skysight-inc/HackerNews huggingface dataset:
If someone just has tcpdump running this won't catch them unless they actually try to use the links or credentials they retrieved.

I like this, but from the title I expected to be able to detect that tcpdump is running, akin to what you can do with malformed ARP packets to detect a NIC in promiscuous mode.

Edit: in case anyone is wondering what I'm talking about - http://security.stackexchange.com/questions/3630/how-to-find...
Interesting, I guess I just need a new broker. Amusingly, after I finished my comment I figured I'd log into my Fidelity account (which I hadn't done in a while), and I couldn't because it turns out they don't allow certain characters in their passwords and so the last time I changed my password it silently failed without telling me.

Still, Trigger sounds pretty neat even if you do have a non-crappy broker. As soon as HN picks it apart to make sure there are no obvious pitfalls, I'll definitely take a look.
Can you explain why the creat() sys call lack dignity and how that relates to containers?
>> We canceled our upcoming team retreat to Berlin. Savings: $400,000.

Compared to all their other costs that one stood out the most. 500k savings laying off 10% of your workforce compared to 400k for a team retreat in Berlin.

Is this typical?
It's part of their ethos, be totally transparent on how much everyone gets paid. You can't negotiate or ask for a different salary, there's a calculation.

They've got blog posts about it.

https://open.buffer.com/introducing-open-salaries-at-buffer-...
r/The_Donald wants to have it's freedom of speech to dominate reddit, but anyone who posts dissenting opinions in their subgroup gets a lifetime ban. I don't mind being banned, but fair is fair. Good riddance. Their top response today, typically histrionic:

JOURNALISTS: We know you're reading this. This is a HUGE story. Reddit is changing the fundamental structure of the site from community-selected content to admin-selected content in order to silence a political movement.

Do not let this happen quietly.
Seems like a market economy is forming for a finite resource... unprecedented... how could we have predicted this?!

lol @ "criminals"
Cavium Buys QLogic for $1B
I don't see the contradiction between Flatpack/xdg-app and keeping packages downstream. http://openbuildservice.org/ could end building xdg-app images in addition to rpm, deb, Arch and images it already builds. Why not?

That would keep security, reviews & processes while stopping the nonsense of requiring root, global state & single versions rpm/deb enforce to the user.
I have several friends who have received large salary increases when they were about to quit. This clearly shows that they were payed too little before. The kind of transparency buffer shows in this sheet can prevent such a situation.
It doesn't, unless Susie discovered she liked really low level stuff a few years ago.

It's definitely not equally applicable to everyone, and that's ok.
Brief summary: a nice intro about what generative models are and the current popular approaches/papers, followed by descriptions of recent work by OpenAI in the space. Quick links to papers mentioned:

Improving GANs https://arxiv.org/abs/1606.03498

Improving VAEs http://arxiv.org/abs/1606.04934

InfoGAN https://arxiv.org/abs/1606.03657

Curiosity-driven Exploration in Deep Reinforcement Learning via Bayesian Neural Networks http://arxiv.org/abs/1605.09674

Generative Adversarial Imitation Learning http://arxiv.org/abs/1606.03476

I think the last one seems very exciting, I expect Imitation Learning would be a great approach for many robotics tasks.
No timing results, no comparisons with Nesterov type methods. To all the commenters that have said "this looks promising": this doesn't look promising at all. Why do you think in all the years of people optimizing things with gradient descent no one has tried this? Answer: they have, and it doesn't work.
when for Android?
haha, "the US is doing bad stuff, so russia should be able to do so as well"?
Your comment imply that you never worked in a company with larger customer base or in a company with sales department. I think this kind of comments is highly disrespectful to the team, given the the style how Buffer is managed and how transparent they are.
Since everyone is objecting to the word "criminals" (and indeed the article is strangely all "criminals criminals criminals") we've taken that out of the title above.
I think the point of the post was that software can maintain such a large market share in spite of major reliability issues due to the unwillingness for developers to serve that market. "Amateur hour" was a reference to the quality of the software, not the overall operation.
Polynomial-time algorithms with huge exponent/constant
I suffer from this badly, I'm slowly coming to the conclusion that I'm just not that good at any of it. I get the basics, I even do it for a living, but I'm never going to be driven to create products.

I want to be able to make something, I also really want to be able to finish my progress on cryptopals, or finally get a real bounty on hackerone, but I'm just not good enough.

And I get caught thinking, well if I just didn't spend so much time playing computer games, or wasting time I could do that stuff.

But is it true, or am I just using them as an excuse, so I don't have to face up to the fact I'm just not that good at it. It's easier to blame my laziness than blame the fact that I struggle to produce output and struggle to find meaningful[1] vulnerabilities.

If I ever do find myself unemployed, then I'd hit stockfighter up straight away, that would I guess give me the motivation to work at the stuff. I think there's a fundamental "understanding gap" between me at the problems presented though. In the same way that I can look at a demo scene write ups and understand the concepts they're talking about but there's this vast chasm between the work I do and the work they do, and it's not clear how to bridge that gap.

Maybe I should read less hacker news and spend more time practicing the craft. But hey, I'm back in the "if only I worked harder" trap.

[1] Sure, I can find open redirects, maybe the occasional http subdomain leaking a cookie from the https root domain, maybe even an open endpoint, but finding vulns worth paying for[2] is difficult when dealing with sites which already care enough to have bounties.

[2] It's not about the money, I'd likely not even claim it given the typically small amounts paid out and the hassle of declaring it, but I'd like to bag a bounty for pride sake.
> Were the AZ with the single NAT to go down, then instances in the other AZs wouldn't be able to communicate outside the VPC (ie. to the rest of the internet)

Oh I see. Though assuming app servers are wired up behind an ELB, the service will only be partially degraded (no app server outbound connectivity, like you said).

The one-NAT per AZ is a more robust design but at $30/mo each (for NAT gateway) seems expensive ;) Even at $10/mo (small do-it-yourself NAT instance) it's not free.
One-off versus monthly recurring.
I think you're proposing voice-based Vim with ESC replaced by making a funny noise. I approve.
That does seem astronomical. $4,000 per employee if they have ~100 employees like they say.

Anyone think their salaries are absurdly high for some locations and positions?

They've got Adnan working as an "Advanced Backend/Frontend Developer" in Sri Lanka, making only $65,104. This actually makes sense to me because Sri Lanka's cost of living is pretty low.

But they've got an Advanced "Happiness Hero" which I presume is an email support role making $77,397 in Kentucky. Last time I checked, $77,000 is an extraordinarily high salary in KY, especially for someone doing email support.
What does buffer do as a company?
I tried to read up on this, but I'm not too familiar with the terminology. Are unikernels the formal name for the idea of running your application 'bare metal'?

In the parent post, does AMI mean Amazon Machine Image, or some Application M____ Interface?
Unfair questions should be called out. Perhaps "dumb" isn't the most appropriate term, but I do think its fair to challenge the premise of the question. To prevent this leaves a whole rhetorical category immune from challenge.
I think your data is out of date. I quick glance at Wikipedia says that there are at least two copies from the 2nd century, and 38 from the 3rd or earlier.

It also says, "The New Testament books appear to have been completed within the 1st century." This is on the basis of comparing manuscripts and tracking changes (textual criticism).
Maybe it's finally time for people to get serious about IPv6?
Consider also: AWS launches with off-the-shelf AMIs, or any type of "turn key" solution.
I really like the idea of the app. Unfortunately, the "Get Trigger on your phone" link takes you to the App Store, and my phone runs Android. I suspect an Android client is in the works? How about a web client too?

In the mean time, I'd recommend interested non-iOS users to check out Quantopian [1], which is not nearly as simple and accessible, but gives you the power to do real algorithmic trading.

[1] https://www.quantopian.com/
For reinforcement learning, one of OpenAI's focus areas, the book by Sutton & Barto is still the standard reference:
https://webdocs.cs.ualberta.ca/~sutton/book/the-book.html

Improved algorithms have been devised since it was written, see

http://karpathy.github.io/2016/05/31/rl/

and, in particular,

https://arxiv.org/abs/1502.05477
Small Asteroid Is Earth's Constant Companion
Thanks! I should really verify these things before trusting my memory. Napkin and apron are derived from the same root, but it’s not immediately obvious because one of them suffered misdivision (and I had apparently forgotten which one).
Gawker is not filling for bankruptcy for bad business decisions, it's filing for bankruptcy because they were sued for making a questionable editorial decision and lost the case.
One Year of Android Security Rewards
i think it was disrespectful of you to call the question disrespectful, and then fail to give an answer, lady.

it takes 90 people because 85 of them do nothing all day.
Machiavelli's _The Prince_ has excellent advice on this topic.

If you must do bad things, do them all at once. Then create a steady stream of better than expected events. People will get over the shock of the bad, and will remember the good.

By contrast if you try to hold back some of the bad, it will drip out bit by bit. Then people will get scared about where the real bottom is.
> Yes, I know it wasn't officially decided in an ecumenical council until Trent in 1545

Trent was hardly ecumenical, given that the Eastern half of the œkumene wasn't present:-)
1) cron sucks, I hate using it. $10 / month to never configure cron again would be great.

2) Have you ever used Buffer? Chrome extension, in-app experience, cross-posting to multiple sites, drag-and-drop re-ordering, ...? It's not a single feature, it's "organize my social media posting".
...more than 2 months ago...
IIRC, Fog Creek does the same and also have some explanatory posts.
In case anyone in the thread above didn't know, there is a different set of stockfighter challenges to play that involves writing code that accesses a REST API that be more aligned with Susie's interests in that case.
That's musk time though so you need to multiply by 2.
You would need a lot of energy to separate the carbon from the co2.

So your "green" idea actually makes things worse not better.
Interestingly, their last retreat (https://open.buffer.com/inside-buffer-retreat/) totaled $111k. The tripling of staff since last year makes the economics more difficult.
http://www.snopes.com/stanford-study-proves-election-fraud-t...
At some point Wired will produce a blocker that blocks adblocker blocker blockers. Your move.

Seriously: modern Web can bring the fans on full on this i5 based laptop on some sites, and I have to resort to command linery to read quite a few articles. This one is especially annoying because I think I paid money for said article when it was printed on paper...

http://archive.wired.com/wired/archive/covers1998.html

[Feb 1998]
Several users have complained about this article being overly biased, so we've replaced the one bit of it we can (its title on HN) with a slightly more neutral phrase from the text.
Given that the new statistics show that the company is now cashflow positive and continuing to grow, I don't think a mass exodus is likely.
There's a pretty big difference between the_donald banning people disagreeing and admins censoring /r/all. Reddit's biggest problem is abusive moderators censoring users of a community, or running a subreddit in a way contrary to how the vast majority of users want to use it.

That isn't really the case with the_donald. That subreddit has behaved in this way from the very start, and their bans over anything anti-Trump is sort of part of the joke/culture of the subreddit as a community. The vast majority of people in that sub want anti-Trump people banned. It's not a place for real discussion and the bans are pretty much just done for laughs. It's an example of a subreddit working well because of the moderators, when it's usually a subreddit working decently despite moderators stifling discussion and pushing their own agendas.

Additionally, bans on reddit are a joke. An account takes 5 seconds to make and even if admins want to IP ban you, it doesn't accomplish much. Censoring the most viewed listing of content on the entire site has a real, meaningful impact.
This latency mentioned is useful for music and VoIP apps.
Cumbersome, but cam you imagine the benefits to health, if expanded to food production, when an e.coli etc. outbreak happens or mad cow, etc. Trace back the farm and know exactly which lots to pull.
Because they're falsely claiming to be the original registrant where invalid contact details exist in order to take over control of address blocks so they can re-sell them. (At least that's my interpretation of what appears to be going on based on text later in the article.)
Thanks for your comment.

I would be more than happy to share with you my mail chimp mailing list, but out of respect and privacy for the user I will not. I am not trying to sell, and quite frankly i have little to gain in selling "this idea" to anybody.

There's lots to be learned here today, and we are ready to adjust because as you know this startup world is all about learning. When we do have the product up and running, i'll make sure that our server are ready to accommodate an unexpected, and large amount of traffic.

However, before even getting to that stage we have learned that we need to communicate better, and will use many comments here to refine our idea, our approach, and the way we convey it to the public.
I'm sure they would have all the desks manned, if it didn't cost money to do so.
I had the same question. I clicked on a few links that I thought would lead to the product description but they didn't. Eventually I realized that the domain was open.buffer.com. Once you go to buffer.com, you see the product description. From the homepage:

"The best way to drive traffic, increase fan engagement and save time on social media."
Good for them for being transparent even when the company is struggling, but if I was an employee at the company I would be worried. The chart they provide of Buffer bank balance over time seems overly optimistic. It looks like they assume that the employees they fire added no value to the company - they assume the company will generate the same revenue even after cutting 10% of their employees. This is wrong, and would worry me greatly that the founders don't seem to recognize this. Of course I would be worried anyway because laying people off at a start-up is a really bad sign, anyway you try to spin it.
Pin repositories to your GitHub profile
I'd add, though, that "efficiently" isn't just whether you can build cheaper than buying. It's if the cost of building the functionality is cheaper than the profit/growth you can generate with a sellable product built using the same amount of developer effort. That's a very, very different (and probably more expensive) proposition. That's why executives should make the decisions, not engineers!

Back in the dot-com days, I worked on a project to build some functionality in-house that we could easily have bought off the shelf. The engineers argued that we'd save the company a million dollars. But frankly, we just wanted to do it because it was badass. And it turned out our solution would actually have cost us more per-system than the commercial solution we sneered at (hardware costs, not just development cost). Six man-months of engineering when everyone knew we were racing the clock before the money ran out? Absolute stupidity.

If I were CEO/CTO and caught wind of such a project, I'd tell people that if they lifted a finger on it, they'd be fired. But that's a very different perspective than I had back then. Risking the very existence of what could have been a very big company in order to someday save a million dollars? Feh. (Of course, no one stopped us, because the CTO was just head nerd, and the money execs were busy fundraising rather than supervising)
If I find myself out of work, I'll give it a go :)
Yeah, the guys at bitfusion have a go application in there. They were based out of techstars
Trying to get a profit from such things was and always will be a shady noob thing to do. Release groups don't exist to make a profit, and that's why they've thrown such a wrench in the for-profit internet. It's not like the types of people who used to hack boxes to set up an FTP drop didn't have the means to purchase legitimate hosting, but a combination of legitimate hosting not allowing such content knowingly, the lack of accountability / traceability on such a system, and the pure pleasure / glory / novelty / status of exploiting your way to free hosting, then using that hosting to distribute your exploits.

It was also an easy way to limit access to your cracks / serials / whatever to only your friends and other respected people in the scene. The exclusivity made it a status symbol, just like with any status symbol.
I do not dispute that it is possible to profile/debug unikernels on future cloud infrastructure. However, I am skeptical that unikernels offer any benefit to merit the work of enabling that when the whole system is considered.

System calls might be additional overhead when there is a hypervisor, but hypervisors are unnecessary when we have containers. You stand to eliminate much more overhead from eliminating the hypervisor than you stand from eliminating the syscalls. Some of that overhead is internal fragmentation from memory partitioning, duplication of driver code, potential double caching, etcetera.

The industry is in the early stages of a transition from hardware virtualization to containers because containers are a better abstraction than hardware virtualization. Joyent offers Illumos zones, Swiscomm offers docker containers with flocker (full disclosure: my employer is the author of flocker), Microsoft has deployed drawbridge on their Azure cloud, etcetera. We will only see more of this in the future.

Once the transition is complete, I see no advantage to unikernels. You could use them in UNIX binary mode, but that makes them little more than a standard process on a traditional system. That is a very different role than the one that their creators intended for them.
Report: FBI Doing Poor Job Securing 411M Facial Recognition Photos
It’s not disrespectful if it’s a sincere question.
I hadn't know what they did either, but their homepage makes it abundantly clear: https://buffer.com/

They let companies and individuals manage & schedule social media posts across a few of the main platforms (At the risk of doing them a disservice in my explanation, but also saving whoever reads this a click).
Goodbye from Spreecast
Dev hiring is a sourcing problem, not a filtering problem.

The people behind starfighter are brilliant and I respect them big time. So, probably they know what they're doin. I am excited to see how they want to solve dev hiring since starfighter looks more like a product that does filtering, not sourcing.

(I am thinking since a long time to build something that leverages Github to find and reach out to engineers; e.g., when a company looks for Angular people to just parse the Angular repo for engineers that watch / contribute to the repository and reach out to them. if you have any ideas on this or want to help, please shoot me a message).
I had few job offers from HN actually,even though I am not even that active on it, unfortunately I have never took one since none of them was remote and I am still pursuing my masters in AI and Robotics in a far country.
> you are wasting your time with Overwatch

No time spent playing Overwatch is time wasted.
I'll report back! my preference is for Balegas over Thorlos, I feel that Thorlos quality has dropped off in recent years. I'm happy with Balegas, but go through them fairly quickly, as I run 200-250 miles/month.
48 people were shot during yesterday’s 15-hour filibuster on gun control
Super cool! What's your monetization strategy (e.g. money gets you more triggers)?
CredoCI – a code checking tool for Elixir
This may be a little cynical but:

"With our culture of bringing our whole selves to work and seeing team as family, with shared values we live by,..."

In the American business world, you are an employee until you aren't. Confusing being an employee with being "family" is a mistake, both for the company and the employee.

When times get bad, companies do what it takes to survive, including throwing employees overboard. That's just a fact.

Buffer may have thought it was different, but that flow-chart of how they decided who to layoff was entirely about how an employee can help the company, not how the layoff would affect the employee. That's not how normal families make decisions.

I have no problem with any of that, but anyone who thinks that way has another thing coming.

All of this isn't to say that Buffer was thoughtless or callous in how they handled it. From the outside, it looks like one of the better handled layoffs I've seen.

But still. Don't confuse your job with your family. It's a business relationship that is only maintained as long as it is in both side's interest to do so.
Talking to Uber about the three pillars of its API platform
Wow, that's appalling behaviour from the CEO of the company. I can't say I'm surprised though, that was roughly what I expect from him after my own interactions.
That may be a customer retention role, in which case I think that's within reason.