skysight-inc/HackerNews huggingface dataset:
Lot of us are obsessed with success. It is probably a good idea to define what success is to yourself, and yourself only.

A good exercise is to take 5 minutes and write the things you want in life. I was surprised to find that my list was much smaller than I thought and to the exception of 1 or 2 items everything I could do/have within a short amount of time.
I believe that's an older white paper.
Someone want to sum this up for me? I'm genuinely afraid to click through that link.
While I develop my first prototype in Mallorca I´m observing what's happening in the continent and speculate about the emergence of a fuzzy system of VCs, talented geeks, developers and researchers, with the same virtues of Silicon Valley. I dare say that the event here in Europe will be a Silicon Landscape instead of a Valley. We have the funding and the technical systems. The economic one will develop slowly. I see the main constraints within the policy-political system, which is based on command-and-control and top-down hierarchies, making it very difficult to emerge from the bottom.
Groupon lets you cap the maximum number sold.
I agree. The comments were worth it, just to learn how the Microsoft compensation structure works.
I can't understand why 4 people voted this comment up. The problem is with the CBC block cipher mode; it's not with AES. Who's writing recommendations that say "switching ciphers fixes the problem"?
Nah, just inkscape.
Posterous Releases Desktop TwitPic Downloader
Yes, it is a demo. Save/load will be available when it is released as a desktop app. As for the counter, it's working properly. Ripple counters simply aren't stable during transitions, but they make a good sample because they're simpler than other types of counters.
Simpler explanation: he uses his blog as a way to document and reason through stuff that interests him.
I'm surprised they've made it this far with multiple single points of failure. It sounds as if they only have one database!
There are very serious security blunders here, but I wouldn't go as far as the article to say it needs a complete overhaul. Here are a few example fixes.

1. Most of the XSS errors should be handled by Rails 3 auto-escaping. I'm not certain why this isn't happening. It may be a simple HAML config error or bug.

2. The session key should be moved out of the Git repo.

3. Most of the authorization can be done by reaching through the current user's associations. For example "current_user.photos.destroy" would prevent users from destroying other's photos.

I'm not defending the developers here and agree these should not have gotten past them. My point is these problems can be fixed in a few days, and thanks to open source, there are many eyes looking at the code to find additional security issues.
I'm one of the authors. This is different from Cappuccino's nib2cib because SCXIB writes the actual SproutCore JavaScript code that drives the UI.
Following in the vein of all-your-content-belong-to-us, posterous unleashes an picture hoover for twitpic. Hmm. Interesting, sure. But isn't this kind of a utility some dude should be making as a weekend project?

My blog[1] is on posterous and im pretty happy with them. Nevertheless, I would rather them improve the core of their platform then worry about sucking up data from the four(thousand) corners of the interwebs.

[1]http://siculars.posterous.com
I'm simultaneously testing a beta version of the Flex framework that will require Flash Player 10.1. I would recommend upgrading regardless. 10.1 has some excellent performance improvements thanks to Adobe's recent efforts getting it running on mobile.
Beautiful and true, and so easy to overlook.
I appreciate your reasoned response, though I was not trying to take a side on vaccines and ASD; just addressing the idea that vaccination is a personal risk you take with yourself or your children, and you weigh the risks and are responsible for (not taking | taking) them. Riding a motorcycle is demonstrably more risky than driving a car, yet I don't see people suggesting we shun bikers.

I have many older relatives in their 70s and 80s, some are taking e.g. flu vaccines and some do not; and as children, some received the standard vaccinations and some had chickenpox, measles, mumps, etc.

At this point, being familiar with their medical histories, (though not a doctor), I am not sure that I see a pattern of better health between the 2 groups.

Frankly choice of diet and amount of regular exercise seem to be a far better predictor of who is in the best shape.

Example: my mother and her closest sister are 11 months in age apart, 81 and 80. One exercises with walking and swimming 3x a week, watches food portions and needs only a mild sleeping pill for medication - still drives and has an active social life; the other has had 2 heart attacks, is overweight by 50+ lbs (and yoyo dieted while younger) and has been on 2-3 heart meds for over 15 years.
Now that, I agree with.
Ask YC: reusable automated web tasklet system
I'm thinking about starting an open source Ruby project and website for sharing and using automated, repeatable web tasklets, for lack of a better word. This is sort of like Yahoo Pipes + Google Alerts for people who can express their desires in code. Examples would include:

* Scan YC nightly and filter out stories with fewer than 20 points, or that match a list of exclusion keywords (for me: scheme, lisp, django, zed shaw, etc. - nothing personal), and email it to me or save a feed.

* Tell me when a new VPS offer shows up on lowendbox.com that matches my price, location, and size preferences.

* Ask 10 people on mechanical turk to check my website's UGC front page each day for inappropriate comments.

* Buy a $1 item with free shipping on ebay each day and send it to me (yay xkcd!)

* Call me using Twilio every weekday at 8:10 if I should carry an umbrella.

These are almost mini-startup ideas, but I think it makes sense to have a mechanism to share and use them in a Ruby gems-esque way.

I'm very interested in your thoughts about this, and especially what sorts of tasks you might want to write and share.
for such a shop as Chase it sounds kind of simplistic and cheap (though i don't think they bought it cheap :) - only 8 machine cluster, only one standby, no flashback ...
I really love Varnish, but hate VCL. I wish they'd have embedded Lua or something. There's all sorts of cool stuff you could do with better scripting.
Main vectors: sewage an sexual contact. I think we an safely rule those out for a few years at least.

Don't dismiss sewage. A surprising fraction of people don't wash their hands, and if you don't wash your hands before preparing food you can pass on diseases.

This is a surprisingly common disease vector.
Sounds like a great business idea. Looks like someone already registered bingocardcreator.com, though.
Nice choice. This post about Varnish architecture is one of my favorites: http://www.varnish-cache.org/trac/wiki/ArchitectNotes
Sounds like a Fight Club reference.

You are not a beautiful and unique snowflake. You are the same decaying organic matter as everyone else, and we are all part of the same compost pile. ~Chuck Palahniuk, Fight Club, Chapter 17

Pretty bleak.

Related:

You're not your job. You're not how much money you have in the bank. You're not the car you drive. You're not the contents of your wallet. You're not your fucking khakis. You're the all-singing, all-dancing crap of the world. ~Fight Club movie, screenplay by Jim Uhls, directed by David Fincher, novel by Chuck Palahniuk
They probably just put you on their internal "bozo" list and will quietly killfile your views and opinions in the future, which is the price you pay for expressing a strong opinion on another person's POV in that fashion.
The main audience I'm going for, at least for now, is education. I had an earlier demo on my blog for a couple years, and instructors and students frequently emailed me to say thanks, and ask for more features. It's been well-received for classroom demos and stuff like that.
No to your no.

"If Content ID identifies a match between a user upload and material in the reference library, it applies the usage policy designated by the content owner. "
I know a woman whose husband died a few years ago, while they were only in in their 50s. They were deeply in love and she feels cheated by his premature passing. When I feel like I'm losing perspective on things, I stop and ask myself: What does she now wish she did more of while her husband was still alive? What does she wish she did less? I find it helps me not to miss opportunities or get caught up in stuff that doesn't really matter.
Leaked USCIS memo about Immigration reform
This is regarding "PayPal Private Limited in Singapore", not PayPal.
Funding, and Distributing Software to Activists Against Authoritarian Regimes
Possibly because someone thought it would be "anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity."

Maybe it is not.
>Exactly how do you know that?

I have never worked on an ASP.NET-based site that relied upon cookies, encrypted or not, for anything. Even where the built-in forms authentication was used the username always had correlating server-side state that was triumphant.

So saying that you can modify cookies == a complete and utter non-issue for any site that followed any reasonable security practices.
It's like knowing that 50% of marriages end up in divorce. True, and damn irrelevant when trying to decide if you should propose or not. Individual marriages have either a 100% or 0% chance of success, and calculating the probability of those outcomes is not greatly informed by the "national average."

Not true at all.

The subjective probability (which is all you have to make a decision from) is reflected by incomplete information, but is never 100%.

But even the objective probability (as far as such a concept is even coherent) isn't either 0 or 100. It's somewhere in between. Maybe under one set of circumstances the marriage will work out perfectly, but under another set of circumstances it won't. That's random. In one possible world the husband could arrive home at 5:12 and find his wife with another man, in another possible world he arrives home at 5:17 to find his wife freshly showered. That's random, or at least stochastic enough. In one possible world a stray gamma ray gives their child leukemia and the couple grow closer by going through the experience together, in another possible world no such thing happens, the husband goes back to work shortly after the child is born and slowly becomes alienated from his wife until divorce happens. Think you have a good enough marriage that adultery or alienation aren't going to become problems? Well throw in the multitude of circumstances which can cause people to change over time, and you'll find random factors there, too.
Aza Raskin's bug triaging system for Firefox Panorama
sorry, the unstated and unrealized premise of my reply was that this is good and great, but that there are also legacy issues of what technology people actually will use the web browser on.

ChromeOS for example may mostly be on netbooks without GPUs.

However, at the same token this might be a good catalyst for even cell phones and netbooks to have them, as the iPad seems to [quick google search] so ultimately GPU may be the killer stat on mobile, although it probably is already ,i'm just a rambling software dev
I wouldn't rule out caltrain.

It doesn't run that often on weekends, and you will have to walk or whatever to get from the caltrain station to the venue, but since it's a 12-hour party, you can probably deal with not getting there at the exact minute that you'd prefer. Plus you only need to take it down since Joel promised to get you a ride back.
Thanks! I was actually inspired to do this while studying CS at university. My professor used a simple Java applet to demonstrate logic gates, and I quickly saw that it could be improved quite a bit. A few years later, I finally decided to play around with the idea as a weekend project, and it's been progressing from there.
Symbology, APL, and Chinese Python
I'm not on twitter but I sent you an email. Although judging from the number of upvotes for your comment it might be a pretty competitive car to get into.
Excellent - it seems very well suited for that. I'd have been happy to have this when I was teaching this kind of theory to young programmers.

Like I said, I would make this very obvious on the front page. Maybe even have some ideas on how to teach using this tool (classroom material, etc.)
Ruby's certainly not used primarily for web development, at least not in the same way that PHP is. Its most famous use case is in web development, but it's widely used in non-web spaces all over.
Maybe not for business, but having a site that does get updated during talks could be pretty popular on such hacker events (and thus be good advertising for you)
It's rather amusing the SproutCore community used to trash talk Cappuccino's nib2cib, and now they have their own version.

There are benefits to serializing the object graph vs generating code, namely that it's easier to open and edit using a tool like Atlas (and Greenhouse, or whatever SproutCore's version is called).
I think the unique point about VCL is that it compiles down to machine code. Varnish makes a big thing about doing things the fastest way possible.
A corollary to that longevitymeme quote is the politicization of research. For example, AIDS research gets funded at a disproportionate rate to the number of sufferers, presumably because they form an active voting constituency.

So I claim that the question is not "how many billions of dollars to allocate to anti-aging research".

The real question is how to get government and politics out of the system. They're the ones that are getting everything discombobulated.

Let people speak with their own actions (and wallets) about how much resource should be allocated to various areas of medical research.
I guess that kind of "screw the rat race" attitude doesn't play well on Hacker News.
The easy answer here is to say, "you mean besides DotNetNuke".

The deeper answer would be to point out that my day job is security evaluation for apps, roughly 50% of which are Fortune-100 web applications, roughly 60% of which are .NET applications, and you're flat-out wrong. There's a reason why cookie/session security is #3 on the OWASP top 10.

You're also presuming that the issue being discussed is, specifically, a cookie.

I understand why you're as defensive as you are; you're a professional .NET developer and Hacker News is hostile to Microsoft and, especially, .NET. Listen to me: I am not hostile to Microsoft or .NET. Microsoft is a client of ours. They do software security better than any company in the industry. Take my word for it: it appears that they screwed this one up just like everyone else that tries to encrypt with AES.
JavaZone 2009 and 2010 presentation recordings (many videos, many topics)
Who's fault is it then? The expectations were set - not that first code release would be awesome - but 'privacy' was the entire reason for diaspora starting.

I was expecting some integral libraries that would encapsulate privacy and authentication logic which would be reused for the entire framework. I don't really care if this was 'only' 3 months of work. That lack of security/privacy checking in that photo update section speaks volumes about where the developers and entire project are at.

Is it doomed? Probably not - apparently even Duke Nukem Forever has a new release date(?) - but they've got a long way to go to convince early adopter techies (people like me) to install this and evangelize on their next round.
That's not only true for entrepreneurs, but anyone who excels in their field. Here in Europe a lot of Americans and other foreigners stand out because they were chosen for their skills. Otherwise they wouldn't be here. The Europeans I know in Silicon Valley didn't go there on their own accord, they were invited to come.
Ebay instant
Recording of Play framework presentation at JavaZone 2010
Joel Spolsky: Merging Season
Very interesting, I wonder how many people read about that issue and then went and checked their backups. Heck, I actually verified the backups on my home network after reading about this yesterday.
>The easy answer here is to say, "you mean besides DotNetNuke".

Yes, I see you've already mentioned DNN. It's good that you have that example. It would be interesting if I somehow claimed that every app is immune to it.

Countless apps have countless vulnerabilities.

>You're also presuming that the issue being discussed is, specifically, a cookie.

I know that the issue being discussed is specifically a cookie. It's specifically an AES-encrypted cookie.

To your edit: Defensive? Hardly. I'm just bitter after an endless stream of B.S. security claims by the security industry. It always follows the same pattern of arm waving and press releases, with a promised demonstration, and then the day of reckoning comes and...quiet. Maybe this will be the exception but, we'll see.

This has nothing to do with any sort of loyalty to .NET, though I hardly find HN to be anti-.NET, or anti-Microsoft for that matter. Whatever, in any case. It isn't my fight to wage.
The problem is that if a certain percentage of the population doesn't take the vaccine then the risks associated with not taking the vaccine greatly increase.

For example, (as an unvaccinated person) your chances of catching the flu while living in a city where 90% of the population is vaccinated is much lower than if only 40% of the population were vaccinated.

Also you have to consider the risks to others. Even with the vaccine there is still a chance of getting the disease, though one would need to come in contact with the disease to get it. So someone that chose to be unvaccinated is at a higher risk of catching the disease, and therefore transmitting it to someone that was vaccinated (though I'll admit that the actually numbers in this scenario are probably pretty low).
As an interesting comparison, I just saw that John Resig posted a benchmark of jQuery.css() performance across browsers. It doesn't include IE9, but does include Opera 10.62 and FF 4.0b6 - http://www.flickr.com/photos/jeresig/4999526752/
Older versions let you simulate the circuit in real time without going to a separate view. It wasn't that the performance was a problem or anything. In fact, I had to write extra code to create the separation. Rather, I found that the actions of pausing, resetting, and stepping through the simulation didn't feel quite as clean when you could modify the circuit at the same time. I might bring back real-time simulation if I can find a way to do it that feels more natural.
In general, hedging against the failure of X is not the best way to successfully achieve X, if X is something within your control.

Extreme example: when the Spanish conquistadors landed in the Americas, they immediately burned their ships, so they would have no way of escaping back home to Spain in case things didn't work out. They would either conquer an empire or die.

Obviously, there are situations where burning your ships isn't warranted. But frankly, gambling on the success of the relationship is not the best way to keep your friends, either. It's a tradeoff.

Sometimes in life you have to burn your ships. I hope everyone finds someone worth burning their ships for.
I need to check again, but the last time I tried FreeTDS I got scared because of some serious encoding issues that were causing silent data loss. I have been following the bug report and it looks like this issue may have been finally patched recently, but it sort of scared me off from using FreeTDS.
I happen to like both. Why when one is awesome the other has to suck?

You mentioned easy_install sucks because it doesn't have uninstall. I assume you haven't had problems with Rails gem initializers where production and development environment differs by quite a lot?

pip + virtualenv is as difficult/easy as rvm. They both solve the exact same problems.

When it comes to script/console, what's so hard about python -i your/boot/file.py?

I like rakefile, but i could also live without it by using plain ol' ruby file.

Haml, isn't that whitespace sensitive? Just kid... Sass on the other hand, would be awesome if it could solve multiple IE quirks for me. There's a sass equivalent in Python called CleverCSS, I wonder if it could solve my IE problems.

ActiveRecord, I fail to see how different it is compared to SQLAlchemy declarative mode. Aren't they solving the same problem? I would also add, I fail to see the difference between Sequel and SQLAlchemy. They both are also solving the same problem.

Cannot say much about FormBuilder, I like my form in html.

Layout, partials, helpers, (arbitrary functions, defining blocks in templates, etc etc) There are so many Python template engines that solved all of this problems again and again. From another angle, you don't really need Rails for this. Merb and Sinatra could provide such separations as well.

All and all, it's cool for you to express your happiness using Ruby. But why bash others?
As it turns out, this is a silly Bingo card because either everyone will lose or everyone will win at the same time, assuming that everyone pays attention more or less equally.

What you needed to do was take those terms (and maybe some more), put them as images, scramble them each time the page refreshes, so the cards are all different.
Ask HN: Would you tell potential employers about your "sketchy" projects?
Hi HN, I face a dilemma in wondering if I should include "sketchy" projects into my resume. By sketchy, I mean that they may offend someone of a particular set, but are otherwise (in my opinion) brilliant executions that I'm proud of. I've never done anything illegal, and I like to think I have a solid base of ethics.

For example, when I was around 17, I picked up a trademarked domain for a popular music group from expiry (they didn't own it prior, was just a holding page for non-related topic). I built an unofficial fan site with pics, lyrics, and news content. It was also optimized towards adsense (20+% CTR), pushed affiliate sales for "bling" jewelry products and eventually signed a 1-year $1k/month advertising deal with my affiliate. I offered email service, networked with other hip hop sites, and made about $100k from adsense before I was graciously C&D'd and handed the name over.

Most recently I cofounded a project that was covered on the sites of TIME, CBS, Business Insider, Gawker, and pending an ABC News article. It made the front page of HN as well (thanks guys). That site was Price Of Weed, where we crowdsource and share information about the price people pay for marijuana. Possession is still illegal in most of the world; its easy to assume I'm some sort of stoner/drug pusher because I'm associated with this project, but in reality I don't smoke much at all.

Now I'm a biz guy and probably won't be applying to jobs at big corporations. I'd really like to work for a startup, which I believe would be less judgmental and more accepting of my project history. If you were me, would you stick these projects on your resume? What are your own experiences with sharing this kind of information with potential employers? Thanks
We had some software at UT for EE 316, it was made back in the 90's though. It basically showed 1/0 states, let you probe areas in the logic, and had some ways to represent the logic as equations.