michaelfairley

The multi-armed bandit solution has seen most real world use in medical trials. Randomly assigning patients to treatments when you have more information available is highly unethical, as it can literally result in extra loss of life.

Any company worth its weight that stands to lose big time from a security vulnerability will have a page with info on how to report it to them, and searching "[company name] security" will usually get you right to it. Disclosure is what you do after you've contacted them and not heard back.

http://www.apple.com/support/security/

http://www.microsoft.com/security/msrc/report.aspx

https://www.dropbox.com/terms/#security

http://www.amazon.com/gp/help/customer/display.html/ref=hp_l...

I'm not sure how he was unable to find their security@google.com email address. Searches like "Google security" and "Google report vulnerability" have http://www.google.com/about/corporate/company/security.html (which has a prominent section on reporting security issues) as their first result.

"You've found market price when buyers complain but still pay." - pg

We used ZeroCater for the first time today. Could not have been a better experience, especially because we signed up last night at 8pm.

The first hit for wine making is (and has been) a wine making book. Check again.

(NP and NP)'s sounds more natural to me than (NP's and NP's). We say "Jack and Jill's story", not "Jack's and Jill's story"

There's a slightly hidden list of all the topics: http://bestintrobook.com/all

I'm working on a suggest feature. For right now I'm logging the queries, so I'll know what there's a demand for that I don't have.

My definition for "best" is the book that most experts in the field would recommend to their non-expert friends.

inline-block doesn't work too well on <= ie7, <= ff2, which is really annoying because it's the best way to do that layout.

Some of those topics are definitely in the site, but the search is only doing exact match right now. I'm in the process of getting stemming and some fuzzy matching turned on, so hopefully bikes will give you hits for bicycle in the near future.

Unfortunately, I'm at the whim of the hosted search solution I'm using (IndexTank).

Yes. I'm logging the searches and will add books for the missed topics. It started off with 250 or so, which was a fair amount to hunt down, but it looks like I have even more work to do.

The cause of this is probably that those documents have been linked to with anchor test like "this PDF". Do a search for "click here" to see a similar phenomenon.

San Francisco, CA

1000memories (YC S10)

We're building the Wikipedia of everyone, ever, and we need web engineers and mobile developers to help us do it.

http://1000memories.com/jobs

michael@1000memories.com with any questions

The last thing I want is for TechCrunch to be able to push to me.

That said, I think this is an excellent way of making RSS accessible to lots of non-techies, especially those who use an iPhone/iPad more than a computer. How do you plan on getting this in front of people who don't already use an RSS reader?

https://graph.facebook.com/michaelfairley/picture?type=large for the picture.

Friends can be accessed similarly, but require an access token (_any_ access token, not just the user's that you're inspecting.

More details at Facebook's API docs: https://developers.facebook.com/docs/reference/api/user/

I'm putting much more faith in commercial spaceflight programs (Scaled Composites, SpaceX, Armadillo) for advancing space exploration/colonization than I do in NASA. Even their early work shows that their marginal costs are many orders of magnitude less than NASA's funding. This is one of those areas where market forces will beat out the government hands down.

It was getting deployed as a production service in many places, so it was effectively "out in the wild". Labeling something a "pre-alpha developer preview" does not remove the responsibility of protecting users' data.

bcrypt stores the salt alongside the hash, so a single field is sufficient.

This still doesn't handle email verification, multiple roles, remember me tokens, and a slew of other features Devise offers.

This is really just some Rails sugar around bcrypt-ruby.

It might be the language's fault, but that doesn't make the least bit of difference. CSS is here to stay for the foreseeable future, and she's saying we have learn how to use the tools we're stuck with the best we can.

1000Mememories

Currently at 5, +1 intern already hired for the summer

http://1000memories.com/

Software Engineering

michael@1000memories.com, jobs@1000memories.com

We're a Rails shop, but general web dev experience is all we require.

Not if it's served over SSL.

Apple and oranges (even though they're mostly used for the same thing). pickle is a Turing complete language used to recreate python objects, while json is only used for serialization. pickle is slightly more powerful, but should also not be used to load untrusted data. See http://nadiana.com/python-pickle-insecure

(Not knowing much about .NET myself, I can only repeat what they said in their pitch). They apparently use a standard stack, whereas Azure runs on a heavily customized stack that requires extra work to make a standard .NET app run on it. Think Django vs. Django on AppEngine.

It's not the "ck" sound that makes it difficult/slow; it's the "ck" followed immediately by the "d". Both sounds are stops, and stops are somewhat difficult to produce consecutively.

Compare with a name like "Conoco", which contains the same sound that you were complaining about in DuckDuckGo twice as well, but is much easier to say because both occurrences of it are preceded and followed by vowels.

The app is free for everyone, but previous Tweetie owners could have their ads disabled.

1000Memories is looking for an engineering intern. http://1000memories.com/jobs#engineer_intern

We're trying to change the way personal history is recorded. Right now, we're focused on letting families and friends remember the lives of those who've passed away.

If you're interested in working for a small (but very well funded) YC company in SF, get in touch with me at michael@1000memories.com.