skysight-inc/HackerNews huggingface dataset:
You can already do that with a mount. Windows 8 is display size agnostic.

Example of a 80inch TV with a touchscreen running Windows 8

http://www.youtube.com/watch?v=lUFv4C4fVzE&feature=playe...
Badges are mostly replacements for the faq/manuals. They encourage a learn by exploring and doing approach, e.g. "how do I earn this badge, and why does it exist?" sort of affair.
> My only assumption is that that is not random, that there are reasons for it.

It's complicated, more so than can be adequately addressed here, and far beyond a simple question of Linux specifically "saving [people] a whole bunch of time".
I also recommend: http://www.codinghorror.com/blog/2012/04/speed-hashing.html
HTML Parsing and the template element
No. Of course not. In all likelihood your SQL RDBMS will only allow you to bind data. Do you paginate? What about "LIMIT" and "OFFSET"? Do you sort tables? Then you have to handle column names. Do you sort in both directions? Then you have to handle "ASC" and "DESC". And so on.

Obviously, you can write simple code to do each of these safely. But then, you can write simple code to handle query parameters too.

By all means, use parameterized queries. Just don't assume they're a magic totem against SQLI.
Please add a symbol to red and green so they are differentiable to R/G colorblind people

8% of North American males are Red/Green colorbind

Perhaps thumbs up/sideways/down, or Octagon, square, circle
> This is the same pattern as for most crimes. Seriously, minus the murder bit, it's a law and order episode.

I guess that's why the original Law & Order is one of the few TV shows I like.

> What I want to know, is not the predictable sequence of events, but who would do this, why would they do this, tell me the thought process that leads to these actions.

I also want to know all this, so I think you may have misunderstood my position. (This applies to your other comment where you call me disingenuous for no good reason.) What I don't want is stuff like "Tourists milled about the platz in front of the cathedral, Germany’s most visited landmark, craning their necks to snap pictures of the impossibly intricate spires jutting toward the heavens.", nor do I want teaser paragraphs endings to keep me hooked on the article as if I would stop reading it without them.
Interesting. Do you do any correlation or alerts like Librato Metrics or is this just a graphing service? The $5/mo price point is similar for both services...
How to Make your Firefox Speedy & Faster
Top 30 Bloggers All Over The World
Yes, or changing it from a binary system to a continuum that maxes out at 20 years. Software patent? 5 years. New drug - 20 years. New algorithm (can't patent math of course) 10 years.
Agreed! Most emphatically so, in fact.

I've been an "architect" since 2001 and the thing that slaps me in the face again and again is that most architects I encounter can't code, or haven't bothered to for years.

First, the word architect is just a fancy word for design. And yet most architects don't know the difference between a layer and a tier. The best way to get your head around those concepts is to write code using separation of concerns, and deploying it. Yourself.

Next, process. Seriously? Process was solved in the 80's. The agile movement brings nothing new here. There's a basic process that starts way before you write code -

Envision (your idea)

Plan (how)

Build (write the code - you can use SCRUM et al here if that's your bag)

Stabilise (bug fix - if your dev methodology permits then this merges with build, but an architect/project manager/program manager should still identify milestones for release readiness)

Deploy

Operate

Companies like Thoughtworks (whom I admire for their technical ability) will tell you to screw any process, and that the software will evolve itself. This is bad, because it will result in an app that's never finished.

So as an architect remember to begin with the end in mind. There's no point in starting if you don't know how to know that you've finished.

If process is new to you, check out version 3.1 of Microsoft's Solution Framework. Both the team and process models are good, but neither are gospel.

Stay VERY VERY far away from frameworks like TOGAF. They're a prime example of how to kill a project through process. The Zachman Framework is only good as a documentation guide, but offers little that the Microsoft Solutions Framework doesn't cover. The Unified Process, or whatever that crazy process is called that came out of the UML world is just as bloated and useless.

In closing, if you want to be a good architect, learn to code better than anyone else you work with. Be that guy that's done it all and has the war stories to prove a point, like why server push won't work on an ADSL network.

And don't call yourself an architect. You design software. That's kind of it.
Now Visually challenged can read Websites without Computer or Mobile Phones
>Multiple monitors are not supported well

What do you mean by that?
Native C/C++ Like Performance For Java Object Serialisation
I am very skeptical of tools that find security flaws automatically.

I am enthusiastic about automation.

The holy grail is to strip away all the tedium from testing, leaving only the mental challenge of finding and exploiting the broken assumptions of our adversary developers.

Burp Suite does a very good job here. sqlmap crosses the line for us. But that doesn't make it a bad tool.
If anyone is looking for a way to let users enter keycombos which you could then use with Mousetrap, I wrote this: http://suan.github.com/jquery-keycombinator/
Rainbow - code syntax highlighting in 1.4KB of Javascript
What's the problem with that as long as it is plagiarized? If it actually borrows directly it just needs citations.
Great post and great ideas. Mathematically, it's definitely a pretty perfect solution, but there are other factors that come into play. Most importantly, the reason for the acquisition, and the fact who company B wants/needs to make happy:

The reasons might be a) fire sale, b) talent acquisition, c) product/asset buy, or d) merger (increasing value of the company from a to d).

in a) it will most likely go only to the investors, so scenario 1 in your case. The founders will probably not even transition, as only the assets are bought to be re-used by company B. Founders don't get money or stock, as they haven't built a successful company, yadda yadda (that's what liq prefs are for).

in b) the acquiring company will most likely want to keep the founders happy, not the investors. Like a), it's often not the best performing business, but B wants A's team to work for them. The investors will be made happy, and the founders will either receive stock outright, or get great employment contracts with lots of options. Recently, it seems to have happened more often that investors didn't end up getting lots of the proceeds, but founders were very handsomely rewarded afterwards (on a trust basis). The Milk acquisition by Google seems to have happened like that (according to le bloggers), and there's word about many more instances where the investors got screwed by handshake agreements that turned into a nice payout for the entrepreneur afterwards. This is again not a question of good vs evil, but simply a question of who has control of the deal. This situation is now finding the way into legal docs (I am sure the lawyers can weigh in).

c) is the most obvious case for your solution - company B wants to make everybody happy so the investors agree to a sale, and the founders stay on as employees of the acquiring company. But again, this depends on who the decision power lies with, and who needs to get a sale, fast. Because the company is a much smaller part of the resulting company, control needs to be ceded (depending on the A-investors' power).

in d), the investors of company A will probably want to keep control of their stock. If it is a merger of equals, this control would have to be granted, because they would otherwise not agree to a sale.

On top of that, there are other things to consider:

- How is the acquisition paid for? You assume new stock, but it might be part cash, part options from an existing pool, part share transfers from other shareholders...
- What are the pay out horizons for individual investors and shareholders (especially if angels or a complicated structure is involved)

Fascinating topic.
Putting the MOVE framework in proper perspective
Hah, care to provide some references for this statement?
Realtime and Transactional Syncing
It is distressing how many companies do this now a days.

"Lets do it and see what happens. If the shit storm is too strong, we can always apologize and take it back"

Everyone wants to get away with whatever they can. I suspect it will only get worse.
Your comment is in dire need of geographical context.
I have zero problem with storing the salt alongside the hashed password, because in practice, it doesn't make anything less secure.

Great, now please go and fix your software to use slow password hashing function!
If you're going to down vote, please at least say why...
Both automatic correlation and alerting are absolutely on the roadmap. We're just getting started. :)
I would be interested to see what the HN crowd's opinion on certifications are. Mr. Schneier mentions them in his post but they seem to be a sticking point in the community as a whole. I have been on the hunt for ~2-3 months now without luck so far. I am currently working on my CISSP though I don't have the experience to qualify (CISSP requires 5+ I only have 2+) for it so even if I pass I can only qualify for the associate level.

I'm not sure if the CISSP is the way to go but I want to feel as if I am moving forward on a career search so I don't get stuck in a rut.
"Displaying data in multiple computer windows" is an absolutely ridiculous patent.

It would indeed be ridiculous if someone had a patent on displaying data in multiple computer windows, but that's not what was patented.

Here's claim #1 -- the other claims are similar in their specificity:

1. A system for synchronizing the presentation of data on a digital computer display, comprising:

first and second window-controlling means, each of said window-controlling means displaying information in at least one display window,
a synchronization control means, and
means for communications between said synchronization control means and each of said first and second window-controlling means;
wherein said first window-controlling means displays first information from a first source, and said second window-controlling means displays second information from a second source;
wherein said first information and said second information have sections, and at least one section of said second information corresponds to a section of said first information;
wherein said first window-controlling means sends a message to said synchronization control means over said means for communications indicating a change in viewing position to a new section of said first information;
wherein said synchronization control means sends a message to said second window-controlling means over said means for communications requesting a change in viewing position to a section of said second information corresponding to said new section of said first information; and
wherein said second window-controlling means displays said corresponding section of said second information on at least one display window.

Remember, patents cover methods, not purposes. This patent covers a specific method for displaying data in multiple windows, not the general concept of displaying data in multiple windows.

Mind you, I still think it's a dumb patent. But let's make sure we understand what we're lynching them for before we get out the torches and pitchforks, ok?
Advertisement Driven Development
Yes, Linux/Android! That sounds so sexy! I wonder why they didn't do it. :)
Another Domino Falls in the LIBOR Banking Scam: Royal Bank of Scotland
Anatomy of a reference check
Yes, the outages that happen don't worry me much, things will happen. But they have inter-AZ issues in the management system disturbingly often.
computers were the bottleneck

Perhaps, but we were discussing software. Specifically, "Linux" vs "some other operating system".

I agree that advances in computing must surely have a lot to do with the discovery of the Higgs, but such advances are about hardware, not operating systems. Since the 1990s, billions of dollars, both public and private, have been spent to keep Moore's Law rolling forward, and that's most of what makes modern computers more capable.

Anyway, it occurs to me that this discussion is a classic bikeshed. Rather than debate tricky and obscure issues like the quantum mechanics behind the Higgs phenomenon, the engineering of supercolliders, the politics of getting supercolliders funded, the ins and outs of data processing algorithms at CERN, or the techniques of manufacturing transistors with a 20nm gate size, we have fallen back to debating whether or not the license used for the operating system was vitally important.

If CERN had had to implement a Unix entirely from scratch in order to do their job, they would have done so. It would have been a minor side issue. Indeed, from a certain point of view, that may be exactly what they did. Why discuss how Linux was vital for CERN's scientists, but not the other way around? Perhaps the reason why Linux was so good for high-energy physics is that high-energy physicists built it that way?
The example I like to use here is Skiiers vs. Snowboarders. Both are about going downhill really fast on snow, so should the all be on they all share the same site? How different could they be?

I'd argue that Snowboarders have a very different culture than Skiiers, with their own sets of terminology, equipment choices, and social norms. That's why they need a community to themselves, with their own moderators, reputation systems, and ideas of what kinds of questions they find on or off topic.
I am getting on a plane and won't have internet access for days, but can someone please start a site like IAmATroll.com or whatever and compile a list - hopefully with profile pictures - of patent trollers, and who they're suing. I'd be happy to help promote and maintain it when I'm back.

If we can't win legally, let's at least try a grassroots approach. Perhaps shame will have some effect on these people.
The funny thing is that with my keymap (cs_CZ) the 4 and $ keybindings are reversed.
Doing a column in the database is exactly what I suggested... Also, saying that anything is "very unlikely to need replacing" is extremely short sighted of you. And the point is not to necessarily do it "in a hurry" but rather to identify a mechanism for doing it at all, in a way that doesn't require resetting every user's password.
Do you seriously not see the difference between sporting equipment and prosthetic limbs?
You could touch the metal in clojure, by implementing clojure on "bare metal"[0]

[0] http://en.wikipedia.org/wiki/Lisp_machine
Let's say I have 20-30 windows open on a laptop connected to an external monitor (I do, right now). Windows 7 has one taskbar, and so it becomes extremely difficult/near impossible to quickly determine which window is on which screen. This could be improved by adding a second taskbar (I think this is coming in Windows 8?) but I think more is needed.

Additionally: some application titlebars can be dragged so the window appears on a different screen, but some cannot. Excel, when maximized, cannot be dragged to another screen.

Back to taskbar issues: My biggest complain pre-Windows 7 was that you could not reorder items. I thought they fixed it, but they actually made it a lot more annoying with W7. I think Windows assumes that each window of an application is related to the other windows (never the case with my workflow) and so you cannot separate them by dragging. Say I have 5 Firefox windows with a few tabs each, where each window's tabs represent a collection of related topics. Now say I have some Word and Excel documents also open that relate to the browser windows. I'd like to arrange Topic 1 from Firefox, Word and Excel on one monitor with their taskbar items together, Topic 2 on the second monitor with their items together, etc. It's very unpleasant and difficult to manage windows on Windows.
that's helpful. thanks for the link ushi.
How to Get a Job in THIS Economy
The last patent reform bill really did nothing. Why can't congress pass useful bills.
It's a little trickier to do that because of authentication concerns, but we're looking into it.
Early Twitter Team Member Dishes on Service's Origins
> It is definitely possible to get C-grade control over machine code with a Lisp

Well you could also have machine code be a lisp (as did many lisp machines, which used lisps from the microcode up).
Maybe they could start picking up a phonetic alphabet in the meantime, so it doesn't take me that long to become competent with their written language.
Does anyone else use either of these methods?:

1. Use memcached or asp.net cache to detect if a high number of login attempts are happening, if so, implement a 1 to 2 second sleep on each login attempt for 15 minutes (with some additional per IP slowing).

2. Put a sleep for 500ms on all login attempts.

I've been doing both for a while, with the thought that they are effective methods in conjunction with proper hashing.
It would be great if github used a color picker, instead of requiring manual hex input, for the issues label color picker.
IMO, he's seriously wrong about certifications. (and not really on the right track with this article in general; a good background in making stuff is key to knowing the tradeoffs in securing stuff...)

Maybe the perfect cert would be a useful tool for some purposes (corporate hiring, huge projects with consultants doing low-level IT, etc.), but those are crappy jobs (and not really "expert" in any way).

More importantly, the extant certifications are all crap. CISSP in particular. Get it if an employer requires it, but it's independent of your actual knowledge and learning process.
Twythm / Share what you're listening to on Twitter
Frances W. Preston, Defender of Songwriters’ Copyright, Dies at 83
Passion is not enough
Nice hack -- I've been going this as inside of backbone.js app. I have a asset management app that uses keyboard shortcuts to quickly tag, choose, and manage photos.

Had I know about this I might have used it rather than bundling it into my views.

Nice work!
What community reopened it? It did not get reopened until after I posted here, and people came from here to reopen it. The discussion on meta, and comments here from people who are clearly actively involved in site moderation on stack overflow, shows overwhelming agreement that it does not belong there.

I would be willing to bet money that your opinion that it is on topic would come as a surprise to them. I would also be willing to bet money that if the question and answers came back to the attention of the majority of people on meta, it would immediately be closed and deleted again.

If you think that this is a problem, perhaps you should say something publicly. Because it doesn't seem to be an isolated or even particularly unusual occurrence, and it is costing you contributers.
I wish I didn't have to pay for another app to uninstall other apps :/
Bill Newton Dunn's response is apparently: "I fully agree with the EC that ACTA hold none of the dangers & fears about which a small number of people have emailed"

https://twitter.com/webmink/status/220513308191637504
Good call, hadn't thought of that.
It doesn't do modifier key event generation correctly. On a US keyboard, hold down shift and 4 (i.e. type "$"). The second item highlights. Now release shift. The first item highlights, incorrectly, because the library apparently generated a keydown event for "4" when the shift key was released. That's wrong by all standard conventions. Modifier key releases should never synthesize presses.
Disagree. With possibly a few exceptions, secure software development is led by the breakers, not the builders. Some of the best of the breakers start out as competent builders, but either way: you can't defend something if you don't understand how it's going to be attacked, and the history of software security over the last 20 years suggests that we suck at predicting what attackers will come up with. Great example: "buffer overflows are easy to fix; just make the stack non-executable".

One of the best secure developers in the world is Daniel J. Bernstein, and, two things you'd want to know about DJB: (i) he missed LP64 integer overflows, which got flagged by (pure breaker) Georgey Guninski, and (ii) he's a world-class cryptanalyst and breaker in his own right.

There's a reasonable "builders vs. breakers" argument to be had, I'm sure, but my experience suggests that overwhelmingly the people making this "world needs more builders and less breakers" point are people who are annoyed at the prospect of sinking the time into becoming a competitive breaker.
Not seeing any specific numbers in the complaint after a quick scan of it. Did they state in the letter (which wasn't in the link) the amount they are seeking for the license?
> You don't see Linux on a lot of consumer devices where people graphically interact with the OS

Umm, Android?
It's good to see someone work on the one touch videchat problem. No one seems to do it well.

Can more than 2 people participate in a video chat?
>And I see huge brands whose egotistical staff don't realise that they are successful despite evidently not bothering with either real product management or robust testing, not because of these things

Citation needed. The massive public success of these companies would argue against you, as would my personal experience working with and without traditional project management.
QuicklyChat looks awesome - good job guys! The program runs fine on my machine too.
The only critique: Pricing - Coming soon => you should start charging for your product right now. You will get better feedback, you will get customers which work with you and help you improve product, etc.

Otherwise - excellent. You have a customer :)
This is outstanding feedback. Thank you for taking the time. Feel free to email me with any other thoughts. joey@earbits.com
to bay area'ers: use Waze! the more people that use it the more accurate it will be
I wonder if we should tighten that first recommendation up: learn C before you learn Ruby or Python.

I've had a lot of trouble bringing people into C that have a strong background in (say) Python, but I don't remember C being all that hard for me --- but that might be because I didn't have any other options, besides Borland Turbo C, when I was getting started.

Also: wow do I hate the OWASP Top 10. Can we just rattle off an HN Top 10 right here? It'll be better.
Can you reveal what the troll was asking for the license in your particular case?
Ah, I see, by "scaleable" you mean that it can literally be scaled to different sizes on the page. (For HN, an uncommon use of that word.)
Strong agree with 'rdl, I recommend avoiding the CISSP altogether. Having a CISSP isn't going to hurt you, except to the extent that it will enable you to get jobs at places you shouldn't be wasting your time with.
> Ultimately we had to carve out our own path by being relentlessly resourceful. We took the advice that made the most sense, made pitches, learned from our mistakes and iterated till we figured how to make it work.

This has literally been our experience. We haven't raised the round yet - and now might not need it - but after lots of pitches and both YC and TechStars interviews, I agree with this wholeheartedly.
I don't really believe there is a state of total honesty between people.

There is always the inner person with dirty habits and nasty thoughts that you don't expose to _anyone_ however drunk you are.
This is great on desktop, but I don't think it scales smoothly down to the available space on mobile.
AppCleaner is free.
Sorry, can't find it now. It's somewhat related to papers about "Dark Triad" traits.