skysight-inc/HackerNews huggingface dataset:
I have some personal experience with this. Our company is Direct Match. We used to use the directmatchx.com website. Adding an X on the end isn't that odd in the trading world, but we would get comments on it all the time. directmatch.com ended up costing us $8k and well worth the purchase.

For me it came down to, how can I tell customers, recruits, or investors that I'm going to be this huge impactful startup if I didn't even own the .com of my name? I couldn't. And now I never get a question about if my company's name is "Direct Match X" or why there's an X at the end of the domain name.
Yeah, those are a whole other world than skateboard wheels. This type of segway-clone I don't see a problem with.
https://gigaom.com/2015/02/23/microsoft-is-building-fast-low...
What's the recent Firefox incident?

Nevermind: https://news.ycombinator.com/item?id=10021376
I dont have the data but I would argue such minority is very less and even if they are unable to find what they are looking for in first attempt (by using .com), they do check search engines result afterwards.
People ... It still has XSS issues ..
correlation is not causation...
AppArmor is great for incrementally sandboxing parts of your environment. I'm pretty sure the ubuntu repos contain a set of profiles for common applications like Firefox which you can choose to enable. It's very easy to write your own profiles too. Just save it into /etc/apparmor.d/ (I always make the name of my own custom profiles start with "local." so I don't mix them up with the repo-provided ones) and then run "sudo aa-complain FILENAME" to put the profile in non-enforcing complain mode. Watch syslog for a bit to make sure your profile isn't too restrictive, and then once you're sure the profile is good, switch it to enforce mode with aa-enforce. "sudo apparmor_status" tells you the current modes of all profiles.

Here's an apparmor profile I made to lock down the Skype linux client: https://gist.github.com/AgentME/5640268 . It works as a whitelist listing out exactly what Skype can access. I've got another profile for Steam (and all games that Steam starts up) which just blacklists a few directories (and lets me know if Steam or any games ever tries to access those).
I formed an LLC early when I was doing my startup, and regretted it b/c it became a burden to maintain all the necessary records I might have not had to do if I had chosen to incorporate later- like when I had paying customers. I would wait as long as I can stay unincorporated if I were to do it again.

I would create a Sole Proprietorship first, before there are many assets belonging to the startup- it'd allow for the use of company accounts with vendors, without the cost associated with an incorporation. I think it was less than $50 to do that.

As for ToS, I believe that would be a good thing to get in place early on just to have some sort of protection/insulation from liability as far as that would provide. There are resources on HN if you search to help get that done at minimal cost. I hired an attorney to do mine, & it was way more expensive than it had to be, as I learned later.
It looks very cool. Can you sponsor visas? It's not mentioned in the ads.
Handle all the legal stuff up front were it is much easier and affordable. My advice to you: a few hundreds up front with an attorney and certified professional accountant will save you thousands or millions down the road.

I recommend starting your business up front as it is cheap to do so ( legalzoom.com ) and helps you run your business in a proper structure for growth from the beginning. In terms of what documents to use you, can only adopt what others have once you receive their official permission from an officer of the company authorized to allow you to do so. Also note that copying their terms may not be applicable to your business or give you the best benefit legally so getting legal advice from an attorney is advised.

If you want to enable more investor options you will have to convert your LLC to a Corporation so insure that you know the differences between the two and plan out what you want to do up front. When you have an LLC up front you can have the separate business accounts and separate your personal assets from the business assets which will help you keep your books straight along with with having the ability to show your cash flow to potential investors without having to include personal items in it that are irrelevant to the business.

You can build the product or other things once you have a product and do not need to start the business up front until your really ready to start marketing it, bringing in employees, investors, etc.
Perhaps https://blog.mozilla.org/security/2015/08/06/firefox-exploit...
I think in large part it's because Perl's formative years predate the blog revolution. Ruby, PHP and Java existed during Perl's ascendency, but they were in a gestational phase. When Ruby broke into the mainstream US programming culture was when blogging was at its height, and the open source advocacy culture that coalesced around Ruby on Rails became the new template. It was such a powerful influence that it even rubbed off on existing stacks like Java and .NET to some degree—these corporate-driven platforms actually needed a good dose of the simplicity and pragmatism that Rails and PHP were peddling. But for Perl they already had all the pragmatism, along with much better tools, and an established culture, so it probably seemed they had little to learn from the open source communities of the aughts.

If there's one thing that really hurt Perl in this new environment it was the unapproachability of Perl. It is clearly of an earlier era when it was taken for granted that programming was difficult and powerful tools with steep learning curves were favored. When I turned 18 in 1996 Perl really piqued my curiosity and I aspired to learn it, but what actually stuck was PHP simply because I was shipping so much faster. The whole second system syndrome with Perl 6 obviously didn't help either, but I think that's secondary to the poor on-boarding and general newbie-friendliness of the whole ecosystem.
Show HN: SurviveJS – Webpack and React
"I've seen people do worse things to you in corporate settings than i see them doing on the street. They take everything from you" - 50cent (from the "Champs" documentary)
Can you provide some contact info?
Would like to help adding changes, I personally find Maxmind inaccurate as well.
"It turns out almost any word or word pair that is not an obviously bad name is a sufficiently good one, and the number of such domains is so large that you can find plenty that are cheap or even untaken."

So, after reading this advice, I decided I'd actually try it out - it's easy enough to download a word list and write a script that pings a WHOIS API to check every single word or word pair. Turns out most such APIs are rate-limited, so I couldn't get as far as I wanted, but in a random spot check of 30 or so words off the word list, every single one of them was taken (as was the word-pair that I'm actually using for my startup). Even things as out-there as absurder.com or tektites.com.

I think it's a good bet that somebody has already done this and registered every single English word and many word pair in the .com TLD.

The good news is that by shitting all over .com, there will be no more startups founded with .com domain names. Either companies will buy them as they get bigger, creating a big transfer of wealth from startups to domain squatters, or more likely they'll just give up and we'll get more .ly, .io, or other gTLD domains in the future.
Can you provide some contact information?
I would like to contribute as well, I find Maxmind extremely unreliable when it comes to Home ISPs.
Indie gamedevs attracting Marvel's attention by releasing “Tiny Avengers”
If you're struggling to find a solid available .com for your startup, I'd encourage you to check out my free service, Lean Domain Search [1]. The site asks you for a keyword then pairs your keyword with 5,000 other words and instantly shows you which are available. For example, if you search for "food" [2], it will pair it with "free" and check "FreeFood.com", "hub" and check "FoodHub.com", and so on, and it also allows you to sort the results by length or popularity of that additional word. With a few searches you should be able to find a great domain, saving you a lot of time and potentially a lot of money.

[1] http://www.leandomainsearch.com

[2] http://www.leandomainsearch.com/search?q=food
If you don't have .com, it looks lame, with few exceptions. Also domains that are impossible to spell correctly if you just hear the name.
Does seem a little absurd that there's no "buy book" link in the header, footer or side-bar -- and that the typography choosen for hyperlinks are so broken that I had to read a few paragraphs to realize which section(s) of the black, non-underlined text was clickable.

Not wanting to nag I can understand, eschewing practical UX/UI and refusing to inform the reader that there is a way to pay... not so much.
Poster above says the GPUs cost $6k total, and cases that can fit 4GPUs aren't that expensive nor elusive. So I guess the rest of the system is made from unobtainium, or they figure deep learning is the kind of red hot topic that attracts enough suckers with money that this will fly.
Real Estate: Palo Alto vs. Everywhere Else
The difference is between "given this particular hardware and OS setup, the driver will work correctly, guaranteed." vs. "on your (discontinued) Sony laptop with a strange hardware interface running the beta Slackware release the driver will probably work"
I think he's saying that once you have a set of potential names, get some stock photos/pictures that match up to those names, and then pick a name that you like AND has cool stock photography. That will keep you from picking a name and then having to spend even more time picking photos that go along with your name.
Shoot me an email at sam.granger@gmail.com and I'll provide you with updates
Market segmentation is a good thing. The minority of people that need workstation/server -level reliability pay a premium, while the average consumer gets to pay less. If they abandoned this practice, the typical consumer would pay a lot more.
On the internet, everyone is not a doctor.
"Black swans do not exist" isn't wholly a statement about everything that exists. It's a statement about the possibility of the property of "being a black swan" to exist.

It is a statement about an abstraction, not existence. Like saying "the cup is above the table" is a statement about the existence of the "above-ness with respect to the table" of the cup. One needn't survey all of reality to know if it is possible for some abstraction to exist. It need only be consistent with the rest of your language, so that's all you need to survey.
I've searched a bit about PHP rise compared to the ubiquitous and loved perl, didn't find a lot, but most of them were saying PHP the language had nothing to do with it, it was a HTTP server integration issue, modperl was complicated and had memory issues (shared state?), modphp was fast and stupid. Sure the language is very fun for a newbie, but PHP in thoses days was a technological debt generator..
It's also wrong because it implies that having the .com today is as important as when those companies got their .com. Anecdotally, many (most?) developer tools companies go for .io, so much so that a .com sounds strange these days.
Parallels Between Math and Software Engineering
Flabbergast is solving a different but related problem, it's about expressing the state of your system. Lots of times you want to say the dev environment is like the prod environment, except for these 3 things. And by the way, anything in the European region needs different settings too that interact with dev/prod.

I'm a fan of Ansible, but it isn't really suitable for expressing multi-dimensional and multiple-levels of exceptions, from experience it works for about 2.

How that state is actually rolled out is the job of something else (which could be Ansible or the update portion of your cluster scheduler).
AES-CTR keystream is also a CSPRNG xor'd with plaintext and is a better example because it's the recommended encryption mode (AES-GCM is AES-CTR + GMAC and is what everyone recommends).
Liberating the Smalltalk lurking in C and Unix
Another favorite tool: http://impossibility.org

You feed it a word and it will prefix/suffix it with random verbs/nouns/adjectives + '.com'.
I love it, thanks. One suggestion, though - make it mobile friendly.
This Is My Jam to become a read-only archive
> I don't like the idea of otherwise very able and very skilled scientists struggling to do good research because they're not great with computers.

The solution already exists: skilled scientist hires grad student who's done some programming + some electronics classes. Happens everywhere already, works well.

Talking about UI and UX as a problem with scientific codes makes me giggle though. We have much bigger issues with reproducibility, providence, mandating codes be open source, even getting people to use a version control system, that we need to fix first.
Man, this advice may be tough to hear, (especially for someone like myself who currently only owns sellervision.net for the app I've been working on for ten months) but if the 'Godfather Of Startups' PG believes it's vital to have a dot com, then I'd change the name of my app in a heartbeat. Now I'm just waiting for YC to take me on to their Fellowship or main intake so I can have some budget to buy a cracking new name...ha ha!
There are still a few one-word domains left in the .com TLD (e.g. naziisms.com, regularizing.com, castigators.com). I myself registered one earlier this summer.

http://www.randomdotcom.com/
I've always wondered how long will domain squatters wait before they negotiate. Surely Tesla Motors has approached tesla.com and apparently been turned down. Telsa Motors has shown they don't need that domain name to succeed. So when will the squatter, if ever, cave to Tesla Motors' offer?
Honestly I kind of wonder why nobody has written a library that acts as a thin layer around and abstraction of native UI toolkits

They have. Repeatedly.

It never quite works, partly because the shared code has to deal with widgets behaving slightly differently, and mostly because the Human Interface Guidelines for different platforms are contradictory due to being based on different underlying visions.
Next up: government structured by genetic algorithm.
I haven't thought about making this a for-profit project yet. Maybe a paid API in the future, but I really want to offer an accurate & free option that's up to date.

Re: CC's, I'm also based in Europe (The Netherlands) and also hate services that only allow credit cards.

Thanks for the link regarding diffs, I'll definitely give it a read.
These are not simulating a Turing Machine, they are computationally equivalent to a Turing Machine (for practical purposes). I am adding the practical purposes disclaimer because an x86 has limited memory which makes it actually just computationally equivalent to a finite state automaton.
Have a general password generation rule for servers and accounts for eg :
my/family name + website/server name + current month/year + !@# + some movie name
etc ... i tend not to trust any one with passwords .
Yeah.

I have quite a lot of experience trying to find names and is fairly good at coming up with them. Actually finding available names that have the proper quality is very very hard and time consuming.
I disagree.

My parents are typical web users. Fairly tech savvy, but not tech insiders. I recall telling them about bit.ly. It took a while to explain that it wasn't bitly.com, bit.ly.com, etc. They ended up just searching for it instead of typing in the domain name.

Think of the added friction this causes... and as we all know, every added interaction detracts from the conversion funnel. Taken in aggregate, many startups cannot afford the attrition of a shitty domain name.
Couldn't agree more.

Google,
Yahoo,
Twitter.

Three global brands that aren't dictionary names, and don't have to be. You don't need a dictionary word .com to survive either.
Shouldn't be that hard, right? Pocket microscopes already exists and as far as computer vision algorithms go, it's not a very complex problem.
I like how esoterically, the footnotes imply you may want to consider changing your nationality or religion, as well.
I think it is the opposite. Among most of the "non tech" people I know, they enter a name at a google search box rather than a URL. Even if they know the URL, they enter it at a search field!
Define sandbox. I'd give firejail a try.
You can get a decent self-winding mechanical watch for $150 from Swatch.

Beyond that, mechanical watches are like art or classic cars - you can "invest" in them, but they are more status symbol and one-upmanship than investment...
Ianmiell/shutit – Complex and Dynamic Builds Made Simple
KolibriOS Review – Free 1 MB Drive/8MB RAM Assembly OS
I would describe what you're talking about as "black swans cannot exist". That is an even stronger statement, because it also implies that black swans do not currently exist.
Yes, and that is a problem. But that's not nearly as bad as having Google and Bing have the same role. DNS goes through a highly decentralised network of name servers, many of which aren't at all controlled by the ICANN. Each country based top level domain has its own set of servers, and there name requests are generally cached on other servers still.

But when you type "company name" in a search engine, you give away your search to an ad supported private company in real time. Juicy profiling, no privacy. Much worse than using DNS.

Besides, when you click on a link from your favourite search engine, you're still using DNS. Now you have two single points of failure.
Packet routing? If there is an example of this, it is very far from the norm. Routing on the Internet is driven first and foremost by peering arrangements.
So what I'm envisioning are services designed for zero profit. Prices are indexed to AWS/Azure/Google prices; as they fall, the service's prices falls. Customers who need predictable pricing can buy long term contracts, as they do on AWS. Customers who use the service more, pay more, because the service offers utility-based pricing. The goal is to make the service as cheap as possible and maintained by the community. The source code and all data, except private data (e.g., API keys), is open and editable by the community.

Think it would be an interesting way to deliver services and data, just not sure how it turns into a business (since the API/service portion is designed to be zero profit).
link is down?
Pedantic: there are better modes to use than GCM, for a couple reasons. GCM is the most performant widely available AEAD though.
There is another problem with Paul's suggestion, which is that it only really works for very young startups that don't have many customers or other business relationships yet.

Once you sell product and have established partnerships changing your name just doesn't make sense any longer and becomes a measure of last resort, e.g. if your brand is so damaged that continuing business under the old name becomes very complicated. But then again, if you're in that kind of a situation you probably have a lot more things to care about which are at least as important.
Qubes? https://www.qubes-os.org/
Honest feedback: why would I give you my email?

- there's dozens of free sources of remote jobs out there - what will you offer that they don't?

- you mention paying something after 3 months. Pay for what? How much?

- there's ZERO information on what you'll do (or at least a pitch on how you think you'll help me in any way)

- Basically I can't tell if you're selling a job board, recruiting work, elance style portal or something else entirely...
I can just see it now.

"Certainly there are some unfortunate connotations with our name, but we feel that the advantage of having a memorable, one-word dot-com domain name is worth it." - Bob Q. Startup, Founder and CEO of Naziisms, Inc.
Nothing. Java is only there to run a couple of extensions, but none of the core functionality requires it.
Interesting, would love to hear some of your experiences! It sounds like the issues we face are slightly different. From my field, version control is pretty much a non issue[1], most of the widespread codes use that (typically svn, but that's fine). Build systems are often an issue, as is incomplete (or outdated) documentation, and a lack of proper changelogs. A lack of proper tests too. Actually, maybe the issues we face aren't so different after all...

> The solution already exists: skilled scientist hires grad student who's done some programming + some electronics classes. Happens everywhere already, works well.

I've never actually seen this work well. Scripting an existing solution, sure. But writing a new one from scratch... Most scientists I have met personally who code, write awful awful code. Sometimes they just lack the time to do something better (I'm as guilty of this as anyone), other times they're just not very good at it. And it's almost never maintainable: when they leave the project, you might as well re-write from scratch (a more cynical person would say that's by design, but I actually don't believe that). There are many, many exceptions to this, obviously, but as a rule...

I am optimistic though. It seems like things are changing for the better, slowly.

Edit: [1] That said, I've been trying to persuade a colleague to use version control for ages. I'm at a loss. Live and let live, I guess.
Video probably won't be up for a couple months. Defcon sells the video and people usually upload them after.

My guesses are that he was saying the security community regularly freaks out about small things like complex MiTM attacks which if you followed these frameworks for Risk and Threats he has laid out you'd realize are not that big of a deal. At least not the big deal that they were on twitter, blogs, etc. He's basically saying stop crying wolf, use the risk management tools to figure out if this is actually a big deal and if it is THEN freak out. If they do this then when they freak out at the right moments the community will be more respected for their freak outs and people will respond to any problems raised..
Nowadays, it seems that if your startup is primarily a web application, then choosing the right domain is a little more important than if you make an app like Snapchat. Is there really a big difference if you type in "snapchat.com" vs "snapchatapp.com"?

However, if you can avoid more obscure and complicated URLs, then by all means do it. I think its best practice to have something straight forward so the user doesn't have to search first to come on your site. You never know what kind of distraction can present itself in those few seconds leading a user away from your site.
ShutIt is great. The reason I say that is because I've already built 3 of these things with a similar philosophy, which is to say that bash scripts are perfectly adequate when coupled with some high-level orchestration/lifecycle mechanism that is managed with Ruby or Python.

I'm definitely going to give ShutIt a try because my next gig is a Python shop and I'm not really interested in writing another custom tool.

You should definitely evangelize this tool more because every single shop builds something like this but it never ends up being open sourced. That's a lot of wasted effort across the board.
Exactly. Maybe it's because the top 20 stuck around in YC long enough to be badgered by Paul Graham into getting a .com?

That said, I don't disagree with him on .com, I just don't think this particular factoid adds anything to the argument.
Isn't that a slightly different point? You're talking about ability of a user to discover or find the site, not the user's perception of the strength of the business.
Added to the list! ;)
Nvidias drivers for Linux are pretty darn good these days..