jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
OWASP Application Security Verification Standard 3.0
https://github.com/OWASP/ASVS/blob/master/OWASP%20Application%20Security%20Verification%20Standard%203.0.docx
OWASP Foundation:

We are in the last stretches of reviewing the OWASP Application Security Verification Standard 3.0, to be released at AppSec USA in September.
If you are an application lead, lead developer, developer, tester, pen tester, code reviewer, or auditor, please review the draft here: https://github.com/OWASP/ASVS/blob/master/OWASP%20Application%20Security%20Verification%20Standard%203.0.docx
We would also appreciate if you could pass this draft onto software engineers, practitioners, developers, CISOs, and architects. Please log any discovered issues here: https://github.com/OWASP/ASVS/issues
Ask HN: How to test if a candidate knows a programming language in an interview?
I am about to start interviewing candidates for a position that involves expanding an in-house analytics platform written by a developer who is leaving the company. The code is well-documented and under source control, the build process is very straightforward, deployments are not complex, and there is an extensive data dictionary that documents all aspects of the database. Everything has been written and documented solely by the developer who is leaving, and this developer will be one member of the team who is interviewing potential candidates.

Everything is written in C# and the .NET Framework, and my team and I are struggling with the question of how to assess a candidate's understanding of the language and framework. While someone could list vast industry experience on their resume, this isn't a guarantee that s/he can understand and expand upon the code that is already written. I am looking for something a little more in-depth than a typical FizzBuzz test, but also want a more interactive interview than simply quizzing the candidate on the language features most-used in the codebase. One of my colleagues had an idea to provide the candidate with some example code and have a discussion about that, including how that code would fit into a larger application and what aspects of the code the candidate would change, but writing a fresh piece of code is time consuming, and we don't want to spend a lot of time explaining non-programming concepts if the candidates don't have a solid knowledge of our domain (finance).

Does anyone have any suggestions?
Show HN: the technology and the game I am working on for months
For impatient reader: http://api.alii.tv/ and http://pprevolution.com/

It is not finished yet (obviously). We are still working on new feature, bug fixes and more browser support.

The motion control API for now only works on Firefox/Windows and Firefox/Mac (of course you can copy the bundle to /Library/Internet Plugins/ so that it also works on Google Chrome/Mac). It will initiate another process to do hand detection, don't panic if you see another process called amcex in your activity monitor.

What it does? Visit http://api.alii.tv/console.html get some initial feelings. Put you hand in front of your webcam (0.5 ~ 1.5 meters is perfect), making the palm facing the webcam, you should see the blue/red dot moves with your hands. You can get readings by binding callback in the javascript, and that is it.

http://api.alii.tv/showcase/asteroid.html is a little game that utilize the API.
http://pprevolution.com/ is a heavier one (Facebook Game with Flash).

Any feedback is welcome. You can drop emails to me, too: liu@alii.tv
Ask HN: Should 3 cofounders live together?
So, I'm sure plenty of you have faced this dilemma:

Myself and my 2 partners have gotten accepted into an accelerator/incubator. We are moving to NYC which is obviously expensive. One of the cofounders already lives there.

What is the best way to work out our living arrangements? Do we A) All live together in cramped quarters (it is NYC after all) or B) The one who already lives there continues his life as is and the 2 of us moving there get a place together?

Would love to hear all of your feedback about what has worked or things to lookout for! Thanks.
Startup what?
http://nyc.startupweekend.com/?p=7
That was pretty much everyone's reaction when I sent them this site, told them I had signed up for Startup Weekend NYC and agreed to be a blogger. You would think that they might check out the Startup Weekend Home site, but even that doesn't make it crystal clear, and some people (like my parents and even some of the co-workers) need crystal clarity. So I started sending people to Penelope Trunk's blog posting about it.
Ask HN: How to find a student job as a programmer?
I am a CS student in The Netherlands. Here it is pretty common for students to have a part-time job. Most of them just work in the supermarket or in a restaurant, but I thought it would be nice to put my programming skills to good use.

After some searching and a couple of interviews, the main obstacles I found are:

1. Many companies underestimate your skills and want to give you trivial and boring tasks (e.g. find and escape all SQL queries in an ASP codebase, ugh)

2. Big companies don't offer part-time jobs for professionals, let alone students.

3. Some companies have whole teams of incompetent people (e.g. a friend of mine gives lessons to one of those teams! Yes... it is the same one of #1)

4. Startups don't have the previous problems, but are often unable to offer a good salary.

5. Because I am a student, my network is pretty limited.

Should I just accept #1 and hope for an improvement in the future?

Do you think #5 could be solved by going to meetups or something like that?
Ask HN: What are the current (IT) industry skills employment cash cows?
What do you think are the (IT) skills that employers currently pay loads of cash for and are widely searched ?

Spring, LINQ, DB scaling, BPMN, others ?
Corruption Perceptions Index 2011 (Map)
http://cpi.transparency.org/cpi2011/results/
http://cpi.transparency.org/cpi2011/results/#CountryResults (Tabular)
Why Willpower Doesn't Work
http://get.minimumviablefitness.com/blog-01-willpower/
Have you ever approached fitness resolutions with a “just do it” attitude? Were you disappointed that you summoned up all of the willpower that you could muster in January only to find yourself back to your old ways by March?
Wasted Time in the Workplace Infographic
http://www.timedoctor.com/biz3.0/infograph-wasted-time/
Cool info graphic about wasted time in the workplace
CoffeeScript-based implementation of Notch's DCPU-16
https://gist.github.com/2308725
A minimal CoffeeScript implementation of Notch's DCPU-16.
Next Generation messaging 
This will be the fastest and most secured way to message.

Need someone with cloud computing experience to join me as the technical co-founder. You will be paid something for the prototype so either way your time is not wasted. We will launch a crowdfunding campaign to gauge interest and raise money to build the full app.

If you think you can help, email me at my HNusername@google mail. THANKS
Facebook to do over $1 Billion in Revenue in 2008
http://www.techcrunch.com/2006/12/12/yahoos-project-fraternity-docs-leaked
Amazing. Facebook has already hit Yahoo's predictions for 2015 size. Predicted: 52 million Today: 58 million now. Now look at he expected earnings based on 52 million active users. I can see why there is so much FB Koolaid now. And for the skeptics, remember Google had 2002 revenues of $240 million. http://www.wired.com/wired/archive/15.02/yahoo.html
I'm no fanboy, but I have to respect them more now.
Looking to partner with Christian, pro free speech server/network engineer
Hello all,

I have a real-time prayer platform I am working on called World Wide Prayer (check out my working website here: https://www.worldwideprayer.cf). The platform allows for daily live prayer all around the world. While I am currently using Awardspace and Firebase and have Android and iOS apps made, with tech companies deplatforming websites and apps I would like to have a more private server and database. Unfortunately, I lack expertise in how to proceed in this area. I am looking to partner with someone who has this expertise and who wants to be part of the next generation of the internet. I don't care about your politics as long as you believe in free speech.

Message me here or at newworlddevelopers@protonmail.com if interested.

Thanks,
Jimmy
Show HN: I made a list of online education resources; help me finish it
http://char.io/learning/resources
I'm hoping that by putting it up here you can help me improve the list. Any suggestions at all are welcome. If you know of any that I'm missing, please email me at clemmer.alexander@gmail.com
Achieving fast deploys for a large Rails app
http://blog.pagerduty.com/?p=2336
Some tricks we picked up along the way.
How to become an amazing contributor (to an open source project)
http://opensource.com/life/11/3/how-become-amazing-contributor-open-source-project
A story of 3 contributors to various open-source projects and a laundry list of how to be a great contributor yourself.
Splash and Coming Soon Page Effects with CSS3
http://tympanus.net/codrops/2011/12/07/splash-and-coming-soon-page-effects-with-css3/
CSS3 opens up so many crazy possibilities and today we want to show you how to go wild with splash and coming soon page effects using CSS3 animations. We’ll experiment with animation sequences and how to bring some life to some simple elements.
Oak Island Money Pit
http://www.oakislandmoneypit.com/
I'm a long-time HN lurker, like most of you I guess, but I'm also obsessed with the Oak Island Money Pit. I apologize in advance if this posting isn't appropriate. Just thought you might enjoy reading about it since I do.
Norways biggest websites tell IE6 users to upgrade
http://www.cjohansen.no/en/browsers/norway_tells_ie6_users_to_shape_up
Alot of big websites in Norway are telling IE6 users to upgrade their browser. A full-blown campaign is on!
Ask HN: Need a career advice
Hi,

I'm passing out from medical school at the end of this year. However I'm not interested in working the rest of my life in a hospital as a regular doctor. I love programming and computers since childhood and even while at medical school I learn new stuff and make mobile and web apps and stuff for learning and for fun. Also I learn different languages and frameworks whenever I have free time. And also does freelance stuff for my friends doing IT and CS at college. And I have basic knowledge in CS. Although I don't have any degree in computer science I can try to get one in the future.

Is there a way for me to work in the computer industry with the experience I got from medical school and using the computer knowledge I have?

I checked bio-informatics field and from the things I found on the internet the salary in bio-informatics profession is half in that of a physician in US.

Are there any other fields other than bio-informatics where I can follow an alternative career other than becoming a doctor and also because I'd love to work in the computer field.

Thanks
Show HN: Spinach.io (YC W22) Chrome Ext to Run Better Standup in Google Meet
https://chrome.google.com/webstore/detail/spinachio-daily-standup-t/eippeohhelpgpnchcfigkjmpepicilig
Hey HN! I’m Yoav, co-founder of Spinach.io (YC W22). We're building Spinach to help engineering teams run standup on autopilot, improve daily alignment, and give teams notes from every standup they can share to cut back on status updates.

We launched the Spinach web app a few weeks ago on Launch HN, and the feedback from you all was really helpful. As a followup, we want to show you our new Chrome Extension. It allows you to run your standup directly in the Google Meet window with no extra tabs open, no screen sharing, and no context-switching.

[Watch our team run standup using the Chrome Extension](https://www.youtube.com/watch?v=4bdimeouLDA&t=4s)

Get the extension in the Chrome Store, sign up to create a meeting (it's free and no credit card needed), open in Google Meet, and share your feedback on the experience.
Subversion Raodmap - WANdisco report
http://subversion.wandisco.com/component/content/article/1/60.html
One of the most frequent questions people ask me is "when will (insert favorite feature here) be included in Subversion?" Many times, that feature is already part of Subversion, but just the questioner just doesn't know how to access it. Other times, the proposed feature is something which would be better served as a local customization to Subversion, such as hook scripts. But occasionally, my inquisitor has pointed out a bone fide deficiency in Subversion, and I've often stumbled to answer the question of "when will it be done?"

Until now.
Software Schedules and the Parable of the Loaf of Bread
http://blog.slickedit.com/?p=221
Today, I want to discuss a common problem that occurs after the estimate is delivered. Often, the estimate is considered to be too high and management tells you how long you have to complete the task. Sometimes this is motivated by important business goals. Other times it’s motivated by a manager who wants to look good or has a bonus tied to a delivery date.
On social media buttons
http://codetunes.com/2013/on-social-media-buttons
How we reconciled having with not having the notorious social media buttons on our blog.
Show HN: shortcommand – Easily run a set of commands quickly using a YAML file
https://github.com/flawiddsouza/shortcommand
This tiny command line tool was created mainly because I have several apps that I run on my server and finding the right set of commands for deploying an app is a hassle. So this basically documents the set of commands for each of my projects, as well as gives me quick access to them. Just wanted to share it here in case anyone else might find it useful.
Show HN: Farmbound – A Diurnal Game of Farming
https://kryogenix.org/farmbound/
Farmbound is a puzzle game about farming. Combine or fertilise seeds into crops and crops into fields; put scythes and tractors next to crops and fields for points. Think of it like a cross between a match-3 game and Little Alchemy. The twist is that you get the same sequence of items for the whole day: if you play again, you’ll get the same things in the same order, up until midnight UTC when it changes.

There's also a description of why it's built the way it is: it's a web app. The full post is at [0], but here's the tl;dr: it is entrely possible, and ought to be more common, to give people an app without tithing to an app store and having someone else review it, and without having to build platform-specific native versions. And that means that your app works on phones, on desktops, everywhere. Why limit your audience?

[0] https://www.kryogenix.org/days/2022/08/31/farmbound-or-how-i...
Ask HN: Anyone recall a simple project dashboard web app seen here last year?
Last year a startup was discussed here offering an incredibly simple shared tasks web app. I think it had a charcoal background.

The idea was a single page a team could glance at to see what the current tasks or priorities are. There may also have been an activity stream for individuals' updates, though I don't recall for sure.

This was not a full project collaboration tool like http://www.nozbe.com, and far simpler than even https://taskant.com/.

It was more like a pinboard of note cards of what a team should be working on.

The minimum viable product aspect and black background stuck with me, but I can't recall the name or even search terms to look for it.

Any ideas what web app I'm thinking of?
Ask HN: Anyone looking for high school interns?
My friend was just rejected from two surprisingly competitive programs for high school students.
It seems like there is small demand for high school summer interns, so even some bright and high ranking students end up with nothing to do. Anybody looking for an outstanding student with great graphic design skills and can hold her own in Java?
Show HN: I'm giving away 26 hours to 26 startups I've never met
http://thauburger.com
Today's my 26th birthday. One of my goals this year is to work with lots of new, interesting startups. So, in YC fashion, I'm opening up 26, one-hour "office hour" sessions to any startup who is interested.
Ask HN: What ever happened to 'custom' webdev agencies?
Maybe my search skills have simply degraded with age more than I care to admit, but where does one find a good custom webdev agency these days? And I don't mean some company that will simply spit me out some templated riffraff but one that will actually sit down with me and plan something specific out. Somewhere where I can say "I'd like to rely on web components on the frontend and node in the backend" and that not seem like some asinine request...
Free Online Subversion Training
http://www.wandisco.com/php/pr.php?rss=0&prdate=2010-04-13
The first course in the series, Branching and Merging in Subversion 1.6.9 will take place on Wednesday, April 21, 2010. This course will cover everything from branching and merging basics to best practices. The second course in the series, Introduction to Subversion for Developers will take place on Wednesday, May 5, 2010. Subversion’s architecture and design principles will be covered and attendees will be introduced to using Subversion for software development.
Ask HN: Review my application (2nd try).
http://www.doxela.com
I posted this yesterday, but I believe several people missed it. So I wanted to give it another try, if you may.

Doxela.com is a very simple way to share pdfs and ppts (with soon .doc and other formats to follow). Think of it as an imgur.com for documents.

I would truly appreciate the harshest feedback.

Thank you all.
Rainbow Mansion (host to quite a few SuperHappyDevHouses) covered on The Reg
http://www.theregister.co.uk/2010/07/23/the_rainbow_mansion/
It's also where I live. I'm sure a few here will recognize the house :-)
Cloud hosting is wickedly profitable
http://www.sdtimes.com/blog/post/2010/05/11/At-last-the-truth-about-cloud-hosting.aspx
OpSource CEO lets the cat out of the bag: the cloud hosting business is waaaay more profitable than traditional hosting.
Web 2.0 names that were stolen from my 4 year old
http://tracksuitceo.com/2008/07/17/web-20-names-that-were-stolen-from-my-4-year-old/
Jaiku, that was just bought by Google and Joomla are both names invented by the author's 4 year old. He wants her to get some credit...
#HashtagBattle - Fight on Twitter
http://hashtagbattle.com
This site is born from a friendly competition between two Startup Week-ends held the same day in Sophia-Antipolis (France) and Lauzanne (Switzerland). We wanted to know which side would get more tweets.
Camille, co-organizer of the Sophia-Antipolis event, coded the first prototype of #HashtagBattle in one hour on a Friday night.
On saturday night, with some kind help from the awesome Damian, the prototype was tremendously improved and the first release was deployed!
My Summer Internship At A Startup
http://jianxioy.posterous.com/under-incubation
Here's an analysis of my experience working at a startup over the past summer. There were good, bad, and "wtf?" moments but I still enjoyed it nonetheless.
Erlang FizzBuzz Showdown (Part 1) from a PHP/python/ruby developer's perspective
http://www.joelhughes.co.uk/blog/2009/05/erlang-fizzbuzz-showdown-pt-1/
Building of a FizzBuzz program in Erlang from a PHP/python/ruby developer's perspective. The first steps into functional programming.
Ask YC: Is anyone using Fluid, Air, or Prism to wrap their sites?
http://www.37signals.com/svn/posts/797-fluid-wrap-your-favorite-web-apps-in-their-own-browser
There
Show HN: LifeSnapper.com (Alpha)
We've just launched the alpha of a 10-month bootstrapped project at http://www.LifeSnapper.com

While I'm going to guess that HN is perhaps not our target audience, I wanted to show you guys what we've built because I've done a lot of helpful reading here over the past two years. I shared some really key links found on HN to our coder, Katherine, and our Sugar Daddy, John while we were laying our team foundations out and that stood us in good stead.

We do of course eat our own dogfood, and have made a simple LifeSnap of our company story so far:

http://www.lifesnapper.com/LifeSnapper

We've got (closed) alpha testers, a business model, a dev roadmap, and we're really psyched for the future of LifeSnapper. Feedback very welcome; thanks for looking!
Show HN: I made an easier version control system
https://jamsync.io/
Hi everyone! This is the first launch of my project, Jamsync, which is trying to make version control easier for everyone. Let me know if you have any feedback!
This must disappear
http://i.imgur.com/Bno5rqB.png
With a habit of highlighting text while reading - this is by far the most irritating thing I've ever seen.

I know I'm not alone.
Show HN: Roc is a language for making delightful software
https://github.com/roc-lang/roc
The roc-lang repository was made public, so I figured I'd share it here.
Craigslist launches Map View for apartment hunting
http://sfbay.craigslist.org/search/hou/sfc?query=&catAbb=apa&srchType=A&useMap=1&minAsk=&maxAsk=2500&nh=1
After baby steps and lawsuits in this direction, Craigslist launches Map View for apartment hunting. Does this essentially kill Padmapper and the rest?
Show HN: WalletWatch – a social network for Ethereum wallets
https://walletwatch-frontend.vercel.app/
Hey HN,

I’m Kamil and one of the two people working on WalletWatch. We recently graduated college and have been getting more into crypto / web3 over the past year.

A few of our friends had been getting into crypto more recently, but we noticed that it was hard to actually see what they were doing or natively engage with the transactions they were committing. Products like blockchain.com and etherscan.com were too technical, and products like Context or Zerion lacked key features that make modern products social, such as descriptions, likes, and comments.

We built WalletWatch as an easier, more social, and more fun way to see and engage with your friends’ Ethereum activity. We don’t ask for your email or password, and instead authenticate by asking users to sign a transaction with their Ethereum wallet; we ask for usernames to give a more familiar and user-friendly experience for people that haven’t purchased ENS or other crypto domain names. At the moment, we’re storing user data in Firebase instead of on-chain because the current decentralized channels are too expensive or slow.

We consider WalletWatch as pre-alpha. The website only renders in a mobile viewport and isn’t totally visually or computationally optimized, because we wanted to see if people liked this thing enough for us to spend more time making it polished.

We’d love any feedback you all have! Please e-mail me at kamil@fwd.exchange or Blockscan Chat me at my address: 0x85eEF00b9a78A993359E94FD3Bcf65e9BDe909FB
Ask HN: How many of you are doing algorithmic programming competitions?
Just wondering, how many of HN'ers are doing algorithmic programming competitions such as Topcoder, Google Codejam, IPSC

If you are doing those, are there any reasons besides fun?
Show HN: Create Matplotlib visualizations from the command-line
https://github.com/dcmoura/matplotcli
I do lots of data analyses in the command-line and I was missing a simple utility to plot the output of a command (without having to script it). I like very much the Matplotlib API but I found no CLI to pipe data into it. So, I wrote MatplotCLI, a simple CLI that reads data from the stdin and allows to easily create interactive plots from the command-line. Have a look at the README for examples and recipes. Let me know what you think, thanks!

Some examples:

$ plt "hist(x,30)" < sample.json

$ cat sample.json | plt --no-show "hist(x,30); savefig('myimage.png')"

$ plt --no-input "
x = np.linspace(-1,1,2000);
y = x*np.sin(1/x);
plot(x,y);
axis('scaled');
grid(True)"

$ echo '
{"a":0, "b":1}
{"a":1, "b":0}
{"a":3, "b":3}' |
plt "plot(a,b)"