skysight-inc/HackerNews huggingface dataset:
PGP is a UX travesty. Using clients that have OTR encryption built in is much better. It also gives you forward secrecy, which is missing from PGP.

http://privacy-pc.com/news/changing-threats-to-privacy-moxie...
https://www.youtube.com/watch?v=-JKqJ7gt5yk
http://www.replacereader.com/ has a campaign to get people to vote for their favorite Reader replacement via twitter. Personally, I've been using NewsBlur for a few months and think it's great.
Common Patterns in Styleguides, Boilerplates and Pattern Libraries
From 0 to 100 million scans
Compared to the other ongoing social networking experiments that generate constantly exploding datasets of worthless noise, LinkedIn is a very different story. Their data is the most interesting.

Today the focus is on individuals. Tomorrow it will be groups.
Is Sad Music Actually Sad?
While I agree with the sentiment in the Ars article, it seems to suggest that your password is submitted to a remote server. The check is completely client-side though.

http://www.intel.com/content/dam/www/public/us/en/apps/passw...
That's why you manage the VMs with a configuration convergence tool such as Chef or Puppet. At that point, the VM doesn't matter. I tend to treat mine's as throw-aways, and have Chef rebuild the specific VM for the specific project. This lets me experiment with things and then reset it back to a known, good state.
Aaron Greenspan sues Facebook, Sequoia, Andreesen, YC, others
I didn't and have had people say to me that they don't connect with current colleagues.

I also don't connect with recruiters until I have announced that I am leaving. I'll happily chat with them via private messages or give an alternative email address.

There is no benefit in the default behavior of having the system send all your contacts, including your boss and HR colleagues that you have made a new recruiter friend today.
Formula for Entrepreneurial Success — Ev Williams
Student Strikes out at lazy teacher, questioning her education methods
At the moment, no.

Right now, the truth is, the millisecond you serve, you've already lost. The only question is how how long it will take.

I originally built the thing just as an interesting animation, and one of the guys at work said 'Hey wouldn't it be cool if you could play it?' I laughed off the idea at the time, but later started to wonder if it was maybe possible. It's ended up more playable than I ever imagined -- that's not great play, but I doubted it would have any game play value.

I do have the inkling of a method I might be able to make the robot player defeatable. I'll mull it over for a while.
My understanding is that incumbents have interests in keeping things the way they are. Some states ban stores buying liquor directly from the manufacturer (in theory to make sure liquor stores don't cheat the state out of tax) thereby creating a state granted monopoly to certain lucky distributors. There are industry lobby groups that oppose liberalizing alcohol law (as are certain conservative lobby groups).
I have cold called people. It's really scary and still scares me today. I try to warm up prospects by emailing them first, but that dramatically reduces the amount of conversations you're going to get.

At the end of the day you gotta do what you gotta do to get your startup off the ground. And that means talking to customers.
Thanks, that's very helpful! Much of my problem is that I'm coming into this as a full-fledged grownup - twenty years in the industry, two college-aged kids, mortgage, car payments, etc. What cushion I have is my retirement money, and my spouse will only let me burn just so much of that before she loses patience. I could maybe get a few months of pure bootstrapping in, but the drop from a six figure income to less than minimum wage is very steep indeed.

Right now, it's 20+ hours a week on the startup in my "copious spare time". What worries me is the pain waiting for me when the rubber meets the road... the support time and emergency fixes needed when I have real, paying customers. That's when the conflict between dayjob and startup will truly loom large.

But what the hell, I WILL make it work. I'm done with working for other people. I've already signed my Declaration of Independence, but if I want my freedom, I'm going to need to survive my Valley Forge as well.
One of the reasons we liked name.com was their multi-factor support and email on action support, but it's all an illusion if hackers can get in at this level and go undetected until they helpfully post it publicly!
Tesla reports first profit
I would use this chrome/ff extension!
I live in a world as free from advertising as I can make it (AdBlock + no tv + no radio), and I do get along fine.

What's interesting is that advertising that doesn't concern you isn't as annoying as advertising for products that you're able to buy. I love The Daily Show, but sometimes, for some reason, it only works with AdBlock disabled.

All ads on The Daily Show are for American products not available here (fast food brands that aren't present in France, cars that don't exist here) and those ads don't bother me much -- they don't clutter my brain the way an ad for something I could buy does.
Build-Measure-Learn is a Waste…
The .223/5.56/variations is the round of choice for military units around the world. For killing/maiming people.

It's powerful (dramatically more powerful than a .22), relatively light, and can be loaded in high capacity magazines.

When the military chooses it as the round of choice for killing people, it's pretty nonsensical to try to hold it as some sort of weakling.
Pigs are omnivorous and naturally eat carcasses of other pigs or in the case of packs of wild boar, sometimes even kill other pigs to eat them. Feeding pigs with food containing bits of pig meat (like human food leftovers) is not ideal but it's not a very serious situation.

Cows, on the other hand, are herbivores. Their digestive system cannot properly handle animal protein and this can have disastrous consequences. BSE, aka. mad cow decease is a symptom that is caused by feeding cows with animal protein, in particular from other cows. This decease is not caused by a bacteria or a virus, but a wrong kind of protein that ends up in the brain.
I didn't raise a Constitutional issue. I'm pretty sure that "reasonable expectation of privacy" is found no where in the Constitution.

| If you're okay with Facebook or Google looking at
| your communications, you should be okay with the
| government doing so.

- This treads awfully close to 'if you have nothing to hide, then you have nothing to fear.'

- Government employees wield much more power than Facebook employees.

- If it was common knowledge that all Google/Facebook employees had unfettered access to all communications going through their systems, then people would treat the system differently. As it stands, employees should only be looking at specific communications to deal with work functions (investigate complaints from users, look at a message that caused a back-end system to blow up, etc).
I received my email 90 minutes ago
That's not their point. An unsecured site can easily be spoofed; a secured one would require either getting intel's ssl cert or convincing users to click through a big "dont trust this site" page in their browser.

The fact that they don't send the password just means that a MITM needs to put in slightly more work.
I tried testing some XSS stuff and got 500 errors, you might want to make sure you are catching encoded &lt; &gt; stuff
Right? I was incredibly surprised that there aren't others like it (Kuler angers me for reasons I will not get into here). Colourlovers has ColorSchemer (http://www.colorschemer.com/osx_info.php) but I'm not a fan of the interface or the price tag.
Teddy Hyde: no compromise, extensible, one-handed Jekyll blog editor for Android
Why does Stripe only allow U.S. businesses?

Even if one is actually in the U.S., one might want to not base the company there for obvious tax reasons, so this makes their service (and by extension, this app) of very little use.
You and me both, amigo.
> "Please read the following article for its importance"

This immediately hit my brain's bayesian classifier like a ton of bricks. Or as the saying goes, "If spammers ever learn proper English, god help us all."

* the English is actually proper, but the wording is unusual
Looks interesting. The white text on the pink was kind of hard to read on the buttons.
There's the Mosh project (http://mosh.mit.edu) which seems fit for your use case. I don't have personal experience with it but it looks promising.
I guess it depends on what you want to get out of LinkedIn, and your situation. Personally, my relationship with colleagues/boss is such that if I think about leaving they'll know about it from me first, and if I added a recruiter as a contact they wouldn't even think about it. But apart from that, my use-case for LinkedIn is primarily connecting with people I do/have work/ed with, to help us stay connected should we need to work again in the future, and so other people can see who I know and who knows me. If and when I leave my job, I won't be looking at adverts or to be contacted by recruiters, I'll be leaving for a job offered by someone I already know in the industry.

But appreciate that for other people, they might want to use it completely differently.
OK, but I think you're missing the point slightly. I'm not interested in rock bottom prices nor huge capacity. I want somewhere to put SMB clients where neither them nor I need to worry about it.

So self managed is out. As for shared, above a certain level which both you and Hetzner exceed, more capacity is irrelevant. What really matters is great support and rock solid performance and reliability. If that's on the table then I'd happily get my clients to pay 2 to 3 x what you charge.
Actually, we are not "airing" your personal rates and instead ask the client to start a proposal with a range they are willing to spend. This way you can judge whether this is a client that would interest you or not. Beyond just the money, we also ask that clients provide as much relevant about information about themselves , much like designers do. That includes their prior experience, and most importantly, social verifications. When the proposal is sent from the client to you, if you feel that a client cannot explain his/her product well enough, or is not willing to share enough information about themselves, you don't have to continue on the project.

Scoutzie is not for everyone, and we don't hold it against you if you choose not to participate. We do, however, aim to provide as much value to our members as we can, working to bring out the features they have requested. I understand that sometimes we make mistakes and we try to correct them. We cannot please everyone, but I know for a fact that we had a great number of successful project, which means clients and designers who were happy with the outcome.

I can assure that you we will work tireless to continue improving the experience and to ensure that our community is happy.
I just received their email (5:35pm EST)
I think they're working on rolling out the platform to many more countries -- just haven't gotten there yet.
$TSLA Almost +20% on After Hours Trade
Funny to say they are on a collision course at this point. Did they not notice Amazon forking Android? Selling a directly competing tablet? Did they not notice Google setting up Play Books, Movies, etc. all directly in Amazon core business?

These companies aren't on a collision course - they collided a long time ago.
While I find this line of thought personally abhorrent, I give you my glad upvote for helping me to understand what must be the reasoning of the government.

If you could help me follow the idea further: In my mind, a communication is mine until I send it, at which point it is my property in the trust of another, until delivered to whom I'm communicating with, at which point it becomes their property.

I know legal reasoning doesn't always follow what I may consider to be common sense- can you shine any light on what I'm missing?

(Prefer not to focus on the DHL/UPS etc side of things, because I understand their right to snoop is a part of their TOS.)
I used to fear Google disappearing from the world, but some time ago I realized there was nothing to fear, because

- I only shop on Amazon

- every general question(1) is answered on Wikipedia

- every programming question(1) is answered on StackOverflow

so a generalist search engine isn't as essential as it was when those category killers didn't exist.

(1): that I can think of
Thanks for posting this, and thanks to the OP for posting the link as well. :) I must shamefully admit that I haven't read the book, but it is now on top of my reading list!

This was really a most pleasurable and insightful read. True elegance!
I don't think the time spent learning Chef (or Puppet) is ever wasted.

Exactly!

It might not look like it right now, but skills in using these tools are moving from cutting edge to essential job/contracting skills in the near future.

I don't know much about the Puppet community, but I do know that within the Chef community, the learning curve is flattening. The big thing of 2012 was that we're very close to getting these VM+Chef+Berkshelf setup in a way where you can get onboarded on an existing open-source application without knowing you are using Chef under the cover. How deep you want to dive in is up to you from that point.
Yes. Lenscrafters etc. have been doing 1 hour glasses since the 1990s.
Also, this has been making the rounds: http://www.ismytwitterpasswordsecure.com/
I actually have a write-up 80% written.

I showed the demo to a work buddy yesterday and a few hours later it popped up on HN. The genie got out of the bottle a little early.
It's always funny to see things from HN comments come back to HN in the form of articles a short while later. Is it just that the HN crowd are on the ball or are the journos reading HN comments?
Buzz Aldrin: Get to Mars within 20 years
I can't imagine that the margins on sales to big companies are that great, considering how much volume they can throw around.
I think someone missed a decimal point. Currently Google says its +0.43%.
A few minutes of searching and I couldn't immediately find it but, if I recall correctly, it's actually intentionally incorrect as poor grammar comes off as folksy and more trustworthy and leads to more clicks.
I too was doing my startup part time for about 6 months before we were admitted into an accelerator. I am currently working FT on my startup. But my personal situation is completely different than yours (no kids, no debt, no house, low cost of living state, cars all paid, spouse working ..) . Take baby steps every day and you will be surprized how much you can accomplish in few months. Be consistent about it and you should be good.
Blog MMO - Make Money Online. Preserving Your Future Income
Sites like http://flammo.com/ can send private messages which the DOJ cannot see uses end-to-end asymmetric encryption
That was a great talk, too great for just an upvote. Thanks!

To others considering watching it, the speaker is willing to indulge himself in a bit of self-absorbed wankery, but he gets most of that out of the way in the first 10 minutes, and gets down to the useful business of "here's an example problem, and here's a solution".
LinkedIn is where you're supposed to connect with your boss and other work colleagues. You certainly don't do that on Facebook.
+1, this phrasing immediately triggers my brain's spam alert. It's not simply a "familiar" kind of phrasing friends or teenagers would use to make communication shorter - it's just that kind of mistake scam emails tend to be full of, for some reason.
No, it might simply be a phone from 2009 on a EDGE network with poor signal. Hell, I'm routinely annoyed by slow web apps on my very nice phone from 2012 on LTE...
Tesla Smashes Earnings And Revenue Expectations
> the word 'natural' here has no notion of morality

But the words "good" and "bad" do. Appeal to nature would be if I said: "following the pack is good because that's what happens in nature." What I said was: "in a species that depends on pack behavior to survive, being unable to follow the pack is a maladaptation." Not that it's "bad" but that one would imagine that 5,000 years ago if in a tribe that became the modal outlook, the tribe would quickly die out.
I am wondering they don't run TV ads targeted towards this demographic.
Please rotate your phone when you film.
miniflux! :D
I tried

As a SQL injection, I want a '); DROP TABLE Statements;--

And got a 500 error... you might want to look into sanitizing the data
Everyone's talking about auth to limit spam, but I think a more interesting approach is to let people click to flag spam, then train up a little naive Bayes classifier.
Some data for fun. I run programming related mailing lists, all formed since 2009. I have 113k-ish subscribers and just checked and have 105 @aol.com subscribers.. so a whole 0.09% in that highly technical demographic.
Yeah, unusual (oddly formal, non-colloquial, weird syntax) English is usually the best giveaway.

That said, spammers and phishers are getting better and better. I've seen some "Apple" emails that looked almost quasi-legit to my weary eyes at 2am, say, but which revealed themselves as laughably bad upon closer inspection of the writing and the email addresses.

We should assume that phishing attempts will continue to improve in writing quality, use of plausible email addresses, and mimicry of email templates from legitimate sources. But some things will never change, because they are fundamental to the phishing playbook: seeking credentials, linking, etc.
Ask HN: Developer Specific Browser Stats?
Hey everyone - does anyone know if there are any good resources for browser share, specifically amongst developers and devops? We're working on a web app which is a part of a larger set of devops tools, and while I have some ideas (probably latest(ish) of everything, probably lower IE usage than globally, etc.,) I want to make sure I'm going off of data and not just assumptions, especially considering that some of the things I'd like to use is hard to find fallbacks for (new flexbox, gah) and will be no goes if it's more than a handful.

I found a bunch of stats from SO, which is sort of what I'm looking for, but the latest I could find that they've published is 2010.

Any help is massively appreciated!
This reminded me that one of my friends wanted a recommendation from me on FoundersDating. I got to the form you're talking about and here is a screenshot:

http://imgur.com/KSsinEq

On the bottom left corner, you'll see they tell you that they'll send a message to your chosen contacts. You can also edit the message.

http://imgur.com/yA8tHNP

The text is really small. I may not have noticed it had I not been looking for it. Also, I don't know when this was added.
You can imagine the tech team at the Onion feeling a race against time before their editorial team managed to so infuriate the attackers that the situation got out of control.
Also if you're looking for something free that you could potentially host yourself, check out TT-RSS
> Ah, now I see the crux of the problem: you've mixed up safety and idempotency.

That's not the miscommunication here. The reason I mentioned state mutation was only to clarify that the RFC does not dictate consistent internal server state. Even a "safe" call is only considered safe from the view of the caller. It also does not "warn developers" against changing state as a side effect of a "safe" call. It specifically states that this may be considered a feature, but that the user does not request any such side effects. Again, the concentration here is on the behavior of the communications, and not on the internal behavior of the server.

> But the final proof that idempotency is not with respect to communications comes from the spec itself: RFC 2616, section 9.1.2, first sentence. The spec even explicitly states that error or expiration issues can cause different responses on subsequent requests, which is what makes it clear that idempotency is not with respect to communications.

We're clearly reading this RFC differently. I see the error and expirations as being server-side. X expired? Sure, "GET X" will return a different result. Disk failed (aka error), certainly the response is going to change.

The RFC calls out changing the behavior in response to errors or expirations as an exception to idempotent behavior. I see this as confirmation that the server should behave consistency from the perspective of the caller except in cases where this is not possible.

> "Not Found" is an error condition with respect to the server. That is a fact of the HTTP server specification

I don't agree that "Not Found" is an error condition for delete. This is not in the spec. It's your interpretation of the spec. Nowhere in the RFC does it say "if a request comes in for X and X does not exist, a 400-level error should be returned". (If it did say that, PUT would be quite useless.)

> Actually, the RFC doesn't say that. The relevant section (9.7) states that DELETE is for actual requests to delete something. Nothing else. To "make sure nothing exists at a URL", the proper method is GET. You can also use HEAD if you're worried about a large entity-body taking up too much bandwidth. OPTIONS would work too, and it has the advantage of only touching the metadata, but not all servers support it.

You misunderstood what I was saying. "Make sure nothing exists" isn't an intention. It's a command. It's "Hey, server, make sure that when you return, nothing exists at location X." It's a delete, but a less "strict" version than yours, which is "Hey, go find out if something exists at X, remove it if so, and throw an error otherwise."

I don't think we're getting any closer to agreeing on this. I looked for a more definitive answer from one of the RFC authors, but couldn't find anything. It's just this same discussion playing out over and over with other people.
What You Can Do To Avoid Data Loss
The alphabet according to Google Search results
I had a teacher in High School who was a genius. He wanted us to think independently. One time he assigned a homework to the class where each of us had to study a mental illness of our choice. Mine was narcissism. And we had to go to a psychologist or psychiatrist, pretend that we have the disease and the task was to be convincing enough to get diagnosis.

More than 80% of students passed. We were all officialy crazy now, lol.

Now, try pulling it off with pneumonia or flu.

That's the problem with psychology or psychiatry. They can pretend all day long they are real sciences, but I'm sorry as long as a band of kids can pull off stuff like this it's not science. It's a complete and total joke.

Parent who have no time for their kids medicating them, so they can rest after work. Teachers who can't handle the class, so any kid who isn't complete vegetable must have ADHD, ODD, or whatever. Joke, joke, joke, joke.
I turned adblock off the other day to debug some chromium issues, and forgot I had left it off.

Did you know they now have video ads where you have to type the text of the product slogan if you want to skip the ad?

It's a bit annoying.
OP learned how to code in order to launch said website. The blog post about the experience is linked elsewhere here in the comments.
Patreon - lets fans support artits by funding each piece of created content
Well you can use vagrant with AWS as well :-)