skysight-inc/HackerNews huggingface dataset:
The biggest problem with google instant isn't the flickering or any of the issues the author of the post addresses. It is with general usability such as using the back key(sometimes it works, sometimes it doesn't), freezing of the screen for few moments and general instability it causes with the workflow.
My bad, I thought the timestamp was being inserted into a form ala Rails' authenticity_token method in a way that would allow it to go stale if a new request was submitted in a new tab.

Although this makes sense, I feel it is not as safe as double submitting cookies, which effectively creates pseudo-random requests, but should still be safe enough in practice.
I just looked at analytics of one of my relatively popular non-tech site, and here's the breakdown:

FF: 36%

IE: 22%

IE8: 61%

IE9: 21%

IE7: 13%

IE6: 5%

Chrome: 21%

Safari: 12.6%

Opera: 6.6%
Ask HN: Your opinion on Kickstarter as a source of initial funding?
My brother and I are currently working on a browser-based MMORPG and today he turned my attention to Kickstarter (http://www.kickstarter.com/). I was wondering how the VC/startup folks feel about that approach, assuming the initial capital needs are relatively small and growth is expected to be as organic as possible. Anyone on HN have experience with Kickstarter? Can you share your thoughts?
The OS presents a view of a flat memory space to userspace processes, but it's not real. Memory is really segmented into 4 KB pages. Every time an application accesses its flat memory space, there are layers of indirection to trace before winding down to the real, physical page.

The system has a cache to store the indirection results, so that memory within a cached page can be accessed quickly, without tracing the indirections. Unfortunately, on x86 systems, this cache of indirection results (the TLB) is very, very very small. One way to stretch the TLB is to allow the indvidual TLB entries to handle more data by increasing the page size.

With transparent hugepages, if an application requests 32 MB of RAM, the system can allocate a single "hugepage" of 32 MB. That "hugepage" occupies a single entry in the TLB, instead of thousands of 4 KB pages. Fewer entries eaten means fewer indirections traced when multiple processes are competing for resources.

In other words, memory access under contention is faster and context switches are less expensive when you have transparent hugepages enabled. That's a big performance win for virtualization hosts, because they are likely to experience a lot of contention.
The content of this post doesn't live up to the title ("The Economics of Trust: Dr. Elliot Jaffe"). TL;DR: "Large companies are the safest place to store your data. They have an economic incentive to maintain your privacy."

Unconvincing.
How Bitcoin can help drive international trade
Obviously, this will take off only if there is a need for it, just like anything else. If Governments keep censoring more and more of the Internet, people will gradually move to this type of networks, and as scale is built, services will start appearing on them, too.

What you're saying is also a typical "the incumbent's product has more features than the new disruptive product", but that usually doesn't stop disruptive products from taking off, because they fill a different need, and they're much better at certain things - in this case at ensuring you don't get censored, that your data is protected, and that you can be anonymous.
TechCrunch: Web of Games
Well, fire can. Which is why you need multiple off-site backups for important data.
There's really nothing that makes me feel more well-adjusted and self-confident than regular exercise.
I find it very irritating for precisely the same reasons. The general instability caused by the momentary screen freeze and the breakage of back button(when all the hacks don't work) is extremely annoying. I was literally banging my head against my desk yesterday until I finally found a way to disable it for the duration of the session(no way to disable it forever).

Really for me it is trying to solve a problem I never had. I am not outrightly against making things even better than they are - but in my view, the solution has to be better without debate. The fact that there is a very proactive debate against Google Instant tells me it is far from being the finest piece of work by Google. Considering search is the heart of google, Google Instant should not have been pushed down our throats. It is at best something that should have spent a few months in Google Labs.
World s Cheapest Tablet Computer | FAQs | Features | Price
Sakshat - Get to know about its price, features, specifications and functions. The set of FAQs provided here will clarify all your doubts about the device.
JS is adding limited static typing in typed arrays: https://developer.mozilla.org/en/javascript_typed_arrays
Socialize wins Disruptathon
There are quite a few different projects out there. Ultimately, the one that gets the most adoption, will win. Hopefully, that one is also the best one, but as it becomes the defacto mesh technology, more and more people will join to work on it, add technology from other projects, and improve on it. So let it be chosen through natural selection.
Another real-world example: SMTP vs QMTP (http://cr.yp.to/proto/qmtp.txt). IMHO, saving space by packing bits is not really so important anymore since nearly every link has high-bandwidth. Reducing latency by reducing round-trips is huge though.
If you're doing simple digital work, you can get a hell of a lot of functionality for a lot less.

I'm a huge fan of the Saleae Logic (http://www.saleae.com/logic). It does 8 lines of digital scoping @ 24 Mhz PLUS protocol decoding (I2C/SPI/CAN/Serial) for under $150. That's 5% of the cost of a Tek or Agilent scope. And the GUI is lightyears better than those other companies.
What is still done in ASM

Code that needs to be fast?

Intel, ARM, and other chip designers dedicate huge chunks of their chip to vector SIMD processors for a reason. SSE, Altivec, and NEON assembly implementations of DSP functions can easily be up to 40 times faster than a naive scalar version.

And even if you can't take advantage of SIMD, a competent programmer can almost always beat the compiler on small critical functions and loops. Doubly so on architectures where compilers are typically terrible, and instructions are complex and individually very powerful (ARM). Triply so in cases where the compiler simply won't "do the right thing" no matter how much you nudge it, such as aliasing and unpredictable branches.
chuckle I was expecting the indignant Apple downvotes =)
Thanks. I was wondering how many US gov departments were using the same initial.
Http://www.tvquran.com/Al-Ghamdi.htm
The NY Post, the iPad and the web
Rexpl - an interactive bytecode console for Rubinius
If you double submit on each request, this will double the number of requests on your server and reduce your server's capacity. And isn't all JavaScript subject to being subverted in XSS attacks, thus potentially rendering it ineffective?
Thanks to Firefox, many users are now aware of and looking for "a better browsing experience", which IMO helps a lot in Chrome's adoption rate.
Ignoring all the other problems: where is the uplink? Are you really going to try to get from, say, NYC to Mountain view over this network? (Nevermind crossing any oceans...)
i've been working on the same thing. if you want to compare notes or share progress, send me an email: mark@markpneyer.com
I do sometimes, if there's a site or a page that I've been to before, but can't remember the URL, but know that, for my search term, it will be the first result. A quick "tab, tab, space" takes me to that top result, nice and easily.
But due to the spatial nature of the mesh networks described, either the networks would require wifi to span cities and states or each cluster would need their own set of services? If that's the case, it's not really the internet as we know today?
Zed, I am also trying to learn Haskell and I must admit I have a hard time with it, so I am kind off jealous about you finding it not too hard and having the ability to learn so fast. Even though I used over 5 languages in the last 20 years, for me Haskell is so different and difficult, that I find myself put back to when I was 16 and learned the first language - C on MS-DOS. Still I find Haskell attractive and I hope I will be able to "tame" it. I am facing difficulties with all the terminology which seems strange.

I started with the book "Real World Haskell" (http://book.realworldhaskell.org/) which I find very good, but I got stuck after chapter 5. Then I discovered the Channel 9 lectures "Functional Programming Fundamentals" and I started to watch the videos. It helped me to grasp some of the terms and some of the beauty. But only at the 11th video (http://channel9.msdn.com/Shows/Going+Deep/C9-Lectures-Dr-Gra...) I got kind of hooked. From this point on I started writing my own programs.

From every programming language I looked into so far I still find Haskell to be so different, unique and at the same time beautiful - nothing I had experienced since the first language that I learned.
All these presentations about optimizing JavaScript are making me think there should be an alternative to JavaScript, especially if we want to move a bunch of software to the browser. Is this really not feasible?
The (lack of) security at PayPal
Continuous innovation. Your competitor might copy tomorrow what you have today, but they're not going to be able to copy what you have tomorrow.
a similar project was born in 2005 actually ... http://netsukuku.freaknet.org/?pag=faq
In the past I had tried to keep up with job postings on HN in my weekly Hacker Newsletter, but starting with the past issue I'm just going to use this. Good work!
APPOWS 2010 For Window 7
INCLUDES:
explorer.exe
explorerframe.dll
visual style
black style
Like, say, http://fon.com?
Note To Self: Assume No Privacy
I'm not sure if sending S.W.A.T.-like team to "investigate" is sensible.

The U.S. managed to investigate things by sending detectives for a long time. Other countries seem to manage the policing without the need for equivalent of S.W.A.T.

S.W.A.T. teams are equivalent of Special Forces in Army. They are armed with extremely dangerous weapons and highly trained to kill. You're only supposed to send those people when there's a reasonable suspicions of armed resistance, not on routine investigation of white-collar crime, just because you can.
It wasn't edited.

I'm not sure why 18pfsmt is overly sensitive. Maybe he subconsciously feels that his new techniques are inferior to proven approaches, and exhibits this through outrage?
An idea: when using session-based authentication and returning JSON, check that the Referer [sic] matches your domain. I think I'm missing something major, though.
The Django "{% csrftoken %}" that you put into forms (and similar things in other frameworks), is used when posting form responses. It turns into a hidden form field (<input type=hidden>). This helps protects against someone creating a form on their own malicious site, that posts some data to yours.

This attack mentioned in the OP is effectively completely different. It is off a GET request.

Imagine you were running a social network site, and you had an API (authenticated via HTTP sesions) that was a GET request go get the firends list. This method returned the (logged-in) users list of friends in a JS array.

Note that Django-style CSRF tokens are not relevant here, as they are only for protecting POSTs.

The attack described in the post is using a script tag, and a redefined array setter, to direct a user with a live logged-in session on your site to it to fetch data.

So coming back to my example. I am a malicious hacker, and I can socially engineer an end-user to come to my site. I put a script src=yoursocialnetwork.com/get_friend_list. This will fetch the data, and I will be able to extract that info in my javascript, and then post that back to my site so I can capture that info.
Motorola Pro
1. You are inferior, that's a non-changing fact, so get over it. Everybody is inferior relative to somebody else, just as everybody is superior relative to somebody else; it's just how you compare people.

2. You will get better on what you do if you stick to it, but somebody else will be better than you no matter what; that is true for everybody else.

3. You will die someday. Everybody does.

4. You will die soon, as with everybody else.

5. You will surely die - everybody will. So stop obsessing on what you lack and make the most of the time left.
Simple hair styles
Busy women are bustling from work to house without having the time or the patience to do up their hair.
How many developers don't know how to touch type? Is this really a problem? EDIT: Even if you pass the hiring process I think you would get fired pretty immediately.
From http://www.codinghorror.com/blog/2008/09/cross-site-request-...

The HTTP referrer, or HTTP "referer" as it is now permanently misspelled, should always come from your own domain. You could reject any form posts from alien referrers. However, this is risky, as some corporate proxies strip the referrer from all HTTP requests as an anonymization feature. You would end up potentially blocking legitimate users. Furthermore, spoofing the referrer value is extremely easy. All in all, a waste of time. Don't even bother with referrer checks.
Amen: the world's most famous sample and the rise of the musical copyright
In an open market, some company could offer security as a service, that's pretty much the theory for banks.
The number of packages involved is a very poor measure of the effort needed to maintain a system.

Apache and more established technologies have had much more testing and are far more mature. Their releases are often much more infrequent, merely because most of the problems have already been worked out. Newer technologies, on the other hand, aren't in such a position.

Although your solution may involve a smaller number of packages, having to perform weekly or even monthly updates due to the immaturity of the software is much riskier and disruptive than having to upgrade Apache and a few of its modules once or twice a year.
"Also which of Javascript's abstractions are do you think are so inherently unsuitable?"

No, that's the wrong way of thinking about it entirely.

When you create a language, you must unavoidably privilege some ways of thinking and working above others. You must make some things easier, at the expense of making some things harder. There's no one set of answers that works universally.

Suppose I want to make an immutable language. Can I program Javascript purely immutably? Well... sort of. You can try, anyhow, but you'll get no help from the compiler, and any existing libraries will be all but useless, it's really a new language. Suppose I want to prove things in Javascript; with both mutable values and object prototypes that can be freely rewritten at any time, it's infeasible. Suppose I need C++; where's my private variables? Expressable? Sure. Useful? No; Javascript has made them much harder while working on making its object system powerful in different ways. That's not a criticism; a language has to make some things harder when it makes some things easier, to be a criticism I'd have to be calling it a "bad tradeoff", which in most cases it isn't.

It's not whether a thing can be done, it's how well it can be done, and Javascript isn't the best at everything. And "how well" something can be done matters, because the harder you make it, the less likely someone is to do it. No amount of theorizing how that doesn't have to be the case will change that.

There's nothing that any Turing Complete language can't do (with the proper hooks into the machine it's running on, anyhow), but no one language can be the best choice for everything. I wouldn't want to try to make an OS out of Javascript. Now, I personally wouldn't want to try to make one out of C particularly either, but Javascript would be even worse.

So either we lock all those apps out of the browser, or we make them much harder to write than they would be in a language actually suited to them. There's a time for C and a time for assembler and a time for Haskell and a time for C# etc. etc. Languages profoundly affect what gets written in them.
They are not stored in plaintext, but that wasn't the motivation for putting that item in the house rules. No matter how I store them I could still see them, and you shouldn't be trusting me (or anyone else) with the same password used on a different site.
Frankly I really like JavaScript. I don't want the language to change, even though it has its flaws. I just love the ability to have data-structures as simple as objects and arrays which have evolved into a standard data exchange format (JSON). Then you can also have functions inside objects and everything becomes really flexible and really easy to design.

I've tried many different languages, including the real pretty ones such as Ruby and Python, and I just have more fun using JavaScript because of how free-form it is.
I feel similarly, but i have also heard that there is some concern with the current generation of digital natives growing up with the presumption that they know how to touch type, w/o necessarily having gone through classes or the like.

I'd be interested to see if someone's done a survey on this.
Let's hope people use it then!
Thanks. I thought I was the only one with this experience.
سيريال برنامج UltraISO Premium Edition v9.36.2750
but it's not as though we haven't had the ability to
communicate wirelessly across large distances for many decades.

It's possible to communicate, but the question is of bandwidth. AMPRnet[1] has existed since 1970, after all, it owns the class A 44 netblock, but you're not going to be watching Youtube at 9600 baud.

1: http://en.wikipedia.org/wiki/AMPRNet
This is a great idea and your elevator pitch on hacker news is brilliant, except you should have said "text" rather than txt.

I assumed you meant you took a .txt file of text and extracted any and all videos from it.

"Show HN: roll.io eats text and shits relevant youtube videos. Useful?"

The proposition is so obvious you should just spell it out on your home page, like, have a text box with some pre-populated text and a big arrow that says "becomes" and then a playlist of youtube videos.
"I think you're confusing the Bitcoins' value with the value provided by the open source code implementation which has been open sourced."

No... no, I don't think so. You seem to be using "value" as a synonym for "property", which is not at all how I meant it. I meant it as, errr, value. Both the code and the BitCoin network have positive entries on their value balance sheets, but I don't know that their total is positive, or that it will be positive enough to work.
IANAL, but the patent, as I read it, if for a "A sleep mode indicator apparatus for a laptop computer, said apparatus indicating to users that said laptop computer being in sleep mode" or "A status indicator apparatus for an electronic device, said apparatus indicating to users of said computer a certain status". Since the cuff links doesn't communicate any kind of state, I don't think the patent applied. Copyright for the design sounds more plausible, as they're clearly designed to look like something from a Mac.
After briefly using IE9 after using Firefox and Chrome for ages, I felt exactly the same way. Not only was IE9 substantially better than IE7 and IE8, but some of the UI decisions seem better than Firefox. If its support for HTML5 and CSS3 have improved by a similar amount (I honestly have no idea), then we finally have three relatively comparable browsers.
In double cookie submission, you are not issuing two requests to the server, but rather using javascript to append the session id to either the post body or the URI.

Since the browser automatically submits the cookie via HTTP Headers, single submission by itself is not safe. Since a third party cannot read the value of the cookie, they cannot recreate the proper request and will, consequently, fail.

Of course, both our methods will fail under an XSS, but should still prevent CSRF. I still think a cryptographically generated secret stored in the cookie is less guessable than a timestamp.
It's actually really hard to get visibility of people for your Kickstarter project.
Seattlewireless.net has been trying to do this for eleven years. Progress has not been enormously fast.
Many non-touch-typing programmers type fast enough that it doesn't matter. They don't get fired because in the end, it doesn't matter.
Air Conditioning the Military Costs More Than NASA's Entire Budget
In 2001 the fictive persona John Titor (http://en.wikipedia.org/wiki/John_Titor) described the Internet of his future just like this.
What would you say if you found out a local dentist was molesting his patients while they were under on nitrous? He could be doing it right now, and you wouldn't have a clue.
I briefly played with Unity as included with Ubuntu 11.04 and felt that it was interesting, but unfinished. I find Gnome 2 very usable now, though it had rough edges for years. Unity is less usable due to its rough edges.

Distributions intended to bring new users to Linux might do well to focus more on testing than new features. I've been using Linux on various laptops for almost 10 years now and I don't want to deal with instability and broken things on my production machine. New users looking for an alternative to Windows will likely find the grass is not greener on the other side. I'm not talking about ugly UI or inconsistency. I'm talking about the fact that my Thinkpad won't suspend, that my sound sometimes stops working, that my notification icons for Skype and a couple other apps were 1px for over a month while the bug was well-known.

tl;dr - less development, more testing.
Kirill, come on! do you really need all these fb access rights to run your app?

"Access my basic information, Send me email, Post to my Wall, Access my data any time, Manage my advertisements, Access my profile information"

This is way too intrusive even to give it a one-time shot.
Thanks for the feedback.

1. We do have a pretty straightforward tutorial. Http://victorsunited.com/help/tutorial

2. We are working on a way to bypass the login/registration requirement for single player games. To be honest, the Singleplayer mode was something of an afterthought, and the SP experience isn't yet as polished as it should be.
Single company network requiring proprietary closed source routers? No use to me.
Even in the 'normal way' theft is not the same as taking something or copying something. Maybe a lot of interpretations of taking/copying are labelled theft; it does not mean the term theft is used correctly. In this case, I would argue that theft is pretty much equivalent to the legal definition.
I suspect they'll merge rather than compete.
AR won't catch on until we have light, wearable head-mount displays. Yes, I'm talking about AR glasses.

Until then, it's just too much work to make the magic happen.
It's probably worth clarifying here that touch-typing is different to typing-without-looking-at-the-keyboard-(much). As knowtheory said, many presume that they're the former, when they're actually the latter.
I'd argue that "copyright" isn't a natural right like possession of property, and therefore you really can't steal copyrighted material.

If I grab your book while you're not looking, and xerox a few pages, I've copied some copyright material. Once I put the book back, YOU CAN'T TELL I'VE DONE IT. That's unlike actually removing the book from your posession. You can tell I've done that.

If you can't tell I've done it, it isn't theft. It's something else. All the laws in the world don't make it otherwise.