skysight-inc/HackerNews huggingface dataset:
I would actually lean the other way. If your system is far more secure than another identical system, people are less likely to bother targeting your application when they break open the other one much more easily.

It's only when you bring something unique or "better" to the table that you make it worth spending significant amounts of effort on breaking.
Firefox's memory leaks are mostly due to JS. On the other hand, if you read the article, you'll notice that the problem is cross-browser.
It's such a bad deal that it's already been banned.
Twitter is a web UI for a stream of messages. It shouldn't be CPU-intensive.
How does he smell?
Google Ads Actually Quite Heavy-Handed When You Think About It
As a native Spanish speaker I never thought that I was expressing something different when talking in English.

You would say "se me han perdido las llaves". The "me" implies that I am the one who lost them.

Probably the thoughts are universal and we just express them in different ways.
Since there was no denial we can reasonably assume there are no stringent safeguards against engineers accessing user data.
Brisbane floods: before and after
You move the UI messages into a separate resource file, as you would for language translation. The executable signature is unaffected by the changed UI messages.
If your a developer for Apple, presumably you are selling your apps through the app store. Apple get's a cut of the revenue for apps. So if it was worthwhile to have a more complicated DRM scheme, wouldn't Apple provide it?
25 years of IETF: setting standards without kings or votes
various Anon Ops also add to that. during their attacks these days quite a lot of tweets on #tunisia and #sidibouzid were from anons activity.
I think one of the issues at work is that I have an entry level job and a great deal more formal education than my coworkers and both my immediate bosses (though one of them is actively pursuing more education, and that seems to help reduce my problems). So a lot of my tips and tricks are dramatically better answers. It causes problems. I try to deflect the uptick in perceived social status. I don't make any more money than these other people or have any more authority. It's important that I get treated as their equal.

I will have to keep "certainly" in mind and see if I can't find a good way to use that.
This article had me until:

Asking the game makers to remove features that help the games go viral doesn’t seem to benefit anyone financially.

Sure it does. It benefits Facebook.

If the best way to get growth (ie, viral) goes away, most companies will fall back on the second best way to get growth: ads.

Guess who controls the most effective ad network on Facebook? Facebook.

Every time a viral channel is removed, a developer ends up buying the installs instead. It ain't pretty, or cheap, but you have to find them somewhere.
Perhaps developers making $150K+ don't need to read SO (and vice versa)?
Here's mine, performing similar feats of intelligence. Recently we taught her to open the garden door.

http://www.youtube.com/watch?v=COIVkkHxNR0
I love it how people stay silent after flaming several topics on this subject in the past year.
Could it be... interrobang‽
"I'm not sure if you know, but Bulgaria is in Balkans". Mexico is in North America. What is your point?

BTW, Mr. Bobbie Tsankov was a convicted conman that loved to brag about how well connected he is with the underground and this is a fact. He just happend to have a radio talk (not news) show. Saying that he was a "crime journalist" is like saying that Lucky Luciano was running a security company.
Loved the interview, very interesting, perfectly clear.
Helped me a lot to understand the internals. Specially interested about the replication explanation.
Great work, Salvatore!
Make an API and or import/export options?
It's amazing how much your story almost exactly mirrors mine. I was always fairly technical, but had no idea how to code and really wanted to learn. I read various tutorials dating back to the early days of Rails. Nothing really caught on until I finally had such an urge to create my own app that I locked myself away for a few weekends in a row and just figured it out. Your "1 month ago" sounds like where I am right now. It's incredibly satisfying to build something from scratch that you've always wanted.

Best of luck with the app... I love the design and simplicity once you log in. My only comments are that the logo needs to be more noticeable (as others have indicated). Also, I didn't totally get the "tag notes like this bookmark" in the main nav upon just glancing at it, but once I clicked on one I got it (which might be by design).

Congrats!
Good catch - the app is one page for now ... but you can embed links from one wiki page to another.

I'm planning to extend this app (no longer just 80 lines), so it supports multiple pages PER WIKI. This will use the "Blob" storage feature of Pageforest. Each document has a top level JSON object intrinsic to it - but can have any number of child Blobs stored beneath it.

I'll also have to extend Showdown to enable auto-linking via CamelCase references.
That's true 99.99% of the time.

However, just to play devil's advocate, there is a class of attacks based around injecting code into logfiles since they'll log the query string of a GET request. If you can then get the server to say include that logfile as a php file, it will execute the embedded PHP.

Of course the real vuln isn't logging GET params (it's convincing the server to include the logfile as .php), but I thought it was worth pointing out.
I agree with the Devise recommendation, although I feel like Authlogic gives you more control. I get really frustrated with the inability to customize Devise as much as I would like (though not frustrated enough to go back to Authlogic).
I'd love to see what happens when dogs are bred for intelligence, rather than those other silly things people breed them for.
Click on the hardcover edition link.
New Twitter has a login popup everytime I open it. I am already logged in. I can close this popup and my twitter experience is not effected. Why is this thing even there?
The truth about Wi-Fi: An in-depth look at whether Wi-Fi is safe or dangerous
I think they would mimic the current situation with Cook running the company and Ive doing the product development. What their actual titles would be is anyones guess. Cook's lieutenants are going to be very important.

I hope this is just the effects of the transplant per the NYT article. It would make sense given the compensastion they are giving Cook.
They'll end up getting picked on by other dogs in dog school.
The this keyword (javascript)
Modernizr 2.0 beta released - customizable downloads
Best domain name
OpenID for API Registration | API Evangelist
Is it worth the effort involved?

Yes absolutely it is. I always tell the developers that I work with that the most important thing we can do is figure out a way to "peek" inside our systems. Keeping statistics o "background" metrics and displaying them on a simple webpage using plots can be very useful in discovering problems that would be otherwise impossible to notice.

There are many things which are easy to QA because you can visually see them. On the other hand there are many things which are hard to ensure top notch quality because there's nothing to "see". For example, if your system gets sluggish how many users were viewing your site, what was the CPU usage, memory usage, etc. Having cron jobs or other statistical capturing systems which you can use to store and plot data can help you understand when a problem happens. Then you can look for similar patterns and debug the issue.

I work with a system which is rich in algorithm and we keep lots statistics on every major algorithm. That way, if we modify an algorithm or add data to our system we can see if there's any abnormal behavior. We've learned what acceptable is and how to identify problems by looking at the plots we generate with the captured data.

I wouldn't do anything overly complicated. We use the google chart api, easy to use and very fast. http://code.google.com/apis/chart/
Brilliant, but be careful about this. There was an article here years ago about an indie game developer who put tons of different piracy checks all throughout his game. He was pretty clever, and made it so that several didn't activate until partway through the levels — that way the crackers might miss them. Also, he didn't show any "pirated copy detected!" messages, which would have made the checks trivial to find. Instead, the application would simply crash with a cryptic error message.

It worked perfectly — the crackers missed the later checks. Anyone who torrented the game found that it crashed reliably as soon as you completed the first level. Game over.

Unfortunately, this did not generate the kind of PR he was hoping for. In fact, all this did was give the impression to everyone who pirated the game that it was a buggy piece of shit. Since there was no obvious reason for the odd behavior, they assumed it was the fault of the application. They stormed the gaming review forums and discussion boards, complaining about how the game was "shitty" and "unplayable". Nobody was keen to mention that they had pirated it, so there wasn't an obvious trend. At the time, the ratio of pirated video games to legal ones was about 10:1, so the bad feedback overpowered the good feedback by about 10:1. He was ruined.

Be careful about anti-piracy. You just might succeed.
Agree that Google's action across Chrome/YouTube/Android is probably a little more coordinated than I suggested in the post. I read so many articles that anthropomorphize large companies and spin stories where they are hypocritical, vengeful, envious, etc. where the truth is that they are just loosely connected, somewhat coordinated networks of people like you and me that are making decisions and getting on with it. Pundits have always done this (makes for juicy stories and good traffic), but it seems to be getting worse than ever with the Google / Apple narrative. I guess I ended up swinging the pendulum too far in the other direction.
I figured you were, and I apologize for not using the word "only"?
Oh, yes I agree there 100%. I didn't mean to imply that it's not a problem in any way, just that pirating users provide some exposure too.

You could argue that they also decrease exposure by not counting as a download & dollar earned in the app store, but first you'd have to prove that all pirates would buy have purchased the app if not available for free, which I think many people agree is patently false.
Full text search (HTML aware) on my browsing history. I'm working on it :-)
> ... none of us probably have the answer - or if one of our loyal HN readers does, they're not really likely to divulge it.

Exactly, if he works for them and boasts about how efficient they are, it sort of makes them look unprofessional. If he doesn't then how can he say that they are "shipping"? Maybe they waste lots of taxpayers money on projects that never make it out of the door.

From what I know their general policy is to never confirm or deny _anything_.
Amazing that just a small number of humorous headlines can be motivation enough to keep clicking until I find one.

I believe there have been studies showing that this is actually the best motivation of all. That's why we all check for new email obsessively. Pressing the button is most addictive when you only get a pellet - uh, I mean email - occasionally.
AudioScout audio content indexing system available
No worries. :)

My only involvement in the iOS port was to give it my blessing, after the fact. The author got in touch with us (the original Spectre authors) at some point when he was pretty far along in development, asking us about a license, which we gave him for free -- we were happy to see Spectre live on.
Good point, though not quite contradicting that of the grandparent post.
Why Apple's Steve Jobs is so fascinating
The female mind.
Price your app exactly at a point where people with money will gladly pay for it instead of suffer the hassle of downloading crapware-infested copies. And let people without money copy it freely without barriers, and see it as a marketing tool so everybody use your app, not your competitor's.

That price usually is between $0.99 and $9.99 and thank Apple for showing us that lesson.
Just pointing out that you would be wearing a t-shirt of an agency that doesn't mind assassinating and torturing people.
I've gotten three or four.
Yes it's worth it. We made our own and it's the best thing we ever did. It really illuminates your business and allows you to make better decisions. We used Fusion charts for the charting bit.
A quick correction/clarification on the above technique for anybody wondering how this works from my poor explanation.

- I should not have written 'sub-classing'; this technique works by actually extending an existing class (Objective C allows you to extend a class)

- AFAIK this technique only works with Objective-C based apps.
Currently, we're not live streaming. We poll every 30 seconds when focused and fall back to 90 seconds unfocused. When we do push, we'll be using User Streams (http://dev.twitter.com/pages/user_streams) with either Websockets or Flash. Performance should improve when that happens. There are also some other neat tricks we'll be able to do to make the site even faster.
Yeah, I've been using it today. I want to love it but I can't. No DM count on the screen (to save three bytes?!), no user icons, no way to tell that I've gone over 140 characters.
I call shenanigans. The researcher wrote the name of each toy onto it with a Sharpie - clearly the dog simply read the name off instead of memorizing all 1000 items.

There's just so much sloppy research out there.
I would imagine that it's an account that has nothing interesting happening on it, but is just there so people can point to it. (Referencing the term "dummied out" — http://tvtropes.org/pmwiki/pmwiki.php/Main/DummiedOut)
Google Chrome already features this in the Bookmarks > Show Full History view. Make sure to close the page before searching for it otherwise it won't be indexed yet.

Perhaps you mean something else by "HTML aware" and this is not what you're looking for.
I am a native Spanish speaker from the Canary Islands. It's is quite clear that the author is learning mainland Spain's Spanish, as he uses "patata" for potato, instead of "papa", which I believe is used everywhere else. There, those phrases are quite common ones to use for that situations.
Females of what specie?
Tech Start-Up 100: applications now open
Is the popup a HTTP Basic Auth window? If so, are you using Firefox? This is a ridiculously elusive bug that a couple of us have been trying to diagnose. It appears to be buried in the FF implementation of XHR when a reference to an XHR instance is shared across iFrames. We're working on it.
Aliasing, the silent killer
The main event that started the Tunisian revolt was a shopkeeper, squeezed by a corrupt policeman and refused help by the corrupt local government, protested by setting himself on fire.

The fact we're even considering Twitter a factor here just shows how completely out of touch we are with the lives of people in dictatorships like Tunisia (which isn't amongst the worst in the region). These are places where people burn themselves in the street get attention, rather than tweet.

Last week 4 Algerians, one Egyptian and one Mauritanian have torched themselves in similar protests: http://www.nytimes.com/2011/01/18/world/africa/18egypt.html
Why Chinese mothers are not superior (The Jewish sequel)
It's not really what I would like to search, but really how I would like to search. Adding filters or restrictions is becoming very important to me. For example, I want to search google and I don't want my search results to return any stackoverflow copy cats, or I'd like to be able to group my results by something (e.g. domain, relevance, date, etc).
Also, I'd like to specify what to search (e.g. search title only, h1 only, body only, etc..)
See http://elem.com/~btilly/effective-ab-testing/ for my advice on how to put together an A/B platform. Sections 2-4 are the most relevant.

The most important detail is the warning in slide 34 that you should not use the person_id to set the A/B test version. The reason is that if you make that mistake, then you can only run one test at a time, and can't easily drop versions of tests later. On the other hand if you make assignment random, then you are free to run tests in parallel, which is very useful for trying out lots of ideas. (Particularly when you have less traffic.)
Good thing Chrome kills the entire process hosting a tab when you close it.
I think they mean is that the GPL can restrict the ways developers can combine various components. Ultimately software is developed for users, and if developers can't build software for their users, then the license can become a problem.
Why Steve Jobs Won't Return to Apple
The search part would be the easiest. The hard part is keeping track of spatial coordinates for all those items in near real-time. If you could tag say 1000 items in your house and gave me that api, I could set up a web app for you to find them.

Does anyone know if such technology is readily available/cheap?
Install CyanogenMod 7 Android 2.3 Gingerbread On HTC Wildfire [Guide]
[ANN] Alfred - an in-process key-value store for node.js
Alfred is a node.js in-process key-value store with in-memory
functional indexes, filters, activity filters, write buffering, cache,
replication, buckets, persisted meta-data, ...

Blog post announcing:
http://metaduck.com/post/2637829753/introducing-alfred-a-node-js-in-process-key-value

Alfred homepage:
http://pgte.github.com/alfred/

I have been working on this on and off since November, after blogging
this:
http://metaduck.com/post/1618386212/my-almost-perfect-in-process-node-js-key-value-store

It's still experimental, but I plan to use it on my next coming
node.js-backed project.

Feel free to try and comment.

Thanks,

-Pedro
A lot of books, especially fiction, you can finish reading within 14 days.

I was never made to feel guilty about borrowing those books from the city library, returning them two weeks later and never buying them. When did the standard change?
I Can Crack My Own App With More Than A Shell (And Link To Another Of My Articles)
Yep. The thing for me was that trumpet was not anywhere near "jamming with friends" the way choir is - I didn't like anyone in band, and after 45 minutes of playing I'm winded and my brain is deprived of oxygen, whereas 45 minutes of singing leave me feeling great. I don't think parents should let their kids do nothing, but I do think kids should be allowed to experiment, and choose for themselves what they stick with.
SEO Videos » Links to Presentations given by SEO Experts
To make it easier for you to learn and improve your knowledge on SEO and get latest updates from experts, here are some useful links to videos pertaining to SEO
Still Waiting for the Revolution: A Conversation with Alan Kay [2002]
The secret behind the woman who can remember everything
> duplicate the session cookie in the URL

Please don't do that. If you inadvertently paste the URL into an IM window, post in a forum, etc., it becomes trivial for me to steal your session.
We Nitpick UX in Web Apps, Yet Terrible Design Abounds in Real Life
> The only way to really prevent cracking of apps that run locally is either challenge-response dongles ...

This doesn't really work. If you have all of the functionality running on your machine but the dongle is there to authenticate, it can be cracked by ripping out the code that does the challenges. The proper way to secure an app using a dongle is to move some key piece of functionality out to hardware instead.
Yep. I'm even building my own dashboard that sits on top of the google analytics API to give me quick access to more sophisticated analysis than GA allows.
I should add that since your application's assets are publicly viewable, there is no way for your app to store a secret key. Also, all your source code is visible to anyone wanting to look at it. This may preclude those that want to keep their code a trade secret.
Map the "economic downturn" against the sort of things being advertised. Things like increase in car sales when the largest amount of people were employed, things that map what most people sell first when they have financial trouble. I guess that's pretty impossible to see, but I think it'd be cool to see the type of things posted when the economy is doing okay vs. everyone paniced and losing their jobs.
This is fantastic; I had been thinking of doing something similar just for my private use and I can guarantee it probably would have been hacked together and not very pretty.

Really love your ui, and will definitely be using the service for future sass apps I build.
We humans define intelligence in such limited terms.

I have a border collie who's remarkably intelligent. But the words she knows are just the beginning. She's incredibly perceptive. Gestures, facial expressions, and vocal tone are all things she pays attention to.

Determining how intelligent an animal is by how much it can learn the words of our language is a remarkably arrogant thing. We've clearly underestimated the intelligence of every animal we've ever dealt with. We only ever revise our estimates of animal intelligence upwards.
Am I the only one that doesn't want to listen to music or other people talking all day?

How about some silence without head (or ear-canal) compressors on?
Naomi Klein: Addicted to risk
Ask HN: What does "node" refer to in javascript code on this page?
I am trying to understand the javascript on this page to copy it for my app to use for voting. So any help is appreciated. Thanks.
I really don't like that slide effect. A simple mouseover would have sufficed.
"It's easier to believe he has a genuine personal and emotional interest in Apple and its products rather than it just being his job. "
Yea, I mentioned the myth that after a manager has an MBA, he or she can manage anything before.
I missed that part of the article. It seems like they are afraid that all of the media attention would qualify as 'advertisement' which they are not allowed to do. That has nothing to do with how good/bad the deal is.
Sure, it's not unheard of, but it's still huge! It's extremely hard to become six or eight stones better from that level, and by all appearances, it represents an enormous gap in ability. The most talented and smartest humans take years of constant study and practice in their teens and 20s (at the height of their cognitive power) to go from 2d or 3d amateur -- the strongest programs -- to become a high-dan professional. Further perspective: Various professionals have remarked that they believe the best humans are only about 3 handicap stones weaker than God.

Consider this. Perhaps you play chess; David Levy's famous chess AI bet was that no computer by 1978 could beat him, a chess international master, in a match (I don't know his exact strength, but presumably 2400-2500 Elo -- much, much stronger than an expert!) Now, in 1978 the best computer could not beat him in a match. But it did win a game, and draw a game. However, it took nearly another 20 years from there before a computer could beat the world champion.

But Go computers, relatively speaking are not even as good at Go as the 1978 computer was at chess. The equivalent of a 2d amateur at Go might be a 2100 Elo human at chess, a strong expert; certainly not an IM! So it's not obvious to me that Go computers will be at a world-class level in a shorter timeframe than 20 years. Indeed, I believe more effort has gone into computer Go circa 2010 than had gone into computer chess circa 1978, so it might be reasonable to expect progress to continue even slower.
Would've been nice to see a video to go with the article.
But it's being implicitly linked in, so what's your point?
Git-powered wikis improved - GitHub