skysight-inc/HackerNews huggingface dataset:
We don't just announce this stuff on HN; there's a whole lot more:

* Post security release announcements to our blog.

* Post announcements to django-announce, a very low-traffic mailing list specifically for security announcements.

* Post announcements to django-users, a mailing list with over 20,000 subscribers from all over the Django community.

* Post announcements to django-developers, where most of the people who hack on Django hang out.

* Publicize these releases on Twitter, Reddit, HN, etc.

Further, we work with people who re-distribute Django (e.g. as part of RHEL/Fedora/Ubuntu/etc.) and people who use Django in high-risk areas to get them early access to security notifications [1].

So yeah, we make a lot of noise about security issues.

BundleScout looks nice, but it kinda sucks that you'd make people pay to hear about security issues. We're going to continue to do our best to make sure people find out about them quickly and for free.

[1] https://docs.djangoproject.com/en/dev/internals/security/#re...
The trick is to set reddit preferences to only show comments rated 10 or higher. That'll cut down on most of the garbage, though you'll still get a lot of highly rated "funny" posts. But you can just minimize a thread once it starts devolving into nonsense.
The Registration of a New Domain
> And why would you buy physical copies of pirated movies if you can get them for free?

BluRay market is 5-6 billion dollars. People buy them.
Of course, I would never deny that people should do their own research. Based on my googling, they would probably find that there's a lot of research to back up the doctors' advice, and plenty of anecdotes to back up co-sleeping advocates.

Certainly the default position should be that medical professionals know what they are talking about for folks who are not inclined to do the actual research.
This is extremely helpful for aspiring programmers/entrepreneurs!
I'm not saying the contrary.. but I'm a dev, an engineer (the real kind), and also a scientist.. I know how amazing entities in the US are at those fields, but I've also seen how well places outside of the US can keep up right behind. I think the legislation in the US has helped it keep is head start in alot of ways, as the environment just isn't up to par in many countries. But as far as raw skill of individuals goes, there are many many outside of the US who can keep up, or completely blow us away in all of those fields
Here, I think it would end up more like "Argue with me about anything". Might still be fun though.
At some point this will be pretty killer tech. One of my favorite applications is to put large capacitors into the foundation of a house with solar panels. Back when Maxell was showing of 4.2F car battery sized capacitors we did the math and figured that a house with a 1500 sq ft base foot print could support enough charge to carry it overnight, assuming that you were in a moderate climate (California worked, Minnesota didn't). Once you can go 'off grid' without battery maintenance worries it will become a lot more common I suspect.
Go to aaronsw.com/weblog

Click on the title of any blog post.

Scroll to bottom and click read comments?

Am I missing something?
That is quite opposite of my skillset :P

I make apps, but I am focused in games, and I use C++, C, Obj-C, Lua, Java...

I don't know JS at all.
Knowing the hero will win does not make you smart. Most people go into films knowing the outcome (even when the hero doesn't win). That's not why people like seeing films. It's for fun and it is an escape. When you're watching a movie you don't have to think about work, family, that doctor/dentist appointment you have been putting off..

I don't think you are "stupid again", I think you have matured more. Your previous opinion is similar to what a lot of teenagers go through when they think they know everything.
I really don't understand the whole Bitcoin thing and I'm not sure why people keep posting how much they're trading for. Is the government going to drop the USD in favor of bitcoin or something?
Chrome's "click to play" plugin setting chrome://settings/content has a nice user experience, because on YouTube you click the video that you want to play instead of clicking some off menu to enable Flash on the whole domain. I think that setting should be default, but likely the AdSense team would have a throwdown with the Chromium team if that happened.
Maybe it's not such a bad thing.

Spreading around saved game files and using tools to mess with the games memory to cheat is something that has prevented a true Ranking system and online play in almost all games.

These server-side requirements would mean that the $ is stored server side and it will be harder to cheat.

It was pretty much either have always on connectivity or require punkbuster and disable many online cooperative features.

Fine EA. I'll accept it.
Thanks for the advice, we indeed are planning to have her bed very near to our bed and start to move her in the other bed gradually as she starts to be 6 months old or alike.
Using Raspberry Pi as a Dedicated Ares 2 Server
Our analysis has led us to conclude that APT1 is likely government-sponsored and one of the most persistent of China's cyber threat actors. The scale and impact of APT1's operations compelled us to write this report. In an attempt to bolster defenses against APT1 operations Mandiant is also releasing more than 3,000 indicators as part of the appendix to this report, which can be used with our free tools and our commercial products to search for signs of APT attack activity.

Highlights of the report include:

APT1 is believed to be the 2nd Bureau of the People’s Liberation Army (PLA) General Staff Department’s (GSD) 3rd Department, which is most commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398.
APT1 has systematically stolen hundreds of terabytes of data from at least 141 organizations.
APT1 focuses on compromising organizations across a broad range of industries in English-speaking countries.
APT1 maintains an extensive infrastructure of computer systems around the world.
In over 97% of the 1,905 times Mandiant observed APT1 intruders connecting to their attack infrastructure, APT1 used IP addresses registered in Shanghai and systems set to use the Simplified Chinese language.
The size of APT1’s infrastructure implies a large organization with at least dozens, but potentially hundreds of human operators.
In an effort to underscore that there are actual individuals behind the keyboard, Mandiant is revealing three personas that are associated with APT1 activity.
Mandiant is releasing more than 3,000 indicators to bolster defenses against APT1 operations.
Ask PG: Would Facebook have been invited for a YC interview?
Assuming Facebook was just in the idea stage, would you have invited Mark Zuckerberg in for an interview?

His prior experience was pretty impressive (Harvard, Facemash, Synapse) but I assume he would've applied as a single founder. Without a demo, would a social network for college students in the days of Friendster and Myspace have been invited for an interview?

Are there any other big companies you can think of that you would have probably passed on assuming you didn't have a working demo to look at?
The more advanced kits detect your OS/Browser/Plugin stack and deliver exactly the exploit that will own you. It was iphonedevsdk.com that was used as the watering hole.
relay is dealt with during install in debian, and default is only allow relay from localhost (ipv4 and ipv6). in the case of roundcube, localhost is then perfectly fine.

auto-update is as simple as apt-get install unattended-upgrades.

greylisting is: apt-get install postgrey

blacklisting is the only real "slightly" iffy area, because there aren't a obvious one guide to do it. It is however a very simple way of installing it once and not touching it again. (http://www.howtoforge.com/block_spam_at_mta_level_postfix) looks to be a old guide, through there might be more current methods out there.

As for system harderning... I have yet of hearing a single person having a stable debian installation getting hacked (if they update/autoupdate!). basic security for the system should be left to default, so long one do pick a decent password (or avoid installing ssh).
It is absolutely not too sensitive of an issue to discuss openly. If we can't talk about it, it just festers and creates anger.

The problem with this kind of thing is the the people that got in solely on merit assume that people who fit into any of those categories got in without having any merit. This is rarely true except in the case where it is extremely difficult to find that particular set of things.

When that assumption is there, people are treated differently. It's often not even on a conscious level. It's going over to help the new female that showed up at a meetup assuming she needs help getting started with Python - while ignoring the 5 new males that came in before her. It's assuming that the black woman over there got her job because who ever heard of a black coder? She probably sucks at it.

Discussing it is different than dismissing someone's accomplishments because they appear to be privileged.
Some folks want HN to be sort of a super subreddit.
> It is also a way of burying hair-on-fire security issues,

:/ I'm sorry you feel that way. I can only speak for myself, but I certainly don't want to bury any security issues, I want to fix them.

> what is properly considered a piece of core functionality for Rails.

Maybe automatically parsing XML parameters shouldn't be?
Guess what? The hacker you and the you that love your GF are the same person.
Companies hiring you will likely not want to pay more than the market rate for you, where "market" is defined as your geographical area. This limits the desirability of being a remote worker to begin with. It's also a mistake, IMO; companies that use this approach are likely to find themselves giving programmers nice CVs, who then go on to move to a different country with a better "market".

Another big barrier for smaller companies is the logistical difficulties in payroll, currency, international banking, tax compliance etc. - it's easier to be a contractor.

Thirdly, the company culture needs to be set up for remote working. Otherwise you'll have poor communications, and the remote people won't be plugged in to what's going on.
>But games are all different. An improvement to the engine for one kind of game may not be an improvement for another kind of game. Most games would probably only use a small part of the engine.

I don't really see them as all different. Especially at the engine level. Especially considering most 2D engines (Cocos, Game Closure, etc) are mostly the same and use similar concepts.
How does this work? All I see is your logo, a bunch of clouds that move around when I move the mouse around, and a couple of social buttons. Clicking on the clouds doesn't seem to have any effect... (I am using Chrome on WinXP.)
That's 100% completely wrong. We've worked with Rails' security team in the past to coordinate releases fixing similar issues, and they've helped us out with discovering and analyzing issues of our own.

They're a great group of people and I've got nothing but good things to say about our work together.

Yet another reason why open source is fantastic: friendly competition can actually be friendly. It rocks.
Is Django 1.5 finally going to support Python 3? Python 3's been out for what, 5 years now, and the major web framework for the language still doesn't support it yet?

The whole Python 2 / Python 3 incompatibility issue was one of several reasons why I decided to focus on learning Ruby and Rails instead.
Exactly this... I've tried converting a lot of people over especially for home use... in almost all cases some small feature is missing that's greatly important to that one person, that they then fork over the cash for MS Office.

I won't/don't ... LO does what I need just fine. I also take offense to the suggestion that Evernote and OneNote are even in the same league... OneNote is probably the only MS application that I'd fork over a fair price for. I use Evernote because I'm on Mac, Windows, Linux and Android regularly... but loved OneNote a lot more...
tmux is fantastic, especially for remote development. However, you can't change a single pane's font size, nor is it easy to select an entire line of text using the mouse (with vertical panes). Thus I suggest iTerm2 for local development if on a Mac.

If you haven't tried multiple panes with multiple font sizes — e.g., smaller font for logs/compiling/long-running, bigger for editing — then that's a world I don't want to live in. (j/k ;)
It doesn't matter if bitcoin is high or low against USD. All that matters is stability. It's supposed to be a currency not an investment.
Make a stranger believe you - some cold calls work
No, I missed it, thanks. How about Svbtle?
Oh, cool! I'll give it a try, thanks!
It could be interesting, but I think Reddit is much better suited to multi-party discussions than HN. Reddit's commenting system is easier to navigate (cf. the hide button).
> if Bill is putting that money into another growth vehicle, that means that he believes Microsoft isn't going to rise to superstar status again.

But Gates is not putting his money into another growth vehicle, he's putting it into his philanthropic projects, which he spends most of his time managing.

He has made it clear (with both words and actions) that he wants to use the rest of his life doing the most good with his money that he can. And he has almost entirely redirected his career toward those non-Microsoft goals. If he was interested in making the most money he can, he would be doing totally different things.

Of course, he can't (sensibly) sell his entire stake in MSFT at once. Instead he is selling it slowly but steadily.

Also of course, he can't (sensibly) spend all his money at once. It is being invested in a diversified manner: http://en.wikipedia.org/wiki/Cascade_Investment

Diversifying his wealth makes a great deal of fiscal sense, considering his goals, and the fact that he is no longer running Microsoft.

So, I don't see how you reasonably conclude that his MSFT sales mean he has lost faith in Microsoft.

> It's not a place where his money will even retain it's base value.

The MSFT dividend yield has historically been over 2% and is now over 3%, so it's not like it's doing completely nothing before he can sell it.

So it seems we agree that Gates wants to sell his MSFT as quickly as is reasonably possible, we just don't agree on his motivation. I suspect he will continue doing so until he isn't risking so many eggs in one basket, because he has other goals besides wealth accumulation.
As long as we don't get a daily AMA for every single startup founder out there ... Reddit already has quite a few of those amadverts.
I don't want to be That Guy, but this isn't the first time Bitcoin hit $30.
Yes, but the app ecosystem not so much.
One has to wonder if this is a statement of bitcoin's instability, or a symptom of instability in the USD.
Creating a malware pandemic through USB charging stations
Sponsorfied (YC S12) is hiring front and back-end developers
We’re building a revolutionary new marketplace and platform that changes the way brands do offline business online. Sponsorfied (YC S12) is growing fast and we’re looking for a Python/Django developer as well as a front-end developer. You’ll be joining a team of six (half product and half business/marketing) and working out of our office in San Francisco, CA.

We launched our beta over six months ago and have worked with some of the worlds largest brands (Fortune 100 and Fortune 500 companies). We’re working on extremely hard but exciting problems and we’re building out our product team.

What We’re Looking For: Python/Django Developer
- Solid web application development experience
- Experience balancing performance versus design quality
- Experience building APIs

What We’re Looking For: Front-End Developer
- Solid front-end development experience (HTML/CSS/Javascript)
- You’ve worked with Django, Rails, or a PHP based templating language and feel comfortable in anything MVC
- Responsive layouts are in your vocabulary and you enjoy working with frameworks like Bootstrap
- A good sense of design and layout

Tools we use: Git, Heroku, Solr, Django, Vagrant

We offer a generous salary, benefits, equity, whatever desk setup you need, a beautiful office in downtown San Francisco to work out of, and a never-ending supply of free goods from brands we’re working with.

To apply: jobs@sponsorfied.com
Github profiles welcome, but at the minimum attach a paragraph that tells us something about you and of course a resume.

Press:
“10 Best Startups from YC S12” - http://techcrunch.com/2012/08/21/best-of-yc-demo-day/
VentureBeat Demo Day Coverage - http://venturebeat.com/2012/08/21/sponsorfied-says-well-do-for-sponsorship-what-google-did-for-targeted-ads/
TechCrunch Launch - http://techcrunch.com/2012/07/25/sponsorfied/
VentureBeat Launch - http://venturebeat.com/2012/07/25/sponsorfied-launch-sponsorships/
Lessig's lecture on Aaron's law is live
Is this a personal complaint related to "single cofounder"?
Well, we[1] don't hire remote workers, because we don't hire any workers yet, as a self-funded, bootstrapped startup. But, when we do get to a point where we can hire people, here's what I'm thinking:

1. If you limit yourself to "locals only" you stand to miss out on some good talent.

2. Distributed software development teams certainly can work in practice, just look at many F/OSS projects.

3. Guess what, all our stuff is OSS anyway.

4. But, there is extra coordination cost and overhead when it comes to dealing with remote workers.

5. And there are times you just want everybody in a big room together to hash things out. This is obviously harder with a distributed team.

6. All of that said, we'd almost certainly look into remote workers. Within that framework, I think there might be some slight preference for people in the US (less language barrier, fewer time zone issues, etc). The idea of "rural sourcing"[2] strikes me as interesting as well.

7. But we would definitely consider non-US as well. I've heard good things about working with folks from Eastern Europe (Latvia, Ukraine, Estonia, etc.), as well as the Philippines. I think South American countries like Brazil would be intriguing as well. But, at the end of the day, it's about a match between talent, skills and the needs, weighed against the tradeoffs of cultural barriers, timezone issues, language issues, etc.

8. Perhaps surprisingly, I see India as lower on the list of places to seek remote talent. Partly because the timezone, language and cultural mismatches seem more severe between India and the US, compared to some other choices. And also a perception (which might be flawed) that there are fewer individual developers in India looking for remote work. My perception is that it's all Infosys and their ilk when going to India, and that doesn't interest me so much. That said, I'm not saying we wouldn't work with folks in India, just that some other areas seem like they might be better options. But time will tell.

[1]: http://www.fogbeam.com

[2]: https://www.google.com/search?q=%22rural%20sourcing%22
Yup, it's not the first time either -- we've coordinated with them in the past when fixing bugs that affect both frameworks (https://www.djangoproject.com/weblog/2011/feb/08/security/).
There's a lot of work and coordination (scheduling, moderation, proof) involved in the IAMA subreddit. I'm not sure we are interested in or capable of organizing all of that here.

Also reddit has a much wider audience. Having IAMA's here instead of reddit would only make sense for less widely known tech-centric folks.

Also keep in mind that there have been a couple sites (startups?) that tried to replicate the reddit IAMA format and basically they all went nowhere.

This is one thing reddit is pretty good at, that is hard to replicate, and that there is not much of a reason to replicate here.
No

Edit: I think a single founder has a lot of disadvantages. I am simply curious of PG's response to this hypothetical situation.
Like Facebook, Apple Says It Was Attacked By Hackers
And I'd rather they didn't think about going on HN as doing some media. Maybe we've reached that point anyway, but that would be a shame.
I wish HN had followable tags.
Yes, Django 1.5 supports Python 3 although the authors recommend waiting until 1.6 for production sites (https://www.djangoproject.com/weblog/2012/aug/19/experimenta...). The larger question is whether the libraries you want to use support Python 3. Common libraries such as django-debug-toolbar unfortunately do not yet support 3 (https://python3wos.appspot.com/).
Maintainer(s) wanted for vim-javascript
What if I told you that Bitcoin SOLVES counterfeiting?

What if I then told you that the US government spends billions of dollars fighting counterfeiting and governments like North Korea profit by printing USD.

Cheaper on the budget. Safer on the homefront. How could they say no?

(That being said, them actually accepting Bitcoin is insane, using the technologies Bitcoin has pioneered though... That could happen.)
The idea sounds great, but there is a big caveat.

I think it will draw a lot of crowd to HN, which PG wouldn't like.

One one hand you need to keep the registrations open for newcomers to ask good questions, on the other hand a lot of signups will be from a section of Redditors not used to HN etiquette. I remember that signups are sometimes disabled on HN whenever there is a popular link to here from Reddit.

Also, HN has no means right now of highlighting the submitter of the post, unlike on Reddit.
Adrian Holovaty talks Soundslice at 37signals
My point was that the nameless editorial writer did not seem to be familiar with the basics of the recent developments in online learning despite it being covered repeatedly in their own paper. For example the highly pertinent fact that they are much more cost effective (most MOOCs are free and teach vast numbers of students - 13,000 in a single class in your quote). Or how about the huge numbers of students with no access to university education for many reasons (can't afford, have to work, live far from any college, live in 3rd world, etc.) that can take classes online. Or the ability to replay or even slow down parts of the lecture that you don't understand immediately. Or the impracticality of short lectures in the traditional classes.

Maybe the rhetoric of an editorial is disguising some deep understanding of the issue but what actually appears on the page is hardly convincing if not actually misleading to those not familiar with the subject. See the many other comments here.

Not saying this will solve all out education problems but sure seems like one of the biggest advances in a long time. Can you think of anything else of comparable potential impact?

Also low completion rates in MOOCs is a red herring. These are FREE class where you have to "enroll" to browse the material. It would be like counting everyone who read the course description, visited the class webpage or flipped thru the textbook in the bookstore as having enrolled in a traditional class. Not an apples to apples comparison.

It is more likely that the opinion in this editorial reflects those of the vested interests of our current education system than clear thinking on this issue.
I'd rather focus on ideas than personalities. What about "ask me anything about X", where X is a software package/device/publication/etc.
I think it's all about the throughput. How much money can I put in, move, then successfully take out. The market cap is bigger than it ever has been.
MTV And BET Faked Their Own Hackings For A Marketing Stunt
Only if there was some way to monitor the quality of the people doing AMA.