skysight-inc/HackerNews huggingface dataset:
The "classic rule" aka Postel's Law, has proven to be disastrous. The idea of resuming a corrupted message is a totally flawed concept. At best, it introduces compatibility issues. This is essentially the history of HTML and browsers, each one needing to implement the same bugs as other popular versions.

SIP is another IETF gem, which takes its syntax from HTTP. And guess what? It's impossible to have unambiguous parsing in the wild! Why? The whole liberal in what you accept bad idea. So A interprets \n as a line ending, even though the spec says \r\n. B interprets it another liberal way, and assumes you didn't mean to transmit two newlines in a row, so it'll keep reading headers. End result: you can bypass policy restrictions by abusing this liberal-ness and get A to approve a message that B will interpret in another way. Yikes. And, since the software for both is so widely deployed, there is little hope of solving the problem. In fact, the IETF essentially requires you to implement AI as you're supposed to guess at the "intent" of a message.

So you're sorta proving my point, that people are thinking "oh it's just text" and then writing shitty, sloppy code, and they're giddy cause it sorta worked, even from a two line shell script. And then further generations have to deal with this mess, because these folks just can't bear to get line endings right or whatnot.
Breaking out of each box, one box at a time. :-)
Unless the lockup restriction is part of your state's laws (it isn't in California, AFAIK), it's not a matter for an "investigator" -- it's a private contract between yourself and your company.

It does vary state by state, though, so I suppose it's possible that some states have laws that prevent you from trading in derivatives during a lockup period.
The "matching program" isn't new--goes back to the 60's if not further. Sounds like the idea hasn't changed even if the "algorithm" is machine-implemented in recent times, no surprise there.

Used to be the student would put on his/her list the residencies in order of priority, and so would the institutions rank the candidates. Let the matching begin!

A thing to note is that not all residencies were in the mix and there were always a good number of students who weren't selected or maybe didn't even participate. That left room for students to find vacancies to fill.

AFAIK there weren't any students who couldn't get into a residency somewhere even if not among their top choices. Besides by the end of the first year of training there were always plenty of residents shifting to other programs so "holes" migrated around to an extent.

Chances are the situation is not at all dire for the current crop of graduating medical students. It tends to all work out.
The ASR seems to be a bit immature, but the TTS sounds very nice. Any plans to add more voices?
Still, the whole purpose of a password is to remain secret. He's certainly doing these users a disservice by releasing this list regardless of the hypothetical likelihood of the data already being available. Basically the arguments for doing this all seem to boil down to "they should already know their passwords are compromised" which nobody can guarantee is the case.

I agree that having a crappy password puts you at risk, but what about the people who genuinely tried to use some common sense but are on this list anyway? Is it their fault for not religiously keeping up with the latest indexed password lists?
I disagree. It's great, I Drive lyft professionally and it is very useful to be able to use the phone without removing it from its holster between ride.

Also, I just dictated that entire paragraph while sitting in a noisy Korean restaurants
Know what encoding it's in? Postgres is choking on UTF8 and Latin1
How did you initially market or get your stuff known? To me that is the biggest hurdle, you build something of quality but it still must be seen by others to validate it, which you already have.
Show HN: Instantsear.ch, search service for companies who care about performance
Samsung Privacy Policy: Watch What You Say Around Your Smart TV
It looks like IBM is getting serious about Watson, but still not serious enough. To create an ecosystem and incentivize developers to work through all the issues, IBM should probably create an investment fund for startups who build their products based on Watson. Any such plans?
it's kind of hilarious that it takes a case as transparently self-serving as aaron swartz to calcify a population as privileged and inured to the justice system as programmers to go "woah hey this shit might be kind of fucked up!!!"
“You have one identity,” he emphasized three times in a single interview with David Kirkpatrick in his book, “The Facebook Effect.” “The days of you having a different image for your work friends or co-workers and for the other people you know are probably coming to an end pretty quickly.” He adds: “Having two identities for yourself is an example of a lack of integrity.”
What were the threats against the agent and the agent's children? I'm asking because I read some of them ("ruin his life", "look into" his kids), but I'm not sure which of those are protected under the First Amendment.

Broad categories of rude speech are protected under the First Amendment, including things like, IIRC:

1. Saying if President Johnson makes you pick up a gun, he'll be the first in your rifle sight. (Watts v. United States)

2. Telling a cop "I'll kill you, you white devil" while you are in handcuffs and unable to kill him. (? v. ?)

3. Swearing "revengeance" upon the Jews. (Brandenburg v. Ohio)
It's possible for open-source authors to get rich (Linus Torvalds made several million from VA Linux's IPO), but much like academics, the financial returns are usually an order of magnitude or so less than comparable levels of success in the business world. It makes sense that someone trying to get paid for their labor would make more money than someone who gives their labor away for free.
They do have an investment fund for Watson products / startups -- http://www.tefunds.com/
Macedonian officials accused of spying on 20,000 people over four years
There is an annual 'Passwords' conference [1], which I attended in 2012, and was blown away by quite how much researchers are able to do with these password lists.

Unfortunately, I was equally impressed with what attackers are able to do with them as well. An important point is that attackers tend to have better lists, because they are the ones stealing and cracking them, and these lists make them increasingly better at cracking passwords. Defenders use the lists for all sorts of analysis on how exactly users pick passwords.

For example, "complex password policies" have become increasingly popular. But do they actually increase the entropy of the chosen passwords? Surprisingly little, since users will "defeat" the policy by applying easy to guess "munging rules". Humans being human and such. The thieves have the lists, and learn to apply the munging rules and defeat the policies. Researchers need these lists so they can discover the same weakness and try to react.

More recent research looks at things like how effective the password strength indicators are at actually helping users choose stronger passwords. We also learn about how users choose different strength passwords based on the sites they visit and such. This is absolutely fertile ground for research which can improve how we perform authentication.

Yet another good use of the lists is in defending against online attacks. E.g. Failed attempts that follow the general probability distribution of the lists are easier to identify as bots.

[1] - I think all the talks are posted, although I'm not sure there's a central archive, each conference is identified as Passwords^[Year], e.g. Passwords^14 https://passwordscon.org/
> I know there are still free spirits in San Franciso, but as someone who was born in San Francisco I can tell you the city is completely changed.

I hear this all the time from people who have nothing to do with the movements that are happening right now. San Francisco has changed, Burning Man has sold out, activist art is dead, blah blah blah.

Meanwhile insiders don't give a shit, because they're making the culture you're waxing nostalgic about. It's a culture of doing and claiming nobody is doing something is just another excuse not to do something yourself. You don't know what art is happening in San Francisco because you've made yourself an outsider by not participating. People aren't going to go out of their way to include you: why would they? You're not one of the doers.
Microlearning with Bite-Size Lessons Every Day
It was "White son of a bitch, I'll kill you", and it was Gooding v. Wilson.
If everything goes perfectly and the company has created a lot of buzz and momentum, there is interest to buy at a price above what has been printed on the S-1. As the pricing approaches, the company responds to this interest by increasing the price. Then the investors respond to the new price. This cycle repeats two to three times as the date approaches.

So, the price was not based on fundamentals of the business, but rather buzz, hype, and tactics like restricting the number of shares. The common stock price has since risen but it's now running a P/E ratio of 135 (1).

Who is getting the short end of the stick when reality kicks in? Mom and pop investors? Mutual funds and pensions?

Also, what's with the "bootstrap" banner at the top of the page? Grubhub took $84 million in funding (2).

1. http://research.investors.com/quotes/nyse-grubhub-inc-grub.h...

2. https://www.crunchbase.com/organization/grubhub
Comm. Pai's Stmt on President Obama's Plan to Regulate the Internet
I don't remember the case exactly, but it was something that was hard to resolve, at least it seemed so to me.
Meteor. It's a fun, fast and modern web framework that uses javascript on both the server and client so it's easy to pick up if you already have web skills.
I'll add to my other comment that I've only looked at the web interface, not the smartphone interface.
I surely will check out dploy.io, I was uploading static sites to AWS S3 through the AWS Console :(
Keep in mind you are still going to have lots of these same problems you mention inside the binary blocks and header blocks. Just the specific annoyances of HTTP 1.1 will be gone but new ones will appear.

Going binary does not make it suddenly easier, it just slices it up and adds a layer of obfuscation.

Easier to know what the hell is going on across a wire with current formats and debug them. Utopia interop does not exist so Postel's Law has gotten us this far. Being text no doubt makes it easier to debug and interoperate, otherwise we'd be sending binary blocks instead of json. Unless you control both endpoints, Postel's comes into play and simplicity wins.

We are moving in a new direction for better or worse and going live. I feel like it is slightly off the right path but sometimes you need to take a wrong step like SOAP did to get back to simple. We'll see how it goes.
You're right, there's a gradation of compromise, and I wasn't fully polite in my comment (nor did I think to attempt to determine OPs sex... then again, I'm a guy with a "girl's name", so who's to say "Mary" is necessarily a girl? aaaanyway...). I'm not suggesting that all software must compute integrals in order to have convincing physics. However, when I see code like this I involuntarily get itchy:

while (trig.isLineIntersectingCircle(circle, line)) {
physics.moveCircle(circle);
}
¿Qué es entrenamiento funcional?
I worked at 2 start-ups so here are the technology stacks:

The first company was started 3 years ago and our technology included:
(1) Python-Flask
(2) Postgresql
(3) SQL Alchemy
(4) JQuery for web
(5) Objective C for IOS
(6) Bootstrap

In my second company we wanted to take advantage of the growing ecosystem around Node. We also did not want to have to manage a DB, migrations, and server scripts. Our rationale is that we should focus more on the customer and turning the customer requirements into the product than on the technology working. We are an enterprise software company and so the less complicated the technology the better since we are not doing anything ground breaking from a technology standpoint. Our stack includes:
(1) NodeJS/Express
(2) Heroku
(3) Angular JS (I don't get all the negative comments about Angular lately because it works fine for us)
(4) Lodash (Javascript utilities)
(5) S3 - static file storage (images and files)
(6) Jquery
(7) Bootstrap
(8) Firebase
(9) Angular Fire (to connect firebase with angular)

Using our current backend, we were able to build the SAAS product in about 1 month with only myself as a developer instead of 2-4 months that might be required if we had used the previous technology stack. Firebase, Angular, and the Node ecosystem really helped make the coding much faster than before.
On the other hand, some of their correct images have questionable captions as well. For example, they labeled the geyser picture correctly, but their top labels also included "sandbar", "breakwater" and "leatherback turtle". A better scoring function, perhaps including hierarchies to account for the very vague "restaurant" photos and very specific dog breed photos, might be helpful. Otherwise, it seems like we might be overfitting to the peculiarities of this dataset.
I'd be curious at what researchers were able to do with such a list (genuine, practical advances). It doesn't strike as particularly useful.
Well current voice recognition tech makes it a crappy user interface, but it could be improved. It does make a really handy feedback device, though. Much like haptic feedback, humans can detect a wide range of audio cues and use that as feedback in an interface. You probably already recognize the bip on your phone is a Facebook message while the bong is your e-mail alert, and the ding your text message.

Back in the day when I made my own CarPC, I naturally made my own interface for it too, for, you know... reasons. The input was a mini numpad, but the output was audio - primarily text to speech. I could drive around and use the interface (mostly) safely, but be exactly sure of my input choices using the one-handed, nailed-down keypad. Worked like a charm.

If in the future we nail down the voice input to be more accurate, fast and flexible, we can avoid the author's concerns and get something as useful as touch screens but based on our ears and mouths.
It is incredibly obvious that Nim is being sold as hard as it can be sold
iOS9 to focus on stability and zapping bugs
The interesting thing to me are the projects that try and make money after becoming popular. And they're popular because they started as oss.

Think Jenkins. It took off because it was foss. Now the creators are trying to create a way to make money off of it by selling Jenkins-aaS.

They gave away their labor, got popular because they gave it away. Now they're building a business around the free parts. If they had never given it away to begin with, would there have ever been a CloudBees?
Smithsonian unveils Armstrong bag with Apollo 11 lunar artifacts
Has modern Linux lost its way? Some thoughts on Jessie
>"I have no idea what you're talking about."

Ask me which parts you're confused about.

>"Are you telling me that if we had the technological wherewithal to "create land" at will, you wouldn't use it?"

See, land is not the same as money when discussing inflation. But most of my comment was directly discussing plain money-printing or inflation, not land-creation. And if you really must know: if we had some magical-fairy-powers to create a physical resource out of thin nothing (with no cost/effort), then I think land ownership would be the last thing we'd have to worry about. You've effectively created a post-scarcity economy.

>"If not, why would you recommend those same actions when it comes to money?"

Please re-read my initial comment. Your entire argument rested on individuals having an unfair advantage simply because they were "be there before" us. And I basically told you that you'd be stealing from honest, hard-working peoples' children by devaluing the value of their possessions.
One more to add to Falsehoods Programmers Believe About Names (http://www.kalzumeus.com/2010/06/17/falsehoods-programmers-b...): Real names don't contain combinations of normal words like 'creeping bear' or 'lone hill'...
Java - Spring Boot.
Winners Guide to Entrepreneurship
Java - server side / GWT - client side.
It covers the speed you need, but not the velocity. For most tasks, launching directly away from Earth with minimal post-launch fuel capacity is not very helpful.
Cuwire – Better microcontroller IDE
> wouldn't choose Flask for anything; it's too slow, even by the relatively poor standards set by Tornado and Django.

What are your picks for good and fast web frameworks which are also light weight?
How can Jordan aid the fight against Islamic State?
So this guy found a zero-day that works across different unzip binaries, or what ...!?
It makes no sense to me, but I do recall a middle school phase where I used either "dragon" or "drag0n" for my passwords. I didn't particularly even like dragons and I don't recall ever hearing others use it, so it really catches me by surprise. Whenever I see it in a top passwords list I am filled with memories of after school library trips.
The fact that HN doesn't view Microsoft's known complicity with NSA programs (partner of PRISM data collection since before 2007, _NSAKEY[1] before that) as a human rights violation is troubling, to say the least, but it's absolutely unnerving that anyone would trust them (including YC members) to store sensitive data post-Snowden.

Does anyone actually trust cloud services in Five-eyes jurisdictions anymore? Is there a company in those jurisdictions that people could use that is more dangerous to trust than Microsoft?

1. https://en.wikipedia.org/wiki/NSAKEY
It's a good addition to any suite of destruction, but creating any kind of fire is a higher amount of risk for collateral damage than the other methods. Plus, unless the combustion is thorough, you may still be able to discern information off the paper.
All possibly interesting questions (certainly not to me) but I fail to see how they would lead to any genuine advancements in authentication.
Open the browser console, go to the resources tab, and delete all the soundcloud api local storage/cookies/etc. Perhaps at soundcloud.com too. I had that problem, mine works now.
This isn't really too surprising; this is the kind of problem you have when you try to automatically enforce real name policies. When you try to create a system which separates real names from made up ones, it's a lot harder when real names can have common English words which aren't ordinarily found in names.

Google+ had similar problems, if I remember right, and they ultimately solved the problem by getting rid of the real name policy entirely.
OK, I'll bite: can you give us some ideas on how this would lead to a genuine advancement in user authentication (that we wouldn't have with username/pw de-linked)?
How is that even slightly useful?
Intellectual Property Issues in Software Development
Cancer study pinpoints 8 signs death is nigh
This is cool !!

I've had this idea for a while now -- I do not like FB because I do not trust them, same is true of G+ ..etc. but my 'network' prefers them and that's how content is shared and propagated for a while now. So, I've been thinking what I would like is a 'client-side' social network platform where sharing of status, photos, messages ...what-have-you would be from /within/ the client. Basically, you add a set of friends and create a network of your own, pretty much like FB/twitter..etc but the main difference being that you (ie: your browser) 'hosts' all of the content out of your hard disk. If my friends run the same client, content is served out of their hard disks as well seamlessly and travels to the network without first going thru' someone else's server ...like you know ..p2p. The operative word of course being seamlessly[1].

This way content could be 'shared' beyond your friends through the extended network based strictly on privacy settings that you can control.

I thought I'd implement this as a browser extension but then the design hits into hacky workaround territory when it comes to implementing the transfer.

This barrier of entry is now low if/when such a http server becomes part of FireFox OS. With this functionality, I could in theory server my phone (or whatever device Firefox OS runs on) with all its pics, music, videos, etc through my network who only need a browser and an address that'll point to my app.

Interesing. I might just revive my efforts to build this.

[1] Yeah, I know I just re-invented the web/self-hosted domains/dnydns+webserver -- but the idea here is, it would all be 'built-in' into an app/extension.
Ironically, one of the reasons I have a second, fake facebook profile is that I don't trust the integrity of the facebook privacy settings so I want to see what my profile and posts look like from a non-friend 3rd party.
So how would you utilize such knowledge in the real world?
The threats actually accounted for 48 of the 63 months according to the EFF article that the OP linked to.

https://www.eff.org/deeplinks/2015/01/eff-statement-barrett-...
And as far as I can tell, it wasn't that what he said was constitutionally protected. It's that the statute he was charged under was unconstitutionally broad, because it prohibited "abusive language" in general. A more specific statute, prohibiting only threats, would have likely been ruled constitutional.
Hi, if you refer to the site you can fork it anytime at https://github.com/brunohaid/houseofcards but it's still utterly broken on mobiles, will release a better version hopefully soon.
It's nice to see a formal proof of lightweight ledgers, but this concept of account states in a merkle tree with merkle path verified state deltas is nothing new.

As the author states, lightweight ledgers are well suited to proof of stake. I'm working on such a crypto 2.0 that also uses the Python VM for smart contracts and is multichain scalable with cross-chain contracts.

See Qointum: https://qointum.com
[Coursera] New Venture Finance: Startup Funding for Entrepreneurs
I saw it a little while back. Good to know, thanks!
Looks like someone is spamming to boost Fox News traffic. See: https://news.ycombinator.com/item?id=9025405

Edit: maybe not just for Fox News. Seems to be a bunch of links from just-registered users with fishy usernames.
Yeah. Also, prices were reasonable, politicians were noble and children respected their elders too.
PipelineDB (YC W14) is hiring engineers
Matt Mullenweg did alright. Whoever wrote Bitcoin probably did ok too.
Things in orbit are already falling. To make them aim at the ground requires a very high speed perpendicular launch.
Why did you decide for subscription model? It makes sense for me if you have a network of 10+ locations.
I don't invest with E*Trade because of that ad.

I don't buy Belkin products either, for comparable reasons a decade after. (Made routers that would randomly inject ad pages. I still won't so much as buy a cable from them.)
A closed-source compiler? In 2015?
I've tried Meteor with a side project. I did manage to develop fast and the initial performance is ok. However I found the Meteor server runs slower n slower. I'm not sure why. I just assume it might have some traps or catches that I don't thoroughly understand.
There are actually a lot of solutions (cloud-based, as well as local/terminal-based) for this. I can't say that Dploy.io is the best, because I haven't used many others. I will say that it's "good enough" for me -- provides web hooks and allows rollback.
EFF's reporting appears to be contradicted by the (now public) sentencing memo. Orin Kerr analyzed it at length for WaPo a few days ago.
The future of communications:
www.evolutionarynetworks.com