skysight-inc/HackerNews huggingface dataset:
It is certainly possible to allow for password resets and account creation as well without revealing whether an account exists.

Password reset:

1. User enters email in password reset form.

2. Website shows the same message whether the password was reset or not.

3. Email is what differs. If the account exists, send a password reset link. If it does not, send an email asking them if they want to create an account (and offer an unsubscribe link so people can't spam signup emails).

Signup:

1. User enters email in signup form.

2. Website states it is sending an email to verify the account.

3. If it already exists, send a message saying they already have an account. If not, send the normal email verification link and then they can complete filling in their account details.

This prevent someone without access to the email from finding that the account exists, and also keeps the owner of the email filled in if they just forgot which email they used for the account or that they already had an account.
I see what you mean. I made Bit of News based on my experience as a student. A lot of my friends read email in the morning on the go on iPhones - walking to class, riding the bus, etc. And I imagine it as a way to quickly read what's happening in the morning while you have nothing to do. That's also why every change I make, I always prioritize how it looks on the iPhone first lol

I'm not in the work environment so I can't personally imagine Bit of News to be read in Outlook / Apple Mail / Gmail on desktop while sitting in a chair. Like you said, in that environment email is probably best for time sensitive / work related things. YMMV!
Stopping a Shortcut to In-State Tuition
Played for a good 15 minutes. Nice job.

Just finished A Link Between Worlds for 3DS. Highly recommended for Zelda fans.
Wow this is surprising, I honestly didn't know that. My first hand knowledge is limited to Spain, which is very relaxed about these things and to Poland, where the situation is rather bad. My assumption was that in countries where the catholic church has some sway, homophobia would be rampant (wrongfully extrapolating from Poland and the stance of the Vatican).

Should have checked Wikipedia. Sigh.

It seems that, given this map [1], the acceptance of homosexuality is more correlated with wealth and general openness of society.

Ireland surprises me, though. Abortion is still illegal there for mainly religious reasons, right? So let's hope they fix that too.

[1] http://en.wikipedia.org/wiki/File:World_homosexuality_laws.s...

PS: While I was obviously quite off regarding my comment about Catholicism, the general problem still exists: Mozilla has offices in countries where the persecution of homosexuality is common.
Ditto, although replace "email" with Usenet / Forums.

I'm unfortunately too young to remember BBS systems. But I bet BBS is how I learned of Motal Kombat Fatalities (an older friend usually set me up with those... behind my parents back).
The pictures are auto generated.
I subscribe to the minimalism approach. i.e. I do my best to improve the signal to noise ratio (which is inline with the authors goal).

Also, in many cases, having a both the unit test and the comment is a redundancy.
Not sure about EQ, but I'm almost positive UO did. I remember having to set up port forwarding on our home router.
From the text:

"For example, we employ rate limits around sensitive actions, such as requesting money, to prevent them from being abused at scale."
emit_struct_field, sorry.
Up this comment goes! Why are they not addressing it? I'm confused.
I'm a developer at Moveline who was hired through an HN post. Feel free to send a message to andrew.harrison+hn@moveline.com if you want to know more.

(N.B. — I may internally share the messages that I receive in order to refine our hiring process, but you won't be signed up for mailing lists or anything gross like that.)
L is for Labels
On the other hand it's very fortunate that the internet architecture is what it is, because the "dumb network, end-to-end protocols" design principle has enabled deployment of new and improved protocols and applications without touching the network routers, which would have been very difficult to coordinate. Might be difficult to believe now but this was a radical idea at the time.

(Or at least enabled it for ~25 years until NAT put a damper on it - let's all keep our thumbs up for IPv6).
>If you re-invent TCP on top of UDP without a thorough prior understanding of TCP, you will get it wrong.

I don't know why this is in there twice for emphasis.

Because far too many people do it? I'll admit, my net-programming-fu is very weak, but every time I've seen someone say "we'll use UDP, it will be faster!", they then start trying to make it reliable and ordered, and they end up with a stinking, unreliable slow pile of crap, when they could have just started with TCP instead and optimized later.

By all means, if you don't need the guarantees that TCP gives, don't use it. But if all you're going to do is implement the features of TCP on top of UDP, why bother? You probably won't get it right the first time, and even if you do, you will have wasted time reinventing the wheel.
Countdown? How do you mean
How mobile app weakness could let hackers track and unlock a Tesla Model S
When Yelp can't help
Sadly, this was an April fools joke :-(

I just built SBCL from source, and no Clojure support :-(
copacetic : in excellent order.

(For the lazy like me, who still want to learn new and useful words.)
> Just take a look at today's "Who is hiring?" and you'll notice very few list degree requirements. Most are looking for a combination of experience and knowledge.

Key word is today. Yes, today, with the DJUSSV up 150% over the past five years, and billions being shelled out for Oculus and Whatsapp and so forth, no degree is needed for many jobs.

What happens when the economy takes a dive like in 2008/2009, or 2000/2001? You get laid off from your company and then send your resume in to open job slots on Craigslist. Except they are getting dozens, maybe hundreds of resumes. Even after culling for relevant experience, companies might have dozens of good looking resumes to choose from. The next obvious way to cull resumes is get rid of the pile with no degrees.

In bad times, CL job ads dry up, especially those not requiring a degree. Even if it doesn't state it explicitly, HR will probably grill you on your education background and plans.

As far as an expensive degree, people can go to a good state school and get Pell grants and the like. As far as people teaching themselves, most good programmers are always teaching themselves. They need a basis to work off of though and a BSCS is that basis. If you're going to spend four years studying the basics you need to know, why not borrow/spend the $50k to go to a very good school like Berkeley or UIUC, down to the $25k for state schools with decent CS programs?
IRC? That chat client that stole idea of #hashtags for channels and @for users?

(jk)
Diagnosing Tech Prices
More experts dispute GoBe’s bullshit medical claims, Indiegogo still refuses ...
I actually did tons of A/B testing and 8:30am works way better than 6am (in terms of open rates). Honestly I've no idea why, but I have a few theories.
Yeah, I completely agree, but it's the only option for UDP. :-)
They don't appear to be rate limiting their API that allows enumeration of first and last names. Also,

We’d also like to address the claim of a “leaked” list of Coinbase emails and user names. This list (the size of which is less than one half of one percent of Coinbase users) was not the result of a data breach at Coinbase.

There are 2,040 names on the leaked list. Fun fact: that means there are about 408,000 Coinbase users total.
We are pushing some changes to rate limiting - this wasn't clear in the original post and I just edited. Thanks for the heads up.
It doesn't need to be impossible. The problem could be designed away: on form submission send an email saying 'looks like you already have an account' or 'welcome... next steps' and just show a 'check your email' message in the browser.
In case it wasn't apparent, my "ever any doubt" question was rhetorical hyperbole. Any statement, no matter how self-evident, will have some people contradicting it.

Your argument that the US is the best place to start a business is not in any way "self-evident", and you have provided no source or proof.

So say some journalists.

Their methodology seems sound.

"We determined the Best Countries for Business by looking at 11 different factors for 134 countries. We considered property rights, innovation, taxes, technology, corruption, freedom (personal, trade and monetary), red tape, investor protection and stock market performance.
Forbes leaned on research and published reports from the Central Intelligence Agency, Freedom House, Heritage Foundation, Property Rights Alliance, Transparency International, the World Bank and World Economic Forum to compile the rankings."

http://www.forbes.com/sites/kurtbadenhausen/2011/10/03/the-b...
Silicon Valley / REMOTE

CTO of Macho (www.travelmacho.com) here. Our mission is taking the hassle out of travel planning. Currently users have to open up multiple browsers windows to plan their travel, flight, airport shuttle, taxi, bus, train etc. Our solution is to aggregate all possible transportation method from A to B, so the users can quickly estimate the total cost and duration of their travel.

Our team is small, but we are looking to hire a front-end developer to help us improve the web application to improve the travel planning experience for the users. email us at jobs@travelmacho.com

Side note:

We recently went through the Las Vegas based Accelerator progressionlabs (http://progressionlabs.com/) funded by the Vegas Tech Fund.

We won the Tech Cocktail's SXSW Startup Celebration pitch competition sponsored by .CO and CEA. http://tech.co/sxsw-hottest-startups-2014-03
Looks like the CEO is endorsing them too...
Beats Music. San Francisco's Dogpatch District.

Beats Music is creating a streaming/downloading music solution for people who have a passion for music and who know the only thing as important as the song you’re hearing now is the song that comes next. Our product combines music selection algorithms with human curation to give the best music experience and discoverability possible. We just launched in January 2014 very successfully and have over a million users and growing. We are an offshoot of "Beats By Dre" audio equipment and as such we are very well funded by private non-VC parties, which gives us the freedom to go big in pursuit of the product vision.

We are hiring for engineering and other positions as well. We run at scale and have a complex distributed system with high performance requirements. Some of the tools we use daily include: Node.js, Python, Couchbase, Git, Objective-C (iOS), Java (Android), C# (Windows Phone), MySQL, Backbone.js, Puppet, Linux, Apache Kafka, Hadoop, Azkaban, Jenkins. There are several teams hiring:

- core API team (Node.js)
- web team (Backbone.js, Node.js)
- iOS team (Obj-C)
- Android team
- big data team
- analytics team
- operations and platform engineering team
- Windows Phone
- project management

We value creativity as well as engineering prowess. Many of us are musicians in our spare time. Trent Reznor (of Nine Inch Nails) is our Chief Creative Officer. We like to have fun while we solve complex problems with cutting edge tools and techniques. When you write code, it sees high throughput with many concurrent users. We have some other perks too:

- competitive salary (we pay well)
- great health care (Cigna!)
- reimbursed gym membership at UCSF Mission Bay
- new laptop!
- delicious healthful catered lunches 5 days a week
- a modern building of our own in the up-and-coming Dogpatch neighborhood
- a bright airy work space with exposed brick walls and skylights
- free parking in our 2 private parking lots
- free and discounted Beats By Dre gear
- stocked kitchen: beverages, non-candy snacks, fresh fruit, beer
- fun stuff to do: pinball, ping pong, a bar, cool interesting people
- onsite massages
- transportation reimbursement
- open-ended vacation policy (unlimited)
- flexible hours, work from home 1-2 days/week
- company equity
- annual bonuses
- growth and advancement opportunities

Check out the listings here: http://www.beatsmusic.com/careers/listings
If you're interested feel free to contact me directly by emailing gtomei at beatsmusic dot com.
Mind-controlled robotic suit to debut at World Cup 2014
FYI, we're based in SOMA, San Francisco.
The reality is that with broadband connections these days there is generally little or no packet loss unless your ISP is having problems. In the case where you are getting packet loss it usually tends to be around 50%, so UDP is going to have trouble as well.

Also, these days with fast retransmit TCP isn't as bad as it used to be when there are network problems.

I've been using TCP for over 20 years for multi-player games, VOIP and web conferencing, and it works incredibly well. Even if you do all the legwork to get UDP working reliably (which TCP give you for free), you still have the problem of firewalls.
One of the big drivers for car leasing is tax policy. From my cursory understanding, you can generate bigger short-term, tax-deductible business expenses with a lease than a purchase.

Since computers presumably depreciate faster than cars, the benefit is probably smaller for computers.
Going to have to disagree with you here. I didn't start programming until my second semester and wound up with three six-figure offers.
Speaking of positions to be added, I have to wonder how many startups get around the issue of information security. Most of the security-related jobs I see here are either for security-related companies (Palo Alto Labs) or for well-established "startups". Very rarely do I see a startup with a SecOps or security engineer.

How do companies get around having (what I consider to be) a necessary employee for a company of almost any size, especially when you're building your own networks and housing your own infrastructure?
Why that? I consider the MSDN library one of the best documentation out there.
Your biases are showing. Said postdoc is a very good friend and the delivery was not confrontational although perhaps surprising to the senior scientists.

Data presentation is not a small error. A line graph implies a quantitative relationship between the ordinates in the independent variable, which did not exist in this case.

And antagonism is not bad in science. Its certainly better than fealty or consensus.
If you made the number of registers (m) extremely large and the register width 1 then a bloom filter and HLL are almost exactly the same (except bloom filters have multiple hashes for the same input and in HLL you only split one hash into two parts).

You can also use a bloom filter as a cardinality counter assuming it isn't too filled up yet: http://en.wikipedia.org/wiki/Bloom_filter#Approximating_the_...

HLLs are designed to be useful for cardinality counting past the point where a bloom filter would be over capacity. HLL would be useful for set membership but after some threshold the false positive rate will approach 100% at some super-linear rate.
If JS ever gets finalizers we could probably consider the total feature set JS has at that point sufficient for the implementation of most other dynamic languages without resorting to writing a VM in js or using asm.js to embed a full C runtime using arraymaps for a heap.

At that point we'd probably see some subset of JS devolve to a bytecode, I'll bet.
That's interesting. It's a little different from the survey I saw at payscale, where publics seem to do a bit better.

http://www.payscale.com/college-salary-report-2014/best-scho...

They are measuring different things - the atlantic is measuring 20 year ROI, whereas payscale is measuring mid-career salary (according to the payscale methodology, "the typical (median) mid-career employee is 42 years old and has 15 years of experience." So higher initial salaries would fare better on the atlantic survey than the payscale one.

Only Berkeley, Stanford, and CMU show up on both lists, but what data is there does seem to confirm higher initial salaries for elite private college like Stanford (though the publics seem to catch up by mid-career).
Silk Road owner can't be guilty of money laundering if Bitcoin isn't money
Try selecting the missiles so that they equal the number of the bug (missiles are binary, bug numbers are hex). The box on the lower right shows you what you've selected.
F# with Xamarin for a real-world mobile application
FULLTIME - assemblymade.com - San Francisco

We’re hiring Engineers interested in Ruby, Go, and Bitcoin to help us build foundational pieces of the Assembly platform. Assembly's collaborative platform enables the creation of a new class of software products; where anyone around the world can help collectively build, retain ownership, and receive proﬁt for their contributions.

We’re currently a small 5 person team in San Francisco that has recently secured a healthy financing from top-tier investors which will enable us to tackle the enormous challenges of creating a ‘meta’ company (a software company that creates software companies). You would have a direct hand in helping us shape the future of work and unlocking the power of independent creators.
We believe in progress over consensus, strong opinions weakly held, moving fast is best even if it breaks things, and we make what we measure - but you'll have the opportunity to add your own lessons to that list. We work alone and we work together; meaning we believe the best know how to get things done on their own, as well as how to work in a team. Everyone on the team is responsible for self directing their work and has a tremendous impact on our shared success.

WHAT WE’RE LOOKING FOR

* Understand pain points, come up with solutions, and then prototype, iterate, and launch frequently.

* Strong opinions on testing & code quality.

* At least 3+ years of full-time engineering experience.

* Experience with the Bitcoin protocol, Heroku, ElasticSearch, Postgres, or Redis a plus.

WHAT WE OFFER

* Flexible work hours

* Occasional telecommuting.

* A generous vacation policy.

* Free meals.

* Stand up desks, mac book pros, cinema displays...Buy or build your ideal work environment

* A sunny office space (https://www.dropbox.com/sh/n170uryd7v0p6dg/ySaaj77HGD)

* Competitive salary and equity package.

* 100% covered health benefits.

We’re located in Mission, San Francisco, CA. Please apply by sending any work, resume, github username to jobs@assemblymade.com
No mention of the claimed IRS / Fed gag order, interesting. (although I realize its not their main focus right now)
Microsoft Drops Azure Prices, Adds New "Basic" Tier
Neither of which is an indication that they are better at engineers at critical thinking.
Most people don't realise that Russia is a brutal petro-chemical dictatorship in economical decline which is clamping down hard on human rights, freedom of the press and radicalising its population through propaganda.

I've been following the Crimea conflict very closely (which almost certainly is also what caused Pavel's departure) and the seriousness of the situation is heavily underestimated by the world.

The Russian economy is heavily dependent on gas exports, and both income from - and production of gas is declining. A small elite has been massively siphoning off wealth from those natural resources and is desperate to stay in control.

Given the situation they (rightfully) fear being overthrown and to prevent that they've started 'restoring Russia to it's former glory,' appealing to traditional family values by introducing anti-gay laws, introducing laws against protesting, laws against criticising Russia, shutting down independent media and distributing propaganda from the remaining station which gets ever more removed from reality by the day.

It is in that context that the VKontakte departure must be seen, and therefore it's difficult to make direct comparisons between Russia and the US: they are truly orders of magnitude apart right now.

P.S. It is important to keep in mind that you could also argue that something similar happened in the US with the NSA scandals but in the US none of the CEOs chose to resign.
They didn't "choose to share their name". They just typed it into the form and there was no evidence that what is normally kept private was going to be divulged.
It uses harmonic mean, not arithmetic mean
What "people like me" do you mean? Those who don't forgive you for doing bad science just because good science is hard? Yeah, those guys will totally fuck up a neighbourhood.
I'm curious why, given the prior reports of security issues at Coinbase and the ongoing drama with Mt Gox, you guys didn't immediately hire, say, tptacek's company to do extensive penetration testing and a full security audit. It appears that not all API calls were rate-limited, as they probably should have been, and there certainly doesn't seem to be any sort of monitoring of brute-force attempts like this in place. With all the negative publicity around Bitcoin exchanges, you should have doubled down on security weeks ago, or at least explained the privacy tradeoffs in your design decisions clearly.
> Anyone know if BofA or WellsFargo allow user enumeration

You're correct. They don't. Not even to authorities without a warrant. Which is the point I was trying to make in my earlier comment.[0]

[0] https://news.ycombinator.com/item?id=7510524
I agree! There are also a lot of spam-mailers that use their unsubscribe link just to confirm that the email adress actually belongs to a human. Thats why I tend to ignore the unsubscribe button, when the mail looks fishy.
Is there an option to opt your account info OUT of the api?