skysight-inc/HackerNews huggingface dataset:
Wifi connections should probably all use WPA2, even at coffee shops

if you just write the password on the wall, it defeats the purpose - everyone who logs in is on the same network again, just like a public network
Seems to me that you can't possibly know if your timing is correct except in hindsight.
It will be hard to build a general-purpose robot with the ability to diagnose and fix cars. Aside from the problems of teaching it how to figure out what is wrong and what the solution is, the simple physical dexterity is beyond any autonomous robots of today.
> if you'd split that proposition into the two different main things, it's likely neither would have passed.

I disagree. Pretty much anything "punishing" CA legislators would have passed.

It's unclear whether replacing the 2/3rds reqt with a majority vote would have passed on its own.
Was going to vote you up for your first paragraph...
The ideas are good. Implementation is the tricky part.
Okay, here's another "just as easy" scenario:

1. You include http://google.com/trusted.js on a https page

2. Someone goes to a cafe, opens up your website with Safari while someone is performing a MiTM attack on that file.

3. No warnings, your user is compromised.
I am not going to argue for the correctness of this position, but presumably it's because the "secure" icon (e.g., the little lock) is absent.
OK, I see what you mean. If you're suggesting that websites protected with untrusted certificates should be treated as if they were plain HTTP sites, then I agree with you. Chrome crosses out the "https" part of the URL if the page contains insecure elements. Something similar might be the right way to treat untrusted certificates.
I agree. The entire time I skimmed over this article (a process of about 10 seconds), I was able to clearly determine that the author had no idea what they were talking about. Needless to say, his website isn't even ranked by Alexa, Compete, or Google because it's THAT low. That's a feat I haven't accomplished in several years. Aside from that, I'm unimpressed.
Flock failed because it was ugly as hell and painful to use. RockMelt looks like it has a better shot at succeeding.
I'm a little disappointed. A truly social browser should introduce something social that is intrinsic to the browser itself, not just integrate with existing social sites.

A browser should be a basic tool that works equally well for everyone. This browser has Facebook and Twitter built in -- fine for the US/UK market, but what about Europe, South America, and all over Asia, where different networks hold sway? Even if you did try to build integration for all these networks, you would forever be playing catch-up, trying to write a single application with all the features provided by 50 other application development teams. I don't think it makes sense.

What if your browser became the new unit of social networking -- like a diaspora node? That would be truly new, and truly universal, at least in potential.

All that said, this still looks interesting to me -- I'm definitely part of the target demographic. I might even end up using it regularly. I was just hoping for something a little more fundamental.
This is just dumb. I'll go down his suggestions to point out why...

- We need to have codes of conduct in our projects and conferences that specifically ban abusive and sexist behavior: I don't see how a "Code of Conduct" is going to be more compelling than the law. Nor do I believe the type of person who would stick his hand down a girls pants or cheer someone like that on is going to adhere to a code of conduct no matter what.

- Trainings around diversity and sexual harassment: Sexual Harassment trainings are done so employees will be able to recognize sexual harassment. Does anyone think there's an employee out there who wouldn't consider sticking your hand down a girl's pants sexual harassment? Moreover the two people didn't work for the same company anyway so it wasn't sexual harassment as much as it was a...y'know... felony.

- Keep speaking out: As the post points out all "speaking out" did was cause this woman to be further abused. What she should (and apparently did do) is speak to the police.

People keep trying to make this into a macro issue and it's not. There might very well be misogyny in the tech industry but this is no more a sign of it than a rapist would be a sign of misogyny in a particular town.
We already have robots to wash cars (including windows). See http://en.wikipedia.org/wiki/Car_wash#Automatic_car_wash
I'm from Australia, but we will be flying to the US in the next few years with our son (and we have a second on the way).

My question is, are children subject to the requirement of either a scan or a pat down?

I find it hard to believe that any law would allow the photographing of a child effective nude, much less the touching of "genitals". I would never allow my child(ren) to be subjected to either of these measures. Does this mean I should find another country to visit?

Even for adults, call me ignorant, but how is this not sexual assault? In any other situation, if I was subjected to a genital grope I'd be pressing charges.
Any browser which doesn't warn about that in some way is essentially broken. (Yes, I see you cited Safari as one, but it must the the only one as far as I know - it does remove the padlock, but that seems pretty inadequate ...)

EDIT: I do take your point in that I think IE is the only browser that actually blocks the content. The others warn about it but still load it, by which time, of course, the damage is done.
tptacek hit it dead on. Don't bill hourly; bid on a project basis. Why? First of all, you can end up doing work for a client and you know how you can save them $2,000/month by fixing something they can't. It only takes you five hours to complete the project, so what, you bill them 5 * hourly rate? You just saved him $24,000 year. That`s worth much more to him than an hourly rate. Know what you want per hour, ALWAYS get that, but quote what you're worth to your client and nothing less.

Secondly, tptacek is right again. Once you bid $125/hour, you're stuck at $125/hr. Even if you save your client that $2,000 month for 5 hours work, they`ll expect to pay you $625 and nothing more.

Be warned, this post is spot on if you always want to earn the same amount of money but you will never grow a company with this billing method.
The Economist ran a special report on Forrest recently. That might be a good starting point.
She said no, then he touched her. Your opinion of the seriousness of that is irrelevant; the action we're discussing is, depending on subtle icky details, either a serious misdemeanor or a felony. In no interpretation of the story we have is it not a crime --- one with a name, and everything.
Twitter Places (a.k.a. foursquare)
> Be warned, this post is spot on if you always want to earn the same amount of money but you will never grow a company with this billing method.

OTOH, if you want to do fixed bids, you better have a really good idea of exactly how much time it's going to take you. This means that you should concentrate on doing only things you've already done, or that are very similar to them. Otherwise you'll run into something you didn't even know you didn't know and blow your estimate and eat the losses yourself.
Gmail supports drag and drop attachments in all browsers with the use of Flash.
I am reminded of the old Rodney Dangerfield joke:

"If it weren't for pickpockets, I'd have no sex life at all."

Now available in a new, updated TSA version:

"If it weren't for TSA genital groping, I'd have no sex life at all."
Seriously? Are you reading the same blog post I am?

"He grabbed me, pulled me in to him, and kissed me. I tried to push him off, and told him I wasn’t interested (I may have been less eloquent, but I don’t think I was less clear). He responded by jamming his hand into my underwear and fumbling."

If you've "done similar things many times" you _are_ part of the problem, and are prabaly lucky not to be in jail for it.
Myspace in big financial trouble
I don't think this has anything to do with the open source community at all. Men will fancy women and be stupid about it in all sorts of groups and environments.
I have an honest question to ask, since the number of comments hasn't exploded here, I hope some thoughtful people can see it and answer. Please don't attack me for anything I may be implicitly saying; this is honestly something I'm confused about regarding the culture in which this event took place, and from which I am an outsider.

A number of people have taken great pains to emphasize that the behavior of the lady involved was not justification for an unwanted advance and that men should all understand this. Now I understand 100% that if she clearly and explicitly rejected his kiss advance, it was obviously wrong to go further (all of this is theoretical/alleged but ignore that for a moment).

Let's consider just the kissing portion and nothing beyond that.

Now, isn't sitting on people's laps and flirting exactly inviting this kind of advance? I mean isn't that exactly the point of those behaviors? To excite the passion of people it's being done to and who are watching?

It's very strange for people to vehemently deny this. It's like if I was a biologist of another race observing human kind, what would I identify through observation as the beginning steps in the mating ritual? So why is an impression being given that that kind of behavior is "having fun" and has nothing to do with sex, and trying to attract the opposite sex?

Again, let me state- I don't drink, I don't go to parties like this, I've never been to a bar or a club or a girl's hotel room. So please don't assume I know the answer and I'm trying to imply the answer through these questions. I really just don't understand how you can hold this idealistic view of mankind that a member of one sex should enflame the passion of the opposite sex, through activities and clothing with deliberate, intentional sexual overtones and then expect people to overcome their natural, biological response to that kind of show.

Comments, please?
Unfortunately, Facebook's XMPP service doesn't utilise SSL either. They hash the password, but everything else is trivally decodable on the wire. Plus there was the hole in Facebook chat which exposed your conversations to your friends earlier this year. Possibly the worse IM system in existence.
"This browser has Facebook and Twitter built in -- fine for the US/UK market, but what about Europe, South America, and all over Asia, where different networks hold sway?"

Gotta start somewhere, I imagine they'll be adding more social networks later but it's probably easier to start with the social networks that the developers actually use.
Google web cache:
http://webcache.googleusercontent.com/search?client=ubuntu&#...
I will be so bold as to say this: I doubt there are many places in Texas where this would have happened without those kids getting arrested, or barring that, being rightfully assaulted.

When one attacks another's person and property, one should expect retribution.
Last time I checked, StartSSL was not recognized by some (slightly old) browsers. I wonder if this issue has been resolved now?
Everyone being on the same network isn't too much of a problem. They still can't read each others traffic. See http://en.wikipedia.org/wiki/IEEE_802.11i-2004 or http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access#WPA2

Every device negotiates its own keys with the access point.
Ask HN: How do you successfully outsource coding?
I'm looking at a few internal projects and there have been a number of articles/discussions that have touched on outsourcing recently -

e.g. http://news.ycombinator.com/item?id=1870960 and http://news.ycombinator.com/item?id=1880096 and a plethora of others I'm sure.

What have your experiences been using services like guru.com, rentacoder.com or elance.com (and what are your favorites)? What do you find to be get the best results putting projects out to bid or finding trusted developers on these sites or others? What mistakes did you make and what would you / did you do differently the next time?
Regardless, the point is that Oracle isn't without competition. IBM and Microsoft aren't going away anytime soon.
I believe it's perfectly OK that you can succeed in Algorithms at one school and not do perfectly at another with the same knowledge.

The area where I believe the problem is in specifically teaching to a test, rather than general deep understanding (of algorithms in this example). Tests in a lot of cases don't test for deep understanding, but rather memorization and understanding of very specific algorithms. The focus is completely off. It's the "meta-algorithmic structure" that matters for the future of students (when they themselves have to go learn/create algorithms to solve future problems), not just recall the small subset of algorithms they learned in school.
Is there yet a web site yet that catalogues the security procedures at each airport? If some people consider avoiding flights, they might actually be interested in such info. Not the standard detectors which aren't that annoying, but things like control of liquids, these new scanners, the grope, etc. Can just imagine selling third-party widgets to travel sites:

"On this itinerary, you may be subject to these security checks: genitalia scan (arr: LAX) or grope (arr: LAX), liquid check (dep: SYD)."
Don't do either.

What you want for this is control-panel hosting. I used Dreamhost, but there are hundred of other options.

The thing you are looking for is a simple control panel to let you install & upgrade software.

From your list Dreamhost has the following as one-click installs:
Wordpress, Gallery, Subversion, Trac (also MediaWiki & plenty of other things).

It has MySQLAdmin (or whatever the MySQL admin thing is called)

For things that aren't on control panel you get (non-root) shell access, so you can install most PHP, Python, Ruby & Perl applications.

I have a number of VPS's, and I work on AppEngine applications, and I wouldn't use either for my personal site. Getting Wordpress auto-security updates is worth it in itself.
loosely coupled components are the way to go

I disagree. Had you added "in some situations" I wouldn't.

The point of the frameworks, which are heavily coupled components with many constraints, conventions and hidden parts of functionality is rapid prototyping. That means that you can go from 0 to something quickly without knowing all the details. For a large class of use-cases the ability to get something out there fast is more important than the technical debt you may incur by not knowing how everything is loaded. This is the case for a lot of new products, startups and such.

On the flipside, if you have a very solid spec of what you're building (for example, if you are re-writing an already-existing piece of software with a browser-level test suite as spec so that it is easier to scale) then loosely coupled components are likely the way to go. And yes, as soon as scale comes into question loosely coupled components that you understand well are the way to do it. This just isn't always the case.

Secondly, it is not clear whether the frameworks get in your way that much. I remember reading a blogpost about a shop replacing django bit by bit until there was no django. That seems pretty cool. On the other hand, there is disqus, which used django from the get-go, I think, and haven't swapped it out, but just built a lot of tools around it. On the third hand, there is probably a lot of sites that start with loosely coupled components and keep refining. They are all valid approaches. At the time you are starting it is usually unclear how to go about it.

In general I agree that people should try to understand how their tools work, but there are only so many hours in a day, y'know?
I'm not 100% in agreement. I think you should quote prices according to the project or client in question. Some big long projects call for billing by the week or month, many work well with days, but sometimes you have someone who just needs something quick, and you can't reasonably charge them for a full day because they realize full well it's not going to take you that long. They're going to be happier with a high hourly rate and feel that you're being very careful to only charge them for the hours worked. This is, after all, how lawyers work, amongst other professionals.

IMO, at least - I think it depends a lot on what sort of clients and work you're doing.
The situation was more a product of booze, partying and potentially socially awkward people celebrating an event together as it was about an Open Source issue. This type of stuff happens elsewhere outside of Open Source. To suggest that somehow the Open Source community should rise above it more than say, the accountancy industry is a bit silly at best.

The measures put forward by the author, such as codes of conduct and training sound like the type of thing that might work in a company but are just not going to work at a conference, let alone one with lots of people present, let alone at a party peripheral to a conference.

Two people were very badly affected by the whole episode, the girl and the guy. I'd like to see people let these two sort their issues out with the authorities while we all move on, but something tells me that people are going to try and milk this as long as they can. Maybe I'm just incredibly cynical, but I get the impression that not all that I've read on this matter is as much about the girl or the guy, but more about generating noise to get links. I'm not suggesting that TFA has or hasn't done this, more that I'm an extremely cynical person.
That is the solution to protect websites from the current iteration of FireSheep. It doesn't fix the underlying problem though. If a version of FireSheep comes out that can do MITM we might have bigger problems.

The solution to the problem is SSL on every page.
Arduino High Speed Photography Trigger
So, uh, what component of this browser isn't already addressed in a Firefox plug-in? I doubt it has things like performance increases that would make me choose it over, say, Chrome when I need to go faster than FF.

If its intended audience is less tech-savvy folks, I think they'll have a hard time getting them to even try something that's not IE.
Link doesn't work bro.
Initially homes are great but the work/home split generally goes away completely. I'd look to move to an office the minute you have (or are within a month of) an MVP that has a good chance of being ramen profitable. It doesn't have to be a big office, you don't all have to be there all the time, it just needs to be something that isn't where you eat, sleep or relax.
Any chance of posting the source?
It would have been sexier on a semi-log-y scale. That said, as someone who's always been annoyed at the high latency of App Engine's datastore, this is huge if they can deliver this level of latency with low variability.
IT'S OFFICIAL: America Is Now A Banana Republic
That would be really interesting to see the details required for each framework in comparison to each other.
almost as underwhelming as what it turns out kiha is doing
Their root CA was generated in 2006. In theory, any browser shipped before 2006 will not support it unless it was added (through, for example, Windows Updates).IE7+ is supported; I haven't tested (and don't care to test) IE6.
>100 IQ is defined as the average in the population under study, therefore increase / decrease is impossible.

By our standard, most people 100 years ago would be classified as retarded. Thus, what I meant by increase in IQ is in relative to past populations.

An errors? Perhaps, but that's nitpicking.
I've been using StartSSL for quite some time, and only wget has been unwilling to accept it (whereas curl, firefox and chrome have all accepted it):

ERROR: cannot verify [site]'s certificate, issued by `/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 1 Primary Intermediate Server CA':

Self-signed certificate encountered.

To connect to [site] insecurely, use `--no-check-certificate'.
Is This the Future of Food?
Off the top of my head, you probably didn't include the intermediate certificate. Read #31 on the faq: "Why does Firefox present a warning when connecting to my website?"

http://www.startssl.com/?app=25
I'll stick with firefox but looks good.
I won't get to see the game either. That's a good point about showing the customer some value before requesting info from them. I need to rethink my site ;)
Tired of this concept. I already use my browser to use twitter, facebook, etc. Why does it need to natively support twitter, facebook, etc? I thought the purpose of a browser was to execute web apps, and third-party app-specific clients were supposed to execute a single webapp. The crossover seems unnecessary, and hopelessly proprietary. If at some point, facebook dies and (maybe) something else takes it place, where does that leave rockmelt?
Yes, I'm a doctor. I work with other doctors.
Flock was a terrific idea, terribly implemented, and likely a bit ahead of its time.

In my view:

1% Idea
33% Team
33% Timing
33% Execution

You need all of them perfectly aligned, but that's how I see it.
As someone who does go to parties, if some girl were sitting in laps and laying across people, etc., she should not be surprised if a guy makes a move.

Now, the guy should have known she was probably not specifically interested in him, since she was sitting in EVERYONE'S lap (this is analogous to other things a man or woman can do with everybody...)

And, as you mentioned, he had no right or logical reason to make the move down south. If someone did that at a party I was at to one of my female friends, he'd get socked in the face and thrown on the concrete.

---

In short, you're absolutely right, IMO.
Works fine for me (http://twitter.com/#!/places/247f43d441defc03)
I don't know what "jamming his hand into my underwear and fumbling" even means - did he penetrate her with three fingers right through her underwear (was she not wearing pants/skirt?), or was he playing with an exposed thong T-bar, or something else?

By something "similar" I mean I've been "rejected" by girls before, and not immediately raised my hands in submission and backed off. E.g., talking to a girl, tried to make out with her, and she said no, depending on what I thought, I might, say, keep a hand on her thigh, or playing with her pantie line. Not a perfect match, but I could definitely see someone wanting to make a big deal twisting that into something along the lines described here.

I could be wrong, and this guy could have committed the very worst interpretation of what the author described. But I doubt it, because the article seems like it's written for maximum effect.
This is not correct. In the United States you must prove an intent to defame. Sure he can sue for liable, but he wont win unless he can prove intent. Even if the charges against him are not proven. This may seem harsh to you, but read about liable in the UK to see what a train wreck the other alternative is.
It's interesting to note that if these machines produced a regular "skeleton" x-ray image, instead of the "nude" image, nobody would care that much, and it might even be an improvement, if it sped up the lines.
An alternative? : http://www.tcpcrypt.org/
I think its a darkish launch, it seems to work for some people and not others :\