skysight-inc/HackerNews huggingface dataset:
> For the same reason that we don't call out to JS to require HTTPS but rather use HSTS, XFO is right way to block CJ.

I think this is the best point in your argument. If you're going to half-assedly block framing (via JS, not using XFO), you will have problems. Either through sandboxed frames, or using XSSAuditor against it, it will break.

Besides this minor issue, there really is no other serious flaw with sandbox framing.
Many people avoid physical health doctors for the same stigma.

Good on you. Spread the healthy attitude to all your friends.
Arguments for Tabs (not spaces) - samholmes
It's a license that requires any changes you make to the code be made available to the public as well as all code that connects to it in related services.

It is a license that touts "ultimate freedom" but the reality is that it removes your freedom to make changes that you would like to keep private.
Resource allocation. And paella.
You're implying that there are always back channels?

What if they could effectively limit the supply of something? Can you buy a live sample of measles?
The huge eye opener for me was when I read that if someone has a habit of crying during stressful work disagreements, and you give them a hard time about it, you are being abusive toward someone's mental challenges, not being a tough businessman.

That really got me thinking about how deeply "aggresive confrontational competition" infects our intuition about the world, even in supposedly collaborative environments.
Carlsberg India Gives Once In a Lifetime Chance To Liverpool FC Fans
Because the alternative to funding Solyndras is clearly wars?

You do realize the disastrous ethanol subsidies were expanded during the Bush years, right? There's a lot of blame to go around for everyone on Capitol Hill.

I don't see a problem with the kind of research Obama wants to fund, but the money should go to universities producing publicly available research.
Probably leftovers from their templating engine?

I wonder if this really matters with gzip. Or at least whether traffic overhead beats one from implementing and using HTML compression.

I bet they have it measured.
Or, they thought the article was interesting, and didn't realize that it had already posted (since he used the new URL). Not everyone is out for karma :).
I recently came across a very naive-looking sample of a pooled GPU-miner being distributed via a purported crack for a certain EA game.

It's ridiculously easy to implement GPU mining if you have any remote execution on a machine.
>Homokov

who's that guy?

>But, most sites don't protect against CJ at all.

This is definitely truth. Sad truth.

>Of the sites that do, as many use XFO (the HTTP Header that denies reframing) as use JS framebusters.

do you have statistics or something? Because I am not sure about this. IMHO, for now, framebreakers are more popular. XFO is still for well educated developers, framebreakers are old-school.

> But that's a red herring in this case; what browser supports H5 Sandboxes but not XFO?

I believe all do support.

> rendering them on a page without losing control of Javascript

can you elaborate this please? Because most people say 'something bad with JS'. SOmething what? What exactly bad is going to happen, besides prompt(1)?

> CJ is an inherently less scary problem than XSS

obviously, but XSS is unrelated threat here (or i missed something)

> Oughtn't we just encourage everyone to set XFO, instead?

I agree with you. NOW there is no way back, but 3 years ago people should have been more careful about security compatibility, IMO
Some of the new HTTP headers are just a mess. Did you know that X-Frame-Options' Allow-From option only allows you to whitelist one URL? Not a domain - a URL. The RFC actually expects you to communicate via another channel to determine whether or not a URL will be allowed to frame your page.

Luckily, this one is still a draft...
this is excellent... lets dig up these cartridges and fix them ;) http://en.wikipedia.org/wiki/Atari_video_game_burial
I've had mailings work best on Saturday at 10pm. Go figure.
Just a couple months ago, I pushed out a major update to classiccars.com (it's still pretty messy) that cleaned up/reduced the url structure.. the old system had like 50 routing rules to support a wide variety of "friendly" urls for searches, and listing display... I reduced that to /listings/find/YEAR(s)/MAKE/MODEL?opts where all search params other than year/make/model were not part of the route, but querystring params... it didn't make sense to support all those routes (not to mention the old results paged via postback). (hint, you can set the page size up to 100 via a ps=100 querystring param, there's a few others not in the UI yet)... the UI is very similar to how it already was.

The new routes make more sense, and are imho more friendly. The same for listings/view/###/STUB though I put the number/id before the stub, it looks a lot better than it did. Also, I put permanent redirects for any old references to the canonical url. It took a bit of work, now some more updates are going in to make the title/description/h1's more friendly. It's more maintainable now, and some very old URLs are still supported.

Currently working on some other modernization bits, which means a lot of the cruft can finally get cleaned out (if a section at a time, slowly).. having a friendly/consistent url stucture is important imho.
This is my new response to anyone who wants their design to "pop".
There's no way that announcement will cause panic and everyone attempting to withdraw their funds.

They are royally fucked.

EDIT: And how exactly do you misplace $700K at such early stages?
alright, let's blame developers! :)

and regards flaws - sandbox could be more tightly coupled with Content security policy. Not a big deal, but posts look really misleading telling "put it in sandbox, well done"
What are the flaws of bitcoin?
On EA, I posted this as a suggestion:
https://news.ycombinator.com/item?id=5352969

Given the old CEO recently left the company, I hope the board is listening.
exactly, and vk.com (biggest social network in europe) is a showcase. They use such framebreaker:

if (parent && parent != window && (browser.msie || browser.opera || browser.mozilla || browser.chrome || browser.safari || browser.iphone)) {
document.getElementsByTagName('body')[0].innerHTML = '';
}

It cannot be bypassed with NoContent trick by the way. Because it removes body, not navigates the parent
Your paragraph about deflation and GDP muddles a few different issues and distracts from your main point. Even if prices drop due to productivity, there is still good reason for monetary inflation, and population growth should drive total GDP growth, or everyone is poorer. But this is really off topic.

I think what you mean is that cost of living should drop each year, and that is a good idea.
Why Clojure for the web? Part 2: Effortless async by design
I disagree with non-traversable.. I think that it's more important to implement proper security... I do 404/410 for documents that are removed, or don't exist yet. Some will 404 unless you're logged in as and admin or the owner, which isn't technically correct, but imho effective.
> One protocol fix that might get the best of both worlds

it would be good unless following fact - many developers DONT follow HTML5 tricks, and vk.com is an example. They rely on framebreakers because it worked once and they DONT expect it to get broken someday.
Even if true, those houses don't move around, get people to grocery stores or jobs, and don't sit on arable land
Talk about the problem, not the solution
Yah I remember seeing that and thinking it was extremely scummy. No one else was complaining though...
Not worth it? If you can make it efficient, you're a millionaire, considering current bitcoin prices. Make any decently popular website, and you have access to thousands of mining computers.
I don't think it's reasonable for anybody to setup a JavaScript playground (same origin) at all. Not a use case for sandbox then
No doubt severely overlapping. I wonder how militsry-induced mental illness compares to naturally occurring.
Journey From DHTML To Ember.js/Angular.js
You're getting way off track here. The assertion was that the government is afraid that it can't stop you from spending bitcoins, the implication being that it can with cash. Bitcoin vs. USD doesn't solve your ability to purchase weaponized measles.
yes lol. design pisses me off. Why didn't they put XFO into Content security policy yet!
I think some of us lament the loss of certain genres. Turn based strategy, flight sims, space sims, turn based RPGS. I stopped playing games in the mid 2000. There haven't really been any games in my favourite genres since then.
How massive tax fraud in Russia is enabled by western countries
> My gut is that two parallel economies is an unstable situation

Parallel economies are not only inevitable, they can be long-term stable whenever you can't deal in some (desirable) goods in the legitimate economy. Black markets are very difficult to root out and always have been.

> the shadow-economy would not receive must traction compared to the legitimized one.

Depends on how essential the black market is to getting what people view as the essentials of life. In middle-class First World countries, it's pretty marginal, because most salarymen don't really want heroin that badly. In the 1970s Soviet Union, if you didn't trade on the black market you simply could not get certain goods Americans would regard as utterly mundane, such as bananas. The USSR had a horrible time with black markets and goods disappearing from store shelves and being hoarded in peoples' apartments.
People intentionally move to SF (and Seattle) because homeless life therr is better than elsewhere: weather and social services.
Is the forbearance agreement the business equivalent of the "Don't Tase Me Bro!!"?
It has been interesting to watch Dr. Raibert's ideas grow. A long time ago there was an interesting debate going on between subsumption architecture that Dr. Brooks was pushing and Dr. Raiberts work (both at MIT). As a robot guy I've been fascinated by both of them, but Raibert's work was hampered by the fact that his creations were only stable when constantly moving and Brook's creations were always stable. The argument went that dynamic stability was so energy inefficient it would not be a good fit for doing locomotion.

The advantage of dynamic stability is of course that your robot is constantly in danger of falling down, that is its natural state, so trying to knock it over doesn't really change what its doing a whole lot.

I did not think I would see dynamic stability in a humanoid shape though (power off condition is laying horizontal :-). Watching it is pretty unnerving. I'm impressed they have it working.
2012.03 Autocom CDP Pro For Cars
The CDP Pro database is translated to several languages.
Autocom uses Original Data from vehicle manufacturers to guarantee the best quality and functionality.
Is immigrating to the US really that hard for foreign entrepreneurs?
I keep reading about the high percentage of tech startups in the US that are founded by foreign entrepreneurs (39% in California). I also keep reading about how hard immigrating to the US is for foreign entrepreneurs - i.e., people without prospective traditional employment. Can somebody explain this apparent contradiction? How is it that so many startups are founded by foreigners if it's so hard for them to stay in the country to do so?

I ask because I'm Canadian and I'd like to look into starting a software/biotech company in the US after college (I've heard about the proposed startup visa, but clearly plenty of foreign entrepreneurs are doing just fine without it).
Yes, I think so, but it would probably be pointless by now, and many would notice.
MOOcs of hazard
Tabs to indent, spaces to align. Displays just fine for everybody.

It drives me up the wall that so many software shops have settled on "spaces for everything".
2045 Initiative
That makes no sense, because homelessness is just one part of poverty. If the upper class don't care about folks making minimum wage and getting killed in gang warfare or Iraq, they wouldn't care if some were homeless.
Tabs for indentation and spaces for line-up is the optimum. There is no reason against tabs except if you're a Python or Haskell programmer.
OK, I'm biting; Using spaces instead of tabs is like using hard coded syntax coloring. I prefer my own color scheme thank you.
Reminds me of the time I worked for one company and prior to going public, we called in some Sarbanes-Oxley consultants to vet us. After a thorough SOX compliance effort (which was ridiculous - one recommendation was "print out all source code and file it"), I showed up one day and an accountant in the corner had disappeared.

Seems that he had a gambling problem, but was allowed to both cut checks and sign them (fall into the GAAP). He embezzled, IIRC, close to one million dollars and was only found due to the SOX compliance effort.
Incarcerated aren't homeless.

And stats about US's horrible mental.health care undermine your claim that mental illness doesn't drive homelessness.
The title was "Indiana Jones and the Saucermen from Mars".
I'm a gamer. I genuinely believe that there's a lot to be learned from games via playing, studying, or building them. I know what it's like to have non-gamers look down at your time gaming and view it as worse than unproductive. However, even when I worked in the game industry, if you tried to tell me that Starcraft mastery adequately demonstrates your performance under pressure in a professional context, I'd laugh in your face.
Horace addresses the mechanism, but does not list the core:

Its about culture- The US is a lead consumer market-Consumer behaviour originates in the US and spreads/mutates to the rest of the world.
The iOS is the most sophisticated computer in the world.
Rest of the world are almost a decade behind in adoption:)

All the points he listed are outcomes of this:
Are you saying mental illness makes someone broken, like a cripple? Foucault! Come quick!

Seriously though, 'there aren't enough jobs' is just a weird thing to say. Aren't enough jobs for what? For everyone to not be homeless?

Let me paint you a picture. You are homeless. At night, when it rains, you get wet. After a day of panhandling, you have $30.

Do you:

1. Buy a meal (loaf of bread and coffee, $4) and save as much as possible for bus fare.

2. Buy a tent, so at least you can stay dry and avoid illness.

3. Buy 2 fifths of rotgut vodka and drink it on the sidewalk.

The problem has absolutely nothing to do with jobs. If you had 5 open jobs for every person in the country, the same people would still be homeless.
You may want to check out this: http://jimulabs.com/
The Practical University
I was for a very long time a tabs supporter and hold out. In fact, this is taken verbatim from my .emacs

(setq-default indent-tabs-mode nil) ;; The Death of a Legend!

I gave up not because anyone had any particularly good arguments, but just because it felt like I was constantly fighting an uphill battle. And now that I've stopped using tabs, I haven't really thought about it for years, which is a teensy bit of stress I don't have to deal with anymore.

Having said that, keep up the good fight.
Show HN: A Boilerplate Generator for OOP JS
Sounds like the writings been on the wall for a while now. They were fined by the CFTC in late 2012 and had to withdraw from the US market for not being a licensed exchange [1].

Most of their customers were in the US so this was a major blow to their business.

I wonder if there's an opportunity here for a Bitcoin based predictions market?

[1] http://motherboard.vice.com/blog/how-the-us-killed-intrade
What are the reasons against tabs for Python programmers?
Shouldn't it also be more noticeable? Quiet spyware can go undetected, but something that's eating up loads of CPU cycles is less likely to do so. That's a good thing.
At one project I instituted a formatting layout that I didn't like but it had one advantage: it was an automated compromise.

My take: I don't give a damn. Whenever I go into a new shop, one of the first things I say is "I don't care what your formatting rules are so long as they're automated". Let the dev write the code as they will, so long as the formatting is automated. Automate, automate, automate. I never want to worry about where my curly braces go, tabs versus spaces, 80 columns, and so on. At my current position, we have a git hook which reformats your code according to standards and the "central" repo will also reformat, in case you disable it locally. All code winds up with a consistent format that no one agrees on, but we never argue about.

No, not everyone will agree on the end result, but it's like worrying about gays in the locker room: grow the f* up. There are important things to worry about, like scalability, separation of concerns, beer.

Combine this with "alias emacs=rm" and your religious wars go away.
"That said, only a moron would use tabs to format their code." (http://www.codinghorror.com/blog/2009/04/death-to-the-space-...)

"In theory, practice and theory are the same. In practice, they are not." That is why most teams (and languages and standards) end up on spaces, spaces work. Tabs become unmitigated clusterfucks unless maintained with the pristine care of a monastery monk.

More (specific) reasons:

#1. Your language, editor, team (with the exception of Go and makefiles) probably specifies not to use tabs.

#2. Once tabs and spaces get intermixed, it is a nightmare and the cleanup only works one way easily (goodbye tabs).

#3. Tabs have an undefined behavior across editors (for better or worse), indent this line, insert X spaces, move to next marked column, other even more creative ones.

#4. Most version control by default does care about whitespace (and should for stuff like Python) -- hence a mixture or auto-conversion situation is nightmarish.

#5. Your code will be displayed in places where the user does not have tab control (web interface, console printout, cat, etc) and then all the "flexibility" goes away.

#6. When your work policy has line length limits, how do you handle it? If you are allowed 79 "chars" per line, can 50 of them be \t chars? How do you handle the 79 char limit if you code with 1 space tabs, and I code with 10 space tabs?

...

#42. Tabs are evil.

EDIT: Seriously, can anyone link me to a major language style guide / standard outside of GoLang and Makefiles that specifies the use of hard tabs?
Haven't used it, but http://betsofbitco.in/ seems to have some traction.
Tesla Supercharger
Whats the economics behind the Supercharger network. Whats Elon Musk up to? Can solar entirely power the automobile?
Exactly. Save itself is the problem. Every change you make should be by default persisted. You shouldn't 'save' a current state, you should make named revisions you can roll back to easily.
> the only people who worry that they're going to look like kids for enjoying it are kids

Exactly. Well, adolescents, really: People who are insulted by being considered childish because they still think they are and they don't want to be. They're trying to transition into the new role of adulthood and confusing them with their former role of child makes them insecure because they think they're failing.

They're also embarrassed by the less self-conscious actions of older people, who are less self-conscious precisely because nobody is going to mistake a 50-year-old for a child.
PEP 8 recommends spaces. And consistency with other projects trumps the better thing.
Cris Cyborg vs Fiona Muxlow - Invicta FC 5
Price Review Computer Laptop
It is a shame you can't access it, it is a good article
You skipped a level. 2 people per room is standard housing limits in most places. A poor family should only need 2 bedrooms and a vasectomy.

There's the really problem: 2 underemployed adults producing 3 or 5 underemployed-to-be children, while resourcr-ful adults shower their resources on 1 or 2 children.
Moot: Forums and commenting re-imagined
Hovercraft Golf Cart - It Makes Sense
> not for some Arrington story

For those missing the reference: https://news.ycombinator.com/item?id=5501832
If you care how big indentation is, and you use github, and you don't like it to be indented 8 spaces, you need to use spaces. It's as simple as that.
> These are partners at venture firms who are 3-5 years into investing their fund, don’t have very strong results so far, and are struggling to raise new funds.

The post is manipulative because it defines zombie VC's as above. However, the data used to arrive at the list does not hold up to the above definition.
Yea, and gay marriage is unthinkable and ... oh my god, I can cherry pick examples too!
i should borrow this text and put it in my blog tagline. as TL;DR.
Clearly this nation can support a few hundred thousand chart-topping rock stars as a solution to homelessness.
This reminds me of a conversation Larry and Sergey had when they had first come up with page rank and were trying to sell it to existing search engines.

The companies complained that their algorithm was too good and that users would leave the search portal too quickly without seeing any advertising.

It was obvious to Page and Brin that this was stupid - pushing them to start Google.
It's saying you tried to push the master branch (`master -> master`) and it was `rejected`. Since he made a bunch of changes to the master branch from another dir, of course his changes are not going to get pushed.
100 sided die probability problem
No, the average and the count are multiplied together to determine he taxable base. The median is irrelevant and is used as a human shield by the 1%.
Digital Information Blog
Seems ok but I would stick with Axure for wireframes and prototyping.
It is well documented that big CEOs and Boards are a back-scratching class that siphon money from public companies with ownership too diffuse to control management.

How much did the last 5 CEOs of Yahoo take home? HP?
Minecraft creator Markus Persson wants you to 'just make games for yourself'
A great UI is invisible
The American Dream is owning a house, not a small island nation.
Www.onojag.com
My Code made it to a Hollywood Movie
"Did you mean this domain?" Auto-correction for the browser's address bar
A tour of the Parallel JS implementation (Part 2) - Baby Steps
Find the best Live Auction in US
The best way to find live auction and public auction in us.
Many upcoming auctions are listed with a minimum bid of $1 and no reserve price. PublicAuctionFinder become the most trusted and safe place to find your local auction, thank you to our customers for leaving 5star positive feedback .
Mark Zuckerberg's First Website
The Best Car Auction
Buy cheap cars from the best PublicAuctionFinder in US.
Performance of Rust and Dart in Sudoku Solving
I mean isnt this revolutionary? Why wouldnt Apple/Google Buy/integrate Tesla Motors
http://www.teslamotors.com/goelectric#savings
Why would unemployment understaff business? Unemployment means all the jobs are taken.

Either there is enough wealth in total, and taxes can fix the problem , or there is not enough wealth, and everyone is doomed.
View it directly at AngelFire: http://www.angelfire.com/ny/mez51/

The first website I ever made was on Geocities and dedicated to Pimpbot 5000 from Conan O'Brien. The site even had downloadable .wav sound files. I created it using a beta of Microsoft's first version of FrontPage, which Microsoft sent me on a CD-R as part of their beta program back in 1996 right after MS acquired Vermeer.

And how did I get on that FrontPage beta program? I sent an email to Brad Silverberg (bradsi) at Microsoft asking to get on some beta programs. He actually responded to my email and said he'd see what he could do.
Are you able to discuss in more detail what exactly helped find him?
All you need are shaders to do gpu computation.
Welcome to the People Party
Get in an electronics "expert" they know what component smells like what :)