skysight-inc/HackerNews huggingface dataset:
Not exactly, but sort of.

My estimation of what would be most safe/robust would be for a deployment to know its own canonical hostname/base-URL, and use that trusted value in construction of emailed URLs.

Perhaps this would be one of the explicit parameters that vary in dev-vs-production configurations. Maybe it's looked up from a key that's the local hostname. Perhaps, even, it's looked up based on the 'Host' header, but if the key is absent it's a failure. (Then, the available mappings are a sort of whitelist.)

The official Django recommendation essentially equates to, "be sure to enforce a whitelist on passed 'Host' values at the HTTP server". So it's leaving responsibility to the many alternate web server configurations Django devs might be using... while it could be solved definitively with a slightly different practice inside Django itself.
Good points in the article, although I didn't like the condescending tone of "step into my office for a talk".

Reminds me of the Sparrow mail client[1], which shut down in spite of having a great product. Also, allowing a trial period and own in-app purchases is a good move by Microsoft.

Also, how are the Mac OS X App Store developers and prices faring? I think that's an important point of comparison that the author failed to make.

[1] http://arstechnica.com/information-technology/2012/07/you-sh...
"Avoid the pain of Windows 8."

I've been running Windows 8 since the RTM went to MSDN. I adjusted to the cheese-moving pain of Windows 8 within a week.

Four months into Ubuntu with Unity I eventually adjusted to the cheese-moving pain of Unity by switching to Mint.

Ubuntu has no leg to stand on when it comes to new versions of an OS making unwanted changes to UX.

[Before anyone chimes in here, I know you can set up Ubuntu to work with other desktops than Unity, but IMO there's not really a compelling reason to stick with it when the out-of-the-box experience is inferior to another distro.]
Apple Removes Default Java Support In Browsers
It doesn't change that distinction, but it does render it pretty meaningless.
it was down for a little time. http://www.nbcnews.com/technology/technolog/uh-oh-youtube-sp...
If you're looking for a free alternative, check out SSI from AddThis:

http://www.addthis.com/labs/social-sign-in#.UIBqXRj0CnM

You will have to store your user info yourself, but it does take care of oAuth for you. Full disclosure: I work for AddThis and worked on this feature.
Was just able to push/pull okay, overall seems like they're dealing with the outage really well. Their status page is really helpful, they were on twitter quickly, and they tried to restore service to people who might need to push/pull to their repos.
Test remote javascript APIs with Capybara and puffing-billy
"Android has been a pretty epic failure"

How did this reach the front page? Android has around 1.3 MILLION activations per day. To blatantly call this an "epic failure" is astounding. Furthermore I don't know how the acquisition of a cell phone manufacturing company can be linked to Android. Motorola makes more than just Android devices, and even if they didn't the stated linked is hard to make.
$2 million for 20 engineers is $100,000 per engineer on average. That's not much in an acquihire.

$100,000 is low just as a signing bonus for desired talent at an A list company. Apple must not think very much of their skills. In which case, why hire them at all? Strange!
It would be nice if I can search for projects using specific programming languages. Also why can't I just upload the project I need people to contribute without using github?
LAC 2013: the Linux Audio Conference - Call for Participation
Yeah, I had that question too. ~300ppi I thought was "retina" for handheld devices held at normal distances. I could see marginally increasing it above that threshold so pixels remained indiscernible at almost all distances, but a 440ppi density is surely superfluous.
Doesn't this one seemingly trivial change (encryption) add enough annoyance for the average pirate that they'll likely use one of the bevy of competing filehosting sites?

Reasons I can think of using "Mega" instead of another service include (1) DL speed, (2) brand recognition, (3) less intrusive ads and less annoying capchas due to their superior financial position and scale stemming from their name recognition.

I wonder if the reasons above (or others) will be strong enough to transition Megaupload users to "Mega"
Well, what you can do is boot from a live usb stick, mount your drive, move /* to /old/ and install afresh. If everything works as desired, you can move back your /home/user directory or selectively get your home directory back. If you don't like it, move everything back. Then you only need to restore grub, which should be easily doable using a chroot from the live media.
It wasn't your fault -- it was rapid expansion/contraction of the external fuel tank during the filling process that caused the insulation to crack.
Being forced to buy 700 dollar shares at 760 (or whatever) is not a good position to be in. Especially if you don't have the money, which happens often enough.
Sprint acquires controlling stake in Clearwire
Raring community skunkworks
Cr-48 owner here. You will go through the first 100 MB in a week, maybe you make it almost to the end of the month. By month 3, you want that 1 gb plan to autorenew so you don't have to think about it.
That link is dead for me, but here's an article from The Telegraph with the same allegation citing "sources within broadcasting companies".

Apparently Syria sought Iranian assistance to disrupt the signals.

http://www.telegraph.co.uk/news/worldnews/middleeast/syria/9...
Lots of people are quick to jump on this "Avoid the pain of Windows 8" comment but people need to relax. Their is something major being overlooked here. Ubuntu is giving away their OS for FREE. $0

Windows 8 will be cheaper than previous Windows upgrades but lets not forget about the pillars of free software and why to support it.
This is correct. They needed ~90 dynos to keep up with about 500 qps on their status page in the last outage.

Source: http://news.ycombinator.net/item?id=4524489
Building an EyeToy-like mini-game with getUserMedia()
Your argument: "Because I wouldn't like that job, nobody would like that job."
I'm not a stock expert and we have limited information here but I think I understood the dilemma in a different way, perhaps someone can fill us in. I took OP's explanation that this man had actually shorted (sold options he didn't own) put options in the past. If their strike price happened to be very close to the Google share price early this morning, and they expire this Friday, then they would be relatively cheap to close (i.e. buying them back to close his position). However, the price drop would cause those same put's to jump in price by roughly the loss on a share. So what would cost him a few dollars or pennies per share to close, now costs $60 per share to close. Options are traded in 100 packs so I take it this put him back thousands.
Does anyone know where GitHub is hosted? I assume not AWS because status.github is on heroku (and therefore AWS).
Doesn't an acquisition always cause a hit on earnings for the first 1 - 4 quarters as the new companies figure out how to integrate their businesses?
yeah watched their status site off and on for the last few minutes and it seems their git endpoints are intermittent while the site is out.
I don't know - the underlying argument here, that developers need to avoid a race to the bottom isn't particularly new, new to Microsoft [0], or in my opinion convincing. This article seems like a strange mix of a Microsoft marketing piece, and a call for app developer collusion. In other industries it seems almost by definition that the worth of the product is what it's selling for -- .99 cents for most apps. Arguments along the lines of "surely apps are worth more because, c'mon look at the price of coffee," use only emotion based on how much work we see go into those as developers not the value provided to users. It's very easy to blame poor revenue as a marketplace problem rather than a product problem and it's this type of thinking that drives this conclusion rather than proper analysis.

A hit driven industry can be brutal but I'm not convinced that the app store is more of one than traditional software, social websites, marketplaces, and games all spring to mind as places where success is very hit driven. Even outside our industry: books, television, movies, music, fashion - these all all hit driven because that is what fits best with where the demand is.

* In the television industry most shows have both higher production costs and lower prices than software, does this mean this industry is broken?

* Increasingly for app store purchases with higher prices I hear about the apps from avenues other than the Apple featured list (ex drawing apps, higher priced games.) It seems that the marketing channel that is being provided for free is being mistaken for the only way to market.

Fundamentally as a developer if I want my app to sell for more money, I should make it bring more value to the customer, not hope for minimum pricing constraints on all apps. It's a great thing as a consumer that distribution and marketing channels like the app store have made it possible for me to use more software, and spend more money on software than I ever did on a pc.

[0] See minimum pricing of Xbox live games on both Xbox and Windows Phone
How about instead, "Martha, you no longer have to work at a mind-numbingly boring (and probably unhealthy if not demeaning) job -- we've got robots for that. Instead, we're training you to do more interesting and more fulfilling work. While we're at it, we're also giving you a voice in the decision making process and part ownership of the company. You, along with your fellow workers can now decide how to run the company for your own benefit and that of society at large."
They're great. For a while, Chrome would take over keys needed to use Emacs and other terminal applications. However, internally a lot of Googlers user Chromebooks + Chromebox as their only window to their dev box. It's what we give interns now.

I'm particular to XMonad, and like being able to run a few GUI applications, but I used a Chromebook for a while and the dev experience was nice enough that I almost switched. One great thing is that the SSH client is smart enough that you don't have to use screen to handle network interruptions . The trackpad isn't as good as a MacBook, but other than that the device feels great.
I recall Paul saying on HN that he tweaks with HN's algorithm, and those changes are not represented in what's posted on arclanguage.org. In fact, he says it in response to that writeup: http://news.ycombinator.com/item?id=1781417 There's also the voting ring detector, which is not distributed.
Once upon a time you didn't have to justify your pricing. Thanks App Store.
Neat. I came up with this rule some time ago for my as-yet-unimplemented pet language, but I didn't realize Rust did the same thing.
> The FAQ on Twitter's dev site says that, "As of March 12, 2012 there is no Advertising API for serving Twitter's promoted products in third party applications." Which means the promoted tweets ought to appear in any timeline that uses the API.

I don't see how the conclusion that tweets ought to appear in any timeline that uses the API follows. That they don't have an API for third-party applications doesn't mean they don't have one for their own applications. In fact, I'd say that it implies the existence of an internal API for serving promoted tweets. The FAQ seems to be accurate, and not at all misleading from where I'm standing. I don't really see how this is an advertising mystery.

That said, the process of investigating the matter was very interesting.
Thanks for playing along! But realize that one of the great reasons to put a datacenter in space is physical security. Another reason would be unparalleled data connectivity to the entire planet. But yes, it is a very harsh environment, and waste heat is difficult to dissipate. And of course launch costs are very high. The real reason I asked is because I think it's bloody good fun (and figured the Google folks would get a kick out of it).

Some follow up questions: let's assume that we need to move 10^10 yottabytes from the MoonPC to the earth. How do we do it? What's the fastest we could do it without transfering so much heat that it melts either end of the connection?
The status site is on heroku/ec2 while the main services are on rackspace. Appears both are being attacked by one very unhappy camper.
That notion is pretty alien to me. I've thrown Ubuntu onto some pretty useless old machines and had better hardware support. Example: I found out a couple of years ago that two-finger scrolling was possible on an nine-year old machine. The option to enable this in Synaptics/Windows simply wasn't there.
Ask HN: What do you use for cloud hosted contact forms?
I am starting a new project and I am curious what you do for hosted contact forms? I really don't want to go through adding a full backend just to support a contact form. I know of services like mail chimp and contactology but they are more for list management. And sites like wufoo are really expensive and I hate online theme designers.

Any suggestions? Thanks in advance for the feedback
They're on Rackspace:

http://techcrunch.com/2012/09/18/patent-complaint-filed-agai...

https://github.com/blog/493-github-is-moving-to-rackspace
I'm really liking the new interface, but damn that's a lot of wasted space. Trying to click through songs is like looking through a pin hole. Why is it all so small?
a few years back I increased my pricing from $15 a year to $140 at ImageDeposit.com, I never looked back. Happier people and more revenue. Celebrating 10 years this month.
Yes, but that answer is wrong, because of a quirk about umbrellas themselves - Orthodox Jews don't use umbrellas on the Sabbath because opening an umbrella bears some similarity to constructing one, and constructing things is forbidden for them on the Sabbath. (There are many, many footnotes that would be needed to give a full explanation; in short, Orthodox Jews don't use them, regardless of whether they actually believe they "should" be forbidden from first principles.)
WuFoo but I'd like something cheaper. A lot cheaper.
This is great, but why don't chomebooks and the macbook air come with built in 4G/LTE? I mean remember netbooks? Mobile carriers were selling them with contracts.

We're going in 2013 and everything should come with built in 4G/LTE. If the nexus 7 had 4G it would be a winner.
This was a tiny article --- that's what Matt Yglesias, Slate's econ columnist, writes --- and you didn't even read it; the whole article is about how Android can simultaneously be a market success and a business failure.

Next time, read first, then comment.
Another kiwi here. I have one of the first commercial chromebooks to come out from Samsung. For me the build quality is one of its best features. It's all plastic, but it has a great hinge and a very good keyboard.
The only thing that really annoys me is that the Google Nexus 7 (and apparently all other Android 4 devices) use MTP now, which is still kind of a hassle to get working reliably.

Apart from that I totally have to agree with you - even the proprietary graphic card drivers haven't given me any real problems for the last 2 years.
I don't really think that's true at all. Google just generates the most newsworthy headlines.

The same trend can be found on many other sites. I think TechCrunch once posted an analysis of their headlines that showed something like a 3:1 ratio of Google headlines to Apple headlines, and (at least at the time, haven't read them recently) they clearly weren't bigger fans of Google than Apple.
Looking forward to a Google+ or blog post from a ChromeOS developer about why this Chromebook only has a 6.5h battery life, which is less than I would've expected. Is it because Linux/Chrome OS is not that optimized for battery life?
They stopped sending cakes once the Firefox team started releasing versions faster to get more cakes from Microsoft.
Very slow but I was able to pull at 4:55EST
Check out the pricing of both offerings. I'd imagine there are a lot of indies who would choose DC.
Ordered. I've been wanting an ARM-based netbook for a few years now.
"EA Screws up and gives away thousands of games" is a better title. If Wallmart misprints a coupon giving away hundreds of lawn chairs, we hardly blame the people claiming the lawn chairs.
They likely want to get Motorola's house in order first and make sure they have the product people necessary to make a great device, before they entrust them with doing so. Worse than Moto being a loss leader for a few quarters would be a $12B acquisition falling flat with its first major release.
"..the extremely costly Motorola acquisition was directly linked to Google's decision to launch Android as a major business venture."

That is blatantly false. How did this make it past editing?
Signed up!

Most programmers start-up something around the SAAS space, just because its within their field of expertise and I can see how a hybrid product + online app is a size-able competitive advantage. Its also a creative challenge. Looking forward to your book and discussion group to illuminate the product business side and how it fits in with software...

The page looks good overall, to the point. Some pics, maybe of the product itself or you with some customers and their pets would be a great idea. Looking forward to your updates.
The very next sentence says exactly what you're saying:

> And yet as a product it's an enormous success—the most popular smartphone OS on the planet and even more than that a huge driver of smartphone adoption.

The title refers to Android being a business failure, not a market share / number of activations failure.
I've seen so much derision toward them for the First Gay President thing but I don't really understand why. It's an obvious play on First Black President Bill Clinton, made poignant by Obama being the actual first black President.

Now, their recent "Heaven is Real" cover on the other hand…
You are living in a fantasy world.
To be fair, the author does call it a product success (# of activations per day could be used as a metric to support that). But then he/she attempts to call it a business failure because of these Motorola losses. That's WAY off the mark. Android is a strategic product intended to protect their real business (advertising) in the mobile space.
I think the point was that anything above 7-bit ASCII will be represented differently in Latin-1 vs UTF-8; i.e. ¢ (U+00A2) is rendered as 0xA2 in Latin1 and 0xC2A2 in UTF-8 - and 0xC2A2 in Latin1 will be displayed as Â¢.

It gets far worse in 3-byte UTF8 characters, but I don't believe any of them exist natively in Latin1 (see: euro symbol)

Assuming I'm reading these various character tables right, at least ;)

So a more accurate version of what you quoted would be "UTF-8 and Latin-1 only overlap for 7-bit ASCII"
It's a tough line to draw. Requiring users to whitelist every domain that might be used to access the app is a PITA, and makes the lives of new developers more annoying. (It also makes multi-tennancy by domain name, e.g. customer.example.com, a bit more difficult.)

On the other hand, you're completely right that the "you gotta get your upstream server configured correctly" advice is handwavy at best.

Seems like this is always the case, this tension between security and usability...

If you've got bright ideas, I'd love to hear 'em. Maybe join us on django-dev (http://groups.google.com/group/django-developers) if you do?
By any chance, did you 'poke' with a cluster of LOICs?
That Amazon Video You Bought? You May Not Actually Be Able To Watch It
> the services that come with it (100GB of free online storage!)

The fine print: "100 GB of free storage is valid for 2 years, starting on the date you redeem the Drive offer."
Should probably throw a Fastly or CloudFlare cache in front of a single dyno.
Man Who Uses Tobii to Communicate Has Identity Stolen by Internet Hoaxster
Going Solo for Fun or Profit?
Freelancers Bible, a new book buy Freelancers Union founder Sara Horowitz is a tour-de-force covering everything a solopreneur needs to know. For budding consultants and veterans alike.
A new way to share videos. Here's an example I made of the Top 100 '90s songs.
Forgive me, but I don't know what you mean by "cheese-moving pain". Two questions: first, is this a well-known term that I've just not run across? And second, what do you mean by it? (And if the answer to 1 is "no" then, WTH?)
'Stabbing in the back' generally implies betraying someone who trusted you. I don't think that's really applicable here: Canonical are directly competing with Microsoft.

For what it's worth, that slogan seems to have been changed now: the home page now just says "Your wish is our command." Though I'm sure critics will still see plenty of irony there.
This might be nit picky, but how is explicitly supporting nature preserves and National Parks a left-wing thing?

You can advocate for tight purse strings while protecting natural beauty for everyone of current and future generations.

I think your sentiment is a bit revealing of the divisiveness present in national political discourse. Supporting the park service shouldn't be seen as left or right, it should be seen as cost benefit analysis that a particular congressperson has made.
Student Loan Debt Hits Another New Record
Why would Apple feel that it's necessary to keep the investors happy? It's not Apple's fault that Color's board is unable/unwilling to attempt to keep their employees. California's an at-will employment state, remember. Non-compete clauses have also been ruled unenforceable, so that doesn't apply either.

Seriously, this is such a small amount of money for an entire team that I sincerely doubt that anyone on Color's board was involved. If Sequoia was involved at all, I would expect to see a lot more money changing hands(probably somewhere to the tune of $50 million to cover the investors), and the IP moved to Apple. None of that is happening, so it makes more sense that the board and the investors were not involved in the deal at all.
Nothing against Github but this probably highlights the real benefit of DVCS: setting up multiple remotes for your repo. Manage it probably and when one service goes down, fall back to Bitbucket or another service.

It would limit the potential damage these attacks could cause, given the reliance dev teams have on pushing code to a central repo. Taking down a site like Github has a fairly clear effect on the productivity of a lot of their users.
http://en.wikipedia.org/wiki/Who_Moved_My_Cheese
"We strongly condemn any practice designed to disrupt audiences’ free access to news and information."

The identity of the culprit should be obvious!

http://www.tvlicensing.co.uk/
Is that 100MB per month for the life of the device? If so it sounds awesome.

(The Google Drive offer has a two-year limit, but this one didn't have any fine print.)

EDIT: You get the Verizon service for 2 years, and it's only on the $450 model.

http://static.googleusercontent.com/external_content/untrust...
You americans, you're so used to freebies, while the next step is a ripoff contract. I get 3 GBs per month for €12 and 5 GB for €15 on a Prepay plan and you can recharge multiple times as needed. Why would I need free bandwith from anybody?
The over-simplistic response to that argument is that setting up a website is as simple as 'sudo apt-get install nginx && service start nginx', which delivers in principle -- now you have a website. In practice, we all know there's much more involved.

With some of the more spectacular failures we've seen as a result of Mongo (I'm specifically thinking of FourSquare's downtimes), I think that their offering is quite timely and useful.

We're currently mulling over the options between switching our local Mongo installs to either MongoHQ or engaging 10Gen support to manage it for us. Both are significantly cheaper than hiring a dedicated person to manage it.