skysight-inc/HackerNews huggingface dataset:
Even assuming a secure implementation of this system (unlikely), what's to stop a man in the middle attack? When you're browsing at the coffee shop, I just lie to you about the server's public key.

Now sure, you could access the server one from a trusted connection to get the public key. But then when someone spoofs the public key you get a large and nasty error message saying the public key has changed. And history tells us that security can't safely be reduced to that type of user interface problem.

Long story short, you're massively underestimating how valuable it is that web browsers ship with certificates installed. When in doubt, don't re-implement SSL. ;)
I could really use some help with the design of the user profile pages of the social network I'm working on. Sending an email...
Hmm, I like the idea, but I'm curious how you're handling a few things.

If an attacker is able to steal your session cookies there's a reliable chance that they're already on your network. Therefore, if they're already on the network, what's to stop an attacker from sending the server their own public key in lieu of the victims or sending the victim a fake server public key. Either way all the data passing between the victim and server would be viewable to an attacker. Also, the server's public key would have to be mutable so couldn't an attacker simply "correct" the victim at any point in the transaction all the while missing the initial handshake?

Edit: While I think that security around session cookies is important for websites to implement, there is a sharp line where it becomes too much. In this instance, given a perfect implementation of your idea with no legitimate potential for a MITM attack, then it would be far easier to simply strip the protection. Rather than trying to send fake keys around, simply remove the necessary things when the user is connecting to the page. (Think SSLStrip.)
Why not use iTerm in fullscreen?
Touch gaming is great for certain types of games but physical buttons offer a totally different experience. I think a Playstation Phone could have been a big hit if Sony moved quicker. They're just way too late. At best we're going to see some Android games retrofitted with physical button controls and that's just not going to be very exciting. How are they going to convince developers to spend money targeting a non-standard Android platform that will reach so few users? I think the best bet for Sony would be to make Playstation the Android gaming brand. Work with Google to make stock Android the best gaming platform out there, work with handset makers to set some standards for input/GPUs/etc, license the PlayStation brand to Android handset makers, launch a PlayStation Android Store. Let other companies figure out how to get the hardware into people's hands. Does anyone doubt this device will be massively outdated before it even ships?
On the other hand, couldn't he add email, but make it easy to search only those with phone numbers? Much like Craigslist makes it easy to only search music equipment with photos. I prefer the developer who has a phone number and email.
Marrying memcached and NoSQL
But I would also like to use it for web/email. If I want tablet only for reading, then I can buy Kindle instead.
Probably the most fun computer book ever released.

Conrad, you are my hero!
I use and am happy with OpenDNS http://www.opendns.com/
Ah, nice timing with your message. I think we wrote the same concerns.

It's not just that the servers public key can be replaced on the victim's machine, but also an attacker can send their own public key instead of the victims to the server. During a MITM attack, all traffic would be fully viewable to an attacker without anyone really being the wiser.
Modnique.com - All Sales Events - Claire Chase Leather Handbags
> I dont know if you guys heard, but

http://news.ycombinator.com/item?id=1306434

http://news.ycombinator.com/item?id=1326167

http://news.ycombinator.com/item?id=1541005

http://news.ycombinator.com/item?id=1641759

(We noticed.)
>In fact, with my current startup's application, the user's Password would never even _leave_ the client machine. Javascript would perform an MD5 hash, and the server treats that as the client's password.

In some respects it makes you wonder why browsers never had this natively in the first place - why should a third-party need to know my password when it could just send a hash instead?
How Falling In Love With My Product Killed My Business
Blekko
Out of interest I typed 'c# developer'. It doesn't work, chops off everything to just 'c'.
Well, it seems a few are interested... http://cl.ly/52c96e02aa4c5e4c4342
>With paypal you don't get what you pay for. If you transact $7.22 per year you get the same service as $722k.

That's a good point actually. Maybe the anti-PayPal meme might die a little if you could actually get preferred service (and not frozen accounts) if you have a history of processing payments over a certain level. They already know who that is because they give you better pricing for volume.
I've already read your summarised version. ;)
Read reviews here:

* http://techcrunch.com/2010/07/19/techcrunch-review-the-blekk...
* http://blog.arpitnext.com/2010/10/blekko-search-engine.html
As I explained in a comment here some time ago, I was not able to speak to anyone even by calling. Just a recorded voice telling me things I already knew. (Sorry, I can't find that comment. Does somebody know how can I search for it here on HN?)
I think he'd have appreciated this site.
The comic on the Land of Lisp page is so well done. Click on the blinking words.

I'm speechless...
yeah - at the very least try and customize the letter to the particular person. Otherwise you're just spam.
sorry. looking into it.

edit: worked fine for me. it didn't remove the #. can you give an example? thanks.
Only /a bit/ mad?
Bloggergirl, you inspired me to create an account here! Love reading about people sharing their passion and helping others along the way.

I would also like to help review copy and provide feedback if anyone needs it.

I do brand management marketing at my day job and have a near-obsession with clear messaging. It's a shame if you have a great product/service but your customer doesn't understand the benefit.
And why not? Almost all OSes except unix (and maybe *BSDs) ship almost completely 32bit userspace these days (Solaris does this for ~15 years). Most applications does not need more that 2GB of memory, which is largely only reason to go 64bit. Although on amd64 it's slightly more complex, because of new registers and instructions, which may overweight increased cache and memory BW requirements of 64bit code.
I'd appreciate this feature. I reply to OhLife's emails way past 20.00, usually around midnight.
That's an interesting question, and it may have to do with the age of Javascript. It's really only been around for 15 years now according to Wikipedia. At that point, the web was already starting to expand quickly, and browser support has typically been shoddy with new technology.
> It wasn't until Napster made that 0 minutes of googling that MP3 filesharing really took off.

(a) network effects
(b) autosharing, spurring more (a)

Neither of these apply here.
Seems fair: Law advice for business critique.
A really cool idea, though two points:

1. Can you rate individual posts (I'm at work so I can't spend too much time on it right now) instead of just tags/authors? It wouldn't feel like that much work to me as a user. You could then just read the tags/authors from the rated posts and sort them accordingly.

2. I was searching for a way to close the training frame, but was confused by the gray "Cancel"-button. Gray generally means disabled. I understand that you want to highlight the "Save and Next"-button. I would just change the "Cancel"-button into a link, to make it more obvious that you can click it.
I too am a CS dropout, and am grateful every single day for having dropped out. I learn more in a week of working at the startup I'm at than I did in a month of college. I'm only 3 months into doing real-world professional development, but I believe that this will still be true a year from today, and I hope that it will still be true 10 years down the line. I too am lacking in some of the theoretical stuff, and have found MIT's open courseware (their intro to algorithms course: http://ocw.mit.edu/courses/electrical-engineering-and-comput... ) to be incredibly useful in supplementing what I missed while in school. I've also heard good things about Khan academy but haven't checked it out yet.
You're going to need to relate to the people you're writing to. Bloggers are individuals, not commodities. Pitch to solve their problems -- if they're bitching about a problem your product could solve, for example, connect the dots for them.

Look at it like this: what you've sent is like the junk mail I throw out each day — it's for everyone, so I know it's not for me. I'd never toss a hand written, hand addressed letter sent to me, though. Create the same distinction in your email, make it clearly for whomever is receiving it, and you'll at least escape the trash a little longer.
In the end I wrote my own todo webapp (toodat.com), that fitted in with the way I think. All the others just seemed to have too much friction. This is one area where too many features causes real problems.
Because if you just send the MD5, others can log in as you when they know the MD5, which they can just sniff. It doesn't gain anything in security, except for not knowing your actual password.
Isn't there some factor such as posture being left out here? What about monks who meditate in sitting position for very long stretches?
Great idea and nice execution, congrats! My 2c:

I'd suggest you to focus at one niche and make it really great! Just as facebook started in one University and then expanded over others..

For instance now you have 4 Rails developers in your list. Why not make it place to go if you need Rails developers? Or Python? This way you can laser-focus all your marketing efforts.

Good luck with that!
Social Media Dashboard
Unilyzer is the key to understanding how social media dashboard directly effects website traffic.you can monitor keywords, manage multiple Twitter, Facebook, LinkedIn, Foursquare, Ping.fm and WordPress profiles, schedule messages, and measure your success.
Well I think the US is one of the only countries left using checks. Everyone else (Most of Europe) has moved on to direct bank transfers for everything.
The chrome extension I wrote today both redirects to HTTPS for the sites you specify in options, but also re-writes all the cookies to set the secure flag.

Works perfectly on Facebook and Twitter without your session cookies every leaking (including the initial HTTP request) and including like buttons, etc.

Add any other site in options (Twitter and Facebook are on by default - I added github.com to mine and it works perfect, you may just need to re-login)

See: http://github.com/nikcub/Fidelio
Offer HN: I will review and critique your CV.
I'm an experienced technical recruiter based in the UK and due to the uprise in offers of assistance to this site I've decided to add my own two cents.

I'm willing to analyse your CV and offer constructive feedback on potential content alterations, layout, etc.

The logical critic in you will assume I'm offering to do this in order to generate leads or recruits and to counter-act that, I have no problem with you removing your personal details and even censoring company names.

As for me, I have a degree in Software Development & Web Design and my target market is London and the South East. I've been in recruitment for a few years now and I have a 1st class understanding of the market. My highest fee generating clients are insurance companies & financial institutions.

I will be doing this during my spare time and at the weekend so if the response is significant then be patient with me!

edit:
ATTENTION: DUE TO AN OVERWHELMING RESPONSE I CAN NO LONGER ACCEPT ANY FURTHER CV'S FOR NOW. I WILL RESPOND TO EVERYONE WHO HAS GONE TO THE EFFORT OF EMAILING ME SO FAR.
Any plans for a epub version? :)
Remember that add-on that replaced web ads with fine art? Makes me think that someone should make an add-on that replaces web-ads with things that you need to do in large type.

I wouldn't know how to make it, so someone's welcome to run with the idea if they think people might use it.
Mozilla heavily promoted their abjectly useless "Web Developer Toolbar" extension for years, even bundling it with the browser by default.

The Web Developer Toolbar was made by Chris Pederick, not Mozilla. It’s also never been bundled with Firefox.
On a related question, I'm intrigued as to how this kind of market is different from Apple's App Store[1]. I know Google expenses its AdSense partner cost as traffic acquisition cost[2], but what about them makes the IRS/SEC view them differently?

[1] http://tech.fortune.cnn.com/2010/06/23/app-store-1-of-apples...
[2] http://news.ycombinator.com/item?id=1792921
Interesting. When did this launch?
FYI, the Homebrew formula to install CLISP on Mac OS X is at http://github.com/mxcl/homebrew/pull/2707

If the formula works well, please comment there and suggest the authors accept my pull request. (If not, I
ll be very happy to help.)
While it is very common to use C as the canonical fast language, it has some warts that really hinders the compiler from doing optimizations. The main one is of course pointer aliasing. This, for example, stops the compiler from unrolling loops that operate on two different arrays, since it can not know if they are the same. Among people doing heavy numerical computation Fortran still seems to be very much entrenched as the "fast language".
Try isometric holds to build up the joints. I've had a lot of success with them. The key reference on the subject:
http://www.sandowplus.co.uk/Competition/Hoffman/ic-adv/ic-ad...

Why would isometrics work better than range-of-movement(using weights and cardio) in this case? When doing static exercises you are simply pushing until you're stopped by your weakest link, while in range-of-movement, momentum from other muscles can help you cheat on the weak areas, so that even though you expose many angles of contraction, not all of them are always fully contracted. Hence you can end up with spots of underdevelopment.

I'm pretty sure static holds also help to counteract the sitting problem, since flexing has a very relaxing effect on stiff muscles - it would follow that flexing them as much as possible is an even better idea!
Automated over-the-air iOS App Distribution
FireQuery is seriously useful - I’m surprised at the number of web developers who haven’t used it.
It's an easy mistake to make - when you come from a Java or C# background one of the most striking things about Python and Ruby code is the use of first-class functions.

Not everybody knows that there's more to a functional language than first-class functions.
It's the same kind of thing as the low-tax IBC in the UK am I right?
For a non-programming recruiter it is way to easy to get impressed by a good talker who knows how to throw in appropriate buzzwords in a conversation. You can judge communication skills, but how on earth would you judge whether the prospective hire can code correctly if you cannot code yourself? IMHO the best way to go is to find a fried of a friend who is a programmer and get an opinion from him/her. It would also not hurt to run a candidate through 3rd-party test that require actual programming (my favorite is codility.com, but there are several other websites that provide similar services).
Boosting science education
The Personal Edition isn't -- it's free (but crippled by heapsize and runtime limitations, and some missing features, so you have an incentive to buy one of the payware versions).
same! glad you wrote that book!
Air Max 90 Blue Red
Use leading digit statistics to detect cheating
For my part, I got involved in an open-source project very early on. I produced plugins and patches for the project, and people in the community gave valuable criticism and helped me improve my code.

I didn't do this consciously to improve my skills, I stupidly thought I was "good enough" back then. However I remember that changed when I sent a 20 line patch to a developer, and he replied "Wouldn't this be better?" with a 2-line patch that also caught corner-cases I'd missed. From that day forwards I realised exactly how unskilled I was, despite knowing well the language and APIs, and I realised how valuable that community was to me.

I haven't stayed with that project, I moved about a bit. I found that I enjoy networking and protocols, so I'm more active in another community now. Finding something that I really like doing I would count as the second thing that helped me improve. I find it sad the number of people I encounter who are just programmers for the sake of it, and not because they love what they do - some of them are good, but I've seen some of the worst code come from these people (who really couldn't care less).

TL;DR I'm really really good ;) [I should learn to avoid tagging British sarcasm to everything I write, it always bites me back]
Without looking too hard at it, this seems to be nonsense. Shu pulls parameters out of the air all over the place and makes wild philosophical claims about the nature of time without explanation. He selectively ignores basic physics, and makes up nonstandard formulas for various quantities whenever they're needed.

Further, he repeatedly draws conclusions that, if proven, would win him a Nobel Prize. The biggest is that black holes can't exist. Others include having solved both the flatness problem and the horizon problem and ruling out the only known explanation of the CMBR without replacing it with anything else.

But, rather than take my word for it, you should just apply the Baez Index: http://math.ucr.edu/home/baez/crackpot.html
Not to diss the OP but most of the proposed solutions to FireSheep I've seen display a distinct lack of knowledge of security. And that's one of those fields where enthusiastic amateurs tend to get things badly wrong.

The solution to FireSheep is something akin to SSL (robust, fast encryption with authentication). Could be SSL, or a VPN, or an SSH tunnel doing SOCKS.

Beware the MITM attack if you think all you need is encryption without authentication.
I suddenly hope that by 2015 PostgreSQL ends up as the winner of the database wars, having embraced and outgrown every feature from every other data store out there.
They did use them. All the sizes down to M2. But they recently switched to microSD as well
Data prediction competition site, Kaggle, gets a facelift
According to the new site "Crowdsourcing data modeling is an effective way to build predictive algorithms. There are any number of approaches that can be applied to a data modeling problem, but it is impossible to know at the outset which will be most effective."<p>Any thoughts on whether crowdsourcing is likely to be an efficient way to do data analytics?
I love Firebug so much. It may be the only reason I launch Firefox as of late.

Chrome is my daily browser. Web inspector is quite good and it does the job most of the time. The JS console is awesome. But for some reason, doing anything else but using that JS console never feels quite as good as doing it within Firebug.
Are games the most complex / impressive applications?
Because they already know? And have their own tools?
Starbucks serving wine is a good idea
I bought the print and eBook bundle and so far I'm really pleased with it. I'm at Chapter 3 already and it's an easy read; the author explains things in simple English that's very easy to follow. The illustrations help in clarifying concepts and also serve up some humor that keeps things interesting. Kudos!
Welcome to HN! It might be helpful to include an email address in your profile blurb :)

I launched a "toolbar" (it's actually a bookmarklet) two weeks ago and although anybody I show it to in person thinks it's great, everyone else just gets confused. I put a lot of work into it, an unhealthy amount really, and as a result have found its lack of adoption frustrating to the point of just giving up. I use this thing every day, to bookmark and to search, yet I cannot adequately explain it much less motivate people to understand what it does. It feels awful.

At any rate, the URL is http://dashler.com/toolbar if you want to take a look. I'm not even sure the idea is a good one, anymore. Of about 1000 visitors, only about 2 use it regularly. I'm ready to scrap the whole thing. I would very much appreciate any advice you could offer pass along. I'm looking to ditch the video and use a slideshow of screenshots, but I'm not even sure where to begin.

http://news.ycombinator.com/item?id=1783632. Is the HN submission of it.

I'd be grateful for any advice! Thank you.
If you'd like a video addendum, courtesy of @lisperati and @johnclaus (the videographer), to this post http://bit.ly/cjDWg5
Business Telephone Systems
Smallbusinesstelephonesystemsuk offers a comprehensive range of business telephones and accessories to complete your office communications package.
MacBook Air upgrade kit turns old module into usb ssd3.0
Ultimate Set Of Facebook & Twitter Icons Vector Material
Finding decent hi-quality vector icons for free from search engines is very hard now, Because I found many results Which leads to sites that wanted to sell you icons. I Think there is no need to pay for things which is available for free. So today I compiled ultimate icons set of Facebook and twitter you can download and use it for free. Enjoy
So, was I the only one to wonder if "latex party balloon" might be a ... euphemism? :) Looking at the video I no longer think so, though.
3D Desktop in Ubuntu 10.10
Be kinder than necessary ...
"Be kinder than necessary 'cause everyone you meet is fighting some kind of battle."

cool fish story with a thoughtful quote from Jeff Bridges, yeah, that Jeff Bridges (actor in Crazy Heart, the Big Lebowski, etc)
So there is indeed an equivalent, which you don't like for reasons you refuse to explain. I am disappoint.

Agreed, I'm genuinely interested to know what I'm missing out on! :)
BPM solutions in the cloud
That's exactly how I felt about this too, and therefore included the word "may."

I was wondering what the hell was going on with comments on that page today, before looking at the stats: http://i.imgur.com/tVhwK.png
We've got so much stuff that it's easing the slump
One meme is businesses launching on paypal, transacting a lot on week 1 and getting frozen for being a suspicious newcomer - also variations on that. For many types of business (eg retail), that's a cash flow showstopper.

Banks' solution to this sort of thing is low tech. Have a local banker talk to you, maybe pay a visit.
This is a shame. I wish the team all the best, but I can't see them pulling this off. I hope I've misunderstood, but it sounds like they want to:

1. Refactor a ton of code (this is not much fun, as you're just breaking things and fixing new bugs)

2. Add support for lots of other browsers (this is also not much fun, see #1)

3. Try exciting new off-the-wall ideas (awesome!)

How many people are going to continue to contribute when #1 and #2 drag on from weeks to months to years of discussions about correct refactoring methodologies and Doing It Right This Time? How far will the other browser's development tools come in this time?

Perhaps #3 will save the project, but I sadly predict the eventual demise of a giant.
Firesheep and smartphones
With the whole firesheep thing that was talking about yesterday, would this include smartphone traffic over wifi, or something like seesmic desktop?
It was on HN frontpage last weekend I believe
Ayurvedic Spa Hotels Delhi
Jaypee Hotels, Resorts and Palaces provides Spa Therapies for Relaxation, Ayurvedic Spa Hotels Mussoorie, Best Spa Therapies, Ayurvedic therapies, New Delhi,Mussoorie,Agra,India.
It seems to me that the main hooks of Allegro and Lispworks are things like modern UI bindings, really solid database integration, modelling tools and stand alone applications... but these are the features excluded from the trials.