skysight-inc/HackerNews huggingface dataset:
The stereotypical San Franciscan gets up at 7am, wears business-casual to work, and his or her hobbies include biking and wine/food. The stereotypical New Yorker gets up at 9am, wears a suit to work, and his or her hobbies include alcoholism and chain smoking.

I'm joking, but only kind of. I spent this summer working in both NYC and the Bay area and it was like a night and day difference. NYC is so much more hierarchical, image conscious and anxiously intense.
"SOPA is a perfect example of Stross’s Syllogism"
You get to the point when you no longer believe a word of what they say.

And then you quit.
> why have we spent 20 years iterating HTML rather than proliferating various hypermedia schemes?

You have to remember that HTML is predated by SGML, and that HTML and its precursors were designed for the purpose of providing document markup. We've continued to evolve these solutions for document markup, and in this regard, they do an adequate job.

However, what we've seen in recent years is a rapid emergence of the use of HTML and JS for producing fully interactive, stateful, and performance-demanding applications. This wasn't due to the suitability of HTML for the task, but rather, due to the lack of any other reasonable standardized competing platform.

HTML has fallen over in this context; the DOM is ill-suited towards standard re-usable UI widget programming, JS is frustrating for building large applications, the performance profile is tremendously bad on mobile devices. This has led companies like Google to task teams with exploring how to fix HTML to be more amenable to application development -- whether it be dart, replacing the DOM, NaCL, or otherwise.*

> Also consider that there have already been two freely targetable VM plugins which have had near total market penetration at various points in the web's history. Both of them were capable if flawed.

Highly flawed. Java's plugin implementation was incredibly technically flawed (just look at the startup times), as was Adobe's (for different reasons). Moreover, Adobe Flash was not standardized, the documentation was sprawling and complex, and the bytecode format and libraries available changed significantly through the lifetime of the product.

However, this does not mean a VM isn't possible; that's what we already have today, with V8 et al.

> Or "better" yet, some real universal client that works like Display Postscript or X-Windows?

Would that be better? There are plenty of fundamental technical reasons those approaches for networked applications did not take off.

Of course, one could argue that <canvas>+webgl provide a modern successor. A generic rendering environment with client-side code execution.
It's a bit after the fact, but 2 things to keep in mind with regards to Android phones:

1. If you can, when you are shopping for an Android phone, opt for a Google Experience Device whose software is vanilla Android and is managed directly by Google.

2. If you already have a phone with a crappy Android build, the best solution is installing a custom ROM like CyanogenMod. Most custom ROMs remove all the manufacturer junk and also tend to work well. When there are bugs that need fixing, the custom ROMs have release cycles that are measured in days or weeks, rather than months or years.

That said, I do realize that not everyone has the time, inclination and knowledge to fiddle with their phone's ROM.
Yeah, this is something that I've been meaning to do. I'll be sure to hit you up if I ever have any business/marketing questions.
Agreed, but the post didn't do that. It painted a pretty accurate picture of VCs as people with a big pile of money that they want and need to turn into more money.

About the only thing I found objectionable is the equation of "changing the world" to "making a shit-ton of money". These are not synonymous, there are plenty of efforts in one category but not the other.
I'm not sure if "any site I visit can add itself to my list of primarity authorities as evil-username@evil-domain", but I do know that the login to the authority is done using Public Key authentication, which unlike passwords isn't subject to phishing. There's no risk in logging in to a rogue authority, since the key never actually leaves your machine.
Excellent reply sir, might I ask another?

The reason I used PHP for my little script was because I discovered that you just ship the output of the form button to whatever.php and it essentially took whatever values as arguments, then quickly spit me back to the site when it was done. I am familiar with Python, and have written some utilities I use daily, but is just as easy to implement Python server side or do I need to install some extensions that handle this sort of stuff?
As someone who grew up on the east coast and migrated here for grad school, I have noticed that west-coast culture tends to be less judgmental, more free spirited, and more novelty-seeking.
My startup was one of the ones selected. We've just got a temporary website up here: http://myster.io

We're a group of three nomads making software from around the word. In addition to the $40k grant, one of the big benefits for us of Startup Chile is a guaranteed 1 year visa to live in Chile! (The biggest challenge to working while traveling is having to change countries every 90 days or so.)

We're building something we're calling a "discovery engine". Its like a search engine, and like search engines it tries to find good quality results to queries, but instead of indexing web pages we are indexing the App Store.
Ok, so this is a way of decomposing just the domain model into smaller parts: a minimal model, role objects that extend it for particular purposes, and context objects that assemble a set of models and roles for a particular use case.

The rationale is, presumably, that you can add and change particular use cases independently of each other and the core model.

Right?
Was "#GodIsNotGreat" pulled from Trending Topics?
It wasn't said by a VC booster though. It was said by one of betabeat's writers.
And more importantly than decoding Captchas - with B-ID there's no need to verify the damn email each time you register.
It's not hatred of pornography. It's hatred of an industry that thrives and profits on suppression, humiliation and objectification of women.
I have two lists: one for new business ideas / MVP, and another for tech skill development - new skills and challenges.
So they know the name that they want removed. Who do they tell? How do they tell them? Do they call on the phone? Do they enter it in a web form? Who wrote that web app? Who maintains the server that runs it? Who edits the DNS record to remove the name or writes the software that does so?

There are a number of intermediate steps between "knowing the name" and "the DNS record gets removed". DNS servers are not yet controlled telepathically, to my knowledge.
>If google released a list of all crawled websites and their IP addresses, if I was inclined I could then take those IP's and scan them for known vulnerabilities

You can already do that. You want a list of IPs running websites? So scan port 80? Your port 80 scan will be finding hosts and adding them to the list faster than the vuln scanning can grab them off the list.
You're not the first person to posit that adding a new VM "almost guarantees breakage". So what? Keep the old VM, transition to the new one by specifying that's what you're targeting, then deprecate the old VM and eventually lose it altogether.

You make it sound like the computing world has never introduced a new version of a language that has implications for the older ones and managed to overcome it. Even the web did this (remember putting your scripts in comment tags?).
Bosses seem to hate being forced to reason out the answer, even if it should be readily apparent from what you said.

If you're annoyed and want to annoy them back, you can do the reasoning for them to point out how simple it is, e.g. "three days from now is Thursday" or "not being able to speak would make meetings useless, therefore I will not be able to take any."
Depends on what security flaws they update, I've had my linux box up for over a year before, but I don't run many services and it sits behind a router. Windows is set to autoupdate, so it reboots pretty often, though.

I'm not saying I'm against updating, but if my phone is working (luckily it currently is), I shouldn't be forced to update unless there is something that actually is a problem for me, like someone being able to send an SMS to me that does something.

All the bugs the original poster notes would make me want an update, too, but I think returning the phone was the right thing to do. If my phone was that buggy from original purchase, I wouldn't want to wait for an update, either.
I think it isn't considered a success for many reasons.

First, there was no excitement generated by the stock. What I mean by this is, no one was willing to pony up and pay a premium to their offering price. This has to do less with the academic approach and more with what actually happens when you help a company do their IPO. Usually when an investment bank helps a 'hot' company do their IPO, they under price it a little bit on purpose. That way, when it goes to market, the stock jumps 20-50% and the company looks good, and everything thinks it's a bluechip company. If you come out flat or your stock depreciates on the first day, it's usually a sign that the market isn't bullish on your company.

This is especially true for tech stocks because they're supposed to be new and sexy. If an industrial company does their IPO and their stock is about even for the day, it doesn't raise many eyebrows. But if a stock that's supposed to jump 20% stays flat, you can see what the market is feeling about the stock.

The second reason why its considered a failure is due to how fast the valuation of the company fell. I think a few months or half a year ago, when Zygna first started talking about their IPO, people were really excited about it. Initial valuations were something like $15 Billion. In the past few weeks, they've had to continually lower what their offer price was going to be because they realized that people were a bit bearish on their stock. So instead of a $15B valuation, their company is now worth about $7B. Or rather, Wall Street thinks their company is worth $7B.

Finally, I think the timing was off for them. I think people are pretty cautious about whether or not this whole internet company thing is going to be another bubble. People started talking about the bubble when Facebook had their $50B valuation from Goldman, but nothing really changed until LinkedIn's stock plummeted recently. This made investors even more wary. Then came the news that Zynga lost a ridiculous number of users in a month (can't remember the number but it was something like 200k I think).

All those things combined made this IPO a failure by MARKET standards.

I still think this is a win for the owners. If they could cash out right now, I bet they would.
It wasn't a PM or anyone technical, but I can confirm that people of "cucumber" intelligence do, in fact, exist in management and that I have personally met them and been ready to tear my hear out during exchanges like:

"We had an error!" "What error?" "Who cares? Fix it!"

In an unrelated note, I think I'm going to start calling such useless reports cucumbers.
There Are Only Types
>> But yeah, you would be keeping out 12 year old me, which is fine. Personally, I would think that the majority of people at these events would be past that point. dono.

Judging solely on all rage I see about costs associated with giving a speech at such events, I can see how it might filter non serious people. I am not saying that $50 or $8000 is right/wrong. I am just saying - it is filter. Even small bump in requirements tends to filter out non serious people.

Here is simple way I look at it - if you can remove 5% of total noobs and get $1000 to spend more on marketing materials, why you shouldn't do it?
Granted, but what if no intentional misrepresentation happened?

Did UMG ever assert a copyright claim on the video? Or do they have carte-blanche to remove any video they want?

If they asked YT to remove it, that might be fraud, because somebody on YT's side would remove the video on the assumption that UMG had a claim.

But if they just flagged the video for automatic removal, is that fraud? Can you lie to a computer?
http://en.wikipedia.org/wiki/Great_Firewall_of_China\

In other words, a reasonably effective implementation that would effect Joe Sixpack.

The US is already abusing their alleged jurisdiction over the .com TLD and unfortunately there doesn't yet seem to be a real risk of fragmentation.
By fragmented DNS, do you just mean distributed? Because DNS is already distributed and consistent. We don't have to trade one to get the other.
I don't normally rise to your mocking/trolling/whatever, jrockway. I am glad you are content with your life and transport choices.

In the past, I have never had problems renting cars. I rented one in Mexico the month previous, no problem. But now there is another requirement for car rental in the US, which is hard to acquire.

It was massively inconvenient to find this out in the middle of a trip to Miami, which has virtually no public transportation or taxis, and spread out over nearly 80km.
CTO role at Mumbai India
Hi,

We are a rapidly growing digital marketing agency with offices in Atlanta, London and now in Mumbai.

We looking to find our head of technology for the Mumbai (India) office with key skills in PHP,MySQL,XHTML,CSS,JavaScript,Flash,Actionscript.

For more details please refer to the Interactive Web Developer role on our careers page - http://www.brandmovers.in/careers

Please feel free to shoot me an email on suva@brandmovers.in. Additionally, please do pass on the opportunity to anyone with relevant experience who might be in interested in joining us.

Kind Regards,
Suva
I assume he means multiple disagreeing roots under control of different organizations.
Clickable: http://gitdash.com

One question I don't see answered is who are my collaborators? Is it everyone who is watching my repo or everyone who has committed to the repo?

Otherwise this looks like a really neat and useful service. UI looks quite nice
Mark Zuckerberg called his users "dumb fucks" and hacked his competitor and several school journalists' email accounts. Yet we don't hold that against him today. Kim has proved that he's changed, so don't criticize him for past events.
Heh, it's funny how that matches my perceptions of the west coast as well. The only difference is in getting up at 7am--nobody at work gets there before lunch. Of course, it's a tech startup, but even the medium-sized (~600 people) enterprise software company had plenty of people coming in around 11-12.
The CAs don't need to play any part in client-cert based authentication. You just generate a cert locally and then copy the public key to the site when you register. Subsequent logins are performed by the server checking if you own the right private key that matches the public key used on registration.

It's like SSH, not HTTPS.

CAs are only useful to match a cert to a domain and/or known organization, or inside an organization to make sure the user has a cert signed by the org itself.
Buying Or Renting – The Best Option For You
Yeah, as I said in a reply below, if I'd have waited another couple months, the Nexus S would have been announced, which probably would have changed my opinion completely.

As to your option 2, that's the type of option "the old me" would have considered; which is "ok, so maybe this thing I bought sucks, but I can root it and replace the software to do the things it should have done out of the box".

I've found that avoiding that line of reasoning has made my life much better. That's not meant to disparage people who do mess around with stuff like that, I think it's awesome that you can even replace the ROMs. I just hope that people who replace the ROMS on their phones are doing it because they derive enjoyment from hacking, and not because it's necessary to make their phone actually usable.
Is there a list of representatives that support this bill anywhere? Just so voters know which people and political parties to never vote for again.
Sure, here are my thoughts:

- First thing I can tell you is that when you redirect to Paypal, you don't redirect to a localized version of Paypal. I was sent to the German version, for example. Probably going to turn off many of your visitors who aren't German-speaking.

- Second, WHY are you asking for Paypal credentials if you're not asking for money. To most people, the perception is Paypal == monetary_transaction. Even if they COULD read what the paypal page was saying, they'll see the Paypal domain and instantly click away. And let's assume that they even see that you're not charging anything, this is still a huge obstacle (30-seconds of diversion is HUGE!) in the way of letting potential customer actually understand what your product does. I say, let your users kick the tires without any barriers. If you're really solving a need, people will give you their money.

- Which brings me to my next point... what does your product do? I can't tell? Do you take short-linked RSS feeds and make full-text RSS feeds out of them? Do you take full-text feeds and perform extraction on them? All of that text to the right of your signup form should say simply:

"We make RSS feeds easily readable."

I'm instantly turned off when you say anything like "...tool that tries, and usually succeeds in, separating actual content from other web page elements such as...blahblahblah". There's no confidence in your product and you take too long to get the meat of it.

- Your text is not given any room to breathe. With your text living on top of each other, it makes it difficult for your readers to scan your page for content important to them. (And believe me, they aren't reading it...they're scanning it.) Consider using a CSS framework that will add rhythm and spacing to your text. http://blueprintcss.org or http://960.gs are both decent at what they do and will give you a great foundation to start (even if you have no design skills).

Please take my criticism with a grain of salt. Hope it helps. :)
Masturbating or looking at women for ths sole purpose to get sexually arosed may be as old as mankind, porn hardly is (and isn't needed to fullfill the need).
Thanks. I've never had issues with using whois or ping. The point still stands, there are plenty of ways of getting an ip address without needing google's help.
> In other words, you must obey the law, even if it is wrong. You must work to change the laws if they are unjust.

I appreciate your perspective, but your last paragraph is frankly absurd. Pretty much every hard-won progressive reform in America was gained through civil disobedience.
Yup it was the text adventure game, and yes I read the whole book. I remember finding the last parts to be the most amazing; I think they were about register machines.
I did not mean to portray Amazon as some benevolent 3rd party in the industry. Amazon was most certainly milking the publishers for what they were worth but they were doing their best to ensure that the content itself stayed reasonably priced and accessible to consumers in order to curb piracy.

I have zero problem with Apple forcing a renegotiation of terms between publishers and Amazon. I have serious qualms about Apple totally disrupting what was a very healthy trend towards reasonably priced ebooks.

Amazon was most certainly protecting publishers from themselves regardless of the split behind the scenes. When you compel people to pirate content there is nothing for anyone to split. Apple disregarded this entirely because at the end of the day they don't really care if people pirate, they just want to make sure the content is available on their hardware.
> "Okay, first, the chances of youtube.com, or wikipedia (why?) disappearing tomorrow are approximately 0."

Funny, the EFF and Google don't seem to think so.

And have you not noticed Wikipedia's donation campaigns? Do you really think they can afford the legal fees associated with fighting SOPA claims every time some corporate/political entity feels slighted by an article and feels like submitting a takedown?
Android tablets will be a bigger deal than Windows 8 tablets
The CTR mode in bouncy castle does not allow one to do partial block encryption. So if you want to encrypt 4 bytes you need to pad it to the full 16 bytes. It will always want to do a full block.

This also means that you can't do a partial offset into the CTR. You can increment the counter correctly, but you can't start encrypting from within a partial block.

Lets say you need to encrypt 17 bytes and write them to a file, which later can be opened in append mode to append more data to it using AES-128/CTR-BE mode:

1234567890ABCDEF\0

C-style terminated string.

That is 2 blocks in CTR mode (1 full block used, 1 partial block (1 byte out of a 16 byte block)).

The next time you open the file you want to append data to it, what you would do is this:

1. Load your previous key, and counter into AES-128/CTR
2. Increment the counter by the full blocks already used
3. Update the location into the current block by encrypting a random byte
4. Provide the rest of your plaintext which will now be correctly encrypted for appending to an already encrypted segment

Now you can read your file back using the following:

1. the AES key, counter for the start of the file
2. Use CTR to "decrypt" the content from start to finish

So that would look something like this in Java code with JCE:

Cipher c = Cipher.getInstance("AES/CTR/NoPadding");
SecretKeySpec keySpec = new SecretKeySpec(aeskey, "AES");
IvParameterSpec ivSpec = new IvParameterSpec(iv);
c.init(Cipher.ENCRYPT_MODE, keySpec, ivSpec);

I've left out some stuff like creating the iv (really the counter), so now if we wanted to advance into the first block what we could do (and this works with JCE) is this:

c.update(new byte[count]);

Where count contains the amount we want to offset into the next block.

On JCE this does exactly what I described above, it moves forward "count" characters into the next block and then you can do:

CipherOutputStream cipher_out = new CipherOutputStream(output, c);

where "output" is DataOutputStream(new FileOutputStream("filename", true)) which is a file opened in append mode. Now you can write stuff to the file using the normal functions used by an OutputStream. This will then correctly append your new data to the end of the file so that if you start reading at the beginning of the file you can read through the end and get valid data. (We are using this to encrypt log files that are opened in Append only mode).

Where BouncyCastle breaks down is that you can not use c.update() to move forward into the block, thus appending is not possible because if you don't end on a block boundary your next write is going to have overlap. The only thing you can do in c.update() is provide it the amount of bytes that is the same as the block size. So you have to pad all input into c.update() to 16 bytes. Basically instead of being a stream cipher that allows seeking it has become yet another block cipher.
Personally, I thought it a bit of an odd idea based on the large geographic and cultural distances between Palo Alto and NYC. It just didn't seem like the right ecosystem for a transplant. On the east coast, even Boston would seem better suited from a cultural standpoint - there is much more of a public emphasis on technology.
I applied but didn't make it this time. I will be sure to apply again :)
This shouldn't bother you. The big problem with vim and emacs is that their shortcuts are so different to everything else.
Or in other words, they are not CUA (http://en.wikipedia.org/wiki/Common_User_Access).

It's not the problem to learn vim, but to unlearn Gimp, Inkscape, etc.
for whatever reason, there is a HUGE demand for etl and bi developers here in FL. Data Warehousing is evidently strong in these parts. You wouldn't know this from reading blogs/twitter/etc but there is quite a bit going on here.