skysight-inc/HackerNews huggingface dataset:
True, but companies on the receiving end often end up also including the cost of things that they would need to do even in a responsible-disclosure scenario. For example, if you discover a major flaw in a company's system that allows high levels of access, and disclose it to them, they'll typically incur considerable costs patching it, rolling out the updates, doing a security audit to make sure it wasn't already quietly discovered earlier by a blackhat who might've backdoored something, etc.

When they do all those same things upon an actual intrusion, they often attribute the expenses to the hacker, but imo they're really attributable to the security flaw, since they'd be incurred even in the whitehat case. I'd only attribute to the hacker the delta between what blackhat disclosure and whitehat disclosure would cost.
I'd consider that a plus. (No account here either)
They are not, you need both. The privacy policy is required by law and needs to state all the personal information you collect from users.

The TOS is a "contract" that states what the users can and can't do with your service, and what you can and can't do with their accounts etc.
Think about it as a usage agreement.
Negitivity feeds upon itself
So just create a 2nd "fake" account with seemingly "real" data and show them that. Or tell them you don't actually have a facebook account. It is possible to set the security so that people are unable to find/search for you.

Anyway, I presume this is a US thing, this would never happen in the EU, it would go to the european court of human rights (or some court or other) so fast you won't even have time to apply lube!
Sorry, still the same prob (cleared caches etc): http://i.imgur.com/eFayp.png
An unframework is designed to give you a set of classes that you can use to build your site. Sure, on that level it works but what about when you need more?

At some point you need to have more classes, and where do they come from? One team of developers cannot forever add in more and more classes, that would be ridiculous.

If they allow other people to add in other classes they have an ever expanding codebase. If they dont allow developers to add in other classes then you are back to the original problem: where do I find new classes that will work with my code.

By using a package management system you distribute the workload to people who need a class, and so make it. People who have a vested interest (client project, some web service they are making, whatever) are responsible for working on a set of classes that really benefit them, like a payment library that works with Recurly, Spreedly, whatever. That should be made buy one developer, and a second developer could add in a new driver - instead of building the whole damn thing from scratch.

That is the approach package managers take, and they are much more useful than a one-man-army trying to build all the libraries.

Again if Flourish meets your requirements then great, but it certainly doesn't meet all potential requirements of the whole PHP community, package managers can with the "use whats there, build what isn't" approach.
I wonder if dividing kids into groups is even necessary.

I'm not the first person to say this, but lecturing is obsolete, and probably has been since the Xerox machine. Online video is just another nail in the coffin. We can do non-interactive information transfer cheaply.

It seems to me that you could get a similar, or better, education just by making materials available and then having in-class homework sessions with occasional individualized attention. Kids can proceed at their own pace relative to different subjects.

Some time synchronization might be necessary to have examinations to prove that you know the material. Otherwise I don't see the need for it.
Here's the official announcement, BTW:
http://37signals.com/svn/posts/3129-launch-the-all-new-basec...
Heroku has supported PHP for a few months now [1], and there are plenty of alternative services.

http://pagodabox.com/

https://phpfog.com/

[1] http://blog.heroku.com/archives/2011/9/15/facebook/
The problem with putting the high quality subreddits on the front page is that most high quality subreddits can afford to be that way because of a relatively small and insular community. There is a fear frequently expressed on some of these subreddits that the quality will drop if they're put on the front page. Good examples are /r/truereddit and /r/moderatepolitics. Those subreddits have a comparatively higher signal to noise ratio due in part to their comparative obscurity.
It does, in Tennessee they only cared about age at day of enrollment, so August and September children would be the youngest.
Here's an article by the Freakanomics authors about the age bias effect. The most interesting bit is how European soccer players all tend to be born in the first few months of the year: http://www.nytimes.com/2006/05/07/magazine/07wwln_freak.html...
Actually, this is a box-checking exercise, and doesn't stand in the way of setting up a startup. I went through the same process in 1999, and have renewed ever since - and I did all my own paperwork (which is a huge pain), so I'm pretty familiar with how it works.

Initially, I talked to a lawyer about 'doing it right' - but concluded that I would have spent as much time describing it to the lawyer as writing the application myself.

One key point : You must be planning to create a company, not 'do a startup'. Have a business plan, with milestones. Quantify the investment, and project how it will pay back. Rent some office space, and have a contract. The embassy isn't in the business of understanding the Lean Startup experimentation process. They are interested in definite plans to grow a business (and employ Americans, too).

Of course, some of these points in the business plan may have a large 'error bar' on them. But you need to show to the Embassy that you're not crazy - and that they could not be labelled a 'soft touch' for granting the visa. There's no point trying to "slip one by the USCIS" : If that's the way you're thinking about it, that's the way it will appear.

To get the visa, you have to satisfy the regs. To satisfy the regs, you must have documentation that proves that each point, and subpoint, is satisfied. Each of these pieces of evidence needs at least 1 official piece of paper or a whole bunch of other justification.

Hope this makes sense.
Om Malik wrote an article about Berlin - check out this link:

http://gigaom.com/2011/12/27/why-berlin-is-poised-to-be-euro...

I hope this helps!

Greg
Crypto-class site live, course starts 3/12, first assignment due 3/26
My thought wasn't about changing the efficiency, but making it useful. The article mentioned the effect was only evident at very low power levels, creating very small amounts of light. Light, I believe, does 'add up' so millions of such devices might provide a useful amount of light while still having an attractive efficiency. (At least, inside an oven-like environment.)
What makes this controversial is that most people aren't going to see on-line gambling as such a horrendous activity that the US government needs to go to such lengths to stop it. That such activity should be a crime at all is already so controversial that the governments heavy-handed means of enforcing this law makes many of us nervous.

Further, the use of such trickery is the result not of passionate seekers of justice, but ambitious federal agents and prosecutors who see a fairly easy, high-profile target. It is a bad sign of the way the machine of justice runs these days, and doesn't bode well for freedom for the US or the internet.

Summum ius, summa injuria.
>Shear has gotten the attention of Maryland state legislators, who have proposed two separate bills aimed at banning social media access by schools and potential employers.

Why is this specifically targeted at social media? No one should request copies of people's private keys as part of any routine interview process. This is no different from asking for a copy of someone's PO box key, and the law should also clearly say that that is illegal (if it isn't already?)
I have a ridiculous system at home, and after years of building everything myself I now opt for base boxes that give me 90% of what I want.

What I'm using is a HP Z800.

It can take 192GB RAM in 12 slots (and mine does, I started on 24GB made up of very cheap 2GB sticks and upgraded later), and I also put in 2 Intel X5560 Xeon CPUs (they were new at the time and 4-core, if I did it again I'd be tempted by the X7550 which are 8-core).

The Z800 chassis is one of those zero tools systems, and best of all it is virtually silent (quiet enough that you don't hear it even when the work environment is silent).

Note: This stuff costs a bomb.

Topping out the RAM is expensive, but if you go for the smaller sticks in many slots you really get a lot of value for money.

The CPUs can cost a bomb too. But... if you're running many virtual machines (VirtualBox and Vagrant) then you shouldn't max out RAM and neglect CPU.

On motherboards, unless you're going for a server or workstation motherboard you won't get the best out of the rest of the components. You want tons of bandwidth to and from the RAM and CPU.

What else? Just use it. This type of hardware is incredible, but if it's just running Facebook then buy an iPad instead. I have nothing against people spending lots and not using it, but there's something really nice about great hardware being pushed at times.

It sounds like I've a very similar setup to the one in the article, the only differences would be that I haven't yet put an SSD in (though I do have a 3 HDD RAID for data), and I prefer 1 very high quality large monitor over several large monitors (I like a desk that isn't dominated by the computer).
About performance.. or more importantly "feeling", how does it compare with native iphone app? I.e. does it have a 2 secs lag on everything that is clicked, etc.
Applied Cryptography - Free Class
I would say /r/politics would be good if it weren't on the frontpage. reddit is fine the way it is, since the frontpage acts as a filter for the masses. A userbase as large as reddit gravitates back towards the norm content-wise as its numbers increase, and the frontpage reddit's moderators couldn't enforce the rules nearly as well as askscience (they were on the frontpage but asked to be taken down due to moderator consensus.) So to anyone who wants to explore reddit, which most people don't, they'd unsubscribe from the frontpage reddits and dig deep. THEN you get the tight communities with common interests that reddit was in the first place.

EDIT: That being said /r/pics recently put a rules system up that works tremendously well. It used to be meme-filled but now generally has great content (except for the MS paint trend popping up as of lately.)
I dont find it particularly decent: the video image is cut, its resolution is not high enough to read the code (so you have to jump between pdf, pastebin and video) and i think some instruction are missing (maybe if you buy the book you dont have this problem, i dont know)
>I don't mean to pick on you

I don't feel picked-on :)

The mini can take 2 2.5-inch hard drives and (unofficially) 16 gigs of RAM. Like I said elsewhere, I do not consider the mini suitable for software development or other demanding tasks. The popularity of smartphones and tablets as ways to access the web will probably prevent web sites operators from increasing the computational demands of accessing the web so much that I will need to replace the mini in 4 years -- online selling and buying and iPhoto being the most demanding things I do with the mini.

The mini weighs 2.7 pounds. When I want to spend a couple of days at the girlfriend's place, I bring it along and plug it into her TV set. (Unlike laptops and netbooks, however, the manual instructs me to power the mini down before moving it, and I do worry a little that it is not designed to survive this weekly commute.)

The girlfriend would have aesthetic objections to my plopping most computers on her living-room floor, but the mini is stylish enough and small enough not to raise any objections.

I guess my overall point is that when you use mobile-class components, like the mini does, you can get away with having just one fan, like the mini does, which saves further electricity, since fans consume electricity, and makes it easy to avoid making noise, and make the whole device potentially very compact and light, which has its uses even in a desktop machine.
Show HN: web-based music player built with Node and CoffeeScript
I just tried setting white-space to "pre-wrap" and it improves the interface greatly. It still needs a lot of work though to make it pleasant to use.
Yup, just like every developer must have Twitter, GitHub, an open suorce code repo, StackOverflow profile, professional blog, tumblr account etc etc.

http://news.ycombinator.com/item?id=3669568

Personally, I like to have a real life off the computer sometimes.
Programming Languages Class - Build a Web Browser (Free Class)
Criticism is a Two Way Street - Things you should know before criticising
"You are angry at the republicans in the US, yet in general, the left wants more government control over our lives."

Democrats and Republicans are merely different sides of the same rusty coin.
This is crazy. IMHO, The main draw back is that you can only go thru one lane. Either family, skills or money. Canada has a system that allows you accumulate points in several categories. It is in the best interest of the US to have a system that works.
...refuses to even classify ACTA as a treaty, which would then require ratification by the U.S. Senate...

If we're modifying huge sections of IP law administratively without legislative oversight, that opens up a whole new area for fun and games. Now you have to petition your Congressman to petition the president to use a certain process just so your elected representative can actually have a say in how the laws are changing.

There's nothing new here -- Congress has been ceding it's authority away for decades and this is just a bit of political posturing on Issa's part -- but still, it's really quite breathtaking when you stand back and think about it. The bureaucracy saw what it thought was a problem, then used existing international treaties as a framework to "fix" the problem without having that pesky review or oversight process.

Next time they want more restrictions on the net instead of trying to get a bill through the Senate and the House they'll just use this avenue.

I gotta admit it, the folks waving their arms and saying ACTA was much worse than SOPA were right. This not only does the same and more, it sets up a process to make future restrictions easier to get by.

Wish I had something positive and upbeat to add, but if there's a silver lining here I don't see it. Perhaps the community can use Issa as a prop to get this thing opened up and eviscerated. Using the government oversight committee is probably the only road open at this point.
> So just create a 2nd "fake" account with seemingly "real" data and show them that.

I imagine that with the username/password, they'd notice that it was created two weeks ago, and that your friend network is all bots.
Thank you for the tips philip!

Of course i had an experienced lawyer that took my hand throughout all the process... And we also examined all available options...

L type visas are not as simple as you describe. The criteria that have to be met are not suitable for a startup company. The killing requirement is that you (the employee that will be assigned in the US subsidiary) has to work in the mother company for at least a year.

... And let's not get into what the requirements for the mother company are...
Minor update/edit to this note about the transition if anyone from 37 Signals is listening...

I just noticed that the Launchpad bar at the top of each page lists both Basecamp and Basecamp Classic when you're in the new Basecamp, but if you switch over to Classic you lose the quick link to the new Basecamp.

It would be nice during the trial to have the ability to switch back and forth easily from the Launchpad page/bar. This is a minor thing, but it would help me easily show my team the differences between Classic and Next because I know it will take a bit of "selling" them on it before we can fully make the transition.

Both links are also labeled "Basecamp Projects." I could see that causing some confusion with other people on my account.
i think it is actually short for interconnected computer networks
In not really related news, having a summer birthday is correlated with being a soprano/tenor:

http://www.correlated.org/243
This absolutely does sound like a troll, despite the disclaimer.

I use Ruby sometimes, it sure is a lovely language. That doesn't detract from the fact that PHP is still the most largely used web programming language around.

I do development work in, consult about, get paid to write about and sell commercial products using... PHP. It has the biggest potential market for me so it has the most potential customers, the most potential readers and the most potential work.

Besides, even if you personally decide to switch to Ruby the PHP community will still exist and still suffer the same problems. Those need to be fixed, no matter what.

Please do not detract from a single topic with a random "PHP v Ruby" thread. I'm not surprised but I am disappointed.
The most successful ones work for the feds while squirreling away the proceeds. The feds don't mind cultivating crime if it's increasing their numbers.
Sure they would, they'd just be smarter about it. The point of hacktivism is publicity. If no one knows what you're doing, you're not being particularly effective.
Actually, criminal copyright infringement is a $250k fine, 5 year felony, in the US. Pretty amazing. You are vastly more likely to be prosecuted criminally if you're part of a group, and especially if you focus on 0-days. Even more likely if you sell things, charge for advertising on your site, etc.

The DrinkOrDie people got a lot of 3-5 year sentences. http://en.wikipedia.org/wiki/Operation_Buccaneer
CityGrid Publisher Showcase: Mobile Local Search Component from Verious
As a former blackhat and ID thief who used to spend a lot of time in "underground" chatrooms and forums this doesn't surprise me at all. This is a standard pattern LE follows. Start with small arrests, work your way up, get someone at the top level to be an informant, take everyone down. Works for any type of group.

This always works because people are foolish and too trusting. The best rule is to assume everyone is LE trying to catch you. That means never revealing info that can lead back to you, never telling anyone personal info, your general location (eg the weather), always using 7 proxies, etc.

People who don't break the law would probably be surprised how much personal info crackers give to their online "friends". Less so on fraud forums but it still happens.

As some other people mentioned read "Kingpin: How One Hacker Took Over the Billion-Dollar Cybercrime Underground" for more info on how LE works. The FBI took over a few carding forums and Secret Service also had high level CIs.
Well I think this argument would work except that you chose Fox News as your starting point. Yes the MSM all have agendas, however very few of them push it as hard a FN does theirs. Remeber, FN were the ones who went to court to protect their right to lie and not provide "news" but editorially biased content.

http://scholar.google.com/scholar_case?case=1262284675681492...
Are there surveys of what are the most startup-friendly non-US countries?

I suppose that the things that matters are mostly monetary and boil down to "how much money do I need to pony up in the beginning stages?". On the other hand, if I had to move, I'd move only to a country where I know that I will not refused medical care for any reason and it is unlikely that I can end up in jail or being detained for wearing the wrong t-shirt. Oz?

PS: the website has a .com domain. Ah, irony of being refused a visa from the US while still being somehow under their legal reach.
The cost in donuts alone would be staggering.
That's rubbish, and if you think that is true then you have been watching The Social Network movie a few too many times and brainwashed by Hollywood.

And the way the USA is acting right now trying to pass draconian laws and police the internet for everyone, every sane company will/should be moving their operations to a progressive thinking nation.

I also don't understand why you are so upset. Just because someone else got the visa is no guarantee you would. You know that saying, "don't count your chickens before they've hatched"...
I've only learnt 2 programming languages 'thoroughly'. Pascal and Objective-C. I find Objective-C a much simpler to understand language than Java for example. I have worked in Java (although not extensively) and it just seems messy to me. Objective-C is much more human readable and better structured in my opinion.
Does new Basecamp has an API?

We use a Gmail contextual gadget to create Basecamp todo from emails so I wonder if that is going to work.
I'm no less disturbed by this than anyone else, but you do not truly own your Facebook account in the way that you would own a PO box.

Your data belongs to Facebook, not to you. Sad, but true.

Edit: (submitted too soon) I'm sure there's something legally dubious about requesting private keys in this way, but the PO box example was a clear reminder to me about how we wrongly think of our data on private services as "ours".
12-16 hours a day, 7 days a week. Scary/depressing when you put it like that.

I love what I do and the amazing things that I see and learn in that time, but when I'm lying on my deathbed am I going to be proud that I spent literally the majority of my limited time on Earth punching buttons on a glowing box?
About the books, do you have any recommendations that would make up that gap?
Are the video links active ?
IBM’s Watson Computer Gets a Wall Street Job
But terrorists are hard to catch, and you have to find them in dirty, unfriendly places.

These guys are relatively easy pickings, and the work is more fun because it's urban.

Ambitious federal agents and prosecutors are much more enticed by the latter.
Firstly, great products. I use Basecamp everyday as well, but we are also dependant on "Time", although I side with the philosophical argument that the "Time" feature is essentially useless. I would want to get rid of it, too. Here's why: project managers like to think it's a way of predicting the next project timeframe. It's a giant fallacy. In no way, shape or form, does Time keeping give you any sense of what to expect, so for that reason - I applaud removing it. However, Mr. Project Manager isn't happy. And when he's not happy, I can't use your new Basecamp. Once that sets in as a consciousness and we feel 'Classic', someone is going to start hunting for an alternative. Based on this thread, I'd wager someone is currently tying all of your features + Time together and imposing the "You don't have to be 'Classic' any more!" marketing ploy.

> If we had tried to reimplement every single Basecamp Classic feature in Basecamp Next before we launched, it would have taken a very long time.

As a software developer, I understand this. But I also understand that giving the user the power to migrate projects one-by-one, managing 2 codebases and offering support for 2 products is also a very large undertaking. I feel like adding Time and Private messages would have taken less time and perhaps only pissed people off momentarily when you flipped the switch, like when Facebook and YouTube users protest and then eventually shut up.

By over-engineering this process, I feel like you've opened yourselves up to competitors because now you're that company that is trying to satisfy everyone.
Considering that if this practice were revealed, it would cause a total collapse in Facebook's user base and thus its revenue engine... unlikely, to say the least.
Yeah, I agree. It's a beautiful and expressive language. I guess I should have called the article "Why Objective-C is Hard to Learn"