skysight-inc/HackerNews huggingface dataset:
Streak (YC S11) is looking for Front-End Hackers
We’re a YC summer 2011 company working on email. We’re two technical co-founders looking to bring on our first engineering hire. We can’t build features fast enough to keep up with users’ demands and our growth. That’s where you come in - we need someone who likes building product, pushing code everyday and making our service FAST.

- Code in freedom without worrying about IE!

- Work on Gmail - one of the most sophisticated javascript applications on the web - and make it even better for its 450M users and growing

- We’re building a complex web app, that means building frameworks and libraries, not just basic UI javascript

- Streak + Gmail needs to be crazy performant so we use all the features of the chrome dev tools (about:tracing, memory profiler, framerate profiler and timeline) - see http://news.ycombinator.com/item?id=4225977

Obviously:

- Great compensation and real ownership (both equity and over the product)

- We’ll make your life easier. Our benefits package is amazing

- We’re very well funded by elite silicon valley investors

Our requirements:

- you are intellectually curious

- you have built javascript web apps

Email us at first@streak.com if you're interested!
Interesting to see Google described as a "text ad giant".
Could you explain a little more why you didn't go for responsible disclosure to Onity?

In the article you suggest that you don't think they could fix it. Maybe true but shouldn't you (a) give them the oppurtunity to try (just cos you can't spot the fix doesn't mean it's impossible), and (b) give them the chance to say "yep, it's broken - give us 3 months to ship out new locks to all our customers" (yes, highly unlikely I know!).

Given that you sat on this for a year before publishing, there was ample oppurtunity to inform Onity before you publish.
Dude, get a history book.
>but rather implementing some rational gun laws.

Changing laws that could negatively impact millions of people because of the statistically extremely small amount of people killed in mass shootings is just the kind of overreaction the article is talking about.

If you want to debate gun laws you have to weigh the rights of gun owners with the rights of people killed every year. Our policies shouldn't be based on statistically insignificant, but emotional charged tragedies.

Even the Obama administration has said it is against calling for more gun regulation because of this.

This man was apparently very smart and motivated, there was nothing we could have realistically done to prevent this. Look at Norway, they have stricter gun regulation than we do, yet they still had a mass shooting with a death toll that dwarfs anything we've seen.
That sounds sweet. Congrats. Redis has been of great use to me.
Of course that may be YouTube (and Google's) whole point for making this change. "skipro865" calling you an "ugly douchebag" doesn't quite have the same feeling as having "George Jones" call you an "ugly douchebag".

This is almost certainly not the case. If nasty comments were problematic Google could ban badly behaving users or take other measures. Accountability and identity are not the same thing, Google is pushing for identifying you not making you more accountable. Google has other motives likely related to building more accurate profiles for advertising and building out Google+.
Desant - Open source landing pages system
'Become an XCoder' free eBook that is a fairly basic introduction to Objective-C and Cocoa programming.

'From C++ to Objective-C' is also good eBook. http://pierre.chachatelier.fr/programmation/fichiers/cpp-obj...

I also bought 'Cocoa Programming for Mac OS X' http://www.amazon.com/Cocoa-Programming-Mac-3rd-Edition/dp/0...

Cocoa is quite different than anything I had programmed before. Once I wrapped my head around nibs, IBOutlets and IBActions it was fairly easy. Once I got going, the apple developer docs were all I needed, but learning I found easier to do from a book than the docs.
utter rubbish. I know lots of black people who live happy lives in Berlin.
I've used bash all my life, but I am hooked on to fish's fish shell right now (http://ridiculousfish.com/shell/). The command prediction and auto-complete is amazing.
What a misinformed article! the passage easiest to shoot down is where the author shows that he thinks "the Ethernet" was some sort of network of networks:

>the Ethernet was developed to link different computer networks.

Does anyone know what aspect of Ethernet the author might be misinterpreting here?
In your testing, was MySQL too slow after proper indexing? I don't think you need to cache that sort of query. Personalized queries are usually not the best candidates for caching.
YouTube comments on videos where there's a new page of comments every time you refresh are awful, and not worth paying attention to. On a lot of types of videos, comments add absolutely nothing.

The one exception I've found is for music, where the plays on the video are between 10,000 and 500,000 or so. The discussion is pertinent and sometimes interesting, and I've had a couple of good back-and-forths on those kinds of videos.

I'm not sure if adding real names will help expand the number of videos where discussion is decent, but I don't think it will hurt.
Mountain Lion will be free for 30 days for new Mac owners
Ninja is a harbinger of great HTML5/CSS3 tools to come. We have been doing by hand what Flash animators have always had a great GUI for.

Montage, on the other hand, gets me less excited. It fills a niche that is already filled by tried&true frameworks like ExtJS, KnockoutJS, and BackboneJS and appears to be more verbose than all of them. Reusable components and event bindings are great though. It will be interesting to watch.
Regarding a., the background has changed immensely, given the US's extreme sabre-rattling 'with us or against us in this War On Terror' in the ten years leading up to the event.
Agreed. (and of course you were downvoted here). People love to hold Scandanavia up as an example as how the rest of the world "could be." However, I think that is such a naive point of view, and one that needs changing. Their populations are too small and lack diversity to make a realistic comparison to the USA or even their larger European neighbors.

I usually like Mr. Schriener's work, but this post is a little off.
Webkit is already a dominant rendering engine (36% plurality share) used on multiple platforms. Ignoring IE, which has historical problems of its own, Firefox is the only popular browser that doesn't rely on Webkit.

Take a look at this graph, and mentally add Chrome, Safari, and 'Mobile': http://en.wikipedia.org/wiki/File:Usage_share_of_web_browser...

While Webkit has advantages, and while I happily use Chrome for most purposes, I dislike the idea that a single implementation can become the de facto standard for proper rendering, perhaps even more so than the official spec.

1995 was almost twenty years ago. Not ten minutes ago, I tried to use a website which told me it required IE 6.0+ or Firefox. Do we really want to move to the days where websites will boast a 'Best viewed with Webkit' button?
First, as the article clearly states, many of the APMs are no longer at Google. So, there's no universal notion of jumping ship from Google to go to yahoo.

Second, I think it's ludicrous to dismiss the value of the connections and impression that someone like Mayer would make by heading up such a program at such company. In short, she's got one of the best networks of talent, many of whom feel indebted to her. I'd expect at least a few of them will be glad to come to Yahoo, if Mayer calls.
The viability of this depends on whether she can sell the idea of Yahoo Reborn. To do that, she's going to have to cull a huge number of bad actors from the existing management, PM, engineering, and design staff -- across the board.

The last big move like this I'm aware of was Steve Jobs' Apple take-over, where he managed to turn Apple into a bigger NeXT, and either shunt all the classic Mac OS people to the sidelines, or force them (as much as possible) to adapt.

It wasn't a perfect transition (see: Carbon vs Cocoa and attempts to retire Carbon internally), but it was a pragmatic one, and it worked.

I'm not holding my breath, but it would be a major coup if she can do the same. Unfortunately for her, and unlike Apple's acquisition of NeXT, Yahoo didn't acquire her previous employer -- this would have greatly facilitated the wholesale replacement of entire dysfunctional teams from a new, better talent pool.
I imagine there is some overlap in parts of the logic for Sentinel and repmgr (a similar tool for PostgreSQL). For example, checking to see if members of the cluster are in-service, and choosing a new master in the event of a failover.

I would love to see a generic tool for handing the clustering/failover problem.
You clearly are confusing things, because you acting like I am arguing against email confirmations. Your response basically makes no sense as you are ignoring the method I use, and creating a false dichotomy of "double opt in or not".

Your view of the legal situation is laughable. You are welcome to do whatever you like, but don't try to claim it is a legal requirement unless you are going to back that up with facts.

>I also dispute the point that you get zero emails about leaking the information that someone is registered. I have worked on project where that information was absolutely privileged and it was of utmost importance that no info about who's registered could be leaked.

It doesn't seem like you are trying to discuss this in good faith. Read my post again, I was pretty clear that privacy matters in some cases, but that I do not think it is the common case.
I'm sorry if you feel slighted, but I'm only attempting to dispel your ongoing stream of misinformation. And even after being corrected, you've persisted to the point where it's hard to perceive your behavior as anything short of intentional malfeasance.

As for the strawman in your latest comment, no one made any claims of "a flawless sandbox." I rightly pointed out that the security model of NaCl is far more robust, and you've offered nothing to counter that. Now, of course, software is going to have bugs, and the ones listed in that paper are significant. Fortunately, no combination of those bugs could have breached the outer sandbox, and would not have represented a real-world system compromise.

The origin of that paper also circles back to a very important point. We realize that we need to attack security from many different angles (fuzzing, sandboxing, bounty programs, etc.). And that paper you cited was actually the result of Google sponsored competition in 2009 against a pre-release version of NaCl. The authors were the second place winners, and have continued to research NaCl's security both as independent researchers and paid consultants. (One of them is actually presenting at Black Hat on NaCl security this week.)

My point here is that an objective read of the paper really paints NaCl very positively from a security perspective. Had you actually looked at the content rather than just made an assumption based on the title you would have been aware of that.
A quick Google and I came up with a very similar stylus on Amazon for only $15.[0] Or this one for $8.[1] Why should I pay $100 more for something that's essentially the same? What makes your stylus different?

As far as spreading it goes, social media (HN, Reddit, Facebook, Twitter) can do a LOT of the legwork for you, you just have to plant the seeds. That's much easier said than done, and a lot of it is going to rely on luck. However, if you put enough seeds out there, one is bound to catch on in the right place to get the attention of your target demographic.

[0] http://www.amazon.com/rooCASE-Capacitive-Stylus-Ballpoint-To...

[1] http://www.amazon.ca/Capacitive-Samsung-Blackberry-Playbook-...
Given the simplicity of the vulnerabilities (as mentioned in the article, you have full and unauthenticated memory access) and the length of time -- over a decade -- that these locks have been on the market, there is absolutely no doubt that they knew about this.

Given that, I felt that they would delay, delay, delay, and delay some more before finally going silent, at which point I would be forced to do this anyway. Simply put, I have zero confidence in their ability to mitigate this properly, and I believe that the only proper course of action is to make this public and let the hotels make themselves secure by whatever means possible.

I know that's a bit of a strange answer, but this is a strange situation; it's taken me a while to figure out the correct course of action, and I feel that this really is the best way for the safety of the public.

Edit: Toned down some of the wording; unnecessary.
That's about as much tech talk as there is in the whole movie - you may be disappointed. Bit of a storm in a tea cup I thought.
Nexus 7 gets smart covers for magnetic display sleep
Don't store reset tokens in database, PITA and not scalable. Instead HMAC sign reset URL, using Rails' MessageVerifier class for example.

The reset URL should also expire in about a day, so include and sign timestamp as well.

And the way we know this is good advice is that most large sites do it this way already.
MAME emulator disease: memset()
That is true, but even that has its caveats. Depending on who your target is, the user may be skeptical of a program "phoning home" on its own every so often.
For those unaware, Tesco is one of the largest supermarket chains in the UK, if not the largest.

Edit: They also have international operations, but sometimes under different names. In the US they are "Fresh & Easy" according to Wikipedia.
It's important to note that "Desktop Apps" in the windows 8 world are only going to be links from the app store. The developer / company will need to provide their own billing, hosting, deploying, updates, etc. Also, only companies will be able to get desktop apps listed in the app store.

For "metro style apps" i.e. apps that are full screen and run on the Metro version of the .NET framework, those get the full app store experience, and will be able to be submitted by individual developers (i.e. not full companies)

More information here:

http://blogs.msdn.com/b/windowsstore/archive/2012/06/08/list...

Also, it's important to note that for "metro style apps" you existing libraries will likely have to be rewritten. If you've architected your application well, and only need to change the UI of your app for a different platform, this isn't possible with Metro-style, as far as I can tell. Your libraries have to be of a special type - a "metro class library" - in order for them to be referenced by your metro-style app. So far, I've been very frustrated by this experience and may just bite the bullet and go with the other hosting option.
Show HN: MacOSX Preferences pane for MongoDB
A lot of the W3C specs are actually so poorly specified that none of the browsers can even figure out how to implement them. E.g. in CSS the width of a pixel is defined relative to the length of each user's arm.

Once upon a time the W3C site pointed out that they did not define standards. They offered recommendations with the idea that people would implement them, see what worked (or didn't), and at some point a standards body (ISO, ECMA) would issue the actual standard.

However, so many people keep referring to W3C recommendations as standards (mostly as a way to brow-beat people into following one or another preferred practice) that the W3C changed their tune and decided to go along for the ride.

Instead of seeing W3C TRs as the last word we would be better served if people viewed them as (likely) incomplete works-in-progress on the way to ironing out well-defined standards.
I just used the top post in this thread.
http://www.avc.com/a_vc/2011/04/finding-and-buying-a-domain-...
Made the owner an initial offer of $750. Didnt hear back from him for a month. The guy countered with $10,000. I used the language in the post above and he agreed to my highest range price of $1500 (I never moved past my first highest range price).
How I Learned to Stop Getting Distracted and Love Productivity
"a founder of XYZ" has the same meaning as "a co-founder of XYZ", but it is potentially more confusing.

Either ask him to use co-founder or simply call yourself "a founder" as well. If he's using "the founder" that's just not cool, so tell him so.
Little hard to lock the door with door chains while you're not in the room.

Hotel occupancy is a lot lower on the weekend. I'm sure many people living in hotel rooms with more belonging than can fit in the safe will appreciated this information being released on a weekend.
Maybe I'm missing something here, but wouldn't it be relatively easy to defeat a timing attack by sending an HTTP response with the standard "Email has been sent" message BEFORE the db lookup, irrespective of the data received?
This is cool but it's basically just theft, isn't it?
You can always count on nirvana to come up with the maximal libertarian argument. What proof is there that this is a government created monopoly? What exactly is the "violence" that Austin would do to competitors? Do libertarians not believe in the concept of natural monopolies?
Love that you have Stylus and LESS, will Sass and SCSS be implemented sometime as well?
Because you wind up in a position with a large number of underemployed people missing just the right skill and a large number of employers who can't seem to find anyone to hire.
If we're still talking about him half a year after he's gone he must have gotten something right. I think something that techies don't see is that Jobs real gem is Pixar, a company that Lucas couldn't make work and a company that became Disney's animation studio. My bet is that as these devices go from being cool gadgets to the mundane that Jobs will be remembered for those Pixar films which will seem charming even if their technique is crude next to animation in the year 2032.
Exactly. Ask him first, then if he doesn't see a problem with it after explaining your side, write an entry on the issue somewhere so that you can point people to it later. Blog post, etc.
Auto Rapping (as in automatic rap music)
Three strikes rule has 'halved piracy' in New Zealand
>trust the physical

A lock-picker might say different, no?
Yes, this does work, but it would be far easier to use the standard zero-weight "Grocery item" barcode that most supermarkets have (Sainsburys and Coop do) which prompts for a price with no checksum.

(* if you were just intending to scam your supermarket anyway...)
What about the London tube/bus suicide bombings: those were domestic terrorism and elicited a distinctly different response than we're seeing in Norway now. Or is it only domestic terrorism when the perpetrators are white one wonders!
The Bay Area is the center of the universe of software development. Not that you can't work as a software engineer elsewhere (I have) but you have a limitless amount of interesting work here.

And while costs are higher, salaries are much higher as well.

It's absurd to act like a $500k payout puts you on easy street.
Dedicated, preplanned rental can be done much more cheaply from conventional car-rental places. If you're on a business trip your business probably has a deal in place with one of the big companies, and you probably want to just have a car for the whole trip and not worry about it - especially since you're going to be expensing it anyway, and neither you or the expenses department wants the trouble of figuring out exactly how many hours of car rental is reasonable. Zipcar's great advantage is for unplanned, one-or-two-hour rentals (often because you need to transport something bulky, which a business would have specialist ways of doing), which is far more common for private individuals than businesspeople.
Interesting. That API could be very useful, but they're going to have to watch out for BlackHatters - I bet they are already looking for ways to exploit their system.
Why a Commercial Airline Pilot is Banking on Domains as Well as Planes
Ridley has a hidden agenda here - he's a global warming denier and he emphasizes confirmation bias to explain how all the climate scientists got it wrong (unlike him).

Look at for example http://en.wikipedia.org/wiki/Matt_Ridley#Views_on_climate_ch...
"I see confirmation bias everywhere in the climate debate"

The cliche he derides that "scientists love proving themselves wrong" is a cliche of the climate debate to argue that the whole field of climate science is unlikely to be rotten (personally I think the point is more that scientists love proving their colleagues wrong).

There's a endnote identifying the article as "The first of three columns on the topic of confirmation bias" so I wonder if he'll do a big reveal of AGW-denial or if he's just trying to sow subtle seeds of doubt in the background.
Git Smart HTTP Support
It reminds me of this xkcd http://xkcd.com/327/
Probably not.

Wait until you see the flaws, man. Not being robbed is sort of a matter of being slightly more tedious to pick than the next guy.

The stuff Daeken has worked makes it ludicrously easy.
> "The internet is not a budget strip-mall of different low grade outlets; it's more an orchard full of fruit you can discover and pick at will from millions of trees."

Maybe it's just me, but I'm having a difficult time trying to comprehend how this statement relates to your argument. Some perspective please?
How to Get More Out of Your iPhone's Home Screen
Yes. It's already somewhat common elsewhere in the world, by simply printing new barcodes for other sku's, sticking it on an expensive product, then hoping the cashier won't notice (they often don't in a store with a lot of different products, like Wal-Mart).

The charges are different, though, since it's fraud and not outright shoplifting.
A similar, simpler method is used by the deli, bakery, meat, seafood, and produce departments in most US grocery stores. Usually they use 2 sets of 6 digits for these bar codes, with the price as digits 8-11 in the bar code. The bar code doesn't work with items, such as holiday roasts, costing more than $100.

x x-xxxxx-x$$$$-x x
Simvla - The blogging Network for Designers and Developers
Simvla cultivates a community of creative Designers and Developers to share their experiences and create a huge resource of the most diverse topics. We try to deliver the best content from up and coming as well as established creatives from around the world, and pull it all together in one location. As a network, we provide our members with a clear and responsive front-end design, a minimalist custom cms, and all our effort in terms of pushing content to the world trough all the relevant channels available. All this baked with free state-of-the-art cloud hosting, markdown syntax, your own domain, powerful analytics tools and several features to be deployed as we grow.
While that is a very interesting point, she'll have to leverage it soon and with some impressive finesse to make it have any practical effect. It's still going to be one hell of an uphill climb.
The EE Poster Kickstarter: A Postmortem
I'm not the OP but there are a bunch of options:

- C++ (with all of the variety of GUI frameworks)
- Delphi
- Java
- D (again with GUI frameworks)
- Python
I have read almost 1/4 of this guy's book--Trust Me, I'm Lying--and it is actually interesting. He rather explicitly describes the process by which he has manipulated the news media for various clients, including American Apparel (he is the guy who makes those "controversial" ads), by feeding or leaking info to blogs (his definition of a "blog" is very broad) and then working those stories up the media food chain. There is lots of puffery and some of it will trigger any reasonable person's b.s. detector, However, a lot of it rings true and he definitely presents a lot of interesting nut-and-bolts ideas--that may or may not actually work.

As to financial results, I can recall one instance where he specifically identified a link between a campaign and financial results. Whether you believe it is another matter . . .
I'm being unreasonable about working on projects