skysight-inc/HackerNews huggingface dataset:
A Wrong Way to Pivot: The Rebound
In retrospect, it wasn't that helpful unless they also suspended new account creation, or at least kept an eye on it. But they didn't have that information at that time.

During a security breach, is suspending a malicious user who's currently attacking you really something you sit around and discuss beforehand? Or do you just do it?
Left Hand PING G20 Driver
I really wish they would work on pushing a final version of their API.
I'll take a guess and say it's because it's not possible to magically generate that code. If I wrote a code generator, there's no way that program could know which attributes should be accessible. The only way to get a scaffold to work out of the box is to require some user configuration or allow all attributes to be modifiable.

It's a case of ease-of-use trumping security.
Is it not just the iPad software and the card reader they are selling?

I thought the stand was for demonstration.

The video shows a different stand than the homepage pic.
Web apps also let you deploy changes instantly to 100% of your users as opposed to going through an app store update. That's huge. You have no idea how long users will take to update their apps.. and some never do.
I made my comment based on the fact that they don't seem to be adding any new features. It still remains a manual check-in service, while there is a lot more you can do beyond that.

But reading your comment made me reconsider mine. After all, Twitter also are still the same as when they started (vs Facebook, who are constantly adding new features). So now I'm not sure anymore about my original comment. Should I delete it?

In the future, I shouldn't comment on such things before actually using them.
I saw a poor barista trying dozens of times to make the reader accept a card the other day (Square + iPad, not sure if they were using this exact set up). It got quite violent. The scanner does really seem to be far too flimsy to be the primary payment mechanism in a busy business.
Debt Relief, Credit Card Debt, Debt Reduction Consolidation
We are offering Debt Reduction Consolidation Services Debt Reduction Consolidation Services. With the help of this service one can easily consolidate his or her debts into one loan. Debt Reduction Consolidation Services gives person a leverage to pay low monthly payment instead of huge bills under the roof Debtcutter.com.au only.
You very well may be right. See this: http://news.ycombinator.com/item?id=3665666

Input welcome.
And yet reality speak for itself.

I think you are looking purely at the language itself when what you need to look at is everything from getting started to actually seing it in reality in your browser.

What language is easier?
sounds like pointers in C vs C++
After Facebook, the Next Wave of Tech IPOs
US 5.5-8 Nike Free 3.0 V2 Womens Black Blue Running Shoes Australia
Exactly. In my experience the vast majority of students rarely if ever take advantage of office hours.

Also, the lack of hands on labs and research isn't going to matter most of the time. That being said, EE is one of the majors where physical labs are essential, but for CS there's really no need.
I would love to see a slight modification to the design of their reader hardware. Keep the audio interface, obviously. But design a small plastic frame that the reader can fit into that fits flush against the edge of the top of the iPad/iPhone. Make it a bit longer with slightly sloped internal edges so that its easier to guide a credit card to the scanner. This will also have the benefit keeping the reader from swiveling around while in use. Actually sounds like a Kickstarter project if Square doesn't come out with it themselves soon.
Video game industry looks for new game plan to reach players
Cycling for Water with Milaap - Loan a Little, Change a Lot
The Stanford Database and Machine Learning classes had a 1.5x speed option. I found it really helped me concentrate; the extra effort needed to listen helped keep me from zoning out.
That is amazing. But you what would be really awesome? If these people got together and created a nice all in one php + sqlite script that allows me to put my DVD collection and PS2 iso rips onto my server and share it with my friends. I could give friends usernames and passwords and see which of my movies and games they downloaded and they can do the same for me. Like file sharing on a much smaller more personal scale.
I noticed a local business (Blue Moon Burgers) using iPads as registers, using similarly flimsy (though not Square) card readers. They gave up after a few months and switched to a traditional POS setup. I don't know whether it was the card readers that were to blame, but I'm guessing they were part of it.
It's funny because if it weren't for the pirates there'd be no innovation and new distribution means or it would be extremely slow. Hollywood and the music industry had become so stagnant, that it took pirates to get them to change their idea of distribution, I think.
Home Theater Installers
Standard TV Installation - Table Top Setup: We mount your TV on any type of wall including drywall with wooden studs, metal studs, concrete walls, brick walls etc.. Installation comes with a 1 year warranty.
Continuous partial application submission for YC 2012?
Is it okay to submit continuous partial applications/applications in phases for YC 2012?
The idea is to engage with the YC team as early as possible. So when I have filled up some details, should I submit and then keep on updating/submitting?
I wonder if they plan to open a web store interface, so users can purchase things without an iPad... I've been looking for a sexy place to set up shop, but my business doesn't have walk-in customers. I know that's not really square's game though
Holi Poems 2012, Holi Poems Sms Messages in Hindi Language
Use Professional Logo Design Software Available Online For Your Company Logo 
Today’s advertising market is very competitive and fierce. If you want to survive in this greatly competitive business economy, you need to take the important steps in attracting more clients or consumers.
Thinking (Strategically) About Badges
We don't re-read applications when people resubmit them, if that's what you mean, so submit when you're ready for us to read it the only time we'll read it.
The Bright Side of Being Hacked
"Typical link building [...] can be through deals, partnerships, PR pitches, link exchanges – even paying for links."

A few of these techniques - link exchanges and buying links - sound like really bad advice, especially given that she is a former SEOmoz employee. She also omits the most straightforward way for startups to get backlinks => create content on your site worth linking to.
How To Unlock Blackberry Curve
How To Unlock Blackberry Curve

This quick video will show you the fastest and best way to know how To Unlock Blackberry Curve
Unlock Blackberry Curve and use it with any gsm sim card in the world. Works for any country, and blackberry. 100% guaranteed to work!
The unlock is made using an Unlock Code (MEP CODE). This will work for ANY Provider including: Vodafone, Tmobile, ATT, Verizon, Orange, Telus, Rogers, Bell, O2, Telcel, Claro, movistar, Telefonica, Three, Digicel, and any other.
I've found that people hate to hear that when asking for advice on how to get traffic. It's even less popular than "eat right and exercise" as weight loss advice.
The Application looks amazing. Well done.

What I do wonder though, is why they're shipping this with such a terrible stand/card reader attachment? I can't see those lasting 6 months in a busy shop environment. I'd like to see a swivel stand that's locked to the counter which you can slide the ipad into, then bolt secure and lock with a key. While you're at it, build a robust card reader into the side of the case. Basically something similar in form factor to this: http://www.directindustry.com/prod/elo-touchsystems/touch-sc...

I could probably put something like that together in a weekend with a trip to fry's/home depot, but why should I have to?

Also, a question I'd have before using this - what happens in the event of a software crash? Where is my data, how quickly does stuff get backed up online?
But for guys like me who never use mass assignment, our applications are not vulnerable by default, correct? And likewise, for people who RTFM before using mass assignment, their applications are not vulnerable, correct?
If I understand this, it is very different from something like the routes vulnerability a while back, where EVERY Rails app was vulnerable whether you liked it or not. Saying Rails has a security vulnerability here is like saying that ActiveRecord has a SQL Injection vulnerability because by default, find_by_sql allows you to compose queries out of strings, and if you don’t choose to use the correct form, you will be attacked by little bobby tables.

I believe this is absolutely correct.
Restoring the Balance
Ask HN: prices of products
How websites like mysmartprice.com display prices of products from different websites
Awesome! This is so far the most beautiful and readable HN App I have seen on the iPhone and iPad.

Except: There does not seem to be a way to post comments or to vote. Is there something I am overlooking?
Mobile Web App Development-Native Apps Will Soon Dead
iPhone-iPad-Android web apps development can threaten the giants like App store and Android market place as it make extinct the native apps.
Round Cut Diamonds | Princess cut Diamonds
Any HN'ers in Austin TX, or going to SXSW?
I'm a frontend web dev, and heading to SXSW for the interactive section, and some music. Is there any HN community active in Austin with meetups etc?

Can anyone recommend a good place to stay, or a must see sxsw panel?

Just sort of getting a feel for what to expect, any insight is welcome.
I can't seem to comment or upvote in your app. Without that, it has little value to
me. Apart from that, it is quite good!

Or am I overlooking something?
Haha, that is great!
Nike Dunk Low Pro SB Shoes Cheap For Sale
That's a great point. I think the term start-up should apply to high growth technology companies in the initial stages of their hockey stick curve (or which ever growth curve applies). Judging Foursquare on that basis, and assuming they can be as big as Twitter, they could still grow by about 15x, so indeed they might be in the early stages of their growth and could be considered a start-up.

However, valid criteria for classifying a company as a start-up might include: rounds of funding (# or type), number of employees, relative maturity (compared to industry peers), market share, culture or maturity of the firm's core technology.

It is indeed quite messy and hard to classify a company as a "start-up".
Thanks for the civil disagreement :)

I do agree that this is GitHub's responsibility. I think they handled the situation appropriately, however. I'm shocked at the backlash people have against GitHub locking the user's account while it was being investigated.
I despise SEO, but oddly enough I actually agree with what the article says.

Possibly this is more for web-programmers than others, but these days that's quite a lot of people, and what the article says is succinct and to the point.

What you have to realize is that SEO is a logarithmic curve; when you've done none, doing a little bit makes a huge difference. When you've already got a decent site, well... a lot of effort for virtually no gain.
Most likely because a lot of their business relies on easily being able to provide a ton of people with free card readers. I'm sure they've explored a more robust option, but it's probably nowhere near as cheap as the current model.

Maybe a paid upgrade card reader is the next step, but if their goal is broad, cheap and easy distribution they'll probably be shipping with this model for a long time.
Why Use the Triple-Equals Operator in JavaScript?
“Determining whether two variables are equivalent is one of the most important operations in programming.”
Is .XXX Internet Censorship?
Many people claim that .xxx domains are just another form of internet censorship. The impact that these domains will have on search engines and porn SEO is yet to be determined, but it will have an effect.
This makes a strong case for requiring every git commit in general to be signed be the user's key.
The 1st person to hit 20 million Twitter followers is Lady Gaga.
Treat your users like your girlfriend
Howt to Install WinXP/Windows7 in 5 Mins Only Fast Installing
For what it's worth, the "pinfo" tool I mentioned works like the links web browser, searches texinfo documentation and falls back to manpages if it can't find relevant docs. It's definitely the Least Bad way to browse info documents by a significant margin... and yet, I keep using man.
20? He listed four or five way popular websites alone. Egor is my hero for this week, so thankful for his wake-up call to the Rails world.
I don't like how, as the customer, I have no way of seeing what exactly is being charged to my card. For all I know, anything could be running on that ipad (foreground or background) and i could be charged any amount without knowing. Sure, I can ask for a receipt, but even the legacy till they replace in the video has a customer facing display, not a shiny piece of aluminum with some fruit. It's interesting that video never switches to the customer view either.
In other words:

Security vulnerabilities by default, with the ability to patch the vulnerability on a project-by-project basis.

vs

Security by default, with the ability to allow potentially insecure assignment on fields you want to assign.
I'm not suggesting this is free, by any means. However, given the cost of buying existing POS hardware solutions, I'm confident I could handcraft bespoke ipad cases with card readers, sell them an ipad and still make a profit, all while undercutting a more traditional setup.
I just wish it went darker, or redder.
New Square device replaces cash register
Spice Dual SIM Mobiles Price List, Latest Spice Dual SIM Mobile Phones in India
Spice Mobiles Ltd. is a part of Spice Group. Today, the brand is growing rapidly. It has a bouquet of offerings targeting the entry, mid, and premium segments. Spice is first ever launching Dual SIM Phones in India. Spice mobiles are available with Dual SIM option. Spice mobile prices range from entry-level to GSM, PDA & Smartphones. Spice built a strong value proposition with the customers and established itself as a competitive brand amongst the host of International players. Spice Dual SIM mobiles comes with attractive features like Touch Screen, Wi-Fi, 3G with low cost. By giving low price mobiles/smartphones Spice may cover a lower class consumers for their mobile phones as well. Here is the list of Latest Spice Dual SIM Mobile Phones With Price in India.
No other startup has ever been so primed for an Apple acquisition. Everything from execution, design sensibility, culture and even CEO is heavily Apple inspired but in a different but still complementary industry.
Convenience over safety is one of the repeated, expensive, wrong choices so endemic in the software world.

Convenience is truly overrated. Inconvenience is cheap, lack of safety (which translates to security issues and bugs) is far far more expensive.
Show HN: Convert to Japanese Numbers, Page & Libraries
In most countries (including Russia) this is considered a criminal behavior.
A few weeks ago I was at a little tea shop run by a technology savvy Indian lady. When she said she didn't take cards, I asked her if she'd heard of Square.
Of course she'd heard of Square. She said she didn't use it because it was too flimsy to handle the load.
So in other words: bad design is justified by the notion that people shouldn't make mistakes. Praise the lord you don't design anything that can burn, irradiate or cut people.
*roff is domain-specific in that it's a typesetting system, like TeX but much, much simpler. It has output drivers for rendering to PostScript, ASCII output with overstrike (as emulated by, say, less(1)), and in modern versions, even UTF-8 and HTML. I have production code at $EMPLOYER, for instance, that uses it to generate properly-formatted tables in plain-text emails (easier than building HTML and rendering it with elinks, since groff is already installed).
How is this any different than a traditional POS? The only exceptions would be cash registers with pole displays, which are limited to big box retailers that can afford them.
Reporting security flaws is fine.

Doing it by demonstration on a live product without asking first is not as fine.
Mount the reader separately, and connect it to the iPad with an audio cable.
For me, Thunderbird had a dns-prefetch leak, but it's fixable via config.
When to Break Apart your Application
The only thing that GitHub sells on top of its free services are private repositories! I am surprised how little flak they get.
Hacking itty.py: let's make honoring Accept: easier and get some REST
Came here to say this. The software itself is really awesome, and they have done some great UI/UX work here, but the hardware experience is still very frustrating. I'm really surprised they haven't iterated on the hardware. It's been what, two years since they started sending out the first set of scanners?

While a case solution on the iPhone would work well, I can see why they might not do this for the iPad (designing an entire case, just for card swiping, for such a large device seems silly and wasteful), but something along the lines of this would be a huge improvement over the current card reader design (basically, it fits around the corner of the device, giving it much more stability): http://olloclip.com
If this is anything like Man Packs, I whole-heartedly love this.
Iran crisis: Obama to meet Netanyahu
How To Have A Royal Wedding Within Budget
Clean And Optimize Your New Computer
When you would normally sign a printed receipt, you sign with your finger on the iPad with the Square app (most implementations I've seen have iPads on a swivel stand that turns around to face the customer). In the example video they show a customer being charged via Card Case which is the more integrated form of transaction but not the common case.
A lot of context is lost in text/email/IM also remember that English is not his native language, and he's likely from a very different cultural background.

Give the guy a break.

On balance I think he's just a well-meaning kid who's achieved notoriety the wrong way, but his deepest intentions are good.

Rather like Robert Tappan Morris, come to think of it!
> And yet reality speak for itself.

Yes indeed, PHP is objectively a complete mess of inconsistencies piled atop hacks and seemingly random behaviors.

> What language is easier?

That is a very, very different issue than the original subject.
Every time I've had someone swipe my card via Square in a coffee shop, the barista has turned the iPad towards me to view my order/sign, which is more than what happens with a standard POS setup.

I'm not sure what else you would expect here?
Not sure why the author seems to assume that every programmer is even remotely involved in webby stuff.
I'm not too familiar with RoR, but does the mass assignment vulnerability basically boil down to not doing any input validation for the convenience of updating several model fields in one line of code?
It's a Thai character that stacks on top of consonants. It really doesn't have any meaning if stacked more than once. Chrome on Linux will show only one such character. Firefox on Linux will put them all on the same line with a sketch of a missing vowel.

GNU/Linux, Chrome 19: http://imgur.com/AUHvY
GNU/Linux, Firefox 10: http://imgur.com/2Wstj
It seems trivial to connect the reader via a TRRS [1] extension cable

Any cable that maintains mic capability with stock Apple headphones should be fine.

[1]: https://www.google.com/search?tbm=isch&hl=en&source=...
I don't doubt your experience.

Now, what if imaging were free ... wouldn't the solution be to use it all the time but fix the tendency to over-treat harmless irregularities/growths, rather than using it selectively? Or is fear-of-malpractice preventing this?
Show HN: Weekend project - NYTimes Crossword Search (15 years or 432,205 clues)
The response to this makes me feel that HackerNews is now populated by a bunch of pretenders. This "bug" has been in Rails since Day 1, and any remotely experienced Rails developer is aware of this functionality. You can argue for a different default, but it's not a bug.

Github did have a bug and noone knowledgeable about Rails appears to have made even a cursory inspection of the security of their controllers - which is where attribute protection actually belongs, since different controllers and different users change different attributes. Protected attributes is a blunt tool for simple situations, which is why it's not enabled by default. Github had a pretty terrible bug, discovered, and fixed it. They may not have handled it perfectly, but the certainly don't deserve this sort of mon hatred - any competitor you go to is likely to have security flaws as well, perhaps more severe and subtle.

@homako didn't just expose the bug in github, he exploited it to make an unauthorized commit to Rails master. His account most certainly should have been at least temporarily suspended as GitHub had no idea what else he might do to prove his point.

So basically, most of the comments here are glaringly wrong or ignorant bandwagoning, and it makes me wonder about the accuracy of information here about topics I'm less familiar with. A sad day when you realize all this intelligent discussion you thought you'd been reading about new topics was probably just grandstanding by eloquent fools.
Not sure about where you're at, but it's a rarity to come across a register that doesn't have a customer facing display, with at the very least, the total you are being charged for your goods and/or services.
I just stopped in at a coffee shop in the middle of Philly the other day using Register. Guess they got access to the beta testing.
Thank you! Our in house video team is pretty awesome.
I didn't see a swivel in the video.. they really should show that part.
Seems, the author has already documented this.

For those interested: https://grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_an...
After reading Steve Klabnik's "Nobody Understands REST or HTTP" ( http://blog.steveklabnik.com/posts/2011-07-03-nobody-underst... ), I thought it would be helpful if honoring the client's Accept: header in GET requests were easier.

Recently I watched Richard Jones' survey of the various Python micro web-frameworks ( http://www.youtube.com/watch?v=AYjPIMe0BhA ), and I was really taken by the design of itty.py.

I thought it would be great to extend their idea of the @get decorator for use with Accept:. It turned out to be merely a ~50 line change! Fun! Kudos to the developer of itty.py for writing code which is hack friendly.
We sync your items, settings and payment history between multiple devices. That was...not easy.
GefilteApp -  Automatically lets your mother know you're alive and eating well
Mozilla's Open Badge Project
I see what you're saying. In this particular video they don't show that part of the experience, and you're right, they definitely should.
Style Revisor presentation in PDF
I think it would be pathetically easy to convince them to care, are you kidding? The problem is notifying them that it exists. Despite what many seem to think, people do care about their privacy and most people would find this extremely creepy. If your gmail alerted you that images could be used for this purpose then much more users would care. The problem is that users have no idea that this can occur and it is not fair to them in the least.
Many small shops have a separate credit card terminal where they enter the amount to be charged.
> I thought there were two different issues

Nope, this bug is exactly what he used for his demonstration (and there are warnings about attr_accessible going back 3 or 4 years, so it's not a "0-day" by most accounts, more of a "3-years"" vuln)