skysight-inc/HackerNews huggingface dataset:
You'd do well in exploring alternatives that don't involve equity.

Have the other clients accepted your new rate? Do you expect to easily get additional clients at the new rate? If so, then you could work on a compromise with client X (the one who "can't afford" your new rate), e.g.

(i) lowering total number of hours per month you work with them, such that the total bill works out about the same as before. Proactively suggest scope cuts. If you know more or less how much revenue (or how much savings) they get due to the projects you do, you should also have a good idea of what features lead to more gains for them.

(ii) give them a discount, or even better, give them a number of "bonus" hours for free, as long as they order over x hours in an n-month period. Think of it as giving them the option of locking in a lower price in exchange for ordering in bulk. They get a lower price and you decrease the risk you won't have enough income in that period.
I live in a small town in a small country, never fly anywhere, never book any hotels and never put anything in my Google Calendar so that may be a reason I don't get anything I guess. It does seem good however for people like you.
The "meat" of the joke imho: ...there is a start date but not an end date for the class :)

...with an end date somewhere in 2023, it might be feasible.
The win8 business app deployment story needs fixing
Here's one http://codahale.com/how-to-safely-store-a-password/

I'm not sure what portability issue you're referring to.
Agreed, the point is that having an exploit is only useful to someone who really really really wants into that specific system. With a system that will have millions of users, someone's sure to be angry at someone over something that's up there.
> Even if your code has full path coverage, you're almost certainly going to interact with an unpredictable outside world that can cause code to fail in novel and interesting ways.

Yes.

(http://www.f-22raptor.com/news_view.php?nid=267)

> Don Shepperd told CNN Television that the onboard navigation, communications and fuel systems crashed as the planes crossed the International Date Line.

> The problem seems to have arisen not from the time change, but from the change in longitude from W179.99 degrees to E180 which occurs on the International Date Line.

> The USAF refused to specify the cause of the issue saying only that the aircraft "experienced a software problem involving the navigation system en route from Hickam to Kadena".

The Wikipedia article List of Software Bugs has some other scary examples of billion dollar systems destroyed, or people killed, by bugs.

(http://en.wikipedia.org/wiki/List_of_software_bugs)
No you can only edit projects you create. Public projects are view only.
Simple Jekyll-based documentation site for APIs
Apple confirms it will cease shipping Mac Pro in Europe on 1 March
Um, you can use Markdown, and in the context of Github pages (http://pages.github.com/), that is exactly what you're talking about ...
I agree with everything you said except the "store in two different databases" line. If someone has compromised your system responsible for handling authentication then presumably they'd have access to both databases regardless - unless you've designed some kind of complex API for generating the salt and secured that API behind a whole different set of security and authentication (which almost everyone is too lazy to do).

The salt is just there to stop rainbow tables being generated, and if you're really evil to add computational overhead, it isn't meant to be used in a game of hide and seek.
THE DAILY Love HAS LOST A DEAR FRIEND…. RIP JODY SHERMAN
Why use anything when you could just hire a web developer?
The NYT article describing the attack is a non-article, as they don't have real proof (or perhaps they do, but they haven't disclosed it).
Reasons are well developped on the ErrataSec blog [1].

[1] http://erratasec.blogspot.fr/2013/01/the-nytimes-article-was...
This is why I have zero respect for Techcrunch and any of its events/contests.

What the fuck! Kevin Systrom over Elon Musk? Seriously??

So, a guy who made a bunch of photo filters for a virtual world is better than a guy who worked REALLY HARD to take REAL WORLD travel to the next level? Seriously??
O crap G+ must be stealing your data too!!! Everybody panic and take my comments as fact!
That entire thread was cringe-worthy. At least the last company I reported something similar to came back with "our developers are looking into the problem, and we will probably switch out the login scheme in the next few weeks". Whether they actually did it or not, who knows, but at least they acknowledged it.
Compression and Decompression in Java
I would have just responded - "You know 'Lord of the rings' the movie, right? The title of that movie is a 17 character password. Is that hard to remember?"
Hear, hear on point 3. The fact that our immigration policy is so screwed that we actively disuade PhD candidates from staying here in the USA is an absolute disgrace. Taking into account that in most cases those PhD candidates are fully funded by taxpayer dollars, one might think policymakers are actively taking money from foreign nations to maintain the status quo.
Pointing out yet again that you say malicious intent is "unknown," but you claim intentional theft in your article anyway. Libelous.
It would be insanely cool if this would be LaTeX compatible. I'm using git currently to manage drafts of articles I'm writing, but the diff tool is not always up to par, and it's hard for non-coders to adapt to this system.
Yes, I meant fewer. Corrected in the post above, thanks. (I'm not a native speaker but this is no excuse, I should have known that! ;-)
The author is Jason Calacanis.
Google Street Scenes
What if your favorite movies had been captured by one of Google's Street View cars?
Well, yes. As always "it depends" :)
http://caniuse.com/#search=video

The percentage of users not able to use <video> is roughly equivalent to the percentage of users running IE8, which is about 20% right now, and probably will stay there in the near future, as XP users cannot upgrade to IE9 (thanks, MS!).

The other problem with <video> is that there is still no common format which every browser supports, so even if you would ignore IE8 (or provide a fallback via Flash) you'd still have to encode all videos twice (to H.264 and WebM/VP8).

Sad as it is, but Flash for video and animated GIF will stay with us for some years.
EC2's M3 Instances Go Global; Reduced EC2 Charges and Lower Bandwidth Prices
> But GIF? Common...

I think you mean uncommon.
Is that really a problem? I would much prefer animated gifs never existed.
The concept of Oscar-style awards for startups makes as much sense as Toddlers and Tiaras. No, make that Embryos and Tiaras.

I am appalled to see this on the front page of HN.
The hell he'll ever be cutting a check. This is nonsense. And are people seriously using this service? It's like renting a cardboard safe deposit box in a bad neighborhood.
Thousands of apps were using the same method for their Find Friends features, and I don't recall any instance where any of those devs were deliberately malicious in their efforts to build better features, or with users' data after the fact. Path was just one of the most popular targets for it at the time.
Lighten up a tad? Its on the homepage because people voted it there.
What do the other 46% do?
Making my first toy language is one of the most interesting advertures as a programmer. LLVM is quite complex and the documentation is far from stellar but it's usable for teaching how a compiler works.

Also I like the restyling. LLVM landing page is so 90'.
Joxa 0.1.2 available for download
Hi, do you mind crawling back under this rock I'm holding up for you? It's at least 350lbs so is getting kind of heavy.
Grammar Undercuts Security Of Long Computer Passwords
Again, they didn't "cause" Apple to issue an update alone. The same method for building Find Friends features was used by thousands of social apps, and Path was just a hot target for the media at the time. It was certainly a privacy concern, but obviously not malicious intent.
It's a joke. It's hardly doable by a single person. For the record there is currently no fully C++11 compliant compiler.

Oh, and I'd like to say that knowing everything about C++11 makes you a language lawyer, not a Grandmaster. Grandmaster is more than knowing the language. It's about using it right.
Pretty much all the good compilers (gcc,clang,...) have a hand-written parser. An exception is javac, but that one is a minimalistic parser.

Handwritten parsers have better error reporting and might even be faster.
It is kinda hard to remember if you need to pepper it with numbers and special characters to comply with the bank's rules.

L0rd_ofthe$Ring5
Skype Passwordlimit: 12 Charakters.
Windows Live Passwordlimit: 16 Charakters.
Paypal Passwordlimit: 20 Charakters.
It's stupid to put this limit on passwordinputs that should get hashed anyways.
Twitter, Facebook, Google Password Limit: >100 Charakters.
Techcrunch has declined a LOT over the last few years.

That, along with a lot of better blogs and sources of tech information mean that they have a big readership but it is quite shallow as far as engagement
How would one measure the destruction Microsoft caused? The wasted time? The wasted money, the wasted lifes?

Wat. I'm sure lots of work that gets done at Microsoft is misguided or redundant. Welcome to working at a big company. The pay is competitive and the environment, from what I hear, is some of the best in the software industry. It's not some sweatshop where you're forced to toil for pennies; I bet a lot of people here would enjoy and benefit from the experience of "wasting their lives" at MSFT for a few years.
Look, it's pretty simple. Kim Dotcom is a snake oil salesperson. Great at hype, but ultimately if you dig beneath the covers I suspect there will be nothing there.

I should know, I trusted and was very badly burned by someone who spoke big, manipulated others an dultimately had nothing whatsoever other than charm and chutzpah. Give Mega a wide berth, or you too could be badly burned.

Someone else has also pointed to the following article about crypto-breaking contests, written by BrucebScneier. Definitely worth a read before getting excited about this contest.

http://www.schneier.com/crypto-gram-9812.html#1
Presentation: "Big Data - Over The Hype"
The two are inescapably linked. Ali and Frazier. Magic and Bird. DiMaggio and Williams. We'll spend the next few decades putting them in context with each other.
"barely tested" seems to imply that they... barely... have written any tests at all. While I can understand that even full coverage doesn't guarantee anything, it sure can help. I'm not advocating full test converge, I'm just saying that if I wrote 50k lines of code, I really wouldn't want to be able to say that I have "barely tested it".
Lol, yes typo.
The Nordic region is becoming a hothouse of entrepreneurship
>wasted lifes?
You should learn more about Gates foundation. Here's a passionate speech he gave recently in London about eradicating polio http://m.youtube.com/#/watch?v=R-JRogtrwRk
Volcano Quartet Erupts on Kamchatka
I used to use Racket in production and prototyping (few years ago), as a "glue language" and "business-logic" for a web-app, for the parts that are not IO, memory, compute intensive, etc. My metrics for language choice are:

1. Simple to learn and remember (they tend to correspond)

2. Module System; Support for modularization of complexity

3. Simplicity of coding and maintaining simple modules

4. Simplicity of coding and maintaining complex modules

5. Available libraries and their quality

In comparison to (I can only code efficiently in) Java, Python, Javascript/CoffeeScript/Node, Common Lisp, Scheme, and Haskell

- Racket is best for 2. (especially if you add a bit of meta-data to a module) and 4.

- Racket is much better than Haskell, Java, and Common Lisp for all 5 metrics Except for Haskell, which happens to be very nice for certain things that benefit from its type and class system

- For 3., Racket is overly complex, especially with the macro facility and huge number of types and structures. Node/Javascript/Coffee is better by far; Python is a little better than Racket because of less language features

- Racket is weak in 5. - Racket has many libraries of dubious quality, and I've hit undocumented issues a few times; Only Java was worse; However glue/business-logic doesn't require many libraries
I now use NodeJS because I've been dealing with simpler stuff.
Built with HTML tables too!
Properly chosen pass phrases are very strong.

Most people cannot properly chose a pass phrase.

Use something like Diceware to generate a phrase.
YOU are a computer criminal!  Yes, you!  EVERYBODY is!
Chinese web company faked Microsoft patch to force download
Wunderlist is great.
I disagree that there's something wrong with writing your own parser. A simple recursive descent parser is very easy to write, and more importantly is very easy for someone else to understand. It does not require any esoteric knowledge of lookup tables and "advanced" parsing algorithms. I far prefer a stack trace from inside someone's hand-written recursive descent parser to the cryptic mess you get from
Yacc or Antlr generated code. I also prefer not having to have a whole code generation stage in my build process just to support some small DSL I have embedded.

This whole "you should never write your own parser" thing is so often parroted out as "wisdom"... But I honestly believe that most of the people that say this don't realise how easy it is to "roll your own".
Chinese Hackers’ Attacks on U.S. Media Includes WSJ
B12 Vitamins.

More excersise. http://www.livestrong.com/article/323907-lack-of-exercise-de...

Rent a jet-ski
What was missing in 2.3 that made it non-compatible?
Mh... "those who hate Perl hate it because it’s “too hard to maintain” and too “strange.”"... No.. i hate perl because it's too easy to write really, really bad code and non-obvious how to write good code.
Using any technology in hopelessly idiotic ways when better tools (and more importantly, appropriate tools) exist will turn it to the new [previous-tech-used-in-hopelessly-idiotic-ways].

This dilemma is as old as programming itself and will only go away when we introduce public flogging as punishment* for wrongly applying the "laziness is a virtue" dogma.

* Developers are people too (mostly) and I don't condone public violence against them. Private violence is OK.
Want to help us change healthcare? Sales and Support people wanted
Information can cause one of three price reactions: up, down, or flat. Prices stay the same if the market accurately anticipated the information. Chances are, though, that the information will change prices. One thus knows that when an EIA report comes out, ceteris paribus, prices are more likely to spike or dive than stand still.

"Veteran" traders set up limit orders so that if prices rose they'd buy and if prices fell they'd sell. It's a momentum trade. Unfortunately, they were sloppy, submitting orders before the data came out. Arbitrageurs realised that these lazy limit orders could themselves be cannibalised by nudging the price around to see if it triggers any hidden orders prematurely. The order's premature execution would then create a tiny, temporary momentum effect that the arbitrageur could ride. This is called banging the beehive.

The trader pushed out was setting up information-less standing orders before the report released. The trader adding information to the market, e.g. through unique analysis, is not concerned by pre-release volatility.

It is possible, here, that a massive lazy limit was prematurely triggered and subsequently mis-interpreted. It's tough to say. With limited information I'd caution against Nanex's assumption of the low prior probability insider information hypothesis.
Android 4.2 and up is a pretty strict requirement. As http://developer.android.com/about/dashboards/index.html says, Android 4.2 is only 1.2% of the market. My Verizon Samsung Galaxy Nexus that I got only 6 months ago still has Android 4.1; I can’t try your app out. Since you’re trying to sell your game, improving its compatibility should probably be a big priority.
Passwords are bullshit. We should have a start-up about having a better way of keeping your digital identity other than hundreds of logins/passwords, but obviously everyone is too busy with figuring out better ways of sharing lolcats.

Not that lolcats are bad. They are good. It's just they aren't fun anymore once your identity is stolen. Or your mom's.
Whilst this is another great addition to dropbox, their pricing is still not competitive. I love dropbox. It's simple, does what it says on the tin, and the recent addition of automatic camera uploads made me switch.

But compare the pricing of Dropbox to that of Google Drive:
https://www.dropbox.com/plans
https://support.google.com/drive/bin/answer.py?hl=en&ans...

Google is half price.
Yes, that's called a production compiler.

If you glance in my profile you will see I'm well aware of the practices of production compilers and also how few people ever even look inside one.
I can downvote with only 1030. However, for this article, yours is the only comment that it will let me downvote. Also, a good number of articles on the Ask HN page won't let me downvote although every article I have checked on the front page does; I suspect it may have to do with the age of the comments.
you have to add visual styles somehow too. you might as well add them right in the html attributes, along with the <font> tags and <center> tags. We'll have js-addToDo and class="white big helvetica" and call it a day.
Why never use new Array in Javascript
I love Javascript, but sometimes it seems it doesn't love me back. Take for instance the Array constructor function...
Its not jargon, he gave you the definition.
The pedagogical value of writing a parser for your compiler for any language more complex than, say, Scheme, is basically zero.

Skip the parser, learn the useful stuff.
Calling all geeks: your chance to go to space
Follow-up on DirectX/XNA Phase Out
Well there's still too many things where git doesn't help you at all not shooting yourself in the foot.

That's what I like about Mercurial (also those days I use git more than I use mercurial due to $WORK).
Snake Oil
Why do they have to disclose it? NYT is a reputable source.

The article mentions "tracking the movements of intruders"; most likely this is in the form of text logs.
After using Jekyll for two years with lots of hacks to have HAML and others, I switched to middleman, which has everything I need out of the box: https://github.com/middleman/middleman
Not really the issue, but /dev/urandom is weaker than /dev/random, it is urandom which never blocks (try "hd /dev/random" and note that it blocks, then jiggle your mouse a bit and it will come back to life)
The point of the analogy is "blaming the victim", which imho is spot-on.

But yeah, I could have chosen more tasteful and less over the top comparison. My apologies.
I've read the page two times now and still don't understand what it does. Can someone explain?
Capture the keystrokes & mouse movements used to supplement entropy for the in-the-browser. Recently, the Internet Explorer vulnerability exposed the fact that any webpage can see all mouse movements.

MiTM
This was an awesome talk and will definitely push me to come to more HN London meetup.

There also was a great question at the end asking you if there was some common traits to "detect" exceptional people to recruit and your answer was really insightful. You should consider adding it to your post or maybe dedicating a blog post to it.

In your talk you explained how you changed of roles at Songkick and it seems to be linked to finding people better than you at what you did so leaving them "in charge" of this part and taking up a new challenge. Hiring exceptional people and a good fit is hard as you described it. You have to find them and them convince them to work for you. But how do you hire someone for a role where he will be better than you at what you do and how do you convince them to take up on the offer?
A rough approximation off the graph: volume before the announcement ~190,000. The announcement pushed the price down by ~$0.30/share, so by trading before the announcement, they avoided losses of ~$57,000.
> For a larger code base where an event is trigger in multiple locations with different logic in each location, it may be difficult to pinpoint the triggering code, let alone reason about that code.

Populate the event with the event source.

> Direct function calls are much easier to debug because you can walk up the chain of calls and inspect the variables and state of each frame.

If your listener depends on knowing the state of the triggering code, it is a sign your events are too granular. If you require a complete stack trace to be able to debug a listener to the event, that sounds like you have a bigger architectural problem to deal with.

Events are coarse. The listener should not care about why the event was fired, only that the event has occurred. Events are not a replacement for direct function calls. They are a mechanism for de-coupling pieces of code that can be independent of each other. It doesn't sound like your situation is one where there's that independence.
Ybot erlang chat robot supports irc,xmpp,campfire,http and gtalk
I love Boston, but the weather can be unbearably annoying at times. Massachusetts is all about extremes, with high heat and humidity in the summer and freezing cold temperatures in the winter. Combine this with a lot of rain, snow and in between and you've got Boston.

That being said, if I hadn't moved to the bay area Boston would have been my second choice. I've spent most of my life in Massachusetts though so I'm a bit bias.
Parsing Expression Grammar - part 3 (An F# walk through)
Online C++ compilers
Does it makes sense to idolize either of them? There are hundreds of people involved in the success of SpaceX.
Dear moderator: why did you butcher the title?
Surprising that this topic has (as of now) 60 point and only two comments.

At Taodyne, we use LLVM as the foundation for our 3D dynamic document description language. This makes it possible to do interesting things in real-time, see e.g. http://www.taodyne.com/shop/en/blog/58-live-coding-creating-.... LLVM is pretty powerful, and now relatively stable as far as even the C++ API is concerned. In earlier days, having the C++ API change underneath you in significant way at every release was a real pain.

That being said, I was not a real fan of their documentation in general, and the Kaleidoscope tutorial was no exception. But it looks like they are putting a lot of effort into this, and it looks much much better than it used to.
Zo betaal je nooit teveel voor je autoverzekering
Go to bed between 12pm and 1.00 am and wake up a 7.30am. I used to sleep aroung 3.00am waking up at the same time a few years ago during two years but I decided I needed better and longer nights. Now I wake up before my alarm clock almost everytime
Actually that would be a good potential solution to have cookies on browsers automatically disabled but one that advertising networks and companies that rely heavily on advertising revenue (Google for example) are lobbying hard against for obvious reasons. As a result, I don't think this option will make an appearance anytime soon.
Ask HN: What editor is most common for haskellars?
I have a HP mini netbook with XMonad. I have installed emacs as well as vim (and yi). Which editor is better looked upon by the haskell community?