skysight-inc/HackerNews huggingface dataset:
If you want universal uniqueness, 128 bit won't last you too long. The number of atoms in the universe is estimated to be around 10^80, so you'd need about 266 bits to address every single atom. Give it some headroom, go to 512 bits...
Chrome OS source code
Actually if you can do it properly for C using off-the-shelf gcc the rest follows - PHP or Java are on a completely different threat level.
Wanna log in to one? http://www.cray-cyber.org/systems/yel.php
This is a valid point -- yet we needed this to fulfill one of our primary goals -- respect privacy by not trusting servers.

TimeGT is generating a private/public keypair for users and information/dataset-changes at server are encrypted with that.

It could provide password recovery feature but then users can't fully trust their privacy.

One option is also that user keeps carrying public/private keypair file with a memory-stick but probably remembering password is easier?

One of the problems with online tools like RememberTheMilk or GMail is that some people do not feel confident having information stored in servers readable for the company.

To sum up, TimeGT is built on the idea to respect user privacy and is build up to not have a centrally available readable information storage.

I think it's good to have a choice of not trusting your information to anyone but yourself, isn't it? :)

We'll put it to the roadmap that user has the option to "enable password recovery" and in that case they just need to trust our server security, just like users who use rememberthemilk etc.

Hopefully there will be more confirmation that password recovery is a serious limitation and this will can be solved without affecting users who want current strict security.
One thing to remember is that some browsers will complain if your HTTPS page loads other files (css, js, etc.) over HTTP. Be sure to do some testing in that regard.

I highly recommend the Slicehost articles. They've been indispensable for me and there are some good ones on SSL/HTTPS server setup:

http://articles.slicehost.com/tags/ssl
The Amazon identify-by-photo feature uses Mechanical Turk (ie, real people). Try taking a photo of a handwritten note with something like "show me a book with an author whose name starts with K" (Nothing too complicated or tough to solve-the pay is very low per hit)

This can occasionally lead to amusing results when you send in photos of things which are not products, like people. A photo of a friend yielded the Freaks and Geeks DVD, and a photo of myself brought back the book "Asian slim secrets: the natural method for weight loss proven by billions of Asians" Note that these results vary a lot by who takes the MT hit; usually a picture of a face will yield something like a photo frame.
Actually it's exactly what I would expect. Cue the "96% of the population is undateable" Seinfeld quote!

Asking people to rate who's below average looking will generally result in the vast majority of people being rated as such. Yeah, statistically you'd expect around 50%, but once you throw human emotion into the mix all bets are off.
While that is true, the OP said he was interested in learning more beyond just SQL injection etc...

Which brings me to your second subject: logic flaw. That is probably the most common security flaw than anything else. It is been made worse by the fact that most "web developers" don't actually understand logic nor the full implications of structured programming.

It is compounded by a lack of understanding system fundamentals too; it's quite common amongst developers I have met to not know why "0123" comes out as "83" in any scripting language built atop C (Python and PHP are popular examples). (Hint for those that don't know: C interprets integer literals with a leading zero as an Octal number).
Unfortunatelly for the readers it is closed-source, and part of the security model is obscurity. The core service has been developed for http://spoj.pl - a bit ancient-looking repository of algorithmic problems.
I am from PHP background and here is the lowdown of how I worked my way from basic PHP security to advanced web application security (language-independent). I am sure it will help you in making a decision for yourself.
1. Essential PHP Security by Chris Shiflett: a light read with little over 100 pages. PHP often picks a lot of flak for being insecure. However, in majority of cases its not because of the flaws in PHP platform itself. It’s because of the certain design choices PHP made which makes it easier for a novice developer to mistakenly write insecure code. Given a little care, these mistakes can be easily avoided. All basic security stuffs are covered like forms and urls, sql injection, session and cookie security. The concept covered in this book can easily be applied for other platforms but apparently you don’t want any of these information because you already are well-versed in them.

2. Pro PHP Security by Chris Synder and Michael Southwell: Covers most of what you are looking for, namely, perils of shared hosting, safe development practices, Encryption, SSL and SSH, HTTP and HTTPS, Access Control and Authentication. Of course the book is inclined towards PHP but most of the concepts are language neutral and you can easily extrapolate these concepts to another language of your choice.

3. Foundation of Security by Neil Daswani et al.: The blurb on the first page speaks for itself What every programmer needs to know about security with running examples of web applications and stories of what’s gone wrong in the past. Mostly language neutral but sample codes are implementation in Java. Comprehensive. Recommended.

4. A bunch of videos at http://code.google.com/edu/security/index.html helped too.
"Remember the Intel 432" seems in order.

Ah... BTW, also give a look to Lisp machines made by Symbolics, LMI and Texas Instruments.

And, when you feel like it, google for the Smalltalk machines made by Xerox, Tektronix...

Either that or, to quote George Santayana, "Those who cannot remember the past are condemned to repeat it"
Pénz a neten
Moreover, if you want to get that prior art on record with the USPTO, one way to do it is to file for a patent then let the application lapse before issuance. It'll then show up on subsequent searches.
The sultan of startup marketing
"Remember the Intel 432" seems in order.

That was my first thought too!

In a way, Im sad that the 432 never took off. It would be really interesting to work with an object oriented processor architecture with built in garbage collection.
This video might be relevant:
http://www.youtube.com/watch?v=KaPvJlPnc6E

Its argument is that the U.S. flight control system is obsolete because it is government-run, as opposed to the Canadian system, which is run by a private company controlled by the airlines, which have better incentives to keep it up-to-date.
Ask HN: Please review my new site - greaterdebater.com
Hi everyone, I've been working on a new social news and discussion site - http://greaterdebater.com - for the past few months. In addition to the usual features like posting links to stories, self topics, and comments, users can also challenge each other to one-on-one debates.

If a challenge is accepted a special thread is created in which only the original commenter and the challenger can post. Other users can view the argument and vote for the side they feel most compellingly proves their point. Arguments stay open for seven days, and voters can change their vote at any time until the end.

I'd appreciate any feedback on the site design, functionality, usefulness or anything else you think of. Thanks for taking the time to check out my site.
Hey!

Well the difficulty really arises when you want to go a step beyond full HTML control and allow for JS and AJAX (think pagination with really artful page transitions). How do you allow users complete control without turning your service into a cesspool of XSS attacks?
How to Build a Consumer Internet Startup
Blah blah. Chewing on names. Pure onanism.
IPhone Developer: Why I'm Not Making Apps For Android Or Palm (Yet)
Can you give a bit more details please. How much did you make per sale? How did you automate it? How was traction etc...?
I've done a lot of research into Lisp machines and a little bit into Smalltalk machines (Renraku is a spiritual successor to the Lisp machines of yore), but I'm seeing this is more of a joining of the Jazelle Java acceleration on ARM and the managed OS work in Renraku.

That said, for the nitty gritty details, such things are certainly the place to look. They've solved many of the problems already.
Homewood luxury ski resorts
You are considering Colorado Ski Resorts. So, let's start at the beginning. Yes, Ski resorts is beautiful. Awesome, in fact! Whenever I visit I can't help just looking around at the beauty of the slopes, the town sitting at the base of the runs and the majesty of it all. So now I know that I want to go back to ski in Breckenridge. It is time to plan my ski vacation to Colorado..
Perfect solution. Add this and I'll sign up, because other than that, this sounds pretty good from the limited stuff I've seen.
"But a pastebin like no other in the Internet."

Isn't this pretty much a reimplementation of codepad.org? So that's not entirely accurate...
HTML5 Glossary
Don't forget the object-oriented Linn Recursiv CPU.
Huh? The 15-day free trial costs 4.95 euro per month?
Consistent hashing for Mnesia fragments - part 2
a lexer/tokenizer in js. hmm. i love how we've got new fast JS engines, but really? this fast?
Yeah it's nice looking and pragmatic. The quick stats on the right are useful and a great visualization.
Automatic captions in YouTube
Ohhh I forgot about this one. That was an interesting architecture too, not just because it was innovative and ahead of its time, but also because it was designed by a company that wasn't in the business of processor development!
I'm a writer (not a novelist, yet) and from what I've learned from the people I've talked to is simple. #1 is that they write out of a passion (myself included) and that they'll do it regardless of money, so the complaints about the grossly low pay becomes somewhat dubious when many writers still work day jobs for the majority of their career. One of my extended family was a semi-pro golfer, he had notorious low pay from it (even professionals doing the full circuit don't get amazing pay, it's the endorsements that pay well), but he works in banking so his day job pays a lot so he gets to do what he loves (golf) a lot.

#2 is that the genre you choose can seriously affect how much you get paid. Vampire-Romance is 99% of the time YA, which is predominantly read by young-female readers, many of whom may be transients in the market. This might be your ideal literary area, however this isn't a mountain of gold waiting for people with pickaxes to come claim it, this is a stream with a dozen people with sifters already there.

I'm working on a Fantasy series, which if I'm lucky on a NYT best seller list might pull me in above $25,000 due to its target market being well established and adult readers (IE people who'll buy hardback). However, I'm a realist and I quickly realised that Mystery novels have the biggest literary market and pay their authors the most of any. Writing a pulp mystery novel could likely bring in $25,000 for a single book (likely very few royalties, but that's beside the point here), hitting a best seller list for mystery (especially a multi-book deal) would easily bring in the big cash and could work as your day job.

The authors own efforts also contribute, many authors believe that their only job is putting pen to paper (or finger to keyboard), which is well within their rights. However many authors do vast marketing and meet-and-greets, signings and such to help boost word of mouth of themselves, not their books. A good example here is John Scalzi, who is constantly in contact with his fans and does extensive convention runs. This kind of self-marketing is how many webcomics became profitable and allowed their artists to become full time at it relying solely on advertisements.

Edit: Note on the genre front. Many NYT Best Sellers hit the front page on Hard Cover (where the author makes a greater percentage of royalties, but also the book sells for 2/3 times the paperback price), especially mystery novels. However YA never hits the list in hard cover, many are rarely ever released in hard cover. Not selling hard cover books well will easily 1/2 or 1/3 your pay and typically the older reader spends more on their books and will buy hard cover.
Thanks! Corrected web -- it should have been "Includes 15 day trial". it's 4.95 but first 15 days are free and can be canceled -- no strings attached.
The problem with many of these benchmarks is that they aren't exercising what they think they're exercising.

Notice how tokyo tyrant and memcached track each other on the performance graphs while redis is doing much better? That's because memcached and tokyo tyrant using the same client library. Clearly the memcached client he's using isn't as well written as the redis client he's using.

We in the memcached community are trying to figure out which clients behave properly and describe relative performance between clients so people who read things like this can get a feel for what that actually means in real world applications.
> GT Life and Task Manager
> * Secure and Private
> * Free Desktop Application
> * For Windows, Mac and Linux
> * Accessible online and offline

Great, but what is it? What problem does it solve? It may be obvious for you and me, but not for everyone.
When algorithms attack, does Google hear you scream?
... musical tempo might be used to help one turning pages while scanning books
You should put a mac mini (or some other small computer) inside the case :)
The US flight control system is obsolete because it is ridiculously underfunded. No private company would do much better given the same resources.

Moreover the goal is getting people places safely and efficiently, not cheaply and efficiently. (I'd also point out that privatizing public utilities has gone quite poorly in recent US history)

This is not a public vs private issue.
FWIW: Googling 'sparklines' right now gives me a first Sponsored Link of:

Microsoft.com/Office2010 Microsoft Excel 2010 Beta: Explore the New Features. Get it for Free!

¿Apparently it's going to be a highly touted feature... so they figured they'd might as well try to get a patent?
Very true. The trick then is how can you surround yourself with these unique people without spending 40k a year on education? (I would appreciate an answer to this. My sister is considering spending that amount soon and an alternative would be great.)
I'm a little upset that there aren't little scroll bar colons separating the hours/minutes/seconds.
Ask HN:  What do you know about the Non-Disclosure Agreement??
Its worth mentioning the Great Microprocessors of the Past and Present website[1], especially the section on Weird and Innovative Chips[2]. Some very interesting designs in there and some interesting history overall.

Completely opposite of a crazy CISC machine, but just as interesting, is the Transputer T-9000[3]. They actually produced processors which could be slotted together to form vast, highly parallel, arrays of simple processing nodes. Think of the TILE64[4], but where the tiles are separate units, allowing you to add more over time.

[1] http://jbayko.sasktelwebsite.net/cpu.html

[2] http://jbayko.sasktelwebsite.net/cpu7.html

[3] http://jbayko.sasktelwebsite.net/cpu7.html#Sec7Part5

[4] http://www.tilera.com/products/processors.php
This is the rough draft of my final paper for a risk and the law class I am taking. I have already done extensive research - including interviews with investors, attorneys, and entrepreneurs. I have used several quotes from Hacker News already and I would love any feedback, thoughts, questions, etc...

Thanks,

-P
It must be hard to be the New York Times. Your "X is underreported" stories have to be corrected to the past tense as soon as they're published.

And it shouldn't be that big a deal for scientists with a particular hypothesis to have a stake in the outcome. There's already a reputational, political, career-related, grant-related stake; unless they're investing their entire retirement funds in out-of-the-money call options, the financial stake is a rounding error.
A few great quotes from freethinkers and scientists
Can someone please explain what this is, and why it would be useful?
How many times is this going to get posted?

That's not Chrome OS, it's the source code for the Chrome OS port of Chromium.
It's a cleaner syntax for writing jQuery functions. As you can see, it's translated into jQuery code.
thanks for all the advice.

i've chosen to make the entire site HTTPS and redirect HTTP to HTTPS. the reason being that performance doesn't seem to take a big hit, and while things like caching and moving to multiple servers will be harder, if we get to that point then re-writing some of this code will be fine (whereas it is not fine now when we just want to get some user testing done).

i'm using django. the move for some pages to be accessed via https means accounting for redirects more intelligently. eg, {% url login %} should produce https://... while {% url static_page %} should produce http://... there is a django snippet for middlewhere that allows one to provide a SSL flag.

still...if one is visiting https://mysite.com/A and then moves to https://mysite.com/B, then won't the browser alert them to the move? it should, but that provides the wrong viewing experience... i guess, once a user logs in, the rest of their visit to the site should be over https, even the static pages that non-logged in users view over http?

alternatively, i care less about the users that log in and more that the API used by my Firefox extension to communicate with my server is conducted over HTTPS. that's where i started, but once i made that https it was a slippery slope for the rest of the site :-)
Java fails:

/usr/lib/jvm/sun-jdk-1.6/bin/javac: error while loading shared libraries: libjli.so: cannot open shared object file: No such file or directory
Take a closer look at the projects listed on the right-hand side. There's much more than Chrome.
Ah, you have identified the problem.

I worked at home when my kids were born, and I solved the problem by having a separate office with a door. When the door is closed, I am "not home".

But then the trade off is when you do take breaks, you visit with them multiple times per day. Also, there were times that we would put a blanket on the floor in my office and the kids would nap there.
Bilski Oral Argument at the US Supreme Court
ChromeOS Source Code Online Now
errr, how do I write arbitrary javascript?

but it looks like nice cross of python and js

[edit] and running didn't do anything on chrome...
I'm guessing it would run cosmos.

http://www.gocosmos.org/
It's actually a few years old (and it uses jquery from 2006).
You could still use it if you like the syntax better and just precompile it. Same deal with sass (http://sass-lang.com/).
This article fails to mention one of the best magazines on the market: The Economist. It is always the same: simple title, one picture, and lots of columized text.

In addition, they also forget the newspapers. They are always identical from day-to-day. Just because it might be easier to style a "Top X" list doesn't mean it still isn't a useless "Top X" list.
Given the fact that two of the options are persistent and two are in-memory the results seem hardly surprising. What is kind of interesting is that when you look at the results closely you can see what is really being measured - client interface speed. Simply put, there is no way that a tokyo tyrant hash database and a memcached instance should run at the same speed. The former is writing to disk while the latter is not. This means that the bottleneck here is not the cache being "compared", but the client interface code.

If I had the time I would rewrite the client code to use the pytyrant interface talking to an in-memory tyrant hash database to see where things really stack up.

EDIT: If anyone wants to run the benchmarks, just replace the import of memcache in tokyo.py with an import of pytyrant, then replace the run loop with:

t = pytyrant.PyTyrant.open('10.90.15.96', 1978)
hashval = md5(str(self.c) + str(i)).hexdigest()
if self.gs == 'set':
t[hashval] = hashval
else:
t[hashval]
I think you make a number of really valid points here.

I've been thinking about this a lot lately through the lens of late-19th- and early-20th century European philosophy and literary theory, when guys like Gautier and Baudelaire and Mallarmé and Benjamin and Kraus were livid about the rise of the newspaper and, later, the feuilleton (early serialized novels). These men--poets, mostly, or at least advocates of the form--saw the confines of the newspaper column as a reduction of writing proper, where writing (in their strict poetic sense) necessitated a careful consideration of the placement of each word on the page.

The same considerations can well be applied to blogging, at least on an abstract formal level. You're very right: it all falls apart if there's not ample content to back up a thoughtful design. But it is probably still the case that while a great design may do little for mediocre writing, great writing can be held back by mediocre design.
Cool! The window manager is super tiny. And uses Clutter apparently:

http://src.chromium.org/cgi-bin/gitweb.cgi?p=chromiumos.git;...

But just naively judging by the amount of code here this doesn't feel like the bombshell the tech press is expecting.
Why Android Could Fail
gone quite poorly is a relative term. If your perspective is the wealth creation for the new private owners of the utilities, it has gone very very well in fact as they have made lots of money.

But there are few, if any examples anywhere in the world where privatization of public utilities has made the services cheaper or better for the consumers.
Git tips for SVN users | CodeUtopia - The blog of Jani Hartikainen
I already have passive compliance down pat. I wait on lines at the Social Security Administration with the best of them.

I do have trouble sitting down to comment my code, though. And I think certain skills are better learned as a child.
True. Have a look at chromiumos.git, ibus, login_manager.git	, pam_google.git, syslinux.git and kernel.git
No, that would have the opposite effect.
thanks for the resources. this is great!
So, this raises the question of why you're running a desktop-oriented OS on a server.

And as I said originally I think that's a big part of the problem: the server security use case and the desktop security use case are not the same, and far too much of the discussion has been based around the assumption that they are. On a server, the idea that a non-root user can install packages is terrifying, but on a desktop? Both the threat model and the use case are so wildly different that I don't think it's possible to make any meaningful comparison.
I wish I was at home right now. Coworkers nearby keep having conversations about things that make me facepalm.

I would be working better if I didn't have talk of reality shows forced into my brain when I am trying to concentrate.
Apple I for sale on ebay
Classics in Lego
Well, hopefully there'd be a few competing OSes for it. I'd love to see Singularity on it, and of course I wouldn't mind seeing Renraku (my own managed OS, which inspired this) running on it.
I like the video a lot.

What program did you use to create the screencast?

How did you find the music?
That is the funniest patent I have ever seen!
Why Twitter's new Re-tweet Feature Won't Catch On
Why you should learn HTML5, CSS3, and JavaScript for mobile development
http://src.chromium.org/cgi-bin/gitweb.cgi?p=chromiumos.git;...
Maybe Official builds is Chrome OS
Continuous builds and developer hand-builds is chronium OS
Yes, that's one of the problems for me ... my home office doesn't have a door ... it's just a bonus room on the first floor. In fact, the doorway is so wide I can't even get a baby-gate in there to keep the little one from rifling through my books or camera gear
Elevator Story