skysight-inc/HackerNews huggingface dataset:
>Now it turns out that it doesn’t actually take 3 days, its just the line is really long and it does apparently take several hours per machine.

For one they can't predict when they are going to get around to your machine. There may be 100 repair orders in front of yours, might take 1 day, might take 2. They can't possibly set up a system where they send you an alert to say "You are next in line, please bring in your laptop." That would cause incredible delay when that person doesn't show up and you have a tech repair guy waiting for a machine.
Maidayy.com also appears to be the same - the privacy policy is almost an exact word-for-word copy of homeaglow etc, and the site design has a lot in common as well. However, it appears to have been registered as early as march?

Their privacy policy appears to be copy-pasted as well:

> we are Maidayy LLC (doing business as Maidayy), a Wisconsin company with our head office at ADDRESS, CITY, STATE USA

edit: just noticed this heading near the bottom:

"Access to Information; Contacting Homejoy:"
Thanks for giving promo codes.

Great app!
s/as well/better
I have no doubt that there would be incompetent or dishonest notaries. The difference being that in an alternative universe, where Convergence is used, a rogue notary doesn't destroy the trust of the entire system. When Symantec is a rogue notary, oh well, Mozilla and Google push out an update and no one uses Symantec anymore, their notary just becomes irrelevant. However, in this reality, the darkest timeline, deciding to stop trusting Symantec immediately breaks 30% of HTTPS websites on the internet, so even though Symantec has given everyone plenty of reasons to stop trusting them, we have no choice. Same for Comodo, their notary would have stopped being used in 2011 (after their root certificate compromise).

Instead, with Comodo and Symantec combined, we now have over 60% of HTTPS websites secured by authorities who are incompetent and/or dishonest.
You're being too cynical. Why does everything have to do with money? He didn't say he thinks there's money in this. You are the one who did. And there is not even a guarantee that there's money in this "space" either. Rather, this on-demand home-cleaning category is quite gloomy if you look at what's happening to all the companies that belong to it. Maybe you think all "opportunities" are related to money, but to many entrepreneurs it's just a secondary objective.
Well first, I'm in the weather industry, not the location-tracking industry, but I will share some of the insight for how this could be done. The barometer won't help with your latitude or longitude usually, because you are correct: the pressure will be approximately equal in those dimensions when you are looking at such a small area.

The barometer is sensitive to altitude changes much much smaller than a meter, probably something like 0.1 meters. So if you are a person, with a smartphone, and you are in a tall building, the barometer can assist with determining which floor you're on. Other sensors would need to be used for calibration (since the changes weather will affect the floor-level) and it doesn't help with the x,y coordinates, just the z. But other location systems are now very very good at x,y and they mostly lack the z.

So by adding the high-accuracy relative altitude capabilities of the barometer to the existing x,y systems, you can get extremely precise locations.
This is a referral link, no news here.
Six Problems with Our Democracy… and Who’s Working to Fix Them
I'm really excited about this -- anything to break the stranglehold of iTunes. Lots of interesting startups are popping up to work on podcast discovery (including one of my own, https://shownotes.io). There's definitely room for some big elephants in the room, though.
I think what genuinely defines a passion is, would you do it for free if nobody was going to pay you for it.

On such terms "Passionate about" statements are almost universally crap.

There is nothing wrong with just working for the money, all this instistence people must be "passonate" about their work smells an awful lot like cultish propaganda. It not enough to do your job and get paid, you must LOVE your job!
You're certainly not the only one to think that the term is somewhat misused:

https://www.youtube.com/watch?v=Bz2-49q6DOI
Huh, I use OpenWRT and hope there's not much left of the originals. I use redsocks on my laptop to direct my traffic into an OpenSSH provided SOCKS5 proxy terminating on my own server in a German data centre. This should eliminate some snooping.
penny stock, is this a buying opportunity? I have previously had painful misses on early stuff like this.
You don't even need the terminal, just double click the file.
Maybe the first GNU APL pull request on GitHub
GoPro: Sneak Peek of GoPro Quadcopter Footage
>Same way that putting a thin phone in your back pocket, SITTING on it and then complaining it bent set off a huge issue and tons of news coverage.

To be fair, earlier phones didn't have the problem. My Motos and iPhone 5s took back pocket tension like a champ. iPhone 6 had to be replaced within 10 days.
Robots Can Now Teach Each Other New Tricks
Thank you for clarifying. Basically I thought maybe something like:

http://opencores.org/donation

already existed - but apparently not (except for targeting FPGAs as you mention) ?
Lead is uncommon in artist's oil paints in the U.S. One of the most widely distributed brands has lead in exactly one of the the hundred+ colors they offer. That said, don't put your oil paints or solvents in your mouth.
Stripe's API returns the last four digits for a tokenized card so you can display them to users.
They're called a "unicorpse".
Wow. Just wow. This is egregious. I would be incensed. I'm a 39 year old consultant that makes money from technology but I am starting to feel like I'm out of touch and old. This is not ok. If you fail, fail with class and dignity.
Could the heavier weight (not big enough to break the screen) could actually damage the force touch sensor also? But probably the screen damage possibility was the reason for the rejection.
This feels like a distinctly American problem to me. It's hard to have serendipitous interactions in public spaces if you're sitting in car at the time. I've lived in several large American and European cities and I wouldn't willingly go back to a car-centric lifestyle. So many of the plaintive questions in this article ("when was the last time you had a meaningful interaction with someone in a public space?") ring hollow to me; that sort of spontaneous running into friends is the norm when you walk instead of drive.
The CA system is unique is that one hole, breach or incompetent actor compromises the entire system.

It's also unique is that when an authority has a hole, breach or is an incompetent actor, it's very difficult to remove them from authority.
No. I opened this up with a contrarian tone, you were completely civil. Thanks for that!
I can't find it now, but there was a viral story about someone who posted to Facebook a link to a funny product they found on Amazon. Embedded in the url was the search string "masturbate".
Are Down Rounds Always as Bad as They Seem
The future of urban transportation
Principle of Charity, my friend. I'm not really sure where you got a negative vibe from his comment. It was more of a comment on how effective word-choice is on someone's symamantic tree.
Heard it here first: This is the start of YC's fall.
From my research the only thing you truly can't handle is The Double Spending problem, blockchain ledgers help against this but are not immune to it.

Any and all arithmetic operations can be fully solved with CRDTs without further can kicking. The trivial solution is to give every number you are adding/subtracting a unique identifier, then as the values come in you do a sum across them, deduplicating in the process. This means you can resend the math operations as many times as you want and you still get an idempotent result.
I was excited for a new Modern UI launcher for Android... but this looks exactly the same as the other hundred or so launchers on Google Play.

Wtf, Microsoft, what a wasted opportunity...
Analyzing Product Hunt Data
Thank you for all that. Reminds me about something Alan Kay recently mentioned in a talk (I think he mentions it a lot) - used to be, universities made their own computers. The whole thing, architecture and all. Silly expensive. But now everyone uses the same crap (because it's proven crap, and because we've got software that runs on it, and because it's practically free compared to building your own). It's a sad state of affairs.
Why can't typing search in chrome bar directly go to -> google.com#search-term
Some Data on the Tech Bubble
> They want Android users... not Windows Phone fans.

Making a good Modern UI launcher could help steer people towards Windows Phone and every other software that uses that UI...
Yep this all makes sense. I still think there's a chance it wasn't transferred at all. Since the founder of Homejoy runs the new site it could be that they're still the same entity and business with the same stripe account. Maybe this has its own implications.

Unfortunately it sounds like the worst case for them is that enough people report them to their payment provider and they get fined. Clearly what they face there is probably not worse than the huge violation of trust their former customers will feel.

By the way thanks for digging into this so much. The Stripe TOS are darn clear here.
Reminds me a little of Doug Lenat's Eurisko [1] fleets for Traveler TCS in 1981: lots of cheap, defenseless, and heavily armed boats.

[1] https://en.wikipedia.org/wiki/Eurisko
Only 15% of Congressional sites are HTTPS ready
I don't know about you, but if that's the only reason, it sounds an awful lot like a clear cut case of overreach.
Show HN: EmotiClean – A Chrome extension to replace bad words with emoji
Why does Hacker News look awful on mobile?
Wouldn't it be awesome if they included this meta tag?

<meta name="viewport" content="width=device-width, initial-scale=1.0">
Thanks for clarifying what is going on.

For me, however, the weasel-worded "we realize now that we did so in an unclear manner" is completely different than "we realize now we made a big mistake".
Say you attempt to do this all in JavaScript; you've still got to deliver the page (the encryption code, really) to the user securely; otherwise, I can modify it s.t. when it gets a blob from the server and decrypts it on the client, that decrypted value is also sent off to a shady spot. You still need to get your app from you to your user securely, and how do you do that?

It's the core problem really: how do you distribute your public key? How do you make sure Joe user gets the right public key? Today, we have the CA infrastructure, which admittedly isn't great, but… what would you do differently? (And the big problem is that it needs to work for average Joe.)
The One Secret of High Functioning Product Teams
No I'm not using ELB IPs directly. My concern is this scenario:

1) ELB with IP 1.2.3.4 develops an issue (AWS internal outage)

2) DNS resolver for an end user of my app has the pair myapp.elb.amazonaws.com/1.2.3.4 cached previously for longer than the TTL (resolvers are notorious for this)

3) When end user resumes work within the app, they're referencing the LB at 1.2.3.4, which is down.

Hence my question. Is the mapping of 1.2.3.4 to its respective LB static or virtual? Meaning, does AWS keep moving the 1.2.3.4 around to a healthy LB service seamlessly?

Thanks
The comic isn't about parent participation it's about who the parent blame for their child not doing well.
> For instance, the Washington Post has begun testing a system that locks out visitors who block advertisements.

I understand that position. But that's a losing position. It's an arms race, ad-blockers will always find clever ways to bypass these schemes then consultants will come with more complicated scripts that will make web pages heavier and harder to visit for those who don't block ads ...

The Washington Post certainly is not going to win that war. The only solution for them on the long run is all their website behind a paywall, like the Financial Times.

I'm curious if youtube is going to do the same, since they introduced an ad free paid offer.
Awesome. That'll teach me for just being cynical after just skimming over the front page of the mobile site.

That said, I'm still pretty skeptical about the grandiose claims about the number of words a child hearing per day and IQ. I strongly suspect that hearing large numbers of words before the age of 4 is not causing increases in intelligence. My guess is that it's just a strong correlate to a bunch of harder to measure factors.

Still, the fact that I wouldn't be buying this at the cost of my privacy makes me way more likely to get this thing. Whenever I'm learning a language, I do wonder about how long it takes to hear most of the words you need to get along in daily life, and how often you hear them. Even if it doesn't give you any kind of list (shamefully I still haven't looked at the details), it'd be interesting to just know the raw number.
Don't hate the player, hate the game. Well, I suppose you could hate both.
Starting Up in a Downturn: How Okta Built Its Enterprise Company
You don’t need clever digital marketing, get out of the building
I noticed this yesterday. Browsing senate.gov and associated domains with https everywhere shows a lot of broken pages. It's fun to peek around on https://republicans.senate.gov and https://democrat.senate.gov because they appear to be test versions of those pages. You can see a list of domains the wildcard does cover by looking at the error the browser provides and what not. Someone should probably fix this mess over there...
Similar articles:

http://www.mediastreet.ie/blog/2015/08/17/ad-blockers-intern...

http://www.cio.com/article/2986749/consumer-technology/adver...

And this: some publishers are blocking visitors who adblock. Good, don't whine, just allow or block.

http://www.cnbc.com/2015/10/22/reuters-america-google-seeks-...

"Germany's biggest newspaper publisher Axel Springer last week banned readers who use ad blockers from its Bild tabloid website, stepping up a fight by publishers to stop online advertising revenues being eroded."
I don't think it's possible to replace the lock screen in a native way. All "custom lockscreens" in existence today are basically hacks -- you will notice flickers when the lock screen activity is initialized, for example.

It's necessarily not customizable for some security reasons (unlock code, etc.)
App review is effectively a black box since the rules are applied so inconsistently, and working for weeks or months on something only to find out the Apple doesn't like it is a constant concern.

Unless you're Facebook which has recently been caught abusing silent notifications to start up in the background and continue running permanently by streaming music at zero-volume while draining battery.

Apple responds decently when developers have big media presence notice their abusive process and rolls over passively when powerful players like Facebook have them over a barrel. It's a stormy ocean when you're independent. Best to be careful.

increasingly disinterested in

You mean 'uninterested,' not 'disinterested.'
I think you should spend some time reading up on charther schools and see exactly how they get their funding and what they can and can't do.

If you can't be bothered start by watching the Documentary "The Lottery" and then come back and tell me that a schools methods can't make a difference.

If you are still not convinced I can certainly live with that.
No I have no need to carry around a scale at all times. But I do have a need to carry around a working phone with a screen that isn't scratched, broken and with a force touch sensor intact.

Again if you are the sort of person that is willing to risk a $700 phone because of the inconvenience of carrying a scale then I suspect you may be a niche consumer for Apple.
Videopath+–+feat.+Josh+Maher+&+Seth+Levine+(podcast)
OpenKeychain 3.6: Security Audit and Tons of New Features
Teachers, such as the Zen and Budda masters, always say it is a sign of reincarnation i.e. a person, who has a phobia, say for flying on an airplane, might have died from a plane crash in their past life.
OpenKeychain developer here.
If you have any questions about certain fixed vulnerabilities or features, I am happy to answer any questions.
Can't script a double-click in Finder. :-) (Well, there's AppleScript...). But, yeah, point taken.
But only Apple would know how much weight the force touch sensors can sustain before they are damaged.
Putting your password in plaintext is unacceptable because exposes it to anyone who may be sniffing your traffic. Your search history is already visible to anyone sniffing your traffic, so it's presence in the URI is moot.

I guess my point is that there's a continuum here. There's already other ways for this data to leak (it's already plaintext on the wire, and it's already there in your browser history) and this particular attack vector is easy to mitigate if you put just a little effort into it.
Analyse Asia 70: The Foxconn Group with Tim Culpan
I'd like to see some kind of stronger YC influence on ethics in the companies they fund.

Great idea, maybe you should take that up with Paul "Morally, [the founders we want to fund] care about getting the big questions right, but not about observing proprieties. That's why I'd use the word naughty rather than evil." Graham.
I wonder why they don't use DJB's cab.
:-) if you hadn't asked a lot of questions, I wouldn't have dug in!
Yes and no. Moving the responsibility for linking/attesting a secret key to an ip address (and DNS name) to the DNS system is probably the more sane model - but it's not really possible to do in a backwards-compatible way (such a system would be a new system).

The first thing we could/should do, is probably demand support for (sub)domain limits on CA certs. Eg one cert to sign CA certs for .com (but not eg: .cn) - and give each CA a limited cert for some subset of TLDs (preferably one for each). And remove the wildcart cert nonsense, and just give domain holders a CA cert for their domain.

[edit: And by demand, I mean that SSL clients such as Chrome and Thunderbird and Outlook and Safari... should treat "unbounded" CA certs as invalid. It would require a major overhaul. Also note that there are lots of broken clients (all of them?) that ignore limitations so any security gain wouldn't be seen until all those were upgraded/phased out. It may indeed be more realistic/easier to move to a new/more secure system (ie: the "www" would be "secure" with a "secure DNS with records for certs", but IMAP would remain broken)]

This would "compartmentalize" the trust somewhat, meaning that compromises would be more limited.

It would also allow us to move to a setting where the default is mistrust, rather than trust: make it normal that both certs and (intermediate) CA certs need to be rotated, say every month or so.

Certainly not perfect - but I'm not sure I trust the DNS system with encryption keys much more than the current CAs. So I'm not sure that "securing" DNS will really help - sure you could argue that SSL "just" binds a cert to a domain name -- but that isn't really any meaningful level of trust either. The fact that DNS is insecure, and CAs can sign willy-nilly any domain is bad. I'm not convinced allowing eg. all Russian registrars of .com-domains to issue .com certs is that much of an improvement.
It was reported that Steve Jobs did similar things.
Well, just the mac now, since you can "sideload" apps onto your phone with xcode: http://9to5mac.com/2015/06/10/xcode-7-allows-anyone-to-downl...
I sure hope they don't gather the data via calls to Stripe's API then push it out via HTTP (and vice versa!)
they use a highly nested table based layout so a solution as simple as that wont work.
In my experience SSL/TLS is used because HTTP is a decent protocol because it works almost everywhere, including behind proxies and firewalls. Support out in the real world is vast, so it's hard to find cases where another client-server protocol will work in as many scenarios.
That phrase is literally linked to an article called "Sweden: 'We don't accept cash'" (https://www.credit-suisse.com/us/en/news-and-expertise/econo...). It seems like what you are saying is that they are just making some sort of pun, but you can see why this would seem like it's about people being suspicious of cash.
In early August, Dorothy Torrey called the Internet Archive
with an urgent request.

She probably called the number on their contact page. [0]

I assume, if they're interested, they'll tell you what the process is when you call.

I couldn't find anything in their FAQ, I imagine it's on a case-by-case basis.

Given her age, I was impressed that she was aware of the archive.

[0] https://archive.org/about/contact.php

edit: added info after checking FAQ
Just playing the VC shell game? Let's just write off the debt of this failed company and flip it into a rebrand of the same service?
Whatever you do DON'T buy the ad free Weather Underground app! If you forget your password they will ignore any requests to reset it or, for that matter, any support requests. Sure it's just $.99 but as far as I'm concerned they rip people off.
But just like every other form of torture its efficacy is highly questionable

This one truly baffles me. Man, as soon as I find myself tied on a chair, I would spill the whole bag of beans and more. Heaven forbids they pull out the pliers.
Unnecessary state should not be present in the URL. Yeah, people do it all the time, but it's sloppy coding and bad for many reasons, including those described in the article.
He addressed your point when he said most of them target FPGA's and often leverage what's already on them. I'll add that the quality, documentation, and so on at opencores.org seems questionable given all the complaints I read from pro's and amateurs alike. Some are good but I'm not qualified to say past what was ASIC-proven.

The analog stuff he mentioned is really tricky on any advanced node. Everything is difficult at least. It all needs good tooling that's had around a billion a year in R&D (Big Three) going back over a decade to get to the point they are. OSS tooling is getting better, esp for FPGA's. However, open-source ASIC's are going to happen with open source development model. Like many great things, they'll be built by teams of pro's and then open-sourceD. Gotta motivate them to do that. Hence, my development models in the other post.
Data access patterns are much more important than hot code optimization. Sadly Java offers few options on this front(until maybe Java 9 when values types might become a thing).

Modern CPUs have DRAM fetch time in the 100's of cycles. Any cache friendly algorithm is going to walk circles around something that plays pointer pinball instead.
I was searching for that article so I could post it here. Handy is a horrendous company.
This is terrible. This is sad. Is it any wonder so many people have no faith in Government, in the Financial system? How much of the system we take for granted is corrupt? I'm not intending to be negative, I know I am. But for Pete's sake. This sucks sucks sucks.
What about allowing people to bookmark parts of a single page app?
Hrm I've never heard of this apart from automatic billing systems ability to request the new card number. Any more specific info about that? I'm interested in how this is possible.
Don't include configs in your Git repos
Is there any way if getting the company status without having yo pay $10? Seems bizarre you have to pay to see if the company is still in business or not!
Fullerite: A New Mineral to Collect Metrics
Why on earth would they use TV as an example of a medium where ads worked? The response to the 1999 'ad-skipping' digital recorder was a ridiculous amount of lobbying to try and make it illegal, followed by an ever increasing torrent of ads, which has lead increasingly many people to move away from television altogether to other media with fewer ads.