skysight-inc/HackerNews huggingface dataset:
Ask HN: Good books on managing developers for non-developers?
Could anybody recommend any well-written books to help a non-technical boss manage developers?

I'm thinking something that helps them better understand the developer mindset, sets out some of the common pitfalls (like feature creep, etc.), you get the idea.
if one builds an "app" , since it uses a "webview" inside a native application , it is always "native" ( except for firefox and likes os where the browser is the "os" ). Phonegap and likes use native code so one can bundle html+js into a native app.

I tell my clients , instead of using a wrapper , to build a webapp directly. most of the LOB-apps require an internet connection anyway , and things like camera can be accessed from the browser now , on most mobile os. And it is easy to explain clients how to bookmark a webapp to the home screen.

packaged webapps are overrated imho , in most cases a webapp makes more sense.
Because they're big, and have the money to sink into something that's still a bit better at the margin?
no but i guess it takes time to find out, and the studies are often financed by the companies like monsanto them selves.

Which is not to say that they publish ALL these studies, they are not legally bound to.

Shame.
sqrt(x)+sqrt(y)=C
I said "like" washing them - I don't know what the step entails.
Hi there, thanks for taking the time to reply. I appreciate the effort involved and apologise for my harsh words - I've just been a little frustrated as it's getting to be a weekly occurrence that some company loses my data / password / credit card details.
It doesn't hold. Pick (0,1), (0,2), (0,3), (0,4), (0,5) on the plane z = 0
The materials and methods section should contain such steps. Washing and peeling was not indicated.
Mythical Man month and The phoenix Project Book.
Otherwise, the best is to have faithful discussions with your lead developer.
I would. I only eat "non-organic" food, crop yields are much higher with artificial fertilizers and pesticides. I think it is extremely irresponsible not to do this given how much land is used for agriculture and how many people in the world do not have enough good food to eat.
I'm not saying Monsanto has done anything at all, but it would be odd if they didn't tweak their product a little.
or if you click the "about fish" on the top right of the kitchen roll.
I think this would be a humorous list to have around, if only to find out what people are being offended by these days.

I run a slang dictionary website where visitors can score how offensive they find the terms. The 100 most offensive are listed here:

http://onlineslangdictionary.com/lists/most-vulgar-words/

It's not multilingual and not open source, but it does capture some of the "state of the art" of dirty words.
Obviously it is user agent failure. Why would you want transmit private information clear text?

Edit: File bug to browser makers.
Personally use http proxy to remove auth and cookies from insecure traffic.
This is great. I have always thought that porn websites miss the mark both in 1) user friendliness and in 2) quality content. This at least fixes #1 and makes browsing a pleasant experience. Second step is to optimize the site for mobile, because the user will likely not be at their chairs.

As for content - my 2 cents is that society we need better actors and directors in this area. Just look at sex scenes in Weeds, Black Swan, or Shame - much less explicit skin compared to porn, but a lot sexier nonetheless. Frankly I am surprised that content is not better, with so much demand and money in the business.
The proper response should be to expire the insecurely-sent passwords.
Interesting numbers. Why do you think that Java developers are the most likely to look for other languages?
Show HN: Antr - An easy to use asynchronous Nodejs test runner
>> site’s clean design

I'm not sure about this one. The design seems great if you don't mind browsing, but I had a difficult time sticking with specific macro- and micro- categories.

>> Half of the Internet-connected populous watches porn.

While this might be true, I've always thought this was a tad misleading. While half of all internet users watching a 3 minute video for giggles is one thing, this stat seems to suggest that 50% of all people go the internet to rub one off and do it everyday. This is sort of like saying "50% of all Americans saw Titanic."* This suggests that we all enjoyed it, willingly watched it, and didn't walk out half way through, none of which is true.

* I don't know the real statistic.
Which is completely true: bitcoin has no intrinsic value (as do all fiat currencies).
Result of study: "Pesticdes harm the health of insects".
OK, bear with me as we get slightly contrived here...(and deviate a little from my earlier, somewhat less thought out example).

Say your workload has some inherent requirement for random (throughout its entire execution) access to a dataset of size N. If you run it on a single processor with a cache of size N/2, you'll see a lot of cache misses that end up getting serviced from the next level in the storage hierarchy, slowing down execution a lot. If you add another processor with another N/2 units of cache, they'll both still see about the same cache miss rate, but cache misses then don't necessarily have to be satisfied from the next level down -- they can instead (at least some of the time) be serviced from the other processor's cache, which is likely to be significantly faster (whether you're talking about CPU caches relative to DRAM in an SMP system or memory relative to disk between two separate compute nodes over a network link).

For a more concrete example somewhat related (though not entirely congruent) to the above scenario, see http://www.ece.cmu.edu/~ece845/docs/lardpaper.pdf (page 211).
This reminds me of Lorenzeo Von Matterhorn: http://www.lorenzovonmatterhorn.com/

The premise of the article is thought-provoking, but slightly invalid. A few things:

- Like all fakes, they eventually get caught.

- Maintaining fame is a lifelong journey.

- As places like twitter get more and more saturated the less likely "10,000+" followers will matter.

- You only have one thing in this world, your reputation. If you screw it up by buying fake followers, you have 10 times more of the work you require to naturally build reputation in order to climb out of the hole you've put yourself in.

What would be REALLY interesting is to see what kind of money Santiago Swallow generated from his "internet fame".
A few months ago, we managed to get a former Lead Software Engineer of Manwin (YouPorn & Co) to give a talk at a Paris Hackers meetup. If I remember well, he told us that the amount of their funding has never been matched by a company covered on Techcrunch.
One word to describe Samsungs actions Unethical.

This reminds me somehow of when Apple was fixing the reception bars to show more coverage than there actually were on the iPhones.
Isn't this is a problem with the client, curl in this case? According to the spec:

> HTTP provides a simple challenge-response authentication mechanism which may be used by a server to challenge a client request and by a client to provide authentication information.

The client should make two requests. The first with no credentials to see if the resource is protected (the challenge part). The server will then respond with a 401 Unauthorised status and a WWW-Authenticate header indicating what authentication to use. The client will then make another request with the given authentication.

The insecurity is caused by curl not doing this challenge response, it is just sending the credentials straight away.
"The law of minimalism" was recently changed to "law of responsiveness":

https://github.com/fish-shell/fish-shell/issues/612
Is this a hypothetical question? What kind of demands/exceptions are we talking about here?
I don't get it, what is the economics of this thing? I've looked through the site and haven't found any affiliate links or ads (bread and butter of free porn sites). How does this work?
This is complicated and will probably always be the area that is most prone to critique. The authors of the report put some effort to explain their methods - see p. 3.2.2, Valuation, pages 18-27 of the report.

They seem to have used abatement costs (how much for removing the damage?) where available. For other factors like air pollution, estimates on increased health costs, crops, water, increased corrosion, etc. were used.

IMHO the most tricky is the part on "opportunity costs" of things like land use - it's hard to put an uncontroversial price tag on the fact that you cannot go hiking on parts of land used by some industries.
I am coming! It will be good if we start speaking about the agenda.
As I said in the comment you're replying to, that's a terrible idea. For, well, the reasons I gave in the comment you're replying to.

It's the same reason that Unions are such a bad idea for professions with wide variation in individual skill (such as software developers). I (and likely you) don't want to be lumped in with whatever the "average" worker of my years experience and skillset is making or able to negotiate. Unless you're in the bottom 50th percentile, you can do better on the open market.

To use your example, the system you advocate would ensure that you were earning the same as that no-talent clown on the next team. Me, I'd prefer to make twice his salary.
I like HTTP APIs that use basic auth over SSL. Why? Because as the blogpost demonstrates nicely, curl is a wonderful tool to test, demo and debug things.

As soon as you introduce e.g. MACs to the mix, you can forget about most unix-y commandline tools.

I think we can all agree that there are better options when it comes to authentication, but I'd rather have something I can work with easily than worry about that tiny amount of possible "plain http pre redirect" mistakes.

What about using http digest auth as a middle ground? It's still curl compatible and a tiny bit more secure.
How I Sold Out the Lean Idea Book in 24h
ロエベ (loewe)の店舗、販売店情報
大人気 loewe ロエベ、ロエベ アマソナ，loewe 財布 店舗， 財布 ブランド 新作販売- brandworldjp.com。
Most probably because Java is verbose and does not support some simple concepts like functions.
【miu miu】ミュウミュウTOP｜miu miu 財布公式通販
超高品質miu miu 財布、大幅な値引きのすべての種類を提供する。正規ミュウミュウアウトレット専門店，品質保証！
We'd also spell it "pædophile" just to make sure you understand Unicode...
Replace all comments with: Use web2py instead of django
They seem to continuously invent new things to mail you about, as often as possible, which you then continuously have to uncheck on the site.

We can argue about definitions but in my mind LinkedIn are definitely spammers, that are now only tolerated because the site is too popular for jobs (especially if you're a contractor).

They didn't use to be like this, but they now have the questionable distinction of being the nr.1. deliverer of junk in my mailbox.
I've made this comment here before, but the possibility of this happening concerns me. The 51% attack is a known potential issue of Bitcoin, but the more subtle problem is that Bitcoin is essentially a sort of democracy where voting power is proportional to computing power. The miners collectively have the power to change the way Bitcoin works, and it's up to them to not abuse that power (although Bitcoin would quickly drop in value if that power was abused).

This matters for decisions like blacklisting stolen Bitcoins, because it causes deflationary pressure, making all future Bitcoins mined more valuable. Note that about half of all Bitcoins are yet to be mined, and they will all start out in the wallets of miners.
it depends. personnaly , i prefer the mobile websites when available.
> What happened to Japan's electronic giants? I can't speak for all of them but Sony started blatantly chasing money. I get that companies exist to make money but, for crying out loud, don't make it so obvious that you're only out for money.

Have you seen the losses that Sony has made over the past decade? They are pretty desperate and need to chase money. It isn't like they have massive margins.

They main problem is that they are amateurs at chasing money compared to companies like MS.
What would then prevent a small number of players with a large (near majority?) number of coins going from miner to miner requesting a "buy-in" to prevent them from being blacklisted? It seems like this sort of behavior (unless totally abhorred by the community) could very quickly poison it.
Apple Release Notes I'd Love To See
I'm rabidly anti-spam, to the extent of hosting and running my own mail server just so I have more control over my MX, and even I don't think that!
Ask HN: Good getting started user tutorials?
Do you know some good getting started tutorials after signing up for a service? I was thinking of implementing something like this from LinkedIn: http://dl.dropbox.com/u/7398005/Screen%20Shot%202013-04-18%20at%2011.50.29%20AM.png

Do you have any other good best practices?

cheers
PROPOSTE DI NUOVE LEGGI
This article highlights an important issue. But closing port 80 is sufficient to address this problem. Having considered this article, I think I would still design an API to use HTTPS only, with port 80 closed, with Basic Auth. There's no security problem then, and it's a whole lot easier to manage with existing tools.

(eg, as rb2k_ points out, it makes it easy to use curl to debug things).
Well, you have five integer points on the same line.
Yes, a ridiculous conspiracy theory is the most likely explainaition.
TechStars London offers Visa to entrepreneurs from anywhere in the world
This is an important issue, but as the article says, Auth Basic over SSL is perfectly secure (if you don't redirect 80 to 443 of course). And since it is so simple to set up and use, I can see why some providers would use it (I do for example).

Summary of the article: http://tldr.io/tldrs/516fc7e340d4a84c4100020e/why-the-hell-d...
Some web apps don't return 401 Unauthorized. They simply display different content when there's no authentication information.
Do we have enough writing from Satoshi to try to correlate language/linguistic patterns against known actors in the field of cryptography?
Elementary Statistics - free online course from San Hose State Uni/Udacity
Chat Heads: jailbreak tweak puts Facebook Messenger all over your iPhone
I agree with you and rb2k_ as it says in the post. HMAC-SHA is suggested for vendors adamant (Stripe) about listening on port 80 on their API host.
Good story - shows how you could easily test your business ideas without spending hugh money.
I predict tough times for these guys. I remember when Zivity launched as the last "Venture Capital funded porn startup". Shortly afterwards the team dissolved, they gave back back most of the funding because they agreed with the investors that it was never going to be big and the shoestring team that remained reinvented the site as (as far as I can see) a niche, subscription site.

I also think there are some warning bells in the Techcrunch article:

>"Internet porn sites are still shameful artifacts of a decade past — from when the Internet was a collection of websites featuring low-resolution images and oversized banner ads"

You should always be very careful when labelling a sophisticated and fast-moving industry as out-dated as the accusation can come straight back at you. The current sites could be better designed but frankly they are not bad and represent huge technical feats, streaming massive amounts of video to huge numbers of people. Since what they give out is free and they've been going for as long as YouTube I think it's fair to conclude that they're monetising that content effectively via advertising.

I'd be very surprised if this is an industry which can be won by design improvements. I think there are largely two types of company 1) the free sites who generate most of their cash from lead gen and advertising 2) the subscription sites who create content that's sufficiently high quality or niche that people will pay for it. The latter sites are the revenue stream for the former.

Paintbottle looks to me like it's going to catch itself in between these two models. I would guess it's going to struggle as a free site (since it doesn't have any ads) and will also struggle as a paid site because it's not sufficiently niche and its funding expectations may preclude the types of revenues it could viably make. The sooner it figures out which one it actually is the more likely it is to succeed.
HTTP Basic Auth is actually a great solution as long as you've blocked non-SSL traffic, so I half-agree with you. Absolutely close port 80 so it's not possible to accidentally attempt basic auth with the server in the clear.

The bit I disagree with is this:

As well as being tremendously simple, HTTP Basic by itself is also tremendously insecure, i.e. it is implemented by simply Base64 encoding the username and password concatenated with a colon “:” character. It then follows that HTTP Basic should only be used, if at all, over securely encrypted connections.

I agree - HTTP Basic is…well, basic. But you imply that even over SSL, HTTP Basic Auth is only marginally acceptable, and that's not the case. Everything you do securely online is transmitted in plaintext behind SSL. If a vanilla API key behind SSL is barely secure, you're pretty much hosed.
Users Stay Longer on Tumblr Than Facebook, Says David Karp
Also how they're ripened (I believe you can change the colour of the tomato skin without allowing it to ripen), and that our sense of taste is strongly linked to our sense of smell - once you've coated a lemon in wax, it stops smelling like a lemon.
Great TL;DR. Is that algorithmically generated or by a human?
Yes or probably thousands of other transactions for some or all of the value of these wallet(s), but the real question is there a secure way to get most/all of the value out without revealing enough information to leak his/her/their identity?
The real question is why is a non-developer or someone that has no experience with development managing developers? I would not work for a company if my manager did not write code at one point in his career.
They do that in Ontario (and possibly other jurisdictions), but only with Public employees and only over $100,000.

The idea is that "my taxes pay your salary", so the public has a right to know in that situation.

In the case of a private company, it's confidential corporate information. Publicly owned companies have their own reporting rules (generally only requiring disclosure for officers).
I don't imply or perhaps did not mean to imply this.
Apartment in Yerevan -  Amiryan street
This 60 sq.m apartment is neighboring Armenia Marriott Hotel on the Republic Square, within 3-4 minutes of walking distance from the Government and Business major offices, The UN, The World Bank, HSBC bank, National Art Gallery and the Museum of History of Armenia.
Because I need the user's password in plaintext for example.
fish 2 pacakges (including debs) are already available: http://download.opensuse.org/repositories/home:/siteshwar/ but I would prefer to have an APT conf line too :-)
Their marketing is quite aggressive (I have been receiving "Last month to get Linkedin Premium for free" weekly for about an year!) but I wouldn't call them spammers.
This article doesn't mention whether they tested or measured sequestration of compounds in the fruit, but my guess is that this has been carefully studied in the past, though possibly not w.r.t. fruit flies.
Spying on Employees: Should You Do It?
What are good ways to hire people smarter than you?
Manchester escort agency
Selection of 5 Star Velvet escort models
Velvet Escorts offer clients the most exclusive selection of beautiful models ever. Our escort service is unsurpassed. We only represent young ladies who are 5 Star in their sensational looks, decorum and incredible sexy figures. Velvet Escorts in Manchester and Cheshire are the only choice for the more discerning client who expects a first class escorts service. Velvet provides the companionship of exquisite escorts and a date of a lifetime to our professional clients.
Heyoffline.js
Warn your users when their network goes down.
Make sure they don't lose anything.
equally talented person who is not paid well

People are naturally going to disagree about things like equally talented ("Of course my UI was equally difficult to make as Bob's graphics engine! Maybe even harder!") and paid well ("Are you serious? I made 30% than that at my last job!")
I don't want to be pedantic, but this is a question that probably not even most professional economists will be able to give you a simple (or even accurate) answer for. This is not because mainstream economics is intellectually bankrupt or anything, but it's because economics is extraordinarily complex. A million variables affect the economy of any nation. Similarly, inflation and deflation do not exist in a vacuum; the currency is not the only variable influencing inflation; thousands of other variables can affect inflation; ditto for GDP.

Inflation does not directly lead to or cause higher GDP, unlike what you seem to imply. But it's generally agreed that moderate inflation is necessary and unavoidable for growth, and is preferable to the consequence of tightening monetary policy, which is lower GDP growth.

The textbook example for one (out of hundreds) of the possible reasons for stagflation is a rise in commodity prices. For example, the US experienced a long period of stagflation in the 1970s because oil prices skyrocketed - not because of inflation, but because several Middle Eastern nations stopped/curtailed oil shipments. This is called a "supply shock" in economics, and it causes inflation by increasing prices, while decreasing GDP by making it more expensive to buy the resources (e.g. oil) necessary for production. Another "textbook" reason (again, I have no idea whether these actually apply to Brazil) would be a loose monetary policy (high inflation), coupled by heavy government regulation (low GDP).
There are two ways to look at it: cURL is the client, or the application's the client--in this case the guy writing the blog post. In either case, the client's not following the spec. So which way to look at it is correct?

My view is that cURL not a client. It's a lowish-level library and command line tool that can turn input into a format that an HTTP server can understand. Of course what puts a kink in this view is that it does things like follow redirects. A convenience for the user if anything. But in the end, you use cURL to build HTTP clients. It's not a client itself.

Regardless, you're right. It's a problem with the client not following the HTTP spec. However, I don't think many developers really follow the HTTP spec to begin with. For most, HTTP is URLS, headers, and a limited number of methods. I've certainly been guilty of viewing it as such in the past.

So in Platonic heaven, it's the client's fault and by extension the developer's fault. Does that means that API providers should let developers shoot themselves in the foot? Probably not.
Things that Americans find incomprehensible about the UK
The main UX design miss is that, as a user, you don't have any context where you are in the stream of videos. You also can't tell if you are moving left or right with the videos. It ends up feeling frustrating to me.

One of the more curious UI bit is the way the videos pulse and flicker as you scan thru the available videos. Caught my eye more than a few times as I wrote this post.
A clbuttic problem of naive sub-word filtering.
Wish I could upvote this more. I haven't been on the salary setting side but from my experience negotiating on the employee side it is all true.
interesting, it is not so much speed as lack of debuggers and diagnostic tools that lead them to abandon HTML. I guess that in the end supporting two mature platforms (iOS and Android) cost them less time than one not-so-mature platform (mobile web)
Is there any particular reason Satoshi Nakamoto would want their identity hidden, other than personal preference? If I had $100M USD then I probably would care a lot less about who knew it.