skysight-inc/HackerNews huggingface dataset:
These are some amazing pictures from the Sydney dust storm. Also see: http://www.flickr.com/groups/1239213@N21/
Yep =] Nothing back yet.
Using SVN makes your site extremely vulnerable
You beat me, I just posted a dupe! http://news.ycombinator.com/item?id=838978
I find it hard enough to be a student and work on projects on the side - I am much more productive in the holidays. I imagine working for 40+ hours a week would be even worse.

It reminds me of the pg essay about looking for funding - when that's what you think about when commuting, in the shower, before falling asleep, you'll lack the focus to continue building. I find my degree has the same effect, and probably most jobs do as well. An exception might be for part-time or menial jobs - I remember one blogger saying that worked 20 hours a week in a coffee shop, and spent all day thinking about what to hack on when they came home.
yepp. requires admin rights to install, which actually is quite surprising as chrome itself doesn't.
Sorry for the machine translation but an English text is not up just yet.
I managed to get some shots this morning on my way to work. All taken on my 3GS.

It caused air pollution levels to be 1500 times more than normal (http://www.smh.com.au/environment/sydney-dust-blanket-causes...) and it sure felt like it, sucking down all that dust. Can't have been good for me.

Most surprising sight for me was witnessing people smoking cigarettes still.

http://emberapp.com/baz/images/dust-storm-pyrmont-1/
http://emberapp.com/baz/images/dust-storm-pyrmont-2/
http://emberapp.com/baz/images/dust-storm-pyrmont-3/
http://emberapp.com/baz/images/dust-storm-pyrmont/
Your parents aren't the only ones responsible for encouraging you. I'm sure your interest in technology originally came from some inner drive. But a hacker can only get so far without a community of peers, whether it be your colleagues in college or others at meetup groups or friends on IRC or others on Hacker News. These communities become the crux of not only your technical development, but also your motivation. I've seen more than a few girls in college give up on computer science because it was harder for them to make friends in class or join a group to do problem sets with. There is definitely SOME problem here.
tl;dr Don't accidentally leave an svn working copy available to the internet, it could be a security vulnerability.
Top Ten Healthy Eating Tips
Yes that was my thought too - at first I figured the translation was garbling what they were saying; I guess not.
The more motivated you are to vote, the more likely you are to vote it a five. A mediocre video is characterized by a lack of votes, not a preponderance of three-star votes.

Back when Youtube rounded the average vote result down to the nearest star, I joked that Youtube videos really only had three ratings:

Five star: New video (eventually it will accrue a vote of other than 'five' and drop to four stars)
Four star: Top notch (mainly fives, a few troll one-star votes)
Three star: Disgusting trash (at least many one-votes as fives)

You don't see anything less than three-star since it will have been deleted by the time you get there.
I think Fran Allen (the only female interviewee in Coders at Work) made the point that you see more and more women going into Earth Sciences, Biology, Chemistry... Even Engineering and Maths have more balanced gender ratios than CS. Her opinion was that it was because those fields are perceived to be more socially relevant, wheras a lot of people think CS is just about making games.

I don't know if I agree with her totally (I think the negative perception is more a conflation of IT with CS - people think CS is more about using Powerpoint than an intellectual pursuit) - but there is definitly a case for fixing the public perception of Computer Scientists.
I suspect that was prior to the initial launch. The architecture has presumably evolved to the state described in the HS article since then.

Edit: yes, Casey says in the Tim Bray interview that "As soon as we could, we got alpha testers in to try it out... 4 months later, we had a site that we were ready to announce."
Ipod nano accessories
want Ipod nano accessories ? ipodnano8gb.org is the best place to get those.
I'm glad they were "stopped" by armed citizens. Maybe you would like me to add how many people were killed and wounded in process as well?

How many shooting sprees has Britain had since complete ban on firearms after Hungerford and Dunblane massacres?
I'd prefer a more matter of fact source like this one:
"Google Chrome Injects Itself Into Internet Explorer With Chrome Frame"
http://www.readwriteweb.com/archives/google_launches_chrome_...
Using a working copy as your website is a pretty bad idea. That's what svn export is meant for.
Yeah the weather can be a bit wild here at times - but its not really that bad. Not hurricane (or cyclone) bad (living up north for a while is worse).
Twitter users tweet on the toilet
Actually, TFA isn't about svn repositories but about using working copies for your production site, and leaving .svn world-readable. svn repositories tend to at least use some kind of HTTP auth (if not https or ssh), but a world-readable .svn means your whole project is available.
Microsoft will block this like Apple did with Google iPhone apps.
.

It's especially bad because svn puts a .svn in each directory. With e.g. mercurial or git, you can tuck the (visible) site in a subdirectory of the repo itself (project/pages), and the .hg/.git (project/.hg|project/.git) won't be accessible.

Of course the best option is still to use exports and symlinks.
Best jQuery Plugins For Better Table Manipulation
We need real unofficial app stores. Apple shouldn't be allowed to momopolize the iPhone apps market like that.
It's not actually clear to me what the problem is.

Are they saying that people can read your code (not actually a problem for open source projects) or that they can update it and thus alter your site?

The former doesn't seem so bad - the latter is obviously catastrophic.

I wish I spoke Russian...
Opening The Innings Has Changed My Life: Dilshan
Using a working copy allows you to deploy your website faster and safer (only the changes gets transfered, you can have hooks to do some cleanup and rollbacks are almost free).

I use Mercurial on all my websites (disabling access to .*/.hg of course) and never use FTP for anything.
So you prefer main stream media like TechCrunch, NYT, Wired etc. instead of sites and blogs by regular people? Why don't you just use an RSS reader then?

IMHO one of the best things about social news sites is that you get sources you wouldn't otherwise find. HN tends to copy Digg where only a few sources get attention while other get ignored altogether.
Nope, it's just fun for the locals. Apart from the asthmatics and firefighters responding to malfunctioning alarms.
I snapped some photos from my bedroom this morning:

http://enneff.posterous.com/clovelly-gordons-bay-in-the-dust...
Yup, exactly. s/repositories/working copies/. I've been using git/hg too much lately.
I prefer to converse on HN as I can follow the discussion easier and the quality of responses is much higher than out there in the wild. Unless of course I want to talk to the blog owner.
Commenting twice (the same thing) is cross posting to me.
It's the former. Sure, it's not a problem if your code is already open-sourced, but plenty of people are working on things that aren't. And aside from code, you may have private data stored in your repository, such as API keys, or even just configuration information about your site setup that might help attackers.
By Dynamo, do you mean Amazon's service oriented architecture?
Of course, it's not too tricky to configure, say, Apache to block access to all the .svn directories:

http://www.subversionary.org/martintomes/preventing-access-t...
http://blog.samdevore.com/archives/2006/05/01/hivelogic-prev...
For your Apache config.

# Disallow viewing of .svn and .git directory contents
<DirectoryMatch \.(svn|git)>
Order allow,deny
Deny from all
</DirectoryMatch>
one good idea I had was using a patch queue to insert database and other "secret" settings into a Mercurial pull.

So when I deploy updates to sites we pull and update the changes then merge a locally stored patch queue to reconfigure the settings.

Because the settings are locally stored on the server (not in the site root) there is no way for people to steal the details from the public mercurial server :D
Drizzle, Optimizer, Execution Flow
Just reading. This is actually pretty bad. Consider all of the passwords embedded in connection strings and all the other various secrets contained in the source AND configuration files for a standard website. Even if your site uses all open source software, you still don't want J. Random Hacker to have write access to your database, for example.
Guidance for MySQL Optimizer Developers
The first I knew something was wrong was hearing the local mall's fire evacuation alarm going off at 6am this morning. Then I opened my eyes to see blood-red light coming in around the edges of the window and the smell of soil.

My next thought was: it must be a bad time to have one of those "eco" datacentres that vent directly to the atmosphere :-)
Microsoft has a lot of the core concepts in the Courier video already built in to One Note. It's a nice little app for doing research and saving and annotating clippings, especially if you have a tablet.

I carried around a Windows tablet PC for a project at work for several months, and it was actually a really nice workflow. I'd love to see what they added in the Windows 7 tablet version.

The biggest problems were the weight of the machine (it was two years old) and the battery life on it sucked. And, the handwriting recognition really sucked when it came to user names and passwords. It was really hard to log in to a thin client application that I had to use all the time using the tablet.
iStockphoto Will Soon Start Selling Stock Logos, Too
I think you have a strange, narrow definition of theoretical CS that isn't shared by many people.

You're wrong in the "not shared by many" part.

http://weblog.fortnow.com/2009/03/lets-congradulate-gerard-h...
Apart from the url mismatch, is this illegal? I don't think so, they are selling support for an opensource project. If this support is bad, not needed, ..., is more an ethical problem, but otherwise there is nothing wrong about it.
Velour seat covers
The Coverking Velour seat cover for the Toyota is simply a work of art. As it is, Velour is commonly used as standard fabric in most automobiles, and in the case of the Toyota, it has hardly made any exception. Coverking custom seat covers in Velour are designed to fit perfectly.
If they can pull off a Milo and Kate, they are wasting their (and our) time with Windows versions while they could start selling a pocket version of HAL-9000...

As for the controllerless controller, have they set a release date yet? Until they do so, I will say it's vaporware.

And the same goes for the dual-screen tablet. I think they were aiming towards murkying up the waters of an eventually successful XO2 laptop and ended up with the perfect Newton killer.
The only thing here that's illegal is using mozilla's trademarks without their permission.
They may have had a 301 redirect to the real Mozilla website and changed it later, in case a Google employee would check the URL.
"Google was successful through technical merit."

According to PEW Research, 5/6 search users can't tell the difference between the search results and the sponsored links, so the idea that Google won based on "technical merit" is pretty much wrong. To 95% of people Google was just another search engine but with better marketing.
tl;dr

http://yoursite.com/index.php

then

http://yoursite.com/.svn/text-base/index.php.svn-base

for source code!
What's new in Perl 5.10.1
> Given her track record, I don't understand why she has accomplished so little in time she has had. Something does not add up.

probably because Autodesk bought it's way into the market in the 90's, starting with discreet - and only then reshuffling a bit. You can watch the interview with Dan Drake (Autodesk cofounder) on NerdTV (we need that show back ASAP) - http://www.pbs.org/cringely/nerdtv/shows/ ... hear what he is saying, buying in to the market is a great way to do business. Autodesk is not favorite company amongst companies, but it sure can do business.

edit: everyone, be sure to watch that video even if you don't give rats balls about autodesk or anything. Guy gives some serious experience / advice how they went from startup to godzilla.
When Sears was a startup
WILS: The Concise Guide to *-Load Balancing
Many people with tech jobs have clauses in their contract that would make it very problematic to develop an idea on the side if it could in any way be construed as competing with their employer. If you work for a company like Yahoo or Google, quitting is pretty much the only option, unless you want a cloud hanging over the project later.
Data Skills for Agile Software Developers
"Six teenagers injured in London shooting", September 12, 2009. http://www.timesonline.co.uk/tol/news/uk/article6832121.ece

"Teenage boys held after double London shooting", Feb 16, 2009. http://uk.reuters.com/article/idUKTRE51F29O20090216

I'd bring up the 2002 Birkby arson that killed 8 people, but that didn't involve guns. So it's obviously irrelevant and not worth mentioning.
Most Controversial American Covers of All Time.
Sept. 23, 1869: Here Comes Typhoid Mary
As far as I can tell, it's something of a grey area. The German c't magazine reported on this type of scam recently. Apparently it's common in Germany, used against users searching for FOSS (OpenOffice, Firefox, etc.) and various freeware.

While charging for support isn't illegal in itself, a few cases have made their way through the courts, with the burned users not having to pay up as it's often not clear what the service you are paying for is even supposed to be. What is of course illegal (at least in Europe, I'd hope elsewhere too) is hiding the fact that they're charging for anything in the first place. The operators have cottoned on to this and will hide any mention of cost or a contract when you visit the page via a search engine or ad (based on the Referer [sic] header), but if you go back to the page directly after signing up or receiving a bill, it's all there. Obviously, they're trying to make you think you missed it first time around.

I suspect there is in theory also legal ground to fight this based on trademark, etc. grounds, but there's probably almost zero chance of real success, as it's way too easy to open a throwaway business that closes down the first sign of trouble.

The way to get at these guys is presumably proving them guilty of a criminal offence (fraud), in which case the business front won't help.

If you end up a victim of this sort of scam, basically categorically state (in writing) that you weren't aware you were agreeing to a contract, and that the contract is therefore void. Also, don't give them more info on you than they already have. If they send the bill by email and they don't have your physical address, don't send the refusal to pay in the mail with a return address, etc. They'll rarely try to hunt you down if you flat out refuse, there are unfortunately enough victims that will cough up as soon as they get a scary sounding letter with a legal-looking letterhead.
Curiously enough, this has been predicted for quite some time:

http://www.penny-arcade.com/comic/2008/4/23/
Bored? Goby helps you find things to do
I guess what I'm saying is that it feels forced when someone promotes their own blog in a comment, especially on a popular story. But I will read their blog if I like their comment and possibly subscribe to it. Perhaps the best way to increase traffic is to not call attention to yourself and just write and post insightful stuff on HN. This will naturally get people to click on your username and go to your bio where most have their blog linked.
If you know what car you want, you can buy a new car in about an hour without getting cleaned out too badly. If you only pretty much know what you want, add an hour or so to that.

You can easily spend 10-20 times that amount of searching for a used car if you're at all particular about just color, miles, brand/model, etc. "There are no used car factories." If you're very particular about options and condition, it only goes up from there.

All new cars are roughly the same (as other new cars with that config). No two used cars are the same. So you need pre-purchase inspections, research into the history of the car, need to consider whether to throw your money away at used car warranties, etc. I can understand why people who "just want any car" buy new cars.

All that said, I bought one brand new car 14 years ago (when I was 25) and think it was a huge mistake; I'm still driving that car today, 158K miles later, which lessens the failure somewhat.

Even though I could pay cash for any new car the average person has heard of (no Maybach, McLaren, etc), I probably won't buy another new one until I'm too old to work on them. They're just too damn expensive, especially when you look at the huge selection of 3-4 year old off-lease cars selling $0.30-0.40 on the dollar.
There are some interesting papers on the equivalence of different learning algorithms (e.g. decision trees, logistic regression, svm, FF nn's). When it comes down to it, a lot of the "different" methods actually model the same thing in roughly the same way, meaning the only difference in the algorithm's boiled down to ability to interpret the algorithms internal rules (e.g. nn is black box, decision tree isn't) and training time.

No references handy unfortunately.
A couple of slides showing what was new in 5.10.0:

* http://www.slideshare.net/rjbs/perl-510-for-people-who-arent...

* http://www.slideshare.net/acme/whats-new-in-perl-510
I'm no security expert but I'm not sure if I get it - assuming that your code is well written, how would exposing the source code and change history make it more vulnerable? By using this logic, every piece of open source software is "vulnerable". Security through obscurity is not really security.

I thought not checking in safety critical things such as passwords or keys into the repository tree is a standard practice. If it's not, it should be.
The Startup Visa Movement
It may not be illegal, but I'd be shocked if it wasn't a flagrant violation of Google's terms of service and likely to get the advertiser's AdWords account terminated with extreme prejudice.

"Illegal" and "nothing wrong" aren't an exhaustive set.
It depends on what the threat is.

If the threat is finding vulnerability, then you are right. If the threat is leaking the source code to the competition, then it is a serious matter.

Also, keep in mind the deployed source code is different than just the source code; it usually contains things like the database credentials and such.
Intel App Store Atom Based Devices
Top Ways to Unblock Websites
Maybe I'm missing something: Why does the "Goby" link actually take you to Bing?

The Graphic links to Goby, but it seems USA only.
Maybe the real security problem is embedding passwords and other various secrets in the source code?
This should become a textbook example for good planning in all MBA courses!
How terribly exciting!

I have a laptop and a phone. They both work pretty much anywhere - so of course they get used anywhere I'm stuck for more than a few minutes, especially if it's a small square room with no interesting graffiti to read...
This explains better what I was trying to say. Used car shopping is stressful. You never know (unless you're a mechanic or something) if you're getting a good car. You never know if you'll have problems a week later. With a new car, you're protected by warranties at least for a while. Also consider that being the sole owner of a car might make it easier to sell used.

I think the simple fact is that the issue is not simple. It's not enough to say new cars have a huge initial depreciation, so you shouldn't buy them. There are way more things to consider.
Jay-Z Clowns Eminem On German TVTotal | Hip Hop MVP
Systems that have no review of any kind are normally the ones that fail. Whether you are pairing or submitting to opensource where your code is checked, the quality goes up because things are checked.

The more effective the communication the better the software. If two teams don't work well together, that is reflected in the software.
In my experience, 1/3 day per failure is optimistic by at least an order of magnitude.
New Honda City Launched in India at Rs 8.37 Lakh
Kalashnikov never got a penny from it. Izhmash being in trouble probably doesn't effect mister Kalashnikov in any way, so the headline is missleading.

One of the best AK clones, the RK-95 of finnish military is truly good quality, durable and simple weapon. If the barrel is well machined and good ammo is used this weapon is as accurate as any other to 150 yards.

Lots of cheap weapon out there means lots of unnecessary violence. Usually people who are planning a killing spree don't really mind second grade cheap guns and ammo. People who want to defend themselves are usually only satisfied with the best.
Git is much nicer, because everything is in one .git directory and it can be kept outside the public webroot.
This isn't really a vulnerability - just developers not doing their job. Anyone who uses SVN (or any other version management system, for that matter) should know how it works.

I know SVN creates these hidden directories (named .svn) within every directory of my project that contains the working copies of the files within that directory. Therefore I either use export (to not upload the hidden folders) or I make them not accessible to the public via .htaccess.

Saying this is a vulnerability is like telling someone copying/pasting their code into a Pastie is a vulnerability. Common sense.
You've been surved
Yes, which is why when you sign a work contract, you should be sure to strike that clause... or not work for them in the beginning.

At most small- to mid-sized businesses, the work contract is totally negotiable. And if you're amazing enough, at big ones, too.
Of course, you database _really_ shouldn't be externally visible...
Of course, but the "vulnerability" in this article was about the source code in the repository tree, not the deployed one. Also, I believe that database credentials should be stored in external configuration files (which, of course, shouldn't be browsable) so if they do an update, they don't have to add the credentials again.

About leaking the source: Yes, that could definitely be a problem, I agree, but I'm not sure if this can be considered as a vulnerability, more like carelessness on the part of the admin of the site.
I'd say they're more than "fairly" successful:

http://blog.jedchristiansen.com/2008/02/25/37signals-is-one-...

Especially since we all know that they've turned down lots of buy offers, and only accepted an investment from Amazon to have access to Bezos. How dreamy.

Not that that proves their assertions are universally applicable, however, they certainly prove that side projects CAN be a (much less treacherous) path to success.

For what it's worth, that's what we're doing with our time tracking service, Freckle (http://letsfreckle.com). Just last week, we passed revenue of $4k/mo and I estimate we'll be able to live off it by end of January 2010.
I'm trying to do this myself--I taught myself C, but still can't write any non-trivial programs. Some people find C easy to comprehend, and think naturally in terms of pointers. Not me.

Gnu Ed's source code is quite easy to read. Plan 9's utilities also have very clear, concise source code.
It's not, but if you ever forget to set this config anywhere, you're hosed.

The ideal way is to not take the risk in the first place. You can't forget something you don't have to do.