skysight-inc/HackerNews huggingface dataset:
> Note, I'm just as much against the whole frictionless sharing thing as most people here. But the moment we allow geek nonsense like this to overtake the real arguments is the moment the world will stop taking it seriously. This is what happened to the net neutrality debate ("net neutrality"? who made up that term? how will i ever make my mom care about that?), let's not let it happen here.

Well said! I'm not against frictionless sharing myself (different can of worms, not for this thread) but I'm glad to see another person look at this objectively.
> ... clicking an up arrow on Hacker News submits a GET request

For the curious, (from peeking at the source) it's a anchor tag with onclick Javascript that overrides default behavior if js is active. Before checking, I thought it might be AJAX, but it's much simpler. The script simply loads a background image with the info in the link (but doesn't add it to the DOM, so there's no reference after the function returns.

The entire relevant server communication portion:

// ping server
var ping = new Image();
ping.src = node.href; // Where node is a ref to the clicked anchor
Let me get this straight, this guy posts about how logging out of Facebook isn't enough, and how Facebook learning things about you that you don't want it to. The majority reaction is to adblock them and disallow them to do that to you.

But this isn't right. Go on Facebook and tell me how many of your friends wouldn't even know the first thing to do with one of these extensions. So now the computer literate people know how to protect their privacy, but what about everyone else?
Chemistry Software and Information Resources
Just because you took the same test five times and got the same results doesn't mean the methodology isn't pseudo-scientific.

Actual psychologists have studied Myers Briggs and found that the likelihood of getting a different result on the exam after taking it more than once is about fifty-fifty, which is pretty much the definition of pseudo-science.
Engineers can access a 747's engines in route & re-tune them in air.
To be fair, that doesn't mean it is their fault you allowed them to do so. It is indeed your responsibility to look at what you allow to access your profile and what you deny that access to.
> That doesn't mean it doesn't violate the HTTP spec. At all.

Maybe so, it just means it doesn't matter much in the grand scheme of things.
Maybe this will educate Users, the reality is that these actions have side effects already. They track you everywhere you go with cookies and create a profile of your surfing behavior.
Maybe because not everyone lives 10 minutes from each other and is 100% independently mobile? And gee... occasionally even people that you really enjoy spending time with have to move to other areas of the planet.
New iPhone 2011
It wouldn't work in practice. BT is legally required to provide phone service, so you couldn't just buy the company and stop providing phone service on economic grounds.
I'm starting a clothing company/website called http://beerfarmer.com and could send you some socks. I'm in montana and selling these primarily to mountain bikers and active lifestyles but would love to get some feedback from Times Square. Still working on product shots but...

https://beerfarmer.3dcartstores.com/Adventure-Socks-_p_13.ht...
contact me through the site if your interested.
When I had this happen, or when I heard this happen, there was always a reason that was far less sinister than initially thought.

* Public referrer logs created a backlink

* Somebody (else) published the URL

* Somebody (else) shared the URL

* You pinged the URL to search engines or other services.

* The URL appeared in your RSS feed

* The URL appeared in your sitemap

* Your pages URL ranges are easily guessable (/item.php?id=1007, /item.php?id=1008) and traversed by a search engine.

And more recently, something less innocuous: You simply added a Google +1 button to your pages.

When you add the +1 button to a page, Google assumes that
you want that page to be publicly available and visible
in Google Search results. As a result, we may fetch and
show that page even if it is disallowed in robots.txt.

http://www.google.com/support/webmasters/bin/answer.py?answe...
Awesome wife. I'd say love, even more than Quake, changed the OP's life.

Great story.
He's talking about after having clicked "log out". I don't think the "keep me logged in" button factors in here (though I could be wrong).
That is exactly the way almost every non-tech/nerd I know uses Facebook. Setting up a website is too much work. And I can understand that for them having to remember several logins and unconnected accounts (one for photo sharing, another for email, yet others for IM, blog etc.) is a lot less attractive than one site that lets them do all of the above (albeit with much less control and privacy, neither of these cause them to lose any sleep).

As for me, since most of my non-tech friends are on facebook anyway I have to keep my presence there to keep in touch. I have to admit, facebook is a pretty effective way of keeping in touch. I know I can call/email or meet in person - which I do for my inner circle of close friends. But the fact of the matter is a lot of my friends live abroad and international calls are expensive. Also, we seldom feel the need to make a call or send an email unless there is something specific we want to talk about (but that could be just me). OTOH, placing a small comment on Facebook seems a lot more effortless. The other party can also not feel compelled to answer. And there are a lot of friends I have on facebook who I don't want to lose contact with but don't want to have a day to day relationship with either (i.e. saying hi or meeting up once in a while - but not hanging out every weekend or constantly IM-ing every day).

Another thing is, apart from facebook chat, all interactions on facebook are semi-live at best. I can post a comment and the reply does not have to instant. This is good, especially if the other party lives in a very different time zone.

I am also on G+, but unfortunately most of my non-tech friends find it rather confusing, empty or just ignore it altogether. Which is a shame because liked it from the start.
Why not just add a "topic" or tags? This would at least make it easier to better filter the posts, using a concept that many people already know.
Google could buy Netflix to expand Youtube with worldwide paid content coverage, and generate more momentum for expanding G+.
Thank you for posting this. I just downloaded emacs yesterday after reading so many things here about how great it is.. then I sort of stared at it for a bit and closed it. Now I feel like I can actually spend a little time learning to use it without as much initial time investment.
Clojure Games
Looks like it doesn't respect additional UIDs. I have one uid for my @googlemail address and one for my @gmail address. I can't send to @googlemail using your tool.
网通三国群英传私服
Something about this gives me the willies... It feels like a language designed on indie game forums for non-programmers who can about wrap their heads around the basics of ActionScript. The value it brings doesn't really make sense for a non-trivial project-- compiling for, say, Flash and <canvas> sounds nice, but in what circumstance would I really want the same code to target PHP, AS3, and C++?

Even the name seems to be saying "Using this will make your game cooler!"

On the other hand, when I say that out loud, I probably sound like quite the elitist... it's not doing any harm to me, and getting more people into coding has gotta be a net good. Maybe I'm just not looking at it right as a programmer rather than someone less technical who just wants to get their game out to as many people as possible. Can anyone set me straight on this?

Whoever is downvoting me is exactly who I mean.
This.

"GET requests should have no side-effects" was never supposed to mean "you can't log GET requests". This timeline thing just seems to be logging parts of your web activity: a privacy can of worms to be sure, but not a HTTP violation.
Like what?

From what I've seen it brings an alternative syntax without reducing any complexity. And before you say it, no, removing braces does not reduce complexity.
I wonder if anyone has tried to do this with google?
Getting start with Antlr
PayPal Now Processing $315 Million In Payments Per Day
People don't trust facebook because they (you) try to tell everyone what we are doing without our permission. It's really that simple. Stop it, please.
The App Settings page will tell you when last you used it, and when last they accessed information (once you click on "Edit").

If you are truly concerned about this happening behind your back (rather than making a comment about how easy it is to not recall adding something), you can contact me (neilblakeymilner at fb.com) and I will try connect you with someone who might be able to help you find out when you did it and whatever other information might be attached to that event (I don't really know what, if any, we keep on that event type).
Completely agree with the article.

My idea... well it doesn't suck, but it was more work than what it needed to be. After a few thousand customers I realized what needed to be done. Now it's better but not quite where I want it to be, still need to pour more $$$ in to get it there.

Problem is you need at least a few hundred customers before you start noticing the cracks in your idea. If your idea sucks so bad that you can't get a few hundred people to believe in you enough to give you $$$ then it probably is so bad that you shouldn't do it.

(no, i haven't submitted to ycombinator yet, I'm waiting for a swift kick in the ass)
Steampunk Showcase: A Collection of Unique Steampunk Mods
Very inventive definition of a PC there. And totally wrong. What do you call Linux PCs? Or NeXT PCs? The Amiga? Spectrum? BBC Micro? Acorn?

The term PC was about long before Windows and Intel rose to dominance, don't pretend you meant anything else.

If you think that ARM is going to suddenly win overnight just because windows is offering a Windows that works on ARM you're wrong. Intel's here to stay a while precisely because most software won't work on ARM. You're a whole generation too early on your prediction.
I'm also doing this right now although I am currently doing a little consulting which covers my basic expenses per month.
I hadn't noticed the problem with the remaining GIF's to be converted to SVG. Seems like potrace or similar would make short work of that.
This is why I always help people crack their devices, even if they're mainly interested in warez. We need to ability to work around censorship which we'll lose if we let ourselves be locked down.
IPhone 5 Event Will Be in Cupertino, Breaking Long-Standing Tradition
Show HN: Review my weekend project: Meetings, a web-based chat & file share app
Link to test: http://getmeetingsapp.com

Basically it is a web-based chat application, with private and public rooms and real-time file sharing.

It is currently in a half-arsed situation so needs lot of work but wanted to get some feedback from you.

Thanks

PS. I created a public room for feature requests, just in case: http://getmeetingsapp.com/rooms/4e7f64ea17ade37b71000002
The gitolite permissions file is fairly robust. Each person who needs to access Git repo(s) sends you their public key (i.e. id_rsa.pub) and only their public key is stored on the server. Since access to the gitolite server is really just an SSH connection, the keys are stored in ~/.ssh/authorized_keys and managed via gitolite.

So, you get the tried-and-true security flow of public keys within SSH.

As for the user/group management, gitolite lets you provide access to various repos (with settable read, read/write, read/write/+ permissions) to individuals identified by the public key files you've received from your Git contributors.

Not sure if that's what you were wondering but we've had a fairly easy time providing secure access to our own private Git repos using gitolite.

Server-side hooks are going to be an interesting problem to solve for kernel.org.
the same person is likely to get different results if you take the same test on different days

Heck, I get different results from one minute to the next, almost every time I take it. I'm borderline on at least two of the criteria.
a screenshot on the homepage would be nice.
Because the majority reaction to any HN post is a technical pissing contest you have to learn to ignore if you want to glean anything interesting from the thread. If you're not interested in that, or in showing-off your own geeky credentials, then you're mostly wasting your time participating in an HN "discussion".
I worked on a side business for about a year, right after I got married. At the end of that time, when the founder of the company I worked at and I had some irreconcilable differences, we parted ways and I worked on my side business full time.

That was 3 1/2 years ago and now I own two companies; the first one I started which is a quite successful marketing business and the second which is a mobile/social app startup that just graduated from an incubator here in SD and is raising a round of capital.

What I ended up doing to stay sane was relatively simple:

1. I set effective boundaries with my day job. I wasn't paid to work extra hours or do stuff above and beyond my job. I did what I could but made sure that I also stuck to my guns when I wasn't willing - or was unable - to do something. With this I could focus when I got home and not feel completely drained (most days).

2. I planned out my side work-time and stuck to it. Instead of just working every available second, I did my best to plan out when I worked on it and when I didn't. By sticking to these rules, I avoided largely burn-out and was able to move forward at a steady pace. However, when you are on something hot, be ready to give that extra push if it will pay off; you'll know when it happens :)

3. I didn't forget my home life. My wife and I had just married and were both working our asses off. We did our best to get time out and be together, whether that meant playing video games or going to the park. One of the perks of my job was that I could take a bit of time off if needed (Friday off meant working a bit longer during the week) which made things easier.

4. I didn't quit my day job prematurely. When I ended up leaving the job, it was too early, but I didn't give in to the temptation to leave far too early when it would probably have sunk us. Be patient and methodical with your side business until you are pretty damn sure you're ready. If you just hop off willy-nilly, you can be sure things can go south quickly.

This was my experience with it, and I'm thankful every day I did it this way. Everyone has a different experience and different priorities, but hopefully this can help you too.
Clickable: http://getmeetingsapp.com/
this has nothing to do with 'keep me logged in' and as I mentioned in the post I contacted a number of facebook contracts a number of times (including the standard security report track) and never heard back
There doesn't appear to be any non-facebook.com data in the example PDFs -- i.e., no "you commented on TechCrunch" or "you visited TechCrunch which has our widgets".

I would suspect this means Facebook just simply did not provide it?
I hope "Lean Startup" doesn't become the new "Agile"

Isn't it already? They seem very similar to me.
I got pointed to this addon in a past discussion about FB here on HN and I can fully support this recommendation.
Agreed, but tracking is different than sharing. Nobody's going to complain that your web server logs GET requests (well, not from an HTTP standpoint, at least), but posting that information to your social networking profile is a little different.

That said, there are certainly very similar cases out there already. For example, when you read a thread in many forums (vBulletin, at least), it updates your public (or semi-public) profile to say you were last seen reading that thread. I've never particularly cared for that either.
Quick Way To Make Money With Business Cards | Quick Way To Make $5000 A Month
Supercomputer Predicts Revolution
Indeed. Since the post I was replying to purported to be confused at the negative backlash among Facebook members, I engaged on its own terms. I suspect at higher levels Facebook is at least somewhat aware it is acting exploitively.
Ah thanks for that, I'm working on a patch now! :)
Huh, I just wrote a similar tool for myself a few weeks ago. I use the sawfish windowmanager and have C-F7 set to cycle between emacs windows. I wrote some elisp to add a term ("my-workspace") to the titles of the windows in the current emacs invocations, and to tell sawfish's C-F7 to cycle between the emacs windows whose titles contain that term. Works quite well, and keeps my different projects entirely separate.
The quake community and game changed my life. Of course, when I started, it was mplayer. I had just traded my Playstation 1 for a 486DX, a huge mistake in everyone's eyes. I used my rich friend's grandmother's AOL login to get online. (This continued for 3-4 years, my mother still wonders what the "weird noise" was on the phone lines past midnight).

The broken physics and quirks of Team Fortress in QuakeWorld is what really caught my eye. I was hooked like a fiend. I was recruited by many guilds and known for my 9600BP lagging , teleporting and fragging! Not to mention my 1MB cirrus logic integrated video card, it chugged along at ~12FPS in 320x200(?).

I got interested in manipulating Quake. Living in MS, there were no mentors for learning to program or script. I went in blind and came out with a few mods.

Years later, I ported team fortress with quakeworld physics into Enemy Territory, (Feb/Mar 2004?), but never found anyone interested in doing the sound or graphics.

Obviously, my original endeavor into quakeC led to a whole new world of coding and languages!

At this point, I had a few life changes. I made a handful of lifetime friends from IRC and my old clans.

Now, looking back, it was Quake and my natural ability to tinker that led to my pursuit of a degree in computer science/bioinformatics. I am currently in my junior year.

I emailed John Carmack a few times asking for legal advice regarding using shareware Quake 1 models in a development version of my port of QuakeWorld to ET. He gave me good advice and has been a great influence.

Oh, and trying to figure out how to make VIS run faster on a BSP map was the end of me. VIS took forever, and I mean forever, to run on my 100mhz computer.
Then the BEAST Enters
well, you definitly didn't use it.
what a strange feeling this post gave me. i've read it, then i thought about other frameworks, even wanted to argue, that purity in terminology is overestimated, and you know what? who cares.

i dont know if thats because client side frameworks are becoming much more important, and talks about differences between django and rails sound more and more pathetic, or maybe its a personal thing and i just need to get some sleep )
I missed the part where they promoted buzz and wave with a giant animated arrow on the google homepage
i know how gitolite works; i've used it myself.

what i am asking about is the central generation of private keys. that is not necessary for gitolite. the normal (secure) process is to have users provide their public keys.

what i would like to know is how kernel.org generating private keys for users (in one central location, and then, i assume, distributing them) can be "more secure".
Agreed. I can't imagine that any meaningful percentage of Facebook users care about the HTTP spec.

JavaScript in modern web apps has made the distinction between GET and other HTTP methods irrelevant to users. Simply changing these "frictionless sharing" apps to use POST instead of GET doesn't address anyone's concerns.
When I say "I don't recall," I guess I'm using understatement in a bad place for it.

One of the sites in question was Bing. I don't use Bing.

There is no way in hell I authorized these apps. And this isn't a case where two apps from a long list seem suspicious; I've never authorized any apps, ever.

The Facebook guarantee that authorization is required has no technical enforcing measure; it's toothless bullshit.

We're trusting the greater Facebook ecosystem to uphold such policies and guarantees out of the goodness of its collective heart. Ha. Ha. We're also trusting Facebook itself to accurately list such relationships on their Apps page. I don't see why such trust is warranted, at this point.
Dupe detector apparently matches exact URLs (including query string). All three URLs differ based on various tracking bits (utm, etc). I always search first before submitting.
One thing that I have found to help me is to break things down into very small tasks, something that I can get done in about 1/2 an hour. It can be as small as creating the signup page or doing a password reset page. I found that sometimes when I got started I would roll through a few of them, but even if I only did one thing making progress every day would feel really good.
I'm pretty sure opportunity cost plays a part in the cheapness of fast food. Saying that the time is there because Americans watch a couple of hours of tv is really half-hearted analysis. Additionally, it's not only the time to cook, but also the time needed to travel to grocery stores, which is actually more inconvenient to get to than fast food restaurants in low income neighbourhoods.
Heavily debunked when discussed two weeks ago:

http://news.ycombinator.com/item?id=2978883
Its Good to Be Boss: The Dictators Handbook
You don't want Facebook to post an announcement say "I am watching a video on makeMEpleasure.xxx, and I like it because I visit this website ten times per day." or have Facebook recommend you with potential same-flavor friends or pages, which include something making more guys happy.
Skip to sidebar
Please read the spec. The authors clearly said that the side-effects cannot be ones that the user is responsible for, not that there should not be side-effects at all. GA's logging is not something that should concern the end user.
Lytro Camera: Cool Features That Attempt To Revolutionize Digital Photography
Is there a similar law in the United States? If so, I've never heard of it.
For most of human history most people in the world lived under tyranny. In that light the freedoms we enjoy in the USA are a pretty small blip in the data. Why do we think it will always be so, especially with so many people apparently unconcerned about the unprecedented ability of both commercial and government organizations to accurately profile the public/citizens?
Does anyone know if requests made by Americans are honored? I'm guessing we don't have the same privacy protections here in the US, but maybe I've assumed incorrectly?
There is no violation of RFC 2616. Two points:

1. The implementors RFC 2616 is concerned with are: (i) of the server involved in a connection, (ii) of the client to that connection, and (iii) of the network that joins the two. Facebook's involvement as a server ended before these connections became live, and so is not one of (i)-(iii).

2. The notion of safety here is in the sense that inserting arbitrary get requests into a sequence of transactions between client and server will not change the semantics of those transactions. It does not have anything to do with what code the user might have asked the browser to run on receipt of the results of a GET request.

See, e.g., Mozilla's documentation of HTTP: A safe method is a method that doesn't have any side-effects on the server, from https://developer.mozilla.org/en/HTTP#Safe_methods
Love that blog. Glad to see that it made it to HN. His Rapidminer tuts are excellent as well.
Sen. Schumer Demands Investigation Of OnStar Over Concerns For Drivers' Privacy
or a lot of people using other social networks. Or a lot of people that don't know they "need" social networks. Or a lot of people that can't use social networks (eg grammas and grandpas, 12-year-olds, people in countries where FB is blocked...)