skysight-inc/HackerNews huggingface dataset:
Especially with the development of IPv6, internal routing becomes transparent and the appearance of protection offered by NAT is gone. Possibly these printers all have been assigned a public-reachable IPv6 addresses.
Unfortunately, trying to secure your hardware is a lesson in frustration and ruins the whole experience.

This is because every device acts confused, hangs or produces cryptic errors when facing denied access; restricted resources prevent you from understanding why the access was denied and how to open it; changes in network topology lead to problems that only stumbled over much later; and it's extremelly hostile on guests who spend half a hour trying to configure.

It's untractable.

Most of user crypto has same set of problems btw.
The 7-inch Mini iPad: A Round Up of The Rumors, Reports and Specs
Let us take a look at some of the probable features and functionalities which the users can expect in the iPad Mini tablet.
"Vigorous agreement here too, except for the TimeMachine bit as that is Mac only and doesn't work for <insert any other system or device that isn't Apple Mac OSX)."

Well yes, obviously it only works in a mac-only household/office. I still think it's a good solution for non technically experienced users who only have macs since it's so simple that you could literally explain your grandma how to setup. I don't think mobile devices are that important on the other hand. The important data on them should usually be synched to your computer and as long as that is backuped, you should be fine. On windows I think that the built-in backup since Windows 7 is finally decent, albeit not yet grandma-proof ;).
So you're saying Berkshire Hathaway is much better setup as a long term business than Facebook; therefore a better investment. I don't disagree at all.
This is what you're after: http://en.wikipedia.org/wiki/Gopher_(protocol)

Not an insult, by the way, Gopher is awesome. Today the Web is an applications platform and that is not going to be reversed.
Then why not downvote the dozens of other comments that missed the double count?
hey good post :)

I got a few tidbits to add.

"if you ever plan on deploying your PHP to a server whose configuration you can't control, then you should always use <?php ?>." I would change that to "always use <?php ?>", if you do you're safe, otherwise you can run into problems (as I have).

its a matter of opinion but I would recommend SwiftMailer over phpmailer.

And lastly, I would definately put namespacing and code organization in here somewhere, like PSR https://github.com/php-fig/fig-standards/blob/master/accepte...

liked the article!
That one has the Github Octocat icon I like, but hasn't updated to the new Twitter icon yet. Also doesn't support creating custom packages of just the icons you want.
Failed entrepreneurs are like wounded soldiers.
Nearly all desktop applications use a fixed header, it has fine usability there. For a web app, as opposed to a primarily informational site, I think there are definite cases where a fixed header is preferred. Gmail for example, it makes sense to have control butons for your message always visible.

tl;dr on your average blog I agree, but in a web app I don't.
I'm surprised so many people ask this question. Isn't the intent of binpress to provide these code snippets/libraries/solutions at a cost?
Going by the size of the source code, including the configure scripts, makefiles, etc for other operating systems is a rather disingenuous way to measure.
If I remember the presentation I saw on this, some don't even verify firmware updates.

http://ids.cs.columbia.edu/sites/default/files/CuiPrintMeIfY...

http://engineering.columbia.edu/can-you-trust-your-printer
They were an anti-pattern for my site so I CSSed them away. But with 2.1 there's .navbar-static-top which does the same thing as my custom CSS. I think they should place it ahead of .navbar-fixed-top in the docs since it's better in most cases.
It does bother me how the US media seems to forget about this 'little' company that probably provides half the gas in their cars...
Hey Guys, Great stuff!

You might want to check this out: https://www.crohnspromise.org/ - It is a 'clinical trial' (case-control study) to evaluate whether such "self-reported" outcomes and tracking can actually help in managing crohns disease. Its been going on at Cleveland Clinic since 2009.
Startup relocates their whole 65-person team to Crete beach
5 Questions you MUST ask a developer you want to hire
I'm not seeing much "why" in this article. There are a couple of anecdotes and a lot of opinion spewing, but not much of substance to support the idea that "founders shouldn't publicly discuss Religion, Politics or Sex(ual Orientation).

Also, to his point about having a responsibility to "maximize returns for all shareholders":

It’s a myth that corporations have a legal duty to maximize profits to shareholders at the expense of everyone else. Historically, the executives and directors of U.S. public corporations understood that they had a responsibility to other constituencies – customers, employees, suppliers, creditors, the communities in which they operate, and the nation.[1]

If doing what's best for "customers, employees, suppliers, creditors, the communities in which they operate, and the nation" involves discussing politics, religion, or sex publicly, then a CEO should do it, even if it causes short-term financial loss. IOM, it's time for leaders to start looking at the long-term view a little bit more; as opposed to only focusing on "this quarter."

[1]http://www.nakedcapitalism.com/2012/04/three-corporate-myths...
It's also possible that some of the lower income children had already been stuck in a refrigerator while playing outside, and had practice at the task. Ten seconds to escape is pretty impressive!
Selecting a private cloud is harder than you think
wChar.js - a tooltip min/max character counter
Pretty typical behavior when running vulnerability scanning against a printer target.

Many printers will simply print whatever data comes into certain ports. Have seen similar behavior many times when running web scanning against a printer accidentally instead of a webserver.
As a happy customer, I'm glad to hear this as well!
Even faster: loading half a billion rows in MySQL revisited
Measuring quality, reputation and trust in online communities
Nice try VISA marketing guy :-)
these are great but in my experience don't look nice once font-size is below 20px
The license is short and to the point:
https://pictonic.co/license

> ONCE PURCHASED
You CAN:
Use the icons for any personal or commercial projects.
Modify or alter all icons in any way you wish.
You CANNOT:
Under any circumstance, you must not reproduce, resell, rent or publish Pictonic icons. Let’s be nice!

But that last sentence in the license ("Under any circumstance, you must not...publish Pictonic icons") is subject to misinterpretation, no?
Since lukifer wrote "in most cases" you're only disagreeing if you think there are more web apps out there than blogs or informational sites. He didn't say a fixed element is never desirable. I think you're agreeing.
Sure. I've tested W8 in a VM and had a horrible experience. The OS is optimized for tablets and touch-based devices, not desktops.

Also, Windows 7 is perfectly fine at the moment.
Minecraft experiment devolves into devastating resource war
Replacing Unicode shapes with icon font characters that are unrelated strikes me as a bad idea. Why not just use the private use area?

Edit: Another point - not having those lines over free icons would be nice.
They have had a military coup within the last decade, not exactly a bastion of stability.
Funny and interesting production, I'm sure you'll land something on this :-)
Hey, way to go! I remember that letter on the NYC Ruby list.

I find music and computers to be so parallel in so many ways. The whole "scrubbing toilets" thing is what they told all of us recording students we'd have to be doing to get an internship at a recording studio. As a side note, I always wanted to be playing more than either scrubbing toilets or making records, which turned out to have been a good thing in the long term here.

I was one of the jazzers in a classical music school. We were pretty much the 1% in that we had every paying gig for a 50 mile radius. I could never tell if the classical kids (and teachers) held their noses up because we were "untrained louts" or because we "untrained louts and working a lot more than they were". Take from that what you will...
You know, I'm just cynical enough to believe that security problems have little or no bearing on stock price. However, reputation is a kind of stock too, so from that perspective I agree, public CDNs like these have little to gain and lots to loose by tampering with these libraries to inject, say, a behind-page pop-up with ads.
Php.js - php.js
Hi, great post !

Suggestions :

Sanitizing HTML

Please explain why you prefer htmlspecialchars over htmlentities

Please explain why you should htmlspecialchars when outputting content, but never use it when inserting to database (obvious for us, not for your reader)

Checking for null values

Please explicit that === should also be used when compairing to false (problem is the same as with null)

Please use Yoda condition in your example or even better explain why (it's also a best practice in PHP (also recommanded by WordPress Coding guidelines and several other frameworks, by example))
Computer Hangs After 49.7 Days (1999)
Show HN: RESTful Contact Forms - You make the form, RESTMailer does the rest.
I think the last bit means, don't download the iconset and publish on other sites. Like torrent.
Why can't you engineer away jerks? I mean, we have democracy, free markets etc. and among their main contributions is to engineer away the effects of bad behavior. In a democracy, you won't get the best decision, but you will get an acceptable decision. In a free market competitors force business to serve the customer.

Similarly, a techical solution which gives jerks a smaller influence seems an excellent partial solution. Sure, you might still need policing, but it isn't either or.
Sure, you're right, but only technically. Having an extra collaborator in the model is asking for trouble - there's nothing about a User that requires it to know anything about emailing. It violates all kinds of design principles. Putting your logic for "I should email the User when they sign up" into the User model is using "design by related words".

In traditional Rails design, the controller is exactly the right place for this. Another option is a service layer of some kind, if you do that, e.g. a DCI context, or just another Plain-Ol-Ruby-Object that is in charge of the logic of signing up a user.

The best part of separating out the logical business sequence of signing up a user into its own object (I can see this method in my head, something like save_new_user, sign_in_user, queue_welcome_email) is that it becomes massively easier to test - you can just mock the various calls to its collaborators' public methods because they should all have unit tests.
/install slashdot ;-)

oh yeah, i might get down votes - but - its still one of the massive comment systems that more or less works. more.. or less. :)
If I ever ran a media site, I'd redirect noscript users to this:

"We love that you've come to value the great material we provide, but we make money off of advertizers. If you run noscript, that's great! We totally support noscript options for those who purchase a subscription plan."
Same for me, I just recently built a new gaming rig with Win7 and my past machine was WinXP. I have no reason whatsoever to go to Win8 anytime soon. They could probably give me an update license for free and I probably wouldn't bother.
reproduce: Produce again. Produce a copy or representation of.

Bad wording indeed.
Great, here's a discussion I've wanted to have for a long time.

I very much appreciate the effort, but quoting yesterday's phk article, "Quality happens only when someone is responsible for it". In another yesterday's news, on Reddit they are starting to build yet another online university.

Don't take me wrong, I actively search for information on the Internet, follow many tutorials and even wrote some. I absolutely advocate for researching something on the net before buying a book. But when it comes to university-like education, well, only Universities currently provide it.

Some months ago I looked for courses on iOS programming for a personal project. After following some video tutorials, HOWTOs on blogs, and even "free courses", the only thing that has really taught me anything has been Stanford's iOS course. And I can't even be sure if I learned everything, because nobody graded me.

If nobody is grading you (a professor, a tutor, a supervisor, a boss, a customer), how do you know if you education is correct?

"Online universities" already exist. There is one very close to home[1] and its degrees are as accepted as any other regular university. The point is, you have to pay for them. You have to pay for the professors to prepare the courses, to correct the exams, to write material for you.

I would honestly love to hear from somebody who has powerful arguments which can support a free, high quality, online university-like studies. I just can't think of how that is possible.

Anything else is, at least, an abuse of the word "University"

[1] http://www.uoc.edu/portal/en/index.html
I applaud your ambition and intitiative. Many experienced programmers should take note of how you socialized with other human beings (multiple times!) to get the gig. Enthusiasm is underrated.
Entrepreneurs Need to Listen More and Talk Less
I've been using Zurb Foundation (http://foundation.zurb.com/). It doesn't have as many feauture-rich components, but found the responsive grid easy to use and I really appreciate the fact that my site doesn't look like everyone else's...
This is a great example of the complexity tradeoff when you choose performance over atomicity. Delayed::Job has lost favor lately, but the semantics of the job becoming visible to the queue runner atomically with the related new record are hard to beat.

Note that even in the proposed solution, after_commit hooks offer no guarantee that the job will ever be enqueued, if for example redis is unavailable, or your process gets reaped between when the database commit and when the after_commit hook gets fired -- the commit has already happened. So if it's really important that your asynchronous task be queued, keeping the queue in your DB has some advantages.
10 common UX mistakes startups make... and how to avoid them
Agreed. For example, there is enough vitriol against private enterprise and business in this upcoming American election that businesses NEED to make a stand. The alternative is to quietly plan shifting capital and production means to more business-friendly countries -- things which no one who started a business in the US wants to do (they started the damn thing here in the first place!).
No need to worry, all Mac's are virus, malware and attack proof and so (by the law of distortion of reality) are any devices or networks attached to a Mac. Go about your business and forget about that pesky "security" thing everyone else likes to talk about. Just etch a picture of Steve striking a thoughtful pose on the lid of your laptop and all your problems will be forgotten.
Jared,
We provide both free and paid components but for a different purpose from github (as outlined in the article).

We're also complementary to github since we allow developers to import their repositories to binpress and add a commercial layers on top of it.
This is a more pervasive problem than just the tech industry. Many industries in the U.S. have limited to no training and no mentor programs. Training is perceived as an easy cost to eliminate.
Using your analogy, some people do drugs because they can't help themselves. But there are also a significant number of people who don't do drugs because they know its illegal and are afraid of getting in trouble and what it would do to their reputation.

In the same way, some people will make stupid comments. But there are also a significant number of people who won't. I know I'm far more hesitant to make dumb/funny comments on HN than on other sites because I know that they won't be tolerated, and will be downvoted.

Just because a system isn't perfect, and won't fix the whole problem, doesn't mean it won't have a significant impact on mitigating part of the problem.
You are right, the site doesn't support search at the moment. We have plans to add search in our next update, hopefully that'll solve the problem:)
Thanks. Good to hear, you liked it :)
The Royal Mint has existed for 1,100 years. That's pretty much the most stable government-owned business-like entity I can find.

The Stora Kopparberg mining company has existed since it was granted a charter from King Magnus IV in 1347.

A few banks tend to last for a long time [1]. Banca Monte dei Paschi di Siena has existed for about 540 years.

Beretta, the italian firearms company, has existed for 486 years (and has been family owned the entire time).

East and West Jersey were owned by a land proprietorship for around 340 years starting from King Charles II bestowing the land to his brother James in 1664. [2]

At first I thought multinational corporations would be more stable because they could move from land to land to avoid wars and such. But apparently they haven't lasted nearly as long as their single-nation counterparts.

The Knights Templar were granted a multi-national tax exemption by Pope Innocent II in 1139, and lasted almost 200 years until most of their leadership was killed off in 1307.

The Dutch East India Trading Company was one of the first [modern] multinational corporations, spanning almost 200 years from 1602-1798.

However, the longest-lasting companies have been family owned and operated. [3] [4]

It appears most all companies that have lasted a long time are due to two factors: dealing in basic goods and services that all humans need, and looking ahead to the future to change with the times.

[1] https://en.wikipedia.org/wiki/List_of_oldest_banks
[2] https://docs.google.com/viewer?a=v&q=cache:nYQU4NpfD74J:...
[3] http://www.businessweek.com/stories/2008-05-14/centuries-old...
[4] http://www.bizaims.com/content/the-100-oldest-companies-worl...
From http://ycombinator.com/newsguidelines.html

In Submissions

...

Please don't post on HN to ask or tell us something
(e.g. to ask us questions about Y Combinator, or to
ask or complain about moderation). If you want to say
something to us, please send it to info@ycombinator.com.
I hope not. Two-factor auth ties you down to a cellphone (or physical token) while giving you only marginal improvement in real-life usage scenarios. (You are not going to enter a new token every time you check your email or Facebook.) We have higher-level problems with authentication that need to be solved.
I'll make sure that's updated to a clearer version!
At least until the latest DirectX is W8 only...
Mirrors Finished for NASA's James Webb Space Telescope
I suppose if you have a big trust issue letting Cdnjs host your libraries or if you have a customized build of one, you could just do what they did and sign up for CloudFlare and control the files yourself. [edit: CloudFlare, not Cloudfront]
> 1) Delete most of the comments 2) Stuff breaks. WTF? The code was processing its own comments!

My campfire story: change method name, stuff breaks. Method names had been parsed in a wrapper object (Python's __getattr__ being abused) so that calling 'setFoo()' triggered a 'Foo_changed' event. In fact, the method names constituted a mini-language with its own grammar and semantic. Apparently someone had gotten high on reflection.
im glad someone was able to figure it out...
No - there are awful lot of dead links, too.
please don't say the D word...
I'm currently using an app called Arq that backs everything up to S3. If I had to guess, I'd say there's about 50-60 gigs or more on there. Last months bill was something like .60 cents. How does glacier compare or contrast to this setup (the app does something similar with the archive concept)?
@loceng yup lol :)
Those are the desperately few I was aware of. That said I never looked into the NeWS book. I'll keep digging
The Unimportant Clients
Not exactly. The result of "hops through the local minima" style design is hardly optimal. Yes, it works but is best of the worst more often than not.
Millions of babies have trouble latching for whatever reason, so maybe there is no true universally intuitive interface.
hi there, thanks for the feedback! you're right there is no reason to have the lines over free icons. We'll consider this for the next update. Regarding the private use area, actually pictonic font icons are mapped to the private use area for precisely the reasons you describe
This is so much more easily solved by just sending the JSON document of the user in the message to the worker. A database look is not necessary, a transactional record lookup based on ID is overkill.
Exactly that. When I read the title I was wondering "Why would someone who built his own pc use windows?".
> Note that if the information is encrypted, you can just delete the decryption key and it is effectively deleted.

Does this satisfy the legal requirements you mention? I assume there are further requirements on what constitutes sufficient encryption?
The quality of Slashdot comments depends a lot on your default threshold. If you hide every post with score < 2, it's decent. If you include lower scores, it drops considerably. -1 is almost masochism.
The only difference between pen testing and hacking is permission.
Tip for networked computers in colleges, schools, workplaces, and similar environments: You can upload postscript files to them via FTP, this lets you bypass the printer queue running on a server somewhere. Why would you want to do this? Various nefarious reasons, but the reason I did it was because in 90+% printer outages at university, it was the queue server and not the printer itself experiencing a fault.

If you don't know the IP address of the printer, you can normally get them to print out a diagnostics page by fiddling with the buttons, and this page will contain that information. So far I have always succeeded at logging in with guest credentials.

To network admins who don't want people bypassing their queues: vlan your printers!
It seems to me that trying to solve HN's problem by voting would be more similar to solving a company's bozo problem by internal policies, like performance reviews. If bozos can overrun any internal policy of the company, and the only solution for companies is not hiring bozos in the first place, then the only solution for HN is not allowing bozos to register accounts. (Not sure how you'd achieve that though.) That fits well with my impression that HN's early awesomeness was due to an initial pool of awesome people attracted by PG's writings, not due to voting.
i'm one to talk, mine probably couldn't handle it either...
Nmap avoids sending to 9100 specifically to avoid sending data that the printer may misinterpret as data to be written to a page. You need to give it the --allports option.

--allports (Don't exclude any ports from version detection) .
By default, Nmap version detection skips TCP port 9100 because some
printers simply print anything sent to that port, leading to dozens
of pages of HTTP GET requests, binary SSL session requests, etc.
This behavior can be changed by modifying or removing the Exclude
directive in nmap-service-probes, or you can specify --allports to
scan all ports regardless of any Exclude directive.
There's a similar site that launched a while ago that is really good - http://www.phptherightway.com/