skysight-inc/HackerNews huggingface dataset:
Purely a guess but I think they only allow for numbers because it's a phone company. If they intend for people to enter their password/pin on their mobile phone then limiting it to only digits that you can type from any phone is understandable. Now I'm not saying it's a good idea but at least there is some sense to it.

In no particular order my usual gripes with passwords and auth in general are:

* Disabling clipboard copy/paste (because now I can't use my password manager)
* Length limitations (anything less than 32 characters is a a limitation)
* Requiring punctuation or "special characters" (they're annoying and don't add real security ... just use a longer password)
* Lack of two-factor (preferably TOTP)

The password limit is really the scariest one. Short passwords are much easier to crack. Also, I have a sinking feeling that every site that says a password must be a specific max length is storing it in plaintext. Otherwise why the heck would it matter what the length is?
I really did try to find information on getadblock.com about this `userid` sent to `ping.getadblock.com` (along with browser/OS info) but I couldn't find anything.

I would expect some kind of disclosure to inform users of why this (once a day from what I gather) ping is required.

Maybe it is there and I am unable to find it though.

I also noticed a behind-the-scene connection to `https://goldenticket.disconnect.me/goldenticket/ticket/fetch...
I have a comfortable workspace and all I need to work. The problem from Working Home is when you are stressed and have a heavy workload, you will do more than 8 hours, you will shower at 12pm, you will lunch at 4pm, breakfast at noon, and if you can't interact with someone you can easily get depressed or more stressed out.

When I worked in an office, when the clock hit the 6pm there was nothing I can do to keep working, it was not possible, I miss that mindset despite I hate the idea to come back working in an office again.

That is my problem, working from home is great but is an awful experience when you are stressed.
That is certainly better experience than using vanilla HN. Thanks.
His omission of RFC 6901 is especially remarkable considering he is listed by name in that RFC's acknowledgements section as having contributed to the specification!
What I never read in these things, but what is not a small aspect, is office politics.

I've only, a few months ago, realized how much time I used to spend manipulating my managers, bosses and coworkers' behavior. And how much time they used to spend manipulating mine. It's such an exhausting time consuming thing that is now gone entirely.

Every now and then I join a meeting at the office of a client and right away you feel the tugging, pulling and pushing taking place. A laugh to encourage behavior, a verbal stab to discourage it.

Such a waste.
It's not. Note the second paragraph where it mentions modern usage.

In modern vernacular usage, "to beg the question" is
sometimes used to mean "to raise the question"
No. You cannot.

Rent is usually paid by check, though poorer people who may not have bank accounts of any kind often use cash, too. Large-scale landlords (corporations renting many units) sometimes take credit cards or be able to setup automatic debit from a bank account. Obviously this sacrifices a good deal of control and if they screw up (intentionally or otherwise) you get to deal with all sorts of shit.

"Electronic bill payment" in the US often means your bank mails the receiver a check. Some subset of businesses are setup to turn that into a direct transfer. In no case has it ever been worth the hassle. I try very hard to avoid anything that can't be paid for with a credit card, since that is, by far, the lowest-friction payment method in the US.

Everything else, cash, check, credit/debit card, or sometimes direct debit. Only active businesses are going to be set up to take cards or do direct debits. If you want to give money to an individual, you give them cash or a check.

American banking is radically behind.
The article could have spoken to the dual-role problem the NSA faces - protecting security on one hand while exploiting it on another.
It's called name and social security number :)
Are you going out of town and looking for someone to rob your apartment? This is the app for you.

Nice thought, but you can alternatively just drop your stuff off at a neighborhood shelter. That's it. No iPhone needed.
lower contrast is not bad, I don't want all text to be #000 and #fff, but the contrast on DuckDuckGo is too low.
As it says here your text should be as readable as #333 on #fff:
http://ia.net/blog/100e2r/

There are also some WCAG guidelines on contrast.

Here are some contrast checkers:
http://snook.ca/technical/colour_contrast/colour.html
http://webaim.org/resources/contrastchecker/
http://www.checkmycolours.com/
The Bitcasa Platform
You had to demand it? You couldn't ask for it? Or request it? The word demand here is curious, and strikes me as though my claim somehow offends you.

That aside, the citation is here[1]. In context, the most relevant bit is:

> (a) No automobile or other motor vehicle shall
> occupy any portion of an apartment house or hotel
> except in a garage which meets the requirements of
> the Building Code and other provisions of the
> Municipal Code.

> (b) Use. Private and public storage garages in
> apartment houses and hotels shall be used only for
> storage of automobiles.

Summed up, that means that automobiles may only be stored in garages, and nothing else may be.

Justifications for the law are numerous, I"m sure. If you have a garage, and are parking on the street instead, then surely you're contributing to curbside congestion. Beyond that, there are likely justifications from preventing hoarders, meth labs, etc.

Still, as written, it seems a little onerous.

[1] - http://housing.sanfranciscocode.org/6_603/

[2] - http://www.sfgate.com/bayarea/article/A-push-to-abolish-ridi...
The code in the library is actually pretty simple, but deals with many practical edge-cases (stepping into an array, handling missing values gracefully, etc.) that the above code doesn't.

My longer term intention is adding other useful json manipulation and search functions to the library.
The fresh fruit/veg idea is excellent; gardeners nearly always end up with perishable surpluses.

However, I'm a little concerned with formalising it in the EU in case some busybody decides that the many onerous agricultural rules on selling food apply.
Awesome idea. I have in mind a lot uses for this api.
Elite Colleges Don't Buy Happiness for Graduates
Hi, i'm Luca, one of Ratatouille App Developer. Seems crazy that stranger people can share food but nowadays stranger people share car with carpooling. The mechanism is the same but change the value delivered :).

Thanks for the feedback
I prefer it.

First I have my library with me at all times. I'm pretty busy and never know when I'm going to get a chance to do some reading, so when the chance comes I know I will have my book with me.

Also I like keeping several pdfs open simultaneously when at my machine so I can cross reference. Even when I'm on the bus.

Searching. Copying code straight into editor.

Cheaper. Less trees. Less storage requirements.
That would be "herbe".
So it's a problem where the system must be kept up running no matter what and refactoring everything might cost more than having some security threats? Or is it just plain greed and "while it's working now, why fix it?" kind of thing.
Eric Bruning gave a good talk on this kind of stuff last year at SciPy [1]. His primary work seems to be focused on 3D lightning mapping using VHF antenna arrays - a slightly different approach than trying to take simultaneous pictures from multiple locations, but you get many more datapoints, especially in west Texas [2]. The downside is, you aren't getting a "true" 3D model of a single strike - rather, a 3D model of a storm based on the samples generated from the mapping data (IIRC)

[1] https://www.youtube.com/watch?v=0Z17Q22HEMI

[2] http://pogo.tosm.ttu.edu/about/
Major ISPs accused of deliberately throttling traffic
Jawbone integrates Whistle’s canine activity data into the UP app
Why would they have a retractable reflector rather than simply using a standard radar transponder? Sounds like BS.
>"leeching"

I've said it before and I'll say it again. I unblock ads when the site that chooses to display them takes full responsibility for any malware or privacy leakage those entail.

That does not happen, therefore the ads stay blocked.

There are a few sites that run their own ad networks without the privacy issues and because they're reputable. Reddit is one such site that I will not block.

My hourly rate for fixing a machine is a lot more than the few tenths of a penny that ad view is worth. I never click on ads out of principle anyways.

Further, you as the web dev don't get to decide how and what content renders on my screen. That is my decision. If your business model doesn't pay the bills, that is your problem.
How Computer Viruses Get Their Names
How would you automate turning lights?

They are pretty useless if they only fire when the car is already turning. The whole point of them is to give a warning prior to turning.
I grew up in the American South and always heard "herbs" pronounced without the H, and correspondingly "an herb" was used.
I didn't have exactly the same idea, but close enough to feel 'We never got around to building anything but it's strangely satisfying to see that others had similar ideas and actually shipped something.'

Mine went "We're going to a lot of trouble to make all this food (from fancy cookbooks), and while leftovers are great, company would be better. Wouldn't it be great if there were a website where people could coordinate dinner plans with folks around them... for friendship, hospitality, good eating, and economy." Sort of like the iPhone app, but for whole dinners rather than just the ingredients, and for anybody with a web connection, not just one app market.
Yeah. I just don't like putting syntax in a string; I'd rather use Python itself.

By the way, you should remove the pprint import from the library, since you don't use it :)
for a moment there I actually though this topic was about Bill O'Reilly's books.

I am glad I was wrong!
Yeah, I wrote about this a few years ago and got a lot of press for it. They didn't really fix it, but at least they started rate limiting by IP address. https://kev.inburke.com/kevin/open-season-on-virgin-mobile-c...
> Comcast needs to do this because they're selling a connection to the "Internet" to their customers, not a connection to the servers Comcast owns, and to other Comcast customers.

Only, I'm sure, because it's untenable to do that. Yet. Cable execs really, really like their model of charging people for channels; it lets them extract maximum revenue. If they can do that with the Internet, they will. It may be difficult to do that on the consumer side yet, but what they're doing with Netflix is basically a complicated way to sneak more Comcast charges on to their customer's bills. In this case, via the Netfilx bill.
Interesting, I thought I was a rare breed using the following function quite a bit in my code. However, it seems these things are a dime a dozen. -- I modeled this one after the way Django does it. I think the only thing it does that yours doesn't is all a function if one of the dict values is an object. Thats useful for get_somevalue() type things on a tree of objects.

def rget(obj, attrstr, default=None, delim='.'):
try:
parts = attrstr.split(delim, 1)
attr = parts[0]
attrstr = parts[1] if len(parts) == 2 else None
if isinstance(obj, dict): value = obj[attr]
elif isinstance(obj, list): value = obj[int(attr)]
elif isinstance(obj, tuple): value = obj[int(attr)]
elif isinstance(obj, object): value = getattr(obj, attr)
if attrstr: return rget(value, attrstr, default, delim)
return value
except:
return default
National Climate Assessment Report [Download]
I'd like to work from home. I have no problems with discipline, distractions etc.

The problem is: I don't know what to do. Making webapps in PHP, creating web design, drawing, writing - I can imagine doing these things at home.

But I am a Java developer. Who would hire a freelancer to write a server-side code?

How to start?
Very cool. Love the no server needed part.
More on the limits of anti-gentrification politics: Brooklyn is getting poorer
Tumblr declares war on the internet's identity crisis
We are working in a mobile webapp version :D
I'm not sure how often this actually gets mentioned, but a huge problem is dealing with your spouse. "Oh, you're at home? Can you run these errands for me, and also clean, vacuum, and take the leftovers to my parent's place for me?"

It's extremely difficult getting your spouse to respect the "working" part of working from home.
Continuous Delivery: CI Tools Setup
100 days is probably a pretty good limit, it starts to lose effectiveness past that. Last year I did 234 days straight, only ending the streak on my wedding day, but it should have ended much sooner. It was ultra-productive for the first 60-70% of the days, but the focus started shifting from being productive to keeping the streak alive. It ultimately became counter-productive after going for so long. Sounds great in theory, but make sure you give yourself a hard limit.
OMG thanks!!
That moment you bought a book two days ago (sad frog).

I really like that O'Reilly publish publish them as pdfs.
Sorry, it was "turning lights (on and off)", I meant the headlights.
> "Are you going out of town and looking for someone to rob your apartment? This is the app for you."

So is every check-in based app or anything that geotags your posts/photos. This is not news.

Also, it's quite likely that most people are predictably at work between the hours of 10am-4pm so there's no app nor geotagging to guess when a house may be empty.
Apple's maps are not just OpenStreetMap - there's a lot of other data sources in it too.

For the OSM data Apple do use, I think it's quite old OSM data from 2010-2011 or something. As far as I remember, they used that because the license changed after that, so I believe that's under different terms.
I don't like the hosts file approach because I still might want to visit the sites sometimes. For example I block facebook.com on all other site because I don't want to see Facebook embeds, but I want to visit Facebook directly once in a while.
One way to get an idea of the landscape would be to browse Java projects on Elance and Odesk. Not necessarily hire yourself there, but just get a sense of what people are contracting for.

Then maybe contact some business that use the kind of code you make, and ask if you can chat over coffee about whether and how they use contractors.

Doing those two things will give you some idea of the landscape. I'm sure there are contractors doing what you do – there are in almost all fields.
Interesting. I wonder whether they'll pay the protection money or choose to leave? I wonder if this will drive Bitcoin adoption in Russia?

Note that the US government is no stranger to strong-arming payment processors into refusing payment to businesses it deems undesirable, not always on a legal basis. For example, donations to wikileaks. The Russian position is that Putin insists on being the one strong-arming opponents. This is not an improvement.

(I wonder if this thread is going to be "yay, someone breaking the payments cartel and going after the banks" or "boo, Putin"?)
These are all great points. However, he doesn't mention something I have dealt with after a decade of freelancing: isolation.

I was always an extrovert before I started freelancing, and enjoyed meeting people and going to events/parties. Unfortunately, after a decade of working alone from my home office, I've slowly become an introvert, and am decidedly uncomfortable in social situations. I'm attempting to change this by forcing myself to go to various meetups, but it's hard.

Working from home has been a great benefit, and has helped my wife and I raise our children in the manner we had hoped. But I've definitely paid a price for 10 years of freelancing from home, by myself.

I'd recommend scheduling frequent social events on your calendar from the very start.
I disagree, we wouldn't be where we are today if it wasn't for SSL, faults and all.
The tweeter (probably a non-technical support person, so go gently on him or her as an individual) has revised the statement:

"@passy I'm mistaken about the website security certificate but avoiding pasting of passwords is good practice & protects our customers 1/2" https://twitter.com/BritishGasHelp/status/463679554306203648

"@passy especially when using public computers. Alpha numerical policy ensures your protection without making special characters necessary^S" https://twitter.com/BritishGasHelp/status/463681274092462080
Good thought; I hadn't thought of setting a limit, but I see your point. Will be interesting to see what happens. I just finished my Spring semester, so a lot of time just opened up, so I suspect I'll have a strong Summer and slow down in the Fall.
If I remember correctly, I moved to using theoldreader after Google Reader went dark, then you were down for 3 days, then you kicked all the Reader's switchers out (like me) to keep a more a manageable operation.
For a little while it's not RSS that seemed dead, but online RSS readers were definitely a rare breed.
Happy to see that you've changed your mind about limiting access.
It still has paddles, so you can manually shift. Sure, if you don't like it, it takes away the element of fun, but a few minutes of fun isn't worth the hours of manual-shifting drudgery during rush-hour traffic for me.
I much prefer buying directly at O'Reilly, given that they can sync the books straight to my Dropbox in both Kindle format and a variety of others, and I particularly like supporting them for their lack of DRM..
I should have said "a tiny annoyance", not "a big annoyance". The fix is, of course, to clear output.
I imagine if you were using their product in an HFT setup (somehow) with only a few servers, but with sub millisecond requirements they might also be interested.
Bloomberg has a staff of more than 2,400 journalists and editors.[1]

This is the same Bloomberg that sued the Federal Reserve to make them release the names of the recipients of the Fed's emergency loans.[2]

[1]http://jobs.bloomberg.com/go/News-Jobs/356821/

[2]http://en.wikipedia.org/wiki/Bloomberg_L.P._v._Board_of_Gove...
I could "just drop my stuff off at a shelter"? Rather than finding people _nearby_ who want the food? That's the whole point of this app!
Whoa. "The guy didn't seem motivated" was the standard empty excuse 10 years ago. They are supposed to say "you wouldn't be a good fit as this time" as the standard empty excuse these days. They need to get with the times.
> Your example is just showing that the extended module only appears in the instance's singleton class, this has nothing to do with method cache. It's how the method cache is implemented that matters.

The method cache works by invalidating anything below the class(es) whose methods have changed on the ancestor chain.

You're right that it can't be seen from user code, but if you take the implementers at their word about how it works, then this should be a perfectly convincing demonstration.

Or, if you don't believe me, read the source yourself:

https://github.com/ruby/ruby/blob/ba6b0acdb6c371f9f7150bed6f...

https://github.com/ruby/ruby/blob/1aa54bebaf274bc08e72f9ad38...

The part that clears the class hierarchy is here:

https://github.com/ruby/ruby/blob/1aa54bebaf274bc08e72f9ad38...

Alternatively, see Koichi's presentation at RubyKaiga:

http://www.atdot.net/~ko1/activities/RubyKaigi2013-ko1.pdf
Crap article; previous one was flagged dead. See: https://news.ycombinator.com/item?id=7703962
You should perhaps contact their customer service. I had a good experience with them.
The whole premise for the purpose always bothers me; the argument that with population projections what we have to do is accommodate unsustainable growth with "sustainable" buildings.

There is something really weird about humanity's inability to even bring up the fact that we are reproducing at rates that are inherently unsustainable and could even lead to become a catalyst for extinction. There is no sustainable building method or process that will do anything more than prolong the inevitable. It's a rather odd perspective in, at least the USA, that "green", environmentally friendly, and "sustainable" are nothing of the sort. "Green" means using images of leaves on high gloss unnecessary packaging; "environmentally friendly" means using some wood with abandon as to where it's from; and "sustainable" means simply continuation of anything, whether good or bad.

The sustainable design issue has actually already been solved in many ways; it's just that the solutions don't fit in with people's unwillingness to give up anything.
OnePlueOne: 2014 Q2 Production Update [Updated May 6]
As someone that reads a couple books a month I find that really interesting. It is pretty unclear from the website how much it costs, any idea what a personal subscription is?
Glad you like it. I will keep expanding upon it and keep it updated.
Exactly what I think. Security is a continuous process that requires flexibility and permanent learning!
Power 7 had higher single threaded performance than anything Intel had when it came out

IBM Power 795 (4.25 GHz, 128 core, SLES) 5350 base, 512 threads -> 2.46 result/thread/GHz

The Power 7 came out in 2010, so we can look at the x86 that were available around that time - the Nehalem era; e.g. this one

IBM BladeCenter HX5 (Intel Xeon E7540 - 2GHz) 490 base, 48 threads, 5.10 result/thread/GHz

For AMD, this one I picked turns out better than Intel:

IBM System x3755 M3, AMD Opteron 6134 (2.3GHz) 638 base, 48 threads, 5.78 result/thread/GHz

The Power 7's single-threaded efficiency is less than half that of competitive x86 CPUs at the time. The TDP is 200W+ as well - around double that of the x86s which are ~100W - so power efficiency isn't that great. The high clock frequencies probably have something to do with it.

In theory there isn't anything preventing an ARM-64 chip from having performance as good as an x86 or POWER chip

True, but as the paper I linked suggests, power efficiency is going to suffer if they're optimising for raw performance. There hasn't really been aggressively high-performance ARM chips before unlike the other traditional RISCs (SPARC, POWER), so that's why I'm really interested to see what AMD does with it.
I have no doubt you're right, and the banks absolutely should not reject fraud reports based on PIN.

I've had a read of the first paper there, the nopin one, and it reads like a really preventable flaw in the IAD, which (as it's issuer specific) could be very easily fixed without the involvement of terminal vendors. I agree with the conclusion that the TVR is a flawed concept though, I had always assumed (never having worked directly for an issuer) that there would be enough data in the IAD to marry up the terminal and card perspectives on what had happened.

And on the second one I'd be the first to agree that SDA and offline-plaintext PIN are a bad idea, I could have told you that when I did my first implementation in 2001!

--edit-- I had actually assumed that by now the cost differential between SDA/plaintext and DDA(or CDA)/encrypted cards would be so small that nobody would use the SDA cards any more. Guess I was wrong!
And no prices on that page at all, so you need to contact them, and then you are dealing with a salesperson who sees CloudFare as a whale who needs to buy the $$$ carrier-grade support and get them a big commission.
The Economics of Adultery
URLs are already dead
That's actually a very reasonable response to what Visa/MC did.

I guess that Visa will now quietly back away from the sanctions and in return Russia will either extend the deadline, reduce the security deposit or allow them to participate in development of the national payment system. Probably latter.
Pricing: https://ssl.safaribooksonline.com/subscribe