skysight-inc/HackerNews huggingface dataset:
Ask HN: Do you use no-reply[at]startup.com?
What are people's thoughts on the use of no-reply email addresses to communicate with customers and have you conducted any testing on this?
Barclays online offerings are pretty good as well, depends on how much you can ignore their slightly shady ethics when it comes to investment banking. They also weathered the last financial meltdown a bit better than the rest, so there's that.

UK is definitely missing a trustworthy, ethically sound bank though.
Building a New Feature – Vertical, Horizontal and Diagonal Snap
He has other mods too.
Added support for tree view
I see it written as against the pirates who "give a bad name to pirates" so to speak.
I didn't know Uriel or know anything about him, but I used wmii as my main window manager for quite a while around 7 years ago. It was my introduction to tiled window managers, and I haven't looked back since.

Thank you Uriel.
Former LulzSec hacker pleads guilty to Sony case
It does, but not for nefarious reasons -- it (until the more recent history) the cheapest region in the world for AWS -- it was only right before Oregon rolled out that Ireland, US-EAST and US-WEST-2 all became the same price point, but for the 4 years prior to that, it was always the cheapest so that is where most customers rolled out most of their infra.

Now that the prices has normalized I think the load is distributing more evenly, but for historical reasons I think that region sees a lot more churn (starting/stopping/deploying/etc.) -- just more grinding on the hardware at that region that others.
I've heard it before: "Locks are there to keep honest people honest."

The lock on your front door won't stop someone breaking into your house. Or rather: your lock likely isn't the weakest point when it comes to keeping people out.

However, with the master keys it's not just about getting into places where you shouldn't be able to go, it's also about more or less locking a whole place down by disabling elevators. I can imagine you could put something a bit more complex to disable something which already requires electronics to function.
I did read it, you are trying to pretend you said something other than what you post says. You made all the fallacious claims I pointed out.

As for evolution, no you did not evolve to do anything. Evolution is a process, it does not have goals. It is not aiming to get somewhere, or accomplish something. Which is why claiming you "evolved to eat X" is nonsense. Your ancestors evolved the ability to gain nutrition from X, that doesn't mean X is good for you. It means in prehistoric times, the short term gain from being able to gain nutrition from X was greater than any downsides to it (it could cause cancer 100% guaranteed, but if it lets you survive in the short term long enough to reproduce and rear offspring, it will still end up selected for).
what then, in your opinion, is an "obvious" bug? this is really about as obvious as it gets, from a development and qa perspective.
This is a crucial step for the mooc's: students who have completed their classes and go on to real world achievements. It's precisely the way that a school builds a reputation, by the success of its students.
The anatomy of a performance problem with our mail spool
Canvas Model Design - the best way to create Business Models on the iPad
I can't see how the golden ratio is useful in making a window the "perfect size"...
This is really cool, great work!

The only problem I can see is that it doesn't work with sites that use user agent sniffing serve up mobile sites (see bbc.co.uk - http://dfcb.github.com/Responsivator/?site=bbc.co.uk) I realise that's not technically 'responsive', but it would be cool if responsivator could handle that as well.

Having said all that, I don't think it's even possible to spoof different user agents in iframes(?), maybe could be done using a headless browser to take screenshots?
Menus can be quite slow on the Pi, especially if you have RSS enabled, but the GPU is great.

However, there are more folks working with Pi's for HTPC's than other platforms, so i expect a lot of this will improve there, faster.

To put it in perspective, i also have XBMC running on a pandaboard (and pandaboard ES), and it runs amazing on that. So it's not that you need some huge amount of processor power, but at least right now, a little more than the Pi provides.
Sellotape is great when hiring a plumber isn't an option. It still doesn't make it a good solution when you want your sink to stop leaking.

It's comments like these that make me wish I could downvote. It's this mentality that leads to Bootstrap being abused in the way I mentioned above.
Hey tomasien, I've thought about making this into a service but haven't had time working on my current startup. In the mean time there are some folks that are solving the same problem check them out http://flavors.me/
Thinking the same, but encouraging a hobbyist / developer effort around the OMAP has huge strategic benefits for Amazon.

I think the worst decision they could make would be to isolate development by killing off the nascent BB market.
From a practical attack point of view:

1. As explained in the original email XSS attacks now lead CC exposure, very bad

2. If the cookies are not session cookies. It's horrible, then anyone who got access to that computer later can read the cookies and Credit Card. But also don't forget tons of websites still keeps auto-complete enabled!!!! in freaking CC fields.

3. If the cookies are not marked as "secure" (or issued over HTTPS) then it's totally messed up and invalidates PCI etc. directly. Now your credit card transmitted over HTTP.

4. Other than this even though it's rather pointless thing to do, there is not any more direct attack I can think of.

Put it this way, this is not worse than a XSS vulnerability in a website as an XSS can lead more serious issues directly.
As in most things in software engineering, it's a matter of tradeoff. Consider for instance the case where multiple applications access the database. You could either build a service abstracting, or you could build your validation layer in the database via stored procedures (maybe you can't afford the latency of the service), in which case you'll appreciate the additional safety.
Exactly. 3 months here.
Big-O Misconceptions
Details analysis of the TSA locks: http://download.security.org/tsa_luggage_locks_report.pdf
Yes, but the question included 'ultimately', which would refer to PG in this case.
I think that this article represents the need for digital locks. So far, no one has disrupted this space and there is a HUGE market. Think of everyone who lives in an apartment/house in the world. Now take only 1% of 1% of 1% and that's going to be a very large number of people who would signup.
Thanks for building this so I don't have to spend any energy trying to build it. :)

We face this problem every time we want to watch a movie on our Apple TV. We first have to search Netflix, then search iTunes, then search other venues. Aggregating it all is a great idea. And this one is well executed too.
This is cool. But anybody else having just a blank screen when they try a different url other than google analytics?
I doubt he has the time to read every flagged message. That's why I was asking about what is the hellbanning process, if several people are involved.
> There is nothing that hellbanning (the way it's doled out on HN) solves better than regular bans, suspensions or warnings.

Sure there is: griefers.

The problem is that hellbanning is the only kind of discipline, and it gets handed out too easily. And you're (probably) right that this in turn makes it less effective against griefers than it could be. But it's still more effective than a regular ban.
I tried to sign up for Tabule and the activation email was filtered as spam. I laughed a good bit.
Well someone has badly violated PCI-DSS 2.0.

This is bad in such an amazingly awful way on a "secure" banking website that I'm surprised that this bank even has an IT team, let alone a development team!

How did this not get picked up in QA testing, or even in a cursory audit?!?
Crowd-sourcing a Cure for Cancer
Do these advanced data structures remain only in the academic world or do they get a chance to come out in the real world?
Yes. But instead of letting people buy them for the asking price, and pocketing the difference on ebay, RPi Foundation should pocket the difference themselves.

Of course, they don't do this because they want to keep everything simple, and might even get reputational damage out of an auction. Also last time I talked to the guys (HN London), they were constrained by the founders time more than anything else. So they wanted to keep running the foundation as simple as possible.

As for the money: They could always donate to Doctors Without Borders or something like that.
Open source generative art
Search-bush sounds pretty neat, thanks!
ReadyForZero (YC S2010) integrates bill payment
I didn't figure I'd get downvoted for quoting Douglas Adams, though.

And it wasn't even "just" a joke, finding out there was actually a grain of truth to that classic, I felt worth pointing it out.
Erik Demaine is a genius, if I am not wrong he is probably the youngest to join as a professor in MIT. I think he was 21 when he joined.
If your write your server the right way, you can just kill and restart the process once the memory's full.
Why Company Culture Is So Important [video]
Why we use Rapid Prototyping for mobile
The differences between wire frames, mockups and prototypes and why prototypes are worth it for mobile projects.
I have account with both HSBC and smile (online branch of the Cooperative Bank).

HSBC is as you describe - seems pretty secure, but enormously frustrating that you need the dongle just to check balances etc. They'll only provide a single dongle, which is annoying as I want to access my bank from both work and home. The dongle is small enough that you could fit it in a wallet if you wanted to avoid that, but then you're more at risk of losing it.

For Smile, to login you just need your numbers, including 2 digits from a 4-digit PIN selected via drop-down. I guess this is to avoid keylogging but seems a bit odd as a shoulder-surfer could see quite easily. For any new/ unusual payments, the card-reader is needed. They were happy to provide me with a second reader so I can bank from home and work. The reader is too bulky to carry around though, so this is necessary.

The other thing Smile do is heavily plug "Trusteer" software on every login. Fortunately this is not yet mandatory.

On the whole I prefer Smile's approach, though I'd be happier if they could provide a smaller dongle that would be easier to travel with.
Erm, I can login into my HSBC bank account (to check balance, etc) with 3 chars from my password

I just need the token if I'm doing 'something' with money

And no Indian accent on phone service

Another bank I know uses your card as a token, requiring you to have your card + a card reader. Better in some aspects, worse in others.
>If you're honest, you can follow the references at the bottom of Wikipedia and read them to come to wind up at studies like http://www.gao.gov/products/GAO-09-279 that found a 7% persistent unexplained gap in the federal workforce.

A study which did not control for hours worked. This is exactly what I said before, more than once. If you lump all "full time workers" together, of course it will look skewed. Because men work more hours than women.

>I sanity checked against Wikipedia (which tends to be relatively neutral), found that your view appears to be a minority position, and pointed that out.

An abundance of ignorance does not make the facts change. Lots of incorrect ideas are believed by a majority, especially when lobbying groups spend lots of time, effort and money publicizing them.

>You have shown no openness to considering any possible theories that do not agree with your preconceptions of there not being a difference

That is simply lying, how do you reconcile that with your idea that you are trying to engage in an honest conversation? I have already spent many hours studying the subject, I have considered the possibility quite extensively, and used to be one of the majority of people who mistakenly believe there is such a gap. Being open to considering does not mean "ignore facts and change your mind cause I said so". As I said, I am very interested in seeing any evidence of such a gap. But in all my research, I have never found a single study that controls for all other factors, and still find a gap of statistical significance. And in response, I consistently get dishonest rhetoric like yours, pointing me at studies which do not control for all other factors.
Free speech is something the government guarantees its citizens. It's not something every website on the internet owes you.
You can already buy more expensive and powerful computers (including computers with an ARM chip).
I've not done any testing, but I HATE them personally. I think it was Twilo that I spotted recently had a really nice 'from' email address, I think it was direct to an engineer or similar. Made me feel like I could reach out when/if I had questions.

I really don't see any reason to ever use a 'no-reply', and not a monitored email address.
A YouTube mini-serious was created to drum up interest in Halo 4. Check it out to get some idea of the story planned for the next game, either that or it is to provide back story. In any case, I feel it is really well done and surprisingly interesting.

http://www.youtube.com/watch?v=BfJVgXBfSH8
[KickStarter] Guildsmanship: Battle-Scapes
I have taken the slowest plunge ever (maybe) in getting this launched. Took over half-a-year to get my ducks in order (to my wife's satisfaction) from when I had enough to demo to when I could actually launch, which isn't bad since I've been going at this for about 7 years.

http://www.kickstarter.com/projects/sageikosa/guildsmanship-battle-scapes

I've been having a devil of a time getting feedback on the overall (preview) campaign while I was setting this up. So any feedback or comments on the structure would be appreciated.
Sorry I'm only familiar with the concept of griefers in online gaming. How does the phenomenon manifest on HN?
Road Runner Customer Care sends notice to customer on behalf of MPAA
Modern remembrance agent (http://alumni.media.mit.edu/~rhodes/Papers/wear-ra-personalt...)
Someone needs to come up with a term for this, "hypothetical maximum lost revenue" or something.

I don't have an issue with anyone quoting this sort of number (retail cost x lost units) but they need to make clear exactly what it is, which isn't actual revenue or profit.
Yes, it is. I used to have him in my circles for quite some time and his posts were among the more interesting ones.

I didn't realize up to today who he actually was.
Does any country have one of those?
What specifically should I find enlightening?

http://en.wikipedia.org/wiki/Crusades

== Middle Eastern situation ==

In 636 CE, Muslim forces led by the Arab Rashidun Caliphs defeated the Eastern Roman/Byzantines at the Battle of Yarmouk, conquering Palestine...

== Western European situation ==

The western European idea of the Crusades came in response to the deterioration of the Byzantine Empire caused by a new wave of Turkish Muslim attacks...
I'd bet the UK and Australia have atheists in their armed forces, but they don't run the world. I've met militant Jews in Israel's armed forces, but they don't run the world either. The United States runs the world, but has a heavily Protestant tilt.
I like the Barclays mobile app. You authenticate it once using a pin sentry device, and give it a pass code, and from then on you can just use that pass code to get your balance using the app. The app also acts as a pin sentry when you want to access your account using a computer.
What about The Co-Operative Bank?

http://www.co-operativebank.co.uk/servlet/Satellite/11932063...
Previous discussion of the project:

https://news.ycombinator.com/item?id=4560691

https://news.ycombinator.com/item?id=4650929
Yeah, I guess master key usage is just a little too broad. Opening doors doesn't seem like a huge issue, but I would at least require a supplementary password entry for crucial functionality like disabling elevators.
Just hit SPAM and google will give you the option to unsubscribe.
My favorite part of the story is that he had to overcome his claustrophobia to break these records.
Given the set of tradeoffs described in the article, I'm on record supporting free speech, period. As I wrote earlier here on HN, "The basic issue is whether people in free countries, like most readers of Hacker News, are going to be able to enjoy the right of free speech throughout their country, on any subject, or whether any American or Dutch or Danish person or other person accustomed to free speech who happens to be within reach of attack by a crazy foreign person has to prepare for war just to continue to exercise free speech. On my part, I'm going to continue to comment on public policy based on verifiable facts and reason and logic, even if that seems offensive. I am not going to shrink from saying that people in backward, poorly governed countries that could never have invented the Internet have no right to kill and destroy just because someone in a free country laughs or scorns at their delusions. The people who are destroying diplomatic buildings and killing diplomats are declining to use thoughtful discussion to show that they are anything other than blights on humankind.

"Allow me to reemphasize this point. The many participants on HN who criticize Transportation Security Agency 'security theater' as a meaningless reduction in the freedom of people who travel to the United States are right on the basic point. If free citizens of free countries can't live in freedom because of fear of terrorists, the terrorists have already won. You and I should be able to speak our minds and express our opinions in the manner of all people in free countries--sometimes agreeing with one another, sometimes disagreeing, but always letting the other guy have his say. To engage in self-censorship because of fear of violent thugs is to be defeated by the thugs."

As before, I think jerf correctly responded to this issue when he made his comment on it last month:

http://news.ycombinator.com/item?id=4510637

If I organize a riot involving thousands of people that I manage to incite into killing people, and I claim my reason is that I heard that some guy is Glasgow made fun of the American soccer team over beer... that guy is Glasgow is not the real reason. It doesn't even qualify as a metaphorical fig leaf, it's just a lie. When the excuse is this tiny, you shouldn't even give it the time of day.

I have to agree with the submitted article that the correct policy is making sure to protect the right of free people in free countries to speak freely about all the issues of the day, including the harm caused to the whole world by fanatics who burn and destroy and kill because their delusional beliefs are offended.
Show HN: Logo feedback for new sports site needed
Hi Guys,

I'm working on a new website in my spare time, the basic premise is the below...

Hustle.IO

Hustle aim is to bring sportspeople together, whether it be finding a new running group, a team looking for some new football players or a husband looking for a tennis match to avoid the wife talking about 50 shades of Gray by the pool on holiday, Hustle's aim is to get people off the couch!.

Hustle IO's Background

Hustle was born out of a need I found myself and others in more and more frequently, when I wanted to play Tennis or Soccer there just wasn't any of my usual mates available, I'd resorted to posting on Facebook but it clearly just made me look like a bit desperate.

It was clear it was happening on the flip side, with teams turning up for soccer matches a man or two short having exhausted all avenues and bribes available, there was a clear demand to help people out.

What I need from you (I'll buy you a beer...if your in London!)

I have commissioned designers to create hustle.io's logo and branding, I've been working on this with them over the past week and have got to some final designs, it will only take two minutes but if you could rate the designs on the following link I would really appreciate it!...

https://99designs.co.uk/logo-design/vote-uvcck8

Thanks
IBM OS/2 warp is still a very viable solution for always on terminals and is more common than you may realize. While not officially supported anymore, for a price IBM will still support it. While I wouldn't choose it for a new solution, I wouldn't run out and create new ATM software, if it is working well, just because of the OS. Would you be more comfortable if they were running windows?
Which leads us back to HadCRUT 4, a global temperature record, which seems to show that the actual climate isn't matching the climate model predictions.

So, if the models can't provide effective predictions it would seem as though the 'science' based on those models isn't exactly 'settled'.
And submit it to news outlets. I've emailed BBC News and suggest others do the same to other outlets.
that really isn’t a fair comparison at all and i’d imagine if the article was about them suspending accounts associated with any/all hacked consoles then the tone would've been very different..

in this case, they’re denying access to their service to users who both: violated the tos by messing with their devices, and (more importantly) utilized that to steal a product (one that cost likely in excess of $100MM to develop).

even if you’re in favour of less restrictive copyright law, or against closed systems in general, there still are, and in my opinion should-be, limits. and i wouldn’t fault apple either if they locked-out jailbroken iphones that allowed users to freely download paid app-store apps (or music/videos from itunes), and i’m sure the developers of those apps (or content publishers) would agree.
Got there seconds ahead of me. Co-op (and Smile, their internet alter-ego) seem to be the ethically best choice. And their customer service is the best of anyone, ever.
I can confirm that First Direct (a subsidiary of HSBC) would also do this.

The caller would say "I'm calling from First Direct" and then get confused when I asked for proof of this.
Please don't give the government ideas
It allows you to run multiple servers (e.g. NFS + git + MySQL + Apache) without worrying so much about memory footprint.
I've heard negative things about their online banking and customer service, but those were a while ago so I'm not sure what the state of play is now. Could be worth a try, I do like their ethics.
I hadn't communicated with uriel on Hacker News, so perhaps he had better behavior here, but part of the reason I avoided him was because of interactions with him on reddit. He was a really bright guy, and when discussing software he had a lot of valuable insight, but religion and politics got him behaving in ways that were destructive to communities. On reddit he would get belligerent to the point of being verbally abusive. Not just rude, but creepily vindictive and stalking. I can't say that that's why he got hell-banned here, but given how he acted elsewhere on the web, it may well be that he was banned over issues more serious than merely airing unpopular opinions.
This was my thoughts. As a customer it feels like you don't care about me and just want to, usually, advertise your new services to me.

Even if the email reply went to a "call centre" of some description I think it would present a better image than "we don't care about what you think, just give us money".
You should remove the hl=es parameter in the URL to the Chrome store or everybody will see the store in Spanish.
The CryptoParty Handbook: Layman's guide to maintaining privacy on-line
Also on GitHub https://github.com/cryptoparty/handbook
I must admit I haven't personally used them so I can't comment on either of those things, but from a purely ethical point of view you are not going to get much better from a leading bank.