skysight-inc/HackerNews huggingface dataset:
Simply because a plugin can be verified locally at length whereas a compromised CA can issue a fake cert that is very, very difficult to detect.
You'd think the first thing someone would do is grep for all typecasts. hmm

One thing you can do to make your typecasts easier to find, assuming you're using C++, is using static_cast. I know it's ugly, but searching for static_cast is much easier than all possible ways you can write a typecast.
How to run new media center software on your original Apple TV
Funny, I was about to do the same thing as you at the beginning of the year. I saw unbounce getting in the space and decided to jump ship and do Cilantro instead.

You should stick with it. You should do well.
Your economic points seem to be just reiterating the claim 'currencies must have a backing!', which is something people can disagree on and not relevant to the essay. (If some random country adopted Bitcoin as its currency, would it suddenly cease to be Worse is Better and just be Better is Better? Or vice versa? If not, then the tough economics/philosophy question of whether a currency needs backing to be a 'currency' is not relevant.)

> To all that, add the critiques you sourced of Bitcoin; that while it has impressive virality, it largely fails at its security goal by making the cost to defend transaction integrity greater than the cost of attacking it; that it largely fails at its anonymity goal by requiring a complete audit log be made available to everyone simply in order to function; that it largely fails at its decentralization goal by requiring resources comparable to that of a Visa or a Mastercard just to scale.

It's true that the cost of defense is similar to attack, the audit log is public, and the scaling story is not good. But does it fail? That's the question, and so far it seems to bumble along, with all the major problems being in things surrounding Bitcoin (MtGox, MyBitcoin, that Polish exchange) but not actually Bitcoin. Bitcoin fails on a lot of properties, but it's still there. Unix failed at a lot of things too, but somehow it's still around.

That's kind of the essence of Worse is Better - maybe those security properties or software properties are not as important and valuable as people judging the elegance thought that they were.
Put bylines on your articles. You are not The Economist.
The Kinect?
It's a sarcastic joke. Check out this site maintained by the commenter http://blog.izs.me/
But information technology is what I know, and it’s probably too late for me to learn a new field from scratch.

Information technology can absolutely save lives - I'd argue that a developer building medical software can save more lives than a PhD working on a treatment for cancer. The subtle killer these days are all the extra days a patient spends in the hospital. An extra day or two is what leads to complications. Work on solving the inefficiencies of inpatient medicine (documentation, communication, decision making, ect.) and you can go home at night knowing you are literally saving lives with your programming skills.
Just about every ISP in the world, from the backbone providers to small ISPs in Pakistan, has the capability. More often than not, it happens by 'accident'.
http://www.renesys.com/blog/2008/02/pakistan_hijacks_youtube...

If you were very selective about it, and pulled it off without any disruption, you could get away without anyone noticing. Or, do it from a third-world ISP, and say "It was an accident whaduyagonnadoaboutit".
I was thinking the same thing. If we still had to feed ourselves by hunting mammoth with nothing but pointy sticks and sharp rocks we probably wouldn't live much longer than 18 even today.
Just Curious, Can you launch apps while working fulltime for a company? Is there any legal issue with this approach.
thx！
> but the problem is that there exist many users who don't know how to review JavaScript and don't know what a CA is, and will just rely on what their browser tells them (which is where a plugin comes in handy.)

> a plugin can be verified locally at length whereas a compromised CA can issue a fake cert that is very, very difficult to detect.

Which is it?

Either you're claiming that verifying a plugin is easier than not trusting CAs that you don't trust, or you're arguing two completely contrary positions.

edit:

And this then brings us back to the earlier point, which is why not just use the plugin for crypto in the first place?
"Muggles"? Please. I've been using Unixes since I was ten years old, and I've steadily replaced all of my user-facing Linux machines with Macs (typing this from my Air, at the moment).

Apple's triumph has been in making technology less aggravating. And that's something that most people can readily appreciate.
The Post Jobs-Era Apple
Well, because we're apparently contribution-hostile. https://twitter.com/ericflo/status/107963620159266816

(I'm isaacs, node core dev and author of the url parsing module, and closer of the bug in the OP.)
Aesthetics for the Working Mathematician
This seems to be a fairly complex hardware hack to pull off, and it only works 25% of the time. This will possibly satisfy the hardcore homebrew community, but I have doubts about whether they'll be able to refine the process into a single low-cost mod-chip.

This is definitely a good step forward though. At this rate by the time the 360 is retired from the marketplace we'll have a reliable boot method that allows everyone to turn their old 360s into media servers/toasters/whatever.
Coach Crossbody Bags Discount Store|Coach Factory Outlet
GameStop tries to win back its customers
Um, no.

The plugin is the same for all users - not everyone who downloads and runs GnuPG knows how to verify it - but some people might go as far as to either compile it from source or ever decompile it. If they find something suspicious, they will report it so that other people who have downloaded the software can be aware. Same thing goes for the plugin (except that the plugin is easier to verify than a compiled binary.)

When I talk about people who can't review JavaScript or CAs, I'm talking about the average computer user. I am not saying that "verifying a plugin is easier than not trusting CAs that you don't trust." The average computer user doesn't care about CAs or JavaScript.

My point remains: a plugin can be verified by others who have downloaded it - a compromised CA is extremely difficult to detect.
What's with this recent push to ask computer scientists "why aren't you saving lives with your skills?".

No one asks the same question of accountants, or sociologists, electrical engineers, or mechanical engineers or any number of smart individuals in the liberal arts fields.

Why is CS special in that its members need to be harried about selling sugar water, where as everyone else in the supply chain for that sugar water doesn't have to worry?
Looks like Quora on the surface, but much more capable of supporting targeted advertising than StackOverflow.

Less meatspace and craigslist-y than Zaarly.

Retains that same narrow utility focus that inspired Delicious.

Agree with the sentiment that it could be a place to go if Google searching lets you down, but suffers from that same social scalability problem of Quora (the relatively narrow field of expertise of the quality user base limits broad appeal; but to go broad you have to water down the content and answers with micropayment-financed content farmers a la eHow.com which could reduce the quality.)

I suspect that the exit will be fast like Delicious (which was two years from start to Yahoo acquisition), so the speculative question is whose deep pockets (or deeply-funded pockets) will this fit into? I don't view serial entrepreneurship as a negative thing; repeating a $15-$30 million exit twice would be an impressive accomplishment. I also wonder if history repeats itself and whether joshu would take the same route if an embattled-but-on-the-precipice-of-decline company (like Yahoo! was in 2005) offered that kind of exit in 2013-14. (And all the better if Tasty Labs is simply an incubator for multiples of these $20 million spinoff exits.)
Beautiful project. I think you might be on to a winner.

One would imagine that parents of young kids would feel very little objection to dropping money on an app that is both entertaining & educational, especially one that looks very slick.

Best of luck, very nicely done.
While I agree with most of the issues raised in the article, I disagree with the blanket conclusion. With HTTPS, JS crypto can add to security when applied appropriately.

In particular, requiring hacker to compromise not only the server but also each client adds to security and limits damage footprint, much more so if combined with external blackbox-style monitoring of served contents and scripts to catch server-side compromise timely.
I love Tetris, so I can give you a bit of constructive criticism here.

- I don't want unlimited space for the blocks to move.

- I have no idea how this is multiplayer

- I should be able to press spacebar and the block goes down all the way at once

- I should see an outline of what the block will look like on the bottom, at it's current position and rotation

- Movement is weird - I should be able to just hold right or left arrow and it go several blocks over, versus repeatedly hitting the arrow keys.

- Change the key to rotate the block to something else that isn't an arrow key

Check out the Tetris games over at http://tetrisfriends.com for a good example. If you can make one without ads and with a better workflow it could be very fun/useful.

I hope that helps.
You can reply to child comments, you just have to wait a minute or three.
Something like that seems horribly hard to get right.

Forget about cross domain scripting attacks, now you can't trust JS from the point of origin. Yet at the same time, you'll probably want it to be able to do all sorts of fancy AJAX-y stuff on the decrypted content. (Certainly on other parts of the page.)
That'd be a hard thing to prove considering the service provider (and every other party serving non-image content into the page origin) could access the data any time they wanted by simply sending some script.
I work on a high frequency trading desk at a large bank. We do not use q for our trading models but just like the write of the parent comment, we use it for back testing / regression testing our models. Our quants also like writing / specifying the algo model in q and I or other developers would implement it in the language of our trading system.

IMHO, there are many resources for learning q on code.kx.com . I also went on a training course arranged by First Derivatives (they are the only vendor who offer formal training in q). I would say the best way of learning it is to practice! Use code.kx.com as a reference and download an evaluation copy of the runtime. You should be able to find open source / Free editors for q (QInsightPad, there is also an Eclipse plugin). Set up your environment and try to tackle the Project Euler question set in q.

Alternatively, get a linear algebra / machine learning text book and attempt to solve the exercises in q.

q may seem a little terse, but it is extremely expressive and once you get the hang of the syntax and error handling, it is a joy to use.
Bitcoins weren't backed by real life assets, and since their scarcity wasn't guaranteed by the code (which is open-source and modifiable as we see) but rather by their marketing and brand name, they're now susceptible to reflect any fluctuation that the Bitcoin term will have from a marketability perspective, compared to other coin systems.
It's funny that TechCrunch, a blog turned into a multimillion dollar acquisition from scratch, would assert this. Yet they say, "The fact that the Economist’s North American circulation has just reached its highest ever level tells us that the audience for quality content isn’t going away."

The bar for what used to pass as "quality" is much higher now. You need to bring your A-game to compete with "amateurs" including everyone from armchair pundits to tenured academics. Plus, people have to basically give up on following everything. Gone are the days when you can read a select number of publications to stay updated on the subjects of the day. That's why we're all hanging out here right? We want more filters.

When I make time to read The Economist from cover to cover, it's brilliant but after a while I'm drowning so I need to take a break on the shore and just skim headlines on the various aggregators.

I'd argue that it's not just high quality content but high quality filters that people want as well.
The clients don't need to be hacked, they simply run code as instructed by the server using standard, documented interfaces. Once the server is compromised, or any other party that can serve non-image content into the page origin, it's game over.
Reaping the rewards of risk-taking
Peter Norvig has a commencement speech which talks about how making progress in one area lends progress to other areas http://norvig.com/speech.html

I don't think helping IT move forward will hold civilization 'back' (as if it's unescapably designated to really do one thing or another) even if it seems some people just want to turn their brains off & eat mcdonalds instead of vegetables & play madden. I don't see strong evidence that the act of advancing what software can do itself causes willful ignorance or disease or other problems that have existed as long as humankind.

The world is pretty horrible though, sorry. People get mugged every day but it isn't because you weren't using your life to write mugger-detection systems. I don't know what to say about people who do sell sugar water or produce trash tv, except that no one is being forced to consume these things but they are all the time. I'm not an expert or anything so I can't tell you how much you can help doing what you do all the time. But yes, I Also Hate Things That Are Bad.
This type of platitude sounds good and all, but from the actions speak louder than words file, I have to wonder if Chris' company Hunch which mines your "taste graph" to help advertisers sell you stuff you may or may not need lives upto the changing the world sound-bite?

Agree with jasonz above. IT absolutely can make a real difference. Healthcare software, Kiva, etc.
now now swombat. i can't tell at all whether you are being sarcastic here. (newcomer to HN, won't be surprised to fail the tuning test)
There's a dramatic difference between high-frequency trading and other quantitative trading. In HFT, speed is ALMOST everything. It's not entirely, but many of these firms are running VERY similar algorithms (most of the quants have worked at many other firms), and are primarily competing on speed or gaming each other.

Now, there is still a market for advanced quantitative modeling in which reliability is important, and the ease of maintenance, troubleshooting and extensibility make up for microseconds or nanoseconds. A lot of statistical arbitrage can be categorized in this way, although some of the ideas in stat arb are making their way to HFT.

Basically, different applications have different performance requirements. And even though performance is now measured in low microseconds, the battle for nanosecond performance is underway, and extremely lucrative.

Now as to the argument of whether any of this actually provides any value to society, I think the answer is a definitive "no" (wrt HFT). But that's just my opinion - I used to be in the industry but left because of that. The majority of arguments used to justify HFT are really just self-serving rationalizations by people who are only interested in getting rich. It's another example of a screwed up incentive system that is increasing risk in the market rather than decreasing it.
Is this all built in Rails?
I agree. If you look at the curriculum of any MFE (Masters in Financial Engineering) program (CMU being the most reputed from what I hear), you will find C++ there. Most quants I work with have used C++ while they were at University. Even shorter courses like Wilmott's CQF (Certificate in Quantitative Finance) offer courses in C++.
I wasn't aware that Windows 64 bit only allowed for 4 cores. I wonder if this is only Vista or if it applies to Windows 7
Be socratic

This specifically refers to the idea of questioning in order to find the underlying truth: http://en.wikipedia.org/wiki/Socratic_method

That is different to just listening, or even the 70/30 rule. Being Socratic means actively questioning the assumptions and model of the mentee, rather than trying to build on their assumptions with your ideas.
Sorry the perl code is so poor, it was a post-clubbing quick-hack type project. I'll clean it up when I have some free time again :)
Nah, their scarcity is the same as it ever was, and, in fact, it _is_ guaranteed by the bitcoin code. These forks don't affect bitcoin-the-currency one bit - they're simply forks of bitcoin-the-open-source-project.
What's this, HN is now personal army for pissing matches?

Nothing to see here, move along.
20 years ago computers where a lot slower so some tradeoffs into "undefined behavior that happens to work quickly" was fairly common practice. Personally I prefer to call such things landmines vs bugs because they where often left there deliberately.
I didn't mean client has to be hacked but did mean script from compromised server has to run on client to decrypt user data. Hacker has to compromise the server then, for each connecting user, serve malware javascript.

Meanwhile, external network of monitors, masquerading as real users, detect that server is compromised and alert the admins who can take appropriate actions. Overall, compromised server can be shut down in minutes during which only a fraction of user base will have been affected.

How does this not add to security?
The proposed addition of an additonal 'scheme' return value, that dosen't include the colon seems reasonable enough. Yes its kind of unnecessary but a more respectful conclusion then, inciting this argument and tarnishing the node community any more than it already is.
So both use SVG, you just use the SVG syntax. How is that an advantage? The whole point of libraries like that is not to abstract the presentation layer.

Raphaël can be switched to WebGL, for instance, and you won't even need to rewrite any code using that library, while you're stuck with the verbose low level calls to a particular implementation of SVG.
Christian Louboutin Daffodil 160 Suede Pumps
Alas the X1 at 13.3" has only the low resolution 1366x768 display and weighs 3.7 lbs and has less battery life than the Mac Air 13.3" which as the higher res 1440x900, weighs 3 lbs and has longer battery life.
Lenovo did not update their "Mac Air" which was the X301. Sadly, like early (pre-2010) versions of the Mac Air it is underpowered (1.4 GHz ULV processor) but it did have the 1440x900 13.3" display. Pity Lenovo did not come out with the update to the X301 using the same processor, screen as the Mac Air.
How do you Get Stretch Marks
I tend to click sing365.com links in the search results if I see them. They have a section for user comments which I like to browse. They also manage to load the page up with ads without bothering me. Their bright red "GET A RINGTONE!" text ad actually shows me where the lyrics start.
I'd leave the "bug" in too... much in the same way every web-protocol software since forever has kept the misspelling of 'referer' intact.

Breaking the commonly used standard isn't a good idea. As long as the behavior is documented and consistent, don't modify it for pedantic reasons, particularly when the modification will break existing code and cause confusion for people who expect the other behavior due to it working that way in browsers.
The open source code out there can be used to power an infinite number of coin universes, each with its own universe-id and slightly different rules about scarcity control. That's why I said Bitcoin scarcity is a result of the marketing power around the term and the specific universe-id it represents, rather than a result of the code.

Moreover, when you talk about scarcity in the context of their economic value, it's not the absolute number that's important but rather the market share that Bitcoins have in the democratic, decentralized, I'm-willing-to-put-money-in-it ecosystem, and that ecosystem's size.

It's just a matter of time until more early adopters realize there can be any number of systems, WebCoins, StuffCoins, FreeCoins, and there's nothing special about Bitcoins that differentiate them from someone else running the same code with a different universe-id (and slightly different rules for scarcity control).

And once people realize that, I think they won't put their money in it any longer.
Security breach at developer.nokia.com
I can't wait until I get a pull request trying to fix the spelling of my project name.
I seriously don't appreciate your debate style, but I feel obligated to point out that your question has been discussed at another section of this thread: http://news.ycombinator.com/item?id=2935473
I wouldn't make the same choice. Node is young enough that a minor change like this with proper warning to developers should be expected. If Node's version was >1.0.0 I'd expect this bug to have been fixed years ago. It's completely subjective, but it gives further credence to opinions that Node is a toy. Not that I agree with it.
Show HN: Jam Boxes, a real-time music collaboration web app for NodeKO
2012 Buick Regal Reviews and Buying Tips
The 2012 Buick Regal's dramatic, enthusiastic styling resets the “wow” factor for premium family sedans
Tom Jones hospitalized
Failing at Innovation? Bank on It
Do you spend time on sites where accountants, sociologists, electrical engineers, or mechanical engineers hang out and know it isn't a topic that comes up regularly?

I think the desire for one's work to have a larger impact on the world is fairly common.
There is one (and probably only one) case when js crypto makes sense. And that is when server operator wants to convince third party that he cannot access encrypted data at rest stored on the server. Client side JS based encryption (and by the way also things like hushmail) does not help in any way when you don't trust the server.
SEO Agency.
For society:

Society rewards production better than consumption.

Yet, when you think about it, when no one consumes, the value of production becomes zero, too.

Perhaps my initial sentence should be changed to:
Consumers reward producers.

They're like a pair of chopsticks.

For individuals:

One could argue that when possible, consuming is always better than producing. You're swapping pieces of paper for real goods and services!

We're sort of fortunate that programming counts as "production" while playing computer games count as "consumption", and we're more interested in the former than the latter. I see it as just how the world works; "Fate" if you will. (I'm not religious, though).

EDIT: I save as much as possible and program lots, while my brother spends almost every dollar of his paycheck. So I'm biased.
I should clarify: those are the three scenarios I could come up with that allow snooping but not MitM.
All Together Now
I was a huge fan of XBMC on the original Xbox, but I don't really see much practical use in achieving the same thing on the Xbox 360 given that you can buy or build dedicated HTPC boxes (including ones that run modern XBMC) for as much or less than the 360 hardware these days.
It was fun until someone joins your game and sabotages is by stacking blocks straight to the top. It happened in all the games I played. Nice app though.
H-P's One-Year Plan
I've played many other versions of Tetris that use up as rotate, but besides that, you read my mind.

I went back and tried a second time. This is multiplayer because everyone connected to the site plays on the same map (I think? I saw one other person connect while I played).
History tells us that not everyone can change the world. That's ok
So once again:

> And this then brings us back to the earlier point, which is why not just use the plugin for crypto in the first place?