skysight-inc/HackerNews huggingface dataset:
I'm not complaining about the fact that this is, like my essays, in the form of an essay rather than an academic paper. I'm saying that it's a piece of advocacy rather than an attempt to figure out the truth.

That's an important distinction. In advocacy, you start already knowing the conclusion you want to reach, and you try as hard as you can to convince the audience of it, the way a lawyer or a politician would. Whereas an essay, as the name implies, starts with a question, and from there you try to follow the truth wherever it leads.

I wrote about this in "The Age of the Essay"
(http://paulgraham.com/essay.html).

There is not a mathematically sharp distinction between the two approaches, of course. A lawyer or politician will use the truth when it suits his purpose. And an essayist trying to follow the truth will inevitably have biases that cause him not to follow the truth as far down some roads as others.
But though the two approaches form a continuum, and writers sometimes drift along it in the middle of a given piece, the distinction is a meaningful one.
I hope this isn't even close to the final design. With their Metro UI on Windows Mobile 7 they took a big step into the right direction - an all-flat, simple, clean interface that got rid of all those shiny, glossy elements. Why wouldn't you stick to that approach when it comes to your flagship product? Especially given the fact that Windows Mobile 7, despite lacking in certain features, received a lot of praise for their original and well executed UI philosophy. Additionally this is a chance to unify the interfaces of the desktop and the mobile OS.

Some may say that this interface doesn't work on the desktop, but have you seen the Zune software? It looks clean, original, simple, yet very modern and substantial. That piece of software should have been the template for the whole operating system.
I wrote and use this: http://yamon.klaki.net/

I wanted something as minimal as possible which still knew how to do dependencies. It's mostly a black-box monitoring tool, but it has a white-box component as well and can dump info to rrdtool for graphing history.

I'm pretty happy with it. It lacks documentation though. :-)
do you have a source for that? I always thought MS realized how important the internet was going to be before most people, they just never were able to figure out in what ways.
3.141 59265 3589 79323 846 264 338 3279 50288 41971 69 399

I liked bursts of 3-digit chunks, combined with 5-digit sets that were important addresses in the C64 memory map. (41971 in BASIC ROM, 50288 within the $C000 hidden RAM area).

http://sta.c64.org/cbm64mem.html

The computers you use change how you think, permanently.
> applying statements made about the "iPhone" to "tablets" is simply going too far.

Yet, the most (perhaps only) successful tablet up to now is little more than an overgrown iPhone that can't make voice calls.
are you kidding? people fall over themselves to hire women for technical positions. Given two candidates of opposite sex with equal technical ability, I bet the woman is hired more than %50 of the time for many reasons. What is fair for the community and the individual are sometimes two different things.
You make a good point that it benefits a lot of people to know where the high profile members went, but maybe there's a better way to do it.

If there is some unique perspective on HN that can apply to everybody then, sure, go ahead and post it to HN as a blog post. However, any generic I'm-leaving-HN messages could maybe go into a category of "Leaving HN: ..." posts (instead of a link). These could still hit the front page, but there would be a clear distinction between this community news and other news.
I am trying to imagine the response you'd get from, say, a message oriented middleware vendor without a dedicated security contact, upon sending them a message encrypted in such a way that only their SSL certificate could be used to decrypt it.

It's funny to think about it as "mass hysteria!"; the people who care about these reports are on the dev team and can safely be expected not to really understand what an SSL cert is, let alone have access to it or the patience to use OpenSSL's command line.

But more realistically what's going to happen is that the message will get chucked entirely.
Cool idea - hope he has some good legal cover :)
Thanks for the explanation, but I still don't understand the problem. You re-image the server, fix whatever holes they exploited and re-install from a backup.

Applications should be designed for failure. Assume this will happen every week and plan for it. If not someone cracking your system then a hardware failure, or your ISP going bankrupt or any number of other disasters.
sgrove,etc and github..

Very nice..I like it
Unlike the big bubble, profitable tech companies are not just selling "picks and shovels" to unprofitable (but well funded) ones.

Ebay makes money. Amazon makes money. E-Commerce is alive and kicking (finally), and even if investor funds dry up overnight, there will still be lots of cash coming in.

In the first bubble, the only people making money were Yahoo (who sold ads to overfunded startups), Oracle (who sold database software), Sun (who sold servers), and the consultants (who supplied warm bods). This time, it is different. All bubbles are.
Samsung Galaxy Fit
Samsung S5670 Galaxy Fit dilempar kepasaran dengan harga Rp. 2.3 Juta untuk menemani saudaranya Samsung Galaxy Mini yang sama menggunakan platform android.
I've heard it's Quora.

Personally, I've been trying to focus more on coding than on reading about coding. After 5 years bouncing between different programming sites, I think I've learned most of what can be learned in 15-minute blogpost soundbites. The really interesting stuff requires that I buckle down for an afternoon with a textbook or editor window.
Nor is that what henrikschroder is claiming. I understand him to be saying that the majority of Americans have declining incomes, adjusted for inflation, over some recent period of time. Could be true, but I'd like to see numbers.
Thanks Chris. Just sent an email.
Or, instead of building a process for getting your ops team to do unusual things with your site certificate, you could just put up the web page with your GPG key on it.
Yep, come and help finish it :)

https://github.com/deplorableword/solarized
> I always thought MS realized how important the internet was going to be before most people

Maybe they realized how important the internet would be, but they were very late to the web, and that's what made the internet important after all. Microsoft's vision was of its private Compuserve-like Microsoft Network to be installed on every Windows desktop computer and accessible from anywhere. I am sure they were into TCP/IP and packet-switched networking, but... that's not what made the internet the transformative force it is now.

I think I have a Blackbird developer kit somewhere in one of my move-leftover boxes somewhere.

It's sad to say, but once, a long, long time ago, I was on the Other Side of the Force...
I understand why they were downvoted, but people responded to their message and my comment has a similar message. It looked as if people would be reluctant to consider to my arguments, but I'm pleasantly surprised that they did.

This just goes to show the value of putting in time and quality into a comment (unlike the ones at the bottom of this main thread).
There are certainly other potential issues with closing over mutable variables. However, if Python's variables were immutable, it would have to create a new scope for the for body(either with statement-level scopes or by using internal iterators/higher-order functions instead of for statements).
Great Companies Copy
RONALD REAGAN
Free. Well who pays for it in the end though.
Quora is like TED in that it provides exhibitionists and flatterers of the powerful an opportunity to meet up with voyeurs and those who get a rush from being in the presence of quote-genius-unquote. You are what you like, and as soon as everyone knows that you are a Hans Rosling nerd, it is a certainty that you'll be significantly closer to saving the world—and getting a million Twitter followers.

What's not to like?
Hot news , issues , trends , reports
"Like all premature babies, TinyGrab 2.0 just wasn’t ready for mainstream usage"

What the fuck?
How much additional development will Unity get because Ubuntu has put its massive weight behind it?
> The real problem is that vendors sit on vulnerabilities for months or years; giving them one more (complicated) way to publish doesn't really help much.

Just making sure you actually read what I wrote, since that's specifically stated as the problem being solved, and at the top of the site it says researchers publish vulnerabilities, not the vendors. I think you misunderstood and think the vendors publish these.

Not replying, just making sure I understand that you read what I wrote and what you're actually saying in your statement above.
And the space above the quotes is too much in comparison to the space below... it bothers me.
The versions were indeed complete files and not deltas. The limit to the number of files kept was a user-configurable setting, and there was a series of commands (like PURGE) to get rid of unwanted versions. (There was also an optional directory size quota, to limit disk usage by users.)

Obviously, it would take a bit of jiggering to alter the system to use deltas-- but you'd think that there would have been ample opportunity in the past few decades for someone to do that work, if desired.
It's funny how difficult window management is in an operating system named Windows. The only useful addition to window management since XP is the addition of easy vertical maximization. The lack of virtual desktops is especially unfortunate in Windows because the taskbar gets cluttered so quickly.
I'm vaguely reminded of the bartender's exchange with Ford Prefect.

"I always through we were supposed to lie down or put a paper bag over our heads or something."

"Yes, if you'd like."

"Oh, will that help?"

"No."
Exactly. I was able to pay for tuition and living expenses without debt and financial aid because software internships were so lucrative (even in the midst of the Great Recession). But then again, I studied at a public university.

I feel for my friends (and others) who had to work all summer, perhaps during the year, without pay in order to pad their resumes.
Exactly what I noticed. It's the central philosophical problem with classical liberalism right there! Before I sent this to friends: is this an April fool?

edit:

http://jdeanicite.typepad.com/i_cite/2011/03/the-arpanet-dia...

Yeah, a hoax, though disingenuously justified as a "FLIP".
But .. why can't you `grep|sed` your source code for the ip address? I'm confused.
Don't you think that a momentum based approach would be more suitable than energy based ones?
Awesome place. Indeed, the activity stream I've always wanted.
Here's what he's using it for: http://vulnarb.com/

It's not for communicating with web developers. It's for publicly and provably, but responsibly exposing vulnerabilities in software. The people/entities who write such software are likely to have a public website with SSL. If they don't, it's unlikely to be very important or widely used software. In that context, PGP makes no sense.
I don't know about others, but I don't think I'd be comfortable outsourcing my infrastructure to someone else to quite this degree. It's sort of like running a restaurant, but instead of having a kitchen, you go to your customers' houses and cook for them.

That being said, this is awesome technology, and it's fantastic for open source projects. I just don't think it will revolutionize delivery of commercial SaaS apps.
Maybe a 'farewell' note in the profile? Or a way to modify your profile that puts a '(gone)' marker behind your name in old threads?

Grellas started this (and he's back), I thought it was pretty classy and considerate of him, which is why I did it myself.

Anyway, your comment seems to have incited a large number of people to flag the post so it's no longer on the homepage. It's a pity that a long contributor of HN would get sent off like that while 'TopGear responding to Tesla' has been on the homepage for many hours now.
Yeah, I have friends at Waterloo who are on that system. The benefit is that they have a lot of experience under their belt, and perhaps the assumption is that companies (for FT positions) will reward them for that?
I think this approach exposes a number of problems that are pretty relevant.
First off vendors by decrypting the content of the researcher's submission are basically giving up vulnerabilities to the bad guys that want to target unpatched systems (read: what malware most of the time does).
Second thing I see no reasons why the vulnerability disclosure process should change and migrate to SSL based encryption: vendors can already expose "lies" if they feel like it with PGP encryption and honestly having a "middle-man" in between that can potentially have sensible data looks like a bad idea.
So how about: researchers post on the website the SHA-1 of the POC or just a line saying "product X is vulnerable", then the owner of the website asks the vendor for confirmation. If the researcher has no "karma points" then the submission is hold back until the vendor confirms, if the researcher has "karma points" (already multiple confirmed and valuable submissions) then the advisory gets published immediately regardless of whether the vendor acknowledges it or not.
Still does it actually help anybody? how would you convince consumers to actually pick products or similar based on that website?
To me it looks like the people interested in this kind of information have already other means (twitter, ml, direct contact with vendors), the others don't care.
Hey Matt,

It seems like you are getting more worked up about this than is warranted. Nobody is trying to pick a fight with you. In fact, we all admire what you are doing with PedalBrain and we all wish you nothing but complete success. We feel like every startup in Minnesota that "makes it" puts us one step closer to our goal.

Now, to answer your question: I am not an investor right now. I hope to be able to do that someday, but I don't feel that I am financially savvy enough to hold my own in a highly technical conversation about the minutiae of financial terms within a complicated deal structure. I am a sales and marketing guy with a talent for picking winners, but that doesn't necessarily mean that I am a pure numbers guy, so VC's and angels who have been doing this for a long time would eat my lunch.

With that said, I have done viability analysis on hundreds of ideas, inventions and discoveries, on behalf of dozens of local investors, as well as having been a contract strategy consultant for the U of MN's Office for technology Commercialization; helping them figure out the commercial prospects for IP coming out of university-born-research. Also, I currently am privileged to have some of the most prominent, business-savvy investors in town support my company. So I continue to learn and hope to be able to jump into the angel investment side of things at a point when I don't feel like I am going to get chewed up in the process.

I am part of team who built the Project Skyway selection process, I see every application that comes in and I will play a role in deciding who gets funded. So, I can play a role in helping worth early-stage tech companies get seed-funding in that way as well.

Casey and I have also leveraged our personal networks, to ensure the participation of some rock-star investors, from both coasts as well as the Midwest so that, should our companies agree with you, that they would be better off somewhere else, they will at least have been exposed to investors from other parts of the country.
Yes, ideally GPG would be better, but if you only did GPG then companies could simply not publish a key and avoid the whole system.

I'm envisioning some combination whereby, if they are already registered on vulnarb.com then you just get their GPG key (hopefully signed by their SSL key), otherwise you just use the SSL key if that's all you have.

After that I haven't explored it further. The advantage of an SSL key is that they usually must have one, it's secure, and they can't prevent people from using it.
JUnit repeating test
In contrast, if you graduate in 4 years, maybe doing (usually paid, but even unpaid) summer internships, you get more financial aid. 5 years after starting college, you are an engineer with 1 year of experience, and with a commensurate pay raise.

In this economy, it's not usual to graduate in 4 yrs and not be able to find work in your field - even with an engineering degree. The guy with the internship experience under his belt is going to have an advantage in this situation.

Employers these days don't want to invest in training "entry level" employees so getting experience (even if you have to pay for it) is sometimes the only way to get your foot in the door.
Hobbes - The philosophy behind governments...
Can you find instances of this practice? I'd like to know so I can investigate.
Uh... wow.

This actually came at a crappy time for me, since right now I don't have a lot of disposable income - I'm 17 and jobless (no available transportation...). I would try to pay at least $100 or something, but right now I'm almost flat broke.

If you're okay with going total charity, you can email me at tommy04@gmail.com so we can work it out, but if you're not, I understand.
It's sort of like running a restaurant, but instead of having a kitchen, you go to your customers' houses and cook for them.

I would say it's like being an expert chef and passing on your recipe to a cook who can make the meal in his kitchen and deliver it to the customer. In this case. You, the developer, are the expert chef, Bushi.do is the cook who does the work for the customers.

IMO, this turns the web like the mobile's app store/market. There's no investment for the developer apart from developing the app (for most apps). He can just put up the git url on Bushi.do. Any customer who's interested in the app can install it on Bushi.do and pay for the resources while you, the chef, gets a cut of it.
I mostly disagree with this. Right now the corporations have pretty much stacked the deck against consumers when it comes to security. A simple site where you can go and at least see the amount of vulnerability in a product, and also any past ones could do a lot to change how things are handled currently.
just curios: can you show the code?
Yep, exactly. People reporting vulnerability shouldn't have to beg to do it, they should be able to do it and it's up to the corporations to provide more convenient means.

That and I thought it was a pretty cool hack to encrypt a payload using just a shell script and openssl. :-)
As a high-res monitor user, with proper mouse acceleration it's really not any harder to hit a menu item that is anchored to the top of the screen than it is to stop the mouse on a menu item 200px away.

The only issues I've seen are when I have a non-rectangular monitor configuration.
Thats a good point. Platform control has always been hugely important to them, the "internet as an extension to windows" would be a good way to describe their internet strategy from the start. Contrast that with someone like google, who cornered the ad market and now just tries to encourage web usage in any way.
StartupDigest reading list is usually pretty good for startup news.
Ive been following bushido for a while and think it has awesome potential, being able to sell hosted web apps without having to go through the process of building a service infrastructure could bring the benefits of iphone type apps to a much larger audience
When I say debating I mean picking the least annoying one after having used all of them at their current version for a few days.
Yes mostly on OS X but maybe also on Linux.
> The problem is that even a shut-down reactor core generates significant heat due to the decay of fission by-products

Ah, thanks. I hadn't appreciated that.
It isn't an exaggerated portrayal, it's a realistic portrayal.
That's fine, they can ignore it since ultimately it's not about them but about everyone else. People then evaluating similar products can go look and see how they compare on their security track record. Once that happens I imagine they'll figure it out.

Also, I'm probably imagining a few open source tools to make this easy to work with. The shell script is just a little test case to prove you can do one part of it. There'd need to be a few more things before everyone can actually play the game.
If anything this is a cautionary tale about how to screw up your startup.

I have no idea what TinyGrab's architecture looks like, but I can say with full confidence that backups were an afterthought, and they find themselves in deep shit because they did not have a proper backup in place. It is inexcusable to have the current situation and still claim they have good backups.

"The issues lays with the server being compromised and being forced to shut down. The old API and apps relied on a fixed IP address. It would have taken us months to get TinyGrab v1 back up to scratch"

Ok, computer scientists reading this: To which of you does this make sense? It's hard to keep counts of all the fails in here:

- If your problem is a corrupted server, replace it and assign the same IP address.

- Why would anyone hard-code IP addresses for an API to work? Were you born yesterday?

- It should take at the very most hours to recover from a truly catastrophic failure. "Months" you say? You do not know what you're doing, I say.

- They have a bunch of backup and not one works, specially when there is no data loss? Smells to me like no source control; no off site backup, and absolutely no testing of the backup. If you have lived a single day in system admin work, you know that it is not enough to do a backup. You need to test the damned restore.

Maybe this could be a story about when _not_ to self-finance your startup. Get outside funding and hire people that know more than you do about the technology involved.

Sorry for being an asshole in my comments, but this situation is full of fail at every step.
Spring sun banishes the last of winter
Firefox has a setting to switch back to the old behaviour, but yes, I dislike the new default.
full book:

Chernobyl: Consequences of the Catastrophe for People and the Environment: (PDF; 4,3 MB)
http://www.strahlentelex.de/Yablokov%20Chernobyl%20book.pdf

source: http://en.wikipedia.org/wiki/Chernobyl:_Consequences_of_the_...
Usually people lack good jobs because they can't be politic enough.

On academia it's 10x worse. Do not fool yourself.
There exists a spectrum of opinion on whether "we" as a discursive device meaning "us white and Asian guys, you know, the tech industry" is a win in this circumstance. Ditto on the appropriateness and efficacy of describing black/Hispanic female participation in tech as a function of "our" actions. (A sketch of the argument: every story purportedly written about black women on Techcrunch is really written about white men.)
Facial recognition software on the web + Facebook photo tagging policy =

Another reason Facebook sucks
its confusing since a lot of github repositories are not ruby, they are not even running on web servers. a bit more info on bushi.do describing what it does would be helpful
It looks to me like it is a depiction of the earth minus the water. I imagine it's pretty accurate. When I did my certificate in GIS, we spent some time on the fact that different types/standards of maps are better suited to different types of data presentation in part due to the irregularities in the earth's shape. It's not actually perfectly round, even with the water. This makes it quite challenging to accurately map the surface, which is challenging to begin with simply from the perspective of matching 3D reality to a 2D data set.
Here is the original post with more Pictures

http://www.withinwindows.com