skysight-inc/HackerNews huggingface dataset:
Full comment (in case link no longer works):

"Their children were twin girls. Born over one year ago. Severely premature: 24 weeks gestation. Severely disabled. Require 24-hour nursing care for their entire lives. Cannot eat, and will be on feeding tubes for the rest of their lives. Constant medical treatment and medical crises. Maybe someday they will walk. Maybe not. They will never really talk. The financial pressures on this couple were severe: they had already used up all insurance benefit limits, and burnt through their own personal savings with their retirement savings following rapidly. We should put the blame for Sam's death where it belongs. We have the technology to keep little girls like that alive. We have a society that pretty much insists upon doing so. But we put the financial and organizational and emotional burden entirely on the parents. We allow insurance companies to cap benefits, and we have no social system for rescuing people from these straights until they are literally homeless and bereft"

Read more: http://www.nydailynews.com/forums/thread.jspa?threadID=84311...
The thing is, it's like different parts of your brain working. Most of my day activities, is just repetition, I just run through most of it on auto-pilot at this point.

At night on the other hand, it's more thinking work.

So it's two different parts of your brain working.

I know what you mean about ideas. For that I just use mixergy. I hate to sound like a fanboy, but listening to those interviews(and asking questions) is a great way to stimulate the mind for me. A guest will say something interesting, and then I go see if I can adapt that concept into my own site.
It's not completely useless: it's slightly helpful against an attacker that can snoop but not modify.

Of course, it's pretty silly to go to the trouble of writing javascript code that can not only be modified, but may have bugs, when you can just use HTTPS.
This is the whole reason for the HTTP Cookie "Secure" flag: so that session IDs set over HTTPS aren't inadvertently handed out over HTTP.

If you log in at https://mail.google.com, your entire session is encrypted. If you log in via http://mail.google.com, your password is safe, but your session ID isn't.
His blog is a joy to read, and one can learn lots from it. But more importantly, he is always willing to help - just take a look at YC and BoS forums, he is always sharing his knowledge, giving advice etc.

Well deserved. Congrats Patrick.
I don't really see the point in continuing this: you've already made up your mind about the validity of public vs. private health care. If any claims are made without numbers, you will demand numbers; when numbers are provided, you will claim they are gamed, skewed, or otherwise misinterpreted.

The relevant information is there - and from my experiences and wait time in the ER yesterday I cannot say I'm terribly impressed by the availability of your medical system. It wasn't a particularly busy night, but wait times were about equal to what I'd expect in Canada.

I've met many other expats from nationalized-healthcare countries who have lived in the US (some for well over a decade), and I've yet to meet a single one that doesn't regard America's health care system as some kind of barbarism.
I'm still trying to work out VMWares strategy here.

So I assume they make most of their cash selling stuff like ESX/vSphere Server (Or whatever it is now called). And they really seem to own the space (true MS shops will user Hyper-V and true OS shops Xen, but VMWare seems to be everywhere).

But what's with the aquisitions?
* Springsource - Java application stack
* Zimbra - Email platform

I understand they want to diversify the product line (esp if MS follow through and focus on Hyper-V), but I still don't really see where they are trying to go. A kind of Semi-Private Cloud/P-a-a-s, with email hosting? Anyone seeing what I'm missing?
Actually you are wrong. It is quite common for countries to monitor other countries communications in the past (Australia for the US), becuase there are no rules in Australia against monitoring US citizens, only forbidding them from monitoring Australia Citizens without proper procedure.
I'm sure there's measurable truth in what you say, I was just boiling it down. Not trying to slight Google at all.

But, the prospect of profit makes it much easier to convince yourself that your product is a force for good.
This is bad. Over 66% of job creation comes from small business, up to 50% GPD and 33% of exports. Small business never gets the support it needs in America today. There just isn't enough money to pay for the lobbyists.

Healthcare is also a huge contributing factor to people not starting businesses today.
Security is a hard problem. Unless the server knows the password they can't validate Hash(challenge + password). If you intercept both the challenge and the resulting hash you can brute force the password. If you have a method of safely sending the password in the first place you should probably use that all the time instead of trying to build a JavaScript system to avoid sending the password in the clear.

PS: You could implement all the security features of SSL in JavaScript but that wold be pointless and slow. If you really wanted to build a custom security system I would recommended using a Java applet, but even with a team of experts it takes years to build something as secure as SSL.
In practical terms, there is no such attacker. The ability to watch packets in real time is the ability to silently redirect them, or to insert fake packets into the stream.

The traffic manipulation part of the attack is also extremely easy, and not particularly noisy.

For most applications, Javascript crypto is completely useless.
Patrick you really need to do some work on the bingo card creator website. Even though I knew you had an online version from your posts here, it took me ages to find out where I could use it on your site.

The site seems to suggest that the online version is merely a trial version for the desktop, which I know isn't the case.

Rather than:

- Buy now $29.95

- Download free trial

- Try now no download

It might be better to simplify:

- Try now

- Download now for your PC

also you don't have any screenshots of the online version.
> It is vanishingly unlikely [...] China [...] has the key associated with Verisign's root CA certificate.

Sure. I'll give you this.

> It is almost the case that it's worth pruning out certs from your browser from untrustworthy CAs;

This was my point. So you trust VeriSign, but do you trust the others (there are 125 in my list)?

Here's one:

Issuer: C=TW, O=Government Root Certification Authority

That looks like the Taiwanese government to me. If they have one you don't think that US has one?
Huh. It turns out that the enterprise software development cycle is a complicated analog of human history.
It's basically all SEO and promotions.

Promotions are there to improve the SEO.

My promotion budget is $200/week. It's a permanent giveaway, I figure $10K a year is a small price to pay to get hundreds of people to help grow the site.

In my promotions I focus on 3 things: 1) building traffic - points for twittering/facebooking 2) link building - points for blogging about the site 3) building content - points for asking/answering questions.

#1 - gets new people interested in promotions to come participate, and probably a few fashion people as well

#2 - gets new links to the site, which increases our inbound links, which gets us better page rank, which gets us better search engine rankings

#3 - creates new content, which can then be found through Google
Since you seem to be a "dude", who are you relying on for domain/industry knowledge?

Curious about this one since I'm also working on a fashion related project.
Good point. Also, Moxie Marlinspike's tool, SSLStrip, can break some of this stuff as well. I haven't tested it against the relatively few sites that go out of their way to set the Secure flag.
I effectively solved this (and many similar problems) by moving in with my girlfriend, who is an architect. I made a list of all the TVs that had the specs I wanted, she made a list of all the TVs that lived up to her aesthetic standards. We then bought the only TV that appeared on both of our lists.

edit: Or to put slightly more seriously. I've found that it is much easier to narrow down my choices in cases like this if I make an effort to look beyond the spec sheets and focus on more fluffy aspects like, aesthetic appeal, design and how it will look together with the rest of my furniture
What We Need To Know About How To Stay Younger
He says "no coffee". Apparently it's neither natural enough nor "pure brain-food" enough.

Piracetam is another popular nootropic. It's cheap, well-studied (as nootropics go, anyway), and probably pretty benign.

My unrequested advice is that if you're thinking about taking nootropics, you should probably make sure you're eating reasonably well and getting enough sleep and exercise first. Then consider the trade-offs.
Where in the article is the claim that western civilization is all bad?

The author seems to merely be pointing out that western society largely denies the magnitude of the human and environmental cost of its prosperity.
You're thinking of, e.g. Bluecoat. Certainly everyone runs something like a Bluecoat. But I can't name a client that uses the feature where your end users install the Bluecoat cert so they can scrub SSL traffic. They just use IP and DNS blacklists, like you.
this would be a good method if youre marketing in fb. create an win an ipod offer and use the email submit @ the fb page itself.
see also http://news.ycombinator.com/item?id=1048787
DARPA funding mostly?
He is adding methods to a class once it already have some instances and those instances get the new functionality.
That's 'monkeypatching', which IS a form of metaprogramming.
"When you are downsized in the US, a security guard escorts you to the door."

Not when I was downsized. I got a month's grace-period and everyone said goodbye when I left.
The IPs would get blocked. If you had many IPs, chances are they would be from a small group of ranges and the entire ranges would get blocked.

For years the way I worked around the firewall from Shanghai was to run SOCKS proxy through an SSH tunnel to my U.S. server. This works because its not advertised as such and China does not want to block all SSH/SSL traffic.

China is not trying to block everyone. If you're well educated, tech-savvy, and have a credit card to rent a server outside China, you can get around the firewall. Its that simple. If you read Chinese, as most do in China, there are many avenues of (sometimes transient) data sources which carry just about everything you could imagine. The information is out there, you just have to work a little harder to find it. China, just like various interests that control U.S. media is going after the broad strokes. In China they use the GFW, in the U.S., advertisers simply tell the top 4 media companies to not talk about certain things or else their ad money will dry up. The results as to what the general populous know are similar in my opinion.
I started the site by hitting the female subreddit and getting a whole bunch of them to help out on the site. That's where I get the first couple of active users, who've stuck around and are answering most of the questions.
India Developing Anti-Satellite Spacecraft
Is this a Stack Exchange site, or just looks like one?
Not using a Windows desktop?

Both Macs and more traditional Unix-like desktops are mostly 100% Adobe-free. If you go with a non-x86 or non-AMD64 processor, all the better.
There's this perception that the coasts are the populations leeching off the federal government while it's really the hard-working red-staters that are propping up this country. I think he was just trying to say that California shouldn't be punished for this perception by having federal money withheld.
One big argument for why you should have to pay school tax even if you don't have kids is the positive externalities of public education; you benefit from other people's kids getting an education, so you should pay for that.

There's a similar externalities-based argument for why some states should be net tax donors to the federal government, but I think it's a little weaker. How much does California benefit from New Mexico or Virginia being a net tax recipient?
I don't think the author is ever making the claim that federal spending should be proportionate to tax levied from that state. He's just using the data point that CA is still a net source, not sink, of federal tax dollars as evidence for his thesis that CA is not on the brink of collapse. His last sentence about succession is only meant to counter hyperbole with hyperbole.
Really, it depends on the people.

I am reminded of the two miners who were trapped underground in China a few years ago. Finally one gave in to his hunger pangs, killed and ate the other. He was then rescued, less than 24 hours after they had become trapped.

Granted, the news reports I heard did not mention the ethnicity of either of the miners. But I don't think many people would have predicted that outcome in a thought experiment.
bullshit. the real reason "nothing to hide" is invalid is that it refuses to recognize that we don't cede all moral responsibility to the government. thus it usually comes out of the mouth of people who do think the government should ultimately be responsible for morality. this means that all moral decisions have legal penalties. morality at the end of a gun should be reserved for things we actually agree on. things like rape, murder, theft, fraud, reckless endangerment etc.

puts on libertarian helmet:

"There's no way to rule innocent men. The only power government has is the power to crack down on criminals. Well, when there aren't enough criminals, one makes them. One declares so many things to be a crime that it becomes impossible for men to live without breaking laws." -Rand

I guarantee that all of us are breaking laws of some sort everyday. even if it's just the speed limit.
A quote in Macworld suggests it's Google's law enforcement backdoor that was compromised. Google didn't mention that in their press release, which is a mighty big omission.

http://www.macworld.co.uk/digitallifestyle/news/index.cfm?ne...
Page rank is homepage specific not term specific. I use a tool bar for that, but you can use: http://www.prchecker.info/
A question for you. If you were magically transported into the the 1500s as one of the conquistadores would repeat their actions? If you had the capacity to stop their slaughter would you? Or would you perform the same terribly acts simply because it lead to a future that you are comfortable with?

Everybody knows that the past is the past and can't be undone. But that doesn't mean that we should lie to ourselves about it. What really matters is what we do here and now in the world. If you condone such actions in the past then it is natural that you will condone them in the present and future as well.
Thanks Jesse for mentioning us (note: I work for Mashery). I'll leave the rest of this thread alone, but to add specifically to the pieces about Mashery...

Mashery has really big clients and really small clients. We built our solution on AWS very shortly after it launched and know "the cloud", really really well. We have clients with APIs that exist on EC2 or in their own cage. Some clients are beta programs, some crank hundreds of millions of calls through us. Working with us isn't so much about size, but what value you'd get based on your need.

We don't just provide a Portal. But yes, we do provide a full solution for managing API's: portal, developer management, limiting, caching, authentication, analytics. Things we think are important for people managing API's, big or small, science project or commercial.

Integration with Mashery can also literally be typing in a URL - but usually you need more if you want to expose an API, especially if you want it to be commercial.

We have clients that run commercial API programs. There aren't too many big examples out there where people are charging per call and needing a toll booth as it were. The day will come though so I'd agree.
Consider the case of someone getting their information by triggering some sort of debug mode on the router, or using some sort of side channel. More plausibly, consider the case where someone can break your over-the-air encryption (but not in real-time). It may be extremely rare, but strictly speaking it's not impossible.

That said, if option A may help in some unusual case, and option B will be effective in all non-catastrophic cases, I know which one I'd choose.
Haskell, Ray Tracing, and Parallel Computation
Yeah SE...with about 4000 lines of css, javascript and jquery
VIDEO: What is Minimum Viable Product?
is anyone actually under the impression that ruling people (read: the ability to tax them) isn't insanely profitable? just because the books aren't balanced? california is one of the most productive places in the world per capita wise.
MixTapeMe
Well, an ActiveX login for online trading sites is like de facto standard in China now. The problem is every site has their own ActiveX, I myself must have over 7 ActiveX installed.

And they are IE & Win32 only. That's why every Mac & Linux user has to install a VirtualBox/VMWare for online trading.

I was hoping Google Gears could provide some sort of similar mechanism, together with CAPICOM exposure to Javascript across platform and browsers :)
Also it DOES provide a SSL login page

https://login.taobao.com/member/login.jhtml

plaintext version

http://login.taobao.com/member/login.jhtml

IIRC most of these popular sites provide a switch option between HTTPS and HTTP.
The web apps I've seen that do this all look pretty scammy. I wouldn't want them poking around my site. Then again, it is a public site, so...

Anyhow, since there are several major attack vectors, there are also several different types of scanners. I recommend you read the book "breaking web software" to get a better understanding of the types of attacks.

As far as tools, if you have a PHP install I recommend https://chorizo-scanner.com/

No recommendation, but http://www.acunetix.com/cross-site-scripting/scanner.htm looks like they can help.

IBM has a good article/series on web app vulnerabilities at http://www.ibm.com/developerworks/web/library/wa-appsecurity...

And finally, wapiti is a vulnerability checker written in python that will do scans of web apps. COmmand line, not web, but pretty good - http://wapiti.sourceforge.net/
in your about us page the 4 of us is actually five people:

The 4 of us

This is our team: our main developers Ramon and Hernan,
our designer Lorenzo and our founders: Mauricio and Fabián
The Truth About Digital Sweat Shops (e.g Amazon's Mechanical Turk)
Some societal constructs seem to have benefits, though. I am happy that I don't have to carry a gun at all times and don't have to fight for my territory and my life every day.
I'd say pedantic and difficult to work with, but agreed, no hire.

The correct answer would be to write a simple solution and note your assumptions and point out the edge cases - but not in such an antagonistic manner.
All the demos work fine for me on the Chrome 4.0.288.1 dev.
I find that I have to protect myself against desire at times. When I find out about a new tech, I start looking around for problems to apply the solution. Sometimes that's good. Sometimes, that's bad.
Considering most of the email I send is from gmail to gmail, if it's getting read by 25 or so countries, Google has much bigger problems than they've been letting on.
As I see it, they're trying to develop themselves as an end-to-end solution for the small and medium markets.

Springsource -> low resource java stack that can be bought as an appliance to take on Websphere on their VM, automatically managed (as opposed to manually setting up a linux box each time.)

Zimbra -> an email solution on top of their VM that allows you to expand as you go with configuration on top of their VM stack.

Also, they have a lot of money burning a hole in their pockets, and virtualization will only take them so far for growth...
life's too short dude, get a girlfriend and enjoy life a little bit.
I'm really hoping so. It would be nice to see this become a movement.
So apart from that one culture doing human sacrifices, what did the others do in your opinion to deserve extermination?

I really can't follow the logic here. Why do you even feel the need to justify the murdering of the natives? And how can you think it can be justified? Even if the old ones were murderers (which is probably not true in general, even if you make it so), what about the babies?
It's sure not outside my experiences, and I agree with him. It's a permanent solution to a temporary problem. I struggled with depression for most of my life, and I'm still glad I now manage it and have a successful life.
AFAIK, Facebook was one of the first users of "social" ads. The ad networks would pull in your pic next to all sorts of shady distasteful ads, and because Facebook couldn't control that, they turned it off. (I think so, don't know so-- I work for Facebook, but these are my opinions alone).
"My point is that you can't just say "they did this awful thing, therefor everything about their culture was horrible"."

Nobody was even saying that. You seem to fabricate an enormous straw man.
Ever thought of going homeless? Rent is a bitch.
I propose an amendment to the state constitution mandating...
> That means anyone who buys the phone online with a T-Mobile contract and wants to get out within 3 months are ...

... fools who aren't responsible enough to sign a contract in the first place, and just getting what comes to them.

Either way, it's cheaper to buy the unlocked phone.

https://www.google.com/phone/choose?locale=en_US&s7e=

Subsidized phone: $179
Subsidized service: $80 * 24 months (click "more")
Total: $2099

https://www.google.com/phone/choose?locale=en_US&s7e=

Unlocked phone: $529

http://www.t-mobile.com/shop/plans/cell-phone-plans-detail.a...

No-contract plan: $50 * 24
Total: $1729

If you're stupid enough to sign up for a contract that costs more than the no-obligation version, and then you want to welsh on that contract: you've got to pay the penalties.
Nice. Though all of the 99 lines are >75 characters. With a more readable formatting it would be twice as long... ;-)
If you suggest "now is the time to get paranoid about your certificate store", I agree.

If you imply that there's a problem with the SSL/TLS/HTTPS model, I'm pushing back hard. There is a weird SSL stigma among web developers, and it's time to start beating it back. The alternatives are worse.
Our economy cannot function without cheap imports.
I'm sure there are web apps which will find security flaws; but you shouldn't trust their results. Finding security flaws is equivalent to determining whether a Turing machine will halt -- i.e., there is no algorithm which can guarantee to give you the right answer.
>true MS shops will user Hyper-V and true OS shops Xen

That is not entirely true. I'm installing a lot of VMWare systems at "true" MS shops, which choose VM for the same reason as MS (market leader, no one ever got fired... etc.) where hyper-V is still perceived as immature product. In MS shops license cost usually is not the decisive factor, and VMware is perceived as the best technology(aksi the most expensive). It is true a lot of those places run Hyper-V as well, but they don't usually host production systems on it.

My take on it is: MS is quite good at making development tools, Exchange, Sharepoint, systems management software etc. (generaly high level stuff) The further they are kept from the hardware the better. Most people employed by MS shops know that intuitively and they welcome the opportunity to buffer MS software from the hardware even if it costs $10k per CPU license.