skysight-inc/HackerNews huggingface dataset:
Let's assume the 98th-percentile scenario, from a Democratic perspective: a few mildly inappropriate emails are discovered via the hack.

I'm expecting a bunch of things to be "discovered" in the next few days. Most will be fakes -- some obvious, some ambiguous. There might be some real ones mixed in there somewhere, but how are we going to know one way or the other?

In the end, everyone will believe what they want to believe.
IE's Group Policy encompasses a whole lot more than which particular sites the web browser is allowed to visit.

http://www.ie-vista.com/group_policy.html
Ask HN: static files(on server) analytics?
I have a few sites one running apache and on nginx. Does anyone have any tips or techniques for parsing the log files for gathering analytics on what files are being downloaded from straight direct requests?

I ask because I use google analytics, which satisfies my analytics needs for regular site interaction, but would like to watch on pure file requests.
back in the day it was easier to register .edu domains, and they bought it from someone who'd owned it for a long time.
How many companies are in existence that are too big, too important or too interconnected to go under? Can't really be that many.
here is a complete financial plan for you:

phase 1) pay down all your high interest debt. if you're paying more than 7-8% on something (i.e. a credit card), pay that shit down. you'll be hard pressed for the market to pay that much consistently, so you're best #1 investment is to pay that down first.

phase 2) build yourself an emergency fund. if you get fired, have a medical emergency, or whatever, you're going to need money. build up at least 3 months worth of living expenses. keep it in a high hield savings account (i use HSBC direct) so you're earning a solid 3+% on it. not too bad.

phase 3) take the bulk of your money and invest it in a diverse set of index funds that have low costs. i also suggest setting up a 401k or roth ira if you don't already have one and put most, if not all, of your investment money into one of these (for now, at least -- compound interest and long term investments work best when you start early). keep your money in here for the long term (10 years minimum) -- don't get scared over downs or excited over ups. over the long term, the market will produce an average of a 10% return (see http://www.icmarc.org/xp/rc/marketview/chart/2006/20060714ti... for more info), and thats what you want. rebalance your portfolio twice a year. this is, essentially, autopilot investing.

phase 3.5) lather, rinse, repeat, in this order. if you get more debt that falls into phase 1, do phase 1. if your emergency fund doesn't fit into phase 2 anymore, feed it until it fits phase 2. and then always, like clockwork, be pumping more money into phase 3. feed it it like its one of your other bills.

phase 4) if you want some more risk, skim off some of your index fund money and invest it into a small smattering of individual stocks. i recommend dividend-paying stocks and REITs since, even if the price goes down, you're still earning a dividend. even though my portfolio stocks are negative, my individual stock portfolio as a whole is positive due to the dividends i get. but be wary -- investing in individual stocks can be a gamble if you don't know enough about what you're doing (and if you pick some of the "big" stocks to invest in, you're already investing in them via your index funds, most likely).

hope this helps. investing and doing well is easy. investing and doing better than "well" requires research time (which you could use on your startups), effort, and doesn't always work out.
Ask YC:Ajax php html books with examples
I read the "Packt Publishing Ajax And Php Building Responsive Web Applications" a while back and I personally felt that it was good book for beginners with lots of code and you dont need to know any other thing as the author codes the whole thing in this book.

which other books did you read which contained lots of code instead of theory regrading php ajax or html?
How to Make a Million Dollars, by Marshall Brain
Ebay wants to buy your local and niche classified ad sites
I think that a simple nested list view would be more useful to browse departments. The tree is nice too, but not very practical at the current speed.
awstats will, i think, fit your needs.
it's not important for every participant in a debate to make the other side's arguments for them

Ah, but there shouldn't be "another side" in these sorts of discussions.

I'm just trying to propose ways in which it's possible to discuss politics in the abstract without the discussion veering off into arguments about the boring minutiae of giant douche vs turd sandwich that is going to be infecting the rest of the internet for the next couple of months.
i'd upmod the article but I don't have a wall st journal subscription to read the rest of it
But not in the way they wanted, I'm sure. The ads are supposed to inspire consumers to reconnect with the brand, rather than be a couple of slightly amusing odd couple skits.
If you use Emacs, it's particularly easy to learn them by experimenting with M-x re-builder.

Hey! I did not know about this, and it looks really useful. I've used http://www.newartisans.com/blog_files/regex.tool.for.emacs.p... and it's good, but not as well integrated.

I wish I knew a better way to get a survey of what's available in the Emacs world - something that would have clued me in to this command, for example... any tips?

Edit: I want to comment on this as well:

learning a lexer/parser is the next step

Recently I've had occasion to write a few parsers. In the past, I'd always used parser generators (yacc and antlr) on the assumption that they made things easier. For this project that wasn't an option, so I bit the bullet and did the recursive descent thing. To my surprise, it turned out to be way, way easier than I expected. Moreover, in at least one case (a complex one), the hand-written parser code turned out shorter than the (cl-) yacc version, as well as handling more cases and reporting errors better.

The morals of the story are: (1) Don't assume something is hard without trying it; (2) It's not hard to write a classical recursive-descent parser and the skill is a lot more useful than you may realize. Wish I'd learned that a long time ago.
so who wants to build a local and/or niche classified ad site with me?
I've always loved this site.
Thanks for posting!

PS: Read also "Manna".
You still are obligated to the estate of the dead person.
Sarah Palin's Emails, Her Email Unlock By Hacked
The article is probably a link-baiting joke, but assuming for a moment that it is not, you can get the same benefits without the requirement to run as root.

I don't use sudo to run just any command as root. Making the ability to run a root command as easy as tacking a "sudo" on the front is barely safer that running as root. Especially considering that if someone breaks your user password and you use sudo for everything, they may as well have broken root. Instead, I simply use "su", enter the root password, and have a root terminal. When I'm done, I log back out of the root shell. I also disallow logging in as root over SSH (for whatever reason, this is not the default behavior). Thus, to break root, someone has to break both my user (knowing both the username and the password) and my root password.

This gets old, so I do have sudo installed. You can use sudo to allow a non-root user to run certain commands with root privileges (just be sure NOT to include the

%wheel ALL = (ALL) ALL

line, which is how most people use sudo). For common commands that don't pose much of a security risk, you can add a line as follows to /etc/sudoers:

username ALL = NOPASSWD: /usr/bin/emerge, /usr/sbin/hibernate, [etc.]

Then, in my ~username/.bashrc, I have:

alias emerge="sudo /usr/bin/emerge"
alias hibernate="sudo /usr/sbin/hibernate"
[etc.]

(Note: emerge is basically Gentoo's apt-get, but vastly different, of course.) Thus, from the point of view of a standard user, I can run my most common root commands (with root privileges) as my unprivileged user, transparently. I can be careful to only allow commands that will not compromise my entire machine in the event that someone gains access with my username or I find myself drunk at the terminal.
Yuck. A great reminder why you shouldn't use Flash to build a key navigation element of your site. This particular site is slow, and it behaves in very unexpected ways. Is there any advantage to using Flash in this situation?
The companies I mentioned are not startups, nor are they dead. They were among the tiny percentage of startups that were wildly successful. Now they are mature, public companies that have either plateaued or started to slowly decline. But they will still be profitable for many years, and they should return those profits to the shareholders. That they are are not doing so is historically unprecedented.

Other mature tech companies not paying dividends include Adobe, Autodesk, Apple, Cisco, EA, Activision, Intuit, Oracle, Symantec, Amazon, and Ebay. And the few that do pay dividends (IBM, HP, and Microsoft for instance) have a very low dividend yields. It seems to me that there has been a breakdown of corporate governance.
Detours: Instrumenting Windows APIs
Stanford To Offer Free CS and Robotics Courses
meh disappointed. Could any of you guys give me one liners for email and URL validation?
Nice suggestions, noodle.

May I sugest a link that popped up just a moment ago?
http://news.ycombinator.com/item?id=307838

Or if you want it direct, use:
http://marshallbrain.com/million.htm

Very nice, down to earth advice, from the founder of HowStuffWorks.

Edit: Just found the edit link. Fixed the comment.
This isn't exactly true. A vigilant user will run normal backups, and those backups will not be in a location that is writeable by the unprivileged user. In this way, it will not be possible for you (or an attacker) to completely wipe out your important files, only those changes from the last hour or so.

Based on an rsync-backup article that I bookmarked a long time ago (http://www.mikerubel.org/computers/rsync_snapshots/), I run backups of my important files (/home/, /etc/, /usr/local/, some directories in /var/, and so on) every hour to a /backups/ directory that is only writeable by root. Every day, I copy a backup over to another machine using the same rsync process.
I never quite understood why startups do that - I mean, from an investors point of view, isn't there enough risk already? (I guess the assumption was that money markets was as good as cash).
well if you never sent anything, they'll never know they had any email coming
Kind of off topic, but that's a really scary photo of DHH.
Personally, peer to peer insurance sounds like a gamble.

As I understand it, insurance companies hire armies of actuaries to determine risk plus the risk is spread out among many accounts, many make a little bit of money, some cost a bunch, but statistically makes a net profit. I suppose each investor would be his/her own actuary.

And how do you handle all that private personal information that insurance companies require from applicants to determine risk, like family history of cancer, just for one? or risky personal activities, like sky diving? Oh, and what about insurance fraud or moral hazard?
Our wonderful scripting adventures don't seem to work anymore... ;( Anyone able to confirm?
Ask HN: One ajax call or two simultaneous calls? Which is faster?
I have to get an image and comments related to it. Now I have an option of making one ajax call and getting an html page with the iage and comments or get the image and comments in two simultaneous ajax calls. Which option is faster or better for the user?
Monitoring Your PC's Memory Usage For Game Development
...or the other way around, for your all-important e-mails to get filtered by anti-spam mechanisms and lost forever.
Manna is a mildly entertaining story, and a completely unworkable idea. Post-scarcity economies are nice to think about, but they don't solve all of humanity's problems. A lot of them, yes, but not all. Manna would have been better if it acknowledged this.
Notice that you're looking at SBCL 0.9.16

Notice that there are more up-to-date measurements available from the homepage

http://shootout.alioth.debian.org/
my rule of thumb, that i would apply to this situation, is keep it simple. if you want to optimize, test both options in your own app. i don't think that one can generalize this situation to say for sure which option is faster or better without also having the context of your application in mind.
The courses are nearly identical to what’s offered to enrolled Stanford students, according to the University. However, those taking courses through SEE are not eligible to receive Stanford credit for them.

Are traditional universities the way education can be made freely available?
Microsoft doesn't need to be talked about. They're the leading brand.

What they need is a change in reputation. These commercials don't help.
Don't use regular expressions for those things if you can avoid it.

See http://www.regular-expressions.info/email.html.

My URL (IRI) validation regex is a very complicated work in progress and depends on being post-processed by a Python function to handle Unicode characters outside the BMP. It has hundreds of lines of unit tests (not shown):

unreserved = ur'(?:[A-Za-z0-9\-\._~]|%s)' % ucschar
pct_encoded= ur'%[0-9A-Fa-f]{2}'
sub_delims = ur"[!$&'()*+,;=]"

pchar = r'(?:%s|%s|%s|[:@])' % (unreserved, pct_encoded, sub_delims)

dec_octet = ur'(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])'
ipv4address = ur'%s\.%s\.%s\.%s' % (dec_octet, dec_octet, dec_octet, dec_octet)
h16 = ur'(?:[0-9A-Fa-f]{1,4})'
# 16 bits of address represented in hexadecima
ls32 = ur'(?:%s:%s|%s)' % (h16, h16, ipv4address)
# least-significant 32 bits of address
ipv6address = ( u'(?:' + ur'(?:h16:){6}ls32'
+ u'|' + ur'::(?:h16:){5}ls32'
+ u'|' + ur'(h16)?::(?:h16:){4}ls32'
+ u'|' + ur'((?:h16:){0,1}h16)?::(?:h16:){3}ls32'
+ u'|' + ur'((?:h16:){0,2}h16)?::(?:h16:){2}ls32'
+ u'|' + ur'((?:h16:){0,3}h16)?::(?:h16:){1}ls32'
+ u'|' + ur'((?:h16:){0,4}h16)?::ls32'
+ u'|' + ur'((?:h16:){0,5}h16)?::h16'
+ u'|' + ur'((?:h16:){0,6}h16)?::'
+ u')'
).replace(u"h16", h16).replace(u"ls32",ls32)
ipvfuture = ur'v[0-9A-Fa-f]+\.(?:%s|%s|:)+' % (unreserved, sub_delims)
ip_literal = ur'\[(?:%s|%s)\]' % (ipv6address, ipvfuture)

scheme = ur'(?:[A-Za-z][A-Za-z0-9+\-\.]*)'

userinfo = ur'(?:%s|%s|%s|:)*' % (unreserved, pct_encoded, sub_delims)
reg_name = ur'(?:%s|%s|%s)*' % (unreserved, pct_encoded, sub_delims)

host = ur'(?:%s|%s|%s)' % (ip_literal, ipv4address, reg_name)
port = ur'[0-9]*'
authority = ur'(?:(?:%s@)?%s(?:\:%s)?)' % (userinfo, host, port)
segment = ur'%s*' % pchar
segment_nz = ur'%s+' % pchar

path_abempty = ur'(?:/%s)*' % ( segment)
path_absolute = ur'(?:/(?:%s(?:/%s)*)?)' % (segment_nz, segment)
path_rootless = ur'(?:%s(?:/%s)*)' % (segment_nz, segment)
path_empty = ur''
hier_part = ur'(?://%s%s|%s|%s|%s)' % (authority, path_abempty, path_absolute, path_rootless, path_empty)
private = ur'[\ue000-\uF8FF]' # see replaceSurrogatePairs for handling of non-BMP chars
query = ur'(?:%s|[/?]|%s)*' % (pchar, private)
fragment = ur'(?:%s|[/?])*' % (pchar)

iri = ur'%s:%s(?:\?%s)?(?:#%s)?' % (scheme, hier_part, query, fragment)

segment_nz_nc = ur'(?:%s|%s|%s|@)+' % (unreserved, pct_encoded, sub_delims)
path_noscheme = ur'(?:%s(/%s)*)' % (segment_nz_nc, segment)
relative_part = ur'(?://%s%s|%s|%s|%s)' % (authority, path_abempty, path_absolute, path_noscheme, path_empty)
relative_ref = ur'(?:%s(?:\?%s)?(?:#%s)?)' % (relative_part, query, fragment)

iri_reference = ur'(?:%s|%s)' % (iri, relative_ref)
Tekken 6: Bloodline Rebellion
Fail. Not one crunchy.

http://www.catb.org/jargon/html/M/math-out.html#crunchly73-0...
Agreed.

That being said, it is nice to sometimes read something just for the sake of daydreaming about a nicer world -completely unworkable like you said- but entertaining nonetheless.
The first tip is okay, but the latter 4 are just horrible. Any decent language will have libraries for parsing HTML or e-mails addresses. A regex is sure to come up short and be very fragile.

I once had to maintain some screen-scraping code that was written in Python using regular expressions. By the time I inherited it, half of the functionality no longer worked. It would have been much better off using a library like BeautifulSoup, both in terms of development time and maintainability.

BeautifulSoup alone takes care of REs 2 and 3, and there are standard libraries in Python that take care of 4 and 5. Why reinvent (less robustly, I might add) the wheel when a simple API already exists in many languages?
Anyone using Lua to deploy web apps?
I would think C/Lua + Libevent is a kick-ass setup for the lightest and fastest web server ever made. I am considering using it for writing lightweight APIs, imagine if you could run many processes of a tiny API web server in the cheapest kind of EC2 slice.
That growth references traffic, I believe. But by many other accounts they are growing rapidly. I don't think spam/porn is a HUGE problem yet, tho I've seen more following me (@webwright) lately.

I've also heard that their API traffic is 20-30x their web traffic, so when you see their web graphs, that's worth pondering.
This post answers the thread earlier today about what to build, how to plan for future users, etc.

Again: We at JamLegend call it the minimum valid test. Others call it core features, but it's what you need to get a prototype to market.
I always was under the impression that it opened up the advertiser to civil suits for false advertisement, but I have never heard anything saying that it was illegal. Of course, I have no expertise on the matter.
Yes, this one is a serious can of worms to be opening. In addition to the points you raise there is also the issue of re-insurance and regulation. If you can't get someone to cover your obligations if the odds come out against you then this is a non-starter, this is where re-insurers come in out in the real worlds and they aren't going to deal with a scheme this small so you will need something else to back your gambles. The insurance market is also heavily regulated because people actually depend on the services and the government sometimes ends up on the hook when these companies fail.

To be completely honest, I can't see any way that this would A) be allowed to operate as a legal business, or B) not face some catastrophic failure down the line that actually hurts real people.
"We have lost control" - Bernanke
Duplicate?

http://news.ycombinator.com/item?id=305371
They are certainly more sensible than having Serena Williams or Lebron James tell us that they use Vista. Who cares? They also drive luxury vehicles that I will never afford. Just because some celebrity uses a product doesn't mean I should.

I agree with you. At least these ads are entertaining and make Microsoft seem less evil. Suddenly ending them will look downright stupid.
Probably a good investment. The Bible was the last crowd sourced book and it was a huge bestseller.
i use this for email:

/[-\.\\w]*@\\w+(\.\\w+)+/
I can't find examples of companies going through voluntary liquidation (what Michael Dell recommended Apple do in 1997). It's hard to find tech companies that pay dividends.

Adobe, for instance, is in the perfect position to pay dividends. It is a group of cash cows that might suddenly get destroyed by new market entrants. They're putting the money in a vault [1], but they're not paying dividends [2].

The problem, as I see it, is that companies refuse to admit they're dying. It's the weirdest thing.

[1] http://finance.google.com/finance?q=adbe
[2] http://sec.edgar-online.com/2008/04/04/0001047469-08-004108/...
One late night thought: something that could come out of this that is peer-to-peer, loosely interpreted, would be to have online peer groups to pool together resources to get better insurance rates, basically create your own social network group plan.
Sorry EastSmith, by updated I meant includes the interview with Jessica - Thanks so much for the information, pg!
Minimum valid test sounds cooler.
The No Dialog and Some Observations
He specifically points out that you should encrypt your emails.
It was a straighforward dictionary hack--her password was "popcorn".
doesn't change the vector of this attack one bit: weak password
This seems like a great idea if you are committed to immediately refactoring. The problem is that most people move onto something else as soon as they have something that works. In this case, the code becomes a maintenance nightmare until someone actually takes the time to refactor it.

When immediate refactoring is unlikely (either due to laziness, lack of focus, or feature deadlines), some kind of balance has to be reached on what should be more general and reusable and what should be hard-coded and specific. And then we're right back where we started.

But reading and thinking about your posts has been very insightful. On my next project, I will try your approach. I agree that in the long run, it is likely to be a more efficient use of time. I imagine, though, that someone coding in this style will either have to have a great memory or take good notes in order to know where similar code is located. Especially consider the case of generalizing the code from one project to another project.
cat access.log | grep staticfilename | wc -l
insuring 10-year T-notes against default

sold by the same people who are selling you "sun goes nova" insurance

US treasuries can be paid out with created accounts. this is US law. inside the US, treasuries essentially cannot default by definition while the government and banking system is intact. if the government and banking system dissolve, who is going to pay out these claims and how? nonsensical
There's no such thing as bad publicity. A more typical ad would have gotten none.
So is there anything truly damning here or is it just a publicity stunt?
take the bulk of your money and invest it in a diverse set of index funds that have low costs

And now, a very important note for those of you who are even younger than me: The massive bear market is an incredible stroke of luck for you.

(I didn't realize this back in 2000, and I paid the price. Don't make the same mistake I did.)

When you're young you don't need immediate profit from your investments. You have many years to sit on them. You want to buy low and sell high. When's the best time to buy low? When the market is crashing!

So now, more than ever, is the time to save, save, save. Earn money and invest it. Live cheaply and save. Buy stocks with a portion of your savings. Buy them while everyone else is selling them, and take time now and then to bless the universe for giving you a 25% (and counting!) drop in the S&P500 over the last year. No matter whether stocks are overvalued or undervalued, buying them at a 25% discount from what they used to be is a good thing.

Of course, those of us who already have some stocks have a mixed blessing: The portfolio value is collapsing, but there's also a chance to buy more at fire-sale prices. And those who happen to be baby boomers are totally screwed, because they have to retire tomorrow and their savings -- even if they happened to have had any -- are rapidly vanishing at precisely the wrong moment. So stock market crashes aren't all wine and roses for everyone. But, if you happen to be in your twenties, they're good news.

(For more details I recommend Bernstein's The Four Pillars of Investing. Sadly, it's clear to me now that every year that I didn't know about this book was costing me money.)
pedestrian mm's tend to de-emphasize corporate paper

and yes, the amount of money your startup has in its mm is definitely pedestrian
write them down
these will not go negative, this yield was a temporary spasm

think about it, who is going to volunteer to lose money on short term govt debt? just leave your money in cash. its not like inflation is going to destroy your cash in 90 days. especially considering that we are entering a deflationary period