skysight-inc/HackerNews huggingface dataset:
Well this just makes you sound reckless and ignorant. I don't think you are. The conclusion might be valuable; that taking risks is a necessary part of business. But the way you get there is not by ignoring the risks, but by fully understanding them and being prepared and willing to deal with the consequences.

This is why you read the contract, understood it, and decided to sign it. It was because you understood all the bad stuff that could happen, but you decided to make it not happen or deal with the consequences. It was sort of a dare in your agreement, a recognition that the agreement you were signing was important but also impossibly complex (they always are), and that the larger picture was more important.

Understanding that and making your decision is not the same as being lazy and irresponsible, and I really don't think that's what you are if you've made it any distance in business. Maybe some people are, I don't know. Cool story though.
Hopefully because Hackernews was becoming NSANews.com. That shit was obnoxious. When 20 of the top 25 posts are about one topic you might as well open a new tab and do a search for that topic.
Passwords are not dead. Simple single factor authentication using short passwords is dead. That's not a new thing either and they're not going away either. Biometric implants are cool but it's a long ways away (and I'm pretty sure I don't want anything inserted into my arm...). Ditto for security rings and other gadgets. Yes they work but the general populace is not going to be using them for a long while.

I'd love to see some stats on two-factor usage at large installation like Gmail, preferably plotted against whether the user works in tech (or uses a VPN with two-factor token for work). I'm guessing the market penetration for it is pretty low for the average person. If that's the case then expecting lots of people to use something new/else (which involves getting a new physical device) is unreasonable.

Even with the "something you have" category (two-factor TOTP device, key ring, etc) it still makes sense to have a "something you know" category too. It covers the case of losing my phone/keyringer (or having my bio-implanted arm chopped off though I'd assume at that point they could just use a $5 rubber hose to get the in memory one).

Since passwords (or more accurately passphrases) aren't going away we at least should use them properly. My suggestions for how folks should handle them varies based on the tech literacy of the person.

For tech savvy folks:

- Use a password manager (ex: KeePassX)

- Long passphrase to unlock the password manager[1]

- Individual random passwords per site using using max length the site allows

- Use multiple email accounts for different functions (friends, shopping, finance, etc)

- Use two-factor auth everywhere that allows it

For the rest of folks:

- Use a passphrase for your email passwords

- Use a site that lets you use long passwords (Google does, Outlook doesn't[2])

- Use a separate email account for "important" accounts (ex: finance and everything else)

- Don't login to anything from other people's computers (net cafe, shared computer in a hotel, etc)

- For the really important ones (ex: your bank) use a very long complicated password and write it down[3]

- Learn more about security!

I make it a point to educate friends/family about tech security whenever I can. Two-factor auth is a good example of something that is a lot easier to grasp when you've got someone you know explaining it's virtues to you ("So a bad guy needs your phone in his hand to login? That's cool!").

In the end, like all security, a lot of it comes down to personal responsibility and hyper vigilance.

[1]: https://xkcd.com/936/

[2]: http://nakedsecurity.sophos.com/2012/08/02/maximum-password-...

[3]: Yes write it down. People are bad at remembering long random strings but pretty good at not losing small bits of paper. It's the same thing as keeping a key in your pocket (or a spare key in your wallet). Plus it's much easier to explain to them that the paper is the key to unlock the account.
Hackerfall
IE 8 is the last version to support Windows XP

See, browsers have become so important that they now support the OS, not the other way around.
To be fair, isn't Google a bit disreputable for security problems right now? I mean, the last two Google-related security discussions (Google email-change spoof/phish and plaintext-visible passwords in Chrome) have been kind of embarrassing.
It also isn't statically typed.
I don't understand when geeks insult other people who like Microsoft Windows or IE. I get it if you don't like the browser, I get it if you HATE the browser, but to actually insult the users of that browser is just ignorant.
I'm not saying it's a great analogy, but among it's strengths is handiness.

Among it's other strengths is that functional programs can be built bottom up from lots of little pieces and when we get unexpected results, we can track them down. If suddenly my keyboard's "b" key stops working, the problem is almost certainly with the switch beneath it and not because of something the "h" key is doing.

Another strength of the analogy is that the most disorienting behaviors of a keyboard are tied to state: the worst one for me is numlock off where the behavior shifts to dependence on the state of the display.
How I built a co-founder list of over 50 developers
The justice dept caught a bunch of mafiosos without violating the rights of everyone else. Why? Because judges oversaw the handing out of search and wire-tapping warrants. A balance was found between security and liberty.
Unfortunately, what is happening now is that we are lead to believe it is one or the other. And it's made worse when the debate gets trapped in the "right vs left", "conservative vs liberal" context.

Seems to me that the judicial system needs to get more involved in this. Congressional oversight of NSA, TSA, DOD, etc has not really worked.

There is also a role for technology to play. Out of millions of calls, billions of emails, how do you flag that one bad guy? The implicit assumption in such a problem is that you collect the data on everyone so that you can look for patterns of bad guy behavior. But is there another way?
Exactly. Thank God. And it was getting hysterical (not in the funny way).
The slow script warning, as far as I understand it, only fires when the script runs uninterrupted for a certain time. This was a case of animation frames taking up more time than their framerate, and thus firing end-to-end, killing the responsiveness of the browser itself.
As Hacker News users we can all consider ourselves in the top N percent for technology product interest, so the iPhone 5C seems weird to us. It's plastic? It's how much? In those colours? With those specs? I was talking to my girlfriend and some friends who are distinctly not interested in the wonderful world of tech and to them the iPhone 5C does genuinely seem fresh (although pricing was a bit split). Apple's positioning the device to recapture the interest of a market who's been saturated with many devices.
He's not allowed to tell you.
I often want the opposite -- I often prefer the mobile version on the desktop. Especially for news sites like the NY Times and BBC. The pages usually have many fewer distractions.
4 Big Ideas in the New iPhones That No One’s Talking About
> your typical large enterprise foces IE down their throats, courtesy of 20+ years of rape by the legions of IT guys who, through the cognitive dissonance inducing Microsoft certification/training/tools process now think that everything Microsoft is magic

I can't speak for every company, but in my experience there's much more to it than that.

A large part of the problem is that many of the tools leveraged by Enterprises (which are purchased from vendors) to develop web applications are extremely brittle and sensitive to the user's browser. When you talk about pushing a new version of IE, every web tool in the company (easily dozens) needs to be examined to determine the impact and cost related to making sure it works with the new version. This often means pushing new versions of these vendor packages as well, and the costs associated with that planning (think of the management effort required) and implementation.

In many Enterprises, this is infrastructure overhead and is largely avoided (it's a huge headache/cost) until absolutely necessary. "Absolutely necessary" means when the vendor (MSoft) stops supporting that browser version. Which doesn't happen until it is well past obsolete.

Of course, management gets many of these concepts from those Microsoft Certified developers, but that's not the whole story.
pg is clearly in the pocket of the NSA and is trying to control the discussion.

LOL!

I see three articles on the first two pages that are related to the recent revelations about the NSA.
It would be so fun if there's some leak mentioning the role of "legacy software" in facilitating information acquisition by government agencies (or other interested parties).

Like using LM Hashes for "backwards compatibility" or older, more easily exploitable browsers.
Apple’s “Windows 95″ Problem
"Does this make sense?"

I've read your post three times, carefully, and no, I actually can not extract a clear question from it. (I do not mean that in a mean way, just as feedback.) It seems to resolve to an observation that functional programming is not the only paradigm that has produced successfully-running programs, which is certainly true, but not terribly information-rich.

There are actually a lot of interesting possible directions you might be trying to go, but I'm not sure I want to try to guess them. (I will take one stab with: http://en.wikipedia.org/wiki/Effect_system )

I will observe that baking directions aren't a useful comparison; the difference between programming paradigms do not manifest until you have something that is a real size. Imperative is just fine for a single page program. Anything is just fine for a single page program; I have unashamedly written outright spaghetti code for single page programs.
Not necessarily. I have a client that runs IE7 on all their machines, but those machines are completely locked down. We can't even run Webex on those things without IT coming down to install. Their own corporate website looks crappy on their own employee desktops, because the corporate anti-virus blocks one of the javascript's from running. (We had them whitelist it.) I challenge anyone to install any virus or malware on that thing.
I did notice a sudden lack of NSA stories, I just thought the community came to its senses. Glad to know there's someone who cares about the quality of the site. I, for one, applaud the move.
ShowHN: RestDB - RESTful DB with expressjs middleware 
This is a simple filesystem based RESTful DB, designed as expressJs middleware. not production ready, but useful for rapid prototyping & learning frameworks like backboneJs or Angualr JS.
What business are you in? If you're going to support IE6 until 2019, which probably runs Javascript 200 times slower than IE10, your software is going to be very limited.

Once your competitions builds a better mousetrap, sends in their sales team then explains that all your customers need to do is install Chrome, it might get a little ugly.
This is from 1998 (written up in 2011), and was written by pud of f*ckedcompany fame, I think. He probably doesn't read hackernews.
Lots of people talking here about execution, but what actually makes "execution", execution?

Let's say for example you are the founder of Vitamin Water and you say "Our secret sauce is that we will compensate celebrities to promote our brand by offering them equity in the company".

Great! But do you have the means to pull that off? How can you convince an investor that you have the ability to convince 50 Cent (or most likely his accountant) to take equity in your venture?

This is execution. It's immeasurable, subjective, and is the most important part of executing a startup. It's also extremely hard to articulate (convincingly, mind you) without actually seeing it happen right in your face.

I "give away" my strategy to Compete Hub (my startup) all of the time. It helps me validate my market. My competitors could easily analyze this and do the same thing. The reality is - they know more than me, but they simply don't have the execution capabilities to do so.
I would say all these three stories are more Apple related which makes it even more strange.
How much of a device's power usage comes from the CPU, instead of the GPU, screen, sensors and that kind of stuff?
I like NASA didnt they go to the moon?
A couple interesting things i'm considering from this.

1. Typically any business that supports even the concept of porn would get crucified in the media. It seems like because eat24 is a young internet startup that its users don't mind it being associated with porn. If the service becomes nationally recognized, will the small vocal minority eventually come out of the woodwork to protest? (I think yes) Other consideration: almost all food services are in some way family-oriented (families eat a lot of food) and thus would be more vulnerable to topics that are inappropriate for kids.

2. If somehow they find a way to keep their porn ads up while still bringing in users that are morally opposed to porn, could this create real social change? Could it eventually become socially acceptable to support businesses that support porn and alternative lifestyles? And towards that end (hehe I said end), should the company push for higher standards and more stringent requirements on the kind of content included in the porn? Could the company's ad push eventually improve the conditions and content of the porn industry?
La petite fille aux miracles
Great!

We want to see the system in action
I'm not sure what the lesson is here.

If a lesson would be considered an informative or useful conclusion based on the circumstances and results described, I'd say the only lesson here is that the author was very lucky despite what seems -- at least as described -- like very risky behavior.

This definitely is not the way to run a business, particularly when there are people depending on you. It's great that it went well, but "just sign it" is very reckless, and "fucking sue me" is, quite literally, asking for it. If you're not prepared for the eventuality of being sued this is just an unconscionable stance to take.

Yes, business almost always involves risk, but it's almost always possible to take calculated risks rather than throwing up your hands, signing whatever's put in front of you, and hoping for the best.
I wasn't comparing a famous novel to a programming book, obviously. It was to remark the (apparently) high price of the book.
One point the article didn't cover is clients. Making a good Zookeeper client is hard, for two reasons:

1. The protocol is difficult to implement. In theory you could just use Jute to codegen this part, but that assumes Jute supports the language you need. Doozer improves on this with a simple text-based protocol, and etcd goes a little further with a HTTP API.

2. The primitives Zookeeper exposes are very primitive. Implementing higher level abstractions such as locking or leader election on top of znodes is easy to get wrong. Just this year Curator has fixed critical bugs in both of those algorithms: https://github.com/Netflix/curator/blob/master/CHANGES.txt

My feeling is that etcd and doozer fare a little better on #2 just because their primitives are slightly easier to understand, but fundamentally the problem still exists. I'm looking forward to seeing more innovation in this area.
I know one:
When I have some text from a website or a document with markup, I always paste it to Notepad++ and copy it again before I put it in a document. This way Word or Powerpoint or something isn't messing with existing formatting or anything(I know there are many options to paste without markup and so on but to me, this is just easiest :-) )

It keeping track of number of words / characters is not bad either ^_^.

I'll remember this if I'm ever on a machine without the option to install Notepad++ or something :)
I get the mixed Apache feelings, but I still don't quite get the dependencies complaint. It seems like your clients have heterogeneous environments (multiple Linux distros, at least). Do you distribute a statically linked binary, or do they compile it on their box? It seems like in this case Go code is actually way more complex to set up.
They kind of do(or did), not sure what your point is. Bently, Bugatti, Aston Martin, Porsche, etc... have all had major trouble recently. Most of the luxury brands have been bought by higher volume manufacturers.
I have a theory that due to long term permanent structural economic changes, there's a whole generation (or more) younger than myself who never worked a "summer"/"teen" job. This would normally be a bit excessive as a filter at that level, but he's probably their first/only/works independently customer service position, so they can't just hire anyone and see how/if he fits.

Most "big company" customer service jobs are up or out in a couple months on average, annual turnover ratios in the small integer range. So even if you make a mistake, as long as the hire passed legal, and the general firing policies and procedures passed legal, it doesn't really matter.
I've been trying to find a post by either Derek Sivers or Tim Ferriss along these lines. It was about basically ignoring annoying rules and regulations if the potential penalty was either small or unlikely to be incurred. Anyone remember it?
It's probably how Net Apps manages to still get such high numbers of IE market share (they measure browser "usage"), when I think it's pretty obvious Chrome, and then Firefox are the most popular browser choices. But since a lot of people use IE continuously for work, that could raise "browser usage" a lot.
Because so many interesting things happened beside NSA stories? Or so I hope.
I don't mind the NSA articles, since I can just skip them depending on my mood, but I was a bit miffed that the iPhone 5S thread was all about "zomg fingerprints!" Nobody wanted to talk about 64-bit A7, the uses of the fingerprint sensor, etc.
I hope it doesn't catch on. I do use a password manager, and anything which doesn't let me copy+paste is just a huge hassle.
Relevant Hark! A Vagrant: http://www.harkavagrant.com/index.php?id=206
Just like glenn beck huh? Im just asking questions.
The problem is that you're trying to have a logical or even scientific discussion with people who are more interested in having a political, politically correct, socially non-offensive discussion.

Science and logic often lead to socially unpleasant realities. You can see the same thing when you talk to religious people about the scientific rationalization for an atheistic worldview. Those discussions don't go well either.

Especially in public forums, even better-than-average ones like HN, political correctness will always hold the emotional and populist trump cards.
"I'm not sure what the lesson is here."

I'm not sure, and furthermore, I'm not sure I agree with being overly 'fuck-it' about legal matters. But I can tell you what it's like having been where you were with the "endless lawyering," and why it sucked so badly.

I worked for a startup once in which our CEO was a really smart guy, but the kind of smart guy that got overly worked up over tiny details and edge cases. We'd spend months working through "what-ifs" in Powerpoint, Excel, or Visio, instead of building and testing features. Anytime we wanted to make a strategic decision, we'd need to run it by our extremely expensive law firm. Picking the name (!) for our company took over $50,000 in legal bills and at least 3 weeks of everyone's time. In retrospect, I'm amazed anything got built at all.

The lesson I personally took from that experience was that entrepreneurs need to make decisions, and often, they need to make them more quickly than they feel comfortable doing. They might fuck up here or there. And one day, when they're successful enough actually to need to run everything by lawyers, they can afford to do so. The ROI on legal fees and time is much more positive when the nature of the threat is being measured in the millions or billions of dollars. In the beginning, though, the biggest threat isn't a lawsuit; it's running out of time and cash.

Lawyers still have their place, though. You need them in certain situations. But they can't wear your balls for you. When you feel the need to run every key decision through a third party, you're basically stripping the "E" out of your "CEO" title.

Here's where I'll risk sounding contradictory: contracts are a crazy beast. Given your circumstances, the "fucking sue me" approach probably made sense. But you also got really lucky.

It's not a terrible idea to consult a lawyer if you're entering into an agreement of a nature you've never taken on before (i.e., with a Fortune 500, with a scope of work you're not used to handling, etc.). I say "consult with," though, not "tie up." Most Fortune 500s have a take-it-or-leave-it policy w/r/t their contractors and their RFPs. They know they've got the bigger guns, so you're kind of playing on their terms. No amount of lawyering on your end is ever truly going to overcome that home-court advantage of theirs. So it's often a wasted and self-defeating effort to fight too hard on any terms -- with the possible exceptions of payment structure and timing (the ones that affect your ability to keep the lights on), provided they seem overly wonky as written. Fight to get paid on time, to get paid fairly, and so forth. Don't fight over nice-to-haves, because you won't get them.
But from the other side, the perspective is probably:

- legal fees are going to be in the $100k's

- he clearly has little money, so even if we win, we'll end up garnishing his wages for 40 years to get a fraction of what we sued for.

- we might not win, then we're further in the hole

So take the loss and move on. Thus from pud's side it's not an insane risk, but a calculated one.
In case you missed steve souders wrote about domain sharding recently - http://www.stevesouders.com/blog/2013/09/05/domain-sharding-....
Domain sharding combined along with dns prefetching is also one of the techniques you might want to look into if you have high number of requests.
Check out amazon and etsy to see how they are using it :)

Kudos for mentioning inject after load for third party assets. We are a third party monitoring service yourselves (http://fueldeck.com) and we defer loading our script till page load to make sure user experience is not affected. Our customers don't have to worry about that.
Exactly.

There's nothing magical about functional programming - it is no more than syntactic sugar to help programmers control the state of computing devices.

Foreach is a higher level abstraction that makes reasoning about our code easier. The bits still change.
We also haven't put a man on mars, but we know almost exactly how we might do it.

There are a lot of barriers to this, most of them cultural and influential. Otherwise it is not difficult, just difficult to change our essential belifs about people and how they operate in a system, instead of as flawed individuals whom we can game and blame for our own advantage.

For companies who do this, the place to look would be Japanese companies influenced by Deming. In tech, many companies take on some of these ideas, but I haven't seen many that do all of them well. Also look at the Deming prize, which was given to companies who used his methods successfully: http://en.wikipedia.org/wiki/Deming_Prize

This article sums up my thoughts on the matter: http://www.examiner.com/article/what-happened-to-the-deming-...
You missed the obvious sarcasm in the post. Apple did colorful things before Nokia's phones, but Nokia did multi-colored phones before Apple did. And, using Apple's logic that just because it's a phone makes it different (see multiple iPhone patents that folks like Palm and Microsoft did first on PDAs and similar), that means Nokia was new and innovative and Apple copied.
A small state India, Manipur, Is Ready To Legalize Marijuana