skysight-inc/HackerNews huggingface dataset:
Was your 1G iPhone's bluetooth broken? Bluetooth was included on all the iPhones. The only thing that the first gen can not do is stereo bluetooth.
Clearly the solution is to print out the avatar image, take a photograph of it, and upload that.
"... He probably just did a str.reverse instead of str.split(' ').map {|w| w.reverse}.join ' ' ..."

Nothing so elaborate, just in my head.
You lost me with "l33t setups", possibly you are thinking of the wrong kind of "hackers".
Honest question, not addressed by the TF article (and unfortunately I don't speak Swedish for the original);

Is $167 for all Spotify Lady Gaga plays, or those plays made in Sweeden (and thus under the remit of STIM)?

As I understand music licensing Spotify would be required to pay royalties to the collection society relative to the location of the play.
security, bloat, ugly code, annoyingly frequent updates.
"... gniog ot yrt siht tuo txen keew ..."

Yes. I did this the first time but read the original as 'talk butcher' not 'butcher talk'.
one slight turn off to posterous is that there seems to be no nice way to embed math in the same style as wordpress's latex integration. Is there such a way already or forthcoming?
Even IF the response was just self selection bias, it would still show that NT types that hang out at Hacker News are more likely to take online polls. If the types were completely meaningless, then this wouldn't have happened.
http://freerangekids.wordpress.com (and associated books/links) has a similar theme for those who are interested in this.

And in general - I agree. (Although it's easy to say that when you don't have kids)
Good tip on the pub/priv key auth for ssh. Also on tripwire. Thanks!

Custom logs generated by your own app for things like login attempts, etc, are definitely useful for detecting issues. I was referring more to things like apache connection logs, and other logs generated by other programs - I would imagine that there's a huge range of things to look for.
Persuasion for peace
The Feynman lectures on physics is great:

http://www.feynmanlectures.info/

A really enjoyable read is Surely You're Joking Mr. Feynman. It chronicles some of the interesting bits of his life and he led a very interesting life at that. (Worked on the bomb, Did a lot of his research in strip clubs, Lockpicking the file cabinets where they held the top secret info on the bomb just to show them that the security was poor, etc...)
Quantum Computing seems like voodoo to me, I have to read up more about it. Anyone care enough to explain a bit to me how data compression can benefit from it?
The best way to judge whether a designer is suited to your project is to have a look through their portfolio. Design work can be very much in the eye of the beholder, so you need to find someone who has a style you like.

Unfortunately, this won't tell you what they're like to work with so maybe ask for a reference. Setting a series of project deadlines / goals upfront should also help.

It can also be tricky to work on a brief over email if you've not met the client in person. I find it's always a good idea to speak to any remote clients on the telephone as that gives them the opportunity to talk you through their ideas and brief. A proper conversation can bring up questions and ideas that wouldn't necessarily come up in an email exchange.

In the past, I've found it hard to find good developers. If you're not a developer, it's difficult to tell whether someone is good just by looking at the sites they've worked on. I've come across several developers who talked a good game but couldn't deliver before now. The agency I used to work at for example, hired a few developers who weren't up to the job. At least with design work, you can judge the visual aspects.

Links to my portfolio and company sites are in my profile if you're interested in working with me.
Wow, that looks great. Any idea how it compares to the other tools mentioned? (tripwire, portsentry, logwatch)
Ask HN: Growing a consultancy
Dear HN'ers,

I run a one-man software consultancy and value posts like this (http://news.ycombinator.com/item?id=848370) to help with the early stages of setting up.

My goal is to grow it from a lifestyle business but not sure how to proceed.

I'm looking for advice on two areas regarding consultancies:

1) Growth plans. The variables seem to be team size, services offered, and markets targeted.

2) Exit routes. Anything other than being consumed by larger consultancies looking to expand?

Thanks in advance for your input, I hope this post will be of help to others in a similar position.
Sorry, I should have clarified that Herzlinger was at least one of the first to use the term as it related to healthcare which was a bit controversial at the time when she published her book Market Based Healthcare.
I would have never thought that I would read a reference to Coleman, Texas in a link from YC. For what it's worth I've been there a few times and it's a nice town.

I think one example of this happening is in deed restrictions and HOA rules in modern subdivisions. The vast majority of residents do not worry that their neighbor's kids leave tricyles out on the front lawn, dry clothes from a line in the back, leave the garage door open other than when moving a car in or out, let the lawn get over four inches high, etc. But they do fear that most everyone else does care about those things, and the paranoia associated by their over-extended housing finances drives them to support the enforcement of rules they would blush to describe otherwise.
Ask HN: Please review my web app: WantsThis
We just launched last week into a pretty competitive market.

The site was built with two people, myself and my partner over roughly 8 months. I did all the design/frontend while he handled all the programming.

We'd love to hear any feedback you guys/gals have.

http://wantsthis.com
http://news.ycombinator.com/item?id=942308
I had this exact conversation a few days ago with a friend who is just starting to play around with Android. They really should define "capability classes" of some kind - ie, a 'Class A' device has minimum screen resolution of u x v, physical keyboard, GPS, etc. This would allow us to have specific targets to build against, but still allow manus to create a variety of devices. This would allow for building elegant degradation into apps so that people without the latest and greatest phones aren't completely left out (as is currently the case).
Twitter lists and the App Store
How Common is the Socratic Method?
I went to your link 3 times before I finally decided I wanted to watch a video (I like reading better).

Totally awesome, thanks dude!

Here is to failing and iterating again.

Where the fk do ideas come from lalala
The site design looks kind of depressing, and the logo looks weird. It definitely need some way of differentiating yourself from the competitions. I currently use dropbox for most of my file sharing/backup needs, and dropbox is a difficult player to beat.
Jonah Lehrer: Reverse-Engineering the Mind
Ask HN:  How to exaggerate flaws to convince you that your product has problems?
People tend to like their own work and it is hard for them to see problems that others point out.

So perhaps a solution is to exaggerate those problems to such a degree that it becomes completely obvious to the creator of the product that there are problems.

Even better, find a way to (semi)-automate this exaggeration.

For example, if the product is a game with poor sound effects, then find a way to exaggerate the bad quality of those sound effects.

How might this (semi)-automated exaggeration be done? And for what sorts of things might it work for?
She says that the world is safer now for kids than it was when she grew up, but I wonder about that. Precisely because there are so few kids roaming the streets, the ones that still do may be more at risk because e.g. drivers don't expect them.

For a marvellous account of children being raised without any parental guidance, read Bill Bryson's "The Life And Times Of The Thunderbolt Kid." Highly recommended.
Remove 'Username', make username == email.

Remove 'Confirm password'. Instead email the password they entered when confirming via email.

Remove 'timezone'. Figure it out based on their IP.

Make this into 3 columns.
--Front page stories are not in chronological order (I can't keep track of which stories I've already read)

That's kind of the point. Instead of seeing a bunch of stories, you see them ordered by the opinion of users.
Visited links are painted in a different color, use that to keep track.
You can build on their stuff but you won't scale and you won't grow, not because their technology doesn't scale, but because their licensing doesn't scale.

What about their licensing for Azure? Does that scale or is it more of the same?
You make some good points, but isn't this always going to be a problem when training your algorithms? You can't really train in real time so by the nature of the industry you're always going to be put at a disadvantage by using older data.
Removing danger from the home is the very best thing that a parent can do. All children are impressionable, and being exposed to evil early will effect the rest of their life. So, as long as you have that handled (as good as it can be handled), then your child will be mostly okay.

Of course, we'd need a very good definition of evil.

Also, Why I Let My 9-Year-Old Ride the Subway Alone:http://freerangekids.wordpress.com/2008/04/06/why-i-let-my-9...
The problem is I usual select what to read by the number of points and/or comments. I don't want to click through every item to see those things.
Heh... Basically, we don't.

Sad, really. It's mostly due to apathy and no mandate from higher-ups to pursue stronger security, but in general our farm is only strong enough to keep generic attacks at bay. 0-days, man-in-the-middle, hell even some SSL vulnerabilities are possible for us. We have a "security team" so we defer most of the security precautions to them and just keep our base software configured not to let anyone unauthorized in.

However, utilizing host-based as well as network-level intrusion detection tools, combined with kernel-level and userland-level security patches and mandatory security access control policies is the best all-around solution. Grsecurity for kernel patches, an OS base with strong security in mind (many new distros use things like stack-smashing-protecting patches to glibc), snort for network IDS, tripwire/portsentry/others for host-based IDS, SELinux configured for all your hosts to further enforce your access requirements.

And of course, diligence: monitor security lists (particularly the one for your distro/kernel) and update immediately when a patch comes out.
Unless you automatically clear your history, as I do, when your browser closes.
Monitoring intrusion attempts is almost always a waste of time; secure the server instead.

Set up the server in a secure way, with many layers of defense. Any applications that accept data from the internet should be very robust. After that, add mitigating stuff like SQL permissions, a chroot jail for the web server, running as a totally unprivileged user (i.e. not nobody), and so on and so forth. Pick a secure kernel, too, and make sure that your software is compiled with exploit mitigation techniques (e.g. ASLR, W^X). Throw out anything that needs patching more often than once a year (once every ten years is a better goal). Don't pick a weak password and leave SSH password logins enabled.

If you are interested in detecting intrusions, a first layer may be a list of checksums of crucial files. This is built-in to my favourite OS, OpenBSD, but others can use Tripwire, AIDE or any of the other programs. Note that an attacker with root privileges can typically bypass this.

EDIT: Look at mod_security, too, if you use Apache and cannot trust the web developer (which may be you). Just accept that it will, in the end, not save you.

EDIT2: And don't store passwords in plain text. Or MD5.
I use Google Reader, but you're right. There isn't enough information in the RSS feed to make it really enjoyable to use. You have to judge what you want to read based solely on the title. One thing that helps, for firefox users at least, is the "Better GReader" extension. It lets you open the link in the article header in an iframe, instead of a new window/tab. This makes perusal of the actual article much faster.

One other useful feature for the RSS feed (beyond the current rank) might be the top comments on an article, instead of just a link to the comments page.
1985: "And the games business is drying up."

Classic.
Engineers: Work at Airbnb, where every Monday is Mustache Monday
I understand that the front page is showing popular stories, but I would much rather have them be chronological also (a la Digg).

The problems with just using the link color to keep track are that it's very inefficient (instead of scanning a solid block of new stories I have to pick them out across multiple pages) and that I clear my browser history frequently.
Depressed Woman Loses Health Benefits for Happy Pics on Facebook
Posterous sucks because you cannot insert images where you want and you have to go through a separate interface to get your images in it. Posted one article on posterous, and don't want to post more.
I could be wrong, but I also could be pretty close to right.

I think the RSS feed tracks http://news.ycombinator.com/newest , the new link in the top menu bar. The feed and new link appear to me to be in reverse chron order.

If you don't visit often, your rss reader should keep track of everything until you check in; without the points/comments, as you point out.

If you check in often enough, following the new page should be the best of both worlds: chron, and points/comments.

In answer to your title question, I:
- click on interesting stuff in my rss reader
- then look through the first couple of pages of the front page to see what's gathering comments that I'm interested in
- then, if I still haven't found enough to keep me from working, I look at the new page to see if there's anything I haven't seen yet.
Tripwire is useful for post-facto detection - at least as long as the attacker doesn't get root - but logwatch defaults to letting stuff through, which means that any change in log formatting by any program means that your "security" suddenly fails.
> I'm a science nut too, but I don't know how I could begin to look at the _data_ involved here and come up with any sort of conclusion at all.

> So what I do is advocate for public policy decisions that are in line with the very strong scientific consensus: that human-caused climate change is real and a serious threat to life on the planet.

You don't know yourself, so you advocate for spending billions of dollars than could be spent doing lots of other important things.

The very strong scientific consensus? I don't see it. I don't see reproducible, falsifiable experiments that can be made by disinterested parties to check climate change. That's what scares me.

Astronomy? I can, and have, checked it myself.

Physics? Friend of mine and girlfriend of mine are physicists; they've tested and re-checked many famous physics experiments for learning purposes as part of their studies.

Microeconomics? Can be tested. Has been tested. I trust it.

Macroeconomics? Skeptical of it, because of it's proneness to confirmation bias, politicization, inability to falsify it, and many historical errors that it's made in the past without even a serious mea culpa from the error-makers. Usually they just add a caveat, or say that whatever proved them wrong actually shows they're correct.

So climate change? I'm not convinced. Reproducible, falsifiable results. Show me - "Here are the average temperatures and temperature variances in 30 regions in the globe this year. We predict the average temperature will rise by X% and variance will rise by Y% in at least 25 of these regions over the next five years. We absolutely don't expect the temperatures or variances to fall in any of these 12 regions most affected; that happening would cast serious doubt on our model."

Something like that - they don't do it. But a bad hurricane season hits? Evidence of climate change. It's hotter than normal somewhere? Evidence of climate change. It's colder than normal? Evidence of climate change. No climate change? Well, hell, it's still evidence of climate change.

> Honest question: do you have a background in climate science or something similar?

Honest answer: A hell of a lot more than Al Gore, and 99.99% of people who strongly, passionately believe that "We need to do something!"
I'm not sure whether I should be impressed or horrified by that postfix hack.
Let’s Stop Making Students Power Down at School
excessively
Maybe, maybe not. At least once, being on the net allowed him to see that he was close to being caught. Also, he did make use of it to throw off pursuers.

Really, though, it wasn't that he shouldn't have been using twitter. Facebook, etc., it was just that he had gotten a bit too cocky and a bit too sloppy.
I agree; it sounds like it was actually so easy for him (after taking the time to exercise appropriate precautions) that he felt he had to make it more interesting by purposefully leaving hints and doing the "challenges."
Instead of using a stationary relay machine in Las Vegas, he should have used a laptop connected to a mobile broadband card. That would have been quite difficult to trace. Even if you can get the IP address of one of those cards, you still only have a vague idea of where it is. If you are the law, then how do you approach the judge to get a search warrant? You have no address to ask for a search of! You can buy such a mobile card in one part of the country, then carry it with you to another, so no useful address need be attached to it.

What's more, you can arrange to have such a machine mailed to a different location across the country. In one day, for the price of a Fedex, your relay is in a different state.
Interesting.

What about persistence between browser sessions? I couldn't see anything on the page about this.
"children being raised without any parental guidance"

fallacy of the excluded middle much?
Put a screen capture on youtube with balloons popping up saying 'LOL fail' at random intervals. Alternatively, buy the company and then threaten to fire the programmers responsible for stealing precious moments from your life.
I think it's the general texture of the "LOL", smiley emoticon, and exclamation more than the gratitude. A comment that doesn't add much, and looks like it was made quickly often produces bad results here.

Maybe it's because people are scared of losing the fantastic signal:noise ratio that's a hallmark of Hacker News and is very hard to find in internet discussion. The parent comment looked like more general internet discussion, but if he'd written, "This is exactly what I needed to hear in plain English: I keep meaning to code up this simple timezone app but I've been scared to execute it. Wow, that was valuable" - well, that probably would've been quite high in the positives.
The space is too filled up. You don't stand a chance. Let me give you a positioning that may work for you:

It's a "Document Management System". Back up your companies documents, and query and cross-reference them online. Share with your co-workers. See and reference past versions. Access your documents with our open API, mix and match.

The space is too crowded for you to try to welcome everyone. Focus strongly on business - if you can focus on more specific businesses that would even be better. Offer a compelling reason why they should use you. For my business, what I would like are:

- Desktop synchronisation
- "Signing off" on documents (cannot be changed)
- A way to store paper documents that somehow OCRs it (must not be perfect, just for search), and that allows me tag them with keywords
- A clear way I can map the online documents to the locations where they are physically (shelf3, room 15)
- Some type of category system that paid attention to the documents - for example, personal contracts of employees should not be mixed with working design drafts.

Pick a small niche that works with paper a lot and is not online too much (maybe Law?). Show them how your system improves their life. The start with that niche, perfect it for them and go capture the next. Having to go out, walk into a lawyers office and try to sell this to him will be the greatest feedback you could ever get.
sudo apt-get install rkhunter chkrootkit logcheck monit

rkhunter and chkrootkit will both look for insecure configuration, permissions, and known root kits. rkhunter will also maintain a database of the signatures of your system binaries. I assume there are overlaps between the two. I don't really care, I run both.

logcheck will watch your logs and email you when something shows up in a log that doesn't match a configurable set of regular expressions. When I add a new piece of software to a system, logcheck goes berserk. I go through the emails I receive and add in new regex's to ignore the harmless notifications until they finally taper out and disappear, only leaving me with the true exceptions.

Look over the documentation for all three of these, and make sure that they're actually running. Personally, I don't want an email unless something is wrong. If I get an email every day, I'll start to ignore it. I don't think I'd notice if an email I was ignoring didn't show up, so I optimize for no output unless it's something I should read. I chase down the cause of every exception in my logs. No excuses. If it isn't an exception, I add a regex to logcheck.

I run monit because it is pretty easy to set up, and it sends me an email when a server process gets changed or restarted. It lets me enforce limits on a server process, so I can potentially get warning of an attack as it happening. I suspect monit is nowhere near the most sophisticated tool for this purpose, but it meets my needs very well.

As for other basic security stuff... Don't use port 22 for ssh, use something much higher so that you won't get the continuous pounding on the front door that an ssh server on port 22 receives. Disable root login, as well as password login. Use certificates to log in to your machine. Configure servers to listen to 127.0.0.1 whenever you can. Install a software firewall to only allow access to http and ssh anyway.

Unless you've done something stupid with your web app, you've made it incredibly difficult to impossible for script kiddies. If you piss off an elite black-hat, it's probably safe to assume they can own you, and you likely won't know it. So make good backups, with regular offline backups that can't get destroyed by a hacker with a particularly malicious bent.
I made a Twitter-bot a while ago for HN, I find it useful and there's over 7000 people following it now. It's only new stories in the top 5 though, mainly to stop information overload.

http://twitter.com/newsycombinator/
I don't consume HN at all.

I read HN through the website. The things you mention are a little annoying, but not something that worries me a lot.