skysight-inc/HackerNews huggingface dataset:
At first I thought I would read a rant about current user interfaces, but the article turned out to be well thought, smartly written and, above all, it doesn't discuss interfaces _per se_. It goes up a meta level and proposes eliminating interfaces everywhere, because instead of helping people, they hinder the interaction.

During the first few lines I had to convince myself that it is actually a good idea, but they are absolutely right. We are on an interface craze. Everything has a twitter panel, which isn't a bad idea, but most designs nowadays obstruct regular interaction to ease a few corner use cases.

Blogs and newspapers hide their content beneath social buttons. Current "Smart TVs" are bad as TVs though they have great facebook support.

But, 99% of the time you want to watch the TV, and if you need to press some buttons for that, you're actually delaying and difficulting the main use case.

Can I mention Apple at this point? Apple is both hated and loved because of its interface design, but I think they're spot on. If they can define the best interaction patterns with a TV and program then on their future iTV, they might eat the market.

What do you think?
I received an explanation of the level 8 vulnerability via private chat, after hanging around in IRC for ~10 hours. By that point, I knew about (and easily implemented) SSH, and had inferred several other useful tidbits, but didn't quite understand the port-counting vulnerability. Partly, as I had a mental block against "timing attacks" based on the instructions ... this was not technically a timing attack, but was certainly very timing dependent.

I still wrote the code myself.
I thought it already was (OpenJDK)?
I use gzip_static compression with nginx under cloudflare/spdy, and its zippy :)
I'm trying to make it easy to ask someone I don't know that well for a favor. I believe people don't ask for help often enough.

Could HN-ers provide feedback on this idea of making it more socially acceptable or easier to ask for favors?

I'll be happy to provide feedback to one of your ideas or to help with something you need in the best way I can.
Literate Programming in Factor
First, 37signals has a large (for our field) in-house customer support team, so the mean fully loaded head count cost of a 37s employee is lower than the number you're thinking.

Second, I think you are underestimating just how profitable 37signals probably is. They have scaled a few tight products with high recurring revenue to a very large number of customers with a tiny team. I've worked at companies with hundreds of employees and knew their revenue numbers and the model 37signals is executing puts those numbers well within reach.
Yeah, it's the three lines button. I find it kinda jarring not having any visual indication from the button that it's going to be sliding. Would be interesting to experiment with making it look more like a tab you can use to pull the content to the side with or something like that.
Creating a Perl web application on dotCloud
Tried Churchill's "we shall fight them on the beaches" speech; got 0.08 BS index; I think it works :)
I would welcome Swiss in the EU :)
I used DOM api to avoid quote character: document.links[0].href
Ranking the Programming Languages
It is incredibly hard to convince an older organization and its users to use the help desk ticketing system for all inquiries. Even setting up an email like hd@company.com doesn't work all the time.

Commenting to see the kinds of ideas that this thread will come up with.
I haven't actually tried d3.js. I encountered significant speed issues when using Raphael (even when panning a graph), and I assumed that was more of an SVG problem than a Raphael problem. Maybe I shouldn't assume so much, but I didn't think d3.js would be suited to showing graphs with multiple data sets with potentially ten thousand points (or more, there's a data point for each second, and it's not uncommon to be riding for more than three hours) each.
I see lots of articles like this but none have ever hit me like this one. matplotlib saved my ass so many times and there is no doubt in my mind it was a huge factor in my career success.

Having a daughter in December and all I want to do now is call my doctor for a checkup.

Thank you John.
Here is a better idea. If it looks like a duck, walks like a duck and quacks like a duck, is it a duck? Run ssh on port 443 at the same time you run a web server on the same port. http://www.rutschle.net/tech/sslh.shtml I've seen implementatios in about a page of C, which I can vet.
From the code it was clear the password was 12 numeric digits.

Chunks of the password (of equal size, see the code) were stored in multiple chunk servers. From crashing the program or reading the code, it could be determined there were four chunk servers, so each hosted three characters of the password.

Using a port-counting vulnerability (sending multiple identical requests, and rejecting guesses where the difference in response port #s was too low: 2 for first chunk, 3 for second chunk, etc.) it was possible to brute force each chunk server in sequence.

Thus, the problem space was 4*10^3 rather than 10^12.
Just a quick note -- if you're working in python, I recommend having a look at zodb[1]. Then you won't need an ORM, because it is an actual object database. The main caveat with zope and zodb is that the move to python3/pypy is very slow, and not highly prioritized.

Another, real world, object database is gemstone -- and can be used with smalltalk or ruby (among other things)[2].

[1] See eg:

http://www.ibm.com/developerworks/aix/library/au-zodb/

and/or:

http://www.zodb.org/zodbbook/installing.html

[2] http://maglev.github.com/

and

http://seaside.gemstone.com/
Profit is "evil" here because it creates incentives for all sorts of bad things. This is what necessitates a balancing force.
"...garnering the attention of Spotify, which gave him six months of free membersion..."

What is membersion?
Zynga's Fall And A Lesson To All Apps Trying To Go Viral On Facebook
People do scroll, that's very old UX advice that's no longer true.

http://www.useit.com/alertbox/scrolling-attention.html

The problem is probably more that there's too much white space between the image and the text, so it's not obvious you need to scroll on certain resolutions (iPad maybe as the text begins to appear on my laptop).
Oh, I'm definitely switching now! :)
We'll be in Australia soon as well. Keep an eye out!
I was intending to mention port knocking in that blog post but didn't find a convenient point to fit it in. Yes, it's definitely an alternative solution to the "let me connect to sshd but not anyone else" problem.
Arrg! So close https://stripe-ctf.com/progress/fduran if only I had started earlier.

For the last level I solved it locally but in the server I didn't get the '3' port difference for the first password chunk (at lest in the first rounds) so I made it more complicated by getting as candidates the small port differences and running those again and culling again, got the 1st chunk of my flag before running out of time... oh well.

Stripe people made an excellent job, I really enjoyed the challenge. They were blogging than the set up took only a couple of man-weeks, given the success of this CTF I think there may be a start-up idea here: to use similar challenges for programming and/or security training/job interviews.

I'll take someone who solved by himself/herself this ctf over a CISSP in most situations any time (I'm a CISSP myself).
Most unusual...

"Politics are great, come buy our new, brand spanking awesome banana phone, apple, steve jobs, cripplingly epic banana phone. Just great phones, with bananas, no apples to be found here. Samsung can suck on our banana phone. Android is better than iOS."

"Your text: 251 characters, 43 words
Bullshit Index :0.03
Your text shows no or marginal indications of 'bullshit'-English."
Heated debate on embarcadero discussion forum about this change:
https://forums.embarcadero.com/thread.jspa?threadID=76082
It's always been a big challenge to manage thousands of MS Windows desktops and it certainly has not gotten substantially better with BYOC / mobility of users.

The real challenge for MS will come with establishing Windows 8 in the corporate space - don't believe that it will be happening without substantial changes / limitations removed by MS.

Reminds me a bit to the first versions of Windows activation / update a few years ago when MS had to paddle back almost the whole way before commercial customers started to upgrade to the new Windows version.
That is terrifyingly evil. And I mean that in the best possible way.
This is great to read.. I love the idea of "bonkers discussions", now I have that to look forward to in 3 years. :)
Looks very nice (Golden Cheetah user with Garmin Edge 705 and PowerTap SL+ hub).

What about tools to help edit out unwanted sections of a recorded ride?

My type of riding, mainly long distance (Audax), means rides of 9 hours or more (up to 116 hours) with various length stops for food and/or naps (for the multi-day rides). It was a lot of faff with Golden Cheetah (or even editing the .tcx files directly) to trim out sections where I'd stopped and accidentally left the Garmin recording.

Some nice way of selecting a chunk of a ride (whilst either looking at a zoomed in map or selecting a section in the speed/power/cadence/HR graph) and then moving it to a new 'lap' (where it could be kept or deleted) would be very useful.
There have been problems... http://www.openssh.org/security.html
Thank you, you proved my point.
thanks thaumaturgy. I took my typical "make the problem simple" approach
and replaced the function contents with:

function displayx() {
alert("Hello Nurse!");
}

By the name change you can see my first guess was the name 'display()'
might be causing the problem.

As for Colin's question about for searching for this kind of stuff, it
helps to make the problem smaller and more isolated ("bifurcation" is
the more typical/pedantic way to say it). In this case you could search
on the very first step, the [onclick], find a working example, and
see if you can get the example to run properly.

<button onclick="alert('Hello Nurse!');">Click Me</button>

If it doesn't work, then you probably have a script blocker
or popup blocker problem... or in my typical case, I've mistyped
something important. ;)

From there, find a simple example of calling a function from onclick, and see
if you it to run properly. If it works, then compare your code to the example.
If the simple example doesn't work, then you might have a bad example, or
you mistyped something, or there might be something odd in your browser config,
or you've just found a bug in your browser, or ... --keep trying to simplify and
isolate the problem.

The trouble with javascript searching and finding examples is finding bad examples.
They're everywhere. The volume of bad JS code on the web is just staggering, but
the worst parts are ancient, outdated and broken code still hanging around, and the
existence of countless hacks to get around browser bugs/differences. The hacks can
often look like horridly bad code, but sadly, they exist for a reason and they
are seldom explained.
Java...WAT (Part I)
https://gist.github.com/38c0430b5084f8442858

You only need 1 call per possible number for each chunk, yes. But since the numbers are random between 0 to 999, that averages to 500 requests per chunk. Additionally, you don't have to do any kind of port checking for the last chunk, so that saves on any overhead you might have for the port checks. Based on this I'd say there's (3x 500 requests + 20% overhead) + 500 requests for the final block. That's 2300 requests on average.
9 things you didn't know about Steve Jobs
On the other side of the coin, I've noticed that email is the new voicemail - people expect emails to be replied to in a window of hours, not days. People are incredulous when I show them my phone (no Android or iOS, sorry) and ask "How do you get any work done?"
I'm not honestly sure when support for it was dropped; I know it fell out of favor at least 7 or 8 years ago. I can't quickly find a reference on the web to when support for legacy DOM was dropped, either.

For me, the third result for "javascript element value" is http://stackoverflow.com/questions/1988614/how-to-get-hidden...; the top result is a post full of techniques that work, but aren't what I'd use.

How you'd get up to date depends a little on how far you want to go with Javascript. If you just want to be able to do basic stuff and then get on with your work, probably your best bet is to use jQuery and start with their tutorials (http://docs.jquery.com/Tutorials:Getting_Started_with_jQuery). jQuery does a nice job of abstracting away many of the annoying things about the DOM and the various browser quirks associated with it.

If you wanted to really delve in to Javascript, I'm not really sure what to recommend. You would be throwing out most of the Netscape 4.0 way of doing things, and you'd eventually want to learn things like closures and Javascript's occasionally-annoying "everything is a global variable by default" and so on. One of the revered volumes would probably be best I guess: http://stackoverflow.com/questions/74884/good-javascript-boo...

I hear you on your frustration with it. Getting used to using the web inspector in Chrome or Firebug in Firefox helps, but error messages can be unhelpful, and you can find yourself swimming through lots of outdated (or incorrect, or even just "that's not how most people do things") blog posts when looking for answers. It's not quite like the good ol' days where you could drop in to a debugger and see the entire environment state and step through your code and so on. The mix of html and css and javascript also makes for this horrifically broad field of knowledge, most of which isn't really derivative, so it becomes a matter of trial-and-error and memorization.
Cupcake Retina-Ready Mobile Template
No, that's not actually how laziness works when running a parser...
Provided the "contact us" form the first HN-er asked for at the bottom of http://lookapinky.com
Free Software and Content Licenses You Should Totally Use
Show off Perl in Plat_Forms 2012
"in other words, pointless. It might stop some of the "log spam".."

You kind-of contradicted yourself in four words there.. Afaik, it stops the most common "attacks", the automated drive-by password-guessing attacks. Far from pointless.
You don't have to get the base port on each try, you can just re-use the previous result. I achieved this by simply storing them on the global scope and only keeping the "last" and "before last" port numbers.

https://gist.github.com/38c0430b5084f8442858 for my entire implementation.
Amp Up Your Marketing — Review Of Constant Contact
Shown HN: Hartli
Derrida, Chapter 2 'Of Grammatology'

>Bullshit Index :0.26 Your text shows some indications of 'bullshit'

some indications ... I'd say this thing is broken.
When searched on Google, vim can be any of these things (http://en.wikipedia.org/wiki/Vim), and many more. Notice that Korea is the top searcher, and Vim could very well be a popular Korean name.
I copied in a Daily Mail article and it only gave me 0.12. I think your algorithm needs work...
> Robbins suggests setting up an “Hour of Power,” “30 Minutes to Thrive,” or at least “Fifteen Minutes to Fulfillment.”

If I don't have time for that, can I try "5 minutes of self help drivel"?
This type of broad trend analysis is really useful and should be done more often. It's these types of interactions that become "intuitive".
Actually this tool is not only for Sysadmin's - it is very helpful for developers. I know there are other tools like gdb, etc. But if you have to use (calling from your program) other programs, or if the library that you use does something strange, then strace is a shortcut.

From this article I learned that strace can be called to analyse an already running process (-p).
As someone who doesn't have a very subtle understanding in English, I can't figure out if this is an endorsement, or very much not one? (serious question! I'd rather fly by your crypto-intuitions than my own...)
+1 for getting stuff out the door

other than that, I'd say put this in the: "stuff i coded in 30 minutes just 'cause" drawer and keep digging :)
I'm sure crackers and scammers think so too ;)
Interestically someone just released a new async scala drivers : http://news.ycombinator.com/item?id=4454077
Can't tell if trolling or not. That's an URL and they can name it with whatever name they want (.dll, 1761,1238,196.htm, .php, etc), and has absolutely nothing to do with an actual process running on your machine.
Most visits start on phone, then move to larger screen
Steve Blank’s trap: the flaw that pushes startups into illusions
When I opened your splash page, I had no idea what it did, I clicked a link, waited for it to load, it took too long so I closed it.

You need to have a clear message about your product when someone hits your website, not just a list of cities, otherwise, poor, uneducated people like me get confused and leave the site.
I use matplotlib almost every day for work and school. I'm very sad to hear of his passing.

Donating to help. His work helps me so much, this is the least I can do.
There is also a very cool sample using GridFS for storing and streaming files https://github.com/sgodbillon/reactivemongo-demo-app
Qt5 is taking the project in some interesting directions regarding the UI aspects. I think it'll be a good thing overall but it's certainly proving a bit contenious amongst people who're comfortable with QWidget and don't like the idea of JavaScript being a first class citizen. As long as it's as fast I'm happy.
while diff > 2: tryAgain()
It's not even news. The sole purpose of TC is to get traffic for web apps that Arrington and other insiders have a personal stake in.
It's a fairly simply-described reaction that a non-deaf person could have to that piece just because of its beauty not because they are hearing music for the first time.
One of the most critical information for "serious" cyclists is on rest/recovery intervals. None of the existing online tools have this, so people like me have to work on it offline and manually in a spreadsheet[1]. If someone could find a way to combine the effort of each training in the same chart, that would be awesome because it'd make recovery much more manageable.

[1] http://rodolphoarruda.pro.br/d/panel.jpg
Sorry to hear about that.

Windows isn't a closed hardware platform like OS X, so driver support can be difficult (Windows update helps a lot on that).

Also, are you overclocking? Using a 4-year-old motherboard? There has to be some reason for BSOD - it's not a normal condition. Not making excuses, hundreds of millions of machines run for years without doing it.
It's incredibly cool. Not something I'd necessarily want to actually use in production, though.
Great, I've been waiting for this. Now I can finally get past level 2 -- I didn't realize a non-existent file would work, even though I did figure you could overwrite variables due to the get. I considered overwriting filename with "index.php" and figuring out what attempt would have to be to pass -- but that was too much work for a simple challenge when I had enough other stuff to do ;-)

At least I identified the "correct" vulnerability.
Agreed, the IRC channels were fantastic while I was still working through the levels, but when I joined much closer to the end (the last few hours before it ended), there seemed to be a fair amount of people just asking for code to run, and a few people obliging. It was really kind of disappointing after working all weekend on level 8, to see someone complaining that they only had two hours to get someone else's script working and needed help.
It would be much better if it could highlight bullshit sections.
First off, I liked the article. He's right in that visual UI should only be looked at after everything possible has been gleaned from process.

As for TVs, I think most who are designing the interfaces are still stuck "inside the box". They need to take a couple steps back and learn how modern people use the interfaces. This is one of the main reasons I dropped cable and now feed my TV from a web-connected PC. The cable box interface was a thick jungle of rectangular boxes when searching or filtering should be forefront. We have the technology!
Thankyou for both of your thoughts. I greatly appreciate this feedback.

I'm targeting a niche market with this, but I'm not quite sure about the level that I should be talking to them. On one hand, it's easy to assume they know a fair bit about the data that the power meter they spent a couple of thousand dollars on produces, so I don't need to explain what everything is. On the other hand, that's probably a dangerous assumption that often isn't true, so the more explanation I give, the better. I'll make the front page better in time, but I'm not entirely sure how to strike the right balance.

What part of using it after signing up are you having difficulty with? Have you uploaded any rides? Email me at david@cyclinganalytics.com if you like.
Parody - Apple kills Star Trek
Pash is right. No word yet on crowdfunding. It will be interesting to see how this change to the general-solicitation rules impacts the crowdfunding portion of the bill. The provisions are somewhat contradictory, so long as the accredited-investor limitation remains.
Twitter's latest dev statement got a .42
Great Job! One question, do cyclists really understand these kind of charts/graphs?
TechCrunch with a reading list.
You have the causality backwards.
That's the first thing I've checked, I'm a little disappointed.
And I think it's great. It solves a lot of problems with navigation on mobile by giving you a near-screenfull (or more) to work with.
RDTSC cycle counting shows C++ - JNI calls VERY SLOW INDEAD
A bit meta: I would love to be able to browse appflo.ws better on my iPad. The site seems set up solely for desktop navigation at the moment (use of hovers, width etc.)
"A large part of a bio chunked into nine parts, arbitrarily"
I totally agree with the principle - smaller code base, considerably less potential for security holes - but in practice, how many eyeballs have audited spiped in its one year since release (and how many of those belonged to crypto-experts - I, for one, couldn't possible spot any vulnerabilities)?

You have a very good track record of course, so that should count in favour of spiped, but on the other hand there's also some value in the massive user base of openSSH, when it comes to auditing.
Ah, of course - I did read through your code (obviously not carefully enough). How do you get down to 2400 requests though?

Edit: saw the answers above - it's 2400 average case, not worst case.
Thanks much! We're planning a series of trend analysis for the Fall, across both iPhone and iPad. We'll be posting on twitter, @appflows
Wow, news.ycombinator surely has become very offensive and attacking. So much that a person cannot ask questions about IT.
as a lifelong vim user, what is emacs?
Hate the button on the left side. Usage on a 4,7" phone is not possible with one hand.
How about allowing automated signup for read-only accounts? I don't want to post comments on lobste.rs, but it would be nice to have access to other features (e.g. tag-based filtering.)
One reason retailers are chomping at the bits over near field payment is that it will eliminate all the unproductive conversation between employees One and customers. Distracted by their phone, there will be less likelihood of personal interaction. This will leave the employee free to pimp magazine subscriptions and extended warranties in strict accordance with the scripts retailers are forcing upon checkout line staff.

There's already a great interface for taking people's money which doesn't require a location aware electronic device. It has a face and a uses natural language.

(Now, get off my lawn).
КОСТОЛОМ / Mean Machine - (2002)  DVDRip
What would you build instead to make this idea work?
You should come to Singapore / Hong Kong ... which is gateway to other Asian countries!
Floating - CSS/CSS3 Course - Part 12