skysight-inc/HackerNews huggingface dataset:
Scaling out Postgres, Part 2: Routing
For CRIME, I don't think that it's necessary to control the cookies. Having control of other parts of the request should be sufficient (e.g., using request headers, request body, etc).

As for manipulating cookies from the MITM perspective, here's one clunky way to do it: redirect the victim's browser to the plain-text version of the target web site, intercept that request, and set a new cookie (pretending to be the plain-text version of the target web site). The next request to the secure version of the target web site should contain the injected cookie. As tptacek mentioned in another comment, this approach would not work with a site that uses HTTP Strict Transport Security.
Inconsolata-g. Download link: http://leonardo-m.livejournal.com/77079.html
This is pretty cool. It's very personalized—it would never make sense for Yahoo to hire people to write recap for fantasy games, since those recaps are going to be of interest only to the participants in the league (and maybe only to the two players in the particular game). But it makes sense to have a program write recaps for all those individual games instead of just showing box scores or whatever they had before (I don't play fantasy football myself... it feels too much like work for me, messing around with spreadsheets and numbers and algorithms!).
I'll just throw this out there: Kansas City?

I am actually wondering if the Google Fiber initiative there will cause a startup boom.
E-commerce with MongoDB (+example)
It's not so much that the data itself is in motion, but that online secrecy/authentication necessarily implies widely-available encryption/verification oracles. Oracles with possible implementation vulnerabilities (/features) that can be abused to answer questions such as "What's the encrypted encoding of the secret++X" or "How long does it take to check if X is valid" ?
Here's the first part of the story https://news.ycombinator.com/item?id=4481292 the original pastebin http://pastebin.com/1j1yzQ9S the balance of the wallet "against" release http://blockchain.info/address/1HeF89wMjC48bWNgWvVo7Wu3RaLW8... and "for" release http://blockchain.info/address/12AP6iCwRNFQqKLStH3A4b4hw3SL6... but note that much of the balance is people communicating in binary ASCII code in the digits of the transactions.
This used to be a feature that several cards advertised, but seems it has been completely dropped by them all in the last 5 years.
iPhone diagnostics - another creative example of MapReduce learning
Ask HN: Railstutorial equivalent for a popular PHP framework?
Is there a tutorial along the lines of Michael Hartl's Rails Tutorial for a (widely used) PHP framework? Obviously there are tons of tutorials for e.g. Codeigniter, CakePHP, Symfony, etc., but I haven't been able to find one that is as extensive as Rails Tutorial is. Ideally, I'd like something that takes you from nothing to building a complete, functioning application with at least a decent amount of complexity.
Only way I can read that comment as anything but shameless self-promotion (or, more generously, over the line entrepreneurial-delusion) is if they intend to morph their using of social status to get things into being whuffies.
It does make sense when Apple is involved and is a foreign company that makes oodles of cash. It then becomes a very political thing. Plus, normal factories are nowhere near Foxconn's scale, so they're usually not worth reporting on, unless you're doing an industry-wide report. Foxconn has captured the world's attention. The industry has not. What is flashy is what sells, always has.
"Trolling" is a term of perspective, if you are witnessing the trolling then you have no information about the original intent.
To those that say Mongo's lack of transactions are a deal-breaker in e-commerce, I'd like to know more about this perspective. Can you be very specific?

We've been running production e-commerce sites for many months now and haven't encountered a major issue in the lack of transactions across collections.
America's 40 hour work week, overtime rules, break requirements, chemical handling safety rules and a bunch of other OSHA regulations make the worst American job infinitely better.
No I just made the poison pill stipulation and started working on the contingency. I pretty much knew what they where going to do, I submitted them more out of curiosity to see if someone would have the audacity to do something like that. But at the point they asked for them and gave such a weak justification, I had pretty much mentally moved on, but curiosity forced me to submit them to see and gave me a war story to tell.
The developer’s toolkit: node.js Connect
I find this reassuring for my personal projects; I'm not a security expert. I've been afraid that my VPS was going to be exploited as soon as I started opening up services to the internet, but so far this has not been the case. All I've done is install fail2ban and spent a short while reading up on best practices/config settings before installing services, and everything has worked out so far ...
Ascii Animation using an Image Sprite, Canvas, and Javascript
IME the "review, reflect and plan" is a one-hour meeting on a Friday, every two or three weeks.
"[A 3.5 inch screen instead of a 4 inch screen]is an example of one of those design decisions that you don’t usually notice until you see someone doing it wrong. It’s one of the things that makes Apple products Apple products."

http://dcurt.is/3-point-5-inches
Apple iPhone 5 presentation parody
IPhone 5 Comes With LTE World 802.11n Dual Channel Wi-Fi
I think this company is fascinating in its approach -- most companies are trying to automate the analysis of human-generated content where they are automating the generation of human-analyzable content.
still puts you ahead of all the "$currently_hot_company, but for $slightly_different_domain" ideas
Excellent observations based on actual experience.

A refreshing change from the usual "I don't understand what agile is but I did something I called agile and it sucked so I'm now blogging about how agile is broken".
I know it's marketing, but still:

"We used limestone from a local quarry to restore it and modernize it. Nobody would have done this but Apple... it's absolutely gorgeous."

It seems the RDF works inward as well as out.

No, no-one would ever build a store which incorporates local elements and / or recycling/reuse.
I'm sorry, which of those is pompous?
This is pretty spot on. It seems comparable to cross promotion for mobile apps. I found those to have the same issues you described. Lots of apps with very little users/value promoting each other.
I'm going to guess Nick would suggest Missouri :-)
Seconding citi virtual cards. You can also limit the maximum amount a virtual card can be charged.
Well that wasn't a very nice thing to say.

I was specifically hoping for a summary of results that discussed, among other things, experimental design. You gave me a vague Wikipedia article that points at a lot of specific studies I could probably summarize myself, as well as a lot of specific refuting studies I could summarize as well, but that's about it. And that's assuming I could get access to all the papers that it cites.
I like how how they try to point those things back at Apple, but the fact is, everything built on China is the same. Foxconn is rich because they do that, and China is rich because all factories do that.

China is a regime, and it's convenient for the west that it stays that way. It's a source of inexpensive labour force and a place you can pollute building your gadgets. If they were to follow the most strict rules from EU/US, there's no way in hell that you would have access to cheap electronics.

Now I ask: would you exchange first world conditions for those workers for more expensive products? The majority of us consumers don't have a clue, we just go for what has a good cost/benefit. Ethics often isn't a factor on where we spend our money.
$10,000 in production costs, $4,990,000 million in post-production security.

I watched a 13m51s 'trailer' that was linked from one of the NYTimes stories. It's hilariously awful, and further: some of the most-likely-to-offend, specifically anti-Muhammad/anti-Islam lines are clumsily dubbed in with different voices than the main actors.

Thus I suspect there's a chance that even the actors didn't know completely how their performances would be used: they might have thought it was some other period drama, that then via redubbing it had its offensiveness "turned up to 11".
Hi there. UserDiary was conceived about a month ago at the Box.com hackathon. We won the Parse API prize. That was the initial encouragement to keep pushing forward.

Our mission at UserDiary is to break down barriers between product people and their users. Our goal is to make the process of qualitative user studies painless for the researcher and the participants, so that feedback can be shared freely and data is organized to yeild the clearest insights. The end result, we hope, are better designed products and happier users.

Right now we're in closed alpha with a very raw MVP. But I'd love to hear your thoughts and feedback. Thanks HN community!
U.S. Ambassador to Libya Is Killed
Most beautiful number
Official YouTube App for iPhone and iPod Touch | App Review
Google released its official YouTube application on the Appstore. The app, despite of some bugs, scored a huge success and we decided to write a complete review of YouTube for iOS.
Sometimes it's unavoidable, but it's a concern that's worthy of consideration, and saying shit like "just don't have sex until you're married lol" isn't helpful.
"Talent warfare" cuts both ways—it attracts talent that you could use. As long as people are willing to pay me to work on the California coast, I don't want to move back to the land of 100 degree summers and chilly winters.
Is fast personal internet really that much of a driver?

SV has the money, it has the talent, it has the beautiful weather. Yeah the rent sucks, but that's the only downside I know.
To elaborate, copyright has always been primarily for the economic benefit of distributors, and only rationalized as a benefit for creators. Tolerating the occasional absurdity was understandable when distribution was capital-intensive and economic incentives were needed, but now that distribution is nearly free, our expanding copyright law only serves to incentivize marketing, an activity of questionable social benefit that hardly needs encouragement.
Ask HN: E-Ink Paperwhite with Digitizer
How good it would be if there is a device that enables you to takes notes similar to paper. Though iPad and other range of tablets exists, they don't come anywhere near to paper.
I am an ardent note taker, I would like to have a device like this, it is ok even for black & white. I have programming/development experience. Can anyone show me a path for the hardware development for such a device. I can give it a try.
Apple iPhone 5 announced
We started doing Scrum around a year ago and it has worked well for us. I feel some of the points described in the article about Scrum are not because of the framework itself but because there could have been a lack of a Scrum Master, which is an important piece in the puzzle, to ensure Scrum effectiveness.
Not quiet an iPhone 5 parody, but still brilliant work :D
Liveblog: Apple Announces iPhone 5
To be fair, Dustin Curtis was mostly complaining about the width of the screen, which is unchanged in the iPhone 5.
Show HN: I'm having a bake sale
The new screen is the same width as the old; just taller. If you look at the images in that blog post, it's pretty clear that a taller screen would be fine. It's the wider screen that really suffers. So I think his points hold.
Anti-Aging Tips: Keep Your Skin Glowing
Apple reveals the iPhone 5
Width, which seems optimal, hasn't changed. On the last image one can see that the green semicircle extends beyond the touchable part of the screen to the edges of the phone, implying the potential for a greater tactile surface.
Kansas City, Austin, Denver, Boulder, Boston, and anywhere near a college campus
Apple's 1980s clothing catalogue in pictures
No doubt all the Apple fanboys will now be rushing to flip-flop and explain why a 4" screen was the right decision all along.
What is the third microphone for?
I'm curious how the new screen shape will play out. And not just the issues with fragmentation of aspect ratio, but with usability. Currently the iphone screen is just big enough that I can hold it with one hand and reach all four corners with my thumb. That said, I trust Apple has tested the usability aspect of the phone and has a plan for the aspect ratio differences.
"Anyone else got 3 or higher?"

I have a drug that could massively raise the IQ of the world's population, in total more than the power of all the world's computers combined. And it costs only a couple pennies per person per year.

Iodine.
"One of the things that’s interesting is we actually have more people on a daily basis using mobile Web Facebook than we have using our iOS or Android apps combined."

Yes, a lot of people used the FB mobile web app because Mobile Safari ran their web pages better than the web views of the old native FB app.
iphone 5: Bigger iphone is bigger and fits bigger stuff.
You have made a common mistake of conflating 'democracy' with 'intolerance.'

The fundamental issue is that you've got people in place A who have different moral values and rules than people in place B, The folks in place B worry their values will be destroyed by access to the media from place A.

In this example the folks in strict Islamic nations are upset over a film which mocks the key figure in their religion. In the US devout Christians had much the same sort of anger over films that portrayed inter-racial marriage (and the implied intimacy). A few of the radical Christian clerics exhort their followers to violence in defense of their Christian beliefs under fire by their perception of an increasingly amoral society.

Has nothing to do with democracy, middle ages, or religion and everything to do with what are, and what are not, those so called inalienable rights that the insurgents talked about their independence manifesto. Driving a consensus on this issue is Hard Problem(tm) which the UN and others have been working on pretty much from the start.
You should definitely be pricing that into your rate already, IMO.
I'm surprised no one is chanting "CADT" and linking to "What killed Linux on the desktop". This sort of subtle breakage over time is absolutely goddamn maddening.
The attack as Pornin outlines it does not involve controlling the cookie header, but rather on being able to get content into the client's TX stream that happens to match the cookie header; think in terms of things like query args and post data.

I think all three comments in this little subthread might be saying the same thing. Go nerddom!
Top is for noise cancellation, the back is for video.
Better noise cancellation and voice recognition.
When you're talking gigabit speeds, hell yes it is.
In Steve's latest bio it seemed to suggest the next iPhone would have a revolutionary design. It seems to be pretty iterative to me.
HP Strengthens Security Portfolio With IPS, Data Center Services
SEEKING WORK - Remote (based in Poland, Europe)

We are a small but dedicated team of seasoned software engineers building web and mobile applications, including complex systems like online real-time trading markets.

Technologies:

- Java and all Java-related technologies (Play framework, Spring, etc.),

- Android mobile applications,

- iOS mobile applications,

- HTML/CSS/JavaScript,

- very strong database (MySQL, PostgreSQL, Oracle, Teradata) and high performance application design skills (yes, some of us have solid investment banking background, and recently we have built a real-time trading platform for physical gold),

- cloud deployments (Amazon EC2, Google Application Engine).

More about us: http://www.codedose.com

E-mail us: contact@codedose.com
Forced advertisements on Youtube
Why has google suddenly increased the frequency of forced video advertisements on youtube. Is it going to make them lose viewrship? Your opinions?
1) code is minor part of delivering software that customer is willing to pay for.

2) "code well" is such a broad affirmation as to include using Scrum/Agile/something else to ensure that the code we deliver, works, is what customer wanted, when they wanted it, and cost < revenue.
You know what? Facebook gives users the tools to block this stuff. You can block all content from an app.
Now I know zynga makes a few apps, but not that many
Any time some new one pops up in my feed I block it. I haven't had a problem with this junk in my feed for a very long time. I can barely believe its bugging smart technical people.
may be less than people expected, but still very impressive list of improvements:

- 20% lighter than the previous model

- a little larger display

- A6 processor

- camera with a better low-light performance

- 802.11a/b/g/n 2.4GHz, dual channel 5GHz, just like in the Kindle Fire HD

- 4G LTE networks support (around the world)

- HSPA+ and DC-HSDPA (improvements to the existing 3G technology)

and, looks like more news to come...
Maybe not what it used to be but still very active. I'm not on as much as I used to be but when I'm there I'm on Freenode #android-dev at least.

Used to always be on EFnet for Symbian chat but the best Android chat is on Freenode so that's where I go now.
If you rate does not account for unpaid time you are charging too little. My rate supports my ability to take unpaid time as well as between contract time. It is a reality of freelancing and if the market demands freelancers then the market has to bare the rate of those non-productive hours if not freelancing ceases to be economically viable. Too many people that get into freelancing look at an hourly rate and compare that to the salaried rate they where making, they think oh wow that is more money, but they never factor in down-time. A few hard lessons later and they generally double their rate or leave freelancing all together.
> You have made a common mistake of conflating 'democracy' with 'intolerance.'

The reason why I've conflated them is because democracy is almost always a prerequisite for tolerance. Sure, it's possible for a non-democratic country to be tolerant, but that is a rare abnormality.

Moreover, the reason why I put the word "democratization" in scare quotes in my previous post is because I was also using it with the underlying meaning that exists in America - "to transplant our culture/values into another country".
Canada is already a country of immigrants. If they lower entry barriers, won't next generation of Canadians be of less quality than the current one? Of course there will be more of them, but do they NEED more people, especially at the expense of quality? Maybe about the current size is right for them - they are in no immediate threat of say, territorial losses to some foreign power, or any other threat arising from low population (for Israel situation is the opposite: It needs as many Jews and as few non-jews as possible, due to being rounded with enemies, so it's OK if these are any Jews you can find, and even allow some flexibility about who is a Jew).

Canada came to where it is now (a nice place, with places like Toronto or Montreal near top of world's liveability index) exactly due to that: they have been very picky about people who they let in.

Somehow people fight for lowering immigration barriers thinking they are a discrimination of some sort and yet nobody thinks that say, entry exams to college are a discrimination. But these are essentially same thing: allow everyone into a good college and in a few years you'll get a shitty college (because both good professors will leave to avoid teaching idiots, and good students will not enroll for same reason).
I was referring to trolling as something one does, rather than troll as something one is.
This is my first hacker news post using Chrome. JaegerMonkey and TraceMonkey both failed, I'm tired of waiting. The three curent builds of FF (nightly, beta and release) are horrendous on Mac. Two Windows and 15 tabs (total) will cost you ~1GB to ~1.5GB ram. After sticking with FF since before it was called Firefox, I have made the move to Chrome. FF simply became unusable in a work environment.

I'm tired of Mozilla coming out with their righteous BS about standards etc. They get distracted by every shiny object (mobile OS, mobile browser) when their flag ship product is in dire need of some love (UI/UX , memory leaks, JS speed, etc.) Part of their goal this year was to close the gap with Chrome, for me I've only seen it widen and I dont think Chrome has improved that much...
Hyperexponential runtime
The whole iOS6 demo is a flashback to WWDC... Nothing new here for the iPhone 5 so far...
There was a similar article somewhere, I think on 'The Verge'. But this list looks better.
The iPhone 5 Comes With The New “Lightning” Connector
Data in motion creates opportunities for adaptive chosen plaintext attacks that aren't present in data-at-rest scenarios. An "oracle" is a basic characteristic of a cryptosystem, not a flaw, but the "oracle attacks" you're thinking of are instances of adaptive attacks.
I like to live by a certain mantra:

No problem worth solving has ever been solved
on an Internet forum.

It doesn't matter if it's not wholly accurate. What matters is that it keeps me out of some nasty exchanges. Missing a rare island of illumination is worth circumventing the otherwise vast sea of bile.

I am not likely to respond to attempts at refutation to my mantra. You see, I have this mantra...
Are we giving points for effort now? If OP added anything novel, included actual research rather than attempts at just logicking out an answer, supported pretty much any of the statements within, opened up a proper discussion, or any of another dozen things maybe points for effort would make sense. Instead, this is exactly the type of pontificating I heard far too often from classmates in college. It would have actually made a better post if OP had started with Descartes' overquoted, uncontexted `cogito ergo sum' and derived basic solipsism without passing through research or any of the other bits I mentioned or alluded to.
Canada is great and not too cold at all :). I moved to Canada with the intention of working here. Instead I worked on my startup full time for a year.

It was silly of me to assume that work visa is available for everybody. I think the visa I am on is a special one for Australians. It was pretty easy to get and lets me work in Canada in any profession for 2 years. I can understand your frustration though.

Australian is an awesome place but if you have your own startup (or are thinking of going down that path) then Canada is the way to go. It is close to the US so you can travel there quite easily if you need to.
I agree that experimentation and brainstorming are not the time to be messing with unit tests. Specs maybe. I've been frustrated enough with failing tests to occasionally lose them.

But, when it comes to something I expect someone else to use, there is no question that I will start with a test.
I was expecting a better camera. May be a 10MP. Very disappointed.
No NFC, very disappointing. I guess mobile payments will be delayed another year?
You're concerned with maintaining your authorial credibility - if others find you're incorrect on one topic, you believe they'll lose confidence in your knowledge of other topics. Thus you're uncertain about asserting your opinion in a public forum. Basically, you're the "intelligent" parents in "Idiocracy", allowing your concerns about your actions prevent you from taking action.

So because of this, you're hesitant to point out that another person is incorrect on the internet. You don't want to enter a flame war for fear of losing face.
There is a difference between financial fraud and doping. The latter can actually increase performance, while the former only appears to on the surface.

Lance Armstrong actually is faster. WorldCom was not, in fact, doing any better than AT&T and may have actually been doing worse.