skysight-inc/HackerNews huggingface dataset:
My point was there's no single 'gl.Vertex3' call that takes native Lisp numbers. Thinking about double/float/int/short should be abstracted out below the Lisp level.

We use OpenGL to show real-time renderings of the robot, derived from the gyros and joint angle sensors. We have an analysis tool that shows, either in real time or post-run analysis, renderings synchronized with high-speed video of the robot and scrolling strip charts of every important variable over time. I always see much more looking at slow-motion videos & renderings afterwards than looking at the real robot.

OpenGL rendering also turned out to be useful for extracting data from CAD models. Our CAD software (SolidWorks) can export STL files (a list of polygons) and we need to extract center of mass and moment of inertia and such. Doing that without visualizing it is a nightmare.

We have done dynamics simulations (using ODE), but they haven't had much predictive value.
I'm going back to Rage for a while, but I do expect Classic Doom to come fairly soon for the iPhone.

For those of us with jailbroken iPhones, Classic Doom has been available for it for a while.

http://code.google.com/p/iphonedoom/
IPhone 3.0 now with SquirrelFish Extreme?
Absolutely! Best of luck to you guys: I love the minimal RSS style, and Rososo wasn't exactly easy on the eyes.

Also: when non-logged-in users click a link, does it reset the bookmark?
I agree that the music selection from Pandora station was way better than last.fm. If Pandora asked me to pay 3$ a month I would. Last.fm? No way.
I've had a few DDOS attacks in the past, first when hosting with slicehost, and then when at linode. Running IRC related stuff, these attacks are pretty much expected from time to time.

Both dealt with them fantastically, keeping me updated on progress etc.

As far as I remember, there was only one instance when they decided (slicehost) to take my server 'offline' and just wait for it to pass/upstream providers to deal etc.

The other times they were quickly able to escalate to upstream providers with minimal impact. I've had a few at linode, and whilst it does use up some bandwidth allowance, it hasn't been a big deal at all.

Obviously if you're able to, get more IPs, use a few data centers, etc. distribute yourself so that an attack on any one part doesn't have a big impact.
I'd extend that warning... watch out for any company, even if it's large and reputable and the salesmen have nice suits, that promises to solve your DoS problem by selling you an expensive firewall. If your traffic is below 100Mbps, there's nothing the fancy box can do that your OpenBSD box can't. (this changes as your traffic climbs significantly above 100Mbps, but most of us little guys are below that line.)
Wow, this looks like an insane funhouse of mirrors in Safari. (firefox 3.1 only, apparently)
Wow - so that's really how many clicks your pages have received, approximately?
Heh, checking the source code reveals:

<!--
_ _ _
___| |_ __ _ _ __| |_ (_) ___
/ __| __/ _` | '__| __| | |/ _ \
\__ \ || (_| | | | |_ _| | (_) |
|___/\__\__,_|_| \__(_)_|\___/

so much cooler than pHome.us

-->

I think every New York start-up I've ever seen has an ascii-art comment. Tumblr does too.
Section 6.3 of the contract includes this text:

“In the event that Apple refunds any such price to an end-user, You shall reimburse, or grant Apple a credit for, an amount equal to the price for that Licensed Application. Apple will have the right to retain its commission on the sale of that Licensed Application, notwithstanding the refund of the price to the end-user.”
You might want to focus on smaller bloggers since they're more desperate for content and more willing to write about you. Having multiple write ups from upcoming bloggers can can add up to more hits to your site.
The Terms of Service speak for themselves. .

Who in their right mind as a developer would integrate with a service that by its own admission cannot be considered secure, does not guarantee its service, can shut you off for any reason, has no liability if in doing so causes your business to fail, and can change its TOS as it sees fit and you agree to any change they might make in advance.

When Lawyers and Accountants start running your business, you might as well get the bankruptcy documents rolling.

Just a few of the idiotic terms are listed below. To see the complete list of reasons why you should not do business with these guys, go here:

https://spreedly.com/info/terms-of-service/

# Spreedly has the right to modify or terminate the Service at any time, without notice.

# Spreedly has the right to refuse service to anyone for any reason.

# You bear all risk for your use of the service.

# Spreedly does not warrant that the service will be available or reliable.

# Spreedly does not warrant that the service will provide accurate data.

# Spreedly does not warrant that the subscriptions that you offer through the Service will meet the expectations of your subscribers.

# Spreedly bears no liability for any losses of any kind that you may incur through the use of the Service.

#Besides credit card information (which is encrypted), no information that Spreedly stores is guaranteed to be secure.

But they do guarantee that they will bill you once a month and you get a full 2 weeks to audit that bill, and if its wrong and its 2 weeks and a day later, that's just tough luck.

Nice.......
I doubt I can give too much information out publically, sadly.
As for the level of vetting, a lot depends on who you bought it from, and what type of cert.
Black listing the source IP's is NOT going to help. The attacker can just spoof any IP, he doesn't care about actually connecting he just wants to tie-up your server

http://en.wikipedia.org/wiki/SYN_flood
I think you're missing the point. Wildcards obviously must be more expensive than single-certs because they have those extra 2 bytes in the common name. These bytes don't pay themselves, you know?
"The" library is which ever squirrelly database, file format, app, etc. your next project needs to talk to which doesn't have bindings for your favorite language. You compromise on Java to avoid writing that by hand and use a JVM language to avoid the pain of actually using Java.
What are those maintenance costs that you speak of?
Yup, that is correct. One nice thing, though, is that you have gateway portability, so you can do some hard negotiation with your gateway and/or merchant account once your volume grows to cut down on the fees. And, of course, as your volume grows, you'll be getting charged 1-2% for most transaction. 3% is only for the first 50 every month.
This works fine when there are tens or even a few hundred source IPs. However, malicious DDoS attacks are often orchestrated using zombie machines (maybe your parent's unpatched Windows box, for example). This way the perpetrators remain out of reach and you end up swamped with thousands upon thousands of source IPs, none (or few) of which share a net block.

This is really not a problem you can solve down at the firewall-before-webserver level.
Thanks, you just saved me $50.
If you want locations of zip codes or US cities, you can easily get that from the US Census's TIGER data.
It looks like they are even cheaper at this reseller: https://www.servertastic.com/
Could be. We're OK with that, for now at least. Pricing is tricky and you have to start somewhere, and so far our current price point is working great for us.
E-mail addresses are for password recovery, unless you have a safe place for us to send our carrier pigeon to :)
If they are never connecting, then why not set up a SYN "honeypot"? As soon as a valid user connects, redirect them to a different site or IP address that you do not advertise, that actually hosts your app and db servers.

Thus you could rent or colo a small system on a different network, maybe even in a different part of the country and then redirect valid users to an entirely different location with a cookie in the URL. No cookie no service.
As far as I'm aware (Correct me if I'm wrong anyone in the know), the process for any spoofed source address flood would be:

* Determine which upstream provider it's coming from
* Contact that provider, and ask them to investigate
* They do the same thing
* If a provider finds out the source is local, then they block it / contact the person(s) responsible etc

Of course it gets harder if it's a botnet or some other system that is distributed over a large number of sources.
That's what most people we talk to seem to do. Adioso is designed with this assumption.
Retaining the right to keep their commission is not remotely the same thing as forcing developers to pay back Apple 100% of the sale amount, including paying back Apple's commission amount.

My guess is that they are including this in their contracts to allow for punitive actions in cases of things like the $999 "I am Rich app".

Of course, there's still the chance that I'm completely wrong and Apple is intentionally trying to scare developers away from a fledgling platform and towards Palm's WebOS and Android; but I think it's a bit silly to get up in arms about this until there's something more detailed than the parsing of somewhat unclear contractual terms.

(Also, thank you for showing us the section that they're talking about!)
The sad thing is that this is still actually one of the better contracts for mobile app distribution.
Welcome to the state of TOS in the payment services industry. I agree, it's pretty yucky, but every single upstream provider that Spreedly uses (PayPal, Authorize.net, etc.) has similar terms that are as or even more non-committal. Because of that, and because we're not in a position (yet?) to buck the trend, we've stuck with the party line for now. Even Shopify (http://shopify.com), who is perhaps even more critical to the businesses on their platform, has basically the same set of terms.

Now, while legally there's not much we can do, on a practical level we're a support-centric organization that totally understands that our clients are building their businesses on us and that we have to be reliable. Our income is directly tied to our clients income, so we have all kinds of incentive to make sure that the service is always up and ready to collect payment. Also, because of the way Spreedly works, you can quickly build a layer of simple caching in to your application that will ensure that even if we were down for some reason your site would still be up and serving existing clients.

I hope this helps explain. I know it's not the most satisfactory answer ever, but it's an honest one based on where we (and the industry) are at this point.
Absolutely I'd call it a new form of literacy. The most impressive applications of computer science always happen outside the realm of computer science disciplines.
depends on how smart your attacker is. the source IPs must not respond or the attack won't work, so potentially you could block enough bogons. Also the first syn flood attacks came from a fixed source IP.

You have OpenBSD firewalls... have you checked out OpenBSD SynProxy? I haven't used it, but it was designed for just your case.

http://www.openbsd.org/faq/pf/filter.html#synproxy
But $15 an hour? WTF?
Yes. If you're worried about someone else using your startpage, you can make it private in Settings. I'll tell you though, the startpages aren't indexed by any search engines, and personally, this has never been a problem for me.
Is that really how it works? If you have CDN like Facebook you have things on other domains.
Ah. Very cool.

Are you computing center of mass / moment of inertia yourself, or using a 3rd party library to do it? PhysX is free, and I believe it can do those calculations for you fairly automatically. (In PhysX, a 'scene' is composed of 'actors', and each actor is described by a set of shape descriptors. A shape descriptor can represent a box, a sphere, a capsule, a convex hull, etc. So a laptop actor could crudely be approximated with two box shape descriptors (one for the screen, one for the body) connected by a joint. Given those shape descriptors, the library calculates the actor's center of mass / moment of inertia / etc. If your CAD software simply exports a list of polygons, you'll need to decompose those into a set of convex hulls using convex hull decomposition techniques: http://codesuppository.blogspot.com/2006/04/approximate-conv... ) You also might have better luck running dynamics simulations with PhysX than with ODE. It comes with a large number of code examples to get you started: http://developer.nvidia.com/object/physx_downloads.html
Just Say No To 'Innovation'
I agree. Time will tell just to what extent Apple intends to exercise their rights.
Libraries aren't the issue. I use Chicken Scheme for a few things, which has plenty of libraries and a fantastic package system called eggs. Sure, other languages like Perl and Python have more libraries now, but that's not what made them popular.

What made them popular was the design of the core languages. I started using Ruby because it was faster to type and easier to remember how to do things than Perl, not because it had more libraries, which it didn't.

The problem with Scheme is that the core language isn't terse enough, and so it gives the impression that it will be hard to do things. And that's correct. Scheme requires much more typing and is harder to remember than Ruby.

Consider:

Ruby:

h = {}
h[:foo] = "hi"
h[:foo] #=> "hi"
h[:bar] #=> nil

Scheme (Chicken):

(define h (make-hash-table))
(hash-table-set! h 'foo "hi")
(hash-table-ref h 'foo) ;; "hi"
(hash-table-ref/default h 'bar #f) ;; #f

That, in a nutshell, is why people don't use Scheme. The people who made Perl etc. popular hate typing, and the core language of Scheme forces you to type a ton. There are other problems like really slow string functions, things that should be core being in SRFIs, libraries being called "SRFI 18" rather than normal things like "threads" so that it's extra hard to tell where a function is coming from, where its documentation is, or what you have to import to get it. Lack of libraries (if indeed that's a problem for you) is downstream of the core problem, which is that Scheme has a lot of clumsy design features that discourage would-be library writers from using the language a lot.

This isn't a Lisp problem, it's a Scheme one. A Lisp with a better core and enough users would get lots of libraries eventually, just like any language.

I think Scheme is good for teaching though, and would rather learn it in a course than Python.
I'm not making any excuses. It's just that there's been a lot of discussion about SSL certs the past few months, and I'm willing to bet there's no more than a roomful of people worldwide with the knowledge and experience to understand how to run a CA and the costs associated.

Does your anger extend towards the domain name companies? Webhosts? After all, running on free software and 'cheap' commodity hardware - Dreamhost probably make the same figures you're talking about, and they don't have a lot of the large up-front an annual costs. Just an example, really.

To address each point:
Validation - not a fixed cost. Some can take several real man-hours to complete, and additional costs of access to third-party databases, translation costs. I see it possible to make a loss on some certs purely in validation.

Legal costs - insurance premiums for something this specialised are high, regardless of how many claims made.

CA chaining - as per other comments, you're lookat at potentially $50K a year just in audit costs, just to get into the mainstream browsers, with a 5-10 year wait to become ubiquitous enough to be commerically viable. You can pay to get a sub-CA and bypass this step, but it will cost...you can go into 7 figures annually.

Again, I'm not attempting to make excuses. I do agree some certificates are overpriced. I am just trying to show how the CA industry is no more a 'racket' or 'license to print money' than many more of the internet-centric businesses that exist, even though it may seem that way without insight.

Plus, it keeps me gainfully employed :)
the response to my post was saying I was wrong (and is right in saying I was wrong) because the attacker is spoofing the source address. This makes it a harder problem to solve than zombied PCs (the case of zombied PCs sending unwanted traffic can be blocked by a firewall or other means, you just need an automated method of identifying the boxes you want to block.)
The big boys seem to be a little reluctant to publish information on their DDoS strategies. (If anyone has information that says otherwise, it's much appreciated).

I spent some time googling around and in case anyone's interested, these links seem to cover most of the mitigation patterns.

A slideshow covering common mitigation techniques,
http://www.slideshare.net/intruguard/10-ddos-mitigation-tech...

A Cisco whitepaper (which, as usual, has en emphasis on Cisco kit and a long URL),
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5879/ps...

A fairly comprehensive PDF document - A Survey of Active and Passive Defence Mechanisms against DDoS Attacks

http://www.fbi.cqu.edu.au/FCWViewer/getFile.do?id=17921
Hey HN, just wanted ya'll to know that we're psyched about getting on the home page (the HN audience has a lot of overlap with our target market) and we'd love to answer any questions you have, either here, at http://getsatisfaction.com/spreedly, or via email (support@spreedly.com).

Spreedly is small, but we're feisty, and we're excited about helping a lot of hackers by taking care of the billing while they "build something people want". Thanks for checking us out!
AFAICT, you can have things on another domains if and only if nobody else but you is using the same objects on the same domain. But, anybody will be able to DoS you by simply linking to content on that domain.

My understanding is that it works like this example:

My domain is example.com and I have a CDN examplecdn.com for images (e.g. http://examplecdn.com/dog.jpg). Now, let's say an attacker posts a link to http://examplecdn.com/dog.jpg to Reddit and Digg. If a user visits example.com, Reddit, and Digg while they are all linking to that image, and if the user has his InPrivate Blocking level set to "3", that image will stop loading from all pages not hosted on examplecdn.com, including example.com.
Survival Of The Loudest
Ask HN: Where's the best place to find Python or Rails programmers in SV?
Our company is looking for an excellent programmer who has experience with transaction/financial systems.

Background on our company:

We are microfinancing platform, like Kiva.org. We have a close, dedicated team, and noteworthy board members including congressmen, professional athletes, venture capitalists, entrepreneurs and attorneys.

We will be in San Francisco this upcoming Thursday and Friday (March 26 and 27th), and would like to meet up with potential programmers.

Is there a specific job-board or place to look?

Thanks :)
Walmart grew around its distribution centers.
You are paying either way. Thats just the way it works.

However, under one option, you pay and Amazon deals with the actual load, downtime, server stress, hardware improvements, etc.

Under the other, you get to deal with all of that AND get to be pissed off AND accomplish nothing for your business at the same time.
There are probably a lot of physics, math and engineering students taking intro to programming that haven't written a line of code before.

I'd assume most, if not all, computer science students have, but there's still a difference from learning to bang out some code in high school that does neat things, vs. starting back at the beginning and approaching it as, well, computer science.

The way my university covered it was doing Pascal for the intro courses (this was the mid-90s) and then in third-semester "Programming Languages" we worked mostly in Scheme implementing language fundamentals. That seemed to be a reasonable balance.
That's what I'd like most substance on: most buyers don't like PayPal. This is counterintuitive to me as PayPal, et al. is adding an extra layer of assurance to the buyer on top of their credit card.

I am very interested in any metrics that show using a well known branding like PayPal, Amazon, Google, etc.. gets less transactions than having your own Vias/MC gateway.
Disclaimer: I am a grad student at Stanford (which definitely makes me low-income :) Undergrads whose families make under 60k go to Stanford for free and under 100k don't pay tuition. Yes there are some students who can afford a lot more than others, but I think Stanford does a pretty good job helping out low-income students. Obviously all schools could do a better job at attracting lower income applicants, but I don't know why they're singling out Stanford.
its about time this started getting some attention. i am currently selling just enough to get by (living in SF, with a taste for good whiskey) and its a pain not knowing when the money will come in. it took them over 2 months to deliver my december US earnings. and when i contacted them i just got back excerpts from some template. since its in violation of their contract, i wonder if its grounds for a class action suit? seems a bit aggressive, but they don't seem too inclined to correct things
I am so sorry for accidentally voting this up. Silly iPhone. Silly fat fingers.