skysight-inc/HackerNews huggingface dataset:
Related [2007]
http://www.cl.cam.ac.uk/research/security/banking/ped/verifo...

> We believe it is not in the best interest of the consumers, merchants and overall payment industry to publish the details of product designs describing potential attacks however remote those might be. Even if these attacks are difficult to be accomplished it gives the bad guys a leg up on research they would not have to do and encourages bad behavior.

in response to : PIN Entry Device (PED) vulnerabilities http://www.cl.cam.ac.uk/research/security/banking/ped/
I had to start writing this reply from scratch several times, because I couldn't decide which issue to address first and yet do it in the politest possible way. I offer apologies in advance, just in case I don't manage to achieve that goal anyway.

First of all, you're oversimplifying my comment, just like you oversimplified the original issue in your post. I never claimed I was unable to understand simple concepts. But the ability to understand a simple concept is quite a long shot from the ability to apply it properly to achieve quality results.

Second, you neglected the better part of my comment where I talked about effort, results and time. Yes, I'm pretty sure I could do design; at least, as long as nobody (including myself) minds waiting for me to give it my best shot and produce results that are still not as good as those you could get from a good designer in less time. Maybe it doesn't take talent to design a log-in form, but talent sure helps do it faster and better. In the end, "faster" and "better" just isn't something you can toss out of the window.

Third, if you really think that you can reduce either design or coding to following simple rules, then I'm wondering why you're bothering writing about this at all. Just follow some simple rules to code an application that follows some simple rules to churn out both quality design and code.

Every now and then, I see someone write or hear someone talk about how they can do work in more than one discipline and, therefore, there's something wrong with people who specialize. Working in game development has given me tremendous respect for multi-disciplinary projects and the complexities involved. From that vantage, I can tell you that I don't mind when people are proud of their multifaceted nature; it's when they start dismissing specialization that it becomes a problem.
Shades of Kozmo.com. Needs a billion users to make any kind of sense.
A great tool for Chrome!
About the Ninite.com Site Redesign
>> There's little Firefox could do to prevent it.

Wrong, they can just add DRM.
How would you define a bubble then?

The standard definition is "trade in high volumes at prices that are considerably at variance from intrinsic values".

"The valuations are high, and they'll probably fall in the future" implies (by the way I construe it) "considerably at variance from intrinsic values". It would be hard to argue that there is not high-volume trade in the tech industry.

Individual prices rising and falling due to changes in intrinsic value, for example, due to information about new competing technologies that could not have been anticipated before, or unanticipated information about things much of the tech industry is dependent on, like energy prices, can change the intrinsic valuations.

But prices rising above the intrinsic value because of high investor confidence and investment dollars from one company cycling around the industry and buoying up the existing players is a bubble. It might not be as big a bubble as the last bubble, but it is still a bubble.
Great story. I was looking forward to trying socialcam out, but no Facebook account. :(
Technically, it also marks our switch from Django to Tornado. Tornado is remarkable for how much it just stays out of the way. The end of our time on Django started to feel like new features were at war with the framework.
I'm particularly thinking of niche and hobby presses that don't have Manhattan offices. Some of them have tried to straight-up sell ebooks at paper prices.
Have you considered getting content on there using your own knowledge? Being first, or even somewhere close to first, is weird on a site..

Neat idea, though. I would read it in the same vein that I read clients from hell.
It's peculiar that medical residents are systematically sleep deprived but commercial airline pilots cannot fly/work longer than ~8. Most of the time the plane is on auto-pilot, but there's no such thing for zombie residents doing triage at the ER.
Feel free to Google it and post your own synopsis, but insofar as you can do lossless compression to three words, I think those are the right three words.
Pwn2Own 2011 Winner: IE8 on Windows 7 hijacked with 3 vulnerabilities
Yes, I am digging up some gems from my inbox. You're right, I should have done that before sharing the link. Submissions are anonymous so I hope that lowers the barrier to posting.
> No Adobe Flash built-in

How is that a reason not to use Firefox over Chrome? Plugins can always be disabled, and if it's the principle of having proprietary stuff in your browser that you dislike, you can always choose Chromium, which doesn't include Adobe Flash or the PDF viewer, among other things.
Who said anything about cross compiling? It sounds like he'd be fine with regular GCC+binutils. (I don't see anything about Mach-O support in the ld manual, though...)
You are right; the timeline we were up against was extremely tight because of external deadlines. Crunching to this degree runs an extremely high risk of burn out and is not normal, and I don't believe it is something that should be done unless you are in a do or die situation. I do think it was a management failure that we didn't plan / project manage better, but we're still relatively new to mobile app development.

If we'd had perfect knowledge of what we were going to build in the beginning, we could have cut a lot of time off customer development / exploratory phase of the product development, but I've never realistically heard of that before for a new product.
> sometimes even computer geeks want a little human contact

Patronize much?
I agree to some extent, if you're not aggressively trying to capture an emerging market. But the SocialCam team is, and I think they have exactly the right sense of urgency.
HBGary Federal Emails Reveal More Unreported Attacks
No I believe you're right on this (though I'm not a particularly heavy HN user). Upvoting things you agree with implies that you should downvote things you don't agree with and that really isn't appropriate.
Interesting, thanks for that. Our model for the compute-time-plus-markup was the plethora of companies that make money doing a similar model with storage -- Dropbox being the shining example. But you raise a good point that those are inherently more predictable for the users. You know that you need N Gb of storage because that's what's on your hard drive, whereas knowing how many seconds a calculation will take is much less knowable.

Of course, if we were to take the more-technical route suggested by others on this page (ie. moved from being a "super-powerful programmable spreadsheet" to being "easy cloud supercomputing [with a shiny spreadsheetlike interface]") then perhaps our current pricing model would make sense.

On the other hand, if we stick to the spreadsheet model, you could well be right.

Hmm. Food for thought. Thanks for the pointer, anyway, and in particular for the reference to Heroku's dynos -- always good to know how people have successfully solved similar problems!

Oh, and thanks for the heads-up re: the sheet that needed a sign-in, I've fixed that, and 1025 as well (it seemed to have the same problem).
I miss Firebug on Chrome.
A single footlong sandwich may be a significant sum for people not in Western, industrialized countries. But that point is secondary to the fact that even $5 is a barrier for beginners.

I think people are objecting because they themselves happened into programming as a passion and career - I know I did. They found some tool, probably for free (QBASIC for me) that got their feet wet initially, and that's how they got their start. A beginner who is neither sure nor convinced that programming is a good thing to pursue is unlikely to spend even a footlong's worth of money on it, and we've lost yet more potential future engineers.

Also, the fact that Apple has poured a significant investment into building these tools says nothing - they've been pouring a significant investment into their dev tools for years and offered it for free. Their competitors have also poured enormous sums into dev tools that are available for free. When the status quo of the industry is free tools (and the few that are for-pay are getting cheaper every year), one can question why Apple is the odd man out in a sudden reversal.
Doubtful. I think people who enable things in their gmail labs are probably already filtering out the mail from marketing campaigns they don't care about.
Of course it is real, you can compare anything. You can compare a bicycle to a SUV (or 4WD), there is nothing wrong with doing that.

And the book does make a decent cheap tablet, not as good as a full tablet, but it does a lot of stuff, more than an just read books.

I do not understand people who get upset at these comparisons.
Please do not confuse iOS with Cisco IOS.
High School Memory Championships and Tactics
Yeah, the medical training model fosters a culture of working ridiculously long hours and shunning those that don't. As a first year surgical resident it's not uncommon to work 110-hour weeks and anything less than 80 feels like a joke.

And, as other posters have pointed out, this is despite legislation limiting the number of work hours. The fact of the matter is that if you were to actually work to the letter of the law you'd be sneered at, receive poor evaluations, and patients would suffer because there'd be no one around to do the work.

Most programs argue that these hours are necessary to train surgeons since there's not only the usual cognitive side of medicine, but also the technical side of cutting, sewing, etc. That being said, 70% of the hours I put in at the hospital are BS "scut" work which could be automated, streamlined, or passed off to assistants. The actual challenging decision points are few and far between.

Thus, even the 10,000 hour rule--which a lot of programs use to defend their dismal hours--misses the mark completely since, well, the practice isn't focused.

I don't think surgeons are going to be replaced by robots in a significant way for some time, but I would like to see the hands-on part of surgery being performed by techs. A three year, well planned course would be plenty to turn you into a competent operator--as competent as many just-licensed MDs. After all, do you really need 10 years of academic training (four year undergrad, fours of medical school, two years of little operating as a junior resident) to screw bones back together? Why should we expect surgeons to be technically AND intellectually gifted?
1. Panorama (formerly "Tab Candy"): http://mashable.com/2010/08/25/firefox-4-beta-4-panorama/

2. Firefox Sync, which syncs bookmarks, tabs, passwords, history, and formfill data to all your different computers -- and to Firefox for Android. Firefox Sync encrypts your data client-side for privacy and security, and you can run your own sync server if you want to. (There are multiple open-source server implementations.)

See also: http://www.mozilla.com/firefox/RC/features/
My friend is doing his residency right now. He says they make up their sleep with "power naps" during the day.

http://en.wikipedia.org/wiki/Power_nap

I don't have any personal experience with this though.
I never understand people who still put up with these absurdly long recruitment processes today. I don't care what your job is, if you're hiring via typical recruitment channels, you're not important enough for a good candidate to put their life plans on hold for months.

Heck, if you're not someone on the scale of Google/Facebook/Microsoft in the software industry, you're probably not important enough for me to justify doing your pet interview quiz question for half a day before I show up, unless you're going to pay me for my time to do it.

Public health warning: Zealous adherence to this bizarre mindset, where you expect that if you are negotiating with someone then both parties will take it seriously and that if you are working for someone then they will pay you, may result in abandoning applying for jobs as an employee and going freelance or founding your own business. This may lead to a much more enjoyable lifestyle than working for the kind of business that only hires people who would allow themselves to be hired that way.
Personally I found Dartmouth GPAs correlated to how often you went to class and how much attention you paid to the lecture. If you didn't go or zoned out, you'd be working all day and all night just to catch up on that 1 hour you missed.
It was known ahead of time that the 3G was not going to be getting the new update and would be made obsolete by Apple.
Good review. Not sure if I should update before finishing the current iOS app I am working on...
How can I use takeaways.me throughout my work day?
You will, once the toolbar/adware/malware makers start targeting Chrome more. (Google can try to stop them, but it will be an arms race.)
> Is there anything compelling in Firefox 4 to get excited about?

Sure! Here are some things I personally find exciting about FF4. I'm not saying everyone should find them exciting, they are just my personal opinion:

* FF4 is the only web browser to combine a tracing JIT with a method JIT for JavaScript. Some websites run amazingly fast with that. See the mozilla demos site for examples.

* IE9 has great hardware acceleration on Windows (but JS engine is inferior to FF4 and Chrome), while Chrome has a great JS engine (but hardware acceleration on Windows is inferior to FF4 and IE9), while FF4 is the only browser to have both great hardware acceleration on Windows + a great JS engine.

* Firefox is the only major browser that is 100% open source. (Chrome isn't open source, it bundles closed-source Flash and a PDF viewer as well as other stuff. Chromium is open source, but the vast majority of Chrome/Chromium users use Chrome.) Firefox is also developed in the open source way, completely in the open, unlike any other browser (including Chromium, where a lot of development is behind closed doors, then 'dropped' into the open - e.g., CrankShaft).

* Almost the same codebase used on desktop and mobile (mobile FF4 will hit RC very soon too). Opera has a mobile version, and Safari and IE have mobile versions too, but they are quite distinct. Firefox brings the mobile and desktop versions closer than those. Among the benefits is you can view desktop versions of websites in FF4 mobile very well. (Of course you generally want mobile versions of websites - but now and then, you do want a desktop version, especially on a tablet.)
At home:
MacOS X
Ubuntu GNU/Linux
HP-UX

At work 1:
Ubuntu GNU/Linux
MacOS X

At work 2:
Windows XP
Ubuntu GNU/Linux
Given how long it takes to deploy a rails app to heroku, an hour to deploy now seems like a horribly long period of time.
As a jailbreak developer: there is not.
That's actually a pretty good sign it's saturated, which is probably a necessary condition for a bubble.
Doesn't it? It is present on mine, but when I click to set it up, it tells me to contact my carrier to enable it on my account, so I haven't tested it.
Joel recently announced "Careers 2.0 by Stack Overflow", which sounds like it could make money:

http://careers.stackoverflow.com/
Right, that makes sense -- the classic benefits versus features balance -- which is, of course, made more complex by the fact that one user's benefit is another user's feature, but that's not to say that there's no balance to strike. One thing we did with our earlier product was to have a "How we can help..." section on the front page, naming three markets, with links through to separate pages for each, naming appropriate problem and solution/benefits for each. Perhaps we need to do the same thing here.

Re: what we're better at than Google spreadsheets -- our big benefits come in simplifying complex spreadsheets, by using programmerly techniques such as objects/lists/NumPy arrays in cells, and in automated parallelisation for large calculations. These are definitely power user features, for normal cashflow spreadsheets and the like there's no advantage to using Dirigible instead of Google.

(Random thought: we're currently using the example of calculating the orbits of the planets to show a bunch of those features off. We chose that example specifically because it's simple enough for most technical people to grok pretty quickly and doesn't require any real domain knowledge to see what's going on. Perhaps we also need more industry-specific examples to make the same point -- eg. pricing portfolios of exotic options for the finance guys.)

Re: concurrent server support -- well, I guess a bit of A/B testing might be in order -- with a mind to the fact that we'll need to keep running the tests as time goes on and we (fingers crossed) cross the chasm.
Does this include the iOS 4.3 SDK? Or do I have to do another 3GB download in a couple of days if I download this now?
Costs a lot less to bypass heroku for the larger apps
I've actually applied to YC S'11 with a business in this space. Interesting that other companies tackling this problem are finally getting press.
Just curious, how well did your card game scale? How many concurrent users could it handle? And could you easily balance the load by firing up more servers if you needed to?

The reason I ask is that everything sounds all good on paper, but how scalable is this "stack" in the real world. Would it be more scalable than relying on an xmpp network (which can be scaled wide if need be)?
I think this would be considered a cross-compiler, even though you are building OSX on OSX. You would be building a version of GCC that targets OSX with a different version of GCC.
Sorry- I'm curious- why do you think IE9's JS engine is inferior to FF4/Chrome?
Heh, we had a crisis of conscience before we decided to use it :-) http://blog.projectdirigible.com/?p=507

Thanks!
Nobody should have to pay for development tools when the company profits substantially from the individual developing for their platform. They're going to raise the price even higher as time progresses, simply because they can. Apple is a monopoly within it's own bustling platform, nobody rivals iTunes on the Mac other than Songbird, and few use Songbird. That's a very similar situation with iLife. And then the way apps are mass marketed to people is being directly controlled by Apple as well now with the Mac App Store. Apple sounds a whole lot like Microsoft in the 90's and early 2000's. However, there's a striking difference between them and Apple, Microsoft kept it more open, they focused on the software side of things and just that. Microsoft focused on owning and maintaining the platform, whereas Apple is focusing on being the platform.
I don't remember the company, but I got a demo of this exact thing in the last bubble (around '99 or '00). The one I saw failed utterly, but maybe this time, they'll figure it out.
The update readme that comes up in iTunes says:

Products compatible with this software update:

- iPhone 4 (GSM model)

- iPhone 3GS

- iPad

- iPod touch (4th generation)

- iPod touch (3rd generation)
Thanks! Couldn't get it to work in the post. HN markup remains a mystery to me...
The eBook User’s Bill of Rights
By having full access to EC2 you naturally can do things that are either considerably harder or just not possible with heroku. If you don't need that additional flexibility, then by all means, use heroku as it may be the best tool for the job.
I had a really, really odd experience when I was very young -- probably no older than 6 or so. I was on a 386 running MS DOS 5 and at the time, I was hooked on a game called "Pilgrim's Quest". I was also in the habit of breaking edit.com out on everything I could get my fingers on, and binaries were no exception. I had no idea what I was doing (otherwise I would've been using debug.com), but I would delete things, type random characters, etc. One day, I took edit.com to the binary for Pilgrim's Quest, and proceeded to mess with it, rendering it useless. Except, it wasn't useless. When I ran it, the display was messed up, but pressing keys caused notes to play. To this day, I can't figure out why this would've happened -- I know of no functionality in the game that played single notes (although, to be fair, I don't remember if it played a note and then stopped or continued playing it indefinitely -- this was a long time ago), and I can't see how one could stumble upon that.

I really wish I knew what the hell I did, as that was the first time I ever made the computer do something it wasn't intended to do, even if it was not my intention.
Add the sender e-mail address to your address book. If that doesn't help, create a filter. Priority inbox can be turned off.
At ParkGrades.com, we're making it easier than ever to find a great nearby park, no matter where you may be.
Unlike Chrome's bookmark sync, Firefox Sync encrypts your data client-side for privacy and security

Chrome 10 can encrypt everything client-side too.
You should keep XCode 3 around, regardless. Both versions can co-exist, so install XCode 4 into, say, /Developer4 instead of /Developer.

And when you open your project in XCode 4 it won't trash your XCode 3 project settings or prevent you from going back to XCode 3. However, any project settings you change in XCode 4 won't be visible in XCode 3.
Congrats. You guys deserve some good sleep! Just went through the same iPhone app submission process as SocialCam did. And we were not that lucky, 1 rejection and 19 anxious days before approval for our 1.0.
Wouldn't an autistic savant dominate something like this?
Kinect at Yelp: Open source gaming with physics controlled by your body
If this is true then I wonder if buying a new Mac or a boxed copy of Mac OS entitles one to XCode 4 and all updates until XCode 5 (which will be years away)?

That is certainly the case with Facetime and the 802.11n update.
Understood, I appreciate the fact that you were up against sxsw and that scheduling is hard, especially when you're not that familiar with the platform. Thank you for sharing your thoughts.
Ups... I somehow missed that part!
One thing that FF3.x has had on chrome is total memory footprint. About a month ago, when I was testing FF4, I noticed that the memory usage for FF4 and Chrome were pretty close. I personally think Chrome consumes a bit too much memory for my liking, and I was disappointed to see FF4 following suit. Has anyone noticed if the new RC is more conservative with its memory consumption?
Khan of Khan Academy at TED (video)
The title is not an accurate summary of the article. "Square is only as insecure as it has to be to work with credit cards" would be nearer the mark.
the tabs don't close right under where the last close button was

It's not really a fix, but as a less-aggravating workaround, you can use ctl-w or ctl-F4 to close tabs. That way you don't have to reposition the mouse every time you want to close a tab. And I can hit ctl-w with my left hand, so I still don't have to take my right hand off the mouse to use the keyboard shortcut.
We've done a lot of work on locking stuff down, and the back-end runs across a number of servers, so it would be pretty hard to take down the site as a whole. But yeah, there are bound to be loopholes.

OTOH, if we're charging for compute time and someone chooses to write something that locks up the server completely, then, hey, it's their money ;-) So long as we can keep it running for everyone else, anyway.

We're a bit more worried about how to stop people from using it to create a botnet or otherwise use it to do Bad Things to other people; but I guess every cloud computing service ultimately hits that problem, and all you can do is monitor and shut stuff down quickly if something bad starts happening.