skysight-inc/HackerNews huggingface dataset:
I'd love something like this for someone who has already worked in web development. Super intense course to learn the ins and outs and pitfalls/strengths of a new language. That means you may be able to shorten it up as well.

I did a week long intensive course on Oracle DB optimization, and it's helped me more than probably anything else I've done. Transfer to general related db theory, and helps you understand how it all works at the core. Would love something like this for languages to switch/broad horizons.
My accounting buddy says 'Material Weakness' is code for accounting fraud.

If so, it explains why Andrew Mason and Eric Lefkofsky massively cashed out pre-IPO, and may have left everyone else holding the bag.
There are only three factors Java is getting used today.

1. 'Hiring the cheap programmer' factor.
2. 'The Oracle' factor.
3. 'The pointy haired boss' factor.

And those are not awesome reasons to stay alive.
I'm most productive before the deadline hour, day or night. I hope I'm not the only one..

However I voted morning; starting at 5:00AM is fun. I feel extremely positive/optimistic when I wake up, that counts for something I guess.
Ask HN: Who Is Hiring Remote Workers? 
remote hiring only!
I entered my HN username wrong, anyway to change it to the right one?
Oakley Splinter
I see some points but
>CSRF isn't a browser vulnerability. It's a serverside application vulnerability.
you didn't prove this one. CSRF is a browser vulnerability. ANd I don't care about another stuff you said further - you probably right that most popular frameworks have the protection out of box - I know it, no surprise here:). But I did pretty wide audit - only rails' protection looks really elegant. Hm.. probably I'm too much fan of rails, true.

And, please
>Baking CSRF protection into the HTTP protocol is the opposite: it creates a "smart middleman" that will in the long term hamper security.
Surely, I don't mean "Stop secure your apps from CSRF, it's not your problem". I just want to make browsers think about the issue as millions of developers have to. Because it is their issue, they are in charge. But we are fixing it on the backend(and we will have to for a next 10 years definitely)
I've always wondered what Conway's Game of Life was trying to tell me...
As a data point, I had 272 connections on LinkedIn before this started. I'm now up to 283, and will update after this is done.
I corrected it for you
What choice did they have? Either break compatibility, or use type erasure.
So the underwriters have no accountability in any of this? Not a single mention of them in the article, go figure.
According to me the disaster has already occurred. The only section of programmers using Java day in and out for their projects are low price substandard developers who can't write a line of code without the IDE doing autocomplete at every key stroke.

Coming to Android and other Google initiative they tend to happen only because the tooling, documentation support and a large pool of programmers that exist.

Java today is not used because its awesome, its used because for a certain section of industry needs massive supply of low price programmers. And with Java the people, the tooling support and rest is already there.

Hence no doubt Java is the next COBOL.
Back in my 20s 9pm->2 or 3am were prime. Now in my 30s with 2 kids I find that my most productive time is 9am til about 2:30pm provided I had a decent sleep. But sometimes that night owl hacker shows its face, especially when I really get into a problem area of interest.
The thing is, this is the Internet. Everyone is your neighbor.

And you raise a false dichotomy. Just because someone wants to exercise their right to privacy does not imply one is in "constant fear" of others.
Adventures of sherlock Holmes. I think single chapters might be nice.
Pinterest CEO Ben Silbermann - Interview Video
Wow this surely signals the end of GroupOn. What a stupid company. They are a big joke and nothing they do is right. This is literally an unheard of mistake... no other company has done anything like this (and survived).

Why anyone ever invested here, why I didn't think fthe stupid idea first, I'll never know
What would you say about trying to identify a potential co-founder's underlying motivation (money, experience, small team/flexibility, fame, actually caring about the market, etc.) for joining a start-up?

I'm actually asking from the perspective of a technical person who finds it hard to trust/gel with potential non-tech founders, but I thought perhaps you had some thoughts :)
I can't open google reader anymore, as it pulls in the article and logs me out. Kind of annoying, but funny at the same time. Nicely done.
Maybe I'm just tired, but both of these were near-uninteligable to me even at the beginning. It could also be simply that I'm a bit compulsive about reading -- I find it impossible to gloss over even a single word that I can't puzzle out, so even the first lines stop me in my tracks even though I can read all the words but one or two.

In any case, if you have the inclination, a version that started even more gently might work better for me.
Fair enough, that's basically what was said in the bug he filed with Ruby on Rails.

I won't try to impute motives but I think he did it this way because he felt like he was being treated poorly.
App Sales != App Revenue

There are tons of apps on the Android market which make loads of money from advertising alone. Flurry doesn't track that. The model Amazon's AppStore uses is entirely different to the one Google Play uses: the appstore encourages app sales, google play encourages free apps with advertising. Remember, advertising is the core income source for Google.

To quote the Google Play terms, <the 30% "tax" imposed on app sales is going to carriers, not Google>. This is why when the Android Market was launched in 2008 didn't allow paid apps at all. Not only they didn't have payment processing integrated, the banned one of my apps (twice) in Octover 2008 (a month after the G1 launched) for integrating PayPal payments. This was their plan all along...
are these programmatically generated? if so, would it be possible to get a script to make one of these from say an article scraped by instapaper?
Why are you friends with moochers? Won't they ever pick up the tab?

This tech looks really useful for lots of verticals, but not for friends. If you constantly pay for people who won't pay for you, stop doing that.
I'm a pilot for UA - West Coast sector exclusively. I get a day off every 2 days... My day starts at 5am to 11am, back home at 1pm...sleep till 10 pm and hack the night away till its time for the day job that pays the bills.
Cross-device JavaScript logging
Marketing incubators match startups with established brand managers
Thanks for reposting webgl.com's cache of equations. I've updated the list here http://www.webgl.com/2012/03/webgl-demo-google-search-3d-gra...
This is super sweet. I just did the whole thing, now I can read Dotsie!
Painters in Atlanta
Oracle's primary concern isn't to rewrite Java or to spend resources to make Java awesome enough to compete with the latest stuff that is coming.

Their fundamental concern is to milk Java as much and as long as they can to drive their sales for Oracle DB and associated business products. And that makes perfect sense too, they are in business to make money anything else and they won't be doing their job properly. Don't you see what has become of Sun Microsystems? They were making awesome stuff by the day for somebody else's profits. Oracle is not going to make the same mistake again.

Java is oracle's strategic investment in using that as a leverage to drive sales else where. And looking at their segment, its mean't mostly for large corporate programmers and not hacker, start ups and alike.

I bet IBM makes sufficient contribution to COBOL still just to keep their mainframe sales alive and not because they want COBOL to be awesome enough to rule the world.

Similarly Oracle's contributions and investments to Java are going to be for driving their sales not for sake of making Java awesome.
Maybe you can just key-in your name with hebrew characters? That'll teach them.
Poll: Would you use a similar app to Oink (Oink replacement), if any exists?
So... if I want the single letter 'B' by itself, it looks exactly the same as the letters A, C, D or E?

In other words, 'DE' look exactly the same, without any reference, as 'AB', and there is a haphazard set of similar combinations?

I'm not doing that. Learn Braille instead.
CSRF is NOT a browser vulnerability. The browser is doing exactly what it's supposed to do: load content. The browser can not (and should not) attempt to identify the "evil" HTTP requests from the "good" ones. The browser's job is to make requests.

Now, you could argue the browser's job should be to implement security features as well. It does, after all, implement the same-origin policy. But, if you think about it, there is no good way for the browser to fix the CSRF issue. You can ask the user, which is what's suggested, but that never really works. They'll do one of two things: click "okay" every single time, or stop using your browser.

I would guess well over half of all websites do one of the following: (1) load an external JS file, (2) load an external image, (3) load an external CSS file, (4) use an iframe which points to a different origin, (5) use a JS redirect, (6) use a meta redirect, or (7) open a new window.

The proposed "solution" to CSRF stops ALL of these use cases. The user would have to manually approve each and every one of them. Given that well under 1% of alerts would be true attacks, the user would almost definitely "okay" on the attacks as well: they would have been trained by thousands of other alerts that this is an acceptable thing to do.

There was a paper by Barth and Jackson on CSRF defenses where they propose an Origin header, but that's the extent to which security is implemented in the browser. It is fundamentally up to the web application for verifying the user did in fact initiate the request. No amount of code in the web browser can get around this fact.
Sina, Tencent Shut Down Commenting on Microblog
When I was using Windows, I used to play lot of time-killing games. After switching to Ubuntu, I could not find those games. Some of those linux games were not as good as those windows games. I could try playing via Wine, but didn't.

So, my productivity has increased now. Most of time is devoted to fixing bugs, trying to increase passive income, trying to get some certifications etc.,

Still, I miss those games... AoE, Thief Series, HL, Diablo...
Why not stack Morse code horizontally? At least Morse code is somewhat designed to take advantage of the frequency distribution of letters (e.g., e is a single dot.)
Here you go (the 1st 12 chapters):

http://dotsies.org/stories/adventures-of-sherlock-holmes.htm...
>I would guess well over half of all websites do one of the following: (1) load an external JS file, (2) load an external image, (3) load an external CSS file, (4) use an iframe which points to a different origin, (5) use a JS redirect, (6) use a meta redirect, or (7) open a new window.
The proposed "solution" to CSRF breaks ALL of these uses.

You definitely kidding me. Please point out where in my post I said to deny ALL requests. I was talking about ONLY POST requests. Probably I forgot to add it :) So, I'm talking only about forms sending and GET is ok sure.
There are two different issues here. 1) A bad security vulnerability at GitHub. 2) Poor design in Rails that makes it easy to produce security vulnerabilities.

Igor found 2, and got ignored by the Rails team. His frustration led him to publicly demonstrating 1, which caused a whole lot of people a whole lot of trouble.

The people that are irritated at him are irritated at him because of 1, not 2.
Nikki Durkin - would bang

Olga Vidisheva - would bang

Elli Sharef - can wait outside

Kathryn Minshew, Alex Cavoulacos and Melissa McCreery -
would have 3some with the 2 on the right.
This week I've been trying to get back into the early morning routine I started a few months ago. I've never thought of myself as a morning person but if I am able to drag myself out of bed my most productive is between 4:00am and 10:00am.

It has all the benefits of working late (quiet, peaceful, few distractions) with the added bonus of having a clear head. Definitely makes it easier for me to focus on getting stuff done when my head isn't spinning with the collective ideas of the day.
I know quite a few groups developing Facebook games using Unity.
Aren't they forgetting Jessica Livingston? This should be titled "The Women in the ycombinator batch"
Reading things like this makes me jealous at first, and then it makes me think, "One day I'm going to be on that list."
Try it out and post a link! It would be interesting to see.
Either you do it for everything, or you do it for only POST and you end up missing half of the vulnerabilities. Correct me if I'm wrong, but your CSRF attack used a GET request, did it not? [1]

Web applications make state-changing operations on GET requests. You might not like it, but they do.

[1] <img src="https://mail.google.com/mail/u/0/?logout style="display: none;" />
That's really cool and Boston Dynamics is amazing but there's most certainly not a 30ft jump in that video.
I also was one of the students at Dev Bootcamp, I came in with some previous development experience (non Ruby), and it was amazing/well worth it. I'd highly recommend it.
Friday Q & A: Answering Your Questions
This seems like one of those things that will push something useful out of my head if I learn it.
Sketches and Digital Wireframes for Web Apps
There will be a who's hiring post on either Sunday or Monday depending on whether the bot is smart enough to avoid weekends.
Obat Herbal Radang Paru-paru
Obat Herbal Radang Paru-paru

Sakit radang paru-paru ?? Masih belum tahu, obat herbal apa yang mampu menyembuhkan radang paru-paru Anda ??

Jika Anda, kerabat, maupun keluarga Anda yang sedang mengalami sakit radang paru-paru serta belum dapat sembuh juga, tak usah lagi khawatir karena kini telah ada produk kami yaitu obat herbal radang paru-paru XAMthone Plus, yang terbuat dari bahan-bahan herbal tanpa menggunakan bahan kimiawi sedikit pun sehingga sangat aman di konsumsi dan tanpa menimbulkan efeksamping negatif bagi tubuh kita. buah manggis merupakan komposisi utama obat herbal radang paru-paru XAMthone Plus ini yang dikombinasikan dengan bunga rosella, anggur, apel dan madu murni sebagai pemanis dan pengawetnya. Sehingga sangat aman dikonsumsi bukan ??
Konsultasi dan info lebih jelas hub. : 08521 9946 055 atau 0853 2237 9603. [tlp/sms]
That children are now being conditioned to allow strangers to shove hands down their pants, that young women are subjected to genital inspections before being allowed to pursue their careers, that innocent people are adopting poses of humiliation and surrender in response to barked commands.

I'm not a big fan of the TSA, but whoever wrote this is living in a different version of the U.S. than I am. Statements like these are very dangerous because they sensationalize the topic to a point where most people will easily dismiss the author. This gives the opposing side exactly the ammunition they need - they can now dismiss the author, and, unfortunately, all TSA opponents by association.

The TSA might be a waste of resources and a step in the direction of a slippery slope of loss of freedom, but that's all it is. Wrapping it in some sort of unskillful pedophilia scare tactic doesn't do anyone any good.
Excellent site, even better customer service (refunded money instantly for some fraud answers) and some fantastic results. Keep the good work going
You can grab the bookmarklet at dotsies.org to use the font on any web page. If you're referring to going gradually from letters to dots then yes, happy to post the script.
Spotify takes Facebook's Timeline feature to insane extremes
"The Women in the Y Combinator Batch" is a less readable, viral headline. I think it's sort of obvious from the first paragraph or two that I'm not talking about partners, just the most recent class.
My First Hackathon: Lessons Learned
404. When you add something, please let it last for more than 4 hours.
A rental address with 1 month remaining on the lease is usually accepted as a permanent physical address. How does this allow debtors to track down debts?
I find it interesting that none of them are technical founders. Were there no women who coded in this batch?
阳光房
Tough crowd.

Personally I say big ups and thank you.
If you just type in the expression as Mathematica code, doesn't Wolfram Alpha evaluate it just as Mathematica would?
I think it is clear that she's writing about female founders in this batch and not YC partners.

She neglected to include the co-founders of Plangrid (Tracy Young) and Medmonk (Somaira Punjwani). They, too, have fascinating backgrounds. (Since presentations were only 2.5 minutes, it was easy to miss some if you had to leave the room.)
>Unfortunately some people aren't taking this as seriously as we hoped. There are over 20mm Americans (mostly in rural areas) who have access to a fax machine but don't have the internet.

The problem with your implementation is that you require your users have the Internet to create a profile and to receive a fax. Ideally you would have a phone number (different ones for men seeking women, women seeking men, men seeking men, women seeking women) that someone could send a fax to and receive back a random fax.
In my opinion, it would make more sense to read braille by looking at it. However, it would be cool if this were some sort of alien language/hidden language in a video game or something.
My Brain
Presumably he approached it the same way he approaches real life. Nobody makes rocks, rocks simply exist, to be used as we might please.
HackfulThon in London and Berlin on 29th April 2012
Hackful Europe is a community site focused on European hackerdom and startups. It was born recently as a complement to HN. On Sunday 29th April 2012 we run a HackfulThon in London and Berlin. Work on back end (RoR), front end, content and enjoy.

http://www.meetup.com/Hackful/

http://hackful.eu/
You would rather nag and hassle your forgetful friends to pay you back, instead of sending them a little message with an easy-to-pay link?
> if you have the inclination, a version that started even more gently might work better for me.

How's this?

http://dotsies.org/stories/the-runaway-couple-2.html
genious.. my favorite part of the day is to come home and read some dotsies since i discovered it..
Judge Dismisses $105M Blogger Suit Against Huffington Post
Web is already too useless because people can't think about security in a decent way.

Still baffles me that i can't allow a script at one domain to automate something in another domain for me.
think differently. right now our brain processes letter by letter, with dotsies it will become symbol by symbol. i'm reading it for some time, haven't had that difficulty.

there will always be letters next to it anyway, easy to see the base, if you have to.
Cruise411 Discount Coupons
>Wrapping it in some sort of unskillful pedophilia scare tactic doesn't do anyone any good.

Seems to have worked for generations.

"Won't someone please think of the children."
Perfectly solid web apps routinely ask browsers to POST to other domains.
"I did pretty wide audit - only rails' protection looks really elegant."

This is handwaving. You were wrong about this. I assume you want to know that, so I'm saying it bluntly.

"I just want to make browsers think about the issue as millions of developers have to. Because it is their issue, they are in charge."

No, the web browsers are not in charge. The secrets and sensitive actions are occurring on the servers, not in the browsers. The servers are what matter. The browser isn't protecting your email. The server is. The browser isn't protecting your bank account. The server is. The browser isn't controlling who is or isn't your Facebook friend. The server is.
anybody else having trouble updating the spreadsheet? is there a limit to the number of people who can be editing at once?
>Web applications make state-changing operations on GET requests. You might not like it, but they do.

but when developer made a mistake with GET it is 100% his problem - it's out of question. he should be punished :D
No, did I say anything like that? I was merely bemused that you called the designers of generics "drunk retarded monkeys", when they are clearly anything but, based on their work before and after.

Name calling isn't really helpful. I don't like Java either, but there are a lot of very smart people who worked on it, and many of them labored under constraints I do not envy. That's all.
Edmonton Oilers Jerseys
Why is no one calling this out as FRAUD? They clearly and intentionally inflated results... a 200% difference off net income.

Why is the SEC and FBI not investigating? And why are there no class-action lawsuits coming together already?
Indeed. They are not measuring total revenue, but "efficiency". This doesn't show that the developers make more from Amazon app store than they make from the Play Store. That would be very hard to believe, considering there are around 60 times more "Android" users than Kindle Fire users.

But it does measure app store "efficiency" in relation to the iTunes store - with the Play Store being 4x less efficient (believe it or not, it used to be 50x less efficient in the past) than the iTunes store, and the Amazon store being only 11% less efficient.

Google's problem is their lack of a "popular payment method". They slacked for years with Google Checkout, and now when they need it most for Android, (almost) nobody uses it. This brings huge friction in the buying process for most Android users. Compare this to iTunes and the Amazon app store, where pretty much anyone in the Apple ecosystem had an iTunes account that they could already use to pay for stuff, and the same goes for Amazon/Kindle Fire users.

There are probably other factors which lower the Play Store monetization efficiency, too, but I believe that's the biggest one by far - so if Google wants to help developers make as much money from Android as they do from iOS, they need to either make Google Checkout very popular for other purposes/services fast, or they need to allow Paypal as a default payment method.
From what I know in Europe, the military background was a relevant issue.
Sorry. I don't know who down-voted you for what might be an innocent question.

Google is calculating the set of values satisfying these equations on servers which are pretty fast - quite a bit faster than graph calculators.
Head of 'faster-than-light' neutrinos team resigns
I'm an accountant. And it is fraud.

Andrew Mason is basically a newer version of Bernie Madoff. Except Andrew publicly runs a ponzi scheme... AND overinflates share valuation to pump & dump his shares.

LOL.

If he and his CFO aren't in jail over this... I don't know what! There goes investor confidence...

f me!
I basically agree with almost everything you wrote here and in the other long one you posted replying to me up thread.

But I downvoted you because this has almost nothing to do with ootachi's comment about the realities that the designers of generics had to cope with. You're just regurgitating the same criticisms that has been leveled against Java for years.
Random Funny Pictures
Import DVD to FCE Mac, convert DVD to Final Cut Express on Mac?
虫虫营销助手搜狐博客
It really should be the life-span of the author plus some arbitrary amount, but the arbitrary part shouldn't be more than one generation.

It does society no good to have your grandchildren living off your legacy without an imperative to create their own.
Nonsensical. CSRF isn't God's punishment for REST-lessness.
Thanks for the response. I wish I could upvote you five times..
Tekpub/Pluralsight 48 Hour Special
深圳水货手机报价
Sms Cute In Hindi - Advice sms
This looks much better. I'll report back when I'm done reading.
A letter is a symbol. This is just switching to new symbols.