skysight-inc/HackerNews huggingface dataset:
You're combining two issues. HTTP Digest requires the initial 401 unauthorized, but the same number of requests after that (And curl/libcurl handle it all for you, you don't need to think about it). I was just attempting to show what was going on, and why it was more secure than an API token. You're example requires that every API call use SSL, which means noone is allowed to cache it, which is going to be a hinderance on the scalability of you API (not impossible, though, but you're going to have to come up with your own, rather that just throwing squid in the middle).

The other part is discovering of the service locations. By not doing so, you're handcuffing yourself. In your API, you are stuck forever with `/new.aspx`. Should you decide someday to have something else you want clients to be able to create, you can't separate it out into `/new_foo.aspx` and `/new_bar.aspx`.

Doing these kinds of things actually make it less complicated in the long run, just like using jquery is less complicated than copy/pasting 50 lines of javascript of the web.
Currying looks horrible IMHO. It's like goto but worse. Can anyone give a real life example of why it's useful or desired?
They make digest easy, too:

curl --anyayth --user admin:sekret http://exmaple.com/resource_protected_by_digest_auth
Google Analytics not telling full story with Twitter
(London) Songkick is looking to hire 2 x middle- to heavyweight Application Developers
Songkick (YC s2007, Softtech VC, TAG, Betaworks, Index Ventures) is looking for developers as we expand our dev team.

Especially consider us if you are EU-based - and come join a London-based startup with great momentum and develop a key role as we grow rapidly over the coming years.

Please go to http://www.songkick.com/info/jobs#applicationdeveloper for more details and how to apply.

Thanks!
Pete
The OP is using Clojure, which is also not purely functional. SICP will be a good choice.
PS: Common LISP is not the fastest LISP dielect, for quant work you might want something custom like GOAL.

Telling the man to implement his own programming language isn't very helpful now is it?

Stock Trading.

http://www.lispworks.com/success-stories/netfonds-primetrade...

Realtime DSP in Lisp for missile defense

http://www.lispworks.com/success-stories/raytheon-siglab.htm...

Signal Processing in audiometrics.

http://www.lispworks.com/success-stories/ral-siglab.html

Franz (makers of Allegro Common Lisp) have even more testimonials.

http://franz.com/success/

There is more to life than reinventing the wheel; sometimes you just wanna get things done.
Yes, exactly. I've written a (rough) DataMapper adapter for interfacing with them.

class User
include DataMapper::Resource
resource_name "AllUsers"

# define some properties
end

User.first(:login => "admin")

http://github.com/absperf/dm-ssbe-adapter/tree
Real-life multitouch 3D modeling software prototype [video]
> This one little piece of Javascript

Not just that. The little piece just acknowledge the fact that the browser isn't supported, so removing it doesn't magically makes things work.
(London) Songkick looking to hire an ambitious and talented Junior Developer
Songkick (YC s2007, Softtech VC, TAG, Betaworks, Index Ventures) is looking for an ambitious young developer to join us as soon as possible.

An opportunity to join a seasoned team of great developers and progress rapidly as we expand our team over the next few years.

Please go to http://www.songkick.com/info/jobs#juniordeveloper for more details and how to apply.

Thanks!
Pete
What would a RESTful API for a queue resource look like? I'm thinking of something that supports push, pop, shift, unshift, etc.

Is there a meaningful difference between:

GET /user/1

GET /search?user=1

GET /?method=search&user=1

Is REST about the URLs you use, or the operations on those URLs, or both?
This is one reason why I consider HN time worthwhile - these are the lessons I hope to never have to learn from experience.
The choice shouldn't be an exclusive or. There are women out there who understand and appreciate that mentality. If the current girl is the type that does make it an exclusive or and you really think this particular girl is the one, then you'll have to make a tradeoff. But if staying with her would be a tradeoff, then in my opinion she's not the right girl. The right girl should like and love YOU--the YOU that you described above. In the general case, girls like that do exist, but in the special case of you, sometimes they're hard to find.
yeh smells like a hoax to me too.
Underserved demographics? Hmm. Well:

Women.

Old people. i.e. those above the age of 30

People who do not like using computers.

People who are not Americans.

People who do not read English.

(You could make a VERY long list if you included underserved demographics which did not also have huge purchasing power, but in terms of business models, I'd rather be targeting 40 year old American women with graduate degrees and household income in the $80k+ region than illiterate folks in Africa whose most reliable web access is a shared cellphone.)
I don't think 'response-time' and 'scalability' are merely differentiated degrees of a given scalar, either. Scalability is a multi-dimensional measure, which incorporates 'response-time'.

"professionalizing the field of web development"

I think this touches on a key differentiator of our chosen profession. Nearly every other (industrial) professional field (with the exception of Architecture, which shares many of the characteristics of Software "engineering" in sharing a hazy boundary between 'art' and 'science') has a tiered body of workers that rests on a fairly commoditized implementation base. (Consider your precious laptop. Put together by workers with high-school education.)

I don't see how we can "professionalize" [software] development (in terms of actual producers of ubiquitous software artifacts) unless we have programs writing programs.
Once you write a client, and its pretty simple, you don't have to worry about that step at all. And since the initial document rarely changes, and it can be cached, you usually only have to get it once. Here's some code in ruby that uses a service like this to find a user by their login:

def find_user(login)
users.select {
|u| u["login"] == login
}.first
end

def users
users_href = services.select {
|s| s["name"] == "AllUsers"
}.first["resource_href"]
JSON.parse(
@http.resource(users_href).get(:accept => SSJ).body
)["items"]
end

def services
JSON.parse(
@http.resource(@services_uri).get(:accept => SSJ).body
)["items"]
end

@http is a handle to an HTTP library, and @services_uri is the well-known URI. So its not nearly as complicated as it might seem at first, and the benefits are tremendous.
http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hyperte...

Specifically:

A REST API should not be dependent on any single communication protocol, though its successful mapping to a given protocol may be dependent on the availability of metadata, choice of methods, etc. In general, any protocol element that uses a URI for identification must allow any URI scheme to be used for the sake of that identification. [Failure here implies that identification is not separated from interaction.]
2nd Little Schemer. Cute but hardcore.
You can tell this is shit when you see a link to Umair Haque's work. The guy's a marketing twit who uses large words in a bid to mislead people into thinking he's saying something revolutionary. All talk, no walk and it's a surprise to see him linked to when this is all about "do better walking, not just crappy web app walking".
It's a desert of photos, but being able to see a 70 megapixel Currier & Ives engraving of your home town circa 1879 (http://commons.wikimedia.org/wiki/File:Currier_&_Ives_Br...) is absolutely amazing.
This is an important message for people like us. We can easily work too hard, but we shouldn't. Not only for hippy-bullshit reasons like quality of life, but also because the data shows that we're looking at diminishing returns if we work more than 40 hours a week.
Anti-Sec claims 0-day SSH bug will rock the Internet
Or if you have a Windows XP virtual machine on your computer, install IETester (http://www.my-debugbar.com/wiki/IETester/HomePage). It'll give you access to 5.5 through 8.
"Enterprise Software" deliberately insists on IE or another pet browser just because it can. Half the time they're not even doing anything browser specific.

Millions in lost sales should teach them to take standards seriously.
It's still interesting (right?)
What's new new in Japanese cellphones? I've heard about TV, credit card payment and barcode (or is that just QR code?) scanners for a couple years.

Biometric unlocking is pretty cool, but a little gimmicky. What's killer in new Japanese phones?
"It is a shift in perception so profound that the United States Congress could be presented with evidence of the unexpected strength and resilience of the human spirit and reject it without a single dissenting vote."

Yes, I found it disturbing. And I'm with you in wondering if this is simply due to expectations set by the media. Most people want to be 'normal' and for most people, the media defines normality.
I keep forgetting the "good night's sleep part" and man, I just feel like a god damned zombie before noon.
I second this comment.

I, myself, have come up with numerous ideas - very good ones too; tried to execute a few of them and realized my heart was more in the ideal vision of them than in the actual service/product they were delivering.

That is a hindrance, because the ideal vision is a wonderful thing to have. It is, however, only one piece of the puzzle (albeit a big one) that must be fully complemented by your own personal connection and commitment to the product/service that the ideal vision will be serving.
It's also not a bug. The article never titled it a bug.
I wonder how the IT/security staff react to such information? In the sense, what do you do? how to be "ready" for this?
Concepts removed from C++0x
Concepts, which were probably the marquee feature of the new C++ standard, have been dropped following a vote by the standards committee.
If they had any evidence it would be one thing, but this is just fear mongering.
Interesting that this group's manifesto of 10 days ago railed against full disclosure, and now they're employing an extreme example of it. Smells like something with more bark than bite, to me, but I guess I'll leave single packet authentication enabled on my box.
How to manage a set of servers
Web Fonts- Where are we?
From personal experience:

Kiko had a website at http://kiko.com, although apparently it's been recently taken down by the acquirer. We sold it on eBay for $258,000 in the summer of 06. We took follow-on funding from two angels (of a very very small amount) before selling it.

Justin.tv was actually started in October of 2006, in between the 6/1/2006 cohort and the 1/1/2007 cohort.
Welcome to CraigsBucket - Photo Sharing
craigsbucket photo management and sharing website. Show off your favorite photos to the world, Great for craigslist, forums and more., Photo and Image Sharing at craigsbucket.com
Not just a hoax, they're out to discredit anti-sec. Anti-sec doesn't use gmail, they always sign their posts, and they certainly do not issue warnings.

Anti-sec with a ssh 0-day would've tripped over itself rm'ing boxes left and right. It's like Bin Laden warning people he is in California and would be causing great mayhem, Real Soon Now.
Male sex chromosome losing genes by rapid evolution, study reveals
Social Skydiving Day 26: Karaoking it Solo
Anti-sec (with their real email address) could make a counter statement then?
If recessions are a great time to start a business, when is not a great time?
Social design explosion: Polls, quizzes, reviews, forums, oh my
I hate these sorts of things so much.

"I'm sorry, your browser isn't supported" What? Chrome isn't supported? Were you people drunk when you wrote this?

Howabout a message that says "the browser you are using has not been extensively tested, please use at your own risk.".
Electric cars: Juiced up and ready to go
Every time I read an article about clojure they mention the fact that the JVM doesn't support TCO, now call me crazy but last time I checked X86 didn't directly support TCO either and scheme seems to be doing it just fine. Anyone know what it is about the JVM that makes TCO so hard?
A compromise bill that allows, but reins in, noncompete agreements in MA
Not true. When a customer calls with a problem, if they're using some hoky browser (no offence to the Opera folks, but even they have to admit they're a tiny niche), then that's one more factor to eliminate before the problem can be understood.

I would be very surprised if the profit on that one sale would cover certifying the product and supporting it going forwards.
Every Paradigm Has its Place
Maybe they should hold a press conference?

1) The more we talk about anti-sec the bigger anti-sec gets.

2) These guys are not exactly teen pop idols, ever ready to dispute a rumor or a tabloid story; there is a good bounty on their necks and they seem to have "better" things to do.

3) The more security mailinglists and other communication venues get trolled and haoxed, the more the security industry looks like the joke it is, and that would make anti-sec kinda happy.

Now, can we please flag the "story"?
Yes. Although through the years I have often grown tired of bashing my head against the wall and diverged from the core of my entrepreneurial interests, I have always returned to the same problems in one way or another. As an example, what was an idea for a TV channel 10 years ago has morphed into a mobile phone and web app that will literally cost millions less . . . and which I can ultimately bootstrap. Good Luck!
"3. The REPL is your friend. Having a really good working environment is crucial to initial learning as well as later development. I would strongly recommend taking the time to set up one of the clojure working environments(Slime/VimClojure/Enclojure) as a first thing, if you have not already done so."

I spent substantial amount of time setting up every environment mentioned and ended up with Clojure-Box. I have not tried emacs before; ideally, i should be trying a new language in a known setup, but I prefer the stability of clojure box, so i am taking my baby steps in emacs too.
1) iptables! I always implement a default drop on INPUT, OUTPUT, FORWARD. I then only allow known services to have open ports.
2) Only allow specific IP's to connect to ssh. If you are an admin on the road, use port knocking to open that ssh port up for a limited time from where you are at.

3) Last but not least, change the default port of SSH from 22 to something your company runs. You can do this in /etc/services or in /etc/ssh/sshd_config

A lot of preventative maintenance helps you secure a system running an ssh daemon. I do these same things on our Cisco routers-- they are just called something else (access lists, etc.)
Fruity treats, customization, and supersonics: FogBugz 7 is here
Strangers at a cocktail party
Explore the moon in Google Earth
Nice review of the book and the concepts. I have just finished reading the same book, although I read it just as a primer because I am starting a part-time program at NYU in the fall. Although not a programmer, I plan to try and keep my technical knowledge up-to-date, it should help with the management and work with the engineers/developers.
IP geolocation PHP class
Hmm. You seem to have rebutted my argument by retyping your article.

The API in question has exactly one endpoint, so no possible value could come from having to look it up on a list each time you want it. And it is a POST to create something, which means you'd never cache it.

I picked that example because it is an existing use case that demonstrates that the rules you're proposing don't apply to every situation.
What does "working in blocks" mean?
it would be nice if url shorteners did a double redirect so that the following happened:

1) user clicks on http://sho.rt/abcdef located on http://original-referrer.com

2) sho.rt redirects to http://sho.rt/abcdef?original-referrer=http://original-refer...

3) second url redirects to the content.

in this way, content owners will know where their traffic is coming from, people who place shortened urls don't have to do anything special and the pasted urls remain short. the only downside is a slight increase to latency to retrieve the second redirect.
It would be interesting to see more data such as traffic(Alexa/quantcast?), number of employees/founders and so on.
This sounds rather silly, but if you collect enough data, you may be able to approximate something of a "formula" for startup success, or at least increasing your chance of success by a few percent.
I know PG always says it's the people and not the idea that matter, but looking at your spreadsheet, and assuming PG only picks equally smart people to fund, some ideas/verticals are clearly more likely to succeed than others.
I know there's obviously no statistically significant data to back this up, but my hunch is that, given the talents and abilities of founders chosen for YC are roughly equal, it may be the niche or market you choose to enter that can make or break your startup.

At the very least, a comprehensive list like this should give YC applicants a rough idea of what types of companies are likely to get accepted.
I would be very surprised if the profit on that one sale would cover certifying the product and supporting it going forwards.

What technical reason would a server company have for NOT supporting a largely standards-compliant browser like Opera? Isn't the whole point of serving up content to the World Wide Web to be able to communicate with multiple devices all over the world?
Update to the latest version of SSH.

This doesn't effect the latest version (last I heard).
No, it isn't. People in our industry commonly use the word scalability to denote metrics such as response time but that's just plain wrong.

You can have a website that takes 3 minutes to load yet still be scalable. As long as it takes 3 minutes to load when you have a single user, 3 minutes at 1000 users and 3 mintes at 1 million you have a scalable website. Scalability is all about keeping the same (or at least close) performance as your load increases.

If you want to know more about scalability I suggest you read Theo Schlossnagle's excellent Scalable Internet Architectures book.
What to Look in a Test Automation Product: Features or Benefits
Old trusty google told me this: http://www.lispworks.com/success-stories/ral-siglab.html (Refined Audiometrics Laboratory). Is it the one?
The NY Times should have its links link to what they are talking about, not the NYT's own pages about that subject. This is glaringly bad design when what they are talking about is a web page.

Actually I shouldn't blame this on design, this is someone's "strategy" for more add revenue.
I hate these drink-the-Kool-Aid articles.

Doubt is healthy and normal. If you don't have doubts about whatever path you're on, you're probably not thinking clearly enough. If you truly don't have any fears about risk, you're missing a critical self-protection mechanism that comes factory-standard for even the most primitive creatures on the planet.

In particular, when I encounter people who suggest that I shouldn't have any doubt about an financial transaction, I hide my wallet and back away slowly.
Browsers aren't supposed to be able to read it. If someone is spitting out custom XML, the client is not meant to be a browser, it's meant to be an app of some sort, or an Ajax client who can read it.
I was once approached to help build something like that for a prison. Essentially, it'd match the prisoner to their mugshot to ensure the right person was let out. I turned the position down, as when I asked about how they would store the eigen-vectors for that many people and index them I was met with an awkward silence.

I do like the idea of processing Facebook's data, but that's another plan entirely.
Or Nokia then BB. Nokia is still the dominant device outside of NA ~40%+. So if worldwide reach is important . . .
Heh. Most mornings I start my day with /., HN, etc... knowing full well that it isn't particularly optimal. One thing that I think is effective, if you're in this habit like me, is to do an hour or so of work on a project before checking these sites or reading e-mail. I find that hour to be particularly productive. If you can do it on monday you'll feel like a saint. Plus, it seems fewer people are interrupting you that early (perhaps because they're too busy reading HN & email? ;))
Yeah, he does come off as an ass, but I don't think this is an overreaction. On most ISPs such an action gets a user booted permanently with no recourse for dispute. With great power comes great responsibility, and PayPal has shown no responsibility here.

Legal letters as a rule should never be sent by a crawler. If it is, I'm sure PayPal is doing something illegal. If it isn't, then someone at PayPal seriously fucked up and didn't do their job.
In the linked article, whenever they mention a person with a particularly poor Wikipedia photo, they have a hyperlink. When I saw this, I thought, "how progressive for them to link to all the photos so I can see what they're talking about!"

Of course, they don't actually link to the Wikipedia photos, or even the Wikipedia page. They link to the near-useless, generic NY Times "more content about this" page for that name.

I guess it was never a mystery why people started leaving newspapers for blogs, was it?
Little Schemer, then SICP. For sure. As for TDD, take a look at SchemeUnit, which I've found very handy in testing the exercises in Little Schemer.

SICP is one of the single most valuable and important texts in CS. Little Schemer is structured as a real training regimen to get your mental muscles ready to handle that theory.
Thanks - I'll give it a shot.
I agree, that REST is (slightly) less appealing if your only clients are browsers. However, my main gripe is with XML/JSON API's designed for clients other than browsers.
Microsoft contributes Hyper-V drivers to the kernel
I've never really understood premium domains as being that important to a site. Oh you have to be able to find the site (keywords) but then, personally, I just bookmark it and if it is something I use all the time then I drag the site icon to my bookmarks toolbar, DELETE the NAME and just use the icon to show me what it is.
JVM doesn't have a way to call another method without pushing the caller onto the stack. x86's jump instruction does that, and on x86 you can directly change the stack pointer too.
I believe that you can replace directly recursive
tail-calls with the `recur' special form to achieve
an iterative function manually. If the function is
truly recursive, then Clojure will likely behave
much as any Scheme would.
While I can accept the strong notion that no person can navigate, this does not map to navigation doesn’t happen. Smith's invisible hand ala co-evolution (and more appropriately natural selection) guides technology perhaps even more than economics or biology.

I want to spend more time reading the article because the suggestion to let it these curves guide investment and personal application of time and effort seems less than straightforward.
Some would even say before 40 hrs. It's a ridiculous farce that productivity gains have not led to a shorter work day or work week.