skysight-inc/HackerNews huggingface dataset:
Let this be a lesson for you: This is what your comments sound like almost everywhere you post. None of my comments to you are any less insane than the kinds of comments you make almost exclusively. If it really were an issue of responding intellectually, you would have a history of doing so, instead of the drivel you paint across HN. You're pretty clearly trolling; you reap what you sow. Let this serve as a moment of introspection for you. You clearly need it. (And also, I really do mean that things will get better for you. You're young, and it may not seem like it now, but they will.)
Please. Please Please Please. With Sugar on Top. Don't do this with a regex.

I've written a lot of web facing software that accepts URLs from the untrusted masses and ultimately makes requests to them if they are "valid." The lesson I've learned is simple. Regex's are terrible for this task because there are a ton of things you check and lots of normalization you need to do. Instead, do this as a function

I've evolved mine over the years, and my use case is semi-specific: Given a string, validate it as a fully qualified HTTP/HTTPS URL that doesn't have credentials and isn't trying to point my software toward the internal network or localhost. It looks like this:

- Use system/framework library to create Uri object from source string. All your checks will be consulting this object's properties, not looking at the source string

- Is scheme HTTP/HTTPS? If no, stop

- Did they supply user:pass@ in URL? If so, stop, and yell at them for putting usernames and passwords into a random site on the Internet.

- If hostname is an IP address, normalize it to dotted decimal quad IPv4 or IPv6 (no octal obfuscation for you!), and test against private IP space ranges or loopback. If private or loopback, stop

- If hostname is an actual hostname, normalize it + de-puny code it, and check for localhost aliases. If local, stop (you can also do a DNS lookup and make sure you someone isn't trying to return private/local IPs to bypass your checks)

At this point, you have a syntactically valid, fully qualified URL pointing to a public facing web property accessed via HTTP or HTTPS.

You don't have to worry about TLDS or the like. At this point, you can do additional DNS checks, check the domain against lists of bad actors, whatever else you want to do. You can try and be smart and do things like, "if supplied URL wasn't fully qualified, prepend http:// and try validation again" to avoid user error. Pretty flexible.

This is more rigorous than a simple regex and way way way easier for another developer to read and understand what is going on.
Alright, so here's how you go about it. I'll first give you the general approach, then an example.

1. Find a demographic that you care about. Someone you want to help from the heart (not just intellectually). This will keep you going through the dark times.

2. Find an online forum or vertical where a critical mass of this demographic hangs out. This could be a specialized forum, a subreddit, or twitter.

3. Read through their posts and find pain points and existing businesses that solve these pain points.

4. Create a SAAS that helps these businesses you found above. Typically you can help them become more efficient at something. They will most appreciate a SAAS that helps them book more customers.

Here's the example I promised:

1. Let's say you care about pets and pet owners

2. Spend time on /r/pets and /r/aww and find their major pain points

3. You'll see that vets (veterinarians) and animal shelters come up a lot.

4. Look at Vet websites and animal shelters and see how you can make them better and offer differentiated services for these vets and animals shelters as a SaaS (note, these are businesses and you're thus a B2B SaaS).

That's how you come up with a good first part of the founder/product/market fit equation :)

Execution is a whole different ball game and then there's the marketing. If you've done your research right, then feedback and early customers should come from the very forum that you discovered the pain point at.

Your motivation will come from knowing that by improving the services offered by the vets and animal shelters (even if it's in the billing department), you'll be helping a lot of kitties and puppies at the margin.

This is the only way I know to do meaningful work and make some decent money at it.

TL;DR: Find a demographic you care about; climb one or two nodes up the tree until you hit a business that serves this demographic; create products/services for these businesses.

Edit: clarified B2B and added TL;DR
It's called Bumble.
So excellent that some malware deletes itself if Little Snitch is even installed (https://www.f-secure.com/v-descs/trojan-downloader_osx_flash...). However, it's worth noting "DYLD_PRINT_TO_FILE" is a root exploit, which may circumvent or disable Little Snitch entirely if used by APT; Little Snitch may not see all network activity. In fact, a root exploit allows one to write malware completely hidden from userland altogether (lsof, ps, tcpdump, etc.) (https://github.com/hackedteam/driver-macos). It is truly scary how vulnerable OS X is at the moment.
So, TLDs are selling (technically) invalid domains?
As a Little Snitch user, I'm inclined to agree, but I find that I sometimes end up in a state of "WTF wants to use the network now?!" saturation.

My solution for that is to deny anything I don't recognize, and create rules for things I see more than twice, but if you're conditioned to click "OK" on everything you see, Little Snitch isn't going to to much for you...
All these worlds are yours, except Sicily. Attempt no contact there.
I'm a big fan of virtual-dom and the ecosystem of very sharp single-purpose libraries that people have built up around it, usually not even coupled to virtual-dom at all.

For me, virtual-dom + main-loop is a pretty great combo for front+back universal javascript. I made some repos about setting up virtual-dom, main-loop, routing, and browserify/watchify with npm run scripts:

* https://github.com/substack/virtual-dom-starter - bare-bones main-loop + virtual-dom setup
* https://github.com/substack/virtual-dom-universal-starter - universal (front+back)end js example with shared routing and single-page pushState

I usually use an ordinary EventEmitter to rig up the unidirectional flow (but I dislike how "flux" makes this a big deal). Here's an example of that: https://github.com/substack/virtual-dom-unidirectional-examp...

If jsx is your thing, I made an example of setting up jsx in virtual-dom land too: https://github.com/substack/virtual-dom-starter-babel-es6-js...

As far as the research questions go for 1-3, I don't think sampling people about their subjective opinions will lead to any interesting findings, but for question #4:

I chose virtual-dom and main-loop because each piece has a singular concern and performs that concern well. I don't want to use a tool that does a bunch of unrelated things because I want to be confident that in the future I can discard pieces of my tooling at will as my requirements change. With bigger tools with larger scope that is not so easy.
So to conflict with Intranet sites? Bad idea in my opinion. I already use lots of one word Intranet sites at work. If http://pizza were public you'd have to have some way to distinguish between the local site and the external. That also seems like something you could then spoof.
The only other example that comes to mind (outside of ntpd), is the TeaTime protocol used for the experimental distributed VR system (Open)Croquet implemented in Squak/Smalltalk: https://lwn.net/Articles/124712/

But if IRCC the whole premise of TeaTime is to not actually do time "correctly", but rather aim for "mostly predictable ordering of events".

Maybe it's time to dust off the old Croquet ideas, and mix the oculus rift with a platform based on Elixir?
It's not clear whether this "adware installer" is signed by a developer cert. I'm gonna guess it isn't, which means under the default settings, if a user double-clicks it to execute it, they'll be presented with a message saying that the app can't be run because it's "from an unknown developer" and the current settings disallow it. The user can get around that by right-clicking it and choosing "Open" (or switching Gatekeeper to be more relaxed), but the error message doesn't allude to this.

Edit: And if it is signed: yes, I believe Apple could and presumably would push out a malware update that would invalidate the cert.
For the first time in my career I used a cold-email to solicit potential customers a couple months ago. I sent out over 5000 emails in groups of about 200-300 a day. Each day I would change the email ever so slightly. Once I started seeing decent results I started tweaking that email until finally I was pretty much getting a 20-25% response rate on each group of emails I sent. To be fair, the majority of these conversions were for our freemium service, but still a signup is a signup and we can use that to market to them down the road. Here is what I learned:

1. Use the recipient's first name to address them. Make the email personal and not "spammy".

2. The shorter the email the better. Give the recipient just enough information to make them want to click on your link or respond.

3. I tracked everyone I sent an email to, by that I mean their name, their company name, their phone number, their email, and their address. I used this to my advantage by offering the recipient's the ability to simply respond to the email with "add me" and I would put them into our system and send a welcome email.

4. Remove the hesitation for the recipient and do your best to tell them what to do next. For example, if you want to set up a call with them, say something like "I will contact you tomorrow at 1pm to discuss further." Now the burden is on them to get out of talking to you.

5. Give your full name, company details, and contact information. Don't just sign the email with your first/last name.

I did find this article fairly helpful in structuring my email:

http://www.inc.com/geoffrey-james/how-to-write-a-killer-sale...
San Diego or one of its adjoining suburbs.
Best Apps for Windows 10
Hey - I'm Tamar from Namecheap. Our DNS is not down but we just upgraded our servers (see https://blog.namecheap.com/enhancing-our-dns-platform/).

The issue you're referring to was fixed. Your issue is likely due to a connection issue between the zone file and our servers. Please go to edit your DNS settings and re-save them. This should kick the DNS into action.

If, for whatever reason, this is not working, please contact support.

Also, if you provide the domain name and let us know if you've made any changes recently, it will help us determine the root cause of this issue (which is a rare issue affecting a super small group of people).
Read through it all. Seems legit so far. This is bad.

Exploiting non-vulnerable SMM code through a remap flaw in x86 architecture. Ouch.

Not only can this arbitrarily exploit the running OS. It might actually be able to physically destroy the computer it's running on, for example by abusing thermal controls.

Doesn't affect Sandy bridge or newer.
You didn't say what your income was. I'd say Hawaii, but you can't get a thatched hut for $250K.

Dallas has the growth, low taxes, best potential upside in property values, some of the best schools, and is the southern central hub for transportation.

Nowhere in the US will you get a better value for your dollar, except maybe for Deming, NM, which as a Sonic, but not much else.. and you have to live in the desert.

Oklahoma is lower in per sq. ft. for housing, but you have a 7% income tax and higher property taxes. Additionally, the native Americans have had massive success in taking over land and property via the courts, so you run the risk of losing your property.

(source, https://www.discover.com/home-loans/blog/how-expensive-is-yo... )
And Elixir is maybe easier. I believe the documentation is making strides, but last I checked there were some rather opaque references to Erlang OTP, and other things that aren't exactly obvious.

http://elixir-lang.org/
This is why I haven't been able to update my Yahoo account in several years. I keep sending them bugs about it, but no one has fixed it yet.
The top most thing is keeping the OS up to date. And I don't visit shady web sites.

Flash stand alone is removed, and disabled in Chrome. Lastpass for passwords. Tunnelblick+privatetunnel for open networks. And even though I use some software that isn't signed, after I've installed such software I revert the Security & Privacy "allow apps" setting back to app store+identified devs. And relevant, just by coincidence, in this case, I'm using 10.9.5 (which is still currently maintained with security updates).

The reality is that Mac users are simply used to trusting Apple to handle these sorts of things. And it's not a good alternative for that trust to be lost and placed in a 3rd party, e.g. on Windows where trust loss means a litany of 3rd parties to choose from in that space with no real practical way to differentiate, and the Windows Store described as a "cesspool of scams." Apple will get this fixed soon. It's definitely sub-optimal response wise, but I still trust this ecosystem compared to Windows at this point.

Edit: Oh and Privacy Badger.
It looks like something from imagination of H. R. Giger.
This is impossible! Apple's OS are _secure by design_ as they've said in their marketing copy for years.
Breaking Smart: seasonal binge-reading for technology trend meta-analysis
I frequently get to page 5, sometimes as far as 7 or 8.
Yes. It provides the performance we need. Nothing else comes close.
No definitely not. It's not their code. They can't sue for others without their cooperation. And Apple doesn't need Oracle to fight their battles.
look into namespacing your buckets. a bucket is not the same as a table. aws works in massive scale production and can suit all kinds of needs. the good folks at the aws popup loft in SF set me straight on this one
Keeping the OS up to date wouldn't have helped with this.
> Scientists should not overload pre-existing English words to mean other things

Why not? Because it confuses the overly-pedantic?
Donald Trump on Women
Google's search algorithm could steal the presidency
Funny coincidence, a friend of mine will launch https://www.pawsquad.co.uk/ this month. I don't know if he looked on /r/pets for inspiration though.
Although be aware that it can be quite daunting for a novice user. If you're installing for a friend or family member, you should go through all of this apps to whitelist requests and maybe teach them how to identify bad requests, but it's non-trivial. The UI doesn't interact very well with CDNs, for example, sometimes telling you that "App Store" is trying to access "arstechnica.com" because they use the same CDN provider.
> - Did they supply user:pass@ in URL? If so, stop, and yell at them for putting usernames and passwords into a random site on the Internet.

FWIW, browsers don't send the user:pass in the URL - they automatically marshal it into the Authorization: Basic header. Obviously sending these over HTTP is still dumb, but they're not (typically) logged in plain-text in browser history/server request logs.
Figured it out also as base 256 ipv4 converted to a number.

74.125.21.100 => 100x1 + 21x256 + 125x256^2 + 74x256^3 => 1249711460
I know that. Overwhelmingly in most cases it does help though, probably more than anything else short of air gapping the thing.
Security software is a band-aid on vulnerable software and users installing things they shouldn't.

Part of the OSX security strategy is to minimize users installing things they shouldn't by making it difficult (enforced code signing, confirmations when opening an unsigned or new application). The other side is minimizing attack surface for exploits by staying up-to-date, not shipping crap like Java unless the user explicitly needs it, and (increasingly) sandboxing applications to user-approved subsets of the filesystem.

Bolt-on detection and resolution of malware infections is just not a part of the OSX security ecosystem like it is with Windows.

Little Snitch can help give you a picture of what's going on with regard to your network card, but at the end of the day malware can usually hide its traffic in an otherwise-trusted application to avoid that sort of detection.
Perhaps not readable in a single evening, but this is probably the most accessible thesis I've ever read. If you don't care about the history or motivation behind Erlang, just skip to chapter 3.

However, I think the "why" of Erlang is pretty compelling in and of itself, especially if you're interested in extremely high-availability telecom hardware with an operational life measured in decades.
How does the tax situation change if you're a non-resident alien during the whole process? Is there any difference in the tax rates?
Releasing to Anaconda.org via Travis-CI
This is what's mentioned in http://www.theguardian.com/technology/2015/aug/05/apple-will..., and will be fixed soon.
Thanks for this, it'll be nice to go through this a bit and learn how Go is used from inside Google.
Show HN: PJON – Communications bus system for Arduino
Hi there I wrote in years of trial and error PJON library for my home home automation project. It is a multi-master, single wire, addressed and checked communication protocol and is designed to be an alternative to i2c, 1Wire, Serial and the other Arduino compatible protocols with the addition of all the functionalities you need to fastly bring working a multipurpose embedded devices network. It was a really enourmous physical and mental effort of years to bring together all the knowledge and code skills to let all this work, so I hope could be useful for all Arduino users. Please feel free to suggest and crytic if necessary and if you can TEST IT would be an enormous pleasure!!!

Have a nice summer! :)
Interesting, if only because it shows what journalists consider the qualities of a "great mind".

If we are weighing British residents by the heft of their brain, personally I would have picked Wiles.
The largest n-tuple in Lisp
The following expression defines a function called double which returns twice its argument:

CL-USER 17 : 8 > (defun double (x) (* x 2))
DOUBLE

Having fed this to Lisp, we can call double in other functions, or from the top level:

CL-USER 18 : 8 > (double 1)
2

CL-USER 18 : 8 > (double 2)
4

CL-USER 18 : 8 > (double 4)
8

I experimented and realised that this works with triple too :

CL-USER 21 : 8 > (defun triple (x) (* x 3))
TRIPLE

CL-USER 22 : 8 > (triple 3)
9

CL-USER 23 : 8 > (triple 6)
18

CL-USER 24 : 8 > (triple 1)
3

This works for quadruple too: I can define a function called quadruple which returns four times its argument :

CL-USER 25 : 8 > (defun quadruple (x) (* x 4))
QUADRUPLE

CL-USER 26 : 8 > (quadruple 4)
16

CL-USER 27 : 8 > (quadruple 8)
32

CL-USER 28 : 8 > (quadruple 16)
64

Works for quintuple too ! :

CL-USER 9 : 2 > (defun quintuple (x) (* x 5))
QUINTUPLE

CL-USER 10 : 2 > (quintuple 4)
20

CL-USER 11 : 2 > (quintuple 5)
25

I then tried a far larger n-tuple : centuple and it works as well !

CL-USER 12 : 2 > (defun centuple (x) (* x 100))
CENTUPLE

CL-USER 13 : 2 > (centuple 6)
600

CL-USER 14 : 2 > (centuple 8)
800

Later on, I realised that there is no limit and you can in fact define n-tuples even up to sextillion in Lisp!
I'm reminded of the movie Matrix where the snake like robotic connectors go and connect to sockets behind human brains.
Google Plus exemplifies why self-disruption doesn’t work
Yep. I didn't read most of the last 1/2-1/3 of the slides, but it looks like the magic number may be different for each machine (ie. there is no one binary to rule them all[all though you could probably trivially generate all possibilities])? And that there is at least some process involved in determining the number what the number is?

The author is legit. Here's a somewhat recent talk he gave: https://www.youtube.com/watch?v=C8--cXwuuFQ
10.9.5 is not even up to date. There are security fixes which were not backported from OS X 10.10 Yosemite (the current release).
Oh man, I really want to do it on all the macs at the Apple store, and start a little botnet.

Problem is, I don't really have any use for 10 or so rooted macs. I mean, I could rm them, but I'd never do that, that's mean. And I wouldn't feel good about using the camera, even though the computers are in public, it's icky. Perhaps a DoS? There's nobody that I dislike enough for that.

I think I'd be so rich if I wasn't so moral.
Bingo.

The beta males did not invent monogamy; it evolved as a system whereby more productive abled bodies were invested in the success of a society. These societies proliferated.

> Whether this remains true now is an interesting question.

I believe that when the benefits do not outweigh the cons, a lot of males start checking out of society altogether. See Japan [1] as an example. E.g. I'm going to have to work my ass off throughout life jumping through hoops and then work 80 hour weeks at BigCompanyJapan and then maybe find a woman who I won't have time to spend with? Fuck it, video games, porn, and basement sound better.

For a more US-centric view, check out [2].

[1] - https://en.wikipedia.org/wiki/Hikikomori

[2] - http://www.amazon.ca/The-War-Against-Boys-Misguided/dp/06848...
This is hilarious. I would never pay for cable anyway because advertisements are just repulsive, even when the volume of them (in both senses) was slightly lower a decade or two ago. But whenever I happen to be in a hotel room and happen to turn the TV on I am just amazed that it is actually possible to click through nearly 100 channels in sequence and see nothing but commercial after commercial on. And if I do find something to watch it seems like every two minutes or so I have to mute the TV because it starts yelling at me to buy pharmaceuticals. Definitely not sad to hear that this medium of communication is in trouble because the internet alternatives are amazingly and obviously much better.
I'm not sure who makes me more cranky: Apple for apparently sitting on the fix, or Stefan Esser for flinging the vulnerability into the breeze for anyone to catch.

Esser has his reasons - "Short reminder: Europeans are not allowed to disclose vulns privately to a foreign company like Apple without registering dual-use export"[1] - but it's hard to believe he couldn't have told them anonymously. Disclosures make careers, though, so there's a strong incentive to go public.

[1] https://twitter.com/i0n1c/status/624172774915973120
Publishing versus Performance: Our Struggle for the Soul of the Web
TATTOO ME Now DESIGN GALLERY- TATTOO ME Now LYRICS
The great unbundling: cable TV as we know it is dying
Free DVD Ripping Program
That's a broad sweeping generalization. Does it have any basis in fact? Are people more depressed today than 10-20 years ago, or do we diagnose more people as depressed because we like labels? And if we actually are more unhappy today, is that cause attributable to dating issues, or is it attributable to some other shifts in society like the changing nature of jobs and financial stability?
It doesn't really reverse the sides of the table though. The power will always be in the hands of those who are most attractive and with the least need for commitment.
So the present is January 1, 1950, and we're living in the future?
Though the induced false memories are attributable to "source monitoring
errors" (i.e. not realizing an invalid source), there is another, more
prevalent, side to the "source monitoring error" problem; poor quality
sources. For example, a poor quality "news" source (or intentionally
biased "news" source) can easily influence and manipulate both your
perspective on and memory of particular events.

As far as I know, there has never been a "perfectly accurate, factual,
and unbiased" news source, so the learned skill of "source monitoring"
is vitally important to maintaining a well-informed perspective. From
the paper, children are more susceptible to intentional influence and
false suggestions, but even as adults, we're still susceptible.