skysight-inc/HackerNews huggingface dataset:
I think that anybody who works with JS should support this project and its author (Marijn Haverbeke of the Eloquent JavaScript fame.)

P.S. Works fine on Chromium Version 24.0.1312.56 Ubuntu 12.04 x64
This is a surprise to absolutely no-one. That client keys & secrets were semi-public knowledge was obvious years ago, before I started working on OAuth at a much younger Twitter. The client key and secret is a rough trust metric for clients that are distributed publicly. Twitter can distribute new clients with new more-hidden secrets, and gain a bit more trust, for a while.

The place where the client id and secret actually offer real security is in the hosted scenario, where the secret is never distributed outside a trusted environment. Anyone who tells you different is wrong. The same applies to every single copy protection scheme (SSL/TLS, HDCP, DVD Region Coding, etc, etc, etc) and barring some mathematical breakthrough, this will always be true.
Something I've been pointing out about OAuth for ever is that it's a method for delegating authorization to agents who wish to act on behalf of the user. When it is the actual user him/herself who is acting, there's nothing wrong (and a lot of things right) with username/password authentication.
Sexy animated spirographs in 35 sloc of d3.js
The problem is fixed now, so the fact that it works shouldn't come as a surprise.
Gezonde voeding voor een jonge en stralende huid | Leef Nu Gezonder |
Might want to check out AOLs new Alto Mail - believe it or not, its actually quite good. Does many of the things that I was using plugins in gmail to do. And its super fast.

https://altomail.com
How would Apple know that the app uses these keys? If they run something similar to strings then all you have to do is store the keys in some kind of obfuscated form.
This is a shift of context: the first was in "us" (the non-boss political establishment not responsible for distributing receipts) "giving" raises. The second is "bosses" giving employees raises, now dropping the context of the reason for the wage increase; being compelled by force of law.

The line of reasoning is entirely dependent on the reason for an employer giving more wages. If he needs to give raises to retain talent, it is presumably because the skills he is purchasing can demand a premium, which can be reflected in the prices of the product or service being offered.

If most of the goods and services used by the people most "helped" by the commanded wage raise are themselves wage dependent, then their prices must increase or employment levels must decrease and efficiency of the remaining workers must increase to compensate.

As market prices for goods and services are not that linearly dependent on one factor, this result on employers will inversely affect employers with the least price flexibility; the ones with the least margin, the ones employing the low-income workers.
"I also don't understand why people give good zero days away for free..."

Quite some hackers are a really special (in a good way) kind of people who are in it only for the intellectual challenge.

Now food for thoughts:

Rudyard Kipling once warned students against an over-concern for money, position or glory, he said: “Some day you will meet a man who cares for none of these things. Then you will know how poor you are..."
How to motivate your team
Book Hotels for Bitcoins
Your /jobs link in your sites footer is 404ing
reading is overrated. For example, look at all you idiots out there. You want to be buried or cremated when you die, instead of being frozen for the future. Idiots. Reading is not going to keep you from dying forever.

And you idolize the american constitution, when that document is the mechanism of your oppression by the rich. Idiots. Reading didn't help there, did it?

And you cannot understand any new abstract concepts, such as why no one in america (except me) has ever said these words: stop immigration and tax the rich. Your reading skills did not help you to understand why no american but me has ever said those words.

So, in summary, reading is a tool that you not suffciently grasped, so it helps you not. Better to be like mexico and just live your miserable lives out and go to the dirt. Why waste time from your short lives reading when it helps you not?
used qrencode and img2txt to get ascii.
I had completely the opposite reaction to you. I thought this was a lovely, heartfelt, clearly-written article. I especially enjoyed the final paragraph - "We know that books give people ambitions, expectations, a sense of dignity" - he nailed the power of books for me.

As far as the lack of concrete statistics - well, I don't know about you, but until I hear a more-convincing alternate take, I'm going to take his word for it. He clearly knows more about Mexico than me. And his examples are pretty powerful - walking through a giant camp filled with striking teachers, examples of the behaviour of individual teachers, the attitude of the State Minister for Education.

And why can't a raging narco war be linked in a small manner to a population lacking imagination, sensitivity and the ability to forge new economic pathways, linked back to a lack of interest in reading? Is that an offensive notion to entertain or something? It's not like you have to ignore other factors like the adjacent drug market, is it? Alternately, why can't these two problems - trafficking and bad education - both be afflicting Mexico simultaneously, feeding off of and reinforcing each other?

I mean, seriously, why don't you just chill the fuck out and enjoy the article on its own merits, rather than imposing completely ridiculous standards on it? Do you have more experience of and personal involvement in Mexico than this author?
An Introduction to Differential Evolution
I know. I was blown away by VS when I was researching what others were doing in this space. Their approach is also very clever -- there's an interesting talk about it at http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/DEV...
>> rising minimum wage makes for more spenders

Really?

John lives near me and is unemployed. My neighbors and I all hate cutting our grass. We'd pay $5 an hour to have someone else do it, and John would prefer $5 an hour to $0.

However, it's illegal for us to hire him at that wage. So we cut our own grass and he has no job. There's one less spender.

There's also a bunch of hours we could have spent doing something more productive. For instance, I could have worked on my open source project instead of cutting my grass. But I'm producing $5 of economic value that hour instead of $50.

So why is "you can't sell labor for less than $X" any more reasonable as a law than "you can't sell oranges for less than $X a pound" would be? Both lead to waste.
AdWords, PPC, etc.
Anyone recommend a good primer or information content about GOOG AdWords, PPC and other ad revenue alternatives to evaluate & consider for advertising campaigns?
That project sounds cool.
Never tried the Ford Paradox, quite like Mustangs though...
IIRC, the instances in the news were attacks on the Java applet, not necessarily the runtime. Even if it was against the runtime, without the applet, it would have to be a trojan.
Go London User Group, March 27
If you ship a binary to a person’s computer and that binary has a secret embedded in it, that secret will eventually be discovered.

This has been discussed here before: http://news.ycombinator.com/item?id=4411696
Maintence - the bitter side of life
The GitHub Revolution: We're All in Open Source Now
3D Printing Vs. 3D Cutting
I was headed down a similar path myself, but luckily I was writing a completely new library that would abstract a lot of key-value stores. Before we used it in production, I performance tested it - HTTP is really slow. The end result was a client library that talked directly to the stores using adapters for the abstraction.
Minimum wages and employment (1992) [pdf]
Of course, and these are problems I will be working to solve very early on. The kind of users I'm aiming for should be rightly concerned about the security of their passwords and I will be providing as many mechanisms as possible, both socially and technologically, to prove said security in a transparent way.
I read The Shallows by Nicholas Carr a while ago. I thought it was perhaps a bit alarmist.

Comments like yours make me think that, if people are really capable of so blithely discounting the value of focussed, solitary long-form reading, maybe it wasn't.
Abid Omar

I'm the man who keeps this site running.

Don't tempt fate next time ;)
Some early stats from the first few days of SimCity
OAuth has been called flawed by security experts because it's filled with trap holes for developers to fall into[1] and former developers who left the project[2].

1. http://homakov.blogspot.jp/2013/03/oauth1-oauth2-oauth.html

2. http://en.wikipedia.org/wiki/OAuth#Controversy
The only reason is you are in love with AngularJS. I will find someone who really hates angularJS because if we have a lot of validation, it will become a messy of ng-*.

So no matter which framework we use, we should talk about real world project. Not simple usage that only exists in trying and testing.

Use the framework, you love and you will make it beautiful no matter what :D
Maybe it's true.
From idea to AppStore in 2 weeks
Cached: http://webcache.googleusercontent.com/search?q=cache%3Apremi...

PS/Protip: In Chrome, add "cache:" in front of the URL to find the cached version of the current page.
How about "Obviously this is how we should have done it in the first place. It’s not just obvious in retrospect, it should have been obvious in the beginning. We were just too focused on fixing this one problem with our current system rather than calling the system itself into question to see it."
>> Or it could turn out Wal-Mart employees actually do produce $10/hour of value, and the company was just being exploitative all along...

Your assumption is that it's immoral for an employer to make a high margin on labor. My assumption is that it's foolish for an employer not to make a high margin.

My employer had better be getting tens of thousands more out of my efforts than what they pay me, or they shouldn't have hired me. That margin will be in flux month to month while my salary is constant, so there had better be some wiggle room or I'll be fired.

It's not immoral to sell a Star Wars action figure for 10x what you bought it for, is it? Why is labor different?
Demo is working great!
Remmember activate your chrome flag
Ask HN: Hire a Vet
I would like explore asking a Vet to help me hack out a minimally viable product demo for my online social media app. Where would I need to begin this exploration?
To me each of the "grand visions" were legit and valid somehow. (Maybe except for the 12-step solution ;)) Sometimes it's better to just stick with one solution and make the best of it.

So the lesson I see is to not change your framework every month.
I love autocompletion (even when it is half working, like intellij when the inheritance marking annotations don't always follow through, my cleverly optimized jsdoc markup for backbone and co broke down when switching to idea12). It saves me so much time looking stuff up and APIs, and if it can indicate the number and name of arguments required, i usually don't have to use the docs anymore.

And M-./find usages is very useful too, even when it is not perfect.

I pledged, and hope you will get enough funds together.
Summary of the Ford paradox (which the post takes forever to actually get to): Quantum mechanics has only periodic orbits, but chaotic systems aren't periodic. How do we reconcile this with the existence of, say, double pendulums?

My guess: because the abstract double pendulum is a model that only approximates real double pendulums. Analogously, computers based on Turing Machines exist despite Turing Machines requiring an infinite amount of space.

---

Also, a minor nitpick: the post seems to equate 'not periodic' or 'chaotic' with 'is random', which I think is misleading. Pseudo-random, I guess, but the output of a simulation of a chaotic system is highly compressible and thus not random in the information theoretic sense.
> I will find someone who really hates angularJS because if we have a lot of validation, it will become a messy of ng-*

Are you talking about HTML validation? AngularJS supports using data-ng-* which means it's valid HTML.
On Android, the foss client Twidere let users change the tokens in the options. https://play.google.com/store/apps/details?id=org.mariotaku....

The Chrome app Hotot too. https://chrome.google.com/webstore/detail/hotot/cnfkkfleeioo...
I wouldn't be surprised if the word/s the author used in Spanish for illiteracy indicated this distinction, which has then been lost in translation. Maybe.
Not the OP, but my thoughts on it. When I came to my current company, I had no web dev knowledge, I was able to survive by just using the setup my then-CTO (hey yummyfajitas!!) had done. I learnt django and picked up python , but if you asked me why were we using gunicorn and what purpose did nginx serve I would have been blank.(I know I possibly appear very stupid saying this)

After reading about it from a couple of places and writing a blog about it[1], I finally understood my entire infrastructure. While it hasnt served any practical knowledge yet, I feel much more confident about my ability to handle any error or optimizations in that area.

That being said, if I had started reading about WSGI as soon as I started , I most probably would have been lost. I think while getting a website up in 15 minutes gives a sense of accomplishment to someone getting started, it might make sense to make them aware of the underlying technologies beneath the stack once they are comfortable with the framework.

[1]http://siddharthsarda.tumblr.com/post/41369795330/analyzing-...
What, you expect us to read the article to derive the lessons contained therein? What lunacy is this?!
Do these "insanely locked down" Windows have a browser and does that browser enable Java applets?

The 0-days affecting Java lately have all been using Java applets and drive-by exploits. I'm not saying it's not pathetic and lame for Java's security track records but it's not either as if your company was vulnerable to remote exploits in the case Java applets are not allowed in browsers.

I'm running Java webapp servers and I've been really pissed off that I needed to patch to remote Denial of Service exploits (the hashmap / URL query parameters degenerating to O(n) instead of O(1) SNAFU and the "endless loop" while parsing a certain floating-point number) in late 2011 / early 2012 IIRC but basically that's it.

The JVM is still incredibly secure on the server side (and can be installed on Unx systems in a user account, without needing to be root -- meaning that you can then lock down like mad that user account and have an even more secure setup).

Now to be honest if your company was truly paranoid they wouldn't be using old version of Windows with in-house brittle hacks supposedly bringing "more security".

I know that all too well (at Dexxia for example): some people somewhere decide on a shitty technology (Dexxia was at one point using shitty Java applets to allow clients to do online banking) and then says "We're going to have the most secure system ever".

So these guys think* they're paranoid but they're using: a) Windows and b) Java applets.

And at this point you have to wonder if you should laugh or cry at their definition of "paranoid".

People really paranoid about security ain't letting Windows in (unless they like NSA backdoors and consider patch-tuesday to be a reliable way to execute) and ain't letting Java applets in.
But what's the root issue? Worker X is not able to produce value of more than $X an hour. Do we mandate he/she is paid more anyway, or do we try to train and educate a workforce that can produce more value?
OAuth prevents apps from nabbing passwords, though.
Most open, pay-for WiFi networks vulnerable to tunneling out via DNS requests
This article reinforces my belief that there is just something very, very important and special about books. I'm going to have to think about exactly what this is, but it seems like books are the difference ultimately between people with dignity and values, things they are willing to make a stand and fight for, and people without. Why is that I wonder?
Wow, when did this guy start working at my company?

This is like 75% of what happened at my company, except we actually made a whole (custom, of course) framework for dynamically loading code on the server and client.... we also never did the last step of having the clients talk to the DB (the server federates access based on a complex authorization model that can't reasonably be done directly against the database). We are currently rewriting the client-server communication stack (I'm still not sure why).

And next month we're starting a full rewrite from scratch to put it in the cloud. Whee!
Well, lately I've seen Haskell being pushed more and more in the industry and at startups and it makes me truly excited. We need stronger type systems and better static checks!
Http://www.glu.com/game/contract-killer
i felt it did very well as an introduction. I think a deep dive into ember-data would be great for those who have been traditionally server side devs now getting into more of the client side stuff.
Haha, I expected this. I was watching the Google Analytics real-time report and saw 100-120 online users. I kept checking the site...running fine, so I went to lunch and somehow the HTTP Server died.
Yamato Global: Toyota Looking At Record Year.
I am really shocked by many of the answers I am reading here. Do you really think that reading books is an optional thing? I would even go as far as saying: if you are not a regular reader of books, you cannot be a world class programmer. Because you just lack the necessary imagination for it.
Frozen Android phones give up data secrets
>complex scientific research, the details of an M&A deal, economic agreements between nations, or application source code.

Most of those activities you listed are what a ’93 DOE survey called “level 5” tasks[1]. Only 3-4% of American adults are at level 5.[2] There was a followup survey was in 2003, but they combined level 4 and 5 [3]. There weren’t any significant changes to the other 3 levels, so I doubt level 5 increased either.

[1] - http://nces.ed.gov/pubs93/93275.pdf, page 10
[2] - http://nces.ed.gov/pubs93/93275.pdf, page 17
[3] - http://nces.ed.gov/naal/kf_demographics.asp
I don't get it. Do the same arguments apply to, say, subsidized college tuition?
Vaurien 1.7, the Chaos TCP Proxy
No, it's not original. It's called the "multiplier effect" and it's a pretty standard economic principle. See Forbes:

http://www.forbes.com/sites/timworstall/2013/02/25/overestim...
He lost me at:

"At some point it occurred to one of us that the reason our HTTP API was slow was of course that HTTP was slow. "

Why "of course" is HTTP slow? There's nothing intrinsic to HTTP that I am aware of that would make it "slower" than any other protocol going over a TCP socket...
They have long since been shipping Interix:

http://en.wikipedia.org/wiki/Interix
Show HN: A comprehensive critique of your website or app
Sevmek
Vim-signify - my approach of a gutter plugin
This is my version of some kind of git-gutter plugin for Vim; vim-signify.

Features:

- supports git, mercurial, bazaar, subversion, cvs
- pretty well documented
- _everything_ is configurable through variables
- quite fast
- can be toggled on a per-buffer base
- preserving of signs set by other plugins (optional)
- additional line highlighting (optional)

I started writing it 3 days ago, but it's working pretty good for me already. I'd like to get some more feedback now. Thanks in advance.

(Feature requests are feedback, too!)
Facebook Tests New Design
For our cousins across the pond, this is an instance of a type of humour called "Sarcasm", in which you state something directly in order to imply that it is obviously wrong.
Interesting article I think (as someone who already uses Chef).

That said like I commented on your post, create a proper user instead of running as root, really.
"...it demonstrates that even the most hardened of codebases still has security bugs"

Browsers the most hardened codebase? I nearly spilled my coffee ; )

Every single browsers out there (including Chrome) was designed with security as an after-thought.

As for me I browse the Web from Linux, using a throwaway user account which doesn't have Java installed. And that user account is itself "hardened" (e.g. no login shell, specific per user-id firewalling rules, etc.). At this point seen the state of insecurity the Web is in I'll probably go back to the VM route (a browser in a locked down separate user account, but itself running inside a KVM VM).

My definition of an hardened codebase would be something like OpenBSD or OpenSSH or esL4 (in esL4 the code has been verified (using formal provers) to be free of buffer overrun/overflow and whatnots).

What I don't like about your comment is that you consider the current situation to be "acceptable". You apparently do really believe current browsers are "hardened" and that there are people thinking like you is precisely part of the problem.

We can do much better than that.

For a start I'd love to read a rant from Theo de Raadt about what should be done to conceive more secure web browsers.
Right but as soon as the press find out, and they will, that developer account will be banned. Most devs won't see it as worth the risk.
Teenagers and Facebook Pages
Cancer
Are any vendors offering no questions asked X$/0day rewards all year long instead of dedicated events? Seems like it would be a decent move. If the going rate is really in the 50k ballpark why can't say Google offer 10-20k per Chrome exploit?

Their engineers don't make peanuts and the attacks on the software happen regardless. After a year or two you'd probably have a pretty secure system for a reasonable cost.

I don't think there's much negative press involved either if you spin it a la "we have the best security experts in the world attack our software and fix it asap".

+You might pull off a decent talent grab or two as long as you understand how the people would like to work (probably not from a google office)
Show HN: Shop Mobs: Connecting users with similar intents
Explosions in the Sky is fantastic for getting things done. I've written some of my best code to their music.

http://open.spotify.com/track/5uWzSBJKqdSKJ3uMrYYUIT is one of my favorite songs by them.

The Earth Is Not A Cold Dead Place is my favorite album from them.
http://open.spotify.com/album/1JU4XTyTzADBQE1KpM0Wtx
wow! long time has been passed from this :_)
Disney turns away from hand-drawn animation
This happens fairly often: customers will use your product in unexpected ways and sometimes for much better output than you originally thought.
New Sanctions Imposed on North Korea as it Warns of Pre-emptive Nuclear Attack
Crowdfunding Clean Energy
Right now clicking on any theme goes back to the front page, or goes to a blank screen.
I've never understood why the lower income tax allowances and limits were raised instead, so the lower paid people just paid no or less tax.
Arnold Schwarzenegger on finding your passion(from AMA earlier today):
Using the official key in an unofficial client sounds like a problem that will be solved with the legal system, not by increasing the burden on Twitter.
@kevinpfab is right, but it can include other clauses besides just if you go out of business. For instance, a sale of your company could be an escrow worthy problem because the new company may stop development, increase prices, offer a lower SLA, etc
how is this better than keyczar?

keyczar is about to support python 3 (there's a patch) and i was planning to make simple-crypt delegate to keyczar (or just delete the project entirely, since its only reason for existence was nothing better existed on python 3, but people seem to be using it). should i delegate to this instead of keyczar? what is the difference?

http://www.keyczar.org/ https://pypi.python.org/pypi/simple-crypt