skysight-inc/HackerNews huggingface dataset:
What he saying is this: he knows a grand total of 0 people whose accounts have been hacked because their password was too simple. It's almost always something else. Yet password management only seems to become more complex and cumbersome over time.

And it's not even debatable that major apps, sites, and operating systems ranging from Google Maps to Firefox to iOS have grown suckier and suckier over the last few years. This isn't old-man-yelling-at-cloud stuff -- it would easily show up in usability studies, if the companies involved actually ran valid usability studies. When I encounter the same daily frustrations as my non-computer-geek friends, something's wrong. That never used to happen.
thanks for the explanation. but can't they encapsulate proprietary extensions in the message data itself?
What the CIA didn’t want Americans to know
YouTube Ditches Flash, and It Hardly Matters
This presentation covers cameras in NY:
https://www.youtube.com/watch?v=dNZrq2iK87k
> No company is all bad.

I think there are a few that are. I see very little good in a company like Philip Morris. They manufacture a delivery system for an addictive drug that, as a side effect, results in countless cancer deaths.

I couldn't possibly see myself working for a company like that.

OTOH under the right circumstances I'd work for Verizon. Their evil is venial compared to merchants of death. But a man's gotta eat, and that's why we prostitute ourselves out to these evil behemoths. And why we rationalize that we're "just trying to do the best job we possibly can".
I love New England. I'm an urbanite and briefly had the pleasure of living in Boston. I love walking through ancient streets in Europe, Turkey, and other lands. I'm not a fan of the lack of walkability of Houston and some other things, but one of my chief joys in living here has not been old historic areas (which we hardly have) but rather the amazing mix of people who make the city such an interesting place. I often want to be somewhere else in the world but since I can't always be gone I frequently thank God for bringing the world to Houston! With over 90 languages spoken here it's now the most diverse city in the country, so I can assure you there's plenty of soul!
>> "I hope for the US's sake that this is not the model of urban development they herald as the future..."

It is indeed the model of the future. This fact makes me as an American very sad sometimes.
Any reason not to put affiliate strings on your iTunes links? Didn't spot any when I looked.
No, but I do have tar -czf whatever.tar.gz, right?
Also, everything Jeff Bezos half-jokingly predicted about drone delivery services will come to pass... through the efforts of drug dealers-turned-venture capitalists.
No, of course you shouldn't downplay your age. If such prejudice exists, you are perpetuating it by downplaying your age.
Companies do have recourse. It's called treating your employees well enough that they don't leave.

Except one person is part of a team that produced the IP. So they would always have access to IP worth more than their salary (since salary x NTeamMembers must be <= 100% of the IP value).

So even if the team members were paid every dime of the value they've created, a single person would always be able to earn more by stealing IP/trade secrets.
Minilek's an algorithms professor now
> there's too much demand for #! for regular hosting to be viable

That is exactly why sourceforge and other (free) mirror services were created...
In fact there are Linux ISO installers being hosted on sourceforge right now.

> I feel bad for you if you work in a place where the powers that be are fine with you downloading a distro via HTTP or FTP but not via Bittorrent.

That is a loaded comment - and I'm not really sure if you are trolling but...

The company did have public mirrors for the popular distros so that wasn't an issue. FTP access was restricted.

However, I would be VERY surprised if bittorrent is allowed any serious company. I worked at a place where new management wanted to open up everything - with strong recommendation from the netadmins to not do that. The netadmins were ignored, forced to open up everything and people started bittorrenting copyrighted material and got letters from MPAA/RIAA (which was rather funny because everything was logged on the firewall so you could see who was doing it...).

I won't argue that bittorrent can be used for good things, however, due to the negative stigma and general stupidity of people most sane places would block it. Ignoring the fact that it's a bandwidth suck...
So far I like my Echo. I am looking forward to future enhancements that will connect it to other apps and products. It is worth 100 dollars but not worth 200 dollars.
40 years of COBOL and C++ has some signalling issues

Today is the first time I've seen C++ mentioned alongside COBOL. Today is a dark day...
I meant that there cannot be a reasonable OTR implementation for email. You can stop using email if you want - I love it, as the last vestige of useful decentralised service on the Internet (I run my own email service, and many organisations do too). You can encrypt your email -- but not with OTR. S/MIME and gpg/pgp do work.
Tax and Identity Fraud are not anything new - but the way they are accomplished has changed significantly.

Sure you can physically intercept mail - but there is a huge difference in magnitude. I wager you could not in any practical way intercept millions (or even thousands) of paper records without being traced.

That's why these poorly protected digital records are such a gold mine.
Show HN: Paragraph - Dropbox Based Comment Store
Decryption can require several servers to participate rather than one - don't allow for a privileged user on one server to have an easy path way to access and escalate on another server.

From the way it looks, the security precautions they are failing at are so trivial that most developers probably have more secure personal servers / computers.
hi,
i would like to support fo this cause remotly from india
regards,
vijendra singh
Skype ID:viju.s0731
Mobile:7049276421
The DirectX 12 Performance Preview: AMD, Nvidia , and Star Swarm
> I'm sharing part of my code between server and client

How? And why is it a problem with node but not iojss?
> A lot of dodgy things like that going on in the 'jing.

Indeed, like Gutter oil [0].

I really wish I had read that article prior to my trip to China.

[0] http://en.wikipedia.org/wiki/Gutter_oil
App for identifying objects
And then he proved that black is white and promptly got killed on the next zebra crossing?
First of all, I have never... and I do mean _never_ had a recruiter ask me for my birthdate. I've been in the industry for 20 years now (not 40, congrats on almost hitting THAT milestone!), so it's not like I just have low exposure.

Secondly, my advice is to do nothing special. Yes, filter your resume for things you think the company would be interested in -- you would do that regardless of your age. In general a one-pager resume is greatly appreciated by everyone. If it comes up that you've been around the block more than most, fine. You don't want to work for companies that would discriminate against you based on age anyway -- they are probably going to fail due to stupidity like not appreciating expertise learned from experience.
So, today it was announced that they knew something was up as early as 12/10:

"The company also confirmed Friday that it found that unauthorized data queries with similar hallmarks started as early as Dec. 10 and continued sporadically until Jan. 27.
...
The hackers succeeded in penetrating the system and stealing customer data sometime after Dec. 10 and before Jan. 27, Binns said."

http://www.sacbee.com/news/nation-world/national/article9480...
Hi,

Its free. Its not even a product, more like a personal project. I haven't put any screenshots as its still in development and would love to get your thoughts.

I want to build an extremely simple project management tool without extra bells and whistles. Something which may be suited for a specific size of team, or specific type of execution.

I personally think that its a good tool for very small teams...like 3-5 where current tasks and backlog tasks list are more important. Not even attributing tasks to people, because in a very small team, everyone pretty much knows what another teammate is working on.

Its a single page project. I hope you check it out.
yep agree 100%. i have been thinking a lot about high quality responsive hardware accelerated layouts myself and have actually been thinking and experimenting on how to make something like that on a primitive level with the technology at hand for making responsive apps.

I honestly believe you will be able to see something like that in the near future as device gapping technologies gain more momentum.
They are starting to trial it, and offer it to those who have had their identity stolen.

http://www.irs.gov/Individuals/Identity-Protection-PIN-Pilot...
I've built a number of teams, and have repeatedly had the fortune of anchoring the back-end with a senior engineer over age 50. Experience matters, and it helps the entire team from a morale, design, and process perspective. You don't want to work for someone who doesn't recognize that anyway...

I wish I could be so lucky to attract senior candidates at my current gig; they're hard to come by at a trendy downtown-SF mobile commerce pre-series-A startup. Instead, I'm inundated with fresh code-bootcamp graduates. I'd be much more comfortable hiring those junior developers if I knew they would be able to sit next to a reliable senior teammate...

That said, if you're worried about being hired, start by building something on your own! You'll make yourself much more marketable if you show that you can pick up new technologies and actually release something.
I'm weary about doing this for performance reasons, I often want to gather more data as I iterate (for example items matching two different criteria), and wrapping a complicated lambda in `std::` sounds bad for readability.
Clojure uses structural sharing of course, but that was taken in to account in the parent comment. It's still a lot of allocation.
Show HN: Built a memcached manager to help you deal with memcached
Alibaba was a reasonable place to look, the other suggestions require insider knowledge, and are significantly more speculative.
It's the building of new cars that I am after. These cars have been tested in service for 58 years which is more than any other kind of car. Presumably the Cubans have made some modifications and improvements as well.
I'm not sure where to insert this in the comment threads ... this seemed as good a place as any:

I have never played braid, but based on an article I read online when it was released, I bought the soundtrack. It is beautiful. I've probably listened to it over 100 times. Highly recommended.
I hear what the proponents of non-DRM browsers are saying, but for media streaming companies content is their bread and butter. I am not sure what the alternatives are.

Content providers will stick with technologies like Flash because HTML5 alone could not provide EME. Lack of such feature set HTML5 backwards because huge content providers would shy away from using web as the dominant platform of media delivery.
I'm very very impressed by your code quality especially when this is just your first Go project. I'm an experienced Go developer btw. You're just so good.
I've been preferring explicit `map()`s in my CoffeeScript for exactly that reason.
Since 3d sintering used metal powder it may be possible to do special alloys as well. I agree that the end solution may be a hybrid one with d printed parts from different materials assembled together.

Also, as you point out a lot of testing would be needed for parts that are exposed to constant stress such as the frame, axles and so on.
No, not really. It seemed quite strongly that the reason was due to his age, but the official reason was that he couldn't learn new skills very well. The problem was, he seemed to be learning them pretty decently.
Wrong it's one of the most populous zips in the nation and I'm being flippant about the name but when you are brute forcing things an unusual probability is all you need.
gpg/pgp do work for those who can use it properly, which is a tiny minority. Can your parents or non-tech savvy friends use gpg/pgp? Probably not.

And as Assange said, if you are e.g. a journalist in the government watchlist, it could be worse (more dangerous) than not using gpg/pgp.

Text messages using OTR seems like a better way. For widespread crypto usage, telling people to ignore pgp/gpg and use texts with OTR seems more reasonable than keeping projects like GnuPG alive.

If I were running a company like Facebook who's interested in spying on people, I might even fund projects like GnuPG so that unrealistic geeks keep thinking this is a viable solution.
VerAxis – The Real Enders Game – AngelList
That's too bad: Steve Chamberlin appears to have taken the post down probably due to unwarranted "UR DOIN IT WRONG" in his page comments.

There are a couple other comments [1] [2] that touch on this. But it does seem like there are some shortcuts that could be taken with DB-25 connectors. Anyone who's still manufacturing them (which may not be many) might be able to modify their tooling to not add 6 pins on one side and not add the protective cowling.

Is it a safe, strong connector? No.

Would it cost $11k in tooling? I have no idea I'm a biologist.

It'll be interesting to see what he settles on.

edit: Ha, he's already doing that: http://www.bigmessowires.com/2015/02/01/designing-a-db-19-su...

[1] https://news.ycombinator.com/item?id=9012293#9012602
[1] https://news.ycombinator.com/item?id=9012293#9012695
I think we would do well to apply the principle of charity here instead of having an (frankly boring) argument about semantics. Surely the author does not plan to use React forever and just meant that it's the best way to write web apps right now (which is a defensible opinion).

https://en.wikipedia.org/wiki/Principle_of_charity
See how you stack up against the best. Top 10 get expert advice and more.
Confessions of a Congressman
Check this out, we are trying to see if this brings enough benefit to the community.
Having spent over a decade working as a cook in various restaurants, I can assure you that at any given time, most restaurants are in violation of far more than three health code regulations. And the cliche is true, the more expensive the restaurant, the nastier the kitchen.
Probabilistic Programming for Advancing Machine Learning
I'm not the least bit surprised. I met one of the founders (I can't remember which of the two) at a conference in 2010. We were seated at the same table during lunch, and judging from the reactions of the other people at our table, it was a big deal that we were seated with one of the Fab founders. Everything about Fab was supposedly awesome. The growth. The revenue. I chatted with the founder and my one take-away was: Even after everything he told me, I had absolutely no idea what Fab did or what it was about. Yes, of course it's an ecommerce site, that much is clear, but the founder totally failed to actually explain how Fab was different from any of the other many ecommerce sites that are not considered to be the holiest thing since the Eucharist. I really thought at that moment, this company is doomed.
Actually, for most online video sites users are their bread and butter. (Since they are ad supported) In fact users also provide the content in most cases.
I still don't know what the product was...

my best guess is some sort of e-retailer.
the best bar in north america is in houston, on rice campus
So will this phone be free from OS updates having to come from the hardware manufacturer?
Thanks, I'm in LA, if you're into high performance networking then you might want to see https://github.com/pfq/PFQ , if you haven't already.
In related news: sex associated with 100% boost in sexually transmitted diseases.
One thing to note is that (last I heard) both Chrome and Firefox sandbox EME modules fairly tightly. Flash is a browser plugin, which means that it usually injects code into the browser itself, and runs with full privileges on your computer, just as much as your browser does. This is what makes Flash such fertile ground for exploits of all kinds, and also makes it bad for your privacy because it has direct access to your webcam, microphone, clipboard, supercookies, etc. — anything the browser can do, Flash can do without asking. If it asks, it's out of the kindness of its heart, not because the browser has any say.

Chrome and Firefox's sandboxes, meanwhile, are both open-source. You can inspect what powers the EME module might possibly have, and know that it can't gain any more. A vulnerability in the code is unlikely to be able to do anything other than pirate your download of Game of Thrones — and that's assuming it even has general-purpose network access. Ideally, a vulnerability would be able to do nothing other than modify the video you see, but the remote site could achieve that by encoding a modified video in the first place.

As far as the general moral arguments about DRM go, it's true that the new boss is the same as the old boss. But the bulk of the EFF's argument against Flash in this blog post is about security, not about open content, and it's important to acknowledge that EME is a significant step forward. The new boss is sitting in a tightly locked cage.
I'm not saying side projects aren't important. I do plenty of them. Maybe too many. But as a team lead, you can't let everybody do their own thing willy nilly all over the place.

My interpretation of the original post is that these side projects are impeding scheduled work. That's not acceptable. Either a) this side project work is crucial and team lead is deficient for not recognizing this or b) it's not and the devs aren't being held accountable for the work the stakeholders have prioritized. This discrepancy needs to be resolved.
I'm not sure what the benefit of HTML5 video is if you still end up being forced to use some proprietary component. You ditch Flash but now you have to run some DRM software.

And there's so much more to HTML5 than video; I disagree that lack of DRM video support would set the rest of HTML5 back in any way.

EDIT: I guess the sandboxing aspect of EME is a significant improvement over Flash running as a plugin.
For me, when I've interviewed older developers, my main concern is that they have too much experience for the role we are interviewing for and may be bored and want to leave.

It probably depends on the job description, but sometimes more experienced candidates get rejected for this exact reason.

I'd love to hear how other people handle this type of situation.
"Bright with a Y, dot com."

Some names are a lot harder to explain than that.
>>> To try to head them off before you've taken enough profit in the US Is a curious combination of hubris and greed. Especially at that cost.

This was my reaction as well.

Instead of working their business model here and continuing to ramp up profits and margins, they took a huge bet to get into Europe. Not sure why they thought this, considering there are a half dozen other countries you could try and get in front of first.

In the end, their panic more than anything killed the business. I would also say greed played a big part. Instead of building a solid, sustainable business over a period of time, they got greedy and over stepped their bounds.
Wouldn't the better play be to spin off the product-market fit business before doing your pivot... especially if the business was a 100+ million one.
I tried submitting an existing project. Sure, it wasn't created yesterday, but...

You're not supposed to submit a project created ONE year ago. People just want fresh air.

That's a bummer. Why not?

Fresh air did not come into existence yesterday. Some of the freshest air comes from melting glaciers, where air has been trapped for centuries X^)

Probabilistically, most interesting projects were created over a year ago. It seems like a silly restriction to me, but I can also see it being interesting as a `/new` page. On that line of thought, having a `/classic` page where older projects are allowed might be an interesting experiment.
Well in basically all cases the worker can't be paid exactly as much as they produce because some of that money must be used to pay for other business costs.

However in a market with excess labor, workers can get paid a very small fraction of the value they produce, keeping large sums of profit for those at the top. In a coop the workers simply won't allow this, and more reasonable pay rates can be determined.

According to another commenter, many coops operate with some kind of market rate pay scale and place limits on the ratio of highest pay to lowest pay. This prevents one CEO from gobbling up half of the money used to pay workers and leaves more money to pay those at the bottom.

So you are correct that in all cases workers are paid less than the value of what they produce, but in a worker-run coop the ratio of pay to value can be much higher than in a typical business.

As far as workers getting paid what they are "worth", I think you are missing something. Yes, workers are only worth what someone is willing to pay for them. However I don't think workers get paid the maximum a company is willing to pay, especially in a market with excess labor. A company may be "willing" to pay programmers $180k per year before their business model fails, but due to a good supply of desperate people they may only need to pay people $80k per year. So in that situation the workers are getting paid much less than they are worth.

Would you agree that workers typically do not get paid the maximum the company would be willing to pay but instead get paid the minimum the market will bear?
Actually I wonder how much Curry took from mathematics tendency to parametrize abstractions, leaving variables for later, in his work.
AIUI, EME is basically a standard for interfacing DRM plugins, so instead of the one implementation (Flash) of it that was around before, we might end up with a wide variety of DRM modules? That certainly doesn't seem like a better situation than before, where basically all the RE efforts were focused on Flash's DRM.
Yep, that was one of the things I lost.
There was a documentary about Fab on TV:

https://www.youtube.com/watch?v=sYeup5zrZbs
And through all this effort to "protect their content", they still haven't managed to stop people from bypassing the DRM and giving the videos away for free in torrents.

I have a hard time seeing how implementing DRM provides any value to media companies, other than a false sense of security.
It's not at all clear that a human being is easier to deceive under battlefield conditions than a machine would be.
> I hear what the proponents of non-DRM browsers are saying, but for media streaming companies content is their bread and butter. I am not sure what the alternatives are.

And the DRM does absolutely nothing to stop anyone from doing whatever they want with it. DRM punishes paying customers at the expense of being a slight pain-in-the-ass for pirates. Plain and simple: they delivered content to my computer and I have a key to decrypt it - there's nothing stopping me from doing whatever I want with those bits but the time to break their silly DRM scheme.

Had Apple, Google, Netflix et al. the backbone enough to stand up to the media companies, we'd never have been inflicted with such stupidity. Now, Google's taking it upon themselves to start using their own DRM module with their own media - so much for the company that prided itself on Do No Evil.
They have evidence of an attack going back to Dec 10, a Wednesday.

"Anthemfacts.com" was registered on Dec 13th which was, assuming US rather than GMT, the following friday.

The proximity and order of those dates cannot be coincidence. It would seem someone at Anthem was confident enough to start prepping the PR campaign almost TWO MONTHS before the public, or the Conn AG, was notified. And during tax season!