skysight-inc/HackerNews huggingface dataset:
There has always been some confusion & ambiguity about when/if individuals could purchase "OEM" licensed copies of Microsoft products. Many online shops are happy to sell you the OEM license as long as you purchase some hardware.

I suspect that this new license will come with a change to the OEM license terms to push home PC builders to the new PULSB license, and PULSB will probably cost a little more than OEM.

I wonder which license is suitable if I'm building a PC for my mother?
Python Sympy online interpreter
That would be cool. My email is in my profile. I'm sure I could help out in some way.
I like the simple new design. Everything that I need is there and nothing more. Huge improvement over the last design.
It is not surprising that printers just accept (possibly malformed) requests just from anywhere?
A quick google search turned up AA batteries as a popular size reference [1].

[1] http://www.google.com/search?q=%22shown+for+size+reference%2...
Thanks for the warning.
I was considering only taking jobs which offered less than 100 links and/or manually link building.
Do you think this makes a difference or will they just tell you they did it manually?
Needs more wu.js

http://fitzgen.github.com/wu.js/
Have you actually tried to do that? BS 2.0.4 pops up with "framing not allowed!" and redirects to a missing page on the internet.

Probably relatedly, some/much of the docs rely on javascript, so they won't run unless you're running through a server. Instead of forcing everyone who wants or needs to see an older version of bootstrap docs to wrangle this non-working stuff in to a server and configure that, massive amounts of time would saved by simply having versioned docs online.

EDIT: the short answers is not to open the index.html file but any of the other .html files (examples, etc) and you should be able to at least navigate around some.

EDIT2: At least some of the javascript stuff is working without loading from a server - not sure why yet, but it's working. The index page still needs to be fixed.
It's not a scan, it's free surprise pen testing!
Entrepreneurship trends and impact on VCs
I'm really surprised that yours is the only comment pointing this out.

Note that the author implicitly defines "bozo" as anyone who's not a world-class programmer or researcher (or possibly, any such person that rises above a certain level in the hierarchy). So, 99.9% of programmers, including even some programmer-entrepreneurs who have built valuable companies without being world-class technically.
Consumers get measure of their lifestyles | Trends | Marketing Week
One thing that I often do when dealing with old code that's performing low-level operations and outputting some binary format is to md5 the output. After that, I can change the code and I often do this when people ask for less memory usage, better over-all performance, etc. Once the code has been changed, I can prove that it uses less memory/CPU/whatever, and verify the md5sum of my output against the original output so I know the code still outputs as intended.
> I wonder which license is suitable if I'm building a PC for my mother?

Probably the GPL. Does she use anything besides a web browser?
One problem is that there isn't a feedback loop describing why a comment or article is bad, just that it is bad. Negative context-less signals lead to superstition which induces drift away from the values of the Creators.

One way to provide context could be to allow people to tag their downvotes with an adjective like "irrelevant", "mean", "notreddit", etc. Then, critically, only the author of the comment would be able to see this additional feedback.
Most editor/terminal color schemes are terrible, full stop. Color splashed everywhere without a thought.

Solarized is one of the few that looks decent, but I don't agree with the deep blue.
I have been reading the list of 2 factor at lastpass [1] and in addition to mentioning the yubikey, it talks about the grid multifactor [2] - probably about on par with what was used in WW2 but it seems extremely simple, low tech solution to multifactor that doesn't require computers, phones or electronics - solving that problem of 'something you know' + 'something you have'

[1] http://helpdesk.lastpass.com/security-options/

[2] http://helpdesk.lastpass.com/security-options/grid-multifact...
Not if the owners don't password protect anything. Without a valid login it shouldn't print anything, unless that login were exploited, but I don't see any mention of a password being bypassed.
Yeah that was the outlier. It seems more likely to me that the poster who said that failed to properly disconnect the printer from the network.
Most of this is really great advice. However I have run into horror stories that would shock you. For example:

1) Delete most of the comments
2) Stuff breaks. WTF? The code was processing its own comments!

Also I would add a third option here (the option we chose with LedgerSMB) which is:

"Localize the bad code, and replace with good code, a block at a time."

Some code can never be cleaned up effectively. In this case, you separate out, rewrite, and live with the fact that this will break some stuff while you get something that, on the whole, is more robust. Now in this approach the thing that is critical is you make as few changes to the legacy code base as you can. You also look for other layers at which you can implement things like new, needed security controls, or API's and you do everything you can to avoid putting new stuff through the legacy sections.
Many, perhaps most network-connected printers, NAS units, and other devices (e.g., home-automation hardware) simply assume that the local network they connect to will be securely protected from external attack, so they're not configured to withstand even the simplest of attacks.

This is exactly the opposite of what many security experts recommend: ideally all devices should be secure regardless of whether the network they're on is secure or not. With more and more devices offering remote-Internet-access functionality every day, this principle of security is becoming ever more fundamental.

Bruce Schneier's personal WiFi network at home is fully open, because -- in his own words: "If I configure my computer to be secure regardless of the network it's on, then it simply doesn't matter. And if my computer isn't secure on a public network, securing my own network isn't going to reduce my risk very much."[1]

Like rachelbythebay, I'm also waiting for the great network printer security apocalypse.[2]

--

[1] http://www.schneier.com/blog/archives/2008/01/my_open_wirele...

[2] http://news.ycombinator.com/item?id=4412522

--

UPDATE: Just for the heck of it, I ran a fairly fast scan (nmap -T4 -A -v -PE [IP address]) on an HP all-in-one printer accessible over my LAN, and there were a LOT of open ports -- see pasted results below. I then pointed my browser to port 9100 on the printer, which instantly printed the HTTP headers without complaint. The printer's configuration page reports that it is "secured" by an administrative password.

PORT STATE SERVICE VERSION
80/tcp open http HP PhotoSmart/Deskjet printer http config (Virata embedded httpd 6_0_1)
139/tcp open netbios-ssn?
6839/tcp open tcpwrapped
7435/tcp open tcpwrapped
8089/tcp open tcpwrapped
9100/tcp open jetdirect?
9101/tcp open jetdirect?
9102/tcp open jetdirect?
9110/tcp open unknown
9220/tcp open hp-gsg HP Generic Scan Gateway 1.0
9290/tcp open hp-gsg IEEE 1284.4 scan peripheral gateway
9500/tcp open unknown
Is The Web Really Just Links Or Is It Evolving?
Sale of tarot readings and spells banned on eBay
Get hired sooner.

Audax Health is hiring in SF & DC.

Work in a fun and entrepreneurial environment where dress is casual and flip-flops are encouraged. We provide the best tools such as brand new Apple computers for every employee. Collaborate daily with top talent from companies like Zynga, WebMD, Microsoft, Bloomberg, Booz Allen Hamilton, and XM. Your contributions will directly impact the way millions of people interact with healthcare.

What makes our office fun:

•	Our super swanky waterfront office space in Washington D.C.
•	Top of the line Apple products
•	Couches, ping pong, foosball, air hockey, arcade basketball shooter, Xbox and TVs
•	A kitchen filled with scrumptious food, snacks and beverages

Contact nayan.jain [at] audaxhealth.com
I 've seen many solutions, and personally i believe it's a psychological matter of attention overload: too many submissions / comments -> less time spent on critical review -> hasty "cat picture" upvotes.

Let's create artificial scarcity: let each user be able to vote only on a small random sample of submissions/comments

Other ideas: Require approval by 2 blindly selected users before showing, or allow multiple dimensions in voting[1]; but these don't seem to work.

Anyway, this is a deep issue, essentially political [2]. It's also fun to consider the dizzying election procedure that the Venetians used [3].

[1] http://textchannels.com/

[2] http://en.wikipedia.org/wiki/Criticism_of_democracy

[3] http://en.wikipedia.org/wiki/Doge_of_Venice#Selection_of_the...
I don't need to compromise HackerNews to see your username. Many sites fall into that same category - anything with a social element, comments, profile pages.
In case anyone is wondering it appears you can only upload from their APIs right now. I wonder if they intend to make it accessible through their web interface at any point?
Show HN: PHP Best Practices, a short guide for common and confusing PHP tasks
I actually found it quite an interesting experience to read the article and only have the date revealed at the end. Obviously I knew it wasn't recent, but it was interesting to read about the study and have no clear frame of context.
My experience is the opposite. When I first came here, I made a funny remark, which was downvoted due to lack of content. I don't make funny remarks here any more.
Programming is tripping on stairs, every day
even if the 25 "bad" comments are at the bottom of the page because people will still reply to them and they will still be a part of the discussion.

Here's a good example-

http://news.ycombinator.com/item?id=4407733
I get that this just looks like a scan but it's strange that half a dozen people reported it at the same time (so the problem is likely more widespread). How long would it take to send these packets to all public ips in the world (real question, I have no sense of the scale of ip addresses)? I guess it could be that the ips are known to be running printers by a previous scan. Maybe the printers contact home and the HP accidentally sent them a bad message?
In my experience Amazon doesn't care what you use AWS for as long as 1) your checks clear and 2) they don't receive any LEO interest in your data/service usage (i.e. WikiLeaks)
I almost completely disagree.

I've mentored guys who were greener than grass who grasped things like input sanitation intuitively. I've also worked with guys with 5+ years experience who thought this:

$foo = $_GET['foo']

Was input sanitation.

I would posit that, because of the vastly different quality needs, understandings, and valuations inherent in the industries that our industry touches (namely, all of them), it's unlikely that you're going to see any strong correlation between age/experience and code quality.
It's a junior level position. They aren't going to expect the guy to architect their solution. He's probably going to start doing some of the easier tasks.
No interface, the nipple included, is intuitive to 100% of people. When we talk about an interface being intuitive, we mean that it is intuitive for someone.

Mac programs feel intuitive to Mac users. Windows programs feel intuitive to Windows users. Any kind of software is more intuitive to those who have experience with computers than to those who don't.

When designing an interface, you need to know your users and make your interface intuitive to them.
Hi HN! I'm the author. I've spent a lot of time writing PHP, and one thing that always struck me was that PHP often has many different ways of approaching what should be simple tasks. Some ways are clearly flawed, but can still be found in online tutorials. Database access for example: there's at least 3 different libraries you can use to connect to a MySQL server. Which one should a newbie pick, and which one is "best"?

I wanted to compile a guide containing what can be considered the best ways of approaching such problems, with basic examples and links to follow-up reading.

If anyone has suggestions or corrections, please drop me a line! Contact info is in the page.
There is some truth to that. Different parts of the U.S. are vastly different in wealth, and most people have very little conception of what norms are outside their peer group, both their geographical peer group and their sociocultural one. For example, living in Silicon Valley and working in tech, you might think that $100k+ is a common white-collar salary, something that most educated professionals would make—if not as starting salary, then at least after a few years.

What percentage of American salaries do you think are $100k+, though? I've heard people guess as high as 20-30%. Some people, both Americans and foreigners, seem to imagine it as this super-rich country where everyone is making those kinds of salaries. But the real number is 7%.

(About 20% of American households do make 6 figures, but most of those are two-income families that are adding together two 5-figure incomes, e.g. husband and wife each making $60k.)
Cool!

But, if I try to connect via GitHub, it wants:

This app would like to be able to do the following:

Read your public information.
Update your user profile.
Update your public and private repositories (Commits, Issues, etc).

That's a little worrying. I'm part of a company "organization" on GitHub with all private repos. Exposing our code would be a bad thing and these statements don't give me much to go on that that will be true. I'm not sure if the wording is GitHub's or Binpress', but some clarification would be nice.

I'd like the ability to limit Binpress to just the private repos I expose to Binpress.
Can't speak for the original commenter, but even if there is no degradation I personally don't see enough advantages to justify upgrading my gaming PC.
I'm sorry, I made the headline a bit sensationalist to attract attention. Paul Graham said he was looking into various options for the voting system, so I thought I'd pitch in and suggest my idea. That is all really - I love hacker news. No need to be discouraged or upset.
UC Berkeley Big Data Bootcamp Starting Today
Ask HN: What makes a startup a great place for designers?
I hope this question isn't too vague but it's something I've been thinking about lately. I often hear frustrations from designer friends about how their creativity and talents aren't fully utilized at the places they're working, how design isn't valued at the startups they're at, how they're under-appreciated, how they're not put in a position to grow as a designer and see no long-term future there, etc. Then I see places like Square, Pinterest, and Gowalla (rip).. and I wonder.. Are they doing anything differently? Is there something about the culture there or something about the structure that lets them attract great designers that at least from the outside seem to be doing great things?<p>I should preface this: I'm a developer.. but I definitely appreciate good design when I see it.
Because their stocks would go down very quickly if they did.
In an ideal world, we wouldn't need to worry about unauthorized access. Unfortunately, that world doesn't exist.

But I sincerely hope a requirement for me to use the internet doesn't demand we have a private server instance or a smartphone of any variety (my Nokia candy bar variant serves me just fine).

I can think of many problems we'd need to account for (lack of internet, dead/lost phone, corruption, older folks, etc).
Why CEOs Shouldn't Publicly Discuss Religion, Politics Or Sex(ual Orientation)
Nothing found for Medicine Gentlemen
Stop who crawls there? The 10 most important Good Bots you should know about.
Slashdot solved that problem over a decade ago. Semi-Random users receive moderation powers and can assign a post to several categories (Flame-bait, Troll, Funny, Redundant, Insightful, Informative). Any other user has the power to review moderator choices. Get enough negative feedback and you lose the chance to be chosen as moderator in the future.

You also cannot moderate and participate in the same conversation. Posting a comment revokes any moderation in the thread.

You can change your user preferences to augment the moderation choices, such as -5 to funny and +3 to insightful.

CmdrTaco provides history on how the system evolved: http://slashdot.org/moderation.shtml (1999)
this would be a great attack if you could get the printers to print ads!
I really thought this was going to be related to cjdns.

https://github.com/cjdelisle/cjdns
It seems to me that the best way to handle this would be a content-addressable system with a more traditional fallback. You'd declare that you want file with SHA-256 (or whatever) hash of XYZ. If the browser has it, then you're done. If the browser knows where to find XYZ, then it can go off and grab it however it feels like. For compatibility, you'd also specify one or more traditional URLs where you think that content XYZ can be found, and the browser could use the hash to verify integrity.

The trouble with the current CDN setup is that you only get the maximum benefit if everybody uses the same CDN, but people don't necessarily want to trust Google or whoever to host code that their site relies on. With a content-addressable system with fallbacks, you'd get all the benefits of the CDNs with none of the drawbacks.
> That's like saying, "If we start putting people in jail for using illegal drugs, people will eventually stop using illegal drugs." Unfortunately that's just not how it works

If you believe this, then what is the purpose of putting illegal drug users in jail?
Police will soon know the location of every car
...let each user be able to vote only on a small random sample of submissions/comments

Slashdot first pioneered that. In case you are not familiar with the scheme, all logged-in users are occasionally asked to vote with their 5 allotted points. Users with high karma are given a chance to vote more often. The points expire in a day or so if they are not used. They also have a meta-moderation system, where you judge how others have used their votes.

They've had the present system for a while (I want to say over 6 years, but I don't frequent the site as much these days). The overall quality of comments there is... OK. Not great, but not as bad as it was for a while around the turn of the millenium.
Then just create an account on binpress and don't use your GitHub account. You're not required to use a GitHub account.
Sounds like a response to a ton of people asking them why they aren't on GitHub - in other words making excuses for ignoring customer requests. I think a much better response would have been something like, "We make sure every public license module we list is on GitHub and are working with GitHub on ways to get everything on there, as a mirror at the minimum. Thanks for the overwhelming feedback!"

Whenever I have some sample code to give out at a hackathon or workshop nowadays, the first question I get asked is if it is on GitHub. Tons of people are used to and comfortable with that and ready to go, some may not even know how to use git without it. Emailing source (often blocked) or using links to web sites or repos users are not as familiar with has not worked out as well.

Heck, even I prefer it when I use something like the Facebook library, since later on I can see their updates and port them into my branch used in my apps and see other people's fixes and comments on their bugs and updates. Sometimes the first and best fixes are unofficial. So even with a module provided direct from Facebook, the social aspect and huge forest of uncurated content around it is still helpful.
Did you read the sentence after that? Hopes and dreams are great. If you leave because you're unhappy I'll wish you all the best. However if you find that the grass isn't greener on the other side of the fence and re-apply after being on the job for only 9 months in the first place, I'll probably pass on you as I'll still have it in my mind that you left your old team down a man with the same work to do.

Sure, and the corollary is, if a firm lays somebody off after 6 months because their numbers for the quarter took a dip, the employee should pass on them if they come calling wanting them back.

After that point? If you're unhappy with your work, or want to try something new, I'll help you find something better. I hired you because I thought you'd be a good fit for the company and ideally I'd like that relationship to continue. To that end I'll ask the all people I know to see what's open and hopefully find you something that's engaging.

That's a good outlook to have. Glad to hear it. That earlier bit just came off a little bit as "The employee owes us something, but we don't owe them anything in turn." All I'm saying is that "fair is fair."

My experience is that very few firms feel any sense of loyalty to their employees, but they want their employees to be loyal to them. That's what I have a problem with.
This piece of marketing is untrue and a bit ironic: "...they're pixel perfect at every scale"
Unforunately, the Github API doesn't give such fine-grained control. You can either get read access to all the repos, or write-read access to all the repos.

http://developer.github.com/v3/oauth/#scopes
So this is the first I've really heard of Pictonic (or at least clicked through). Looks like a great deal; $150 for the kind of art that I spend maybe 20-30 minutes trying to find a license-free version and then PhotoShopping myself...with 2000 icons and future updates, seems like it'd be worth it.

Has anyone here bought the full set? What were your experiences with it? Any major drawbacks and deficiencies? (I'm interested in knowing how the catalog is organized in the file system...I'm assuming it's just a list of filenames? Or is there a sheet of metadata that contains category/tags?)

* OK, just signed up and tried downloading the free fonts. Very slick and straightforward. However, unless I'm missing something, there's nowhere on the site's icon browser to search by term (doesn't appear there are tags)...for example, I wanted to see if they had symbols for "Exit" (either for real-life situations or for computers).

i.e. I'm basically spoiled by how the Noun Project has catalogued their work. No easy feat, obviously: http://thenounproject.com/
How about taking the approach of the browser on android 4+? The top bar disappears as you scroll down, but pops into view when you scroll up. It is then aligned with the user's intention, a scroll up being a signal that they wish to go up to the menu. Combine with a reasonably speedy fade-out for cases where a user is simply scrolling up to re-read something, and I think it puts most of the usability issues to rest.
Ask HN: How to make an automated offsite backup of a Time Machine backup?
Is there such a way to make an automated "Time Machine"-like backup of my external Time Machine disk for OS X?
Precrime creeps closer to reality, with predictive smartphone location tracking
Nice initiative, good luck!
Dear Quora, fix your damn login page
actually, it shouldn't be a per day quota because heavy users will be disadvantaged. The idea is to have a steady rate of voting for as long as a user is on the site.
Google & Facebook Removing Content in India
Why do we care? It's a done deal and was done 3 months ago. Stupid.
Pitching and Closing: What You Need To Know Part 2
The Freemium Game Plan
Where does it show that? And are you sure we are talking about the encryption key, not the account password?
Twitter maps track which cities are friendly and which ones are impolite