output goes, also goes the value of the currency; we are in agreement.
Except in the case of Win8 secure boot on tablets, which can't be rooted and dual-booted. Unlike Android.
Make the 2FA code a one time use only then the code would be useless.
You wouldn't really agree with what? That her English degree helps her communicate better, or that English degrees in general help people communicate better?

Oh, wait. You don't have an English degree, do you?
So, no, they do not subject anything else to a similar requirement. Volume doesn't give them a pass. The thought process that software developers are less protected than authors is an insulting.

"No Porn" is a requirement they impose on ALL media, so it fair and respectful of the work done by software developers. The thinking that an Harlequin romance novel is somehow more artistic and worthy of protection than something like "Last of Us" is bogus.
Unfortunately, this is of no help if Wikipedia or it's hosting provider (and therefore every machine it runs on) is compromised.
The useful take away here is that these folks to threaten third parties when those third parties displease them, whether it was Intel threatening Dell if they used the Opteron, or Microsoft threatening ASUS when they showed an ARM based Laptop at CeBIT that ran Linux only, or this particular case of the mixed tablet/laptop.

This case should have been easily predicted by Asustek though as Microsoft has bet pretty big on their '2 in 1' branding of the tabtop or lablet thing. The marketing push has been pretty amazing, at least in the SF bay area.
Actually, I did a lot of RPN development on Suns. Not in Forth but in PostScript within NeWS/OpenWindows developing front ends for large scale Lisp applications.
> As soon as there's a "good enough" P2P censorship-free and privacy-friendly alternative to Google, millions of people will move to it.

On that note: does anyone have an opinion on YaCy? http://yacy.de/en/index.html
Interesting, I hadn't come across that watch before. How do you like it? Can you compare it to something like a Pebble: size, battery life, screen quality, etc?
Banks actually pay insurance premiums to FDIC, which are held in a fund which is used to pay claims. If the fund is wiped out, practically speaking the Fed would cover it but that's not the normal method of operation.
> This is relavent [sic] to my interests.

Do you sometimes wonder why Web searches, based on words, can't find your posts?
F# has gone from tiny to quite popular (#12 spot on Tiobe currently), and that shows very clearly in the quality of tools and availability of libs now. It's not the same language/community it was a year ago.

By comparison, Haskell is 49 and no ML lang is in the top 50.
No need to be a literalist. My point being: the cash needed to cover withdrawals would have to come from outside the bank's own reserves in the scenario I described.
AFAIK, fractional reserve is the bete noir for many believers in bitcoin.
I take it from your comment that you infer that it was 39% because they had lower standards for women. Therefore, they are affirmative action babies who shouldn't be there.

I think it is more likely that their outreach programs (through CS AP teacher training etc.) that encouraged the best and brightest women to apply were successful, so that the pool of women were significantly more qualified.

Also, I wonder what the more recent numbers look, as 2000 was a long time ago.
Why not have two types of transponders, one that is always on like lojack for planes and one that is only on for planes in the air. As long as there is some information being sent that determines what kind of signal it is, it should be trivial to have a radar system that filters out those only broadcasting their always on system.
Ask HN: Any part time gigs going?
I know that these kind of posts come up every day, but I thought I'd give this a shot since I have a lot to give people and I want to make my wife-to-be a happy lady.

I'm currently working as Lead Developer for a Leading Independent online Travel Agent, I work with PHP (Mainly Laravel now), Node.js and MySQL (along with HTML/CSS of course). I've got many years experience writing web applications and continuing work from other people.

Back in February I asked my Girlfriend of 5 years to marry me. She makes me a better person that I thought I could ever be and she really makes me happy. Our goal is to get married 2 years in August (2016). The problem is that we have debts and bills to pay. After cutting our bills back as much as we can, I need to take up more part time work, so I'm asking today if anybody has anything that I could do?

I've tried the usual Freelance.com, ODesk.com etc, however all of the jobs are ridiculously cheap for the time and energy, so you're usually undercut by people from India. There is no way I could fathom making a dating website for $5 an hour. (I'm in the UK by the way).

My friends and family have previously put me in touch with people, but there are currently no jobs going. And I've put out my business cards in various shops, but to no avail.

Does anybody have anything?

jbrooksuk [at] me [dot] com or @jbrooksuk everywhere.
Seven plus years ago I was investigating phishing scams that were, in real time, taking the username and password, trying it against the real server, and then prompting the user accordingly (in that case, kicking them back if they entered the wrong password). It's not that big of a leap to do the same thing to see if they have 2FA enabled.
> Tell me how I am supposed to fulfill these requirements if I need 20 websites daily to do my work ?

One solution to this problem (or at least one way to severely mitigate it) is to use a base word that you tweak with a simple algorithm based on the first letter, last letter, number of letters in the domain, etc. Of course some websites have mutually exclusive requirements, so this doesn't work for all sites, but I've been doing this for so many years now that while I have muscle memory for frequently used sites, I can go to a site I haven't been to in years and have no memory of the actual characters in the password, but I apply my algorithm and voila, it works!
Very saddened by the blatant corruption in our government. Where do I vote for a new government based on ethics and accountability (apart from New Zealand).
I'm another one of those with a divided mind. For example, I applied to grad school in both English literature programs and Computer Science programs, and seriously considered offers from both.

I chose the literature path. . . .for two years. Ever since then, I've been a programmer. I started at 25, your age. It was a difficult ramp-up, partly because I was way behind most of my peers in the number of hours I had put into the programming profession (I'd been spending those hours reading Moby Dick and Ulysses.) That gap lasted for years.

Something that still persists is that I have a humanities mindset -- I commonly see things in aesthetic terms first, where most other engineers see in analytic terms. This can be something of a handicap in software engineering, sometimes. Other times, it can be exactly what is needed. Clarity of purpose, taste, an ability to see things from the non-technical point of view -- organizations need these things. See Steve Jobs clips on how Microsoft lacks taste, and Apple has it. I will take heat for saying this, but it's actually a substantive claim. The last decade has borne him out.

I'm now 38. I paid dues and things have gone well -- no jackpot here, but I feel lucky in this profession. My code is elegant and minimal; I write good comments. I'm not a systems guru or a C hacker; other people can do that better.

I think I'll probably be a founder or a CTO when right opportunity presents itself. And I think my multi-valent background will only increase in value over time.

But at the outset, the technical chops were my ticket. I sat at my keyboard and made wealth. (Immediately read this Paul Graham piece, if you haven't: http://www.paulgraham.com/wealth.html). As an English professor (or marketer, or QA person), I wouldn't have had the ability to reach out and touch the nerve of wealth creation. After a couple years of grinding out some skills as a programmer, I did. Now I'm in a position of (modest) power and esteem that I can parlay into other things for the rest of my career.

Also: it's hard to see this at 25, but you can expect to end up writing off most of your twenties. So don't take it THAT seriously. Go out a lot, travel a lot, and try to have fun before the real work starts: raising small children.
Web Design Mistake: maybe don't use a 794,03 KB image on the top of your article?
I like it. Thanks for sharing @zrail
Makes sense. And to be honest, that reflects at least my Reddit behavior very well - out of a thousand clicks I link, I'll probably comment on a couple.
Goldfish: my 7DRL challenge game (in-browser)
That's what I thought they were using, because of this:

"A simple Hubot command can reroute our traffic to their network which can handle terabits per second. They're able to absorb the attack, filter out the malicious traffic, and forward the legitimate traffic on to us for normal processing."
It's possible, but only part of a possible solution. Those tools still would need a (standard) place to read cgroup specific data from inside the container.
Sites like Discourse allow for back button navigation on their infinite scrolls.
Oligopoly more than monopoly. But if there is a single dealer lobby group then it's a collusive oligopoly (cartel) which will be able to wield monopolistic power.
You are missing a bitcoin donation address. I suggest fixing that.
Thanks!

We'll be releasing some in-game footage soon - hope that'll give you a better idea of what the game is about.
Throwing it down publicly to Chris Christie - now that is confidence!
I'm going to go out on a limb and suggest just because 1password is really really good. So good that I don't even want to try a browser's password manager (especially since I want access to my passwords on multiple browsers and my phone/tablet as well). I'm sure browser password managers have made leaps and bounds, but so as 1password and it's amazing.
It blows my mind that in a country that preaches a free-market economy, the government is preventing a company from selling a superior product. I'm pretty sure people will still buy the car if they want to, and in time, those car companies will go under anyway, but why slow down progress?
This is what I use at home/work as well. A solid keyboard with a lot of switch options, a nice form factor, and good key layout. Definitely recommended.
Me and davedx have discussed this before and we came to this conclusion: it's a healthy thing to have multiple sites in the same space. In reality, a few people control the direction of each site. There can only be a single direction for each site. If we were to merge, it would greatly reduce our ability to experiment with new ideas, and ultimately we think it would reduce the number of problems being solved. We don't mind if it's us or them who leads to problems getting solved, we just want to help as many people as possible.

What we're very interested in is having a reciprocal agreement with other similar sites, so that we link to them and encourage our solvers to join all the communities. This way, whichever has the best ideas will help the most people. We already have an agreement with interdisciplinaryprogramming.com which hasn't launched yet, and we're in touch with openhatch.org. We'll talk to catchafire too, and we'd love to hear about anything else in this space.
You definitely don't need network access. I use Google Authenticator on my Wifi only tablet. You need an internet connection to sync it to Google's key but not after that. And, yes, when the tablet's clock is off by a few minutes, the code doesn't work.
Ask HN: Best video games for the brain? 
For example Portal its pretty good.
I am still laughing at this comment.
Thank you for the excellent feedback! We were hoping to have a dedicated site for the game before the launch, but the realities of being a three man development team (or, bad planning) made that impossible.
I can't agree with this logic at all.

Once we take away everything it means to be British, in an attempt to be 'secure' - what are we defending?

We shouldn't just do the right thing when it's "easy" - we should do it when it's the right thing.
Am I the only one watching https://blockchain.info/address/1Ec6onfsQmoP9kkL3zkpB6c5sA4P...? Seems that the original author has made ~200USD off of this so far.
ok, I didn't get that from your original post but I understand the question.

My take on it is that the UK has tried a variety of reaction strategies to terrorist threats which have had varying levels of success. And the people have varying levels of trust in their government which then colors their interpretation of the actions a government might take and the reaction to their actions. In many ways I think the UK fears religious persecution more than most governments.
How can you tell if a process runs as root or is run within a sandbox?
Yeah, after Threes, 2048 felt a little easier, though. Enjoy Threes, I already thing it was well worth it: real moment killer without being excessively mindless
I refer to my previous comment: https://news.ycombinator.com/item?id=7381703

There's some people who enjoy subordinating others. And you're right about the not showing weakness as part of that. They'd rather trash a large area of the company than admit that they were wrong. And the need to limit the power of the people at the bottom of tree prevents them having the autonomy to work well.
Using Ubuntu minimal + xmonad + dmenu. Does not work.
UnTV: Open Source DRM-Free Media Center Platform for Home Theater Computers
Given how low Chris Christie's political stock is at the moment, I'm not sure much confidence is required.
Chris Christie all but had the Republican presidential nomination sewn up before the bridge closure scandal.

Between that and this nonsense, his reputation as a "non-politician" has been tremendously tarnished.