skysight-inc/HackerNews huggingface dataset:
The point I'm making is that it's not as easy of a problem to resolve as you are claiming. The problem is that - as you said - there are so many different XSS vectors in the browser; if you patch one specific use case then the exploiter will just find another. Browser developers aren't avoiding this problem; they just realize how complicated it is and have to approach it slowly to do it right, and to not break compatibility.

Your <noscript_within> tag is something that I'm sure every browser developer (and web app developer) has thought up at some point. It does not resolve this problem. It would only protect a site in the case that a website allowed all user input to be passed directly onto the page unedited. Your solution would require app developers to allow commenters the full range of HTML (including blink, marquee, and who knows what else) in their comments. Because once the app developer starts to try to filter the commenter's input, he's opening himself up to an exploit that allows the filtered output to contain a </noscript_within> tag.

The simplest example would be an app developer who simply deleted all <marquee> tags because he/she wanted to disallow marquees. The script kiddie would just insert </noscript_<marquee>within> into his comment.

The more complicated examples would be things that neither you nor I have thought of yet.

That doesn't even take into account the exploit of users in legacy web apps who could potentially start passing in unclosed <noscript_within> tags (in apps which allow HTML but filter only certain tags) to disable legitimate JS later in the page, breaking the apps. Of course, it would be possible to only enable <noscript_within> based on doctype or something else, but then it's certain that some web developers will accidentally forget to do so and leave their app open to abuse.

You are oversimplifying the problem. I am sure that a solution exists and XSS will eventually become a problem of the past, but the solution will be more complicated than you claim it would be.
People are searching for "iphone 4 battery" or whatever because the battery of the iPhone has been touted as one of the best.

People are reaching this site because the URL to that post and title of the post has all the words, which scores pretty high on the relevance-o-meter for Google. Why is it so surprising that people searching for negative opinions about the battery life are reaching a negative post?

Engadget has got 38 hours of usage out of the iPhone. Good enough for me: http://www.engadget.com/2010/06/22/iphone-4-review/
I meant the same repository software/format. Try to convert CPAN...

And you'd need language bindings for selecting the properly installed package (language modules need to be multi-version capable). Things like "gem 'activerecord', '= 1.4.0'" in RubyGems, or Maven's dependency resolution.

But again, the technical difficulties pale before the political ones. You'd have a much larger chance of success concentration on one platform (e.g. Debian), creating some automatic gem/egg/CPAN converter and then wrapping the language-native tools to use that. Whether that's actually worth the effort…
how do you get the most out of [computer book]?
Before working on my startup, but with full-time development job:

1) Weekdays: 8 hours at job, occasionally another 2 at home on hobby stuff. 6 hours on hobby stuff on Saturday or Sunday (rarely both) on most weekends. Hobby stuff almost always related to game development.

Currently:

1) Often 7 days a week, for 10-12 hours on weekdays that I dedicate to programming and 4ish hours per Saturday/Sunday if I decide to do stuff.

2) Spend time with my wife, visit family/friends, and RARELY record some music / play video games.

3) Yup. And even with the hours mentioned above, it's been pretty great so far :)

Oh, I should add that programming hours just count for me sitting at my computer with the goal to write code. There's lots of thinking, researching, reading documentation, and of course procrastination on things like HN in those hours.
I use Localytics
Your number 2 is interesting. My company actually basically does this. We crawl the UK web for business sites, incl. retail and hospitality/leisure and suck out contact details, addresses, products, services, food & drink items on menus, opening times as well as a few other things. We're looking at making available an API.
We are still suffering from the effects of a developer who employed #1 throughout the codebase. We have both Object and Collection, and bypassing his classes results in reduuced memory usage by a factor of 10 and improved performance by a factor of 100. Unforunately he also employed #7 so it's very tricky to bypass that in some places without doing a major rewrite...
Thanks for the tip about Bookscan! According to Wikipedia BookScan's US Consumer Market Panel currently covers approximately 75% of retail sales. That's pretty wide coverage, which is just what I had in mind. Amazon had occurred to me, but I didn't think they would have a large enough percent of total sales.
Therapeutically, 1-2 days of 12 hour stints. If I am not programming, I am researching for it. Today I am doing some translations for a Free Software app.

Most days I have about few hours I spend reading specs, history, books. And I have emacs and slime running at all times, so I code about 2-3 times a day just trying things out. Everything is done in a Lisp repl; i might do calculations, test stuff I read in the spec, few attempts at solving someone's problem on IRC or Usenet,or trying out new API.

Just yesterday I hacked up stuff using the Dropbox API, and I ported a few OOP stuff from the Dylan spec to CLOS. Last week I wrote a util that separates the audio and video tracks in FLV videos; because my fiancee wants to listen to youtube vids in her MP3 player.

etc.

Just productive procrastination.

FWIW, I have ~600+ .lisp, .sh, .c and .asm files in my ~hacks directory, with absolutely no method to the madness. I sometimes forget I have done something previously and do it again. Gotta automate that part of my fun life I guess.

[Edit:

Lest my employer sees this; I wasn't counting work hours. Of course I put in 9+ hours of highly productive programming, design and analysis. Things that are crucial to meet our business objectives and execute our shared vision. Ooooh, shiny LLVM plugin!

]
Localytics is close to real time. I track my launches with it and can see the spikes from certain big blogs to be clearly visible.
Anyone install this and try it out? I'd like to but I think I'll wait for a packaged version.
"How to make friends and influence people" should be mandatory literature for everybody who interacts with people as part of his job.
Refreshingly content-free!
Python 2.7 released
(In Data Mining) Do not Buy a Car if you Cannot Drive
that's sort of my point, though ... you still don't need a computer science degree (or even much CS knowledge) to understand this tutorial. i would think that self-taught hackers might be offended by the title of this article, since it implies that you need to have some deep ivory-tower CS training in order to understand it. but in reality, it's quite well-presented and accessible to a general techie audience.
I am told that there has been occasions when explosions are used to either break or cap wells - not this deep (as you say). But the point is that there is experience in such an activity; and those people seem to be pretty much saying the same as yourself (we don't have the experience)
Free Credit Reports that cost money
I'm working on my second startup and trying to keep the hands-on coding versus commercial work to a 50/50 split. Remember, your coding time will be a subset of your actual time spent on technical work, even if you are developing a system from scratch - its important to understand that as a founder your days are very interrupt driven which leads to lots of distraction, try to find a routine where you get 'quality' time to get your coding done.
That's because it's not creepy when girls do it. Creepy in this sense is used for unwanted attention from "unworthy" males, the female equivalent of this behaviour would usually at most be described as annoying.
Jakob Nielson argues that, specifically in usability testing, 5 people gives you a majority of your flaws but not the entire picture - where ~15 people would give you that. That is to say, more is better but there is diminishing returns. Given this, he argues that rather then expending resources to gather the entire picture for a single iteration, it's even better to test 3 sets of 5 people with design improvements between each set.

I think this argument is slightly different than just saying 5 people is enough for any sort of study. I still would have liked to seen more people. Or at least additional studies with modifications to inspect or confirm specific aspects of their findings.
I like to think of Tim Ferris as a person with some brilliant insights who come off as a narcissistic individual and smell like a motivational snake oil saleman.
I don't think that was the outrageous or controversial part of the OP's comment at all. Making Microsoft a better company than they are today would just require beating Ballmer, which is not exactly difficult.
Oh right, Information Theory. There was a cool article on HN about that a while back, showing you only need something like 3 bits (zip code, birth date, and something else iirc) to identify anyone in the world.
That sounds like a good technique if you're relatively fit already, e.g. runners who want to branch out into triathlon, as opposed to someone who wants to take up swimming for health reasons. Am I right?
Well, if Microsoft delivered more value to shareholders (and to its employees), then those folks could choose to contribute that money to a variety of sources, philanthropic and otherwise. I'd personally think that the Foundation has done more good than a better MSFT would have, but suppose (1) billg delayed retiring by 10 years (2) we assume that billg's presence would have drastically improved MSFT's fortunates, then I think it's plausible that it would be a net benefit for society.
To be clear, I usually add TODOs only for observable features and enhancements, rarely for internal issues like refactoring. My point is that I usually refactor only when I'm already in the code for other reasons, as a reward for doing the immediate observable changes. This helps focus my refactoring efforts only on code that is already changing for the customer's benefit.
Ask HN: Best solution for streaming video from Mac to HDTV?
In a nutshell: I would like to stream video from my MacBook Pro to my HDTV. That's it. I don't need any fancy Amazon, Netflix, or YouTube integration. I don't really care about listening to music or looking at photos. What's the best solution for doing this? Wired or wireless, doesn't matter.

I took a look at the Apple TV, but I've read about a lot of shortcomings of it and I don't like how everything has to go through iTunes. I also looked at the WD TV and Roku. Some people even mentioned the Mac Mini (which is a little expensive right now.) Some even mentioned getting a PS3 and streaming to it via Nullriver's MediaLink app.

Any suggestions? I'd prefer a cheaper solution (e.g., between $100-250) if that's possible.
All the time. It has varied over the years, but for the last 6 months:

1) 7 days a week. Usually at least 6-10 hours on weekdays when not dealing with the business side of things. 10-12 hours on weekends since there are fewer distractions. I have also been coding in my sleep more frequently...

2) Watch cartoons and play music. See related comment here: http://news.ycombinator.com/item?id=1350743

3) Yes. Notifo - http://notifo.com/

That may seem like a whole lot of time to spend coding (and it is!), but I truly love to write code. I am my own boss, so it's not like I am being forced in any way to do it. I just find it fascinating.
NOAA Models Long-Term Oil Threat to East Coast and Gulf
i'll vouch for total immersion. i can't float while laying still in water (my legs sink). i could barely swim 2 pool lengths.

friend got me the total immersion dvd, there's a series of exercises that help you focus on balanced weight distribution in the water, full body rotation for more efficient swimming motion and easier breathing, etc. the exercises slowly work you into a easy freestyle. i went from basically unable to swim 4 laps to .75km swim in open water in about 6 weeks.

not really anything special, its just that a lot of people haven't invested the time into good technique. just like any other skill, follow the pro tips, dedicate some time and you'll get better.
Finally an app for lens-grinding tinkers, traveling from hamlet to hamlet selling their glasses!
The article is interesting, but it failed to connect a few issues, and I don't feel the conclusion follows from the evidence.
The author presented much evidence that people can become addicted to sex or food, but really failed in connecting viewing pornography to becoming addicted to pornography. 85% of college aged men are viewing pornography? Why are so few people becoming addicted (actually, they gave no figures on addiction rates, I only presume it is a small percentage)? Is this due to personality defect, or different viewing habits? Or looking at the other addiction put on the same level, food, 6.5billion people eat, why are there so few food addicts?

I think more research is neccessary before I believe viewing pornography is the only factor leading to addiction, or that viewing pornography will hurt society. I do believe though, that once somebody has a sex addiction, porn will be harmful to them and their addiction would be harmful to society.
Pretty cool! I was curious about this, so I built a 50-line Python version to confirm my understanding. Feel free to check it out and use it (LGPL): http://bitbucket.org/carver/chaocipher/src/tip/chaocipher.py

It could use things like a configurable key and interactive enciphering command line, and I would be happy to pull such changes.

Edit updated link with improved comments about the rotation part of the cipher
There's nowhere to go in features or polish unless they add more features or polish more - what kind of argument is that?

I meant to say that they're about to hit a wall with that. What do you think they could add or change to prevent android from catching up?

Because Apple have always been driven out of markets by competitors with lower prices...

Depends on your definition of "driven out". They have about 10% of the desktop market - which may be considered "driven out" by some.
And just when you thought youtube comments couldn't get any trashier.
Fun front end? You have some weird developers, most of the developers I know either:

1. Hate front ends

or

2. Should never be let within a million miles of them

And for such a trivial saving I wouldn't want to sacrifice the coherent codebase, code reuse and inhouse knowledge of how it actually works. I would guess that the hidden support costs must be significantly higher too.
This article was full of unqualified statements, but also full of very interesting tidbits. It's too bad it was so poorly done, but I think a case for the main point could be easily salvaged.
Young women have an easy time finding sex partners too. The vast majority of young men will say yes if a young female stranger asks them to have sex, unless there's something visibly wrong with her, or they're in a monogamous relationship, or they're gay.

The situation for young gay men is similar to the situation for young het women, except that they're more inclined to take advantage of the opportunity to have sex with strangers.
except for algorithmic problems - which over came up very rarely

I'd say that depends on what problem one is working on. I see algorithmic problems come up all the time, and I occasionally see a total failure on an algorithmic issue among the (largely college-educated) people I work with.
I haven't looked at reddit's code yet. But i presume they've done a lot of optimization over the years and other frameworks/tools(things like cassandra, rabbitMQ) that might not fit in with your requirements right away.

- What framework is your site using right now? or is it just a static website for now?
- You can always go with something simple that plugs in with an existing framework. Eg. http://code.djangoproject.com/wiki/ForumAppsComparison , some of the apps that plugin to django sites.

Anyways, i'm experienced with python/django etc. Ping me on email(in the profile!)
I assume this is a jailbroken iPad, so most iOS users will never know this even exists.

There's just too much cool stuff in the jailbroken world that will never make it to the legitimate side...
In your example above, $1 may contain javascript. The easy way is href="data:text/javascript", or even href="javascript&#x3A;alert('foo')"", but there are probably a dozen other ways, including data:image/svg.

There's no real way to "escape" url attributes (some browsers are known to run '&#97;&#110;&#121;&#58;&#32;&#101;&#120;' as javascript); parsing the url seems to be the only approach that works.
Ahh, I see, you're looking more for a flurry type thing: http://www.flurry.com/

Lots of the Atlanta Shops use that.
It appears that a version of the book is available for free here: http://www.nber.org/papers/w13882
‘Minority Report Interface’ That Blew People’s Minds at TED (video)
As well as the bug in the loop... there also appears to be a bug in the printf statement.
On answering why there are so few food addicts? I would suggest cost, availability, and social pressure would be some factors that temper overeating. Ever meet a broke starlet from an impoverished nation? Skinnay.
I don't think its that easy. There are tools to help you , but then you need to spend time on them, learn by doing, learn my mistakes. And many a times we get tempted to be someone else on web, because of its nature of one way communication( I know its getting better , but still its passive medium). That's the main thing to keep in mind, to be yourself, doing things the way you would do in real world and yes its a little slow process it will take time.
i've outsourced software dev and had a range of results, but i think i've got it down now.

outsourcing isn't any different than any other task where you rely on other people. just like traditional in-house employment, dating, personal relationships, or anything where you deal with someone else, working with bad people sucks. the key to a good experience is finding good people.

published accounts probably suffer a negative bias because people who get what they want usually don't go out of their way to post "i outsourced and it was exactly as advertised" articles, while people who don't get what they want like to whine and punish the people they worked with.

i suspect a large percentage of people who are outsourcing dev are: 1. incapable of assessing the quality of their outsourcees, so they end up hiring crap ; 2. cheap bastards trying to do work on the cheap, so they end up hiring crap.

like in any other trade, find good people, and incentivize them to keep playing nice with you.

in my experience, the most important thing to screen for is reliability. i just make a rule to not work with flakes, and i try to make sure my devs are happy.

a lot of people outsource because they can't code. if you can't code, you probably can't tell if your dev can code. if you're in that position, you should find someone to help you evaluate candidates, or you might just get screwed.
is it and shouldn't it be a net worth upon marriage vs a net worth upon filing for divorce?

Depending on how you define said net worth, possibly. But you have to define it very carefully. So that's probably not a good way to look at things.

The yearly earnings of the breadwinner shouldn't matter, they both squandered that while married, right?, if they didn't well let's split it then, as that is fair?

The problem is that the yearly earnings of the breadwinner are often affected by the support of the partner. If a woman puts her husband through med school, his expected future income is an asset that she had some role in providing him. Does she deserve to be compensated for that? If so, then how much?

Going the other way, suppose that she compromised her career for him. Sure, she can go back in the working world, but initial differences in income levels tend to permanently affect your future income. Does she deserve compensation for her likely permanent reduction in potential earnings? Speaking of which, how can you try to quantify that?

And then the million dollar question. Suppose that she is left with a permanent economic liability, aka kids. (When men contest custody, they get the kids 70% of time, but men seldom contest custody.) How do you fairly divide the cost of raising said kids?

Nothing is simple about the economics of what constitutes a fair divorce. And there are enough vague, open-ended questions there for both parties to come out feeling legitimately hard done by.
One thing I find interesting about youtube's response is they are reportedly going in and removing <script> tags from already posted comments. So.. do this mean they sanitize comments at post time, rather than at display time?
Typically I spend about 6 hours a day programming. Sometimes many hours more if what I'm doing is extremely absorbing. I have a no programming on the weekend rule and have a diverse number of hobbies that keep me occupied...
I was able to read it fine, and then when I went back a couple minutes later, it said I needed to register or log in. This is the first time that site has asked me to do this in months.
So, from the article, a short piece of a clip was removed when it was posted on Comedy Central's website. In the removed piece, one of the character's mentions the "eyePhone".

However, as spoken "eyePhone" isn't really any different than "iPhone", and "iPhone" is a registered trademark of Apple. Trademarks are interesting beasts. There is no "fair use" of trademarks for parody (hence, why the Looney Toons always got "Acme" brand products), and you cannot choose to not enforce trademark.

So, more than likely, what happened here is that someone said "(eye|i)Phone", Apple's lawyers heard about it, trademark law says it's the job of Apple (and its lawyers) to prevent trademark dilution, so the lawyers call up Comedy central and say: "Hey, you know that part where you say 'eyePhone', and you can't really tell if that's 'eyePhone' or 'iPhone'...could you just clip that out?"

...wait, I'm sorry...I forgot this was the internet. BOO! Bad Apple! Such an evil company that will censor our funnies and ruin the purity of our bodily fluids!
I write code every day. Depending on the day, how I'm feeling, what I'm working on, etc, I'll spend more or less hours doing it. Every day I hit a wall where I'm done coding for the day and I've learned to embrace that. My brain and my body just say "stop working" and I do. Sometimes I hit that wall after 4 hours, sometimes I hit it after 12 or more. I've learned that if I try to push myself to work past that wall, my work becomes lower quality and I don't really pay attention to what I'm doing.