skysight-inc/HackerNews huggingface dataset:
Yeah, read the author description on that page, with the gobbledygook about fractals and pi and E=mc^2. He's not a mathematical genius; he's an artist who draws pretty spirographs.

http://en.wikipedia.org/wiki/Spirograph
This gives me an idea. A secure web notebook where you can record things that only you can get out. They will be encrypted on the server basically, and your password will be used to decrypt them. Also you will use SSL to post. Is there any vault like this that's freely accessible?
Yep, seems like he is just a bad version of the logo turtle.
Then use "Olympics 2012 Security Theatre" and leave the connection to those reading?
Would you consider yourself an expert in this area? Because you can bet some of the people working for them are, so I would feel a bit presumptuous saying something like that. It could be a legitimate concern, but it could just as well be the outer space equivalent of the antivax movement.
Hmmm. Number 2 in "Unhappiest" ... Software and Internet
REST: Protocols vs Styles
Sort of . . .

Telescopes are usually owned by countries, their agencies, and/or universities. When multiple agencies are involved, there is an agreement on how to split up access time, usually proportional to the level of funding provided. Each agency then allocates its share of the time to its stakeholders based on its own formulas. Time is usually awarded on a competitive basis where the best science cases win. Generally, from an individual researcher's point of view, they are not charged for the telescope time. From a larger point of view, however, it could be argued that their country (or university or whatever) "buys" a certain percentage of the time. When a new partner organization comes on board, the agreements are usually structured on an $X for Y time basis, but it will be a multi-lateral negotiation rather than simply setting a price and selling to anyone who can pay.
Source?

It's very hard for me to imagine truly trusting that China cannot get into Gmail. Even if you have a great source. :-P
Fair enough, but notice that I'm backing that up with reasoned arguments. It's not intended as a commandment.
As I said above, I spoke with several Japanese people who said that some valid characters are not representable in Unicode.

Some details can be found here:
http://en.wikipedia.org/wiki/Han_unification
I'm tempted to sign up but I really don't see how this could be useful to me. I take my computer everywhere I go when I'm coding. I don't even like the idea of developing somewhere other than on my computer. Quite a few people over here have expressed similar feelings - I believe this is how most developers roll.

I won't be surprised if hosting and easy deployment evolves to become the key value proposition for these guys. They seem a talented bunch - the like that can pull it off. And I must say, the product does seem vaguely reminiscent of Heroku's early days.
Google already use social signals. This is why they want +1 buttons everywhere. They have many more social signals than just the buttons though.
They say that the only people who got rich off the California gold rush were the ones selling shovels and pickaxes.

It sounds like Planetary Resources wants to position itself to be the "asteroid mining rush" equivalent.
Shopping News - Shopping News
Organizational Profile: Rawporter
LastPass has a "Secure Notes" feature which works this way.
Data Mining + Malware = Improved Analysis
Using thousands of malicious, known good, and targeted documents, a classifier was trained and tested using multiple algorithms with a high success rate. Each PDF from the dataset would be transformed from its native format to a flat vector of unweighted features that would then be fed to a learner. After training the learner, several tests were ran using known techniques to evaluate classifier success in order to identify how successful the project was.
>How Billionaire Asteroid Miners Make Money -- Without Mining Asteroids.

They're going to make a movie about this starring Bruce Willis. Throw in Ben Affleck for comic relief. They're going to call it "Armageddon" and it's going to be a blockbuster.
Samsung Guru E1200 Price in India, Samsung Guru E1200 Low Price Mobile
Samsung Guru E1200 is a Guru Series Mobile by Samsung. Samsung Guru E1200 model name Samsung E1200 is a basic phone comes with features like 1.52 inch display screen, SOS Message, Call Limit and monitoring costs, uTrack, Mobile Tracker and more. Samsung Guru E1200 is available in Black color in India.
If you look up the mortality rates for things like mining, fishing, or logging in the US, you'll find that they tend to run between 0.01% and 0.05%. You're proposing a risk 100 to 500 times what the most dangerous ground-based jobs run.

I have no doubt there are some people who would accept that risk, but the political problems with it don't end just because they're not government employees.
It's possible that even a 'failed' device by their mission standards is still capable of sufficient manoeuvring to either push itself into a stable salvageable orbit, or do a controlled burn-up reentry.

I can think of a whole bunch of things that could go wrong which leave them unable to perform their primary objective, but still serve 'light duties' doing something else.

In addition, I don't know how well we have the current debris identified and tracked, but to my entirely uneducated mind, a bunch of cheap mini-telescope sats might be quite useful in actually figuring out what we have to deal with.

And, should they happen to be completely successful in their long term goals, I like to think that $20E12 in materials just waiting to be collected from a lagrange point or whatever would provide some serious impetus for solving the debris issue. :)
All you need is to smugle one clean 3d printer or convert one existing printer to not record what you make and you can print the next few millions.

Besides the political system would have to act fast because the printers are already on the market. Soon the makers will be able to lobby and then they won't restrict them.
How to Write an Excellent Press Release
I agree with that. I'm not suggesting we should just scrap it. The problem I have is with people who argue it shouldn't even be means-tested.
I don't really follow your logic. There are very good reasons why you wouldn't be able to install the same package in the same way on Linux and OS X. (For starters, homebrew isn't true package manager in that it's not a one-stop shop - it can't even handle critical system updates like apt-get/pacman can!)

I'm arguing that we should have an OS switch in the same way we have an architecture switch. If we assume that our PM can handle application packages as well as system packages then we should also be able to use it to install application packages on any OS which support it. For example, python should be installable on everything from Windows to BSD all using the same "pm install python" command. Packages will be marked as explicitly supporting OSes.

I think PKGBUILDs are the best of both worlds, because they allow system-specific package management to coexist with application-level packaging - two related, but subtly different problems. PKGBUILDs are general-purpose enough that they can do pretty much whatever you need them to do, assuming that they're well-written (which is our assumption when comparing any packaging method), and they're flexible enough that you can modify them to fit your specific system.
The only real problem I see with PKGBUILDs is that, at least on Arch, they're community-developed, which means that they can be out-of-date or variable in quality. But that's no worse than the situation if you were to install from source, anyway (which is the alternative), and that's more a byproduct of the way that the Arch community is structured than the PKGBUILD system itself. I'm sure if Red Hat or Canonical suddenly decided overnight that they'd start supporting PKGBUILDs, things would be different (and would have their own problems, likely...)

Agreed.

Without looking, I'm 99% sure that PKGBUILDs are bash, not sh, but I'm also 99% sure that 99% of the PKGBUILDs I've ever installed are sh-compatible. And I don't think that's the worst thing in the world - in this day and age, you have to be able to handle sh for any Unix-like OS, and you have to be ready to implement the appropriate interface for any other OS that you want to be compatible (or to throw compatibility to the wind altogether, like Windows does).
Second, since many PKGBUILDs are really just convenient wrappers around the already-provided application distribution mechanism, I don't see how this is that bad at all.

This was my main complaint with PKGBUILDs. A bash/sh dependency hurts on non-Unix OSes. I'd rather Python than sh.

I also admit that, for the most part, I absolutely hate sh and all its derivates and view them all as dirty hacks, so this is probably just innate bias.
I didn't know the NSA was available to hire.
Anyone who's old enough will remember several waves of "eliminate the programmer". What was the first technology aimed to do that? COBOL?

Anyone have a good guess?

In any case, yawn to the eliminate the programmer stuff. Been there, done that, history repeating itself for the n+1 time.

here's what's always happened and what will happen again: the framework being presented as a programmer antidote will come up short to business requirements. then there will be a scripting layer built on top (if not already). And boom, you will need a programmer to implement these scripts for customizations. So in reality you are just adding an abstraction layer to the mix. Those layers are why we don't program in assembly anymore, they are why we don't manage our own memory anymore (yeah lots of unmanaged tech out there, etc). That's also why we don't compile stuff anymore (see previous disclaimer). Etc. Just more of the same stuff, one more abstraction layer.
Press release submission | Product launch Broadcast
Sanjay Gupta UMich Commencement Speech
Commercial Space Shuttle Replacements Complete Wind Tunnel Testing
Ghd nz sale
I would say we have a lot of evidence that great candidates enjoyed doing our challenges, but certainly it isn't for everybody. You are free to not do the challenges.

As for your secondary point about the quality of our team, I encourage you to read our engineering blog (http://www.thumbtack.com/engineering/) and look at some of our open source contributions (https://github.com/thumbtack). I think you will find more than enough material there to see what our engineering team is all about.
I'll add a couple techno acts that I like:

http://soundcloud.com/mike-vaeth

http://soundcloud.com/aka-aka

They've both got a lot of long (1-3 hours) live sets available for download. Energetic beats, but the progressions are gradual enough that they're not at all distracting.
I'm not sure why but the phrase "Are you 'startup friendly' (appropriate expectations of work hours, pay, and equity)?" just rubs me the wrong way.

Joining a startup is a two way street. If you are considering joining one, you should do as much diligence (or even more) than they are doing on you. I, personally, love startups -- the energy, the diversity of problems, the ability to learn and grow. But, I've also been bitten by all the glitz (early in my career during bubble one) as well as people that thing "it's a startup" is an excuse to demand above and beyond efforts on a regular basis.

In general, you are going to work more at a startup, you may or may not get paid less, and you will need to weigh the whole work/life balance thing, most likely. You might be asked to make a tradeoff between equity and salary.

The tangibles you have control over (salary, time you are willing to commit, etc) are the ones you need to weigh. But, you also need to understand as much as you can about the expectations of those in management.

Poor planning, for instance, should never be excuse by "this is a startup" -- I don't mean pivoting, I don't mean tweaking as new information comes along, I mean those people that can't make up their mind on what constitutes the expected deliverable by a particular date.
How Small Business Can Increase Their Popularity Using Social Media
Atwood often makes blatant mistakes like this. I truly don't understand why his blog is so popular.
Why do you assume that messages in a gmail box are stored unencrypted?
Mobile UX for Music Apps: Expedited Listening
Buy iphone 5
The New Unlocked Apple iPhone 5 sales is here, get yours shipped today online.You can grab your iphone 5. check out the site for iphone 5 price.
It's nowhere near as rare as you think. There are sub-CA certs issued to private companies all the time, allowing them to MITM any default browser config.

The PKI is now totally broken.
Startups Are Bands for Hackers
Technology's Progress and What it Means for Software Engineering
Malarky. Quite pretty, but the story behind it is malarky.
Ask HN: Ruby/Rails or Groovy/Grails?
Hey Guys,
We are building a web app from ground up. We are using Neo4j for data management. Should we go with Ruby on Rails or Grails? ROR resources are far and few. But Java people are in abundance here. Im hoping they will be able to quickly pick up Groovy/Grails too.
Also, we will be building many web apps in future too. So from that perspective, which tech stack do you think makes more sense?
Thanks.
Watch Online Jagjit Singh – Yaadon Ka Safar 2012 Awards
Watch Online Jagjit Singh – Yaadon Ka Safar 2012 Awards Watchvideo songs,Watch sequences,Watch
Data on the move -- TLS via OpenSSL.
Data at rest -- GPG.

Don't trust anything else.

(OK, technically there are cases where you should trust other stuff, but if you can recognize it you are probably a professional cryptographer).
http://news.ycombinator.com/item?id=3908013
New GIT Tutorial videos for beginners
Not in TFA, which is about the possibility of AA-missile shots deliberately provoked by a harmless dummy.

In the scenario of an attack by something that is actually dangerous, shooting it down will almost certainly cause less damage than letting it hit its intended target (at least when the target is a mass of spectators at a sports event).
Great idea in theory, however, I'd like to know how you search your emails on your smartphone while traveling when all of your mails are GPG-encrypted on the server.

Or do you carry your GPG key around on your smartphone?

This solution, while technically pure, does not work. Those of us that live in the Real World send our regards.
The command-line tools bundled with djbdns are nice (http://cr.yp.to/djbdns/tools.html & http://cr.yp.to/djbdns/debugging.html) and IMO are easier to use than dig.

http://www.dnsvalidation.com/ is also a nicely done site for checking DNS configuration.
Github is a great site, but it's not the only place where developers publish code - so be careful.

For instance, there are other places like Bitbucket (which I use myself because of Mercurial and the unlimited amount of private repos), Google Code, and also heavy contributors to big open-source projects that just have their own code hosting.
I tried zooming in and out in Chrome on Windows 7, and it crashed my NVIDIA kernel mode driver.
The GMail smtp service supports STARTTLS for incoming mail. It could very well be encrypted every single hop, from sending client to origin SMTP relay, from SMTP relay to GMail, and then from GMail to receiving IMAPS client.

The situation is a lot better than it was a handful of years ago. It's not quite the "don't ever do this!" it once was.
http://rt.com/usa/news/nsa-epic-foia-court-413/

FWIW, I know security folks at Google and NSA. Google definitely wins the talent war.
Revenue means nothing. Revenue can be gamed. No prudent investor would invest or value a company based on revenue figures alone. Aside from acquisition targets like Instagram, if a company is to be a going concern, it needs to generate sustainable cash flows, not revenue.
Sure there's tons of stuff flawed with the current system...but that's the system, not Apple. Change the system if you don't like it, don't penalize companies like Apple who play by the rules of that system. You can't have it both ways...

I don't think my argument is sophistry...choice is very important. It's the cornerstone of my beliefs and it's a valid philosophy.
Slight quibble because you said "most dangerous ground based jobs". Consider the mortality rates for soldiers in combat zones and police officers in the US.

That said, I am curious why people think that space travel is safe or that space casualties are unacceptable. Without implying anything, if we seem to think it's good and honorable to die fighting for your country, then it should be just as honorable to die fighting for you country's scientific advancement.
I'm not convinced this is actually a good thing to do. As noted by others, its unsuitable for dynamic content, and less direct than `$.data(...)` barring page refresh.

Just not sure what client-side workflow this kind of tool is used in.
The problem with such a service is that there's no practical way to figure out whether they're reading your data on the sly. (Even if your data is technically being encrypted on the client side, there's nothing to stop them from slipping in some extra JS one day to start sending your encryption key to their server.)
My email is accessed over TLS. I have no idea what to tell you if yours isn't.

Oh, and my email isn't GPG encrypted. I just don't store sensitive data in my email.
Edit content of webpage using html5
I have to agree with this. I hadn't read Jeff's post yet since, really, I haven't regularly read his stuff in probably two or three years, but I just did.

The only mention of emailing things to yourself is wholly contained in the following paragraph:

> The upside is that once you enable this, your email becomes extremely secure, to the point that you can (and I regularly do) email yourself highly sensitive data like passwords and logins to other sites you visit so you can easily retrieve them later.

To me, that's really dangerous advice. It relies on the assumption that you're only emailing things from your own gmail account, to your own gmail account. This means that the only transfer happens between you and Google over a secure HTTPS connection. Your data is transferred securely, stored on Google's servers, and securely transferred back to you when you request it.

At no point is this specific assumption pointed out, nor are the problems with it discussed.

First, although I can't think of a particular reason why gmail-to-gmail emails would be routed outside of Google's servers, that doesn't mean it doesn't happen. If someone could point a blog post discussing it, I would appreciate it.

Second, All bets are off if you use a separate provider. One example might be work email. If you're signed in to a work account already, you might be more inclined to just use that to toss an email at yourself for later. I've certainly done that before, even though I could sign into gmail from work. People could make the mistake of thinking he's saying "send an email to yourself from anywhere" which isn't correct. Incidentally, activating two-factor auth makes it more likely that someone would do work-to-home emailing since there's now an extra barrier to just logging into gmail.

Finally, this seems to rely on the assumption that you're only using the web client to access gmail. If you're using POP3 or IMAP to access your account, you could still be at risk, since I think (though admittedly I'm unsure since I only use the web interface) that these protocols aren't encrypted by default.
I'm surprised more people don't email themselves.

Gmail indexes messages, which makes it incredibly fast to find a note that I sent to myself. I also use it to remind myself about something important to eventually remember, but I can't work on it right now.
This was just on the front page eight days ago. http://news.ycombinator.com/item?id=3872613

It seems like the reason this is allowed to get votes is that the link is to www.paulgraham.com while the previous one went to paulgraham.com
I'm not saying they still aren't doing research, but the level of research today is no where near what is was during their hey day. Furthermore, IBM, itself, is continuing to move away from the IBM of old and more towards being just a global services firm.

Given its size, any change at IBM will not be immediate, but it has been more in decline than rising.
Likewise, vos Savant's score is a bit dubious: http://en.wikipedia.org/wiki/Marilyn_vos_Savant#Rise_to_fame...

There's something to the IQ scores, but error bars are large and the meaning controversial.
> (Example: How many characters is "é"? "é"? "﻿é"? Does UTF-16 give you a more useful answer to that question?)

In case anybody was wondering:

1. The first "é" is an "e" followed by a combining acute accent.

2. The second "é" is a single code point for a lowercase-e-with-acute.

3. The third "﻿é" is the same as the second "é", but with a zero-width non-breaking space in front of it.

All of these are, of course, the same letter.
What are engineers and entrepreneurs supposed to dream about?
Does this use method swizzling? There doesn't seem to be any hook-ins to any views.
Aniracetam
this didn't happen that long ago.

gmail was broken into by someone representing the chinese government. google fully admitted to this. this admittance did not seem to hurt their rep. they would probably admit to it if it had happened again.

google soon thereafter asked the nsa to help them out with security.

http://www.washingtonpost.com/wp-dyn/content/article/2010/02...

http://www.nytimes.com/2010/02/05/science/05google.html

I am not saying that it's impossible for China to get in, but I'm sure it's a whole lot harder
Serviced Offices in Mayfair
Square Mile Office Find shared office space in lease or rent Cheapside serviced office rental from City of London,business premises provider Business Centres Group offers a wide range of high quality Serviced Offices london.the building was substantially rebuilt and extended behind the original painted stone facade. For more information visit our website.
That is a great tip. Thank you! I just mentioned it in the comment thread of the blog post.

JP
None of them come with the browser.
In late 2009, China tried to get into Gmail. According to the forensics done at the time, they managed to compromise 2 accounts. And even then they only managed to read subject lines but not email contents for those accounts.

Google detected them, locked them out, identified over 20 other companies that had been compromised and notified all of them. Furthermore getting compromised was a wake-up call - they immediately took a lot of steps to improve their own security.

See http://techcrunch.com/2010/01/12/google-china-attacks/ for verification of some of this.

So China went after the easier target - users. Users are easy to compromise.

Therefore in 2011 Google notified hundreds of users (including many members of the government) that their accounts had been compromised by China. See http://www.foxnews.com/scitech/2011/06/01/gmail-compromised-... for verification.

Note that this time Google's infrastructure was not targeted. Just end users and still Google tracked it down and notified people.

No system is perfect. I guarantee that Google knows this. But Gmail has a far better claim than any other email system I know of to claim to being able to beat Chinese hackers. (That said, I'm sure that China has not given up.)
My objection was principally to the notion that the NSA is just some 3rd party security consultancy one calls up. Whether there was or was not a partnership that can or cannot be confirmed or denied, who knows, but lacking verifiable evidence, I'm just as likely to believe the NSA's advice was along the lines of "use a firewall and an IDS".
blognoon.com is busted, www.blognoon.com seems to work
I use Notational Velocity + Dropbox for this
From the article: "We already have contracts with NASA, some private companies, and even a few private individuals."
Same situation, worked perfectly for me.