skysight-inc/HackerNews huggingface dataset:
I think Phish's style is really similar to the Allman Brothers' back in their heyday. Although I doubt they profited massively from it, Live At Fillmore East is a jam rocker's dream album.

This article brings up an interesting thought: back in the '60s and '70s when most rock bands extended improvisations into their concerts (Led Zep, Hendrix, Floyd, etc.), did none of them think of recording and distributing each live show as a standalone piece like Phish? Or were they perhaps already 'mainstream enough'?
And I call Mike Rogers a 54(?) year old political hack without a actual argumentative leg to stand on. This would be just another trite case of legislators wearing their donation sources on their sleeve, but the truth is that these kinds of people are dangerous to not only the tech industry in general, but really more foundational elements (I hate to sound like a CATO-monkey, because that gets irksome, but guys like Rogers and Feinstein really do trammel on "freedoms" pretty rampantly).

I've read through CISPA. It's got some very elegant wording, but its contemptible all the way around in what its going after.
Wow, I spent some time in Palm Desert, CA and I was able to get 20Mbs for about $40 for the summer. Month to month no commitments. (with Time Warner)
Why does Canada have such terrible internet? Is it a regulation thing, competition thing, or what? Why do you guys have such extreme data caps?
Absolutely commonplace. Anything is 'fair' in business and nothing is off the table when it comes to money.

Even the small/local businesses do this. Just check Yelp reviews. Hell, Yelp used to allow businesses to move their best reviews to the top if they paid them enough.

1) http://www.eastbayexpress.com/oakland/yelp-and-the-business-...

2) http://www.zdnet.com/blog/apple/the-yelp-mafia/3116

3) http://arstechnica.com/tech-policy/2010/02/yelp-facing-class...

There was so much fallout from this back in 2009/2010 that Yelp had to turn the tables and pretend to play nice guy finally by outing businesses that buy positive reviews (starting last October).
The population along that border is spread real thin. I'm guessing there's just not a whole lot of people on the Utah side within driving range of Grand Junction.
The wildcards (such as "good faith", but there are others) are non-starters. You don't even need to reason about the finer points of the bill with that in there.

But ideally? I don't want anybody to share any information of mine to any third party, without my consent, at any time. I'm having trouble thinking of why that would be necessary.

I'm willing to entertain reasonable arguments as to why it might be necessary, and may make some compromises (without wildcard language) in light of a compelling argument, but nobody sponsoring CISPA has even made an attempt to do that.
Perhaps HN should allow users to just post anonymously if they wish, obviously with no benefit or loss to their karma for doing so, instead of having to create a new account.
Actually, any language with a Thrift binding can talk to Tachyon: https://github.com/amplab/tachyon/blob/master/src/thrift/tac...
Did 4chan find suspects for the Boston bombing?
One of the problems with security mechanisms based around system-call interposition (such as systrace) is that it's very hard to avoid concurrency vulnerabilities. To avoid this, you need to push the security mechanisms down into the kernel, as with SELinux. The downside is that configurable policy becomes harder that way. Capsicum is all about configurable and extensible security policy using capabilities.

There's a nice explanation of concurrency vulnerabilities in chapter 2 of Robert Watson's thesis, and a comparison of Capsicum vs other security mechanisms in chapter 5. It's worth looking at, if you're interested in these issues:

http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-818.html
There are reasons to be more comfortable with them using a punch card system:

* All their "software" (ha!) is stored in physical form, on a shelf, as a board full of wires--hard to mistakenly delete it or lose the registration key.

* Their code has 60 years of testing behind it

* Cards provide a physical record while also being machine-readable and, as I pointed out elsewhere, if a card gets mangled, well, you just sit down and type up a new copy

* They'll never lose your credit card details to hackers

* They're comfortable with the technology and have a very clear process. You'll never call them to hear, "Oh, well, they just updated the system and now I can't find the link to our invoice archives"
It's ok man, I've got your back. I'm the OP of this submission and I'm from Lehi of all places. :)
... friends aren't co-workers. You choose your friends. You friends don't control your paycheck, nor can they fire you. It is a different dynamic, and for this to happen in a manager / direct report situation is insane.

It is so insane that combined with the anon throwaway, I really wish there was some sort of verification.
This post also drove me to go re-read some of djb's IM2000 stuff, which is interesting and valuable, and of which, I think a healthy chunk would be fun to implement, but man alive is dude ever obsessive over mailing lists. Mailing lists!
The javascript is what you would have on the scope of the page. It works like the Web Console in Firefox or Chrome.
True, not a failure, thanks for the correction.

The tweet came from Orbital Sciences, the developers of the Antares rocket. I figured this would be enough.
As you wish. Though I have to wonder why we're having this conversation if you don't actually want to talk with me.
Thanks for the pointer, I was looking for a sane explanation of the Amazon security and signature algorithm.

I have to disagree with the other comments here regarding the client library. I think that given the precedence of Amazon API, given that people understand how to sign APIs like amazon, this method will be accepted even without a client library.

Being a Java / Scala dev, I prefer that an API provider allow me to select the HTTP client libraries to use and prevent from forcing me to use a specific library & version via SDK transitive dependencies.
Goth Screenshots
I think my answer is they probably won't know. The purpose of the bill is to allow sharing of operational data about network security attacks. The bill isn't intended to allow private companies to share your Facebook profile or email.

I guess you could argue that malware often uses mail to spread, and that a social media provider might dragnet a whole bunch of email spools to collect malware samples and then forklift it to LEOs for investigation. That would be bad.

The bill takes some small steps to keep that from happening, but probably not enough.
GWOT has been taken a few steps to far.

TSA and DHS are true examples how the terrorist actually have won, we now fear them so much we have changed our ways and our open/free society. We, as in the western / developed world.

And no matter how much I try I can't understand how we won over the Soviet block back in the days still keeping an open society. Back then we pointed fingers at them and called them the bad guys for massive surveillance of citizens. And yes, terror was a integral part of the cold war, red army faction etc ...
Best of Hacker News - A curated list of the highest ranked articles in March'13
Boulder is currently in the process of trying to kick out Xcel Energy and operate their own power infrastructure. I've been wondering if this is a step towards making a bid for Google Fiber. (Since having a city-owned utility seemed to be an important factor in the Kansas City, Kansas selection, for streamlined access to poles.)
"a laudable bug extremely difficult goal" A rare instance of a typo in a carefully-composed post perfectly illustrating its point.
When he was doing that work, mailing lists were much more important than they are today, and the industry standard way to implement them was with Majordomo, a horrible collection of buggy Perl scripts that required you to allocate a whole server to handling mailing list traffic and would promptly drive that server to its knees.

Bernstein's mailing list software recovered multiple Unix servers for us at EnterAct; we ended up delegating them to a 486SX.
Seattle already has a dark fiber network. All Google would have to do is light it up. Given Google's relatively large presence in the area (second only to Mountain View I believe).
Phony endorsements maybe deemed as "misleading advertisement" as long as they remain trueish (They can argue that the paid reviewers did experience the product and did like it. Nothing much different from a celebrity endorsement) . Fake negative reviews on competitors are really despicable and IMO should be penalized heavily by law.

In general, as a consumer, I feel sick when vendors trying to fool me by pretending to be one of us.
I thought that the command history search was default behavior for BASH?
(I use zsh)
No adds, no charges... How is one supposed to make money?
After cutting my teeth on FreeBSD (with tcsh) the absence/non-defaultedness of this feature always irked me.
Chad, I'm in total agreement. Curious, what do you (not just you, but anyone) think of how we implemented it on our site?

http://blog.competehub.com/
That was an incredibly long article. I like the (now I can't seem to figure out who it is from) quote, "I'm sorry this letter is so long, I didn't have time to make it shorter." There was a lot of history-of-the-band in the middle that didn't really feel absolutely necessary. It started to feel like a lot of fan self indulgence.

That said, it did convey the very important lesson: don't go into debt. When talking about bands going on a meteoric rise, being pushed by their record labels, you're talking about bands going into debt to the record label. As long as you're not in debt, you don't have people banging on your door asking for money. And that's when you can do whatever you want to do, make things as good as you want to make them, and create something truly special.

It sounds like that is what happened to Phish when they first broke up, instead they fell into a kind of perceived debt to their production staff. They weren't very interested in playing, but they couldn't do whatever it was they actually wanted to do, because they had people to pay.

And based on my own experiences with debt, I can see how that feeling can lead to substance abuse. My own life has become so incredibly much happier now that I know I don't have that debt hanging over me. And it comes back whenever I have someone knocking on my door, saying I owe them money (i.e. taxes).

So stay out of debt, kids. Whatever you do, stay out of debt. College isn't worth it. Believe me, people were starting to question whether or not college was worth the debt when I started 10 years ago, and the situation has certainly not improved over time.
Bad for constituency <> Bad for city administration.

Perhaps some ongoing service level agreements (that perhaps even iProvo couldn't provide) for the constituents/customers are part of deal?
There was a recent XKCD cartoon that touched on this; the focus on separation of privilege has historically been couched in terms of protecting one user from another. But the overwhelming majority of computing devices being sold are no longer multiuser, even as they maintain the outdated modalities.

I'm not happy that my single-user machine even has the concept of multiple users; that is way, way, way too coarse a level of granularity for privilege separation.
Age 29 the first with regular speed of clicks. Age 53 the second time taking lots of time between clicks and being more careful to click the center of the circle.
why, yes, I went there

You are, alas, making entirely unfounded assumptions about my personal beliefs. The third sentence of my previous post is the only thing I've said in this thread about that. Elsewise I'm just talking general psychology.
How does the number of people who hit the signup sheet and didn't read the details matter to their argument or how they have backed up their position?
The Language of the System
"Just by replacing the escaping function with a more optimized one, we've reduced the average request time by 45ms, and we're allocating 20,000 less Ruby objects per request. That was a lot of escaped HTML right there!"

I generally stay away from web development so forgive me if this one is obvious, but why does so much text need to have HTML escaping performed in order to render the page? Also is there a way to quantify how much text that is? Like a few K per page or a few hundred K?
Getting Rock Stars Excited About Working For You
For me...my MBA taught me how the world works. It is surprising how few people understand how it truly works - yet they speak as if they know. For that single achievement alone, I would encourage everyone to get an MBA.

That sounds like quite a claim. Can you shed some lights on how the world works from an MBA's perspective?
> "but a vulnerability in zlib is still bad because it can return incorrect output" which is true as far as it goes, but it completely misses the important point that it prevents the attacker from accessing anything not inside zlib's sandbox -- say, connections to a database.

Wouldn't being able to impact the output of zlib decompression also impact whatever is subsequently working on that output next though (just 'moving the goalpost')?
How do you figure? Whom is a real word (albeit, sadly, one that's dying out). The rule about not ending sentences with prepositions, on the other hand, is and always has been bunk.
Oh, no doubt. I have a patch [1] in Sendmail from the early '90s w/r/t mailing lists, and I remember what an almighty hairball they were. But that's water under the bridge now, and the focus reads as quaint (even as the IM2000 architecture itself is fairly interesting).

[1] Not much of a distinction for someone running mail services in the early '90s, sad to say.
There are still other ISPs in the area that will be competing. The change will be from a bankrupt fiber provider that the city cannot afford to a well-funded provider undergoing network enhancements and expansion. Stop complaining.
This is just xenophobia, unsubstantiated, and unfair to all the hard working employees.
Who are the forbes.com spammers?
Imagine the furore if Apple was caught doing this.
How odd, since the URL is

https://fiber.google.com/cities/provo/
clickbait? Are you suggesting that this would've been better as a Show HN post?

I have no problem viewing the site of someone trying to show me something useful.
Ask HN: I'm looking for an app evolution timeline
I'm not sure what to call what I'm looking for, but essentially a series of screenshots that follow the evolution of an app (web, iOS, Android, etc) from MVP to polished product.

I'm curious about how founders boil their vision down into one or two core features, then evolve the product by bringing in features they intentionally left out of the initial build.

If anybody has personal projects they've visually documented over multiple iterations, I'd love to see them.
I've written Atom Publishing Protocol servers that use it.
It's not badly-suited for non-browser tasks (although yes, SSL and Basic is much simpler - if you don't mind paying for the certificate). It's unusual, but it's pretty unusual to use it (or Basic) for web browsers these days, too.
Sure. Here are two examples.

1. You're a web app company that routinely comes under DDOS attacks. A private security company would like you to subscribe and push Netflow traces to them during attacks, so they can derive minimal ACLs and relay them to ISPs so the attack could be filtered upstream. That Netflow data could in theory contain some of your traffic, and further could be statistically de-anonymized to reveal your personal usage of that service. Currently, you need authorization from your counsel every time you share that Netflow data; post-CISPA, you could get a one-time authorization and automatically push Netflow to the anti-DDOS provider.

2. You're working with several social networking companies to track down a browser malware attack that transmit itself through online messages. You'd like to collect a large volume of samples programmatically to share with other providers and LEOs, but you're extremely concerned that in doing so you might reveal details about private messages, perhaps even by sharing which users have messaging relationships with other users. Pre-CISPA, your counsel might refuse that sharing outright; post-CISPA, you'd have statutory protections for sharing that operational data in the course of responding to malware.
Hello revelation, all of our employee's are W-2 employee's and work full-time for our company. We pay payroll tax for each employee and while the economics is not as beneficial as the contractor model, if we were ever audited we would be just fine. Thanks, Mike
Here's an article from somebody that claims Time Warner hacked their bill down when Google Fiber opened in their city.

http://consumerist.com/2013/01/30/time-warner-boosts-my-spee...
It is on HN, here's a short list of sites that have gone far out of their way to spam HN:

https://news.ycombinator.com/item?id=5567427
The site is not designed to get people to learn about CISPA, it's designed to elicit an immediate reaction. The fact that it somehow links to additional background information (we'll stipulate that the background information is accurate) is not a meaningful response to my complaint.
If you're not primarily spending time doing audits on n-tier web and enterprise, I'm not sure how inclusive that is. At least for user devices os and interprocess defense along with chains of trust and mitigation via painless refresh is all pretty os centric. It's just not as rbac centric.
It's also bizarrely tone-deaf metaphor-mixing.

the pejorative "basement" refers to an adult who doesn't have their own residence, and so lives in extra space in (but near the edge of) their parent's home, while pretending it is a separate residence. It doesn't make any sense to call a 14-year old a "basement"-dweller, they would have a regular bedroom.
To be fair, it didn't seem like they were admitting anything. They basically said the marketing company they hired did and they regret it happened.

More common for big businesses who pay big bucks to get some exposure and then some marketing company pitches them unreal stats to get a sale, then commences to bending the rules and committing outright fraud to keep the paychecks coming in.
I'd argue that it is.

He's on "Hacker News". It would be perfectly reasonable for an automated system that is designed to look for security-related activity to report that fact. The bill, as it is written, says any action his ISP now takes, or anyone that they share his information with (which would then be allowed to do, with anyone in the poorly defined "cybersecurity club"), is fully acceptable as long as it was "in good faith." And who could argue that? Hacker News is benign, but it's an honest mistake.
"This is also why I bristle when many in the Valley - PG included - keep disparaging non-technical people when they want to start a tech company."

I realize this is probably just semantics but I want to chime in on one little tidbit here. These guys didn't start a technology company in the sense that they needed technology innovation to succeed. They started an innovative cleaning business that uses some technology. They were building software in well trodden territory with a clear scope and execution path.

If you want to revolutionize web search, or be the first company to create an eCommerce store, or run a PaaS hosting business, then you probably have a tech company. If you're starting one of these, you damn well better have a nerd or two around. :)
From Springville, live in Provo, so I certainly can't talk. Just wanted to point it out :)
I always thought dead heads and phish heads were in it for the drugs and sex, and the music set the beat. I guess that describes a lot of religions though.
Like anything else, it's an auction, and generally on a per-issue basis.
Great videos, but I agree with the OP.

When I watched the first video, I saw you set the App.name like a regular property and then later I saw you use App.get/set.

My immediate question was: So does that mean that setting App.name as a regular property won't have the same 'binding' effect?

When you introduce two notations, but one is inferior (without an explicit explanation), that is confusing.
The OP didn't give enough information to produce a specific answer. For a higher voltage and lower current (same power), the wire could be thinner with the same outcome. The reason electricity utilities string million-volt lines between cities is to minimize the heating losses in the conductors, not to impress the civilians.

It's the same reason electric car designs favor putting a lot of cells in series -- a high-voltage electric motor gets more of the power delivered by the batteries, less of it is wasted in the connecting wires. Also, in the car's charging circuit, the high voltage choice maximizes power transfer for a given connecting wire size.
> Well, I was doing multi-platform C development across all major commercial UNIX vendors and NT on those days, what about you?

HP-UX and AIX for me, and NT (my colleagues also worked on Netware, but I wasn't involved with it). My experiences are different than yours: we had near-daily BSODs and the system was generally regarded as a bit of a joke.

We worked closely with MS back then (late '90s) and I met some of the kernel team, who told me about the farce of pushing GDI into the kernel - the worst mistake they ever made in terms of stability, though usability-wise it was great. The Windows UI was silky smooth on the limited hardware of the time.

But yeah, in my experience NT defenders were few and far between back then.
Reading "The Soul of a New Machine" [1], the story of building the successor to the Eclipse, when I was 13/14 was what made me want to work with computers, although I couldn't decide whether hardware or software was cooler.

Same here, pretty much. That was a very influential book for me. I went back and read it again a couple of years ago, and it was still fascinating. Then I found out a guy at our local Hackerspace was there during some of that time and knows some of the folks mentioned in the book. That made it all seem even more real to me... quite an interesting story in any case.
How does the bill's definition of an attack include sites with "hacker" in the name?
The title could be factual instead of sensational.
Breaking Bad logo with CSS, HTML, SVG & JS
Reddit fingers Boston bombing suspect
Your router was shit, then, and probably bad enough that you weren't able to measure the true connection speed. Did you let the ISP provide the router? That's always a mistake.
Yes, they do quite a bit of lobbying.
Ask HN: How to trace the pirated versions of a mobile app?
Hello,

Is there a way to find out if there are pirated/unauthorized installations of our mobile app (not downloaded from the App stores)?

More specifically is it possible to find out how many times our mobile app was installed and is in use when it doesn't send out any analytics report of the installation/launch on different devices/users?

Thanks much,
Ashwini