skysight-inc/HackerNews huggingface dataset:
...why would you have to tell them your password in the first place?
The local prefixes of phone numbers don't/couldn't start with 1. If you map ABC to 1, you can't use those letters as the start of a word. (Your number could be GET-SOME but not AND-MORE.) This is because when you dial without an area code, your leading 1 would be interpreted as a long distance call. This is the same reason they didn't use 0, as that's the start of an international call (011).
How hard is it to add in access_token validation protocol that provides them?
What about Rubinius? (don't know much about it; does it not qualify as successful?)
If you have a google apps account, and you create an account for a user (or adminstratively reset their password for them) they will get an email like:

Hi Tina,

You have a new account at Example Association.

Your username is tsmith. Your initial password is ZjAdhUVC
(you will need to change this when you log in).

Your new email address is tsmith@example.com

You can sign in to Example Association services at:

http://www.google.com/a/example.com
I complained to them a while ago about the fact that they limit passwords to 8 characters. Must have been two years ago and I got a very generic "sorry, we know this could be better and our engineers are working on it. In the mean time, we'll send you an RSA security token fob for two factor authentication if you'd like". Thanks but no thanks, I'd rather not add another item to my keychain to make up for your website's lackluster password requirements.

I never knew that their website would truncate passwords at 8 characters, but just checked and sure enough it works. This is indicative of the ridiculousness of the 8 char limit, but given the 8 char limit, I don't think it weakens their system at all.
Know your NeRD: What submariners can expect from their new e-readers
I did no such thing. I wrote, quite explicitly, that they haven't the empirical foundation; not that they aren't capable of obtaining it.
Cher Jonahtan,
You can call me Julien, I am a girl on the internet for it is more efficient to get answers to technical questions from geeks and it is funnier for trolling.

The cease and desist is NOT about the app. It is about parasitism of the brand.

The use of the API is secondary, but just a part of a proof in a dispute based on the claim of a brand that you are parasiting their immaterial actif called BRAND.

But you don't seem to know how french law works:

* the «raison sociale» of a company has not to be different from another company (ex: Mont Blanc = pen + desert + city), it has to be considered not too close on the naming and on the «secteur d'activité» to be considered parasitism.
When you received your kit for funding your society (for instance @chambre de commerce), it is written black on white how the naming of a society should be done. Any brain dead accountant like mine even told me it is wise when choosing a «raison sociale» to first pay a (way too expensive) check into the INPI DB.

* a brand at the opposite of a software is not protected at his divulgation, but at its «territorial» registering (hence INPI and strong advice to make a search at the creation that given your SIRET no company has a name close to yours because else, parasitisme is almost already proven)

* the added presumption of an act are enough to be a proof (faisceau de présomption vaut preuve)

* AND you are dumb enough to make money in the sillon of leboncoin.

Constituting EXACTLY what the french law call parasitism.

I don't support them, but you are legally dumb or dishonest.

I would have respected you if :

* either you had been smart (making money from leboncoin, but registering the brand in a country where leboncoin had not registered (tuvalu? trinidad & tobago)) (remember the territorial part of the brand)

* either you were saying : I know I broke the law, but I think infringing (c) law is stupid because ....

BTW brand are covered by an international convention, so it would have been the same if leboncoin was german, US, or russian.
Amazing! I can imagine a lot of work went into create the diplomats. Can't wait to see how it unfolds... when the site comes back up.
Fantastic Fungi: The Startling Visual Diversity of Mushrooms
UNIX historically truncated passwords to eight characters.
This is a good article and, although many people will know these concepts separately, it's good to have them all stitched together.

For me the question raises how to get through the dip when your cashburn is higher than your revenue because you haven't accurately established your LTV.

The second part of that is knowing how to price your service so that your LTV will exceed your CAC. You can control both parts of the equation (through efficient customer acuqisition) and by modifying the product price. But they don't work separately on each other - an adjustment in one will reflect in the other.

I guess there is no magic answer to that and it depends on your customers, your competitors and whatever precedents you think may be applicable.
Ok, let's say that the code can double as documentation (which is what I stated), and not that the code doubles as all of the documentation.

The code should be able to provide you with the how and the why (supplied with proper testing that covers planned use cases, and comments when testing and code are insufficient.) When code is well written it will answer a lot of questions, I encounter this almost daily when reviewing code.

What code is not is a manual or instructions on plugin writing, etc. You are right on the money there. It's also not API documentation, again, right on the money.
This may well be the most elegant way to solve a complex problem.

It seems to me that these silly, arbitrary restrictions on password lengths and contents are far too common to explain or excuse in this way. The full list of JetBlue's password restrictions looks very much like the restrictions at a zillion other sites. The "no Q or Z" thing is strikingly weird, but its probably less harmful than the (very common) low maximum length restriction, for example.

Maybe I'm out of my depth here, but:

You're generally supposed to run naked user-chosen passwords through some key-stretching hash anyway. That offers the chance to do away with many of these common restrictions from the user's point of view, even if you can't change the capabilities of the old systems underneath. Feed the password through a hash, run the hash result through a filter that expresses the result in the required character set. Now you've got a password the old system can store. The user's chosen password can be arbitrarily long, it can contain any character, and every character of that user-chosen password will effect the "real" password in the old system. Every real password will be the maximum size the old system can store.
Take it from someone in a position to know: this arrangement is not as great as you make out to be.
Sci-Fi Style Prosthetic Arm Wins FDA Approval
Is this architecture generic enough that one could, say, build a Ruby compiler on top of it?

I imagine even writing a Ruby -> JS transpiler that used the WebKit VM would provide a speedup, similar to how JRuby works on the JVM, but native compilation would be even better.
Wouldn't it be more similar to the kinds of streams used in 3D online multiplayer games?
Interesting that this has appeared here now, since it's been around for quite a while (I first saw colleagues using this nearly 7 years ago). I've only heard good thing about it, though I've never used it myself (not being much of a mac person).

Other similar services include Mendeley [0] (now owned by Elsevier, I believe), gPapers [1] (less functionality, looks defunct), and good ol' bibtex files.

[0] - http://www.mendeley.com/

[1] - http://gpapers.org/
Ask HN: Do you need more QA/Test?
Do you struggle like me with having QA/Test?
I know about CI tools, but my setup doesn't that them yet - anyone else in that boat?
I know about Unit testing and Webdriver testing too - but don't have that yet either.
Any other early stage guys need more QA/Test help, while they focus on their sales, early MVP and so forth?

Please no lectures about using BDD, TDD and so forth. We're all aware of best practices which, at this point, have to be sacrificed due to time/resource/budget constraints. I mean, if spent the time on Travis integration I wouldn't have completed the slide deck that got my first investor on board.

Time is hard to find.

So, who else needs to bring in more talent on the QA/Test side to get that running so you can focus on closing deals, networking, getting leads, building additional team and solving the hard algos.

What do you think is not working with the current selection of QA/Test talent available from oDesk/Elance and so-on?

TIA! LLAP
Here’s What It’s Like to Go For a Ride in Google’s Robot Car
Original title is "OAuth 2.0 and the Road to Hell" which provides more context
I can't reply to the post below you for some reason, so I'm posting here.

Yes, Google sends passwords in plaintext when you have to create an account for another user. But on your first login it requires you to change the password.
> I'd be happy to pay tax money to subsidize internet for low-income households. But I want that on my tax bill, not my cable bill.

But you know it as well as I do that that's not happening. I had to hear it from my grandma, Rush Limbaugh, and about 4 or 5 neighbors on my street about Sandra Fluke having the nerve to suggest contraceptive drugs be included as part of healthcare - can you imagine the kind of outrage you'd see at the idea of people's internet being put on your tax bill? That's never happening, it's not a politically viable solution, full stop. Heck, I know even very smart and educated people who like to regard the internet as a waste of time with nothing of worth.

> Depriving the telecom companies of profits just means that investors will take their capital somewhere more profitable, like peddling advertising to kids: http://ycharts.com/companies/FB/profit_margin.

You're very correct there. Personally, I'm convinced that Facebook is a house of cards that will soon fall (https://www.youtube.com/watch?v=oVfHeWTKjag) and I hope and pray that it does so very soon. And that it'll take down a lot of others too, with it. I have no good answers here, I just people were a little more assertive in spewing away anything with the FB logo. Let's hope all of this advertising model is a passing phase and we get over it.
Good luck! Money's still out there for entrepreneurs.

The Miracle of Mindfulness was a good read. Actually, the first ten pages was enough for me. It got me to try being totally mindful for a morning as I went about my affairs, and that stuck with me. I am solidly in the present most of the time.

Letters from a stoic is what I read for Seneca. He taught me that we will lose everything eventually, but accepting this lets us enjoy what we have without fear. And he taught me to rehearse any scenarios I fear and write them down, to see that they're ultimately not so bad, or the common fate of us all.
"Requires a Macintosh II, IIx or IIcx ROM, and a disk image with A/UX installed".

That's kind of a tall order.
Ah, this is from 2012.

Part 2: http://hueniverse.com/2012/07/30/on-leaving-oauth/

A response: http://www.tbray.org/ongoing/When/201x/2012/07/28/Oauth2-dea...
I was also looking for a port for Firefox as well, since I've been switching to it for a while now. Thanks a lot!
I wonder how adoption has been? I'm particularly interested amongst undergraduate students.
Can this completely replace git-bash? Does it have ssh and ssh-keygen?
May I ask what the obvious reasons for theoatmeal.com being banned are? I've never seen the site before today, so I wouldn't know.
Is that what they did? Cuz that's not what your edited images show.
You should try starting your arch partition in virtualbox, I've had success doing that before (you can still boot into it normally as well).
assword123
Is there a link that doesn't require me to pay money to read more than the opening sentence?
I didn't acknowledge that. Renting the data doesn't mean third parties see it - since there would be no way for it to be 'returned'. Instead a program is executed on their behalf.
since the backend system would have mapped {A,B,C}=1

Not necessarily. For all we know, Sabre could have scooped T9, and transmitted a "C" by sending three single pulses, or an "N" with two groups of six. (We're talking about the days of rotary phones, not touch-tone, remember.)
> Even monkeys have evolved forms of altruistic behaviour

I'm sorry, but I can't agree with this kind of point. Ok, maybe by looking very closely, one could find traces of altruistic behaviors in monkey societies, but this cannot count as an argument against the amorality of Nature. Because it would mean to take the exception for the normality. Any unskewed view on natural behavior in animals is just saying the plain obvious: animals do not care at all if they inflict pain to other animals or kill them, except for their offspring. This is the norm, the natural way. You can count the exceptions, it will not change the norm.

On the opposite, in human societies, it happens that some people do not care (do not feel anything) when they inflict
pain on other beings, but this is the exception, not the norm. And this has been built very slowly against nature, by the process of civilization (in the good old "natural" times, most human did not care if people of other race or slaves were suffering).

So let's not forget that. Nature is beautiful, but it feels nothing, we feel for her.
Git for Beginners - A must read for lone wolf developers
Very good article.

I like the portion on inner focus. Have never heard that concept before.
Why people are still restricting password complexity. As long as passwords are carefully & cryptographically processed (read hashed with individual salt). I recently designed a system where the only password policy is the length (8 char minimum) and they are stored hashed with salt being a specially encoded user id (thus unique for each user).

I also like to contradict myself. Password complexity and and all the policy are needed to make the social engineering not feasible. I mean a strong and secure system and with that people are using 'password1234' is a very bad practice.
So, if I built out 10 RPi based thermometers, that would be $40/month just to get a quick API?

If I added a humidity sensor, that would add another $50/month?

That's pretty steep. Granted, you could be targeting corporate and this starts to make some sense. That kind of pricing really does make it impractical for home users. You're already targeting an audience with some tech savvy and it doesn't take much to write a Python app to serve an API.
And while we're at it, your "thousands of clipper ships" per single cargo ship.

Via Wikipedia, the maximum gross tonnage I can find for a clipper is 4,000 tons for the Red Jacket: https://en.wikipedia.org/wiki/Red_Jacket_(clipper)

The Emma Maersk, a monster among cargo ships at 11,000 TEU. During the Panamax era, 3,000 - 5,000 TEU was more common. Max weight for a 20 foot container is 14 tons. This gives the Emma a capacity of 154,000 tons, or 38.5x the capacity of the Red Jacket.

The largest cargo ships are the Maersk's Triple E class class, such as the Mærsk Mc-Kinney Møller, with a capacity of 18,270 TEU, or nearly 64x the Red Jacket.

https://en.wikipedia.org/wiki/M%C3%A6rsk_Mc-Kinney_M%C3%B8ll...

The more common Panamax hull would be 10-17.5 clipper cargoes.

I'm not sufficiently versed in shipbuilding research to know what size ships are being considered for sail (or sail-hybrid) propulsion, but it seems likely that designs larger than the best clipper technologies of 1853 might be possible some 160+ years later.

The Star Clipper looks to be a 7,400 ton vessel, delivered in 2010:
http://www.marinetalk.com/articles-marine-companies/art/Worl...

Other large sailing ships of note:

The STS Sedov, laid down in 1920, with a cargo capacity of 5,350 tons: https://en.wikipedia.org/wiki/STS_Sedov

The Royal Clipper, 5000 GT, completed in 2000, operating as a cruise ship. https://en.wikipedia.org/wiki/Royal_Clipper

The Preußen, ~5000 GT, completed in 1902. https://en.wikipedia.org/wiki/Preu%C3%9Fen_(ship)

The Great Eastern, a steam sailing ship, 18,915 GT, launched 1858. https://en.wikipedia.org/wiki/SS_Great_Eastern GT isn't directly translatable to cargo capacity, but that's nearly 1/8th the size of the Emma. It wasn't surpassed until the RMS Celtic in 1901 at 20,904 GT, a steam liner (no sails). https://en.wikipedia.org/wiki/RMS_Celtic

For comparison, RMS Titanic was 46,328 GRT.
Have you looked at Console2?
Unfortunately private browsing doesn't work directly anymore, so now you need to click-through from Google. Paste this into a private-browsing window:

http://lmgtfy.com/?q=%22Tech+Firms%27+Cash+Piles+Cool+Fears+...
I know of British Airways executives who flew from London to New York on Concorde only to attend meetings from which they returned again the same day without having left the airport.
I just tried it with 'abcabcabc' as my password. It claims passwords are case sensitive, but both 'abcabcabc' and 'ABCABCABC' work and any variation ('ABCabcaBc' works). Variations based on a phone pad don't seem to work. '123123123' or 'bacbacbac' don't work. I also tried only changing one letter.

>Must contain one letter and one number

Also not true.

>Cannot contain three repeating character

Also not true. I changed my password to 'qqq123123' and could login just fine. Something like 'zzz123123' does not work.

I put way too much effort into this.
A Spoon That Shakes To Counteract Hand Tremors
Writing NACHA exports for an online banking loan repayment system was the worst. Being a Junior Dev at the time, and having my only guidance being a NACHA handbook, with no banking experts to actually explain things, knowing millions of dollars per year would go through the app... Man. Terrifying.
Very cool but the "Share with Twitter" button doesn't contain the URL of the page. Just FYI.
> I doubt many company presidents are taking that sort of approach anymore.

That's why they buy a jet with company money now.
Hi there, a better idea is to not animate and to just show a link at the bottom corner. So I get the goodies when everything works, and if it doesn't work, it stays out of my way.
Im 33, most people think I'm around 28. Just relax about it, don't talk about age too much, and maybe dress the part. network, have a pint with people, be chill, and it'll all work out.
Wasted potential?
That's a very fragmented community, there seems to be zipfiles of random builds of dubious origin flying everywhere. Where's the "upstream" source?
Reminds me of chicken head stability
https://www.youtube.com/watch?v=LEGZ7hGaMNI
Yeah, my senior year during a research project on public policy (polsci major) it was a class of 20 students and a professor who normally taught classes of 200-300.

It was really actually quite cool getting so much of his headspace for my project.

My TAs were probably 60% great, 20% alright, 20% pretty bad during my time there.
You can also see online results at

http://arewefastyet.com/#machine=12&view=breakdown&suite=oct...

There is a discontinuity about a month ago, which is around when FTL was enabled, I believe. There you can see the nice speedups on Mandreel and the others you mention.
LiteStep seems to be active with development much easier to follow than BlackBox - https://github.com/lsdev/LiteStep
Yes.

Moreover, Dropbox is trying roughly similar architecture for their Python implementation.

https://github.com/dropbox/pyston
Because you choose to?

No One says you have to, unless maybe you are in an area that values the latest and greatest over proven results.

Established programs don't get re factored or rewritten in new technology all that much, especially big corporate systems. If you are freelancing or haven't worked on a long term project you probably are stuck in code du jour mode.
Zuckerberg is still under 30, so the current version should still count.
> Thanks but no thanks, I'd rather not add another item to my keychain to make up for your website's lackluster password requirements.

If you care about keeping your money it may be wise to take the fob and/or find a new bank/broker.
I wonder what would happen in a similar experiment where a large sign makes it clear how high-status the violinist is. Would people be persuaded to stop, or are the passers-by in a Metro station naturally going to be too busy and hurried to take in a performance?
http://code.google.com/p/mintty/ seems like it still uses cygwin1.dll (or whatever it's called these days). Am I missing something?
They say eradication, but that's the same thing as extinction.

Is this worm being preserved in any way? Perhaps as frozen eggs?
I think you'll be happy with the stuff I've been working on. Should have something to show off in the coming weeks :)
Don't forget Zotero (open source).
My bank allows only passwords which are six digits like 123456. No longer or other characters or symbols.
To me, the most stunning part is JavaScriptCore's much better performance on Typescript. And it seems it always has been that way, even before FTL was enabled. I wonder why.
Honestly, if you add one extra digit/character to the password, that more than compensates for the loss of Q & Z. There are lots of circumstances where being able to work with legacy phone systems effortlessly would be most helpful. If you are taking passwords seriously, this might be the very last thing you worry about.
Ask HN: Ideas for load balancing under Apache?
I am currently facing a challenge were I must load balance a series of domains for a client/friend, but there are some issues that I've been unable to fix just yet, allow me to explain:

* Solution must be a low-cost solution as money is a determining factor here.
* Client currently only has 2 VPS servers (and can't afford to get more)
* Server specs are: 2.3 GHz monocore CPU, 1 GB RAM, 20 GB SSD Storage (both of them).
* Both servers are running Debian 7.5 Wheezy.
* Client has already installed and running zPanel in one of the servers and has configured a series of Wordpress sites.
* Client uses some WP Plugins to generate content, this hangs the server every time as CPU consumption is a lot.
* I have transfered the DB Server to the second server to help leverage the load.
* Client can't afford downtime in the websites.
* Just managed to convince him that zPanel would not be necessary (I will write a couple of bash scripts to automate vhost creation and wordpress configuration).

My question/challenge here is: How can I help leverage CPU load in the server with little to no downtime?
I have read about HAPROXY and I know for sure that this would be relatively easy with nginx, but the main setup is done with Apache and one of the sites refused to work properly under nginx (still can't figure out why, probably .htaccess or the use of some other Apache Module, I haven't investigated enough).
Any ideas? Any help is much appreciated.
Question to all those saying this is because of Sabre:

How? Does the TrueBlue password somehow go through Sabre's systems? The truly old business unit of Sabre that everyone is referencing is Travel Network. I'm not sure why an airline's loyalty program would intersect with Travel Network other than through the back end of a booking tool.
TIL he's been writing it all by himself until now
Ember already has what you describe as "standard I/O."
This is pretty unpolished sir
Sure, maybe. But you're guessing at how the system works and how it's used and what the constraints are...

Maybe Jetblue's developers a bunch of lazy dummies who couldn't think up the solution in your comment... But my experience suggests to me that they're much more likely to be perfectly competent and that there's simply more to the problem than is apparent from the outside.
This is in the Million Next Door, kind of theme. http://en.wikipedia.org/wiki/The_Millionaire_Next_Door
What if the legacy system underneath IS the hashing system?
A directory tree may not be the most optimal solution, but it's easier to browse than the default github view...