skysight-inc/HackerNews huggingface dataset:
Would link validation be OK if I manually went through and clicked every single link by hand, and used a pen-and-paper tally of which ones worked and which ones didn't?

What's the difference?
Heroku status is currently showing production uptime as 99.97%. That's not too shabby, and definitely not as bad as you make out.
I see no evidence of that.
This is a minor derail, but please don't use the term "schizophrenia" to be equal to dissociative identity disorder.

"Cognitive dissonance" is better and doesn't use other people's actual conditions as pejoratives.

Just a pet peeve I have, don't mean to call you out or anything. :)
Same here! This happened last year too! Annoying.
I like the part where they use humor, because I would have just been as asshole about it.
Food Inc is what really whipped up the anti-Monsanto rhetoric; it's uncommon for me to interact with someone about agriculture and food without the film coming up.
Add a Fixed Support Tab to the Side of Every Page
Looks like a less-polished version of Rummage (http://rumma.ge)
I'm sorry, but that's completely untrue. I can't speak for using Heroku specifically, but in the end hosting is just running an app. It's fairly trivial to make an app multi-provider these days through a plethora of methods. DNS and a low TTL is on the easiest-to-approach end if your app is designed for it and aware of the complications, which implies thinking about your database and other supporting architecture from the perspective of a multihomed setup. If your app isn't idempotent nor designed to be multihomed, it'll be harder, but six figures of investment is insanely high even in that awful case.

Perspective: I could throw an app on Rackspace and Amazon, with a replicated database, for under $200, in about a day.
Why lead when you can follow and still stay rich?

I think that's a little unfair. HBO is clearly leading in terms of show quality.
Ah, unfortunately there aren't any startups around where I live. Would anyone be willing to allow me to work as an intern remotely (btw. I'm still in High School)
A filter is an added level of processing and complexity. Why take data being used in the app, convert it into a human readable format, just to have it parsed with regex and made readable by another program?

Now, which is going to be more convenient: Rewrite a regular expression or grab a different data node? Personally I would rather have the data format change than have rebuild a complex parser.
What astounds me is that, in this day and age, there are people who still use IE.

Well, OK, technical illiterates who don't know any better, I can understand, but no one else.
It is kind of sad how this Mad Libs exercise accurately describes so many of the startups that dominate the headlines and monopolize our talent.
I agree. This article comes off as confused and unguided. First it mentions the "inability of analysts (or anyone) to understand Apple" (unpredictable). Then, it says Apple's hit-driven business results in their product refreshes being incremental/expected (predictable).

The self-contradictory ramble continues. He mentions how Apple knows how to design a user experience, rather than being design-blind and spec-obsessed, then goes on say that Apple has hardware spec issues, and that's a "dilemma". What...?

To top it all off, Apple is actually leading as far as hardware specs go (unless by "good specs" you mean "cram every feature you possibly can into the chasis without regard for user experience whatsoever"). The retina display is one obvious example. I wouldn't even consider a tablet without one at this point. The iPad 3's GPU is yet another example of Apple's hardware advantage. The fact that they bested NVIDIA, a company dedicated to designing the best GPUs, is extremely impressive.

Imagine you're a consumer walking into a store to buy a laptop/tablet/phone. From your perspective, who is leading the pack in every way that actually matters to you? I don't see a dilemma here for apple.
Says these people:

http://contest.korelogic.com/

Check out the twerps at @CrackMeIfYouCan.
A work-cation. Interesting.
look, if you think a news article quoting Moe Parr about someone suing him is convincing evidence, i'm not really sure if you'll believe this, but here's some evidence indicating that Moe Parr is in the wrong:

this is the court injunction against Moe Parr's seed cleaning activities: http://www.fr.com/files/uploads/publications/DSU-Medical-Cor...

i hope your mind isn't already made up
Yeah, I have that setup but its not being used at the moment with this outage - if full redundancy with multiple regions is a huge challenge, perhaps some interim basic routing redundancy would go a long way so we could at least display a branded error page during an outage.
This is excellent stuff; it fits a niggling problem I have (i.e. I'm a better programmer than sysadmin, so managing massive data shards is a pain)

It's an elegant implementation. From a ~30 minute read through I reckon I can use it to replace our current "hacked up" solution in just a few hours.

Kudos Tumblr.
Crypto software is subject to export controls for many countries. If you are going to distribute it as open source (or across borders from where it was developed) you should become familiar with the laws and regulations for your circumstance.

For the US there is a wikipedia post at https://en.wikipedia.org/wiki/Export_of_cryptography_in_the_...
Actually, as someone who has had to respond to Website breaches in the past, my experiences and feelings are very similar to those described by the author. The main difference is I did not have the opportunity to discuss matters with my attackers — oh, how I would have loved that opportunity — but the experience and response protocols are very similar on a broad level, I'm sure.

And I didn't see this yesterday. I also thought the addition of Jack's video was very helpful to paint a more complete picture. But nice tirade.
Looks good! Maybe put a placeholder text on the first page and I think there could also be another short one-liner describing the site's purpose.

And maybe it's just me but in order to compare prices, remaining time on an auction and such, I prefer a table or list layout instead of the Pinterest masonry style.

That said, I think I need some kind of short and sweet weekend project too, really longing for the feeling of having something out there, up and running. You already did it, thumbs up!
Apple receives broad patent on MacBook Air wedge design
Partnership Marketing in Contact Centers
Passwords need to die. There will always be bad implementations on storing passwords and those will hurt many users. We need something better.
He didn't intentionally kill or maim civilian targets with the goal of inciting terror?
Do note that Cloudflare is throwing mallware/captcha notices to legitimate users, which is extremely annoying.

When I get such a screen I immediately close the website I'm visiting. And no, contrary to what they tell me, I do not have "a virus" nor is my computer part of a botnet.
Beta user of Vooza here. Just gotta say, I love how the cloud based crowd sourced API social graph seamlessly allows me to wiki the S3 storage for microblogging and geolocation services by using distributed computing. It's pretty amazing!
I meant both. See my response above but minimizing inputs is the core motivation of most of our family's technology and infrastructure investments. GPS integration alone has allowed us to use the minimal amount of fertilizer as we're able to use historical data to know which parts of the field need which amounts of what.
Slow down there -- why would you care about invalid links?

Because Stack Overflow is a site whose purpose is to answer questions. People may provide links when asking or answering a question, and those links may be important in understanding either the question or the answer. So invalid links degrade the value of the site.

What they're doing is fundamentally different than web crawling. Web crawlers are about discovering content. That means starting at a root and crawling out to see what you can find. One URL can spawn many more URLs to look at. They are starting with a known URL, and seeing if they can visit that URL. They have one URL, and only visit one URL.
Smartphone docking station transforms phone into "laptop"
Talent will go where they are given money and freedom, so it's quite possible for Netflix to compete with HBO etc if they provide enough money and enough freedom.

Having said that, Netflix having 5 or 6 top-notch shows is no real threat to HBO, no more than AMC already having 3 or 4 top-notch shows is.

As long as HBO has their handful of shows people want to see, they don't care if a few other distribution channels also have shows people want to see. It doesn't hurt them, not even a little. A case could be made that it even helps a bit in terms of raising the prestige of the medium. There's a definite sense right now that the real gems of Hollywood are on television rather than in the cinema. It's a golden age, of sorts.

There are other factors as well, such as Mad Men sucking up AMC's money from other shows, that limit the threats the other networks can pose to them.
Oh. Well, if it feels similar, then there must really be a similarity between testing products for flaws and breaking into websites.

Sheesh.
I'd wish people made normal tutorials (text + screenshots) instead of video ones. It's difficult to make a good one (that won't distract because of noise / recording quality / speaker without annoying voice), and at the same time you sacrifice low-bandwidth users and lots of time for the high-bandwidth ones - the important feature of a written document is that one can skim it, skipping the parts one doesn't need, focusing only on parts one doesn't know, while being able to see the entire context for the whole time.
Buty Adidas F50 Adizero
Buty Adidas F50 Adizero, Buty Buty Adidas F50 adizero II prime FG, Buty Adidas F50 adizero miCoach Leather FG 2012, Buty Adidas F50 2012 Pl!
1-2 weeks to start, then see how it goes.
Woefully inaccurate: it has vowels in the name. In fact, mostly vowels in the name.

Also, collegehumor did this better a year ago: http://www.youtube.com/watch?v=LMmdl4VltD4

For that matter, so did Color.
Try the prebuild: https://lastpass.com/dlpre
You're absolutely right. It's on the TODO list ;). I've sent you an email.
Thanks. That's good enough for me. So, last.fm gets added to the list of companies that don't care about their users' security but say they do.
Hm, I see your point except that ratings-based (i.e. ad-sponsored) content is not what we're talking about here. We're talking about paid, premium content. Ratings don't matter, only the bottom line does.
I agree that some elements of the story don't make sense. How many DHS/Immigration employees even know what a cryptographic algorithm is? Did the guy just happen to be sitting around when this guy attempted to cross the border? If the US was up to something, why would they randomly interview a person like this? Why not pull whatever they need to know from their massive surveillance databases - surely that would be more accurate than whatever this guy would say under duress.
OpenType Features in Browsers (And the Surprising Leader)
Batik Bola Chelsea 6B
Will it run on my iPhone?
If you want something better for your site; check out MePIN https://www.mepin.com/
Ideas for your next product/service/startup
Another reason why I'm not using OS X anymore. It just took time to be a master with Linux, but it's worth it. The best support, works in almost every machine.
Also, careful with Cloudflare SSL. It only secures between the browser and Cloudflare's data center. The connection between your server and Cloudflare remains non-SSL.
Yeah, I saw Rummage a couple of nights ago. It's great - I'm glad I saw it after I'd finished making this otherwise it may have been another project filed under 'uncompleted'. I'm also super happy I saw I didn't see this before I started otherwise I may never have bothered.

FWIW, I deliberately tried to make it as simple as possible. It was also just an excuse to see if I could do it - and have a chance to play with Masonry, create an eBay compatible app, do something other than my normal work etc.. I'm happy with it! (although I'll definitely take some of the below/above comments into consideration this weekend)

Thanks for your comment, though!
You're giving Intel graphics as a pro for servers using OpenCL? Either way, I don't know about this set-up, but next year a set-up with Cortex A15 and Mali T658 will have shared cache between CPU and GPU, which should be a lot more efficient than anything Intel or even AMD has today regarding GPU compute. From what I understand cache "latency" between CPU and GPU is a pretty big problem in the desktop space, and this ARM concept should make it a lot better.

http://www.cnx-software.com/wp-content/uploads/2011/11/arm_s...

The "Little CPU" is supposed to be the lower-power Cortex A7. Canonical is very aggressive about supporting ARM chips.
Doomed to fail; they never mentioned scalability. How do they expect to grow to millions of users without web scale technologies?
Do LinkedIn, eHarmony and LastFM have any parts of their software stack in common? Same 0day?
We don't accept subsidies and would absolutely love to see them go away completely. They're doing nothing but sustaining inefficient farming practices and keeping afloat farmers that are quite simply bad at what they do.

I don't want to get too off into the HCFC rabbit trail, but I have yet to see any research that indicates anything other than correlative evidence between the ingestion of C6H1206 derived from corn. If you have access to research that proves causality I'd love to see it.
Welcome (again) to Barcelona ;)
>Schmeiser simply used the seeds that ended up on his land (as far as I know, I don't know all the details of the case).

It only takes a few minutes to find out the details of the case. He didn't just accidentally get some Monsanto seeds mixed in with his own -- instead, he noticed some Roundup-resistant plants growing on his land, collected seeds from them, planted them in a test field, and then separated the Roundup-resistant from the non-Roundup-resistant strains by... well, spraying 'em with Roundup. In other words, he went to some effort to deliberately separate and reproduce the specific Roundup-resistant strain which happened to wind up on his land.
> Of course, if you're salting the hash uniquely for each user, then this approach isn't very helpful.

I've seen this advised a lot. However, where are you going to put the per-user salt? I presume in your users table, or somewhere in your db. Does this not mean that the salts are just as likely to be hacked as the encrypted passwords?

Are you not better off with either a single salt that's stored somewhere outside your db or with some other scheme for algorithmically picking a salt based on the user id?
How to I remove it? I set fish as default, but I realized that none of my scripts in .bash_profile worked... and it's too much work to rewrite everything again.
My number one Rapportive hack
Developer review of Windows 8
They're all Hadoop users.
You don't think that quadrupling resolution has "obvious functional implications"?
Don't tell them your age, then. Age discrimination is illegal so they can't ask how old you are and you don't have to tell them.

I was contacted by a well-known men's magazine when I was in my teens regarding some blog/Usenet posts I'd written. They wanted me to go to a conference in the US and cover a story for them. The initial e-mail thread went very well then I made the mistake of admitting I was 16 on the first call and never heard back from them.

Covering a conference they'd eventually have figured it out - but with dev work the client need never know your age and as long as you are legal to work, they need never know.
One of the problems with using multiple providers is you can't use any of the specific features of a provider.

For example, I really like AWS's security groups and ELBs. Those serve as my firewall and my load balancer and SSL terminator.

Replicating the application to another service means configuring and testing all that on my own.

If I use heroku and use their logging system, then replicating it to another provider means I need to be an rsyslog expert.

I don't really want to be an expert on rsyslog, postgresql configuration, floating IPs for HA LB, the best IO scheduler for file systems, etc. As someone who is in charge of all the sysadmin duties, and is solely responsible for writing all the business and db logic for several e-commerce sites, I want to spend my time on writing code. Not fucking around with figuring out the syntax for iptables.
OK, I can make it a patent analogy if you like:

A plane crashes on your land. You reverse-engineer the jet engine and start selling your own jet engines.
Python Tools for Visual Studio now supports Django on Azure
Great comment, thanks! I love just hacking bits together - it's so much fun! So many of my projects don't get finished it's nice to actual finish something.

A placeholder is a great idea. I'll that add this weekend. My dad said exactly the same thing with regards to the lay out. He likes to scan along the lines. Saying that, it doesn't fit very well with the big picture format :-)
Oops, meant $100 million/year company. Obviously they're not a $100b/y.
Well, the problem here is that big corps are doing obviously-wrong things with user data. It's not like there's any uncertainty in the industry about how to do things correctly, it's just that these corps and many others are deciding not to.

What makes you think they would make better decisions if the technology was called something other than "passwords"?

There is no technology that cannot be ruined by ignorant implementation.

Passwords suck for other reasons. This is a poor example.
Correction: they need users.
With WebSocket, you cannot use your tried and tested HTTP parser.

Why? I am using my tried and tested HTTP parser for WebSocket. I am doing something wrong?
The biggest problem is the lack of caching of shows for offline use. You have to have an active Internet connection for the app to even work, making it worthless for most traveling. Beyond that, to get good video, you need a very robust connection, ruling out hotel wifi, coffee shop wifi, plane wifi, train wifi, etc.

Basically, the only place I can use HBO Go and get a good experience is my own house.

Why it's called HBO Go is anyone's guess.
That's exactly why you don't want to use those features, for what it's worth.
What's even more sad is the repercussions that I see for the startup and technology scene. I believe our freedoms and our rights are what gives the US a huge edge in terms of creativity compared to countries like China and Singapore. Our intellectual freedoms are what leads to huge innovations, that tends to surprise a lot of people still. Without these freedoms I feel that we'll slowly lose one of our major advantages in the coming decades.
The interrogator can claim whatever he wants, he may as well have 22 years of computer experience and be absolutely incompetent.

From cryptocat front page: "Messages are encrypted inside your own browser using AES-256"

Link to source on top right: https://project.crypto.cat/
The context of the original question was improving the availability of a product deployed to Heroku or other PaaS, which implies a lack of dedicated operations staff.

An experienced ops team willing to be on call 24x7 is easily six figures by itself.
It is especially surprising given that conference tickets are usually really expensive.
I would like to see pub/private key implementations for this sort of thing.
True, but spam is bad. Apartment hunting is time consuming enough. Tons of people end up wasting more of their time writing an email back to the seemingly-legit Tina.
A $149 ARM laptop that looks like a MacBook Air (and runs Android)
Obligatory XKCD link: http://xkcd.com/1060/
How PhotoMonkee handles no Image2D in OpenCL
If I understand correctly, AirBnB directly posted to Craigslist, where most of the spam emails (such as the roommate or oDesk emails) look to be the work of third-party affiliates. I'm not condoning AirBnB's methods, but there is a subtlety here that makes affiliate spam even harder to battle.

Lots of companies use affiliates to do the dirty work for them, then ban affiliates that get caught. New affiliates pop up, or the banned affiliates create new accounts and start over. That leaves sites like Craigslist in the unenviable position of playing whack-a-mole to try and ban spammers.

Other variations on these include fake profiles of women on (insert social networking site her) who inexplicably "friend" men and entice them to sign up for dating/adult sites where the target can see more photos, and gambling instruction guides/beat the casino secrets uploaded to torrent sites for free. Naturally affiliate links to lots of online gambling sites are embedded in the guides.

I guess the takeaways are:

1. Never trust user generated content.

2. Whenever there's a way for people to produce content (effectively) for free, the affiliates/scammers will be there. I built a rental-listing site a few years back. Not long after I stared getting real listings, I started getting rental scams. I had almost zero traffic, but the tiny blip on the radar screen my site produced drew scammers like flies.

4. It's often better to ask forgiveness than permission. What repercussions did AirBnB suffer for their posts? What real repercussions do any of the spammers face?

5. Just writing about affiliate marketing, well, at least this side of it, makes me feel icky.
It seems like someone who runs enough pings to warrant this kind of parsing would be better served writing a service which does nothing but ping stuff. Then they can use whatever encoding method they want rather than trying to retrofit such things onto existing tools which are for humans.

It seems people want to wrap things and parse them rather than making the same basic library calls themselves. Note the "inspiration" part of this post: the author started parsing the output of iwlist instead of just making the requisite calls directly.

Oh, and don't derail this with a discussion of suid-ness required for raw sockets (ping) or whatever magic ioctls that an iwlist-alike would require. This applies to other things which can run as a normal user, too.
Ad Operations
...And we've arrived at the zombo.com point of this round of startup fever.
Not exactly an expert on cryptography, but how different is the description of the "next" crypto-algorithm provided by Kemp different from what bcrypt can do today?
If you are running an app that is utilized by more people than just yourself, there is never "a lack of dedicated operations staff". That situation simply does not exist in any known realm. In the case of a solo developer, you are the operations staff. You are on call, 24x7.

With that in mind, everything I talk about in my reply is doable by one person, or a solo developer. A cursory understanding of administration goes far, and if you're deploying to Heroku, you should know enough about administration to not be completely in the dark when things fall apart.

Deploying a mass-consumable Web service implies that you have accepted the fact that you are now a developer and administrator.
If 100% of the population was on-board, then who did they rise up against? Even if it's a single leader, he/she is still part of the population of a country.
Is great to see a lot of companies releasing APIs but if even better as a developer start a project and being able to easily use external services and even integrate your app with bigger services. Imagine creating an e-commerce an integrating your catalog with stuff from macys, amazon, etc.
I do understand that farmers are very motivated to minimize inputs (but many of them are also stubborn and risk averse, because they are just people).

I suppose my point is that you are asking for a fight that I don't think is worth fighting when you use it the way you did (and I see merit to the fuzzy buzzword idea that encourages people to be more mindful of their impacts).