skysight-inc/HackerNews huggingface dataset:
The liquidation value in this case is $13 billion greater than the market cap. They would absolutely be acquired if their market cap weren't $37 billion. There are only a handful of potential acquirers that have that kind of cash/equity, and to them the extra $13 billion - that could vanish in a few bad market days - isn't worth the risk and negative perception that buying Yahoo would likely bring.

In any event, it appears that Yahoo's investment decisions are the the only thing that have saved the company. They should shut down all non-profitable parts of the core company, liquidate most of their of their Alibaba/Yahoo Japan stake, and use the newly empty offices and $50 billion war chest for a private equity/venture firm/hedge fund. They could reassign some of their brightest engineers to write trading algorithms. With $50 billion to play with, and some smart people, they could be throwing off $5-$7+ billion in profits for their shareholders per year.

They've lost the battle for web supremacy. They should recognize their strengths and capitalize on them.
14 years ago I played online chess on Yahoo. The could expand it by providing J2ME, Symbian, Android, iOS and HTML5 clients... But no they still only have original Flash version...

Yahoo is irrelevant now, yet another wanna be internet company.
PVS-Studio: Checking the Qt 5 Framework
Please do not enforce character set or maximum length restrictions. I have a number of 30+ -character passwords that are regularly rejected because they don't contain a digit. I'm sorry but "Password1" isn't going to be stronger than that.

Also, consider enforcing higher minimums. Eight characters is simply too fast to brute-force.
I guess it depends on if you think that things that boost behaviours inherently are included or if only software counts. I see it more akin to if some users submissions were automatically tweeted whereas others had to copy and paste.

I didnt realise they had taken out the alerts on their dashboards that led to YC members being picked up by the vote ring detection.
I've never heard of this man before, nor read any of his books, but that is an excellent quote.
Shopping malls.
Forgive me, but I feel like laughing.
No one helped the project. No one funded the project.
No one cared until the hearthbleed bug. No one even looked at the damned code. But everyone feels entitled to comment on how shitty OpenSSL is, NOW.
This is getting ridiculous.
I have one question. Even if we use hashing and random salting, then should we make some max-limit on the password. Its not related to the length i want to store, its the length that system will convert to a hash. Will very long passwords be hashed in equal time ?
The sound ʤ seems to occur in most Slavic languages [1], I guess the primary reason why "Java" is read as "Yava" is because people tend to apply local pronunciation rules to commonly used foreign words, either because of lack of knowledge of native pronunciation or because native pronunciation sounds just silly.

[1] http://en.wikipedia.org/wiki/Voiced_palato-alveolar_affricat...
Likely because someone sued them for letting the beach go un-patrolled at night. If it's closed, they don't have to pay anyone to patrol it.
> service not up to par.

If french cafés get things right, I doubt service is a problem. Many cafés barely have service, if you want to be served you go to the counter and get whatever you need, then you go back to the terrace.
https://stackoverflow.com/questions/9603/what-is-some-great-...
Agree that this thread should not gloss over the gigabytes of rubbish written by undergrads in response to "magical realism", and what's worse, the person-years wasted by a devotion to the arts inspired by a combination of a childish attraction to this sort of stuff and the spurious academic credentials accorded to it.
Can those memory safe languages be called by other languages? Or moving that library to another language will force python/ruby/etc. to rewrite (a large) part of their own FFI?
This is one of the critical things that put the lie to the claim that parking spaces = customers. Cars get rid of customers, so you have to put in parking spaces just to get some of them back.
You don't necessarily need a checkbox for this. Just place a text that says something like "By clicking on the 'Signup' button you agree to our Terms of service and whatnot". This is what facebook is uses, and twitter, and many other service.
Now I want a subscription to the Keplerian Journal of Science.
Very hapy with the combination of:
localphone (for credits and numbers)
with
pbxes (hosted asterix)
I switched to djbdns 14 years ago and have never looked back. I've installed bind a few times for clients who really wanted to stick with it and it seems to have improved but I'm still happy using a set of small, task specific tools that don't require any maintenance once installed.
Now make this self-hosted and then I'm in.
This does not actually seed the PRNG. User-provided data is not entropy: entropy needs to be random, not deterministic. In OpenSSL, PRNGs are pluggable, as well, which means that some modes of seeding the PRNG could actually leak sensitive user data out of the process!

This code shouldn't have been there in the first place, and wasn't doing any good.
I know it would be a pretty big experiment both technically and conceptually, but I will propose it just in case.

I have noticed that usernames might influence the way I vote. What if usernames were not displayed in comments? Now this leads to two problems: 1) it makes it hard to follow who replied to what in threads 2) it makes it more tempting to post bad comments given the lack of accountability. I think the first problem could be solved by assigning users a per-submission temporary username picked at random from a name/word list. The second problem could be solved by linking those random usernames to the actual profile page of who posted (just like HN currently does). It wouldn't stop deliberate attempts at up/down voting specific users, but it would remove the unintentional bias.
It's still cars; it's just that the problem was never the automotive engine. Old World cities were patterned after layouts that were based around people walking. Then we started riding horses, pulling around carriages, etc. By the time you get to the Western frontier, the vast open space inclines you to spread out your buildings.
The best no-internet message I've ever seen.
>And as always with any software business, with users, you have data, and with data, you have potential advertiser money and a lot of investor interest.

If dropbox goes down that path, not only would they lose a huge chunk of their existing customers, they would definitely perma-ban themselves from enterprise market. And that is where the real money is.
The fact that something is "almost everywhere" doesn't make it good. It makes it useful at most.

And your examples make sense, javascript doesn't (in some cases) so it's very appropriate to complain.
Show HN: website that lets others make decision for you
The earlier analyses where also doing writing style comparisons. So if I say, come up with an almost identical way to test newtons laws of motion, but with a slight variation, it'd be news that to discover that a = (v2-v1)/(t2-t1)?
Congrats on putting something together, hope you had fun doing it. What are your next steps for this project? Mine would be to polish the frontend design. I'm not sure of your comfort level with frontend design, but as a programmer with no design skills I usually look to https://dribbble.com/ for inspiration or use Twitter Bootstrap. good luck
Only when you don't buy the value added PowerPack, which comes in variants Premium, Premium Deluxe and Premium Deluxe Dual Head.
Even having a sentence dependent on "how much he cost his victims" is very wrong imho. The sentence should only depend on how violent the crime was, how much effort was made to avoid being caught and how "malevolent" or carefully planned / premeditated it was. Maybe it should matter how much of the stolen money he actually spent (simply because money spent by a criminal tends to get into other criminals' hands and fuels crime by the process of being spent), or whether any company actually went out of business because of the losses, but even this stretches it quite a bit...

The value of money is relative. Stealing $100M from a hedge fund or a bank could have very little impact on society as a whole. Doing an armed robbery for $1K on the other hand is actually very dangerous because things can get easily out of hand and innocent people can easily get killed.

Now, whether the criminal stole the $100M by pointing a gun at someone's head or threatening to kill someone's family in exchange for some access codes, or he just "hacked" them, that tells you a lot about how dangerous the thief actually is to other people, what other crimes he would be capable of committing and whether he can actually be "rehabilitated" or not, and this is what the sentence should be based on.

(Yeah, I know this is not how the the US legal system works, and I get that there are current advantages to the way it works now, mainly being good-enough at deterring large scale white-collar crime, but still, I think it's just plain wrong...)
But i agree, it's not necessarily unsustainable. They just need to focus on PAYING customers more, and they'd find most of them in the enterprise market. So yes, tying content-creation with content-storage is an EPIC move, but they need to keep in mind that this needs to be done with the focus on the enterprise user.
With this logic you can defend anything. PHP's great if used in a good way: Zuckerman's a billionaire. Right? Why is anyone even bothering with PL these days?

Sushi knives don't decide to cut you because the rice came from a different origin. And I'd guess that most craftsmen, outside of a ritual and tradition would love for their tools to have less disadvantages.

If you want to draw an analogy to spaghetti (?), it'd be like complaining that the only kind of spaghetti you can buy locally cooks only at a specific temperature, and even a bit more turns it to mush. And the reason is because the local government passed a bylaw with only a few hours of consultation that ended up banning imports of better kinds of spaghetti.

While it might be "pointless" to spend all your time complaining, there's certainly value in asking "wat" and pointing out absurdity.
Or you can go with http://kimsufi.com and get a 2GB RAM dedicated server for $13 a month.
> collector is the diagonal line with the arrow, emitter is the other one

I suppose you have a typo here. Should be the other way around.
The assumption that a company can make a "better crop" is naive. There is nothing like a "better crop". It may be better about some features. What is underestimated is that it may have introduced regression on others yet unnoticed or disregarded. Bioengineering is very complex and currently based on trial and error. It's not yet true engineering.

Transpose this to software development. Is a modified program correct and without regressions because it "works" ? Until we don't fully understand how all the biochemestry works it's like changing the software code in semi random ways and see if something "better" comes out of it. What fool would do that in software engineering ?
I know you're being facetious, but it's not an unreasonable point. All attempts to create a pavement cafe culture here in the UK have failed, 24-hr licensing to serve alcohol turned out to be a mistake. The British simply don't drink in the same way as the Italians. We like pubs, not bars or cafes-that-serve-wine.

You might as well write an article wondering why you can't bring an American "spring break" drinking culture to France...
Vishaan Chakrabarti actually specifically defines a city as "30 dwelling units per acre" or "population dense enough to support train-based transit". Latter is paraphrased.
I'll add something to this: you can serve alcohol in sidewalk cafe's here in Italy, something I did not say mentioned in the article. Alcohol usually has very good margins, which provides part of the economics for everything.
you can try camelCasing your passwords, same effect really
I think the OP should name and shame the site that takes passwords over a non-secure connection, stores them in plain text, and silently truncates long ones. Maybe that would get them to fix it.
On Traceur: We're currently using a subset[1] of Traceur for out frontend coding and I can't say I've noticed any particular problems doing so. I also don't see any problem if libraries we were using would change to using Traceur, so long as they were to distribute the compiled output. Yes, we'd have to include the Traceur runtime, but we already do, so... (There could be versioning issues, but I suspect that the Traceur runtime is relatively static and so could remain "compatible enough" across versions. One could also easily imagine JS libraries built on Traceur distributing both the original ES6 source and the transpiled JS.)

[1] The caveat here is that we have to support IE8 (for now at least) which the Traceur runtime doesn't support, so there are a few features we cannot use (yet).
And when the poor and homeless show up looking for the soup kitchen and temporary shelter? That should fly real well with the monied gentry on the 50th floor.
A 4x price differential is nothing for a company?
Alibaba hasn't IPOed yet.
Yes, support of the free market is non-scientific in the sense that Mainland China, Russia, Cuba, North Korea and similarly non-'free market' countries are much wealthier than historically pro-market countries like Switzerland, Singapore and Hong Kong. /s
I don't understand the difference between OpenVZ, KVM and all the other virtualization providers. Is it that some are much faster than others?
I always found it a bit hilarious how Sun, after getting Microsoft rather onboard the Java train, albeit with their necessary native extensions, decides to sue them and put an end to it. And promptly kills off Java distribution and adoption by the largest software developer in the world.

Even stranger is how Sun, a hardware/platform company, decided making a popular platform that's hardware and platform independent would help their business. Sometimes I wonder if there was a really well thought-out plan, or people were just doing things.
There is a very cool project for new space telescopes in the works. Here is a 6 minute TED talk about it, also explaining why it's difficult to detect planets directly within the visible spectrum: http://youtube.com/watch?v=XYNUpQrZISc
So, what is self inside a class method? I was under the impression it was the Class?
In apps built on our Q Platform, the default "set password" screen actually encourages users to select a PASSPHRASE and displays several suggestions. When the app is online, the suggestions consist of three consecutive words in Yahoo News. If the app is offline, they are generated from a dictionary in the form MY NOUN VERB HIS NOUN or similar.

This should hopefully help more people choose strong passphrases.
It seems reasonable to enforce a size-limit on passwords, but in the order of kilobytes, not a two-digit number of characters. Perhaps 64 KiB, to commemorate Heartbleed.
Please someone set up a tumblr for these.

Paypal has a max of 20 chars.
I would give Delachaise (New Orleans) props as somewhere that tries and mostly succeeds at this vibe. They are a bit more sealed off from the street than I'd like, though.
Yes, it's probably actually necessary to introduce some kind of limit to protect the server against hashdos-type attacks. Sadly though, Occam's razor suggests that the "20 char" limits and ridiculous "alphanumeric only" restrictions are caused not by some advanced considerations but by something much more stupid and incompetent.
It's not publicly traded ATM, but the article hints that it soon will be. But Yahoo has a stake in it, and thus it has "shares" and those shares are worth something, hence it DOES have a "share price".

EDIT: I can see that your parent does not realize (apparently) that Ali baba is not publicly traded
That could do more harm to the site users than the site itself. Especially with people sharing passwords between sites.

I guess that's an example Full Disclosure vs (as an alternative) Coordinated Disclosure; http://en.wikipedia.org/wiki/Full_disclosure_(computer_secur...
Honestly, I don't get why a service would enforce a password policy at all.

They should warn users about what makes a good password, and tell them when their password sucks ("your password is weak and would be crackable in 3 minutes") but if someone wants for some reason to use 123456 as a password, that's their own problem.
New decentralised internet
He takes coaches from USA to India to teach basketball to underprivileged kids
> Will very long passwords be hashed in equal time ?

No. This allows for DOS if there is no limit whatsoever: https://www.djangoproject.com/weblog/2013/sep/15/security/

But acceptable limits are in the kB range, not in the double-digits bytes range
Check the Amazon TOS if you're doing this for the $$'s.

You have ThePirateBay links next to the Amazon links which they may frown upon for no good reason.
"They could reassign some of their brightest engineers to write trading algorithms."

Unfortunately for that strategy, their last CEO effectively got rid of all their good machine learning guys.
Murphy Avenue in Sunnyvale gets it right on some weekends, when it is closed for traffic. It is primarily a pedestrian street and only a few people (who deserve contempt IMHO) ever drive or try parking there.

By the way, anyone knows what prevents from closing Murphy for cars? I'm seeing attempts to do that http://www.mercurynews.com/ci_18390412 but no progress so far. It looks like some business (cafe) owners oppose that. Should we try obtaining their names and advice them not to oppose closing Murphy for cars?
Microsoft used to truncate live/hotmail passwords silently to 16 chars pre-hash, I recall them announcing the change to an upper length of 16 a while back.
I doubt they're the ones storing passwords in plaintext though.
Safety factors also exist because we don't know what we don't know. Models sometimes break down unexpectedly, so a factor >1 is sort of a "meta safety factor 1", taking into account that our models/people somewhat predictably fail.
The Cloud Service I have been using just dissappeared
Why would you put your actual salary into this site? If you just put in $300,000 and wait for someone to contact you, you're probably going to get a raise.
If oculus would have done this i would have had a way more respect for them.
It's the service's job to be protected against bruteforce attacks.
do you still use ruby and how?
A larger input will take longer, but for the ranges normally used for passwords it shouldn't be noticable. You want a maximum length to prevent denial of service attacks. The maximum depends on the hash you're using; Bcrypt has a 56 bytes limit for example.
For some context - I hope they just have forgotten to renew their domain (which is still very bad). The client software does not connect either though - and they do no answer the phone.
It's like you worked hard, and then somebody pays you to stop trying.
What’s morally acceptable? It depends on where in the world you live
Part of the problem, however, is that you can't do that and get the same variety with some plants on the second generation. (I guess this might different with tomatoes)

>Most commercial vegetable seeds are hybrids, which come with a kind of built-in security lock; if you replant seed from a hybrid, you won't get exactly the same kind of plant.
Deep Dive Into Python's VM: Story of LOAD_CONST Bug
I loved clipboard and then it died. How long before you go away? Signed up anyway.
I don't care much about the topic, but I thought this is a great way to present data !
A long password does take a bit longer to hash, but taking a long time is the whole point of modern hashing algorithms like bcrypt, so you shouldn't balk merely at the fact that it takes longer.

The real problem is that if the password is too long, it will kill your server to compute a hash of it. So there needs to be a limit. The usual limit in my apps is 1KB. bcrypt is fast enough to hash 1KB with a work factor of 10 (a reasonable default on current hardware), and I have yet to come across any realistic situation where a password over 1KB is needed. After all, the heat death of the universe will probably occur sooner than you can brute-force it.

I'm willing to increase the limit a bit if someone really wants to use a 32KB password. But 1MB is probably overkill. 1GB is definitely off limits.

There is, however, another problem with using bcrypt to hash long passwords. bcrypt ignores everything after about 60 bytes, so the password is effectively truncated. This can be a problem if most of the entropy is in the last part of the long password, because long passwords that only differ at the end would produce identical hashes given identical salts. (Imagine that someone uses the Fifth Amendment as his password but changes a few words in the last clause. What if someone types in the unmodified Fifth Amendment? Boom, they're logged in.)

My current solution for this problem is to do something like bcrypt(sha512($password)) so that I never need to feed anything really long to bcrypt. (The raw binary output of sha512 is 64 bytes long.) But I'm not sure whether this might negate the benefit of using a very long password in the first place, so I wouldn't recommend it unless someone who knows better can confirm that this is safe to do.
This whole debate is why the translator chose "discover". It's a bit awkward because it can be interpreted two ways, but in one of the ways it carries the connotation of seeing for the first time, without the lengthy phrase "to get to know" or "to see for the first time" disrupting the rhythm of the prose.

The crux of the problem, of course, is that the word "meet" in English only applies to people.
It's a habit I picked up because Google is my primary learning tool. "Golang how to X" is almost always a superior search phrase than "Go how to X".
A month ago I made a list of well-known Danish startups, and many of them have had US funding: https://news.ycombinator.com/item?id=7391809
It looks like it's up and running to me.
Yes in class methods self is the Class object, so the Class is used as the locking token:

> The object passed to the @synchronized directive is a unique identifier used to distinguish the protected block
In Britain, come summertime, most people would prefer to be sat at a trestle table in the beer garden of a pub rather than being awkwardly perched on some pavement outside some cafe. Cafe culture is not for us - unless it comes with a greasy spoon... The streets are too noisy, the council charges cafes for those chairs and the weather does not help.

I haven't really thought about it before, however, I don't think that the U.S. has a lot of what we Brits would recognise as a quality beer garden, whether it be attached to a pub/cafe/restaurant/mall matters not, neither does the location (in the UK the best beer gardens are in villages).

Is this true or am I imagining things?

Beyond reasons of urban sprawl and car culture, are there any reasons for this, e.g. prohibition back in the 20's?
Public parks are often closed at night to keep people from doing various bad things there at night: drug dealing and prostitution are the two big ones.

Having the spaces closed at night also lets the police toss out any homeless people who might use it to bed down for the night.
How is this going to make money?
Lots of european cities have pedestrian zones, usually in the historical center of the city, there also aren't as many malls. The traditional medieval european city layout has market, town and church squares at their core and those are still places of public gathering today.
Perhaps they got lost in their math.

http://arxiv.org/abs/gr-qc/0507094
Why does chrome keep showing a "Translate this" button on pages (i'm on signup page). There is something which is making it think it is not in English. Just a heads-up!