skysight-inc/HackerNews huggingface dataset:
Yes, the disclaimer label was added because of that lawsuit. Author knows what he's talking about.
DevCentral Weekly Roundup Episode 98 - Volunteer Hour
Cookies are part of HTTP.

He's referring to SOAP there I'm sure. And he's right. SOAP is awful.
How are y'all dealing with the water? Is it an obnoxious drive to the beach?
Perhaps it'll mean more if someone else says it:

Although nanosleep() takes a timespec struct that allows you to give an accuracy with nanosecond precision, nanosleep doesn't really give anywhere near that level of accuracy. Under Linux, the kernel only checks on timers once every "jiffie," which defaults to 1 ms under the 2.6 kernel (on older kernels it was 10 ms, and 10 ms is still a compile option in the 2.6 kernel). Once upon a time, nanosleep would busy-wait if the sleep time given was less than 2 ms, but not anymore. On the other hand, don't be too discouraged—as long as you don't need submillisecond accuracy, nanosleep() is very good…

http://www.ddj.com/linux-open-source/184402031
If she's not a technical person, that's on about the right level. It's probably done up a little for the sake of making it slightly more interesting to read, but I could imagine a conversation between a very technical person and somebody who knows next to nothing going very much along those lines. And even if it is a little oversimplified, it gets the point across very well.
SlingshotSMS: A Lightweight Open Source SMS Gateway [Alpha]
TeraByte Sort on Apache Hadoop
I presume by "arguably" you mean "I have a bizarrely distorted worldview and therefore I'm going to assert this fact that I have just produced from the depths of my colon."
Mind completely blown. And yet another example at how far ahead Apple is over AT&T (Apple's building stupid awesome hidden features while AT&T can't even provide basic voice service).

Every time I think of ditching my iPhone I get reminded how far ahead the device is over everything else out there.
You can say "defense in depth" about any idea, whether it works or it doesn't. My XOR idea --- which I am going to name "hippo", as in "your passwords should be salted, peppered, and hippoed", is also "defense in depth".

To evaluate the efficacy of a "defense in depth" measurement, insert it into an incident disclosure. For instance:

"We're sorry to inform our users that owing to an SQL Injection vulnerability, we may have disclosed the password hashes of all of our users. We believe these passwords remain safe, because an attacker would also need to have access to our source code in order to learn the secret key needed to mount a dictionary attack against them."

Compare to:

"We're sorry to inform our users that owing to an SQL Injection vulnerability, we may have disclosed the password hashes of all of our users. We believe these passwords remain safe, because the cryptographic algorithm used to create the hashes ensures that it would take over 100 years to complete a dictionary attack against a single password."
It is hardly a debunking if the author writes in an update at the end of the same article that "My critique is thus wrong".
It'd sure be weird if it turned out overfishing was a significant contribution to El Nino-ish weather disruptions.
LG KF600D Pink Unlocked
LG KF600D reinvents the touch-screen capable phone with astounding results. Once the iPhone was released it was generally agreed upon that having a touch-screen was incredibly beneficial. Now the KF600D introduces a phone with two screens.
The US is a nation of free individuals. Big and Small.
> Varian's point is that you get diminishing returns after a certain point with more data.

That's true only if you have a fixed number of questions.

He points out that Google can do an experiment with 0.5% of its daily searches that would take Microhoo 2% of their daily searches and concludes that Google has no advantage.

That tells us that Google can do 4x as many experiments as MicroHoo. Does anyone really believe that Google has enough search traffic to do every worthwhile experiment?
I don't know that it is nonsense, but it is an overstatment.

Personally, the vast majority of programs I use on a regular basis are desktop based, and I cannot find a good web app to replace them (some of them have web app versions, but sorely lacking in features I need):
Python,
PyDee (soon to be renamed Spyder),
MS Outlook,
MS Word,
SQL Server Management Studio (and associated suite like SSIS...),
MS Excel
GIMP

And when I have a few free minutes for a game, it is on a disc in a PS3.

Also, when I do my own personal programming (I'm a DBA, not developer by trade, but I do little custom things for myself and friends at night), I can do them both more easily and in a more polished fashion for a desktop gui than by running them through a browser. This may change as browsers mature (and I learn more about browser based programming) but for right now I find desktop apps are almost always higher quality than the web based versions.
(sidestepping the actual issue because I do not have an informed opinion)

"Interdisciplinary curriculum? If you're teaching a historical novel, Requa explained, English and history are linked, and students learn in greater context."

Actually it has long bugged me that this isn't done more with math and science (especially physics). I think physical processes are great ways of clarifying mathematical concepts and vice versa. Also, explanations of statistics become lucid when linked with experiment design.
Tell HN: "Login" is not a verb
There are many examples of boring corporate non-webapp programs. Visual Basic was the most popular language once and it has nothing to do with web programming.
I don't think "sparking conversation" in and of itself is a good thing. Most conversation is mundane, boring, and a waste of time.

Agreed, but some is productive, and while I disagree with much of what he says, he often sparks productive conversation.

In most forums I frequent, the majority of questions are from people asking how to get some FOSS project to work, not how to code some particular algorithm or do something hard.
True, but that is where most people need help. People working on the hard problems probably both know how to generate the answers themselves and know that they will find little help on those on the forums.
CRUD is good for & is the only consistent way to build REST over HTTP
Then he should pick better titles for his blog posts.
I realise it's off-topic (and I am somewhat cranky), but it's not the level of the explanation that is the problem - it's the way it seems to be addressed to a 7 year old ("He's smart!", "It's amazing").

As an adult, I personally would prefer if you explained something to me and let me be the judge of how smart and amazing everybody is.
Glide Engage Is A Stream Reader With A Web OS Attached
The Movie Studios Have A Great Idea To Ramp Up Piracy.
The title should read "how I explained REST to my trophy wife". Also, all the structured data stuff doesn't really belong in a discussion of REST, imho. SemTech researchers have been studying this problem for a long time, came up with RDF etc. Tim Berners-Lee was also you know, involved in those HTTP efforts, you can watch him discuss this topic here http://blog.ted.com/2009/03/tim_berners_lee_web.php . Not impressed with this REST article.
The second reply (The test is broken!) made me smile.
OpenStreetMaps Project Takes Maps in a Different Direction
Slowly coming out of stealth mode
It's going to be very interesting to see how people will adapt to the power drain issue here.

White text on a black background is no longer what people are used to, but to maximize battery live on these devices that's the way to go.

The next hurdle would be software companies and website makers. Most text is black-on-white now, a regular display is pretty much a constant drain because the backlight is what consumes most of the power, an OLED will consume more as more pixels are turned on and brighter.

Green or Amber text on black anybody ?
I haven't seen that many actual homeless in Portland. Mainly hippies, trustafarians, outdoorsmen, and people posing as homeless in order to make a quick buck.

Here in the Boston area? Oh hell yeah.
Geeks like to make "minimum assumptions," and then work everything else out from those. For example, the Minovski (or however you spell it) Particle is the only real change you need in physics before Gundams start looking like a good idea. If the emergent properties of the world, as shown through the work, cannot be deduced from the single "axiomatic" change, then the movie feels "wrong" to most people, whether they can bring it into their conscious mind or not.
The Role of Programming Languages in the Education of a Programmer [pdf] or
I went through a phase of reading all that stuff a number of years ago. Gabriel has a seriously pompous side, which I eventually couldn't bear any longer (probably after spending time and money tracking down his "Patterns of Software" book and then discovering how dreadful it was). But the piece you link to is refreshingly free of all that... until, amusingly, the last sentence, as if he falls off the wagon at the very end.

I don't begrudge him for being unable to make up his mind whether he agrees with "worse is better". There are disadvantages to both approaches. But there's no need to be a drama queen about it ("One fellow was seriously nervous that I might have a mental disease") or inflate it into an artificially large "philosophical" question.
"Near the speed of light" carries with it the implicit disclaimer of "relative to a stationary observer" (that is why the theory has the word "relativity" in its name :)

Light travels at C (through a vacuum) regardless of your frame of reference, so it used as the comparator for speed/velocity among different frames of reference.
Ok. I owe you an apology for implying you weren't speaking from experience.

The library complaint annoys me because it's become the thing that everyone repeats regardless of how applicable it is. The truth is that it depends on what kind of problem you're working on. Also, to the degree that it's easy to implement the portion of functionality that you need, the value of a library goes down; and no one seems to consider the cost of using a library, which can be nontrivial (e.g. learning curve, difficulty of modification).
No, actually it was the articles about white flight from California I've encountered over the last few years.
typical itworld material. Barest of research and lots of generalisation. Not really HN level material. Not really Joe public material either.
Since contests are so in vogue this year. Let's have a contest for people using public data APIs to find the biggest discrepancies in spending for different departments, etc.

Giving people data and a little bit of motivation will really show what can be done with this stuff.
> Isn't light always going to move C faster then you?

Yes.

> Isn't it impossible to move "near speed of light"?

From your perspective, you'll always be slower than light by C. Your speed relative to another observer, however, can be arbitrarily close to C.

In classical mechanics, your speed relative to the other observer could add to C, resulting in "your" light, from her point of view, traveling faster than C. To avoid that discrepancy, special relativity postulates that her (or your, depending on the POV) movement through time is slowed until you both agree that light is moving at precisely C.
Oops, and it's too late to edit the comment. Here's the correct link: http://projecteuler.net/
I read about the lack of class mobility in the US in the Economist, hardly a left-wing advocacy group.
Should probably be a good idea to move from String to Ropes.
http://scienceblogs.com/goodmath/2009/01/ropes_twining_toget...

A short snippet: What works extremely well is to take the basic idea of a list of mini-buffers (that is, smallish character arrays), and tweaking it, so that instead of keeping a list of sub-buffers, you put the sub-buffers into a binary tree. The result is a structure called a rope. To the best of my knowledge, ropes were invented by Hans Boehm (of garbage collection fame). Ropes are a simple, elegant data structure that's excellent for representing large string-like data structures. (The name is a pun: a real-world rope is made by twining together lots of smaller strings. A data-structure rope tangles together data-structure strings.)
The second of those links was where I first heard of the OP.

Unfortunately, I think I was unable to find the first of those links, so I re-submitted the website.

Thanks for the comment.
One thing we can all rest assured of is that every Obama voter, in fact, every liberal voter of our modern times is an enlightened, fair minded, and informed individual making the best choices possible, and have risen above base human instincts like psychological biases.

Can I get a hip internet liberal high five?
wow...he's new as a designer for me, but the influence is amazing. Is everything we think modern, just retro?
This is a pet peeve of mine as well. Similarly, "backup" is a noun, "back up" is a verb, but they're often abused.
You only have to generate the hash during login, not during every page request. I don't think the majority of the time on most websites are spent on logging in.
I love this comment by BubbaBrown on the original site:

Good flash. I heard all the same things when I quit my job. Still an unemployed computer scientist, but sometimes you just got to escape. A professor once told me to be wary of the "golden handcuffs" or getting too complacent and comfortable... I saw what he meant. Guys with 10+ years of industry experience sitting around doing nothing and incapable, after years of atrophy, of doing anything of importance, but still collecting a check. I had to leave. It's the worst time to do so, but you don't see the living dead, your future, and stick around. So, good luck on your future ventures.

Now I'm sitting in a customer's office and looking at my invisible but oh-so real golden handcuffs. Something to think about on the week-end...
I would suggest simple using the HTTP basic auth.

http://en.wikipedia.org/wiki/Basic_access_authentication

Simple but effective. One example of such a usage is mercurial: which uses HTTP basic auth for remote pushes to your web-based repository :) As that is a similar sort of thing it sounds ideal.
The real problem is government paying lip service to opening up data and giving people access to it. NYC Big Apps is possibly a step in the right direction:

Approximately 80 data sets from across 32 City agencies and commissions may be made available on NYC.gov, including such categories as citywide events, property records and sales information, recreational facility directories and restaurant inspection information.

But, we'll know when we see the actual data not some press-release... Also, where is the really useful data including health, and transit? I almost wish there was a federal standard of some sort.
Silicon Valley CS employees are still hurting
What is your point? Even sadder to see this thing upmodded so much. I would have thought this would be languishing at -2 or so.
This is dead on. It is hard to even play devil's advocate against this.
Hey, I'd rather see the future than the past anyway :)
Agreed. Indeed the response of fine, you want to compete? let me go open up my IDE and we'll begin is definitely the mark of a real hacker.
That's his fault, not hers. You should see her version.

When I write conversations down it's hard to capture the spirit of the give and take. My straight-line write-down-the-meat approach always ends up devaluing the questions and ideas raised by others. My goal is to record what I learned from them, and I often come off sounding self-obsessed. I think it's an occupational hazard: all of us emphasize what we say in our own minds. Writing down conversations just uncomfortably highlights that fact.
Again, I have to ask, what does moderation mean? In my experience, I have found that almost everyone believes they eat in moderation. The sole exception would be with respect to calories/weight gain. I can only conclude that it is meaningless except in the context where it means eat the amount of calories that you burn.
Pros: Simple, Practical, Useful
Cons: No mobile interface, No desktop apps for rapid entry.
Didn't know that Evangelicals were "rising." Seems like an interesting thing to say. Even more interesting is the assertion that somehow the media used to deliberately suppress this.

Football and prayer has gone together (as with other sports in America) since their inception. Same goes for politics. I remember reading a guy who studies political speeches. He said that only recently has it become commonplace not to mention god or some kind of faith in a political speech. Up until now, state of the union addresses, senatorial speeches, stump speeches, etc. well full of religious imagery. (Still quite a bit of it)

None of this was ever "suppressed"

I wonder how much of this is not only clustering and selection bias by various groups, but also quite a bit of "us versus them" going on. I'm sure in some evangelical group somewhere they're probably lamenting how the internet is causing the rise of atheists and how, up until now, the media was helping keep a lid on these kooks.
self-employment != small business. I believe we are talking about small business here.
LOL, well I wouldn't call that a "reason", but yeah, it's white as fuck here. I have no idea why, but that's the way it is.
I would've liked to known more about what the hedge fund had under the "Where we went wrong" section
I prefer equal splits whenever possible. This allows discussions to be meritocratic and not power based.
This was a more useful article than the actual post
Eh? The beach is only an hour away. I don't know what you mean about the water...
'Cash For Clunkers' Program Is 10X As Expensive As Alternatives
As a designer you might enjoy the way I explain REST to people:

Think of the URL as part of the User Interface. REST offers conventions that make it easy to guess the URL of what you are looking for, just as you would guess where to click/navigate to get it.

I realize this only covers one aspect of REST, but I like it because I think the idea of an address as a resource which has a certain appearance (its URL) is quite powerful.

edit: I realize that rest could just as easily use meaningless identifiers, but it is often the case that meaningful identifiers are used such that the user can GET desired items by guessing the URL.
I haven't read Pollan's books, so maybe someone can clear this up for me- How is that we are supposed to marvel at Joel the grass farmer that raises animals, but then eat mostly plants? Does he provide any evidence that eating (grass-raised) animal (products) are bad for you?
Business labels printing, presentation folders printing
wow, that's crazy. If a doctor makes a mistake like that they don't go to jail! how does that work?? it doesn't even make sense!
Those need a landline (or cable) to work.
But that doesn't reflect the reality of health care throughout the western world. I'm an American who lives in Europe. The health care is not comparable. The Czech Republic, where I live now, has infinitely better health care and no one is denied "a service because it isn't available." Trust me.

This is one of the big problems America faces: it has been so successful for so long, that it thinks it can't learn from anyone else -- that it has all the answers. It's how big firms fail, and countries are no different.
i can't tell if you're being sarcastic, but i'm not. they are awesome!!

i won a contest and happily use products founded on top of open api's. the open ecosystem is growing!
The article is unspecific about what these compounds do to regular stem cells. It would be interesting to know if the most effective compound also kills regular stem cells, or if it somehow distinguishes between cancer and non-cancer cells.

(What happens to tissue when you take away its stem cells, anyway? Does it just age more rapidly? Or die off?)
I prefer to s/backup/archive/, since the word "archive" has the advantage of being both a noun and a verb.
Eugene is fully of hippies and it drives a man insane. It's a huge stereotype but it's absolutely true. I grew up there and lived there for 18 years. My parents still live there. Everytime I visit all I see are damn hippies everywhere. I can't stand it.
Why does that mean there's caching? I tried it and it was exactly on, not _before_ the shot.
Independent of the issues you bring, I'd like to point out that one of the first things people think of when we make a digital mark on a physical location is "graffiti" or "tagging" or "writing on a wall". They are each used by lots of apps, essentially all meaning the same thing.

Also, making a statement about market position and alternatives isn't a "threat". It's positioning in a negotiation. A threat would be "we have a reasonable claim to your trademark" or something like that.
Right, this will be my last response on this, especially as I have already conceded defeat. You just like arguing, apparently.

Firstly, even in the first "disclosure" message - the passwords are indeed safe. Because of that "useless" peppering, there is no way the attackers will be able to unmask the hashes.

Secondly, if you have configured your database such that it is even possible to perform a select all on Users from the app server account, you are Doing It Wrong.

However, you are broadly right.

That said - my whole thesis here is that there are no magic bullets. Yes bcrypt is (much) better against this particular attack. But the DB server is not even web-facing and is unlikely to be compromised; the app servers are far more risky. They have access to the plaintext passwords flowing through them. When they are rooted, you're fucked no matter what hashing strategy you chose. And if you have a crooked insider - which as a security professional, you will know is by far the more likely risk - that's where they will strike as well, of course. Your precious passwords will be bcrypt hashed to the DB all right, but Mallory keeps his own plaintext backup, written by the comped bcrypt gem he snuck onto the system looking for a payday. Or whatever. There's a million ways to do it, all of them easier than brute forcing anything. You're focusing on this single scenario to the exclusion of any number of more likely attacks. Despite the hype, "steal-the-user-table" breaks are not common.

Anyway. I was wrong, and I admitted it. Use bcrypt, everyone. EOF
I used to be an academic, with industrial research projects, for some time, so I'm relatively confident I understand how academia works.

1. I wasn't suggesting at all that academic research isn't paid for. Clearly the people doing the work somehow earn money and make a living, some of them exceedingly well. Nowhere was I suggesting that people do academic research for the pure love and charity of giving stuff away for free.

2. In large part, everyone gets to share and benefit from their output -- and most of those benefiting would have had no direct financial involvement with the work.

So, here we have a model where the product is available for free while the creators somehow earn a living (probably by being domain experts or by knowing how to apply their free "product" in the context of something more specifically revenue generating).

How is there not a correlation with; and a counterexample to; some of the arguments from the parent comment?
Or maybe not: http://en.wikipedia.org/wiki/Paycheck_(short_story)
Ask HN - When is right time to start using version control for a project?
I've been working on an iPhone app for about a month and I'm waiting until I finish a key set of features before I put it under version control. I'm making so many big changes that I'd rather not keep track of them all yet. Regular Time Machine backups and archiving a copy of the code after implementing a key feature are the only things I'm doing at this stage.<p>I'm curious though, at what point in a project do you guys normally start using source control management (ie. subversion, git, mercurial)?