skysight-inc/HackerNews huggingface dataset:
I'm just getting through Zero To One, that Peter Thiel book that came out and this is a perfect example of why you should seek new ground and avoid competition. For some reason, every developer thinks every CMS system out there doesn't meet their needs. I don't know if it's because they aren't well-documented or well-architected enough but every dev or company eventually gets to the point there they want a customized CMS for themselves because they think they have a value-add.

I think if they had a very unique value proposition in order to avoid competition, they'd be in good shape. Maybe a CMS just for a specific industry.
The real work is done here, in all of 8 lines of CSS:

https://github.com/folz/unsticker.me/blob/master/firefox/dat...

This makes me think all the bloat could be avoided by making this a userstyle (usable via e.g. https://addons.mozilla.org/en-US/firefox/addon/stylish/ ) instead of an entire addon.
Amenazas Persistentes Avanzadas: una mirada comprometida
Parent linked the beta, take out beta from the URL. Looks like a pretty decent project.
Link to referenced Reddit thread w/ confirmations: http://www.reddit.com/r/sysadmin/comments/2j5xkw/has_dropbox...

Also of note is that Dropbox does not force complex passwords: http://i.imgur.com/v4h0g8D.png
The Oculus Rift has full stereoscopic 3D. I think he may have misspoken. Just speculating, but maybe Magic Leap has some sort of eye tracking.
So? Everyone should know that. Just get a camera?
Most academic publishing isn't academic (and how to deal with it)
$500M sounds like a typo. That is absolutely unheard of for a stealth company. For reference, Oculus had a $75M round last December, and they had ignited an entire VR developer community. Uber had a record setting round earlier this year and raised $1.2 billion. But Uber is... well, Uber.
So the web can't be a replacement for CICS because it wasn't designed as such. Gotcha.
Very cool idea, and welcome to Boulder!
Sometimes, the vast majority of people are just wrong. Look at people building McMansions with complicated roof lines, useless "bump-outs" and other crap details, when any thinking building professional knows this is wrong.
Clicked thinking it was a Disney adaptation of the novel with the same name. In retrospect, it would be an unlikely adaptation for Disney to undertake ;)
I setup an open source diaspora* pod for SF
No, not really. The commentary on the Language Log blog about this 2013 article

http://languagelog.ldc.upenn.edu/nll/?p=8369

shows that even the authors of the article admit that there is not the same phonetic form of this word in all major languages, much less all languages in the whole world.
To be clear, the whole idea with Debian stable is that you get security patches all the time, but no new (or depricated) features/apis. So you update every night, but you upgrade only when a new release comes out.

Compared to that testing does both: typically similar frequency of security-related patches (but not guaranteed!) as stable -- and also migrations of new packages from unstable as soon as they "settle down" (and in "reasonable" sets, so that dependencies work).

So, you want a backported fix for the bash bug, in bash 4.2, but not upgrading to bash 4.3 -- possibly breaking somehting depending on 4.2 behaviour (something other than an exploit for shellshock, that is).

(Now, bash is pretty stable, so may not be the best example -- but the point remains).

If you're running testing, in addition to apt-listbugs, you want to have a look at "aptitude safe-upgrade/upgrade" vs "aptitude dist-upgrade" (or apt-get upgrade vs dist-upgrade). A dist-upgrade can be a little bit more invasive, and typically warrants some more vigilance than a mere "safe-upgrade". I don't think I can remember a "safe-upgrade" ever breaking anything in my ~14 years of using Debian. It's pretty safe to script to run automatically, unless you have very strict policies on uptime/predictability.
Thanks for the great Work Jessica. An amazing experience, great people and speakers. I fly from NY and found a bunch of people from around the world also traveling to California for the experience.
Nor do they likely salt (I hope they at least hash) their passwords.
Nvidia 's Light-field Glasses Prototype (Like Magic Leap)
How to Test Demand for Your New Product Using Google AdWords
Poll: I would hand over my data for good -or- I would do anything for privacy
In recent days large leaks of how data is being captured, combined and used has given us all food for thought.

I am currently working for a stealth startup, with the potential to capture a lot of data, to use it to provide contextually relevant information and target groups of people. I am curious to see peoples thoughts and opinions on data usage and privacy. So:

Would you hand over your data if it was used to provide better information to you?

Would you prefer that any data handed over was kept encrypted, so even the company could not access it?

If you prefer privacy, are you willing to pay for it? After all, data is where free services make their money.

Are there any limits to the data you would hand over? e.g. Location/Contacts/Calendar/Shopping preferences
Disclaimer: This is probably the weirdest TED 'talk' I've ever seen and you won't learn anything about Magic Leap. It does speak to the type of person the CEO is though and what that might mean for the company. In my book, his weirdness is a good sign.
Google Glass Applications for Agriculture
Here's the video associated with the Nvidia paper on Near-Eye Light Field Displays linked elsewhere in the comments.

https://www.youtube.com/watch?v=uwCwtBxZM7g

It gives a very clear overview of the concept and prototypes.
Everyone Has That One Friend
It wasn't my example. But there is no a priori reason why "something better than C++" must be designed by someone with a deep understanding of C++. This holds for anything you might put in place of C++:

- must someone who designs a car understand why people ride horses?

- must someone who designs a phone understand why people use smoke signals?

- must someone who designs a gun understand why people use swords?
In a way, stereoscopic 3D is seeing something "flat and floating in space at a set distance". The focus distance is the same for both your eyes, and the same for anything you look at.

In the real world, your eyes refocus for objects at different distances. It's not just a "stereoscopic effect". The actual focus distance - what's blurry and what's not blurry - changes.

This doesn't happen with devices like the Rift or a 3D movie screen. Your eyes may have to swivel in and out to align the images, but they don't have to refocus.

Very different from the real world!
Dropbox hacked
Takoo
But that slogan, which is almost always said as briefly as zt posed it, is as useful as saying "to continue living, keep your lungs ventilated and your heart pumping". There's no useful, actionable advice there. "Eat less" is largely useless - someone can eat less than they are and still be eating too much, for example.
Color raised 40M for an unlaunched app. This at least seems to have some real world utility.
T-Mobile’s Out to Prove It’s Better Off Alone
Of course. Most programs also don't need all the esoteric options that can be passed into CreateProcess either.
Here's Doug speaking on this research at Augmented World Expo 2014:

https://www.youtube.com/watch?v=8hLzESOf8SE
What Bryan Cranston taught me at 4:00am
Are there any benchmark results available? They mention it increased speed, by a lot, but don't give any numbers -- instead point to a code repo where you can run your own. This is great, but I want an "at a glance" numbers on a variety of platforms so I can verify their claim and then take it to my boss to push through an upgrade. An "executive summary" if you will.
The five elevators in my building (Shenzhen) serve all 45 floors and it's a mess. I think I must have spent 10+ minutes waiting for the elevator once.
Right. Because as Clinkle has shown us, stealth companies raising massive rounds at gigantic valuations without any major traction works out well for everyone involved.
First of all, congratulations. Having lost around 40 lbs, I know all the work that it takes to achieve something like that.

One thing that I want to share is I quit drinking sodas for about 1 year, and when I was finally 'allowed' to drink them again I just found them too sweet for my taste, I cannot drink them anymore. Also during the last month I've been using Freeletics to exercise with very good results (I'm not affiliated with them in any way).

The most important thing that I've learned through my personal process is that the only thing that really matters is being disciplined and constant.

Good luck and keep it up!
Is this real? Scary. How could they get the plain text passwords?
Shouldn't it allow you to make a succinct frontend?
If true, this is a big deal. One of the websites has reported that 7 million accounts have been hacked.
Attempted to change my password; tried using Safari's suggested random alphanumeric/hyphenated password; was rejected as invalid. :(
Salted passwords are not susceptible to a rainbow table, even if the salt is known by the attacker.
It would be nice if someone would write a quick script to email these people notifying them. Maybe if I get more time tonight, I'll give it a shot. Otherwise, someone else could be the hero ;)
Has anyone tested those logins to see if they work?

Of course, even if they do, it could easily be passwords taken from some other service, matched to accounts where people use the same password for everything.

Not necessarily an indication of Dropbox itself being hacked.
They have that fantastic 'enimga' encryption.
Or you know... a simple dictionary attack. Salts aren't magic fairy dust that stops weak passwords from being brute forced.
I agree, I would like to give it a try. The only problem is how do I ensure the information is valid. I am not going to try and access the accounts, as that would be unethical.
I'm still suffering from spam from the last mail address leak, and now this? Time to respect my data and move it elsewhere

EDIT: Dropbox say the leak is from another service that has been compromised. Does anyone know of a service that's been popular enough to store ~7'000'000 user credentials without instead using OAuth? If there is, how did Dropbox not notice that, and how did we ad the Internet community not complain about this service sooner? I assume 7 million accounts aren't immaterial to Dropbox total users.
why is hotmail so popular in this list? I thought gmail was the most used and even yahoo seems to go on par with gmail here.

May it be because they didn't actually hack dropbox but just hacked about 400 accounts and hotmail users were easier targets because that demographic was more like our parents?

Also the list skips from b-e to b-i in 400 users, surely if there were 7 million email addresses this shouldn't be the case?
Venezuela Default Almost Certain, Harvard Economists Say
Betamax and VHS are incrementally different, not radically different as the blog post discussed. Radically different would be VHS vs. streaming video, and I suspect there is no technological overlap between the two. Incrementalists would have us stream video to tape decks, or something.
Apparently, yes. http://www.reddit.com/r/sysadmin/comments/2j5xkw/has_dropbox...
The biggest mistake they've made with Angular is that they're using a custom documentation system that's also written in Angular and JavaScript.

The DSLs would be okay to work with if they were better documented and had better examples and an easy to use docs system.
Dropbox invalidated the passwords for everyone who's on the list, according to anecdotal reports from people on Twitter. You should change your password anyway, of course.

[0]: https://twitter.com/ow/status/521854174007279616
Apparently Dropbox already reset the passwords and sent an email. Source: TNW
"that involves listening to 25-year-olds coming up with something better"

That doesn't involve listening to them, it involves them putting in the work to develop something as a proof of concept, and that proof of concept evolving through feedback and collaboration into something people want to use.

To put it more crassly, people don't stop using something because others say it's shit, they stop using something when there's a better option on the table, and that better option needs to be more than just architecturally improved, it needs to be genuinely useful, and this is what people who twist "worse is better" fail to understand... legacy code sticks around when it's genuinely useful.

And to address the original author... yes, the idea with writing software is to get the job done, but if you want to work on tooling to improve that process be my guest.
Hang in there, Kitty!

Nice formatting.
Mail providers should be doing that already. I would be surprised if the gmail/hotmal/yahoo don't have responsive teams that disable hacked accounts and request password reset from a known IP or TFA.
innovation, it takes someone to try something and other's to build off of that to get anywhere. they had the guts to put the foot forward.
It could be from reused passwords from prior unrelated password leaks, or it could be a sign of very poor security at Dropbox. My money's on the former.
This is the BIG question.
You're not wrong, but I still think the article is wrong. They are probably paraphrasing a statement from Magic Leap and miscomprehending it in the process.

> So you might have fun wondering how to build something that doesn't work like that.

For head-mounted use, there are light-field glasses like those of Doug Lanman. Who knows if that is anything like what Magic Leap is actually working on. They are so absurdly secretive that all I've heard so far are contradictory rumors.
I suspect it has more to do with a lack of backdoors in the phone. It's not entirely unreasonable to think that some of the more advanced countries would know that the US is backdooring just about every phone in firmware (not OS but code running on other, non OS chips) and do something to ensure that their phones are not backdoored.

Of course that COMPLETELY ignores the fact that a cell phone can't work AT ALL unless the phone company knows roughly where you are. And if the phone company HAS to know, and the phone company has been compromised by the NSA, then it stands to reason that the NSA can track you even without the firmware backdoors on the phone itself.

The most convincing lies have a bit of truth sprinkled in to disarm your "that's gotta be bullshit" meter.
Salt doesn't work that way... you're supposed to randomly generate salt for each hash and store it alongside the hash itself. (Authentications are done by hashing the password and salt together, and then comparing that to the stored hash.)

Saying "the salt was compromised" doesn't make sense, since there's no "one" salt, and it doesn't need to be "compromised", since it's stored in the clear along with each hash.
Just put a cell radio in it. As a bonus it can transmit GPS coordinates to you so you can watch it get stolen in real time.
Perhaps they obtained the hashes, then tried bruteforcing them, and only published the ones that they actually found.
In the same vein, there was the proposed MOOSE reentry system:
http://en.wikipedia.org/wiki/MOOSE
Time to buy that external HDD.
Looks to me like a case of users using the same password for multiple services and one of those services (not likely dropbox) was storing passwords insecurely.
At $500M it isn't an investment expecting a return, it's money to block other companies buying it.
Would you want a desktop app to minify your html/css/javascript files rather than including this as part of your build process? If so, can you explain why?
Doubt it, there's some non-dictionary-word passwords on the list.
I wonder how many people are foolish enough to store their bitcoin wallets on dropbox, and if the hacker has already preemptively removed the funds from those wallets.
More teasers:

http://pastebin.com/1AZQ7McK

http://pastebin.com/NtgwpfVm
props for the edited disclosure.
Rainbow tables went out of style in the early 2000s. GPU password hacking resulting in them being somewhat less useful than they were in the 90s.
Hyperion happens to be the name of a street in Los Angeles where one of the original Disney animation studios resided (In Silverlake at the intersection of Griffith Park Blvd, where the Gelsons Market now stands).
The general pattern here is some other large site (or sites) is hacked and their passwords are either not salted, or stored in plaintext, and the people reused the same email/password combo.
Of course calories in, calories out. That's why I eat 3,000 calories of sand a day to gain weight.

Read a few books before ignoring what decades of science are teaching us. 1 pound per week is pretty abysmal, and what you're doing isn't sustainable. Exercising increases your appetite. You're going to gain the weight back.

Ketosis works completely independently of how much you eat. How could you possibly be happier constantly monitoring your calories, when instead you could be eating bacon-rich food at will and lose weight without trying?
The one credible application I've seen for modern airships is for transporting ultra-heavy massively oversized loads. See http://en.wikipedia.org/wiki/CargoLifter. The idea is that overland transport by truck or train imposes maximum size limits from right-of-way, overpass, and tunnel constraints. That could leave a niche for airships which could far exceed the maximum sizes otherwise obtainable. Think massive generators or rocket bodies. So far though no one has made the numbers add up.
http://en.wikipedia.org/wiki/Rainbow_table

Usually a salt would protect you from that, but look at how trivially easy all those passwords are.
Whenever I read about new renderers I think I'm completely intellectually inept even with what I think is a reasonably well-rounded computer science education. It is like reading about string theory in a way. Sure, I can grasp the concepts, but the details and minutia are fascinating and admittedly a little beyond my immediate comprehension. I remember when POV-RAY was amazing when it ran all night to produce just one image with some reflection on a 486.

How time and Moore's law flies...
I doubt dropbox was hacked. It also doesn't look like a dictionary attack.

It seems more likely that a third-party website wasn't storing passwords correctly, was hacked, and this is the list of users that use a single password for everything.
Eh, I can't find pictures of the bags I remember from when I lived in Florida. It's the regular brown paper bags. They would have a suggested shopping list on the side, to help plan before a hurricane comes. They would also have a hurricane tracking map.

It's definitely a early planning thing because it's pointless to get the list of things to buy after you've gone through checkout.

Here's an example I can find - “Prepare for Hurricane Season” coupons for 6/22 to 7/19 (the start of hurricane season) http://www.iheartpublix.com/2014/06/new-publix-coupons-prepa... . Same basic point though - buy staples early because the shelves will quickly be bare if a hurricane is coming.

"almost any drills that can prevent a nation breakin down have a lot of value"

You need to demonstrate that 1) the nation might break down, 2) there are predictable way(s) that it will break down, 3) there are drills which might prevent that from happening, 4) that a significant proportion (10%? 80%) of the people will participate, and 5) that it's worth the costs, including social effects.

Otherwise (and IMHO) you are worried about fantasy scenarios. And I don't even agree with part 1)

For another historical example, look towards civil defense preparations for nuclear war. Should we still be doing "duck and cover" drills, on the off chance that a nuclear bomb will go off? When I was a kid they tested the civil defense / nuclear missile warning system every month, just in case. I wonder if they still do that now..

Compare that to the fire, tornado, earthquake, tsunami, etc. drills that people do now. Those are more likely, there's more experience with them, and there are specific ways to handle each one.

"fire drills seem not to evolve with time and experience"

The technique for sharpening pencils hasn't changed much either. There's something like 130 years of experience in doing school fire drills. Why should you expect to see big changes in the last 20 years?
Mostly short ones though.
Note that this was on Dropbox, not on any of the mail providers. Unless Google (et al) is going out of it's way to send emails to its users in the list, which would surprise me.
The idea that a link aggregator is "100% spam" may help you feel better, but has no bearing on reality. You tried to promote something you work on (without even being decent enough to admit it) and got called for it.

Don't be a jerk.
On my machine, Safari misinterpreted the password change form to be two "new password" fields, and didn't get that the first field was an "old password" field. So it auto-filled a new password for both fields, and it was rejected because the old password didn't match.

FYI, don't try and "fix" this by erasing the top password and filling your old one in... that will cause safari to forget that you're generating a new password, and it won't commit the new password to the keychain (and you're now locked out.)

Safari fares better on the password reset link though, which has two "new password" fields and that's it.
(Most) bitcoin wallets store the private keys encrypted, so even if you could steal them, they wouldn't do you any good unless the password was very simple.
I've changed my password, but TBH i don't even know if that will help here as they seem to be able to access the passwords as well??
Are people really sending BTC to these guys so they can release "teasers" with so little accounts in pastebins?
That's a good idea! I'm not sure if it's easier but it would effectively sidestep this class of issues.
Chuckling at a few of the passwords of these unfortunate accounts, such as "trustnoone"

Considering that Dropbox is most useful via the desktop/mobile app...meaning that the password is rarely entered...I treat my Dropbox password as if it were on a need-to-know basis...that is, I have no idea what it is and I have to jump through several hoops to retrieve it for the rare times when I need to login. I don't put anything too valuable on Dropbox, but better safe than sorry.
Because of brute force GPU cracking, you need more than a salt. You need bcrypt/scrypt/PBKDF2.

Edit: due to the downvote, I'll remind the audience about this: http://codahale.com/how-to-safely-store-a-password/
Walt Disney Studios was once located at 2719 Hyperion Avenue in Los Angeles. It's surely named after that. The Walt Disney Company also used the name for other things, like the publishing company Hyperion Books, and the Hyperion Theater at California Adventure.

http://blog.wdwinfo.com/2013/07/28/the-walt-disney-hyperion-...
There is no guarantee that that will work. When you have work to do, you just have to get it done.
Would it be unethical to enter anyone's house without being invited to save the people in there from a huge fire burning the house?
Հը is pronounced pretty much exactly as "Huh".

Հ = H

ը = the sound of the letter "i" in the words "birth" and "dirt".

՞ = ?; it is the Armenian question mark. Unlike Latin languages, the question mark is placed adjacent to the vowel it's meant to raise the pitch of. English equivalent would be look like this: "Hu?h"
Brent and the team at Disney Feature Animation have always pushed complexity like crazy. Most people keep telling them to just think procedurally or reuse elements, but Brent prefers to let the artists do whatever they want and the system should handle it. Since cores are cheaper than humans this is a good long-term tradeoff, but YMMV since very few studios would bother doing so much explicit detail (as opposed to procedurally tweaked variations).