skysight-inc/HackerNews huggingface dataset:
My first thought was "Holy Shit! Cookie only authentication and you can unlock the doors, among other things!"

It's absolutely vulnerable to XSRF with cookie only authentication. This is a huge security issue.
Go is freakin' fast, I think
An ab test of my new site, niflet.com, on a relatively cheap ($95/month) dedicated server:

Document Length: 11419 bytes

Concurrency Level: 10
Time taken for tests: 20.000 seconds
Complete requests: 43633
Failed requests: 43602
(Connect: 0, Receive: 0, Length: 43602, Exceptions: 0)
Write errors: 0
Total transferred: 523890489 bytes
HTML transferred: 514028301 bytes
Requests per second: 2181.64 [#/sec] (mean)
Time per request: 4.584 [ms] (mean)
Time per request: 0.458 [ms] (mean, across all concurrent requests)
Transfer rate: 25580.46 [Kbytes/sec] received

Connection Times (ms)
min mean[+/-sd] median max
Connect: 0 0 0.0 0 0
Processing: 2 5 5.6 4 50
Waiting: 1 2 3.9 2 48
Total: 2 5 5.6 4 50

Percentage of the requests served within a certain time (ms)
50% 4
66% 4
75% 4
80% 4
90% 5
95% 5
98% 34
99% 40
100% 50 (longest request)

Requests "fail" because the document length varies. I'm pretty blown away by Go's performance, especially knowing how much processing goes into producing a custom response to every request. Also every response is gzipped. (I'm using Go's web server and Sqlite.) The theoretical limit of requests that could be served in a 10 hour day from this single cheap server is 78 million. Now I just need some real users...
As the State of Charge log shows, the Model S battery never ran out of energy at any time, including when Broder called the flatbed truck.

But the graph showing the visible miles was well below zero.

Did the car really force itself to stop like Broder claims, or could Broder have driven it farther?

Even if the battery had charge, if it forcefully stopped, then Broder is right in essence. The fact that there is a reserve in the battery that Broder cannot use for driving is, for all intents and purposes, the battery being out.

On the other hand, if the car didn't forcefully stop, then Broder is lying.
We had a ton of fine women working as telephone operators once too. My father was a typewriter repairman for a bit.

When was the last time you saw either one of those?

Oil's biggest advantage (other than the massive amount of energy density) is that the full cost of acquiring it isn't factored into the cost per barrel. Since oil is both a commodity and a strategic resource, the government has committed its full resources in the aim of securing supply.

You can argue if this is or isn't a good thing, but you can't argue the fact that it happens.
Interesting to see the similarities between spaces. Apple products everywhere [1-4], Open concept [5-11], Bikes [12-13]. Looks like most people use laptops and two monitors.

[1] http://www.themuse.com/companies/shopify

[2] http://www.themuse.com/companies/uber/office

[3] http://www.themuse.com/companies/pinterest/office

[4] http://www.themuse.com/companies/twilio/office

[5] http://www.themuse.com/companies/groupon/office

[6] http://www.themuse.com/companies/shutterstock/office

[7] http://www.themuse.com/companies/hipmunk/office

[8] http://www.themuse.com/companies/shopify

[9] http://www.themuse.com/companies/justintv/office

[10] http://www.themuse.com/companies/foursquare/office

[11] http://www.themuse.com/companies/squarespace/office

[12] http://www.themuse.com/companies/airbnb/office

[13] http://www.themuse.com/companies/livefyre/office
Introducing the Kickstarter App for iPhone and iPod Touch
You can turn it off...
We will get the text fixed, thanks!
Related: https://onetimesecret.com

(I am unaffiliated, just like this service.)
Doesn't this get into the issue of whether XML dependency injection is a good idea? All of the wiring and some logic is built up in some files that are outside of the build/compilation process. Doing "proper dependency injection" (quotes for sarcasm) to me has always made me worry that I've lost control of how my application works, and somehow based on the right XML/JSON/etc config magic it will work perfectly and meet all security standards.

Maybe I'm just too jaded...
Don’t Host a Business Blog on a Separate Domain
Because "successful" is defined as baiting users into yielding their personal information in order to force-feed them ads and other marketing junk. Success isn't defined as users finding what they want or otherwise having an informative or pleasurable experience.

The ur-example: Zynga and their addiction-center manipulators that masquerade as games. Zynga succeeds if they pay, not if they enjoy it.
Because a change was made since I first signed up for this and that change was defaulted to 'on'.
See the demo at http://holla.jit.su/
Yeah, that's a fair assessment - compile time code generation is unnecessarily painful in many popular languages. Often even if there is a facility for it built in (e.g. C preprocessor macros, C++ templates), it's less powerful and more complex than it needs to be because the designers of the language for some reason decided not to just let you use the same language at compile time that you use at runtime.
> This makes a big difference when looking at the expected performance, because it means that it doesn't much matter how long you park it in the cold, only how cold it is when you start driving again.

Yes, unless you try to charge the battery while it's cold -- batteries aren't very efficient at absorbing a charge when they're cold. I'm speaking here about the basic physics, not the metering and software.
Sustainable Living  StackExchange
R is for Love
# Paste into R then hit return

# Start

draw = function(color="#FFC0CB",border="#FF0000") {

t = seq (0, 60, by = .1)

x=-.01 * (-t^2 + 40*t + 1200) * sin(pi*t/180)

y=.01 * (-t^2 + 40*t + 1200) * cos(pi*t/180)

x=c(x,rev(.01 * (-t^2 + 40*t + 1200) * sin(pi*t/180)))

y=c(y,rev(.01 * (-t^2 + 40*t + 1200) * cos(pi*t/180)))

polygon(x,y, col=color, border=border)

}

msgA="\x48\x61\x70\x70\x79\x20"

msgB="\x56\x61\x6c\x65\x6e\x74\x69\x6e\x65\x73\x20"

msgC="\x44\x61\x79\x20\x3a\x29"

msg=paste(msgA,msgB,msgC,sep='')

plot(c(-9,9), c(0,16), type="n", xlab=msg, ylab="", axes="FALSE")

i=1

paletteLength=50

q = c(colorRampPalette(c("#FFC0CB", "#FF0000"),bias = .1)( paletteLength ))

while(1) {

sleepTime = .01

for (i in seq(1:paletteLength)) {

draw(q[i],q[paletteLength+1-i])

Sys.sleep(sleepTime)

}

for (i in rev(seq(1:paletteLength))) {

draw(q[i],q[paletteLength+1-i])

Sys.sleep(sleepTime)

}

}

# End
The old comments aren’t completely lost. If jacquesm wanted to, he could export the comments to XML (http://help.disqus.com/customer/portal/articles/472149-comme...) and then write a custom script to re-import them into a new commenting system of his choice. But unless he does that, then yes, the old comments are basically lost.
Hello XSRF! Cookie only authentication? Seriously?
Same here. I'd never include any third party JavaScript application that messes with my website.
One of the Opera engineers has commented on this. They did talk about it, and concluded that it'd be about a year of work to usefully open source Presto. It has licensed third-party components that would need to be replaced, so they can't even just do a code dump.
My understanding is that for private cars, they've said they don't log this data without consent (and a signature). I don't know whether it's available to the user - that'd be neat for sure.
Because of the news, I downloaded and tried out Opera again last night. It was the first browser I've switched to from IE6, before Chrome came and swept me over with its minimalisic UI and amazing omnibar.

There is still one thing I miss from Opera to this day.

Pretty much instant go-back/go-forward times. Go to any static page, then another, then back and forward is nearly instant in Opera.

In Chrome, pages get reloaded and can sometimes take from 1 to 5+ seconds if some server lagged out. Which is ridiculous if you just want to go back to where you _just_ were a millisecond ago, because something caught your attention after u had already clicked on some link. Why don't they keep these things cached?

So my question is: is that a browser-level feature or rendering engine-level one? Will Opera preserve it? Will it finally come to other browsers?

Note: Safari has recently added the two-finger swipe that reveals the previous/next pages. However, they're using cached images while the actual page gets loaded. Better than nothing, but I still prefer Opera's true blazing speed here.
I'm pretty sure I did not have ads until today either, it stands out quite clearly. Maybe it only happens on 'high traffic' days or some other criterion but this definitely blind sided me.
That's a really clear-cut trademark issue. If you're using Heinz' trademark to sell a different product they can sue you easy.
Top 100 Highest Quality Web Design Blogs
WebKit project consits from four components:

- WebCore - the rendering engine
- JavaScriptCore (aka SquirrelFish or Nitro) - JavaScript engine
- WebKit - synchronous API
- WebKit2 - asynchronous API

All WebKit-based browsers are using the same rendering engine (that is WebCore). Only some of them are using other WebKit components.

Google did not fork WebKit to implement Gamepad API and WebGL, those features are implemented in upstream WebKit project (check http://goo.gl/5M9gN). Safari does not support them probably because of its longer release cycle.

It's true that there is no single version of WebKit though. Browser vendors are free to take any SVN snapshot, replace any component, toggle on/off any feature and brand it with any version number they prefer.
If You Don't Face The Threat of Wetting Yourself You Aren't Working Hard Enough
Iceland Wants to Ban Internet Porn
Why There Is a 50/50 Chance You’ll Tilt Upmarket in SaaS
Show HN: PairBuddy, Secret Crush App for Facebook
The name itself seems to be air-force jargon[1] for "locate, identify, destroy".

It also seems to be in somewhat common use in secops, there's a 4-part series from 2009[2] that looks much more interesting than the indefinite article posted.

Another article from Tripwire[3] defines it as: The phrase “kill chain” describes the structure of the intrusion, and the corresponding model guides analysis to inform actionable security intelligence.

There's actually a whitepaper (PDF, ~12 pages)[4] from Lockheed-Martin about their 'kill chain' APT defence, which would be another good read about it. From their paper,

"Conventional network defense tools such as intrusion detection systems and anti-virus focus on
the vulnerability component of risk, and traditional incident response methodology presupposes a
successful intrusion."

and instead, they want to study analytics on the assumption the attacker can or has got in already, and wants to do something with their access. They can detect suspicious actions and do something about them, rather than keep everything suspicious out.

[1] http://www.jargondatabase.com/Category/Military/Air-Force-Ja...

[2] http://computer-forensics.sans.org/blog/2009/07/22/security-...

[3] http://www.tripwire.com/state-of-security/it-security-data-p...

[4] http://www.lockheedmartin.com/content/dam/lockheed/data/corp...
Gmane doesn't mirror google groups -- it mirrors public mailing lists and originally was made to reformat them for news readers[1]; some mailing lists use it intentionally as their public archives (emacs org-mode for one) so you might be missing out if you blacklist it. I don't have any affiliation with them, but they don't seem too bad.

[1] http://gmane.org/about.php
How to Be a Better Freelancer: Listen to Your Clients
All states (that have an income tax) do. I own property, which I rent, in multiple states including MA. I need to file tax returns for the income I make in each of them. Nothing unusual there.
This is much more common than you'd think. The reason you don't hear more about it is that these people don't use the internet, so it's not like they're going to tweet or blog about it.
precipitous drop in both battery charge and rated range

The drop in "miles of range" is precipitous, but the drop in the actual charge level of the battery is not.
Risking their livehood?

Do you know how many MILLIONS of conventional cars are manufactured a year? Who are the biggest companies in the world? You will be shock that they are energy companies.

There are HUGE economic interest in the outcome of different transportation methods. The salary of a man is nothing compared with the BIILIONS over the table just delaying the future one or two years.

I had a friend whose only job at a big French car company maker was organizing summer experiences for car journalist vacations in Europe. I could not believe that a journalist will accept that, now I understand the reviews you find in most car magazines(You never find anything negative).
My feeling is that the HN community tends to try and focus on unique and specific details.

This quote has become a cliche and doesn't add that much to the conversation.
I implied no such thing. I wish they'd use the banhammer AND not break vote counts.

As long as spammers are banned, there's no reason to screw up a site feature for everyone else.
"I think the ‘you are not the user, you are the product’ meme should die. It does a dis-service to the complexity of the situation and it masks some much more serious issues with online monetization models, and online privacy in general."

http://jacquesmattheij.com/you-are-not-the-customer-you-are-...

Meta: I went googling for this article, know I'd read it, but not where. I found the coincidence of the author quite amusing.
I think he was talking about keeping assets in a foreign location, not opening a domestic account in a foreign headquartered bank. Of course, you still have to report any foreign assets to the IRS if the total is greater than $10,000.
You're probably right to be cynical, but the issue is that most people are not. I would be that the vast majority of people who read an NYTimes article take it as gospel, which is scary.
Horrific story with what happens when you cross slavery and the holocost. That said, don't be so sure we're much better. Here's North Korea's perspective of what we're like.

http://www.youtube.com/watch?v=6NMr2VrhmFI
Do your remote users have any control over those files? Probably not, or at least, probably not on purpose. The problem here is highly extensible systems that consume some user-sourced data and ultimately contain some sort of path whereby the user is essentially running a program with some set of capabilities they are not supposed to have. (Many of these attacks have resulted in arbitrary code execution, but weaker forms are possible, where perhaps you can only instantiate a class that results in some file being created on disk with arbitrary contents, or reads from it, or something.)

Many of these systems are written with the use case in the developer's mind where the data can be trusted to some degree, because perhaps they assume it's going to be read only by the program that generated it and only viewed by the user who already owns the computer, etc. In some sense the error only occurs when one takes this sort of software and then exposes it to the network, but it can be hard to realize when you... or somebody buried three layers deep in $YOUR_FAVORITE_FRAMEWORK... has done that.
Matterhorn was a great book. I'll have to check out the other.
Fix to iOS 6.1Microsoft Exchange bug
Your objections apply just as well to the article.

The author is a bit all over the map, but seems to say the counter-culture will reject, not any particular piece of technology because it is technology, but because of how it influences your life or because of how a particular company that controls that technology operates.
IOS 6.1 Bug Enables Bypassing Passcode Lock to Access Phone and Contacts
North Korea's view of what we're like
Maybe we're as unaware of our society as we suppose North Koreans to be of theirs.
I never expected to see that make the jump from 'end user of a service' (say twitter, facebook, google) to 'end user of a plug-in' or SAAS product.

Silly me, I guess I should have seen it coming.
Facebook is a technology. Someone designed and built it.
This is a pretty good look at how litte the
Photoshop interface has changed over the years. http://ipod-touch-max.ru/wp-content/uploads/2010/02/27721.jp...
Method has a great team.
I suppose this is one possible counterculture, but I'm not sure why it's more likely than any of a myriad of other possible countercultures.

Why this counterculture, apart from what the author would like to see develop? I mean, I'd personally like to see an anti-urban, anti-density counterculture enabled by technology, but I'm not under the illusion that that's going to happen just because it appeals to me.
I don't think there should be such a drastic boundary between SMS and email, IMO the separation between the two should be more freeform and vague.
Sorry, initial post stripped newlines. Edited the post.. had to put 2 newlines in order to maintain line breaks. (Tried <code> </code>.. didn't work.)
Should work now!
It's a free service and they're at the point where monetization is becoming a necessity. I can appreciate that, and it's not a particularly evil way of doing it, if you ask me.

I don't know about you, but I can live with a couple of non-obtrusive links that go other places—especially since, like a lot of people, I got emails about it ahead of time. If you can't, you can turn it off.

You act as if the ads are putting ugly pictures of fat people are flooding your site or ads for e-Cigarettes or other skeevy things. I've been seeing them for months — their ads, far as I can tell, are of higher quality than the ones you see on Facebook and Google search. (I see links for Exxon, Comedy Central and Citi on a recent comment thread on my site. Certainly not bottom-shelf names.)

The reason why you probably didn't notice them is because they're so unobtrusive that they were designed so you wouldn't notice them. Now whatever philosophical issues that raises, I think, from what I've seen in my own experience, Disqus handled this the right way.

EDIT: I don't get the downvotes. My point is totally valid here.
Just out of curiosity, but what exactly did you think the arrangement between you and Disqus was? Their service obviously saves bloggers a lot of hassle, and it can't be free to maintain?

I don't mean to say that this justifies this perceived wrong, but it certainly justifies, from their standpoint, to think: "If you're going to use our service, for free, you should at least read our emails (and not filter them to the Spam folder)". Also on their side: they've allowed the ability to opt out.

So you can still drop the service on the grounds of principle, and technically, this is a "bait and switch"...but it's a pretty mild one.
Disqus is in the unenviable position of having a freemium product that everyone wants but nobody is willing to pay for. Their freemium model provides commenting services with the expectation that value-added features or the need for an SLA would compel site owners to upgrade to paid plans in order to use those features. Problem is, customers that are large and important enough to require an SLA are also large and important enough to be able to afford a custom solution.

This leaves them with the options of transitioning the business model to something that people are willing to pay for, or finding ways to extract value from their free customers.

I know of one other commenting widget provider who got into this exact same morass, but they have opted to leverage the communities that their customers have created to engage in "influencer marketing", where the site owner cooperates with the commenting widget provider to have an above-board "sponsored conversation" with a third party company.

Since it's unlikely that Disqus will be able to successfully integrate advertisements into commenting feeds in a way that doesn't damage their relationships with site owners, an approach like this shifts the value-extraction machinery away from a site's commenters, who Disqus technically has no claim on, and provides an avenue for mutual profit with the site owners, who have an existing relationship with Disqus.
All my support to Tesla people.
Theory: Broder didn't realize the logging capabilities of the car, and when the Model S' software ui initially supported his internal baises he took liberties with the truth. By "documenting" his experience through Tesla support he attempted to falsely add credence to what would be a traffic generating, "anti-electric" review masked in the journalistic repute of the NYT.

Firstly, all of Broder's excessive winging about the cold weather (I think) was designed to subtly imply that the Model S doesn't work in the cold. You future buyer, will be cold and your car will break. This is why Musk had to address the cold weather link directly in the evidence blog posting.

Secondly. Broder likely couldn't have fathomed that every parameter in the car was being logged. Very specific details add credibility and character to a story. They make the author appear diligent, and one who gives great attention to detail. In the past such details were a "literary tool used to bend the story. Now thanks to data driven engineering words and truth in such matters should align more closely in cases such as this.

Lastly. For a man who may or may not have a bias against electric vehicles (cars at least), the observation that "the estimated range was falling faster than miles were accumulating" at the outset of the author's journey might have set the tone of the coming review. With all the incessant calls to Tesla support to document all the "trouble", Broder had plenty of documentation to support his (what was IMHO a) journalistic malignment. This angle also had the added benefit of generating views for NYT - plus through the courtesy of Tesla arranging a tow - the money shot.

I hope NYT has the ethical chops to do what they must.
This looks like a very useful gem, I wish I found it a week ago!

I ended up using filepicker.io, and am quite happy with that now. But this gem could be good for people that don't want to rely on a third-party (although I still recommend trying filepicker.io)
Regardless, it should be opt-in rather than a backstab to the user's trust. Actions speak louder than words, and this behaviour says plentiful of this company's management.
Ok, now you are nitpicking. That is such an irrelevant aside.
> Ender is an impossible creature and creates an archetype that cannot be lived up to. People make mistakes, it's what makes them learn, advance, succeed, become stronger. Ender is some kind of perverted ideal.

Isn't that the point? It's the same as reading about the life of an amazing Olympic athlete. The book follows a prodigy military strategist -- shouldn't he be an archetype?
We don't all live in California and get to bike to work. I have 3+ hour drives twice a week. Sometimes it's very cold.

Granted, I'm not going to buy a Model S to do this sort of commute, but then, what is the article trying to sell me? The idea that you can take a car like this on an extensive trip. And, to me, it looks absolutely terrible in that regard, especially in the winter. Somehow people take that as an affront to climate change, puppies, the internet and Elon Musk himself.
Apart from the other aswers, you may be happy to be the product on an iteration and not on another, and you are free to get angry when people claim they live to make you happy and later you discover that there is a postscript (unless we need to suck).
A passionate group who is driven by helping SMBs.
There's smartphone apps that take advantage of OBD-II, e.g. -

https://play.google.com/store/apps/details?id=org.prowl.torq...

https://itunes.apple.com/ie/app/dashcommand-obd-ii-gauge-das...

http://www.devtoaster.com/products/rev/

Some of these are massively overpriced, but they are useful looking.

If I had a bit of cash I'd consider putting a 7" Android tablet into the dash (you'd need a double DIN slot) and install the torque app, with a custom moulded surround to make it look stock. Live engine data to satisfy your inner nerd!