skysight-inc/HackerNews huggingface dataset:
From a quick glance over the code, it looks like the meat is in his showtimes javascript file(http://dl.dropbox.com/u/682022/showtimes/javascript/showtime...)

I'm not very familiar with backbone.js so it's a little confusing to me, but looks like models are being built. Here's what I can muster, this could all be wrong

* [Line 112] The trailer is using a YouTube API (https://gdata.youtube.com/feeds/api/videos?alt=json&form...) and then the movie title?

* [Line 184] Ratings coming from RT API (http://api.rottentomatoes.com/api/public/v1.0/movies.json?ap...)

* [Line 341] Theatres & Times from Yahoo (http://query.yahooapis.com/v1/public/yql?q=use "store://VZHvlyU81L6BFVGyE7CNhT" as pterodactyl.movietimes; select * from pterodactyl.movietimes where zipcode="<zipcode>" and date="<date>"&format=json) -- I have no idea what this is all about. Any insight would be helpful.

* [Line 405] The links that Yahoo API thing returns are then rerouted to go through http://www.qksrv.net/click-5632409-10576771?url=<buyURL&..., I'm guessing for OP to get some cash

Then there's google maps for the maps, so that seems to be where the data pull is coming from. Not sure what the origin of that Yahoo URL is though.

EDIT: I added line numbers from the showtimes.js file because HN reformats the links so you can't see them all the way.
How To Make Your Forum A Personal ATM
The New Law That Will Turn the Startup World Upside Down: Crowdfunding
Sigh. I wasn't doing mikeocool's transit planning, I was responding to the assertion that you have "to transfer between the bus and subway a few times" to get between Somerville and Allston. Whether it is "utterly moronic" to take the subway into Boston seems to me to be situation dependent. If there's snow on the ground and the buses are all running late, that's certainly the first choice. If it's a nice day, you'd probably decide to just walk the half mile across the river from Harvard Square.

Look: if you don't like Boston don't live there. The Bay Area is really nice too and I liked it a lot. I'm currently really liking Portland. But flaming about transit options in what AFAIK is the densest city in north america is just dumb, sorry. Carless bostonians have absolutely no grounds for complaint.
The new iPad Exposed
I've seen people armed with machine guns at Miami, but that was about a year after 9/11, I think.
Never working late or on weekends is decidedly not the norm in the tech industry. If you're lucky enough you work at a company that respects "work life balance" and only asks you to stay late or work on weekends on rare occasions. If you only have average luck then you'll be working 50 to 70 hours a week and at a minimum checking email on most weekends.
My plugin set provides more bits of identifying information than my browser string. Which says a lot since I am using iceweasel...
Its $500 incorporation fee, plus lawyers fee. Then $800 minimum tax even if you don't make any money.
Suspicions aroused as exploit for critical Windows bug is leaked (Updated)
WireTap Studio. I got it with one of those MacHeist or whatever bundles a few years back.
We've introduced a new manifest version attribute in the extension manifest in Chrome 18 (currently in beta). When a developer updates his or her extension to use manifest_version 2, Chrome will enforce the following CSP policy by default:

script-src 'self'; object-src 'self'

This policy imposes the following restrictions on extensions:

Extensions can no longer use inline scripts, such as <script> ... </script>. Instead, extensions must use out-of-line scripts loaded from within their package, such as <script src="foo.js"></script>.
Extensions can no longer use eval(). Note: If you’re using eval to parse JSON today, we suggest using JSON.parse instead.
Extensions can load plug-ins, such as SWF files, only from within their package or from a whitelist of HTTPS hosts.

http://blog.chromium.org/2012/02/more-secure-extensions-by-d...
Researchers at UC Berkeley studied this exact question. About 40% of extensions contain at least one injection vulnerability. Some really popular extensions were vulnerable -- even a couple Google authored ones.

http://www.eecs.berkeley.edu/~afelt/extensionvulnerabilities...
Add OMGPOP and the recent "overnight" success of Draw Something to the list. All the articles touting it as the fastest growing game of all time ever painted the story as an overnight success, and failed to mention the backstory of the company. Not only has OMGPOP been around for 5 years, and raised 17M in VC funding, but the game itself has been around almost since the beginning as a web version, but only exploded in usage when it launched for iPhone.
Not anymore, though. The Galaxy SII has already received an ICS update. Google still hasn't even announced the date for the Nexus S ICS update, and the Nexus One won't be updated at all. The only Nexus device running ICS is the Galaxy Nexus, which was released with ICS, and even the Galaxy Nexus is receiving OTA updates from Verizon, not directly from Google.

So Nexus devices aren't updated sooner, and they don't even receive more than one major version update. With a six-month release cycle, that means that even the Nexus devices will have a very short shelf life and will be behind very quickly.

If that's the case, then the only advantage is being able to unlock the bootloader - but that's not specific to Nexus phones, and if you still have to install a custom ROM to keep your phone up-to-date after only 6-12 months, how much of an 'advantage' is that?
>why would you value a stranger's opinion so highly Mr. Megalomaniac?

I dont think you actually read my post carefully.That did'nt really happen to me.In fact I doubt it can actually happen to anyone since no girl would ever actually ever say something like that.

It was just the lines from the xkcd comic that I thought were insightful.
May god continue to bless RequestPolicy and NoScript...

[1] https://www.requestpolicy.com/

[2] http://noscript.net/
Aside from disruption, these tools augment/enhance/enrich their users life in a meaningful way.

Not to mention enlarging the pool of students these academic institutions draw upon and finding additional channels to generate revenue. A rising tide effect perhaps.
I do not buy computer books often. I have the Internet :) there are exceptions, of course. One such is SQL and Relational Theory. Not your "learn this in 24hrs" book, that's for sure. More my size, so to speak. Imagine my delight when on Jan 20 I find an email about how I get a 40-50% discount on the 2nd edition for buying the 1st. Nice. And no DRM. Superb nice. I have a strictly Linux environment from phone to servers and DRM'd eBooks are a pain to deal with.
I don't think it really does. Technically it can but in the real world when people turn to ACID semantics to make an async system appear sync they screw it up.

Very few people set their consistency level to serializable which means that they probably have a whole tonne of race conditions that they don't think they have in their code. Even with the consistency level set to serializable you generally still end up with lots of strange state bugs.

Most of the point of messaging systems are to create asynchronous systems, the point of ACID semantics is to make an async system appear synchronous. If the issue is purely one of making a couple database writes then you probably don't need the message queue in the first place, if the couple of database writes depends on an external service then you've lost all the consistency you thought you had. (Unless the external service supports transaction semantics and you've got a 2PC system setup)
My Nexus S received its ICS update back in November. So that part isn't accurate.
It bothers me to see claims like this. Plug and play and everything goes fast just doesn't always work no matter how great your product might be.
I am more concern with the overconfidence of some user over their extensions/updates; a extension with many users can suddenly include something like:

$('.email, input[type=password]').val(send_to_database)
I am friends with much of my city's homeless population (including some people who sleep in their cars), so I have a bit of insight into some of the problems that this fellow will face. Have you considered:

- Where will you wash your clothes?

- Where will you store your clothes in between washing them? They will end up quite badly wrinkled. Do you have any idea how hard it will be to go into an important meeting looking like you slept in your clothes? Even if the people you're meeting are cool, it will take your confidence down a notch (or seven).

- What is your backup plan in case of a catastrophe? (ie - what do you do if your car gets towed?)

- Personal safety. The streets are full of predators who roam them in search of easy prey. Sleeping in your car puts a big target on your back. Sleeping in your car with a laptop/other tech equipment puts an even bigger target on your back. Be very, very careful.

- Apartment envy. Becoming homeless is as big (if not a bigger) culture shock than moving halfway around the world. Based on conversations with people who have become homeless, you will go through points where you miss how easy your 'old life' was. Building a startup contains the same kinds of lows. What will you do if the no apartment low coincides with a bad startup low? You don't have a support system in SF...

I'm not trying to dissuade you, but I feel like I owe you a bit of my knowledge. Best of luck and please be safe - both physically and emotionally.
Can you point to what he said exactly?

I was in the car, listening because they were going on about Jean Ferraca - whom I really dig. And it did catch me out as something extraordinary, but not unexpected, for WPR. I started to write it down when I got to my desk and thought 'whatever'.

Joy Cardin show for 3/12/2012, show number 120312C. I'll download and give it a re-listen, reply here.

Listening twice to Cardin - the things I do for integrity.

Show is archived here: http://www.wpr.org/webcasting/audioarchives_display.cfm?Code...
I used to do this, but I learned the hard way that it fails terribly when you're working on different branches on different machines.
What Does Highly Available Mean? (Riak Comic)
How To Enable “Stereo Mix” in Windows [Vista+] (to Record Audio)
http://www.howtogeek.com/howto/39532/how-to-enable-stereo-mi...

I payed for Pamela long ago; now the free version records 15 minutes. (Don't know if I can still recommend them though, now tying in TrialPay for some reason.)
http://www.pamela.biz/en/products/
You mean:

brew install jack
Apple Releases Developer Preview 2 of Mountain Lion
'This American Life' Retracts Apple Story
Two myths at play:

1. Overnight is never overnight. More probably you just never heard of it before.

2. If you just keep going you will eventually make it.
But probably not. (http://swombat.com/2012/3/10/successful-people)

Believe what you want and act accordingly.
You're mixing up the number of bits in the RSA modulus n, and the number of bits in the exponent e.

Integer modular multiplication is O(n^2)[1]. Binary exponentiation, the most common of algorithms, requires O(e) modular multiplications. It is therefore trivial to get to the O(n^3) figure of general modular exponentiation.

RSA encryption with e = 3 is much simpler, consisting of exactly 2 modular multiplications. That makes it O(n^2).

Note that an exponent with very low hamming weight can still be O(n^3). For example e = 2^(n-1) + 1 requires n multiplications, therefore O(n^3).

[1] If you want to go all theoretical, it can be as low as O(n log n log log n) using Schoenhage-Strassen. But that is not practical for 1024--4096 bit integers.
Activists in Iran and Syria targeted with malicious computer software
Except it's not the latest unmodified Android - the Nexus S was top-of-the-line less than a year ago. Within six months, Google releases ICS, so you'd expect that it would be updated promptly.

...and yet, five months later we still have no idea when Google will update the Nexus S to ICS. And unlike the carriers, they're the ones who developed the entire system, so it makes you wonder what devices they were using, and why it would be so hard to make sure ICS could run on the most recent publicly-available device.

If it takes Google 5-6 months to update their own phone, then by the time the Galaxy Nexus is upgraded to Jelly Bean, it'll already be out-of-date anyway.

So even if the Google Wallet mishap were a mistake, if having an unmodified-but-unupdated stock phone is the only difference, I'd rather just scan the market for the best available phone with an unlockable bootloader and install a custom ROM myself. No carrier bloatware, and then I actually get the updates before the updates themselves are made obsolete by the new version.
Interesting. So CSP will stop web pages from loading content located at the chrome-extension:// scheme? From the docs it seems that it will stop the extension from loading certain resources, but it's not clear that it will stop the page from loading extension resources.
http://code.google.com/chrome/extensions/trunk/contentSecuri...
Sure, but datawarehouse techniques have only just now reached a point in their evolution where they are able to react to pregnancy-related changes in buying behavior, which is still probably going to return false positives. I can't think of anything more significant in a human's life in affecting buying habits than pregnancy, yet that's the cutting edge.

Getting data is easy, it's doing something profitable with it that remains hard.
Kevin Rose's Milk joins Google
In a world where 50% of primary voters in Miss and Bama last week believed Obama's a muslim, yeah, I guess journalism leans to the left.

I mean, what would consist of "balanced" in your view? The science leads towards a global warming hypothesis, and what's what they report. Most non-foxnews viewers agree that no WMD were found in Iraq. How are they supposed to split the difference on stuff like that?

NPR does not have ranting opinion shows that are political first. They have programs that are intended to inform. To the extent that liberals are more attracted to outlets like NPR than they are to outlets like currentTV, that's a statement about liberals, not about NPR.
Wonder what this will do for existing engagements.
This dude is completely insane but I admire his total steadfast belief. If he manages to one day apply that intensity of conviction to actual real information, he'll probably do very well.

Kurt, if you're reading this, for the love of God, stay the fuck away from east Palo Alto. At least look it up on Wikipedia. You'll read about an anti-gang-crime task force which included 500 FBI agents and plenty of other law enforcement people. You'll also discover the city held the highest murder rate in the country back in 1992. It's lost its champion status since then, but it's still in the game. Point being that it is NOT the same as regular Palo Alto.
First, not all received the update. Second, Google froze the update when they found a battery-drain bug, so even those that were intended to be upgraded could only be upgraded within a short window.

The point is not whether or not there exist Nexus S devices that have received an update - the point is that most Nexus S devices have not yet received it, and are still unable to update through any official means.
To be a pedant, I can't imagine the coiner of this phrase or really anyone who has ever thought about it uses the term in the sense that something or someone became successful because of actions taken over a proverbial overnight. The examples he mentioned are things which became popular abruptly, which seems to embody the spirit of the phrase just right.

To take the point to the extreme, absolutely nothing could be considered an overnight success if we use the term in the sense the author implies because noone is wildly successful at something they attempt for the first time if they have no apriori knowledge of how to do it from previous attempts or study.
> five months later we still have no idea when Google will update the Nexus S to ICS

It should be noted that only the Nexus S 4G doesn't have ICS, the normal Nexus S does.
IE: Improved Support for Real World Web Apps
I don't trust the "many eyeballs" approach anywhere near that much. I doubt that a lot of people will look too closely at something dhh supposedly committed, and even if they were worried by what they saw they may put trust in the system (and the "developer") and decide that they're simply misreading it.

Bottom line is "someone will probably see the exploit" is a gambler's approach to security.
That's cool. Best of luck!
Obsidian missed Fallout: New Vegas Metacritic bonus by one point
Buy Men's Jeans, Switzerland
Chad, congrats on your new adventure and looks like your in great company!
Firefox divides browser add-ons into several categories (as do other browsers, but I'm most familiar with the Firefox terminology), including:

* Extensions

* Plug-ins

* Search engines

* Themes

"Plug-ins" are a particular type of add-on registered to handle specific media types in <embed> and <object> elements. There are a relatively small number of common plug-ins, including Flash, Java, Silverlight, and Quicktime. They are designed to be exposed to web content, so web pages can easily test for them. The EFF Panopticlick demo uses plug-in sniffing as part of its fingerprinting.

"Extensions" are add-ons that use browser APIs to modify the behavior of the browser application. There are a huge variety of popular extensions, including Adblock Plus, Greasemonkey, Chrome To Phone, Stylish, Tree Style Tabs, etc. In general, a web page can detect an extension only if it modifies the pages or takes some other action to expose itself to scripts on the page. However, this bug report and blog post demonstrate a way for a web page to detect a Chrome extension even if it does not take such actions. And one of capo's links in this thread demonstrates a similar method that works for many Firefox extensions.

Plug-in sniffing is possible in all browsers that support plug-ins, and there's no simple fix without breaking web compatibility. Extension sniffing depends on both the browser and the extension, and there are reasonable ways it could be fixed or mitigated.
I knew of several groups of people who lived in San Francisco but pooled together for crappy commuter apartments in Silicon Valley where they could sometimes sleep during the week after work. It was usually just a sleeping bag per person. Maybe you can find something like that, it'd be a lot easier. Their rent was usually 200 or so per person.
Any word on the future of Pivotal Tracker?
Not anymore. The Verizon Galaxy Nexus has some bloatware, and Google Wallet was disabled. (You can re-enable it if you root/reflash, but then it registers as an 'unsupported device', so the officially supported device doesn't have all of the ICS features)

And even if that were the only difference, then there's not much to be excited about.

If you really want that, you're one of the 2%, and you're probably interested enough to go through the now-painless process of rooting/unlocking and flashing a custom ROM to get a 'vanilla android'.

And the other 98% of Android users don't care if they have bloatware/Sense/TouchWiz/Blur, because they don't even know the difference.

So even though the Nexus is not always a stock Android phone anymore, even if it were, that's not enough to get that excited about, either as a developer/modder/tinkerer or as a casual user.
Could you elaborate on that response? Why would you want to block out scripts and stop the owners of a website to collect anonymous data to improve it?
I worked at a well known government agency for a year, and spent some time in one of the data centers. It was poorly designed so the main air conditioning vent was directly above... the cubicles and desks. Instead of the servers.

So it would be blasting full cold all day and all night, and we were miserably cold. Nothing like wearing three jackets to work in the middle of August in Maryland.

So one day, we brought in a few refrigerator boxes, attached them to the ceiling to make a make-shift vent, and then we shunted all the cool air to the "server" side of the room.

We were much happier after that.
The Computer’s Next Conquest: Crossword Puzzles
It worked for Colonel Sanders.
It seems like you're doing this for all the wrong reasons and totally missing the point in all the stories where people struggle and eventually become successful.

LA is close enough to Silicon Valley that you could fake it pretty easy, without the huge inconvenience of living in a car. Learn a few popular hang outs and meeting places and commute up a few times a week. Schedule meetings and appointments to coincide with the days you drive up.

And living in Silicon Valley isn't going to make a bad startup idea any good.

Why not start in LA and move to Silicon Valley when you get things off the ground?
My first reaction was to say "wtf" out loud.

It's just that EMC and Pivotal Labs to me represents kind of opposites in the spectrum: EMC is the established old-school hardware company, while Pivotal Labs is the cool software consultancy that the cool startups hire for web-apps. So that pairing feels odd. I'm curious to know what is the goal behind that…

"Bringing agile methodologies to the enterprise" doesn't make much sense: would EMC be interested in making consulting money for agile training? That doesn't seem to be at the same scale of the rest of the business…

And "hardware as a service" sound like it would be more suited for veterans from the cloud providers they might want to compete with.

Surprising to say the least.
No, that should not be noted. Yes, a few people got a broken OTA for the normal Nexus S last year. But most phones have not received an update and there are only rumors of when one will appear.
Flash is actually a plugin, not an extension. The difference is that plugins are designed to render content that the browser cannot, while extensions simply add new features to the browser or change the behavior of existing ones.
Question. How is it illegal if its publicly scrapable information?
The Zen of R
JGit has support for the S3 protocol built in which makes it possible to push directly to S3
why is using search data to trade illegal?
IBM went through a transition from machines to services, it wouldn't surprise me if EMC were trying to get into services this way.
so are you saying there is an upper limit to entrepreneurship? I don't think so.

I wonder if pg has written anything about this, if there is some point of diminishing returns in the lean startup scene
The new iPad: are you buying one?
[3a] http://www.catonmat.net/blog/clear-privacy-ie-firefox-opera-...

[3b] http://www.piriform.com/ccleaner
I've never heard of Pivotal Labs but perhaps they're competent in big data backed web apps. I work in the data center monitoring space (actually power systems simulations) and I've created a SVG based web app for power system simulation and monitoring visualization, and it's garnered interest from big traditional players in this space.
Congrats Chad! I just registered with Exec. Can't wait to try the service. Let's chat soon.
I was very surprised by this too. It sounds like EMC is trying to establish some kind of legitimacy in the startup world.

I feel like Pivotal gets a lot of respect from the hacker community. I wonder what kind of fallout this will have there.
This is a head-scratcher for me, but I know a bunch of current and former Pivotal Labs peeps (including CEO Rob Mee), and they're some of the smartest, savviest hackers around. I'm confident that this will end up making sense and will prove to be a good move for both parties. (I practically live inside Pivotal Tracker, so I certainly hope so.)
Privacy? But since you asked I do not think that will be a valuable feature for you.

However you might be interested in the performance boost that comes from not loading/running a million 3rd party scripts / flash objects.