skysight-inc/HackerNews huggingface dataset:
Google doesn't need to officially fork WebKit, it can keep these features in Chromium and not push them into WebKit - like many other features, including the one you mentioned (Dart support that Apple rejected). But Chrome is still a major implementation, it doesn't have to get into WebKit or not (for standardization purposes that we are discussing here).
Please tell me where you work that $144,000 isn't an obscenely large salary. He doesn't live in San Francisco or Manhattan or London, he lives in Texarkana where the cost of living is a substantial percentage below the US average.[0] I have no doubt that you can live well in that area on 1/3 of what he's asking.

I'm not saying the guy should work for peanuts or that people who work on F/OSS should do so with no financial upside, but let's stop pretending that $12,000 in a month is a normal salary or something that doesn't need at least some justification. Clearly people think it's worth it and that's great, but the whole tone of "I have $12,000 and now I can afford to work on this for a month" just makes me sick to my stomach.

[0] http://www.bestplaces.net/cost_of_living/city/texas/texarkan...
Hi Maffy, glad you had a great time. We're working on the 2 minute limit rule and some creative ways to speed up demos. We hate ushering people off-stage when they've worked so hard and yammer about on the demo... alas it is something we need to do though.
Smells of another scam
fixed that with correct link
How to Write a Sales Proposal in 6 Easy Steps
Right up until that central bank wipes out the middle class...

I do love a good bit of hyperbole!
I'm not really sure that's happened, has it? In fact it looks to me like the central banks of the world have tried their darnedest not to let their respective currencies collapse, and mostly to good effect.

I certainly wouldn't argue that every fiscal decision made by the powers that be is a good one, or even that they're overall doing a great job. I still prefer them over a currency where there is no ability to do this.
The definition of the phrase ("An arrangement or understanding which is based upon the trust of both or all parties, rather than being legally binding") doesn't specify a particular gender, though a word in the phrase can. Taking the phrase in the spirit it's intended would lead one not to consider it sexist, though if you take the position that any mention of sex (or any reference to old-world patriarchy) in speech is inherently wrong we'd be here all day.
And it is fixed now.
Reminds? From a cursory glance this IS RoboCode, just using JS instead.

In my first year CPSC classes I had an awesome prof who made learning fun. Rather than program boring text based games like tic-tac-toe we instead learned Java with projects such as RoboCode && Env3d (http://env3d.org/beta/showcase).

Great to see RoboCode for JS now too!
Great job! I think other analytics platforms will start to follow suit as more people start to realise that it's cheap enough to just mercilessly capture every user event. The UI looks beautiful and seems very intuitive too.
Why we're moving away from Ember.js
DoA!
Video Friday: Robots That Fold, Robots That Drive, Robots That Drink
MVCC part 1: an overview
IPhone 5 Audio Quality Measurements
Silk Road: the online drug marketplace that officials seem powerless to stop
No the author seems to indicate that it was on their application code and an attacker was able to get OS access, and the attacker subsequently replaced the ssh service with one that instead ignores login attempts and harvests the username/password pairs.

It seems to have been a coincidence that their Jenkins service was not secured.
This is a pretty awful "announcement". It doesn't tell you what Openbeta is or why I should care. I had to click through to a link to find out whether I cared about it or not (and I don't).

Hire a better press release person, Betaworks.
What do Angel Investors do all day?
The demo page (https://heapanalytics.com/dashboard/demo) fails in IE8.

Is it just me or IE8 is just not considered by web startups anymore ? Sorry to deviate a little but every time I try to look at a "Show HN" in IE8 (work computer), it fails for about 85% of the time. I could understand that some startups heavily depend on latest browsers but what about others ?
What customers say the want is not what they really want
Show HN: An Arabic Alphabet iPhone/iPad app
You could split the stream into N chunks. Every time you watch the movie, M of them are selected and fudged just a little bit. Since M << N, this can be done in real time. The next user sees the same chunks you saw, except that some new chunks have been fudged also.
Thus the movie slowly drifts away from the original. To counteract this, fudges are more likely to carry the chunk towards the original then away from it.
This is what I came up with in 5 min, so there might be problems with the approach.
Adding:

- Separate the controls for resizing and rotating an image. I don't want to be resizing and rotating at the same time.
Whilst I think that the Padrino framework is an excellent effort, I would like to remind everyone (chiefly the project organisers) that as things stand, the framework has no meaningful notion of security for the admin interface.

I flagged this up about two years ago, now, but stopped using the framework shortly thereafter and never pushed any fixes of my own. The complete lack of meaningful authentication appears to still be there all this time later.

For reference, see:

https://github.com/padrino/padrino-framework/issues/384

and

http://tkcs.in/Nlrc

Though I would hope that Padrino admin isn't in fact being used in production by anybody who hasn't read the source, a quick search at the time showed otherwise.
Those are great questions, actually. We're all already very dependent on technology right now, so I don't see a problem with going even further. I'm a weirdo transhumanist though. :)
http://biggestpricedrop.com

I created the site because I've always wanted to sort through products by how much they've dropped in price (in like the last day or two)... Does anyone know if another site like this exists? I think it's unique because it tracks the deltas of prices. Useful if you want to know what just went on sale.
Currently, I get the prices from feeds from the stores but I am working on a scraper to get even faster updates and better in/out of stock data. Is there perhaps another niche where my tool can be used? Real estate? Technology goods (like bensbargains.net?
Thanks, any suggestions/feedback would be greatly appreciated!

david
Great, thanks. Time to install, so insanely timely for our needs it's scary.
Dumb question but how does this work?

Since Heap captures everything from day 1, all analysis is automatically retroactive. There's no need to wait days for data to accumulate.

So it studies my server's web logs? I'm confused about what this means.
Poor man's analytics: events, client side, server side, whatever. Set up a separate DB with one big table, many columns for properties. One server call to write an event (a row), one ajax call to write from the client, throw it wherever you need.
A bit of good old simple SQL for queries and reporting, and you are done.
Thanks, I actually think the same of you, I'm one of few lovers of callbacks and reactor pattern so, stay tuned ;)
That's why I said I have no time for the language police!

I find it an interesting phrase to have chosen for an article title in light of what the recent furore is all about, but not an offensive one. Then again I'm rather hard to offend.
I actually tried to imagine a hole-based knowledge graph... it sounds really interesting.
What kind of things are you doing with C++? Also, what do you consider a "good C++ engineer"? I'm pretty sure I would fail a C++ interview requiring me to know trivia about obscure parts of the language, yet I do use C++ successfully almost every day.
IBM moves toward post-silicon transistor
Professors of Online Courses Don’t Think Their Students Deserve Credit
A more detailed introduction to NuoDB’s cache
As a long-time user of Node, I'm curious - Why Node? Why over Python or Ruby?
Yes, you make some good points. Its not that long ago that you couldn't see further than 100 metres in London though, which last time I checked was part of Britain (different and all as it is from the rest of the island).

I suppose the issue is that most major powers do a lot of shady stuff, and it can be difficult for any of us to think objectively on these matters. With regard to famine and poverty, it wasn't all that long ago that people starved in the islands of Great Britain and Ireland while the smaller island was still a net food exporter.

I don't think that Britain is particularly repressive right now (except for all the CCTV's) while I do think China is, but it takes a complete ignorance of history not to realise that once upon a time, these roles were reversed.

Also, hooray for Ubuntu!
And please, do correct me if I'm wrong (if this has in any way been fixed since).
Why don't you write markdown and use pandoc to pump out rst?

I find that markdown has no real standard and lacing it for documentation support is kind of hacked on vs rst which has first class support for directives.

I'd love to discuss how I can simplify balanced-docs, I want to be able to make it a service on its own.

Do you have some time to talk?
NASpberry PI: Turn your Raspberry Pi into a home media and file server
I suggest to test the text on orange button. From "Request an invite" to:

"Get exclusive access"

"Learn more"

"Take a better look"

"Find why N is for you"

"Join our FREE client club."

"Get a FREE account" Note that free account != free product. Just give then login details.
It means that if you start tracking on day X, then on day Y you decide you want to generate a certain report, the data is already there, you don't have to start tracking anything new.
If everyone is wearing cameras all the time with the video being constantly broadcast publicly to the internet, then we get some weird effects along with the loss of privacy. Things get even weirder when we apply interesting algorithms to the video feeds. Where is Bob? Where has Bob been all day? How honest is Bob? Is Bob someone you can do business with?

Society is going to change in ways I can't imagine. We live in interesting times.
I love the concept of Posthaven because it says that a huge exit doesn't have to be the end game for every startup.

They've made a promise to their users to live by a sustainable business model instead of shooting the moon. Writing should be permanent, but the model of startups is one that favors the temporary. This seems like a logical next step.
I assume when you put the JS on the page, it tracks everything. Later, you define "symbols" and that gives you "retroactive" analysis.
He was wasted at Facebook. Loved his work till he went there and was disappointed someone with so much potential ended up in that talent black hole of a company
Op here, we're pretty sure its the Galaxy S IV. The model number, which is what we use to identify it, is the SGH-M919 and all other specs e.g. the screen resolution match up to the S IV, rather than the S III. The other comment on it being an engineering device and the chipset for commercial launch is a fair point though.
Tekacs:

1) We use bcrypt: https://github.com/padrino/padrino-framework/blob/master/pad...

2) Auth is an API we generate that for YOU, but you can change the code generated to fit your needs.
Maybe I'm just forgetting the pain of doing this, as it was so long ago, but here's my general remembrances:

1) Call your ISP and ask for a "business" account with static IP. This will cost more, but to some, it's a privilege worth paying for.

2) Setup a spare computer with $OSS_OS_OF_YOUR_CHOICE running a web server and put in the numbers your ISP tells you.

3) You're done.

Of course, it'd be nice if you would harden the server (maybe start with a hardened distro) and have email as well as a domain name, but those aren't that complicated these days either (and can usually be outsourced if you don't really care). Heck, you can skip all this and pay under $10/month for a web server of your own (virtualized of course).
Once someone has preemptively labeled anything you might say as "dogma", there is no argument. I don't believe in drinking from poisoned wells.
Hi r25,

Greg from AngelHack here. The equity stake we take is 2%. This allows us to be sustainable and continue building this program. This accelerator (should be called a pre-accelerator), is designed to get people connected to the Valley from around the world and get them pre-pared for entering legit programs like Y-Combinator. We'll never be better than them, nor are we trying to be. We're only trying to assist you get to the glory land.

If you can get ready for these programs without our help, then you're on the right track. Most of the companies that come out from our hackathons are 2-3 days old and need A LOT of guidance. Technically they're very strong, but they need support with legal issues, founder issues, idea validation, product/market fit, viral engagement loops, guerrilla warfare marketing tactics, networking and pitch help, and help raising funding. We help them get through all that.
I don't think anyone is concerned about the CPU overhead. (Also, let's not talk about measuring things without defining exactly what was measured. On a blank page I'm sure your JS runs great.)

How does it affect network performance? If I click a link and it takes me to another page, how do you track that?
I suppose I'm using a more broad definition of the word than you are. Also, notice that I'm not using the term Luddite. The wikipedia article on Neo-Luddism seems to agree with my definition as well.

Though I do see mature AR tech as something which certainly will put people out of some jobs if they refuse to embrace it.
Expanding Universal Analytics into Public Beta
DRM itself is objectionable for different reasons than the absurdity of their current proposal.

They propose to run third-party binary blobs with OS-level hardware access -- all the security nightmares of Flash/Java plug-ins but even worse.
the one that startled me was "can only be corrected when Google re-indexes (whatever that means) the information that will update the search". it would never have struck me that "reindex" was an overly jargonny term, but in retrospect i guess it is.
Walled Gardens – escape vs. voluntary captivity
"Paintable" Checkboxes
The job someone earns at the end isn't discomforting, but getting to the point where you deserve that job based on merit and acquired skills is more discomforting. A four year engineering degree is far more "discomforting" than a four year sociology degree.
Having admittedly not descended very deeply into the rules regarding HTTP caching, why should it be harder to cache based on the cross-section of the URL and the Accept-Header and not simply upon the URL?

I am not certain which method I prefer more honestly, and could fall either way. The comment that it was nice in theory but didn't work in practice seems to more point to not following the spec as it was written then a problem with the spec itself.
Will Big Data finally turn CRM into something truly valuable?
So I've been poking around the upgrade instructions for moving to gitlab-shell [1] and I notice you ask the user to do this:

sudo chsh -s /bin/bash git

I don't see it changing to anything else later in the instructions.

Isn't that a huge security downgrade from using gitolite? Am I missing something?

[1] https://github.com/gitlabhq/gitlabhq/wiki/From-4.2-to-5.0
> So how come Netflix has customers? Either you're wrong or some piece of the puzzle is missing (if so, what?)

Convenience.
Too true! But in this case, people were putting their eggs in a basket held by Google; they could hold the basket themselves, even though it would then still be one basket.
The company I work for was disrupted by SendGrid's downtime, so this very question was something I was actually thinking about. I'm on the fence about this.

One of my former bosses told me that you never take advantage of a competitor's bad press, because who knows when it will be you that get's the bad press. It makes sense, because you don't want to look opportunistic on someone else's bad luck.

But if you're a startup, and you need to get some traction against a competitor, it might be a good way to get some new customers. You better be able to live up to your claims though otherwise your entire credibility is in question.
Hi SCC!

You are correct, I can't code (yet!). But all my best friends are coders and I think on the same wave-length. Starting this year we'll be building out a network of code schools, which I hope to participate in. In the meantime, I'm happy adding value to your community wherever I can.
Saying that other people had to work harder than you is not the same as saying you are lazy. It sounds like you're projecting.
Means-tested social assistance is now a vestigial remnant of an economy strictly dependent upon labor as its primary input for growth. As the share of economic inputs tips increasingly in favor of capital (via automation), most laborers will steadily become unemployable at a subsistence-level minimum wage. As a result, we will see dependence and abuses of means-tested social welfare by these laborers who can no longer participate in the market.

The only long term solution is a basic income system, which rewards consumption and allows the market to continuously reward innovation and efficiency. Without a redistribution mechanism to fuel consumption, the market collapses entirely as wealth is further concentrated.

Further reading:

1. http://www.naturalfinance.net/2013/02/nearly-all-of-us-suppo...

2. http://amzn.com/B005WTR4ZI

3. http://amzn.com/B002S0NITU
> I've heard from many women in the last few days that they are, in fact, made uncomfortable by the overt sexualization that happens in programmer culture.

If straight guys in SF would like to get some perspective on this, imagine working 8 hours a day in The Castro in one of the more highly sexually charged environments there. I bet you'd definitely notice that. Being there also gives you a different perspective on what you thought were innocuous things like posters, let me tell you.
We get to see a an interesting experiment, that was previously only a thought-experiment. The classic "market share" argument gets put to the test: "Windows only attracts malware because Windows runs on the most computers."

If Microsoft and Windows stalwarts believe in that strongly enough, they should be in favor of seeing PRC adopt Linux.
It seems it just sends every single event to the server and lets you filter later.
Does Heap track event streams like mouse position and scrolling? The storage overhead would be significantly larger than instantaneous events like clicks, but this data would be interesting.
There's also Git-Annex assistant: http://git-annex.branchable.com/assistant/
You shouldn't even really need a static IP. I run mine with a dynamic IP with dyndns very successfully.
I order from restaurants online, if they have the service. And call others. Is there a benefit to using this service? If the benefit is finding restaurants, google can show restaurants near me.

I would imagine if you deal directly with restaurant, and they make a mistake, it's easier to solve it than if there's a third party in the middle.
Hello, Dropbox
That sounds really interesting. Could you describe how you do that a bit more?
Perhaps most relevant to this issues is the social networking sites that are large data silos owned by private companies. There is much movement towards a more open, decentralized, and federated social web. Indie Web Camp is an interesting group of people (which I proudly belong to) who care about and are building tools to this pursuit - http://indiewebcamp.com
"Your dongle: Do Not Want!"

Probably more realistic. Probably covers a larger % of cases.
Google Keep? It'll probably be with us until March 2017 - on average
Build Node-JS expert systems with node-CLIPS
CLIPS, an acronym for "C Language Integrated Production System" is a fast, efficient and absolutely free tool for building expert systems. Now, we bring that goodness to Node-js.
Actually the description is apt -- the proposal is when a web page loads then a binary blob (that has OS-level hardware access) will be invoked. It would be as simple as including a highly-insecure JS file rather than installing a browser add-on/plug-in/extension/whatever.

The security risks cause me imagine EME news that makes the recent Java 0-day news frighteningly tame.
First thing I thought while reading this kickstarter was "Why re-invent South.. it's already perfect!". I changed my mind when I understood who the author was. To be honest, I don't fully understand why the new version is needed.. we should just include South in the Django core, problem solved. But hey, I'm no expert in schema migration and I'm happy to help the author moves forward with his project. The only complain I had with south was that it wasn't installed by default ;-)
I agree that the GUI is the likely culprit.

Though, as far as hacking goes, I'd almost prefer a BASIC prompt [or `irb`, `idle`, or any other number of modern REPLs] as opposed to a shell prompt.

I can hack away at bash scripts... but bash just doesn't seem as warm and inviting as BASIC was.

I think part of that is: shells are _primarily_ an interface to your filesystem. They offer IO redirection and the ability to run arbitrary executables.

While their scripting facilities are certainly "complete", and plenty usable, I'd disagree that they're designed for it.

When I fudge my fingers writing some Ruby, Go, Python, or Perl, the compiler or interpreter is usually pretty helpful in guiding me to my mistake. Often times it's also helpful in _suggesting_ the means to fix that mistake.

When shell scripting goes _wrong_, (as it often _will_ for a complete novice), I don't think the shell is as helpful in correcting the mistake.

That's my $.02 anyways.
Huzzah, with regards to the point of BCrypt (presumably the second link goes to currently dead, but left-in-the-codebase helpers).

On the other hand, the first (original) point (the GitHub issue) still stands to this day - it would make sense to either improve the default implementation of Auth to be usable (as per most every sane framework out there) or to provide a warning somewhere (at least on the Padrino guide for admin & auth?) would it not?
I wish there was more information about "where" they're going now. They imply that it's not Ember that's broken rather Ember isn't done and the problems are hard that Ember is trying to solve. So I'd ask - why not stay with Ember and help solve the hard problems? Or did you find another technology that "solved" it?
3) session_id is different from session_secret (generated also for you with SecureRandom, but also there you can change it)
pricing seems high to me, unless I'm thinking about it in the wrong way. Is Unique Users/month equivalent to the number google analytics reports for 'Unique Visitors' over a 30 day span? I guess the site I'd consider using this on isn't really in your target market (1.8M uniques in the past month, not enough revenue to make the idea of dropping $2k+/mo on analytics attractive)
Realtime Conference Europe: sponsored by Google
The majority of cancer research is "irrelevant".
You're serious? Maybe in major city centers, but in the suburbs or rural areas, who's doing the surveilling?

I don't consider an occasional (or even regular) satellite imaging and GMaps vans to be remotely as invasive as a random person walking down the street with their Glass recording me trying to keep my crying babies happy in the stroller.
That may be true from a scalability and maintenance perspective. I don't see how those criticisms relate to security. Automatically-maintained hosts are no less subject to exploit...
I moved my blogs over the Posthaven and I have to say the import worked quite nicely.

Still waiting on custom styling before switching the domains over though. Hope that happens before April 30th. Also hope they do a better job of Markdown than Posterous.