skysight-inc/HackerNews huggingface dataset:
I don't think that would work here. It would be like a TV station claiming they didn't have to broadcast the caption stream because they were just retransmitting content from a media company. Bottom line is the ADA says you must broadcast captions.
Enterprises? Most are quite conservative. Try .Net or Java and try to make it possible to deploy on Windows if needed; PHP is okay-ish (and you already know it). node.js is probably not going to fly.
I tried to install ubuntu on my new laptop recently. Honestly, it feels as bad as it did 10 years ago.

Weird installation trap.
Can't find drivers for my wireless adaptor.
Sleep sometimes work, sometimes not.
Tons of big or small problems like this.

Yeah, after long hours of research, I got resolved most of the issues. But I doubt anyone who has less patience or less understanding of computer than I do would simply say "damn it!"

Yeah, it could work, but it's crappy.
I have only good things to say about the Corsair SSD's. I'm all SSD now, and they're very fast with very good reviews for a very decent price.
Here's what I took away from PG's "life improvement triangle":

It's very difficult to change the processes people learn. If someone has been throwing a ball a certain way for their entire life, it's an uphill battle getting them to change. Similarly, if someone has been filling out a paper TPS report in the same way for the past 10 years, it's tough to get them to fill out that report online.

It's not impossible to change behavior, but it's an uphill battle.

The best businesses (ie: those with the highest value) supplement and improve the lives of people rather then changing their behavior.

In the Bloomberg video, the interviewer asks PG about his opinion about Groupon. The smarter question would have been "did Groupon improve the lives of people?" The answer is yes. They took something people were doing and made it better.

The best businesses don't often reinvent the wheel, they make the wheel 150% better.
Why would anyone even want a Gif replacement? Today they're mostly used for showing short clips of online videos -- when often (almost always) the full video version is a fraction of the size, has sound, shows more of the story, and has audio.

What personally amazes me is that people still use Gifs at all. Back in the day you'd see them as decorations on websites, but that role has been replaced by flash or using javascript for animations. Their only other advantage was transparency, but anyone who doesn't care for IE6 will just use a PNG instead since it offers superior alpha transparency.

Seriously, I don't see any reason to use Gifs these days and so see no reason why a replacement would even be desired.
Reverse engineering the Mac ‘breathing’ LED
Flagged. Even if it's accurate, there is little justification for posting names of siblings and parents of these adults.
Or just use "Private Browsing".

http://support.mozilla.com/en-US/kb/Private%20Browsing
They included the full address, DOB and social security number of the last guy. This must have been done by someone at facebook (joke).
I was busy using my dad's telecommuting PC to dial BBSes and learn to code when I was 10. It bothers me to no end when people underestimate the capabilities of children.
Yes, with the --user-data-dir flag.
I think aggravation is a great problem to solve and there's definitely value in that. Ultimately, it's a matter of how much the customer values your product and how well it solves their problem.

If your customer is aggravated because a certain process takes forever to complete, and your product cuts that time in half, allowing the customer to concentrate on other money making parts of their business...then there is definitely a price on aggravation.
Yeah I believe we do. I started out as a project to improve my life, as I wasn't satisfied with any of the budgeting software I'd used myself. I made an iOS app called Ez Budget and it has worked great for my wife and I. Currently working on versions for iPad, Android, and Mac so people can stay synced on all their devices. http://ezbudgetapp.com
First, Barret Brown was the leader of Anonymous, now he's Lulzsec. Ok. Sure.
I happen to find this post very helpful as a student of the craft, and your comments seem to be defensive of a traditional approach because you don't care to examine the reasons for the choices you've made. The pros and cons of either choice would be more helpful than demonstrating animosity toward an approach you've chosen to dismiss.

It's great that you have a setup you know and are comfortable with, but for those of us that would like to explore all options these posts are very helpful. It sucks you have to dismiss this as a ploy to be "hip".
I believe you got snookered by the aide. The crime is conditioned on $2500 of income to the infringer, _or_ $2500 loss to the copyright holder, _or_ a $5000 or more licensing fee for said content.

It is not clear, if those damage requirements are met, that there is any requirement -- other than non-zero economic advantage from the infringement, as required by 506 (a)(1)(A) -- that the infringer actually made lots of money as a result of the instance of copyright infringement.

It is also unclear what "total retail value", "total economic value", and "fair market value" (all of which are used in the bill) mean in the context of a form of property that is given artificial monopoly status. If someone uploads an unreleased Justin Bieber video to youtube and it gets 1 hit, then Bieber releases that video in a limited collector's edition at $2600 USD, is that youtube uploader a felon?

The text of the bill is very short: http://thomas.loc.gov/cgi-bin/query/z?c112:S.978: (include the last ':')
And 18 USC 2319 which it affects is also very short: http://www.law.cornell.edu/uscode/18/2319.html
Let me get this straight... LulzSec posting logins and hashes and DDoSing servers raises harsh criticism.

But Team Web Ninjas posting detailed personal info of people they hold grudge against is just business as usual?

FFS, that level of detail is doors open to identity theft and harassment of their families.
Rather than instituting term limits, we could try what the founders set up, and arrange for senators to be representatives of state legislatures, not state populations. Same problem exists, but I'd imagine its harder to buy the backing of a few hundred politicians than one.
Better to evaluate bad experiences accurately or put a positive spin on them?
Was it this:

http://www.anandtech.com/print/2738

?
Facebook is dealing with this by prefixing some of their JSON responses with "for(;;);".
I've been thinking about bitcoins.

If there is some way clearing houses can prove they own a certain quantity of bitcoins, then, the bitcoins don't need to be physically transferred. This has some advantages. Firstly, the bitcoins can be secured off the grid. Secondly, the transfers between clearing houses are simply bookkeeping entries, meaning there is less bitcoins that need to be actually exchanged. In the event of fraud, there is some traceability and reversibility, since clearing houses can implement rules similar to what banks already do. For instance, monies deposited cannot be withdrawn straight away, until it is clear that there are no other claims on the money.
Linux is a fine desktop OS and ecosystem, you just don't use it so you don't care. I'm in exactly the opposite situation. Find me a windows editor like X11 emacs. A windows terminal editor that even comes close to gnome-terminal or konsole? These are my killer apps. And I won't use other platforms because they don't have them.
Groupon Pre-IPO Valuation Speculation
Or you could use my Puppet modules which handles this for you on Debian or Ubuntu, using Monit in stead of supervisord: http://journal.uggedal.com/deploying-wsgi-applications-with-...
Sometimes the laziest solutions are the most elegant.
Less packages to keep updated, thus less maintenance.
I'd recommend Spring (framework). It's java but it doesn't get in they way or require you to type excessively. Really handy to annotate your controllers. You can easily have unit testing and CI server. It's open source but VMWare backs it.
ORGAnimal is a pet web app manager
OK, I see how that prevents an attack (it seems to create an endless loop), but how does this parse as regular JSON for the good guys?
>gnome-terminal or konsole? These are my killer apps. And I won't use other platforms because they don't have them.

So wait, is it your love of these specific terminal emulators or of the shell?

OSX has terminal.app
No, you missed the point. A, or B, or C,

If you posit that B or C are always true, you don't need A
You only ever need one of the three.
Social Media Isn’t Free to Entrepreneurs or Anyone
If you are developing an application that you will host then your customers are unlikely to care what it is written in (although lots of other factors then become important).

However, if it is an application that the customers will host internally on their own servers then they will care about the following things:

- What web/application server is used

- Whether there is any integration with management/monitoring tools

- What kind of integration is supported with internal directories (particularly Microsoft Active Directory) - for authentication and authorization

- What database engines are supported and whether you make any "unreasonable" requests (e.g. not being able to share the database server/cluster with any other applications)

What kind of application are you thinking of building?
Just in the last week, I started informally helping a renewable energy startup, as they move from testing their new generators into seeking funding to deploy them across South America.

We've got one built, being put in place in the Amazon right now, and have plans to deploy 50 more installations over the next 1-2 years.

Our stated intent and goal is to bring sustainable energy to 3rd world countries, with minimal environmental impact.
Android isn't successful because of Linux, it's successful in spite of Linux. Google chose Linux as a base on which to build what is essentially a new operating system (much like Apple chose BSD to build iOS on).

This is what a cellphone looks like when it's developed entirely by the open source community: http://www.openmoko.com/
Challenges will always be there. Every few years there will be a different set of challenges. The point is do we give up because of these challenges. No. We keep striving. Generation after generation. That is how mankind has progressed. We need to do something similar for our education systems. Neither I say that I know how to do it nor I am saying let's do it all together. I am not sure what will work and what won't. But we(educationists + parents + government) need to pickup the ball and start doing something.

Mr. Khan doing a great job. A great service to the mankind. His contributions towards helping people learn things is almost as important as those who invent/discover the stuff in first place. It is a great tool for people to learn. But I say it again Khan Academy is not the replacement for the primary school teacher.

One thing that might work immediately is "make profit making from schools illegal".

- Every school run by a group of trustworthy people selected from society by the people whose children go to those schools.

- High salaries for the teachers but equally high accountability.

- Any surplus to be invested back into the school.

- Severe punishment by law for teachers, educationists and school managers for failing to perform duties to the best of their abilities.
What would you like to do now Jedberg?
Interestingly, a documentary I saw on the on-site group studying Chernobyl mentioned that most of the group died prematurely, but not of radiation sickness or cancer. They died of heart failures and stress-induced health problems.

A long time afterwards, some of the survivors saw non-terminal cell damage related problems.
They probably do not, you're right.
I imagine they simply remove the first 8 characters from the response string. eval("(for(;;);{})"); doesn't work, but eval("(" + "for(;;);{}".substring(8, 10) + ")"); works fine where 10 is the length of the response string.

EDIT: This is the correct idea. Search for shieldlen or safeResponse in the JS to see how it is implemented. There is always something interesting to be learned by digging through FB's client side code.
I worked as a developer at Amazon after college to get experience. I paid off my loans, saved up enough to support myself for 2 years, and then quit to start my business: http://www.restbackup.com/
Firefox Sync; don't forget to set a passphrase for the 'software security device'.

Some passwords I keep in a gpg-encrypted textfile.
How to use multiple profiles with Firefox.
The New Web Designer's essential library
you can do pretty well with 1-2 processes per site; if you don't have the traffic to warrant it, there's no reason to run more. gunicorn can also use an async worker type (gevent) which can help keep the number of needed processes down.

django also has a sites package, so you can run multiple sites per django instance. it's less encapsulated but if you run a high number of websites with a low amount of traffic each it makes a lot of sense.
Its not really hip and trendy, its the standard way to go now days. The advantages to me are, Nginx is much lighter on resources for any given number of concurrent connections. I can keep those connections open if I really need to, and I have found it flexible enough for almost all scenarios (hosting SVN is the one thing I can think of that it doesn't do, but SVN's days are numbered for my usage anyway and http1.1 proxying backends).

Nginx's syntax for its configuration tends to be easy to read, the community is helpful. Its also well tested and hosting a decent percentage of websites.

I question the need to use Apache2 these days and anyone who blindly recommends it without knowing the alternatives as they tend to be uninformed about modern hosting environments.
Thanks! There are quite a lot of improvements coming in the next few months.

Let me know if you do end up using it, we love feedback.
The root causes of Linux's problems are very hard to fix.

It needs to aim to attract commercial developers by adding cohesive APIs and stable ABIs.

That's going to be a real struggle. Linux is too fragmented, there's too much opposition to proprietary software, and the kernel developers don't believe in stable ABIs.

Perhaps some sort of VM, à la Android's Dalvik or .NET, is the best solution for working around most of these problems in one fell swoop. Being OS independent also opens up approaches to solving driver problems in the long-term.

I thought Haiku had a decent shot of avoiding these problems, but my optimism has waned. Its ageing rapidly, development is slow, and rather than trying to attract commercial developers they seem happy to repeat Linux's packaging mistakes.
From the comments:

"Pretty sure Mt. Gox would have legal responsibility for coins/funds lost due to the exploit.

Allowing users who haven't read this thread to lose funds is negligent."

IANAL, but pretty sure this is completely wrong. That is what a completely unregulated market is like: freedom, but no recourse if something goes wrong. I have to wonder what happens when people who are used to the benefits of regulated markets (not saying there aren't downsides, just that there ARE benefits) enter into a market they assume is regulated, but isn't. With bitcoin, this is more than just a hypothetical musing.
Poonam Pandey MMS: Nothing ‘raunchy’ about it: Parda Phash
This is Jack Eisenmann's website for the Duo Adept, which includes further project details:

http://web.mac.com/teisenmann/iWeb/adeptpage/menu.html
> About the only difficulty is the pointless and contradictory jargon like "point free"

It isn't pointless, and it isn't contradictory. If you think it's contradictory, then you don't know what the word "point" means in that context.

It is a useful way to describe the style of functions.

f x = postProcess (businessLogic (foo (preProcess data)))

is a different style than:

f = postProcess . businessLogic . foo . preProcess

It is useful to have words to describe the two styles.

> or the hand-waving about Monads and how they violate their purely functional execution model

What? You obviously weren't listening. Monads do not violate the pure functional execution model. Monads are used, amongst many other things, to functionally compose non-pure program specifications.

> Never heard of Agda, but then I sort of don't care.

Some of us care about the forefront of research about static guarantees. Agda is a language that makes it possible to guarantee arbitrary properties (of our choosing!) about our code. If you are not excited about such guarantees, then you are clearly not a PL guy, but those of us who are interesting in PL research find it fascinating.

> Obviously, there are old programmers who are into programming languages, but they usually sit around writing crappy programming languages that nobody can use because they never ask anyone if their programming languages are usable. You know, kind of like Haskell.

I sense your frustration and difficulty of picking up Haskell. Maybe if you give it a bit more time, you could understand it.
That's like the time my supervisor was done setting up a server, and then was going to image it. He had two identical drives in the machine and imaged the empty to the full drive instead of vice-versa... I was the one to cleanup the mess, but learnt a lot.
Interesting. Can I get alpha access?
Know Your Engines - How to Make Your JavaScript Fast [pdf]
I'm not familiar with CSRF so had to look this up:

[Cross Site Request Forgery] vulnerabilities occur when a website allows an authenticated user to perform a sensitive action but does not verify that the user herself is invoking that action. The key to understanding CSRF attacks is to recognize that websites typically don't verify that a request came from an authorized user. Instead they verify only that the request came from the browser of an authorized user. Because browsers run code sent by multiple sites, there is a danger that one site will (unbeknownst to the user) send a request to a second site, and the second site will mistakenly think that the user authorized the request.

From: http://freedom-to-tinker.com/blog/wzeller/popular-websites-v...

Via: http://www.codinghorror.com/blog/2008/10/preventing-csrf-and...
And how many drives do you have, and how long have you had them? In the last 15 years I've probably had 20 HDD's fail out of 150 total. There was a particularly bad period where I was dealing with about 15 Dell laptops with 1.8" HDD's. Many of those drives failed, some repeatedly. Bad enough that I was buying 5 drives at a time until we could replace the computers.

HDD's from every manufacturer can and do fail at fairly high rates.
I think is depends heavily on what you're doing and your mental work flows. Personally whenever I use OS X or Windows I feel a tremendous decrease in UI bandwidth. That said, I only use a very tiny portion of the Linux desktop. If I was primarily doing mainstream activities instead of server side software development, I'd probably switch.
This sounds like a really cool enterprise. Could you share any details of the technology involved?
Yes and Google has 'throw 1;' at the start of some of their files IIRC (may be some other value than '1').
Looks nice. I'm not a big fan of "gamification", but at least it's well done.

I didn't notice any "if we forget to tell you something it's totally your fault and you can't sue us". You may want to fix that.

"Challenges completed" and "Badges" overlap for me (FF4).

The "questions" tab is very inviting and easy to use. I'm not sure how much support you plan to give, but there's no indication that it's paid or limited to, say, 5 questions per customer.
I haven't seen that they aren't.

That, and you never own a MacBook Air more than a couple years, because Steve Says To Buy A New One Then.
You should never be eval()ing json, thats the most dangerous thing you can do with it. All browsers have had native JSON parsers for years, which will choke on any code that's sent through them. These will be automatically employed by any js framework you're using, or I think its generally JSON.parse().

By eval()ing your json you are doing most of the attackers work for them. All that stuff in the article about mime types is redundant if you're eval()ing your json.

Basically, don't ever eval() anything, in any language.
It is true that a contractor generally retains ownership in any original work of authorship but AOL, in paying for the work, would get an implied license to publish that work as intended by the contract - that is its point in paying for it (much as any website owner who might fail to secure copyrights from a contractor who does work for his site, though he may not own the rights or be able to prevent the contractor from re-using the work elsewhere, nonetheless may use it for his own site in having paid for the work for that purpose). Thus, A DMCA takedown notice could not be used to remove any of the articles.

Contracts of this type also would normally be expressly framed as work-for-hire contracts and would also provide for the assignment of all rights to work that did not technically meet the criteria of works made for hire. Such clauses are valid and enforceable and are indeed a staple of every tech developers invention-assignment agreement. They apply with equal force to works of authorship by an independent writer. Assuming the contract here is so framed, AOL would own the copyrights in the works of the author.

The employee-contractor question, on the other hand, is a tricky one. This is a murky area but one where, generally, the lower the skill level and the more the worker must abide by company-defined procedures and schedule in how the work is done (among many other factors), the greater the risk of being classified as an employee. Many writers work independently with no risk to anyone of their being treated as employees but the AOL situation described in this piece might be vulnerable to audit risks owing to its assembly-line aspects. Hard to say without knowing a lot more detail.
I imagine you can still attempt to sue them. However, yhe person to cast the first stone would probably incur the wrath of Anonymous or some such.
While I generally agree with your sentiment, I was merely writing a brief proof of concept test in the firebug console.

From: http://www.json.org/js.html

"The use of eval is indicated when the source is trusted and competent. It is much safer to use a JSON parser."

FB is still using eval() if you look at their code. As the source of the JSON is their own service, and they can, therefore, trust it assuming proper sanitization; the same applies for my test case.
if you are using chrome always use this plugin http://goo.gl/AJ752. although it doesn't help within a browsing session it can help if you want don't want to manually delete cookies or use the safe mode of the browser.
Come on, what are you actually trying to say?
Why does development on windows suck? For the most part, development on any platform (windows, osx, linux) seems to be about the same. Its the other stuff that can get annoying; mostly driver issues I would guess. But again, that's something that isn't a challenge on windows anyway?
If you have Gunicorn crash please make sure and report any tracebacks in the logs to the issue tracker so we know that's something is broken.

https://github.com/benoitc/gunicorn/issues
We built a "password strengthener" the other day. During the analysis phase, we ran our passwords database (~10M accounts) against a dictionary. We wanted to do this to ban the top ten most common used words among other things. The results beyond top 10 were completely different than the ones pointed here by the OP, the first 10 were almost exactly the same.

My take is that this depends considerably in your target audience, I'm not disclosing which team I'm a member of, but if you run the same analysis to come up with ideas on how to enforce users to chose better passwords, you'll see how different the result are going to look.