skysight-inc/HackerNews huggingface dataset:
HTML5 is a mix of XHTML and HTML4, but with new features. Its syntax ressemble more XHTML than HTML and as thus it is more XML compliant, although you can ignore strict syntax [0]. HTML5 is both XHTML and HTML4 alike, so it is no surprise that is has taken over the market.

Note that I don't especially like HTTP/2 and believe that a hack like SPDY should not make it to a standard. More time and care should be made to make a central protocol like HTTP (central in that it is used alot).

[0] Source: http://www.techrepublic.com/blog/10-things/10-things-you-sho...

>Instead, the HTML5 spec is written so that you can write HTML5 with strict XML syntax and it will work
Here's a link to those machine learning services for those who weren't familiar with them (like me): http://azure.microsoft.com/en-us/services/machine-learning/
This is the kind of title that I would edit. The article is about how the National Resident Matching Program will use an implementation of the Gale-Shapley algorithm for matching medical students and residencies. The title makes it sound much more significant than it is; virtually all of us "put our future in the hands of an algorithm" countless times every day. Everything we do that leaves a trace in a database somewhere will affect our future to varying degrees.
yep, just 2 columns
Chrome to Drop SPDY Support in the Coming Weeks
The first column is username, followed by a tab, followed by the password.
Why being different pays: The Prius as status symbol
Good article. I was at first taken aback though by the negative comment in the second to last paragraph about the book being out of date. But, the book is a little out of date.

I am mostly programming my current passion project in Clojure and Clojurescript, but, I shadow my project with a version in Pharo. I love the environment for experimenting and the visibility to what is going on in a computation is a refreshing change from trying to figure out when something goes wrong in my Clojurescript code.
Also interesting, how features of a username might correlate with password strength. Who do you think uses a stronger password, someone with the username "carguy551978" or someone with the username "w1ntermute"?
_ everyone frantically searches for their own usernames _
The simplest possible way to prevent brute-force logins
The article concerns what we can determine about the FDAs process when it find problems in a clinical trial. As an article addressing that issue, it appears (after a brief look) to be pretty decent.

What it isn't good for is figuring out what percentage of clinical trials have problems found in them.

"Fifty-seven published clinical trials were identified for which an FDA inspection of a trial site had found significant evidence of 1 or more of the following problems: ...." But 57 out of what?

The opening says, "Every year, the US Food and Drug Administration (FDA) inspects several hundred clinical sites ...." Then it notes that the data were gathered from FDA documents gathered over a period of 5.75 years.

Picking a number out of the air, say the FDA inspects 500 trials each year. We would expect 2875 inspections over 5.75 years, and 57 is less than 2% of that. I would call that a low rate.

OTOH, that "2%" figure is based on some unfounded assumptions. I don't think this article tells us much at all regarding the reliability of scientific publications.
Ignition! was a complete waste of an evening or two, but quite enjoyable. It did give me an appreciation for what to expect when rocket people talk about monopropellants. And the whole thing about flourine compounds. And an appreciation for just how safe and friendly current H/lox and Kero/Lox rockets are compared to the alternatives.
Wow, this is one of the first computer games that I played. It was running on an HP minicomputer connected to a teletype device with a paper printout.
>How long do companies have to utilize the $500K?

3 Years
Fund your company from the command line
Fun!

$ export LC_ALL='C'
$ awk '{ print $2 }' 10-million-combos.txt | tr 'A-Z' 'a-z' | sort | uniq -c | sort -nr | head -n 20
55893 123456
20785 password
13582 12345678
13230 qwerty
11696 123456789
10938 12345
6432 1234
5682 111111
4796 1234567
4191 dragon
3845 123123
3734 baseball
3664 abc123
3655 football
3330 monkey
3206 letmein
3136 shadow
3126 master
3050 696969
3002 michael

Edit: I used Wordle[1] to make a wordcloud of the top 1000 passwords: http://i.imgur.com/FImcPiG.png

[1]: http://www.wordle.net
I was first exposed to mathematical induction in, I think, first-year algebra. Although I was able to struggle through the work, I didn't really recognize its power, and thought the whole thing a bit pointless. Blame either my young brain or mathematics education.

A couple years later when I started to take programming more seriously and was exposed to recursion, I did recognize the power there pretty quickly and made a point of getting good at thinking that way. But, I didn't see the link then, between mathematical induction and recursive functions. A few years after that, when I was exposed to mathematical induction again, it seemed like such an obvious and powerful tool, and I was amazed that I didn't recognize it for what it was on the first go around.

There is a saying:

when programming recursively, think inductively

...but the inverse is also true:

when reasoning inductively, think recursively

If you, or a student of yours, or your kid, or whatever, are having trouble with either concept, I would encourage you to study the other one. You probably can't truly understand one without groking the other anyway, and insights gained from the study of one will apply pretty much directly to the other.

This was an enjoyable read. Thanks.
Get 100GB of OneDrive storage for free for 2 years(Bing Reward)
A software system for composing, validating, and sharing form contracts. All four flavors of SAFEs are currently on the API server, including SAFE-MFN, SAFE-cap, SAFE-discount, and SAFE-cap-discount.

I've also blogged about the system here: http://writing.kemitchell.com/2015/02/09/Common-Form.html

Much appreciate any thoughts or feedback!

Oh, and you guessed it: I am not your lawyer. Please get a lawyer. Especially if you don't know you need one.
Funny, I think it was 60 minutes which had a story about Cuba that mentioned there was no internet in the country. Reporters seem to get a lot of facts wrong.
If you're using a password manager and thus -- I hope -- using a different password for every service, it doesn't really matter if one service gets compromised. The compromised service in question will (hopefully) force password resets for all affected users, and the compromised password is useless elsewhere.
You're doing it wrong if you have a favorite password. Use a password manager; there are more then a handful out there that are multiplatform and easy to set up. If that isn't your thing then there are plenty of techniques for generating unique, easy to remember passwords.
Yes it will be the future and you'll know it's really here when we all stop talking about it.

Machines notifying their owners or service providers that they are empty/full/broken is really one of the most basic IoT ideas. The thing that will really make it take off is going to be something that we haven't thought of or currently thing is impossible.

The biggest issue that still needs to be overcome is the security. Sure, you can get it to be as secure as anything else today using traditional (D)TLS and certs, but some of these devices are have a (shelf) life of over 10 years. What happens to all the devices on the shelf (or just not turned on) if your CA was diginotar? Either you keep your now insecure cert so that devices can still connect to download the new cert or you just remove it and force everyone to do a firmware update manually. Do you really expect your grandma to update the firmware on their smoke detector? If you just leave it, how long do you support it?

All that assumes that you're okay with the wide variety of privacy issues that come with having all this data streamed from your house (or business or whatever) up into someone else's servers. I think another thing that is going to be important is a "local iot", none of your data is able to leave a small box inside your house except for small bits of things that actually need to, like notifications or alert states. But, again, how do you solve the security in this, especially if you want compatibility between different manufactures?
Sites require you to sign up but it won't matter much if someone gains access to your account on them. Those might as well share a password. Same with sites that share trust buckets like [goodreads, yelp], [facebook, twitter] etc.

In the real world though just memorize separate bank and email passes and use a password manager w/generated passwords for everything else.
Show HN: Making of an HTML5 cube timelapse
What about research to determine to what extent usernames with words in a certain language will tend to use passwords with words for the same language? (More generally, is there any connection between the bi- or trigram distribution on usernames and the one on passwords? In fact, do they just look the same, or could you tell given a string whether it's more likely a username or a password?)

Do usernames of people with weaker passwords have something in common? How do they differ from people with stronger passwords? In France there is a practice of picking names like "foobar42" or "foobardu42", where "foobar" is a first name and 42 a "département" (country subdivision) number, which I would associate to casual users. Here I could quantify whether people with usernames of this form tend to pick weaker passwords. Insert your favorite prejudice here about lame and skilled username patterns, and quantify how the password diversity of this group fares in comparison with others.

Is it true that the most common passwords were associated to usernames that were also common? Does username frequency correlate with password frequency? Are there more people with unique usernames or people with unique passwords?

In some countries it is customary to annotate usernames with the user's year of birth. Filtering on such usernames could give insight about the correlation between age and password quality, or identify which passwords are more or less popular given the user age. You could try to check correctness of the filter using the fact that some of those people may have used their birthdate (including the year) as a password.

If a seemingly rare password in the dataset only occurs for two distinct user names, then maybe those two user names actually correspond to the same user. Do such usernames have a low edit distance? Could you use this to learn general rules to determine, given two usernames, whether they seem to correspond to the same person?

I just gave those off the top of my head, and I'm not at all working in this field, but I'd have no trouble imagining interesting applications for this data that would not have been possible with the passwords alone.
Who's this "we" you're talking about?

I'm not sure if FOOF or ClF3 is worse. I'm actually leaning towards ClF3 since people have actually made large quantities of it.
> As a final note, be aware that if your password is not on this list that means nothing. This is a random sampling of thousands of dumps consisting of upwards to a billion passwords. Please see the links in the article for a more thorough check to see if your password has been leaked. Or you could just google it.
> Average monthly wage in Cuba is $17

But there is a subset of the population earning good tips working in the tourist industry and receiving funds from family living outside of Cuba
The worst part is it somehow started out as a patent PROTECTION organization and then somehow morphed into a patent troll. Absolutely ridiculous.
It doesn't require a mobile phone. A client on your desktop can handle the authentication.

There's also a mechanism[1] to change your master key should it become compromised. Looks like a huge drawback is that it requires you to store an offline "Identity Unlock Key" somewhere.

[1] https://www.grc.com/sqrl/idlock.htm
Totally readable in both Chrome and IE and I bet it works fine in Safari. Firefox's pdf viewer is apparently worse than being just criminally slow.
What about SSL Termination? Would it still work if I terminate?
The website is beautiful.

Please provide a comparison table with the other MV* frameworks, or a video that isn't 27 minutes long, so I can get a quick overview.
I don't think anyone, mathematicians or functional programmers, have a problem with mutation [0]. They have a problem with names suddenly changing without being too explicit about that fact.

In particular, mathematics certainly doesn't prohibit you from using whatever kind of notation you like to explain your concept, but it has suggested a certain primacy of the notion of a (pure) function. The reasons are both ones of mathematical "elegance" (whatever that means) and pedagogy. They're a fantastically important fundamental building block.

Mathematicians would never claim that pure functions are the only thing around, but by and large they'd assume that's what you were talking about given no other indication. Furthermore if you introduced something new (say something with a notion of mutation) then you'd merely be obliged to explain exactly what that new thing is with sufficient formality so that the reader can be assured that its behavior is completely reasonable.

All of this holds identically for functional programming. The only additional challenge is that FPers are accidental intuitionists so you can't merely name the behavior of a new kind of notation but must actually exhibit an interpreter of that new notation into more common notation. This is significantly more heavy-handed than most mathematicians would do.

[0] Or any other side effects. The whole argument is parametric in your choice of side effect.
Pick up your smartphone less often. You might think better
From the law quoted in the article, wouldn't it be illegal to simply make a course about computer security?

The teacher willfully (and knowingly) teaches the student about "possible means of access to a protected computer."

Note: According to http://www.law.cornell.edu/uscode/text/18/1029 teaching is defined as trafficking information ("the term “traffic” means transfer, or otherwise dispose of, to another, or obtain control of with intent to transfer or dispose of; ")
Major smartphone makers: implied profit per phone
Open House 2/12/15
I bike to work 1 hour each way, five days a week. (15 miles per day, 75 miles per week) It forces me to exercise (need to commute) and keeps me awake and fresh at work. I also eat right.

Ask yourself, do you want to get fit or get ripped for the ladies? They are really very separate things.
$25 Sign Up Bonus
The truly best voice recognition pretty much has to be hooked up to an uber-AI. Gaining a friend, yes.

Imagine if they could program things into it that would make your overall life better by slightly altering your behavior? For instance, if you asked "Siri" to remind you every 40 minutes for a ciggarette break, I can imagine her slowly weaning you off, etc.
Anya Pogharian invents $500 dialysis machine with at-home potential
It seems very useful for research and also practical uses, like how about a REST API with this dump? get <password> will not only return true if it exists but how common and how weak it is, or will return a false for unique. Is there such a service out there?
or maybe even "you can get computers to figure things out, and it's cool when the computer reasons something in a way you hadn't thought of"
Go make it! :)
In other words, supposing that this data is representative of most peoples' password practices, just trying these 20 passwords gives you a ~18% success rate for any username.

And... dragon. That's an unusual password to make the top-10 list. I think this might be a somewhat skewed sampling.
Thanks for the experience report! I'll check out your repos.

To be honest, I was mostly thinking of Haskell when I wrote my comment. (Semi-) Literate programming is quite popular in their world, and Haskell gives you great flexibility out of the box to order your code. (And even there, having a more flexible order can help, but it's not as urgent.)

qznc makes a great argument for weaving different languages.
I think it was challenged in this case. Page 6 of the verdict form asks if the '142 patent claims are valid, so presumably the defendant put on an invalidity case. (And it would be rare not to.) The prior art would have to pre-date 1997 and practice each element of the asserted claims, which recite some detail in addition to using "business rules" to distribute email. (Usually, it is this detail that makes the difference.) If anyone is curious, it would be instructive to pull briefing from Pacer, and look for any motions for summary judgement of invalidity for a (relatively) concise summary of that part of the case.
Ok, I read the article and the Cliff of Confusion is what I thought it was.

Besides coding, coding, coding your own projects (which I'd prioritize), you might also try answering questions on StackOverflow for your chosen stack.

Don't be surprised if you're unable to do so at first, especially in burgeoning technologies with many developers competing to establish their reputations, but this (often) forces you to dig into the source code, spelunking your way through and--hopefully--learning good style and architectural practices while coding smaller solutions with a shorter path to completion versus monolithic projects.

See the Node standard library, for example. (Also the recipe-type books focus on specific, more practical solutions, instead of long-form tutorials.)

If that doesn't suit you, keep trying other things--there are many sort of "katas" you can do.

P.S.: I thought asdfppp's (now dead) comment was helpful.
Snapchat's Discovery feature using gigabytes of background data on Android
Hey Jay - yes we're still accepting applications. You can join us part-way through.
We haven't yet, but if you shoot us an email we're happy to talk more about your situation.
In a way, it's like investing in YC startups then. Give a sizable but not unbearably so amount of money to a large set, hope that statistically these companies have a chance to experience hockey stick growth, and have that one black swan cover all your costs across the whole group.
I'm not sure how you claim to be the authority on 'CS speak', but it's a sufficiently blurred line here, for reasons I clearly explained and which you seem unable to understand.
Emscripten/asm.js can use static information to generate Javascript which can be compiled to native code, before the code in question is run, aka Ahead of Time.
> It is starting to really annoy me when powerful countries like China and my country, tha USA, throw their weight up against companies just doing business.

Patents only exist because governments offer companies a framework to have government-backed enforcement of a property right. If Qualcomm want to do business without government interference, let them go without copyright, trademarks, and patents.
ms mea
Probably `virtually no' internet.
It makes equally little sense to me, but "dragon" is routinely high on top password lists.
Bitchcoin, a virtual currency backed by artwork
Can recommend. He and I have worked together on many open source projects, and drunk beer together.

He was one of the people I was thinking of as "part of identity".
PairColumbus has forkable web development challenges that you can work and then submit for code review.

https://github.com/paircolumbus/Welcome
Hey Tony! We're starting to work on this too - check us out: hackerparadise.org
Sick, and tight as well. Interesting to see that this kind of data surface too often -- either no one is doing it or they're playing it close to their chest.
>What's your password?
Hahaha sure if I did not had enough side projects of the side projects of the side projects ;)
SEEKING WORK - Remote (Portland, OR next month)

I'm a full-stack developer with more front-end experience than anything else. Angular.js, backbone.js, and lots of other JS work. Mostly worked with python back-ends and node.js. Got laid off last week with 40% of the company. Going to travel for a while and looking to work while on the road.

Resume: http://www.sendsteven.com/resume/
GoDaddy is about to buy Nodejitsu
> Of course, at some level this isn’t very different from what compilers have been doing for ages, if we consider the source language program to be the specification, but when we’re doing synthesis the connotation is that the specification isn’t directly implementable using standard compiler techniques.

I guess compiling lazy functional languages was synthesis at one point, too, before people really figured out how to do that efficiently via eg the tagless spineless g-machine.

I wonder whether synthesis is like AI: whenever we understand how to do something, like play chess, it's no longer AI.

EDIT: Comments on the site delve into that very topic.
Flickr Camera Roll
There is a battle for control of the hub (server) - the thing that all of the connected IoT devices in your home talk to. This involves the hub hardware and also the software and protocol used to communicate with the IoT devices.

http://www.cnet.com/news/smart-hubs/

http://www.theverge.com/2015/1/5/7497811/samsung-smartthings...

http://www.eweek.com/pc-hardware/dell-sees-pcs-as-hub-of-iot...
Thanks for sharing. Can the SPDY frontend only be tcp based though, not http? The reason I ask is because my setup does all the routing (path and subdomain based) with http frontends.
Looks like if you know someone called Michael, chances are that you need to talk to him and his loved ones about password hygiene...
Id like to point out, that if they are making a decent wage it's almost certainly illegally in context to Cuba's laws. (My wife is from Cuba, she has many of her family still living there)
The most affordable Android controller ever
I feel like most of those research questions could be answered if it was a "username -> password strength" mapping, in addition to a hash to study duplicate trends, rather than just "username -> password". Obviously there is no objective ranking of "password strength", but a decent approximation could be provided.

There are serious risks to having your username and password in a public list. Yes, all of these usernames and passwords were already technically publicly released, but to a lazy and ignorant script kiddie, finding or even being aware of those lists can be outside their grasp.

By aggregating everything into one list, you 1) increase the search engine visibility for all credentials, which means someone Googling the username of, say, an Internet commenter who pissed them off may find a plaintext password they could use to impact the person's life with much higher probability (I work in information security and have seen that happen on many occasions), 2) encourage script kiddies and fraudsters to spend time working through the list to find working accounts that other criminals have missed in the past decade, and 3) undo any work that paste sites like Pastebin and file sharing sites like Mediafire have done to remove copies of the database dumps. 1) may not apply if it strictly remains a torrent, but it'll probably be floating around public paste sites within a few days, which would likely mean search engine visibility for every username on it.

If even 0.01% of the users on this list have accounts compromised due to its release, then I don't think that cost justifies the research benefits relative to a more redacted version of the list.
> Inventors need a way to protect their ideas.

Or you could negate that premise?
This one? http://youtu.be/0zHev9iM8kU?t=20m26s