skysight-inc/HackerNews huggingface dataset:
Mmmm. I'm no Apple fan but in this case I have to say this is paranoia. But we have to see if they fix it, at least for web applications saved to the home screen. Are those not just links opening up mobile safari?

I don't buy the security argument. If it's available to web application can they not take advantage of security bugs in nitro?

Oh and while there fixing stuff for web apps could they please get WebGL in a release real soon :) That would make my day.
eGroups wasn't sold to Yahoo until August 2000 (after it IPO'd, actually), 2 years after Google was founded. Larry Page didn't have any more money available than any other Stanford grad student with a professor dad. He did have the experience of having a family member who'd gone through the VC process, but lots of people know people who've taken VC.
One thing I learned some years ago is to always avoid being the agent for someone else's humiliation. Even if that person is blatantly wrong, all you'll do by calling them on it is create an enemy.

One trick I've used many times to correct someone without embarrassing them is to couch my own feedback in conditionals, something like "You've been studying this a lot more than I and I'm sure you're probably right but I seem to recall reading a bit ago that an md5 sum isn't a sufficient way to hash a password, you need to do more processing."

That then gives them an out "yeah I looked into that and I'm pretty sure this is best practice but I'll check again" or somesuch. Probably 80 percent of the time, when I frame it like that, I'll see a followup saying that they've gone back and discovered the right way and will be doing it that way.

The really nice thing is that people are appreciative when you treat them that way, and far from creating a new enemy you'll have earned respect and trust from that person.
The front page was pretty fast, but I keep getting a weird error that won't let me proceed to the next page.

http://dl.dropbox.com/u/317805/digg.png
That makes no sense ... apps that run in Mobile Safari get Nitro, native apps that use a browser component use the old JS engine. How is that boosting the App Store?
My favourite part of the site is at the bottom where there's the "Latest tweets about Save IE6" section and it's empty.
> not to be fixed by exec order

Not ever a problem I've had with Free Software. The walled garden is great until you realize that they are filling it with water and you don't know how to swim.
This really has the stink of sensationalism, Ars. Xpost from another thread:

I don't have any idea where the truth lies, here, but it's worth pulling the whole paragraph:

But according to Matt Asay, who is vice president of business development for mobile Web framework maker Strobe, Apple supposedly has no plans to fix them. Instead, they are marked "not to be fixed by exec order," suggesting that a higher up at Apple is preventing engineers from fixing the problems.

"Supposedly" and "suggested" let Ars weasel out of determining the truth of these assertions. Unless Apple has suddenly turned absurdly transparent, I have a hard time believing that this guy actually has any inside knowledge. On the other hand, he certainly has an incentive to bring pressure on Apple to make his business work better.

Meanwhile, the author of Cydia, saurik, points out:

Apple can't turn on the ability to do executable, dynamically written to memory pages just for their library: they'd have to turn it on for the entire process, at which point you could also do crazy things like download native code and execute it, bypassing the entire concept of their "codesign" mechanism.

http://news.ycombinator.com/item?id=2338338

It's starting to sound less and less like Apple is doing anything shady here. Remember that RIM is having people disable JS entirely because of a WebKit exploit. This is a snarly problem.
Let's unpack the things you say here, starting from the end:

"Not cool attacking someone trying to do the right thing"

Of course, the only people I actually attack are people here on HN who are very much hostile to trying to do the right thing.

"Here's an influential VC who is ACTIVELY trying to encourage more balance in his applicant pool and he gets attacked"

I haven't attacked him, nor do I see anyone else in this thread attacking him. His chosen methodology got criticized. Is someone trying to do something right immune from criticism? No.

Now, is he trying to do something right in the first place? Perhaps. He does seem to be uneasy at a male-dominated pool of responses. However, his response to seeing this pattern is to assume that this represents a failure on the part of some unknown women who did not respond. That's a remarkable and dubious attitude to strike; taken most charitably, it's a startlingly naive one.

"sometimes all you have is a trusted recommendation to work from"

The cold fact is that someone not within a network or who cannot easily enter that network is disadvantaged by this requirement. In this case, it's a strongly majority-male network that shows quite a bit of discomfort and sometimes outright hostility towards women trying to enter it.

So, I will say to you:

1) Blaming women for the fact that you've set up filters that are biased against them? Uncool on the VC's part.

2) Jumping on someone pointing out those biased filters? Uncool on your part.
Generation Better-Than-You
RSA hit by targeted attacks, SecurID 2-factor auth possibly compromised
An internal combustion engine based on rotation rather than reciprocation that reduces complexity for many advantages. I think I've heard this story before. Oh yeah:

http://en.wikipedia.org/wiki/Rotary_combustion_engine

The Wankel engine is by far the most mature of those, and it's a lot more complicated in 3d than in a 2d cross-section. Sealing and such are an issue. Mazda has really done a lot of good things with them, and their power-weight is way better than your average 4-stroke, but it is still a niche product.

I'm not saying the Wave Disk engine isn't going to be great, I'm saying you're not going to see one of these in your car in the next 20 years, and 20 years from now, who knows what the "average car engine" is going to be and how well the wave disk engine will compare to it.
One of the golden rules of developing for a proprietary platform is "work with what you've got". I'd get started on a workaround.

Fixed that for you. Windows developers have the same problems.
I suspect this guy heard 'You can't do that' quite a few times before doing this:

http://www.bbc.co.uk/news/world-europe-12773427
Not just bypassing code signing, but the App Store approval process altogether?
Why do you need this fixed? Your app, even running in full screen, probably runs faster on iOS 4.3 than it did on any previous version of iOS.
> How many 2000 year old things are still actual? Horse races? Sailing? Basics of writing and calculation?

Prostitution. And it's even older than that.

Bread, beer, wine.

Perfume.

Hebrew (sortof).

The numbers 3 and 4 (sortof: http://en.wikipedia.org/wiki/Arabic_numbers).

Etc.
So, you actually use IE6 ? :P
It's not the JavaScript engine that's the security risk, it's that in order to run the new JS engine, the app running it has to be able to execute code from writable memory. This is where the security risk lies, and it has always been forbidden, for all apps. Safari can get an exception, since Apple obviously trusts its own code not to be malicious. But 3rd party apps still won't be allowed to execute arbitrary code from memory, so any apps embedding a UIWebView to present a browser can't get the performance improvements of the new engine.

The only real question is why Apple's own app that's used to display those saved-to-home-screen webapps didn't get an exception alongside Safari. My guess is that the Nitro engine is built directly into Safari and that the UIWebView control (which is used by webapp viewer app) simply can't use it at all, regardless of ability to execute writable code. I'm sure this will change, either the viewer app will get rewritten, or UIWebView will get its own sandbox etc. They probably just didn't have the time to do that yet.
Ask HN: This site daily tells you uncommonly known holidays. What do you think?
I have wondered many times, "I wonder what holiday(s) are occurring today?"

I created http://checkiday.com just for that purpose!

It daily lists what holidays are happening, and you may also subscribe to daily updates via twitter, facebook, RSS, etc.
I'm still waiting for my browswer plug-in that will generate computer transcriptions of online video. Bonus points if it crowdsources corrections. The video looks really interesting, but I can't watch it at work. Somebody please build a solution to this problem.
Countless sites require js to handle what amounts to html 3.2 behavior, such as showing content or submitting a form.
Yeah, just replace that with "the code maintainers don't like your patch".
The big problem here is that once you address the issues you have to get a bunch of people to change their old reviews.
I haven't seen much evidence to the contrary that the music business is tanking. I don't really buy the disappointment with buying a crappy album argument. Radio stations used to play entire albums at launch when I was growing up. I might be disappointed with a track or two on an album but it was very rare that I would purchase a complete stinker.

His point that there aren't a lot of concept albums anymore where people listen to every track is an interesting one though there were hardly a lot of concept albums in the heyday of rock that those that were are very notable.

One issue that is not iTunes specific, but the ease that we can play digital music including custom and autogenerated playlists may also have something to do with it. With CDs and albums, there was a physical cost to jumping around and most of us were not ambitious enough to create mix tapes. Maybe just the convenience factor of accessing our existing libraries reduces the purchases of new music.
our API, like most of the popular "REST" APIs, is not REST as defined by Roy Fielding

Other APIs may be imperfect implementations of the ideal, but Rdio's made no attempt to look anything like REST. The complaint wasn't about adhering to a spec, but simply inaccurate nomenclature.
Cheese on the inside!
AFAIK strobe is made up mostly of ex-apple people - furthermore, they knew about the "bugs" at least a month ago - Charles Jolley was talking about them at the most recent sproutcore nyc meetup. I don't think it's unreasonable to believe the truth of these assertions.
Twilio for email: Email Yak API Launched v1.0. Thanks HN Feedback?
Now I work somewhere else and it's much better. I'm still not a dick. But maybe the lesson is that if you're continually in disagreement and no one is listening, you're in the wrong place.

It's good that you're sticking by your principles. These sorts of matters are a two-way street after all-if the other side isn't willing to work as hard as you in seeing eye to eye, then it's time to leave as you did. The trouble I always have is deciding when enough is enough.
I just built a "business" that is on track to generate about $10k per month (I've made about $5k in the first week). There were some links to it here on Hacker News, but it's a site that sells iPhone design & development tutorials that I've written: http://designthencode.com. I've only published one full tutorial so far, but am working on others. The response has been great, and it's exciting to see something I've been working on for about 6-7 months actually generate real revenue.

Every person here at HN is talented enough to create a $10k/mo business. It may not be as easy as what the article suggests, but you can do it.

Also, I should note that I did it all on the side & the weekends. I have a full-time job as well.
As somebody who participated in a Startup Weekend, I would say that these events definitely help to create startups. Launchrock, for example, came out of a Startup Weekend. It is hard to gauge the intensity level you will get out of your members after the weekend is completed.

Overall, I do think that Startup Weekends are great events, and I highly recommend that you attend them if you have a chance.

The project we worked on during our Startup Weekend (Detroit) was http://www.bitetomeet.com/

Edit: s/don't/do/
I think this makes a lot of sense, but it'd be a bit complicated to do it well.

One thing I'd want is the for the older votes to carry less weight. For example, if one of my projects gets voted way down due to lack of documentation, I'd want a documentation effort to be able to counter those votes that may come from people who don't come back to adjust them.
Received your email and will be in touch as soon as the API is finished.
If I'm looking for the most reasonably explanation for Apple's behavior that still manages to cast them in a good light, I'll read Gruber. If I'm looking for the most reasonable possible explanation, full stop, I'll read elsewhere.
Why? Just let the project owner hit a button that says "This issue has been addressed" or "This issue is being worked on", adding an optional note, which marks the review accordingly somehow. Then you can look and see how proactive the project owner is in addressing his feedback.
I guess someone is trying to emulate the okcupid folks, albeit with less interesting data.
This coincides with that great article on "How To Ask Questions The Smart Way" (http://www.catb.org/~esr/faqs/smart-questions.html), because it is often the case that the most effectively a question is asked, the more effectively the question is mitigated (and subsequently discussed).
The application that is downloading and executing code would itself have to be signed, so this doesn't get around the App Store approval process: the bootstrap app could be loaded by anyone with a developer certificate, but then they can just sign anything they want that runs as a normal process.

The effects this would have are in:

a) security (although codesign is a fundamentally flawed system due to return-oriented programming techniques and is frankly just security theatre at this point)

b) meta-store fronts (Apple would have to be much more careful about approving applications that downloaded other applications at runtime; Apple could revoke these, though, and you can already do stuff like this with interpreters, although you might not want to bother)

and, I'd say most importantly, c) JITs (suddenly there would be no technical obstacles to having good versions of Java, Mono, or even Flash; and given that the contractual obligations they added got so much pushback that they were removed, we /would/ see good versions of Java, Mono, and even Flash)
Ha http://lwn.net/Articles/259196/
"I just don't see it swallowing up the whole Hotel industry."

I've been out of the travel/hotel game for about 4 years now, but I worked in it on and off from ~'97 through to '07.

It's an industry ripe for a new player to do a Paypal style end run around the traditional banking/creditcard industry.

I don't know whether Airbnb are that player (I'm 100% sure pg and Fred are _much_ better judges of that then I am), but I'm also at least 99% sure that it _won't_ be any of the existing big players (Sabre, Gallileo, Pegasus, MyFideleo, Worldres were the large players I worked with) that revolutionise the hotel booking business.
It may make sense to provide much more weight to the latest N reviews, and a lot less to older, but still to add them into the mix. So your past will weight as well but you can correct your problems and get a better average review.
Incredibly cheap shelter for those in need
That doesn't make any sense. It requires allowing the JIT to mark pages as executable. But that's exactly the same as the browser. There should not be any new security vector exposed that's not already there from the browser.
Average skills? There was an article recently - I think by Joel on Software - that everyone thinks they're hiring in the top 1%. I have to admit I'm kind of curious as to what you were looking for in your team when you hired the guy, I can't tell unless you elaborate more. In addition, I agree with danilocampos: the problem might be in your hiring process. I'm not sure that throwing out puzzles or whatever will help you reduce your number of false positives.
Man. I totally agree with you but you knew you were going to sacrifice some karma for saying this.
I appreciate it for its good production value, and as an example of constrained composition. I question even the "mathiness" of it, since it's just based on a truncated decimalization of pi. If you're just looking for a quick and easy constraint to express yourself under, I suppose this is as good a constraint as any, but my main point is that, as you say, there is no aesthetic value to the piece, and definitely no true insight on mathematics or the nature of the constant known as pi.
I have seen a lot of misinformation posted (and then strongly upvoted) in another thread related to this controversy. I would like to offer a very specific quotation which I believe illustrates the crux of the issue, excerpted from the linked pdf:

Determining copyrightability is thus a fact-specific, case-by-case exercise. In the case of the Linux kernel header files,
most would likely be copyrightable (even with comments removed) because the headers include many macros, inline
functions, and other logic that clearly qualifies as expression. In fact, there are several Linux kernel header files that consist almost entirely of static inline function, which is generally regarded as copyrightable expression. For instance, the Linux kernel header file <sys/byteorder.h> consists of an optimized byteswapping function that was included by the Linux kernel developers because it was clever and well-written – the kind of creativity that constitutes copyright protection. (The initial thread from the Linux kernel mailing list that contributes this particular inline function and
discusses the performance benefit it supplies is available at http://lkml.org/lkml/2002/11/29/68 .) When it created the
“clean” Bionic headers, Google kept this inline function. See http://android.git.kernel.org/?p=platform/bionic.git;a=blob;....

(end quotation)It seems clear these header files do include copyrighted original source code that cannot be stripped of the GPL.
Wait a second. isn't there this other email API called...IMAP?
1,392 people rated my project as having 1 star for documentation. I've made documentation better. A few people have now rated it four stars while some still believe it's one star and don't see the point of changing their votes from one star to one star.

I think it's a great idea to show users what parts of a project are weak (it'd help them understand how they can help), but I have the same problem with reviews on Apple's app stores, Android Market, Amazon, etc...

Some of those are handled a bit by the complaints being about previous versions, but stuff on github isn't necessarily versioned.
Hmm, how long before there's such a thing as a Hacker News Loophole?
Did microwaves become mainstream when they were 600+ dollars?

Also, a microwave helps you with the basic necessities of life (making/eating food) if you lack cooking skills. The IPad is an entertainment device.

IMO this analogy is very weak.
Yes! Helping people save face is more useful than jockeying for nerd dominance. Other approaches to do what you suggest:

"I think I read an article that compared a few different password hashing strategies, I'm interested in your thoughts..." (and then follow up with a good comparison that makes the point)

"Have you compared X, Y and Z?" Tone is important with this one, but it can be the most straightforward.

"At the last place I worked, the paranoid guy insisted that we do X because he thought it was better -- it was just as easy to implement, is that something you'd be open to?"

When all else fails, you can follow up in private!

I think the key in any of these exchanges is to offer new information in a way that doesn't question the judgement of the other individual. Basically, assume that everyone is rational and differences in judgement are due to differences in information/experience. Then, when someone makes a judgement different from yours, you are merely giving them the information that lead to your decision -- but leaving them to make up their own mind. Most people are more ego-identified with their judgement than with the information they have.
From the perspective of a programmer-slash-reader back in '05, I think the progression was that you discovered Digg and used it until you heard about Reddit, which had much fewer stupid stories that were much more tech focused than Digg's, so you ditched Digg and started reading Reddit until three out of four stories were about either peak oil, Ron Paul, why America sucked, or Obama. You suffered through that for a while until Hacker News came along, and then you stopped going to Reddit.

I've actually started reading Slashdot again in the last year of so, which is funny, because it's growing irrelevance is what drove me to Digg in the first place.
I like the term POX, except, like AJAX, that has an X that can be mistaken for "XML" although it can also be X for "Unknown".

Unfortunately, the vernacular meaning of the word REST is "not SOAP".
My favourite part was IE2 getting 93/100 on the Acid3 test.
WorkforceGrowth Introduces Public Kudos + Real-time feedback for Employees
Another commenter explained it this way.

You run a video site or a search engine that serves CPM ads. If you can buy PPC cheap enough, you can arbitrage and make money.

PPC from Google is expensive, but there are companies that sell cheap clicks. Some publishers on these ad networks run porn sites with hidden iframes that generate the clickthrough.

However, iframes generate a http referer, and this gives away the rather dubious traffic sources. The series of redirected clicks are used to subvert click fraud analysis.
Instead of making it anonymous, it should just be tied to your github account.

Make it known who rated what project and for how much (and only once per project, obviously). Then the project owner can message those people to change their rating once they fix the documentation or whatever they go the bad rating for.
This is confusing to me. If I'm asking people for money and they don't want to give it to me, I wouldn't really be offended if they said, "the reason I don't want to give you my hard-earned cash is because I think your idea sucks." I wouldn't give someone with an idea that sucked cash either.

This would also not preclude, "you know, I was wrong... still interested in some cash?" It's a business transaction, not dating.
There's gotta be a joke in here about "the only intuitive user interface is the nipple", but it's too early in the morning for me to make it...
That is a pretty different dynamic and more similar to an angel round, given all the competition from angels for the same investment. The key is, once you get to Series A, the universe of potential financiers collapses down to the venture community.