skysight-inc/HackerNews huggingface dataset:
Here is a 2014 vulnerability report of Secunia: https://secunia.com/resources/vulnerability-review/update-al...

Google Chrome is at the top with most vulnerabilities, IE a bit below it, Avant browser, Firefox. Same with the 2015 edition.

Flash didn't even make it in the top 20. And yes, they also evaluated it.
Yes, you should live with it, and you are. Meanwhile alternative ROMs exist if you really care, and a better implementation for stock android is in the works. Meanwhile most/all desktop operating systems are in an even worse shape, and no one is complaining about that or calling it a rotten egg. Talk about hypocrisy.
I wholeheartedly agree!

The graphics modes are fun to program for too. You can start with a simple mode 4 that is a bunch of pixels, and eventually advance to "mode 7" with pseudo 3d made with tricks in hblank, and a custom vram tile allocator to support larger-than-vram scenes.
Around 2006-2007, I TAed a course at Cornell (CS212 I think?) that did exactly this. Three other TAs and I basically got to fork the course. We did a bunch of R&D into tooling and taught a small group of interested and motivated students how to build a non-trivial piece of software from start to finish. I think it worked out very well.
Is there a concept in law as "you should have known"? Like, its one thing to not know that the thing you are saying isn't true (i.e. "my co-founder went to Yale" when he actually believes that he did).

But another to not know the definitions of words you are using when you should know that? Can you say "I have a million dollars in the bank" when you honestly believe "a million" = 1000?
The intent is to deny many someones access to public information for the convenience of one someone. This is censorship by degrees.

You'll have to pardon me. I'll be over here, in the corner, throwing up.
HN is more of a 'show and tell' rather than a platform for repeat-marketing. Every time someone reveals numbers behind their front paging it's awful as a growth mechanism, if the blog posts aren't even selling your company/product then it's even worse because that's another cliff in the conversion funnel from visitor to anything-of-value. Another startup recently revealed they got just 44 trial registrations from three distinct front page stories [1] and over 9000 visitors.

Another example that comes to mind is yesterday's marketing blog post by GrooveHQ [2]. It was their second front page post in nine months and 50+ attempts, and it wasn't even about their company or product. Instead it was about a different company whose content marketing for their ideal visitors had ironically grown their blog to 250,000 visitors a month. I wouldn't be too quick to consider optimizing for HN harmless.

To me it all reeks of @sama's "fake work" post from yesterday [3], right down to the justifications founders come up with - you're not going to achieve "TOMA" for enterprise social network software from a briefly popular blog post about something silly and unrelated Oracle said. You already achieved everything you will from it - a brief bump in your page views.

[1] http://blog.yesgraph.com/yesgraph-tc-ph-hn-omg-bbq/

[2] https://www.groovehq.com/blog/zapier-interview-with-wade-fos...

[3] http://blog.samaltman.com/the-post-yc-slump
...we've taught passengers not to cooperate with hijackers

Since I'm old, I remember the decades during which we were taught to cooperate completely with hijackers. Of course this was always bad advice, as was eventually made clear even to the idiots on TV. It seems possible that if no terrorism "expert" had ever appeared on TV, 9/11 could have gone very differently.
Are quantum fields actual elements of reality or just a convenient mathematical tool to deal with many particle systems?

One of the questions I am struggling to find a satisfying answer for for quite some time. Depends on whom you ask? We can't tell because both ways of thinking are completely equivalent? Fields are real! No, they are just a tool! Are there issues with real fields forming a preferred reference frame? Does somebody know? (My current understanding seems to suggest that fields are just a tool.)
This isn't really finance though; it's accounting. Accountants don't even cost $150k a year, and a CPA can explain to you the difference between the terms and what is legal / illegal (or at the very least a non-GAAP measure).

If your startup is past the garage stage, you should probably have a corporate accountant on retainer so you have an "expert" with whom to discuss these terms. They're not super-expensive.
https://quip.com/32zVAMYAi29n
They're talking about 11B in pass-through revenue and 2B in revenue to Uber.

The 11B is the value of transactions they're facilitating through bookings that customers make, which pass through Uber and end up with the drivers, less the commission, which is the 2B in Uber revenue.
I work in the traffic industry and over the last 8 years I have seen the rise of WIFI and Bluetooth journey time monitoring kit and after looking at every solution, I have found that the method of "encrypting" the data has always been just a MD5 hash, or SHA if you are lucky. With with result Hash just been http'ed over to a server on the internet. This usually leads to to question, "OK, so I can just hash the victims MAC address and the look for that in the data stream to find out where the person is instead of just using the MAC directly?" The same is done for ANPR based systems. The word "encrypted" seems to be added to some how make it secure without the solution being secure.
There are several USB 2.0 gigabit ethernet dongles out there. They'll obviously only reach a max of 480mbit/sec, but so will the 3.0s on a 2.0 bus.
This is a pretty good introduction. I highly recommend Feynman's book "QED: The Strange Theory of Light and Matter" as an excellent in-depth work that does not sacrifice accuracy for the sake of making difficult ideas understandable. It is both very clear to the layperson and accurate to the physics.
arent you getting paid for these referrals? Why would an end user pay you for these free trials? i think you'd be better off to just list them with affiliate links and call it a day. buying discounts doesnt make any sense to me... but good luck with it.
Japan's reputation changed way before the 80's. For example, there's a speech by LKY from 1965 stating the "Made in Japan" no longer means cheap stuff, that it implies a top-tier product in certain industries.
How Apple got Siri to run much faster, for a lot less cash
Heh. I don't want to solve it myself. I want someone to solve it. I will pay $50 for a bug-free version of the previous version of Mailbox.app, today.

Edit: Looks like Mailbox has fixed the app. Nice.
Personally, I find this a dangerous way of thinking. A real "right to be forgotten" law would affect content providers/publishers. Instead this is more "right to de-index". Ease of access is very subjective and the arbiters appear to be the ones holding the gun shooting said messengers. Despite my other concerns with the legislation, the primary reason it works today is because of centralization. The same people fighting for internet privacy and against government censorship will end up making laws like this unenforceable in the future. I wonder what lengths the EU will then go to when the indexing of lawful content is not centralized.
The same way that software, the nsa, and ubiquitous cameras with facial recognition changed surveillance, google changed knowledge discovery. The laws that were appropriate when surveilling a person meant dedicating a set of human beings to following someone, thus naturally limiting the scale, fall apart when it can all be done electronically at vastly higher scale for very little marginal cost. Similarly, the laws that worked when information was naturally forgotten because we had limited ability to index and discover it, ie you could always do deep background checks on someone, but it was very labor intensive and thus pricey, need rewriting now you can get the equivalent of an fbi background surveillance check by typing a name for tiny effort and cost.

Hence jerks like Eric Schmidt suggest people should change their name if they want not to have youthful hijinks follow them around, yet is happy to use his billions and lawyers to keep his mistresses' stories off the internet.
New Rustic Baby Shower Favors at HotRef
Average case, ln(n), that is, "sub linearly".
It's hard to say.

Google Ventures actually invests through various funds organized as limited partnerships. These are separate entities and Google, Inc. would only receive a return from this investment to the extent that it was a partner in the fund that invested in Uber or if it had a side agreement with that fund to give it a share of the return.

You can tell from various GV SEC filings that Google, Inc. may have the right to vote shares held by the GV funds, but the filings don't disclose Google's share of the proceeds of a sale of the shares.
April Fools Day needs to stay on April 1.
Ask HN: What database do you use for your iPhone app?
There are a ton of options out there, from CoreData to SQLite to Yap, but it's hard to see what's commonly used these days for good iPhone apps. Bonus if the database supports syncing to a server we control (not iCloud) and has good bindings in other languages (like JS or Android).

We use (and pay for) Parse at the moment but it's really slow for us despite the very little amount of data we send to them and caching locally is a big pain.
I've been toying with a NN trying to get it to play 2048 based on game data I recorded. I still have about 60% error rate, but I found that with 16 inputs (the tiles on the game), and 4 outputs (directions to move), it works best like a funnel.

I currently have 2 hidden layers, of 12 and 8 and it's the best I've gotten so far.
Mitsuba lacks a lot of features that are necessary for production: there is no proper support for hair (Mitsuba only has a simple Kajiya-Kay shader and no specialized acceleration structure for ray intersections), there is no support of subdivision surfaces, no support for displacement mapping, etc. All of these features are necessary in production.

Mitsuba is great for research though. It has support for a lot of experimental rendering algorithms (such as Metropolis Light Transport), which are not supported in production renderers. Due to Mitsuba's modular structure it's also incredibly easy to implement new algorithms, which makes Mitsuba a great framework for comparing rendering algorithms. A lot of papers use Mitsuba to compare their new algorithm to other algorithms.

Most production renderers use CPUs (just like Mitsuba). GPUs are incredibly powerful and some benchmarks show 400% speed improvements over CPU-based renderers. The problem is though is that GPU-based renderers struggle with the scenes that are used in production. Typical production scenes contain over 250GB of textures and over 10s of GBs of geometry (pre-tessellation). This isn't going to fit the in the memory of a GPU and the GPU will spend most of the time loading assets from the hard drive (or network).
Well shit, how come I've never seen anonymous structs before.

That's pretty cool.
It's not YC's job to teach executives anything. Their entire model is self-service: they give founders access to people who know this stuff, but you have to ask for help to receive it. At the same time, a lot of these founders don't know what they don't know, so IMO this blog post is a way of saying to current and prospective founders "Hey, you need to be careful about this because creative accounting is often illegal". The startup mindset is to find creative solutions to problems, but that doesn't work in finance/accounting.

> I mean, the whole model of YC is to take kids straight out of college

Isn't the average age of YC founders closer to 30?
My impression of YC has never been that it is some hand-holding after school special. This is an investment firm in the world of business and the world of business is very serious. As a startup founder, you are treated as an adult and that includes both the freedoms and responsibilities implied.

That said, you may have a point here. If there is a recurring issue that some founders are too immature for their own good and might be a risk to their own personal safety (e.g., committing felonies out of pure ignorance), YC should probably be intentional about filtering those people out during applications. But this article isn't just about YC candidates and that's not a solution for the whole industry.
That doesn't help much for folks who read with their browser window maximized. It's good to know, and thank you for pointing it out, but the original feedback is pertinent - it's inconvenient to resize the browser for one page that's flowed poorly.

A single column of similar size would be fine. Two columns is not great.
That journal was basically Erdős' high school, wasn't it?

Glad to see that it's still around :)

(Also glad to see that they had girls on the high score roster right from the beginning!)
At what point do people start acting like grown-ups who take the time to learn what responsibilities come with their actions?

I think college graduates certainly qualify. If I'm going to call myself "CEO" then I better damn well figure out what that means, and if I don't know, I should study or seek the advice of someone who does.
> What are the reasons startups can't hire good finance people?

Perhaps there is a correlation between being a good finance person and not overlooking the risk associated with working for a startup, such that good finance people -- who command high salaries anywhere -- aren't particularly attracted to work at startups, making it even more expensive for startups to hire them than it would be for others to do so.
I came in to say the same thing. Two column is great on a single page, but when part of the reading process is "scroll all the way back to the top of the page and start over", something's wrong.
Do people work on the same files/folders at the same time? Then the workflow is already way more distributed than svn ever was :)
I worked at the IAEA at the UN in Austria.

The interns there were usually smoking hot women from various countries hired by their bosses to be eye candy.
I have no idea, but I'd guess not, sorry. But if you want to have control over what your computer does, why are you using Windows? :P
I don't think there is anything to worry about there. The blogpost says that they are adding things to the API to allow popular addons to work in the new model, and those addons certainly count.
The book is truly excellent. You need some knowledge of (partial) derivatives and matrices, but other than that it doesn't require any more sophisticated mathematics.

We used it to prepare a 10-day course on neuronal networks for high school students. For anyone interested (and capable of reading German), see https://github.com/iblech/mathematik-der-vorhersagen for some notes, Python code, and videos.
It's like the coefficient of friction.

The amount of force required to move an object at rest is greater than the amount of force required to maintain it already moving (or something like that).
Semi-unrelated: The set of themed names around Rust will make it fun when and if a Rust game become available on Steam — “Today <game name>, a <game type> written in Rust with the Piston framework became available on Valve’s Steam game marketplace." It’s a steampunk fan’s dream.
Yet you'll note that things like credit services are, at least in the united states because that's what I'm familiar with, regulated. You have to be able to see the information and there is a process to contest inaccurate information, with government penalties if the companies don't comply. And there is enforced forgetfulness: negative credit information is removed from your report generally after 7 years. I rather doubt google wants to be so regulated; like many internet companies, they want to have their cake and eat it too.
Same as ThinkGeek's one: https://www.thinkgeek.com/stuff/41/moodinq-tattoo.shtml
You mean, for the far future?

The Big Rip hasn't been ruled out yet.
What kind of oversight do these organizations have? Who are their "investors" or "donors"?

It seems like organizations like this are not overseen for their effectiveness. Why is measuring organizations for their effectiveness and striving for effectiveness not a standard table-stakes expectation for an organization of this size?
Interesting idea: VCs should have in-house finance folks specifically meant to work with portfolio companies who spent a few days a month for year 1 after investment, or until the company gets it own finance team. Most VCs do less than 10-15 deals a year, so this seems tolerable and a relatively low cost way of to really know what's going on with the portfolio. (I know some VCs already kind of do this (Vantage Point). Also, harder for YC, given # of investments, so maybe not as applicable for true seed funds but still might be worth it - I'm sure they could get 5 mid-career CPAs for the price of one partner, and they would love the job! I think)

The fun part is that then the VCs will have a direct line into the company's nitty-gritty operations, which really they are entitled to receive anyhow (though usually they just take the board deck at its word..which is not always good).

This might suck for the company since you have the VC in-the-know on your nitty-gritty (though I'd argue that if you don't want them in-the-know, you should not have taken their $$...though I understand it's more complicated than that haha), BUT that might also serve to incentivize the company to build out the finance team quickly, and also give the management team a taste of what a good finance person can provide (assuming the person the VC provides is good, which they should be if they are to be trusted with multiple portfolio companies).
Galvos were fairly common back on those days. For such a simple device (it's just a voicecoil) you can get very precise alignment assuming it's well designed mechanically (e.g. properly damped). Not sure about spinning mirrors like those used in barcode scanners, but I'm guessing gavos were preferrable at the time for things like this. Galvos were heavily used in laser light shows back then which would have been very popular when this was being designed. To be honest, when I heard single line LED display utilizing 2 mirrors (one for each eye), my first thought was "Just like a laser light display." Clever, but relatively evolutionary if you know how existing tech worked at the time.

The other reply below/above isn't correct about there being a pause between scans. A common implementation for rotating mirrors is to use an octagonal mirror [1]. With that implementation, there's no pause. The image just jumps immediately back to the left/right. The issue is more likely controlling the speed of the motors would be difficult to keep synced with the requisite precision.

[1] http://cdn.iopscience.com/images/0034-4885/76/8/086801/Full/...
That's a valid way to look at things, but I take a different approach. I try to avoid easy projects as much as I can with my preferred tech, because it forces me to grow as a developer. I have a relatively diverse skillset which I can grow outward or upward if I need to, but I also have deep knowledge of 2-3 technologies that really pay the bills.
Really? Seems like that line is easily defined with a sentence or two.
They're not though. What percent of drivers do you think have appropriate liability insurance?
I am just curious. Wouldn't it be more easier to do this with specific devices than using the phones?

Each passenger can be given a smart card along with the boarding pass (or embedded in the boarding pass). The sensors could merely check for the smart card at certain points and determine how long it took for the passenger to clear security, etc. The airline can then collect the smart card back just before boarding when they scan the boarding pass. Seems like a simple solution that would work without much privacy concerns.
Can someone clarify the difference? Using Uber as an example: their GMV is the sum of all fares, whereas revenue is the 10% they take off that number—is this correct?
There's no hypocrisy there. He's probably had to personally be super-cautious about opening his mouth about things like this.
> Well, we've already established that the code was wrong...

Hah, it's been a while since I read:

http://www.daemonology.net/blog/2011-01-18-tarsnap-critical-...

Makes me feel a little less bad for the Debian issue with (way!) too low entropy in key-generation.

Refactoring code using crypto dangerous :-/

Have you considered creating a 2.0 on top of NaCL? I could see that it would probably not be a good idea to actually throw out all the existing tarsnap-code etc -- I generally just mean if you'd want to move to a simple, yet "batteries-included"/shrink-wrapped crypto library?
I wish it were real, then we'd have a pop-up industry for e-tattoo removal as everyone would want to upgrade their tattoo every year.
this is pretty much my thought, a lot of these are offered anyway, and often for completely free.. why pay $39 for a bunch of affiliate links?
This is already happening (depending of the country, your skin color might also make the price go higher), tourists typically pay more for a lot of stuff than what a local would pay. Though, sellers are usually a bit more subtle than "Hey, give me your passport, so I can tell you how much it costs". This is how a lot of people make a living in a lot of places. In the tourism industry, I think it's completely understandable and reasonable to base a price based on what the buyer is willing to pay, more than what it really costs.
Just in case anyone, like me, read the headline and wanted to see the old 'Green Desk' feature on Brass Eye, I found it here:

https://youtu.be/usTT3RuWu_g?t=4m44s
When I was flying in continental USA on a weekly basis in 1998-99, security lines were seldom a problem. On more than one occasion, I parked my car in the DIA short-term lot (client was paying) 20 minutes before flight time. Gate agents would wag their fingers, and I'd be breathing hard when I got aboard, but I never missed a plane because of it. Also when I forgot to stash my pocketknife in my carry-on bag I just plunked it down in the change bucket with my keys and change. It really was easier and more enjoyable to fly back then...
Motion-Controlled Servos with Leap Motion and Raspberry Pi
> They have long lost their professional ambition, and spend days in the office working on private projects, writing music, taking long lunches and in general killing their time until retirement. Most others are just average people, like you and me, that got trapped in the system and started drinking its Kool-Aid, over time becoming poisoned with it.

It sounds much like working in higher-ed or most government jobs. For that matter, it could be describing some large corporate environments.
Claims of a plan to go public are very often more of an employee retention tactic than an actual concrete plan coming from the CFO.

Don't be surprised if they reuse these slides in three years to a largely fresh-faced crew of engineers with stars in their eyes about their stock options.
I loved this: " We would like add-on development to be more like Web development: the same code should run in multiple browsers according to behavior set by standards, with comprehensive documentation available from multiple "
This is a really important issue. more so because the product isn't free but charges customers.

On a side note...need a name for my new company...open letters as a service
"Socialism" might be a really good explanation for both Poland/Estonia and Sweden/Norway.

(It takes some background knowledge to unpack but I really do believe it is the core reason. Different kinds of Socialism, though.)
Quip uses LevelDB/Protocol buffers with a custom C++ syncer which syncs to a Python/MySQL webserver:

https://medium.com/@btaylor/react-with-c-building-the-quip-m...