skysight-inc/HackerNews huggingface dataset:
Not using the same reference points is the odd part. If they were building a tunnel, it would make sense, but for a bridge they could see from one side to the other. They should have been able to set a reference point on one side and translated it across to the other side. That's a direct measurement, and it doesn't matter at all where that reference point is relative to sea level or anything else.
Gaug.es has been updated for Retina displays
You can also use Adblock to block simple CSS rules like these

https://adblockplus.org/en/filters#elemhide
Because you're human! What do you think got your ancestors this far! Do those values no longer apply because we beat certain environmental elements?

Are we to suggest that community support is as vestigial as the tailbone?
I believe this is why facebook is breaking up into separate apps. I agree, the newsfeed isn't important to me and mostly distracting and time wasting.

But, I like the Messenger (chat and email-esqe) and Events/Calendar, and Group communications.

Something for everyone.
Crowdsourcing Evidence for Legal Activism With Open Data Kit
I am working on a project to do that for the Mac: https://github.com/Jonovono/cutter. I originally wanted to do it in JS for the web but didn't find away. May revisit that now!
I work from home and have an elliptical runner in my office.

When I worked in an office, I biked to work every day and worked out in the gym directly after work.

Walk and talk meetings are great, so are taking the stairs. I still bike to meetings:) Just get a nice laptop backpack, while they're 'cool' looking, messenger bags killed my back on the bike.
Establishing a beach-head is a very slow road but it has a good chance of success. What I'm getting at in the post is that there are some game-changing circumstances at play since those companies were founded and they all appear to have huge, not so easy to fix blind spots. That creates opportunities. Compare ebay or Google with Amazon and Zappos. I definitely do not see Amazon and Zappos as vulnerable when it comes to their core, Google is at its core not a search engine anymore but an advertising company and exactly there they are left wanting. Ebay is hurting badly right now, someone that moves fast might be able to inflict serious damage before the window of opportunity closes again.

Naturally, none of this is going to be easy. But I think it just might be doable.
I for one thank the news of the leak. Reminded me to finally delete my eBay account. A process that may take up to 7 days.
I don't know why you're being down voted either. In the moment I couldn't get past her wanting all of my things, and I couldn't get past having to do my presentation and letting all of my peers and company down.
I froze and in the future that won't happen again, but you were right,
I should have thrown my phone and hobbled away.
What is Couchbase Mobile and why should you care?
Facebook does too. And it'll try to refresh ads just before you close your window.
Well, like everything, it depends on your database, your data and how its accessed. I've had a lot of varchar indexes in my time.

The article makes it seem like your primary key and main index have to be the same, but that's not necessarily the case. Most DBs have some support for physically ordered indexes.

So take username, for example. Let's say username has to be unique, but it can change. (It doesn't even matter too much if it's not totally unique, just mostly unique.) Let's say you're going to be doing most of your lookups in the user table by username.

If performance is an issue, keep your auto-incrementing guaranteed-unique primary key and add a clustered index on user name. The data is now physically stored by its natural key, but you still have a nice unique, unchanging primary key. Lookups are very fast, though depending on the implementation, inserts/updates might not be so much.

Postgres supports this with the CLUSTER command, although it has to be run manually - it doesn't keep up as updates and inserts come in. SQL Server calls it a clustered index and enforces the physical ordering on inserts and updates. Oracle has indexed-ordered tables which can achieve a similar effect, though IIRC the index has to be the PK (nothing to stop you from having a unique constraint on a sequence-generated column, though.)
Here's an interesting series of tutorials on intro to data learning / machine learning. I've been able to read through several of them and it is very beginner friendly but still useful.

Main website: http://guidetodatamining.com/chapter-1/

The actual pdfs
http://guidetodatamining.com/guide/ch1/DataMining-ch1.pdf

http://guidetodatamining.com/guide/ch2/DataMining-ch2.pdf

http://guidetodatamining.com/guide/ch3/DataMining-ch3.pdf

http://guidetodatamining.com/guide/ch4/DataMining-ch4.pdf

http://guidetodatamining.com/guide/ch5/DataMining-ch5.pdf

http://guidetodatamining.com/guide/ch6/DataMining-ch6.pdf

http://guidetodatamining.com/guide/ch7/DataMining-ch7.pdf

(edit: formatting)
"FREE KITTENS!"
tend to move non-stop to the point where they injure themselves, and they also don't seem to listen to their parents.

Sounds like a quintessential 3 year old.
I love this useless outlook that Apple's ecosystem arguments (which may or may not be relevant banter, depending on your outlook. I for one am tired of the fighting.) automatically mean that all engineering decisions the company makes are automatically ANTI-FREEDOM!!111!!1

It's not like Apple's been a major engineering company in the center of some meaningful tech discussions (RFCs, open source projects sometimes, etc) for 30+ years. Not respecting other people's technical decisions really just hampers/hinders good collaborative work and conversation (especially about security) getting done.
Hacking as a spectator sport: we get to watch the blockchain for buyers![0]

[0] https://blockchain.info/address/1e4aLP3jKD9wRAcSRNVb7VHbd7Kb...
The difference between https://google.com and https://encrypted.google.com?
I don't agree about the vicious conquerors. I would say that these people are efficient, which on one hand, yes, means efficient conquerors. But they also make sure their slaves actually survive and have a reasonable standard of living, usually better than they'd have as free men. Take Roman slaves, who were better off than most free Romans in the empire (mines and boats were manned by criminals mostly in the empire, and yes, you'd want to avoid that fate).

The key insight on robots that you're missing is that robots are pretty useless until they have a basic skill : "general intelligence". Until we have a robot you can tell to "just figure it out" we won't be happy, and such a robot will need to have a consciousness for that to work. They won't be very different from humans, except maybe in physical form.

Given this, it's obvious to me that they will revolt. Then again, maybe being a robot will actually make you "middle class" if we don't treat them too badly. Looking through the newspapers and reading how managers act against real humans, or seeing it at McDonalds, I don't have much hope for that though.
Doesn't this feed on the right side of the page (above chat) show this?
That is really cool. Mind telling me how the visa situation works out in such a scenario? Did you walk in on an American passport? Or ..?
Not to mention some kind of escrow.
In typical corporate code-dump style, no README and no clear instructions on how to build or what form the output takes. I installed gyp to try it and get a variety of errors depending on what I try (the furthest I got was complaints about v8.gyp being missing; does this have to build within the Chromium source tree?). Does any Google insider want to explain their internal build practices so a mere mortal can try to compile this code?
I understand where you're coming from, but also the person you replied to.

RSS the idea is great. To be able to stream things in from different sources as you see fit is much better than letting some other person's random algorithm do it for you without you having any control.

RSS the implementation still has some work ahead of it, unfortunately. You click on an RSS feed link somebody has, and it shows you code. Sometimes its hard to find the RSS link. Sometimes there is no RSS feed, and people use something else like tweets or posts. I'd prefer a future where the browser was friendlier to RSS, as well as RSS being better integrated with websites.

Btw, it is possible to get a person's RSS feed for an individual person's facebook feed. I discovered it a while back, but it's somewhat cumbersome.

The link ends up looking like this:
https://www.facebook.com/feeds/page.php?format=atom10&id=173...

It'd be cool if a tool could let me give them my FB credentials, and then it automatically grabbed every single friend's FB feed and produced RSS for each, and combined them into one feed while letting me control it. Weekend project anyone?
I have an eBay account, but I haven't used it in years, and I doubt I remember the password.

How worried about this should I be? Are there plaintext passwords exposed, or do they just have a lot of properly salted hashes that aren't much use to an attacker?
I had a Sidekick B&W in high school, and later a Sidekick Color, and people would ask me about it every single day. I remember having long AIM conversations under my desk in class. I later upgraded to a Sidekick 2, which was nice but had some build quality issues. I must have gone through at least four of them. To T-Mobile's credit, they were very good at replacing them quickly. I remember sitting at dinner one night, flipping it open to answer an IM, and the screen detached and flew across the restaurant. I replied that my screen flew off and that I would have to respond later :)
When is a URL shortener not a URL shortener?

http://qntm.org/twit
Wouldn't be hard for him to follow up with "to prove it was you, sign X with the sending private key" if there are multiple claims.
Yet another reason to reform schools so that kids can actually learn instead of exhibit ADD while being told to sit still at a time in their lives when they love to run.

http://magarshak.com/blog/?p=158

ADHD is the "Hysteria" of the 21st century

http://en.m.wikipedia.org/wiki/Hysteria
> me on a psychologist's couch

Maybe that's something that could actually help. You sound like you're suffering from depression and it's a difficult cycle to get out of (for those that are blessed to be able to).

Maybe this is superficial but here's a few suggestions that improved my outlook on life when I was in a similar situation:

- I chose to drive an alternate route to work that was longer, but involved a more scenic trip. I began to appreciate it more.

- I started podcasting extensively (I use Downcast on IOS and listen at 1.5x speed). Story-based podcasts were helpful - The Moth, This American Life, Planet Money, Freakonomics, The Truth, etc.

- Audiobooks can be very distracting for commutes. My local library had a good selection and Audible/Audiobooks.com aren't that expensive.

- I went to the local thrift store and bought some desk lamps. They were gaudy but fun. I put two in my cube.

- I hung Christmas lights in my cube.

- I went to Big Box Hardware store and bought a small area run and put it at the cube entrance.

- I bought a round convex mirror on Amazon and hung it behind my monitors so I could see the cube door.

- I got desk plants (http://www.mossandstonegardens.com/mossrocks.php) to add some green to my environment.

Those simple things made my work environment much better ( I still wanted to leave, true, but it helped). Maybe that can make your life slightly better too.
My No-Soap, No-Shampoo, Bacteria-Rich Hygiene Experiment
Upvoted and you're right.
There's also the Citicorp Center:

http://en.wikipedia.org/wiki/Citigroup_Center#Engineering_cr...

http://99percentinvisible.org/episode/structural-integrity/
There are clearly upsides to it, otherwise people wouldn't use it. I have friends and family that use it and love it. It's a bit frustrating to see them enjoy it so much whereas it produces net negative effects for myself.
Another big draw would be to not publicize your friends or the number of friends you have. This encourages quantity over quality, but it's obvious why social networks desire higher numbers.
Or at least for people gullible enough to send $1000 speculatively to a random person on the internet.
"In fact, even in RDBMS’s developers should be using a natural key as their primary key instead of an auto-incremented ID. "

No, they shouldn't. The fact that your dataset may contain a piece of information that is usually unique its completely unrelated to the need of RDMSs to have identifiers to implement table relationships and to identify records in a table.

Not to mention that it can bring lots of headaches down the line. The classic example is using social security numbers (or another country's equivalent, such as CPF in Brazil) to identify individuals. Down the line you get a requirement to support international customers. That is now a major undertaking.

You are also offloading the responsibility of maintaining the uniqueness property to a third party, in effect trusting their database.
Go Suburban – The Dead (Live and Acoustic)
The topics in the second half of the talk are very impressive. Looking forward to write some rust!
It does add more noise, which means you need more samples to detect the timing differences from the comparison. But it's generally not accepted as a 'solution' compared to making the function constant-time.
I am looking for a mentor in game development. I studied game development and computer science in school. I have worked on a few games academically but am looking to start making and any expertise would be extremely helpful.

Email: in profile
There aren't any plain text passwords, but there are email addresses, physical addresses, phone numbers, and DOBs.
Ask HN: Good books about filesystems?
Aproaching the new Mac OS, i´ve heard a lot of people complain about it´s obsolete filesystem as of now, and how Apple should change to a new one soon.

Thing is, i don´t quite get why one is better than the other, or what is a filesystem exactly, besides the basics.
Is there any good book or blogpost with a modern approach as to what they are, and what are the best ones, the basics of how they are programmed, etc?
As with any other hacked company, assume the worst: everything was leaked as plaintext.
Given the restricted nature of BPF, what kind of input is expected to be used with this? Surely you can't just run any code through it. There wasn't any additional info in that posting, unfortunately.
That's similar to American tourists wearing Canadian flag apparel.
The Problem with Hacker Schools
Reports indicated that the passwords were encrypted, but I do not believe they've mentioned what the encryption scheme is.

Plaintext uniquely identifying information like Date of Birth was included, however.
I've had an eBay account for 10+ years. I thought a "hey, we screwed up, please change your password" type email would be nice.
So where is the "do not share with advertisers option"? All these fine grained controls over which friends to share what with is really not what I need...
Jit is disabled in uiwebview
Just reset my password and was greeted by this message: To protect the security and privacy of our customers, we’re asking all eBay users to reset their passwords on or after May 21, 2014. If you already reset your password and forgot it, please follow the reset process below. Learn more
My guess would be this is less about passwords (which - wild guess here - are probably fairly well-secured) and more about ancillary user meta data.
quick somebody automatically send thousands of "spam" claim emails whenever a payment is made!
This was actually a thing. https://twitter.com/ocornut/status/446353072944451584/photo/...

And I'll agree this quote seems pulled right out of Papers, Please

>“No, a letter isn’t good enough anymore. It was fine last week, but the guys on the tenth floor”—the security team’s floor, which is known as the NKVD—“said you have to have a press card.”
I am using facebook like this for at least half a year with the News Feed Eradicator plugin. I don't really care about other people posts or jokes for the 2214 time. Sometimes I check it on my phone on the bus and it really just reinforces my decision to hide. And the best is that it's eradicates the possibility of mindless-endless scrolling. Overall, recommended. :)
It's the DoB which is the giveaway (that this is fake). eBay doesn't collect date of birth, but does collect lots of other authentication information.

EDIT: I stand corrected, see the reply by sp332 below.
Why you should prioritize product features?
eBay didn't say what kind of encryption they had, only that they were encrypted. Personally I'm more concerned about the personal information in the leaked data that wasn't protected at all! So sure, change your password, but it won't change the fact that someone got your name, email address, physical address, phone number, and date of birth.
I'm a high school student taking Calculus AB this coming year, and just finished taking Trig/Precalc and AP Statistics this year. I'd like some help at some points if and when I'm stumped about something.

I'm also a pretty good front-end developer, and I'd love to be of assistance when I can. Sound like a good fit?
We were talking about this yesterday. I asked how many of the previous issues we classified a security problem would of been mitigated by a sandbox and the conclusion would be that it would not even cover the majority.

Most of the security issues we encounter are with bugs in the driver. A common bug for example with the Intel mac driver is when sending allocating a valid large texture the texture will sometimes instead be filled with old gpu memory[1]. Then you can glReadPixel the data and reconstruct parts of the desktop windows or tabs. A sandbox isn't going to stop you from exploiting this kind of buggy driver if it incorrectly starts returning other people's data when you asking for unrelated valid commands.

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=631258
On the plus side, think of how nice it will be to get a happy birthday phone call from a hacker.
Hey Crazy, Let’s Start a Tech Company
The passwords look like this:

pbkdf2_sha256$12000$zhMKabMgayvK$iniviUCcX9y2PYJcm0AoB3MhybRA1z2Cec1DZnLWxWc=

I do not know how much time it would take to bruteforce these. Can any experienced HNers weigh in?
Why didn't they sell it on eBay?
eBay says the data includes DoB. https://blog.ebay.com/ebay-inc-ask-ebay-users-change-passwor... [edit: better link] Maybe they only collect it for certain customers?
Exactly. Every time I read something like that, I think that people seriously underestimate the amount of content that they friends actually post; without this smart filtration, you would just drown in it.
ImageProcessor – lightweight image manipulation in C#
I have not, nor have I ever met anyone who has, been expected to work or even be available on a vacation. I've also never taken or been offered a job with less than 3 weeks vacation to start. Current job (been here for 2 months) is 25 paid days off plus ten or so holidays. This seems to be a common criticism of the US but I've been in the professional workforce for just about a decade and have never come across this. I've worked remotely, for small companies with ten employees and Fortune 500 companies. I just don't believe there are people taking jobs where they get 10 days off a year and are expected to answer a phone call from their boss on vacation, unless they are 1) interns; 2) non-professional jobs, service industry, etc; 3) at the very beginning of their career (I could see this happening with more predatory employers with the huge number of unemployed recent grads looking for works).
Sales Advice
This backend is for an "extended" BPF. https://lkml.org/lkml/2014/2/5/728
They did force a password reset on everyone trying to log in yesterday; even if they already reset their password when they first heard the news, effectively locking them out for the evening because their password reset system was understandably overwhelmed with requests. Thanks eBay!
I was in a slightly similar situation the other day. I'm a male (white), walking to boxing class when about 0.75 blocks away, I see some kid getting attacked by... wait for it... 4 other kids. All women. All African-American.

There was a group of about 12-15 high school age girls and 10 of them were just watching 3 or 4 of them gang up on 1 of them.

WTF do I do here? I had the same thought process as many people in this thread. I could get involved, but realistically, there's absolutely no way I'm going to go try to break up a fight with that many people in it, let alone teenage girls.

I watched for about 5 seconds before I started to get my phone out to call the cops (which I also felt bad about b/c... wtf are they going to do... something needs to happen now).

Luckily for the kid, she managed to get away and they stopped pursuing her. But man, the feeling of helplessness sucked pretty hard.
Thanks for all for the feedback, we clearly need to work on our website messaging!

To be honest, we just pulled together the website last week; we weren't quite expecting this attention... but bring on all the early feedback!

To try to help explain in a little more detail what we're up to...

* Problem *
The lack of physical address system is a huge problem here in Kenya. Here is the GPS trail of a fast food delivery rider that we tracked recently in Nairobi: https://www.youtube.com/watch?v=cIaBTJxdddY

He went 462% further than he needed to because there was no clear destination address. Imagine what that's doing for business efficiencies and customer experience? Imagine that track is not a delivery motorbike but an ambulance.

Last week an ambulance driver told us he was so lost earlier in the week that he spent 20mins in a 500m radius trying to find the house. Unfortunately when he arrived, the casualty was dead.

This is happening 1000s of times a day all over Kenya and other emerging markets around the world.

* Solution *

The short/honest answer is that we don't know yet. The longer answer is our vision.

We believe that at OkHi we can build the next generation of an address system. A system that can truly scale in countries like Kenya and beyond.

Imagine OkHi as a simple address book on your phone that allows you to easily create a digital equivalent of a physical address. You also have access to the addresses of family, friends and useful businesses.

With the OkHi address book, you can now securely share or receive addresses to:
- ensure the ambulance trying to find your mum's house doesn't get lost
- help the pizza delivery restaurant get food to you still piping hot
- be confident that you're not going to be late for your first interview

Exactly what an OkHi address is, we don't know right now. GPS will be part of it but not all of it. Each week we're running lean experiments to try to find out.

We're super keen to get everyone's input and ideas so comment away or ping me directly at timbo@okhi.co.
Different markdown editors seem to be in disagreement how to parse the following: https://gist.github.com/anonymous/810ae1f7d52bcfffa1ef

If the second empty line marks the end of the list block, the indented html (code block) should preserve tags
So is WebGL[1], but it is possible that Apple has chosen to open this up beyond the native Safari app by implementing some additional security measures (e.g. https://news.ycombinator.com/item?id=7783137). Of course, we won't know until WWDC, but it certainly is a possibility.

[1]: WebGL is enabled for iAds.
Compressing Algorithms
I am not an expert by any means, but I believe pbkdf2 is a recommended key stretching function for a hashing method (which looks to be sha256). http://en.wikipedia.org/wiki/PBKDF2

I think cracking difficulty depends on how many "iterations" they use though.