skysight-inc/HackerNews huggingface dataset:
He's got a cool sense of humor too. Here are a few recent gems from his @tpope twitter account:
"My favorite part of the glaucoma puff test is how it always works the first time and they never end up blasting your eyeball over and over."
"Some people think 300 words isn't much. Me, sometimes I have to pad out even my tweets. Lovely weather today, by the way."
See http://en.wikipedia.org/wiki/Deniable_encryption
Philly papers sold at 10% of 2006 value
Wow, I cannot fathom how I could be downvoted on an honest and purely technical question.
hostgator. I control my own procmail recipes, and prevent 99% of spam. If one slips through, I edit the recipes and voila.
Wow, I've never heard of anyone in South Africa with a non-government job being asked to have their fingerprints taken. Admittedly, my background is mostly tech startups, but even friends who worked at big-ish companies (Didata, CS Holdings, &c.) have never mentioned it.

Credit history is a mostly used as a poor indication that you won't be tempted to sell company or user private information. It might also be an indicator of poor judgement or other bad traits, I guess. I think only one company ever asked this of me, and they were certainly the most backward of those I interviewed at.

Basically, companies are trying to avoid hiring bad people. Whether it's because they've bought into the "it is impossible to fire anyone" story or not, it is costly in terms of time and wasted effort and disruption. And, generalising from an admittedly small sample size, I'd say they're not as good or as introspective about how they hire as the few (admittedly really good) US companies I'm familiar with.
I wouldn't go so far as to say there was a high demand for real-time. But some users asked for it by name, and generally, increasing speed (lowering latency) correlates strongly with increased usage. If I can make page loads faster, and feed fetch times lesser, then my users will use NewsBlur more. It's also why I chart the average load time on every user's dashboard.

In this case, real-time means NewsBlur is acting as the subscriber, and the publisher pushes out messages to NewsBlur. This way, instead of fetching every 3 minutes for what may only be updated stories or even no changes at all (not every feed behaves nicely by offering a 304 Not Modified), I only have to fetch the feed when it confirms that there is something new.

About 20% of all feeds have a PuSH (PubSubHubbub) option. But I now have more than 33% less work to do. That's another huge boost, since my feed fetchers have less work to do against the database.

I haven't been running with real-time with granular enough metrics to be able to tell if the PuSH-enabled feeds are pinging correctly or not. And part of the reason of that lapse on my part is that I still fetch the feeds regularly, just 1/20th as often. So instead of every 3 minutes, it's every hour or so. Over an order of magnitude less work, and I don't have to deal with feeds not doing what they should be doing.

Naturally, in the aggregate I can tell it's working well, since a number of new stories are coming in through PuSH.
Ask a lawyer if you can counter sue Facebook not just for lawyer fees but for damages for maliciously and falsely accusing you in public, an act that is certain to sully your reputation.

Ask a lawyer what's the best way to game this situation to increase Facebook's liability to a maximum while minimzing your risk and exposure.
Bookadda.com - Internet Merchant - Bangalore - Karnataka - India
If You Build It, They Won't Come: A Warning To Developers
Anyone would use OS/400 like me?
what does a cease and decist letter actually mean? it's not coming from a court, how does it carry any weight at all?
The cease and desist - albeit invalid - and other legal communication was sent privately to the OP. I don't think that counts as defamation.
Not enough of a corpus, and not very helpful because the applications are manually reviewed anyway.
BTW some really smart people proved that HTML5 and CSS3 are in fact turing complete. ;)

http://lambda-the-ultimate.org/node/4222
Dell Is Said to Pay About $1 Billion to Acquire Wyse Technology
IANAL, but since this was a C&D notice sent in private and Facebook never made a public announcement regarding it, I don't think it's defamation.
I never played the LSL series but I'm a big fan of the classic adventure games (Space Quest and Full Throttle -- if you've never played them, you've been robbed). Maybe if this works out we'll see some more revivals. This genre in this style was completely lost in the rush to move everything to three dimensions. There are moments and feelings that simply can't be captured by other genres. The fact that they hold the rights and have Al Lowe on board makes this unbelievably cool. Good luck, guys!
> Guys from HN disappoint me with their conservatism. It's quite easy to repeat "It works fine, Google and Mozilla have best programmers, well known attack, popular sites are protected(ORLY?!), go home kid".

> That was an expected behavior, so I hope, this post makes them to face facts. 2+2=4 and CSRF = the huge, wide-spreaded problem that should be solved now or never.

From the previous discussion, your critics were mostly concerned about your "solution" to CSRF. As was said there, it's not a browser vulnerability. It's an application vulnerability. I agree with you that CSRF is a problem that desperately needs as much attention as SQL injection has gotten over the years, but don't get sour because your solution to block all POST requests to different domains[0] is inadequate.

Aside from the bitterness towards people pointing out inaccuracies in your previous post, this was great. Developers should be thinking about CSRF (and basic security) more!

[0]: http://news.ycombinator.com/item?id=3779160 "Please point out where in my post I said to deny ALL requests. I was talking about ONLY POST requests."
The academic research community has certainly solved this problem to a large extent, eg. reviewing and program committee meetings at elite conferences such as SigComm and SOSP, or to demonstrate scalability, conferences such as Infocom which get thousands of submissions and still maintain high quality in their accepted papers.

One big difference is in the incentives for a PC member at a top conference vs for a YC partner. The former needs to maintain his and the conference's status/reputation by ensuring the papers are of top quality. He doesn't care that much if some great paper is left out. Whereas in the case of a YC partner, the biggest concern is to ensure not missing out on spotting the next Facebook. This is why in the former case, past reputation and being part of the clique is very important, and in the latter case (YC) it is not so.
If you like I can talk you through the major items that I look at when reviewing an NDA. My email address is in my profile.
You may have a cda section 230 shield since you were merely a user of the comment section, but you are being treated as the speaker of the comment that is their evidence. It's tenuous but worth a try.

The ACLU loves CDA cases since under CA law, it's loser pay (SLAPP).
Toronto Airport limousine
RSS Feed Content Only WordPress Shortcode
Why is the grass always greener?  A manifesto for overachievers
Thanks for posting this. Have you read the book?

I'm from Canada and am very surprised at Canada's high rankings. Wondering if the authors took into account the relative differences between university / college systems across countries. Canada has a lot more "colleges" (i.e. technical schools) relative to universities -- our terminology is literally different here. Curious if it in any way affects the results.

There's also a related issue of brain drains / gains to related industries (e.g., banking or corporate analytics) within countries.
MPAA Fears MegaUpload Will Take Its Servers and Run [File Sharing]
I think the best way I managed to wrap my head around the refutation of that is this: First off, some foods make you hungrier so you consume more calories. People have a very strong tendency to eat when they're hungry. The might be able to put that aside for a short while (dieting) but its' very hard to combat in the long run

Secondly, it has to do with how the body stores fat. Eating fast carbs produces insulin which signals the body to store fat in larger amounts than low/slow carb.

It's a pity that the caloric model is so entrenced when really it's the least useful one.

Really, it's not rocket science,stop eating white foods, don't drink calories, eat quality meat and veggies,and your set.
I always understood the point being to split off some capabilities that
can be used on their own safely, and leave the rest
under CAP_SYS_ADMIN. Stuff like ability to bind to ports <1024 or configure network interfaces. So if most of the stuff stays under CAP_SYS_ADMIN, the system is working as designed.
Have these Google people actually used their own app? When I bring up Google Maps for Android, the settings I get are Switch Account, Cache Settings and Labs. If I bring up Navigation then the only setting is screen dimming. Oh and both have some setting to bring up pages of legalese. Where exactly am I supposed to enable or disable this location setting?

Thankfully they do support secondary roads. My Garmin GPS has a live traffic receiver but only has information on the highways and very major side roads. This means it can't make a decision about getting off the highway if there is a problem.

Google also unhelpfully do not make it possible to report map errors from with the Maps/Navigation app. They claim there is parking in the middle of a park near me which is definitely not the case.
It's fairly typical that the entire top half of this comments section is about michaelochurch and his honesty (which I'm not especially interested in) on a Hacker News item about a specific ethics debate regarding Facebook and hiring (that I'm especially interested in). This is the second day in a row that michaelochurch has specifically centered a popular item's discussion on him in a completely irrelevant manner:

http://news.ycombinator.com/item?id=3784685

He knew, writing it, that people would call him out on the relevance of the comment so he threw in that little flourish at the end of the comment to establish some kind of a weak link between the content of the submission and his comment. None of the same wording here, just a completely irrelevant comment that's not even loosely related to the submission.

Just look how far you have to scroll in this comments section to get to the discussion about the SUBMISSION ITSELF. Seriously. In all seriousness, I have no idea who michaelochurch is, nor do I really care about his escapades against Google or his honesty or quality as a person. I just want to read discussion about the topic at hand on Hacker News.

(edit: strongly edited)
This might not be the best legal advice, but I personally would let it play out as much as possible before hiring a lawyer. It is my understanding that a preponderance of evidence burden (over 50% certainty) in practice really means they have to find at least one potential problem with your defense. Since your blog post provides an explanation that is 100% rational, I'm fairly certain that means they have no case against you. It seems ridiculous to have to pay for a lawyer when you're falsely accused of a crime that you weren't even at the scene for, so to speak.

On the other hand, if this is putting too much stress on you, it might be the right call from a health perspective to hire a lawyer. Just my two cents of non-legal tender.
I am still wondering if throwing him a few pointers might have been the better move...

I will agree up front that if the wording explicitly said it was a solo deal, then at minimum you made a safe choice/morally defensible choice, and you can at sleep well at night.

But I think you should have been allowed to give him pointers. And by "allowed" I mean to say that the general standards and expectations of our society should be that people's capabilities include their ability to locate, comprehend and apply new information. An important sub-case of "locate" should (and in practice often does) include maintaining a social graph of people with varied skill sets, and from whom you can get initial pointers in the right direction.

As of late people are more accepting of the general premise of "find and use new information" as a skill unto itself, especially with regards to the internet. Much of you find via Google is written by a human, but when you describe where you got initial direction from, and replace "Google" with "a friend", suddenly it's a different package entirely.

My suspicion is that it is because it does not conform to the "school exam" model that is ingrained into us all. What we are capable of is too often reduced to what we have memorized at any particular moment, and that can be a little misguided.

I obviously don't have full understanding of the prompt your friend was given, nor do I discount the utility of having a huge mental repository of information in many spheres of life (e.g. time sensitive or emergency scenarios). I just think that the "only what you know this very second" examination model is often extended in situations where it isn't a good measure of or doesn't reflect the actual circumstances you can expect to face.
So, guilty until proven innocent, is this how things work now ?

What if I go now on facebook, create an account, use the name Rick Stratton and start posting random, "incriminating" stuff all over the internet, what then ?
Previous relevant discussions on HN:

- http://news.ycombinator.com/item?id=3791281

- http://news.ycombinator.com/item?id=3789673

- http://news.ycombinator.com/item?id=3778158
Have you considered Skype interviews outsourced to the YC network as another parallel process?
Business schools aren't designed for entrepreneurs. The hint is in the title--Master of Business Administration.

Business schools train you to be an officer aboard a battleship. YC trains you to build yourself a dive bomber and pilot it.
I've done a bunch of work with PortAudio on OS X. I only ever wanted a stream of Float32, and was annoyed with the setup required. This looks like what I wanted but didn't think to ask for. It would also be great if it were a C api.
Full Throttle

I had an interesting OMG moment a while ago realizing that was also one of Tim Schafer's games.
Is there anything stopping you from writing a compiler for your language that compiles to C and then optimizing anything that slows down the system?

A bit easier on a hacker than messing with the binary.

You then get the added benefit of not having to touch C++. I know that for a lot of people at least this would be considered worth the trouble alone.
Ruby, Ruby on Rails, and _why: The disappearance
I think this genre of games is ripe for a comeback on iOS. Just try to avoid having the keyboard pop up all the time and it should be great.. Although discovering the secret commands and hidden jokes by randomly trying words was half the fun of the old Quest titles.
Anyone who actually does is this just scum. I want to invoke the obvious references but in order to avoid Godwin's Law, I will simply say being the one to actual "screen" the person's Facebook account is ... well I can't really come up with an accurate description without invoking the Law, just please infer for yourself. It violates just norms that it seems we should all have about decency. It's one thing to search for a prospective hire's social networking pages and if they have anything public, yes you use that against them to your heart's content. But to actively invade their privacy like this is just disgusting. Why not just ask for the cell phones and wallets so you can rifle through them, make sure you read every text message. It's extremely disgusting. It just crosses every line imaginable; I don't hyperbole is really possible for this sort practice.
I googled "novocaine audio ios" and got great results.

I also assumed it was an Eels reference, which I found catchy and means I will remember it in the future.
Can't comment since I have no idea whatsoever about life in advertising - except for Mad Men, but that is set 60 years ago.

They seem to be the main culprit for "objectifying women" in their ads, though.
Good work. will signup soon.
Find someone with an Xbox and play Braid. I think it might be available on Steam now too. What a game...
One option is to ask a lawyer to draft a response in your name in which you clearly state that you have no connection to the offending service. You would then send that response on your personal letterhead. If FB's lawyers continue to pursue their claims, your lawyer would likely take the reins and communicate directly with the opposition on your behalf.

Another option is to remain silent and wait for a follow up from FB's attorneys before pursuing the letter strategy.

Bottom line is: consult a trained professional (lawyer). As someone who has been down a similar road, I can tell you firsthand that it may be painful but it's necessary. Remember, FB's legal budget is far larger than yours. You want to play the poor defenseless Rick card as long as you can before introducing your attorney and any legal letterhead.

Good luck!

EDIT: After reading many of the frothy comments on this page, I just wanted to add that it's generally best to avoid threatening a lawsuit, countersuit or any kind of legal claim in your response. These giant law firms love to call people on their bluffs, because they bill by the hour. Avoid boxing yourself in.
I think it is about the cashout event, if a YC company went to IPO, we could talk about what kind of value YC/ others cashed out at. The company paying to hire talent is also cashing YC/ others out. It doesn't matter how badly they over/ undervalue it they have paid that amount.
Tenant screening
A step by step process for tenant screening that landlords who do their own property management may want to use.
It's good to see somebody else building a complex product. People seem to forget that not all projects can be launched overnight - if you're building a WordPress plugin then, sure, you can launch and start selling it immediately, and iterate new features thereafter. If you're building something that effectively provides access to a complex technology (algorithm, integration point, workflow, etc.) then the time-to-usefulness can be much longer.
The site in question seems to be 404'd, so maybe you have nothing to worry about
The value destruction is a good point, it just depends on where we are looking. Whether people consider a good sale price that was driven into the ground as more of a success than a lower sale price which goes on to continue to thrive and be a good investment for the acquirer.
There is a HUGE vested commercial interest in the CONTINUATION of the insecure status quo, in which all the control is on the server side (hence, with the companies doing tracking and advertising using third party requests, rather than with the end user).

Furthermore, the players funding browser development all share strongly in that vested interest. (Even for Firefox, follow the money - and if Firefox did try to lock down without industry agreement, it would lose, which Mozilla knows).

So you will not see any change.
This also explains the degree of heat directed at the suggestion that client behavior could be less insecure by default, with regard to third party requests.

This is not new. Much of HTTP as originally conceived actually dictated a great deal more user control over what happened. Those standards had to be compromised from the word go in order to reach the present state.
Robots to organise themselves like insects
Housefull 2 Release Date, Cast & Crew
Housefull 2 is directed by Sajid Khan and produced by Sajid Nadiadwala. Housefull 2 is a comedy movie sequel of Housefull. The Housefull 2 star cast are Akshay Kumar, John Abraham, Shrey, Riteish Deshmukh, Asin, Jacqueline Fernandez, Zarine Khan, Shazahn Padamsee, Mithun Chakraborty, Rishi Kapoor, Randhir Kapoor, Boman Irani, Chunky Pandey, Rani Mukerji, Johny Lever, Ranjeet, Suparna Marwah, Neelu Kohli, Virendra Saxena, Sandeep Garcha, Subhaan Nadiadwala, Mahendra Singh Dhoni, Karisma Kapoor, Malaika Arora, Vindu Dara Singh.
Yeah, if I were that guy I'd be playing this up for all it's worth. They're demanding that he prove it's not him, and saying that he "sound(s) guilty"? Is that a joke? If they really said that, that law firm just stepped in it big time.
Very cool. Any advice on how to get a kid started so soon (also learning how to read, which I suppose is a prerequisite)?
Best strategy is to avoid litigation at all costs. Because, well, it costs lots of money whether you win or lose. And if you win, collecting is a bitch in of itself.
This seems like a freewheeling legal department trying to do its job, however poorly, with less-than-optimal oversight or communication with PR. That said I'm purely taking a stab in the dark without more details from the documents you were sent.

I seem to recall another story crossing HN over the last year with the general plot of "BigCorp is suing us for [ridiculously unrelated reason] when we have nothing to do with it!" before the bad PR hits and BigCorp issues a statement saying "Sorry. It's all cool, we didn't really mean to target you. In fact we even like you." If I can find it I will edit my post with the details.
Wimp.

The proper behavior is to refuse to perform an immoral or illegal act and to decline to follow an immoral or illegal direction.

That leaves your superiors with choices of their own: change their behavior, ignore you, or fire you.

If they change their behavior, great; the company is better for your convictions.

If they ignore you (denial) and continue bad actions, you can always look for another job and/or continue to advocate change from within. You are not participating in the bad behavior and have performed your duty to communicate the problem.

If they fire you, you may have wrongful termination recourse that you definitely won't have if you resign.

The cold walkout, on the other hand, only affects management teams capable of shame (unlikely if the leadership has corrupted values) or susceptible to public pressure.

Your specific challenge is incompetence, not morality. You will always be surrounded by incompetence, if not occasionally sharing your own. While incompetence may be a moral failing, people with good intentions can improve things if sufficiently motivated. Your leaving is unlikely to do that.

Instead of having a knock down, drag out, face-to-face, serious reality-check conversation, risking strong and unpleasant emotions en route to a new consensus, you ran away.

You bailed when the company obviously needs someone of your experience, skill, insight and expressiveness.

You may have other reasons to quit, but the one you gave showed cowardice in the face of a leadership challenge.

Next time, don’t be a wimp.

Stand and hold your ground.
Wake me up when I can downvote. Until then this discussion is moot.
Egor, I very much appreciate your efforts. That's a lot of examples, a whole lot work.

I'm a complete noob about browser security stuff. So I had to lookup "CSRF". Maybe spell out acronyms or link to their definitions.

Cross-site request forgery

http://en.wikipedia.org/wiki/Cross-site_request_forgery

https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(...

Since I'm working on some public facing websites, and need to learn this stuff, your work is definitely helpful. Thank you.
What I meant was that your group needs to have one "social" rule, "run all admin cmds under sudo, don't spawn a root shell and do it all there", for you to have effective tracking.
Thanks for your comments, indubitably. I'm the cofounder of Codecademy. I'd love to hear your concerns - shoot us an email at contact (at) codecademy (dot) com and we'll discuss terms.
Same with the MSDNAA project. As a student i was able to download almost every software from MS for free (even Enterprise versions, etc.). Since many people start to learn coding in university, you catch them with Visual Studio, perfect timing..