skysight-inc/HackerNews huggingface dataset:
1. I'm not sure there's any evidence of Apple loosening its grip the app store because a certain genre is popular on Android (eg Swype)

2. Apps take longer to develop, require more skill & time investment, and (if iOS) have to go through byzantine approval process. This mean longer iterations, less risk taking => slower innovation

3. The higher barrier of entry keeps a lot of people of the type that made the Web interesting from creating apps. Web dev was simple enough to allow non-techies to create some pretty interesting stuff. Most apps feel like they've been created by corporate dev teams or geeky college kids.

4. There's definitely a class of apps which couldn't be implemented as web apps - but that's mostly because the OS provides a limited API to the phone's features, not some inherent weakness of the Web model.
> (eg. the stacktrace challenge-response concept we have been talking about on our blog)

You wrote on your blog:

> Altogether, what this means is that, unlike Bitcoin, Ethereum will likely still be fully secure, including against fraudulent issuance attacks, even if only a small number of full nodes exist; as long as at least one full node is honest, verifying blocks and publishing challenges where appropriate, light clients can rely on it to point out which blocks are flawed

The fact that someone can extract compact proofs of an invalid state transition was pointed out by me years ago (e.g. https://bitcointalk.org/index.php?topic=96644.msg1064601#msg...), and I believe I described it you personally in Mountain View. It's equally applicable to Bitcoin (though not implemented anywhere for any system yet).

It's a bit irritating to see ideas from Bitcoin recycled as "innovations" in altcoins and incorrectly claimed as as not applicable to Bitcoin, especially when they're not even implemented yet.

This one has a bunch of gnarly engineering issues that make it hard to implement. You end up with fraud codepaths that are virtually never executed, so how do you gain confidence that multiple implementations actually implement them consistently? The best proposal I'd had on this (from bitcoin-wizards) was to always produce two versions of a block, committed under a common root, one which has a random flaw, and then always kill it and select the right block using a proof. But thats kind of complex and indirect.
It's been down for a few hours. I keep checking when I have a free minute but doesn't seem to be coming back up.
How does this compare in brightness to a regular lamp/lightbulb?
We've had a rough, shaky time using Jira, but it's almost entirely due to internal politics and constantly-shifting business priorities. (aka CEOs and owners who are just megaphones for their corporate customers) We intended to replace our invented-here ticketing system (which has Zendesk integration) with Jira, but instead we integrated Jira into that invented-here ticket system.

On the other side, my team has been bit by a bug from 2008 which prevents us from changing any ticket's state to Resolved. We can Resolve tickets, but their Resolution remains Unresolved. Since the Resolved state is central to most of Jira's built-in features, this means Jira has been broken for me since we installed it 6 months ago. The Your Issues default display shows all my tickets, including my closed tickets. The interface is not customizable enough to build workarounds for this problem.

Also, the name (bastardizing the Japanese pronunciation of Godzilla) always feels somewhat racist to me.
Phil Schiller Exploded On Apple's Ad Agency In An Email
.NET JIT and SIMD are getting married
oblig. BitBucket has free private repo's https://www.atlassian.com/software/bitbucket/overview

you don't get to 3 billion dollars without giving away a lot of stuff for free to infiltrate the enterprise
As someone who also uses and administers JIRA i'll have to respectfully disagree with that disagreement ;)

The backend application may very well be engineer-focused, but that speaks more to its flexibility than anything, IMO - as far as user experience, it's as empowering and minimalistic as you make it.

One of the few pieces of software I truly love.
Negotiating Startup Job Offers
Fantastic idea. This is one of the best examples of market hacking I've ever seen.
That is because it is actually based on Server 2003.
Onboarding at Percolate
valgaze: your comment is not visible unless a user has showdead turned on.
The NSA's job is more than simply spying -- they also subvert security through intentionally and maliciously weakening it. I wouldn't be surprised if the NSA considers it an acceptable risk that sensitive government systems are allowed to continue remaining vulnerable regardless of the dangers because fixing those security vulnerabilities would alert their adversaries to such vulnerabilities.

Even furthermore, the various intelligence agencies also weaken systems for their own convenience, and yet there is nothing stopping anyone else from exploiting such weaknesses. Isn't this simply recklessness and negligence?

We keep hearing about hackers getting customer data over and over again, is that because of what our government has done?

It's not just spying.
When half the secure internet is on fire... yeah, i think that's an acceptable time.
It's on par with a 30-40W incandescent bulb. Plenty bright to light up a small room or read by.
What we're losing is the browser as the client for applications.

And in doing so we're losing the extremely low barrier to entry for new apps, and we're introducing centralised controllers of what we may access.

It discourages the tinkerers and self-publishers, turns users into plain consumers, it creates gate-keepers to the new lands and reduces privacy.

I like apps, but I like openness more.
Mysterious light in Mars image sparks curiosity
Yes, power can be amazing. But this is also very scary, especially because we know it has already been used repeatedly in a harmful way.
Hi Ian, love your prices.

> dirtycables.com - Great idea, hope you're not joking again.

How about a dirtyassembly.com? Please?
It is hard to compare companies that are bought out, since they are valued higher due to the network affects with their new parent company.

i.e. if Instagram had a valuation of $800 million the $1 billion purchase price could make sense if Facebook believes their combination could produce the difference in price.
To take control of your domain away from a central third party, use .bit with Namecoin. It's not mainstream yet, but fixes many of these issues.
Apple Will End the War of the TV Set-top Boxes
Exploit hording is counter-productive. Exploits only have value when used, they have no defensive or other value. Their half-life is not in your control, at any time they can stop being usable. Therefore the best course of action when you get an exploit is to use it whenever you can until it gets fixed.
Oh, certainly... What does that have to do with my comment?

In my comment, I say nothing about whether or not the campaign was reasonable. I don't think that's a good argument to make. I did say that it's reasonable to judge someone based on their (reasonable or not) attempt to change public law.
Al Jazeera America: We Shouldn't Overstate Tech's Gender Problem
Show HN: Import Trello Cards Into Aha for Visual Product Roadmaps
> Yes, and they all suck.

Redmine ain't bad.
> The new mobile app-centric order hasn’t been a problem for Instagram, WhatsApp, Vine, Secret, or dozens of other new companies.

I don't know what Secret is, but Instagram, WhatsApp, and Vine aren't companies. They are divisions within Facebook and Twitter.

In fact, we should question why there are no big companies that have risen from the app-world that come close to the web's most successful companies: Amazon, Google, Facebook, even Yahoo.

That should tell you something that all of the app companies wind up being bought by web companies.
Why, it's not about the number of mines, so long as there's a path, it's very easy to solve. The number of mines is irrelevant.
> It may "just" be a matter of keep trying

I gave this some thought earlier today, and expect that address space randomisation can make this bug eventually expose the server keys. You need to hit an address that has been just vacated from a (crashed) httpd worker.

Most implementations clear encryption key material on exit, but a crashed process never got to run that code.
I said this very clearly before and was downvoted into oblivion, but I think it needs to be said:

This article advocates for some balance between flat design and skeumorphism. Granted, the article is written decently well, but it does not go into any detailed analysis as to where that balance should lie.

It simply states: Hierarchy should use composition and color. Cool -- basic design principle, check. Beautiful, readable typography? Yes -- sure. Strong emphasis on content, not ornamentation. OK. I've read this 1000x times already. What is new? Where are the analyses or case studies to support the principles?

We need to start talking about where the balance lies and why it lies there. Different interactions will require different balances to find optimality.
As you may know, Lego now has the EV3, which includes some enhancements.
Apps take longer to develop, require more skill & time investment

For equivalent functionality/experience levels? That doesn't seem obvious to me.
I just meant the text. When buying proto boards, you typically get asked to buy a minimum quantity, but they still show you individual prices - here it's a total cost, but that isn't 100% clear on the front page.
I'm really digging this information. Thanks for gathering/writing it. I know you didn't solicit requests for the design of your website, but man that right hand side bar is crazy unorthodox and gave me a difficult time with focusing on content. Not trying to cramp your style, just trying to give you some constructive criticism.
“When you know you’re the target and you don’t know when, where or how an attack will take place, it’s wartime all the time,” Ms. Hallawell said. “And most organizations aren’t prepared for wartime.”

The government should get in on this with pen testing and honeypots. Even individual companies don't have the resources it would take to make it an even contest. The government can't protect everybody, but it could change the risk/reward calculations of being a criminal cracker. (If done correctly, admittedly a big if.)
The price is unbelievably fair. Try deploying mysql in the cloud and while you are at it, you get Redis as well for cache and then you hit the wall you need search in your application, so you deploy elastic search as a service as well. Do the math and compare to ours.

Our pricing starts as low as $15 per month

The cheapest instance of amazon cloudsearch is around $79 monthly, You then have to deploy a transactional DBMS and then most likely S3 for storage as well.
Ah, I guess my experience is different. I don't get that "system" autocomplete on Google or anything else. So, i just use the one that the website gives me.
Security is pretty solid in terms of things like libraries where every library entry point is a call to a particular address. That eliminates a number of dynamic linking vulnerabilities. Every process can have its own memory prefix (rather than everybody thinking they are at 0) which gives better visibility to memory incursion and excursions. Kernel space is distinct address from non-kernel space etc (this got really challenging on non-64 bit machines at the end of their reign)

Is it a net win? I think so, there would clearly be new ways in which it would be a challenge but you can make some useful reasoning about validity of addresses with a numerical compare that isn't nearly as efficient in a variable address OS.
Cool. I incorrectly took your statement about “earlier in the research process” to mean this particular research process.

You mention unexplored gender-related differences: an interesting example that came up recently was gender differences in depth perception and how it relates to VR.

http://qz.com/192874/
The browser we love to hate. The version we love to hate.

Interesting (see footer) how many of those site were out there.
For those of you interested, the speakers are currently playing DI.FM's Electro House channel. Let's get this drive-in-theater vibe going!
> Like water flowing downhill, users gravitate to the best experiences

This is quite the loaded statement & a self-fulfilling prophecy in practice. It's quite common to see a full page prompt to download the App in big letters, and tiny text to continue onto the mobile site.

Of course it's a better experience to use the app. The first experience of the mobile website is an intrusive advertisement saying "use the app".

Given an apples to apples comparison, I find that mobile apps often don't have all of the features of the website. Youtube comments is a good example. You simply cannot edit comments on the mobile app.

Native Mobile apps also fragment development effort. This leads to a worse overall platform experience, since the development is fragmented to n platforms (don't forget about Windows & Firefox phones). When new features need to be added, they need to be developed on all platforms. The more complex the feature-set & UX, the worse this issue becomes.

This fragmentation is mitigated by using a tool like PhoneGap. However, you still have added complexity via versioning. It's overcome-able.

My current project has a rich mobile web experience. We also use phonegap, so all development is in sync. The featureset is complex & rapidly evolves. There are many edge cases. It would not be a practical business with n codebases.
This is one of the optimizations mod_pagespeed makes by default: https://developers.google.com/speed/pagespeed/module/filter-...

There's not usually much EXIF text but it isn't gzipped so it's more expensive than need be. This is the kind of tweak that's not really worth doing on its own but when you're already optimizing the image you might as well do this too.
I'm surprised he didn't mention iOS's "Add to home screen" functionality for web sites. I like how a web site can be given equal standing like that, and is easier to "install" than the app store. It seems like regular users don't often do this, however.
I went through a placement person for my time as a consultant. He handled the accounting, medical insurance, taxes (all withholding), and paid me 70% of the bill rate. If you went full up 1099 he passed on 90%. It was a pretty nice arrangement for me at that time in my life.

Do remember, many of the employees you deal with will think you are a member of the true oldest profession (Genesis 3:1).
I saw that as perhaps a way to compare Atlassian (mainly BitBucket) to Github

Atlassian is to Github as Box is to Dropbox ?
My son, who is 9, has been asking me to teach him how to mod Minecraft. He is obsessed with the game, which makes it a great incentive to learn to code. I am setting up a dev environment this week to do simple Forge mods.
Original version of this story had the end line cut off (https://twitter.com/gruber/status/453598509191929856). If this was an app, it would either have been rejected (for iOS) or need an update. Gruber didn't need to ask anyone for permission to fix it or having everyone download an update. He just fixed it, the one canonical version that everyone will see going forward. That is why I don't want to rethink what we mean by mobile web.
The Japanese pronunciation of Godzilla is "gojira". How is that a bastardization?
> What you are really asking is "how can I trust code written by other people". You cannot.

That's not his point. The concern is that without a secure channel of distribution from the author, Ubuntu can be MITM'ed into packaging a tampered binary.
Complete Genes May Pass from Food to Human Blood
22.2% of China still uses IE6 or I misinterpreted?

Wow.
Your username -> twitter profile links on the blog page are borked. :(
Depends on the task, for sure. A majority of emails are opened on mobile.
Couldn't agree with this more. I still don't get it and have to toggle it on/off a few times before I remember.
Since we are talking about Consulting a must read is the work on professional service firms by former HBS Prof. David Maister. His website is super ugly ( http://davidmaister.com/ ) but his advice is timeless, esp. since his writing is a lot about building the long-term client-consultant relationship.
> "Does anyone really think that mobile games would be better off written to run in web browser tabs?"

I do! There is nothing to install; it will be available anywhere and work on any device, not just in the MegaCorp App Store for certain devices; it's probably more secure since there are no permission prompts that might sneak certain capabilities past you; you can publish whatever content you want without having to get prior approval; you can update whenever you like without having to wait for acceptance. Obviously there are some practical concerns (performance, features, monetisation etc), but things are getting better. E.g. on the tech side, WebGL is now available on pretty much every mobile OS except iOS (for Android, use Chrome), 'add to homescreen' gives you an app-like icon and fullscreen experience on both iOS and Android (again with Chrome), and fullscreen API support gives you an app-like experience even from the browser itself. I think in the long run that the mobile web and native apps will have approximately the same capabilities for the majority of use cases, and the key differences will only be distribution and monetisation - both of which are solvable (startup idea anyone?)

For me, the main point is the web has always been an open platform you can do what you like with. The control is all with the developer. App stores take that control away, locking your app in a vendor-specific walled garden - assuming they let you in - which they can then evict you from at any time for any reason. Surely that's not better than the web?
I used to view hn from the web (hackerweb), but I switched to the minihack app and haven't looked back. It saves my login info, allows me to switch from story to comments without going back to the main page and a few other features I much prefer. I am an advocate of free and open platforms, but the experience in the app (paid app mind you) is just that much better. How can the web compete?
What would be the exit for the VCs? they could have kept it private without the VCs, but I don't think VCs line up for dividends at the end of the years. That forces them to create an exit event for a company that seems in a nice path.
It can make a huge difference.

`convert from_camera.jpg -resize 200x200 resized.jpg`
`exiftool -all= resized.jpg -o resized-exif-stripped.jpg`

from_camera - 2.4M
resized.jpg - 33K
resized-exif-stripped.jpg - 16K

In this simple example, the EXIF data double the file size of a 200x200px thumbnail.
It's not "anti-gay" to be for traditional marriage. "Anti-gay" doesn't even mean anything.
What does physics reveal about the sizes of sports fields?
I was particularly impressed with the Fail Better exhibit. It's not just stupid ideas (although there's at least one of those), but bad ideas that lead to better ideas.

Like how the Reeve Foundation is actually making progress.
That's what I was wondering as well. Why does your HVAC monitoring system need full network access (or even inside the firewall)?

I'm not a networking guru, would someone care to enlighten me?
You think the NSA spies on the CIA and vice versa?
Do you know what interests you? (i.e geolocation, data analytics) If you can find a company that deals with something your passionate about it really seperates you from the rest when it comes to applying. Companies want to hire employees that are genuinely interested in what they do as it makes for a better employee. Even if you don't have a lot of experience being passionate will raise you above the other applicants.
A $849 64GB iPhone 5S costs Apple $218 to build
Java GC optimizations for feed data platform at LinkedIn
umm maybe.
I did not even get to that because I could not concentrate.
edit: yeah, you know what? I totally misread your post, never mind. Sorry for impugning your knowledge! :)
VisualTargeting : Diamond Shreddies Market Example
Recovery process for this seems like it would be:

- All affected sites need need to update OpenSSL, reissue certs, tell users to update their passwords.

- All users need to reset their passwords, using a unique password for each site if possible. If they can't feasibly use unique passwords for each site, they need to make sure they don't use their new password on sites that aren't fixed yet.

That's pretty crazy, and getting anything close to 100% compliance is going to require a ton of visibility.

Someone should make a browser extension as quickly as possible to tell users if they're visiting a yet-unfixed site.
Adding Two-Factor authentication to an ASP.NET application
Do Startups Stand A Chance Against Valley Incumbents?
Why a Dead Shark Costs $12 Million
How about also showing screenshot how the cards look in Aha? Especially since it is supposed to be Visual Product Roadmap.
I thought that at first too, but the link isn't about architectures like the Amiga or Mac OS 9 that ran without any memory protection from other processes. Memory is still virtualized and protected like modern systems, but it also gives every process a unique address space, so that pointers are unique across the system.

Kind of an interesting idea. Seems like it would pair well with the NixOS way of doing things…
The crux of John's argument is this:

"We should think of the web as anything transmitted using HTTP and HTTPS."

Which unfortunately, because there's hardly a single modern internet application or service that doesn't or can't run over HTTP(S), it inflates the definition of "web" to be so broadly inclusive that it becomes an altogether meaningless term.

It may be his intention to position native "apps" as something not in opposition to, but rather a part of, the web. But that does a disservice to the original meaning of the web, which thrived in large part because it wasn't just another native app connected to the net.

Instead, I'd recommend pushing back a bit, and trying to retain the other critical elements of what made the web the web, such as transparently introspectable formats, RESTful documentment-oriented architectures, hyperlinkable URLs, crawlability, freely-licensed and open protocols, etc.
2048 is doing fine as a web app.
It's not even just the 'Japanese pronunciation', but the original name of that monster was ゴジラ - 'gojira' (gorilla/kujira (whale)) - which was anglicized into 'godzilla'. There's nothing racist at all about 'jira'.
Not only that, but the early ARM architecture was terrible at running unix or other non-single address space OS's.

If I remember correctly, the caches were virtually tagged, even on the StrongARM, making context switching on linux very expensive.
As discussed on twitter (https://twitter.com/grittygrease/status/453606054698692608), I should have said:

We generated new CSRs, with new private keys, but with the same dates and details as the originals. This let us get fresh certs without going through a full renewal.

Thanks for the prod.
Seems to me JavaScript is easier to develop with than Obj-C/Java - one evidence is that they pretty much require a heavy IDE while JS is often developed on glorified text editors.

But even if that's not the case, new devs can get started by using open source software like Wordpress etc and learn to modify it as they go. I don't know of any equivalent in the app space.