skysight-inc/HackerNews huggingface dataset:
I disagree. I think millions of accounts are compromised because users are required give up too much information and can't verify that their user data is stored in a secure way. The solution to this is on the client side, in the browser, not in the server.

The core proposition of this article is that if we make it really easy to store user data correctly, people will do it. This proposition is simply not borne out by the data. Many parts of user security are easy. Take password storage, for example: it's so easy a caveman could do it. Every major languge has a library that takes a password and a salt and a number of iterations and runs it through pbkdf2 or scrypt. Many have these functions builtin. But do people do it? No. It seems like once a month some company exposes X-thousand passwords because they stored it in plaintext or MD5. And I bet a significant portion of HN readers think SHA1 is a valid way of storing passwords, eager to sacrifice security as efficiently as possible. pbkdf2 and scrypt aren't hard to use, people are just idiots.

Making a specialized database just gives people another easy thing to not use.

Ultimately there's no reason to be giving your password to a service in the first place. You only should be giving them cryptographic proof that you have your password, not giving them your password. This is possible with zero-knowledge password proofs[1], but it would require browsers and other client-side software to implement a ZKPP algorithm. This would force servers to either implement a ZKPP algorithm correctly or expose their incompetence to their users. Similar algorithms can be hypothesized for many other user data needs, but passwords would be an excellent start.

[1] https://en.wikipedia.org/wiki/Zero-knowledge_password_proof
"probably wrong" if you are only looking at engineer salaries at the coasts or at BigCo.

I very much get that businesses live and die by sales--anybody who's been in a startup (much less founded one) does.

But I also get that part of the reason the product sells is because the people working on it are personally invested in the outcome. The engineer trades a somewhat higher salary and lower ceiling for the ability to directly impact how the market and product interact.

It's precisely because sales is so important that I am curious if engineers wouldn't be better served (as well as their companies!) were they treated the same as sales folks.

The fact is that engineers produce value but don't capture it nearly as well, and I cannot help but wonder what would happen if they worked on commission or royalty.
What do you want clarified? The meaning is very clear, and well-established by the courts. The prefatory clause it's a part of is a matter of some dispute and interpretation, but the meaning of "well-regulated militia" itself, is clear. (Which is to say, "well-regulated" here is not used in the same sense as it would be in the phrase "a well-regulated broadband industry", on the off chance that's what you're getting at.)
Huh. I only have the initial-scale entry, and I think that my sites always show up with page width matching device width as a result. Is there something important that the extra width specification does that I'm missing?
If everyone who opposed the War on Drugs had instead of voting for it's Architect in the last two elections, or the other guy, had actually voted for either the Green Party or Libertarian Party candidates, things would be very different in this country.

Even if both the Greens and Libertarians still lost, the Democrats and Republicans would have been shocked out of complacency and rushing to end the war on drugs.

The problem is, everyone's voting for evil because they fear the other evil is greater.... yet there were two "Good" candidates running!
Reminds me so much of the "kid of speed"'s quests through Chernobyl on her motorcycle. She takes lots of pictures and explains the historical relevance of different landmarks in that land stuck in time.

http://www.angelfire.com/extreme4/kiddofspeed/chapter1.html
"Income growth of top 1%" is a very misleading concept. It sounds like "top 1%" is a fixed group of people, and we are talking about their income growth. Actually it is not that case at all. It is the "growth" of income from "top 1%" at different time points. Because it is about different group of people from different time points, it is misleading to call the difference as "growth". It's like last year best student A got score 100, and this year best student B got score 110, and you call it the "achievement growth of best student".

On the other hand, "income growth of bottom 99%" has the same issue, but it is less the problem, because 99% is a much more stable group of people. It's like "achievement growth of all students (except the best one)".
LinkedIn Joins the Hoaxbuster Club, Buys Patent for Fact-Checking System
You know, a lot of the best artists of the Renaissance did pretty well "panhandling".
What happens when you do it the other way around: having salespeople work for your marketing team, essentially being their "finishers"? It seems like you'd get not-necessarily-good-or-bad effects like marketing feeling empowered to offer discounts and bundles through "their" sales force.
Good question. Mr. Shah did use his maplight email address, but not the maplight street address.

http://docquery.fec.gov/pdf/964/15951210964/15951210964.pdf
Omega Tower Demolished
/u/SoCo_cpp sums up NSA leaks [reddit]
Why is userdata any more important than the rest of the data in your database?
One of the businesses in question is near there, yes.
thx @fullwedgewhale
HBO Now Users Outside US to Be Cut Off
Deploying v0.11 Phoenix application to Heroku – My first ever blog post
C-51, like the NSA legislation inside the United States, France, the Five Eyes, Germany, Japan, and like the reaches made by Russia and China do not have anything to do with terrorism. Terrorism is the excuse these countries use to get the laws to pass by their citizens.

What's going on is that the global order of power is shifting and recent advances in technology have enabled ~40 minute intercontinental nuclear strikes (using hybersonic delivery vehicles, etc). NATO and the Bretton Woods institutions are being challenged and rising populations and emerging economies will soon shift economics for the next half century in favor of nations in the Asia Pacific.

By its Wolfowitz Doctrine and by similar postures of allies, the Western world has to do what it can do to land gently (or be the better bombers) into whatever world comes next.

Internet surveillance, mass propaganda, high altitude missile defense batteries, satellite kill vehicles - all of this is due to hollowing out of the old institutions of world order and the challenges of a new one.

The debate therefore needs to be about how necessary these capabilities are for bringing about whatever new world there will be with as little possibility for violence as possible - not another fake conversation about terrorism.
From my interactions with sales people, here are a couple differentiators I have noticed

1. Sheer relentlessness - A good sales person will follow-up on a lead to an extent you and I may consider excessive. They will make call after call, bouncing back from rejection with an unsettling ease.

2. Preparation - Good sales people are very prepared. Customer says they can't afford it, sales guy has a prepared comeback to keep the deal alive. Customer suggests a free pilot, sales guy gently deflects back to closing a revenue deal. These aren't off the cuff interactions but studiously prepared counters to sales objections.

3. Ask good questions - Really good sales people are great at asking questions that help them understand what the customer needs so they can customize their pitch to hit the sweet spot.

4. Are honest - Ok, this one surprised me. Like most people, I had the stereotype of the slimy sales guy in mind but I have been very pleasantly surprised at the number of sales people that pull the product guys aside before a customer visit to basically say "don't bullshit". They care more about the trust the customer has in them than the quick buck. Yes, really
>> If it's only legal, I'd argue that's a slippery slope towards a legal system of convenience and loss of absolute respect for the rule of law.

> Well, as you might have guessed by my references to contract law, I'm not a huge fan of statutory law. "Rule of law" is only good if the laws are good.

> If people want to modify their products, then that should be a competitive advantage for firms that offer products with terms allowing modification.

> Why? [do the technical methods for preventing modification become frightening]

I'm getting the sense that we have fundamentally different opinions of the way the way the market works. In my view, it's entirely reasonable that the following chain of events unfolds:

a) Company A builds product that prevents users from making modifications (legally and technically)

b) The product captures a substantial market share (variety of means: maybe exclusive content, advertising, etc.)

c) Because the product prevents users from making modifications, it can extract higher profit-per-user than competitors (by taking advantage of revenue streams unavailable to sellers of a more open product)

d) Those higher profits can then be leveraged into a more dominant market position (regulatory capture, buying budding competitors, etc.)

I have a feeling you would say "(b) would not happen because the market would correct in favor of consumers and away from Company A."

My opinion is the market only self-stabilizes within certain bounds: once things get too out of whack, there is no guaranteed correction.
Id also take you up on this. I have been doing data visualization using webgl, and developing a library. I'd love to see what i can make with this data.
Best Internet Marketing Blogs of 2015
Eight Terminal Utilities Every OS X Command Line User Should Know [2014]
Ask HN: Anybody willing to take on a quick study for the summer?
Hey HN,

I decided to take up iOS development earlier this year and I'm at the point where I understand objective-C, object-oriented programming, and M-V-C. I read the Kochan books and Apple docs, so I understand properties, memory management, the Foundation Framework, and I can solve problems in objective-C. However, progressing to actually writing an iOS app has been daunting. I bought the BNR book and I tried the getting started guide on the Apple developer website, but I can't make the leap to producing anything beyond simple, linear apps like Timers.

I know that these are all very good resources, and to a large extent, I can comprehend what's going on. However, putting something of my own together has been tough. I can put together simple things using Nav controllers and TableView Controllers, but I'm having trouble progressing to anything more complex.

Having learned what I could learn by myself, I think I'm at the point where I need to be around people with experience and see how apps are actually made in real life. Unfortunately, iOS meet-ups aren't very frequent (which is very weird for NYC) and I don't really know anyone from whom I can learn, so I'm asking you HN; would it be possible to shadow an actual developer for any length of time this summer or meet up whenever you're free? It would be great to have someone who already knows what their doing to ask questions and get a feel for iOS development as it's done professionally. I don't want to reduce anyone's productivity and I would be as unobtrusive as possible but I'd be very grateful if anyone could spare the time. I'm very dedicated to becoming a good developer and I will bring that same dedication to learning and helping out as soon as I get the hang of everything. So please let me know if you'd be willing to; it would really help a lot! I'm in the NYC area, but we can also talk on Skype if you'd prefer

Thank you!
#1. A 10 part mini-series of Frank Herbert's "Dune" (finally done right by HBO). And after that, the rest of Herbert's Dune saga.

#2. Frank Herbert's "The Eyes of Heisenberg".

#3. Alfred Bester's "The Stars My Destination".

#4. "A Canticle for Leibowitz" by Walter Miller.

#5. Arthur C. Clarke's "The City and the Stars".
I've always wondered when I hear someone complain about the complexity, then where did it get the 'L' in its name from?
I'd like to point out that it's only the ISPs that have to keep the data for 2 years. As soon as another agency has slurped it down it can keep it indefinitely.

Realistically you would have the same effect if ISPs only had to keep it for a month or a week, but that would lead people to ask other questions and to shift focus on to the agencies accessing that data and how long they get to keep it for.
You can impersonate a user with their login data, and given that people frequently re-use passwords, also do this on other sites.
Most papers don't deserve to be in textbooks, as they are of very minor interest by themselves. Textbooks distill the fundamental bits.

I agree with your other points, and many authors do work hard to give an intuitive description. Intuitive, that is, to a reader skilled in the art.

But don't think that just because you don't understand a paper that means it is overly complicated or obtuse. It might be perfectly compact and straightforward if you are familiar with the field and its conventions and notation. And this is the most efficient way to communicate.

Of course, some researchers just suck at writing. A few might even be trying to sound fancy and make things sound complicated or high-falutin'. Grad students start out with this tendency, but we try to beat it out of them ASAP. Some are never redeemed. But I like to think my group produces readable papers.
I've tried to work at places to try to change them, but it simply doesn't work. If it's an incredible uphill battle to try to get a group of people who don't want to unit test their code to unit test their code, I can't imagine it's easy to change, say, a police department.

EDIT: And to clarify, I'm not saying unit testing is always necessary, but here it was. Their code was (and apparently still is) buggy and needlessly convoluted with no clear documentation.
The web blows my mind. It's a distributed OS, specified by the W3C, and implemented by the community. Amazing how far it's come - let's face it, we've put a heck of a lot of effort into v8, Node, Json, ...

Thank you Tim :)
I think that it is reveal.js http://lab.hakim.se/reveal-js/#/
I love ledger, but it's only useful in some situations. I made the mistake of using it to manage the account of a non-profit I was helping with a few years ago. It worked great, but when it came time to hand over to a new bookkeeper it was sort of a pain because almost nobody who's not a programmer is going to want to use a text editor and command-line utility software.
Jay-Z says he has 99 problems but a bitch "ain't" one. So regardless he'll still have 99 problems. Additionally he says this in regards to the K9 coming, so this ruling wouldn't affect him either way.
Bash is a very well thought out extensive interface that few other things can rival in this universe. So is Unix. But I wm curious to know how would you do this in bash? Also even though these solutions stored the keys in encrypted format the fact that you have to have the client certificate stored with the client app is similar to storing the passphrase of a pgp encrypted file in a script , and I must say that is not security. However there seems to be no other way to automate secret management.
Contract Generator
Previously: https://news.ycombinator.com/item?id=9413129
Like Python 2's 2020 EOL?
> Unfortunately, the people who suggest that paper don't realize that it's a very technical treatise and not an appropriate introduction for the types of programmers who ask the question.

Programmers of the 'types' (whatever those are) that ask such questions are exactly the target audience of that paper, technical treatment of a technical subject is a-ok.

If you need floating point you don't actually understand your problem used to be a common mantra back when floating point computation still incurred a significant speed penalty. We have come a long way since then but every computer programmer should read that paper and understand it if they want their programs to work properly when using floating point.

You can't really use a tool that you do not understand and using floating point has plenty of pitfalls.

Programmers tend to use floating point casually, either because their language of choice will switch to it when not told otherwise, because they think it is a magic solution to some kind of problem that they have (say counting beyond some arbitrary number), because they are lazy or because they need fractional representation of some number in a well defined range.

If the chain of computation is long enough, if the number of input variables is large enough and if the operations are varied enough this will lead to hard-to-diagnose bugs and problems if not enough understanding is used when implementing the code. FP is a powerful tool, but like any powerful tool it can hurt you if you don't understand it.
While technically you're right (as in, LDAP is great for handling many user entries and auth[nz] correctly), in practice it's not going to happen. Nobody knows LDAP (as in, take a random sample of non-corporate developers and most likely none of them will know LDAP). It's a pain to integrate and operate in a small environment. That's why there's a call for a simple solution.

It's why everyone uses JSON and not ASN.1. Why people will save a single number in a file rather than standing up Oracle database. Or why they still use random invented rot-level "encryption" for messages rather than pgp.

LDAP doesn't expose operations like "create new user", "verify password", "deactivate user", "set encryption method to ...". It's a database where you "bind" your user description against your hierarchy of objects/attributes - explain that to a guy who just wants to get his new app idea working ASAP... It's got its own query language too. You can even do LDAP query injections - just like in SQL!

Like you said - LDAP is a beast. It's great and I'd use it as soon as number of users goes over 10k, or employees on different levels over 10. But otherwise, no way. A new component with its own security issues is just not worth it.
Misleading as I pointed out in a previous comment ( https://news.ycombinator.com/item?id=9418512 )

"the super-rich" is different groups of people from year to year.
Free expert evaluation for an ecommerce website. VWO  Concept Feedback
Pretty good link site
The integrity piece is new to me. I tended to mistrust using external resources.
I don't think we were talking about infiltrating the CIA for the purpose of dumping all its secrets, were we?
Ssh, Darcs Hub vulnerability
I got to "Bretton Woods" and realized you had gone off the rails.
Institutions protect themselves culturally. Bureaucracies have momentum. It's just the effect of self-interest and incentives (carrot and stick).

If you really want to change something like the CIA, the government has to impose meaningful and powerful oversight. Legal avenues have to be opened up for confrontation and change to be possible.

And of course to start it all off you usually need a true believer turned whistleblower. How else would the whistleblower have been shown all the damning evidence?
LDAP is a network protocol.

It supports a lot of backends (SQL and NoSQL alike) (openLDAP has nice proxy features)

It also supports role based authentication.

But at the opposite of actual NoSQL data bases, even though it has no structures, it is strongly typed and secure.

You map your NoSQL structures to structured backend through a mapping.

It is awesome but most devs hates it, because they are (at my opinions) ignorants.
And developers hates it because they are lazy.
The app doesn't work on android.. SGSIII, 4.2.1 I believe. Looks to be a problem with Facebook permissions AND image cropping, both on Tinder's side..
Krita gearing up for another kickstarter
I am curious, why you think postgres json stuff is second class citizen ?
AFAIK LDAP is a simplified version of X.400, which was part of the truly horrible ISO protocol stack.
I had a similar idea, I wanted to place small microphones all over the city to know which places were "quieter" than others at certain times of the day etc... I was looking for a place and I wanted to live in a street that was quiet on weeknights
I feel like I've had so many conversations of this form:

User: This doesn't work on your mobile site, why don't you just give me your desktop site because it works better?

Mobile web site dev: We can't do that on mobile because X.

User: But X is already a solved problem on the existing site.

Mobile web site dev: Sorry, but we need to do a mobile site.
Can existing LDAP implementations scale a single directory to hundreds of millions of users?

I can find no clear answer after a few minutes of searching.
Google Set to Unveil Wireless Service
I'd check these out:

mailing list - https://groups.google.com/forum/#!forum/golang-nuts

subreddit - https://www.reddit.com/r/golang
Unless you think a sentient AI will be created by having sex, that statement is meaningless for this discussion.
If the content is behind a paywall:

http://www.reddit.com/r/Android/comments/33f1js/google_set_t...
I wonder why the jeppsen test for Cassandra was deleted (or moved) https://aphyr.com/posts/294-call-me-maybe-cassandra/
Did you actually read the earnings report? The issue is not the homepage and their mobile business has increased significantly but overall business is lacklustre.
> You should not be facing charges for refusing to take part in a criminal conspiracy

The people that do not want to work for the CIA to begin with are doing just that, only they make up their minds a bit earlier.

> and doing your best to cause the appropriate legal action to be taken to mitigate that criminal conspiracy.

Snowden did try to talk to his superiors about this sort of thing.

http://www.nbcnews.com/feature/edward-snowden-interview

He makes it quite plain that he tried to go through 'channels' first.
How do you know they will be receptive?
What does "trending" mean? It's... popular right now for being quiet?

It seems like if you had the data, you could build both an app that's marketed to tell you when places are quiet, and an app that's marketed to tell you when places are lively.

EDIT: Or do you envision the app to do both? I'm having a hard time squaring "The Heartbeat of a City" with "Is your favorite place quiet right now? Check it out in realtime and get notified when it’s convenient to drop by."...

> Second, I think there are people out there that are not looking for busy bars. Rather quiet ones. I certainly fall into that category.

I'm curious what the market size is for people looking for quiet public places vs. lively public places. Is there already a popular app that targets the latter? Has anyone successfully filled the gap left by Foursquare eliminating check-ins?
How often have you been able to browse the content you want just by the section heading? They are somewhat informative, but I find it much much faster and easier to scroll through the sections skimming the text and images.

Collapsibility means requiring high-precision clicking, instead of low-precision sweeping of the finger.
Also you can't view the article's categories. You need desktop view for that.
Posted as a blog comment but I'd be interested in people's thoughts:

LDAP can be painful to work with, even when using such "industry standards" like Active Directory

I think a specialised server (or even Postgres extension) could be useful but couldn't you set up the following?

* Create a stored proc or similar that does this: SELECT COUNT(PasswordHash) WHERE Username = @Username AND PasswordHash = @PasswordHash

* Create a user account on the database that only has EXEC permissions, not SELECT or anything else

* Restrict the user account to only be able to log in from the app servers (or whatever)

* Restrict the DB admin to only login via a jump box / VPN.