btipling

It's difficult to scale an RSS reader as you could quickly start having to crawl orders of magnitude number of feeds more than you are now as you get more users, if power users like your thing. I know because I worked at Bloglines. You're either going to need money or you will shut it down eventually.

Instead of calling it a donation, just call it the 'pro' version and add like a supporter badge on the header or let them do something silly like change the color of their header like on HN. Will probably get more funds that way and won't get cynical people to roll their eyes at questionable use of the word 'donation' whether it is or not.

It's hard to feel bad for the employees. Unless it was their dream job to work on manipulative valueless flash games that spam people on Facebook, they chose their place of work for all the wrong reasons.

Yes, sure. Those two do not reveal vulnerabilities just from the results, but I have to wonder at not using templates on the first.

Those all look like XSS vulnerabilities to me.

JavaScript version: https://github.com/search?q=extension%3Ajs+html+%2B&type...

Haxe "compiles" to JavaScript. So I imagine it may be suitable as a replacement for JavaScript if you wanted such a thing.

It was I who posted in the HN CoVim comments about Floobits, and I am not affiliated with Floobits. I just like it. It's better than CoVim for a number of reasons whether or not it's commercial.

If they don't understand responsible disclosure I doubt they will understand hashing.

Yes title should be changed to New York City as it is in the title of the blog post.

We ought to recognize that others may not understand how to respond to security vulnerability reports. We can use this knowledge to be a little bit more wise in our own behavior.

The best approach may be if you are unsure as to what the response will be when you feel like you need to disclose a security vulnerability is to do so anonymously.

Maybe this could have been Posterous had they won that battle with Tumblr. Posterous had the superior product early on, but for some reason it never caught on. I wonder how that works, who wins for what reasons. It does not seem to be for product or technology reasons as I think Posterous had Tumblr beat. It's almost luck and magic who picks up the right kind of early users that lead to success. Admittedly it did seem like a bit of an uphill struggle since Tumblr got started a little earlier? Maybe that's it. Tumblr and Posterous were a new kind of microblog platform a couple of years ago, now Tumblr is massive and Posterious is dead.

Another thing that seems interesting to me is that whenever someone exits into an acquisition it's like this space becomes open again for new startups. Someone should make a new microblogging platform that now disrups Tumblr/Yahoo. It's kind of like the dragon Ouroboros, eating its own tail, around here sometimes.

Given that Sublime Text does not look like a Mac app, and that TextMate was a Mac only app that looked very much like a Mac app, I find it to not be 'spiritual successor' in any shape or form. Sublime Text 2 is a cross-platform application. Having said that, Sublime Text has borrowed some good ideas from TextMate, but many editors do that these days.

Floobits works with Sublime Text 2 and 3, emacs and vim and a web editor and Google Hangouts and integrates with GitHub + a permission model and a shared terminal.

Floobits also uses a centralized service with a web editor where as this vim to vim only.

It's not self-entitlement, the OP is not obligated to help Yahoo! and simply states that there will be no more work for free.

It's in Yahoo!'s incentive to provide whitehats incentive, because people with malicious intent already have incentive and Yahoo! should want legitimate security research types to find vulnerabilities before attackers do.

The dynamic scoping in Perl seems a bit troublesome to me. Maybe even a security issue. Can you prevent functions you call from accessing variables in your scope? Do you have to somehow sanitize your scope if this is an issue? Seems a little bit worrying. With the exception of closures inside nested functions, I wish functions just had their own scope and if you want them to have anything else, just pass it in.

Someone could build decent ORM for Go. It's not really the language's job to build this.

It's the same as http://repl.it/ the source is at https://github.com/replit/jsrepl/

I remember anecdotes about increase in stress and social obligations, which makes sense I think. You can imagine maybe a failed business person with unwanted attention as in the case of Bernard Madoff son, or the story of exemplary high achieving students who unfortunately end their life. Such a case was in my local news recently in Albany, CA, and when I heard of her tragedy I thought of this then too.

In a very good sociology course I took in college the professor drew an upside down bell curve on the board. The y axis was risk for suicide and the x axis was social interaction. The extremes of social interactions, very low or very high amounts, led to being at greater risk for suicide according to research quoted by the professor. Average amounts of social interactions had the lowest risk for suicide. I don't remember the specific studies or evidence, but it still resonates with me today.

Yes, that wasn't a good submission by me. I aim to do better in the future.

Warning, graphic pictures of dead children in this post. Not safe for mind or work. It is horrifying. Posts like these are why I stopped using reddit, because "surprise! Here's a horrible picture, now feel like shit for the rest of the week/month/forever!"

If there were some place else to get programming or startup news like you can get here I would never come back. I wish there were such a place or that HN stopped allowing politics and NSFL stuff like this.

I'll just put this here: http://www.streak.com It's pretty awesome at this kind of email management stuff right inside gmail.

I read daring fireball pretty often and I didn't know this, so no, it's not obvious.

A shallow nitpicking of language syntax. I would rather read about how a programming language fares at solving difficult problems. Not a minor quibble that has no impact on anything other than this programmer's sensibilities. It's the kind of thing that makes me think people like this are a type, a type that want to abandon semicolons and jump on languages that look better but perform worse.

No, it isn't obvious that the listed testimonials are fake.

The testmonials on that site are complete fabrications. Gawker never said "Social Roulette just rewrote the rules for online gaming." nor has it ever mentioned Social Roulette and the Gruber quote also does not exist, only someone tweeted it at him. Testimonials that are lies are shameful and dishonest.

Encrypted is not the same as hashed. An encrypted password could be secure as long as the means to decrypt the password, for example the key used to encrypt, is not leaked. Sending you passwords over email however is horrible.

If your password is hashed, which it usually should be, then the service would not be able to give it to you. The reason services sometimes instead opt to encrypt instead of hash is for support reasons. Encrypting a password could be ok, as long as they never expose the password over something like email.

I am totally with you on this although meta-discussions are usually not allowed.

I hope pg and moderators find that there is more value in building a community that talks more about technology and startups than the growing group of single minded group of prolific downvote button clickers who make others want to stop participating.