skysight-inc/HackerNews huggingface dataset:
Also, using sha1_hex(secret+...) and calling it HMAC is a slippery slope (see http://netifera.com/research/flickr_api_signature_forgery.pd...). Although it's seemingly not exploitable due to the structure of the data, look into using a proper HMAC (RFC 2104) to prevent length-extension attacks.
About taxi meters: from my experience, the mileage may be fixed, but it always seems that the cab driver is able to press something/manipulate the box somehow when they need to add additional fees (in Boston, specifically, in fact).

For instance, when I get picked up at many airports the cab driver adds some additional fee (usually between $3 and $8). For all I know, they're just making this number up - how would I know what the toll at the airport exit costs?

Also, many cabs have a list of flat rates for common routes (from Hotel X to airport - $35, etc.) It seems that in these cases it would be independent of whatever the meter says.

I guess these things make it seem questionable to me how much regulations on metering can actually matter. Is it just a matter of "if we catch you doing this (ie. someone reports questionable activity), we're going to revoke your license"?
Live by statistics, die by statistics
AWS CloudFront also supports persistent connection pooling to the origin.
Nothing matters more than ubiquity. Let me
channel the old Steve Ballmer for a moment:

Ubiquity! Ubiquity! Ubiquity!

I learned to program with BASIC in the 80s. Somehow I survived, though old-school BASIC was like a clay tablet compared to JS. (Get this: No functions, all global scope. It was like assembly language but with less power.)

But BASIC was awesome because every microcomputer had it built in. Walk up to a machine and start typing BASIC. I must have typed in the same program 20 times.

I remember spending 45 minutes with this random Wang terminal thing at the local library, trying to find BASIC. I never did, of course, so I remember concluding that it was probably broken. I'm still not sure I was wrong, exactly. ;)
I'm doing something very similar to this, the setup I'm using is:

DNSMadeEasy has a global traffic redirector ( http://www.dnsmadeeasy.com/services/global-traffic-director/ )

That then sends a request to the closest Linode data center.

Linode instances run nginx which redirect to Varnish, and the Varnish backend is connected via VPN to the main app servers (based in the London datacenter as the vast majority of my users are in London).

I use Varnish behind nginx to additionally place a fast cache close to the edge to prevent unnecessary traffic over the VPN.

Example: USA to London traffic passes over the VPN running within Linode, and the SSL connection for an East Coast user is just going to Newark. If the requested file was for a recently requested (by some other user) static file, then the file would come from Varnish and the request would not even leave the Newark data center.
There are a plethora of Android devices available from more OEMs than the few that are shipping Windows RT devices. I don't see that changing except for the fact that they're not selling very well.

http://en.wikipedia.org/wiki/Comparison_of_Android_devices#T...

>Unfortunately, all the mentions of Microsoft working together with OEMs in developing single-chip touchscreens and so on may indicate Microsoft will want to limit availability of competing devices with different OSs

How will that stop Google from developing whatever they want in conjunction with the OEMs? Not to mention collaborating with their subsidiary Motorola. I don't see how Microsoft can limit that even if they wanted to.
So, I don't actually disagree with the brunt of what you have said here (that if someone has an issue with something that it might be valuable to tell other people in the communities you are a part of who might care); however, it doesn't really apply to this article: my response is attempting to directly answer the question posed in the bold text at the end about "how to get things resolved".

Now, that said, I actually do believe people "rallying troops" is often knee-jerk and incorrect vigilante justice masquerading as valiant. It isn't always the case, and there may be places where such behavior is legitimate (although I think figuring that out is an interesting and horribly long off-topic discussion). It certainly, though, isn't always positive.

As an example, there person claiming on HN a couple days ago that Apple must be storing passwords in plain text because of a 32-character password length restriction[1]; I doubt that was actually the case, and much more argument and research should have been made before trying to incite such panic.

(edit: Hell, I didn't even notice that you did it yourself here until I saw the response from Fargren, but you just did it, too: there is no reason to believe that 1&1 "stores these user passwords in plaintext". It is much more reasonable to believe that they have a box on their end for "customer password" that verifies it using the same mechanisms the website does. It is not at all reasonable to "rally the troops" over assumptions.)

Again, however: that is not what this article was about; this article was not attempting to "rally troops", this article was asking for help making progress with an account they have at a vendor because the OP "make a point of never, ever, ever giving [his] password out to anyone" (emphasis his).

After all, you can still "rally the troops" after you get your job done: you can change your password afterwards, you can even change your password beforehand as borlak indicates (although that implies your password was important, which is already a mistake), you know this person is a real representative to within any reasonable margin of error; the morale stance here was just stubborn. :(

[1] http://news.ycombinator.com/item?id=4376029
just use joypad instead. joypadapp.com :-)
I think they're getting downvoted for being incorrect.

I can't find any info about KA moving to closed source.
This essentially makes your phone into an OUYA. Awesome. I hope these guys can capture some of the furor that fueled the OUYA kickstarter. If this takes off it will seriously change the face of mobile gaming.
To be honest, I've asked customers for passwords over the phone before. Usually it's because they have called reporting a problem with their email, now about 70% of the time it's because of a problem at their end but I have to humour them anyway.

Now I can of course access their mailbox by going into a shell on the server but the quickest way to check everything and satisfy the customer is to setup their email account on my computer and check I can get it to work.

Since the passwords are securely hashed, the only way I can do this is by asking for the password from the customer.
It should be pointed out that this would only be required if you are using this password for other things that are important (as in, you are sharing your password with other accounts) or your password is somehow precious and special (like the name of your favorite dead aunt): you shouldn't have to do this, as your password should already be something "stupid"; changing your random password to something else random when you are fully intending to just change it to something even further random again is a waste of time. ;P
Thank you for pointing that out. That's actually more interesting than a seemingly useless joystick. :)
Personally I think it is hilarious to say things like "ampersand" or the "little carrot arrow thing err.. you know shift six" over the phone. I once had to leave my password in a voice-mail to my nurse, she told me "most people just make it something simple like their doctors name you know." I refrained from launching into a tirade about the importance of strong unique passwords.
So he's redefining delegation in your own sense (implied by his strange titlebait "The Gang of Four is Wrong") and then criticizing everyone else post hoc?

I fail to see how this deserves any upvotes.
I took a do-it-yourself approach and built my own stand-up desk using parts and tools I bought from Home Depot. It cost me 52 dollars and 3 hours of labor. I had a lot of fun and learned some basic carpentry skills in the process!
(Hello fellow Seattlite!)

I'm with you here. I rarely take cabs here in Seattle (I mostly bike/bus everywhere), but when I travel it can be indispensable.

I can't tell you the number of times I've had to (look up a local cab service and) call a cab, wait for it for 10-20 minutes... and not have it show up. Or schedule a cab to be there to pick me up early in the morning and take me to the airport and... not have it show up.

Three clicks on my phone and 2 to eight minutes later, there's an Uber.
You might also be interested in the concept of regulatory capture, which is kind of rent-seeking's opposite (IANAE). Say you have a company that provides web-security audits and you help press for a law requiring websites to have current security audits. Boom, guaranteed business.
Except Uber isn't a cab, it's a private car service, which is generally less regulated. Rates for private car services are generally negotiated between the driver and passenger, and if both parties agree to use Uber's GPS-based software, I don't see what Massachusetts's problem is.
does this require lion like the earlier beta installers did?
HireArt (YC W12) is looking for a Rails dev in NYC
HireArt is a software-automated employment agency. We believe that higher ed and the labor market are fundamentally out of sync, and so we're creating a new type of online job application that emphasizes skills rather than pedigree. We're a recent Y Combinator grad looking for an engineer to join the co-founders. This is an opportunity to strongly influence our product at an early stage, and we hope that you'll take on a leadership role as we grow.

We recently raised a big seed round and are offering a competitive salary and generous equity.

Skills

Rails experience is a plus but not required. We're looking for someone who's literate in the full stack and is particularly strong in at least one of:

* HTML/CSS

* Javascript

* A scripting language (e.g. Perl, Ruby, Python, PHP, ShellScripts)

We also hope you're as excited as we are to tackle new problems in:

* Online education

* Labor economics

* UX and UI

* Psychometric testing

* Recruiting

About HireArt

HireArt is rethinking the hiring process in a way that emphasizes skills rather than pedigree. Candidates submit our common app, which require them to do real work (e.g., create a PowerPoint, record a video sales pitch). We use a mix of humans + technology to evaluate our applicants and match them to jobs.

We've already gotten tons of people hired for jobs they love and candidates spend hours at a time on our site. Employers (including big corporations and some of the best start-ups in Silicon Valley) say we're saving them time and money and we’re earning real revenue after just 6 months.

Email jobs@hireart.com
Relocation welcome!
Is it just me, or do all the green usernames commenting on this with such unbridled enthusiasm smell of "Voting Ring" and/or astro-turfing?
Tutorial: Use IFTTT to publish github articles to Wordpress
Just the same, at my first internship I has bosses with Bachelors or Master degrees in CS that had those problems. One went so far as to call version control itself "a problem"...

I think its really up to the individual person to gain those skills. If you don't care the concepts won't mean anything, even if they're spoon fed to you by a university professor.
I've been running systemd on my computers for a few months now, and it's great. Dramatically accelerates my boot times, easy to configure, and easy to use. The only problem I've ever had is when a daemon doesn't include a systemd unit file, and I imagine official migration will include resolving all the remaining cases of that.
It's a pointless question as it is absolutely impossible to predict. So we continue to attempt to save them all. They will make other contributions too, or their children.
Ask HN: How do you stay on top of bills?
What is your process for staying on top of invoices/bills to be paid? How do you manage this if you are in a team?
Mozilla removes -moz-opacity; man threatens to sue for $18,000
If both definitions of 'delegation' end up having the same purpose, does it really matter? Why should I care that Rails' 'delegate' isn't exactly how some guy in 1970 would've written it?

This whole "object-orientation" bent in the Ruby community lately just feels like a crusade, with people thumping on old OO books, each proclaiming theirs is the "true way". And, usually, like in this example, it doesn't even matter because their code ends up doing exactly the same thing with little real-world gains in readability or ease of understanding.
I'm the author. I'm not redefining delegation. I'm pointing out that the Gang of Four, who cited Henry Lieberman who created the term, described it incorrectly. You can read the citations in the Design Patterns book and see exactly what they got wrong. Here's a link to Lieberman's work http://web.media.mit.edu/~lieber/Lieberary/OOP/Delegation/De...
Introduction to Popup Boxes in JavaScript
And/or how the World Wide Web was intended to function.
Seems like a Pinterest for words instead of pictures.
Yet another device that interfaces through the audio port.

I think it is tragic that Apple's restrictive approach to hardware interfacing to iOS devices is leaving developers with no options. Talk about going back a few decades.

You can't even do a simple serial port interface on an iOS device without going through the MFI gauntlet. Absolutely ridiculous in 2012.
systemd supports standard init scripts as well, allowing an incremental migration.
This is how PayPal support works: you use the website to get a random six-digit "customer support PIN" which you then dial in when you connect to their system.
Uber is not exempt, but they have the right to fight the laws with whatever legal means they can afford.

For any well developed market, radical innovations in productivity can almost assuredly be illegal. Standards of service must be set on a national level, not a mico one.

Imagine if every time you went to a different city, Uber's user experience changed drastically. You never knew what Uber would cost. Perhaps sometimes you had to do things that completely broke Uber's experience. Imagine if Boston's Uber app was just a button that said "call dispatcher" and then you had to pay cash at the end of the trip. Why bother?

Uber is not challenging the right of a municipality to issue rules or regulations. What they are challenging is an antiquated system of bureaucracy, for a specific market, which wastes both a city's budget and customer's time.

I think we will see the Uber strategy applied to a very wide rank of micro-regulated markets. And its going to work. The cities that "win" will lose, big time.
I agree that the metering complaint is valid - I suspect it may be possible to create a nefarious drop-in replacement Uber Driver app which reports longer rides. The only location / metering source Uber has the iOS app and there's no additional hardware or software protection on the driver's Uber iPhone beyond the standard OS protections, which are easily circumvented by a jailbreak.

In contrast, real taxi meters provide no software access beyond a few defined interactions and limited and intentionally obvious physical access (start/stop meter) only, and the hardware is built to be relatively secure from tampering.

Uber could use the rider's app as a verification of distance, but as there's currently no incentive for users to keep the Uber app open while they ride, I suspect this method wouldn't work right now.

I like the idea of Uber, but, like Square, I think it's only a matter of time before a nefarious party exploits the easy availability and comparative insecurity of smartphone hardware to scam someone and disrupt a new smartphone-based industry.
Are all my submissions being automatically being marked as dead?
I am trying to to submit some links and request for advice but I seem to be automatically getting marked as dead.
If this post doesn't get marked as dead, can some body help?
What's the best way to learn to be a sysadmin?
I'm wondering what's the best way to learn the ins-n-outs of managing servers, messing with Linux, and doing all of that kind of stuff. There seems to be no coherent course/tutorial set that covers this.
ANSWER - requires Lion.

Earlier betas indicated 'works on Snow Leopard', though I'm not sure how they tested it, because it never installed. Later site pages just said 'tested on Lion' or something like that.

There was a google code site that offered built versions with installers that worked on Snow Leopard (supposedly) but I could never get those to install right either.

Am I destined to have to upgrade to Lion/ML just to get Java7. ???
Of course it doesn't say it in black and white. That's why people use the phrase "in the spirit". The trouble with LendInk is in how the metaphor of a book changes once it's online.

With a physical book, you have to learn that your friend has it, either by seeing it on their bookshelf or hearing them talk about it. Then you ask for the book. So it will happen every once-in-a-while; depending on how many reading friends you have, you might lend out a particular book 0-5 times before the book falls apart.

But LendInk is advertising what books are available, and it only needs to find one owner, somewhere, anywhere, who's willing to lend it to you. You don't even have to know them, because there will be some owners who will gleefully lend anything to anyone. So instead of having to individually learn about the 100 books your friend owns, or the 1000 books that your ten friends own, you just need to show up on LendInk, ask for a book, and get it sooner or later. The books on LendInk are too available.
Uberdata: Building the Perfect Uber Party City
I never said the law shouldn't be changed, it should. But just because a company is "first to market, cutting edge", does that make it exempt from regulation?

Given the New Years Eve pricing debacle, I'm glad regulation is being put in place. Taxi's are underserved and a horrible experience, but their pricing is both consistent and 100% transparent during and after the ride. Uber's pricing is a confusing mess. Time, demand, distance, and vehicle are all factors and you're only aware of the price after the ride.
Tangent: to be clear, there is no difference between []+{} and {}+[] in javascript.

var a = {} + [];

var b = [] + {};

var c = String({}) + String([])

All three are equal. The order does matter in general because its doing string concatenation which obviously matters ([1] + [2] == "12"), but the fact that js always does string coercion and concatenation anytime you have + without numbers on both side isn't really that crazy.
I don't know if it's true in this case or not, but I'm pretty sure this same story about sidewalks has been told about every university in North America.

At <http://ask.metafilter.com/62599/Where-the-sidewalk-ends>; there are reports of it at Columbia (by Eisenhower), Tufts, Long Beach State, University of South Florida, Iowa State and/or Iowa, and CMU. I certainly heard it about my alma mater (none of the above).

At <http://books.google.com/books?id=C_FFMePR204C&lpg=PA184&...; they claim this was done at Disneyland.
Alleged bike thief burned by Burner iPhone app
You can get this from a CDN like AWS CloudFront as well. CloudFront will keep a pool of persistent connections to the origin, whether it's S3 or a custom origin. You can also do HTTP or HTTPS over the port of your choice on the backend, enabling "mullet routing". The minimum TTL is 0, allowing you to vary content for each request.

One issue with CloudFront is the POST PUT DELETE verbs aren't currently supported, which is a kink for modifying data. You could use Route 53s LBR feature to route requests to nearby EC2 instances, then proxy back to your origin.
The small parts of the regulation that weren't rent-seeking -- a legitimate interest insuring a certain level of safety and responsibility, back when it was hard to hold bad-actors accountable -- have been made obsolete by mobile/reputation/marketplace technology.

Now, bad or inconsistent service can be made widely known almost instantly -- not just through Uber's own mechanisms, but also other review/complaint platforms.

The whole legacy regulatory architecture now can and should be discarded, replaced with a minimal kernel of regulations about clearly identifying a service provider and its terms, to enable the new market-oriented feedback mechanisms to work.
Parentheses.
Hi lmm. Thanks for catching that. I have updated the article code with the fixes. This is my first blog post ever. That will teach me not to post without fulling checking the code.
Delegation is such a commonly-used English word that you don't get to have a monopoly on its definition. If I have two classes and one delegates to an instance of the other, then it's delegation.

Just because Lieberman tried to give it a more refined definition in the context of OOP doesn't mean that the less refined use is incorrect. You don't get to take away my English words.
On-the-job training is already dead.

LearnUp, by recognizing it first, will profit as the middle class further disintegrates into various strata of indentured servitude.

Corporations hold all the chips and so the labour force is obligated to take a paycut--but since there is a minimum wage the paycut has to come somewhere else. The market treats regulations as damage and routes around them.

Instead of the paycut coming in dollars, it comes in the form of pre-application training requirements, internships, strange work hour arrangements, complicated contracting situations, etc.
Yes I needed something To get started quickly. I highly recommend buying a template.
True.

That's some cool stuff you make with your band, btw. What do you play?
I'd categorize regulatory-capture more as a sibling to rent-seeking (rather than its opposite). Twisting regulatory processes to benefit larger incumbents is often the mechanism that is used to extract rents.
Windows RT laptops? That'll work really great...
Thanks, I will check this out.
My understanding of zimride/lyft is that they're more about arranging carpooling than acting as professional taxi service.

Does Lyft let random people sign up to work as gypsy cab drivers? If so, I think that's insane.
One of the traits that allows us to be competent programmers is a pedantry about technical terminology. Why overload the concept of message forwarding with a second term if what that term was originally coined to describe is a useful paradigm?

I had never heard of this distinction, however it immediately made sense to me because I've run into this case in Ruby where using a ruby "delegate" object actually was much more verbose than I had envisioned because of all the context I had to bring over to the delegate object one way or another. In the event I decided "delegation" was not right because the implementation necessarily violated the Law of Demeter.

So yeah I think pragmatically it does matter.
Lieberman invented this term. It did not exist prior to his work. I have confirmed this with Lieberman himself as well as Jim Coplien and David Ungar.

The Design Patterns book sought to clarify our language yet it has this error. I'm seeking to clarify our language.
I think that this article was posted a while back. I agree with most points, except for the one about lack of "pre choice" - I've been playing around with Racket (formerly PLT Scheme) for a while, and the one thing I've been amazed at is the amount of choice. There are a ridiculous number of built-ins.

I think that the failure of Lisp to gain traction is probably better attributed to the other point about too much minimalism being madness. Some of the forms in Racket are pretty crazy.
It is but my hypothesis is that most products are aimed for large businesses and not easy to use/buy for smaller companies (I could still be wrong - we'll see).