skysight-inc/HackerNews huggingface dataset:
The strongly worded letter is more to rally support from us, "The People", so we can be used as a secondary stick with which to threaten legislators.

Legislators like money, but they like votes more.

I'm sure the VC industry has its own lobbyists, but those as always have to work behind the scenes to avoid being accused of buying politicians.
Leaving a Million Bucks on the Table: Why Flotype Pivoted in Y Combinator
Facebook is rolling out a new Lightbox plugin (rolled back after refresh, no screen)
Russia and China are perhaps good examples of places to host something the US government has little chance of getting to, but the governments of those countries are far worse about this sort of thing than that of the States, so I wouldn't want my data to be stored there.
Final Cut Pro 7 is still available as a floppy disk install.
Smells like FaceTime is coming soon for google chrome.
All of the above, plus a couple of more. (Do SQL-ish caches count? no matter still a few more)
"Education programs, documentation updates, communications all are planned."

Couldn't you just fire all employees who need education programs and documentation updates for a browser update?

I know it sounds harsh and will get me downvotes, but think about it?

Maybe there are legit employees who are unable to grasp a new browser. But maybe for them a full blown browser is the wrong solution anyway. Perhaps somebody should step in and create dummy browsers that only have a couple of buttons for the limited set of activities those users are capable of performing. Seriously: the point of apps with nice UI is to make documentation superfluous. So instead of creating documentation nobody wants to read, create apps that make the docs superfluous.

It could be some kind of "browser generator".
> Imagine a world where all of the cool software was written on Windows, and the Linux folks had to be happy using Wine to run it at all.

Is this a joke? It sounds like it could be, but if it is, I can't tell.

That was the world before ~2005. The use of Windows has always been predicated on the notion that for-pay software is the default, and that, as a business model it is desirable. Linux has always been the opposite. Thus, as Linux users, we get the attention of open source developers -- usually people who are developing things about which they are passionate. We also have to suffer through version <1.0 (often, <<1.0).

The "cool" software, much of it, is still Windows only (or maybe Windows and Mac). The Gimp and Inkscape are pale imitations of Photoshop and Illustrator. Video editing that is as good as Premiere or Final Cut? Forget about it. And forget about modern gaming too.

All of that has to be run with Wine, if it can be run at all.

Driver support is minimal as well -- Nvidia only last week released a beta driver which begins to address bugs which arise in Gnome 3, while introducing new ones. Imagine if that were the case with Windows: your graphics driver did not operate properly with your desktop shell and you have to wait for a new driver.

So be happy that you have Cygwin, which can almost perfectly implement a Linux environment. Wine only occasionally runs a program well enough to be usable.
When I buy stuff online then I always make sure the browser's sending data over HTTPS (both on my mobile & desktop). I don't think I'd trust a 3rd party app to safely store and transmit my credit card data. Even non-technical people know to "look for the padlock". Have there been any usability studies to see if users are happy scanning their card from an app?
Yes, you are correct (I can't edit right now). You need to return a new function, and a reference actually.

for DOM part, I didn't understand your question. However, the right way to do it is

$(DOMelement:eq(i)).each();

to iterate through each element.
Related: God Grew Tired of us... shows Sudanese refugees coming to the US for the first time.
http://www.imdb.com/title/tt0301555/

It's available for free streamed here:
http://www.ustream.tv/recorded/11878743
Now Android Devs Getting Sued by Lodsys (BTW: No Google Statement Yet)
Can iChat speak Jingle?

I just tried the combination of web-based Gmail <-> iChat and the web client can see that the iChat client has a camera and I can initiate a call but iChat never shows an incoming one.

If I go iChat<->iChat over Google's XMPP server I can make a call. Does iChat speak yet another incompatible video call extension if it used with an XMPP network?

Adium can't do AV either.... Can anyone recommend a OS X client? Video chat is currently the last thing that stops me from uninstalling Flash.
Here are a few glimpses from my perspective of a long-time techie at an NPO.

Many NPOs can't afford having their staff "surf the net all the time." Those that have the most opportunity are usually managers or higher up which need to network more than support staff. So in that respect that cuts the number of participants quite a bit.

NPOs aren't the same, I went to a NP software development conference, I was from a private NP doing community services with state and fed monies. Many of the others were community/social/political NPOs that are more geared for advocacy, etc. So finding a common thread can be a challenge... and many NPs are in competition for similar funding or causes.

Of the social networks I've seen that mixes well is the forums etc. on TechSoup, the draw is everyone needs tech support and Tech soup has donated software/hardware for NPOs. I've seen others, like one on Ning but that fizzled when the costs went up - NPOs are really tight with their budgets.
Cool. Just tried it. It was pretty damn fast.

http://picmos.me/pms/41225366be5f7f53d70d3a2967a64150.html

Only constructive criticism would be that it wasn't obvious that I was supposed to click on the big orange button. I was clicking on the gray pictures for a few seconds, thinking that it was a multi-step process.

Can you try mine?
http://news.ycombinator.com/item?id=2689356
Daring Fireball: On the N9 and MeeGo
> as long as no effort is made to cheat on the provider's part.

Isn't this precisely what this law is trying to guarantee? How is false advertisement not cheating?
No, the google address is a red herring. My non-google account is listed as compromised on the same date due to a Gawker account I had registered. Many google accounts were compromised in other events on other dates.
Looks like this has now been HN'ed...
Irregardless of the synergies we find when enhancing our “web 2.0” ubiquitous utilization, enterprise-quality, shovel-ready progressive monetization schemes, we cannot eschew obfuscation assiduously enough.
If you're going after a target with deep pockets you will have no problems with lawyers who will work for a share of the settlement.

Edit: changed my wording to be more accurate.
When people share personal genome data on Facebook
CrowdFunding Platform for Medical Bills
I believe that LulzSec activities of late, likely accelerated a deal like this happening.

Goodbye freedom of the internets, forever.
Yeah, I think you can always get a waiver.
... what?

> Just store in plaintext because I am already assuming you are.

No, actually, I don't think I will store plaintext passwords.

> All the this talk about sha-1 vs bcrpyt vs scrpyt is nice and all but I have little faith that most companies care about this as much as HN does.

So what? Just because other people don't do it doesn't mean you don't have to also. Fortunately for us, there are a lot of startup founders here who might read this and learn something.

> I believe that most people are using the default password storage mechanism for their framework which are already known to be easy to break if the database is compromised.

I disagree. I think most people use SHA-1 because they know better than to store plaintext passwords. What they don't know is that it's terribly broken.

> But all of that is mute anyways.

No, it's really not.

> Unless you have access to the site's source how would you know if they are hashing at all much less which one they are using?

There are two problems here. (1) If you have access to the site's password database, there's a really good chance you have access to the entire database, and can look up how they're doing it. (2) Even if you can't lookup how they're doing it, you just try them all and find which one it is. I'd bet you money that if someone's hashing passwords, they're using one of {MD4, MD5, SHA0, SHA1, SHA2, DES}. If, god forbid, they're not using one of those and actually wrote their own hashing algorithm, you have even more to worry about.

> The best practice is to use a random password for each site you use.

For sure, no doubt about it. But what we're talking about here is the best practice for application developers, not the users. The users can't do anything about how their password is stored.

> I just don't see any point in having an rememberable password for websites and hashing just leaves a false sense of security as illustrated by md5.

Or, you know, you could use bcrypt and be secure about it.
No transitions/mixes/effects, just picking cool songs and taking turns like everyone else. I could easily see turntable hosting solo DJ sets with transitions and everything (and charging admission). Definitely something I'd pay for.
It totally makes sense – he thought he was creating a transformative work. The score is identical in both cases, therefore you need a license. The analogy would be if you had a score that was inspired by, but transformed from, the original.

(As I understand it, and I could be wrong about this: the cover isn't the original photo run through a transform; it's a pixel art recreation. A better analogy would be the companies who replay samples to evade mechanical rights - http://www.google.co.uk/search?sourceid=chrome&ie=UTF-8&...).
JustHost Breach Could Spell Doom for Thousands of Websites
His post seems a bit optimistic to me. Re-adding a bunch of features removed from a software product (presumably for some reason -- a huge underlying architecture change?) is a much more difficult thing to come up with a timeline for than the relatively minor changes made for his other examples were.

Apple may respond to the outcry against Final Cut Pro X, but I doubt it'll do much in the way of making promises of exactly what features will be back and exactly when.
Yes - having an aged keyword rich domain does impact SEO (although it's only one ingredient)
I wish I could query using a hash of my email address.
No matter how much their FAQ says they won't use the email for anything but a "single database query" It's hard to trust anyone. Even if this site is legit (I think they probably are) this would be quite the front for a spammer to collect addresses.
From what I've observed, when people try to contribute things most programmers, and even most PHP users consider to be improvements, the core team seems to reject them. Array literals are the example that jumps to mind, but I know I've seen other things along the same lines. The core team has a vision for PHP that doesn't match what most of us think of as good, so few people waste their time trying to fix it.
The naming of ReflectionClass is enough to make me want to cry.

I know naming things in CS is hard, but if you're having to put the word "Class" in your class names to make your code readable then you've got real problems.
That being said - you could have a (somewhat cuz it's not that old) aged keyword rich .co domain with quality inbound links and good content and likely rank the same.
This is actually quite brilliant. It turns the DDOS model on it's head. Rather than cut off the web site, you cut off the visitor.

That's crazy scary!
Strangely, the exact moment I received the email from mtgox, gmail told me I have to change the password. I wonder if they had a trigger for that message, or did someone really try to access my account (different password, so very unlikely)
The Web is Shrinking.  Now what?
Ubuntu: free. VirtualBox for Windows: free. Even 512 MB virtual RAM for the VM should be sufficient for Ubuntu 10.10 to get you started. No need to wait! =)

(I've meanwhile reversed my setup to reflect the majority of my dev work: physically installed Ubuntu, virtualized Windows.)
I guess SIP has weak support for Instant Messaging, which was the primary use case for Google Talk before video chat came along.

On the other hand the Jingle spec [1] contains many references to SIP:

"Furthermore, Jingle is not intended to supplant or replace existing Internet technologies based on the Session Initiation Protocol (SIP; RFC 3261). Because dual-stack XMPP+SIP clients are difficult to build, Jingle was designed as a pure XMPP signalling protocol. However, Jingle is at the same time designed to interwork with SIP so that the millions of deployed XMPP clients can be added onto existing Voice over Internet Protocol (VoIP) networks, rather than limiting XMPP users to a separate and distinct network."

[1] http://xmpp.org/about-xmpp/technology-overview/jingle/
Well done README. I certainly appreciate that.
I reliably get 12Mbps reported from speedtest.net on my 12Mbps advertised AT&T UVerse service.

The problem is speedtest.net is useless since AT&T is clearly gaming me and them, prioritizing the traffic and bandwidth.

My normal surfing experience is clearly no where near 12Mbps, especially when Netflix routinely pauses/stutters. the iTunes experience is equally bad. The latency from AT&T's DNS is insane as well which just results in a garbage experience all around.

A few years ago 3Mbps DSL felt, if not blazing, reliably 3Mbps at least. These days my 12Mbps line feels, if anything, slower/less reliable. Sometimes I might be getting close to that, but it's much more routine to feel like I'm getting pretty pitiful service more on the order of 768Kbps, but with DNS service that can frequently take seconds to resolve.

Using alternative DNS seems to be hit and miss. Sometimes it helps, some times it actually appears to cause issues. It doesn't make any real sense to me from a networking perspective, but they're obviously doing something very weird when I can swap back to the AT&T DNS from Google's and suddenly my AppleTV video thumbnails browsing iTunes or Netflix start appearing snappily as they should.

I'd go FIOS or Cable in a heart-beat if I could. The AT&T/2Wire/UVerse combination is nothing but broken promises and frustration for what turns out to be a pretty pricey, underperforming service (the TV side is pretty good on quality, reliability and features, but I pay over $100/month so I expect that as a minimum considering I have no movie channels and am on a basic package).
Looks like a fantastic framework! with the best handpicked choice of technologies in one basket, really looking forward to using this!
I was thinking more along the lines that knowing how the nonce(s) were added to the password would make it easier to scan for password in a brute force manner. For example, if you know the hashed password would be in the form 'nonce:username:password', it would be easier to know when you found the correct password, regardless of what the nonce is.
Ask HN: How do you evaluate non-technical co-founders?
Everyone always talks about how hard it is to find technical co-founders. We have the opposite problem. We have, basically, all go and no show. We have a very original product that's still in stealth mode and we're trying to raise investment to launch it -- without turning it on to too many people. We have some commitments from friends (about $60k of the $250k we're trying to raise), but our geekness is turning into a problem. It's easy enough to find big-talking evangelists, and it's easy enough to find techies who get what we're talking about; but it's really hard to find evangelists who can also get out there and talk nuts & bolts, and give the right answers when investors get all Perry Mason on them.

There are tons of websites dedicated to finding technical co-founders, and basically none dedicated to the non-tech kind. And to some extent it's probably because there isn't a simple test you can administer to check whether someone would be good for the job. I mean, there are ways you can test someone's technical knowledge. But how to test whether a non-tech has the stamina to be a long-term team player, the playfulness to be a great evangelist, the cajones to be a good salesperson, and the drive to never become complacent or lazy? That they're smart enough to play the part, that they're competent to maintain good business sense and good social skills -- I mean, what's the test for that? A dinner and drinks doesn't seem enough to know it (let alone an email exchange or a 30-minute interview.) And moreover, a lot of times we think the ability to hype something is key, and therefore people who hype themselves well must be good at hyping something we're building. To a certain extent that's true, but it's missing a key component: Trust. Trust granted is inverse to a person's ability to hype themselves. Put another way, the best salesment are humble, and generate sympathy as well as respect and adulation. We've yet to see much humility, or even humanity, in the people applying for this role.

So how do you evaluate non-technical co-founders, if you're an all-tech startup? For the longest time we've maintained we don't need them at all, but it's becoming obvious that in some ways, we really do. But without hard and fast rules for evaluation, we're operating on gut instinct, which can only take us so far.
There goes the Prime Directive…
Marshall Brain wrote the very interesting (IMHO) "Robotic Nation" in the exploration of your question:

http://www.marshallbrain.com/robotic-nation.htm

And, to save time, here are the standard HN responses:

1. Marshall Brain commits the Lump of Labor Fallacy (http://en.wikipedia.org/wiki/Lump_of_labour_fallacy): The lump of labor fallacy holds that the total amount of work is fixed. This is considered fallacious because increasing productivity also increases the size of the economy, thus creating new jobs in the process. IOW, the total amount of work is not fixed.

or

2. The industrial revolution destroyed all sorts of jobs (of say, craftsmen), but ended up employing as many or more as factory workers. Similarly with the information revolution. Etc... All of these out of work truck drivers will become... massage therapists.

My critique of the lump of labor fallacy argument is that it seems to hold as long as our ability to consume can keep up with productivity gains. But what if there's a natural ceiling to our ability to consume; what happens when we produce more than we can consume? Or, when luxury ephemeral goods become trivially cheap (say, watching YouTube videos).

I'm not an economist, so I strive to remain agnostic on this question, but it still seems far from settled to me. Even if you believe that things will eventually shake out and workers displaced by automation will find new jobs, we still may be in for an uncomfortable period of high unemployment and disruption as the economy adjusts. (AKA, productivity shocks.)
Having watched only a few episodes from Season 1, I was always struck by the emphasis placed on product (I invented this cool new gizmo) versus people (I've got the best team to actually execute this idea).

Seems contradictory to what actually happens when pitching most investors.
Was far happier when he didn't store passwords at all, tbh.
I think it'll become important, and may be a skill in your tools-set. How can a programmer build a medical scans interpreter without being a doctor? He can't. He needs Medical training.

Automation will drive more creativity, but not necessarily more programming jobs. The need for more automation jobs will drive needs for more programming skills. I think we are already there, we call it "technology". It's anything that makes use of the digital world to get improved results.
See:
http://news.ycombinator.com/item?id=2378703
http://blog.hirelite.com/how-to-evaluate-a-non-technical-co-...
Moderatoren, Redakteure, Reporter & Fotografen gesucht.
The Gmail team downloaded the database of mtgox user account information that was leaked, matched gmail addresses to gmail accounts, and then proactively notified those Gmail users to change their passwords.
You know, $500,000 is less than it costs a developer to buy a decent medium sized duplex house within reasonable commuting distance to a tech job in San Jose.

I don't really see $500k as an indication of any serious interest at all. It might as well be a grant for $37 plus whatever change, lint and gumdrops the proposal author happened to have in his pocket that day.
God no. If nothing is forbidden them on the internet, they won't feel they have to hide anything from you. If you don't want your kids to spend a lot of time on the internet, its your responsibility as a parent to give them more compelling alternatives (sports, building death-match robots, fixing old cars, etc).
Why Software Development Will Never be Engineering
It's not acceptable to do that, it's just a really difficult problem to solve for CL.
> In this case, the open standards are ahead of Flash.

They're only ahead if you consider one idea with poor implementation and compatibility in around 3% of the browsers to be "ahead". And by that same logic, Unity3D is already way ahead of both of them, and it doesn't mean anything either.

Flash already has OpenGL/DX enabled on Flash 11 (currently in an open beta), which should be released later this year. Given the quick turnaround we have for Flash Player penetration (6 months for 80% penetration; 12 months for 95% penetration) I can bet Flash's 3d will be at 90% penetration on all desktop platforms and browsers before even WebGL reaches 20% market penetration. There's no helpful headstart here. Like it or not, a Flash Player upgrade gets installed much faster than a browser upgrade. Look at the number of people who are still using old IE versions.

There are no "leaps and bounds" in the HTML world. Even if standards came out as quickly as a single company putting out their own platform, actual implementation and adoption takes a much, much longer time. This is the real world, and that some people ignore it is baffling. There are many reasons NOT to use Flash, but trying to sell HTML5 as a more capable standard is missing the point entirely.

And considering Apple's stance on not allowing WebGL on iOS either, plus Microsoft refusal to implement it, can't see any real advantage in using WebGL coming in the future. Quite the opposite.
HN replaces passwords with stars too.

Please try it in your replies.