skysight-inc/HackerNews huggingface dataset:
Here's what I'd do:

- I'd stay in the German market, because adding additional providers and keeping up with their terms, API etc. sounds pretty annoying.

- Make it more accessible through small design improvements

- Try to find new audiences who'd benefit from this tool. Say right now, it's gamers. But what about bitcoin miners maybe? Or small businesses that need a calculator like that? The next step is to find where those audiences are and tap into these traffic sources.

- Show your tool to "influencers" (meaning: people with a small audience of 100 or more). Maybe gamers on Twitch, in hardware forums, games magazine forums, in Steam guides (or write a Steam guide)

- Maybe write more blog posts. Could even be semi-automatically. Say: Picks of the month under 100€ / under 500€ etc. Try to distribute your blog posts (see points above)

- Keep a sane mindset. Enjoy the fruits of your labor, but only do the stuff that you enjoy doing. No point in wasting time with integration some US service, if you hate that idea.

- Use it to position yourself in a specific way. Maybe it's good for your resume (creator of the popular tool pc-kombo.de + proof of popularity -> shows you know how to execute and "finish" side projects and think about customer outcomes).
>It always surprised me that people flocked to ImageMagick after that.

It's an SEO thing. Searching "resize image" would almost always lead to ImageMagick examples that would work well enough to not require looking elsewhere. Almost every time I've used it, it's been for a few simple image operations (downsize, rotate, etc) that happen once on a user upload of a tiny site so performance wasn't a concern.
> It's not so different from being punched in the stomach.

Tell it to the ghost of Houdini.
http://www.lightsail.com/ has been working on this for a while now
Everything as a Service
It's almost like we need a site that indexes them.
Oh to be using SQL Server. Big old Oracle databases with lots of big packages and inter-related tables equals an impact analysis fun zone.

If your release script doesn't measure in the tens of thousands of lines then you're living far too comfortably.
Aha gotcha. I was under the impression that SSSD chose the fastest AD server it could find(either via the SRV records, or via a pre-determined list)? I've not had too much trouble with it stubbornly binding to the furthest away server. (thats with AD doing the DNS and delegation to BIND )

NSCD (name service caching daemon) is in RHEL and debian, so I assume it'll be in ubuntu as well. The problem is that it fights with SSSD if you're not careful. https://access.redhat.com/documentation/en-US/Red_Hat_Enterp...

out of interest, what are you using to bind to AD?
> This means that fewer working mothers can find child care, fewer laborers to mow your lawn, fewer nurses, fewer teachers, etc. No matter how much money you give to people, fewer services provided makes us all become poorer. That's simple arithmetic.

This is, in fact, precisely backwards. There are plenty of jobs that people simply cannot do because they cannot make a living at them both through lack of money as well as lack of stability. Social workers, elderly healthcare support, child care, etc. are all very poorly paid and basically not worth doing if you have any other choice.

With a UBI, people can work those jobs for very small amounts of money knowing that they are covered.
Can confirm that I was able to reproduce after tweaking some of the special characters in the above PoC.
I know, right? $10,000! Facebook is worth billions! Think what the black market might pay for a bug that would delete any Instagram comment!
That's not true. Around 50% currently take cards. [1] If you get in one that doesn't take cards, don't ask, then they will likely take you to an ATM.

Anyway, by October this year they will all take cards. [1]

[1] https://tfl.gov.uk/info-for/media/press-releases/2016/februa...
3. Nobody wants to buy Facebook bugs besides Facebook.
"if you want to get a basic income to appeal to people on the right you"

Basic income is a conservative proposal (now gaining support among us liberals). My trog relatives are pimping the idea to me, a screaming pinko socialist hippie.

The conservation appeal, rationalization of BI is fairness. It lifts the floor for everyone, doesn't reward cheating, doesn't thwart personal initiative, etc. Being easier to admin is a bonus.
Post just submitted and already the comment section is a graveyard.
Are there any other articles in this same vein that people would recommend?
You do not see any other way to read because you are looking to argue over innocuous statement which is not even false. Security code in Rust could be great and I will be happy if and when it is available for general use.
its a lot money to most people.
My experience is that Ember.js does a good job in that area. Through ember-cli they provide sane defaults when deploying for production vs a local development environment.
I wish I had an OS now that I could run this... I wanted a tool like that for a long time, so I can reconstruct some of SimCity series documentation (Maxis had a sort of tradition of team members writing as "PR stunt" detailed accounts of their work on the game, and the few bits I could scavenge from Archive.org, because this is not available on EA site anymore, had been great to help modding efforts, and in my effort to "restore" the SimCity 4 game to work on modern OSes)
That is a very low standard of morality. Historically private institutions had greater trust and expectations from society. They may have abused that trust - but the solution is not to absolve them of what was their historic responsibility.
Has YC considered mandatory diversity training for YC founders? What percentage of time do founders spend on diversity and inclusion during YC?

“If you’re an early stage startup with little to no diversity, you are in trouble and need to fix it fast.” (http://projectinclude.org/moving_forward/)
What's the marketplace like?

On the seller side, how easy is it to actually get paid? There's no point in trying to sell exploits if you're just going to get cheated, get busted selling to some sort of undercover law enforcement, or just go to a lot of trouble for not a lot of payoff.

From a buyer perspective, you need to have a way to verify an exploit, or else you're just buying a pig in a poke. And you need a way to monetize the exploit, or some other motivation. And you really have no way to know how long your exploit will remain functional.

(Or, you know, people could be basically good.)
Regulating food safety costs money. I'm happy to pay.
Did you choose polling over webhooks for a reason? Or was webhooks recently added as a feature to Gitlab?
Any details on how it worked?
Richard Dawkins' feet aren't exactly non-clayey either.
People do. There is an entire underground markets for exploits, hacked user databases/emails, Amazon AWS keys etc.
This is a silly statement. Not everything is placebo. I'm working on a bigger Angular application and adding this one line of code made a small perceivable difference.
And this is precisely the point. If the very earliest browsers had insisted on correctness rather than permissively accepting broken HTML (and JS - see semicolon insertion), we would not now have a situation where browsers need to do a ton of work to allow graceful degradation in the face of awful markup, simply because the tooling would have evolved in the other direction. Postel's Law gains a little temporary sender convenience in exchange for a nasty mess of permanent receiver headaches.
Yeah it had some inaccuracies.
But with that MIME type it wasn't XHTML at all. It was being parsed as HTML which was possible only because of big similarity between those two formats. All you need to ensure the behavior you want is to disable HTML parsing (which is pretty much ensures being liberal in what the parser accepts already in its specification).
> I really don't understand how a 'basic' income is supposed to work.

Its like the Alaska Permanent Fund[1], but with a broader -- and by design growing with the economy -- revenue base.

> What if I spend my basic income on drugs and hookers? are you willing to let me starve? what about my kids? If not, then the basic income can't actually replace the existing social programs.

Sure, it can still replace existing social benefit programs. For your kids, well, we already have provisions for taking children from the care of parents that abuse or fail to provide for them, and putting them in the care of the State with the parent responsible for support costs; allowing either redirecting the children's basic income from the parent to the new support provider (in a system where children have basic income) or diverting some defined portion the parent's basic income (in a system where children do not get allotted their own BI) to pay support costs is quite natural; this doesn't create an additional social benefit program.

As for you, some BI supporters would let you starve. Others might support having transitional food/shelter programs (which would be an additional short-term benefit program) available to avoid people falling through the cracks, but make the beneficiary responsible for the cost (possibly diverting some share of future BI payments until that debt was paid).

> If nobody need to work, then if employers want employees, they have to pay more to get them, which makes prices rise, which makes your 'basic' income insufficient again.

Under realistic assumptions about elasticity, Basic Income would have some effect on accelerating price inflation of goods demanded at the low end of the income distribution, which would mean that the quality of life any level of UBI could sustain with no outside income would be somewhat less than one would expect with the same amount of income before the UBI became available. But overall, those receiving the UBI would be able to afford more than without it.

Further, UBI can cut employer costs (while it reduces economic duress to work, it also reduces the need for a minimum wage and many UBI proposals have it replace the minimum wage; it also means bad-fit employees will have less resistance to moving on, and that people will generally have more freedom to seek optimum job fits -- which are good for workers, but also most productive for employers.)

And most people don't just work enough to meet basic necessities if they are capable of getting more, so most people able to do economically useful work probably would even with a UBI that met basic needs -- people like luxuries.

[1] https://en.wikipedia.org/wiki/Alaska_Permanent_Fund
Yes, this particular class of bug isn't all that useful. If someone started using the exploit it wouldn't be long before a user complained that their comments were being deleted and then Facebook would figure it out in a hurry.
It's a little different though, as debug symbols won't slow down the execution of a compiled program, they just take up space in the binary.
Will the Mac App Store download only the diff?
I don't see the problem at all, or any need for disrupting it. If you don't like AdBlockPlus, then just switch over to uBlock Origin. It doesn't believe in "acceptable ads" and doesn't have a cozy relationship with the ad business. It even uses the same filter lists. All you have to do is switch. ABP isn't even installed by default anywhere, so you can't compare it to IE on Windows in the browser wars.
Part of the problem in anomaly detection is that sometimes anomalies are of a "novel" type. It can be impossible to collect labelled data on all possible anomalies. So learning a model of normal behaviour turns out better.

But if we're talking about a specific application, where there's only one (or a few) types of bad behaviour, then it's probably worthwhile to manually label some data and use binary classification as you suggested.
Okay. I've had vastly different experience with node on ARM. Much more reasonable dependencies size then what you report (by about 2 orders of magnitude) and excellent performance from the JIT. Combined with the ability to first write dynamic code then switch to static types, as well as the memory safety, its been a lot more pleasant than working with C.

So honestly, I really can't relate to most of what you said here :)
As of Feb 2016, around 50% of cabs accepted cards. By October, all will be required to accept cards (with no surcharge). https://tfl.gov.uk/info-for/media/press-releases/2016/februa...
>It has not been reproduced because society collapses every last time we attempt to get anywhere near it.

We've had societies that had infinite food and water provided to them in a limited space?

>pure Venezuelan chaos

Pure hyperbolic nonsense.
>>What if I spend my basic income on drugs and hookers? are you willing to let me starve? what about my kids? If not, then the basic income can't actually replace the existing social programs.

My guess is UBI is going to help very few people, most people's troubles are going to continue anyways. Unless you are seriously ill, or physically disabled, or stuck in warzone Africa you need to accept the fact you are responsible for yourself. In fact merely acknowledging this fact is likely to do more to fix your problems can free cash from the government.

If and when UBI happens, Rich won't need it, those middle class people with some responsibility will get some marginal upgrade on their income. Most people with no responsibility will spend it away on things they don't as always. They will continue to blame rich people for their problems, and consider rich people as evil for not endlessly doling out free cash for their parties.
That's the idea behind zero-copy serialization protocols like Cap'n Proto [1] and FlatBuffers [2]. The idea is that they define a particular mapping from memory layout to data model, and then provide bindings to that mapping from multiple languages. If you write them into, say, shared memory or a memory-mapped file, then multiple programs in multiple languages can access them, effectively for free.

There still remain a lot of real-world gotchas with this. There are compromises in versioning & upgradability; while both these protocols are designed so you can add new fields in a backwards-compatible way, they also bloat the memory requirements when you modify a schema enough. Code complexity is very high, which means the number of implementations is fairly limited. And many managed languages don't do well with direct memory addressing (Java, V8, and C# are particular offenders), so oftentimes the speed benefits are lost in translation.

But people have certainly been thinking about this issue.

[1] https://capnproto.org/

[2] https://github.com/google/flatbuffers
Well, money is supposed to enable economic activities; hoarded money not used is money wasted.

Yes, increased productivity and efficiency are deflational in nature. You can create N more things now with the same cost. The extra N things push price down if the amount of money in the system stays the same. That's why central banks inject more money into the system to "soak" up the extra economic activities, to maintain a constant and slightly upper price pressure.

When people see the price is not decreasing despite increased efficiency, they will spend the money since it worth less tomorrow.
That's a significantly more optimistic outlook than the idea that prices would inflate relative to the UBI stipend handed out. Particularly around staples like food, rent, etc.
Uncompromising and inconvenient to work with, maybe. Why atrocious?
Go-finance: a financial data library in Go
Code reviews aren't just about catching problems either: the reviewer can learn new coding techniques from this, the reviewer will become more familiar with following the team guidelines by applying them this way and the reviewer is also made more familiar about parts of the codebase they might have not known about.
Tampa marketing tech firm plans expansion after capital raise
The founder of Pinboard himself called voting for him a "protest vote:" https://news.ycombinator.com/item?id=11441720. I can't believe someone is sincerely going to make good use of the YC fellowship if they say something like that.

Also, this is an online forum. I don't think HN is the right place to be if you want to avoid feeling like you're being lectured (not that I believe I'm lecturing anyone on anything - I'm just offering my argument and opinion).
A bug that allows unauthorized children to delete content from other user's accounts may point to other vulnerabilities, which could have even more value.

IIRC FB/Instagram didn't payout on a report that took their entire AWS keys though...
For Heroku, which has a read-only filesystem for /etc, we did this: https://gist.github.com/yanowitz/8329d8b27d8294ca7027f504326...
src: https://www.reddit.com/r/news/comments/4hmvhl/longtime_iowa_...
Poor Transportation Options Have More of an Impact Than You May Think
Thanks for the reply.

To clarify on going to industry... If you are a top student with a bachelors in a field like Physics or Biology - there's aren't as many post-undergrad options as the top CS student. Therefore, the top Physics and Biology majors are more likely to head to grad school. Those top students are more likely to finish on time.

Again - just a hypothesis.

I think your point about mid-Phd CS folks having options is stronger. If you're 2 years into a Biology Phd program, your options are limited. If you're 2 years into a CS Phd program, the sky is the limit.

I hear you on CS theory. My impression during undergrad was that the grads were doing a lot of programming in the coursework, and many beyond.
Given that I was referring to the irrational behavior of the people involved in the discussion as a sociological event, and was not referring to the cryptographic system at all, I don't think they are out of place at all.

> This could all be easily settled - no faith required.

My point is that I think there will be some people, far more than we should be comfortable with, which at this point have invested themselves so much emotionally in the outcome, that no proof will be enough. There's always some possible explanation, no matter how outlandish.
It did for me, was about 235mb.
Before ads on the web, we had tons of non-state-sponsored sites without pay-walls. I see no reason it would deteriorate into that.
> Would you be a better engineer today if you had regularly participated in code reviews? Would your coworkers?

Maybe, but probably not. It's not like I never see someone's code, it's right there when I'm working in the same code base and I can go through commits to see the high-level changes.

There are lots of ways to become a better engineer and code reviews are pretty far down on the list in my view. They usually just turn into tedious ordeals that burn up actual productive time.
That's a whack-a-mole approach that doesn't even try to define a real security boundary. It will catch the most common errors, sure, but it's not a long-term solution.
Maybe we should stop subsidizing unhealthy sugar (because it is in -everything- cheep as a result).
Lotto Winner for Canada 6/49
Attendee Speaks Up for Transgender, School Meeting Erupt into “Jesus Loves Me”
Absolutely. If you want a democratic workplace, form a co-op.

If anyone's interested in reading about cooperativism in the tech world, a starting point is http://techworker.coop/

I can't think of many tech companies that are coops. Plausible Labs, developers of VoodooPad (https://plausible.coop/voodoopad/), is the one that springs to mind first. Most of the other coops I know of are small design/development studios.

Can anyone else name any tech coops?
Is there really information that you can obtain on your own that you can be criminally prosecuted for sharing?

On what basis could law enforcement act undercover to trap sellers?
I asked for clarification around "people of color". No response.
And you know GM is invested in and partnered with Lyft, right? GM also fully acquired Sidecar, the recently shuttered Lyft/Uber competitor.
What if the grid connects (residential and commercial) across time zones, one generating for the next with no need of storage devices?
Location: Ohio

Remote: If needed

Willing to relocate: Yes, anywhere

Technologies:NON Technical. Business major studying on accounting and economics. Looking for finance/accounting/operations roles.

Résumé/CV: Email me

Email: kyle.smith.bgsu@gmail.com
I'm not looking for an `any` type, but for structural types: Go interfaces are already a basic form of that, although a bit too basic.

And I hate to say it, but Go doesn't qualify as a serious statically typed language. No language without generics does.
If you had this exploit, how would you have monetized it? Do you know who to talk to? Do you know where to go on the darkweb to find the people who know the people who have the money to actually pay you for this? Do you know how to negotiate with them to actually guarantee payment? Do you know how much an exploit which can only delete content -- not generate false content, or access ACL'd content -- is actually worth?

Long story short, companies offer guaranteed set-size rewards as a counterpoint to the black market's potential highly variant payouts.
Well, I was responding to the point of the parent and the article. If there's an article on targeting data I might comment if I have something to add.

There's lot of other companies outside of Acxiom that do targeting tracking (it's a large field). Additionally lot of large marketer have their own first party data that they track from notice, engagement, conversion, lifetime etc...

Finally, I feel like the data targeting companies have been so successful in marketing their capabilities that the whole world believes they will be able to unleash Skynet. Reality is much messier, data is much messier and capabilities are much more limited.
But Lyft is now partially owned by General Motors, who have every incentive to make Lyft the winner here.
And this needs to be said more "RCE is possible in Rust", because sometimes it is portrayed in almost unassailable terms.
And that attitude is why society isn't going to adjust in enough time to avoid a whole bunch of extinction and ecosystem collapse.
Presumably an Instagram rival could find it useful.

If Instagram comments are gone/disappearing, then a more secure version could gain user-share from Instagram.

Edit: Even CNBC is aware of data hacking[0]. Scary to know that people here don't even consider sabotage as a threat-model...

[0] http://www.cnbc.com/2016/03/09/the-next-big-threat-in-hackin...
Previous commenters on HN have thought differently https://news.ycombinator.com/item?id=10795785 ;)
first of all, to echo the gp, companies don't go after their own biz dev partners unless something has seriously gone wrong, most likely some kind of theft.

second, call them up and talk to someone. it's called 'business development'. you can negotiate anything. just say this part really scares you, and that you want to edit it, and that it may even be illegal in europe.

business protip: send them a european-legal version of their own contract that you feel comfortable signing. they might just say "sure, let's use this." -- it really can be that simple. you might find out they're planning an expansion into europe and you're their first partner.

and yes, form a limited liability company or a corporation, don't put your own money at risk. there's way, way scarier things in the world than newegg's marketing department, i assure you.
This kind of problem is inherent to the Unix model of processes communicating by passing byte streams around. The way to solve it properly would be to make the process command interface something more structured (e.g. thrift/protobuf), so that rather than shelling out to wget --whatever and hoping you've escaped it correctly you'd pass an actually structured command.
Awesome kid, but how was this risk only worth $10k to facebook? Needs a few more zeros behind it.