skysight-inc/HackerNews huggingface dataset:
[Citation needed]

Garry's mod is probably he most popular success story of a game made by a user of Steam that saw enough success that steam came to him with a mutually beneficial plan, and he went for it. Now I don't have the full details of the GM9 acquisition, but from the way he told the story when it happened, he was exceptionally pleased and satisfied with the way it turned out.
What is your @twitter to follow your updates?
Thanks for your posts, which very clearly validate my point that the original quoted statement was flamebait :)
Does Mint.com use screen scrapers?
Just curious if anyone knows the answer to this question..I'm pretty sure when it first was started they were basically scraping these financial institutions, but I don't know for sure. If they were initially screen scraping, do you think by now they have their own special access to the financial institutions that they deal with?

The reason why I'm interested is that I'm currently working on a site that's similar in nature but for a totally different industry and I'm worried that the websites I'm scraping from will be updated and will no longer work...I'm not sure how often the websites in question are updated but my guess would be that as the industry evolves over time the websites will be getting updated more frequently and it's currently only a 1-man engineering team (me)
I use VIM mostly for writing prose, and I learned VIM through these same tutorials. I don't think it's anything different.

I don't edit while I'm writing the first draft. But when I do edit, I'm always pressing <Esc>. That's why changed the keymap.

/<text> is an editor's best friend.
I have a feeling that once you learn vim, you'll want this plugin, because it will be infuriating not to have it once the muscle memory is in place. However, I doubt you'll find it even remotely useful unless you've put in the time to learn vim on its own.
Does he actually get them prosecuted?
I'm guessing what they mean by exemption for capital gains is not a broad one, but one geared at promoting more seed and angel funding.

It's actually not a terrible idea - tax the traditional investment vehicles the same way they are today, but provide an incentive to go into much riskier forms of investment that also serve more of a public good. I'm not sure it would really work, but it lowers the returns levels you would need to break even, compared to other investment options.
In fact, Time Warner is one of the most aggressive in taking down content that uses theirs, so the average internet user/ Anonymous would be pretty likely to dislike Warner above and beyond the average company.
I will without a doubt, I will have two preferably and the equity split would be equal among the founders. That said tenacity does not mean - "Acts quickly with no regard for future consequences" so I am careful and calculating with every move I make and it means everything to me that I find exactly the right person to work on this with. Passion has to be involved to a certain degree to make a startup work and as someone who had a partnership go to the wayside before compatibility and commitment are of the utmost importance for me in my search for a co-founder
"Man In The Middle attacks are increasing and users usually ignore error messages about them"

Note that the reported MiTM attack should not result in a popup warning, because the CA certificate used in the MiTM is supposedly technically valid. Does anybody know which browsers include this CA? Browser vendors should consider removing it based on ethical concerns, especially if this MiTM attack is being performed very broadly, at the country level.
Rails routing brought to iOS with SOCKit
Compressed data reduced your IOPS. Is the drive slower at handle compressed data, or is your OS the bottleneck because its compressing all data before sending to hardware? I appreciate that you might not care exactly where the problem is, but it'd be good to know if SSDs suck just for realtime-encrypted file systems, or for any non-compressible data such as MP3s, JPEGs etc.

Also, how does your encrypted-fs affect HDD performance?
The story is a bit more complex.

What we know as America Online was based on AppleLink Personal Edition which was a joint project of Apple and Quantum Computer Services (which was run by Steve Case).

By the late 1980s, their relationship foundered and AppleLink Personal Edition was ported to Windows as PCLink and eventually the software and community was re-branded as America Online. Eventually, Quantum Computer Services changed their name to America Online.

America Online grew remarkably, so around 1994, Apple approached them to host eWorld which was to be a re-branded version of America Online with a custom UI and with billing handled by Apple.

eWorld failed due to a combination of high prices with little differentiation from AOL, poor marketing by Apple, and the Spindler era budget constraints, but even in the unlikely event that it had succeeded the Internet was beginning to gain in popularity so eWorld would have died off not long after it actually did.
Use case 1: 60 year old man wants to access his bank online from his home. He has been using computer for 10 years, but only been using the internet actively for 5, and still requires help from IT for basic issues at work.

Use case 2: 40 year old man wants to use his laptop from starbucks for email. He has used computers for much of his life, but doesn't really understand how it works. He is on the road working 60-80 hours a week. He is taught to VPN in to work, but that is the extent of his understanding of security.

We're not talking about the use case 3: activist in Iran needs to communicate with compatriots. That is a much harder problem for which SSL is insufficient.

How do we set up a sufficiently easy system for use cases 1 and 2? Charging them $1,000 for a 2 day class in security is not going to work in scale, and nobody has yet written a security primer for dummies past the most basic of "don't give people your password and don't use your dog's name."
President Obama's job creation mirage | Dean Baker
Pirating a movie doesn't get the movie from the movie company, for free or otherwise. Instead, the pirate gets it from a friend, random people voluntarily in a bittorrent swarm, etc.

Analogies to physics goods are silly because physical goods can not be (cheaply) copied. In the ice analogy, if I get ice from an ice company, the ice company no longer has that ice. If I get a song from you, you still have it.

Nitpick: refrigeration was first used as an alternative to shipping ice (make it locally instead). This started in the 1850s and became widespread by the 1870s. http://en.wikipedia.org/wiki/Refrigeration#First_refrigerati...
It will depend a lot on the specific product. For example, I'm sure that Eclipse very rarely runs with fully default settings. Consumer products will run in more of a default state, until they get very important to people's lives (I've noticed an increasing awareness and ability with Facebook privacy settings among non-technical friends in the last year).
To be completely honest, it wasn't really an anti-Anonymous argument, although there is a touch of irony there. If anything, the article mostly talked through Time Warner's perspective.
Bethesda is acting rationally and logically. Trademark is easily lost and Bethesda needs to be on top of any potentially infringing marks.

Notch is handling this in the worst way possible. The first thing he should have done is go to his lawyers, have them set up a meeting with Bethesda and their lawyers, then hash out everything quietly. No, the first thing he did was fire up the internet hate machine in response to a Cease & Desist.

Then he challenges them to a Quake match to settle it. Another bad move.

Then he posts a quiz that mocks Bethesda and actually doesn't help him in the way he thought it would as some people actually got some of the questions wrong.
We (ironically) recommend:
Anybody knows how to view/delete the root certificates on an iPad? From what I've seen, it seems like you can only view/delete the certificates you have installed yourself.
>The consensus seems to be that Iran is poisoning intra-country connections

more precisely they can poison any traffic (CA-ed by Diginotar) that passes through the routers/wires under Iran's control, that can be anything what they have already hacked into before as well as just redirected traffic using BGP similar like this

http://www.washingtontimes.com/news/2010/nov/15/internet-tra...

Btw, aren't China and Iran collaborating usually? There is potential for synergy.
I'm not 100% sure, but it looks like 9 out of 64, which is a larger percentage than normal. I doubt it's due to growth though; it's probably just a fluke.

(The reason it's 64 and not 63 is that two of the startups in this batch merged part way through.)
:) - I guess we can still improve on simplicity.
Old but still gold: Learn Ruby by writing tests
Help me out here please. I've done plenty of assembly programming on other architectures, 6502 to MIPS, and many in between, but I've never needed to learn x86. Now, when I poke around, I find that it has a huge instruction set, with a variety of funky features, SSE, MMX and so on.

I suspect that most of what I read about is now dead technology, supported by current chips for the sake of backward compatibility.

So, let's assume I understand the concepts of assembler. I'm not afraid of stack frames, or interrupts. How do I learn a moderately current subset of x86 instructions?

thanks

c
If this is meant to be academic research (and I get the feeling it is), then it's unlikely they'd be able to use words as they're ordinarily used. Terms used will have to be clearly defined and stated in order to avoid confusion and misinterpretation (unless you're suggesting that such definitions already exist).

Unfortunately, this doesn't make it easy to discuss things outside the research field.
Where's the "web" in that? Web of Trust is supposed to be a system where users 'tell' each other what they trust, forming a 'web' of trust links.
I'd use this product if the company name was not a required field.
I love this concept! I want to learn node and play around with it, but I spend all my time in Windows which doesn't currently support NPM.

With this I could create linux vm, stick it on an old laptop, and then hack away from wherever with no dependencies but a browser!
China's List of 100 Songs Banned on the Internet
So when the certificate error comes up, ask your friends whether they trust it. You are talking about a web application that is almost "hello world" in Django or Rails.
Yeah, this part of the article is a waste of space...
It looks like they are in fact implementing something at least kinda-sorta like what you describe: http://www.youtube.com/watch?v=p92QfWOw88I (skip to around 3:30)
Can't wait to apply to YC.

In the meantime, a shameless plug: if there are any devs out there in DC or NYC who want to join this startup as a technical co-founder let me know. The early version of the product has validated the idea, we have a nice userbase, an impressive following, and deep ties to our industry, contact me - dan at danjberger.com - i'd love to chat :)
Spot programming language from Google?
No, they used Yodlee initially, and now use the Intuit aggregator. However, Yodlee does some scraping, but rumor was (this was 2008) scraping was less than 10% of financial sites and they had more direct access to other 90%.
BG Boards view taraben81
The order the decorators are run at import time is explicit. Everybody loves module-scope programming and import-time side-effects! What's wrong with you man? ;-)
I agree with your sentiment about resourcefulness, but I'd probably also say that the spirit of the article is that government should do all it can to lower the barrier to entry and thereby promote more competition.

One other item I found annoying is the bit about premium paid for expedited patent applications - this will simply not work because the current tech giants will simply flood the system with expedited patents and the government will be able to collect more revenue, while those who cannot afford the expedited fees will be stuck waiting even longer.
"Based in part on the minimalist CRUX distribution, Arch Linux was launched by Judd Vinet in March 2002"

Nitpick correction: Judd Vinet created Arch from scratch in 2002 based on the minimalistic ideas of CRUX, but Arch Linux was built from scratch, and pacman was written by Judd in C.

The article is also somewhat misleading -- toting this release as having a ton of new features over the previous release. Arch Linux is a rolling release distribution and any sane Archer will immediately completely update their system after a fresh install, so none of these features are really new to any existing Arch Linux user.

The syslinux installation functionality from the installer, as well as BTRFS support from the installer, is new and good to see.

Arch moved to Linux days after 3.0.0 was released. It's nice to use a distribution where you can have the latest versions of everything for testing and development. I've been using it for six or seven years and still prefer it on my desktop and (not-so-mission-critical) servers.
Play is the most popular Java framework on dotCloud: http://docs.dotcloud.com/tutorials/java/play

It even has its own module: http://www.playframework.org/modules/dotcloud
i'm leaving my current job in three weeks to pursue a startup full-time with some of my close friends. we currently do not have a finalized idea, although we have brainstorm sessions almost daily.

i do agree that a good idea is necessary, but our number one priority has always been having a strong team: a team of balanced members where we can learn from one another and trust each other completely. we've committed ourselves before deciding on an idea for a few reasons:

1) we're all united by the passion of creating something that adds value to peoples' lives
2) we've known each other for many years and have similar interests
3) we understand that we have to be flexible, and we may change our idea multiple times before getting it right. it would be unfortunate to form a team revolving around a single idea, only to have the team pivot to an idea that some members did not 'sign up for'

hope that provides some additional insight.
What do you expect to gain by using language XXX that you would not get from languages YYY, ZZZ, and so forth. To a very large extent, programming language is not important. Sometimes the choice of language can make a difference in the complexity of the programming task; but knowing that a priori usually means that you have a deep understanding of the task to be performed and that it requires something special.

There are secondary considerations which are related to language such as the availability of trained programmers, the availability of good documentation, whether the language is stable or under rapid development, whether the language you choose is proprietary or open source, and so forth, but they are secondary considerations.
If there was ever an option to be hidden deep within the confines of a user-inaccessible context menu, "invert selection" is definitely it.
AppHarbor (YC W11) launches scaling
This is not true. There is no cryptosystem we know of that is more suited to "User Case 3" than TLS. There is a problem with the way activists in Iran are using TLS: to wit, they are trusting Mozilla, Microsoft, Apple, or Google to make decisions about who they trust. But TLS does not require them to do that. They are a point-and-click HOWTO away from not being in that position.

If Iranian activists want to trust Google for their sensitive email, all they have to do is track down Google's authentic certificate (by asking anybody outside of Iran to fetch it) and add it to their browser. Iran does not have the ability to break RSA. All they (apparently) have the ability to do is to con incompetent CAs into making new RSA signatures that some browsers are configured to believe.
The Lean Startup bundle for only $49 - includes Eric's Book
The Technology Next, Is What We Will Use In Near Future
I assure you, I don't pretend to have a guide to security in this sort of situation. But I am utterly certain that you have to take it seriously.

edit: You refer to something that is either steganography or something in that class of communication.
The card is not enough to authenticate you. It is enough to identify you. Slightly different concepts.

So card = identify. PIN = authenticate. That's not two factor.

The second factor would be an RSA key or a Digipass device.
Over-optimization of race cars can be bad too. Take the recent popularity of vintage racing. People don't want to watch 50 similar-looking, generic, computer-designed, air-tunnel-tested, same-engine cars going around a round track.

What they want to see is unique and historical body styles for every company in the race, powerful cars vs. nimble cars, finicky engines, twisty turns and long straightaways, etc.

Could be an example in the original post, really. Over-optimization leads to a worse sport.
Thanks, I remember hearing about Yodlee when reviewing Mint...in the industry that this new service is targeting there is not very many things that are standardized, so there isn't currently a platform that I can use to make integrating with them easier...I wish there was but then again that's half the fun =D
We're going to use this and put results into the Habit Labs Axioms. Great job Max, Bjoern, et al.
Ask HN: What is the the most user friendly payment option?
Hi,

I am working on Django-based application and need to implements payments. One time payments, no recurring payments.

Since the service that I will be offering is very simple and fee is low ($2 or less) I am looking for something very simple where user doesn't have to go through 7 page setup.

I know there is tons of articles about different options. What I am looking for is make it really easy for user to pay, regardless of complexity on my side.

I am considering PayPal for now. Any suggestions?

Thanks,
Making (something users don't want), or not (making something users want)?

i.e. is failing to make anything at all a substantial portion of the failures, in addition to successfully making the wrong things?
thanks for the suggestion, we'll definitely study more and prioritize the next steps and directions to take Minus :)
Two factor auth is more about stopping your login details being nicked and then used at a later time - not atall really a question of SSL, not to mention that as far as I can see this attack here would not be affected by it in the slighest except for future login attempts.
Fraudulent Google certificate points to Internet attack
For a previous rendition of the same concept, Dorkly made a similar video, that I think is much more enjoyable (as Mario himself takes humor out of his having the gun); although , the Dorkly version didn't attempt to make the game play "work" (this version from Stabyourself actually looks like something that, if built, could actually be played; the Dorkly one is "just" machinima).

http://www.dorkly.com/video/14583/dorkly-bits-mario-with-a-p...
>The only solution I can think of is a false door method, where you send some fake communication over one channel and somehow hide the encrypted channel.

That's steganography, and there are some open source programs for that. Steghide[1], for example, can hide encrypted data in JPEG images.

[1]: http://steghide.sourceforge.net/
> We're running an average of 3-5 years between protocol-level discoveries in TLS.

Everyone knows the weakness with our current system isn't the protocol--it's the "trusted" roots. There are upwards of 100 organizations that have roots installed on my computer and each of them is an attack surface. And it's frustrating because if I'm Google, there's no way I can protect myself from these other firm's security flaws. That is the part of SSL/TLS that needs to change. Getting certs from DNSSEC would be a good start...
You are using the words "authenticate" and "identify" in ways that professionals do not. In reality, a card and a pin are two factors in an authentication system; your fingerprint is a third (biometric) factor which does not need yet another synonym for "identify" to describe; the reputation of your origin IP is a fourth factor, your behavior a fifth.
@mindotus ^^
Samsung May Buy webOS, Recruits Former HP Exec
You can now send your ACRA crash reports to BugSense
partisan bile? Sounds more like the poster is an independent who's tired of Big-C vs. Big-L politics and really wants pragmatic change, not partisan line-toeing.

Look, I don't know what age you are, but health care at upper-30s is no easy street, and from what I hear, it gets much, much worse. Just in the past year, I dropped 10K on health care expenses, and that is _with_ fantastic insurance.

Edit: and, seriously - I'm no slouch. I'm an extremely healthy upper-30s guy who runs, weight-trains, eats like godliness. I'm guessing the audience of HN is probably lower-middle 20s. Well, trust me, health problems still creep up (on some of us), even with uber lifestyle.
You are absolutely right. Although I think it is undesirable to enable such a feature by default, as a technical user, I badly want it. I want browsers to cache certificate public keys and alert me when they change.

Note that Chrome's key pinning feature (http://www.imperialviolet.org/2011/05/04/pinning.html) is a somewhat comparable idea, except the well-known key hashes are hard coded in Chrome and not user updateable.
Image steganography? It's available to almost anyone, a plain-sight method with an expected amount of natural noise. If you use a small enough payload, it is essentially deniable and undetectable.
Petty quibble. Save it for https://startupgenome.uservoice.com/ — and note that if your company doesn’t have a (working) name yet, then you’re too early stage to see much benefit here. (If it’s a privacy issue, fake the name.)
Hi guys, just bought this bundle offer (down from $150) and thought it might be of interest to HNs.

it includes access to 3 LS courses plus Eric Ries' new book.

hope you can take advantage of it.
(Kent Beck) My Ideal Job Description
Click link to Bushido in TC story -> click "Sign up" -> click "Learn more" -> back at contentless splash page.

I can take Jason Kincaid's word for it and sign up, or Bushido can actually tell me something, anything, about what it is.
Does anybody have Marco's contact information? We would like to chat with him about using his IDE.
Perhaps, but almost all buffer overflow, remote code execution bugs are very similar to XSS attacks--feed the program something it doesn't expect along with some junk for it to execute. The mechanism is different but the concept it the same.
we've recently started using Mustache and are very impressed with it. This could be worth looking at, so I will do so and feedback here
I saw Tim's early work on getting a node binary on device mapped into our PDK APIs. Really glad to see him go the rest of the way and get OpenGL ES bindings. This looks like it will be fun!
Glucose Is Not Willpower Fuel
The one thing that made me switch was the many different text files I was editing. vim makes editing text files very easy and there almost always a syntax file for the type of file you are editing.

I use vim so that even though I may be editing C++, Ruby, YAML, JavaScript, Python, HTML, and CoffeeScript in the same day, I can still use the same editor and shortcuts across all the different types of text files. Also, vim is always one of the first editors to get syntax files for a new language.

If you only do ASP all day, VS is worth sticking with.