skysight-inc/HackerNews huggingface dataset:
> So if your Twitter password happens to be the same as your ATT password, you're out of luck.

Why would you have both passwords be the same? That makes no sense. All passwords should be different.

> I only use two factor authentication if I can add it to my Authenticator app and save the code/QR code somewhere offline. Everything else is just too complex to be secure.

TOTP based two-factor auth (e.g. Google Authenticator) is my preferred method as well though I'll still set up an alternative method if it's not available. For example Namecheap offers 2FA via SMS. While not preferred, it's better than nothing.
There is a lot of reaction on the source by indie authors, including Hugh Howey, on kboards :

http://www.kboards.com/index.php/topic,189900.0.html
Ballsy and classy.

It's also perhaps a bit manipulative. I'm not in any way saying this in a critical or dismissive fashion, but rather given that many here are learning from software like this, and I do think there is a lesson to be drawn from that.

Persuasion and social norms are powerful forces. Giving direct links to your competitors not only demonstrates confidence in your product (e.g. it must be better given that it confidently points you at alternatives), it can also diffuse criticism, ala "if you aren't happy, here are other options that might make you happy".

Recall that reviled Comcast phone call the other day -- the agent was using a tactic as old as time which is to make the caller feel unreasonable and unfair about cancelling (e.g. "until you've given me a good reason", and then a list of why they're better). Such a competitor link list may achieve the same goal for negative reviews/sentiments.

App looks great.

EDIT: Pretty extraordinary how literally (and simplistically) people take the Comcast comparison. I was describing persuasive techniques (of which our society is filled), not saying that Marco is equal to Comcast. It is deeply unfortunate that this needs to be spelled out.

It is also shocking how people are both going forth to fight any notion that this is anything but a purely selfless move wrought by good intentions, but because of such a selfless move wrought with good intentions isn't Marco a great guy (and so "ballsy and classy") and isn't it worthwhile to spend $4.99. I am not sure if the reality is lost, or the fan club has flocked in.

/r/hailcorporate
>> "I've never seen the tab bar put in the navigation bar before"

I don't think it's a tab bar in the navigation bar. It just seems to be four buttons on a UIToolbar equally spaced.

Edit: Strange that this was down voted...care to explain why? It's almost certainly not a tab bar. A tab bar switches view controllers. The buttons on this bar present new ones modally leaving the current view controller in place.
I think this is just illustrating precisely the point of two-factor authentication, which is defense in depth. Right now, you have one factor which means that anything that compromises that factor compromises you, and who knows what bizarre attacks someone can land once they've started penetrating your defenses. By publishing your password, you're going back down to a single factor (and in some ways it's worse than that, because who knows what security policies are in place for most services - having half of a two-factor pair here has clearly been interpreted as being someone "more authenticated" than having NONE of a single factor).

That said, I would love it if the default single factor authentication method were public keys rather than passwords. I get how impractical that is with people constantly trying to access things in some device-independent way, but I fantasize about a world where everyone carries around a cheap hardware authentication module that just negotiates the cryptographic part of SSL handshakes as the primary authentication factor (with passwords and biometrics as secondary and tertiary factors as desired). Sure would be nice if the only thing that could be leaked after a data breach was your public key.
For those that have been around the Bitcoin community for a while these guys used to be called "The Genisis Block"
Did IBM ever view Apple as an arch-enemy though? I mean, sure Apple had the 1984 ad, so it was pretty clear that Apple thought of IBM as an enemy, but was the sentiment returned? I doubt IBM ever really gave them that much credit. And by the time that the new Apple came around, IBM was already well on it's way to being the services giant it is now.

But, boy, would an Oracle/Google partnership be funny to watch from the sidelines.
I know everyone likes to cite that paper whenever they can, but it's not really relevant here. In this hypothetical, they give you the source but they compile it to binary. They do not provide you with the compiler or its source. The compiler can be malicious, but there's no need to hide its maliciousness - they don't even prove that the software running is in any way derived from the source they've given you! It would be a giant leap forward to have to design against KT-level shenanigans. The whole process can currently be subverted with CS 101-level jiggery pokery.
In the FAQ it mentions a 'basic web app'. I haven't looked into it but you may be able to play on your desktop through that.

https://overcast.fm/skeptics_faq
This won't have the major publishing houses titles (beyond those who have agreed to work with Oyster). So no Penguin Random House, the market leader in print and audio. It also remains to be seen if the subscription model can work for books - they take longer to consume than movies or music. So you can imaging slower or busy readers being punished with a subscription unless they make it through 1.5 books per month which is where it makes sense to buy it. I don't think many people would like that over their head. Plus there's the library and used books, and just borrowing - all things we do way less of for movies and music.
That's true of most books, yet people still seem to buy them.
One issue I have with many of the flat designs I see posted online is that they're so simplistic and desaturated that they look like cheap, generic clip art. OS X Yosemite's system icons retain appropriate bevels and shadows for distinction and look even better than their iOS 7 counterparts.
توقعات امين المجلس الاعلى للجامعات2014هنا . الحدالادنى للطب97% والصيدلة 96%
It's interesting that the author's first idea was a combat-based game. For some reason, the world of game development has to a large degree becomes fixated on the idea of combat and violence. So games that don't necessarily need it have it anyway, even when it doesn't make sense (see Ludonarrative Dissonance in Bioshock). Always picking violence as the go-to gameplay mechanic is so limiting, and it's exciting to see games that avoid it and go for something more appropriate to the concept.
Another huge ecosystem of Java tools is http://gate.ac.uk/
Stalking the Shadow Universe
The publishers are really in the position to kill this. They obviously don't want to support an Amazon-based unlimited book rental service, and no users will join it if they can't read the books they want to.
Ninja Pizza Girl Kickstarter
This article has been posted here a couple of times:

http://www.aholme.co.uk/GPS/Main.htm

discussions:

https://hn.algolia.com/?q=gps#!/story/forever/0/http%3A%2F%2...

It mentions an earlier project also done by an individual:

http://lea.hamradio.si/~s53mv/navsats/theory.html

So even a few individuals are able to wrap their heads around the problem (I guess commercial projects would also tend to have one or two people doing significant amounts of the work).
I mention Zigbee there because it's what Philips' hue lights use. Maybe it's overkill, but it seems to work pretty well for them.
This doesn't seem like a useful contribution. For example, even though I prefer not to write C on a daily basis, I still use C-based tools all the time.
Growth is needed to lift people out of poverty, create jobs and opportunities and support wider range of social projects from infrastructure to space exploration.

The burden we're putting on the resources of this planet is indeed very high and we must work to reduce it. However, GDP growth with shrinking burden on the environment is achievable by generating more value on a smaller environmental footprint (see my other comment, in short: we can increase GDP by growing the relative aggregate value of services, software and products made of recycled materials).
If this guy works for a firm it would be worth notifying them. A good firm will want to protect it's brand.
I wouldn't take the fact that a bug has been filed about removing APNG as evidence that it's going to happen. It definitely won't in the near future.
to be honest i don't thing this is better way to find subtitles. Maybe it's just me, i don't know!

If you made classic search form with results from multiple sources, maybe instant results while i am typing than i would call it better.

This way i have to drop my video and hope that this thing will return correct subtitles.

This is just my opinion don't hate me :)
Sorry, but the need to put "<!-- -->" everywhere is a dealbreaker for me.

Example:

<div class="grid__item lap--one-half desk--two-thirds">
...
</div><!--

--><div class="grid__item lap--one-half desk--one-third">
...
</div>

What's the rationale for using inline-block instead of float?
Nope, the challenges have never been published. We've asked everyone who's done them not to share them.
> "This is where American Founding Fathers got it wrong, with the 2nd amendment. The reason why soldiers refuse to shoot against citizens is because they are unarmed and have moral upper hand."

This is a cute theory, but history provides countless examples of soldiers not refusing orders and shooting unarmed citizens. It's been happening in the Middle East for the past few years. It happened prior to the American Revolution (events such as the Boston Massacre likely contributed to the 2nd Amendment). And it will happen again over and over again.

Soldiers have several things to weigh when contemplating orders to fire on fellow citizens. The "moral upper hand" is one of them, but history has shown it's often not the strongest motivator. The 2nd Amendment is an amendment firmly grounded in reality and written by people who had seen government at its worst. Americans have lived in a relatively peaceful country for a long time and have largely learned to love Big Brother by now, so they are more worried about the 1/1e12 chance of a terrorist attack than the chance of their own government oppressing and spying on them. The 2nd Amendment establishes a firm deterrent that, in the limit, discourages how far and how fast the government can exercise its various forms of abuse.
You're comparing this "tactic" to that Comcast fiasco? If you listen to any of Marco's podcasts, he feels really strongly about independent developers and even his independent competitors, who he compliments often (esp. the Pocket Casts and Downcast people).
Super slick, great to see more production Dart apps launching.
Microsoft wants to be part of Judgment Day, too: Introducing the Project Adam AI
Anyone know if it does episode bookmarking/favourites?
Being able to dive in and fix it yourself is definitely an edge case. Even among people who use terminals, I don't know that many who are able or willing, or who have the time or energy, to learn the codebase enough to add a feature.

'The open-source community' isn't pitching this idea and also rejecting it. 'Tone-deaf open-source proponents' are pitching it (or, in this case, suggesting it, and rudely) and regular, well-socialized people are criticizing it as a good idea poorly said.
With the advent of electronic price labeling in retail stores we will soon live in a world where the price can change after you've picked up an item of the shelf and before you check out at the front of the store.

http://www.marketingmagazine.co.uk/article/1181195/real-time...
Where There’s Spark There’s Fire: The State of Apache Spark in 2014
The White Album: How Bob Marley Posthumously Became a Household Name
The machine learning community takes on the Higgs
Show HN: MIT-licensed distributed atmospheric data collection
It's a good example of gathering feedback and iterating on a design, and it's much, much more than that. Fascinating and well written.
His primary competitors, Downcast and Pocket Casts, cost $2.99 and $3.99 up front, respectively. Calling it a "paywall" seems disingenuous.
It's not a question of 'complexity' vs. 'this app does nothing'. It's a question of usability. I've dealt with a lot of enterprise software which is almost impossible for people to use, and which has features to make life easier that no one knows about because the UI is so inscrutable and nonsensical.

It's possible to make complex, enterprise software while at the same time making good software; it just rarely happens.
This is probably closer to the truth than either the "ballsy" or "manipulative" arguments. Though, I think this is overly cynical. He just doesn't think it's worth doing support. He has stated numerous times that, if he could, he would rather just refund people'e money than provide any support.
His motives seem obviously to be malign, but what's the theory under which he's liable for damages?
That's the basic idea, but note that it takes four satellites, not just three, because you're fixing your position in four dimensions (three space, plus time). If you had an extremely accurate clock locally then you could get away with just three, but without knowing the precise time, you need an extra satellite to fix time as well as space. Basically, GPS doesn't give you distance to the satellites, but the differences in the distances to different satellites. The signal from one satellite gives you nothing much, two satellites fixes your position on a hyperboloid, three satellites fixes your position on a curve, and four fixes you to a point.
Red Hat Updates Open Source Ceph Cloud Solutions
Coffee-houses – The Internet in a cup (2003)
Oops, good call, calendar has to be done manually a little bit differently. I forgot to add instructions for that - I'll do it tonight
Good article. In both this and the previous articles, the author seemed to know what he was talking about, gave actual security advice, and ran an interesting experiment.
Yes, I'm comparing persuasive tactics. Is there some reason I shouldn't?

The notion that anyone would read my comment and think they have to defend Marco or silence an obvious, factual comment is rather sad.
As long as his Twitter account was isolated[1], the only risk was losing control of his twitter account for a few days. And given the fact that he published an article previously saying that he was going to give away his password, I don't think that he would run into much trouble even if they used his twitter account for malicious purposes.

[1]This is, the twitter account wasn't being used to log into other services.
Fort.js: A Modern Progress Bar for Form Completion
I've done a ton of research into precision positioning with GPS (centimeter resolution). Have you investigated using NOAA CORS data in your project? http://geodesy.noaa.gov/CORS/

Disclaimer: GPS is one of those parts of science that gives me the nerd chills.
That is just capitalistic propaganda that now runs the last decades over the world.

But it does not work any more. The "growth" of the last two decades did go 99% into the pockets of the millionaires and billionaires.

Today is the situation, that new jobs in underdeveloped countries are at the existence minimum of that country or below -- meaning, those people work their ass of, just to survive and make the big bosses richer. And additionally, the environments of the countries are polluted, resources are depleted ...

All in the name of god money.
Google has some options for newbies, like the «Building Your First App» tutorial that you will find from this page: http://developer.android.com/training/index.html That's where I've started.
> The ephemeris is the precise orbital data used to calculate position. Each satellite broadcasts only its own ephemeris, which takes up to about 50s. This is where AGPS can help - if you can get that data from some other channel then you don't have to wait.

Don't celltowers provide AGPS data to connected client devices (i.e. phones)? Those towers need the AGPS data for enhanced 911 cellular service.
AngularJS Data Models: $http VS $resource VS Restangular
Statistical Advice for A/B Testing
Love the Onboarding screen https://i.imgur.com/VcBZ4rD.png
Table Layouts vs. Div Layouts: From Hell to... Hell? (2009)
They do as of today!
While I think, in general, a move like this can be seen as manipulative, I think this particular case is an exception.

Specifically, the line "Support independent developers, such as:", endears me to the publisher's genuine intentions. "Support" is the operative word here, and I think the comparison between this and the Comcast ordeal is different because I can't imagine Comcast using those words to describe their competitors.

I don't think what the publisher is doing diffuses criticism. I think it anticipates it and wraps it under a notion of "I know I can't give you everything you could want in a podcast app, so try these ones instead if you want". To me that's very different from, "This is the best podcast app, these other competitors can't possibly give you what I give you."
Coming up soon!
My daughter is a preteen and has discovered Animal Jam (and turned her younger brothers on to it as well). No violence, just lots of exploring, collecting and trading. The social aspect seems to be the major hook.
Google uncloaks Project Zero security team set to defend the internet
I believe the account is so that Overcast's servers can look for new episodes and push background updates so new episodes are there when you open it.
how was this leaked?
You are welcome to move to Venezuela, Belarus or some other unlivable place. I'd prefer Europe to be economically free and in growing prosperity much like Singapore. Sadly most of EU citizens are overly brainwashed with statist propaganda from birth, and promoting degenerate policies which cause economic weakness.
Frankly, I don't care about the look of the icons (these should be theme-able anyway), but I do care a lot about the actual application user interface, and for this, flat design is a step back into the 80's.

Flat design is good as long as there are no important visual cues lost what elements can be interacted with and which are just passively displaying information. I really do still have problems in iOS7 to separate passive text elements from interactive text elements (formerly called "buttons"). Examples are the contacts list or the famous shift-button of the onscreen keyboard.

Thankfully in OSX 10.10, buttons are still recognizable as buttons, and I like that less radical flatness much more then iOS7. Although, in the current state the UI looks a lot like a Gnome skin which tries to mimic OSX though, I hope that improves until release.
I saw that, but I'm not sure it will fit my needs. More than anything else, I want to be able to use the "play/pause" key on my keyboard to pause the podcast. I also really like the idea of the voice booster and I'm guessing that the web site won't get that (being 'basic' and all).
Chitwanix OS 1.5 codename Khukuri has been released
I wonder about the average use specifics for kindle users. Obviously Amazon has insight into this and would set their pricing appropriately.

Assuming the kind of books listed here are the kind on the daily deal (1.99): The average user would have to read only 4-5 books a month to break even (say 9 books every two months counting taxes).

I doubt most users would read that consistently. Maybe the first month, but usage would likely drop, and the deal works out better in Amazon's favor until they quit. Which for many users could be until their credit card expires.

I probably only read 6 books a month at the most these days, and some months I probably drop down as low as 1 book every month several times a year. I'd probably enroll in this service so even if they have 9.99 normal cost ebooks, I think overall it'd work so Amazon doesn't lose much more than they would with their current structure.
Well, like if said I'm not a lawyer, but if the recruiter acted to malign and it resulted in termination, I feel like there may be something there. Certainly in that case it would be at least worth consulting someone.
Relax Ipsum – mindful placeholder text for your designs
One thing that immediately strikes me is that this would be very useful for nonfiction, if one wants to nibble a chapter here and a chapter there. For my own use I'm more worried that unlimited really is "unlimited". Not that it's going to matter for me, the chance that it will be available outside the US is nil.
Isn't it the same kind of reasoning that one would use when, say, hiring someone? That is, look for past credentials? And assume that past behaiviour would be a good predictor for the future?

I think the answer should be previous flight experience with commercial pilots + background check. And the reason for that is not terrorist threats, but just basic common sence. Flying is inherently dangerous, you can't just quit midflight. There've been described cases when flight instructors had to restrain inadequately behaiving flight students (scared, jamming controls, etc). And we've all been reading about cases when airliners crew had to restrain drunk/psyco passengers. This is what I'd be interested to avoid.
> Why would you have both passwords be the same? That makes no sense. All passwords should be different.

I'd put good money on the percentage of AT&T customers who use the same password for all their web services being sizable enough to make that a valid concern.
Ben Horowitz's “The Hard Things About Hard Things” Contest
3 Things To Improve on Daily
That was a fascinating and well-written article, and for a parent of young daughters, a depressing one that makes me doubt my strength to be a sufficiently good father.

That aside, the game has a problem, in my view: it's too real. It sounds like a game that provides you with more of the crushing disappointments that fill real life, and it reinforces the idea that you ought to be so awesome that bullies leave you alone — which will never happen.
Free as in Freedom (http://faif.us/) is an oggcast, hosted and presented by Bradley M. Kuhn and Karen Sandler. The discussion includes legal, policy, and many other issues in the Free, Libre, and Open Source Software (FLOSS) world. Occasionally, guests join Bradley and Karen to discuss various topics regarding FLOSS.
I don't like the firefox one.
>So...I don't know what the "flaw" is...but it doesn't seem to me that the OP learned the biggest lesson of all about security: that pretty much everything is a tradeoff.

The flaw is side-channel data leakage about the authentication process and about the user data - they're revealing private information to someone who has not successfully authenticated. Just because the guy published his password doesn't mean it's not a flaw - if someone got his password from a compromised database they shouldn't be able to leverage that into finding out his phone number or anything else about him, if he's already arranged with Twitter (or any other service) to a protocol which basically says, "Don't believe anyone saying they are me unless they both know my password and have my phone."

Frankly, a well-designed 2FA system shouldn't even reveal whether or not you've successfully authenticated using one of the factors. For TOTP this is possible because you can enter in the username, password and TOTP code all at the same time (though it's rare to see this implementation). Even if TOTP is not enabled for most accounts, you'd still want to show the box and say, "Leave this blank if you don't have TOTP enabled". For this SMS-based second-factor, I'm not sure how to design it so that there are no side-channel attacks other than sending an SMS with an authentication token every single time, whether or not the password was entered correctly (which allows random people with your login to just randomly send you authentication spam).