skysight-inc/HackerNews huggingface dataset:
> ...with a replication factor of 10

RF 10 is insane overkill. There is probably someone out there doing it, but it is completely unnecessary for %99.999 real world deployments.

Getting back to your original comment, Azure persistent storage (or AWS, or Google) isn't giving you anything near RF10 * 2 DCs.
Fine idea if the codes are generated randomly for each person. Do not use the same card as someone else.

Or you could use something like (one of my side projects): https://www.wordentropy.org
This is a substitution cipher and it's not very secure. Consider what we can do if we compromise the Amazon password that's given as an example on the website:

sh(/J3HqAfQsu..u.rqf

Since the password came from Amazon, we know that the last 6 characters are "Amazon," which tells us that:

. = A
u = M
r = Z
q = O
f = N

Now we can start attacking the codeword, which are the characters between the 8-character "space bar code" and the website name:

AfQsu.

Using the letters we already know, we can determine that the codeword is:

_N__MA

It's probably a dictionary word, and we know that the blank spaces don't correspond to any of the letters we already know. According to the following command:

grep '^[^amzon]n[^amzon][^amzon]ma$' < /usr/share/dict/american-english

...the only possible codeword is "engima," so now we know that:

A = E
Q = G
s = I

Combine with another compromised password, and we're coming dangerously close to being able to generate a password for any arbitrary website.

Edit: I agree with the replies that this is an unlikely attack considering how passwords are typically compromised. And it's probably better than how most people choose passwords. But the website claims that this generates "very strong passwords," which is nonsense.
I saw this last week in the uk. It is (or at least was) a genuine widespread issue.
Chilling Effects removes itself from search engines
Just to offer a counter-point: I got about halfway through the book and lost interest.

I'm really happy for the author's success, and I don't at all think it's a bad book. But I found it to be basically pure "survival porn". I like MacGyver too, but I don't think I could watch a four hour episode of it, and that's what the book felt like to me.

The characters and writing are solid, but the constant peril and clever solutions just got tedious after a while.

If you "How is he going to get himself out of this?" is enough to keep you going for an entire book, you'll probably love it. But if you need a bit more than that, it may lose your interest.
Etudes for Programmers by Charles Wetherell
Is 'Etudes for Programmers by Charles Wetherell' still relevant? What should a developer starting their career be practicing?
Trying to link the kernel with the GNU ld script on page 12 of the PDF, I get this error:

ld:link.ld:5: syntax error

Not familiar with GNU ld script syntax, anyone know how to fix this?
... then I'm still doing it wrong. Got it.
As a Brazilian, replacing rice+beans with something else sounds unthinkable. I imagine asians who eat rice everyday would say something similar.
It doesn't seem that rare. The creators of Reddit joined YC with a pitch for ordering delivery food through your phone.
This is totally tangential to this discussion, but I thought I'd throw it out there in case it helps anyone.

The python-gdb macros are fantastic for debugging those painful managed-native problems one occasionally encounters. https://wiki.python.org/moin/DebuggingWithGdb I've used it to debug some really gnarly issues over the years. They're not perfect, but they're good enough to solve all of the problems I've encountered and used them with.
This is a lot like PasswordCard[0] except not free.

[0] https://www.passwordcard.org/en

I think I'd like PasswordCard because it's pretty freeform - just pick a starting point and a visual direction/pattern and copy letters from the card. But honestly I don't much like the idea of relying on a physical token if I don't need to. Almost losing my 2FA last year was a bit scary.
A research fellowship is not seed funding, though. YC doesn't "give" people $30k, it invests $30k in their business.
Thanks for the list. I'll bookmark it just in case.
> The "nightmare" described in this post is a joke compared to the depths some highly successful startups have gone through. Techcrunch wrote a bad story about me? Really?

From the narrative, it sounds like there's a causal link between the TechCrunch article and the startup forcibly being summoned to office hours to ask what the hell is going on. Which says more about YC/PG's policies than it does about the startup founders.
Does YC ever accept business / growth people or just "tech"? I ask that in seriousness, as my take - in my very limited time as a startup founder & employee - has consistently been that many startups fail due in part to an obvious lack of business sense and skills. I'm regularly surprised by the sheer amount of startups out there, many of which are funded, with coders and designers who have no damn clue how to sell.

"We were a solid team, a designer/developer combo." Is that a solid "build a business" team or just a solid "engineer the product" team?
I actually really like this idea. I guess if your attacker did get your password in the clear (bad encryption or whatever) then they'd basically have access everything right? I mean, the number of letters at the start is presumably fairly constant, they'd know the site it was for so they could then work out the "unique secret" in the middle right?

That said, there's a certain amount of security through obscurity I guess.

Still, for any of the sites I really care about I use two factor authentication. I'd take a mediocre password and 2FA over a strong password (But happy to be proved wrong ;)
It certainly looks like the tablet of my dreams. But I wish that FirefoxOS was under the hood, instead of Android.
There is no need to even break the codeword as it is the same for every site. In the above example say we want to guess their gmail password, it is probably:

sh(/J3HqAfQsu.?u.??

We have only three characters to guess!

OTOH this is only relevant for targeted attacks where the attacker has one password. This still protects you pretty well from bulk attacks (so long as the card is not widely used) and is miles better than re-used or poor passwords at little usability cost.
Not sure why the author didn't consider a fourth option when graduating from college:

4) Join the ground floor of a startup *as an early employee*

It would've yielded invaluable experience and a whole lot of personal growth, leaving him in a much better place to run a company years down the road.

At this point, I don't really think he's learned anything at all, and he won't learn much about running a company while he's galavanting around southeast asia humblebragging.
Yes indeed this sentence seems very wrong to me as well: The author seems to mistake entanglement for superposition. The former describes a quantum state that involves TWO quantum systems whose wave functions are "intertwined" such that you cannot write it as a simple product of the wavefunction of either system (a so-called "product state"), and which thus produces some seemingly paradoxical effects (e.g. the famous Einstein-Podolsky-Rosen paradox). Superposition, on the other hand, means that a SINGLE quantum system can have a wave function in which the system is in more than one possible state at once.

Or, in mathematical terms, here's an entangled state

|\psi> = 0.5^(1/2)(|0>|1> + |1>|0>)

If we would make a measurement of the first quantum state, we would project it to either the |0> or the |1> state. This would result in the state of the other system to be projected into either the |1> or the |0> state, respectively. So there is some strange, "spooky" action between the two seemingly independent states.

Here is a superposition state for comparison:

|\psi> = 0.5^(1/2)(|0>+|1>)

Note that it involves only a single quantum system, which has a 50 % amplitude in either of the states 0 or 1.

Wikipedia has some good definitions of entanglement and superposition:

https://en.wikipedia.org/wiki/Quantum_entanglement
https://en.wikipedia.org/wiki/Quantum_superposition
Then get out of your comfort zone. If you want to shake up your career, now's the time to do it. And nobody is going hand it to you.
Bar Marco Servers' $35K Salary to Replace Tips at Pittsburgh Restaurant
>there's no need to make an extra communicational

There is always a need to put in a little extra communicational effort.

You can't just go around hurting peoples feelings because you're in a small company and can't be bothered to not be a jerk
Phantom types aren't part of the language because they don't need to be. They're just empty types used as type parameters for structs, where the type parameter isn't actually used as a variable in the struct. It is more of a design pattern than a language feature.
The return of turtle.  Growing demand for Logo programmers
Finding gravitational n-body choreographies
Presumably there will be many more hits than URLs, i.e. the URL table will grow much slower than the Hits table.
With the codeword broken, we can narrow the gmail password down to a single unknown character!

sh(/J3HqAfQsu.Qu.s?
Assembly Project: Perfect – Send Postcards from Anywhere
Hey everyone, just put up one of my side projects, Perfect, on Assembly! Could use help building out features and making this thing generate more revenue. Would love your ideas and assistance.

https://assembly.com/perfect
Turtle is back! http://en.wikipedia.org/wiki/Turtle_(robot)

The professionalisation of drawing in the sand. I can't work if this is a good thing or a bad thing - aren't sand drawings meant to be done with a stick by children?

One thing for sure is that you'll need to sharpen your Logo http://en.wikipedia.org/wiki/Logo_%28programming_language%29 programming skills in future.

Here's some historical turtle robots: http://images.google.com/search?tbm=isch&q=turtle+logo+robot
It's not identical, but it's not like the NSF "gives" people $30k of the taxpayer's money just as a gift ether. The goal is to invest public money in future researchers. In both cases there's a clear intent that you will use this as seed money to jump-start a project that will achieve the funder's goals (monetary return and positive PR for Y Combinator, production of research & PhDs for the NSF GFRP). But there's no requirement that you continue to do it indefinitely, and no ban on bailing out if you decide it's not for you after spending $30k of the funder's money. I don't see this as any more morally binding in the Y Combinator case than the NSF case.
I share your impression of the tone. It's probably due to the text being written by a 21-year old. At that age hardly anyone has a fixed personality, but displays kind of fluctuating character traits. At least I think that's what leads to the impression you so accurately described.
Just use random words. Memorable passwords don’t have to be weak. Five random common english words are already very strong. Just make sure you don’t pick the words by hand.
Also produced using the same code:

Ask Hacker News Weekly: http://www.daemonology.net/hn-weekly-ask/

Show Hacker News Weekly: http://www.daemonology.net/hn-weekly-show/

(The reason these are weekly rather than daily is volume: A daily top-10 for /ask or /show would include almost everything.)
IO has been around for a while now, I remember it got some press back when _why was still active:

http://viewsourcecode.org/why/hackety.org/2008/01/05/ioHasAV...

I've played around with it a bit over the years: it is a fun little language.

Edit: fixed typo.
They seemed like good guys who had no sense of wherewithal. I liked the FanHero idea, it seemed pretty good.
New App turns mathematics into a supercharged social experience
Very interesting read.
I often try to educate people telling them that the social network gimmick is just that : a gimmick in a marketing ploy. A network of computers is social by nature of the users being social beings. Using computers in a network was already social when I got in in the 1990's. The social part is not from facebook or whatever the current popular thing is, they try to get hold of it for their own profit and it's sad.

I'm looked at weird when I say that so called social networks feature regressions from what was possible then. Reading this article, I learned that even in the 1990's we had made a few steps backward from the previous decades, I mean what happened to the simple feedback channel offered by TERM-comment ? How come this is not a standard feature ?
Today We Were Featured on Beta List  Feedback Please
Good news, thanks. Can you point towards any types or brands of high-CRI LED's? Thank you!
1) I didn't do a good job explaining this. You are right that if you want to materialize an object during deserialization you need to know a schema at build time to generate your class. But the crucial things is, and this is true of all similar frameworks, you don't know the schema of the payload at that point. One big reason you use something Protobuf, Thrift or Bond is to get forward/backward compatibility. What this means in essence is that deserialization is always mapping between schema you built your code with and schema of the payload. There are two common ways to do that mapping: (a) payload has interleaved schema information within data and you perform branches at runtime based on what you find in the payload (this is what Protobuf, Thrift and Bond tagged protocols do) (b) you get schema of payload at runtime and use that information perform the mapping (this is what Avro and Bond untagged protocol do). The latter case is particularly suitable for storage scenarios: you read schema from file/stream header and then process many records that have that schema. This is the case where having ability to emit code at runtime results in a huge performance win: you JIT schema-specific deserializer once and amortize this over many records.

2) You can do both. You can also do type safe transformations/aggregations/etc on serialized data w/o materializing any object.
Through some very strange twists of fate it seems to me that bot programming and starting a business ended up being "fashionable" things to do. And obviously as all fashionable things there's quite a lot of people that want to ride the hype train.

Statistics tell us that there will always be a certain percentage that are on the train just for the hype.

My 2 cents: getting on the train just for the hype is a clear indicator that you do not have a very good knowledge of yourself. Internal, time-tested, hard-earned kind of knowledge.
You'll have to forgive me for tangenting this a bit, but yours and my sister posters mulling prompted some mulling of my own.

While I can certainly say I've gained the apprehensiveness you speak of, I realize I've gained it for systems at scale; centralized or otherwise. In fact, for badly engineered distributed systems, where you previously had one problem (getting modules to communicate) you now have N; (getting modules to communicate over potentially unreliable channels; which may themselves have additional hidden points of failure and varying failure modes/symptoms, etc etc). I'm being a bit high-level-hand-wavy with this, but it seems to get the point across (I hope.)

My takeaway being, I'm curious if there have been people who have addressed this potential conundrum (and if you even see what I stated as a problem at all.). Data to show that systems are more/less reliable due to certain failure modes under different architectures would be nice, but that seems like a MASSIVE undertaking to do if you have any desire for the data to be meaningful; if only that it may be testing the competency of the team rather than the actual underlying relative difficulty. (although if done broadly enough maybe that would still provide useful guidance? I'm rambling at this point, but some thoughts.)
This makes quantitative easing so much easier!
It looks like Bill Gates also enjoys eating sh*t (besides drinking it).
When you mentioned discourse serving 19k req/sec, does it hit the ruby stack at all? If no, serving 19k req/sec of cached HTML doesn't seem that impressive. What am I missing?
This is how you review bike locks.
No, they were arrested accused of blowing up small bombs in ATMs. Extracted from the ruling (http://www.elperiodico.com/es/noticias/sociedad/prision-para...)

"From the investigation of the coordinated anarchyst groups, it is derived that their members might be the alleged authors of several attacks with home made explosive artifacts in all the national territory"

Whether they are guilty of those charges or not, is of course a completely different matter.
Cronitor.io: Monitor cron jobs, daemons and almost anything else
You can pick a great kit from MightyOhm that has the tube and supporting electronics to power it. It outputs data on a serial connection so it's easy to read from an Arduino. Check it out here: https://www.adafruit.com/products/483

It's best for detecting gamma rays and really can't detect alpha or beta rays, so for example a smoke detector's americurium source won't really set it off but old uranium glaze cookware will drive it crazy. Not sure about x-rays but I bet it would catch them since they're pretty high energy and penetrating.
Nintendo Officially Exits Brazil
Slightly OT- I'm working with data sets that might change, but not often if at all, which are provided by Elasticsearch. I'm processing the raw data in Flask (API), munging, joining, and dropping what I don't want going out to the world.

I've been toying with the idea of using something like PB, Cap'n Proto, or now Bond to define and track schema changes and centralize marshaling / serializing logic. I'm not concerned about having RPC. Does this sound like crazy talk? Anyone else happen to track schemas agains schemaless data stores?

(I also like the idea of not having to ship JSON everywhere if I don't want to.)
10 best websites for entrepreneurs
You sound like a web developer who thinks that 99% of cryptographic problems have to do with a web application discriminating between sessions.
(I'm just guessing about the context of your comment since you didn't provide any.)
"while some unemployed people selling street magazines now also accept electronic payments."

This was hard to grasp when I saw it IRL for the first time. My local candy store and deli[0] both accept Mobile Pay and it's a strange thing to witness. Imagine the NYC delis, usually owned by immigrants and minorities who couldn't care less, suddenly be on the frontier of adoption of a cashless system. It's that user friendly. And the nature of the businesses (selling cigarette singles and imported sodas) mean you do have a suspicion of it being off the books..

Another anecdote, I just started a record label[1] and for our first show, we accepted cash and Mobile Pay. We're small, it was in a private apartment, but so many people do not bring cash anymore we basically had to accept MP.

[0] Hvis nogen fra Danmark læser dette, så er det Palmen ved skt. hans torv, og kiosken ved Blågårds plads... Sikkert mange flere.
[1] https://scalatapes.bandcamp.com/
Here is a fun talk given by the op in 2011: http://vimeo.com/27653912

The original presentation was given in 2010.
Can I format links nicely here? It's a PE4L by hwtools.net [1]. And no, no BIOS fiddling was neccessary. Actually I just hot-plugged the thing first time, right into a running Windows 7. Windows Update went and downloaded the NVidia driver, required a reboot, an has run mostly flawless since then. I even see the NVidia logo in Lenovo's Energy Manager, suppose it thinks it's on an Optimus setup. Hotplug in rarely works, hot-plug out does work. I get a the usual eject icon in the systray, just the way you'd safe-eject USB devices.

I haven't even tried this in Linux. The EGPU is one reason why I chose to keep Windows native, and Linux in VMware Player, not the other way round. (The other reasons are Steam and some obscure CAD and PCB layout software, so I'm not going to try any time soon.)

[1] http://www.hwtools.net/Adapter/PE4L%20V2.1.html
I realize the actual nightmare is that after a few months of all-night coding the founders didn't launch the next facebook, but still:

> We had much bigger problems than the piece, to be sure, but launching with an article that roundly mocked us was one of the final nails in the coffin.

Hint to startup founders: It doesn't matter if Techcrunch writes about you or what they write about you. If you are letting that affect your perception of your company in a large way, you are doing it wrong. Though to Techcrunch's credit, in this case they really did a good job of reporting.
I'm not sure that we're talking about the same thing.

Let me try restating my point: there is no heritable trait that makes you a muslim, a buddhist or a freethinker.

What people choose to believe is ultimately on them. Uncritically accepting what your parents, friends and countrymen have to say is still a choice.
I heard something about Io being used in rendering pipelines for a film studio (Pixar?).

The '7 languages in 7 weeks' book exposed a lot of people to Io, and it really helped me understand JavaScript better at a time when most of the tutorials out there were pretty confused
This article makes me miss Learnlink, Emory University's bulletin board and student email system from the mid-nineties to 2012. It was still going strong when I graduated in 2007. There's something magic that happens when everyone in a community is using the same service. Even though students come and go, a culture develops.

There have been at least a couple replacement attempts, but I don't know if either have caught on.

https://scholarblogs.emory.edu/emoryit/2014/06/20/learnlink-...

http://osls.emory.edu/student_orgs/community/ll_to_community...

http://www.emorywheel.com/emory-bubble-launches-aims-to-repl...
It's vulnerable to a known ciphertext attack, yes. But the assumption of password usage is that the password itself is never stored - the ciphertext of this cipher should itself not be available to an attacker. An attacker looking to bruteforce a compromised file of passwords is going to struggle to figure out that your password is sh(/J3HqAfQsu..u.rqf. Even if they do find it, what would tip them off that it was generated by a substitution cipher, rather than a random password generator like LastPass? The fact it ends in a letter sequence that follows the repetition pattern of AMAZON? I think that's quite a stretch.
Yeah, it is super frustrating that you can't get a reasonably priced TB»PCI adapter to get your son's MacMini to play Minecraft without lag.

Crazy limitation of a good interface.
They don't have Russian available yet* but check out https://www.duolingo.com

*though it will be coming soon according to https://www.duolingo.com/comment/2175794
Bets for Today
It's not really a problem so much as it's not doing what they think it's doing. 256-bit block-size Rijndael might even be better than 128-bit (AES). I don't know.
I think you misunderstand how Bitmessage works. It doesn't use a blockchain. It's like alt.anonymous.messages, but with a Bitcoin-like broadcast protocol

http://www.quora.com/What-is-Bitmessage-and-how-does-it-work
Putting aside September 11th (which would not have been prevented by x-raying vans), there have been zero actual bombings in New York City since 1993, just one pathetic attempt. And very few other incidents.

It's not a city that lives under constant fear of terrorist attack, and as such I wouldn't expect to see invasive measures like this except in response to a very specific threat.
YC is supposed to help with things like that. They teach techies the business side of things and I would imagine they'd say "you need to hire someone to do sales" if that's what they needed. In this case they said from the start something like "we're concerned about your product idea" which was their primary problem. I suppose having someone with sales smarts may have helped them figure it out, since their idea was to help you-tubers sell stuff apparently.
You can also have 1 GiB pages in 64-bit mode.