skysight-inc/HackerNews huggingface dataset:
Your support of public monopoly education is interesting to me, as your comments on this thread make you sound like a thoughtful, well-informed person. Presumably there are some aspects of public monopoly education you would like to change. Do you support seniority-based pay scales, strong unions, and teacher tenure?

There's a few education economists that have noted that if we could fire the worst 7% of teachers in the US and replace them with merely average teachers, then the US would have the best schools in the world (Eric Hanushek out of Stanford is one). This is a vital and cheap policy for us to carry out, but it is well-known that you can't get fired from government jobs. I can't imaging school systems being the first to change.

Do you think it is politically possible to reform the worst parts of the public monopoly school systems with its current structure? School boards in population-dense areas are often staffed exclusively with union representatives. What model of the world convinces you that these school bureaucracies will do what is right for the students?

I find the arguments for student educational choice to be compelling. In a place like Washington DC, I think it will be much more effective to simply pay for the students to attend good schools than to reform schools that have been horrible (and overfunded!) for decades.
Nothing stops you from using source control with PHP. Nothing stops you from working locally and then pushing changes up to the server. You make no sense.
I also ordered 2 Model B's from Newark. Placed the order 2 days ago (maybe 1.5 days ago?), got them today. They might 'restock' daily? Probably just artificially restricting supply.

Edit: nevermind... looks like I just got lucky when I ordered mine. Newark now says "7200 Expected to ship 6 Feb, 2013"
For me "big red button" is "Emergency Power Off", which I guess is also a viable response to some showstopper bugs, until you have time to fix, sometimes.
> Over $325,000 in ad spend

> 24,300+ installs

That's $13 a pop that somehow you will need to get back to ...you know ... be a business rather than a non-profit.
New Year's resolutions for developers
Toughness Redefined With The New Corning Gorilla Glass 3
Learn To Love Your Constraints
Yes I use Zabbix, this is not a bad idea, thank you for your suggestion!
I understand why JS crypto is insecure (they are obvious) but I get the feeling from linked article that even hashing a password is insecure.

Why it should be insecure to hash data locally? As I said, I understand this for two-ways algorithms (crypto) but I don't for one-way ones (hashing).
Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155
PHP has never been about the "language" as far as I see (hell, it was a templating system "evolved into a language"!), but about the platform (language + libraries + server + tools and what this meant for deployment and scaling).

PHP (the LAMP "web development platform" that happens to include the PHP language) got so popular because:

1. ease of deployment

2. ease of scaling

3! KISS by keeping the layers of abstraction few and thin (at first it was just a thin "templating" layer to reach the functions in C libs)

Only (3) has anything to do with the language itself, and is the only one the could translate to a language "vision". If PHP were to remain true to itself and its advantages that made it what it is today, their vision can only be to keep the layer of abstractions few and thin and this can only mean 2 and 3 from the OPs rant: procedural, functional and multi-paradigm enough to support OO (I know, people don't write functional code in PHP but I think they should - it really helps with KISS once you go over the "procedural brain rot").

P.S. As a developer I hate PHP (viscerally, passionately, religiously and in all other ways imaginable)! As a manager I absolutely love the "fail cheap, fail fast" philosophy and PHP is one of the few languages that enables this "flow".
Good question, difficult answer.

We are doing our best. So far, the performance and usage-of-resources are not the fields where we put the most of our effort. Additionally, there are two main issues to consider:

The first is about our security features: encryption and integrity check require some computation, hence our clients will have an higher load compared to Dropbox. Moreover, some of the magic performed by Dropbox to improve performance, cannot be combined with some of the security measures that we enforce.

The second is about the firepower of and age of the products you are comparing. Dropbox has a quite large and amazing team ( https://www.dropbox.com/about ) as well as few years of product development and testing on a large and impressively growing user base. The comparison with our team ( http://blog.filerock.com/founders/ and http://blog.filerock.com/dev-team/ ) and our time on this project so far, would be like throwing a cobble to the Ayers Rock and see who moves.

We are aware of the feature you mentioned: for instance, we already went for the filesystem monitoring using the API provided by the different platforms, but it turned out that they didn't behave as we expected on all platforms, in particular they made hard to get correct results needed by our integrity check technology. So we had to choose where to concentrate our effort and decided to put it on our distinctive features. So we switched to a simpler (and inefficient) approach that currently guarantees the correctness we need on each supported platform. As soon as possible, we plan to mix our current approach with the aforementioned usage of the different platform APIs to increase performance but still keeping our integrity check mechanism working properly.

Of course in the long term we aim to be as efficient as possible, and Dropbox is definitely the one to run after on this perspective. However, this will need time and resources. The good news is that having an open source client, anyone can contribute suggesting an improvement, or even implementing features that are not yet in our short-time roadmap (e.g., on-LAN files sync).
You may want to take a look at Silex, which is based on Symfony2 components.

http://silex.sensiolabs.org/
By neither I mean Liongate and the owners of Buffy.
Growth Hacking Tools
SpiderOak looks great. The only issue is that, since the client is not Open Source (or is it?), you have to trust what it does and you cannot verify it in the code.
+1 for videos. They make it much more enjoyable but it can be a lot of work :( Are you going to publish quizzes and assignments?
There is a good chance (going on faith), that everything is fine: if they are running a secure HTTP proxy, then all of your data is safe. The only thing they would know is the IP / hostname of the site you're connecting to. Unfortunately, can't tell from that writeup if that's the case - and it's not an easy thing to test. Would be nice for Nokia to confirm, or deny...

AFAIK, Chrome is the only desktop browser that supports HTTPS proxies: http://www.igvita.com/2011/12/01/web-vpn-secure-proxies-with...

It would be nice to get wider adoption for this.. Perhaps Nokia has it! :)

---

[Update] It is MITM, but for S40 browser only, which does server-side rendering:

- http://browser.nokia.com/s40-browser.html
- http://www.developer.nokia.com/Community/Wiki/Series_40_web_... (look under architecture)

Same story as Opera Mini.
To me state is what makes lisp hard, every time I look at lisp code (scheme via guile) I need to interpret it in my head to figure out the state. And certainly the set! doesn't help.

Lisp puts a heavy burden on the individual programmer, and its benefits can be achieved with better planning and engineering with the standard C++ toolkit. Yet, it is not easy to achieve the advantages of C++, such as performance, parallel execution, low level with lisp.

Lisp is nice for the few who have small projects, big brains, and little time, but by tightly coupling the problem to the code (with no performance benefit) it creates a unstructured nonsense that nobody but the author can understand.
Oh, yeah, it won't do that. I keep dotPeek around for that.
Rarely true if you account for a decent return on investment on the difference between a mortgage payment and rent for an identical place.
If you're running a very old version of rails, it might not be that easy to update to the latest rails version. In that case, just stick this in your config/environment.rb

ActionController::Base.param_parsers.delete(Mime::XML)

This will disable parsing of xml which most people never use anyway
Holy moly "high level language" is a moving target. A language with closures, built in high level concurrency, garbage collection, no pointer arithmetic, and a 'batteries included' standard library isn't high level these days?
Rails' Remote Code Execution Vulnerability Explained
That's great, but I haven't learned C. Besides that, leveraging documentation from another language is a hack. As it stands, there isn't documentation around for learning to create 3d graphics without needing to know other languages first.
This seems like a really useful, proactive approach to getting over your hangups and learning to just ask for what you want (I've had people ask me for some pretty crazy things a couple of times, and I'm sure they were surprised when I actually said yes).

Given that some of us are less creative than others and aren't particularly interested in repeating the same handful of things mentioned in the article a dozen times each, do any of the fine, good-looking folks of Hacker News any additional suggestions? Would anyone else be interested in undertaking the same challenge?
pg- when i first read your comments i was surprised at the categorical ad hominem dismissal of svbtle's critics. scrolling down, i see what u mean- the level of negativity and vitriol engendered by seemingly innocuous facts is surprisingly out of proportion. even for HN :) one wonders why the posters torture themselves so much.
the internet has always been packed with garbage - but garbage to you can be treasure to me. don't like it? click the back button! it's always been that easy.
it's almost as if these out of proportion "controversies" against svbtle are being manufactured by svbtle supporters in order to attract attention? sounds like it could work :)
Dreamhost has one-click Cloudflare integration from the control panel, it will route your DNS for you. I would also use recommend a WP cache plugin to serve mostly static cached files. (edit - looks like you already knew this)
Police Arrest Alleged ZeuS Botmaster “bx1″
Yes, Yes, and a Thousand Times, Yes!
Personally, when I see a comment like this I make a mental note about the commenter. I generally avoid them in the future. Yes, the OP did in fact cause some drama, but it also tells me the commenter reacts irrationally. When I do business, I like to do business with those companies that you don't here [sic] about, acting rationally or irrationally. They don't comment about how someone was stirring up drama. And I just realized this was a comment on Hacker News, but hey guess what, that's enough for me.
This puts an end to testing different variations of screenshots to increase sales (for honest developers).

Now developers have to wait for a full review cycle (weeks) and create a new version of their app only to test different screenshots. There must be a better way.
Great mobile support by the way. But regarding secret notes, although reveal.js and bootstrap looks great on mobile, there is no way that I could find to view the secret note on Android chome...
I always thought statistics existed to give you the "feel". Statistics of more statistics is nonsense!
I wrote up a detailed explanation of the issue and how the proof of concept works here: http://blog.codeclimate.com/blog/2013/01/10/rails-remote-cod...
But if Nokia can go to the extent of forging SSL, what stops them from using a different User Agent and pass through the block?
I don't block advertisements on all sites I visit. I only block ads on sites that feel the need to have 6 ads on one page, instead of one tasteful ad. I don't have a problem with all ads, just the super intrusive and sometimes distasteful sexual ads like you'd find on The Pirate Bay and some other sites.
Yeh no. 48fps is the new 3D.

Some people will like it even love it. The majority of people won't and its use will be restricted to 'blockbuster' movies only.
Looks cool to me. Except the part when Bilbo is on the horse. And 2 seconds before and after that. That part looks like cheap TV.
Nature of code: Free text book on processing
If you put a https proxy in between, you can capture all credit card data and other sensitive information. Use something like Charles on Mac and proxy your phone traffic through it to see this for yourself. No reason to be believe anything is safe if ssl certs are being forged.
The two are not analogous at all.
GM and Ford Open Up Their Vehicles to App Developers
It's only iOS, but this free photoshop template is a much better solution if you plan on spending more than 5 minutes creating your icon: http://appicontemplate.com

Includes actions to export in the correct formatting too
That doesn't seem quite correct: https://bugs.launchpad.net/ubuntu/+source/rails/+bug/1097643
The systems emulated look quite primitive and, hence, give off the opposite impression: it feels like Go is not able to make a serious emulator. I suspect there are more complex emulators in javascript.
Google Street View used for Location Scouting in Banshee (HBO/Cinemax)
> the money paid as rent is like throwing it into the sea!

The same can be said of mortgage interest. The fair comparison to the renter with no savings is the homeowner owing the full value of the house to the bank, and the fair comparison to a mortgage-less homeowner is a renter with investments and savings equal to the price of the house they're in.

Better arguments for your position might be

1. Mortgage rates are lower than rental prices in many places,

2. Paying off a mortgage is "enforced savings". People leasing property mostly spend the difference instead of investing it.

3. Some kind of projection of house and rental prices rising more quickly than the market.
There's nothing to be gained from following him around and badgering him because he won't talk to you. You're stooping to his level, which is satisfyingly ironic given the topic.

He disengaged you pretty unabashedly, so do the rest of us a favor and stop beating him up over something mindlessly stupid. It reflects more on you than him. Remember how I called you a troll in the past? Bingo.
> I suppose this is where we respectfully disagree.

The best form of disagreement :)

FYI, I didn't and wouldn't flag your comment.
Such a great article! I always wondered how Hashlife worked but assumed the algorithm was fiendishly complicated - but it isn't.

I am inspired to go write a life simulator now!
The problem I've found is I've become so used to no "waste time memorizing stuff" I've forgotten how to memorize things.

Which is a problem when I need to learn things that can't just be looked up online when you need them, like a new language. When I try to learn new vocabulary or something my brain just refuses to leave its default lazy "aww, just look it up on Google" mode. It's annoying.
Panasonic announces bone conduction headphones, we go temples-on
The actual game Rejection Therapy is here: http://rejectiontherapy.com and the rules (well, rule... there is only one) is here: http://rejectiontherapy.com/rules/
In college -- we had this friend, let's call him Jason.

Jason, despite average looks and wit would literally talk to any girl who would even make eye contact with him. He'd get right into it, chatting about this and that, using the dumbest pickup lines. His intentions were almost always to just get a number so he wasn't that creepy. He was fearless when it came to walking right up to a girl and just trying to get them to talk to him, no matter how many times they'd ignore him, tease him, etc. A lot of people enjoyed his confidence. He truthfully didn't come across as a jerk or anything, so anyone that would give him a few moments, might end up enjoying at least the conversation, if nothing else.

I remember chatting with him about it after a few nights out, and he just said how quickly he learned to get over rejection after just experiencing it; making the point that it really wasn't THAT bad, almost making a joke out of it. And truth be told, by the end of college, I am pretty convinced he ended up with more numbers in his phone than any of us other guys combined, for whatever that's worth.
No, you missed my point. Read the article I linked. With a proper HTTP/HTTPS proxy + CONNECT handshake, you still have the full end-to-end integrity of the connection. The proxy acts as a simple TCP relay.
Whenever this issue pops up I always imagine Fabien Potencier (while he's no dictator, he has a very clear path) taking over the php source and change it according to his vision. Then I imagine going back to the first php script I ever wrote and how if I would have been able to create it with the changes. I can honestly say I can imagine it would have been a lot harder to do and there is a big chance that I would have given up because I can imagine him going into full OO mode. Don't think I don't like Fabien, for me personally his php version would probably be a lot better, but also a lot harder for new users.

This is one of the best things of php: it's easy enough for new developers and you can grow into the OO aspects of it. While I must admit I would also like a big cleanup to make the function names and arguments more uniform, I don't hope they change anything that makes it harder to begin with php or limit the possibilities to grow.
Agreed. Unemployment rate for those with at least a Bachelor's degree NEVER topped 5%, even during the depths of the recession in 2008-9.

Pretty amazing stat on its own. And this includes people who graduated with the minimum passing GPA (2.0?) from the worst college with the most useless major.
I ctrl-fed this. Only 2 paragraphs in and tremendous factual inaccuracy there. 90 or 120 hz would be appropriate where average people can't detect the change anymore, but some people can distinguish minute frame changes even beyond that because different people have different eye characteristics.

I'm sure some people can't distinguish 48. I'm sure some can distinguish 120. People are different. I personally don't notice the difference beyond 90, but I can easily notice a difference between 120 and 60.
I was wondering if I knew the rest of your username. Nice of you to continue to stalk and harass me and call me names.

I made two whole comments in this thread (I didn't even realize they were the same person until you said something. I don't keep a black book of users to berate as you do). You just saw an opportunity to harass me some more. Leave me alone. For the third or fourth time. Maybe you wouldn't need so many accounts.

You literally contributed nothing except for to try to harass me more. How childish can you continue to be? Your little episode was like 7 months ago before you rage quit HN, it's time to let it go and get over your petty grudge, jsprinkles.
This was incredibly insightful. Thanks. I kinda suspected I would get something from Paul Graham as a response.
This is excellent; I developed such a solution some time ago, after asking on StackOverflow if such a thing already existed and being told no.

It's actually quite simple to do from scratch anyway. My solution involved being able to search non-consecutive terms on a page and return paragraphs containing those terms. AFAIK, in-browser search cannot do this, which is a shame.
Actually my snide remark came from trying to find docs for Clojure libraries. :) Clojure Docs (http://clojuredocs.org/) is alright for the standard library, API documentation (http://clojure.github.com/clojure/) not so nice. But finding complete and updated docs for Compojure or any other of Clojure's web frameworks is impossible. Ironically, Noir (http://www.webnoir.org/) seem to be the best documented of the bunch but it has been deprecated.
I truly admire your composure and ability to think of a sensible,legal way of dealing with this situation.Call me irrational but i would have properly & firmly physically 'fixed' this employee.
as someone who never claimed it to be legal advice I fail to see why you SHOULD consider it valid legal advice

doesn't mean I wouldn't fire the guy's ass because I have yet to see a plausible argument for what negative legal consequences might befall me if I did
The certificate images are useless to verify the claims.

If there was a MITM of SSL connections it could be seen with the swap of server certificate. This is easy to check and display in an image. Failing to do so is "weird" for the less.
That is not the source of the 'To Ward of Scammers' part. Apple only tells you what will change.

http://www.macrumors.com/2013/01/09/apple-now-locking-screen... gives an explanation for the 'why':

"This small but important update shuts down a widely used scam tactic, where
developers would upload game screenshots to get an app approved by Apple and
then switch them out with screenshots from another popular app.

The scam tricked people into buying fake apps with screenshots ripped from
another, more popular game, or a game that has not been ported to iOS at all."
1) We're still in private beta, we hope to publish commercial offers soon. You will get 3G free, and there will be different plans if you want more space. If you take part in the private beta, you will get a discount when our commercial offers go live.

2) Not yet, but we are planning to.

3) See this comment: http://news.ycombinator.com/item?id=5036011
Wow, you're the type of developer who would leave an absolute mess in his wake.

Everything you said I rail against daily. Stop bringing your bad habits into PHP, we have enough of them already.
Erlang based server side systems
his name is actually also on the top ;)
It's not. PHPUnit and dependency injection make it dead easy to mock objects and make testing stupid easy.
Python's Pickle lib had something similar to safe_load(), that they removed because it gave a false sense of security.
Don’t Be Ugly By Accident (2010)
"We're not patching it"

That's not what was said. They don't maintain it.
I can't agree with that. Personally I happen to use PHP not for web development, but almost exclusively for system administration and monitoring (I'm not a web developer). It's very comfortable using PHP in these areas, as:

- PHP and many of the PHP extensions are packaged for about every major OS and architecture

- a lot of functionality is already shipped with the interpreter (so no additional stuff necessary)

- it's very easy to deploy
We've tried a number of options, especially in the monitoring area, but PHP eventually seemed to be the most suitable for the job.
A simple TCP relay that can log any and all traffic passing through it at any time with no prior warning. eg. an employee with sufficient access to the server (CTO? newly hired intern? who knows) can turn on logging of your traffic and read your private communication. This includes full access to any source code you may upload to github or any transactions you may make on your bank's website.

The employee may delete the logs after he is done, and nobody would ever know that he has accessed them. Government agencies may legally prevent anybody speaking of their wiretapping through numerous laws.

Basically, the fact that it acts as a simple TCP relay (obviously it does not, it is parsing the data) is seriously in doubt.