skysight-inc/HackerNews huggingface dataset:
You're right. But the worst thing that can happen is someone POSTs large fake objects and tries to flood my server's hard drive. Which, given the max size of a POST's data will take quite some time :)

The API only allows querying posts on the current user (with now user input) so there's no risk of "NoSQL injection": https://github.com/julien-c/Tampon/blob/master/api/posts.php
It's not any weirder than our other idolizations.
Is it possible to travel in Stockholm on a budget?
A travel blogger posted that he could travel for five days in Stockholm for $100. What do you think?
4chan gets real about software
The current situation, according to [1], is that there is a higher import tax on components than on assembled boards.

This is, as I understand it, because there's no import duty on components that are part of information technology products such as computers[2] - but components which are not yet part of such a product are subject to import duty.

To fix this we don't need to raise a protectionist import duty for IT products - we can just drop the import duty on electronic components.

[1] http://www.raspberrypi.org/archives/509
[2] http://www.charleswalker.org/import-duties
Arment was quite quick to call out Apple over the broken app signing problem a month or so ago, even when other people were wondering was it router-induced corruption. He's also been complaining about the sandboxed-app-only requirement for the Mac app store for ages.
What is the benefit of using a VPN over something like SSH tunneling?
Awesome, now I know what to call Unscatter. I've been calling it a search site, because I don't currently have my own index of anything. I like search provider better. Thanks!
Will a ‘mini-iPad’ dethrone the recently launched Nexus 7?
Android is getting some good press right now.

Apply is about to announce the iPhone 5 on 12 Sep. Exactly how long do you think Samsung will be #1?
The Truth About Network Performance: It's the Applications, Stupid
> If you participated in the recent Stripe.com Capture The Flag contest without using a VPN or staged connection (ssh), then you really didn't put very much thought into what could happen if some malicious person rooted the game server and attacked the game participants.

What damage could an attacker cause? (And how would a VPN help?)
Wat -- an ultra-lightweight practical Lisp for JavaScript
In general, this is true, but the proper way to view Scala is as a 'fixed' version of Java. Scala isn't really competing for the same mindshare as Ruby/Python/etc., and for good reason. Scala is basically what Java should have been (or at least, that's the goal).

Scala is not truly functional - like Java, it is object-oriented. It just so happens that, once you step outside the Java bastardization of that term and think about a more 'pure' OO, the result is fairly functional-looking. OO and FP aren't really competing paradigms; rather, OO is a more complex paradigm that can be constructed from a functional
system. (The inverse is technically true too, but much uglier in practice).

(To give an example of what I mean, Scala supports first-class objects, and functions/methods are included in that statement. Scala does not support first-class, module-level functions (outside an object). That's not functional programming; it's object-oriented! But if you design your OO system well, you get something similar. Java does this badly, because methods aren't first-class objects - and unlike C, you can't really use pointers/references to fake the same behavior, so you get the worst of both worlds).

Of course, Scala has to deal with limitations of the JVM - that's their compromise to gain binary inter-compatibility - but the designs of the two languages are a night-and-day comparison.
Now, this is the sort of article I want to see on Hacker News. Excellent read.
I don't know about PayPal, but I used to work for a well-known online retailer and have seen the fraud data on that side.

The specific numbers are privileged, but suffice it to say, I'm very confident that PayPal deals with as much, if not more fraud, than the mind-boggling amounts I saw at that job.
In fact it's not... Java JVM is a great piece of software it's extremely reliable and fast, the language is what sucks a bit ( I am a Java Dev btw ),If I remember right Ruby IN THE PAST had some problems with concurrency, and that is were JRuby came from (correct me, if I am wrong... No flame wars please.), so reinventing the well takes time and sometimes goes wrong for a while.

Some wikipedia:
"JRuby supports interpreted mode, AOT mode, and JIT mode (the last two modes are available since version 1.1[19]). JRuby evolved from being several times slower than Ruby Reference implementation[32], to being several times faster.[33] [34]."

I learned a bit of Scala and I think it's a awesome lang, if you have time to learn it properly otherwise it might to pull your blanket, because it's a little trick at some things.

I would definetly like to work with it, in fact I plan use it in my next side project together with Backbone.js
ahem

Marginal costs on ebooks are essentially zero after factoring payment to authors/publishers. Fixed costs, even long-term variable costs, cannot be considered marginal costs here. The costs are hosting and delivery of content.

So unless Amazon is selling books at a price lower than what it paid to authors/publishers who distribute through them, I don't follow the inherent marginal cost pricing argument.

Perhaps the author means average costs?
Maybe this is a stupid question, but what does a lawsuit settled in 2012 have to do with an announcement made in 2010?
Getting Started with Python, Django, and Heroku
Code injection isn't impossible in Objective-C even on iOS, check out http://injectionforxcode.com/ or the write up by Erica Sadun here: http://www.tuaw.com/2012/05/10/devjuice-injection-for-xcode/
So what is your point? The more experience a company has the more naive they're likely to be? That's ridiculous.
"From the organization that brought you court-ordered installation of a basic Ethernet sniffer comes APNS-enabled MITM'ing of individual IOS applications"?

That doesn't follow. I don't like the FBI installing sniffers at ISPs either, but "Carnivore" is just a dumb name for a technique you had to have assumed the FBI already had (what, they can tap phones but we thought email was off limits?).
What features do developers get excited about in Postgres?
>>If you're shopping for something, the paid and Google shopping results are often more relevant than the organic results since a lot of them incorporate real time price feeds or promotion codes.<<

In many cases such feed prices are inaccurate. I have used Google shopping many times looking for the advertised price only to find it's "out of stock" or the promotion had ended by the time you click the link. People do the same crap to the other shopping search engines too.

>Advertisers do not bid on keywords that deliver no economic value so it's in their best interest to only show up when they are the most relevant to your query.<

In some case the economic value isn't in the best interest of users. A lot of spam targets installing malware, invading privacy, or similar. Further, there are ads which advise you to "buy x thousand links for cheap" or similar, which at their core suggest you violate Google's search guidelines. And Google had like 50,000 advertisers pushing counterfeit goods at one point (according to Google) and that issue got cleaned up only after Google was hit with a sting operation where they were caught selling ads for steroids for a person posing as a Mexican drug lord. Apparently the drug lord had a high quality score at the time. ;)
Agree that technically mobile is embedded, but mobile is more popularly considered a separate market from embedded. For example, while a phone and a washing machine may have the same sort of CPU, most engineers consider these separate markets.

Do you think that Steve Ballmer will be the one that wakes up, or does the board find a new chief executive?
Zenbox: Bushido Pivots From Cloud Platforms To Customer Data
The world is split I assume between the "new wave" which prefer vim, textmate over eclipse / aptana / vstudio, prefer linux/Mac over windows, prefer dynamic and functional over static and object oriented, prefer git over svn, and prefer fun startups over gray enterprises, and I can't blame them.

However, as much as it may surprise, most developers of this world, as much as they would like to work in a startup, work in a gray, corporate enterprise, write Java, Spring and Hibernate, or .NET, and have no clue about anything beyond that.

Scala does a wonderful thing, it allows enterprise developers to taste some of the goodies of Ruby / Python but stay in static Java land. which is great news for everyone.

There are many Enterprise developers who are amazing developers and architects, and can benefit any startup, the more they get close to newer "trends" the more likely the connection will happen.

Young startups will benefit, 40+ enterprise Java architects will benefit, and perhaps the talent wars will have a cease fire.

I'm pushing everyone I know to take a look at Scala, it's here to stay, and if you take a look at play framework, it's looking even more like the next big thing.

It all comes down to the community, if the ruby / rails community will be scala / play friendly, and endorse it as a "ok it's Java but we hate it less", it will help it take off.

As an enterprise developer, I really need something like scala / play to take off, as I won't be able to get ruby on rails / django in the same way I could get play / lift. as much as I think they are great frameworks, it's hard to sell to the enterprise crowd.
Narrowing Ambitions of Venture Capital
Right, Graham Nelson reverse-engineered the Z-machine, and wrote the Inform language to target it. Versions 1-6 were more cryptic DSLs https://en.wikipedia.org/wiki/Inform_7#Example_game whereas Inform 7 reads like plain English https://en.wikipedia.org/wiki/Inform_7#Example_game_2

Edit: ok several mistakes in a small paragraph :) Nelson didn't solely reverse-engineer the z-machine, and Inform 1-5 were quite different from v6.
Interesting points. However I can see music playback work nicely: a music player in extra-wide landscape orientation would actually be quite similar to the backlit LCD screen of a classic car radio. You just need to way to firmly fix it somewhere in that orientation.

I agree that wouldn't really work for navigation, but for music it'd be kinda cool.

(note: I'm not actually thinking of buying an iPhone, going to get an Android, though probably not the latest model)
I think the more interesting thing is a link in one of the comments:

http://www.infoworld.com/d/application-development/scala-the-android-programming-language-you-didnt-know-you-had-170999

...I didn't realise you could use Scala with Android's Dalvik.

Admittedly, that's an article from 2011, and it's probably on hacker news somewhere already, but still...
Umm... never heard of AutoPager?
"While TSA agents lack the authority to arrest or detain anyone, passengers cannot refuse screening once they have proceeded beyond the screening checkpoint entrance."

How does that work? You can't just waive your rights. I wonder what would happen if you said no. They may not let you on your flight but if you just landed and buying coffee there's noting they can do if you refuse.
I immediately stopped reading at "their're".
Something is wrong, because I chose 'draw' twice, but apparently I prefered bing over google 4 times out of 5.
You didn't explain what's wrong with the JVM. Please do.

The JVM is very fast and ubiquitous. Targeting the JVM allows the language developers to focus on the language rather than re-inventing a runtime (which is a monster project)
It's clear from context that it's a perfectly cromulent word.
I don't understand this statement at all:

"Last year, when nobody had heard of the Raspberry Pi, we had been unable to find a British manufacturer whose prices per unit (especially at a point where we were thinking of sales in the tens of thousands, not the hundreds of thousands you’re seeing now) would work for us, and who believed that the project would be enough of a success for them to risk line space for us."

Who wouldn't take one project because they were afraid you wouldn't come back for more? Is business so hopping over there that people scoff at a $1M deal because you may not come back later for a $5M deal? Or, were you actually asking them to reserve production, but that you might cancel before it started?
That is sad. Do you use POP or IMAP with GMail? And do you see anything weird in the "Last Account Activity" link at the bottom of the page?

Also, were the messages merely archived (i.e., moved from Inbox to All Mail), or were they completely deleted (i.e., you can't even find them via the search box)?
Wajam: The future tool of social searching?
Then you probably weren't there at the time. _Why was a hugely inspiring figure for a lot of the Ruby community just when the language was starting to take off. His love of doing neat things with Ruby was infectious, and it really helped a lot of people find joy in what they were doing. The fact that he later disappeared doesn't make those memories disappear.

(Not to say that I think this thing is called for, but I know I still remember him very fondly and his contributions to the world are still something I look up to. I don't see anything weird about that.)
Until Apple figures out annual upgrade cycles, Samsung will probably be number 1 again by spring 2013 as Apple consumers postpone purchases until the next annual Apple product release.

Samsung and others are free to attack the seasonal gaps in the Apple annual - holiday season - upgrade cycle.
This actually sounds more like your account got hijacked, or the screen was left up and someone deleted the inbox messages. Try this process to recover messages from the trash: http://support.google.com/mail/bin/answer.py?hl=en&answe...

Can you check for unusual forwarding rules or delegation in settings? As a follow-up, do you use two-factor authentication on this Gmail account?

Also, check your
If you don't or can't be bothered to do that then you should shut your pie hole.

I'm guessing that it's comments like this ("shut your pie hole") that are creating the sense that the quality of discussion at this site is in decline (http://news.ycombinator.com/item?id=4396747)
Yeah, I'd prefer they weren't doing content aware stuff (if they cared it would probably be optional, so I'm not surprised that they are doing it poorly).

I was mostly trying to confirm that it was the carriers and not malware or whatever.
Fixed link. http://bb.osmocom.org/trac

Site seems to be having trouble with the traffic though.
Shit Apple fanatics say
The Art of Scaling People
I am so very glad that someone wrote this issue up in detail. The fact that the Unix filesystem makes it extremely difficult to write correct scripts and to issue non-problematic commands at the shell is Unix's biggest flaw.

The whole point of Unix, and the reason that it was so revolutionary, was to empower the easy composition of complex tasks via scripts and command line invocations. The “negative freedom" implemented by the filesystem has undermined the "positive freedom" of Unix's original intent.

The kernel hackers' response to this, back in the day, was typically, "Program in C instead." It was a shame that the kernel hackers didn't understand Unix!
Show HN: Launched my first project
> But the TSA says the practice isn’t new — it’s been going on since 2007 — and is part of random screening techniques designed to catch liquid explosives that might slip through initial screening.

Wow, who are these people trying to convince? A random sampling make absolutely no sense here. To have a 95% chance of catching the offending substance, you'd have to "randomly screen" 95% of passengers.

And that's assuming that the screening technique would actually catch a determined individual, which it won't, because he's a terrorist and he's thought things through.
Actually not sure if that was a troll? They were just quoting Samsung's statement (which is relevant info ITT), I'm not sure if they agreed with it or considered it a sufficient apology.

(actually, given that it's three days without a reply, that pretty much rules out "troll", by the definition that I've come to know and love)
This would take a direct hit on their reputation!
> "In order to use WP8-specific features, developers will need to use a new development model. "

It's not only the WP8 model. Windows 8 has changed, Server 2012 has changed, and so on... I have so many new keys and downloads available at MSDN, I have to take time to plan what I want to load into a vitual machine and start testing against.
Are you sure? What if the crowdsourced money is divided up front, and payed to the politician in yearly chunks, maybe with an appointed trustee able to cancel the payments?
Not sure what you mean by money + power.
I just reached out to Google to clarify what the issue actually is. Really hoping that this isn't the reason. I suppose if I rebranded it just as hashtags and remove all references of Instagram it should be ok, right?
No, actually I never did hear about AutoPager. Regardless, this extension only took a few minutes to write and was very fun to work on.

HN is the only place, so far, where I really wanted infinite scroll and it wasn't provided by the website itself.
I used to think the "tomato: fruit of vegetable?" question was the big amusing food debate, but now I found this: http://empirezone.blogs.nytimes.com/2007/06/11/corn-vegetabl...
Other than the logo, and the bar at the top that says "Join Google+" (which of course, may be a slight annoyance to some people), what difference do you find between the old Maps/Places page for a restaurant and the new "Google+ Local" restaurant page that you're afraid of being confused into landing on? I just checked a local pizza joint while not signed in to Google and those two things are the only things that aren't reviews and information about the place (i.e. the only differences of substance between the new pages and the old Place pages).
What I find interesting is Azure Mobile Services was apparently built using node.js.
Because the goal is to have something that finds any particular information I want, not go to every site and hope it may show up in a site search?
The OS X Keychain is designed to mitigate the impact of losing code execution in a user context. This is important because on most Mac systems, all the data anyone cares about is stored under the user's UID; nobody really cares about escalating privileges on a single-user system. What Keychain does is create a repository for data that can't be read even if you can execve() arbitrary programs under the UID of the owner of that data.

From that vantage point, a mechanism that breaches the Keychain for a superuser isn't interesting as a system-level flaw. The OS X superuser also owns the kernel and every keystroke entered into the system. The Keychain isn't an impregnable fortress; it is just a scheme for requiring a login for a user to read some of their own data.
I didn't. I created account for some integration in work started getting tons of invites. Eventually stopped using it nearly years ago. Not missing it at all!
Very strange Pioneer CD player fault, why?
I was curious for details, as I didn't think anybody would be that dumb and still be serious. I did search for requests for a board design related to Android or Cortex class CPUs on the site, or similar freelance sites (or eLance or Freelancer.com)
Xconomy Venture Incubator Guide lists 121 accelerators, up from 64 in 2011
But what was a little surprising is that there were no handsets for the press to play with. There were some demonstration units carefully attended by PR personnel, and while we were able to get kind of close to them, the general rule was "you can look but you can't touch."

Looking at this [1] video I would say that this article is just another BS from Ars.

[1] http://reviews.cnet.com/smartphones/nokia-lumia-920-slate/45...
Backup master class: Philosophy, structure, and why RAID isn’t a solution
True but it's much easier to set up on server side as well as client side. I mainly use VPN to get around firewall of China so security isn't really an issue for me.
I think the credit for the reverse engineering of the Z-machine goes to a lot more people than merely Graham Nelson. Nelson himself only claims 'a few pieces of the Jigsaw' in the Z-machine standards, at http://www.inform-fiction.org/zmachine/standards/z1point0/in... . He is the main man behind Inform, of course (and I reckon that his collaborator for Inform 7, Emily Short, is just his pseudonym too...)
Yes. Like telling an alcoholic to stick to one drink a day ...
Off topic: that "kind've" is interesting. It looks like a contraction, but it saves no space over the normal "kind of". Is that just a personal colloquialism of yours, or is it part of a regional thing, or...?
> As a buyer (and not a merchant), I love Paypal because I can have it debit directly from by bank account instead of handing over my credit card information.

I don't understand this at all. I pay through PayPal via a credit card when a merchant accepts no other form of payment, and if they ever gave me trouble, I trust my credit card provider enough that I don't have to trust PayPal. I wouldn't let PayPal near my bank account, because bank accounts don't have the same level of protection for illegitimate transfers, and PayPal will happily ACH away however much they feel entitled to.
Amazon Kindle press conference liveblog: Thursday, September 6
http://www.schneier.com/blog/archives/2012/08/poll_americans...
The key point I think is line space. Getting set up for production is quite a bit of work, and given that their new contract is for 30,000/month, the manufacturers clearly didn't want to set up an entire production line if they may only get a couple of months of usage out of it (since the original order would've been only in the tens of thousands).
> This guy is your typical lawyer who has no life outside of his job.

Far from it. If the comic author is who I think it is [1] (and I'm pretty sure it is), he's not at all your typical lawyer. Way back in the day, he was the general counsel of Borland International [2], which published Turbo Pascal, Turbo C, Sidekick, etc. Bob's Christmas-card newsletters were always a blast to read, although I haven't been on his mailing list for a number of years now.

[1] http://en.wikipedia.org/wiki/Bob_Kohn

[2] http://en.wikipedia.org/wiki/Borland
sudo sshuttle 0/0 --dns -H -r user@server:port
>and that the only viable weapon at the moment for human on human spamming (this is where real humans are working for 5 cents a page to write web pages that draw hits) is human judgement.

You are aware that Google hires thousands of search engine quality raters, all over the world right? But rather than directly curating, i suspect they just use these humans to train their algorithms. There is likely some inductive step going on, in selecting which algorithm (or 'sort' of the web) is selected, and then filtered by keywords.

Secondly, most search engines, actually do also use end-user curation. I have funky enough search queries, that I often get google redirects as search results: they want to know (and record) which link i pick. Also, because of all the google-adds-cookies, google-analytics-cookies, etc, they likely have 'session-bags' full of destination links and search queries that happen to correlate.

For me personally, neither search engine did very good in this test. But that's likely because neither result set is personalized in this test. And i don't know, if Bing does that now, but even if it does, for me to switch to another search engine, means to train another search engine in my contextual world. Hell, i even notice difference in result sets in Google based on my operating system. I get different results in Linux, than i do on my iPad.

People that get a lot of spam in search results, really ought to login, and stop clicking those links.