skysight-inc/HackerNews huggingface dataset:
Thanks. Just curious, how long were you there/whereever, and what was the burn rate in terms of money? 8k is just an upper bound I had in mind for what I am willing to spend without breaking the bank.

In terms of staying, would you recommend against renting a place for like two-three months, given that I'd like to travel ? I was mostly going to pack a laptop / camera / some clothes / and buy other stuff locally.
Actually, this is true! I'm graduating in a week, and I don't have a job lined up.

At any rate, I shouldn't be (indeed I'm not) offended by something that's true. I think this point applies generally, i.e., more broadly than just me.
Thanks, I'll probably email you in a while when I have more specific questions.
It's not right, but it happens all the time. IMHO, if you can get past the rage, sell him the bank of hours. If he really wants to talk with you that badly, ask for an agreement with a piece of the action (thought I doubt he'll sign it).

Listen, ideas truly are a dime a dozen. Implementation is hard. Facebook, myspace, friendster...all the same idea. If this guy can do it, good for him.

Take the money and run. If you can't do that, bring the same idea to a competitor and see if they bite and will make you a deal.
Las mejores tiendas de ropa online
¿te gusta comprar online? decide bien donde vas a comprar, y si necesitas ayuda visitanos
This is sweet.
Little is known about how EBS works, so even expert speculation tends to be wrong. It is worth pointing out that most other cloud providers don't attempt to provide SAN storage at all, so there's no way to fairly compare EBS availability against its nonexistent competition.
Pud already admitted to it in his reply. I have no idea why he's ashamed of it now and is trying to pass it off as "web design". Or maybe he's betting that nobody who reads HN remembers the bubble days when Pub made his living off of reporting other people's economic demise, exploiting women to sell schwag and other crappy web me-too's.

You know, I've never heard anyone say that their ads were part of the design, coochy or no coochy. I guess strippers are just part of the strip club decor; everyone's really just there for the awesome DJ and the bargain drinks.

Anyways, I'll continue to take Pud at his word when he's offering up advice.
You know, it's a bit of FUD since I have no workaround/prevention angle.

Great. I run skype on one of my machines (OSX) and it's now vulnerable...
I wonder if you need to accept the attachment or if just sending it is good enough.

If you have to accept it, then who cares, don't accept attachments from strangers.
Swandive: create an EC2-based VPN for your iPhone (uses IPSec/L2TP)
The Power of Now [Blog Post]
This would also result in the firing of a very large amount of postal workers. Now you and I don't really care, logically you would only keep a job around as long as it is needed, but politically this would be a massive problem.
Gmail in the browser is, in my experience, better than Skype. The voice and video chat worked flawlessly from San Francisco to the Philippines where under the exact same circumstances Skype stuttered and failed for video conferencing.

Also - Gmail in the browser is integrated with Google Voice and Google Chat, so you don't have to suffer through Skype's client just to chat. And in fact you can continue chatting over your phone through SMS (for free) because Google Voice is awesome.
If it doesn't have root access you can run it in a dummy user account until it's patched.

Doesn't stop your machine from becoming a vector to attack other users on your contact list though.
I really love this idea, a standard place to find the authors and the tools (!) used. But I'm not a big fan of the name. Calling it humans.txt to mirror robots.txt doesn't make much sense to me, even as a joke. I think it should be named something direct and comprehensible like credits.txt.
The Locker Project
I just moved into a new place and have gone back to sitting as the stand-up desk I was using belonged to the landlord.

I am not comfortable! I hate it! I'm going to have to bite the bullet and buy myself a stand-up desk.

I would break my work into about 2-3 hour shifts, and always take a bit of time away.

I have 3 monitors for two computers.

I was standing on a balance board for about 70% of the time in front of my desk. The balance board lets you shift your weight around easily, and somewhat keeps you on your toes, but it isn't like being on the balance board in the gym. Just having a hand on the mouse or keyboard pretty much takes all the balance challenge out of it.
It's not that unlikely. Consider that the offices may have to push significant amounts of code/data back and forth between their offices and their data centers. You probably want to minimize the amount of developer time wasted.
I wrote Swandive because I really needed a VPN for the road. Even though OpenVPN is so easy to set up, it's not compatible with iOS devices, making it a non-starter. IPsec/L2TP are the standards-based way to do it, but it's much harder to set up... all the more so because IPsec relies on some non-standard IP packet types, and my home router isn't capable of handling it. I wanted to run my VPN in EC2 because those machine instances are essentially disposable, but EC2 presents all sorts of new problems...

In the end of the day, it was really non-trivial to get this set up, so I decided to package the process for everyone.
Yes. While Google hasn't open sourced much of the Apache licensed bits of Honeycomb, they have posted all of the GPL/LGPL code as required by the licenses:

http://groups.google.com/group/android-building/browse_threa...
The W3C is broken: it has spent the last 10 years standardizing ideas instead of existing practice. This is totally backwards and leads to standards that are too complicated, unrealistic, and in many cases not needed at all.

The general view of the W3C as a standards body is broken.

The W3C gets companies and individuals together to hash out ideas for the Web. After some time and trial and error they assemble a recommendation. Hopefully people (i.e. the members of the W3C) put this into practice to see how well it flies in real-life. At some point, if the recommendation proves its worth, a standards body such as ISO or ANSI may want to formalize it. Or so it was.

Once upon a time yo could find on the W3C site a statement to the effect that they were not a standards body. However, some people who wanted to see the ideas from the W3C gain more traction (i.e. XHTML) started referring to W3C docs as standards, and the W3C as a standards body. Jeffrey Zeldman, in Designing with Web Standards [sic], says the use of the word "standards" when referring to these specs was, in fact, "a guerilla marketing maneuver."

This is not mere semantics. There is great value in making a distinction between well-considered ideas that still need to be battle-proven, and proper formal specs that have been sufficiently vetted.

Eventually the W3C began to believe the hype and now presents itself as a standards body, to the detriment of the greater Web community because, as you point out, they are "standardizing" things that people aren't actually doing.
My ISP doesn't throttle, which is entirely why I picked them.

I have access to a connection that downloads 20 megabytes per second from S3, and YouTube still buffers on that connection.

Note that Vimeo doesn't buffer, and Vimeo has higher video quality usually. Also Netflix doesn't buffer.

YouTube has been getting worse with time rather than better. Tons of ads and slow video.

The issue is definitely on the YouTube end, and I'm not the first person to notice it.
Well, it's a Register article. I left open the possibility that they called "remote script execution" remote code execution. They already said it gains root access, but then later said it gives shell access, which is not the same thing (since skype does not run as root).

I have no idea what the bug is, all I meant was that it wasn't completely out of the realm of possibility to have something render a payload.
In strict terms, a font is not a font at all. The word is erroneous in spelling. A "fount" would be the correct terminology; somewhere along the way (probably because of mispronunciation), the spelling was changed.

If he's going to go full pedant on this, he might as well disregard the word altogether.
re: humanstxt.org - totally unrelated, but it's amazing how many facial expressions one can draw with one circle and three strokes.
World's Greatest KissCam Operator
There are plenty of times where I believe threats are overhyped. This is not one of them.

1) The default privacy setting in Skype is to allow anyone to send you a chat message. I know plenty of Skype users who complain to me about random chat messages, which indicates to me that they haven't changed their privacy preferences yet.

2) Regardless of the type of payload they used, "Low and behold I was able to remotely gain a shell." Remote shell. Through a Skype message. Would you give a random person shell access to your computer? It's more than interesting, it's terrible.

3) Spammers already infest the Skype network. If they discover this vuln before Skype patches it, you can fully expect that it will be exploited.

There is no mention of priviledge escalation in the article, but once you have a shell, the world is your oyster. There are bound to be exploitable services locally on the machine. Once you're in, you've got the run of the place.
I'm not sure how they figure this answers the question of how successful is TechStars.

I suspected they would look at the amount that companies were acquired for, and figure out approximately how much money came back to the fund.

Sure they may have a bunch of currently operating companies, but does that equal success if many of those only end up being lifestyle businesses?
Comcast has 250GB/month cap. If you go over it, you are put on the lowest plan (no matter what you are paying) until they decide you can handle it.

I went over it by about 100GB last month and I got my service turned off. I wasn't even downloading torrents.
You can specify whether or not to allow chats from anyone, or only those on your contact list. Can't recall what the default is on OSX.
Send them to as many places as you can. Then you don't end up with the Wikileaks problem where they delay publishing to suit political goals.
Our solution is "Use Google Talk until it's resolved".
No it wouldn't. That way lies "one size fits nobody very well" computing. Cross platform app users already suffer a lot from that problem.
Recursion patterns in functional programming
If this interests you take a look at django-wsgi which enables you to do the same things.
If it executed as root, you'd receive the password prompt every time you launched.
Then, no other blog/press will cover it because its "dead news" regardless of it may have value to their readers

It seems the opposite to me. Since the press doesn't want to link out, even a trivial press release creates dozens of redundant stories.
Answer: the inner class can only access constant locals :(. So you have to put any mutable state in members.

Blech. This might work for some cases, but would be a huge pain in the ass in others.
Some cool demos, kinda sad it requires a plugin. The medical imaging CT segmentation example is very similar to something I'm working on at the moment using javascript and the canvas tag.

Edit: quick demo for those interested (requires firefox 4 or chrome. Still in early beta :)) https://brainbrowser.cbrain.mcgill.ca/braincanvas Give it some time to load, it load 10mb of data.
Lightroom has an export option called "Minimize metadata" that strips a lot of EXIF out.
It's back up at http://dirkriehle.com - the project site is actually http://sweble.org where under Crystalball Demo you can play with the parser without having to install anything.
Unfortunately, it's not so simple. Alerting the public before a fix is out is a double-edged sword: it also means malicious attackers have a chance to replicate the finding and abuse it.
The actual release from Pure Hacking is here:

http://www.purehacking.com/blogs/gordon-maddern/skype-0day-v...

No mention of root; only remote shell. I have a feeling this is just bad reporting on the part of The Register.

Having said that, I wouldn't give a random person off the street access to my local user account, even if they can't execute as root. Plenty of attackers would be content to rsync all your files to their server for further examination/exploitation.
Fair enough. The article does link to the actual blog post though (http://www.purehacking.com/blogs/gordon-maddern/skype-0day-v...).
Awesome way of doing assertions!
https://github.com/udp/lacewing/blob/f1c6386bf33f470ff61b275...

I remember I used to do something like that in C++ because throwing exceptions on error situations gave me zero debug information about what happened. But forcing a segfault instead you can get the stacktrace.

As someone else commented: kudos for you code! It's really clean and well laid out.
Also an easy way to frame someone with a quick exif edit.
This can easily be automated. You could send a hash of the binary and have a custom patch either pulled from cache or created (the largest "patch" being the whole binary). You'd end up with a fairly complete cache very fast though. Binary diffing is a mostly solved problem. This assumes that there's a list of hashes that correlate to known historical binaries. If the hash doesn't match you fall back to sending the whole thing.
Smartphones: The Most Pervasive Interruption Technology Ever
Nice. You need to add achievements to this. :-)
250 GB is very roughly* about 12 movies worth of Netflix. Higher than the average user will use but nowhere near "huge" or unreasonable usage.

*(depends upon bitrate, sd vs hd, etc, so YMMV).
RabbitMQ based chat. Erlang FTW!
How many gmail users would you estimate actually identify each of their emails as confidential? Or docs users?

I suspect it is a very low percentage and in contrast the paid version requires Google to treat the customer's documents as if they were Google's own.
I love the usage of Gravatar!
bacon smells good.
Leaking things to Murdoch?

Hell no!

PS: I think it's pretty clear who will be "leaking" things there: Lobbyists and PR firms who want to further insulate their wholly aware paymasters from accountability.
A better phrasing was used by someone on a panel at SXSW (Frank Chimero, perhaps? Jason Santa-Maria?). Anyway, they were conveying the idea that a font is a digital representation of a typeface, and they used this analogy:

Song : MP3 :: Typeface : Font

I agree, though, that making a big deal out of people getting it wrong is a sign of insecurity and pretentiousness.
sadly no screen/desktop sharing
Death of a Product Manager
In Polish the term for cast metal sort (czcionka) has become synonymous with both font and typeface.

I suspect the reason is the same as with font in English — it's the only term that Word (and its predecessors) used for everything font/typeface related.

The battle is lost.
What differentiates this from every other chat app that gets posted here? Using erlang for a chat app doesn't seem all that newsworthy to me.
If you read the comments, it's unreasonable to complain about their having content from the video. The point of the comments is for people who've seen it to comment on it; if they're incidentally helpful to you without watching the video, that's fine, but don't expect people not to spoil things.
freddy, I added instructions an hour before your comment. So are the instructions unclear? Or had you looked before they were published?
I hope while they're fixing this they can fix the terrible, terrible, UI bug introduced in Skype 5 for Mac.
A whole other approach, but I wonder if segmentation might be easier using a video of a leaf moving against a stationary background. The leaf is the part that is changing.

I've often wondered about identifying local trees; I've looked up site of trees, but often leaves seem very similar to several different trees.

Great to have it for other countries, and an edible plant guide.
Is just a PoC of using RabbitMQ to route messages and keep history on a custom exchange. Messages are sent via Websockets. Nothing fancy. This is not competing against anyone :)
Why is this tabloid journalism featured in HN? Nowhere in the article is there any indication how root access could be obtained. There should be at least some description how privilege escalation could occur. I don't want arbitrary code executing but that is a long way from root access. Even for shell access the attacker needs the user's name and password. Does the target just offer them?
I disagree. The post office depends on junk mail only so long as it has to make door to door deliveries. If the door to door delivery is paid for by the subscriber directly the USPS can ditch junk mail as the main source of income. My main point is that USPS relying on junk mail is not sustainable. Either it will go bankrupt, or it will get huge tax subsidies, or it will get a bit creative. It is going to lose some of its work force either way.
You don't need a username and password for shell access if the application has a vulnerability that allows for arbitrary code execution. Your code just executes as the same user as the application. To elevate your privileges, you would need to use a separate vulnerability once you have shell access.
Why is this the top article on HN? Is it really that relevant to talk about this?
Because NOYDB (or anyone else's, for that matter), that's why. Because my data and my devices should be used for my interests, and only with my consent if for someone else's.
Does this use any type of location lookup? I wonder how beneficial that would be, either look at the persons location if they use the cam or grab it out of the exif data, so that you can better determine the tree by where it of could be grown.
http://www.google.com/search?q=inurl%3Ahumans.txt
This notion has been formalized. See the (admittedly brief) wikipedia article on Chernoff faces: http://en.wikipedia.org/wiki/Chernoff_face
I stand all day. Have for a year. My legs were a little tired the first week, but after that I was fine. I shift my weight around, lean on the desk, pace, etc.

I have no idea if I'm healthier or will live longer or have more sex or my hair is growing back, but I do prefer it to sitting down.
Agreed. But that goes into a very different discussion of how we are now so productive that having a job becomes a priviledge. I personally do not know if pure capitalism with unregulated markets scales well along the productivuty curve with a large population as a given.
Dude, it looks nice, but you just started how many accounts to upvote it?
Because the reward of a breakthrough is extremely high.
Note to self: do not leave root terminal behind xlock, since I have no guarantee that xlock will stay around.
It's an idea that was discussed here recently, and its adoption by Google is a sign that it's got some traction in high-profile places.
I like your compromise. It still gives everyone access to door to door delivered mail but also cuts costs significantly. And the best part is that people who live in larger communities get the opportunity to get their mail delivered every day if they so choose.
In addition to what openbear pointed out, it should be noted that the GPL requires build scripts to be included with the source. (What good would source do anybody without the three-bajillion-line Makefile that builds it?) GPLv3 also extends this to stuff needed to run the code on the hardware it's intended for (like tools to sign binaries so they'll run on locked-down embedded platforms like phones or DVRs).

There's a practical aspect to the GPL, here. The spirit of the license is, "if I can't view, modify, build, use, and redistribute the software, it's a violation."
No mention or actual "root" access, just "shell" access under the user's account. While that's still bad, obviously, on its own it's certainly not "wormable", as the article suggests.

More hysterical reporting from The Register.
That's just not true. All tech companies have traditionally been down south. First San Jose, then Mountain View/Cupertino/Palo Alto. Few have traditionally been based in San Francisco proper.

The urgency is that this section of SF tax code was just discovered. The fear is that it will now be enforced, which would force the best SF-based companies to move.
How to Use the CheckBoxList Control in Visual Basic.NET
A high school student I know finds the Khan videos not deep enough. She said they are a good introduction but didn't cover anywhere near what she was seeing in class. So I guess you get what you pay for.
Never forget: your customers will advertise your business for free, whether you want them to or not.
Everyone can do this. You are picturing it being paid for by the tax payers instead of you directly, giving the perception of free. Then again I found their offering to be too expensive and would love to see USPS trying to compete with them.
TaskRabbit Raises $5M for Nationwide Expansion
Good call. Mirrors my behaviour, after thinking about it.

It's early days with location awareness. We're still at the, "Ooh shiny" stage.

Location awareness is something to build on. But not the fact that I'm 823m from something, somewhere. To be useful, there needs to be much to it than that.
> If that were true, why is there is a single startup in the city today?

Because that section of the tax code is not enforced.

> If you think the Twitter in SF situation is unique

We're not talking about the Twitter situation. Twitter extracting concessions from the city for its normal payroll tax obligations. For the record, I'm against that.

We're talking about a completely different situation from Twitter, the issue with a company being taxed on employees' personal stock options gains. This has nothing to do with the Twitter tax break.

> You asserted that the tax is somehow driving public companies out of SF, so you get to back up your assertions first.

I currently run a startup that would not be able to stay in the city of SF if we went public. In a few years if we start going down that path, I really hope that this tax is no longer in place or I will be forced to move the company out of the city, which I don't want to do.

Not sure what else I can provide you to back me up on that one, besides a letter from our accountants saying the same.
So you mean simplicity actually makes a lot of features easier? No shit :)

I don't see what market share has to do with the issue at all.
You might have "minimize embedded metadata" checked in the export options; uncheck it and I bet the serial will survive the export. Also, if you want more control over exported metadata, Jeffrey Friedl made a plugin[1] for that. I haven't used this particular plugin; I do however use his flickr and geocode plugins, and they're both great.

1) http://regex.info/blog/lightroom-goodies/metadata-wrangler
Ah, yes. I meant to include that in my comment but I was on my mobile phone and too lazy.

Both could have been included in the headline, though.
Thats very cool! The Kinect video with regions reminds me of my uni undergrad final year project (except that your region stuff is much cooler than ours was - cheaper too): http://dublindan.posterous.com/things-ive-worked-on-1

EDIT: pasted wrong link first time :-/
Recursive Make Considered Harmful
Ask HN: Well designed product blogs?
Doing a bit of a prep for a project and now looking for examples of well designed product blogs, with an emphasis on designed. Something tasteful, polished and with character. Something that would make one want to go straight to the main site and see what it is they have designed as a product.

http://www.panic.com/blog - the best example I can think of

http://culturedcode.com/things/blog - the second best example

http://taptaptap.com/blog - yet another example, though it is IMO a bit overdone

From the top of your head - any other examples? Feel free to plug your own stuff if it stands up to a critique :)