skysight-inc/HackerNews huggingface dataset:
I'm familiar with the normal workings of https. What I'd like to know is if there's anything special about cellphone browsers such that the carriers act as MITM (like with Kindle Fire). What I can't imagine, though, is any way they could MITM the URL and not be able to MITM the rest of the HTTP request and response.
It works perfectly if you use GPL'd software for a web service

I think RMS sees that as a loophole in the GPL rather than a desirable feature. Hence the existence of the AGPL.

http://www.gnu.org/licenses/index_html

We recommend that people consider using the GNU AGPL for any software which will commonly be run over a network
> How do I get rid of Tomcat at least for development.

Jetty everything. You can even keep it for production.
>most techies in this area aren't that entrepreneurial.

Is an entrepreneur really going to want to work at facebook? They're a huge established player. Is facebook even looking for that sort of employee?
Rob "CmdrTaco" Malda's Resume.  Anyone interested?
I would love to know why I am downvoted.
> I could commit pretty freely using Subversion or Perforce to.

Pretty freely is not freely. That's like having 'decent' freedom of speech, y'see. Git allows you to commit any time, so fast you won't even notice the pause.

> As for the faster Git commits, is that just because you are only commiting locally? You still have the overhead of pushing to your central repo.

Yes, it's faster because it only commits locally. You should not push every commit to the central repo, and you should be committing more or less every time you change a file. Git allows you to be far more granular than SVN or perforce did.

It also allows you to throw things away and try things out without worrying about hurting someone else. Branching in SVN/Perforce is simply not worth the effort, but on Git, it's trivial.
You understand that when using https an ISP only ever sees the hostname, not the rest of the URL, right?
Or charge up front for the labor (which is inherently scarce) rather than writing on spec and charging for copies (which never needed to be scarce).
Do you spend all day scheming ways to exploit people? Fuck no, get over it already.

As a developer I certainly try to fight it. Day after day producers come up with a new game that follows the exact same formula of questing and doll housing and monetization and one day I would like to prove the BI numbers wrong with something refreshing.
Dec 2, Site Map
The same would apply for SMS message and phone calls. A nefarious carrier could log those without anything being installed on the handset at all.

That aside, wasn't the claim that Carrier IQ can also log stuff that isn't going through the carrier's network (e.g., when you're using your WiFi connection)?
Typing in words and numbers transmits an enormous amount of information very quickly,

This reminded me of NASA 'Mission Control' used for Apollo.

To eyes used to the movies or video games the consoles look bizarre: there are no graphs, no icons, no _pictures_. All the data came in, and went out, as numbers, or text.

They did it like that because to the engineers on the console the numbers could be grasped more quickly and meant more than a picture.
Working now, 4:15.
Marco's eReader Roundup (Kindle 4, Kindle Touch, Nook Simple Touch, Kobo Touch)
You can do "java -jar MyApp.jar -Dport=8080" with both Tomcat and Jetty using what they call "embedded mode". I like the Jetty embedded mode much more because it starts up so much faster. The Tomcat embedded mode does have the benefit of an easier to understand API, but it's not worth the speed trade-off for me.

Here's examples of both:

http://www.benmccann.com/dev-blog/embedded-jetty/

http://www.benmccann.com/dev-blog/embedded-tomcat/

I put together an example and uploaded it to GitHub. I'd love feedback on it:

https://github.com/benmccann/sprightly

P.S. Closure templates are cool because they can be used both client-side and server-side. I'm not aware of other templating languages that have this feature. I haven't used it much yet, but want to experiment with it more when I get time.
It might be worth adding:

"I'm Rob Malda. When you hire me, it's going to be the best advertising money you ever spend when every tech outlet in the world covers the story about where I am now working."
Apple's block-based APIs aren't intended to replace asynchronous APIs. In fact, Apple's block-based APIs ARE asynchronous APIs. Half of the intent of GCD is to provide a dynamic-thread-queue asynchronous interface to non-blocking I/O APIs via kqueue and friends.

GCD aside, there are a ton of reasons not to use synchronous networking, from the resource costs (you're paying for a thread stack per request) to the inability to cancel the synchronous request.

One of Apple's engineers (Quinn) wrote up a whole post on the dev forums about why you should not use synchronous networking. It's a "sticky" post at the top of the iOS->Core OS forum:

https://devforums.apple.com/thread/9606?tstart=0

Lastly, I think your position on spaghetti code is misguided. A block-based wrapper on NSURLConnection will be just as simple as dispatch_async().
:noh
It wasn't crowd-sourcing.

It was clever computer vision stitching algorithms with a human verification step.

It was a hybrid and it was a successful exploitation of the synergy between CV and crowds, which is why it triumphed over those taking just one path or the other.

This relevent link is also on HN right now: http://www.darpa.mil/NewsEvents/Releases/2011/12/02_.aspx
http://news.ycombinator.com/item?id=3305613
A lot of companies that are still using blackberries are eyeing alternatives that they want to start using once their contracts run out. Several smaller companies I have spoke to used to be entirely Blackberry shops, but have recently switched to iPhone's and Android devices.
Knowing the people I work with, a comment like that might actually exist in the code..

Typically I use /^$^

I believe the proper way to do it is :noh
Kevin Rose Calls LivingSocial a Sell-out for McDonald's deal
Ask HN: Selling software but not a company. Should I incorporate?
I've read most of the company-based articles that hit the front page, dug through patio11 and startuplawyer's material, as well as the few other juicy bits that pop up every now and then. I've read endless documents explaining the various types of legal entities and their impact on taxes, liability, and so on... but I'm just me.

There aren't any other founders. There's no special IP. I won't be hiring anyone else and I don't want to cash out in a few years. I just have ideas and the ability to put them on Android and iOS coupled with a desire to make some money. (Hopefully enough money to be able to focus more on what I enjoy doing than on just paying the bills.)

As far as I can tell that means that I have to sign up for a merchant account - which asks for a business address (I'd prefer to avoid providing my home address). I'm also worried about liability. Obviously it's not my intent to encourage others to sue me, but if it happens I don't want to lose my house.

I'd like to avoid needing a lawyer or a special tax adviser/accountant. It's just me.

What is the easiest way to get the most protection in my situation while solo-diving into the world of non-free apps?
Zynga does not have the same profit problems as Groupon. The only reason they dip low is from over marketing whereas Groupon's operational costs really are pricey.
There's a place for both approaches. I agree with kiba that with video games (and websites, and lots of other software for that matter), novelty is weighted much too heavily.
And in some countries people are constantly being kidnapped and held for ransom. We don't have that problem in the US and we probably wouldn't have a big organ gang problem either.
I would go as far to say in today's meaning of technical Steve wasn't.

I agree.
Yes, I understand this. I don't see your point. Are URLs sensitive information? Hiding a URL is security through obscurity, I don't expect an outrage over obscurity being revealed. At least not from anyone who understands how security works.
i used do similar; but not the notes; just random banging followed by an enter/escape.

/daljfdlkja <enter><escape>

now i don't use highlighting by default

from: http://vim.wikia.com/wiki/Highlight_all_search_pattern_match...

" Press Space to turn off highlighting and clear any message already displayed.
:nnoremap <silent> <Space> :nohlsearch<Bar>:echo<CR>
> I don't think of him as telling others what they must do

Then think of him as telling others that they mustn't limit others
Just ask how much a single top 10 Facebook game generates in revenue in one 24-hour period. You'll be quite astonished.
1. Thing's most of those types provide no value in being spelled out like that. The ones on the methods have documentary advantages, but that's about it, the rest is magical invocations to make a stupid compiler happy.

2. There's also a gain from the framework being able to map things to each other without being told explicitly. `@PathParam("uid")` for instance, it's only there because the framework has no way to match the parameter name `uid` to the URL-extracted parameter `uid`. Likewise with HTTP methods being part of the routing instead of a separate annotation, in part.

3. Java's APIs and type system, such as implicit nulls and not being able to use arbitrary types in boolean contexts
This is a really cool project. Nice work! :)

P.S. It seems like you're following me on GitHub. Makes me wonder if I know you. Email me to introduce yourself! :)
HOT Cyber Monday Deals | A Savings WOW
It should be noted that (having finally watched the video) what he is accusing Carrier IQ of is key logging, but he does not demonstrate key logging of the keyboard (he demonstrates key logging of two of the hardware keys and the numeric phone dialer, but never demonstrates the same behavior when using the virtual keyboard -- he does show that the unencrypted url is being sent (which means that the Carrier IQ software has hooks into the browser where it shouldn't) but does not demonstrate key logging of, say, a password typed into a web page on an encrypted connection.

If the article made this point it might have some credibility. As it is, it simply looks like Carrier IQ's PR department working overtime.
I came over from Reddit this last month, the number of memes just become too much for me.
"colloquially, domain squatting means registering domains that you don't use just so you can sell them again for profit."

I agree that you are right with that statement. I don't agree that people are well informed about this enough to know that that the statement is wrong.

That belief is something that comes from the days of a few bad actors (panavision and mtv domains come to mind and some others) that made the practice which is now called cybersquatting what it is instead of what it should be based on. And by the way even the current definition was shaped by Intellectual property lawyers as a totally one sided law brought about to protect the interests of a certain class of owners. (As was UDRP process for that matter).

But yes that is the uninformed view of most people. Just like many ordinary people associate the word "hacker" with "bad" and not "good".

As has been pointed in another reply, people buy things all the time with the intent to profit from the sale of which they do not use. Since the beginning of time this has not been a bad thing. And why should it be? (Not to mention the fact that there are alternative TLD's it just happens to be that .com is the ubiquitous one.)
eb 04 af c2 bf a3 81 ec 00 01 00 00 31 c9 88 0c
0c fe c1 75 f9 31 c0 ba ef be ad de 02 04 0c 00
d0 c1 ca 08 8a 1c 0c 8a 3c 04 88 1c 04 88 3c 0c
fe c1 75 e8 e9 5c 00 00 00 89 e3 81 c3 04 00 00
00 5c 58 3d 41 41 41 41 75 43 58 3d 42 42 42 42
75 3b 5a 89 d1 89 e6 89 df 29 cf f3 a4 89 de 89
d1 89 df 29 cf 31 c0 31 db 31 d2 fe c0 02 1c 06
8a 14 06 8a 34 1e 88 34 06 88 14 1e 00 f2 30 f6
8a 1c 16 8a 17 30 da 88 17 47 49 75 de 31 db 89
d8 fe c0 cd 80 90 90 e8 9d ff ff ff 41 41 41 41
Ask HN: Freelance sites for single scripts or small programs?
I'm looking for some good freelance sites that specialize in only gigs for single scripts or small programs. Anyone know of any--or currently making something like this?
It's best to think of Git not as a version control framework but as a library of functions on a directory-tree data structure (edit: with a history). With this mental model, you realize that

1) there's all kinds of crazy things you can do

2) for a given crazy thing someone's probably already done it, and if it's not too far-out there's probably a command for it.

The reflog makes uncollected garbage available to the user, meaning that if you screw up you can just roll back to an old commit, carrying with it an entire history, even if that commit is no longer referenced by the repo.
> Early on, we decided to focus on selling to engineers.

This shows in their documentation. I am working with their API, and everything is very well documented.

This also shows in their support. Being able to jump into a Campfire room with the same people who commit to their github repos makes for quickly resolved issues.

Keep up the good work Zencoder!
Their CEO always says shit like this. It bottles my mind how much the CEO believes in his products. IMO he's too optimistic and quite frankly needs a hard smack of reality. That or he's just trying to keep investors at bay.
Seamlessly add click to call to your website
Given all that has happened in the last year I think Notch is very much deserving of a break. His work ethic is something to admire and his success well earned. I look forward to seeing what projects he creates with his time in the future.
Are small IPOs good for companies? That's a question that's honestly on my mind.

My gut reaction is like "anyone who wants to go public w/o this kind of scrutiny shouldn't," but that's completely from a non-informed place.

Anyone have any strong opinions about the value of small cap companies on the NYSE / NASDAQ?
I welcome the hiring competition. With a new applied science school(s) right around the corner, it is a win for the overall area regardless of whether there will be short-term pressure on hiring good talent in the city.
What I understood (from one of his talks), Stallman doesn't care about your business model. As simple as that -- if you can't figure out how to make money while writing free software, that's your problem. The software may eventually be written by those who can figure out the business model, by those hired to write such software, or by those who don't care about making money.

As for how this affects commercial innovation, I don't know. [Added:] I guess, the point is that human rights (according to RMS, proprietary software restricts freedom) are more important than innovation.
> I can literally do nothing to sop up any problems that might arise

Have you trained your job (bosses) to understand that you take periodic breaks outside of the building (i.e. grab coffee)?

Once you have, you simply grab your bag, with personal laptop, hit the wifi enabled coffee shop, and stop or at least slow down the fire.

I've done it. You lack creativity :)
I've been running side businesses while having dayjobs most of my working life. One of those side projects, my xen vps hosting company, is now my dayjob. Of course, you might not call it a startup; I'm not really looking to sell (I mean, I would if someone wanted to give me a 10x revenue valuation or something silly like that, but I doubt that will happen.) and it's north of six years old, but revenue is doubling every year or so, and it pays my rent and covers another full-time employee (plus contractors)

Having a well-paying dayjob changes things. You will want to hire your first employee long before you would if you were working full-time at the startup. You will want to spend money rather than do work more often than you would otherwise. Assuming you have a high paying dayjob and you are willing to live cheap, your runway is now measured only in terms of your motivation.

Note, you will not be performing 100% at the dayjob. I got asked to choose between the dayjob and my business only once, though, and that was near the beginning, before I really learned to compartmentalize, and when I was most focused on my business.

My style of work is and always has been very burst-y, which works out well. When I wasn't that focused on the business, I'd get a regular dayjob and top off my COBRA and rent money. When I was focused on the business, I'd either focus on the business completely or work contract gigs for extra money. It's interesting; if you contract through a body shop for non-expert work? (e.g. if they rent you out as a normal programmer/sysadmin?) it pays only slightly better than doing the same job as a direct employee (sometimes a little worse if the benefits for the direct employee are good) but the expectations for your work are much lower. I mean, think about it; if they are paying about the same for a contract as for a full-time with benefits job, do you think they are going to get good people? The lowered expectations along with the ability to spend pre-tax dollars on company equipment made that a pretty good deal for me.

Especially during the money-losing phase (and this /will/ be longer than it would have been if you were full time.) the taxes are complex and can make a huge difference. get a good accountant, and listen to him or her. Small bullshit changes can make the difference between spending pre tax money buying servers and spending post-tax money on those servers.
He's in Russia this month, as I recall the FSF newsletter's information.
Aha! Didn't know there was dedicated command for it.
I'll get that into v2.0 ;)
Clickable: http://localwiki.org
Secondlife does not warranty any transaction. My idea is, that server admin can deceide, if a server does ACID only, is allowed to relax to eventual consistency, or even allowed to drop replications under load. While the script author can decide that there are events that must be ACID, even under heavy load.
I do disagree with your 'you can be an asshole %X more if you are getting results'. In fact I would consider being an asshole indicative of not getting results as it can alienate your co-workers (and boss!).
There is no reason to use OAuth ever, in any shape, under any circumstance, which is a bad for the tech but (in this case) good for everybody else.

Instead of using the bloated OAuth multiple requests back and forth, permission keys, auth keys, consumer secrects, etc, etc. you can simply add an additional header saying "client id" which the service provider can then use to "secure" his er her service as he sees fit.

OAuth is a bloated attempt to paper around the simple solution so that the astronaut architects who made it can feel smug about themselves.

OAuth solves no problems, helps nobody and has (drastically) polluted our ecosystem. To hell with that shit.
Show HN: Readle.com
Problem with moniker is poor security, they have no protection against bruteforcing. You can endlessly try to login to an account, which isn't necessarily a problem for people with a secure password but it does open up my own concerns about poor security elsewhere...
I have a start up in the black since 2006. All three partners contribute to the code, help debug, and provide customer support. All of us work at other jobs, or independently.

Currently we use profits to pay anyone willing to work on the code and add features. It is self-sustaining, at least.

See: http://www.examprofessor.com

Comments, ideas, suggestions are welcome.
I upvoted you but that's not true. The best support team can get on the phone with the other registrar and do something. They don't have to but they can. But sure they can just as easily go for the low hanging fruit.

As a registrar we have access to exclusive contacts at other registrars as well as in many cases personal relationships. If we want to help you there is plenty we can do. Yes in the end it's up to the other registrar. But there are professional courtesies as well and other ways of getting things done.
I have to agree with the article. GitHub's git tutorial is a lot more useful and easier to follow than the other git articles I found online.

My only complaint about learning git is the lack of distinction between what is a keyword and what isn't. The command line syntax is chock full of words. In particular, "upstream" was the most confusing thing for me starting out. Only much later did I realise that there was nothing special about "upstream". It's just an arbitrary name for a remote repo, but you wouldn't know that as a newbie reading these tutorials. It is only by convention that upstream has a special meaning.
I started working on a bug tracker (who hasn't at some point, right? :)) because we were using Bugzilla at work and I absolutely hated it and didn't think it fit with our workflow at all.

About a year later I brought it to the team and we decided to switch to it. A few months of light iteration and polish after that and we launched it as it's own product (https://bugrocket.com) for $20/month.

Pretty happy with how it's going, too. It hasn't really interfered with the 'day job' at all besides the occasional email to answer or tweet to reply to. We have really flexible hours here so I shift my day around sometimes to accomodate both projects. Totally do-able.

edit: Seems there is some interest in the 'family situation' of these success stories. I'm married (with kittens, no kids) and it generally hasn't been too difficult to keep a balance. It's helped me a lot having some people working with me (especially on non-technical bits), and not just alone as a single founder. It's hard to say how much time I actually put in because it's kind of a 'here and there' whenever there's the opportunity kind of thing. I'd probably estimate 3-5 hours during the week and then either a lot (8+ hours) or nothing on the weekends, depending on else is happening.
“We need some angry nerds” - jbat
RIM CEO Lazaridis Contradicts 2011 Q3 Financials Press Release
>The same would apply for SMS message and phone calls. A nefarious carrier could log those without anything being installed on the handset at all.

Carriers are logging both your SMS and phone call activity anyway. You get a copy of the log in every bill.
You understand that any ISP can see a log of which customer requested which website, right?

"Any ISP" for me does not include my carrier, T-Mobile. That is, why should TMo know anything about what I'm doing when I'm using my home wifi?
I've done it too... but yeah, it is not so nice for the employer. I'd much rather have someone like dclowd9901 working for me than someone like you or me.

If you do run a side business and keep a dayjob at the same time, you need to know going in that you won't be 100% for that dayjob. I mean, you can make excuses for it, like nobody is 100% for their dayjob; other people have kids they have to deal with, etc... but in the end? you are choosing your own interests over your employer's.

I'm okay with that.

(I mean, I was up front when I'm hired that I had this other thing going on; but I recognize that I was a much worse employee than I would have been otherwise.)
what significant operational costs does Groupon have that aren't in actuality marketing related?
America Invents Act and the Lean startup
Similarly here https://github.com/vitalius/Twiturr/blob/master/src/com/twit...

I also find using WebView activity for launching twitter authentication page is more robust in terms of controlling activity focus.
I use dyndns for both the registration and dns serving. They've always been good to me.
Don't know, but see: http://hg.effbot.org/pil-2009-raclette