skysight-inc/HackerNews huggingface dataset:
Show HN: IntercoolerJs – A Declarative Ajax Framework
Hey All,

It isn't 100% complete yet, but I've decided to cut a 0.0.1 release for IntercoolerJS:

http://intercoolerjs.org/

Intercooler is a Partial View Controller framework, where AJAX responses are HTML fragments (partials) that are swapped in for existing content, based roughly on the Basecamp 2 approach.

If anyone else is interested in working on or using the project, please let me know: there is still tons of interesting work to do (e.g. back-button/pushState() support)

I think that, for many apps, this might be a good way to get 90% of the UX advantages of a thick Javascript MVC framework, at a fraction of the complexity.
As a person who is generally considered to be good with scary numbers, I can confirm that this is exactly how it works for me.
It's deeply ironic that much of Silicon Valley spent the 90's obsessed that Microsoft would become the gate-keeper to the Internet and or Web, and be able to levy a toll accordingly.

And here we are, with Silicon Valley as the gate-keeper instead.
It's always amazing to see people travel the world and make an impact. It's easy to be hyper-focused on growth metrics and silicon valley that you can lose sight of the bigger picture.
Respect from Oregon. I tell all my friends about you.
As others have noted, as an Apache project, the CouchDB project can't be "purchased by Oracle". Obviously you meant that somewhat metaphorically (and as a reference to MySQL), but it's worth noting:

MySQL was the product of a private company. It was always possible for it to be purchased, and that eventually happened. The same is true for many modern databases, including most of the major NoSQL databases. CouchDB cannot be. Yes, there's risk of the project could die in a variety of ways, but there is an entire class of risks that CouchDB is not subject to, when most of its competitors are. If you really want to avoid having your DB purhcased and killed by Oracle, you'd actually prefer CouchDB over, eg, MongoDB.

Beyond that, you say: "You'll have to clone Couch's REST API". That's actually the other half of what makes CouchDB a safer bet: The HTTP protocol is itself open source, well documented, and has already been cloned repeatedly. It's used by quite a few different projects in different ways, including PouchDB, CouchDB, TouchDB, Hoodie.io, BigCouch, and CouchBase Lite.

If you're curious about the topic, I recommend this blog post:
http://caolanmcmahon.com/posts/couchdb_is_not_a_database/
Yes, the Foundation CEO basically signed off on a PR stunt very damaging to Mozilla:

Mozilla Foundation Executive Director Mark Surman issued a statement to Ars in response to employees speaking out against Eich's hiring. "Our culture of openness extends to letting our staff and community be candid about their views on Mozilla’s direction," Surman wrote. "We're proud of that inclusiveness and how it distinguishes Mozilla from most organizations."

So, the split boards governance is a problem. Baker is the Chair and head of the project. She created the Corp CEO job and led the hiring process. She's the Chair of both Boards.

Its slightly awkward for a company to use its political activsm against itself in this way. It's even more awkward to manipulate the media to do it in public. Its even triply awkward that it was aknowleged publicly (usually indicates legal signed off on it).
JavaScript is the BASIC of today.

Which means, by extension, many of today's JavaScript frameworks are the VisualBASIC of this generation: frameworks that let you use a "child's" language for grown-up work. The reactions to using JavaScript for real applications exactly parallels what people thought about VB when it came out.
First of all, this is absolutely impressive in concept.

Yes, it's too easy that way:

map.pO = map.placeObject;
map.placeObject = function(x, y, w){
return map.pO(x, y, w=='block'?'empty':w);
}

Does not even need call. But while you cannot protect from `Function['p'+'rototype']['c'+'all']`, I think using `defineProperty` to stop mucking with the code would go a long way into preventing blatant cheating at little cost. That or enclosed reference funcs.

Btw, you trust the level increment counter before succeeding in loading the level. Right now calls are 503ing, so basically I'm [gisting bogus solutions](https://gist.github.com/anonymous/f1b06d63848d6d013e26) but it's also saving those bogus level ups in localstorage...
Youtube uploads suggests to me they want functionality from any source to get an edge on the competition.

Definitely this. PS4 users constantly complain how, in order to get a video on YouTube, you must upload to Facebook, download the video, then upload to YouTube.

Granted, we're getting USB output soon enough, but direct upload to YouTube would be ideal.
The bug is in the handling of the TLS protocol itself (actually, in a little-used extension of TLS, the TLS Record Layer Heartbeat Protocol), and isn't exposed in applications that just use TLS for crypto primitives.
Retired teacher took her own life after being 'left behind by digital age'
We wanted to own our data, wanted to maintain existing user accounts, don't care about federated commenting login, want to keep old comments on old stories, and didn't really feel like paying someone (or letting someone suddenly add ads to it).

Building it from scratch on top of the WP database made sense for us. The WP commenting code is some of the worst (and oldest) stuff in the entire codex.
hah, I tried that multiple times, i get: You are not allowed to use call!
Awesome! Use three.js for more fun!
The caret Package
Dear Newspapers, Please Stop Ranking My School
http://jayshah.me/blog/dear-newspapers-please-stop-ranking-my-school
I didn't attend the Rochester Institute of Technology, but friends of mine who go there tell me that co-ops are a mandatory part of the CS program there.
I don't quite understand how this bug works. I would appreciate any input from someone knowledgeable.

It sounds like the heartbeat code is sending some data in the handshake. That data should be harmless (padding? zeroes?) but the bug results in reading off the end of an array and from whatever other data happens to be there. Someone sniffing the connection can then see those bytes fly by. If they happened to contain private info, game over.

Is that a correct read on the situation? If so, my followup questions are: 1) Why is there any extra data being sent at all beyond a simple command to "heartbeat"? 2) How much data is being leaked here and at what rate? Is it a byte every couple of hours, is it kilobytes per minute, or what?

I am particularly interested in #1, since that's the part I really don't get at the moment. I suspect the answer to #2 will be implied by the answer to #1.
Why is it difficult? I run a medium size website, with a custom threaded comment system. It receives 30,000 new comments a day on average. There has been zero issues, it's a simple comment table in the database with an index, and some standard queries. It's something you could literally code up in an afternoon.

Now, if you receive a hundred million comments a day, it'll be a little more complicated, but those sites are few and far between. At that point, you most likely have a budget for better hardware and specialized staff.
I also had to overwrite the map.verifyXitems (or whatever it was) to return true regardless.
Great work guys! Looking forward to playing with this!
64-bit Snapdragon 810 sets high bar for mobile SoCs
I'm not convinced there is much interference from the conductors to warrant a double-blind study. Either way, I believe the original paper never claimed that "professional violinists can't tell the difference", that's the media twist. It proved beyond reasonable doubt that professional musicians do not prefer the antique models based on any objective qualities.
Hey guys, one of the developers here.

Thank you all so much for all of your feedback! I never thought this game would become so popular.

It seems that our server is more or less overloaded right now, so AJAX requests for new levels are sometimes failing. This appears to be the cause of the bugs that some of you have experienced where levels load incorrectly or are overwritten by previous levels. Sorry about that. :-/ We will work on making the game more robust in the case of failures like this.

If you want to run the game locally, you can clone it from https://github.com/AlexNisnevich/untrusted and follow the instructions there.
If you have the financial assets please take some time off. Disconnect from your work and relax.

Rejection happens if you are misunderstood - if you are close to burnout you are not 100% yourself.

Hope this helps you.
Any plans to do an Android version?
Ask HN: Customer Support Experience
Hi HN,

I've been wanting to get started with providing customer support for a startup. I currently work in corporate finance and am effectively a customer support person for the users of our financials. I really enjoy helping people and solving problems using great products.

I can probably commit 6-8 hours per week providing customer support for users of your product, answering email and explaining features. I have experience with putting together screen casting, tutorials, and walkthroughs so I can handle any type of "customer evangelism."

No need for pay - looking to build startup experience.

Drop me a note at andrew@presetlove.com if you're interested.
Does sshd only use TLS/OpenSSL "for crypto primitives"? Or not use OpenSSL at all?
All reasonable certificate authorities will — at no cost — revoke your existing certificate and issue you a new certificate with the same expiration date as your old certificate. You'd just need to send the CA a new certificate signing request created from a newly-generated RSA key pair.

If your CA wants you to buy a new certificate to recover from a key compromise, your CA is taking you for a ride, and you should find a less horrible CA to throw your money at.
Sooo in layman's terms - we only need to be worrying about HTTPS and not SSH ?
And now we know that cash infusion Blue Bottle got is being put to good use.
I'm a huge believer in AppCoins via @naval + @FredWilson, including my own writings on the subject (https://gist.github.com/fractastical/6e4a6aff1dd329e0a204), but this is still a bit opaque to me.

Some questions I have right off the bat:

How many AppCoins are there per app?
Is this established at the beginning or can more coins be minted along the way?
How is this enforced? Is it distributed? Does it exist on the blockchain in some way?
Is there a market for AppCoins? Are they tradable? Or are they only dispensed by the project creator?
Do the holders of AppCoins have any particular rights besides a potential revenue share?
Is the revenue share enforced in some way? Legally? Programmatically?
Oracle's M.O. is to pushing their newer product lines and preventing customers from keeping their investments (i.e., Fusion and surprisingly, still Peoplesoft).

While this is a business-as-usual dick move, it's also completely expected - see their legal actions against the TomorrowNow[1] organization purchased by SAP, and their now-infamous legal attacks against Google for independently implementing a JVM byte code interpreter.

[1] http://en.wikipedia.org/wiki/TomorrowNow
I too believe that math is most easily understood geometrically. I've suspected this since highschool, when I personally derived many of these gifs during trig class.

I don't have anything more than anecdotes to support this hypothesis, but it shouldn't be surprising given that an entire brain lobe (occipital) is devoted to visual processing [1]. And remember how our first introduction to numbers was "the number line"? The reals are isomorphic to a line, but defining the reals as a line isn't feasible since a line doesn't differentiate the rationals from the reals (or anything in between). But on the other hand, showing kids a line is easier to grok than defining numbers as "an ordered field", isn't it? Also consider that Newton invented calculus using infinitesimals, which made sense to him spatially but didn't find rigorous footing until Weierstrass [2]. Additionally, the Greeks used to refer to finding a figure's area as "quadrature" [3], i.e. finding the area of an equivalent square. If not universal, I'd say geometric interpretations were at least pretty widespread.

[1] http://en.wikipedia.org/wiki/Occipital_lobe

[2] http://en.wikipedia.org/wiki/(%CE%B5,_%CE%B4)-definition_of_...

[3] http://en.wikipedia.org/wiki/Quadrature_(mathematics)
Top 5 Stats in 2013: Mobile
Show HN: Create Google Viz in Seconds
> Recovery from this bug could benefit if the new version of the OpenSSL would both fix the bug and disable heartbeat temporarily until some future version... If only vulnerable versions of OpenSSL would continue to respond to the heartbeat for next few months then large scale coordinated response to reach owners of vulnerable services would become more feasible.

This sounds risky to me. I'm afraid attackers would benefit more from this decision than coordinated do-gooders.
The Opposite of Creativity
If you're running a vulnerable version of OpenSSL and want to be truly careful, assume your private keys (not just certs) are already compromised. Once new packages are available, you need to update and then re-roll your crypto.

Also, if you're using those keys to protect other secrets like passwords - say, DB credentials or AWS keys stored in an HTTP-hosted Git repo behind - you can't really assume those are safe either.

Fun times!
A simple nuclear trick for LvL two and on:
http://pastebin.com/c7vqzrU3
I don't presume to know what King or Gandhi would have done. But I don't think speaking out against a public figure who stands against equal rights is wrong.

Sure, but going after someone for a political donation from 6 years ago after the issue has already been won seems vindictive and socially counterproductive. Can you point me to something that MLK, Mandela, or Gandhi did or said that would indicate they'd do something like that? I can point to many examples of words and actions of theirs that would suggest they'd advocate for a more magnanimous path.
Coachella Music Festival Rentals
> Your definition of "civil" and mine are not the same. I find it intensely uncivil to try to strip marriage rights from multiple friends of mine.

I would agree if Eich were still doing this, but that was a long time ago. Like I said, I feel like people were punishing him for past wrongs that indicate a "wrong opinion" rather than trying to right current wrongs.

> You can't choose to be Not Black. You can't choose to be Not Gender Dysphoric. You can choose to be Not Bigot.

Can you? I didn't choose to think homosexuality is OK. It's just the way I feel. I don't think I could possibly choose to believe homosexuality is wrong — that's just not compatible with my morality. Are you really capable of arbitrarily choosing to believe things?

Unless you're talking about actions. In which case it seems to me that Eich has chosen to be Not Bigot for over half a decade.

> Have you looked at his donation records? He has a pattern of backing politicians who are notable in their "culture war" self-presentation, who make a point of speaking about how terrible homosexuals are. Pat Buchanan. Thomas McClintock. Linda Smith. Proposition 8.

Most of those were so long ago that I wasn't even old enough to vote. McClintock is the only one he's backed in the past decade AFAIK, and to the best of my recollection McClintock tends to focus on financial issues. (McClintock is against gay marriage, but I don't remember it ever being a focus for him. All of the McClintock supporters I know like him for his fiscal policy.)
> Back in the baud days, most BBS hacking was to get into well connected boards and from there get connected to the internet.

I'm not sure what you mean. Free dialup internet access used to be trivial. You could put fake bank account or credit card numbers into services like AOL and get free accounts that lasted days or weeks. Many local dialup ISPs just mailed you a monthly bill. All you had to do was put in someone else's contact info and bam, instant free account.
Partially true; practically not.

Most VC funds do have exit dates and specific life spans (typically 7-10 years). The way it was explained to me that if you have 10 companies in your portfolio, by year 7 you will have:

* 3 total busts. Out of business; zero return on investment.

* 4 "walking dead". Still in business, but just barely breaking even. Might as well be zero return because these investments are not liquid (who wants to buy a 7-year-old risky business with no profit?) Anymore these end up as acqui-hires with the VC getting pennies on the dollar.

* 2 minor successes. Good, profitable companies that will probably never produce a hockey-stick graph. 2x-3x return.

* 1 home run. If you're lucky. 10x return (though usually closer to 5x).

Her example was bad, but it was just an example. VC is a tough industry to actually make any money in. VCs don't pressure founders to do things because they are greedy, it's because they're scared of losing their shirts.
Home Demo at Google VC's House on Potrero Hill
I was involved in this "scene" in the late 80s/early 90s. If I were the same age I was then today, I doubt very much I'd have gone down the same route because of how much the world has changed.

Back then I was using a Commodore 64 hooked up to a tv with a modem (starting at 300 baud and moving up from there); hacking (in the phrack sense) and "phreaking" allowed me to access a much wider world of information and computer resources than I otherwise would have had. Access to "real" computers that can run C compilers! Access to instant communications with people around the world!

These days this sort of thing is no big deal; you can buy a veritable super computer for less than a hundred bucks and run a free OS on it with a full developer ecosystem, worldwide calling is essentially free, the modern Internet gives you access to more free information than anyone could possible consume. But back then, as a 12-18 year old (without parents who worked in CompSci academia or such) all of that was unattainable by legal means, thus the hacking.

The "groups" for me were a secondary thing and a means to share knowledge (again, prior to the web and easy access to ridiculous amounts of information) and they aren't really needed anymore for my personal use case (though I'm not suggesting mine is the only use case, I know a lot of people who were certainly more into it for the social aspects, which still exist today).
that's a page straight out of netflix and amazon prime's approach. absolutely fascinating.
Our team just released this feature. Look forward to your feedback. Here are a few examples.

Zillow Traffic Growth:

https://vida.io/charts/DYkAacZSKKQYE7dAk

Youth Happiness Index:

https://vida.io/charts/8hnbj3YZ2rvsBqs7F
Thanks for your response. The #1 issue I have is that you have been repeatedly comparing your (low) flat rates to Microfinance institutions' (higher) average costs. But that is comparing apples and oranges. Your rates are low because they are flat rate numbers. If you converted them into APRs, they would roughly double.

If you displayed your flat rate numbers into APRs, then I wouldn't have any problems with your marketing. You could compare your average Zidisha APR of 25% to the average industry average of 35%, and lenders could make their own informed decisions.

I agree that deleting that interest rate diagram is appropriate. However, you have repeatedly
compared your low flat rates with high APR rates elsewhere on your site. For instance, in this page on your site, you say, "While other microfinance services charge borrowers interest rates upwards of 40% or more, our direct peer-to-peer microlending model reduces the cost of Zidisha loans to just a fraction of this." [1]

Statements like these lead to articles comparing your low flat rate to others' higher APRs. [2-5]

To me, comparing your flat rate numbers to other people's APRs feels like a deeply misleading comparison.

I'd like to hear your side of the story here. Perhaps I'm missing something.

[1] https://www.zidisha.org/microfinance/why-zidisha.html
[2] http://www.dailykos.com/story/2012/08/27/1124759/-Kiva-vs-Zi...
[3] http://techcrunch.com/2014/01/23/zidisha-launches-a-kickstar...
[4] http://www.techrepublic.com/article/10-things-to-know-about-...
[5] http://www.huffingtonpost.com/julia-kurnia/zidisha-vs-kiva-z...
Ah, so you would have maintained a healthy distance during the civil rights movement in the 50s and 60s as well?
Writeup was too long. We need to know the short and sweet of what to fix.
Does anyone know how much one would make in a Finance Internship at a hedge-fund, prop firm and investment bank?
Is it a problem for those using ssh keys on github ?
If we could just make being poor a crime.
I'm very curious to see the change that introduced the bug in the first place. According to the announcement it was introduced in 1.0.1. That's the version that added Heartbeat support, so maybe it was a bug from the beginning.
It's an important question to ask.

When I read "What if all 89 voices said the same thing?" I thought I understood the thrust of the article; that overpersonalisation creates an echo chamber devoid of the dissent and reflective views that allow people to make their own minds up and that therefore overpersonalization has insidious potential.

I was dismayed to find that "What if all 89 voices said the same thing?" was seemingly being asked as if the answer was obviously "Oh God yes where do I sign up" (and I do understand that their target audience would likely reply as such).
That's only an argument that there are some cases where DMS is inappropriate, not that it's inappropriate for all cases. Considering that in general, setting up a robust Nagios install, configuring it, and maintaining it, costs far more than DMS, there are many scenarios where DMS is the rational choice.
As a note, ads are totally optional, and Sponsored Comments are part of the ads offering. "Just comments" is always an option for any type of site.
Very true. PayPal has an incentive to handle more transactions, not fewer ... so making the deliberate decision to blacklist a region wouldn't happen lightly, wouldn't happen without careful study, and likely would be revisited from time to time.

The article writer speaks in this general direction, actually:

It is also high time our governments start to stand firmly behind young African men and women developers ... It is not enough to congratulate them vocally of their achievements, it will be right if you can support them with your resources be it financially, intellectually, skills and much more.

I would call taking their reputation seriously and dealing with the problems falling under the "much more" category.
He made a donation there is not one word or action ANYONE can say he did that was inappropriate.
when i played 'dance central' for xbob 360, my friends and i loved the little session where they take a few pictures of you dancing. i have no idea why they didn't let you post those to facebook. comic gold!
If they knew about some other feature search-boxes should have, but which their product doesn't, don't you think they'd add it to their offering? #1 and #2 being true is the equilibrium-state of building a product to address every problem you're currently aware of.
Is it a no questions asked delivery as long as it is within the size limit? (Drugs?)
We do have all those wonderful things. However they do not exactly apply to city regulations in SF. Of course, most egregious abuses - like gun laws in DC and Chicago - eventually may get attention of the Supreme Court and even get shut down, but it is a long uphill battle even if the right being restricted is explicitly mentioned in the Constitution as one not to be infringed. But the powers of local authorities to regulate local commerce are unlikely to be challenged by either Congress or Supreme Court, so while all those things are nice and useful, I'm not sure how they would help in this particular case.