skysight-inc/HackerNews huggingface dataset:
So that's already happened here?
Amazon's mission to me is "Buy anything you want faster and cheaper than anywhere else."

I've been long on AMZN stock since an afternoon last year when I got home to a delivery of (a) Baby stuff from Amazon's Diapers.com (b) A handful of SSD drives for our business (c) Light bulbs (d) Chocolate.

Whenever something comes up that we need to buy the first thing we do in my house is type in Amazon.com. Everybody that I "infect" with Prime by telling them about it gets hooked nearly as fast.

Bezos pushing people to Prime from all sections of the site, as a result, makes me believe Bezos knows exactly what he's doing.
The parent comment isn't defending Apple; @tptacek is pointing out that this issue won't impact a large number of users, that the headline is misleading, and that maybe ZDNet is sensationalizing a minor issue.
> I find it interesting how Apple is defended when they make security blunders, while Microsoft was heavily slammed back in the day.

Given that we have a plurality of OS X users on HN (according to the last poll), it's not surprising that post-purchase rationalization is a common response to such articles.
You article, while it have been hard to write, probably helped many others who are facing the exact same scenario (or at least will be upon launch). Take a second to think about why you started the site in the first place? Was it to revolutionize shopping? Or more to bring something to life? colinplamondon makes a good point about this being 1 day into your startup, but i'd also add that you're not even 1 day into being an entrepreneur. Failure is good! FAIL MORE ! Every great entrepreneur does, at some point
mrich, no company's engineers can be expected to spend their days reading every single thread on the company's support forum. I wonder if the researcher(s) reported the issue using Apple's Bug Reporter? It has a special category for Security.
Thank you, very valid points.
It ok - user acquisition is tough! It takes a lot of work, and submitting your link to Hacker News is not really work.

I'd start out by doing some user testing. Have people look at your site and tell you what they think. Then maybe a bit of usability testing - tell people to perform actions (like signing up or adding a product to their list) and see where they get stuck. This is called funnel optimization.

Then you can focus on finding channels - ways people discover you. You'll probably want to spend some money on google adwords, but definitely also try to get some press through traditional media and blogs.

You haven't failed - you just started!
Rubymotion completion for Emacs
Hey, this isn't a horrible failure. You might actually have something here. It's kind of like Pricenomics actually, they just went through YC. They're hiring, you should send Omar an email with this link, I'm sure he'd be impressed.

They take the approach of price researching plus subscribing to low prices like you. If I were you I'd look into this.
10 Coolest Features of the Samsung Galaxy S III
adequately fill the position

It's better to think in terms of risks not just costs. Interviewers tend to higher people just like them, which means the team is often filled with people that think the same way and come up with the same types of solutions. On the other hand when you get someone in that can 'do the job' but has a radically different perspective they are more likely to bring something new to the table. To be overly simplistic in a team of world class programmers adding someone with a great UI background can be worth a lot more than yet another world class developer. The advantage being diversity does not require a larger paycheck.
Actually, as I'm aware, it is posted automatically by bot (I suppose).
A long time ago, I went through a period where I was getting a lot of resets. But now, I'm just fine.

Perhaps it's just a problem with the particular machines he's connecting to? I use Firefox almost exclusively and I haven't seen any resets for ages now.
One of the huge advantages of online shopping is the ability to see customer feedback as you browse. Backporting that to physical stores might not let them beat etailers at their game, but it might help close the gap.
The gamble being made here is that customers want to buy clothing that is popular.

I wonder if this might signal the exact opposite of what a shopper is looking for. Instead of clothing being an expression of unique individuality, he or she sees the huge number of people who have 'liked,' and possibly purchased the same item. Not that customers are normally fooled of course, but the volume of sales aren't usually brought to their attention so directly.
Excellent work changing from the future to the present tense!

Your time travelling comment totally invalidates my reply regarding someone's prediction of the future.
Can't you stick with 1.2.x?
> ...there may be no reliable price signal about the long-term financial risks inherent in different courses of study.

So credit availability and interest rate is going to be directly related to what other people ahead of you studied in school and how well they settled the debt. Also:

> Educational institutions may have incentives to funnel students into areas that do not maximize students’ future incomes or employment prospects.

I guess they do. Unfortunately, the instituions are not even a factor. As far I can tell, the proposed solution is to deprive the student of the opportunity to get involved in that "low-value" field. Then, indirectly, we punish the institution by reducing revenues. Interesting.

It's an interesting read.
What a nasty, nasty article.

Jeff Bezos knows exactly what he is doing. Amazon is, at its core, an infrastructure company, much like your plumbing or your electricity, except it's one level above those. It's major offerings are infrastructure for web services, infrastructure for shopping fulfillment, infrastructure for digital publishing, and probably a few others. Sure, it is willing to make money by using its own infrastructure to sell you books, shoes, and industrial supplies. In fact, it built the infrastructure to do that, but even if the lion's share of Amazon's profits right now come from selling over the web to consumers, it is not the business that Amazon wants to be in.

Amazon wants you to build a business on top of Amazon where you do the marketing and decide what to sell, but use Amazon's Web Services, Fulfillment, Payments and Digital Delivery to run it.
mario?
Here's the gallery of templates - http://www.resumonk.com/resume_templates

I have also updated the landing page to include a link to this gallery.
Eh? I used it.

I used "Legacy Filevault" before it was legacy. Then, when I upgraded to Lion, it took some additional months for me to get around to the FDE upgrade. I had to move around a lot of data to make room.

I consider this a pretty big deal.
This is not the 20th Century. Stop thinking it still is
> "With PHP ... there is no template language to learn"

While this might be nice for the beginner getting started, it's also a brilliant way to encourage bad habits in people who want to turn it into a career.

Leaving the "PHP is a templating language" pedantry aside, this 'benefit' encourages the aspiring developer to not bother separating concerns. Just go ahead and throw HTML into PHP and vice-versa; throw all your database logic, SQL, and connection details into those self-same files that are being served; leave XSS vulnerabilities in all your code because you probably weren't told to wrap your output in `htmlspecialchars` or whatever.

Shit like that needs to stop. But as the barrier to entry is so low, the same mistakes will be repeated ad infinitum. I would love to figure out a way to introduce a beginner coder to a language, without scaring them off, but without being lax with security and separation of concerns.

That being said, I do agree about frameworks, but I also think that this is because there is no "one true framework" for PHP (Zend, Symfony and Cake don't fit the bill, I don't think). There's no Rails, or Django, and there's no Sinatra or Flask as a minimal alternative. PHP is dire for framework development, not because of the language, but because so many groups of developers are trying to re-invent the same framework (but with their own idea of what 'the PHP way' should be - Javatastic bloat like Symfony and Zend, or Rails mimicry with no real understanding of PHP not being anything like Ruby), treading the same ground over and over again, when there could be more collaboration to provide the definitive offering.

If that were to change, and for the better, I might extend my argument to say that such a framework may be a great way to learn PHP, just like Rails was a great way for many to learn Ruby.
Ask HN: What if you woke up & another company was your doppleganger?
I have been working on a hobby project -> startup conversion, albeit for far too long.

I bought the domain name (.co), the .com was taken by a squatter (not a big deal), and I registered a facebook app with that name to support development.

I failed to obtain the twitter handle or facebook page for my application. Wow - lesson learned here. But I had been focused on dev and missed this. I also failed to incorporate or apply for trademark because I had assumed I could take that step later, closer to launch.

So long story short - I do periodic competitive research and check in on my very new and upcoming brand. I haven't launched yet so when I search for my company name I should find essentially nothing of note.

I searched recently and found that my exact company name and charter at a high level (online commerce, really simple), literally is being done out of Asia - Singapore or Korea from what I can tell. There are a group of seemingly got-there-themselves people who formed up and coded up what looks like my backend at a hackathon. They do seem legit in the sense that they're trying to make it work and they came up with the name themselves perhaps.

My question is this -- I'm 4-6 months from launch, I can't see a world where I entirely rename my company. The name is outstanding. I now have this startup I'd like to make at least rename and give up their twitter and facebook handles -- but they'd probably want me to give up my domain and app name.

Any advice/guidance on this based on your experience? Is it worth me just finishing my product and then worrying about the name?

* the question:
Should I just forget about it, and once I'm ready to launch change my name so something else that's free? Should I get a lawyer on board and go fight this now while they're young? Not that I have vast resources though, still on the pre-launch bootstrap budget. Something else?

I would cringe if they were successful - seeing my "baby" name on another company doing what I am doing...

Thanks ahead HN
7 New Educational Startups Founded By Minorities in Tech
This comment doesn’t defend Apple. It doesn’t make any value judgments about Apple at all. It merely attacks the article.
I just tested that, and it seems like you're correct. I recall that simply typing stuff quickly could increase CPU usage by ~30%.
You are a brainless fanboy.
生男生女特征
I would also suspect there could be something amiss in his ISP or network path to affected sites.

Perhaps changing the User-Agent is making a difference, but not in the way he expects. For example, his 'Firefox' User-Agent is 77 characters long, while his 'Chrome' User-Agent is 106. That might be the difference between some packets more often being a size that triggers a problem somewhere on the path. (Or, the string or size might be triggering different handling in some transparent proxy.)
Changing it right now, absolutely makes sense.
First, thanks for making me read Missouri v. Jenkins.

I'm not sure I see where you're going. Thomas' reading of Brown v. Board of Ed seems identical to mine:

Public school systems that separated blacks and provided them with superior educational resources--making blacks "feel" superior to whites sent to lesser schools--would violate the Fourteenth Amendment, whether or not the white students felt stigmatized [...]

[...]

Regardless of the relative quality of the schools, segregation violated the Constitution because the State classified students based on their race.

But further: the circumstances of these cases are wildly different. Brown v. Board of Ed was about active, de jure segregation of black people and white people. Missouri v. Jenkins was about a school district that became majority-black as a result of white flight.

Kennedy's concurrence was illuminating: it seems to allege that the plaintiff and defendant in this case (the students and the KCMO school district) were colluding: an accident of venue was the only reason KCMO's school district was named defendant, and the actual, unnammed, shadow defendant was the state of Missouri, which was being coerced into funding an otherwise wildly unfundable mandate to create extravagant inner city schools by judicial fiat.

Thomas, Kennedy, and Rehnquist all put heavy attention on the circumstances of this case, that the federal judiciary (a) probably can't impose state taxes by fiat as a backdoor to legislation, and (b) clearly can't do so under the auspices that demographic "segregation" was equivalent to legal segregation. That all makes sense to me.

The FBI, air traffic control, copyright extensions: these are all well supported by legislation. They were not imposed as a backdoor by fiat by an activist court.
Forgot 6: Using Rails.
I downvoted you. Here is why:

- that last parenthetical 'possibly you are a teacher'. It is clear from his post he is a teacher. That comment is an attempt to lend credence to your assertions by making yourself seem insightful and semi-clairvoyant, by 'guessing' he is a teacher. We all understand he is a teacher. I hate it when people use sneaky fallacies like that.

- You accuse someone of 'not giving useful advice' and 'managing to be vague and vacuous', when you yourself do not offer any useful advice and fail to explain why the statements you are responding to would be 'vague and vacuous', making your own statement 'vague and vacuous'. When harshly criticizing someone, always make sure the criticism doesn't apply to your own argument or yourself. It prevents you from looking like a hypocrite.

- It is completely unclear what you intend to achieve with your criticism. Do you honestly believe someone will respond like 'oh jeez, you're right, how could I be so silly?'. Your post is abrasive and will not achieve its goal. Did it even have a purpose other than 'throwing your thoughts out there'? If not: please stew on them a bit longer next time and explain why you are telling us this.

- In fact, the post you respond to makes a very practical point, much more practical than the more 'vague' general rules Russell provides. It is not a 'needless restatement': it is a much needed explication of what practical behavior these rules lead to. It provides an example of an application of Russell's principles, that makes those principles concrete.
FastCGI works fairly well in my experience on shared Linux servers (that's how I host my personal projects). And for smaller scripts where I don't bother setting up FCGI, I just use plain CGI, which is just copying files.
Those are definitely the two 'take-aways'. If there is a hole here... there may be other holes that might be REAL security threats.

Other people are correct as well, in that the headline is link bait. I was expecting to find a way to get clear text passwords from my test OSX Lion setup. I can't actually do that on my test system, and I'd wager the vast majority of hackers can't pull that off either. At least not without changing the setup.

Of course... probably my fault for believing you could.
You're the one person I know, now. Most everyone I knew that cared to encrypt their laptops (to be clear: that includes my whole team) used PGP WDE. My impression of legacy "homedir" Filevault is that it randomly ate homedirs.
I just looked at a random "free" android and compared it spec wise to a 3GS and, leaving aside the fact that the Android was on 2.2, the 3GS is ahead on storage and behind on MHz (probably a wash on performance) and camera MP.

I'd say that overall the 3GS looks like a better deal.

Sure, pricing is confusing but that cuts both ways.
New rolex watches
ARC's usage seems conflicted! :D
http://en.wikipedia.org/wiki/File:Earth_water_distribution.s...

Here is an image showing just that, in a cubic format. The sphere of ocean water would have a radius of 684 kilometers, while the remaining water, most of which is glaciers and groundwater, would form a sphere of 227 km radius.
"Post-purchase rationalization"? What a weird thing to say.
Is the UK becoming a bad place for Internet startups?
Yes, taking a year off is an option, but it would mean paying the interest on my student loans. Not a huge problem as I will have to pay them off eventually anyways.

If I do end up taking time off it would only be temporary at first. I would likely give myself one year to make significant progress as a programmer. If, after that year, I'm comfortable with where I am, I will continue to defer school. On the other hand, if I can't see any definitive improvements, I will go back to school and look for another major. If I can't teach myself to program then I see no reason to get a CS degree.
Steve called, he said "Just don't use it that way".

On a serious note, this has happened before. This is just the first time anyone has caught it before a patch. The QA at Apple is pretty noteworthy.
I used it for many years, so did many people I know. Never got any "impressions" about it. It had its (many) flaws, but worked fine for me and was certainly better than no encryption at all.
It sounded defensive to me. "name a single case where ZDNet has broken a story we cared about" sounded like ZDNet should have shut up about this very important issue. It doesn't matter that they are not the first reporting it, their readers may thank them for it.
yes when one pulls her smart phone, she also checks email, twitter, facebook etc, and she may show her expensive smart phone as a status symbol.
A good reminder that scientific thought and "authority" are often at odds. I try to keep this in mind when I hear statements that x% of scientists are purported to "believe" in anthropogenic global warming.
Also of note, why don't financial institutions offer read only RSS feeds of transactions? Logging into their site manually with a browser is a PITA, and their data is only in formats that suck and need to be converted from.

I'd love to be able to script up a really RSS grabber that dumps directly to disk and other scripts that do all this automatically.
Every single time the topic of Microsoft's security track record has come up on HN, I've waded in to point out what a great job Microsoft has done. Here's one of my highest rated comments from several years ago:

http://news.ycombinator.com/item?id=577684

Now, I don't disagree with your general point: Microsoft gets more scrutiny than Apple does on HN about security, and Apple enjoys an inflated perception of platform security here --- I attribute that to a general Unix bias, by the way, and not to Apple fandom.

But please be careful to note that I'm not a part of that phenomenon. You will, if you dig, find comments of mine that are critical of Apple security; you will probably not find comments critical of Microsoft's security practices.

(To be clear: securing a whole platform is an incredibly difficult job, and platform software security talent is some of the hardest to find in the whole industry; both Apple and Microsoft take this stuff seriously and, compared to 2002, both do a fantastic job. Also: the security of the iOS platform is a different story than of the OS X platform.)
Ad placement, within the ad boxes, is partially determined by a "Quality Score". Actual placement depends on (quality score x bid).
There were simpler languages when Guido released Python for the first time; your theory doesn't explain why people chose Python over them.
While I've been a Prime subscriber for a few years and do order plenty of things from Amazon, I'm still pretty picky about what I buy from them.

Almost universally, items under $25 that ship free with Prime are more expensive than on other websites and in local stores. Especially as you get into sub-$10 items I'd normally get at a grocery store or Wal-Mart/Target/etc. The shipping cost is being built into the price.

Stuff that's sub-$10 is either not offered with Prime shipping at all, or is only sold in non-discounted multi-packs. For example, say you need some deodorant. Amazon will gladly sell you some Old Spice Classic... but only in a pack of 6 for $18. I can buy just one at a store for $2.50 or so.
I've had a lot of great luck with dotcloud.

http://docs.dotcloud.com/services/python/
Notch offers up a novel way to distribute Minecraft Xbox 360 codes
There is a language called 'Java' where every string is in unicode, and I do not remember ever running into an issue!
The author seems to completely miss the idea that Amazon can still profit by selling e-books to Kindle owners while still giving them one free e-book a month.
This is more than just Filevault. This is /any/ user mount of an AFP share, so things like shared user directories, which are common in large organizations, are also vulnerable. The issue here is that this security vulnerability exists, 3 months after it was publicly reported. Surely it wouldn't take that long to release a patch for a pretty critical vulnerability.
Last summer I was fired from a startup whose codebase was written entirely by miscreants like those. It was like a CS hazing experiment.
I went to university in Canada as an international student. I've moved back to the states because I couldn't afford to live in Canada anymore. I just got out of school a month or so ago.

I could work and study if I wanted to. My biggest issue with doing both is that neither moves me any closer to my goal of becoming a software engineer. My courses would all be basic studies (english, math, physics, chem, history, etc). I wouldn't take a computer science course for another two years.
Six Myths About Ray Tracing
The Long Now foundation was not started by Jeff Bezos, or run by him, I think it was founded by Danny Hillis and others, though they do have funding from Bezos and I think they're building it on his land.
I'm in the same boat; been using FileVault since day one.

I just checked and, sure enough, my cleartext password is visible if I run:

$ sudo cat /var/log/asl/* | strings | grep 'password ='

So if my laptop were lost or stolen not only would the encryption be worthless, but my login password is available too. This is a big hole.

Guess today's a good day to switch to FDE
What does "support" mean then? They absolutely should have staff skimming the forums and escalating important issues.
> An example of this going wrong in production, I work in the online gaming (gambling) industry. One of our users won a large jackpot, our code started a transaction, contacted the 3rd party to have them release the funds, recorded the win in the transaction journal, updated the customers balance etc. Then the stored procedure which inserted a row into the outgoing email queue had a small error. This caused all of the database work on our end to rollback.

Updating a customer's winnings and recording a win are definitely things that should be together in a transaction - if one happened and not the other, that's a failure.

This is not the fault of using a transaction, this is the fault of not working with what is essentially a distributed transaction. Since you are relying on a message against a third party, you need to build distribution into this system, which is challenging. You might contact the third party after you've completed the internal processing, and you might use two-phase semantics even such that you can "PREPARE TRANSACTION" the work you've done locally, (nearly) guaranteeing that a commit will proceed, then work with your external messaging, then commit locally.

background at http://en.wikipedia.org/wiki/Two-phase_commit_protocol