skysight-inc/HackerNews huggingface dataset:
Nice. A solid demonstration to show next time your webmaster doesn't want to set up SSL everywhere.

That said, the current cartel-like setup of certificate authorities (protection money and everything!) makes SSL annoying and expensive if you want the browser to not have a fit. Especially for small-scale projects. But there's really no excuse for larger sites.
It's not the misery or happiness that we should focus on. It's the comparisons. If you're in a content or happy state of mind, you don't really make those comparisons (or they don't really effect you), however you do when you're down. By making those mental comparisons when you're down, you make things worse for yourself. So instead finding strategies for when you're down where you don't compare yourself to others might be the best solution?

A) Distract yourself.

B) Find enjoyable things in your immediate-present circumstances. This seat I'm sitting in is pretty comfy.

C) Don't go on facebook to see all the apparently happy people.

Etc
I'm sorry but this idea that you get a pass for drug dealing and misogynistic lyrics because you are black and from a poor background needs to just die.

There are options that don't involve poisoning the very community you claim to care about through drugs and promoting a lifestyle/"profession" that can get someone killed or sent to jail.
Great, thanks! I was just typing project names after the command.
"Firesheep 0.1 could not be installed because it is not compatible with Firefox 3.6.9."

And yes, WinPcap is installed. I don't think it should matter, but I'm running Windows XP on a VirtualBox.
The sidebar is not showing up for me after installing and restarting.

Firefox 3.6.11
OS X 10.6
firesheep-0.1-1.xpi
To be fair that is exactly what I got out of the title and not that it was using Firefox vulnerabilities.
--no-ff doesn't get rid of the individual commits, it just guarantees that a merge commit gets created as well, so it's easy to see what branch was merged in. If you don't use it and the commits you're merging in can be applied via fast forward, it skips creating the merge commit.
try design students at local universities. they're cheaper, and might even work for free so they can build their portfolio.
Oh, you just need to update to the latest version of Firefox (3.6.11). Your version is out of date and not secure. http://www.mozilla.org/security/known-vulnerabilities/firefo...
My wife and I are applying for this winter session.

She's been co organizing the Hackers and Founders SV, SF and Berkeley meetups with me for the past 9 months. And, she's the primary reason that our membership has tripled in the last 9 months. She works quietly in the background and makes everything run like clockwork.

I've recruited her as my co founder for several years. And, she just signed on three months ago. We're building a financial news search engine at http://Newsley.com/search.
Wireshark is a very popular open-source tool. http://www.wireshark.org/
view -> sidebar -> firesheep
Who needs laws when you've got bribes, right?
Wow, good work. And pretty scary- imagine what one could do with this on any college campus.
OK, first, don't get all mad at me. I don't support such a law; I was just quoting my recollection of it from a previous article.

Second, I think I was remembering this quote

> Limos in U.S. cities usually have to prebook an hour in advance, by law, while only licensed taxis can pick someone up right away

which may not apply to SF. Do you have a source that there is in fact no such time-limit in SF?
Given that, in most overseas flights, sufficient voltage is available at every seat to power in-flight entertainment, I wonder if it's an easier engineering problem to have a 15-20 volt outlet instead (though I'm not sure if there's enough juice for the extra 2-3A).

True, not laptops have the same AC plug, so an adapter would be necessary.
So, why not cigarette adapter DC sockets?
Apple to Invest in Facebook? Facebook says “No”.
this a great scientific fiction novel
SIMULACRON - 3; 1964). Autor: DANIEL F. GALOUYE

that deals with that subject,

also Maze of Death by PKD touch similar isues
The WSJ is a Murdoch rag and thus I assume it’s dedicated to nothing other than profit and protecting the establishment.

Edit: Allow me to clarify. I’m just sharing how I view Murdoch properties (incl. FOX, WSJ, and MySpace), and implying that this article is not surprising. Still, I upvoted this submission, because we should demand ethical journalism; we should report on the reporters.
Very cool and extremely useful.

First thoughts:

The site is slow for me.

There's no feedback indicating the system has captured user input.

On my first visit, I immediately started typing random function names into the search box ('strlen', 'htmlentities', 'func_get_args', etc).

I had no idea anything was going on and assumed that my search returned no results.

It's only when I tabbed out for a few moments and tabbed back that I saw the site worked at all.

When I saw the results, though, my reaction was something like "Wow, that's awesome."
Taking SolarFeeds to the next level
Hi everyone,
So I have built the largest solar news network without any advertising or large strategy. We have 300 contributors, and we are close to become the industry go-to.. How do i take this to the next level? Strategic partnerships? content partnerships? any tips would be helpful. Thanks

Scott
www.solarfeeds.com
Because somebody would plug in something dangerous.
Believe me there would be some genius with a George Forman plugin grill or similar.

There are DC adapter plugins in aircraft - the idea is that they are only sold for laptops and are expensive enough that few people use the.
May I ask why you're hiding your gender on HN? I know of many potential reasons, just curious what yours is.
I feel uncomfortable enough without the guy next to me having a heart attack and possibly killing me as he falls on top.
If you use mod_wsgi, you can just touch the .wsgi file. I think uwsgi supports reloading when the code files change, too.
I'm a girl (and an engineer), and I applied for the summer round this year with http://wordchuck.com. I never got a response from YC after submitting my application, which was a bit disappointing.

I haven't had any trouble launching and getting traction on my own, so don't get discouraged, no matter what happens with YC :)

That said, WeddingType looks like a terrific idea, and I hope you do get accepted!
Also, you'll want to factor in availability.

Have you considered using varnish + cassandra? Take care to avoid the thundering herd problem.
Citibank First to Test Revolutionary Credit Card System, Card 2.0
Could you go into more detail about what the reasons given were? My initial reactions on reading that was ... unreservedly hostile.

Given the likely upside of going through YC if accepted, 12 weeks of separation seems insignificant.

(On topic: I applied this year and one of my two co-founders is female.)
libpcap http://github.com/codebutler/firesheep/blob/master/backend/s...
On Mac OS X, it gives an error saying: Run --fix-permissions first.

Run with which command? and how?
Same setup. Sidebar shows for me after selecting it from the View -> Sidebar menu, however it pops up with a message that says "Run --fix-permissions first." Not sure where I'm supposed to run this flag.
the part about ego based fear is really good. meditation helps with that
this is simple and much like google.com which i like, no advertisements or wordy introductions, and the main function is bright and center. the ui could use a bit of a makeover, but i think you've got something functional and should keep expanding the functionality before investing time on the ui part since it seems that you're the only developer at the moment.

what storage solution do you use for indexing?

and perhaps i'm getting penalized by the latency since i'm in shanghai, but it seems that the response time is pretty slow.
> If you have listened to more than a lyric or two off the radio you would hear him rapping about being young and stupid and growing up and maturing.

That doesn't make one praiseworthy; regretting your sins doesn't erase them. If he's really had a past violent enough that he's attempted murder a few times--and I don't know that that's true and am making no claim it is--then he's not worthy of praise no matter how good he is for the rest of his life, he still did it. Most people grow up without any such severe regrets. Most do stupid things while young, not horrible things.
Thank you very much. I have been looking for a better search for KA and instant results are a plus.
how do i "askHN"? thats what i meant to do here...
If you live happy life -- it's more likely to experience significant drop in happiness (simply because there is plenty of room to fall).
When such drop happens quickly -- there is higher risk for suicide.
This could be exploited to create small mobile "pirate datacenters." Such equipment could be mounted on a small truck or RV. An entire "pirate cloud" could be established with redundant datacenters going offline to relocate. I wonder if it would be easy to hide such uplinks amongst legitimate signals and avoid detection by police in a country like China.
You could put some preset numbers to choose from, like $1 $5 $10, for those of us too lazy too type in the box.
The difficulty is that everyone wants it yet no one wants to pay for it. (I'm sure it works quite fine in first class)
Http://www.uggshoestores.com/ugg-new-arrival-5389-c-317.html
... but it's not popular? ...
http://www.mirah.org/ (formerly Duby) is another compelling candidate for Android development for those that like Ruby. Compiles to Java byte-code :)
It would appear to me that most of the stupid stuff you could plug into a cigarette lighter pales in comparison to the stupid stuff that you can plug into a 120V AC. (eg. You're more likely to find a 120V AC plug on the aforementioned George Foreman grill)
That's sound parenting.
I just want to say this is an awesome post. I like it :)

Well, if you'd like, check out http://youmixer.com and tell me what you would improve about it to make it viral. I'm working on another project right now, but I'm always curious how I could have made youmixer better.

You can just reply on here if you want to keep your anonymity.
Interesting. I was going to do something similar but keep it limited to Facebook chat. That way you could eavesdrop on conversations in the room and impersonate people, etc. This is actually probably easy to program and more versatile at that.
Thanks! UI is not my strength, but thats all I could come up with.

The indexing is very much a hybrid consisting of sphinx, mysql fulltext, and a custom solution of python and php.

As for the speed, the site is being hammered... since its only on a little VPS its not coping too well at the moment. I am located in Sydney Australia and its a little slow for me at the moment too. Usually its not too bad though.
Facebook's next funding round may include Apple
Yes its something I need to fix. Im thinking for the very first search ill display a "loading" image, because after that the results fade out a little when you start searching again.

The speed is probably due to the site being hammered. Its only a small VPS and probably not coping very well. Thanks for the feedback though!
I don't think I have said anything that merits down-voting...
Don't sleep on these hip hop guys. They're born hungry. Look at Russell Simmons, Diddy, Jay-Z and 50 Cent, and (technically not a rapper) Usher. They all have pretty impressive business portfolios.
I've met iamelgringo a couple of times ath the H&F meetups. Top-notch fellow. Good luck on getting accepted!
"Y'all not remembering. My motto is simply: I will not lose."
Something for your fabfile (for pushing to production and migrating):

def with_virtualenv(command):
"Executes a command in this project's virtual environment."
run('source /usr/local/bin/virtualenvwrapper.sh && workon %s && %s' % (env.virtualenvname, command), pty=True)

e.g. usage:
with_virtualenv('python manage.py migrate')

For your local development, throw the virtualenv wrapper initialization into your bashrc (Only need to do this once.)

echo "source /usr/bin/local/virtualenvwrapper.sh" >> ~/.bashrc

When you're developing, always start by activating your virtual environment.
Great interface, however:
I don't find myself trusting the results when it populates differently depending on how quickly I type a word. Typing "chemistry" at different rates gives different results, including some results that aren't related to chemistry (such as banking). By the way I type generally between 70-140+wpm depending on the word.
This is a very important update. Everyone running 0.2+ should update immediately. When previous versions of node.js ran out of file descriptors, it holds them open and hangs, effectively killing it's ability receive any more connections until the process is restarted.
Hi, I'm the author of the app and a fellow startup nerd. I'm very happy to see my app listed on here. I was at the first startup school in Boston, any of those old timers still here? :-)
I might take you up on the offer! Cheers!
Why would I need to do that? I can just change the shebang line in manage.py and never ever need to activate the virtualenv...
I would appreciate it if you explained this further.
For what it's worth, I got that it was an extension or other Firefox tool. Your interpretation didn't occur to me.
On the other hand, stealing somebody's real life identity is not that hard either. But it does not happen too often, in part because it's illegal.
Stealing somebody's cookie on the Internet is a crime just as is stealing somebody's driver's license.
Although technical solution to this security hole is desirable, it's not the only solution available.
I use what I like, not what other people tell me I should.

Blub :)

Seriously though, I was a big Model M fan for a while. Then I tried something newer, and could never go back.

Also, the new keyboards are less likely to cause your desk to collapse ;)
You can get SSL certificates for free for one domain, and they work with all browsers (except Opera, IIRC). Also, you can use Perspectives for Firefox, which I think is much better than the current system.
Minor bug: "searching" for startup yields two of the same video, instead of the two parts of Khan's presentation on founder equity.
I can't wait for this to become available for linux, good job!
yep. and as with most review sites, most people don't check them when they want a service right now right where they are.

But they create incentives for good behavior and give those that have the time to plan information with which to make their decisions.
Here's my personal solution. It works for all airlines. It can also power my Cradlepoint 4G hotspot and recharge my iPad, iPhone, and any device using USB power.

http://www.tekkeon.com/products-mypowerall.html

I bought a male Adaptaplug and a Magsafe cord from eBay, and after 5 minutes with a soldering iron, it works for my 13" unibody MacBook as well. I plan on upgrading to a 13" MacBook Air soon. I should be able to get 14 hours working time from this setup.

As a companion to my WiFi iPad, it's great. The Cradlepoint will run for 18 hours off of it. (I have the MP3450.) Not small enough for a pocket, but it fits fine in most laptop bags.

EDIT: I bet there's a business renting these things out to people at airports!
Anyone find this comment (in a suggested answer) strange:

>Yahoo! Store was written by Paul Graham, who is a big Lisp advocate. He also wrote Hacker News, which is, effectively, a Reddit clone.
StartUp-U Silicon Valley: Startup Valuations with Wade Hansen
I think he's referring to all the "Instant" copycats.
Thanks to the EFF and the Tor Project we need not worry as much thanks to their HTTPS Everywhere project, a plugin for Firefox: http://www.eff.org/https-everywhere/

Any questions:

http://www.eff.org/https-everywhere/faq
What can an end user do to minimize this?

This exploit is for insecure Wifi networks- so only using encrypted Wi-fi or Ethernet would seem to remove this attack vector. Is there a real risk that someone (besides the government) can see your cookie?
Thanks for the feedback! I'm "threading" the search to not block the browser, maybe typing fast can interfere with correctly restarting the search. I will investigate!
Oh no sorry if it came of as if I attacking you, I wasn't, I was just making a point! :) That quote is false as almost all Limo services allow you to use their services on a last minute basis if they have available limos. To be honest, I've never been to SF, but I've been to SD and LA and have used last minute limo services (trust me its just a bit more expensive than a cab and it makes a world of difference) there. I've also done so in Florida, Atlanta, Houston, and Wichita. Also this regulation doesn't appear anywhere online, but the part that specifies what makes a limo service in contrast to a taxi service is.
I put this together early 2009 as a fun side project. It supports many standard web tools and languages.

I'd love to answer any questions about it.
SSL is bad for the environment because it requires far more server side hardware... Well, I'm only partially serious about the environment thing, the question is, how can internet companies make it commercially viable to use SSL for everything? The added hardware and power costs make each user way more expensive, possibly to the point where they may not actually be worth it.

An alternative is to bind the user's session to their IP address, but that isn't fool proof either because of NAT, DHCP and certain big ISPs that tend to change IPs on the fly.

What cost-effective solution would you suggest?
People sure do envision some strange failure modes for commercial flights...
Ask HN: Do you advertise online? (research project questions)
I am doing a research project for my advanced marketing class. I would greatly appreciate anyone who would take the time to answer these questions for me. Answering each and every question is clearly not mandatory, anything you feel comfortable providing would be very helpful.

A little background about me: I have been building software since 1994, and web software since 1998, I have a degree in Computer Science, currently work as a development team lead at a big company which is a wholly owned subsidiary of a mega company. I ran my own software company for several years but made some big mistakes in business partners and terms raising venture money. I am 16 months into a 21 month executive MBA program, and am planning to go back out on my own in the near future. For my advanced marketing class I am doing some research on how people make decisions about spending money for online marketing. If you have any experience in this area and wouldn't mind answering some of the questions below I would be deeply grateful. If you are uncomfortable posting the reply here you can send it to the e-mail listed for my account or to ask_hn_project.closure@recursor.net (spamgourmet e-mail)

A couple of quick items:
I am not looking for experts necessarily, if you sell something online and you do any type of advertising, I would love to hear from you.

I am not selling anything, nor am I interesting in buying anything, this is really just a research project for my marketing class.

I thought the responses to this survey would be of interest to other members of HN so I thought I would post these here. If people are interested, I will post the results of the interview responses I receive.

Questions:

Please give a brief background of you and your experience advertising online

What is the nature of the business you perform online? (site url(s), products you sell, how long etc?)

Where do you currently advertise online? (e.g. google adwords, yahoo, bing, facebook, double click etc)

What do you like most about these services?

What do you like least about these services?

Why did you choose them?

How do you measure overall success with your online advertising?

In terms of the services listed above, which ones are the most effective?

Is there anything you would change or improve?

How do you determine if a specific advertisement was effective?

What metrics are most important to you with this?

Are there any metrics that you would like to see or like to see more effective?

How do you determine how much to spend on each channel (website, keywords)?
Thanks. It's fixed now.
I've had a bit of a look on Google, but I'm not 100% sure which provider you mean? Where can you get free SSL certificates that don't upset browsers?
"Possible exceptions would include Seaside, which I've never used but has been around for a while and from what I can see has a genuinely different approach to web development that actually does exploit Scheme."

Unless we are talking 'bout a different framework, Seaside is Smalltalk.
10/24/10, 10:05pm EST, took minutes to load page initially.
I've worked with a lot of truly top-notch Unix folks, and VERY few of them have a meaningful mailing list presence.
vpn/ssh tunnel/encrypted wifi
Good luck @limedaring! You know me, but to weigh in: I am XX, applied three times (once as solo founder), got one
interview, didn't get into YC, found my way to the Valley (from the UK) anyway.

I intend to apply again in future if the startup I'm working on turns out to be the right sort of thing for it, and especially if I can team up with other hackers, especially a couple of people I've known a long time (last time my cofounder was non-technical and I had met him while looking for a cofounder). Gender balance or anything like that has never, ever been an issue for me with things like YC. Currently doing Women 2.0 Labs where it is a tacit issue, which would be interesting to contrast when I do go through YC.

I know of another woman who is applying this round and has not posted in the comments yet.
Ah, I can't remember the name now... Rapidssl? That's probably it. Check historio.us, the ssl cert there is a free one (which is, sadly, why subdomains don't validate).

EDIT: I searched and it's actually http://cert.startcom.org/.
Why don't Facebook and other major sites check the user agent and IP address of client as well, instead of just relying on a cookie? That would solve this problem in 99% of the cases, right?
The explanation I've always heard for not using HTTPS 100% of the time is that it puts an substantial load on the server, and for many sites it's overkill. Setting aside the subjective topic of "overkill" ... how much more CPU-intensive is it to serve pages over HTTPS compared to HTTP?
If you're on the same wireless network as someone, you have the same external IP address.
Don't go overboard with titles - its bad for expectation management.

The important questions is what his relationship to the business actually is. If he's going to be an equal partner go ahead and call him a founder. If he's more like Employee #1, don't.
Invisible Bike Helmet Inflates Before Impact
Not true at all. Every American Airlines airplane has DC power that is provided via a cigarette-lighter socket. It works quite well with an inverter and a standard power brick, or a special DC/DC converter.

I don't use it very often because all the cords that it would require annoys me, and my laptop has 12 hours of battery life. But it is there, leading me to believe that this is not actually a problem.

(I think the fact that it's DC power limits the number of people that will use it, because you have to plan ahead, and nobody ever plans ahead for flights except seasoned travelers. If it was AC power, people would plug stuff in just for the hell of it, instead of reading a book as they do now.)
We had google checkout and paypal as payment options. The difference was easily 10:1 in favor of paypal. People paying from overseas prefer paypal significantly.
Thank you for sharing and I hope it all works out for you. It's refreshing that you clearly understand your situation and are working with it.

I remember you from another thread on learning programming -- keep perservering and I am sure the HN community is happy to help with your efforts. At least, I am.
Same error for me. No idea where to run though.