skysight-inc/HackerNews huggingface dataset:
If you want a safe and secure Web server, use what your distribution gives you. Don't add third party sources if you can avoid it, ie. don't need features < 1 year old. It's hardly safe and secure if it's not had long enough for people to find problems with it anyway.

Instead, go with what your distribution gives you. The people who put your favourite distribution together work on making the system safe and secure as a whole. People who don't think it is safe and secure file bugs and they get fixed. And you have one place to get all your updates in case fixes are needed.

If you start adding third party sources, you're on your own as to managing any implications of the way you've put it together. Just because each individual component is safe and secure doesn't mean that it is as a whole. For example, Ubuntu add hardening (AppArmor) for various server daemons which you won't get if you just download apache from the project website.

If you need a guide on putting a system together yourself, then you aren't someone who can manage these implications yourself, and you're trusting the guide author in not having made any mistakes. Are you really in a position to judge his competence?

Just use your distribution's standard web server and you'll get your safe and secure Web server in one command.
Article covers main parts of the webserver setup and gathers very interesting information scattered all over the Internet.
All the nginx setup and config things are REALLY useful, all the more regarding the poor quantity/quality of resources one can find out there. Really useful to me. I wish I had one guide like this when I setup my own webserver.
I made a tl;dr version but the main interesting parts stay all the nginx tricks for me http://tldr.io/tldrs/50b5ccb711c0ea5051000f29.
Cagliari Municipality - Case study electronic voting system based on Entando
Not true, for a startup, virtualization is the most cost effective way of hosting applications/websites. We have a physical server with 32GB RAM and on it four virtual machines for different purposes. None of them breaks any sweat.
I don't like having an app constantly running for this, or for it to intercept all my screenshots.

That is why I use a hacked version of Gyazo (http://gyazo.com/). I modified the script so that moves the file to dropbox instead of their monstrosity of a share page.

Gyazo is the best because you launch the app, are presented with a standard screenshot UI, and then the app closes and your URL is copied and opened in a browser.

Here is my modified gyazo script if you want to try it: https://gist.github.com/3390267
You don't get to read ee cummings' poems even 60 years after his death.
From what I have heard, that bus ride is pretty hairy. Not sure if this was in first class or not but a friend who recently went there opted for the flight. Then again he was only there for a few weeks and time was probably a bigger factor than budget.
Go to any big company's datacenter and you'll be sure to find some virtual machines that are in production. There is some performance penalty for sure, but the added flexibility and reliability covers that neatly. If your VM host seems to be failing, you can live migrate your VMs off that box and take it down for maintenance. That's not an option when running your services on bare metal. On flexibility side, it is very powerful to be able to allocate resources depending on need, not needing to buy specific hardware and hope that it's a good fit for the workload it runs.
That is the equivalent of saying investing in Siri or Poly9 is just front-running Apple.

"But," you may argue, "Siri changed from when Menlo Ventures invested in it to when Apple bought it."

The VCs also participated in an $8.5 million funding round that didn't exit until over 1.5 years later. Microsoft changes from quarter to quarter and, more importantly, the world economy, upon which Microsoft's prospects are fundamentally (and to a degree predictably) related, produces a machine gun chatter of data points throughout the day (with infinitely more interpolatable).

If we think of the stock market as a resource allocation decision engine that learns via Bayesian inference then individuals are constantly signalling to one another with information being absorbed first by risk-tolerant traders (analogous to early adopters) and progressively by more risk-averse ones.

Forecasting which assets investors (that, in aggregate, comprise a weighted sample of society) want to buy in the future boils down to figuring out what people will want to direct resources to in the future and then directing resources to those things today. Not that different from trying to stay on the bleeding edge of the tech curve, either.

TL;DR Calling forecasting-driven investing front-running dilutes the term by capturing such (clearly to HN) productive activities as tech.
Nice! Just a thought, values can go beyond the valid range. For example: dividing by zero, having negative values for RGB, and negative height/widths.
Wii Mini is now confirmed
Would adding metronome functionality make sense for this kind of app?
No, we shouldn't. It's about just the right line length to mate reading a lot easier. Take a look at this to see what I mean [1]. Another thing, one liners are great, and I love them too. But they don't hurt only readability.

[1] http://desktoppub.about.com/cs/finetypography/ht/line_length...
www.pen.fm yields an ''Internal Server Error".
Which was discussed previously on HN, here: http://news.ycombinator.com/item?id=1626305
Also relevant: The Treacherous Optimization http://ridiculousfish.com/blog/posts/old-age-and-treachery.h...
Unfortunately there's no type information in JS, so it's very difficult to extract range data from just the source. Just don't drag it into that range ;)

PS, I'm planning to implement a color picker for strings like 'rgba(200,0,234,0.4)'
I don't know why people buy Samsung stuff. As pg once said, they make everything look like a microwave.
Not SaaS, but why not simply use logcheck (http://logcheck.org/) ? It's free software, and seems to be doing what you want (check log files against a whitelist of entries, send an email with all lines that don't match)
Now you made me wonder why I read almost the whole omment thread, additionally to two posts that both didn't really make a lot of sense to me.
You obviously haven't bought many different spoons, and price is irrelevant. I can buy a well-made spoon from the Salvation Army store for less than a spoon made from pressed sheet metal available at a retail store.
A couple of people used to use it a work, but then we all switched to PyCharm and haven't looked back
What would you want to use it for in a production environment? (and why is JS source transformation not viable there?)
ShowHN: LoveThisSong, insta-share your songs from iPhone to Facebook
When it comes to music, it’s always a matter of love. Some songs speak so perfectly about what we are and what we feel, that we are bound to them as if we were their authors.

The iPod changed the way we listen to music. Its shuffle mode surprises us with the right song at the right time, and it often seems like magic.

In those moments, you want to share your feelings with friends you care about the most, but sometimes it can be hard.

You are probably hung in a crowded train and you are using your iPhone with just one hand. You want your friends to listen to the whole song you’re listening to, and the best way to do this is by sharing the YouTube video on Facebook. This can be hard. You need to type, to scroll and a read a list on a small screen, to tap, and tap, and tap again.

Or you can use Love This Song!.

Screenshot of Love This Song!

Love This Song! is an iPhone app that makes this all simpler and more beautiful. As soon as you open it, you see the videos of the song you’re listening to. Each video is shown full screen, so you don’t have to squint to read the title or to see the thumbnail. You can play the videos, and when you decide to share one of them, you just have to double tap the Love This Song! huge magenta button (patent pending) and you’re done.

If you feel like doing it, you can write a message and publish it with the video, by just tapping once the button.

Try it now: it’s simple, it’s beautiful, it’s free.
Should conference coverage be free for everyone?
For my first trip I had a money saved up from part-time consulting and took out a credit card. I also sold my car. I really didn't care about the debt or how much money I would spend, I just wanted to stay out and away.

Of those first 12 months, I spent around 2 of them total working - spread out across that time. Most of it contract work.

I found some interesting work in Bosnia installing POS software and accounting software. There was a new consumption tax coming in and the government required electronic logging and submission, and nobody there in the IT industry had any experience with how to handle this.

The entire country was migrating from old physical paper based systems to electronic systems with internet based tax collecting overnight. I met a number of people in local IT and software businesses and helped them out. Despite the local average salary being $300 per month, I was paid well for the time I spent explaining open source and other commercial accounting packages to them and helping them out on the larger rollouts.

There is always an opportunity like that wherever you go - there is a gap in knowledge between the western world and the skills available in the second and third worlds, and you can exploit that.

Otherwise you can work for US or western based clients while living wherever you are. Most of the work I did in South Africa was for London based clients.

Register a business and open a bank account in a low regulation neutral nation, such as the Channel Islands, so you can do business from anywhere to anybody and not have to be tied up in a ton of regulation. Just don't forget to pay taxes on any income your bring into any country where you are a resident for tax purposes (usually 180+ days in a single year).
email jeff@amazon.com is fastest way I know to get a response
Sometimes, when the paragraph is wide, it's hard to continue reading on the same line and that interrupts and slow my reading down. I do it so that I stay on the same line. Sort of like a ruler
I think it could, but then a metronome is often a new app in itself.
GNU grep certainly honors locale settings, and recent versions are fast even when you're using UTF-8 (since release 2.7 or so).
1. at what cost? 2. just fine is not enough. 3. for some reasons all sites uses nginx, not jetty.)
That literally made me chuckle out loud. Thank you.
In memory databases are explicitly marketed as "in-memory database". Not simply as "database" because that delivers some expectations to people. And those expectations are generally not verified with the dictionary definition of database.
Why Second Startups Fail
Skylon spaceplane engine concept achieves key milestone
It's a cool iPhone app for music lover and for people used to share music on Facebook.

Worth a try.
Fair cop. This was difficult: Not wanting to clutter the description with a long list of instruments versus limiting the potential applications. Thoughts?
I would highly recommend watching this, and keeping in mind how such a thing could be useful in games.

http://worrydream.com/#!/InventingOnPrinciple

For a concrete example of usefulness in games, see

http://www.youtube.com/watch?v=-32SFFbaeJg
CloudFlare works very closely with law enforcement.
Hacking The Powerball Lottery
There's no big difference if the quoted part is small enough and you're replying in one go (although I'd argue that even there it breaks the historic flow of the conversation).

It is a big of a hassle if you want to reply to parts of the original post, Usenet-style (y'know, before "Usenet" meant "less traceable file sharing"). There having the answer atop of each single paragraph you're responding to is seriously weird, it's like playing Jeopardy with email.

Never mind that breaking up quoted text into parts is pretty buggy with gmail, due to the absence of quote chars (replaced by those colored bars).
No, the reason it's illegal is because it's a fraudulent use of insider knowledge. Just because something has no added value does not make it illegal.

EDIT (reply to below):
>However, logically, If there was value being added, this could be extracted absent harm to client. But since there is no fundamental value being added, this is impossible.<

This makes no sense. This almost seems like a tautology.

Are you going to say that everything in society with no added value (value being vaguely defined to the point of being meaningless) is (or should be) illegal?
The Doom3 source code seems to contain a ScaleForm-like SWF player
EC2 seems to be doing fine on virtualization. A service of that kind would be impossible to run without a VM layer inbetween. So yes, you pay a performance penalty, but you get something in return: Flexibility. And for some use-cases flexibility is far more valuable than raw performance.
If you are just starting out i.e. validating the idea - go with the cheapest and the easiest option which allows you to get the site up and running in front of your users. If this means cheap web hosting (assume you have no experience with a VPS) - then so be it. If you have managed a VPS before, then start with the cheapest VPS (say prgmr or linode). You can always easily scale the VPS until you reach a point where you need a dedicated server.

Best to cross the scaling bridge only when you come to it.
Christian Louboutin Evening
http://news.ycombinator.com/item?id=3491115
I think you have a point with the registering user retention problem. Nothing is more painful than typing a password on a phone (especially if you use strong enough passwords).

But this very first step (I'm talking about choosing a nickname and password, not the social connection step) is clearly something derivated from what we do in browser apps. We could do that better on mobile apps.

For example, launching an app for the first time could generate some random login and password, and let the user instantly play with the app. When we consider he had enough time to get the picture, we notify him he must choose a password to be able to login from other devices, and he should probably choose a nickname to customize his experience.

That would be way more mobile friendly to me.
This is a pretty bold statement to make considering the fact that there are a lot of companies who do use virtualization in production and do so quite successfully.
ID seems to have a completely different idea of licensing technology than other companies: Just don't.

As physics engine they even don't use Havoc etc., but just wrote it for themselves.

Seems like all their technology is in house, which is quite unique nowadays.
There's a reason front running is in the footnote, not the main text of my comment. As such, I suggest you re-read it. The larger point is also not comparable: vc is not similar to front-running because it actually adds value.
http://www.google.com/url?sa=t&rct=j&q=&esrc=s&#...

Google link circumventing paywall
Show HN: Retained - Find out why customers are leaving your app.
Grades Fail
Nginx and jetty are not the same thing. Nginx is a web server optimized to deliver content. Jetty is an application server built to run the applications. Both can be used together.

Also...Is Amazon EC2 considered virtualization for you?
if you're being truthful in your review, then you rarely need anonymity because the truth is on your side.

How does a third-party, reading your reviews, know that you are telling the truth or not? From the outside, you may sound like an hypercritical annoyance when, in fact, your reviews are completely justified and possibly even understated.

I think this is not significantly different from the dangers of sound bites in politics; too much context is lost when someone searches your name and finds all of these reviews.

An "app store" is different from the Internet at large or from the real world, because an app store is not distributed and because those reviews are used in the search rankings within the app store in a totally dumb way.

That is a valid concern, but I think the anonymity is a flawed solution. Meta-reviewing (Was this review helpful?) and other systems are more adequate and don't have the same drawbacks.
There's the art of disposing of not the cheapest things when they bother you. Then you get self-regulating process: you find disposing of some kinds of things too often and end up not caring about these kinds of things and buying the 'worst'.
Science says yes:

http://jeffhuang.com/Final_CursorBehavior_CHI11.pdf

More precisely, the paper above ("No Clicks, No Problem") demonstrates that tracking cursor movements provides useful predictive value of reader interest. Selecting text is a special case of this.
I would much more care for timely security updates.
Servers are the parts where you don't need the latest software, in my opinion.
Not if it comes for less stability or security.
In the best case i have a very secure default installation, install the software i need from updated repositories,
let the server update itself (or let it remind me of updates) and be gone with touching the shell ever again.
The goal is to have the server running safe and secure for years and not to have the latest pre-beta release versions of NoSQL-engine XYZ "just because".
Personally on my Desktop i have been a Debian guy (and after that Ubuntu), but it all depends on the requirements.

My personal view:

- my personal server runs Debian but i would place ubuntu a second for a one-person thing with no personal data on it. I know it runs a stable and updated OS and it just runs and runs and runs. You need a newer software version? You can selectively take some from testing or even unstable if you have to. You still get timely updates and live in an eco-system that is largely seen as proven, stable, excellent. Ubuntu (afaik) only get's Debian testing packages anyway, but still needs to patch them or tweak them. Or you get non-upstream packages. Also my experience is that Debians configuration is quite secure by default. Whereas Ubuntu tries to make it easy for you but also more open to security flaws.

- for an enterprise i can totally see why many choose RHEL (because of support, fast security updates and great in-house know-how. Do you know how many kernel developers are employed by Ubuntu? You don't want to know.. I give a lot of Kudos to RedHat for being such an open and contributing company.)

- for a start-up i can totally see how FreeBSD might fit as an internet-facing frontend. It's a stable and fast workhorse, and you'll end up compiling, configuring, installing the core components of your system all the time anyway.

Talking about it i feel a bit sad of not mentioning Solaris anymore. Solaris "was" awesome.
Also don't forget that attachments are usually base64 encoded which increases the size by 33%.
It would be useful to give a pitch as to why I should watch it - it's an hour long.
This is cool also from the standpoint of a nice example of using Python to do a Mac menubar app. I've got an idea for something I'd like to do and I've been looking for an easy to follow example like this for a while now. Thanks!
But if you're going to include the time he spent researching then you also have to subtract the value he created for himself by blogging about it and generating massive amounts of traffic to his blog.
this. finally I can describe it to people.
To the downvoters, I meant it as a personal advice. However, your disaproval yield two things:

Firstly, I'm right. Down voting what I said doesn't alter the truth embedded within. Unless you change your mind and grow your heart, you're gonna get screwed by a divorce lawyer.

Secondly, it's just a freking integer on my screen, I like better floats! No mater how much that counter gets decremented you're still looking at it from the wrong perspective.
A Hackat(h)on
We built stuff.
Must have tools for a blog
Tajikistan Blocks Facebook Again
The Google Maps API for Android [1] can only be used on Google-certified devices, as it builds on a Google-provided system library. Therefore, none of the apps embedding Google Maps will work out-of-the-box, unless the device manufacturer violates Google's copyright - which Amazon certainly will not do.

[1] https://developers.google.com/maps/documentation/android/
I have always wondered if a reasonable search engine could be made that just indexed meta descriptions and very aggressive spa, removal. With all the work people put into useful ones without keyword stuffing these days it might be slightly viable.
* Contrast

* Search web for highlighted terms

* Open new tab with selected link (when no proper anchor provided or when I want to open some part of given link)
The slow rise of the open source social network.
Do you think open source socials like Diaspora and App.net will one day challenge the profit oriented giants?
Badges Beware: 80% Of Gamification Apps Will End Up Being Losers, Says Gartner
Yes there is a lot of good competition already established in the tuner app area already, so its a daunting market to enter.

A lot of time was spent getting the pitch detection algorithm just right so you get a accurate and stable reading but get it quickly. This was more challenging that I first thought it would be.

Also I felt it would be good to be able to use the pitch pipe without having to keep shifting back and forth between the instrument and guitar for each string so I added an automatic mode where it plays the nearest note back based on the one you played.

So, hopefully this app will prove a worthy contender
To me it has become a sign that i am bored of what i am reading and should just skip to the story's punchline. Or sometimes abandon it altogether.
Gmail, meet Google Drive -- and behold 10GB file transfers
Did You Know 144.8 Billion Emails Are Sent Every Day?
Also classic: http://ridiculousfish.com/blog/posts/old-age-and-treachery.h...
Hmm, interesting. Work is being done on BSD grep to make it faster than it is, so hopefully in the near future the two will be on par.
If it helps, you can read the comments from when it was posted and got 221 points:

http://news.ycombinator.com/item?id=3591298
The Internet American Moratorium Act (IAMA)
new builds of this have resolved all these issues: http://amsul.github.com/pickadate.js/
Something to think about: web browsers natively display content in a responsive fashion. Any page that doesn't display responsively is that way due to constraints put on it by the developer. It's great that people are finally embracing the fluid nature of the web rather than trying to pidgeonhole it into the realm of print design.
How Drug Company Money Is Undermining Science
Persuasive Games: Wii Can't Go On, Wii'll Go On
Nice microwave. https://en.wikipedia.org/wiki/File:Galaxy_Nexus_smartphone.j...
Octane render : world first GPU-based realtime 3D renderer
The Collaborative Web: Github is the New Flickr
I once tried a sed script on a couple million text files (60 GB in total) - they were web pages downloaded in some format (WARC? I don't remember what it was called) and I needed to change the formatting slightly (to feed them to Nutch) - Mac's default sed was literally 50 times slower than gsed (on the same machine). If I remember correctly, gsed finished the task in under two hours.
pps. the app didn't take 6 months to develop, but its been that long since I left a full time contract to start out on my own. Also been doing some consulting work and all the other things that come along with running your own business.
or put malware on it.

or really dangerously illegal content.

or use some "smart" device (instead of a "dumb" storage device) to harvest data from connected machines.

etc.