skysight-inc/HackerNews huggingface dataset:
Yeah, I agree that it is a slippery slope. The difference between their two models right now is the difference between someone throwing dust at you, vs throwing grains of rice. Neither hurt...but it could quickly escalate to throwing pennies or bricks.

And for basically no value-add, since it's the TSA.

All in all, I think the TSA is awful and would love them gone. At the very least there should be regulation on the max amount of radiation that is allowed by a machine (not sure if this exists).
I really hope they succeed, but sadly, I'm seeing all the typical signals of games that fail to launch, due to gigantic scope and feature creep. When you focus so much on technology and your answers about the game are all "we plan to support that", that's a bad signal.

You start a game with rock solid game design - throwing procedural generation, multiplayer code, and other cool features together gives you a tech demo, not a game. The smallest changes in game mechanics deeply affect things like networking code. Mix this with a crowdfunded project (where everyone who pledged is a stakeholder and wants a different thing) that's a recipe for disaster.
RailsConf 2013 CFP is up
I don't know, is this a significant issue for android developers right now?
Ask HN: Did your startup begin as a service?
Does anyone have a service based startup or one that started as a service? It seems these types of startups are frowned upon but it might provide a great way of seeding users and building customer funnels. Last year I worked on an actual software product but have since turned it into a service with much better results. Would love to hear you experience about your service based company and how if at all you turned it into a software company.
There's no need for more bureaucratic rules, we just need to appoint judges willing to identify these avalanche-of-paperwork techniques and respond with "TL; DR; dismissed with prejudice"
Learn by Shipping
I can confirm that there is a generic way to exploit this. There is also a denial of service vector that is currently unpatched and depending on the way you have written your app there is a remote code execution issue as well which is unpatched (i don't think any real apps would be vulnerable to this.. but who knows). i suspect dos + rce use the same vector that tptacek has found.
Top 20 Thinkers in Social TV and Second Screen - 2012 - Appmarket.tv
I do that a lot and I found long lines annoying on an 11" MacBook Air, which has a 1366px horizontal resolution, and I use a fairly large font size at 12pt. I want to believe most developers use a larger display for their day to day work.

(bonch, you’ve been hit by the hellbanning BS: your comments are invisible)
We'll see about that. I mean will the manufacturers of Ubuntu phones and tablets open source their drivers? Seems pretty unlikely, although it would certainly be nice to see, and some of the chip makers have started making open source drivers for their chips lately. Will the concept of a locked bootloader ever exist on Ubuntu devices? I hope Mark never agrees to such a thing. Same with censorship/surveillance stuff built into their devices that get sold in China. I'd rather he didn't accept that business.
I agree. Punchfork is a really cool site. Pinterest has too much of a stigma associated with it.
Thats interesting. But then my question would be: will the phone be restricted to running apps that behave graciously by handling those signals?
Django and Jade
Well, on mobile it can be hard to quantify and connect design to value. On the web it's a different story.

There's nothing wrong with beautiful design as long as you are willing to accept the fact that at one point it is serving art and not business needs. And that's OK.

If the requirement is to strictly serve business needs, then you have to A/B test, generate numbers and go with what optimizes conversions or whatever you are after. People react to what they see in amazingly different ways. I don't think anyone has a canonical "manual" for what will please most people or what will compel most people to take a given action. I mean, look at Craigslist!
Can the U.S. Lead the World in Advanced Manufacturing?
People might also be interested in these postings from our blog http://digital.cabinetoffice.gov.uk/?s=Design+
I'm starting to prefer using code for layout, since it does make some things easier. When I inherit a large project, it's nice to be able to search & easily change stuff in code rather than having to tweak lots of xibs.
Security Advisory 2798897 released, Certificate Trust List updated
The FBI made sure nothing happened here, they seem to know what they're doing. They should be commended for keeping this situation well in hand.

The TSA is not the same thing. Their security theater would've done nothing to prevent someone from driving up a truck bomb and setting it off.
Note that the public style guides aren't always a 1:1 match with the internal ones, usually for legacy reasons or to be more consistent with other internal languages.

I don't see anything offhand in the internal ObjC guide about alphabetical order for ivars, so it's possible the OP misunderstood the "dealloc in declaration order" rule. It's also possible his specific project had a convention of sorting them alphabetically.
Love the copywriting above the fold. It is very personable, communicates a need to me that I didn't know I had, and tells me it can solve that need (all in a quick read).
This is fun and works nicely.
pretty obvious?
7 Publishing Trends that will dominate 2013
I'm definitely going to put a disclaimer on the readme... "generally, if you are using this to solve a problem, you should come up with a better way to solve the problem."

However, sometimes - especially for quick and dirty stuff - this sort of freezing can be super useful. Also, it can work exactly like extended JSON, as it will store 'undefined' and 'Infinity' and will correctly dereference objects back into the same object (instead of multiple copies of the same data), etc.
> But only user code is required to be well-formed and have defined behavior, system headers could just as well be written in Forth as long as the actual behavior under the compiler they come with is correct.

To understand this better, realize that, ultimately, a standard is a contract. A standard says, in part, "If you refrain from doing these things, the system promises to do these things and not do these other things here."

"Undefined behavior", then, is invoked by code that strays from the standard by doing things the standard makes no guarantees about, like casting a value of type pointer-to-double to type pointer-to-char and dereferencing the result; the behavior of the compiler and the code the compiler emits is then undefined, which is to say its behavior is not guaranteed by the standard.

And, yes, a conformant C compiler is perfectly within its rights to delete code that it can tell invokes undefined behavior.
SSH keys shared with FUSE
> Configurability is a huge plus for me. Could you imagine recompiling your phone's kernel? Configuring your phone with dotfiles? Serving webpages and email? Not everyone's cup of tea, and I hope there are more user-friendly options available, but having that power is enticing.
I'm looking forward to better multitasking, and multiple user accounts. Also a more open hardware ecosystem, such as USB and HDMI ports, docks, chargers, USB keyboards, maybe a laptop "shell" I can insert my phone into?

FWIW, you can do all these on Android in some form or another.
US could certainly lead in manufacturing if it were more concerned with building robots, rather than creating "manufacturing jobs", and then benefit from whatever jobs get created around that.
For Ruby On Rails developers - http://railyo.com (a private job board for rails)
Considering the amount of scientific discovery since that point, yes, it is ancient. Surely 90% of our scientific knowledge has come past the point in which it was invented.
JavaScript terminology: the two prototypes
Do you know of any alternatives being worked on? No snark intended, I am genuinely curious about the current state of affairs.
Supporting http://tack.io/ is imo the most painless solution for what we have right now.
Should preface this by saying that I am trying to gain a more full understanding of your logic.

I wonder if you could elaborate on what your point is a bit? I'm not following how being "... accused of incredibly complex financial crimes..." makes it more unjust to be deprived of adequate legal counsel than being accused of possessing marijuana, or selling marijuana for instance.

Maybe I'm just parsing your comment incorrectly?
The fifth amendment requires the defendant to be indicted by a grand jury before facing trial. I think the article overstates the power of the US Attorney to bring charges (if perhaps only only in theory).
> The power to freeze assets helps keeps organized crime from using its vast resources to drown the feds in litigation

Is this a real thing that happens? It sounds like a movie plot.
Did bin/post_compile get broken as well? Seems like it isn't running anymore for me.
Objective-C has the dynamic properties of a language like Smalltalk, but you can also drop down to C and write fast imperative code.

Besides the raw capabilities of the language, the community of Objective-C developers fit very well with the language. Where Ruby would use an abbreviation, ObjC prefers long explicit names. And the interleaved method name/arguments makes the code readable in a very specific and refined aesthetic. It isn't obvious to everyone, and it isn't a natural way to write some kinds of programs. But for writing fast and highly-interactive UIs, it remains a high water mark.

The best advice is: try going through one of the books by Aaron Hillegass to get a sense of the serenity of writing proper Objective-C/Cocoa code.
A 5 dollar USB hub can be used as a dock, assuming the USB port can be a USB host (even the cheapest Android hardware usually can), and a hub lets you dock to a full-sized keyboard, mouse, and even external VGA/DVI.
Show HN: Tempo, a simple way to visualize how much email you get
Show HN: Clean up that inbox with some easy to access filters
I'm certainly a "simplest thing that could possibly work" type of guy as described in David's post.

A somewhat unspoken but generally understood part of this philosophy is that while you don't go out of your way to make things super flexible, you also make sure you don't code yourself into a corner that will be hard to get out of should the requirements change.

Knowing how to balance this sort of thing well takes years and years of experience (IME) but it certainly isn't impossible.

As a side note, something taking "days to fix" is no big deal considering a big part of the desire to not over-architect is to avoid situations where a fundamental and ultimately bad assumption results in a situation that is going to take months to fix with the result being a mostly new and untested code base and all the pain that comes with that.
Harvard is a hedge fund with a university attached
Sounds similar: I would like to see things other than emails live within my email inbox.

You click on a "subject line" in your gmail table view, and it opens up a to-do list, or a wiki, or a spreadsheet, or a regular old email.

Not an email "notification" that links me to a spreadsheet, but the actual spreadsheet itself.

I originally thought this was what Google Wave intended to be. You could send a regular email OR a "wave" and both would appear in your gmail inbox. It unfortunately ended up being more of a second inbox, with gmail notifications.
How to make WordPress absolutely blaze on AppFog (part 1) – AppFog Blog
I hope I'm not too late and that our friend here will read this.

I've been there and the honest truth is things still suck in a lot of ways. But that doesn't really matter because it just means there's more for me to fix, more to work on and a chance to change the things that are worth changing. The people who are content with how things are never make things happen. Go change the world, make it the sort of place you want it to be.

But if you really want to stop feeling dead inside, to come alive again you need to start serving others, do some service, start caring about them, do things for them because you care, start small with random acts of kindness or volunteer at a soup kitchen or something. You might not think doing service would do much, but it will 180 your outlook on life, and as you start to care about those you serve many of them will care about you as well. Other than that exercise will help a lot, changes in diet as well and if you think there might be a need to see a psychiatrist then please do, in fact I think you should. But whatever course(s) of action you decide try to stay away from the ones that can't be undone (death is rather permanent).

if you need someone to talk to I can give you my contact info and we can get through this, just let me know ok.
The limit is flexible at the project level, many projects use a 100-char limit. And it's only for code, not for xml/json/string etc. files. And while it adds some extra line breaks to your code, it does improve readability a lot, particularly in visual diff views.
AppFog now supports Node 0.8 – AppFog Blog
I came across this issue when stitching some files together for min/merge... I simply had the merge process insert a semicolon after each file, for effectively the same reason.. multiple semicolons aren't going to hurt anything... The reason for wrapping your script in an anonymous function is similar, not polluting the global namespace, or at least not relying on certain globals.

These are conventions, not because you have to, but because you avoid other issues further down. You COULD simply write all your scripts inline.. and if you are judicious it is probably a bit better performing. That doesn't mean you want to... JavaScript in practice is much more about convention to prevent/limit obstacles than a "one right way" philosophy.

Hell, look at CommonJS vs AMD and the various solutions there alone... not even including all the one-off processes that have been used over the years.
Thanks for the wonderfully educational comment :). I sincerely appreciate it!
The China study has been debunked, on numerous occasions.

My personal favorite:

http://rawfoodsos.com/2010/07/07/the-china-study-fact-or-fal...
I'm not sure why you're being downvoted--the only reason I'd heard of Perforce was from the games industry in certain places.
Github Codes Up Computer-Less 3-D Printer Software
The Infographic follow-up: How much does an App cost? About as much as a car.
Reducing lag on Android by feeding /dev/random with /dev/urandom
"they discovered that in August 2011 they had mistakenly issued two intermediate CA certificates to organizations that should have instead received regular SSL certificates"

This is the worst security violation committed by a CA that I have ever read! These organizations can now issue certificates for any domain, not just google.com, and they will be seen as valid by all browsers. Fortunately Chrome already revoked the intermediate CA certs.

However it is unclear whether TURKTRUST has done so on their side yet or not. They distribute 2 main CRLs: [1] which is empty(!) and [2] which contains a bunch of serial numbers recently revoked presumably related to the incident. However their root cert [3] does not reference any of these CRLs, and their (legit) intermediate CA cert [4] is also misconfigured and points to the empty CRL:

X509v3 CRL Distribution Points:
Full Name:
URI:http://www.turktrust.com.tr/sil/TURKTRUST_Kok_SIL_s3.crl

What this means is that it appears TURKTRUST has not technically revoked anything via CRL. Perhaps they did via OCSP, but I have not checked whether their OCSP endpoint advertises the recent revocations or not.

[1] http://www.turktrust.com.tr/sil/TURKTRUST_Kok_SIL_s3.crl

[2] http://www.turktrust.com.tr/sil/TURKTRUST_Nitelikli_SIL_s3.c...

[3] http://www.turktrust.com.tr/sertifikalar/19_TURKTRUST_Elektr...

[4] http://www.turktrust.com.tr/sertifikalar/20_TURKTRUST_Niteli...
I think I know where they are going with this; PNaCl compiles Native Client code to LLVM bitcode, which now will be able to be compiled to JavaScript in the browser.
Hey Hacker News. This is an app I built over the last few days when I realized I didn't know which email lists were sending me the most email. Please let me know your thoughts, ideas, or questions.
Maybe it'd be good for your company to shine in a post-mortem when talking about development practices.

Secrecy is stupid for these things.
In Victory for Google, U.S. Ends Antitrust Investigation
Just wow:

<p align="center">B</font><font size="4">ERKSHIRE </font><font size="6">H</font><font
size=4>ATHAWAY </font>
Thanks for that - looks like a huge time saver! Unfortunately, it won't fully automate setup. Things like entering passwords for a service you want to set up, tinkering with desktop, firefox or other app settings, etc.

But still - this gets you a big head start.
We Can Learn From Numerous Heatmap Tests
Read the criticisms and controversies section of the wikipedia article, it's a widely criticised study (perhaps not as much as Ancel Keys' study but close)

Also see here for a very thorough refutation:
http://rawfoodsos.com/2010/08/03/the-china-study-a-formal-an...
I Think if somebody can make a phone os better than android, and more intuitive (easy for non-tech people).. not only that but have the capacity to enchant the mobile hardware players(good lobby push)

Android can be beaten away.. but not the same can be said about to IOS.. its all about brand.. its a tough fight..

But android market share, is not much about the consumers that want it because they need..(theres no sentimental decision about it) its about the device makers, making the decision for this share of the market..

if ubuntu can convince device makers to put that in their phones.. (with the help of some good apps, so theres no cultural shock).. i think people will not care much..

and for developer comunity, i think is better.. we need to get free from the centralized app market model from apple..
whoever delivers that is my friend :)
looks really cool, well done! Only thing I would recommend is to immediately popup the share icon as soon as it's done rendering. The heart icon also isn't clear how I share the image.
Tutorial: RabbitMQ Node.js on AppFog
I can see it now: a bunch of grizzly old men huddled together in the back room of a local bar, a single bare light-bulb burning above them. Every few seconds they yell in anguish or delight and throw down more cash, words incomprehensible to any outsider. In the middle sits a pasty nerd, slowly typing out `echo $RANDOM` into a computer over and over again.
As the creator of FuckItJS, I heartily approve of this destructive approach.
One more reason for a proper bootloader (to dual boot a preset working interface) and/or a basic recovery ROM (like old Macs) that can always place phone calls.
If you stopped using ubuntu on desktop because you had better alternatives, I predict you'll find better alternatives for your phone as well.
Sure, I'm far from a great web developer. But I do resent being asked monkey-dance questions that ignore my experience and expertise, in favor of questions I would've done far better on right out of school.
Yes, but only if they want to do everything on launch day.

The part about the galaxy changes reminds me a lot of the 'real ecology' from Ultima Online, which had to be scrapped since there's no way ecology can work with players as predators.
Deterministic or Not?
What do you consider a good (old) strategy game?

Imho single-player strategy is usually just a puzzle game.
List of 32 programming/CS courses (MOOCs) that start in January
Drugs are a bad analogy as production and mere possession are illegal.

A better analogy:

- Drugs are legal to possess, but the act of buying them is illegal
(in the US).
- This guy makes an e-commerce software package designed specifically
for selling drugs.
- This guy only sells the software to companies in Amsterdam.
- He's arrested because one of the companies in Amsterdam is selling
illegally to US citizens.
- The government puts a gun to his head and tells him to hack into
his customers' websites in a scene straight out of Operation
Swordfish

I doubt that a lawyer would have helped him with this though. Unless I read the article wrong, he was being prosecuted/threatened in New York state, but was operating in the state of Arizona. He may be in accordance with all local (Arizona) laws, but was arrested and shipped off to New York state for some reason.
Check out http://tack.io/ and http://convergence.io/

You could also listen to this if that's your preferred way of learning things:

https://threatpost.com/en_us/blogs/moxie-marlinspike-tack-co...
Look up Smalltalk for some hints. I'm not an expert on Obj-C or Smalltalk but Obj-C borrowed pretty heavily in some respects, as I understand it. It is object-oriented, but it is a substantially different paradigm from the C++/Java family.

As another hint, Ruby was pretty heavily influenced by Smalltalk as well. Think about stuff like responds_to? and whatnot, where you're sending messages to objects and objects can actually intercept and react to those messages.

The comparison to C++ is pretty illustrative, if only as a point of contrast; C++ is certainly not the only possible approach to OO in a C-like language. Alan Kay, the guy who did Smalltalk and OO, doesn't particularly approve of the C++ approach to OO.

In practical terms, though, I think it's somewhat historical, to the extent that any programming language's usage is or is not historical. :)
Very nice, and quite a bit of fun.

My only objection is with the TOS: while I can sort of understand defamatory and libelous (even these rule out most of the fun), I have issues with "inaccurate". Does not leave much wiggle room, does it?
Except for a few full pay video poker machines which actually give the player an small edge given perfect play.
Good work. What did you use to build it?
Pretty cool. How did you implement filters?
I had asked a question on stack-overflow a while ago asking for some guidance on parsing this exact kind of stuff. http://stackoverflow.com/questions/8198923/natural-language-...
I'm surprised by the trend of comments here suggesting that the US government is going after some of these guys too hard. I thought the general perception is that they haven't gone after enough wall street swindlers. For example, I'm not aware of anyone that's gone to jail for the 2007-8 US housing & subprime crash, despite the fact that clear malfeasance wiped out billions of dollars of economic and consumer value.
I presume then that is how restaurants add tip to a credit card charge after returning it to the customer. I always used to wonder.
That's hardly the same thing - you have to actually run/install something on the Android device itself.

With this fake Google certificate, I can install a box between 2 routers anywhere between you and Google - say on an open wifi hotspot or in your ISP's server room. I can then set up a simple transparent forwarding proxy that will provide the fake Google certificate for any Google SSL requests, and forward on other requests as normal. I can then log all data passed between you and Google, such as session cookies, emails, credit card details on Google wallet, etc.

This is extremely problematic as it is effectively invisible to users and can be easily used by governments such as China to ensure they have full access to anybody's encrypted communications with no risk to themselves and very little chance of being detected.

Basically, SSL, HTTPS and anything else relying on CA certs should be regarded as broken, and you should even expect that a hostile government will be listening in. USA government, for example, has full access to AT&Ts server rooms and backbone routes. China has full access and control of any network infrastructure involving communications over Chinese borders.