skysight-inc/HackerNews huggingface dataset:
Rise of the Patent Troll: An "Everything is a Remix" Special Presentation
>doesn't make useless dodads or chat apps or whatever

To be fair, Atlassian makes HipChat, and though it's not exactly the foundation of their valuation it is a pretty significant product.
Can you talk more about why you want this and what need is not being met by current services?
Why do they use a name that would make it almost impossible to search information on it? I can understand "C" on a pre-internet world, but "D" in 2014?
I really can't speak to this as I don't really know Django.

But I personally didn't find Ruby hard to learn, and in fact I found it pretty intuitive.

The metaprogramming in Ruby allows for the creation of intuitive DSLs and APIs that are more difficult to achieve in other languages. While this can lead to a lot of the "Rails magic" that is often used without understanding, it can be highly productive for folks that really know it.

Beyond that, I honestly don't think there's much difference between the two. Certainly not enough of a difference to agonize over the choice.

The choice worth agonizing over more is whether you want a full framework or if you want to cobble together a toolkit of libraries to build your app. This choice exists regardless of language. I know many Python devs that won't touch Django and prefer Flask for everything.
I was disappointed that there was no real discussion of why you would want to do this. I see some potential for interesting optimizations, but that's ... it.
Many people have commented on the legality of using this software. I didn't think it needed pointing out that using this on servers you do not own is strictly against the law. My only reasons for writing this is to show exactly what can be done with the vulnerability and how scary it really is.

Many people have a vague understanding of how bad it is to lose a private key that is used to sign SSL traffic, but showing that one is able to hijack sessions en masse makes this vulnerability much easier to wrap our heads around.

Don't be idiots out there.
> Basically: this vulnerability must be patched, or the server must be taken offline, and that needs to happen everywhere.

No one is arguing against that. The point is that from the user's point of view, they shouldn't interact with a server at all if it is still vulnerable to this attack.
There's a $100 Philly cheese-steak that literally contains all three of those.
Yes it's disappointing, above all considering that a better implementation is achievable in twenty lines of code in a model
You seem to be talking about something different from what sullivanmatt and I were talking about. He said that collecting session IDs is not illegal, but posting them would be. That is the statement with which I was taking issue.

At any rate, it certainly doesn't seem correct to say "it isn't illegal" as a blanket statement.
How to build app with Marvel Comics API (code samples, how to)
This will be similar to the trendnet webcam "/anony/mjpg.cgi" ordeal. To this day there are still many webcams on the internet that can be viewed by anyone and the owners of the webcam have no idea whatsoever.

We're going to have fallout from this for at least the rest of this year and well into the next.
Enough to Hang Yourself By – A Parable about Unit Testing
Twitter Gives a New Look to User Profiles
While your point stands, it was "D" in 2001.
A journey against yourself
My story to the marathon finish line
Work Accomplished = Time Spent x Intensity
Tips and tricks on how to succeed at SxSW
In short, private virtual addressing is legacy cruft from a time when this was the only way to organize things due to a constrained memory block identifier namespace.

Think about it like IPv4 vs. IPv6, i.e. hacks like NAT, vs. "everything has its own IP address in a single flat address space of IPs".

It's the same, but with computer memory. And it has the same benefits.
Show HN: Rude List – France's Startup Database
It's a client problem too. Many people are over-looking that.
>What should we call Gillette's pricing on razors?

Razor blade pricing? This is what I grew up with it being called slangly. As in, give away something up front and then gauge huge on the backend. Another example would be that He-man toy that had crazy-expensive slime refills. shrug
Walter, always wanted to ask you - what do you do for living? Is it something related to D or compilers in general (consulting maybe?). Also interesting if Digital Mars commercial compiler had/has any success.
TWiT "Marketing Mavericks" Episode 1: Taco Bell CMO, Oculus, Twitter Redesign
How Top Brands Are Using Twitter
Not you. But (someone connected to)+ you.
letter_opener[1] is really useful to avoid the test account + wait situation. Well, now you can just use mailer previews, I guess :)

[1]: https://github.com/ryanb/letter_opener
Dear Guido,

You lost me at 3.
This is utopian fantasy and will remain utopian fantasy until you can teach my mother how PKI works.

For 99% of the population, excel formulas are the pinnacle of their technical prowess.
An Econ 101 model of the world breaks down in many ways - this is one of them. If the supply is not in doubt, but the hotels all raise the prices collectively knowing that the investor meeting is being held, it could be interpreted casually as price gouging.

The situation is like a prisoners dilemma for hotels. If they all raise prices and none of them break rank in price, then they all make more money. BTW, just by pointing out the option of Airbnb, Buffet makes it more likely for a given hotel to break rank in a collective price bump.

Another way for Buffet to break gouging might be to publicly announce the price spikes as something driving consideration of future alternates for his meeting. But his past behavior makes that unlikely given that he would likely have to shift to areas with larger travel markets so as not to be a large percentage of the existing travel capacity of the locale.
I don't have personal experience with it, but apparently these things are booked months in advance, on a contract basis. The engineer doing the audit spends an agreed number of weeks finding as many problems as they can, and hand you a report at the end.
Interesting, I looked through it, and his other repos, and he seems to be a really solid rails guy. Looks like a promising kit, especially considering how much of a pita setting up CanCan with Rails 4 can be.
Crazy -- it's already halved from 2006, when it was 10.8%
> (...) as part of its dragnet mass surveillance programs.

There is likely no agenda related to those groups in particular. They are spying on everyone.
Meet Your Inner Fish–and a few other animals left inside you
Do you have the same feelings about the Rapid7 team? What about the guys at Tenable? Heck, the Offensive Security guys are making an entire Linux distro that is nothing more than "evil hacker tools". Surely there are countless crimes committed with their software. Do you believe that all of them are in the wrong.

I am not an exceptionally gifted programmer. This is a trivial change to the original PoC to point out an additional attack vector. Pointing out that there is more to this attack than leaked private keys is very important.
>Also, the name (bastardizing the Japanese pronunciation of Godzilla) always feels somewhat racist to me.

That is extremely reaching, like on a hole new level. Do you get this offended in real life too if a coworker makes a joke? Genuinely wondering.
It's depressing but not hugely surprising to find that the comment thread is mostly people defending price-gouging.

I've just spent a while trying to come up with an argument against, but really it comes down to whether your personal values prioritize cash flow over being decent to people, and that's not something I can talk anyone out of in a web post.
Good things happening in venture capital
I once considered myself a fairly savvy gamer, but for the life of me I can't figure out what the actual underlying mechanics (and therefore the optimal individual and team/clan strategy) of this game are. In the live video I've seen of these big battles, as far as I can tell literally nothing is happening. There is very little movement of anything on screen, and very little input from the player. I'm obviously out of my element.
It is likely to keep hitting new lows unless these colleges drastically increase the number of seats that they have on offer (which is unlikely if they want to maintain the aurora of attracting and educating the best and brightest).

More students want to attend college than ever. The ease of the common app takes the pain out of requesting "paper applications" from colleges individually and college ranking lists are available for all to see. Most students have colleges segregated into:

1.) top choices; 2.) middle of the pile; 3.) safety schools

and it is mostly always the case that a lot of students are qualified enough to be at these institutions, so it is likely that this group will apply to the top 5 or 10 colleges because he fits the profile of the student most likely to attend these institutions. Almost 30% of applicants are applying to 7 or more colleges and these low acceptance rates will only perpetuate the increase in this ~30% figure because students are afraid that they won't get into the top two college categories.

From the article:

> Students applying to seven or more colleges made up just 9 percent of the applicant pool in 1990, but accounted for 29 percent in 2011.

> ..students send more applications than they once did, abetted by the electronic forms that have become nearly universal, and uniform applications that can make adding one more college to the list just a matter of a mouse click.

On another note I was recently talking with a CS professor and he mentioned that rankings are highly correlated with the years that an institution has been in existence which is worth thinking about.
Also in Econ 101: All else being equal, if you can solve the same problem at a smaller cost, do it.
And we've had vectorization years ago in the JVM.
Scary if you are on the receiving end, like most people. But they are on the power end.
This is what happens when you get caught in the middle of a topic that pretty much has a 50/50 split on support/opposition. Mozilla has already stepped in shit. Every move from this point on just smears it around without actually cleaning it up.
I use https://freedns.afraid.org/. I appreciate that they support a URL that you can cURL, but I've never actually needed that, as Comcast never changes my IP address (although they're allowed to do so, I've had the same address for at least 3 years). Personally, I just use a subdomain on one of the domains they manage, and use a CNAME on my own domain to point to that.
Tiempo: Revolutionizing Secure Contactless Payments
You need to use Go version >= 1.2.
Just FYI, that's called a loss leader. Printer ink is the classic example.

http://en.wikipedia.org/wiki/Loss_leader
Woah, that looks pretty good, the on-boarding was fantastic. Sadly Poachbox first impressions was not on par at all.
Phusion Passenger OpenSSL Heartbleed security update
Per the article, this is really an increase in number of applications per student rather than any other change. There hasn't been a net reduction in the number of students accepted somewhere.
Can you elaborate? I own 2 domains through them and have been nothing but happy with them so far.
Ask HN: Java-based integration development learning path
Hello all, I'm interested in getting my hands into integration. My background is Java based web development: Struts, Spring, some exposure to Grails. I don't have experience in web services or integration. The apps I've worked on were more CRUD-like systems without any integration.

I'm trying to figure out a learning path of where to start and what to learn next. The technology I want to get familiar with is: Camel, CXF, ActiveMQ. This is because that is what is used at the place I work. I'm not in a developer position at work and the people that do this type of work for us are a third party. I'm looking to learn some of this stuff on my own.

I'm looking for a more structured learning environment rather than just "playing with it". I think it would be a bit overwhelming to try to learn it all at once. Learning for me is easier when I focus on 1 thing at a time, which is why I want to break it up into pieces instead of throwing a bunch of tools together and figuring it out.

I'm open to doing virtual classroom courses. I found a 3-day Camel course offered by RedHat and it seems like it would be a good start.

For those that have experience with these tools, is Camel a good starting point? Then, say, look into CXF and ActiveMQ?

Thanks in advance for any advice.
>The long-term national interest of the USA and other countries is the spread of our good values - freedom of speech, freedom of assembly, self determination, respect for international law etc.

That's not really an interest, short or long term. What are the various lobbies to gain from this? What is indeed an interest, and has been for over a century, is being the top dog, and taking advantage of that (using propaganda, lackeys and military power when needed) to get cheap resources, favorable trade deals and allies that ensure this goes on forever.

Playing on a level playing field has never been of interest.
As I was reading your comment, I heard "Call of Duty: Seniors Tour". Sadly[1], that actually would be a great idea although the definition of seniors might be interesting.

1) sadly that the environment is so toxic that this would be desirable
Googling "D language" works just fine. No problems.
"What should we call Gillette's pricing on razors?"

A triumph of marketing since you can get as good or better razors from companies like Dorco for a fraction of the price.
This is a very valid question.
Yeah, it's "production ready" in the sense that the starterkit project was pulled from a couple of production apps and properly configured with a nice selection of gems.

Most starter kit apps help get developers up and running in a development environment but leave a big gap between dev and production. Sometimes this is good, but a lot of web apps are very similar.

I got tired of rewriting authentication systems, configuring gems, and repeating the same tasks for each project. Even if you use Devise and similar gems, you still have to do a lot of work to create a good UX and integrate OAuth. And then you have to dig through each gem's documentation to make sure it's configured properly for a production environment.

The rails4-starterkit is basically my dumping ground for tips, tricks, and production tuning settings for Rails 4.1. You'll still need to make adjustments for your own app, but it's a much better starting point for cranking out weekend or freelance projects.

I'm also open sourcing my node starter kits, but they're much earlier on in development and better node projects already exist.
When someone says "price gouging", you imagine a vendor raising the price dramatically when they see that someone is in urgent need of something and in no position to negotiate. For instance, if a gas station owner raises the price to $50 a gallon when they see someone limping up with a gas can, and then lowering it again when they leave.

This simply does not apply to an investor conference. There is plenty of advanced notice for people to plan accordingly (perhaps even -- gasp -- invest in more hotels if they are raking in so much dough).

It seems pretty simple to me. There's a demand curve for the conference, which determines the ideal total conference price (which sells out the conference just barely). If people spend less money on hotels, that leaves more money for the airlines and the conference ticket price. It won't actually go back to the attendees, because that would create a shortage of tickets.
There are now at least 46 startups worth $1B+
With the addition of Atlassian today there are now at least 46 startups with a valuation of $1B+.
React js: learn the basics the right way, knowledge after real world experience
What I learned to be a successful startup engineer
Adobe brings Lightroom to the iPad (And the iPhone)
First, there is no straw man here. A straw man is a misrepresentation of your position, which I then argue against.

You proposed a fictitious law endorsing hate speech -- in other words an illegal law. Straw man.

First, it should be clearly noted that no one is calling for criminal penalties.

So the social penalties against gay men were perfectly okay?

Third, in a free society, you deal with the consequences of your actions

This is an appeal to a minimal standard of behavior. You are free to be a jerk to people you don't like. That's not a wise, compassionate, or great way to be.

Finally, again, there was no straw-man, and granting that introducing the notion of hate speech solves the issue

Oh brother. You concoct a straw-man law as part of your argument, then grant it as part of my argument? You have a habit of misplacing referents when it is convenient for you, with the effect of placing fictitious positions into other's mouths. You have done this in this thread and others. I leave it as an exercise for you to find and correct your mistake.

therefore they don't like me as much, therefore they prefer to do business with someone else

When people go digging up stuff from six years ago and use it as the basis of a mass action for an issue that they have won, it crosses a line.

So, your position is basically that all supporters of anti gay marriage political positions must be as socially stigmatized "as bad as racists," and that your job as a social activist isn't done until that's the norm. I'm sorry but that defies logic and is simply vindictive. We need not adhere to arbitrary, vindictive, and oversimplified social patterns of the past. (Isn't that part of the point of marriage between whoever wants to marry?) We will be further along in our journey as a pluralistic society when a gay marriage is no big deal at all, just like being in an inter-racial relationship is no big deal in the more cosmopolitan parts of our country. Your activism will be done not when your former opponents are sufficiently shamed and vilified, but when young people find your current attitude and those of Brendan Eich to be the quaint and incomprehensible stories of a past era.

Plenty of "perfectly legal" crappiness got done, and in some places still gets done to people with the "wrong" apparent sexual orientation and outward appearance. Doing more "perfectly legal" things that resemble a witch-hunt is only "an eye for an eye making the whole world blind."
It's not security by obscurity. It's security by diversity, which is arguably a good thing.
To be fair, the most memorable times I've played in games have nearly never been about the graphics or presentation, and nearly always about what something __means__, whether to me personally or to me as a player.

In MMOs, I remember the hard things I did solo, the hard things I organized a team for, and the personal milestones. The zones might be ugly or beautitul. The task might simply be to kite some big demon through a wintry landscape, or it might just be doing something in a new role for the first time. (First time tanking, early raid leading successes.)

In the brief (trial!) time I played EVE, there was a lot I had to learn, and never mastered... but I could see the appeal. While a lot of the success comes down to planning (ship loadout, where you quest/farm/etc), at some visceral level I was still hunting pirates, and trying to solo hard fights that I could not quite beat. It's a rush, even if it doesn't look as cinematic as Homeworld or action movies.

This is likely the same reason people can get amazed or excited about chess or poker. :-)
Yep, cf. "I firmly believe Rack is shackling progress for Ruby on the web." - @tenderlove

https://twitter.com/tenderlove/status/443893529010393089
...and apparently oblivious to the possibility that they might ever be on the "wrong" end of it.
LOL - "My boss is a dick, so it's Skype's fault!"

Try reading the ToS you agreed to when launching the program, bucko...
This gives me an idea.

Contact house/apartment landlords in Omaha about a month before the meeting, and offer to set up an airbnb in their empty units. The vacancy rate of rental housing in Omaha is about 9%, so Landlords would be interested.
Photography: Understanding ISO, Aperture and shutter for beginners
Isn't that part of a general problem with corporations? It's almost a requirement to prioritize cash flow over being decent to people.
I decided to switch to Namecheap just for this feature. Their domain interface isn't fantastic (it's good enough), but it allows me to consolidate all my DNS management there, plus I don't have to use extra services to update my hostnames, AND ddclient supports their API directly.
I thought of it as being more akin to the programming mantra of “use the right tool for the job.”

The part about the pendulum swinging back to some degree seems like a reasonable progression from flat design.
One interesting thing about this battle vs. the previous big one is that it was a deliberate action on both parts rather than an accident caused by a careless mistake or UI issue (depending on whose version you believe).

It seems like a victory for the PIBC in strict ISK terms, but it's not clear whether it was a strategic success (who ended up controlling the system?). Indeed less emphasis on numbers and more emphasis on the point of it all would be nice. Seriously, the whole thing ends by congratulating all involved for having a big fight without discussing the actual outcome.
The apps and most of the OS are distributed as the equivalent of high level byte code using 128 bit pointers. Once run it gets translated into the local machine code.

For anyone unfamiliar with the AS/400 and predecessors I highly recommend the expensive book by Frank Soltis who is largely the architect of it. Many things were done very differently than other operating systems and applications. http://www.amazon.com/Inside-AS-400-Second-Edition/dp/188241...
> Stanford received 42,167 applications for the class of 2018 and sent 2,138 acceptance notices, for a first-year class that, ultimately, will number about 1,700.

2018? What?
Orders projected to begin shipping 4/21
I have two domains with them as well and can't complain, but their UI doesn't exactly shout "trustworthy".
There is OpenSSL, nss, and GnuTLS. That's 3. Two of those have had major breaches this year.

How many more libraries do you think will provide adequate security?
Those groups investigate and report things like the torture by those guards in Afghanistan, and other such abuses. But also abuses of local lackeys ("allies") worldwide. Including stuff done by corporations that have powerful lobbyists, in banana republics, the third world, etc.

The agenda one would guess is: get them to stop, intimidate people who follow a hot lead, know anything that's about to be reported in advance, etc.

It even happens for ecology groups. Here's a case from Britain -- see how far these things can go:

http://www.theguardian.com/uk/2012/jan/20/undercover-police-...
This is really informative. You should submit it.
Also interesting is that the oft-quoted example of giving away the razors and making money on the blades is apparently more complicated in Gillette's case than the shorthand version suggests: http://www.law.uchicago.edu/faculty/research/randal-c-picker...
A&R Record Label Audition That Ripped My Emotions In Just 3Minutes