skysight-inc/HackerNews huggingface dataset:
I'm not comparing, I'm telling the difference. Just like Netsparker will not do port scanning, possibly Metasploit will not do full web app stuff. You can talk with someone from Rapid7 and they'll tell you the same thing. And for the record I love Metasploit, it's a fantastic tool.

We have a good relationship with Rapid7 guys, they even has a module to import Netsparker results into Metasploit and we keep getting synced with them in new updates.

> Or can we just let it suffice to say that HN isn't a great place to promote products on random threads?

Personally I love seeing other HNers to send their relative products, projects, startups, commercial ideas, job ads in HN threads, I don't think there is anything wrong with that. You might think otherwise, that's why there is one upvote and one downvote button.
I accidentally chose my number before I could do more than deliberate on whether to pick that number or go for another one.
Is it a bubble? It matters if we think it is.
It seems like people say this for every HN post.
Thanks for pointing out that that post was by Mark Suster.

I rarely click through to TC posts - there are far too many of them on HN - but I'll always read his posts.
seems like the rages are beginning. end of US empire in the internet.
Chris is conflating the startup bubble with a general tech bubble and using the strength of profitable companies to defend startups.

Twitter and Color are startups with no clear business model. Groupon and Google are going concerns.

As per the blog entry: "A bubble is a decoupling of asset prices (valuations) from their underlying economic fundamentals". [Agreed!]

Throwing $45 million at Color with nothing more than an idea and the hint of an app is evidence of a bubble. So is Twitter's recent $7.7 billion valuation based on a predicted $150 million in 2011 revenue.

I know it hurts - hell it's going to hurt all of us - but you better believe it. Prepare to be profitable or die.
Interesting. So the total cumulative time to update the timestamps like this is 300ms (10 * 30ms), whereas the time to update them all in one shot is 115ms. This way it blocks for 30ms every 2 seconds (or 300ms spread over 20 seconds) instead of 115ms every 20 seconds. I'm not sure which is better, but it does sort of confirm that doing the extra regex matching introduces some amount of extra overhead.
I disagree with your claim of their primary use. They're for installing software; the convenient upgrades and dependency management are merely a side effect of handling that task correctly.

Also, from TFA, see http://en.wikipedia.org/wiki/CNR_(software)
I bet the failure rate for humans is higher than average too. People are used to typing the words in the box.
Once, a co-worker told me post-factum that the biggest hesitation about hiring me was that I didn't look excited enough. Luckily for me it's a known stereotype and there was someone who said "he is just Russian, they are all like that".
It took me a few years to get used to the American smile, and then couple more years to get used to the meaningless "how are you?". What I still cannot get used to though is the "stranger nod". Every time you look at an American, they nod at you and say "how are you", even a stranger in a shopping mall. Once, when I was visiting Moscow, I tried looking at a stranger and nodding. The most friendly reaction of a Muscovite was a confused look, the least friendly almost got me into a fight.
Maybe it is just me being "Russian", but to me this nod and the meaningless "how are you", and the protective smile mean the same as a Muscovite's angry "what do you want?"
It is very important not to look at tech investment isolated from the rest of the economy. In late nineties, money was being thrown to tech startups because everyone believed that it was a much better investment opportunity than other methods. These days, it is a better investment then the alternatives, as it at least gives a chance to win big, while other types of investments pretty much guarantee a loss.

That won't last forever, but I don't think it will grow to a full-blown bubble; so far it's more akin to the growth we had in 2007-2008, when there even were mocking songs about a "tech bubble", but the mocking ended along with the investments in 2009.

That being said, I have no idea what will be the effect of the two big events that will affect the Internet in the next year or two: depletion of IPv4 addresses and utter dominance of Facebook...
> you can solve it by blindly calling #to_i on your inputs

"You can solve it by blindly calling #h on your outputs"

Ouch. We know that scheme doesn't work too well: it's why we had #h and we now have #html_safe...
Metasploit isn't web application penetration tool. W3af, the other open source security tool Rapid7 sponsors, is. Meanwhile, Rapid7's commercial offering, Nexpose, also crawls Ajax applications and, if this flaw is as simple as people seem to think it is, would likely have found it... as would OWASP WebScarab or Burp (a tool that costs a fraction of what your tool does and belongs in the back pocket of every web developer).

I'm responding harshly because I do not agree with your logic (to wit: any thread involving security is a great place to plug your scanner) and because I found your comparison of Netsparker to Metasploit disingenuous: Metasploit simply isn't Rapid7's web app offering.
Philippe Flajolet (1948-2011): Algorithmics pioneer
Analysis of the Comodo hacker's manifesto
NP. Is there "beer for bug reports" too?
Without publishing the complete source for each test, these benchmarks are not very useful (the author does promise to publish sources for a new test in future). It appears that initially node.js was in 'development mode', so presumably the post initially showed Play beating node. With unreproducible benchmarks there are inevitably configuration errors made, or configuration tweaks that aren't applied.
I've always considered ATI's excuses for not providing access to certain parts of hardware to be bullshit.

In past, they tried to avoid publishing specs for TV-out, due to Macrovision (or so was the excuse). In the end, it was reverse engineered, later TV-out got obsolete and today, nobody cares. ATI however grew an user base that will not purchase ATI card again.

Today, they make life more difficult to those, who want to use UVD. UVD is quite simple functionality, basically you provide compressed buffer and the card decompresses it. You can put the result back to system ram, into texture, whereever, it has nothing common with the output (In theory, it may flag originally AACS-ed buffers and enforce secure video path for them, but in practice nobody cares, the pirates have better ways to capture content anyway). So they again are losing those who want to build video players for the living room due to the theoretical attack that nobody cares about. So they think Zacate will be more popular that Atom+Ion? I doubt it and quick look at xbmc forums confirms my opinion.
EMR's are just one part of healthcare, What we need is for all EMR's to follow standards which would make extracting/reusing information from them straightforward.

on a related note:
http://challenge.gov/HHS/134-smart-apps-for-health
That communism is never going to work because it goes against human nature?
IMHO, it is very easy to distinguish between a "social" smile and a genuine smile. When the smile is just on the lower part of the face - it's fake or protective, when the eyes are smiling - it's genuine.
Not comparable. h() was a one-sized-fits-all problem to quoting things that could occur anywhere in an HTML DOM. #to_i assures that a bit of syntax that can only ever accept integers is in fact given a real integer.

In case we're misunderstanding each other, I'm also saying that the framework should be doing that, not the caller (as was the case with h()).
My experience with F500 companies is that they are extremely political. This means that lots of ideas get funded without any analysis of the value. The dynamic in each company and potentially each division will be different. Ultimately you might be more successful if you can find a director level or above who can pitch it for you. At the very least you should be able to articulate the value to consumers and the compnay in a few sentences with maybe an additional one or two sentences to describe how it works. Ultimately your desire and passion to make it happen is potentially more important than the idea itself.

What people should care about:
1) target and size of market
2) alignment to current product mix/message
3) cost/risk to produce
4) how will this benefit the company

What they really care about is:
1) what am I bonused on
2) How can I get a promotion
3) How will what you are telling me help me with 1 or 2
4) Will I be embarrassed if I place a bet on you
I highly doubt that he will be able to do so either.

However, that does not reflect on whether or not he is the one that is behind the attack on Comodo, which has no real indications of being difficult.

Comodo claims that it must have been an organized, planned out attack because they knew which domains to get certificates for. That does not explain why 3 were generated for one domain and one for 'global trustee'. Nor does it take a genius to figure out a set of domains you would want certificates for depending on what you are planning to do (in this case, it seems like attacking large webmail providers).
There is actually a "mind trick" where you make someone choose a number between 1 and 4, guess it is 3, then make them choose a number between 1 and 10, and guess it is 7. It works, because there is a statistical bias toward these numbers, but the way you do the trick is also important (the way you gesture with your hands primes the person to answer with these numbers).

I've always loved such mind tricks, and I have done this one quite a few times. Before discovering HN, I used to go out a lot, and, when talking to cute girls, I've done this "trick" many times for giggles. Some girls really believed I was a psychic when I got it right :)

Funnily enough, knowing about this trick and the "statistical preference" for the number 7 made me choose 7 in this experiment, without thinking twice about it. I realized this afterward...
> the non-technical audience who will click 'Get me out of there' or close the tab.

This is the right thing to do. You do not attempt to second-guess a certificate expiration for any reason. If you program in a way to ignore a bad security certificate, I can guarantee you that that will immediately be used to defeat the entire system, and that leads directly to grandmothers giving their credit card details to J. Random Phisher.
As soon as the next world war breaks out over water, I'm sure petroleum will once more be the cheaper alternative :)

That, and no one will approve of shipping water (our only renewable resource FFS!!!) to outer space.
When a Linux user buys Apple's Mac mini
This is wikipedia, learning stuff so eavesdroppers can't read the connection.

I hardly think a massive "This Connection is Untrusted" for a 5 minute expired certificate on the same level as a warning saying "This certificate is not valid for this website" is appropriate.
I worked some pretty bad jobs when I was a kid, similar to his experience at Starbucks, he's totally right about the nice people really getting you through your day.
> you do not put all your learnings in the public view..

why not?
Ajax post, sign in, post-redirect, get
I am an MD, and I'll offer my 2¢ on the EMRs I have used:

1. They seem to be sold to hospital administrators, who hold the wallet but don't have to use them.

2. This flows from point 1. Given the target buyer, they seem to be made for the purpose of billing, and not for the purpose of facilitating patient care.

3. Doctors are all over the map with regard to tech savvy. Some are truly awful. Most of the EMR solutions I have seen are focused on slavishly re-creating a paper chart. Which is dumb.

There is a lot of room for innovation here.
Facebook will remain as long as people support it. In the short history of the net we have seen sites come and go with little more reason than they simply became passe. AOL had all the makings of a facebook (every ad on TV/poster had AOL Keyword:"...") but focused on their dial-up margins. MySpace had it but failed at modern design. Geocities, TheGlobe, etc, etc, had potential to do it before that. So many sites have come and gone in a social space. And now, where FB has picked up the slack they still can't replace the numerous forums out there where people really congregate to interact with "not friends".

Eventually, I believe, FB will be passe. And whatever out there is quenching people's social interaction thirst will thrive. Yes, it will be bigger because there will be even more people hooked up to the net.
Is there any chance YC will make the directory publicly available?
Good idea. I just added an extra message at the end. The amount of data is a bit overwhelming.
I was going to say the same thing - that cases 1 and 2 are really the same thing - when I realized that's not quite accurate. In his terms, mutation is a special case of re-assignment. That is, re-assignment allows re-binding a name to an entirely different value which may have a different type. Mutation is then re-assignment where the types happen to be the same.
That thread points out a huge problem with the quora format - ideally people could vote up suggestions on a per-item basis, so that the community could collectively produce the best list of items.

Instead people produce long-winded all-encompassing content-duplicating posts, so we end up with a jumbled mess of data.
I'd rather sell my textbooks for money (perhaps I don't like beer). I can then choose to buy wine, more books, cigarettes, course fees ...

That said, it's kind of a neat way to find which site is paying the most for my books. Kudos for a simple execution.
About 1000 times a douchebag.
Here's a great article from Manu Kumar, the founder of K9 Ventures, on convertible notes.

http://k9ventures.com/blog/2011/03/22/thoughts-on-convertibl...
Actually, I honestly think the bias is on your side this time. You're assuming that you're nice and therefore everyone else is nice like you.

I've actually walked into an enterprise (the car rental company) and found one of their cards lying around that details how to start a conversation with a customer.

It goes along the lines of:

<Enthusiastic Greeting>
<Enquire about abc / def / ghi>

and some more non-sense like that that I forget.

Plus, you can judge by someone's tone if they really are being honest or if it's just that they've been doing it so many times, it's become fairly mechanical. In cases like that I think a simple 'Hi', works much better anyway.

But the the thing I was going for with that post was, cultural differences can sometimes throw you off quite a bit, like the original article says.
You mean you would have a hard time forcing yourself to throw away a worthless hand (in Texas hold'em) after you already committed some money to the pot? Even if, e.g., you called in late position pre-flop with a bad hand just because the pot odds required it?
I had the idea of suggesting to Reddit a while ago that they should start their own currency (i would name it the Karmarian)

Reddit is a very large closely nit community, that is world wide. If the internet has a chance of forming its own open form digital currency, its going to need the backing of a large community such as Reddit or 4chan.

Personally I'd really wish something would take off. It pisses me off that the only way to do business online is via another private business. It would be awesome if our government created digital cash for online transactions, and it would be even better if a non government entity created a world currency to handle digital transactions.
Direct Nickel News Desk
Git bisect awesomeness
Hmmm. The eight steps certainly aren't wrong. But they seem to get a bit ahead of themselves. Starting with your spending foremost in your mind is...presumptuous. Its all about the quality of your idea and hashing and rehashing that until you've got the most beautiful, simple idea. Idk, these tips are useful but it seems like they're jumping the gun a bit.
the argument that this isn't a bubble because the people driving up valuations are private investors

Whose argument is that? Chris certainly didn't make it.

His argument (implicitly) is that this isn't a bubble because the tech sector has sound fundamentals. The point about private investors is unrelated. If anything it's somewhat at odds with the rest of the post.
The angel scene: how much has changed since September?
I chose some random physics book that was good for all of one bottle ($3.08)!

Columns of kegs, cases, bottles need titles (icons are shockers), get a designer to help out in general too. I think the concept has potential as a viral gimmick that makes people think about selling old books, but your execution will need to look a little better before I passed the link around.

Maybe suggest a fake book title for those who just want to kick the tires and see how it works?
Hasn't everyone woken up some day and said "hey, I'm gonna break RSA today"? I guess that only happens when you have the experience of 1000 hackers...
Twitter has a very clear business model: advertising. They are on track to make $150+ million this year from it.
You shouldn't have it start on "1" -- you should make people have to slide it.
>Allison's statement is accurate: a single radiation dose is similar in principle to one received from the environment.

why do you repeat this utter and obviously incorrect crap?
do you really think that localized deep tissue dose has the same health effect as if it was received whole-body? Do you just happen to possess the winning combination of being uneducated and too lazy to Google things up? If you ever make you brain moving, try to think how it can be "similar in principle" when 20S deposited to healthy tissue around cancer (out of total 60-80S dose the patient receives) rarely kills the patient while 4-5S received "environmentally" during comparable period of time would almost always be lethal.

The article looks like it was written by somebody who is uneducated and has problems with logic, i.e. moron. Too bad it was written by a professional with an agenda. Intellectual dishonesty is much worse than plain stupidity and ignorance.
I am Russian, and it's true - we smile less. This is typical of our culture, and this is one of the reasons why people travel - look at other people's culture. I think, if the world in one second was the same, the journey would become less popular.

There is nothing wrong with what we smile a little less. I think in the future, when a society reaches the heights and the war will leave in the past, the country will raise the traditions of his people for what would once again make them popular.
IPad 2: Out of stock by Saturday
In many cases the "GNU bloat" lies not in the added features but in unnecessary cleverness and complexity. See how GNU cat does it's own complex buffering, while FreeBSD version just calls read/write in loop in simple case and uses stdio in the complex one.
The "Sell for Beer" buttons don't seem to do anything at all in Firefox 3.6.16 on Ubuntu 10.10.

Otherwise a funny idea. Are there any laws about direct-mailing alcohol, though? It seems like much of your target market is legally prohibited from buying alcohol, and I would be surprised if there weren't restrictions in at least some states.
Great observation! It's really up to us to imbue those apparently automatic gestures with some meaning. And maybe it shows when we do. I can see how sincerely greeting a customer could help "reset" the mood back to positive.
I only see one or two good beers for trade ;)

Good idea, though.
Color is in a bubble all of its own
I was just talking to an ex-HIPAA software manager the other day.

The complexities are ridiculous. For example, who can edit a patient record, when can they update it, why should they be able to edit it. Who can add information about drugs a patient is taking, which departments are allowed to update certain sections of a patient record...
I have a feeling that fraternities will become the biggest buyers of used calc text books.
I thought much of Twitter's revenue came from licensing their firehose to Google, etc.
He's anything but a "freetard", he built cnr in order to be able to easily ship proprietary and drm apps. Far from a freetard (whatever that means).

Also I'm saddened to see people here upvoting a comment using a derogatory term (freetard) against a part of our community (free and open source software enthusiasts in that case), it's against the HN guidelines.
No. way.

Playing poker with PEOPLE, at least (not online) has enormous benefits. Learning how to read people in-depth is incredibly valuable. Also learning how to stand your ground and unflinchingly bluff (or deliberatly avoid telegraphing your hand) is also a great skill to have.

There's so much more to poker than the money. Unless you're talking only about online poker.
Which means they're valued at 51 times revenue. To put that in perspective, Google is valued at just over 6 times revenue.
I don't think Facebook's valuation is "bubbly". However, the valuations of many early stage startup companies are inherently speculative, because they are based on projections which rely on assumptions, and only time will show whether this assumptions were true or false. This bubble is only as "bubbly" as these assumptions are overly optimistic. This is why investors learned to bet on people and teams, rather then on ideas, because the quality of the team is a better predictor of its success then the business idea.
Writing Lisp interpreter is actually good way to learn most of core Lisp concepts.
Good point. I'm very curious now about the selector overhead. We do a number of operations across varying intervals. Surely one of the goals behind distributing the timestamp updates is to minimize the time we block this pipeline. That being said, it would be interesting to benchmark a variety of update interval and batch size combinations.
We're working on the Firefox issues. Sorry about that. Thanks for the feedback though.

We don't actually sell beer, but rather give you a quote of how much beer you could buy if you sold your book.
The problem with that is that almost nobody uses the official database APIs. The official APIs are usually C libraries (e.g. libmysqlclient) but pretty much everybody uses third party wrappers (e.g. Perl DBI, the mysql/mysql2 gem for Ruby, the PHP default MySQL bindings, etc). Few people program against the database in C or C++. It was and is up to the third party API providers to provide easy sanitization APIs, I don't see how MySQL could have changed that situation by providing such APIs themselves.