skysight-inc/HackerNews huggingface dataset:
But absolutely not from inception. iTunes Match had about a six month lead on that. It was a major differentiator at the time.
Writing Go code, I've always been frustrated at how writing code to encrypt/decrypt data always felt like brain surgery using the standard libraries. I wrote a simple library around NaCL's secretbox that has a very simple user-friendly interface, while (hopefully) also being secure.

https://github.com/ereyes01/cryptohelper

As far as the secure part, I'd appreciate eyes on the code (which there isn't a whole lot of) to verify this works well. This library could also possibly be enhanced to support other encryption methods, such as AES. An easy interface with sensible defaults to Go's AES interfaces would be nice.
I am a huge fan of Ms Livingston's book, and would love to see a follow-up work. I have no firsthand knowledge whatsoever regarding her work as a yc founder, but I certainly have no reason to doubt the views of many yc alumni who have commented on her importance at YC. However, as a father of two daughters who are started to find their way in the tech world, I'm a little confused and disappointed by this post by Mr Graham. If Ms Livingston's wishes are to remain in the background, then Mr Graham should respect that. If she has apparently changed her mind and wishes to take on a higher profile, she should speak for herself, not have 'the man' explain things to the world on her behalf, which wrongly implies she cannot do so herself.
Yeah we hear ya. The nanopack cloud-initiative was just announced last friday (https://blog.nanobox.io/nanopack-a-new-vision-for-automated-...). We're getting there slowly but surely!
Seconded. Zenefits has been great for on-boarding new hires, but they made mistakes in our health insurance coverage that ended up costing us ~$20k/year. I'm sure Parker and Co. are aware of these issues and working hard to improve, but the reality is that hyper-growth and quality are often somewhat orthogonal.

On the other hand ZenPayroll has been amazing. I take an unreasonable amount of pleasure deflecting inbound sales forays from the likes of Paychex and ADP (may they die in a fire).
I'd rather trust my life to a half-decent Android tablet than whatever insanity the carmakers are likely to have perpetrated in their firmware, but the real answer is that it shouldn't matter. Only a criminally irresponsible degree of incompetence can justify the connection of any of that fancy crap to any part of the car that has anything to do with its actual operation through any connection more substantial than power+ground.
Do you have an example of Julia not being fast enough?
That he did in fact mention this issue, and noted it's relationship to Jessica in his article. He didn't expound on it at length, but why would he when the point of this article is Jessica's involvement in YC?
>Nobody needs to sleep on a <4 hour flight.

What are you the nap police? Flying sucks and I need to lose consciousness to deal with it.
And then you have to keep them jailed, which under the current laws would not work for very long. There is a very short window of time between 'could be a terrorist' and 'blew himself up in a crowd' where such an intervention would work and would legally stick. But there is a much longer window of time (decades,typically) during which one can make sure a mind is hardened against the process that turns a young, promising person into a suicide bomber. We're much too focused on that very small sliver of time and totally neglecting the decades preceding.
No, I think under most circumstances it's completely fine to undercut someone. I think it's a crappy thing to do when someone is trying to participate in the market as a contractor and someone else as a volunteer.

This individual could have volunteered on any project but instead chose to participate in a bid based market for contractors at an effective $0 rate. Presuming those contractors will only contribute to Open Source projects if paid then, on net, the world would have been better served if the guy had volunteered on a project not open for bid.

I hope that makes a bit more sense. It's a nuanced issue to dance around via text without a long issue, the guy has every right to do whatever he wants but I think it's kind of rude and inconsiderate towards the contract market participants.
Omura Whale spotted for first time in wild
I remember the HP 150.

edit: That was the computer that inspired 10-year-old me never to get a job that required me to use a computer. That general sentiment lasted until 14-year-old me was introduced to a 486 with a 14" color screen and I realized there might be something to this whole computer thing.
For bombs and guns a simple dead-drop would do.
> If you wanted simple transport of large data chunks, you would have chosen likewise.

That's not entirely fair. UDP is actually a very convenient transport for packetized data of 65,000 bytes or less.

> You picked UDP because you have latency requirements that cannot be met by TCP.

That is not really a good reason to use UDP, as you won't necessarily get better latency (as has oft been demonstrated).

You should pick UDP because you have a connectionless protocol and/or one with data loss requirements that are different from those built in to TCP.

> that means you need to know what your packets are actually doing, and that includes fragmentation.

UDP is supposed to abstract IP fragmentation issues for you.

> If you want to play in that world you need to be prepared to handle MTU discovery on your own, or else design your app around deliberately small packet sizes.

I've used UDP based protocols all the time. I'd agree that I've had to be a bit more aware of path MTU when it comes to diagnosing or debugging problems, but in terms of the application code reading and writing UDP packets, I've never done MTU discovery.

> But let's not start editorializing our titles: the apps for which GCE is "unusable" are buggy apps to start with.

Considering there are bytes in the UDP header specifically designed to allow you send packets larger than MTU size, this is actually a huge problem. For many people, this requires reimplementing UDP's fragmentation & defragmentation logic up in layer-7.

Isn't it bad enough that people are reimplementing TCP on top of UDP? Do we really need to tell them to reimplement UDP on top of UDP?
I think illustrating it might let you see the difference between family-like (see essay) and cult-like. Jobs ran Apple like a cult. According to Woz, Pirates of Silicon Valley is only movie that represents he and everyone else accurately. It a budget movie but great at showing key figures and moments in Apple vs Microsoft. It also depicted his ability to brainwash and control people in cult-like fashion.

Best example
https://www.youtube.com/watch?v=yG4DvM0wxdk

So, maybe the scene above will illustrate the difference between cult-like leadership and leadership that's more like a family. If anything, the essay just describes a down-to-earth, genuine, tightly-knit approach to business and evaluating business partners. There's many companies like that albeit not as famous as YC. You don't see people suing them, writing exposes, and alleging all kinds of abuse like with the cult-like companies. Huge difference.
FotoJet: the no-frills graphic design app
I'm sure you've thought of this, but is it impossible to subcontract this out to a non-profit to increase flexibility in the details of how the work is done? I.e. same requirements, same constraints, but the non-profit is formally registered with GSA and handles payments to subcontractors rather than the sub getting it straight from the government?
>Is there a (relatively) easy way of scraping for these malicious tags to create a catalog of what websites are hosting the malicious code?

Better yet people do it for you. If you are running uBLOCK for FireFox, go into its 3rd party filters to enable most Ad/Spamware/Analytic networks depending on the filters you enabled.
Whenever people talk about behavior/treatment of UDP traffic I consider DNS as a special case. I have no idea how AWS handles UDP but I will never use DNS as a generalizable example of UDP traffic.
No. If a fragment of a fragmented UDP packet is dropped, the packet is dropped. It is simple. If you understand why UDP exists you will get it.
Giving bureaucracy the benefit of the doubt :-) there may have once been a reason to know which office some paperwork was filed in a cabinet in. Today, everything is presumably all digitized in a centralized database somewhere even if the clerical work is distributed.
This is based on the leaked Nt4 source code with some changes merged from W2K hence the 4.5 moniker.

I expect the code would be fun to read. It leaked out of Israel (I think) about a decade back and if I remember correctly the entire NT4 tree leaked plus significant components from 2k.

Can't imagine Microsoft will be too happy with this.
Texas A&M is a "senior military college," meaning it is one of the six primary ROTC campuses in the USA. The Citadel is another one. One of the requirements for this designation is that able-bodied students must undergo military training. So yeah, it's militarized. This is not a coincidence: it's policy.

It's hilarious that Texas A&M is this far down the list -- and it does not make the list look well constructed. Their definition of "militarized" seems to mean "people who went to this school work for the government now" and then they act surprised by how many schools close to the seat of government feed into government IT. Some of these schools, like the University of Phoenix and Grantham University, are distance-learning institutions catering to people who already have jobs; these people almost certainly worked for the government before enrolling. Grantham University in particular bends over backwards to attract military veteran students.

I'm not sure what the value of this article is.
It's definitely buggy. It's a real shame too, because the service is actually awesome when it works. But tying it to iTunes on Windows and not spending nearly enough time hammering out the backend issues is killing it.

It's worth noting that most of your issues are related to the brutal experience that is iTunes for Windows. Not that's an excuse, just a heads up for those that may not share your experience.

I use Apple Music every day on my iPhone, Mac and work Windows 7 machine, and I experience every issue you list on Windows but not on the Mac or iPhone.
> Isn't fragment reassembly essentially implying all the packets (fragments) will arrive, and will be rearranged in order? i.e. exactly what TCP does?

No. It is implying that it does what UDP does. TCP is different because it constructs a continuous stream. UDP is inherently packet/message based.

UDP ensures that all of the IP fragments for a given UDP packet get reassembled and rearranged and order. The UDP packets themselves are not arranged in order, and it is possible to see duplicates.

> For example imagine sending a single 1MB packet via UDP

Not possible. You can't send more than a 65,507 byte packet via UDP[1].

Sigh... unfortunately, there are a lot of misconceptions about the basic plumbing of TCP/IP.

[1] UPDATE: as was pointed out in comments, my statement was only true for IPv4. Since IP packets in IPv6 can have jumbograms larger than 65,535 packets, IPv6 UDP does support larger packets. Of course, in that case, UDP doesn't handle the fragmentation/defragmentation protocol itself, and of course GCE won't handle anything IPv6.
3 months severance and letting them resign with dignity generally eases the transition.
I suspect their resources - boots on the ground if you wish - ready to be activated are rather limited even though the supply of potentials is very large. This attack apparently featured 9 people, that's a relatively large number and it would not surprise me at all if that's a substantial portion of the resources that they could activate right now. But given time new idiots will step up to fill the vacancy. Give it a few months or a year. Just long enough to get everybody to forget to be more watchful.

Sleeper cells are a very old concept. Go about your daily business and wait for a pre-arranged signal, go to a place, pick up instructions and weapons, do the deed. It could go from 'innocent dude working in a bakery' to 'hey, that's my brother that blew up 20 people' in less than 48 hours.

And that's precisely how they should do it if they wanted to stay under the radar. This recipe could be repeated just about forever without much chance of interference, and even that wouldn't matter much as long as once every year or so a group would make it through.

The window in which one should catch a would-be terrorist is between 0 and 19 years of age, not in the last 2 days before they execute a plan. That is playing very bad odds.
People are still buying 15.6" 1366x768 laptops by the truck load
> Physics are always tied to framerate

Why does it have to be like this? I would think the more robust approach would be to decouple the simulation from the rendering and display interpolated frames if the renderer framerate is higher than the simulation framerate.
Yeah, exactly. When "higher chance of being dropped" is replaced with "guarantee they'll be dropped", you kind of have a huge problem.
3-5 years. New Iridium satellites carry the ADS-B space-based receivers that'll funnel the location data back to the ground, but those birds haven't been lifted to orbit yet.

http://aireon.com/

http://aviationweek.com/blog/iridium-and-aireon-talk-ads-b

http://www.icao.int/APAC/Meetings/2014%20ADSBSITF13/SP12_CNS...
I'm not sure I appreciate that criticism of Cython. A general strategy in Cython is to use the annotation feature (cython -a) and visually inspect the degree of CPython API necessary for the lines of Cython source code. I've generally found this process to be really enlightening. Of course you can use that information to select portions of the code that don't need to be involving the CPython API, add typed contructs to those parts of the Cython source, and iterate. But you can also learn a lot about how CPython works ... for example how using the 'and' keyword can invoke a long chain of Python special functions with lots of type checking overhead.

What this lets me do is to be extremely fine-grained about my optimizations, or conversely, to also see when some optimizations are not worth it because they don't help much but they do hurt the readability, or cause too much Python-to-Cython divergence as you put it.

In a lot of cases, I prefer that this is left up to me to do, rather than if Cython had already made hand-mapped choices about which Python things compile to which C or machine code things. If taken to the limit, a Cython that did that would just become what PyPy is, except it would be ahead of time compiled instead of JIT compiled.

But I do see the benefit of both approaches. Sometimes you don't want the burden of choosing your annotations to induce the desired compilation effect, and you don't want to allow for similar but not identical Cython source files to result in dramatically different C code, as can often happen currently.
This is certainly not the only case of "network subtly broken on cloud VMs". For example, every provider I have tested (including AWS, Rackspace, Digital Ocean, Linode) enables TCP segment reassembly offload, and provides no way to disable it (presumably because it is being done on the host not the VM). This will typically break TCP tunneling (e.g. using GRE) because PMTUD doesn't work under these conditions. fwiw a shout out to Soft Layer which is the only VM hosting provider I'm aware of that does not suffer from this blight (provided you pay for additional IP addresses routed to your box).
Moderate coffee drinking may be linked to reduced risk of death
Well for the Wikipedia link you'd just be piggybacking off their random algorithm rather than consuming organic entropy. Regardless, they have some information on how the page is chosen here: https://en.wikipedia.org/wiki/Wikipedia:FAQ/Technical#random
I think you're right, but I think it's not as big a deal as you might think. It all comes down to social acceptability.

Socially acceptable metrics like "Character" and "social cues" and "goodness" can be reliably received in terms more like "Thinks like me," "probably won't hurt me," "makes me feel good."

But why shouldn't those things be evaluated? If you're going to build a strong sense of team, you might need to risk rejecting people for completely unfair social reasons, up to and including a basic sense that someone's just 'uncool'!

It doesn't require Jessica to be a magic oracle for her to be the one that voices discomforts or phrases them in a socially palatable way. Technical evaluators might not be comfortable saying "this person just had a bad vibe," but if someone can point out a socially acceptable reason for the vibe-- "seemed more concerned about money than the idea," for instance--the vibe can be acted upon with no loss of face for the technical evaluator.

Given that some of these subjective feelings can be valid warning signals for the worst kind of behavior, it's hard to be upset if the 'social radar' enables the rejection of otherwise good and competent people that just rubbed the group the wrong way. So the argument goes: those people will still, by their merit, go on to find success.

I think it's hard to argue that Jessica and Paul haven't enjoyed their position as arbiters of their special club. I couldn't find it, but there's an article somewhere about the funding of Reddit where Jessica's patronization of the Reddit 'boys' gives me this sickly feeling.

I think it was uncouth for Jessica to write about her radar so openly. But I'm not particularly upset that it was being relied upon.

(Now, if it were me, I'd feel real gross building a family around the fact that people are auditioning to have some of my money to borrow. But that's just me.)
It requires a bundled by default, Google Music app. If you disable or delete it, the media keys will stop working. Here is the download link for the app :

https://chrome.google.com/webstore/detail/google-play-music/...
Is there a question? You've certainly found your choir.
Read Goleman's Emotional Intelligence and maybe "Intuition at Work" to get started on this. You have to learn it straight from experience. I wrote a detailed description here:

https://news.ycombinator.com/item?id=10578474
stop whining about your girl, bro
Group Chat and Collaborative Work: The Future of Online Job Interactions
UDP is 'spray and pray'. If a packet is fragmented (goes out on the wire as more than one IP frame), several things can happen. Frames can jitter (arrive with different timing); they can be reordered (e.g. packets sent 1,2,3 but arrive 2,1,3 or 3,1,2 etc) and a frame can be dropped (e.g. arrive 1,3 or 2,3).

UDP has no feedback from the receiver to the source. If a packet is dropped, the IP stack on the receiver will never complain and the IP stack on the sender will never resend. SO the receiver will silently drop the whole packet.

Notice it can be hard to tell if a packet is dropped, or is reordered. You receive 2,3 - maybe 1 is still coming but reordered? So detecting dropped packets is a heuristic, depending on timing. Various algorithms will use a timer to say when to give up on a packet, or drop a packet if a frame from a subsequent packet is received, or tolerate one frame from a subsequent packet (maybe the last frame of the previous packet was reordered with the first of the next) and so on. But all the work is on the receiver. The sender is not involved.

Unless there is some application-layer protocol that notices packets arriving with a gap, and sends something back (that might also not arrive) like "I got packet a,b,d but missed c". Etc. Notice the application cannot resend frames; only packets because it is unaware of fragmentation/reassembly which happens in the IP stack.
Shame on the CIA chief for grandstanding on the cover of the NYTimes. 14 years after 9/11 and we are no further along. Isn't he ashamed of himself? Why should we have more of people like him? Terrorist activity is borne out of desperation. Where does the money come from? What has that not been traced and revealed?
Yes, just none with Amazon in their name.
Your syncing issue could be related to not "upgrading" all of your devices to iCloud Music Library.
Agree - very frustrating particularly on a phone. Crashed the browser out after about 15 pages. Could have been done so much better.
> Private Search Shortcuts?

IMO, private search shortcuts used to be really cool and then I switched to DuckDuckGo. Their !bang feature has all the search shortcuts I need (and then some), preconfigured :)
our zenefits sales guy was totally rude, and insinuated that i was wasting his time by rescheduling a meeting, so i just told him i wasn't interested right after that. i'm sure he's doing fine if he feels like he can talk like that to prospective customers.
Patrick Hardison's Face Transplant Journey
There is this thing called 'IPv6 jumbograms'.

https://tools.ietf.org/html/rfc2147

(Good luck with that over the public internet, but it is possible to make udp packets larger than 64K)
Ah, I didn't know about "senior military colleges." That certainly explains a lot!

https://en.wikipedia.org/wiki/United_States_Senior_Military_...
This article was no Doyle.
It surprises me how few people reach out directly to authors or other "known" people for recommendation, suggestion and questions. If you like someone's work, then you are more likely to like his/her suggestions too. Some may not respond but some may do and might become quite valuable resource.

A few years ago, I reached out to an author of financial book while reading his book with a few questions and suggestions for next book to pick up after his book to build up my knowledge further. We had interesting email conversations about the different topics. Even now time to time I reach out to him with questions.
You know Congress is not subject to the Freedom of Information Act, right? They just happened to exclude themselves from that one.
My experience is that buying likes, views, installs, etc. works for niche products that need to rise in rankings. You rise a few spots, then organic kicks in, and you have just the edge needed to take over the competition.
I feel the title should be updated to: "for Applications Which Reply on UDP packets larger than 1500 bytes".
Misunderstanding the Church-Turing Thesis
Yep, MOE [1] is an example of an open source GPBO.

[1] https://github.com/sigopt/MOE
If you don't mind sharing, which providers did you end up using for health insurance and 401(k)?
Bosch's Giant Robot Can Punch Weeds to Death
Microsoft's Azure SQL Database also recently released a client-side encryption feature, called Always Encrypted:

https://msdn.microsoft.com/en-us/library/mt163865.aspx
"Fabbing" your own ICs is very hard. I know only of a single DIY effort which succeed and it takes much equipment and knowledge. Personally, I'd be happy to make just a couple of transistors (see also: https://news.ycombinator.com/item?id=10558206)
W.T.F. is ⊥   (APL 2015)
> if you aren't getting the press: who cares.

Unless you're applying for certain types of visa. Then USCIS cares.
> If it didn't confuse people (even if only unconsciously), it wouldn't be such a widespread practice.

And this is the key observation about those sales practices. Most of them work, because you're being dishonest. You only call it "growth hacking".
The way the Oracle/Google case got resolved was that the Federal Circuit made a ruling that almost everyone agreed was wrong with respect to the copyright issues but that there was little danger of any other circuit ruling that way on future cases that didn't have a patent aspect to get them in front of the Federal Circuit. Part of the Supreme Court's reasoning for not taking up the issue probably was that the Federal Circuit hadn't and couldn't create any binding precedent in the matter (as they were supposed to be following the local circuit's law on the non-patent aspects of the case).