skysight-inc/HackerNews huggingface dataset:
320kBit ones works fine (the max for MPEG1/2 streams.)

We did most of the work during and after Music Hackday Berlin (and it was continued at MHD Barcelona) and just staying awake was quite difficult, but porting much of the low-level bitfiddling and pointer-stuff to javascript was hard because of language differences, but also converting a fixed-point library to the floating-point that is available in javascript was a bit of trouble.
Amazing. This would be so useful in the morning - read stuff on your computer, take it on your phone on the bus/subway to continue reading, and then throw it up on your screen at work. They should call it "torch" or something like that - feels like you're passing the olympic flame between devices.
Techtra, techtra read all about IT
Yep, it definitely should be making reference to the IANA registry (will likely do this by referencing Web Linking RFC5988).

The point here was not to necessarily invent new capabilities, but to take a unique position in its design and bring together the most consistently useful assets of existing types whilst filtering out the noise.

It's much healthier for the web than just returning plain JSON/XML or a custom media type.
Somehow, this made me think of the Baby Translator from the Simpsons
India's $35 tablet ready to ship
Review my startup: ShowMetheLove.co - Quantified Self for Love
Look at:

1. Cross-site scripting (XSS -http://en.wikipedia.org/wiki/Cross-site_scripting)

2. Cross-site forgery (http://en.wikipedia.org/wiki/Cross-site_request_forgery)

It doesn't necessarily mean the attacker has compromised the server, but they may have been able to post code to a page, e.g. through a form posting.
From the Firefox 5RC1 release notes:

> Background tabs have setTimeout and setInterval clamped to 1000ms to improve performance

As far as I'm aware, Chrome does this also but I'm not sure what version it was introduced in.
I like how PG surprises the male interviewer with his non-traditional filters for good investments.
Fed judge orders ISP to release names of online commenters who slammed retailer
I catch the irony, but I'm not confident that it really contributes to the discussion here. Look at the comment thread it's produced: practically nothing of any consequence or interest.
If the site isn't loading for you (I was getting nginx errors for a bit before it finally loaded for me), here's the github repo: https://github.com/nddrylliog/jsmad
Google Tech Talk - Engineering Data Analysis (with R and ggplot2)
Experience != skill. You can spend 10 hours a week doing project euler questions, or hacking together whatever CRUD app sounds cool. But that doesn't automatically increase your skill at all.

Sure, the more time you spend practicing, you will likely be better than had you not spent that time. But to compare it across people is meaningless. There are countless numbers of those who have spent decades in the grind and aren't much better than they were when they started. Compared to someone fresh out of college who can code circles around most.

Experience itself means little, if anything at all.
RIM May Be In Serious Trouble
The site covered a lot but there were a few things I think it failed to cover in all this hunting for a cofounder. What value was he bringing to the table beyond the idea and outsourcing for those he was willing to vest as a true cofounder or even early engineer with or without salary. The biggest thing most tech guys want is a competent cofounder. While he did mention he tried to pick up some technical stuff, there was no mention of any other businesses skills whatsoever i.e. legal, hr, marketing/distribution, etc etc etc... about the only thing he mostly proved is he can't retain talent so hiring and recruiting is probably not one of his strong suit.

There's also no talks about the process to which he determines how the product works (essentially product management, UX, etc..) for all the stuff he's outsourcing.
That's my take too.

The remaining question then is just how far the reach of the GPL is in the context of a javascript library. Just the javascript that actually calls the code? Everything else called from the same html page? Everything else on the same site?

It's a shame the history of libmpg123 is so clouded: they've made a good effort to contact all the previous developers to get permission to LGPL the library, but they haven't been able to reach everyone so there are always going to be lingering doubts.
Just upload your text file again.
How is this different than Adobe Reader, where the ability to execute code within a document reading application has resulted in world wide exploits of operating systems?

If my document reader can execute any code in any language, then any document that I read has the potential to execute malicious code on my computer, and I now have an exploit vector that I need to consider when downloading documents & opening e-mail attachments.

I understand that the code can be sandboxed, but before I implicitly trust the sandboxing technology, I'd have to see an example of an unexploitable sandbox. I don't know of any - but that doesn't mean they don't exist.
Been playing 320kbps Stereo flawlessly afaik. The bitrate is really not much of an issue.

Browsers have a much harder time dealing with binary XHRs, huge typed arrays, huge strings, and a real fucking lot of arithmetic operations.

I think the most difficult part was the debugging. Jens Nockert, Matthias Georgi & I finally used node.js and carefully diff'd the output from minimad.c (the canonical libmad example) and jsmad.

However, it quickly became obvious that comparing exact values wasn't going to cut it. Listening was also almost useless (try to debug when all you have is SCRRRCHHHHHH vs CRRRRRRKKKKKK). So we plotted graphs. With gnuplot. It was a matrix-like experience but quickly allowed us to see what was wrong.

Profiling the code via Firebug made us realize that most of the time (~28%) was spent in the synthetizer (synth.js). The I/O code is particularly expensive too, it's a mix of Uint8Arrays and javascript Strings, depending on whether you're using the local file version (filestream.js) or the http streaming version (ajaxstream.js)

One of the funniest part was when I had to code 36-bit precision integer routines in Javascript such as shifting, OR-ing, AND-ing.. I had to separate the numbers in a low word and a high word and then work with floats (which have a 54-bit mantissa in JS).

Really quite an experience!
Totally, and thats pretty much all that can be said. If you program more, you're likely going to be better than had you not (by how much is another question).

Using this as a way to compare different people, on the other hand, is foolish. Just spending time coding is going to do little to improve your skill assuming you're past the stage of just starting out. It's how much you're challenging yourself, and how you handle that challenge that makes a difference.
Mobile Couchbase for Android Beta
ZeroMQ Pub Sub: How does it work?
Not necessarily more traffic, though that's possible. More likely it was the fact that it was coming from multiple IP addresses.
Getting a little tired of "former entrepreneur" professors like Steve and Vivek playing the wet blanket in tech. It's too easy to be negative, especially with the first dot-com bubble so fresh in our minds. It's a lot harder, and more rigorous, to be positive in a frothy market. You have to be smart about it, but you still have to be in it.
The NSA Releases Over 50k Pages of Declassified Documents
edit: less spammy link.

http://blogs.forbes.com/ericsavitz/2011/06/17/rimm-miserable...
They seem somewhat clueless..

If the NSA can partner with ISPs to scan internet traffic for phishing, viruses, etc ...the obvious next step is Lulzsec mentions or member mentions...in IRC, email, etc..

There is no such thing as hiding when attacking the internet, sooner or later you become the bitch
I agree with showing how poorly secured websites are and how easily our information is distributed even when we think it's private.

What I don't agree with is their use of DDoS attacks against sites like cia.gov.

DDoS attacks are pointless. All they point out is how a site has limited resources for dealing with so many concurrent connections.

Sites should deploy onto an infrastructure they feel is adequate to deal with the expected load plus some additional room for growth and spikes.

I'm sure the cia.gov doesn't get hit very hard on a normal day so they didn't go crazy on infrastructure which is understandable. A DDoS proves nothing and prevents people from accessing data.

If you're going to hack, please wear a white or grey hat.
Yes, we're running this on a node.js+nginx VPS and you guys are MURDERING it.

That's great news though! Bear with us as we try to handle the traffic :) And reload from time to time until it works.

Edit: all static assets are now served by nginx, and the default track is cached on our server instead of being proxied by node.js all the way. Wish we had CORS at official.fm!
>People who can make things work better within this rectangle have power over others; the whitehats who charge $10,000 for something we could teach you how to do over the course of a weekend, providing you aren't mentally disabled.

This is a common complaint among blackhats: they see whitehats as being in the game for the money and taking advantage of the unenlightened as much as they [the blackhats] themselves do.

I don't really know what to make of it.
Yes, you are correct. This seems to be the flaw in the design then , i.e. no organic relationship between the two clusters except the arbitrary golden section boundary.
Personally, I could go for less 'cool' on HN and more clarity and accuracy instead.

'Show HN: roll.io plays youtube videos searching list of text. Useful?'

That aside, neat app. It's a clever tagline though.
What is Next for RIM?
thus the title: beating a dead horse :)

the talk was for last year + mba students at HEC, and most of them never started / worked at a startup.
Did you intentionally take a stab at Atwood's law?
It's harder and more rigorous to follow the herd in a "frothy market"?
Microsoft Makes It Easier to Hack the Kinect
Having the database make checks to ensure that invalid things aren't happening is a lifesaver against coders making a stupid mistake

------------------------------

mongo now has a 'safe mode' option that protects against this, just FYI
Presumably they have. But given the number of times Safari has been remotely exploitable in the past, that's not necessarily reassuring.
*52 Bit.

And I agree, debugging it was a special experience.
A Black Hole Scuttles a Star
Great mini-doc and great subject matter. Thanks for posting.
Why, is the risk somehow greater ?
I'll dig up the mathematician in me and answer to a generalized version of this question:

"Are you aware that this is probably one of the most inane use of Javascript and did you do it to piss people off?"

To both questions the answer is: Yes, absolutely.
Every 60 seconds on the internet...
Doesnt work for me (no audio): Chrome 12 on Ubuntu 10.10 64-bit
Youtube is playing fine.

Here's the Chrome debugger log:http://pastebin.com/MwqfD1K5
I'd change the name, thought it was a site for meth addicts initially.
When Anonymous attacked Visa and Mastercard via DDoS (in retaliation to them cutting off Wikileaks donations), Anonymous did actually succeed in stopping the online verification systems for both companies (SecureCode, or something, and Verified by Visa). In that case, the DDoS attacks did more than just take the site down; they financially hurt their target, which was probably the aim to begin with.

I'm not justifying the attacks and I agree that they are the wrong way to go about this business, but it would be naive to suggest that the DDoS attacks are a minor inconvenience.
Storyseller: Profile of Bestselling Self-Published Author Amanda Hocking
Creating a new web app: announcing EasyEmailProtection
Apple has announced that, for now, WebGL on iOS will only be available to WebKit when it's displaying advertisements through iAd (where Apple controls which ads are distributed), and not to web pages generally.

http://www.theregister.co.uk/2011/06/16/webgl_in_ios_5/
The free electrons in a conductor move at nothing near the speed of light, though.
Hi everyone, blog post author here. If you want to ask or suggest anything, I'm all ears :)
Should you trust a startup?
Bertrand Russell: In Praise of Idleness
It'd be neat to have a overview of the different 'modules' in play and what they do (either in the README or a separate wiki page). Great stuff!
A Fathers’ Day message to Sir Tim Berners-Lee
As the father of the World Wide Web, we think you deserve a Father’s Day message. After all, anyone who’s ever clicked a link, typed those three famous W’s, or even just seen a video on a friend’s screen is, in some way, your child. This, therefore, is a tribute to you, your web and everything we’ve managed to achieve with it.
You could use the HTML5 History API to remove these query strings once Google Analytics is done using them. (This example assumes you'd never want query strings, but could be refined to just remove utm_* query strings.

if (window.history && history.replaceState && location.search.match(/utm_/)) {
var check = setInterval(function () {
if (document.cookie.indexOf("__utmz=")!==-1) {
history.replaceState({}, "", location.pathname); //assuming you want no query string
clearInterval(check);
}
}, 500);
}
But clearly that's not what they want to do, they're not claiming that their intentions were moral or ethical, just that their having fun happens to have some arguably positive impact at times.
Part of me feels that the publicity side of their argument is a little overblown. Many people do publicly disclose exploits, it's just that LulzSec has made a huge deal in the media about each one.
Another part of me is happy to see them call people out on their abysmal security practices. Sony would not have upgraded/redone their security practices had there not been attacks. The only thing worse than poor security is having a false assurance that it's good.
On Minecraft and the Launch of Project Remarkable
WOW! I had exactly this idea at a Hackaton festival called Codebits in Portugal in November last year and presented it[1] to the audience but didn't receive that much excitement from them about my implementation done in 12 hours using JS and Rails3.

Now I see I should have stick to it. Deep inside me I knew if the service would be useful to me, it would be to some other folks, but I was a bit disappointed and didn't correct the bugs that the project had.

Here is the website if you guys want to check:

[1] http://youtubemyplaylist.heroku.com/

It is buggy, sometimes doesn't change to the next video and it lacks the controls and the display of the playlist as this site does and it is a lot slower. It also lacks the upload of a text file. But I had other ideas in mind, the mode implemented was supposed to be the "feeling lucky" mode, where you just typed each video one per line and hoped it would match to the video you wanted, but you'd also have a way to create playlist more carefully by passing the exact urls of the videos you wanted, like this site does.

How do you overcome this feeling when you know you should have sticked to your guts?

Anyway, good work guys! This is exactly what I wanted.
National team soccer jerseys
We have the newest all national team soccer jerseys, you can find National Team Soccer Kit for your favorite team, or have a World Cup Soccer Jersey designed by different countries! Start your shopping for wholesale soccer jerseys now!
No, it does not work in Chrome yet, only Firefox 4+ (or Aurora etc). But it is on the roadmap.
Yes, as said in the README, the audio output doesn't work on Chrome. I have no idea why - audiolib.js should support it. Maybe we're just using it wrong?

If the audiolib.js dev is here or anyone else has a clue, it'd be very welcome.
Vittana and Kiva are both arguably startups (the former certainly-- they are young/small and enjoying epic growth).
.... they (are|have) signed with Warner and Atlantic. Doesn't get much more mainstream than that.

REF: http://en.wikipedia.org/wiki/Death_cab_for_cutie

Regarding the _USEFULNESS_ of this: low. Regarding the entertainment factor: pretty high. I could use a m3u-> txt parser to dump a huge load of youtube videos and make a "music video playlist" -- kind of cool.
Use HTML5 History API to remove GA/Urchin tracking URLs after they're used.
Final Jeopardy and the Future of Watson
I'm having one right now. I've been trying to deploy a Rails app for the past 3 days. It's ready to go live, I've setup the landing page and signup forms, now I just need to test connections. I finally reached my personal EOL and contacted support yesterday but I haven't heard anything back yet. We will see.
I'm getting lots of 404s on your site - might be worth removing a few links first :)
If we could find a way to increase the audio buffer size in audiolib.js (the refill buffer it's giving us pretty small although we have a big preBufferSize) it'd probably be enough.
DDoS's have a monetary impact, yes. However, what the parent is saying is that all infrastructure has limits in terms of bandwidth, etc. The point is that it's not the same class of "attack" vs. finding an exploit. The latter is more in line with the "strive for more secure sites". The former, not so much.
Earnings were announced yesterday and they weren't great.
http://blogs.forbes.com/ericsavitz/2011/06/17/rimm-miserable...
Side projects are not a matter of "having an unfulfilling day job". A side project is simply scratching an itch.

That itch could be something that bothers you, or it could be simple curiosity.

I have a very fulfilling day job (I'm a co-founder of an awesome startup, which makes it more of a fulfilling day&night job), but that doesn't mean I won't explore other things, try out new technologies, find something that sucks and make it better, latch onto an idea and build it while thinking "how hard can it be?" (Answer: it can be VERY hard)

Side projects are an outward expression of people who are hopelessly creative and just can't help themselves. The CONTENTS of those side projects demonstrate how organized, focused, and disciplined they are.
What an inspiring undertaking. I hope to visit the project when it is complete as it is only a few hours drive from where I live.

Favorite picture in the article: Stuart Brand standing in front of the 8-foot replica wearing what can only be described as a Tibetan Monk's robe / Snuggie hybrid. He looks like an old, very comfortable wizard.
Blackhats can cost organizations way more than whitehats would charge in operating costs, personal identity theft, and reputation.

Whitehats are only taking advantage of the unenlightened as much as a mechanic is taking advantage of someone who doesn't know anything about cars - they provide experience and expertise and offer a service for a high price - at least, a higher price than if the client knew how to fix it themselves.
Mozilla's audio API allows for more control than chrome's latest stable. If you're using the latest snapshot, it should work.
I think Steve is on the money with this article. In particular, with this key proposition:

"The issue is whether the next 100+ tech IPO’s carried by this bubble will be worth their offering price in 8 years."

Ask yourself that question. We're going to see a lot more IPO action, and 8 years from now, I think many will be gone.

As an aside, I strongly recommend Steve's book "4 steps to the epiphany." It's the equivalent of a graduate school level course on entrepreneurship.
Brainscape just released an app that helps you memorize your Git commands
Just a question: if all they were doing was manipulating URLs (and I know they've moved beyond that) would they be doing anything illegal?
Please review my site - Goaltastic
Ah, thanks. Sounds like a good weekend project to see if it can be done. :)

I think I'll add it to my list in case nobody else does it.
There is a need to develop systems that aren't subject to DDOS (at least the current generation). It used to be very easy to DOS anyone's network stack (think SYN flooding). If people hadn't shown that it was an issue by doing it, the Internet would still be running on stacks that were trivial to undermine many different ways. Saying that something is easy to do and has a tremendous impact is an engineering problem statement. Demonstrating it shows that it's also a business problem. This is how things get fixed, when people get tired of being instantly knocked of the Internet by .4% of the LulzSec DDOS capacity. The Internet still has some basic problems, ignoring them won't make it go away.
I know how you feel man, almost the same situation (no kid yet). My wife is finishing her Masters, I figure once she's done with that and has a secure job, it might be time for me to try something. It's risky but right now we make it with one salary. We've talked about it and she currently says that since I helped her with her dream she can help with mine. I think it's a fair trade.

But I'd be stupid enough to go for it now. They can come after me for all I've got and get pretty much nothing. In the end if you don't make any income, they have nothing to garnish. Naive view of things for sure.
Well, hosted payment is not a new thing at all - so you iframe or link to a page you don't host which the customer uses - thus ensuring that card details don't hit your servers and don't give you a PCI surface.

This is a fairly logical extension, I would guess that the reason it hasn't caught on more is because a JS requirement has typically been a red flag in e-commerce - 3% of users not being able to pay you once they got to that point of a funnel could be seen as disaster. Interesting, because we're looking at mandating JS in our new developments (background: company I work for does a lot of high end e-commerce - we're specialists).

In theory it's a good idea (that side of it at least) but I don't know how security perception and customer acceptance rates will go.
How game developers can predict behavior patterns through rewards
The method of sending data back to the computer shown in the video is almost more impressive.

I've often found that it's easier to take a photo of event information on a computer screen rather than try to enter the information in my phone some other way--which always struck me as "wrong". The method demonstrated seems like a useful way of extending that action.

Another article on the same work: http://arstechnica.com/gadgets/news/2011/06/deep-shot-uses-c... (via http://news.ycombinator.com/item?id=2665639)
Yes. If I leave the door to my house unlocked, it doesn't mean that it is ok for you to come in without my permission.
Another article, video and discussion: http://news.ycombinator.com/item?id=2665417
It's easy to throw out numbers like 8% until you realize that it represents over 100 million people. Per capita that may be a small number, but in the general scheme of things it means a lot of disgruntled people. I never really thought about it until I went over there and had the chance to interact with various groups, and it changed a lot of my perspective on how China functions on the inside.
Dwolla - online money without plastic cards
BostonRB June 2011 Presentation: MacRuby [Videos]
Like an overview of all the different parts of the decoder?
Any comments on its success?