skysight-inc/HackerNews huggingface dataset:
I don't think we post any details about the exploit, just the fact that someone reported it (see https://www.facebook.com/whitehat). Of course, once we've fixed the bug, the reporter is free to write about the exploit, how long it was live, etc.
I'm curious, how early did you start measuring and learning from your product - did you spend 5 months doing this before launching anything, or have you had prototypes or anything to get user feedback (qualitative or quantitative) starting from early on?
This is sorta consumerist.com's model.
Human tooth pulp stem cells promote regeneration of spinal cord injury
Unfortunately, there's no way to guarantee that you're not the product without access to financials and inside thinking, even if you're paying. There are plenty of paid services where you're the product, because the people buying your usage data or access to you are paying so much more than you that your revenue is negligible.

With many magazines, the only reason they even bother to charge is to prove to advertisers that you're a "serious" reader: they don't care about your subscription fee, but about what it says about your value as a product. This has even led to a weird cat-and-mouse game where magazines try to give away free promotional subscriptions while pretending they charged you, and advertisers respond by demanding that subscription numbers be audited by third parties so magazines have to prove that you "really" paid (and this produces complex legalistic rules about things like whether paying with frequent-flyer miles counts as paying). That's because they really want the "paid subscriber" bit to sell to their advertisers, but don't particularly care about your measly $20.
They hear it because it's really, really hard to do good crypto. As a rather impressive example, nearly all of the submissions to the NIST's SHA-3 hash competition have holes in them. https://ehash.iaik.tugraz.at/wiki/The_SHA-3_Zoo These are big names and serious, multi-year projects, and they still fail. Bruce Schneier's "skein" hash is one of the few that haven't been cracked (yet).
C# Generics are not templates - Fabulous Adventures In Coding
I'd say journalists are just like investors. They have a lot of people who want their time, and it's difficult to discriminate when you don't have filters. Social proof is one kind of filter... intros are another.

AngelList could really act as a really great filter too, if they built up the site to support journalists. hint hint Nivi and Naval.
Basecamp isn't what explains the lack of updates to PrototypeJS. jQuery itself is, however.

It is (MUCH) faster, got traction quicker, has a larger community and is definitely more flexible. Rails moved from Prototype for good with version 3, which was released a little over a year ago - it would make no sense for Basecamp to stick with prototype.
You can also use the M-x comment-region and M-x uncomment region to comment stuff. If you use it a lot, just bind them to a convenient key stroke.
Org-mode is what finally converted me to being an emacs user.

I'd been searching for a lightweight, console/cli-mode outliner/task-manager when it occurred to me "surely emacs has something for this". It did, of course.

For several weeks I used emacs only for org-mode. Slowly but surely emacs started to take over my more and more of my editing tasks. Now I find myself not even bothering to launch X, but simply emacs from the Linux console (run level 3?). It's amazing how responsive a computer is when you're not using any gui at all.

I've since discovered that org-mode is pretty common gateway into emacs.
Really nice, I've been waiting for this and checking it out from time to time during the autumn.

A few screenshots of a real gallery would have been nice, or a feature list. Its really technical as of now.
The oneline installer looks really cool, but a bit scary, the script looked safe though, so I might try that.

Great work, will try it out in the near future. :)
...I am 18, well, almost 19. I chose community college for 2 years while I save up for the university I plan to attend. Yeah, people tend to judge when you don't choose a "real" college at first. It seems unambitious to everyone in my family except my grandfather (coincidentally he's the financial guru who got me into investing), but knowing I won't be in debt when I graduate is more than worth it.

I completely agree that there is a lot of pressure to go straight into the most prestigious college you can. Between for-profit college TV ads pressing the importance of a degree, school counselors telling you to "aim high" and constant expectations of everyone around you it's much easier, socially at least, to go straight for the expensive university. It's nothing new, though; as Henry Ford put it, "Luring people into debt is an industry." Looks like that industry is still going strong.

I didn't mean to come across as arrogant with my first comment. It's certainly hard to go against the current, and I think the main problem is schools and parents not encouraging an affordable college, at least for the first few years, as a viable option. People just tend to be blinded by hype and expectations, not wanting to disappoint the family name. There's certainly a lot of that attitude where I went to school.
Show HN: Mobile SDK enables live chat support & visual assist
some companies are successful because of (rather than despite) "evil sales dept"
I personally don't think that default is silly. I've noticed that some (usually less important) questions use y or n already; the yes/no is reserved for important ones. I don't mind having to type a bit more before recursively deleting a directory, for example.
this is great for dwolla. I'm glad this made CNN. Paypal needs all the negative publicity they can get.
Yeah I completely agree. It's a really educational experience to be in the middle of this college bubble. A lot of economics can be learned through all this.
I prefer an alternative: use a free service, but assume it'll close next week; the key is to make them as close to a commodity as possible.

All services eventually close, free and paid, but as long as you control your data, you can move when it happens. Knowing how to script something up to push the data to the new service is important too.

For example, I use Google Apps for my email. I'm not worry that it'll be closed tomorrow, but for all I know, some glitch might kill my account and Google's support isn't. So I got my own domain, I use an email client and keep very regular backups on everything. If it closed, my only loss would be the couple of hours while the MX records update.
Just to be contraversal, I'm going to suggest 'The Old New Thing', by Raymond Chen.

Not so much for the details of windows (although those are interesting), but it is the only book I have ever seen that attempts to show how a large software project evolves over a long period of time.
Like the concept, and have been looking for something like this for all the baby photos.

Feedback:
- The checkboxes for DropBox vs S3 should be radio buttons.
- The hover text for Dropbox vs S3 should also work on the selection control (not just the text). It was not obvious how to find it. A little (info) icon on the end would be even better.

Add some more invite codes, and I'll get in there and send more feedback. :-)
>the fastest way to find out is free market experimentation

>exposed their schooling system to free market competition

not all things can be effectively put under free market framework. Bottom line optimization and profit maximization, natural main objectives of the known free market implementations, don't work well for nuclear weapons maintenance, law enforcement ... healthcare and education for that exact reason that the main objectives in all these areas aren't the bottom line and profit maximization. For example, private prisons and healthcare in the US is highly profitable enterprises, while they serve their main objectives worse then their non-free-market counterparts in comparably developed countries.
It's about the same between the two.

This question gets asked here at least once a month, so check out the search box at the bottom of the page. There's a bunch of good suggestions for each path.
What kinda CTR are you getting? Adsense is a 2 part task. Getting the users to your page (SEO) and then keeping them on the site long enough to browse through several articles and actually click on some links (CONTENT)

It sounds like you're lacking in the content area so I suspect users hit your site and immediately hit the back button. Try to get them to hang around longer.
Are there any graphics in the works? It's fun to click around with as-is, but would be a much better learning tool if one could see the sugar chains be broken down etc. Maybe a flash or spark when a phosphate group is removed from an ATP molecule...
Verizon Blocks Google Wallet on New Smartphones
Thanks. About the HD, that's strange, I uploaded it in HD. http://vimeo.com/33211095
Why We Think We Can Prevail in the Notoriously Crowded Online Dating Space
Don't forget that even if you do make more money on the sale, you're also massively increasing your customer base, and therefore your support costs, so any extra money you make must be worth the increased support overhead for it to be a worthwhile tactic.
This article brings up a good point: if you just found some super-cool free web application that you love? Odds are the only thing you're doing when you use it and recommend it to your friends is creating a nice resume for some large company to do a "talent acquisition" Large companies love this -- they find a couple of guys who are able to identify and engage audiences and then they kill their product and stick them on some other product that the company wants pumped. Web apps are about eyeballs, right? Start-ups are about teams, right? Well what's the logical conclusion then? Startups that gain eyeballs with income-free business models only have themselves -- the team -- to sell. And from some of these sales, it looks like there's serious money in "pump and dump" entrepreneurialism.

This also suggests that there is a pecking order. At the bottom we have start-ups that don't have traction. Then we have start-ups with traction but no income. Then start-ups who can mostly break even. Finally start-ups that have momentum (extra super bonus points for big momentum in a huge market)

The more I look at this model, the better bootstrapping looks.
... whereas if your downloads per time month is a constant proportion of your total downloads to date, e.g., next month the downloads will total 2.5% of the total downloads to date ... and that keeps happening every month, then:

* the per-month downloads will grow exponentially as you graph it over time
* the cumulate number of downloads to any given date also will grow exponentially
The Beginning of a Greek Bank Run?
Pretty interesting niche they're addressing... hadn't really crossed my mind that there'd be a big need for "in app support", but makes perfect sense that if you're paying for an app you should get good/quick support.
Please put an example openphoto site linked up front. I still can't figure out what an openphoto site looks like and feel like I dug through everything.

I'm more picky about a photo gallery's look-and-feel off the bat before I think about proposing/coding changes to it.
Paypal was aware of it, as they claim its written into their policy.

They should stop worrying about the 'important people' and just simply 'do the right thing'. Start with retraining the customer service people to not be belligerent jerks. Next if you're going to stand behind some regulation to monitor accounts, staff it appropriately so innocent people don't get randomly locked out of access to their own money for 6 months.
Data.gov goes open source, first step in government being afraid of the people
Android Market Now on Pace With Apple at More Than 1 Billion Downloads a Month
Are you absolutely certain that it's not just bad phrasing? Perhaps they're generating a new password, and mailing you that one.

(I'm not a nic.io customer, and I don't want to bother registering, so I can't check.)
These are usually "fake", and will show in the lack of proof of revenue. Selling price usually falls within a range which makes you recover your payment in 18 months, if the seller does not set a minimum price around this range, it is just he wants to get rid of it for some reason (blocked by AdSense, blocked by Google, problems with Google search), or is just trying to get attention to the site to withdraw the sale if it does not get to something closer to this.

Hope this helps :)
Thanks! I put up am AMA on Reddit, but no one has bit yet. http://www.reddit.com/r/IAmA/comments/n303s/i_have_over_150k...
We don't actually disagree. I'm just pointing out the consequences. There are instances where I buy things based on those consequences as opposed to what was best for me.
> they are not "donating". These "customers" are buying toys, which are then being sent to other people on their behalf.

It was a mistake for Regretsy to phrase it that way and it devolved into a mess from there. It started as a real donation to pay for the "cause" of giving toys to kids. Paypal's first complaint was that the recipient of the donations (the Paypal account holder, not the kids) was not a non-profit, yet their policies don't state this requirement.
it is somewhat reasonable that older books have more people who read them and learned from them, the effect of a book written more recently may yet be small but will be important later. (Cue van gogh related factoids)
I think you created a new account in the wrong site. Thanks for your great contribution to this thread, but, no thanks.
Thanks. The problem with radio buttons is that once you click a radio button it's not possible to "unselect" all of them unless you have a "none" option.

Since neither of the checkboxes are not required and they are mutually exclusive (they're not really just a restriction on the hosted version for simplicity) -- we went with checkboxes and javascript :).
What happens when BA vandalise your luggage? Nothing.
So are you willing to have native code pushed to you with no control over it? Because that's the major logistical advantage of webapps that has Enterprises trying to use them.

Maybe when NaCL gets better...
Netflix’s CEO Sees ‘Arms Race’ in Streaming
When I see Shanghai listed at the top of the international chart, I always laugh. About 40% of Shanghai's population are non-registered residents that have no access to the public schools, and are not included in the results. To compare Shanghai to the US, you would have to drop the poorest 40% from the US numbers.
Tina Seelig: ‘Chile is like Silicon Valley fifty years ago’
Great point. The sites are 100% themeable but here's one of our default themes. http://current.openphoto.me
Sometimes, but in this case, your blog post didn't say much that wasn't already a part of the original.
Short Idea: Chinese ADR Possible Fraud, Cyclical Industry, 200x Forward PE
Thanks for the feedback. Our example site is at http://current.openphoto.me --- but keep in mind the UI is 100% themeable.
Oregon Blogger Isn't a Journalist, Court Imposes $2.5M Judgement
I have yet to migrate off of IndexTank, but I've heard good things about elasticsearch and am going to be giving it a try once time permits.

Has it been officially stated that indextank will be shutdown anytime soon?
And this is destroying your local retail market. Eventually, once all of the mom and pop shops are pushed out, we will be left with nothing but big box places that do their best to bone the consumer at every turn.

It is simply not possible to eek out anything more than a lower-middle class living owning a retail store any more. Honestly, it is pretty sad to watch. There are a lot of small, local businesses getting hammered away by these retail giants and are almost powerless to stop it.
The very phrasing of these two questions highlights the philosophical differences between emacs and vim: "feature" vs. "shortcut".
He's also giving the commencement at Rice University. http://www.media.rice.edu/media/NewsBot.asp?MODE=VIEW&ID...
What $25k :). We're working on premium features for the hosted version.
Yes, and Rivest's MD-6 dropped out at the first round and DJ Bernstein's (HINT HINT) CubeHash algorithm on the second round of the SHA-3 competition.

But if you don't see the difference between inventing a new cryptographic hash function to improve on SHA-2 and what OpenDNS is doing with DNS then you ought not pass judgment on everyone who attempts to add some useful security where there is none at all now.
DNSCrypt is a DNSCurve implementation. DNSCurve is manually keyed; "the administrator publishes the server's public key along with the server's address", which is effectively shorthand for "static keying is left as an exercise for the reader".

You can't MITM a DNSCurve request, because it's encrypted and signed using a pair of static keys.
I think Code Complete deserves its usual top spot on these lists. You need to understand the skill set of the typical entry level coder, even after acquiring a CS degree. There is so very, very much they don't know and Code Complete helps fill in a lot of the gaps. Most usefully it helps instill the idea that it's important to use practices that are backed up by evidence and that there is a lot more to learn when you get out of school. A lot of the advice in it may seem a little outdated or even trivial to a lot of developers, but it is not less fundamental. Being inculcated in the ideas that it's bad to break the build, that you need to build often, that finding and fixing problems earlier saves a crap-ton of effort, that using proper source control tools and bug tracking tools is generally incredibly helpful. It's easy to forget that there are devs out there who don't know these things, don't have the habits we think should be universal, etc.

As far as coding skill, I agree about Refactoring. Design Patterns is just a grab-bag of tools that are useful in some situations and harmful if misused or abused. Refactoring is a set of skills that are globally useful and are married to equally important models, terminology, and advice. Studying refactoring gives devs a much stronger ability to talk about, study, understand, reason about, and modify code. I'd much rather work with someone who was an expert in refactoring than someone who was an expert in design patterns.

Edit: also, Refactoring concentrates on changing existing code vs. greenfield development, which tends to be far more useful in practice.
Yeah I got that and

arr.push(x) marked wrong instead of their arr.add(x)
That's actually a pretty feasible suggestion! I can't spend too much more time on it because of my education and because the main functionality of the app is finished, but the visualization of the release of energy sounds doable. Ideas on how to do it with pure Javascript/HTML/CSS?
The Hacker's Dictionary (or Jargon File, if you prefer) introduced me to a wealth of tidbits about the programming field. Either directly or indirectly, it prompted me to learn Emacs, TeX, and Lisp; to study Knuth; to volunteer for the GNU Project... but this was years ago, at a time when much of the contents of the book were somewhat historical, but still relevant. It's more out of date now, and perhaps wouldn't be as useful to novice programmers as it was for me.
Why I use email as my to-do list manager
Also, I think Costco has an advantage because they get custom packaging/bundles for a lot of their products. It's the one place I often can't scan the barcode with Amazon's app.
It's unprofitable, at least in part, because it wasn't a paid service. If it was a profitable service then it's far more likely it would have been kept alive when bought out (or maybe not bought out at all).
Nah, it's for a different demographic. Khan Academy is primarily for high schoolers, whereas MIT is for college students (and beyond).

MIT OCW could definitely learn something about design and ease of use from Khan Academy, though.
Much of it depends on what you'd like to do. SAP's bread and butter is the NetWeaver Application Server (the ABAP based platform that holds together most of the core modules SAP provides). Its by far my main area of focus and its the technology I'd recommend any developer focus on if they're interested in SAP.

Things have shuffled around so much I couldn't even tell you exactly where to look anymore if you wanted to get more into the 3rd party partnership area. I'd say start with the SAP EcoHub since that is what all the "app store" type SAP stuff is falling under now (or last I checked). There is a lot of traction here as SAP continues to try to ramp up cloud based offering and it could turn out to be a really interesting space if you can find a way to get into it.

Theres also the whole data analytics area which involves Business Objects.

And for those familiar with Java and not really interested in picking up ABAP, there is the composite environment which is supported by a variety of tools integrated into eclipse.

As far as tutorials go, I'm not entirely sure whats out there now but SCN/SDN (the SAP community) has a lot of content in it. If you're looking to learn ABAP you can also check out the tutorials from Thomas Jung: http://enterprisegeeks.com/blog/2010/07/30/abap-freak-show-a...
Acabo de ver que eres de Barranquilla! Bueno saber que hay buenos hackers de node.js en Colombia :)

Edit: o de venezuela? Igual, muy bien!
I haven't had an opportunity to delve into the technicalities of your value prop, but why not dovetail your efforts with projects like LockerProject or ThinkUp which are also open source. They have a vision very much in-line with yours (at first glance) and have an established userbase which is growing as well. Wouldn't some consensus between these data-liberation projects benefit the userbase more than having a separate photo-liberation app?

These are honest, sincere questions and not intentionally poopoo-ing on your well-earned success.
Some Truths About Software Development
Startups disappearing one way or another is orders of magnitude more common per capita than bus pancakings.
Google and Facebook are free because you are the product. They make craptons of money off of you using their service, selling your usage data, showing ads. That's completely different than Pinboard.
Not to nit-pick, but Facebook is not shutting anything down. They just hired the team, but did not acquire the users, IP, or really anything from Gowalla. Gowalla is shuttering Gowalla and joining Facebook. The fact that the founders are shuttering it and cashing out still proves your point, and I generally agree with it.

[the citation on this is an AllThingsD post - I just dont have it in front of me anymore]
More than that you need to be able to take a skype call, so doing this at work is out
Can entrepreneurialism be automated?
Is that common terminology? It sounds like you're defining "growth rate" as "exponential growth rate." To me, if you're seeing 10, 15, 20, 25, etc. every month, then your monthly growth rate is a constant 5. You're still growing, it's just that your growth every month isn't a function of your size last month.
Ask HN: Hacker Project Sharing
A couple of weeks ago I got this started creating a photo sharing mobile site for lego projects. With it, people would be able post photos from their phone, discover others' creations, and share (retweet) what they find. What a gas! Then this MineCraft + Lego thing came up, showing that lego is doing perhaps something quite similar.

Now, this idea certainly has potential. It could apply to anything hacked together (physically, that is), and could go on to commerce of said hacked items. Sweet! Sell what you make!

Where what other potential markets should I look in to? Is this a foolish idea or a fantastic one?

-- brickbook.co
Thanks Andres, I'm Venezuelan currently living in Colombia :)