skysight-inc/HackerNews huggingface dataset:
Go ahead and dismiss this, but I found it valuable. It's not often that a high-profile company publishes their own uptime data, and it has a clear and useful purpose to me. When I'm planning for uptime and making agreements with our customers, it's nice to have a point of reference. In other words, if 37Signals has a hard time getting to four-nines, I would anticipate similar struggles. I may write a four-nines (or five-nines) SLA, but I'll write the penalties in a way that doesn't shoot a hole in my boat.

Yes, we have our own uptime data, but we're a young company, and we're still scaling. Coincidentally, on a similar stack to 37Signals. More data is better.
Had the same problem but Chrome zoomed out for me.. (Chrome 16 -> [command -] on a mac.)
400,000 Israeli Credit Cards Information Leaked by Hackers
There are frameworks like Skeleton and Zurb's Foundation that handle the media queries and resizing/restyling for you, you just have to use their markup. And what they do out of the box is pretty much enough unless you want to hand-tweak a style down the road.

Also, responsive design doesn't have to be about getting your website to work on your 2001 Nokia brick's display. A good first step in responsive design is just to take advantage of the full width of the device your user is using up until a point. A lot of websites I view from my netbook could take advantage of just one media query: a full-sized design for large screens and then a fluid width design for anything smaller. I find a lot of websites give me a horizontal scrollbar on the 10' screen.
Paleo Diet Meal Plan - Strategies for an Effective Paleo Diet
Here's the complete page of Paleo diet meal plan. It features all Paleo diet meal plan questions and answers.
Or SPACE and SHIFT-SPACE. But it also took me a bit to figure out how to navigate the slides.
IOS, Android App Downloads Top 1.2 Billion in One Week
Apple TV Hacked to Run iOS Apps at Full Screen (source story)
ITV, iPad mini and iPhone 5 with NFC, 4G will extend Apple’s lead in 2012
You mitigated its importance by saying:

Unwarranted paranoia... Any time you set a password it travels in plain text (typically - and hopefully - via a secure connection) and it arrives to their server in plain text.

This is true, but data in motion is less vulnerable to compromise than data at rest (due to how the Internet works and how web applications are programmed), and so the conclusion "unwarranted paranoia" is wrong. The paranoia is warranted.
I realize it's a bit nit-picky and off-topic, but it was interesting to see C written with spaces around the "->" (access structure field through pointer) operator.

What is almost always written as "a->b = c;" is written as "a -> b = c;" in the Tofu code.

I guess doing so makes sense if you also promote writing "a = b + c;" (which I do), but it was still novel-looking, to me. I guess you can treat -> as any other binary operator.
Blog Commenting Organization Tips
Fewer startups raised more funds in 2011
Like Google Alerts, get social alerts
> If you can reproduce the plaintext in any way you're guilty of storing plaintext passwords.

Although I get your point, this statement is a bit too broad. What about brute force? Get enough parallel hardware running fast enough and you can eventually reproduce the plaintext for any ciphertext or hashtext.

Besides brute force, there's also dictionary and rainbow table attacks to consider. Are you guilty if the plaintext can be reproduced by a table lookup? Are you guilty if you properly salted, but the salt storage was compromised too? Are you guilty if you enforced password-complexity requirements to foil a rainbow table, which led to the user writing down KuteK1tty!123 on her Post-it and a co-worker stole it?

These aren't easy questions, and there's no magic solutions, just a cloud of less-bad options.
Iron digi-curtain: Belarus nationalises internet
The server needs the plaintext password once, to generate a salted hash. From then on, it can send the salt and a challenge to the client. The client hashes the password, salt and then hashes that with the challenge and sends it back to the server. The server hashes the challenge with its salted hash and they should match.

This still has to be done over SSL because otherwise the JS doing this on the client side is subject to MITM.
I've never really understood this logic; is there really a large percentage of people who flash a custom ROM and then call customer support for help?

This is just conjecture, but I feel like those two groups (people who flash custom ROMs versus people who call customer support) are fairly opposite...
10 New Year’s resolutions for designers
I should clarify: I think the "stimulus not big enough" argument is fallacious. I think that government spending substitutes for private spending, rather than stimulating it. (e.g., dollars the government spends on tanks are not spent on goods desired by consumers. It may stimulate economic activity, but it reduces aggregate well-being.)
You do a double hash. Basically, toSend = hash(salt + hash(password)). The server stores hash(password), not password.
Twitter is first tier and Oracle is second tier? Are you aware that one company has a product that a 10th grader could prototype in an afternoon and the other sells gigantically complicated software packages that can run 100K/CPU? And IBM sells multi-million dollar computers. Maybe I don't understand the term "tier" though.
Shared-key cryptography is the wrong choice for one-to-many communication. Public key cryptography solves this problem correctly. (You use public key cryptography to share a secret, which you then use as the key for whatever secret-key crypto you want to do.)

Consider the case of VPNs. When you have two trusted routers to connect, you use a shared secret. That's because both routers are in the same secured datacenter environment; both are equally trusted. When you have users connecting to your VPN, though, you issue each user a unique certificate (which is a crypto-based identifier). This is because you can't trust individual users the way you can trust a server in your datacenter.
But at least you can't recover the password to log into other sites. I thought that the main goal here was to avoid the scenario where an attacker recovers your password on one site and can therefore log in as you all over the place if you made the mistake of reusing it (as most people do).
Miami, Florida, REMOTE

Established Wall Street energy trading firm has moved to beautiful Miami, Florida and is looking for REMOTE (contract or perm) software developers for our energy trading and back office support platform. We are revolutionizing the commodity trading space and are looking for those who think different, and not only can code but can contribute ideas and concepts to take us there! We're a Java/MySql/MongoDB/Maven shop, use Mercurial for source control, current stack runs on Tomcat/Xfire and we are moving to JBoss. We don't mind where in the world you are as long as you don't mind working in the Eastern Standard Time (GMT -5). We've been in business for five years now (trading for 14) and are hiring in these areas:

1. GWT front end developer
2. Backend Java developer, requires strong Maven skills.
3. Hibernate developer
4. MySql DBA
5. JSF developer (JBoss Seam is a plus)
6. .Net/MongoDB developer, must be able to work with real time data feeds, crunching and processing big data. Graphing/visualization gurus are prized!

Contact Robert at careers [at] kemplerenergy [dot] com we'd love to hear from you!
Despite the fact that HN is run by Y Combinator, not everyone here is a startup founder.
What am I supposed to see? I only get a black circle.
Sexist post. I vote for removal from HN. Though they don't specify gender...
How does that statement hold true? I can easily think of an application that just uses a simple service on a separate box behind a firewall that only accepts an email and then sends the password. Authentication works via CHAP or any other auth protocol. The application itself never has access to the plaintext password.
Granted, an attacker may gain access to the app-server and then proceed to crack the authentication server, but he could also just rig the application to pass on any password it receives. Just about as good as cracking the auth server and far easier to do. (Added bonus: works for hashed passwords just as well).
Granted, this may seem tons of work for a simple solution, but from there on, it's a business decision.
Trimslice is significantly more expensive though.

If you're a complete noob like me and still have difficulty reading electronics diagram, or sketchy on how transistors work, then get a cheap hackable arduino until you're ready for the more adventurous stuff.

HD video might be out of reach, but you can output to TV (see gameduino). Processing is limited, but you can ship processing to a server via ethernet (see nanode). Storage is limited, but you can have SD card shields (or use a remote server). Or how about radio control (see nanode RF http://http://nanode.eu/)?

Plus an arduino might be a nice companion with a Pi/Beaglebord/Trimslice for remote sensors or remote control. or maybe Lilipad arduino for wearable computing apps.
Blog or Not to Blog
Original post, 305 days ago.

http://news.ycombinator.com/item?id=2285353
There's no question that Cablevision is acting like a bunch of jerks because they own the Knicks, Rangers and MSG. They have drastically increased their fees over the past decade like every other cable company has.

That said, Fred Wilson is not paying for MSG technically so it is piracy if he doesn't get it from the MSG network.

I've had to deal with many years of Cablevision fighting higher fees and blackouts from networks in which the fees are later passed onto the consumer. Frankly I have no sympathy.
Why I Went Back To Jekyll - Also Rackspace Sucks
For those who are left wondering what purpose it has, it's apparently intended to "wreak havoc" on sites which hotlink CSS-files.
The End of WebOS
5 major changes facing the Internet in 2012
A plea for progressive enhancement
But he already pays for Time Warner cable, NBA League Pass, and Knicks tickets. Why should he suffer because MSG is greedy?
RIM replacing Balsillie and Lazaridis as chairmen of the board
I agree, but in searching around on some Samsung forums last night I did come across someone who had accidentally gotten into "reflash mode" (or whatever they call it) and had no idea how to fix it (i.e., hold down the power button for 10 seconds).

Run this story up the chain of command and what comes down from management may very well be "lock the bootloader so we don't end up like Sony", even though that may not be the root cause.

Still, I'd thought better of ASUS.
Using nltk on the AI-Class mini-shredder problem
We made our customers happier in 2011
The Joy Of book, but with more familiarity than last time I tackled it (and fell flat on my face!)

I am facing the same problem. I tend to run into that problem, because the moment I see some non regular programming aspect being discussed at length it becomes a little boring. Also I can't co relate that with my practical experiences.

I enjoyed functional programming thanks to Mark Jason Dominus's "Higher Order Perl". Which taught me all functional programming stuff in the most pragmatic way out.

Now that is what I look for, material that teaches me all this great stuff in the framework of my real work. Then it becomes really enjoyable and graspable.
You might learn that if you want to learn any of those things in clojure understanding these concepts really help. The librarys of clojures are all build on these functional concepts. You will have a much harder time understanding the librarys if you think you can only look at how to call some api. All the business logic that I write in Clojure uses these concepts, there is a reason for this stuff.

Clojure is not python and not java, the fundamental concept is diffrent. If you allready understand these concepts just go to github and look at the librarys for logging, databases and other stuff. How to use a library you can learn looking at the documentation of the library, learning how to programm idiomatic clojure needs some training.
Well, my comments above were meant as a joke. Mostly.

Good article. Of course not all work that I do is the productive, or the so-called 'deliberate practice' kind. As referenced by the fact that I'm following up to my own comments on Hacker News. However an important difference between running a startup and playing a musical instrument is that I'd argue its a lot harder to know what the really effective work is, which means you'll generally have to try a few more things.

No, I'm not quite as bad as the charicature I've described above. I've found that doing a bit of daily exercise is one of the most important things not to give up when working on a startup. You feel and sleep a lot better which affects everything.
99designs and Eight Values of Identity
The last third-party Javascript snippet you'll ever need
2014 | Quazen
"Since I don't have any experience with it, what do you think is the
reason that it's not used very often for building large enterprise
applications (or maybe it is, and I just don't know about them)?"

Well, I don't know if it's even clear why other languages are used
for enterprise software?

I don't think that their technical or whatever superiority was the main
reason. Sometimes it seems that everything that is needed is to push it
with a lot of marketing into the mainstream and then just let it go.

At some point there're more libaries for a language, most people use that
language, universities are teaching it, so that's then the main reason to
use a language.

Java might been there, pushed into mainstream, at the right time, with the
right features, which made it less complex and less error prone (garbage
collection, no memory pointers) to use, compared to C/C++.

But perhaps there's something about "object orientation", how it's
implemented in Java, which makes it for people easier to grasp, if I read
all the hate about these strange scheme/lisp courses in universities, but
perhaps they're just already used to much to other languages.

On Haskell, at the beginning it looks very strange, especially compared to
languages like C/C++, Java or C#, but I think that most of the felt
strangness is a matter of habit, because most of the mainstream langugages
aren't that different.

I don't think that learning Haskell was that much harder for me than
learning to program in C++ or Java. Sometimes people seem to forget the
challenges they had, when they learned programming for the first time.
I'm not talking about vpns and such but more about (rest-)api authentication. About what amazon uses to generate signed urls to S3-Stored files. It's an hmac used to create a signature using a pre-shared secret and some properties of the request (mainly the url) as input. The PSK must be available to both parties.
Resolutions for programmers
I was about to order one too.

Instead I went out last night and bought a Samsung Galaxy Tab 10.1. https://twitter.com/#!/marshray/status/154039917322838017

The bootloader isn't locked, but the 'Heimdall' flash backup/restore tool doesn't work with it. (yet :-)
Classic Cardy Tall Uggs
Classic Short Uggs Cheap Sale 33% OFF : Classic Cardy Tall Uggs - Classic Short Uggs Cheap Bailey Button Uggs Cheap Classic Tall Uggs Cheap Bailey Button Triplet UGG Argyle Knit Uggs Cheap Classic Mini Uggs Cheap Classic Cardy Tall Uggs
Why don't programmers have high social status? Because:
- their craft is arcane (everyone can grasp what either a doctor or a lawyer do, but grasping what programmers do is more difficult);
- they are socially inept (goofy attitudes, disregard for their appearance, etc.).
- they sell themselves cheap (since they are eager to help, often they don't make other people appreciate their help).
Just a little something I've been working on over the holidays.
It uses a lot of WebKit-specific extensions, so you need Chrome or Safari.
I actually find "->" with spaces cleaner and easier to read (just like with almost all the other operators). The "->" operatore without spaces around is very popular (also in Perl code AFAICS), and I sometimes wonder why people do put spaces around e.g. "+" and "=" but not "->".
It took me at least 30 seconds to figure that out. I clicked darn near every pixel on the page before that occurred to me :)

I guess you really stick by that rule of "one way to do it", huh? I kid. Great presentation, I like your passion and I hope that your call to arms is answered.
No. Font size, kerning, multiple columns, etc. are all better alternatives.

I wouldn't mention it on any other page. It's just that this article is about responsive page design. But it's not responsive itself. The post itself mentions: "Use a big font size and an adapted line height (this template uses 16px / 24px)." and "To design a responsive layout, we have to forget about the usual static 960px width layouts"
Cyrus Innovation - Boston, MA or New York, NY

Cyrus Innovation is an NYC-based Agile development consulting firm. We embrace the latest Agile practices, technologies (Rails, Java, Scala, node.js, Groovy, MongoDB, HTML5), open source tools, and strive for continuous process improvement.

Cyrus is looking for developers who are passionate about coding and enthusiastic about Agile. We offer a ton of great benefits including true 40-hour work weeks, health, dental, vision, 401 (k), generous vacation and professional development programs, a casual work environment, and much more.

If you think Cyrus might be a good fit for you, feel free to send me a message or shoot me an email at mrosenberg@cyrusinnovation.com to set up a time to talk further.

To learn more about what Cyrus is all about, check out www.cyrusinnovation.com
Right. Website restaurants are usually overloaded with annoying flash and -- gasp -- music and/or other noises that tends to blare out loud when it's least convenient and most embarrassing. It's a case of poor taste gone even more horribly wrong.

Looks like the OP should have plenty of business - but one thing I've noticed is that many people who otherwise have a good sense of taste and decency for interior-decorating have none of that when it comes to web design, so they might not even notice how bad their websites are...
I've recently looked at extending Nginx for my own gains. This has several advantages over such frameworks. For example, you can serve both flat files and dynamic (C) content using the same server. I suspect, security is slightly better too, since Nginx manage process security etc.
"I'll control for the factors I have data on"

Of course you will, even though - or perhaps because - the intermediate result is far more inflammatory than informative.

"Because the Finns don't do standardized tests"

The fact that they don't do standardized tests doesn't mean it's impossible to know whether they're doing better. They embarked on these reforms because of a perceived problem, and seem quite satisfied with the results. If educators and researchers believe there has been improvement, based on other evidence, then I'm disinclined to second-guess them based on one semi-informed and heavily biased blogger's commentary.
You're probably right but that could be addressed by shipping it locked down but giving the end user a way to unlock it should they desire (Google did this on the Chromebooks). The only other reason I can think of would be if content vendors, say Hulu or Netflix or Spotify, required it for inclusion of their software.
A cubicle-less startup job and its benefits
Show HN: Mobilito, check your website on mobile devices
Is there a serious demand for stereo street view? I wrote this code 3 years ago while working for the Army, then Google released their version of it. But now it's pulled. The code is released to the public so if there is interest in this, I'll see if I can clean it up and release it.
The article is from 191, please add [1981] to the title of the submission.
Bguided - your worldwide cityguide
bguided is a social cityguide completly driven by people like you! manage your favorite locations, organize your next city-trip, search for new in-places in your area, share them with your friends or find new friends with the same taste.

discover, share, meet - never get lost!
You need to learn enough Java to get around, and how to interact with it through Clojure. Java libraries are very comprehensive and well documented, but if you're fresh to both languages the learning curve is steep.

It's sorta possible to get around with pure Clojure, but not very practical.

Leiningen is the de-facto package manager so use that for everything. Clojars and Maven are the two repositories.
I understand what you are saying but it is also reasonable to be pissed when the follow on model takes away an ability the previous one had.
That's good - I guess with startup people these days it's getting hard to distinguish charicature from reality ... not sure that's a good thing.
I've create http://mobilito.net/ to show off some aspects of http://browshot.com/
Were there any other reasons (than just the bootloader) to buy this over the Asus?
Trading in your pain
This makes a lot of good points, but some bad ones.

Esp. the "installing python" one. Just use your package manager to install all the versions you need.

And for "Packaging and Dependencies", just use pip.
The name says it all. This is much more readable compared to urllib2
Just glancing through, these look like great problems to tackle while learning any new language, and I might have a go at just that - translating them to clojure, and looking at docs as I go. If you're interested in doing something similar, my mail is my name at gmail. (You probably know the material a lot better than I though!)
1. He's not paying for MSG technically because Time Warner doesn't have the rights.

2. The League Pass is not for home teams. Every team has their own individual hometown deals and they want you to watch it on whatever network they make a deal with. The League Pass does not apply here.

3. Knicks tickets grant you a right to see the game in person and nothing else. Since Wilson is paying the price for season tickets that most spend their whole lives paying the same price for a house in NY, I'd suggest he go to watch them live.

I don't agree with these policies but this is what happens when you let cable companies buy networks. It should've stopped during the Cablevision acquisition of MSG but it has continued onward with Comcast and NBC.
Is this what passes for journalism on TechCrunch these days? Three short paragraphs that are backed with maybe 30 seconds of Internet research?

For those who actually care, Android has had great "Siri"-like apps outside of the built-in voice system for a while now, with Vlingo [1] leading the pack. Asking pretty much any respected Android mailing list / channel / forum will give you Vlingo as the de-facto Siri for Android that we and iOS users have had before Siri even existed. With one exception: the two-way conversation that Siri has right now. That's the nice feature that I hadn't seen before the Siri-buzzword-madness started.

[1] https://market.android.com/details?id=com.vlingo.client
(I work at 37signals)

Our test logs in, causes some data to be fetched from the database, and renders a page which we then check against what it should return.

We haven’t (to date) had either any false positives or false negatives (when it alerts, the site is really down, and if it doesn’t alert, the site is really up).

This obviously isn’t a replacement for functional or integration tests to ensure that a commit doesn’t cause a piece of the app to stop working, but it does test the full infrastructure stack to make sure that it’s performing the way we expect it to.