skysight-inc/HackerNews huggingface dataset:
I have no problem with you, Charlie, or anyone else being paid top dollar for his or her work, particularly in an important field like security research.

Indeed, I think it's a great idea for Apple and the other vendors to reimburse 3rd parties for high quality results.

But he wasn't saying "I put X hours into this, and therefore it's worth $X*(billing rate)."

He was saying "the market value of this is $Z., and it's more for things that have a greater impact."

I don't know Charlie Miller from a hole in the ground, and so I have no idea if he's going to be selling his work to the Russian Mafia. If you say he's a great guy, I'm sure you're right.

Nevertheless, if he thinks that security exploits have a market value beyond a reasonable billing rate, he's implicitly using the threat of the Bad Guys to raise the value of his work.

That's a very fine line to be walking.
I have a new campaign. No more reading of sites with ginormous interstitial ads.
I find it hard to believe that with all the development going on in the ruby world, there still isn't something comparable to IPython. To be honest, IPython is one of the reasons I use python over ruby. It's just a great way to interact with the language and my code.
If Charlie Miller doesn't find bugs in Safari, it is more likely that the Russian Mafia will get them from someone else. If Miller decides to boycott Apple security research until Apple pays better --- to just stop doing the work --- is he implicitly using the threat of Bad Guys to raise the value of his work?
1. Offer all their features

On the contrary, I think the initial approach should be simpler than that - underdo your competition - http://gettingreal.37signals.com/ch02_Build_Less.php
Upvote for iPython. The best implementation of the Python REPL I've seen so far.
Microsoft's Vision for Future Computing
Enjoy the video :-)
But, at the moment, there are less viruses on them for precisely that reason. Security through popularity is working for the time being. That and linux/unix/os x have the principal of least privileges working for them too.
Cool:

> Q: Google Chrome was the one target left standing. Surprised?

> A: There are bugs in Chrome but they’re very hard to exploit. I have a Chrome vulnerability right now but I don’t know how to exploit it. It’s really hard. The’ve got that sandbox model that’s hard to get out of. With Chrome, it’s a combination of things — you can’t execute on the heap, the OS protections in Windows and the Sandbox.
I really have no idea what I'm talking about, but I thought Leopard had the address space randomization I assume he's referring to?

Leopard also has some sort of sandbox feature, but apparently it's not used for Safari.
It seems the ruby world is getting alot of press these days. Deservedly so, but taking a look at the kind of mind share they have in community it will only be a matter of time until they come with something like iPython.
It's a voltage divider.

http://en.wikipedia.org/wiki/Voltage_divider

Caution: I'm a CS major, not an EE, so your probably want to verify my assertion before trusting it...
Well maybe if more freelancers used Erlang, this wouldn't be an issue
Nope. They've started down the path, but with these things, if you don't do it right, you may as well not have done it all.

http://www.matasano.com/log/981/a-roundup-of-leopard-securit...
The people (techies specifically) who understand how Facebook's twitter-like update widget works tend to appreciate it more, I believe. The new feed is more predictable since it defines exactly what it does.

Before, you'd see a varying portion of all updates from your friends; now, you see everything (as I understand it).

Before, you could say "Show me less from this person". Now, you can say "Block this person's updates from my feed." That's a great addition. I no longer have to endure uninteresting posts from people I haven't ever really known but happen to be friends on Facebook.
Often when people, and especially the media, say "addiction" they're actually referring to psychological dependence.

Most physiological addictions have a psychological component. As an example, I'm addicted to caffeine, but I'm also dependent on coffee as part of a morning routine. Smokers who are addicted to nicotine are often also dependent on the social aspects of being a smoker. It's often the psychological component that, long term, is the hardest to break.

The converse, however, is not true. A good example is so-called "Internet addiction" which should rightfully be called "Internet dependence", at best, because it has no physiological component.
Chaffing and Winnowing: Confidentiality without Encryption (Ron Rivest)
Ok - it's a story about a clown. But does that mean it only satisfies the intellectual curiosity of bozos?

I'll take this article over another tawdry analysis of the financial crisis any day.
If those IEEE journals require that copyright be signed over to them without granting permission to the authors to make available their work, I don't see how they can publish in them.
I wonder how the strategy will change if I were to take on not just an established competitor, but a market leader, say Facebook or SAP ERP.
YC Gets 11% of Sequoia's Frontpage
Charlie has actually written about this issue before in a more academic context:

weis2007.econinfosec.org/papers/29.pdf

Based on the limited data in the paper, it seems that it's the government rather than the vendors that is actually setting the price in the legitimate market, at least for high quality exploits.

I think the X*(billing rate) calculation ignores the risk that the researcher took. It's a little like saying that a startup should be worth exactly the amount of money that has been invested in it.
Facebook has mastered the platform but failed the interface.
The Golden Cart Effect
> I would like them to rethink their application permissions though.

They have. Since July 08, Facebook has opened up a bit to allow applications to run without requiring an "add" (opting in to the app getting your info). They call it "Automatic Authentication". (http://wiki.developers.facebook.com/index.php/Automatic_Auth...)

The issue has been developer uptake. All the tutorials out there still assume you're going to require an add. Also, app devs on Facebook have been notoriously slow on the uptake of new features.
Ask PG: Is HackerNe.ws an official domain?
http://hackerne.ws
Today, IPython has a lot of features, but I only use a small subset of them on a daily basis (namely their shell interface). I would think that a decent ruby hacker could throw something similar together in a weekend, put it online and have a decently stable version in a month or so.
A resistor is usually to "resist" current on a certain component. If you've 10 volts in a circuit, you wouldn't want to connect a simple LED there, because you wouldn't want that much current going to the LED. So you'd use a resistor of appropriate resistance in that instance to keep it from burning out.

Though, in the example you linked to, there's no use of the resistor -- it's connected to the ground. It's just useless. Unless of course, I'm not understanding things right. (If I'm wrong anywhere, please point it out!)
Most simple answer I can give:

If the resistor were replaced by a wire, the pin would always be connected to ground, rendering the thermistor irrelevant.

If the resistor were removed and ground disconnected entirely, the pin would be connected, through the thermistor, to +5V, again rendering the thermistor mostly irrelevant.

It needs to be part of a ratio of resistors in order to vary between 0 and +5V.
Someone does not know what 'principle of least priviledge' means.
Cool, that is exactly what I had in mind.

So, I guess the real problem is just developer education.

There have been many times where I've refrained from using an app solely because it needed access to my profile when I felt that was necessary.

Then again, maybe only geeks/the paranoid care about stuff like this.
In my dreams? They'd do it the same way Apple did when they released Safari. "Here's our new official browser. It's not like any of the existing Mac browsers [1], but it's based on an open-source rendering engine and Steve Jobs likes it."

But, yeah, yeah, I hear you. That's a fantasy. Microsoft and their customers just do not work that way.

And my ire is indeed misplaced: Of Microsoft's three current browsers, IE8 is most likely the least of my problems. My problem is with IE6. I welcome anything that will help to further eliminate IE6 from my life, including IE8, Windows 7, and vigilante ninjas who sneak into people's houses at night with Firefox installers and stealthily upgrade their beige boxes.

---

[1] Ironically, the best Mac browser of the time was IE.
just to clarify because i've had to deal with this before, excluding ia_archiver from your robots.txt will prevent archive.org from indexing new versions and deny access to your old versions, but it will not make them delete any archived material from your site that already exists.

when you visit an archive.org page, their robot will fetch that site's robots.txt file in real-time (with some basic caching mechanism, i'd assume) and check for an exclusion.

if your site ever goes down after the point you block their robot, or you let your domain name expire, or some squatter buys your domain after you're done with it and doesn't put up a robots.txt file, or anything else that would prevent their site from reading your robots.txt at the time someone tries to view the archive, they will allow full access to your site archives.
No, someone else created that.
Introducing the OpenSocial Development Environment
[Let's use "Alice" as the name of our hypothetical security researcher.]

If the Bad Guys can get the exploit from someone else, then Apple equally could pay someone other than Alice to disclose it to them. Your premise assumes the work is fungible.

If the entire set of people (including Alice) who are capable of finding these vulnerabilities conspired to withhold their work and push the White Hat market clearing price up to the level that the Bad Guys will pay, then the answer to your question would be yes.

If it's a market without price fixing, then Alice withholding her work doesn't materially affect the actual price of the exploit to Apple, and in that case the answer to your question is no.
TheFunded reveals blacklisted VCs
Other people have answered what the resistance does (create a voltage divider that feeds a voltage to the A/D converter), so I'll describe ways to select the resistance value.

There are several specifications that might have to be met:

* Power delivery limit of the energy source
* Current specification for optimal operation of the thermistor
* Voltage level of the A/D input

The resistance value might be completely constrained by one of these requirements or, in tougher cases, might be constrained by more than one requirement (often in different directions).

For example, if the thermistor has an effective resistance of about 1kOhm and requires a current of about 1mA, then you need to set the resistor to 4kOhm (assuming the A/D input draws negligible current). If this is the case, you're stuck on the other requirements. Your power consumption will be 5mW (5Vx1mA) and the nominal level of the A/D converter input will be about 4V (5Vx4k/(1k+4k)).

Experienced circuit designers seem to magically come up with correct values because they are familiar with typical requirements and can quickly identify the limiting specification. You'll have to struggle a bit at the beginning to get the hang of it.
I've been waiting for a reason to go back to smoking
The Galileoscope: a fully functional telescope for US$15 - shipping now
It might help focus the discussion if you quoted some specific thing I've written about business guys that you disagree with. You may find if you look that your impression of my attitude towards them doesn't correspond to what I've written.
IE 8's Web Slices aren't a bad idea, but boy, have they launched poorly
Best Symantec Coupon Codes and Discounts for Norton Software cdcoupons.com
Save big with the best Symantec Coupons, Promo Codes and Free Shipping.cdcoupons.com is updated daily.
You're missing the point. Apple isn't matching the market's bid for these vulnerabilities. Clearly, people besides Miller can find Safari flaws; the difference is, when Miller finds them, we know they aren't being sold to organized crime. By your logic, if he stopped, he'd be making things better for the Bad Guys; he's therefore obligated to do the work.
No, they don't. We can go through the motions on this "OS X has a better privilege model than Windows" argument, but I know how it'll end: malware doesn't need (or even want) root to win.
Really nice, concise summary. The importance of "isa" cannot be overstated. It's the key to Objective C's dynamic nature. It's sort of fallen out of style now, but it used to be common practice to do some really interesting stuff with "isa-swizzling" (these days there's API that replaces most of the old hacks/tricks).
Ask HN: How do Mac software developers make realistic icons?
I work with Adobe Fireworks regularly, and a bit of Illustrator/Photoshop. Mac developers in particular seem to be well-versed in creating extraordinarily sleek-looking icons (e.g. http://culturedcode.com/ ).

Do they use Illustrator to create them? Likewise, know any good resources or books for that teach techniques for creating those types of icons for someone who knows the basics of Illustrator?
The traffic that visits Sequoia's frontpage can benefit from YC if they are early stage entrepreneurs. So it makes sense.
How the World's Smartest Company Selects the Most Creative Thinkers
I will go and read the paper. Thanks for the pointer.
Excellent article and excellent writing. Anyone complaining about this being too long has some ADD issues of their own; they should especially make the effort to read this as a warning what happens when such tendencies are allowed to take over their life.
Makes YC look like a Sequoia portfolio company, which it isn't... Hmm.

Or is it?
Indeed. I think it's highly improbable that you undervalue business guys. That is not my claim. My claim is that simplistic readings of your more subtle points (done by some in the News.YC community) about business result in the type of attitude I described. I'll edit this comment with examples in a few minutes.

Perhaps one of the more relevant essays is "What Business Can Learn From Open Source". The average workplace is accurately described as torture, however only a small percentage of business people (the ones in charge) are responsible for perpetuating such a stupid waste of resources. Not all or even half of business people are like this. You certainly don't claim this is so, but News.YC does exhibit an anti-business bias. There was a really good comment thread from the perspective of a business person posted recently about this, but I can't seem to find it. There's a really interesting larger discussion here, but I feel the lack of assembling evidence on my part is constraining.
Too close to the bone? Seemed more like too close to trivial to me.
- There was also a myspace profile
- A youtube profile (or vid - can't remember)
- An amusing sendup of fundy Christianity
- The Danish blocked URI list on wikileaks
- that abortion/fetus image

(We know that the last 2 are on the actual ACMA blacklist itself - the others might just be the filtering company...)
Steve Blank: Get the Hell Outside the Building
Well, no, you're not understanding things right. ;)

The problem is that resistors have many uses. One of them is, indeed, to limit the current flowing through some bit of a circuit: If you have a nine-volt source, and you want some current to flow from nine volts to ground (because, say, you want to run that current through an LED and make light), and you don't want that current to be too large, put in more resistance.

Another obvious application that everyone learns is: If you want to heat something up, strap a resistor to it and run a bunch of current through the resistor and it will heat right up. (Although you had better heed the wattage rating on your resistor or it will blow out right away.)

This is a third application: Resistors convert a current to a voltage. Voltages are often easier to measure than currents. In this case, if you just hooked a 5 volt source across a thermistor, the voltage at the top of the thermistor is always 5 volts, and the voltage at the bottom is always zero by definition. (Because we're defining it as ground -- ground means "the point which we define as zero voltage in this diagram", although sometimes it also means "a point which we literally attach to the earth" -- darned EEs with their crazy terminology!) You can't use a voltage probe to measure anything interesting in this thermistor-only circuit. The resistance of the thermistor is changing with temperature, which means that the current in the circuit is changing with temperature, but you can't see that with your voltage probe. Unless you put in a second resistor -- the voltage across that resistor will be proportional to the current. That's what the resistor is doing here: Converting current to voltage so that we can see it.

Of course, one of the reasons EE is tricky to grasp is that the resistor is doing more than one thing at once. For example, it is also limiting the total amount of current in the circult, just as you suggested. If you let the current be limited only by the thermistor you might draw too much of it and break the thermistor. Or, even if the thermistor has enough resistance to prevent that, there's a catch: If the thermistor draws enough current it will heat up, which will affect its reading. So you might want to choose a second resistor that is big enough to keep the current very small. But not too small, or there will be a lot of noise.

Sooner or later you have to stop thinking and use good old trial and error! Learning this stuff is a little bit of thinking, then some math, then some more thinking from another angle, then some tinkering. Occasionally you have to melt some things -- that can help you learn too. It does take time. I was probably halfway through college before I could see this stuff, and I'm still blind compared to the real circuits guys.
Ask HN:  Where is the best place to host an ASP.net app/site?
Hello,

Does anyone have any recommendations on the best web hosting company to host an ASP.net application/web site at?

I did the standard Google search and I was not impressed by the companies that came up in the search results.

Does anyone have any recommendations (looking for good performance and great support)?

Thanks.
Sorry, I was away for a day or two after writing this so couldn't respond.

What I mean by not credible is simply that they implied upon release that Chrome would be a cross platform product and that mac & linux versions would come really soon. It's clear now that wasn't true. They tried to hype the geek crowd to get more street cred, but that original impression is no longer credible.

I completely agree it's a solid and beautiful product (it is my default browser) and really am quite in awe of what they pulled off.
This drives me crazy too. All they need to say is, "87% of respondents to our poll blah blah blah." Not that viewers would understand the difference. Maybe that's why they don't say anything when announcing these polls.
Ok, so this guy posts a list of VCs, some of which are very prominent and credible, and says they may or may not have done one or more of the following things, one of which includes "not investing enough". No proof, no evidence, not even the criteria for inclusion in the list.

Seems like a cowardly way to try and stir up the blogosphere and get traffic and mindshare.
Strikes me as a visual way of saying "we've carved out these spots for YC startups in the future."

Clever.
Of course it is. Sequoia gave YC money in return for a part ownership of YC.
Tether your G1 and browse at 3G speed anywhere on your laptop
An Analysis of Conficker
Gel Nails | Nail Art Accessories | We Have Everything You Need for Gel Nails
Find 3D nail stickers and more about gel nails. We have the largest selection of UV gel nails! We sell all products for artificial nails: UV Lamps, Gel Nails, Nail Art, Tips, Brushes, Drills, and much more. We ship all over the world! Great Prices and Excellent Service.c
That's not true. The investors get a percentage of the returns from the startups funded with that money. When the money runs out, the deal ends.

This is how all funds work. A university that invests in a fund managed by VCs doesn't get part ownership of the VC firm. They get part of the returns from the startups funded with the specific pool of money they contributed to.
Or it could be a reference to the 3 YC startups Sequoia has already funded.
voltage divider: v_analog = 5V * R2/(R2 + VR1)

it's pretty meaningless by itself, you also need to know the bit resolution of the ADC and reference voltage.
SASE is "self-addressed stamped envelope," if anyone missed that.
yeah... *registers http://gitoris.com. I wonder if it gets type in traffic?

Seriously tho, don't down mod me I have a serious comment -
IMHO, Github is way better just because of the graphics. I know, the old mac vs PC vs Linux debate comes to mind, but seriously graphics make me work better. They makes me happier. And Github is just pretty - the spacing of the letters are nice, the look is all light and pretty, etc. It makes me WANT to submit another commit!

But it's still awesome there are alternatives out there. Way to go, coder gents.
Check out http://iconresource.net/
Although their syntaxes differ, Lua and Javascript are functionally very similar. Lua is like Javascript without the burden of maintenance-by-committee.

Lua is very small, very portable, very easy to embed and extend in C/C++ based apps and is one of the fastest interpreted languages available. These features taken together are why Lua is the industry standard for runtime scripting in games.

You should be aware, however, that unlike Ruby or Python, Lua's standard library is intentionally minimal and available add-on libraries are relatively sparse. The intention is that you are not inheriting a fat body of functionality when you adopt Lua. Instead you are starting with a slick, flexible core and customizing it into exactly what your app needs.
You might have better luck asking in the MacThemes forums: http://macthemes2.net/forum/index.php

Also, the "so you want to make an icon" thread might be helpful: http://macthemes2.net/forum/viewtopic.php?id=16791388

(I'm not a graphic designer so I can't really say how much help that will be)
It is grossly irresponsible for the baby boom generation to expect Generations X and Y to be saddled with our national debt, our trade debt, and our infrastructure debt -- and the retirement debt created by baby boomers enjoying long retirements supported by future tax increases on their children.

That's one of the most responsible things I've ever heard a member of that generation say.
Sequoia is acting like an LP (usually universities, pension funds, high net worth individuals,etc.) in a typical venture fund is the way I'm looking at it.
I am 100% no expert and without experience in hosting.

Just some comments for you:

Rackspace is a big company. Maybe you can have a look there?

Maybe PeakInternet is good too? They host StackOverflow.com.
I'd highly recommend DiscountASP.NET - http://discountasp.net
Exactly what kind of abuse do you have in mind?

Currently, my mailbox is so full of junk that if someone wants to send me less mail, I'm extasic.

Really, crying wolf about privacy is one thing, but give me a realistic example.
Does someone who's in the field know if this sounds reasonable?