skysight-inc/HackerNews huggingface dataset:
I second that. I mapped a specific trackpad gesture to 'Command-W' (using BetterTouchTools). Now when I perform my crazy gesture on pages like http://www.hnsearch.com/search#request/all&q=hello or http://try.github.com/levels/1/challenges/1 , it prints a 'w' in the text bar instead of closing the tab. It really bothers me.

It has legitimate uses though, I'm not saying it shouldn't be used. But please use it only where it makes sense.
This is cool. Now add age and sexual orientation filtering!
See also http://keithcirkel.co.uk/jwerty/
As a current Udacity Student I believe that we are reaching (or have reached) the tipping point for online education.

The Udacity classes are very informative and relatively engaging (love the lecture quizzes), however, I do believe that there is still a lot of room for improvements.

On another note, I am pretty excited about the upcoming local Udacity Meetups (http://udacity.meetup.com/).
Six-ish Months of eBook Sales: Riak Handbook
Thanks! It has been quite a ride so far :D
Another document worthy of some study is http://lcamtuf.coredump.cx/postxss/
I think there is no way to change this behavior: https://developer.mozilla.org/en/DOM/KeyboardEvent#Auto-repe...
Backbone.js Application Walkthrough Part 1: HTML and Models – Video Tutorial
Singularity U, or Singularity Woo?
Injuries are a part I hadn't thought about. Common injuries in that part of the body are: shin splints, achilles issues, plantar fasciitis, calf pull, compartment syndrome, and stress fractures.

I know of at least two athletes for each injury who have either missed training time, an entire season or a career. Injuries are incredibly common in track and field: and make no mistake, there is no emotional-movie-style strength that allows an athlete to overcome their injury due to sheer force of will. Track and field is an 100% sport: if you aren't at 100%, you aren't going to win. A lot of the sport is managing and preventing injury, especially at the elite level.

While I would reason that "upper leg" injuries like hamstring, glute, hip and quad pulls are more damning and common than "lower leg" injuries (especially among men), and that upper body injuries like arms and abdomen are nearly unheard of, being able to write off an entire class of injuries is a huge bonus.

I also didn't mention strength over time benefits: the ability to have a consistent power output of a critical part of your stride (the toe push) that is unaffected by fatigue is very helpful.
I appreciate that the headline on HN has been toned-down from the original. The word "bioterrorism" definitely doesn't apply to what may be going on here.
On Go
Salts do absolutely nothing to make cracking take longer.

The length of the salt might incur 1-2 additional calls to the SHA core permutation function, which is nothing.
I wouldn't have noticed it - thanks, made me smile. :)
Specifications can have bugs or deficiencies, and in those cases diverging from the specification can provide a net win. Also note that in this case the specification considers the cross-origin restrictions optional, not mandatory.

In this case, prohibiting the loading of fonts from other domains (unlike img, video, audio, CSS, script, etc) seems both unnecessary and harmful.

As I understand it, that bit of the specification exists for the sole purpose of mollifying large commercial font foundries, who consider themselves the only source of usable fonts, and who consider this particular point an existential threat.
Why not Apple has plenty of lawyers and wants to disuade other people from trying the same thing?
Here's What Facebook's 'Want' Button Will Probably Look Like
Any article that says you need to carefully generate cryptographically random long salts shouldn't be trusted. No modern password cracking technique relies on predicting salts. Think about this for just a second and you'll see why.
Historical Chip Pricing now on Octopart
Ask HN: Where are the most hackathons listed?
Living in Berlin, this is not the worst place to find a hackathon event, unfortunately I haven't gotten to any yet.

What are good sites to find upcoming hackathons, where are the most listed?
Yes! This is a great paper which made surprisingly little noise given how important it is.

The idea is: stipulate that no attacker can ever inject Javascript into a browser. Assume we solve that problem completely. Now, how secure are DOM-based applications? Turns out: not that much more secure. Lots of very clever examples.
In times of ever increasing mobile web usage dropdown menus should be abandoned since they rely heavily on the hover state which doesn't exist on touch devices.
Dash for Mac - Enjoy spending time with your code
"""
Engineers responsible for testing, bug fixes, and post-launch maintenance of their own work. there are some unit-testing and integration-testing frameworks available, but only sporadically used.
"""

Sounds like a lot of code debt accumulating that could bite them hard down the road - it's one thing to write and manually verify bug free code, it's another for a different engineer to make sure he/she doesn't break that code inadvertently a year later when the original author has moved on to another project or company. I'm not talking about 100% test coverage; if the smoke test for a feature breaking is someone noticing while playing with the site, in the long run it strikes me as a much less efficient way to verify and fix regressions than using an automated test suite. Writing good tests is hard, but keeping a product bug free as more and more functionality accumulates without automated test suites is even harder in my experience.
And on my Swedish keyboard you type "[" with alt-8, so when I press ctrl-alt-8, all bets are off.
Ah. So it's not the use of cryptographic tokens per se that you're objecting to -- just that they're not generated and/or handled correctly.
I object in general to the widespread practice of using tokens that contain semantically interesting information protected by encryption.
Loading fonts from another domain requires that domain to explicitly whitelist your use as acceptable, using a CORS (cross-origin resource sharing) policy.

~$ GET 'http://fonts.googleapis.com/css?family=Muli:300,400' | grep src:
src: local('Muli Light'), local('Muli-Light'), url(http://themes.googleusercontent.com/static/fonts/muli/v4/zR-6QGMCFX5j-6nbH_HpIQ.ttf) format('truetype');
src: local('Muli'), url(http://themes.googleusercontent.com/static/fonts/muli/v4/BfQP1MR3mJNaumtWa4Tizg.ttf) format('truetype');
~$ HEAD http://themes.googleusercontent.com/static/fonts/muli/v4/BfQP1MR3mJNaumtWa4Tizg.ttf | grep '^Access-Control'
Access-Control-Allow-Origin: *

Google uses "Access-Control-Allow-Origin: *", but another site could easily provide customer-specific URLs and use "Access-Control-Allow-Origin: paying-customer.example.com". This restriction on @font-face exists for exactly that reason, which explains why browsers other than Firefox have intentionally not implemented it.

I wonder what it would take to get Mozilla to reconsider that decision? This doesn't seem like a point worth diverging from other browsers on; in this case, the other browsers got it right and Firefox got it wrong.
Very cool, I might give it a few days to see if someone writes an article so I'm not totally on the bleeding edge, but otherwise I'll give it a look myself. Thanks Laurant, I've been working with your code since my Brainjuice days with Blogo glad to see ruby + osx continuing.
Google to push ban-lifting patch to all Galaxy Nexus devices
NFTE is a fantastic organization, I've done a bunch of work with them over the years in their Boston office as part of their advisory committee and actually was in the NFTE program as a high school student over 10 years ago.

This is the first time I've seen NFTE Launch, I just reached out to the New England folks to see if we can do something similar here.
> benefit of using a number like 0xdeadbeef over, say, 0x1857de89

I remember a blog post of someone who ran the whole dictionary through 'l337sp34k' filter. The best word they found was 0xdefeca7e.
It would fit the pattern of the iPod if Apple started moving into the lower dollar ranges with new products. Since the article demonstrates that most apps will be fine, it seems like a reasonable win. The retina display is nice in the iPad 3rd generation, so they have a clear differentiator between models besides size.
Seems quite similar to mega menus (http://www.useit.com/alertbox/mega-dropdown-menus.html)
Minneapolis claims that in the majority of cases, video of police encounters exonerates officers and eliminates frivolous claims.
Thought this article had a number of good tips and insights. Much appreciated.
Before Bridge, your two options were:

1. Pay per message at Pusher/UrbanAirship to use their internal systems optimized for messaging.

2. Do it for free writing your own messaging stack using some combination of Node.js / Socket.io / RabbitMQ / ZeroMQ / etc.

.

I liken it either getting fully a written TCP/IP socket client and paying per connection (crazy!) or writing in your own bitstream and ensuring protocol compliance (also crazy! -- easy to get wrong, takes globs of time away from the actual app you want to write).

Using the base level protocol with RabbitMQ / ZeroMQ requires a great deal of design to even achieve something barely production-ready.
What the folks here did was use their expert industry messaging knowledge and wrote a messaging protocol that takes care of all edge cases, protocol peculiarities, performance refinements.

The result is a beautifully crafted work of art that provides hyper efficient messaging.

.

The part that sold me completely was the fact that these guys don't charge per message. Better than that, YOU get to control your own server. You handle uptimes, downtimes, and all things that come with owning your server. You don't get locked in.

The tradeoff of complexity + price + handholding goes as follows:

- Pusher / UrbanAirship (Charge per message)

- Bridge (Charge per core you run)

- Write your own Node.js / Socket.io / RabbitMQ, ZeroMQ system (Free)

.

I've been using Bridge's predecessor (Nowjs) for about 9 months now and I can unabashedly say I love Darshan and his team. Countless times they gave me invaluable advice for setting up a real time messaging system and ways to optimize it.

If you decide to use Bridge, rest assured, you will be in good hands.

.

TLDR: This new service is magic. If you don't want to be charged per message and want full control over your messaging node, Bridge is at the cutting edge of cost structure + technology.
This may now apply now though.
http://en.wikipedia.org/wiki/Betteridge%27s_Law_of_Headlines
How To Protect Fix And Check DNS Changer Malware Infected Computer
When CERN presented their findings they used the Comic Sans font, so I guess you could say that Microsoft also played a role in discovery of the 'Higgs boson'. Ha!

Maybe the EU geocities was rife with teenage girls using Verdana, and Europeans secretly snicker at slide decks made by American physicists.
The problem with the current patent system is that it treats all patents from various industries (software, manufacturing, biology, chemistry, science, business, etc) exactly the same across the board and applies the exact same rules to all of them. While an overhaul of the whole patent ecosystem is needed and long overdue, I think the quickest/easiest way we can get rid of majority of patent trolls is to start having different rules for different categories of patents.

A couple of examples I can think of:

1. A patent with a tangible product will last for 20 years but a software patent should only last for no more than 5 years.

2. A medical methodology process can only be patented by an individual/company after showing evidence of the research put into it by said individual/company where else a software methodology process can only be patented if the patent holder is actually utilizing the patent as part of their business.

3. Manufacturing patents can be granted without actually showing the actual real-life process (and obviously it needs to be a novel approach and has no prior art) but all software patents need to be developed and attached a demo of the software patent in action (not just pictures and descriptions) as part of the requirement for the patent to be granted.

What do you guys think? I believe setting different rules for different categories will quickly elevate majority of our tech patent woes.
There's some other fun spellings using "8" = "ate", like 0xdefec8ed and 0x8badf00d.
> does not mean that the UX is somehow awful for every person using it.

Oh I know - I was merely giving my own opinion.

> Why don't you just look around for some program to do what you want?

I'm not allowed to. This is a business computer, not a personal machine. Not everyone has the freedom to install third-party software to fix up bad UX in the OS they are using.
But I think that's the right solution.

For most websites, I will leave. But for web "apps" like Google Docs, or GMail, or my company's internal apps, I want to use application-style keyboard shortcuts like Ctrl+S and Ctrl+T and Ctrl+N. I want Ctrl+N to create a new document inside my application, not a new browser window.

The best solution would be to ask users to give permission to a webpage to overwrite native keyboard shortcuts for their own uses.
Except that Android doesn't (sadly) have GNU userland.
> You can ungroup windows in the taskbar with 7 Taskbar Tweaker http://rammichael.com/?proj=29

Thanks but it's useless for me as I'm on a business machine with restrictions on allowable software installation.
In regards to already accepted 'prosthetics' such as spikes and suits in swimming, perhaps it should go back to the way the olympics started? I'm not being facetious, but it is going to start cropping up more and more. They don't have to be completely naked, but just covered up so that nothing a person wears affects their performance.
This article is total linkbait. They redefine "malware" to create a sensationalized headline. The article never mentions what the consumer facing features were suppose to be. It could have had a legitimate use, but also this privacy violating code. This is more properly an app that violates user privacy - which is not something new or particularly newsworthy - and not malware.
The cynic in me is waiting for the day they start releasing Russian internal communications and state secrets. I don't predict Russia's current government would react to that with words and legal action... or, at least, not just that.
How does the server send SMS as if it came from the user? I've never heard of that ability before.
I doubt a 4" iphone, mainly a lot of people here assured me that current iphone size was an ergonomic magic dimension for palm.
For large banks, it has been for a while. #justsayin
Google "municipal bond price fixing" for another big ripoff the banks have been running...
This wasn't always the case.
HotelTonight is looking for Senior Ruby Engineers, Mobile Devs, and Dev Ops
Hi HN,

Want to build and scale mobile apps that you'd use and tell others about?

HotelTonight is a last-minute hotel booking app for iPhone, iPad and Android. We help top-rated hotels sell their unsold inventory and offer consumers up to 70% off same-day bookings and the opportunity to travel more spontaneously. Users love our sleek design, amazing deals and incredible ease of use (3 taps and a swipe to book). In just over 1 year, our app has received more than 2.5 million downloads and expanded to the UK and Canada, with many more US and international locations coming soon.

We have an extensive Ruby backend that is scaling up rapidly. The team has 9 engineers and 3 designers now. We are looking for smart and collaborative Ruby Engineers, Mobile Developers, and DevOps that want to make an impact at a promising start-up. You should be senior enough to make sound architectural decisions, contribute to code reviews, implement major features, mentor Junior team members, etc.

Please send email to grace@hoteltonight.com or click here to apply:
http://hire.jobvite.com/j/?bj=oM07Vfwy&s=Hacker_News

For more info:

TechCrunch: http://techcrunch.com/2012/06/05/hoteltonight-23-million-series-c/

Interview at LeWeb during our London Launch: http://www.youtube.com/watch?v=dxxRe_d1inE&

Comparisons: http://abcnews.go.com/blogs/lifestyle/2012/04/using-hoteltonight-for-a-hotel-tonight/

http://hoteltonight.com/
> Sometimes I do wonder why people decided to use a new language for a critical/important piece of their product while learning on the go as well.

Because flying by the seat of your pants, making shit up as you go and putting something into production without any real understanding of what the fuck is about to happen is one hell of an adrenaline rush.
Hasn't it always been a fairly well established business model? If anything the success of this model means we're seeing it more and more in ever more gigantic failures. Whereas before it seemed confined to snake oil salesmen and politics...
4(iPod touch and iPhone), 7.85, 9.7 = Apple trying to do to tablets what they did for MP3 players.

Dominate every possible price range with a slightly more expensive and greatly superior product. Dominate the supply chain and maximize profits. People are willing to pay the $100 premium is Apple makes a better product (No, I don't want a iOS vs. Android discussion here).

I'd say, the 7.85" is coming out soon. Also, the PPI argument has been out through DaringFireball for months now. This isn't a recent find.
I think they're looking for volunteers.
It's a mess (the core problem is that the X server automatically generates release/press event pairs to implement key repeat which can't affirmatively be detected as "synthetic"). But it's handlable heuristically.

The way I've seen it done it via a timeout on "release after a long press". If the key has been down for more than ~1 second, then hold off on interpreting a release event to see if there's a matching press already queued in the pipe or not. The timeout can be very short (the X server sends them both synchronously down the socket with no delay).
Working for the public defender in California and volunteering with prosecutor's office elsewhere.

Blue states have high-quality public defenders because they receive adequate support from the state. Certain Southern states also have high-quality public defenders, as a result of the civil rights movement (for example, Atlanta, Georgia).

In a lot of smaller counties (including in California), public defenders are private lawyers operating under contract (because there is not sufficient need for a full-time public defender). They're usually selected because they are extremely competent and/or have cozy ties to the D.A., but either way, they also produce good results.

Not all public defenders are good. In some states (specifically Ohio and most Southern states), public defenders are employees of the "county" but are paid minimum wage base salaries and receive the bulk of the compensation as commissions per-case (regardless of outcome). In those states, public defenders generally have little to no budget to hire experts or investigators, but face off against prosecutors who have essentially unlimited resources (and market-rate salaries with pensions). As a result, these public defenders are overworked and simply do not have the time or resources to do a good job on any of their cases.

If you're looking for the actual numbers, I don't know of a freely available source. There are usually a few law journals that publish these stats every year or two, but my current legal database subscription does not include access to these journals.
The final note about flick motions seems interesting, I could see some useful finger gestures while you are typing. For instance, taking all your fingers off the keyboard and spreading them wide, or putting them all together, could do different things. Just having that could be really useful. I am not the most creative when it comes to new applications, i am curious as to other applications for these.
Prior art: Smalltalk MVC.
Reference: Krasner&Pope, 1990 [1]

[1] http://www.ics.uci.edu/~redmiles/ics227-SQ04/papers/KrasnerP...
It's been a while since I last used Firefox, but if I remember correctly, Ctrl/Command-K is a shortcut for your homepage.
That was a really interesting analysis. A malware scam with a global reach. A phone designed in California, malware written in Russia or former soviet Republic, and Banking routed through Singapore. I gained a wealth of knowledge.
I've been moving around a lot lately myself and been looking for something that can help solve the same problem, but the thing is the problem is quite complex. Where we want to live isnt necessarily somewhere we can afford, and somewhere we can afford, isnt necessarily where we should live. Then there is consideration of amenities and distance from relatives and so on.

Given all these variables and equations if everyone had an app that helped them pick the best spot, my guess is, some areas would get focused on much more heavily than others causing a rather skewed increase in demand for some areas.

Anyway, maybe just going on off a tangent here, but certainly the idea could do with further exploration.
That's the risk that app developers are accepting by agreeing to Apple's system. I'm sure there will be a financial hit for something that is out of their control, but what other choice do you have if you want access to the largest mobile platform economy?
These are fun. "Fish" works too. Did you know that fish buffalo buffalo buffalo buffalo buffalo fish? I think that any sentence of the form "(buffalo|fish)+" is valid in at least one way.
The most interesting thing about the Nexus Q is that it enables sharing a device. That is, it has the ability to temporarily use accounts from Android devices.

It can run Android apps, so it is, in fact, an Android device. It isn't tied to an individual. If this is well-implemented and secure, it's an interesting aspect of the Android OS that hasn't been exposed in other Android devices yet. If it is possible to build a similar system from the AOSP code-base, that would be very useful for people with a less-dogmatic idea of a feature set.

Most other aspects are, as Pogue points out, full of WTF.
i don't understand the anatomically implausible part

i don't think it's yoga pants

lot of people can call you honey. some even use it just to reference other people. like darling is used UK (most annoyingly, gordan ramsay)
I love the friendly cartoons on the website. It does make a difference!
Can you walk us through the math you did to arrive at the following conclusion?

A 7.85" iPad could have the exact same resolution as a non-retina 9.7" iPad and still have the same pixel density as the iPhone.
Fighting Ignorance with Videogame Addiction