skysight-inc/HackerNews huggingface dataset:
> Chrome did not "break" rounded corners, they are various cases in which they arent perfect, but every time someone makes this argument they just point to "search the chrome bug tracker" as opposed to giving a specific breakage

Here's an example bug where the antialiasing was screwed up:

http://code.google.com/p/chromium/issues/detail?id=20064

And here's one demonstrating the (much worse) problem that you could get completely different colours showing through, although the screenshot isn't great because it only shows a small issue, not the much more offensive result if you had a larger corner radius:

http://code.google.com/p/chromium/issues/detail?id=128

Spending literally one minute with Google would find you numerous related problems with screenshots attached.

Pretending this wasn't a problem with Chrome and related browsers is like an IE fan pretending that no-one ever really needed CSS hacks because (insert excuse here). There were numerous complaints about this for several months from practising web developers.

> They have decided not to support h.264 at a time when every developer had to already have implemented a fallback anyway, again its not broken.

If we all have to implement fallbacks anyway, why bother supporting any modern browser features at all?

They had H.264 support. They took it away. That means stuff that used to work in Chrome won't any more. It doesn't matter what words you use to describe that situation, the result is still the same.
I like this workflow better:

1. Go to the directory in question

2. Type "save nm" where "nm" is any short name for the directory, like "blog" or "blg"

3. From now on, type "cd nm" whenever you want to go there.

No session restart required, even.

I copied the code that enables this workflow from http://dotfiles.org/~jacqui/.bashrc
(or was it https://gist.github.com/117528)

The idea is discussed here: http://hints.macworld.com/article.php?story=2002071600512379...
Does anyone know whether Anonymous got all of the 0-day exploits discussed? If so, does anyone know what they are planning to do with them?
this article simply poses the question, and does not answer it. waste of 5 minutes. for that, I will not upvote it.
I remember seeing this, but forgot entirely to use it. Have been spending a while looking for it again, or something equivalent. Thanks.
Securely Erasing SSDs (It's Hard)
I think the percentage of good technical posts on /r/Programming is competitive with HN, if not superior, to be honest.
There's an excellent quote from the Korean file "My Sassy Girl" about this. To paraphrase, "Never tell a child he's smart, after a while he'll begin to believe it and start to get lazy."
I'd be extremely careful with CDPATH, never use this on an important host.

Having "cd foo" potentially take you to an entirely different location can be dangerous, to say the least.
Its not that we think too much of ourselves or too little, but that we think about ourselves too much.

Here the praise is feedback about actual effort made, not about some abstract concept of how great or smart we are. The abstract raise focuses the mind away from the real world towards an abstraction.
We were carefully trained to accept $3 gas from 2001 to 2009.

http://zfacts.com/metaPage/lib/zFacts-Gasoline-Price.png

There was a "reset" after 2009 but it's climbing again as they "test the waters"
Another time saver is to have a function that calls ls after cd'ing:

c(){ cd "$@" && ls;}

This has probably saved me days over the years, as I almost always want to list a directory after I change into.
Have Work, Will Travel: LiquidSpace tests their ‘AirBnb For Workspaces’ At SXSW
Twitter turn-off “took us by surprise,” but “we will change”
That is a question many ask.

The idea with these programs is that it's for the chronic long term homeless. So to qualify for a free apartment to work on your startup, you'd need to first spend 10 years on the streets, get diabetes or aids, and have a foot amputated. This is a big hurdle for most people looking for a free apartment.

There's many different categories of homeless. One of the most difficult to resolve is the long term chronic ones. Pretty much nothing tried has worked. However, pilot programs offering apartments have worked, at least it has reduced the cost of handling them and increased their quality of life. We are talking a small number of people, perhaps a few dozen in a big city like Chicago or New York or London. These are the guys that the police and social workers and hospitals all know by name because they are dealing with them every year for more than 10 years.

Given these constraints, do you agree that there is not a risk with moral hazard as implemented?

Of course there is the risk that such a program would be expanded to the point where it would become either a moral hazard, or become a substitute for welfare programs that deal with long term structural issues of unemployment caused by globalization and other factors. As a theoretical outcome in the future that would require many hypotheticals to happen first. It would be something of a slippery slope to consider it as a criticism of a program that seems to work to help long term chronic homeless get off the street while costing society less.
Don't know about the headaches - more like: okay bit.ly seems to be down, lets use something else.
I forgot the url, too. But then I remembered the tagline "z is the new j" - which is enough for google to bring up the repo - even without quotes.
I'm not sure I follow. There's nothing dangerous about cd-ing to a directory, though of course it could be dangerous to start work in 'foo', thinking it was 'bar'. Most people use a prompt, or the title bar of their shell to protect against that. But either way, I'm not sure how CDPATH makes that danger greater than any other trick that allows you to jump quickly to a directory using a bookmark, popd or the like.
This is total.ly missing the point.
Except that isn't always simple to do. When a domain name we wanted was taken by a squatter, we tried to get in contact with the owner, but never received any response.
If you're a programmer, you may find Qwandry useful: github.com/adamsanderson/qwandry

Instead of trying to remember where all your libraries are located, it will just open them up for you. Great for trying to debug misbehaving code.
Open one per directory you want to operate in, for instance.

This is a common source of headache when using the terminal as an IDE. Not only is it easy to get lost in a sea of terminal-tabs, but it's also quite cumbersome to restore the state of 5+ tabs after a shutdown or disconnect. Even more so when GNU screen enters the mix.

What I'd really like to have is a terminal that can attach to a remote GNU screen and display the screen-windows as local tabs.
Yes, because ten people rushed out when the planet was first created and bought all the land for $10 per acre and are now selling it for 200x that.
It's something that bugs me, too. The US currently has 10% unemployment (by rather conservative measures), and I really doubt that many of the people making that suggestion can easily walk out the door and quickly find a decent position with no major effort, much less the people it's directed to as a veiled "shut up".
troff is kind of long in the tooth these days as its niche has been mostly taken over by TeX/LaTeX. The only place I ever see nroff/troff used nowadays is Unix manpages. Old Bell Labs guys probably still use troff. Just keep in mind that you don't have to use Knuth's fonts to use TeX, just as you don't have to use Times Roman to use troff.
I didn't say ccTLDs were better than .com, but they're as good as .net/.org. If you're going to get a .net, you might as well get a .ly and make your service one memorable word.
"most two-word combinations are taken by squatters"

Not true. Spend a few minutes playing with this: http://impossibility.org/
Image Uploads and New Tags on Pen.io
That's some very high quality snark!
A nice parable, though bears would destroy lions in combat if they met. :)
Real hummingbirds are the most energy intensive birds. They have a very low margin for error, a few hours without feeding at best.

http://www.blurtit.com/q890088.html

"A 4-gram hummingbird has a basic metabolic rate of 1,400 calories per gram. In repose, a hummingbird's metabolism rate is 25 times that of a domestic fowl. If a person had such a high metabolic rate, he would have to eat twice his body weight daily, his temperature would be 750 degrees F, and he would consume 155,000 calories per day."

It's probably marginally better than helicopters.
Unfortunately as an administrator (outside of a soft policy) there doesn't seem much I can do to ensure that my users have an encrypted ssh private key nor can I control what other machine it's copied to. Which is something that worrying when users add 5 different authorized_keys from this and this account on physical machines and VMs and Android devices.
Good point. Those are notable armaments.
Sell them, then use them against some dude who hurts a kitten.
http://en.wikipedia.org/wiki/Homestead_Act
The fact that companies are doing it doesn't mean that customers aren't fazed by it. Sure, 37signals is doing well, but do you think the "hq" part of the basecamp domain helped? When 37signals weren't that well-known and wanted to market it, how many potential customers do you think they lost because people typed "basecamp.com", didn't go where they intended to and never visited again?

Customer retention is like trying to plug all the holes in a sieve, and a bad domain is one more hole. Personally, I'd gladly pay $50/yr for a domain if it meant that suddenly the squatters went out of business.
cd foo
rm -f *

Removing predictability from the 'cd' command is not a good idea. If you want a smart 'cd' then just call it 'j' or something else. Easier to type, too.
> They mean taxes are too low. 2 ways to make up a deficit: Raise taxes or cut services.

Interesting that you equate spending with services.

The deficit is spending - revenues. The latter are only slightly connected to rates, especially the top marginal rate.[1]

Are they looking to get more revenues from the 50% of the population that isn't paying much of anything or the 1-2% which is paying 40% of revenues?

Which reminds me - while the top marginal rate has jumped around a lot, the "tax revenue as a fraction of GDP" hasn't managed to top 21% for very long and tends to stick around 18%.

We're currently spending around 25% of gdp. Why will we be able to hit that with tax revenue?

[1] The estate tax has never been, and never will be, a significant revenue source. The very rich don't die often enough and they engage in significant estate planning. The estates of the rich folks who died in 2010 weren't going to pay much in taxes because they did estate planning in previous years.
It looks like for many businesses (including mine), the fee difference between PayPal and a merchant account is fairly small. Given that, what I really want is a service with:

1. a good API

2. good customer service

neither of which PayPal has in my opinion (we've used PayPal for over a year). PayPal's API works fine most of the time, but occasionally it returns a 500 HTTP error on a successful charge. This has caused several customer problems for us, and we've taken the ridiculous step of considering a 500 error a success and manually following up in those cases. We've pretty much given up on trying to work with their customer support, and are looking for alternatives. Anyone have recommendations on service with a great customer support?
"I got this word doc linked off a dangler site for Al Qaeda peeps"

I find his choice of words there to be rather amusing.
The fact that that tool even exists is an indication that I'm right. Sure, some combinations exist, but when "wallhat.com" is taken (by a squatter, it seems), I don't have much hope.
Can you explain how using Zend Framework automatically helps you with XSS? I do not believe Zend Controllers or Views automatically escape input or output.
checkout harvard's http://cs50.tv (beginning compsci mostly c, not c++) the professor is one of the best i've seen in terms of how enthusiastic he is about the material itself and about teaching it especially to students without much prior experience. You can tell he really loves this stuff and his attitude is infectious.
Another take on the RIAA sob-story
> There's nothing inconsistent about believing that it would be better off for the country as a whole if tax rates are higher, but not volunteering to personally pay higher than the current actual rate.

If the country would be better off with $100B additional tax revenue, it would be better off with $5B additional tax revenue.
Anaphora (linguistics)
Yep. Contrast this with the domain situation, where there's no limit of 160 domains per person.
A movement to build a statue of a character from a movie where Detroit has become an unlivable dystopia waiting to be demolished.

I don't know whether that's the worst civic symbolism I've seen in a while, or the best.
This may be an aspect of the audience more than the product category (software). Your audience is teachers, correct?

My audience is highly technical, and the particular segment is rife with piracy. Even though our product is 95+% Open Source (and so there is a free version that people can use to do nearly everything the commercial version does), we still have people who use stolen credit cards to order our products.

And, it may also be a factor of product pricing. Your products are under $100, right? Ours run from $149-$999.

Sounds like our sales volume is actually about the same as yours. Looking over the actual numbers, chargebacks are less than my initial estimate. More like once every 2-3 weeks, and sometimes we'll go a whole month or two between; but some months we'll see a rash of them. It averages out to a couple a month.

But, it's definitely something we deal with regularly. Are you doing anything in particular to prevent fraudulent orders, or is it just the nature of your customer base that it simply doesn't use stolen credit cards to buy software?

Also, how much of your business is international? We've found that 95% of our fraudulent orders are from overseas (but 50% of our legitimate orders are also from overseas, so we're not willing to make it difficult for those folks to buy from us).
nice stuff. You got your dotfiles on a github?
Fluorescent Tattoo Alert MIT's Latest Trick for Embedded Medical Sensors
This is a very good point.

The whole US financial industry has their heads in the sand over this one. In 2005 the FFIEC (a US regulator) declared that single-factor authentication alone wasn't sufficient for high-risk transactions.

What did the industry do? They rushed half-baked solutions out the door. One of the worst offenders is Harland Financial Solutions. They created a "Multi"-Factor authentication product for online banking, which is multi-factor in name only. When you login using a computer without a cookie set, the "MFA" system asks a security question (like, "What was your elementary school?"), then sets a cookie.

Harland considers the computer+cookie combination "something you have", and will claim with a straight face that this system is secure and multi-factor.
Anyone think this has legs? I've seen a lot of Web 3D technologies come and go.
Yet another (simple but beautiful) CSS scroll, canvas and webfonts demo
Setup a secure payment page on your site which collects credit card information and saves it to an encrypted file on your server. Then when someone tries to pay upgrade their account automatically just as if you were processing their payments in real-time. As far as they are concerned your site and payment systems now work perfectly.

Have your server email you whenever this happens so that you can login and process their payment manually through Paypal's premium merchant service. That provides a virtual terminal which accepts major credit cards and costs something like $30 a month. You will occasionally have trouble processing a payment and have to take the hit or come up with an excuse to get another card from your customer.

This isn't a long-term solution but it will tide you over until you have a real processor and 99.9% of your users will never know. Good luck!
Yeah, Winston-Salem isn't exactly a hotbed of activity. :-)
So in that sense, this is a smart way to prevent their competition from using the platform, without ringing so many antitrust alarms. (If Apple just said "we banish Netflix and Kindle because we say so", it would probably lead to a few antitrust investigations)
Certainly a possible scenario, but anyone who cds into any directory (by whatever means) and enters 'rm -f *' without first checking contents deserves what they get.
If you tell your money manager not to limit his gambling in your behalf to NYSE listed equities, he is legally obligated to do so. He will go to jail if he does not. However, even if your wallet stays closed, you can reap the positive external benefits - if HSX says some movie will suck, you can avoid shelling out $12 to your local movieplex (guess why Hollywood's bought and paid for politicians killed it?).

Or perhaps your goal is not to protect your money, but to prevent me from harmlessly entertaining myself in activities you dislike?

The same thing applies to manual medical diagnostics - you are free to pay extra for a human to give you a less accurate diagnosis if you want. Although I'm not sure why you think human doctors do such a great job - diagnostic procedures and surgery are not regulated by the FDA at all. Only devices are. So an automated medical diagnostic tool would actually be more regulated than the system we have now.

I don't want to find out that my kid has been on some experimental curriculum that turned out to be a pointless waste of time.

This already happens under the current system. Ever hear of "whole language"?
Or in zsh:

setopt cdablevars
nm=/path/to/whatever
cd nm
That's not what my Chinese mother told me.
Harvest: A Bootstrapped, Profitable Business
Cloud CRM Application Perceptual Survey (only 12 questions)
Hell yes! I want the information delivered concisely and clearly.

I'm reading Odersky's Scala book right now and it just GOES AND GOES AND GOES. It makes Scala seem like the biggest gorram language on the planet. The worst part is that things get harder to understand because one part of a chapter hinges on understanding of something from 300 pages ago.

I'll take time to highlight what I find to be one of the most important sections of the book: Type Parameterization

It starts by explaining the concept of a functional queue. This has nothing to do with type parametrization except that it will later be an example of how to use type parameterization and it is a type that can be parameterized. It then goes on to explain make constructors private and private classes.

Finally, it introduces variance annotations. Ah hah, the first part of the chapter pertinent to its heading and we're only 7 pages in! Herein, the concepts of covariance and contravariance are briefly explained, though, for me, not with enough detail to actually understand them. We then compare how Scala handles variance next to Java, a language that I am not learning, though it is somewhat pertinent in that in order to maintain binary compatibility with Java some stupid crap you should't do except if you're using a Java library is possible. Next there is an explanation of how the compiler checks variance annotations which is useful, but something much better left to an appendix given that it will only be needed to understood if you get compiler errors.

We get to the next actually useful part of the chapter in learning about lower bounds on type parameters. Now we go back to contravariance. And then upper bounds on type parameters, though not before detouring into privacy scoping rules for objects, another rather irrelevant subject.

Now at this point, I have gotten it set in my head that covariance, contravariance, and upper type boundaries and lower type boundaries are all very closely related. And it takes me about 4 hours to figure out that they're not except in the sense that you can use said annotations in a parameterized type.

In total, the chapter is nearly 30 pages long and relates about 5 useful pages of information about type parameterization in Scala, the high level concepts of which could have been explained far more clearly in half a page each and by explaining how they are not strictly related. It's also really great that pertinent information about private classes and private constructors is in an unrelated chapter.

What is unfortunate is that this is the bible for this language. New programmers are recommended it. Personally, I'd be swearing Scala off if it wasn't so clear to me that it was a really powerful language worth knowing. But the arrangement of this book is like a utensil drawer crammed full of forks and knives in a completely haphazard fashion.
Quora’s topic-level RSS feeds are useless
I'd also worry about the over clocking being the cause of his problems. A chip designer explained to me once why over clocking is risky. I'm not a chip designer, and I'm reporting what he told me from memory, so I may be slightly off, but here goes:

Sometimes it is completely safe. For instance, suppose a chip maker sells a chip in three speeds: 500 mhz, 750 mhz, and 1000 mhz. You have a 500 mhz chip. It might actually have been manufactured to be a 750 mhz, and passed all the tests at 750 mhz, but the manufacturer had a shortage of 500 mhz chips and an excess of 750 mhz chips, and so marked yours as 500 mhz and sold it as such. Congratulations! This is a chip that is safe to at least 750 mhz.

Sometimes, however, your 500 mhz chip may be one that was meant to be 750 or 1000 mhz, but failed their tests at those speed. It was fine at 500 mhz, so they sold it as such. This is a chip that is risky to run at 750.

How can you tell whether you have one of the safe chips or one of the unsafe chips? You might think you can simply try it. Over clock it, put it under the heaviest load you've got, and see if it appears fine. If it seems to work, you might assume it is one of the safe ones.

The problem with this is that failure can be too subtle to notice. It might be that at 750, your chip loses the lower bit of integer multiply if one of the operands has a run of alternating bits longer than 18 bits, or something really obscure like that, something that your testing is not likely to hit. (Look how long it took the Pentium FDIV bug to be discovered).

When the chip manufacturer is doing their test to see if the chip should be a 500, 750, or 1000, they know where the weak points are and how to stress them. They are also testing before the chip is put in its case, and so can access test points on the chip and see electrically that the signals are fine at the danger points.
The AOL Way claims its first victim: Engadget editor Paul Miller resigns
The real world doesn't care nearly as much about effort as it does about the end result, except as a mitigation for failure. Why effort and not .2 x effort + .8 x accomplishment?
Having slides claiming ownership of exploits is a very long way away from having the exploits themselves. Such a commodity has substantial financial value - if an intruder came upon them they'd be unlikely to publicly announce their existence but not release them.

It's possible such exploits don't exist, are misrepresented or were never in HBGary's possession. Exploits have a shelf life that degrades as other actors are likely to discover the same bug, maybe 6-18 months in general wisdom. But, it is always possible to claim you have a private cache and then buy them if/when they are needed.
Statement from UberMedia regarding Twitter's suspension of service
Heh, way back when RethinkDB was ElegantDB, we had to change the name, and I wanted to change it to ElephantDB but as I remember it, Slava thought it sounded too heavy-weight. :-)
How about `setopt cdablevars`?

setopt cdablevars
proj=$HOME/Projects
cd proj
pwd # => /Users/sjs/Projects
Larger text would benefit.
So the moral is: don't read/watch the mainstream press at all.