skysight-inc/HackerNews huggingface dataset:
To run with your analogy. Let's take the case of vioxx, which was voluntarily withdrawn by merck after post-approval experiments showed statistically significant increases in heart attacks - never mind that this is exactly biasing the 'experiment' against vioxx (http://www.evanmiller.org/how-not-to-run-an-ab-test.html).

The people vote to withdraw vioxx from the market. Because, heart attacks! Well, what of the plenty of people who decide that they'd rather have a slightly increased risk of heart attack instead of debilitating, quality-of-life-shattering daily pain?

To take it further, what about conditions that specifically only address a minority of people, let's say that we made a drug that cures sickle-cell anemia, but gives a 100% chance of getting cancer by age 70. Who should make these decisions?

Also: Who gets to be the person deciding on the 'educated guess'? And how can I be this person so that I can pick my pharmaceutical stocks ahead of time?
I read this as "What the terminal will look like in the year 2048."

I was clearly wrong in my interpretation
We purposefully kept the video vague, so that developers could choose what they felt were the most appropriate improvements, to the vast array of applications out there.

Thanks for your ideas. OTR is another good thing to add, for chat applications. Also, good point regarding user interface. As was discussed at SXSW, friendly UI's have a huge affect on the popularity of an application.
Same for KeePass (Cntrl + Alt + A). Never had an issue now that I use it fairly consistently.

Key is I guess not using browser stores.
But there is a lot of tooling required to solve problems seen by common web apps.

Node is doing it differently, and it has advantages and disadvantages. One disadvantage is if you are doing CPU bound work, you will have to consider how you design your app more carefully. But that's the case with any language or platform.

Event driven servers have been around since the dawn of the internet and the select() call. Node has simply made it easier to write them in a higher level language. I personally think the event model makes a lot of sense for writing network servers, which web servers are. Also having a high performance HTTP implementation built into a platform for building applications for the web is a significant benefit.

I think two prevalent models are going to emerge for writing concurrent servers in the future. Event driven platforms like Node and actor/messaging passing systems like Go and Erlang. The languages and platforms that do not do those things well, I believe, will become less popular.
If their "2-day shipping" service doesn't result in the package being delivered within 2 business days a vast majority of the time, they shouldn't be advertising it as "2-day shipping".
I was going to disagree with you, but then I realized I didn't understand what you were saying: What do you suggest they should have done?
Tried compiling Clojure->Scheme->C?
How does 2FA solve this? You're interacting with an attacker who is prompting you for information in real time.
To hijack our own thread: there was a lot of discussion on HN last week about whether Checkout (our drop-in payment form) should support disabling the Remember Me functionality[1].

That day -- and over the week since then -- we had several long internal discussions about it. We've decided to go ahead and add the ability to disable it. This is now documented at [2].

We want Checkout to be simple, and we didn't want to add too much customization since doing so would go against the grain of the product. The whole point of Checkout is to provide a merchant with the right defaults and to improve over time. But we decided that Remember Me is a special case because there's the appearance of potentially misaligned incentives: someone could argue that Remember Me exists for Stripe's benefit and at the merchant's expense.

This is exactly the opposite of what we're trying to do -- the goal is to increase conversions for businesses using Checkout and to get better at doing that over time. But we're adding the opt out to emphasize that we're not trying to force anything.

If you do disable the checkbox, users who stored their accounts elsewhere will still be able to pay on your site in a single click. (This seemed like the most merchant-friendly option to us -- this way, you can still take advantage of the network.)

Thanks for all the feedback!

[1] https://news.ycombinator.com/item?id=7349607

[2] https://stripe.com/docs/checkout
I don't understand how 2FA completely counters this scam.

Consider if you called someone up and told them your password, and then gave them an up-to-date number from your OTP generator.

Except instead of calling them up, you're entering it into a fake web page. Certainly the login you just made would not work when you opened up gmail in another window, but all necessary information would have been given to the attacker.
Like the concept. There was a guy at a local meetup who was a startup involved with helping the homeless. I think this would be a great resource for him.
Experience, if not geekiness, still counts. Lots of boys get into coding in high school, with or without formal training. My daughter, who is in SCS at CMU now, was fortunate to transfer from her high school to Mass Academy, adjacent to the WPI campus, where she took WPI's intro course that's somewhat SICP-based. I believe that helped significantly, compared to other women in SCS who are certainly intelligent and in all other ways capable enough, but were starting without experience, and hence without informed expectations of what they were about to embark upon.

[EDIT:] The SCS curriculum is designed to minimize the academic effect of coming in "cold," and all majors, especially ones where outsiders have little notion of what's current have this risk, but there's still a relatively larger potential among women for the shock of not knowing what exactly you signed up for.
I will update the code to do a hmac of the message and then alert the user if the cipher text has been tampered with. Not that hard to add in.
That is disabled in some distros, it can be toggled via
/proc/sys/kernel/sysrq
As a manager who has not problem pushing back and saying no to "the bosses", I can assure you it has fuck all to do with confidence in my own competence...

It's a matter of responsibility and ethics. No matter how much pressure there is on me and how unreasonable the request are, it's my responsibility to deal with it. If I would just shovel that shit over the wall and pass it on to my team, my presence would be 80% pointless. (Also, my team would bugger off a.s.a.p.)

So no, I'm not confident in my own competence. I feel the anxiety if the owners tell we are screwed if we don't accomplish X in Y amount of time. I sometimes say yes to things I should in hindsight have said no to, but it also happens the other way around. Management is almost always working of an incomplete set of data, a.k.a. guesswork.

But I have a job to do, and I wouldn't be doing it if I just made it someone else's problem, and nobody would believe or trust me if I didn't seem confident.

So that's pretty much the only thing I'm fully confident of: the ability to make people thing what I know what the fuck I'm doing. That is management competence #1, and unless you're a sociopath, it's not a trivial skill. Especially if you actually understand the field in which you work.
This is likely a sun thing. Halt on (SPARC) Solaris does not shutdown the OS. It issues a reset command to the firmware. The halt command on Solaris is roughly equivalent to pressing the reset button on a PC.

When your Sun is particularly hosed we used sync;sync;sync; halt to reset and (hopefully) not lose any data (sync forces OS write buffers to purge)
The Power Of Designing And Deploying API Driven Resources In Containers
Mobile Redesign Concept with Weave
> No, the balance sheet is still positive because the debt owed to the bank is an asset of the bank. This is independent of whether the debt is secured by collateral.

Not always true. For non-recourse loans, the value never exceeds the collateral. When the collateral gets written down, so does the asset.
Thanks for the feedback, I agree completely. It's on our to-do list to let people add tags to their profile so they get notified when new projects are posted with their skillset, without restricting them to only helping out with those.

Any other ideas for how to achieve this are very welcome. We'd love to get some UX designers involved in the project long-term, and we've already got a talented designer creating a new style for us.
There's a compatible OTP app for nearly every OS. Ideally you'd be running it on a device that isn't the same as the one running your web browser, but you could just install e.g. a Windows OTP app and use that. Better than nothing.
The funny thing is how artificial this distinction is, especially as WEPOS/POSReady forces them to make the patches public. Back when XP SP2 went out of support, they posted the exact same patches Custom Support customers was supposed to pay for (because of WEPOS SP2): http://www.microsoft.com/en-us/download/details.aspx?id=2440... http://blog.securityactive.co.uk/2010/08/10/patching-windows...
Are you suggesting that establishing a bitcoin exchange in the US would prevent another Mt. Gox? Why?
yup this comment trail is pretty dead-on.

The problem with web dev (I've thought about this a lot) is really that the browser is kindof the hinge. So no matter what you do for unifying languages, even porting modules so they're same on node front to back-end... you still can't really ever get to a point where you're unit testing pretty reliably through the full-stack.

So might as well test parts in isolation & who cares if there is one language throughout the whole stack as long as your devs are good at the languages required.

One day I think the impedance between server & client will disappear, but only when the browser's role as a rendering engine diminishes or finds better integration/intimacy with the codebase.

(and incidentally, i stopped caring so much about this struggle once i learned how to develop pretty reliable SOA. Haven't totally given up trying to conceptualize the perfect stack tho)
That's definitely something we're moving towards. It's tricky figuring out when the best time to post to HN is -- do you want early beta feedback, or to drive traffic to a final product?

Basically what you're requesting is something we really want to move towards -- we have in the works a way to add skills tags to your own profile, for example. This will help out with how you'd like to use the site.
Thanks for pointing that out. It's been updated to recognize The Collective.
This drives some of our customers nuts because autocomplete has the annoying tendency in the most recent Safari of overwriting prepopulated fields - users end up losing configurations over this.

Otherwise I can see the benefit of ignoring the setting, perhaps, but we need consistent default behavior (chance would be a fine thing!). I don't want to be telling my customers that they should switch off autocomplete as a user shouldn't need to configure a browser to use a website!
Thank you! It's great having a project you really believe in. I was inspired by Richard's original idea, and if we can continue to inspire other people then we'll be extremely happy.
Interesting perspective. Don't you think though, that this research will lead to an increase in efficiency and perhaps subsequently a decrease in operational costs of schools? If yes, then why would educators hesitate to implement the results of this research?
This is fundamentally a problem with centralization that is probably temporary. Decentralization is coming in a big way and when it does these sorts of shenanigans will not be so easy to pull off.
Our First View into the “Blackout Zones” of the Human Genome
Dilbert always gives me paroxysms of laughter and existential pain, but this was above average.
How about you point me to a study that took a hundred years (to look at effect on future generations), controlled all other variables, had no dropouts, and didn't rely on self reported information. No? Ok, well when you're playing god, and I assume you're probably paid to work in this industry, just don't tell me that it's "safe", because that's damn hard (impossible?) and expensive to prove [because technically you'd have to do this on every new strain of every food], and that would conflict with short-term profits. PS GMO is also closely related to pesticide & herbicide use and biodiversity. How do you even begin to quantify those long term effects.
Great idea! It's a nice way for people to find work or study experience. We'll look into reaching out to undergraduate programmes.
At Pwn4Fun, Google delivered a very impressive exploit against Apple Safari launching Calculator as root on Mac OS X.

I'll bet it was ocspd they exploited. The CRL handling code in libsecurity is awful, and ocspd runs as root without a sandbox profile.
Where is the contradiction?

I was pointing out essentially what your edit suggests. Somehow we've made a society in which young boys favor programming more than girls.

I wasn't saying that people who have been programming since age 12 should be on equal footing in terms of the admissions process. As I said in some comments below, I think that the non-preferential treatment is instead geared towards people who have dabbled in programming a bit (AP Computer Science or a similar course in highschool). So at face value, the person who has 1 year experience in Java will appear to be a better fit for the program than someone with no experience, but by graduation time, there will probably be no correlation between those who came in with 1 year experience and those without any.

Someone who has been programming as a hobby since age 12 will probably be highly correlated with success by graduation time. I don't think CMU is disputing that. Rather, they are disputing the first case of someone with some experience vs. someone with no experience.

So I think there was just a misunderstanding when you read my comment, since I was pretty much saying (longer-windedly) what you did in your edit.
Sorry you didn't like the site. We aren't perfect, but we make an effort to constantly improve. I'll bring up your concerns relating to tracking in the next meeting.
Examining the Seattle Times Mobile Web Experience
Don't network like a salesman, build relationships like a man.
This is great to hear, Patrick. Thanks for the update, I'm sure lots of people are going to be happy about it.
Anyone with a Facebook account could have typed "learn to program" into Google rather than poking people in the farm while eating candy (or whatever people do on facebook these days).

If a person chose not to take programming seriously, that's on them.
Thanks!

We just implemented the tasks system last week, which should help people find bite-sized bits of work, and project owners break up work into manageable pieces to attract volunteers that can't commit loads of time.
Android is so open source, you can't dual boot it!

At least Windows and Microsoft still means what it always did.
_We've had terrorism on UK soil for 1000's of years. You may even have heard of The Gunpowder Plot._

An assassination attempt on a King few centuries ago, oh my...

I agree partly with you on the liberty side, that's why I said I don't like what Google is doing (i.e: The way they are doing things) and by extension, the way the UK is doing things..

The way the Government here is doing things: Watch whatever you want, but if we catch you, you're screwd.

_I want to watch people die, in horrible and disturbing circumstances. http://reddit.com/r/watchpeopledie who is anyone to deny me that freedom._

:D

http://reddit.com/r/watchkidsgetfucked

Who's anyone to deny them that freedom, huh..

PS: If anyone of you clicked on that link - which I really expect to be a 404-, I hope you're using TOR, VPN, SSH tunneling, God mode encryption and really make sure every packet your machine is sending and receiving is immaculate :)

PPS: Oh, and if you clicked, you're a bad person..
Where is the toggle in iOS? That would be really useful.
First, the scam would be randomly asking for the code or not. Cause it can't know whether the user has 2FA activated or not. So that is one way of noticing that its a scam. 2nd the code only works for 30 seconds or so.

I don't know if there's some way of login in through google api's as soon as the user enters the user and password. Also im almost sure that google requires you to enter the code via a form that is provided by them (as a google url). So im thinking something like loggin in to google using server side code and somehow using the code that the user provides to enter into google form (that will be displayed on the server side).

Im still not sure if there's any way of doing this using code. If there's no way of doing it using code then the attacker should be fast enough to use your logins and token in less than 30 seconds (or even less when the code is entered later). So it reduces the chances to get attacked a lot.
I've recently been toying with the idea that the "brogrammer" trend is in reality little more than a term used to vilify male programmers who, more than anything else, share the common trait of having rejected "geek/nerd/gamer" culture or fashion.

The term is male specific because female enrollment has been suppressed for the past few decades, making males the most prominent members of just about any fashion/culture trend in tech. The term has become synonymous with sexism because many (but by no means all, or even most) "brogrammers" are indeed sexist (as are other programmers). Because "brogrammers" are different, this sexism is recognized for what it is more frequently than sexism from "non-bro programmers" (who, for most programmers, are part of the in-group).

If we stop selecting for "geek/nerd/gamer", I think that we might see the evaporation of the concept of "brogrammer" as a particularly problematic gender specific trend.

(One of the assumptions that I make is that most people who are labeled as "brogrammers" by others do not self-identify as "brogrammers".)
KRYPTO 4.0/2014 – The most secure data cryption program in the World
I too recently transitioned out of the Army at 27 after 7.5 years in EOD. I dropped out of film school my sophomore year and joined. I've since landed a job as a developer and CTO at a robotics company in Maryland. I also have government agencies beating down my door with interest on a white paper I submitted unrelated to my 'day job'. It looks like I'll get funded.

I've always believed that you have to make yourself relevant to the position that you want, and then shoot for the one above it. Hell, I'm a college dropout raking in 6 figures a year and I get paid to hack away in Python and travel the world to teach people about our robot systems. It's truly a dream job.
I'll second this. Even more so, in a world of specialization, why not have well trained, enthusiastic, highly specialized
teachers spending time with the kids from an early age? There has to be some balance, young kids want to be with their parents. My kids are in preschool 2-3 days a week. The teachers (not babysitters) are amazing at getting the kids engaged, developing fine and gross motor skills, and encouraging curiosity. I even learn how to be a better parent from them. My kids will start Kindergarden with a lead over kids who haven't had similar experience. So yeah, pre-K is the way to go, I'm glad to see attention being paid to this (locally at least).
I don't know if Clint drew 25000 artworks in his lifetime (that looks astonishingly huge number), but he was indeed a prodigy well known in Kerala from a very small age (3 ish if I remember correctly)

A bit superlative (philosophical bent for a 4 year old!) but this video shows some work and photographs.
http://www.youtube.com/watch?v=RoOPJ1w76I8
> A large portion of the BTC community grossly abuse the term 'fractional reserve', and it's flatly wrong.

A large portion of the BTC community grossly abuses all economic terms because it's a libertarian anarco-capitalist circle jerk much of the time. The sane and educated are few and far between but they're there.
The two step app works even with no connection to the internet. I dont know how but it does. I think you dont need to have the same sim card. only the phone turned on.
Ask HN: Parse.com worth it?
Rapid prototyping with Parse.com worth it ? Is there any problem with future scale?
Right. This is MITM attack and they can defeat most of 2FA out there today.

One technique that might help is to make user choose a picture during account registration. During login show that picture, if user does not see correct picture he would suspect something.

It does not have to be picture, could be style or background of login component.
Less likely to be litigated out of existence if the user base doesn't grow.
Google and Microsoft are out to stop dual-boot Windows/Android devices
This article uses "password managers" ambiguously. In my opinion, a browser is a terrible password manager because of what is stated in the "pros" section of the article. My advice aligns with others who have replied here - get a real password manager such as 1password and allow autocomplete="off" to do what it is supposed to do.
That's not a problem if you use the Authenticator app (or a compatible alternative) instead of getting codes over SMS.
There are likely many people who have not experienced this form of attack. Many who may not have even been aware of it explicitly, and this article may have made this aware of it, and what the common strategy is for dealing with them. That's good, and so many developers user github, so the article likely reaches a larger audience than those "thinking about DDoS hardening".

What isn't useful is the narcissism of your comment, and the assumption is that everything should be targeted at you and people like you.
I don't even need a computer for that, just use leading zeroes:
0000000002
Two of the five "mistakes" aren't always mistakes. Popups often work really well, as pointed out in another comment by onion2k. Long-form sales pages (i.e. walls of text) also really work in many contexts. Sure you want to execute both of them well, but the basic ideas aren't necessarily mistakes.

Two others strike me as not really an issue or too vague to know whether it was an issue. Do beginner web designers really never use any padding and just cram everything next to each other, pixel by pixel? Can't say I've seen it. And are they really thinking too far outside the box? What would this even entail?

I'll give them navigation issue, but I can't say they offered much insight for beginners to actually work from and improve their navigation.
The foundation of Berkshire Hathaway is insurance. If you think insurance is simple, you're either much smarter than I am, you know a lot about things that I don't, or you're delusional.

My understanding of BRK is that it is the business of resource allocation (i.e. "management") for the purposes of investment. (Did I mention the insurance thing?) I suspect that provides enough of an understanding of the situation for Uncle Warren. I don't believe BRK is involved in currency speculation as a primary business either. ("Primary": currency risks are unavoidable. What I doubt is that Buffet regards them as a profit center.)
"Complain and get a bailout" is a different strategy than "hide it and hope" or "make risky bets".