skysight-inc/HackerNews huggingface dataset:
There are more "feature complete" products out there. People who use harvest (myself included) use it BECAUSE its simple, and doesn't require an accountant's mind to understand. Those people are freaky.
This is something that keeps coming up, so I made a blog post out of it to avoid writing out the same response repeatedly: http://mkronline.wordpress.com/2011/06/18/why-i-dont-use-lin...
Angel Investor Checklist
I think on a very low scale this is what Youtipit does(http://www.youtipit.org). People deposit their coins, tip them internally and this is handled by our bookkeeping system. If someone wants their coins out they simply withdraw them and the transaction goes out to the block chain. This has many of the advantages that you have stated (also tips are instantaneous, no need for confirmations)

If you give it a look I would like to hear your opinions on it.
SSDs aren't going to help you compile faster anyway... Other than network I/O, disk I/O is the slowest operation on a computer, speeding that up does speed up most operations for most people. Everyone is I/O bound all of the time.
Incognito windows share cookies? That doesn't sound right... I would have thought incognito would prevent CSRF.
You said it is "good hardware". Do you mean that the build quality is good? Is it on par with a MacBook or a ThinkPad? I have heard recently that their laptops are fairly plasticky and battery life isn't great either. Comments?
So a string of 24 carbon atoms is not 2 dozen carbon atoms long? Unit=dozen carbon atoms, length=2?
I have seen the light and been converted to the Church of SSD. The expense /is/ worth it. I routinely run Windows 7 and Windows Server 2008 (running Windows Deployment Server to reimage computers at different physical locations) on my Macbook Pro via VMWare Fusion at all times (in addition to all the other random apps I have open on the Mac). I haven't noticed /any/ performance penalties day-in-day out. Compare this to my previous Macbook Pro from three years ago, which begged for mercy booting Windows XP. Sure, I have more RAM and an i7 now, but it was always disk thrashing that killed me.... that's not a problem any more.
Really? You know, I'd consider MVC.NET for my startup, but here's a few snags I keep hitting. Perhaps you can provide insight in how to get around them?

- Cost. I have found no way to accurately estimate what the development and deployment will cost me initially, nor when I need to scale. BizSpark makes it affordable for a very short time all things considered, but it's really sorta like a free crack rock.
- Linux. I simply don't feel comfortable deploying anything publicly on Windows. It might be more secure now than in the past, but my experience is on Linux and I feel like it's a whole new world to come up to speed on the linux side. It's almost as if Microsoft should have a ".Net for Startups who are used to *nx OSes" class.
- Linux. I develop on and am most comfortable with Linux. I'd have a hard time spending my days on Windows 7.

Other than that, certain features of .NET do indeed look interesting. At least C# as a language has improved over its parent (Java).
امن المعلومات - Information security
امن المعلومات - Information security
I've lost 2 Crucial drives in 2 years.
further reading: 'Would it be more secure if API endpoints for Collections would wrap the JSON serialized Arrays inside an Object literal?'

https://github.com/documentcloud/backbone/issues/201

ultimately you should use tokens to verify the request was not forged.
Better Know your Wireless Router
Simon, slightly better memory usage in most cases. More so if you don't end up stripping out all of the Apache modules you aren't using. But it's such a small differences it usually isn't worth changing from what you know and are comfortable with.
This is good advice, but a non-sequitur in this case. This is not a code-injection attack, this is an information leak. It lets an attacker get around the normal constraints on fetching cross-site URLs. There is an EVAL happening, but it's being done by the attacker, not by you. And it's being done implicitly. The real problem here is a security hole in Javascript itself. It's too flexible for its own good.
I think you guys should look a little closer before writing him off.

He pumped the OS in one bit at a time using DIP switches, wrote his own hex editor, and then wrote his own assembler and emulator, in javascript/canvas: http://web.mac.com/teisenmann/iWeb/adeptpage/adept_compiler....

The OS code is here: http://web.mac.com/teisenmann/iWeb/adeptpage/DUO_OS.txt

Run it through the emulator, it works.

Definitely not just a bit of light soldering...
Yes.

My startup - http://www.motivapps.com/ creates a series of apps that inspire and teach people. For example one of them is a workshop for setting life goals, and another one is an app that helps people to write love letters.
Yes, incognito windows and tabs share cookies. The cookies are deleted once you close the incognito window of course and are not shared between the incognito window and the regular browser window. But as long as one incognito window is open your cookies are still there.

Edit: You can easily test this by logging into GMail in Incognito mode and then going to youtube/google maps etc. and notice that you're still logged in. Even if you open a new incognito window.
> OSX has terminal.app

In fairness it took until Leopard (as I recall) to support tabs and still doesn't support 256 colors. (It will in Lion apparently.[1]).

[1] http://www.apple.com/macosx/whats-new/features.html#unix
I agree that eval() is evil and JSON.parse() is the way to go.

However, in this particular case this doesn't matter much, because the site itself controls where to load the JSON from. Manipulating the JSON response requires access to the webserver or the DNS, and in those cases the attacker could have manipulated the initial HTML response as well.

> By eval()ing your json you are doing most of the attackers work for them. All that stuff in the article about mime types is redundant if you're eval()ing your json.

This totally misses the context of the article. The article is about CSRF. That is, the _attacker_ downloads and executes the JSON.

This is _not_ about downloading the attacker's JSON! It is about how to construct the JSON in a way that it is unaccessible through a <script> tag from the attacker's site.
Bearpaws boot on sale save to 30-75% off
If you are new to Bear Paw boots or shoes here is a quick summary.Today's cheap of bearpaw boot up to 30 - 75 % off sales !!!
Generally speaking, all incoming requests should be verified - authorized or not. These days with all kinds of wonderful web frameworks, CSRF protection is pretty simple. Django handles CSRF with a token in a hidden form field: https://docs.djangoproject.com/en/dev/ref/contrib/csrf/
How far should we trust health reporting?
Patience. Writing a good response takes a bit longer than downvoting.
For me it's mostly the ease (or lack of ease) of managing tools and dependencies. Homebrew, RVM, Pow, zsh, MacVim (or TextMate if that's your thing), et al. are amazing, not to mention all of the built-in packages.

I'm aware that some things are usable via cygwin, but in my experience it's a huge pain and doesn't work with a ton of stuff I need anyway. I really don't like spending time futzing around with things if I don't have to, I just want to be able to "brew install redis" and be on my way.
More information please, what specifically do you do for people who build websites to make our lives easier? Talk yourself up, it's OK to brag in this thread :-)
Shock sale Bearpaw boot  save price 30-75 % off
If you are new to Bear Paw boots or shoes here is a quick summary.Today's cheap of bearpaw boot up to 30 - 75 % off sales !!!
A Platitude on Software Failure
He's saying that from Windows, developing code that will eventually run on *nix, is tougher. Of course the opposite is true as well.
Good point. I have used it since 2005 (when my MacBook pro mobo cracked). And it works. I load up on ram and use virtualbox for those few things...

Using HP business grade laptops I have never had an insurmountable problem.
Tangential: One of my favorite pieces about simplicity, laziness, dogmatism and getting things done is from Mark Jason Dominus[1]. His context isn't connected to this at all (it's about when and whether to use shell commands inside Perl scripts), but the larger point is very relevant: taking "Do the simplest thing that could possibly work" seriously can have surprising outcomes.

tl;dr Sometimes ugly is elegant, too.

[1] http://perl.plover.com/yak/12views/samples/notes.html#sl-3
WebGL is OpenGL ES. The deprecated stuff in GL 1.0 is not present.

See for yourself: http://www.nihilogic.dk/labs/webgl_cheat_sheet/WebGL_Cheat_S...
Making so much money that the debt wasn't really a big deal...and knowing that finding more jobs that pay the same (or more) isn't really a big deal...not hitting a glass ceiling every couple years because I wanted to enter positions that required a B.S. and then an M.S., etc. etc. etc.
Any security researchers have link to a study detailing the prevalence of security lapses among a large sample of websites?

I hear about these attacks, and I'd be curious to know how vulnerable the sites I visit are.
Couldn't agree more. I am using Ubuntu for many years and would never ever switch back to Windows or OSX. Despite the many flaws, Ubuntu (on Gnome and now Unity) is still better.

But I would really really love if Canonical would just do one bug-patch-only release. Half a year of just fixing and cleaning up things would really help.

Unfortunately, I doubt that it will ever happen.
Everybody keeps talking of boot drives - and the guy in the video boots his laptop. Do you really boot often enough to make a difference?

I think I see my machine boot about 10 times when I reinstall Windows (used to be yearly 10 years ago, much less frequent now), then basically never, modulo city-wide power failures and stealthy Windows Update ninjas in the night.

Is it something peculiar to laptops, e.g. when you forget to charge them and they shutdown completely instead of sleeping?
A lot of smart people find themselves asking this very question, and they choose a lot of different answers :)

Anyway, I vote for something in Python with SQLAlchemy and either Werkzeug (maybe Flask, if it suits you) or CherryPy. Pyramid might also be good, but I haven't used it much. I tend to avoid Django because the ORM just isn't as good as SQLAlchemy, and the template language isn't as good as Jinja.

Not sure why everyone is suggesting the standard enterprisey platforms Java and .NET. You control the server environment completely, right? Go with a dynamic language for development speed, then. The big ones for the web are Ruby, Python, and PHP. Of those: PHP is a mess of a language with no big advantages; Ruby and Python are both great languages with all the libraries you need (probably :), but I give Python the edge because things in the Python world tend to have much better documentation.
Indian village rechristened after a daily deals site
UseTheSource House Rules
The Zen of Startup Maintenance
Well you get what you get in a free market; private companies/groups form that act as Consumer Reports. Still unregulated but then you have a trust network built up. Also, with more people entering and after this vulnerability has been exposed, there will be some more caution when using random websites.
What does transparent huge pages get you?
This felt like a TMZ piece, the only difference being that TMZ recognizes what they are, while TC tries to play both sides of the fence, depending on what they need from the post.

I fail to understand why anyone would take TC seriously these days, as there are much better sources of tech information where you don't have to worry about journalistic integrity.

I'm not a Facebook fan, but I don't blame them one bit. If MG is complaining about a broken unwritten rule of PR/Journalism, then he should realize that we don't care.
Overcoming isolation in a wired future
One of the interviewers asked me to name a software I used and liked. I said emacs. He then asked to draft a design of emacs on the whiteboard. First, a high-level design, then refine one of the modules, etc.

That's a fantastic interview question. Much better than the usual "solve this tiny problem in 20 lines of code on a whiteboard". After you've reversed the words in a string more than twice it gets a bit boring.
This question is an "eye of the beholder" one -- it's not only subjective, but oftentimes an equal number of people could argue that a startup does not improve or actually detracts from peoples lives.

Take facebook as an example. A lot of people would argue that it detracts from peoples lives (degrading the real-life experience of interacting with people), but a lot of people would also argue that it improves lives.

Now take finance. Forget about blankfein's "god's work" remark. In general, most parts of finance improve lives (though most HNers would disagree). Look at market making (providing liquidity for other traders). There's an intrinsic demand for liquidity from funds which try to manage an index, hedgers, and speculators. The goal of market making is to provide liquidity to facilitate those other traders. And yes, there's a small premium for the service, but the fact that the premium is shrinking over time reflects a lower cost for the rest of society.
Some Americans care about "buy[ing] American", but most don't. A prime example is the Japanese auto manufacturers taking market share away from American companies with better quality cars since the 80s, eventually becoming dominant.

Not to mention that the US isn't the only market for smartphones out there, so a large portion of the market certainly don't care if something is manufactured in the US.

Making quality software is probably the biggest opportunity for RIM right now, not the location of manufacture.
Changing Careers at 31
So you basically have an internal currency that just happens to be bitcoin? Kinda like when you store $$ in a PayPal account?
Twitter mood predicts the stock market [pdf]
Do you really think that desktop computers will become completely irrelevant? Are you talking about all sectors (devs, businesses + consumers) or just consumers?
Very good article - both Part I and II. I completely understand the feelings of the author and I appreciate his constructive advices after so much pain.

I am using/used Linux since '95. On my family's laptop Ubuntu 10.10 is still running, but I have the feeling it is the last Ubuntu version that we will use until the laptop dies - but I will not update to newer releases unless Ubuntu brings a desktop that improves usability without requiring 3D to work or Linux will get support for my graphics card, so at least I could try Unity. When we have to buy a new laptop it will be with Windows or maybe ChromeOS. I just do not want to go again through all the pains when choosing new hardware.

For my personal/professional laptops I switched to Windows 5 years ago. Sometimes I need Linux to test some development then I install a VM. No hassle any more. As I missed bash as well, I installed Cygwin.

I feel that additionally there are other world changes that drain the Linux desktop users:

1.) Desktops (no matter if it is Unix/Win/MacOS) do NOT matter as much as they used too.
Since the time when I bought a modern phone, I realized that I actually use the laptops only when I need to write longer texts or print out something. Browsing/mailing/chatting/playing/skyping is a better experience on the phone than on the desktop (on the phone however typing is really bad).

2.) Windows became much better (if you skip Vista) since XP.
My product (not a startup, and not a project, since 2003) http://www.devside.net/server/webdeveloper helps everyone get started with creating and developing (and hosting) websites.

I have people that don't understand what a file system is running an Apache, PHP, and MySQL web server, installing and working with WordPress, Drupal, Joomla, etc, with a few clicks.

I also have just as many professional web developers and businesses using the product.

It simply makes their lives easier. They get to skip the headache and pain of downloading, matching runtimes, configuring, setting up, creating virtualhosts, reading forums and blogs, etc.

There are free alternatives (xampp, wampserver, etc) to WampDeveloper, but I really don't compete with them in any way... Full control panel, 1 click website creation, local DNS, auto webapp installation, uses advanced features of the NTFS filesystem such as junction points and hard links, keeps Apache, PHP, and MySQL up-to-date, professional support, and quite a bit more.
If there was a mission already scheduled, the marginal cost of adding the vacuum cleaner is $1.
For this particular link I'm not sure I would have clicked it with the text you suggest. And I'm glad I did click it. But I agree that in the general case, titles on HN should be accurate rather than catchy.
Results from this paper seem to form twitter-driven hedge fund Derwent Capital Markets: http://www.bloomberg.com/news/2010-12-22/hedge-fund-will-tra...
People getting into bitcoin now are buying it because of it's decentralized unregulated nature. This whole p2p economy thing is very new, so you can't compare it to an established market like the US economy. It could easily be argued that market regulation doesn't add much value considering the constant and systematic recurrence of financial crisis in the US.
A very expensive way, though? My notebooks HD is 250gb, almost filled.
No - not true. There are glitches but none of them a dealbreaker. I am not a masochist - if it caused me pain I would have stopped using Linux on my laptop years ago.

Much of what I do is commandline. So a not atypical work setup is to have some kind of messenger, a browser, a terminal and thunderbird running.

That is 95% of my day and it works great. I would switch if it didn't. I am not trying to play the Linux version of the longbearded UNIX grump (http://dilbert.com/strips/comic/1995-06-24/) .

Really it works great and I would not willingly go back to Windows. And would grudgingly go back to MacOS.

I don't understand the flipside - why people complain about Linux desktop. You should make it work or go back to your OS of choice.

I get sucked into these articles because I think I might learn something or see something in a different way. THey almost always disapoint.
American economic policy: Running out of road
GO THE F**K TO SLEEP
So this book has been pretty much allover the place. It's been growing via word of mouth, and debuted on the NY Times & Amazon best seller list. I find it completely fascinating, it became viral so effortlessly. The most amazing thing is that Samuel L. Jackson narrated the audiobook for Audible.com. How cool is that?
Good question :) If you watch the resources/network tab under Chrome/Firebug you'll notice that decoder.js isn't used in the demo. It's my unfinished attempt to port libmad's decoder.c, so it still contains a bit of C code, I'm not even sure it's valid Javascript at this point :)

In the demo, we're replicating some of its functionality in https://github.com/nddrylliog/jsmad/blob/master/src/player.j... instead, although in a less robust way.
SproutCore 2.0 Beta 1 Released
I agree, and that is actually a similar stance to the one I took in the thread this is a response to. But the idea wasn't to judge whether someone is actually improving lives but rather to see if they feel like they do.

There are a lot of different takes on the idea of improving lives here, none of which are wrong. I was just curious to see how others looked at this.
This will stop embedding it in <script> but why couldn't the attacking website do the same with eval and substring?
Founding a startup? Maybe you should considere Morocco
What exactly is different between X11 emacs and win32 emacs? I haven't noticed anything significant.
Well, be sure to look at the Mono project. ASP.NET MVC ships with Mono, so a lot of it should work fine on Linux.
Indeed - but when I clicked the Readability button (it's a FF addon) the site was easy to read.
I remember a "joke" mathematical recreation in Scientific American years ago (decades ago), where they describe a computer found in the jungle, operating with levers and ropes.
"AOL has a plan. The plan involves the future;"

Okay, but the future has a plan. The plan doesn't involve AOL. This and the fact they refuse to cancel your account. What a pathetic company. Good job stockholders are dumb.

Every bonus taking banker raped the banks' stockholders. But nobody seems to care. Stockholders come bottom, behind customers, employees, and bigger creditors. It's not quite how capitalism was supposed to work.
Making assumptions here. Since yours is a "hosted" service, then your "enterprise-level" clients/users have no bearing on what platform you choose, right?. What platform do you have expertise in? Sounds like you already have something working on PHP, so I take it you know it already, on it there are plenty of alternatives to CakePHP, from Fuel, CI, Zend (ooh, enterprisey!) and others. Have you heard that Facebook uses PHP? Do you need to handle hundreds of millions of users? If not, just about any platform you choose and have in-house expertise in should be able to handle it.

Get the volume first, and when the platform becomes a problem, you should be really happy then, while crying all the way to the bank, worry about maybe hiring some experts in another, more scalable one?
Decryption
Decryption of external drive needed ASAP. Any takers?
DECRYPTION - Need help - any takers?
Ask HN : trying to remember name of open source project 
based in Finland which models bank/credit/money as network graphs.. uses java/javascript/canvas..
it was posted as a response to someone asking for what to do next as a beginner programmer.. does anybody know/remember ? thanks in advance
Is it bad if I have mixed feelings about this? With such skills, why not invent something new?

I think if I were to build some stuff from scratch, maybe I would try to build a gene assembler (whatever they called that thing, where you can feed a gene sequence into it and it assembles a real gene from it). That's something you can't buy in every supermarket yet.
Thanks for the feedback, jaquis!

Re: Chrome 13, I haven't had a chance to test this myself, but I suspect that dev.kill() doesn't work as expected then :/ if it's a Chrome bug that would really suck cause it wouldn't be the first one.. see http://code.google.com/p/chromium/issues/detail?id=82795 (seriously Google Chrome team, get your stuff straight!)

Re cool feature: actually, we had in mind using the Official.fm Simple API (see http://official.fm/developers/simple/ for more infos) to add a Search feature. As an official.fm dev, though I'm warning you: our search system is undergoing serious refactoring and the current system has lots of... room for improvement, put politely.

Thanks again for your time!

While I'm at it, I forgot to say this, but: if you have MP3s that don't play, please upload them on Mediafire and submit a Github bug report: https://github.com/nddrylliog/jsmad/issues - you'd be surprised how quick we can figure out, after collectively spending 300+ hours debugging the code :)
I have found this to be very true. For one venture, I have a wiki (not unlike your spreadsheet) with everyone I've emailed and plan to email, with their data, position, when to email/call them next, their status, etc.
OWASP write up on CSRF. https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%...
An answer to the question: what comes after Facebook?
Because you cannot issue cross-domain AJAX calls, the attacker does not have access to the response body as a string that can be manipulated.

https://secure.wikimedia.org/wikipedia/en/wiki/Same_origin_p...