skysight-inc/HackerNews huggingface dataset:
This is great news! Our startup http://www.sescout.com has been using notify to alert users of changes in their search engine ranking positions for some time now.

Truly a brilliant service. We will let our users know that you are accepting beta testers for the Android version!
http://www.archive.org/details/Arduino.TheDocumentary.Englis...
The source article is formatted much better: http://www.nytimes.com/2011/01/06/business/smallbusiness/06s...
Not to knock your project, but why exactly would anybody want to get a notification every single time their website is viewed? I could see that becoming extremely annoying, and it is in no way beneficial for statistics, so what's the value proposition? I apologize if this came across as harsh, but I honestly can't think of a purpose.
> "I don't hear them speak out against, on religious grounds, against the extreme, religiously inspired, stuff that gets shouted around by national celebrities"

Moderate Christians pretty routinely criticize Christian extremists, just like moderate agnostic/atheists routinely criticize their extremists. Last time Pat Robertson made a stupid comment that I heard about, about a third of my Christian friends on facebook used direct quotes of the Bible to contradict him, and nobody said anything in support of him.

If you live in a bubble, you only see the other side's extremists, and therefore come to the mistaken belief that their moderates are silent or nonexistent. The solution is not to criticize the moderates for being insufficiently loud; it's to spend more time actually listening to the moderates.
the depressing part it highlights is how much energy we waste.

I can build you a solar-powered toaster with a piece of foil for few bucks. Yet you'd rather use chinese toaster that uses as much energy as can propel you and a vehicle at 100+ kph...
That's fair but I'm using OpenID (and developing a new Django OpenID authentication system) partially because I'm reasonably sure I've kept up with crypto best practices to store passwords safely but I'm also reasonably sure that most developers haven't. I'd rather people just use OpenID rather then fuck everything up.
"the rarity with which users feel the need to check their spam box for false positives demonstrates a high precision of classification"

I find this a curious claim. How does people not checking their spam boxes demonstrate that there are, in fact, few false positives?
I think you could get a job in the marketing department at match.com. Your line of reasoning is right up there w/ their current campaign where they point out how more relationships have started with them then on X site, Y site etc.

RSS is older than JSON of course there are more entries.
Damn, I'm all out of pepsi bottle-caps.
Guilt by association is guilt by association however you choose to wield it. Have the last word, if you'd like.
Looks like urging for calm and sanity isn't popular with some folks here.
It's even better to be consistently good and occasionally great.
You can have all the right in the world and still be an ahole.
HN isn't so much a movement in the content industry, but a very specialized aggregator. It certainly is one of the ways I try to provide myself with good reading material so it does help.

One of the good things about twitter is if you follow content sharing people with similar interests it acts as a filter. A human filter you are exploiting, but still a pretty good filter. I'm sure somehow content aggregators can move away from a board based format and into a more heavily human filtered format. Trawling through a board is time-consuming and not nearly as well filtered as it could be.
Congresswoman shot gabrielle giffords
No problem, It's not an easy thing to explain. I have a site that I built as a resume to apply for a position at one specific company, and I blocked search engines. I want to be notified every single time the site is viewed, since there's a very small, specific group of people who will visit it.

You could also put one of these on the 'thank you' page if you're selling something, to be notified when people make a purchase, or on a specific type of error page.

Or you could put this in an HTML email to be notified when people open the email (although many mail clients block this).

It's certainly not something you'd want to put on the front page of news.ycombinator.com. It's intended for much lower traffic, but high value locations. Plus, it's free and it only took a day to build, and it was fun :)
AppSumo: $29 for 100 Die Cut Stickers from Sticker Mule
Broadcom joins the Linux Foundation
I just want to add that nowadays "scrypt" (see http://www.tarsnap.com/scrypt.html) might be a better solution than bcrypt (suggested in the link).

("might" because scrypt is relatively new and therefore missing the numerous peer reviews bcrypt has seen).
Sorry, didn't know it was a dupe. I figured hackernews would have told me when I tried to submit it.
Italy's first big electronic literature conference
I would note that the author jumps between "teaching programming is hard", "programming is hard" and "learning programming is hard". None of these are equivalent statements about a field in general (even if they're all true here).

Still, it seems like in fact saying things about "programming" might also being inherently hard!

I mean, we can say that the halting problem is inherently but the halting problem doesn't reflect the day-to-day practices of the working programmer. Yet how do we characterize what does? The boundary between programming and using computers is fuzzy and given Church-Turing, just about defined activity can be encompassed in using a computer (a lot of machinists have become "programmers" of numerically controlled machines but this use is more similar to artists using Photoshop than software engineers using c++). One might argue that the advance of computer technology will create more and more professions which involve the high-level use of computers but won't be "programming as such" (spread-sheet use, UI design, etc).

By that token, if "real programming" is what's left when you've codified the other occupations, one could argue that it is inherently hard. But we're still a bit at the level of tautology.
أفضل الفنادق في ماليزيا
> "if you ever get us in a copyright dispute, you are banned forever from our store"

Hey! Angry Birds stole my intellectual property.
Congresswoman Gabrielle Giffords & 17 Others Shot in Tucson
A DIY Origami Notebook to Keep in Your Jeans' Small Pocket
No, it's the best conversation because, unlike conversations with you, it brought legit testable things to test for and questioned basic assumptions I had based on actually looking at the code I'd made. E.g. A timing attack based on password length in SRP is legit. Everything you bring up is just yelling and screaming about browser security issues every login system has, then claiming your proposed login solution doesn't have them.

Even in this comment you're all over the map. HMAC? I'm not using HMAC. RSA vs. SRP? One is an asymmetric cryptography algorithm and the other is a authentication protocol, which are very different. You can't just slap RSA on something and then it's an auth algorithm. There's a whole range of protocol analysis to do in addition to just using RSA.

But why am I telling you that? You're a real cryptographer. How come you didn't mention the possible timing attack against SRP?
I just came accross this posting of yours:

http://mailman.videolan.org/pipermail/vlc/2011-January/01979...

Where you say:

"No. Apple decided to remove VLC from the AppStore by themselves."

You are either blatantly lying or you have no idea what actually happened.

Apple responded to a copyright infringement notification like they always do: they removed the app from sale.

This is the direct action of your colleague in the VLC project, Rémi Denis-Courmont.

Stop blaming Apple for removing the app. YOU GUYS, the VLC project, are the ones who are playing this game.
directly attributable to a single country or intelligence service

Except that I didn't say that Stuxnet was attributable only to one country, just that it was effective.
The importance of locality and sparsity in memory management
When I write a program, however. . .

It might not catastrophically fail, but it might mean anything from not compiling through to not outputting a newline or create a possible security issue via a buffer overflow.

Like the majority of things in life, it comes down to shades of grey, and that's why it's tricky at times ;)
You might check out this novel:

http://www.amazon.com/Davids-Sling-Marc-Stiegler/dp/06716536...

Among other things, Stiegler posits a "Zetetic Institute" that teaches people how to think better -- effectively, an "organic foods" industry for the mind.
No this is what a GPL developer considers a "loss". Specifically, yet another demonstration of why developing for someone else's walled garden is a bad idea.
If there were lots of false positives, people would check their spam folder a lot more. They'd expect to see non-spam email in there.
1) (a) and (b) Applies mostly to the Darwin source. Apple doesn't provide you with the latest sources before it has it released commercially. Big f'n surprise. Not many people are interested in Darwin anyways.

(c) Actually, you can get the WebKit code and build it, and you'll have a WebKit browser to run. I've done it. Don't know what you are talking about. Did you expect the whole code for Safari? They sure give enough Webkit source for Google, Nokia, the GTK people et al to build a full featured browser upon...

2) "Also, it is quite clear to everyone involved that the reason that they are actively developing Clang/LLVM is so that they can avoid gcc 4.3+, when it went GPLv3."

Actually, it is not at all "clear". They started using it way back in 2005. Actually they wanted a better, faster, more flexible and dynamic compiler infrastructure, and LLVM provided that. And they use it for other stuff too, from graphics code to MacRuby.

3) "since then, Apple's Xcode compiler has rapidly slipped out of date, and now they are forced to take over development of a BSD project just to stay competitive".

Actually Apple had made huge improvements to XCode's compiler in XCode 3, even adding several new features to the core Objective-C language, and also made a HUGE improvement to the overall IDE and compiler (new static analyzer, new debugger, AST-based syntax assistance and code completion etc) with XCode 4 (currently in public beta 5).

4) despite Apple's claims, Clang/LLVM is still very very far behind GCC in terms of correctness and compliance

Bzzz, wrong.

5) (certainly with recent specifications, like C++0x)

Which are not even standard yet, and noone cares about while actually SHIPPING code.

Whatever man...
Whaat, I signed up for the beta on the site ages ago, when it first launched. I demand to be included :(
Arizona Shooter Jared Lee Loughner - Internet Profile, Photographs
They have tons of users, they can make some good money with ads. They're not even pushing hard right now but I think they're not losing money though I may be wrong.
No, Zed. A timing attack based on password length in SRP is not really legitimate.

As you know, I read your code, and I know you're not using HMAC. I'm saying that timing SRP based on passwords is like timing HMAC based on the key: ie, not how a timing attack on SRP would actually work.

I'm going to let someone else chime in and add details to this, because when you and I argue, it just becomes a crazy personality-driven soap opera. I have approximately the same issue with Kaminsky, so don't think that's somehow a criticism of you.

For the record: I'm not a real cryptographer. We do have some on HN. Colin Percival is really a cryptographer; he has been published multiple times in the literature. What I do is get paid to break systems, and I've been on a tear through crypto features in the last couple years. I am a second-rate Nate Lawson. That's all the background needed to sniff-test this Twitter dialog.
Dom-monster: A bookmarklet to analyze your DOM and improve performance
This is much more about a single VLC developer spitefully griefing the others than the GPL.

The only reason he has grounds to send C&D letters to Apple is because he holds copyright over his contributions to VLC. The other developers don't give a shit that the Apple-distributed binaries aren't redistributable by default, given that the iOS port is still fully open source and is trivially redistributable/compilable on jailbroken devices.
Neanderthal Capitalism
Planet Earth is screaming hints at us. Birds are dying, fish are dying, the air is polluted, all while the TV is telling us to use less water. In the meantime, British Petroleum pollutes more water than humanity could consume. We must hit the brakes, urgently.
They're not exactly doing great either, so some sort of hint of irony is definately present...
Ask HN: What to ask to avoid corporate hell?
Hi all, I'm looking for some good questions I can ask at a job interview.

I know this is probably the opposite of what most people here want to do, but I work right now at a fairly small company (doing mostly development / deployment / have lots of this company and technology specific experience) and I'm going to an interview for a job in an international IT company who's logo you are likely to see somewhere around you right now. The destination position is in r&d / development.

After hearing a lot of good and bad things about big corporations, I really want to find some questions that I can ask in order to avoid a disaster. If you ever worked in such environment / know more about it, could you post some things I can ask and what kind of behaviour from their side says "run and don't look back"? I will have separate meetings with both a manager and with technical people. As far as I know, technical side is pretty decent (re. quality control and testing) and they're not treating people like slaves there (in that dept. at least ;) )

Any advice would be highly appreciated.

(for obvious reasons, this is a throw-away account and a pretty vague post...)
And it goes without saying that the sight of a single developer torpedoing a popular project over the objections of both other developers and users is an awesome commercial for open source.

It doesn't seem like VLC requires copyright assignment. If it did then the maintainers could implicitly or explicitly relicense VLC for the app store. Since Remi holds the copyright to whatever source code he wrote, he has a right to see that the source code isn't used against his wishes. Maybe he has a philosophical objection to Apple or the app store. Maybe he's just doing it "for the lulz". Whatever it is, it's honestly none of anyone else's business.

And that article is terribly one-sided. The only facts that matter are that Remi holds the copyright to some of VLC's source code and that the app store ToS is possibly incompatible with the GPL. Anything else (motives, etc) is a value judgement.
BT lets ISPs charge content providers for high-speed video delivery.
I think most anyone who looks at KDFs probably both likes scrypt and also doesn't obsess too much about them. The problem with scrypt is that it doesn't have a lot of language bindings; you can get bcrypt anywhere.

Personally, I think any serious KDF is better than just using SHA1 (or SHA256, and note that the difference between SHA1 and SHA256 is not super relevant to SRP), so as long as you're doing something --- PBKDF1, PBKDF2, bcrypt, scrypt, hand-hacked 1000-iterations-of-SHA1 --- I'm happy.
'hard' is best defined as 'requiring a skill a smaller percentage of the population possess

I disagree about the 'skill' bit. Skill can be acquired. There are many skills that few possess that many could acquire, if they wanted to. For examples, consult the Guinness book of world records.
One man's asshole is another man's hero. Who are you to judge him?
Are these the same TV manufacturers who thought 3D TV was going to be a big hit?

How much more expensive than dumb TVs will smart TVs be?
Show the subdomains of stackexchange.com . The site is getting bigger and the different subdomains have very different topics.
Ask HN: Which 3G dongle to use in UK (and London info)?
I'm traveling to UK (Rumford, near London) next week and need Internet access for my Macbook Pro. Which 3G dongle should I use, since I'm clueless about the situation outside US. I'll also buy a pay as you go SIM card, which one should I buy.

If you know the London area any other information (pubs, cool places to see, beer, how to greet royalty if I see them, etc.) would be much appreciated.

Edit: Thanks for all the responses. Yep, it's Romford, not Rumford :-) Also, is having free WiFi common in UK stores, like in the US, e.g. in Starbucks?
Her response was written entirely from her perspective. Shockingly bad customer service, indeed.
While correct, your description seems a bit reductionist to me. Twitter's value doesn't come from its ability to shuttle short messages around the web -- but from it's cultural presence, it's more-open-than-Facebook social graph, and the large amount of people who use it as a simple-enough-for-ma RSS reader.
Yes it is ironic. Might be ironic indefinitely. Their problem is not about competence, revenue, or profits. They have all three. It's about investor expectations, plus a dose of envy and greed.
Reminds me of the "If you're not replaceable, you can't be promoted" adage...
SSL Support for Squid on Ubuntu
Everybody who played with Squid on Ubuntu, have probably encountered with this problem; Ubuntu Squid packages had been compiled without SSL option. Therefore, it is not possible to proxy HTTPS connections with Squid on Ubuntu Server.
RTReporter - finger on the pulse of Twitter
I can't wait for the follow-up: "Ego Security Through Assenine, Passive-Aggressive Blog Posts".

(And I can say this because I've written asinine, passive-aggressive blog posts to boost the ego myself)
No prices for international shipping..
Will anyone miss Saturn?

http://jalopnik.com/5724254/goodbye-saturn-thanks-for-the-ri...
User-hostile is what it is.
Not terribly full featured, but done in about 30 minutes one night :)

Maybe it will be worked on again some day, if anyone cares.
<b>but the films that make the most money are rarely bad. The highest grossing films of the last three years have been Avatar, The Dark Knight, and Toy Story 3</b>

Which, even if praised by whoring critics, are all quite bad , formulaic, shit.

They aren't gonna be near (random selection of quality stuff): Citizen Kane, On the Waterfront, Arsenic and Old Lace, Apocalypse Now, 2001: A Space Odyssey, Vertigo et al in any cinephiles list...
This comes down to the contention between, using the terms I'm going with, a Customer and a User. Let's say you're logging into soawesome.com as a User of soawesome.com. That makes soawesome.com the "Customer", and you the User. Just to setup some terms. Also, let's say I'm not picking on OpenID but really any of the "redirect based" auth methods that transfer ownership of users to a 3rd party.

The difference in design is that OpenID assumes that the Customer is less trustworthy than the OpenID Provider+User. They've done a good job marketing this idea that you can't trust sites and so you, the User, should use OpenID. If you think about that it's kind of idiotic to assume that you're going to log into an untrusted site using another site (which could also be untrusted). It also assumes that most web users are savvy enough to know what this is, but if you were up on the ReadWriteWeb/Facebook fiasco you know most users can't tell their ass from a hole in the ground. OpenID is just confusing to them.

The truth is, if I can phish and XSS one site I can do it to another site. If someone can hack soawesome.com, they can hack your OpenID provider of choice too. All the attacks you have against one auth system apply to all auth systems because security in the browser is fairly broken. It's really completely a usability problem, and no amount of redirecting and bouncing around with crypto is going to solve that.

However, this mistrust of the Customer means that there's a huge risk for the Customer against the Provider. At any moment the Provider can decide they hate the Customer and turn off all the users. This actually happens often enough that it worries people to the point they put links to about 10 OpenId sites.

I'm trying to offer a solution that assumes the Customer is trusted and should own their Users, but that gives them a simple enough setup process that it competes with OpenID for simplicity of configuration (which isn't hard because OpenID is a pain in the ass). It should also give the Customer plausible deniability on password storage so, in the event of a breach, they don't lose anything. I'm also focusing on making this mobile/desktop device friendly, something that OpenID and OAuth totally fail at.

This Customer v. User contention is the most likely the point of contention you have in your comment: you believe you own your user account, but customers believe they own it. I'm actually not sure what's the answer, but autho.me is kind of an experiment in doing it the other way.
Awesome! Not only useful but elegant, too.

My problem with Moleskins, etc. is that I always lose them, since they're either hard to stick in your jeans pockets or make you uncomfortable if you do so.
Http://pornkeeper.ru/
"Open source" is a misleading term, please stop using it: http://www.gnu.org/philosophy/open-source-misses-the-point.h...

As pointed out in other replies, Apple is working on clang because it doesn't want to deal with the GPL (unless you own Apple stock, you're the one losing because of this decision), and WebKit because it's derived from LGPL code.

How much work is Apple putting into making Darwin a usable Free Software OS? Versus how much work have Red Hat, Canonical, Novell, IBM etc. have put into making Linux available in a number of different, free distributions? The reason all has to do with GPL and copyleft. There is very little incentive for companies to invest in BSD code, and no disincentive for them to steal it. If Linux wasn't GPLed, it wouldn't be where it is today.

There's nothing wrong with what Apple is doing. However, if you think that somehow Apple releasing some of their code under the BSD justifies restricting their end-users to their locked-in App Store and their fight against the GPL, there is something morally off with your thinking.

Claiming that this makes the BSD a better choice than the GPL shows that you don't understand that Apple doesn't care about you and your open source; they'll take whatever is convenient. You're the one losing out, and you're justifying it to yourself as a good thing.
PornFactory
It would take all people who own copyrights of code in VLC. That would include the VLC authors, but might also include authors of other GPL code that the VLC authors used.

If a GPL project hasn't planned from the start to allow for the possibility of granting license exemptions, it is fairly easy to let outside GPL code get into the project without its authorship being carefully tracked and documented.
To me this seems like a failure of the simplicity of the GPL, but with no easy fix. Apple doesn't want to restrict the program to anyone, they just want to have their distribution process restrictive. If there was a way to proxy the supply of the restriction-free binary and/or source code of the app there wouldn't be a problem. The app submitter or VLC devs or another interested party would step up to host.
This is as it should be. You cannot create an ecosystem that is diametrically opposed to every principle the FSF has ever stood for, and then expect to be able to distribute GPL licensed code from it. I'm actually glad to see the GPL working.