skysight-inc/HackerNews huggingface dataset:
I'm working on a startup that's joining a competitive accelerator program next month--though, we won't be able to pay you $60-80/hr, we can figure something out.

Shoot me an email if you're interested, shrig94@gmail.com
I assume it is being down voted because it is off topic. ...tweeting or surfing the web as though it were a slow day at the office (what the parent is talking about) is a very different thing from live-tweeting an event (what the article is talking about).
In tech, N.Y. wants to be king of the hill, top of the heap
is he Iran ;)?
Does hating on Monsanto mean you can jump directly to Monsanto as the cause of the farmer suicides? Does a farmer suicide every 30 minutes sound a little high to anyone else? That would be 48 / day or over 17k / year.

As for the lawsuit, Monsanto sues a farmer because a farmer's land contains some of Monsanto's product. Fine, their product is essentially DNA, but they're allowed to call it their product. Fighting the patent is a losing fight. Right or wrong, it's a battle that won't be won until Kucinich is in the White House.

I've wondered why farmers don't file a counter-claim of trespassing since Monsanto allowed or caused their agents (both the patented DNA and whomever discovered the Monsanto plant) to enter a farmer's property. Additionally, it seems like there would be a case for destruction of property since the genetically modified seeds and plants crowd out the farmer's seeds and plants. Lastly, if the farmers really wanted to hit Monsanto with some irony, they should sue to have Monsanto pay for the removal of the modified seeds and plants. The farmer would have to argue that it is Monsanto's responsibility to prevent the outward spread of their crop. I'm sure the right judge could be found who would draw the comparison to breaking and entering someone's home.

But I'm reminded of a couple simple facts. You don't have to be right to sue someone. You don't have to be in the wrong to get sued. Win or loose, it's not cheap to go to court.
The discussion on the original article is in the context of basing Http 2 on SPDY. In other words, the very community-lead process you say does not exist.
Maybe the NSA is the "wealthy nation-state." It's not a stretch to imagine this attack was the NSA.
Still A Virgin
If Heroku is down, and I discover that site X that I want to visit was hosted on Heroku, I'm more likely to hear that Heroku is back up or that site X is back up, than just that site X is back up. I also can skip checking any other sites I know to be using Heroku during the outage. It is therefore mildly useful data to a user.
You can find the details of the Braid soundtrack here:

http://braid-game.com/news/2008/08/the-soundtrack-to-braid/

tl;dr version: it's all existing licensed music that the Braid guys don't have rights to distribute
How about NZD?
Sony VAIO X505 Release in 2004 has the wedge shape... http://www.notebookreview.com/default.asp?newsID=1970
I find that people don't care until they get bit. Congrats on getting her GMail secured.

I once worked at a small, high profile company in New York City as an IT manager & they wouldn't change their passwords from simple words like 'password1!' no matter what I or the other IT guys would say. We weren't allowed to turn on complexity or expirations. It was nuts.

So good luck.
Why web frameworks tend to grow to become such unwieldy beasts?

Most of the web frameworks I know tend to do at least two things - the web stuff plus creation and initialization of all other components. This means that the framework is coupled with all of these components and this is the root of all evil in web frameworks. Of course you need a place to do that object creation and wiring work - but it is not really related to web stuff - it should have it's own place in the program, ideally in a Dependency Injection compartment, not necessarily a container based on the available libraries - but it can also be coded by hand (I might change my minde some day but for now I don't see any reasons to use DI container libraries in a dynamic language like Perl). All the arguments about using Dependency Injection apply also here, but even for someone rejecting DI it should be pretty obvious that reading config files and initializing objects is not much related to web stuff and if you buy the single responsibility principle you should split them into separate libraries.

I don't know Django or Rails too deeply - but I've observed this with Catalyst. Now, Catalyst is supposed to be decoupled from the Views or Models and other Plugins, there are many different ones in each category and you can replace them freely in your programs. But Catalyst code-base is still pretty big and then you have all these Catalyst::Models, Catalyst::Views and Catalyst::Plugins that don't really do any meaningful work - they only map one interface into another one. It could be much simpler if Catalyst only cared about the web related processing.

(copied from my blog)
It's a shame this comment got downvoted. Be it serious or tongue-in-cheek, it was very enlightening.
The Xbox360, PS3 and Wii have all (AFAIK) gone well beyond the lifespans of their predecessors. It's just taking longer and longer to recoup that investment.

The Wii was profitable from the first unit sold.
We know one thing for sure: We'll have more tablets and phones around, and more in-betweens like the Rasberry Pi, Cotton Candy, and others. TVs and monitors will ship with clones of those built-in.

By 2016, "smartphone" will be a small part of the embedded processor / ARM marketshare, which is what we'll actually be concerned with.
Any ethnomusicologist can tell you there is such a thing as music that is not produced for income. What happens when the "instruments" to create music are fully electronic and all output is digital?

Musicians know that music is not just a business. It is a language. Not necessary one every person can speak but certainly one that everyone can understand. Our lives are short and we may never live in a time without a "music industry". But music has a much longer history and a longer future than our short lives. There is more to music than just a "music industry".

What about the idea of peer-to-peer music? Not "file transfer" or "download" but "playback"? (YouTube, while it may seem instantaneous, is progressive download isn't it? Kids may not realize this.) What about decentralized instead of centralized broadcast. If we are doing peer-to-peer VOIP, we can do music as well.

What do you think?
Yeah, I think Heroku is better than other options for being a fast/easy way to deploy, and great UI and some useful tools, but the combination of lack of visibility into internals for debugging, Heroku outages, and EC2 outages is the reason I don't use it for anything in production.

I'd seriously consider Heroku if they were in multiple regions (fuck AZs, those are a lie). There are huge advantages to a PaaS in terms of speed and lack of hassle, and a well run PaaS is better than most developers at operations, patching, security, etc. (We're kind of unique in that we're better at operations than development, though.)
While I agree that regular drop-downs are fine for everyday forms, the average user STILL has a hard time understanding a multi-select box. Try seeing if your grandma knows to hold down CTRL to pick multiple items. Select2 and Chosen are really nice for those situations.
++ - to note though, it won't be a computational problem, but one to do with regulation, I would love to not have to deal with DPS and BNZ though.
Home made low cost CO2 Laser
Heh reminds me of when I made my own Douglas Adams-esque text adventure in Python using only a huge chain of ifs and prints. I remember thinking the hardest part was doing all the typing!
15 Free jQuery Tooltip Scripts and Plugins
Others jQuery Tooltip Scripts and Plugins provides a simple as well as animated hovering tooltip that the user can easily integrated in the web pages.
Uncited articles on "wisegeek.com" -- a good place to learn the definitions of words and terms.
I can't get Zia's song out of my head myself. Wonderfully done sound track.
Clothing Designed That Shoots Lasers When Wearer Is Threatened
How Foursquare is using big data 
ON FACEBOOK, YOU'RE THE SUM OF ALL YOUR INTERACTIONS AND PHOTOS WITH OTHERS; BUT ON FOURSQUARE, LOCATION AND DETECTING PATTERNS ARE KEY
I'm working on a startup that is joining a top ranked accelerator next month--we're looking for interns to help us with the site.

email me, shrig94@gmail.com, if you're interested in hearing more
Mark Cuban: The Future of Video on the Internet (from 1999)
Touche, I missed that.
That's actually out of date. Magnatune got all the music together for an album (with a great cover) they released later that year: http://magnatune.com/artists/braid

Edit: it was actually released in 2009, not 2008.
Dutch artist turns his dead cat into the purrfect quadrotor
YouTube is definitely my first stop when I want to check out some new-to-me music that my friends have been raving about. It's my new, on-demand version of MTV.

I dislike what often happens if I add something to a playlist for future listening, however -- videos disappear, for a multitude of reasons. I have several genre-specific playlists I've curated that require regular maintenance because of this, and I can't always find alternatives for stuff that's gone offline. It's frustrating.
Well, sure. If you had made predictions about the smartphone market 4 years ago (before the first commercial Android phones) or 5 years ago (before iPhone was released), your predictions would be utterly and hopelessly wrong.
If an attacker gets access to a database of user names/hashes, a salt prevents him from simply checking the hashes against a precomputed list because each hash is totally unique.

The attacker would have to recompute all hashes for each user using their individual salt.

At least that's what I remember from Computer Security ha
> Are you comparing developing Flame to cooking meth or freebasing coke?

No, of course not :). The point was about crime organizations hiring elite specialists to do high-tech research for them.
Heroku isn't for apps that can't stand downtime. My experience has been that if you have 2-3 heroku apps, and you monitor them with a 3rd party tool, you'll see random "server not found" behavior every few weeks. (And no, they're not just timing out from dyno spinup). Usually this isn't a system wide outage and never gets mentioned on their status page.

So only use heroku if:

a) Uptime is non-critical & you just don't want to deal with setting up a server
b) Uptime is non-critical & You don't know how to set up a server
I think that's just as harmful. The 24-second news cycle creates an unending stream of fake controversies, corrections, retractions, and flamewars stemming from the rush to publish. As a reader, I'd prefer if journalists took notes, thought about the entire presentation, perhaps asked for clarification when necessary, and then published.
totally insane but looks soo cool:D
> You can also limit exposure by blocking messages based on user IPs. Chances are someone from China listing in New York craigslist is a fake.

That last one would probably just create a minor inconvenience for actual scammers while creating headaches for the occasional legit "I am in Shanghai please buy my couch" poster.
Indeed, I don't think I accidentally made the assertion that being a derivative but original work was sufficient. Similarly profiting off your work does not automatically dismiss any fair use claims.
Is OpenStack the new Linux?
Must-have Mac apps for startup CEOs
If IDC could predict such things with any degree of accuracy they would make a lot more money selling the research to hedge funds rather than media shills.

The fact that they don't validates the degree to which these reports are just idle speculation.
And once again,
http://en.wikipedia.org/wiki/Poes_law
;).
You've already got multiple languages under your belt and have been developing for 5 years, so you are probably in the top 1% of developers your age. By the time you are 26 with 15 years of coding, you will still, no doubt, be among the top 1% of developers your age. I agree with the other comments about finishing high school, but in your free time, focus less on developing and instead focus on expanding your horizons by talking to people who are different from you. Who cares if you drop to only top 10% of developers your age by the time you are 26? Do you think most people who have the money to fund you can tell or care? Ideally if you come up with a brilliant startup, 2-3 years in, you shouldn't even be coding anymore.

I was in India last year for my developer's wedding (He operates out of India and...that was the first time we ever met face to face) and from the conversations with his friends, it was strange for me to learn that entrepreneurship on a resume is looked down upon by companies there. Basically, once you quit your job to start your own startup, there is no turning back to corporate life. So I can imagine the wall you are running into. But here is my suggestion, expand your understanding beyond your own personal world by talking to people who don't share the same background as you. There are hostels or places where backpackers from other countries hangout at in your city. Go talk to them and listen to their perspectives on anything and everything (backpackers love talking to locals). That's where you'll figure out what you can do to help change the world. PG once said that the most powerful people in the world are developers with ideas. good luck!
Neutrino 2012:conference for all things Neutrino
PostgreSQL-XC 1.0 released
That's why Apache's default page is now <h1>It works!</h1>.
re #1 -- i'm going to take a stab in the dark: you're white

Because "how it works" is indeed that people get randomly stopped because they have brown skin. For example, driving while black. You're white so you ignore this, but other people can't. If you cared to understand this, the knowledge is trivially available.
Blog Coverage: http://www.quantumdiaries.org/2012/06/03/neutrino-2012-day-1...
Here's a caveat: one conference presentation I attended turned into a sales pitch and everyone knew it. I felt perfectly justified in tweeting at that point.
I don't get what the difference between this and Chosen.js is? Can someone explain?
two thumbprint scans, even one right after another, won't be identical, so comparing hashes is pointless.
maybe they're just learning about it
Dell Announces $100M Credit Fund for Entrepreneurs to Spark Growth & Innovation
Ive seen a legacy application still in use which puts the password in a (non-secure) cookie as ROT13 and cleartext in the db.
As a webmaster, why would I want bots to go to my site that doesn't bring any (or much) trafic?
Malcolm Gladwell On Why History Will Remember Bill Gates And Forget Steve Jobs
Measure Developers Productivity
What was the response like when you originally posted on Reddit? Which subreddit did you post in?

Reddit seems like a great place to test ideas, but I'd be concerned about being labelled as a spammer.
Credo
I've just spent the last couple of hours creating unique longins for every site I can remember having a login for and storing them in Keepass (opensource password safe). The Keepass database is stored on my dropbox account so it's automatically synced to all machines / devices I use.

I get the impression this is going to be a bit of a PITA, but with the rate these sites are being breached it's probably a sensible move.
Ultimately this is why it would be nice for the code/configuration to be independent of the operations. I agree it is unreasonable to expect a random developer to build AND MAINTAIN the entire stack for every project. PaaS makes a lot of sense, especially as a starting place.

The solution is either to have a PaaS provider who ruthlessly eliminates single points of failure (there isn't one, currently), or use some standardized software system which can be operated by multiple independent operators with nothing shared. Unfortunately, the only vendor-independent infrastructure is the physical server, various forms of VPS, etc. -- it's all at the IaaS level. As far as I know there's no PaaS type thing with a common interface which arbitrary providers can operate, with some kind of marketplace for users to pick operators independently from the technology.
Tails - Anonymity and cryptographic tools for anyone
It doesn't matter what Microsoft uses to sign their binaries, they're not the ones the signature scheme is defending against.

What matters is whether or not the attacker can find an application accepts an MD5 signature and target it.

This is not a problem that can be solved by the CAs, though they can certainly stand in the way of the solution (by continuing to issue MD5 certs). The real problem is that a signature by definition is expected to be valid more or less forever. Even if the cert used to sign it expires, the signature is generally still valid.
Really wanted to try this out, but I still can't get the preview of the new features -- it just says "coming soon". I'm in the UK and have MSDN subscription. Does anyone else have the same problem?
I don't think anyone ever considers hosting it on a desktop in the closet on DSL at home/office.

The competition for something like Heroku is EC2, VPS, or dedicated servers, in commercial colocation facilities. A good hosting facility is going to be a lot closer to 99.995% uptime for network and power to the box, but you can of course screw up past that point on your own.
MD5, unsalted. On commodity hardware you can compute those blazingly fast. A brute force attack, ignoring word lists, is totally possible.

That's ignoring all the resources that offer access to precomputed hashes (I don't want to call a list of MD5 hashes a rainbow table).

Easy or not, passwords saved with this scheme are unprotected.
PartsLine.com - "it's like Priceline for Car Parts"
> I think the submitter realizes this

I actually retitled it “Falsehoods Programmers (Still!)Believe About Names,” but somehow it is back to the blog’s title.
Are things different from a developer perpective? If so, why?

Broadly speaking, because the credit card industry is a massive, bloated, inefficient mess, and the effort and liability required for a small business to participate in that mess directly can literally be business-destroying. And that's assuming the Powers That Be graciously allow you to play their little game at all, which may take several weeks of approval process to decide, and will almost certainly come with silly levels of fees on each transaction and terms so one-sided they could right a sinking ship even if you do jump through all of their hoops.

Having an intermediary that can provide a simple API that just works instead of having to integrate with some absurdly complicated and poorly documented API offered directly by the big players can save weeks of hassle. Similarly, having an intermediary that can take care of compliance with the dreaded PCI DSS (the industry security standards) is also a huge win. Finally, because the intermediaries tend to be bigger fish in the pond, you will often get a significantly better deal out of them in terms of how quickly you get your money, and how much of your money you actually get to keep.

All of this is particularly true for start-ups with no trading history, which of course will include just about any new on-line business. Once you've got a proven track record you can give solid answers to the financial questions and actually make the big boys compete for your business as they should, at least to some extent, but if you're starting from zero then the first thing a lot of these companies see is a huge potential fraud risk, particularly if you're in any kind of "dubious" industry or, again like many on-line SaaS businesses, you want to use a continuous payment authority to take recurring payments from a customer's card and not just a one-off transaction.

Unfortunately, there has to be some sort of big player on the other side of any intermediary (or, possibly, several big players used for different kinds of transaction) and so it's not unusual for these intermediaries either to be limited in geographic scope or to provide a partial service but still require you to sort out your own connections with a payment gateway and/or merchant account based in your region (though the intermediaries will probably be able to help with that process, which is still better than nothing). Thus while the US appears to have an effective and fast-growing young industry in payment processing services, those of us in other regions can only look on with jealousy and bow down before the mighty PayPal/Google/other vast multinational with a self-contained payment service.
Clearly posters aren't getting the sarcasm, so I'll spell it out: the NSA is clearly suspect number one.

What's more interesting to me, though, isn't that they had this technique, it's that they let it out for ... what? It seems like this is a garden variety public worm. One would think that if the NSA had the ability to forge windows code signatures like this, they would have used it more selectively. Some spook is in deep trouble about this.
So, basically the same thing in a different phrasing?

No, that would be like relating the facts I mentioned about the software industry, and saying that, "The Software Industry is Doomed, Period."

It's more like, "The X industry of time period Y through Z is doomed." Phrased that way, it seems embarrassingly obvious.

There is no, "The Music Industry," of all time. There is only music industry of a particular technological context.
Yes, they're bad guys. But reading it quickly I didn't see any cases of them suing people for having had their fields accidentally contaminated. Its possible for a person or company to be bad without being guilty of every bad thing anyone says about them.
I'm also big on performance and interpretation of classical music. I've compromised my quality standards on every genre of music except classical music, which I still revert back to my CD collection. Sadly, I feel classical's aging audience hasn't created the forcing function for that industry to get organized regarding the categorization and distribution of their catalogue online, which is a damn shame. Having said that, it takes a certain tuned ear to pick out the world of difference in the performance and interpretation between pieces that are compositionally identical. I personally feel you need a certain threshold of fidelity to distinguish those subtleties.

Because of this, I find I listen to less and less classical music over the years, simple because CD device players are starting to disappear from my life. For example, I'm typing on a laptop right now that doesn't even have a CD drive (Macbook Air). I literally have to go out of my way to listen to classical music in the way I want to hear it. It's sort of sad, really.
I couldn't stand having 2-factor authentication on my Gmail. Any time I don't have access to my phone, I'm locked out of my email? No thanks!
No trying to be offensive but Indie Developers, might be the only ones at this particular point in time, to make a difference with their creations, in a field that looks so stale. I believe they deserve their reward, if not more, from the current bundle.
When everyone buys a new phone roughly every two years, I can't imagine how accurate a 3 1/2-year prediction could be.
So they did, oops. Hopefully they'll add it to the Humble Bundle, then.
Unsalted MD5s. http://www.codinghorror.com/blog/2012/04/speed-hashing.html
Cleve Moler, inventor of MATLAB, starts a blog.