skysight-inc/HackerNews huggingface dataset:
But once you sign in to Facebook, you have the cookie, so browser will send it if there's no read blocking.
Mass compromise at inmotionhosting shared servers (10k+ sites hacked)
The current UK government support for starting a business seems to be almost entirely based around three things:

(a) promoting outside investment

(b) tax incentives (sometimes the same thing...)

(c) limiting the impact of regulations for companies with very few employees.

While these are all welcome, and of course things like tax breaks are always nice, I can't honestly say that any of them would make or break any of the businesses I've started.

Meanwhile, try setting up an on-line business in the UK that takes credit card payments, particularly if you want some sort of recurring/subscription model. To say that the banking/financial sector is hostile to small businesses is a laughable understatement.

Or try to get a straight answer about what regulations do apply and what you have to do to comply with them. Even the government itself doesn't seem to know half the time, but of course that is no defence if you come up for a tax investigation because you put up someone's red flag.

If you can't create a low-overhead operating environment where businesses can get on with doing what they do without all the peripheral stuff getting in the way all the time, how are you supposed to be competitive, even if you get a few percent off your tax bill for the first few thousand of revenue?
not compatible with Firefox 6.0.2
If you want to shut down facebook on your computer without a plugin just put those domains in your /etc/hosts:

127.0.0.1 facebook.com
127.0.0.1 facebook.net
127.0.0.1 fbcdn.net
Agreed. I can't find any insight or advantage in making this kind of a distinction.

The article attempts to address it by saying that people attempt to implement Model2 on a Javascript front-end. That is awkward. However, it isn't awkward because you should be using real MVC. It is awkward because Javascript is asynchronous and you want to make sure the user interaction stays responsive without devolving into spaghetti. The key insight is "asynchronous" rather than "let's do REAL MVC!"

I've seen this obsessive focus on taxonomy of solutions divorced from specific problems in domains outside computing. I suspect it's a cultural thing. Some cultures obsess over gadgets more than others. That works out until people start arguing about who has the shinier toy, instead of actually using said toys as tools.
F Style 4 String Electric Bass Maple Jazz. Price: $470.97.
F Style 4 String Electric Bass Maple Jazz
Price: $470.97. Super Pre-Christmas Sale of $20 off on orders over $200. Hurry! buy now.
Why stories sell...and a cheat sheet to help you tell them
you're partly right - the only resolution here would be to disable javascript, which makes a great part of panopticlick work (identifying installed fonts, etc.). however I think this kind of user recognition would be an overkill for a site with so many impressions like facebook - the computational effort to assign an account to each set of features must be huge (thou maybe sometime later ... when privacy laws get more restrictive).
IT Companies in my town in South Eastern Europe (Nis, Serbia)
Model1 started by everybody (including Servlet, pre-JSP)
Model2 started by Servlet + JSP.
Run ahead. Doesn't matter which direction you're pointing in when you start, you'll still get some SEO juice at the end.
I love seeing links like this on HN: you can actually learn something, not just read some opinionated article :)
Is JavaScript MVC really JavaScript MVC (I've never used any so I don't know)?

And is MVC the right pattern for rich UI app (GUI or Web client)?

The last time we tried to use MVC in GWT app, it didn't work out quite well. We decided to use MVP + EventBus instead.

These days the MS camp came up with MVVM (a variation of MVP or more closely related to Presentation Model, which I think MVVM is borderline architecture astronaut, but meh, I might be biased).

MVC seems to suit widgets level better as opposed to the architecture pattern for a Rich UI app.
Entrepreneurs Challenge The Gartner Hype Cycle
Who will watch the watchmen?
It makes me nervous that it hasn't been updated since July. I switched to adblock plus with the fb rules above, and "disable all third-party cookies" in about:flags.
Engineers can telnet to the engine management system of a Boeing 747
Hate to say this but I have to agree with you.

It's a nice concept/patterns/principal but it caused a lot more confusions.
Alternate explanation: Facebook made it much easier to do things which were once possible, but hard. So more people do them more often.
Jokes aside, I really like the 'brogramming' ethos. I feel it really embodies 'balance' in life.

As the slogan puts it: "Rage at the codebase, rage at the gym, rage at the club". Programming is very much a logical and intellectual endeavour. One has to be creative, yet logically inclined. So on thise side, your mental capabilities are constantly being challenged.

Staying healthy is also an important, hence 'rage at the gym'.

And then finally 'rage at the club' to me implies you have to loosen up, enjoy life and do things the body wants, not the brain. In other words, not be stuck in programming mode all day.
Julie, Julia and Julio
How many of you think many Introverts may not have participated in the MBTI test conducted?
I use the Android Facebook app not the browser so yesterday I looked at it but can't see any way to log off. I'll probably have to delete it. On my Facebook page all I have is stupid stuff but still I would like to log off.
There is offline local storage in HTML5 [1]. It is supported by recent versions of iOS and Android. A local HTTP server should not be necessary.

[1] http://diveintohtml5.org/storage.html
HaXe 2.08
V cool. Harry Potter fans, rejoice!
Photo suicide bombers in the church kepunton solo Indonesia
Suicide Bombing Photos Church Kepunton Solo. Suicide bomb blast that occurred in GBIS Kepunton Solo on Sunday (09/25/2011) has resulted in two people dead and dozens wounded. Victims of suicide bombing in Kepunton Solo immediately rushed at the hospital Dr. Oen Surakarta.

The Chronology of Suicide Bombings in Solo was previously mentioned that one person was killed suspected suicide bomber who killed instantly by the incident location spilled intestines. But finally back again a victim dies in hospital after rushed from among the congregation of the Church Kepunton Solo.

Suicide Bomb Terror in Solo is exactly what happened around 11:00 pm on Highway Arif Rachman Hakim during Lord’s Day morning worship is finished and the congregation left the church. In Video Bombs kill at Solo Self is seen bomb exploded right in the front door of the church. The method of Suicide Bombings in Solo is almost equal to Suicide Bombings Cirebon ago, in the mosque Police Resort Cirebon, West Java.
uh.. and what if you're in India?
uhh .. apply for a Visa at your local consulate, hop onto a plane, go down to the library ... not very convenient, innit?
I'm sorry, but academic data walled up in closed journals (im sorry you live in a coccoon where you think everyone has a local university library) is malicious withholding of information - i dont imply that malice exists on the part of the scientist publication, but of the larger system - smug statements that data available only to experts will save the 'wise ones' from useless questions and let them do work or so, are, i think, retarded.
any-how, just my personal opinion.
I'm reading the Amazon converted version now which is not perfect. Thank you for this gift.
Wedding Tuxedos For Groom
you do need insider knowledge to know that the PLCs cessation of function would cause your effect. stuxnet didn't stop the PLCs, it changed their operation. how did they know what to change it to..?
Cookies can still be read if this is set to "off."
How to track friend's career growth & changes
> maybe they've just got better over time at not relying on cookies for things they shouldn't?

It may be that. I just tried and Twitter is working perfectly without third-party cookies. Some months ago it didn't allow me to login.

With Google I had a similar problem, I couldn't login into my Google Account in sites that weren't the search engine (Docs, YouTube, etc). I just tried them, and again, it seems that it works now.

I use Chrome stable. Maybe something changed in the management of third-party cookies in recent releases?
The shame of college sports
Yeah, I think EVERY social network that is allowed an "ad" on the top left side of Google.com can reach this number easily. Well, Google is using the Microsoft model here...
This data driven approach doesn't even work well for other sports,e.g. soccer. I guess the reason it works so well for baseball is that it's made up of a large number of well defined tiny one to one faceoffs.
Understanding Recurring Dreams
I occasionally create fake profiles when I need access to a feature that is otherwise inaccessible.
Hated the site from the first minute and doing my best to spread the message about its negative aspects.
Here in Germany an internet petition helped raising awareness for a problem (internet censorship via DNS-Spoofing) that did not have enough attention before. I think it was very useful in doing that. https://epetitionen.bundestag.de/index.php?action=petition;s...
Engineers: Join Business Insider And 49 Other Top Startups On The NYSE Floor
SCADA (Supervisory Control and Data Acquisitions, the usual term for industrial control) systems until, at the least, 9/11/01, were not typically designed with security in mind.

Symptoms of problems include the ability to DOS a SCADA network simply by flooding it with packets and the lack of authentication/ encryption embedded in protocols such as IEC 61850 (an increasingly popular SCADA standard).

There are two halves to the problem of hacking a SCADA system.

First, you must be able to exploit the software. E.g., Siemens Step 7. That is standard IT hacking. Not a "problem".

Second, you must be able to exploit the installation. Let me explain a bit more.

In software terms, what you are given to work with is a list of hex values denoting inputs, and then a list of hex values denoting outputs.

So - without knowledge - what you will see is conceptually like this:

READ 0x1

READ 0x2

IF 0x1 + 0x2 > 314159 THEN

WRITE 0xA, 100

ENDIF

What do those numbers mean? There's no context until you know what those read/write registers are plugged into. And those could be different for each installation.

The second part isn't always brought out in the Stuxnet discussions. Part of the search for understanding for Stuxnet was decoding how the registers mapped to the installation.

For the interested reader, I refer you to the Symantec white paper. It is of quite high quality and good technical detail. The SCADASEC mailing list contains useful discussion by people involved in the industry, and they really bring out the differences between SCADA security and IT security. And for the really interested reader, I recommend reading up on PLC programming and digging up protocol standards for MODBUS and DNP3.
How To Write An Essay Conclusion
The requirements as for an essay structure are rigid and honored by the academic traditions. It must include an introduction, the middle (main) part of an essay and a conclusion. The ending of your essay is your last chance to clarify and emphasize your main point.
First, unfortunately it's too late for me to go back and fix the typos above (HN + iPhone = errors), so my apologies for that.

And second, I agree with you. It's not that I checked it that often in any event (if they really wanted to prevent time wasting distractions, they'd block HN ;)), and if I want to, I can always check it via my iPhone/iPad, etc...

I suppose my overall point was that, even though the no-Facebook policy is inane, it ended up with a result that for me was fairly benign, which suggests that Facebook's value in my life was fairly low.
I suspect that the relevant semantic distinction here is between "transmit" and "collect".
practicality beats purity, even though the Python
frameworks are moving away from the "MVC" term it always
felt like "MVC" to me, in that there are three distinct
components - data objects (model), some kind of "load the
model in response to a URL and display a template"
(controller, what better name is there, I think "view" is
a crappy name for that since it doesn't define
presentation), then the "template", seems like a view to
me - it's the thing you're viewing!

That the model isn't notifying the view through an event
system is splitting hairs. The GOF book is much maligned
I think because people insist on taking each pattern
completely literally down to the last detail. GOF's
pattern (GOF didn't create it but they discuss it on page 4, I thought I was crazy until I just checked just now) is specifically "MVC, and because we only know
about C++^H^H^H Smalltalk graphical libraries and not very much about
stateless HTTP systems yet in 1993, the model notifies
the view of changes too, how else would it work ?" IMHO.
It's an implementation detail, it's not the essence of
the pattern.

So if a JS framework is now doing MVC that includes the
concept of "model notifies the view", sure call it
"classical MVC" or "model-notify-view-controller" (MNVC).
Shrugs.
I'd argue this happens today at almost the maximal level they can extract. In fact this was my point earlier. The problem with doctor's is less proficiency, but more ethics. I honestly have more faith in my car mechanic than virtually any doctor I've worked with. I'm not sure how increasing supply can make an already worst problem worse -- except to expose more people to it.
You are correct. But the theoretical attack from
"https://accounts.google.com/reallyuglyurl to
"https://accounts.google.com/ServiceLogin remains on the same origin. So while what you say is true, it is not applicable for the example.
No wires, just many reed switches. http://en.wikipedia.org/wiki/Reed_switch
A question: I periodically delete all cookies in Chrome, and only use Safari for visiting Facebook; this should be safe enough, right? I use one browser (Chrome) for work related things like GMail, Twitter, web search, HN, and customer sites. I use Safari for casual browsing (Facebook, Reddit, etc.) This way I sandbox web tracking to one browser.

I suppose that one big hole in this is tracking my IP address.
Funny how hacker news is taken over "OMG! FB is evil!" stories and no one mentions Google, who is 1000x worse privacy wise. Too bad HN has been taken over Google employees trying to make FB look bad while their are doing business as usual.
And where exactly are those closures allocated?
Previous submission of canonical URL (no comments):

http://news.ycombinator.com/item?id=2996115
Have you read the thread about Chrome privacy? There are plenty of complaints in the comments there.
Nice try, Mark.
Why are users misinformed? Because facebook has only crept more outside the nice boundaries of its own website. There is a line somewhere in between facebook knowing only what I explicitly post, and it knowing absolutely everything about me that users will not accept. Seeing that we're only accelerating towards the "knowing everything about me" side with no sign of braking scares me. Whether that's where you're at now doesn't matter all that much to me. I've seen no sign that this isn't where you're headed, and I don't want to be a part of it when you get there.
Such a network does not exist. In an ideal world, where the network 'knows' who the user is would be any advertiser's dream. As it currently exists, we need platforms like FB, a search engine (Google), and now mobile devices, to reside on this network/internet infrastructure we have built for ourselves as means to bombard us with ads. The distinction here are the platforms, not the network itself...
> Blocking 3rd party cookies by default

As a Firefox user who disables 3rd party cookies, this actually does break some sites. Signing in with your Google account to various blogs becomes impossible. Buying tickets online to the local puppet theater becomes impossible. That sort of thing.
That's true, but very rare.
The vast majority of (web) startups leverage open source technology. Most use both an open source database as well as programming language(s). Beyond that, many use an open source framework on top of their language of choice.

Building around someone else's APIs isn't such a cardinal sin as you're implying. The big questions is what are you building? Owning and controlling your full stack is important if you're building something huge, but you can build something profitable leveraging someone else's APIs. There's a bias here towards building BIG businesses rather than lifestyle businesses, so advice about avoiding third-party APIs would come from that. If it works for the project you're doing, then do it. If not, then don't.
Eric Ries Tells Lean Startups: “Stop The Line So That The Line Never Stops”
We've built our business (a sort of carbonmade for restaurants) on top of WordPress ( http://www.theme-force.com ). It's been a very gratifying experience so far, as we're able to develop and deploy various features & functionality very quickly. Definitely makes sense to find open source resources where you're not reinventing the wheel, have good momentum and make sense for your idea.
FACT CHECK: SCADA Systems Are Online Now
Health Niche Articles
submit your health, medical, fitness and self improvement articles today!
It is definitely possible to live without a Facebook account and also have a social life. If that is not the case, there is something seriously wrong with the society you are in.
Actually 5mb is not enough for our needs but if we put that aside, still there is a problem of where to load the Web App itself from when the device is not online?
Discussed previously [1].

[1] http://news.ycombinator.com/item?id=3026591 (yahoo.com)
Adblock with Easylist Privacy compares to this though. However you won't get ghostery's eye opening popup with it. I use both in conjunction just to be sure.
The solutions based solely around cookies only will help with that particular mechanism. Over the last year, I've seen a couple of articles similar to the following:

http://news.ycombinator.com/item?id=1714446

and

http://news.ycombinator.com/item?id=2891369

Where "cookies" can be stored in more than just the traditional cookie.db. I haven't looked to see if FB is making use of these alternative mechanisms, but other sites have.
UGGs
G+ is still missing some form of tags/hashtags/topics to allow posting what is only interesting for some of your "friends", but is in no way private. I often post to only some circles not because something is private, but because I don't want to "spam" ti to people in other circles that probably wouldn't be interested - but might as well be.
What sort of sales and whoring-out has Facebook done? Is there really any value in one's social graph, or do we just hope there is so we can hate Facebook for being evil instead of for making us realize how dumb our friends are?
Or this is where the native wrapper comes in?
Having an article buried simply because it wasn't popular enough to stay on the front page isn't exactly analogous to going out of your way to ensure an article is buried by flagging it.

I choose to comment before I upvote anything, that's how I roll, but on that basis I can argue that the former constitutes a contribution while re-appropriating another button to serve the purpose of a downvote contributes nothing. If the former is the means to encourage discussion then the latter is the means to discourage it.
It depends on the level of control the electronic control system has over the system as a whole.

The electric power grid security is an area of national concern in the US. I read a report to Congress (publically available) a few years back that suggested the power grid was being hacked in quite a few ways. Googling electric power grid security returns a plethora of results, all of them reporting problems.

Here's a few reports. I haven't evaluated them for reliability and accuracy.

A 2009 report that kicked off a lot of talk
http://online.wsj.com/article/SB123914805204099085.html

This one is old
http://www.wired.com/science/discoveries/news/1998/06/12746

This one is 'new', as of Jan '11.
http://www.gao.gov/new.items/d11117.pdf

Here's a blog on it:
http://smartgridsecurity.blogspot.com/

Lockheed sez they are going to work on it.
http://www.bloomberg.com/news/2011-06-30/lockheed-promises-e...

In 2010, we got some national guidelines.
http://www.nist.gov/public_affairs/releases/nist-finalizes-i...

A video of some congressional testimony:
http://www.youtube.com/watch?v=JIPQRKAmCWo

China is frequently cited in this business
http://www.uscc.gov/researchpapers/2009/NorthropGrumman_PRC_...

And MacAfee has a report on China going after energy companies.
http://www.mcafee.com/us/resources/white-papers/wp-global-en...

Explode a generator! (this can be mitigated)
http://articles.cnn.com/2007-09-26/us/power.at.risk_1_genera...
CERN or Einstein? Interpreting the Findings
There is no bid process. Mozilla sets the default search engine to whatever search engine provides the best search results for its users, as far as that can be determined.

This is why the search engine is different in different locales; for example Yandex has way better Russian search results than Google, and hence is the default search engine in the Russian localization of Firefox.
To be completely honest, I don't really see why something like this is so novel and outrageous. It is as if everyone has forgotten why and how companies like Facebook, Google, Microsoft, Twitter, etc.. are able to provide what they do for free. The implicit contract is "you get all this for free, and in return we get to serve you ads that we target to you." Moreover, they all have much more information on you than your browsing habits.

Why the outrage?
Renouncing citizenship is not unilateral in the US, unlike some countries. The US state department has to agree to it. And you have to realize that you have to do it, of course.

I agree that the law is there for a good reason, obviously. but it can lead to people having US citizenship without even realizing they have it.
What The Herd Does
> We lost that argument because no one cared

I think the Python community in general adopted that Concept though. The term "view function" is much more common than "controller method". Flask at one point even had the term MTV in the docs I think but we just got rid of it and no longer mention any design patterns there. It's just too much confusion.

Often enough people jump into the IRC channel and ask how to use "MVC" with Flask and what their question really boils down to is how to use a class instead of a function. Design patterns are good and well, but I think documentation should encourage more thinking outside the box.
Advantages of Flipping Houses- Getting Started in Real Estate Wholesaling
Exactly. OP offers a great article and commentary, and then arrives at the completely wrong conclusion. Like it or not, MVC is in the vernacular now, and it means any framework organized in model-view-controller structure – regardless of whether the app has stateful views.

A better conclusion perhaps would be to distinguish "stateful MVC" from "stateless MVC"?
Activating New Facebook Timeline
Junio (git's maintainer) was using a hook to pre-generate html documentation and manpages. These would get committed to "html" and "man" branches so that others could check them out without needing to have the asciidoc tools installed.

http://git-blame.blogspot.com/2011/09/return-of-htmlman-bran...
From Phoenicia to Hayek to the 'Cloud'
Firefox can delete all cookies everytime you close it, helps stop any site from tracking you for more than a day/session.
Emacs also comes with desktop-save-mode

http://www.gnu.org/s/libtool/manual/emacs/Saving-Emacs-Sessi...
Eric Ries: On “Vanity Metrics”