skysight-inc/HackerNews huggingface dataset:
There's a big discussion of this in the book "Predictably Irrational", chapter 4: "Why we are happy to do things, but not when we are paid to do them". It explains that there are two worlds: The first is "social norms", which is community based. This is where you have friends over for dinner, help someone move a couch, and other friendly things. The other world is "market norms", where things are transaction based with something exchanged for something of equal value (normally, but not always money).

The problem is when the worlds of social norms and market norms cross. The book gives the example of Thanksgiving dinner, and what would happen if you offered your mother-in-law a couple hundred dollars to pay for the meal at the end. Another example is sex: paying for sex makes it a very different situation. (Also note the difference between giving someone flowers on a date and giving someone cash.)

The book describes a research experiment, where participants were paid $5, 50 cents, or nothing to perform a short task of sorting shapes. The people paid $5 sorted 50% more shapes than the people paid less (since they were more motivated), but the people paid nothing did the most of all since they were motivated by helping out the researchers.

This ties in with intrinsic vs extrinsic motivation - if you're getting paid, it's extrinsic motivation, and then you're motivated by whether you're getting your money's worth.

(There's a lot more, but I don't have time to get into it, so check out the book.)

The point is, that if people report bugs for free, it's part of the social norms world, where they are keeping the world safe, making it a better place, etc. If they are getting paid, it's part of the market norms world, and they expect to get paid what the bug is worth. With Yahoo, the lines got crossed: giving a T-shirt is generally part of the social norms world, but giving a $12 gift certificate crosses over into the market norms world, and $12 is insultingly low. This is why it would have been better for Yahoo to give nothing.
WHMCS 5.2.7 Vulnerability
Therein is the current question. This is not a box. It is a metaphorical box, that can only be opened by information. This information is only contained in the head of the defendant. Say there is something incriminating in the box. The 5th amendment protects you from being compelled to self incriminate. So, the court could not legally order the box opened, without providing immunity to the defendant.

Your reasoning and my reasoning are the current modes of thought about encryption in a legal context. Neither has been proved correct in that context.
So did you intentionally or accidentally omit the word "or"?
French police move from Windows to Ubuntu Linux
Quantum Computer Passes Math Test, But Doesn't Answer the Big Question
I think the Palestinian founders should call it whatever they want.

I know that Palestine, Israel, etc are hot button topics. HN has shown many times that it's not good to try to discuss it here. These threads never go well. It's a shame, because I want to hear smart people talking about a complex topic, but I absolutely do not want to read the hyper-aggressive bullshit that goes with it.

Here's an example of a fantastically un-useful comment (https://news.ycombinator.com/item?id=6306567) "you must be jew or a CIA or Mossad Agent".

That's the kind of thing that kills useful discussion.
Pretty interesting solution. The first thing that came to my head was a loop, but you just used reduce. What are some scenarios where you would use a reduce over a loop? I use underscore a lot too, and I find myself just using _.each all the time
Well, you can use FastISel, which is way way faster (it's a simple non-pattern-matching instruction emitter, like the Plan 9 compilers).
Yes, it is cute isn't it? Being serious for a moment, I don't think you can justify harming users now in exchange for potentially better security for them down the road - even although it is bound to sometimes play out best for them overall. The problem is you can't know that, and you're responsible for what happens good or bad in this case.
D-Wave's quantum computer overcomes key math challenge, doesn't silence skeptics
direct link to the product :

http://cubox-i.com/
Developing on the Bleeding Edge
How to Pull a Jennifer Dewalt
The question I guess is how you can take a concrete step, an actus reus, towards putting an agreement in to effect wherein the target of the action is entirely fictitious.

>an act which would be unlawful if the agreed-to end was realized //

If the person on whom the hit is called is fictional the agreed to end can't be realised. Even if it were in some way able to be realised [you pretend the person exists or don't know until the end of the act] the action itself wouldn't be unlawful except in and of itself. For example if you blew up a bridge to kill a person, but the person was made-up all along then you'd still be guilty of criminal damage and potentially of injury to bystanders and such but you wouldn't be guilty of murder. Not even attempted murder [IMV] as there was no person you tried to murder, you tried to murder an idea of a person.

Like I said in another post I see the moral deficiencies [evidenced by the mens rea (guilty mind)] in a person willing to be involved in such a conspiracy but it still appears to me to lack an actus reus which AFAICT is a cornerstone of criminal law based on the English tradition.

Your postscript on USA federal narcotics law is interesting - doesn't this mean that if you plan something with no intent that you'd be considered guilty. Would Vince Gilligan not then be guilty of drug crimes as he has planned many illegal activities they just apparently all lacked corresponding actions.
Google Buys Gesture Interface Startup Flutter
I thought regex was overkill for that one and used:

return input.split(".")[1] || "";
I think you're absolutely right. There's nothing fundamentally wrong with giving a t-shirt, or even a gift card for a t-shirt, if it's properly communicated. But it has to explicitly be something like, "Thanks so much for this. I'm terribly sorry that we can't give you a proper reward, much though I'd like to. As a small token of my appreciation, I hope you'll accept a t-shirt as my way of saying thanks. Since I don't know your size, here's a gift card you can use to obtain whatever size and style you prefer." If it had been done like this, I think it would have gone over fine. There might be some grumbling about how a large company "should" have a bug bounty program, but not the sort of attitude we've seen.

As best I can tell, the gift card was offered without comment. And while the intentions were good, the lack of such a message meant that it was taken badly.

I guess the lesson is, if you're offering only a token of appreciation, make sure the recipient knows you know it's only a token.
FWIW, the fonts on the example site don't render correctly on Chrome 29 on Windows 7 and look like crap.

When will people start testing fonts on windows and not just go with whatever looks good on a mac?!
Content management in the modern world = i18n focus = translation service provider integration + test hooks for proof reading + translation memory + (for high value releases such as intial marketing push to new culture/language) potential focus group process hooks

There is absolutely no way any of these US-centric startups are doing this stuff right. No way.
Right, 5th amendment is an issue on the criminal side (not the civil side), and the case law is mixed on whether giving up a decryption password is more like giving up a key to a box (which the court can order you to do), or giving testimony protected by the 5th.
...I technically work for Yahoo...

Why on earth are you undermining Yahoo's official communications in a public forum?
11 minutes 14 seconds. I wish I did faster!
If nothing is given, you assume the first party is indicating that their thanks/recognition is enough.

If something is given, then they are acknowledging that their thanks/recognition is not enough, but that $x monetary value makes up the difference.

Some people take it as an insult that if thanks isn't enough, they can be 'bought' for $x, where $x is $12.50, or whatever. The reasoning is basically that if you are saying the time taken to reproduce and report the issue is important enough to compensate, you should probably compensate commensurate with what they would expect to make for their time/expertise.

I think most people who report these things do so because they want to improve things, not for the money, so most probably fall into the first camp, but I can understand where the second camp is coming from.
SHowHN: Social Hacker News a hacker news ranked by Facebook and Twitter likes
The Rise Of Ocean Robots
Lol, fair enough ;)

Still, I think that the moral action (wherby "moral" I mean being disinterested and caring about outcomes for users) is fairly obvious in this specific case (Yahoo, has a good rep for taking security-issues seriously) - send them the patch that you have, regardless of compensation.
Fair enough. In that case at least it's not a Friday
They didn't necessarily pick that, though. When you submit a vulnerability to a company that doesn't have such a program in place, it is their choice as to whether that falls into the "free" or "paid" category.

Yahoo's reaction put it into the "paid" category, and then paid an insultingly low amount. That was their error. A different reaction, even just different wording when sending the gift card, could have put it into the "free" category.
http://www.reddit.com/r/AskReddit/comments/1ndvh3/serious_wh...
Skeuomorphic Credit Card UI/UX
n===~~n
This is incredible. I've been coding for more than 10 years and have been going incredibly slow, only coding when having a good idea. I just wish I had the time to do this to learn node.js and backbone...
Deserve is a Toxic Word
Wouldn't a hard drive onto which addressing information is recorded be a pen register?

Clarification: point being the language of the law doesn't permit the FBI to give you a hard drive. They have to call it a pen register, then they can give it to you.
This is really impressive, not just the speed and quality of the learning, but the stamina!
Congrats to Jennifer. Much respect.
FYI - you do not have e-mail visible in your profile. You need to put it in the About textarea.
If I'm right about the HN readership, gwern.net articles are going to receive upvotes from a much larger population than just the intersection of HN and LessWrong. Furthermore, if there is cohesion with respect to gwern's stuff, then that cohesion would either disappear when it comes to other submitters (if it's simply tribal allegiance) or we'd see it with other articles of interest (if it's based on shared interests).

If the cohesion disappears with other submitters, then any voting ring detection would have to be overly sensitive to pick up on your love of gwern. We'd hear about a lot of false positives.

If the cohesion is strong enough to warrant mention and it persists across other domains, then you'd probably see some trouble even without gwern.net submissions.
> If I steal something and get caught, should I just be able to offer to pay and avoid prosecution?

What we know is, that the owner claims there was a theft and the (lets call him) contractor offered to reimburse the owner. This does not mean that there was a theft. If I should speculate, it is rather likely that the contractor did loose a laptop, and at this point the relationship was already poisonous enough that the owner either assumes that there was a theft or tries to exploit the missing laptop.

> For the rest of it, the author doesn't have a leg to stand on. [...]

I think this strongly depends (IANAL) and the contractor should get the benefit of doubt. So for example if his .ssh/ directory is on that partition, then he may or may not have ample reason to keep the contents ( e.g. a private key for one of his servers) secret.
While these sources are great, this is not a good approach to getting traction. The type of attention you'll capture won't be of high quality, unless of course these outlets cater to your target market.

Like others have said, you're better off focusing your time and energy finding out where your prospects go for their information and entertainment. TC and the like will give you a big surge in traffic initially, but it won't be the traffic you want, and it'll die off quickly.

Now, a truly great resource for those launching side projects would be a list of sites/magazines broken down my major target market -- eg. pregnant mothers, hackers, foodies, athletes, etc.
Looks nice from what I can see but £1.49 is too much to buy just to try it out (at least for me).

The major pain point with the current viewer I use is difficult-to-read comment threads. I can't see any screenshots of comment threads in your app. Are they collapsible? Is the hierarchy clear?

Can you post comments yourself in-app? I remember seeing another app at the same price point that did that.

Good luck anyway!
https://github.com/Cue
>when did everyone become so entitled to getting something for reporting a bug/security concern.

When did everyone stop reflecting on how communication can be improved? Yahoo! wants to better show it's appreciation and gratitude for these security finds. Security researchers don't want their work cheapened.
Which frontend framework do you chose?
Hi,

I'm a master student doing my dissertation on frontend web frameworks (like bootstrap), and was wondering if you could answer the following questions. first what criteria would you would use to chose a framework, and secondly which framework you chose?

thank's for the reply
There was a prediction markets company that YC funded in its second-ever batch: Inkling Markets. (http://inklingmarkets.com) It's still going, from what I understand through enterprise sales.

Also, for those of you that haven't heard Intrade is shut down and going through some complicated legal proceedings. Their former founder/CEO died climbing Mount Everest a couple of years ago, and I don't think the company ever fully recovered.

(I used to do a lot of work in prediction markets.)
Some call it JavaScript.
REMEMBER THE 13TH.
I think these secret (or gag) orders should be illegal. Having the ability to subpoena info with the correct court procedures and transparency is fine (and important ability to fight crime with), but these court orders needs to be completely public, and under scrutiny from watch dogs and civil liberties groups. Because power corrupts, and given such absolute power, it will surely corrupt absolutely.
Japanese Count Orders Apple to Pay $3.3 Million Over iPod Infringement
3 Principles of Proper Attic Ventilation | All Roofing Solutions, DE/PA Roofer
7 Qualities of a Good Client
I learned that in life, you only don't have time if you don't make time for it. Don't take it the wrong way; For all I know, you might be saving the world behind the scenes.
Walkthrough the Intel+Arduino Galileo Board
Great - so do you use Github? Because if you do, then you are obviously putting your important files at risk.
you sir are very, very stupid!
Shrimping It
You need more filtering on the main lists. Let me filter by price range, high/low brand, size of vehicle, number of seats, engine size, petrol/diesel, air con, sat nav, cruise control... So rather than filtering the cars also filter the model of each car. Help me find the exact model I want.

Then let me create a collection of cars to compare, show a table of data about each car side by side.

Take a look a https://www.google.com/fonts and take some insparation from that for the "comparison" system.

EDIT:

What you want to be aiming for is becoming the Hipmunk of car shopping. show me prices from all the dealers, where can I get a model of car that matches what I want the cheapest
GREATS Is Building The Next Great Footwear Company
I worked with Rabeeh (the CTO) before. He is a supper smart Linux kernel hacker.
Your link works, but you can't play the video. Go to http://8pen.com/joysticks and press the button instead :) Pretty bad implementation on their web developers part
This NYC Startup Offers Software for Airbnb Hosts
Yep, I remember doing that with an Apple II back in '79 to get a simple lunar lander game. The process took more than a day, with two friends to help double check the values as we copied everything over. When it ran, and worked, we thought we were gods!
It's business.
While it does violate a bunch of cultural moral norms ... there is absolutely an argument in there that overall, over time, it would produce a more positive outcome for users than a straight white hat approach.

Refuting or discussing the argument would be interesting; painting the suggestion as objectively wrong using emotive terms doesn't really move us forwards.
I've submitted a number of bugs to different tools and sites, and in the vast majority of cases the company involved have promptly got back to me, have thanked me for my time, and have informed me of the status of the bug.

In the rare instances where my report is ignored, and any attempts to report to a developer (easily found on Twitter) are ignored, I tend to just forget about it. I assume that it gets read, and that eventually it gets fixed. That being said, when you've found a software bug, especially a large bug, the teams treatment of the bug reflects your opinion of the entire company. I noticed that one large website was pushing new registered passwords around in plain text, and I reported this. Six months later, the bug still exists. My opinion of the holding company (which runs a number of popular sites) has dropped significantly.

I think most developers are just happy to be thanked, and are hopeful that their report will be taken seriously and fixed as a priority. Gifts are nice, but a fixed bug and a genuine thanks from a real person at that company are much better.
Her ability to attract attention was remarkable. She should become a marketer or spokesperson, not a coder.
This is fantastic. Especially inspiring to me, more than the fact that she learned how to code, is the fact that she dove into something that she had no background in, and after 180 days she came out with a solid understanding of the basics of programming; enough to do stuff on her own (and, combined with her graphic design/illustration skills, probably enough to do freelance webdev or get a junior level position in a tech company).

If you're a programmer, think about following a similar, inverted journey: spend 180 days learning how to paint, or how to play the guitar, or writing poems- delivering a concrete outcome every day (and log it in a journal so you can trace back your progress; making that journal public, like she did, is optional but has benefits).

I have many programmer friends (and myself!) who complain that they cannot draw/write/paint/cook for nothing. Those skills, just like programming, can be learned- and while becoming a master at any takes years, if not decades, learning the basics and being "functional" with any of them is a matter of a couple of months.

Of course, taking 6 months to do just that is a bit radical (but, if you're young and in tech, totally doable- saving 6 months worth of expenses on a tech salary when you have no dependents is trivial) - but if you take 1 day a week, you'll only be 7x slower. If you take 2 hours a day instead of 8, you'll only be 4x slower. If you can work part time to keep a minimal income while working on becoming a master painter on the side, only 2x slower (of course you can nitpick with those simplifications, but the core idea is there - if you spend 2 hours a day learning the guitar, you'll go from total novice to enlightened beginner pretty fast).

Thanks to the internet, it's now really hard to not find resources about learning anything- there are sites and forums and youtube videos on everything. Additionally, never underestimate the power of your social circle - trading skills is very fulfilling. (for example, my girlfriend's sister's bf is in a band, signed to a label, etc. and loves video games. He'd like to learn how to program basic little games, and I'm the only programmer he knows. That's pretty great, because I've been dying to get a talented guitar instructor).

And learning those skills can make you even more valuable professionally- if you make entertainment apps, learning an instrument will allow you to compose your own music. If you're a freelance web developer, learning graphic design will allow you to build higher quality products and charge much much more. If you like to program video games, learning how to draw will enable you to design your own assets.
Honestly, considering that polygraph is used in courts despite there being no evidence at all for the efficacy of the test, I think you're greatly overvaluing the weight of evidence required...
I don't think it's about entitlement.

Twilio, either formally or informally, sent me a t-shirt twice when I found a bug. For me as a programmer, a bug on the 3rd party partner side generally means I spent some amount of my time figuring out that the bug wasn't something I was generating, but rather my vendor. Programmer time has a pretty real value to it, which no one likes wasting.

When I reported the bug and the support person offered to send me a t-shirt, I forgot about the time I spent on the bug and went "Neat! A t-shirt!". Now, when I look at the t-shirt, I couldn't tell you the specifics on the troubleshooting or how it ruined my afternoon 10 months ago. But, I can tell you that it felt like the vendor actually responded to my concerns. Some vendors haven't, and then I do the natural thing and spew vitriol about them across the internet and to my colleagues.

If I didn't like a vendor and they were replaceable, the second that I hit a bug that I felt the need to report, I would just not use that vendor anymore. Anyone who files a bug report has some amount of loyalty to a company that is not worth upsetting.
Total bait and switch. As soon as I saw that random array in my array of strings I knew what kind of game this would be.
Yep, I actually originally had this in the first version of this app, when it was Auto Swatch: http://i.imgur.com/vvUHt85.png

Those filtering options will be coming soon.
There's always time! Wake up an hour earlier, get more disciplined, stay up an hour later, reorganize a weekend to squeeze in a few more hours there.

If you truly want to learn something, you can make the time for it. I went from being a PHP programmer, to learning Scheme, to learning Erlang, to learning Haskell, to now looping back and leveling up on my Mathematics education and writing abilities (all while holding full-time jobs, building a startup, etc...)

Next up is learning how to design websites artistically (I'm not a designer!). Learning how to sketch, combine colors, make vector graphics, etc...
there's a truly dubious test case in the File Extension test.

file called .htaccess is not filename "" and extension "htaccess" with a "." separating the two. .htaccess is a unix style dotfile. its whole name is ".htaccess" and it has no file extension.
And not enough sax?
You could, but now you're just forcing the attackers to fork an existing project and push some nonsense code to it before they can attack.
Google Cache: http://webcache.googleusercontent.com/search?q=cache:8Cz3MI0...
Is Jim O’Brien Europe’s biggest Nokia fan?
And, if you are on the other side of the fence and shutting it down, please post your site here:

http://www.reddit.com/r/shutdown