skysight-inc/HackerNews huggingface dataset:
My experience is limited, but I've never had a WSDL provide any tangible benefit. In one instance, the WSDL for a single method (+login) SOAP service generated a 26,000 line Apache Axis2 stub that didn't compile without manual attention. I was able to replace it with about 30 lines of custom code once I had the wire-trace and could figure out the weird undocumented incantations required for it to work.

I suspect that .NET WSDLs (of which this was one) work well with .NET clients - but in that case it's might was well be any proprietary RPC protocol.

Correct me if I'm wrong, but REST discoverability isn't meant to provide machine discoverability, but human discoverability.
http://en.wikipedia.org/wiki/Private_copying_levy#United_Sta...

17 U.S.C. § 1008 bars copyright infringement action and 17 U.S.C. § 1003 provides for a royalty of 2% of the initial transfer price for devices and 3% for media

It often helps to site a source, even if it is just wikipedia for such things.
Did you see thedaily's take [1] on kinect for laptops? The reason you won't see kinect on a tablet anytime soon is this one observation:

"It murders batteries

Devices in the field must be plugged in whenever possible since the Kinect technology drains juice in a hurry..."

Laptops generally have much larger battery capacity (for example my current laptop has 94Wh while an iPad2 has 25Wh), and if Kinect kills laptop battery, forget about mobile for now.

[1] http://www.thedaily.com/page/2012/01/31/013112-tech-kinect-l...
You're lying to yourself if you're suggesting infographics are never biased. And the author did reach out to Jason (twice) to correct his concerns.
> sign their requests with some sort of token - which might as well be a cookie

Using a token to sign requests is certainly a good idea, but you probably don't want to pass the token around using a cookie, even over HTTPS. Many browsers don't enforce good cookie security and will transmit cookies in the clear if an attacker can redirect the browser to a non-HTTPS URL on the same domain.
Is a particularly noisy HTTP API really the fault of a RESTful design? The principles as I understand them should have little effect on this [1].

If something requires multiple API calls when it could just require one, this points to the the resource being too finely-grained and ill-fitting to the behavioural domain of the client.

The resources attached to URIs do not need to be directly related to the underlying data model implementation. The interface which you provide to a client-side developer should closely match their domain and not just your implementation [2]. Provide useful abstractions.

> "To ensure that security (and integrity) constraints are met, REST applications need to contain error prone code that compares the before and after states to check if the transition is legal."

Can you expand on this? I've not run into similar problems myself.

[1] RESTful Web Services correctly inherit and use HTTP as their interface.

[2] http://en.wikipedia.org/wiki/Domain-driven_design
Agreed. The essay answers the question, why is A2Z awesome... but it doesn't provide any reason as to why they want to raise so much (e.g. they see the need to be able to invest hundreds of millions into certain companies), and why now (e.g. there's an epic shift in mobile/internet so it's necessary to invest now).
Some of the highlights from the post:

* You usually want to avoid having multiple client-side models for a single database row. Keeping your client-side schema close to your database avoids mapping headaches later.

* When navigating around, be sure to cancel outstanding ajax requests if the user clicks on another link before the response arrives.

* Lazy-loading of associated models is handy, described further here:http://backbonejs.org/#FAQ-nested

... and a few more tips:

* You don't need to use an event when a simple callback will do.

* In terms of JS apps, Tim Toady is your friend: http://backbonejs.org/#FAQ-tim-toady

* You often aren't modeling the complete server-side state in the browser, so look for opportunities to simplify by glossing over data that only concerns the backend.
"Foxconn Explosion Kills Two, iPad Production Line Halted"
http://gizmodo.com/5803963/would-the-foxconn-factory-explosi...
I did read that last sentence of yours and tried to think about your overall message. The part where you wrote about markets effectively translating selfish behavior into the greater good seemed to indicate that you thought the parts where markets aren't working are a side issue.

I don't think everyone pursuing their own self interest is at all a good thing when done on a global scale. I think the features of markets lead people like myself into knowingly buying products made by oppressed labor. It leads me to buy gas from companies that pollute on a grand scale in Nigeria and Ecuador. I think the self-interest aspect of markets is far more destructive than the positives are positive. I gathered from what you wrote that you think the opposite. Hence I tried to briefly explain why all of pursuing our self-interest is a bad thing, overall.
My favorite approach is the approach taken by exiledonline.com. Trolls and Ron Paul fanatics get their comments "improved", often with sarcasm highlighting the stupidity of the underlying comment and poster. Guts that particular troll so other posters aren't tempted to reply and serves as a disincentive for future trolling. Even subpar comments are discouraged since the consequences of not meeting standards are a little bit greater than if they were simply not approved.
Decline of the middle class: people are paid less
Pirate Bay lashes out as Swedish lawsuit finally ends
Still, it's nothing new. The last ten years till today people are still surprised that we can't build an ebay for € € 1000,- . It will always be our job as software engineers to educate our clients.
Flask-Cake - automatically run cake commands for all your coffee script needs
I'm sure there's hurdles to overcome before it's a reality. Even if it's limited capacity, I think we're ready for gesture-based computing and I think Microsoft's closer to making that a reality than anyone else.
Hah, I don't know if eat/play really belongs in the hub. I have little time for either, maybe i'm doing it all wrong?

Lol.
How to increase your sales revenue by raising your product's price
This looks like a great way to test SQL syntax differences, but it's been ages since I've needed to do so - now I either have some abstraction layer (ORM like PDO) that allows me to code in objects or I'm using key-value stores anyway.
Shane,

You are exactly correct about the US's activity in foreign interventions. I would say that "we" are very active in that regard. And frankly, I think that we ought to get out of other people's sovereignty and be content with our own. Hence why I support Ron Paul as a candidate.

However, I disagree strongly on one point:

> Most people are upset because the gains (to "Big Media") do not seem worth the cost of foreign entanglements and limitation of free speech (domestic and abroad).

The takedown of TPB is not about freedom of speech. They could say whatever they want (and did) without getting taken down. But as soon as they assisted US citizens to commit crimes as defined by the US, the TPB became a target. Any country that has a foreign power aiding its citizens to commit what it perceives as a crime will either: pressure the other country to put a stop to it, or will take internal measures.

As I tried to lay out in my previous post, TPB is in the position of an accomplice, according to US law, and will be targeted by the means the US has at hand. Pressuring a power via the ambassador is rather above-board, compared with the "removal" of Osama bin Laden.

I find the definition of "intellectual property" to be too broadly defined and protected. But piracy is just theft, pure and simple...
Are college students learning?
> an open, honest, mature discussion about piracy

If you'd be satisfied with the discussion in a book (as opposed to interactive discussion on a forum), you might look here: http://www.dklevine.com/general/intellectual/againstfinal.ht...
Assange appeals to top UK court against extradition
Show HN: My startup Curvio - IMDB for Clothes and Accessories on TV
you failed ;p
Another reason is that some people prefer the syntax of Less over Sass. Particularly if they want to work with devs/designers who are used to CSS.
Bah. Sorry about that. Investigating now.
Checkout grailsjobs.com, Grails is awesome btw!
If you're referring to PHP's PDO, it's not an ORM and you're still exposed to all the syntax quirks if you have to support several databases.
Apple was working on higher quality music and hardware, says rocker
"I believe that my actions are for the greater good rather than my own self interest,"

I don't see how that's a good thing. I'd rather you look out for yourself and leave my best interests to me.

The MPAA can say they're going for the greater good, too.
Forgive me if I am a bit put off by the spectacle of a bunch of people calling themselves heroes for downloading the latest episode of "Glee".

By the way, those hits from North Korea? Those aren't exactly coming from the average man on the street.
It's all encrypted over the network. Obviously, your servers have to be able decrypt URL strings (and everything else), or they wouldn't be able to respond correctly. I think the assumption is just that servers may by default log decrypted URLs for GET requests, but not POST requests. But, as people have noted, that's not exactly reassuring, since you have no idea how their logging is set up.
Best Practices For in-app Ad UX
Much better tips in this previous discussion: http://news.ycombinator.com/item?id=2973404
A message to those tourists the U.S. kicked out over tweets
The enigma of the iTunes app search algorithm
Just a thought, you may want to look at Tynan's sett comment system coming soon, it seems to be introducing some type of comment moderation system http://sett.com/
How can customers expect publishers to refund for games when they (publisher) have no guarantee it didn't work?

If you buy a microwave, returning it the next day (and a glance at the product) Walmart is pretty sure that it was not used for hours on end until it wasn't needed.

Games (and other products/media) suffer from a tendency of [some] customers to use/abuse the product and its return policy. Buy a game, play it thru for 24 hours straight (or copy it), and then return it as "defective" - not uncommon behavior. Maybe not majority, but enough do it for retailers to impose limitations akin to what clothing stores do by requiring tags still be attached: returnable for refund if in a condition which indicates it in no way was used in an manner taking advantage of the retailer's return policy.

Enough people _do_ try to abuse return policies that, yeah, it wrecks it for the rest of us.

Hey, maybe there's a startup opportunity for verifying "the game was used in a manner which indicates there was a problem whereby a full-refund return is fair." Steam may not have an interest in such a service directly given its overall profit, but if someone can provide a third-party verification service...
The mechanics of A/B testing math make implementing this a much less attractive proposition than you'd think it would be. I'm going to get handwavy but it will suffice for the moment: the amount of traffic you need to get statistical significance between N options grows at like O(N^2). How much of the color-space do you want to automatically converge over?

Most of my clients would struggle getting results at sufficient velocity with 10-way multivariate testing to say nothing of zomg-way multivariate testing.

Totally separate problem: Button color is far from the most salient thing you could be testing.
Inkling, San Francisco, CA

Inkling is a publishing startup. We are a new medium, the future of books and publishing (currently with a focus in textbooks on iPad); our platform is so good that completely leaves ebooks in dust, and even most major publishing houses are invested in us.

We are hiring engineers of all kinds, from the JavaScript/Python/Scala/iOS to interns. We are Sequoia-backed and just recently secured another round of $17 million funding.

The team is lean and flat. Located in the downtown SF, TV-celebrity chef in house, best gym in town, plus generous salary and options.

http://www.inkling.com/jobs/openings/

Contact me if you are interested (annemarie@inkling.com)
You are very confused. SSL is used to encrypt transmission between the browser and web server. Of course the web server decrypts the data it receives, otherwise it wouldn't be able to use it. I am saying you can not sniff someone's HTTPS traffic and see the urls they are requesting, so sensitive information being in the url is not a problem. The fact that it may get logged is a red-herring, as if someone has compromised the server to gain access to the logs, they can access whatever they want, your username and password included.
Amazon’s Stake in LivingSocial Reveals Steep Losses
There are various opinions inside Mozilla. You can hear them all because the debate is done in the open.

Asa's opinion there was never the official position nor the position of a majority in Mozilla AFAIK.
Do you have any contacts in particular? I'm in Toronto myself, and currently looking.
It's wrong because:

1. Passing creds via GET will show up in server logs.
2. The way REST works, you don't want to put anything in a GET which will change anything on the server (which includes generating an auth token). POST is the standard here.

edit It's better that they support POST for the auth creds in a header, but they should still be using HTTP standard authentication methods and return a 401 if unauthorized.

Also, look for already complete solutions for what you want. The whole point of REST is that you don't need to create all these query string parameters or put stuff in headers - the HTTP specs already include most of this functionality. For example HTTP already includes several authentication mechanisms[1], as does TLS[2], which are more secure (and standard!) than a form-based login.

[1] http://en.wikipedia.org/wiki/Digest_access_authentication
[2] http://en.wikipedia.org/wiki/Secure_Remote_Password_protocol
The same reasoning would imply that making a movie would be really cheap. Afterall ticket prices are really cheap as well.
Those non-techy people close to you who seriously care -- what are they doing with their photos now?
Paid interns (on-site) wanted for Boston start-up.

Come kick-ass in Coolidge corner with the Raizlabs Team (http://www.raizlabs.com/) to hack on AppBlade (https://appblade.com) a start-up in the mobile application distribution space; built in Ruby on Rails. This is a paid position that has the real possibility of getting you onboard with salary/benefits.

Familiarity with programming and web-development would be appreciated. Ideal candidates are interested/experienced in Rails, can handcode HTML/CSS, Objective-C, and ready to kick some ass in the mobile space.

Hit me up at james.daniels@raizlabs.com, stay hungry my friends.
Oh, my bad, was thinking he was referring to some the available built in monads in Haskell implementation.

Still, the example is an obscure Window Manager? And a tiling one, at that? Not the premier example of what he asks for, end user successful complicated software that has had to mature and deal with lots of real world corner cases, bugs etc.
REST is not a scam, it's THE term for the underlying architectural style of the web.

Your straw-man interpretation is a scam.

The crappy silverlight app is badly designed and the performance issues you were seeing can be optimised away trivially. (create a new composite resource which can represent the entire tree in one go). That is nothing to do with REST.

"the #1 delusion in distributed systems is that you can compose distributed operations the same way you compose function calls in a normal program" - This is exactly what REST addresses as a style..
i.e. REST is not RPC.

Latency is another issue which REST addresses directly. This is why caching is an explicit constraint.

I have no idea what your point is re: security, sorry. Modelling state transitions is not that difficult, many languages have existing tools to help you do this.
Investment Manager's Embarrassing Email Lands On Reddit, Goes Viral
You should partner with a screen cleaning vendor.
Amazon To Kickoff India Operations as Junglee.com
The Crunchies Are Rigged (seriously)
> So is SOAP.

No it's not. In theory, you can just consume the WSDL and have all the methods available to you, but in practice, there are huge and unbridgeable issues with interoperability. A C# SOAP client will have trouble consuming a Java WSDL, and so on.

> SOAP runs on just about anything including HTTP or even SMTP.

SOAP runs on top of HTTP but merely uses HTTP as a tunnel. All the stuff that should be in HTTP - the resource, the method, the data - is inside the XML envelope.

If you want to consume a SOAP web service, expect to get your hands dirty.

> SOAP doesn't care what the clients or servers are written in or run on.

In theory, no. In practice, interoperability is by no means a given.

> you can change something in a JSON packet and the client will only know it broke when it's run.

That's not really what I was talking about, but if you make a breaking API change in any system, you should have a way to do it so clients aren't caught flat-footed when their app breaks.

Neither REST nor SOAP inherently solves this problem, but REST does allow for custom media types that include versioning.
Still available for $99 at some places.

E.g. http://www.buy.com/prod/xbox-360-kinect-sensor-holiday-bundl...
Asperger's History of Over-Diagnosis
That's not what I'm saying at all. Those are simply two options. The option to produce in the US is followed naturally from their own claims, and is countered by more lies and rationalizations.

Hippie: "Hey Apple, why don't you require that suppliers improve labor conditions in their factories?"

Apple response 1) "We can't pay Chinese workers what American workers make!"

Hippe: "Okay, fine, but I wasn't talking about wages. I was talking about labor conditions. Stop working people on ridiculously long shifts, doing the same thing day in, and day out, until they're maimed. Stop blacklisting people with valid complaints."

Apple response 2) "We can't raise wages, that would create a local aristocracy!"

Hippie: "Again, I'm not talking about wages, so long as they're livable in the region. I'm talking about labor conditions. Also, what exactly would be wrong with a local aristocracy? Management always says that a rising tide lifts all boats as it pays itself a healthy bonus, after all."

Hippie: "Okay, Apple, since you refuse to pursue reasonable working conditions in China, why don't you manufacture in the US, according to US standards of pay and treatment?"

Apple: "Oh, no, no, we couldn't do that! The US doesn't have the manufacturing ability. We need a fabrication facility next door to a glass facility!"

Hippie: "You have $100 billion. You can build both in, say, North Carolina."

Apple: "No, no, American workers don't have the work ethic that is necessary to produce Apple products. Besides, China educates the mid-level engineers that we need to manage factory floors."

Hippie: "By work ethic, you mean the ability to rouse 8,000 people from corporate housing and immediately put them to work on back-to-back 16 hour shifts, all because you couldn't get your engineering spec done in a reasonable time? And wasn't I just reading about how there are a large number of unemployed, middle-aged Americans who have experience managing factories floors, who can't find work because such factories no longer exist?"
Awesome. That counts as working in my book. As long as it doesn't disappear :)
I'm having trouble understanding exactly what this package provides; is it essentially a website "theme?" If I use this, will my website necessarily have the same design look as this website?
>> I know something about an API if it's RESTful

With SOAP, you know everything, just ask the server for its WSDL.
Would you care to point out where in the HTTP RFCs it requires the use of certain methods for certain operations? The reality is, you can do whatever you like as far as HTTP is concerned. In fact, only GET and HEAD are required to be implemented, all the other methods are optional.

HTTP does not have "verbs". That is REST. Just because they aren't using a REST API, doesn't mean they are not HTTP compliant.
A Massively-Multiplayer Mashup of PubNub and Three.js
I've used a REST service for this from pifilter.com - cost was 0.1 cents per image.

Results were generally good, but notable false positives include a pastrami sandwich.
If you're worried about the cost of Windows and the development tools as part of that, if you're in a startup then it's likely that you qualify for BizSpark where you can get full Windows licenses and copies of Visual Studio for free: http://bit.ly/uBC9Ol
I was attempting to use sarcasm to agree with your sarcasm. Apparently I didn't do very well.
Amazon to kick off India Operations
Firefox is 100% open source, so even if Mozilla itself doesn't focus on making MSIs, other people can. There is at least one company doing just that,

http://bespokeio.com/
I Had Asperger Syndrome. Briefly.
Just added these in! Thanks for the suggestion!
> I once saw a Silverlight app that took 20 minutes to initialize because it traversed a tree of relationships using REST

This is why clients should cache REST requests.
Naive randomly selected lawmakers are just going to be pounced on by significantly more experienced and predatory lobbyists. They'll think of a way to bribe these regular people.
White House Hangout: Startup America
Yelp

INTERN OR FULLTIME in SAN FRANCISCO, CA

I'm a full-stack web developer at Yelp, and I definitely recommend the hell out of working here. We've still got the startup environment (kegs, dog, etc); we're located in downtown San Francisco, half a block from MoMa; we are in a unique position to do great stuff and solve hard problems while helping people find great local businesses.

I built our "Hot New Businesses" feature - http://yelp.com/openings/sf , for instance, you can find it on the homepage and in our mobile apps too - which crunches through our data nightly and generates a list of the most recently opened bars and restaurants in your city, complete with predictions of the day they opened on. It's a really useful feature, and we have so much data that I was able to build it without knowing anything about machine learning, data-mining, etc; imagine the crazy-useful stuff you could do here, if a knucklehead like me could make a feature like this.

For more info about what it's like to work here as an engineer, see a Q&A with me at http://officialblog.yelp.com/2011/07/day-in-the-life-of-a-ye... , or feel free to contact me at jrheard at yelp dot com.

Here's a list of our open engineering positions:

Web Developer

☆ Develop cool and useful features for our 61M+ monthly visitors

☆ Expertise in JavaScript, HTTP, HTML/DOM, and CSS, as well as server-side chops in a language like Python, Ruby, Java, C++, etc. We're on Python, but we're just looking for people who are really good at programming, so no worries if you don't have much Python experience.

Search and Data-Mining Engineer

☆ Tackle machine learning and information retrieval problems from our database of 22M+ Yelp reviews

☆ Strong grasp of algorithms and data structures; expertise in Python, Java, or C++

Back-end Engineer

☆ Build whole systems that are simple and scalable

☆ Expertise in your favorite modern programming language: Python, Ruby, Java, Objective-C, or C++
Mobile Developer

☆ Create fun and useful mobile applications for the iPhone, Android, Blackberry platforms and beyond

☆ Expertise in C++, Java and other mobile languages

To apply, head to http://hire.jobvite.com/j/?aj=oyXeVfwo&s=Hacker_News