skysight-inc/HackerNews huggingface dataset:
I work for a bank -- a place where you would expect to find excellent security practices. And for the most part we DO have excellent security practices. But I have encountered certain areas that have the same kinds of problems you mention around password management: frequent changes required and a maximum length which is not nearly long enough.

I attempted to address it by writing an essay about why this was risky (including links to research) which I published on the internal intranet.

So far my track record is quite poor. I had one person explain why 8-character passwords was the maximum (there was still one machine at the company that ran an OS that could only handle 8-character passwords) and no one seemed interested in changing it.

Make of this what you will.
You're lucky
> But I still think your legal reasoning is flawed.

I did not make a legal reasoning. I pointed out that the issue is not clear.

> Secondly, looking at it from this angle, the Von Hannover judgements of the ECHR provide a number of criteria for judging the lawfullness of publication.

You can't only look at the ECHR, as the ECHR is not itself law and the national laws implementing it in each state subject to it differ greatly. The ECHR is relevant because it is the source of most of this legislation, but as long as the national laws implementing the principles are not in conflict with the ECHR, the can - and often does - add additional restrictions. Which is why I pointed out that the issue is not clear and that simply pointing to the license is insufficient.

As I pointed out, in the UK (which I used as an example only because I live here) it is clear that copyright is insufficient to control your right to publish. In fact, in addition to the Human Rights Act, the Data Protection Act and the Copyright, Design and Patents Act both add additional restrictions that may prevent or limit publication beyond copyright. I don't know the extent of legal restrictions in the rest of Europe.
This is great. Usually my ADD gets the best of me and I end up just scanning through videos, but this one really had me captivated. Looking forward to Part 2.
Responsive images using cookies (2011)
Microsoft CEO announces he can be mostly gay by Q2 2015
Show HN: Assembly – Help build a product, get a share of it
A number of these things are available in IE9 and older using https://github.com/es-shims/es5-shim (including Object.create that the article was talking about)
So I cannot tell if this is aiming to be CA or AP. Having beaten my head against the CAP wall for a while, how does it deal with partitions?
Show HN: Meteor Day Checkin – Follow Meteor Developers Around the World
How am I talking about something totally different?

Your comment implied that simply looking at the license was sufficient to determine whether or not there is a right to publish, and that is not always the case. All I did was point out that other rights also comes into play.
Source code at https://github.com/thebakeryio/meteorday
So... Anybody else cry?
> Comparing to Facebook ' s TAO approach from yesterday post

Link? I see no relevant-looking "Facebook" or "TAO" in my recent RSS entries :(
Yeah there's even an open source map viewer, all you need is the DVD: http://wowmapview.sourceforge.net/
http://diydrones.com
PC cooling specialist Zalman goes bankrupt due to fraud
Physicists hit milestone in accelerating particles with plasma
>European Union is a union in a UN sense rather than USA sense

Are you from the EU? You do know that EU law supersedes national law, right? Or that a number of southern european countries don't have control of their finances for 5+years now?

It's not an inconsequential union.

Also, if they are not doing nothing wrong, then i don't know if the word "wrong" has any uses anymore.
Happy to see it's written in Golang.
Can completely your frustration with government IT policies and at times they are very draconian.

I do disagree with you on the policy of changing every 6 months. While it may promote laziness to some degree in coming up with a strong password, that issue can easily be overcome with policies on length, character types, etc... Forcing password changes on a routine schedule can be a very good security practice though.

As for storing old passwords I have split feelings personally on this. I hate it because I forget sometimes what passwords I have previously used. In my case it was a school and every semester we had to change our password. Since I was a part-time student taking 1-2 classes each semester including summers it meant in some years I would change my password 5-6 times. That meant remembering every password I had ever used. After 2-3 years this became a major headache to me. A better and IMO preferred implementation of this would be to prevent maybe the previous 2 passwords from being reused, but to say you can never use the same password twice regardless of time between uses is just dumb.

On your final note regarding the length issue. While I can't speak for that particular system, it sounds like it may have something to do with some legacy system restriction they have in place that is forcing a constrained length (similar to some banks not allowing special characters in your password).
Or, no income tax at all and just a sales/use tax across the board.
How to build a tool for downloading and converting subtitles from YouTube
Terrorists are using DMCA notices to hunt down their YouTube critics
> I think OP dismissed his own privacy concerns when he walked bare-assed in front of the camera he set up to email him pictures of whatever moves in front of it.

And he owns up to that fact. He knows that he was acting carelessly. And then he realized that it was not a good idea, and so he stopped doing it. He's not saying that Google planted a camera in his house without his consent!

It's just a "I fucked up; don't make the same mistake and trust a company with that kind of data"-story.
I think he is talking about this post: https://news.ycombinator.com/item?id=8557408
> Before going all litigious and looking up the specifics of fair use for various licenses, what exactly is wrong with asking them nicely?

I agree. Most likely they've just done a quick search and don't particularly care what photo they used.
I've a feeling most of the HN audience is comprised of people working on websites. Almost every time something shows up, they usually contribute with what they know (css, javascript, design, etc). I've learned to ignore it but it's a bit sad anyway.
The data suggests that many of the most successful companies are there, but certainly not all of them (and the ones outside are probably a lot quieter or covered less in the news). Turns out there is a lot higher concentration of people trying to build startups there than the average city, so as a consequence of that more are there.

Having built my own, raised money, and gained traction, all outside of the valley (though I do spend a fair amount of time there), I don't see myself rushing to do my next one in SV.
Misleading because it is about maximising profit. That is what leads to the cinema's attempt to clear the market. If they make no profit on the £4 student they don't care whether he sees his film or not.

Peoples valuation isn't going to be consistent either, nor is it going to exist in a vacuum. For instance, if the £7 students here that their stingy friend gets in for £4 then they may well see things differently.
Restore potency and cure ED
You can now bid on landfill copies of Atari's long-lost 'E.T.' game
Nice capture of a one word domain on the new .glass TLD. Although I was expecting it to have something to do with Google Glass and it didn't.
I personally like the idea of dropping income taxes and switching to just sales/use tax. Compliance is simplified, tax codes are simplified, and tax avoidance is reduced. There are many practical aspect that would need to be resolved, like how do you apply this to imports and such, but those are solvable problems.
Apple Pay: Payments at Your Thumbs
Where Democrats and Republicans want their tax dollars spent
Microsoft Office Now Free on iOS and Android
"My hope, always, is that it's going to wake me up. I'm only connected for seconds, minutes a day, sometimes. And suddenly, you go, ‘Holy cow, I've been asleep for two days. I've been doing things, but I'm just out.' If I see someone who's out cold on their feet, I'm going to try to wake that person up. It's what I'd want someone to do for me. Wake me the hell up and come back to the planet."

I've been working a regular 9-5 office job for the last couple of months and this really resonated with me. I think the knee-jerk reaction some people have to unusual behavior is as much 'waking up' as it is revulsion.
GnuPG 2.1.0 “modern” released
Their model for dom composition is substantially more complex than I would prefer. Angular, at it's core, is something like a re-imagining of the dom + js-event-loop that is hackable and modifiable. Good goal, but the complexity doesn't buy you much over e.g. reagent or meteor, which are _much_ simpler.
Neat tool. Thanks for sharing!
Timeline of learning JavaScript

1. Constructer's are great it's just like language x

2. uncanny valley of realizing it's not actually like language x

3. understanding constructors, use them everywhere

4. get burned by subtler points of this in async functions and forgetting new, decide to go all functional all the time

5. have enough experience to avoid the foot guns, use constructors all the time as they tend to be the fastest method and have the best support.

This article is at stage 4
Where We're Going With LXD
I'm a programmer who'd never tried electronics till an year ago but have now managed to build a few things - that even involve homemade PCBs and SMD soldering.

1) I started by buying an arduino, a starter kit and some simple sensors and actuators - ultrasonic, gyro, servos, motor driver - on ebay.

2) read Pratt's "Make Electronics" and Wiley's "Electronics for Dummies"

3) started making. Understood theoretical concepts by doing.

4) I regularly watch DIY youtube channels and follow RSS feeds of sites like Instructables and Hackaday.io

5) I'm not yet capable of building a UAV, but I've already built a couple of robots.

It's not really tough, and it's a fantastic side hobby. It's also turned me into a more careful software programmer, constantly double and triple checking everything, because electronic circuits are not as forgiving of mistakes as software.

So I'd say get started right away. It's gonna be fun!
UX Quick Tip: The proper way of handling notifications
No.

Stop over-engineering. YAGNI!

Most JS codebases are light on polymorphism. I think I've used one UI framework that had any kind of inheritance at all. I've never (ever) had a bug caused by "forgetting to type new".

Use strict. Lint your code. Use a decent build toolchain. Stop over-engineering your code unless you have a damn good justification for it.
Pastillas eyaculación precoz
Very neat. I wish I would have had something like this when I was young. Instead I had a pocket dictionary / organizer that I would type code into while bored at church with my mom. When we got home, I would copy the code line for line into the computer and hope it would run. Before that organizer, it was a notepad and a pencil, or even the back of the service leaflet.

Amazing now how much processing power you can carry in your pocket for almost nothing...
I've posted it here before, but Ars Technica wrote an excellent longform article about Winamp's rise and fall: http://arstechnica.com/business/2012/06/winamp-how-greatest-...
Discount for Photo Software – Creative Kit Plus
In an an iPhone the videos of the site are broken. So much better expirience from the desktop browser!
Microsoft Office is now free on mobile
I wouldn't say constructors are the problem -- the problem is with the "new" keyword.

I tend to use constructors like this:
https://github.com/mattdesl/module-best-practices/blob/maste...

Which leads to clear debugging (named constructors and their prototypes showing in console) and also works well in the off chance that you need to use "inherits" (eg on node EventEmitter).

Regarding case; it comes down to preference. I tend to name my factories CamelCase or createCamelCase, so that the return value "camelCase" is clearly an instance.
Just visiting the site brings back PTS from past coding interviews. I'm convinced that live coding interviews are a personality / public speaking test, not a skills / knowledge test.

What's wrong with giving the candidate a take home problem then brining them in to walk through their solution / reasoning? I've hired this way before and worked out exceptionally well.
The Mathematical Reason All Hipsters Look the Same
Psychologically, I think it's a lot easier for the very young. If you're 21 or 22, fresh out of college, this living situation wouldn't be dramatically different from the setup you've dealt with for the last four years of your life. I imagine it would be much harder to tolerate if you were a bit older, and you'd had a taste or two of life in your own place.
Neat, was it easy to integrate Meteor with Phonegap?
I started to work on last year's offering of this embedded systems MOOC, but couldn't commit the time required to finish it: https://www.edx.org/course/utaustinx/utaustinx-ut-6-02x-embe...

It seems like a great introduction to embedded systems for programmers without any hardware/electronics experience. The course is being run again in January.
My other suggestion to them was a good, required training on how to create passwords/phrases via different methods I have picked up along my way. I tend to keep up with password security theories from here and there, its a sort of a passion of mine considering how integral they are to our lives now days.

I have just always thought the forced changes were unnecessary if the password was strong enough to begin with, and managed in a proper/secure way on the server end. Because it doesnt matter if they password is one day, or 6 years old, the chances are that unless you are high priority, an attack on your password is a here and now event, not a prolonged attack (unless you are a direct target). Even in the event of prolonged attacks, there should be other measures in place to mitigate that avenue of exploit.

My only beef with non forced has been that over time, I feel the tendency for that particular password to be reused on multiple accounts would increase, therefore weakening it.

Like all theories though, I like to keep any open mind to all outlooks, I am by no means an expert. I just know that our policy's make me uncomfortable.
Here in the Southeast, we call them "Palmetto Bugs". Maybe a rename to PalmettoDB? :)
Flocal : http://goflocal.com - Craigslist meets Tinder

https://itunes.apple.com/us/app/flocal/id894416534?mt=8&uo=4

It's a lot better than craigslist. It's quicker and easier to use. Immediately see how far away a post is. There's no registrations or signins. Every post has a pic and location, so you won't see a lot of the junk you see on craigslist where someone posts something with no map, no pic, and no address in the post.
The Startup Podcast: How to Value Your Startup
Office for Android tablets enters preview alongside new iPhone version
Show HN: Flashlight – Spotlight's missing plugin system
Very young human children have been shown an innate drive to share the rewards of a task fairly. Chimpanzees have been shown to lack this.

The children didn't share when the other party wasn't involved in completing a task though, so I'm unsure if this applies here.
Microsoft Changes Tack, Making Office Suite Free on Mobile
The design doc https://docs.google.com/document/d/11k2EmhLGSbViBvi6_zFEiKzu... says, "TBD: how to avoid partitions? Need to work out a simulation of the protocol to tune the behavior and see empirically how well it works"

.. so they've gone for CA and forgotten about P.
Robots in human spaces can be done and, more to the point, the company I'm working for is doing it[1]. And there's the Google car too. It does require spending more on sensors than a hobbyist will want to spend and in our case it requires the occasional remote intervention when, for instance, someone leaves a box in the robot's parking spot.

[1]http://www.vecna.com/on-demand-delivery
Wipro has over 6,000 so far this year
I got some text to show by scrolling down past a bunch of animations and then scrolling up again.
"Does anyone know of any other websites like this with price tracking?"

PriceZombie?
I wish people would give more consideration to this (whether they are legally required to or not).
Yes, it's called social proof. If you're observant you'll notice that people use it everywhere. Of course, social proof doesn't mean guarantees.
Tools for HTML5 Developers
The article describes a way to avoid the use of 'new' entirely, but you can just as easily get the advantages of factory encapsulation without the use of Object.create.

var MyModule = (function() {

function OneImplementation() {}
function OtherImplementation() {}

function factoryMethod() {
if (foobar) {
return new OneImplementation();
}
else {
return new OtherImplementation();
}
}

return {
create: factoryMethod
};
})();

As long as the use of new doesn't leak out of the module you're getting all of the advantages. Upgrade to Object.create when you get the chance, but don't let that hold you back.
EU law functions via directives, which are implemented by governments into local law. It's a little different to the US federal system.

Those southern European countries do have direct control of their own finances. They could declare bankruptcy and start over if they wanted to. When people say they are 'controlled' by Germany or whatever, those people are in a lazy and misleading way saying that those countries preferred to get loans from other countries and submit to those lenders requirements rather than immediately make their spending match their tax revenues ... because borrowing is easier, politically. But that's still a free choice they made.

WRT wrongness, you seem to believe that any country which charges a lower tax rate than any other country is somehow immoral? You want a global government that sets a single tax rate for every person and company on earth? That's one way to avoid people playing jurisdictional arbitrage, but I don't see anyone arguing for that.
The nostalgia is strong on HN today!
In the US, federal law bars employers from forbidding internal discussions of salary and benefits.

http://www.twc.state.tx.us/news/efte/salary_discussions.html
If you're looking for something with AI then ros.org is a great resource. You can do a lot with a Kinect and an old laptop.
Avoiding the use of 'new' isn't overengineering, it's idiomatic JS.
This was long and meandering and beautifully written. I read the whole thing. Thanks for sharing.
I'd like to think a distributed workload model would help take the pressure off of needing to have the bottlenecks that come from #3. I imagine a valve like bazaar system - with groups forming spontaneously as the need for leadership arises - might work out.

The trouble then becomes figuring out who's qualified to chime in on certain issues - a free-for-all could mean anyone with a vested interest could form these groups and we lose the ability to put in checks and balances to help stop feedback loops due to mob mentality. Proving you even read the article in question could be difficult.

The number of people who were spouting outright mis-information over the obamacare documents was mindblowing.

Perhaps the first step is to reduce the scope of these laws and stop bundling everything together.
No thanks. This is how the stereotypical "starving artist", but it also sounds like a great way to burn out quickly. I'd rather work at an actual job for ~2 years and stockpile 20-30k in cash, then live like a normal (but still frugal) person during the initial startup build.
This article is so wrong I don't know where to start. Sorry.
It's dogmatic not idiomatic.
private citizens should never have their votes revealed, we do this for the simple reason that intimidation is a long practiced activity by those in power.

It is the reason why unionization drives are wholly secret on votes. However if you really really want proof, revealing those who supported a recent prop in California that revealed people's support when it was previously guaranteed private is all we need.

Take away privacy of vote is the same as taking away the right to vote.
Show HN: Pendo.io – A data driven platform for product teams
Because google could exist without their content to index...

On one hand they whine about Google's power and on the other they want the benefits too? Might as well complain about the enormous power of gravity over us and legislate it away.
Fear your subconscious, not tech: WIRED2014 talk
Yes: multi-day music festivals (very strongly); backpacking/camping vacations, where the routine becomes 'see new things, source food, find a place to sleep'; the first couple of weeks at home with a new baby; etc.

There is doubtless a term for this kind of dissociative experience. (It probably is 'vacation'; we've just forgotten how to take them properly in the Anglo Saxon world.)
Are there distributed data stores like this that are also resilient to intentional sabotage?

I've been looking recently at long-term digital preservation systems -- tools designed to archive large amounts of data for decades. This is the Library of Alexandria problem -- how do we preserve all this data we're generating against once-in-a-century disasters?

So this 2005 paper lists thirteen different threats to long-term archives: Media Failure; Hardware Failure; Software Failure; Communication Errors; Failure of Network Services; Media & Hardware Obsolescence; Software Obsolescence; Operator Error; Natural Disaster; External Attack; Internal Attack; Economic Failure; Organizational Failure.[1]

Fault-tolerant distributed data stores are exciting, because they solve a bunch of those problems off the bat -- media failure, hardware failure, communication errors, failure of network services, hardware obsolescence, and natural disaster.

They also help to address software failure, software obsolescence, and economic failure, because archival projects are always strapped for resources and it's great to rely on tools that exist for totally distinct, commercially-valuable reasons.

But that still leaves operator error, external attack, and internal attack -- burning down the Library.

Hence my original question: are there distributed data stores that can be configured to resist intentional destruction of data?

[1] http://www.dlib.org/dlib/november05/rosenthal/11rosenthal.ht...
Fort Lauderdale Charges 90-Year-Old, Two Pastors for Feeding Homeless
Very true but should you tolerate it? If it's unnecessary it seems like 'suffering' just to say you did.