skysight-inc/HackerNews huggingface dataset:
How do you spend 20k on marketing without testing conversions with a smaller budget first? They could have spent 300, noticed it didn't bring in anywhere close to 300 in sales, and aborted.

How I picked 300:

They're charging 20-80/mo for the product. Assuming they're willing to pay 100 to acquire a user that hangs around for a while, by the time they spent 300 they'd know if they picked up at least 3 users or so. Less than 300 isn't enough to be significant, more than that is wasteful.
My experience is that cheap magnesium works better than the expensive stuff, at least when it comes to the mild sedative effects of magnesium.
I'm not sure I understand your question. Astroturfing is getting online and posting positive stuff about the product while posing as many unaffiliated persons on forums, review sites, social media, etc. This creates an appearance of high popularity and user satisfaction, and like astroturf, you can't tell it's "fake" from a glance. This creates a buzz that causes real users to pay attention and join in.

Since this company was targeting Facebook, if they wanted to astroturf, they'd do it by taking control of many Facebook accounts and posting positive stuff about their product in niche groups, on the product page, etc.
We tried to use it for local services and we failed. All of the likes were coming from people who did not have anything to do with our service. It was really bizarre. I made the target audience very narrow but could not get a single hit that was a real potential customer. We switched up strategy and just asked everybody in our social network to like our page and share our service. This helped quite a bit, even though this is for free. :) Next thing we did was using meetup.com and target the right meetups with a discount campaign that worked out pretty well, this was also for free.
In any larger environment or company, assertions like "everyone's keys have a strong passphrase" are basically impossible to make.

Multi-Factor into the VPN or SSH bastion is a good idea to look at.
A pity it's now practically useless, since many add-ons need modification to keep electrolysis enabled. In a year or so things will be better I hope.
Sure. I just see cryptocurrency more as an esoteric investment vehicle than a currency, because I don't use it so I often forget it's capabilities as an actual currency. In that respect, it's not all that different to my eyes than complex derivatives in the early 2000s. In both cases we have overly complex systems that very few people truly understand, backed by real money through people investing.

I think people that are interested in just making money, over most/all other considerations (such as having a fulfilling career, or serving some need), gravitate towards industries where they are closer to direct money. Finance is one of those areas, so we get more people in that area that aren't as adverse to breaking a few rules or screwing some people over.

I agree regulation would solve some of the problems of cryptocurrency, but the cost would be to lose a lot of the benefits of a cryptocurrency, to the point where I'm not sure the use case of it anymore. What does a regulated cryptocurrency get you that you can't achieve through a more traditional, centralized currency system? I think people just need more education on what to expect, which is something that's fundamentally a little different than centralized currency, and part of that education needs to be about risk.
There's something about these kinds of threads that seems somewhat snobbish and tribalist. There was a similar rant a few weeks ago over whether your 'FRP' is really 'FRP' (https://medium.com/@andrestaltz/why-i-cannot-say-frp-but-i-j...)

I think we can all agree that there's a certain beauty and elegance to completely functionally pure programs. CycleJS for example, really pleases me compared to the complexity of React.

However, like everything in life, the real world is messy and hard to squeeze into binary categories. I can't forsee any large scale program that adheres to such constraints without bending over backwards in weird contortions to meet the limitations imposed, to the extent that such code may even be harder to reason about than mutative code.

I think practical languages 'win' by being 'worse', by compromising and allowing the developer to shoot themselves in the foot a little.
Are Amtrak’s New High-Speed Trains Too Good for Amtrak?
i was wondering if this is more a problem with how third parties are handling SSL custom domains rather than HPKP. I would have thought SSL custom domains would have been you just upload a certificate/private key you want to use or you click a checkbox saying that you are happy to use letsencrypt. But I'm guessing for various reasons (no SNI support, etc) some of these companies are using a massive shared certificate.

also, if you are building a competing product with someone that is doing custom SSL domains it might be useful to check out if your competitor is using a shared cert because you can get a list of companies that are paying for the premium product :)
I live with a person who works at a public university as a physics professor. He doesn't show up hung over, but he only puts in about an hour a work a week outside of class.

What I am trying to say is there is crap talent in every industry.
Well, it also has to check whether they would be in check after each of the possible moves, and this involves checking (all?) of the opponent prices.
And until a world war made the military sit up and spend massively into their development, they were a rich man's novelty.

Never mind that so many had made claims about flight before the Wrights, that having the press be less than interested was to be expected.
Right, I don't think you got my point. You don't always need the best option. CAs are far from perfect, but the threat model for a blog or a cat-sharing site is unlikely to include adversaries who are capable of compromising a CA (whether they're nation-state adversaries or not). SSL without HPKP is probably good enough for you in that case. Saying that the traditional CA system without HPKP is as bad as a plaintext protocol is silly.
> Unfortunately, ITT is just the visible tip of the iceberg. There are MANY more for-profit schools of the same ilk as ITT that will fleece the same archetype of education-seeker. This isn't over by a long-shot.

Its not over, but the writing is on the wall, not just with the Corinthian and ITT actions, but more with the focus on ACICS (the accreditor of both Corinthian and ITT, and a vast number of other for-profit schools) which has formally been recommended to be removed as an accreditor recognized by the DOE (a recommendation which, I believe, must be acted on by the end of this month.)
One thing not mentioned is that Microsoft software had already acquired the same stench as GM cars of the 80s: buggy and unreliable. It may actually be true that WinCE was "[a] solid and stable embedded OS code base", but for people like me, who had had their fill of installation hell, boot hell, systems that would never shut down cleanly, and BSODs, the prospect of carrying around all that trouble in our pockets was just laughable. (Remember all the jokes about the name, "wince"?)
Not sure how well it works:

- Suggested `ls` for `sl` despite the fact that the latter [0] is a wonderful utility.

- `chomd` didn't yield any suggestion. Neither did `fskc`.

A similar utility that actually helps is thefuck [1].

[0] https://github.com/mtoyoda/sl

[1] https://github.com/nvbn/thefuck
Or in other words, like what some people describe as 'horseshoe' theory.

Extremists on either side of the spectrum in any subject end up seeming very similar to one another in their views. You can see it in how segregation seems to be making a comeback on college campuses, albeit with social justice types calling for it instead of KKK esque bigots.
Controlling PC on ARM Using Fault Injection [pdf]
>Soros' plan to federalize US police

Oh wow, what a bad a idea, maybe just more oversight is the answer, certainly federalization can't be the best answer?
Advertising is really expensive, so most community collages advertise to a limited degree because that's about all they can afford.
> DANE is effectively a key escrow system. COM's keys would
> be held by the USG.

That is one mode of DANE. There is also a pinning mode of DANE, where you restrict what certificates can be used to sign yours. This is then an add-on to the CA system, so you'd still need to convince a CA to give you a certificate to MITM.

Besides, as others have said. Those same DNS servers can already break the current systems as they can simply rebind and get a certificate through any CA.

> The "last mile" on DANE is spoofable
The last mile is only spoofable if you don't locally run a DNSSEC validating resolver. This is easy enough to set up.

> DNSSEC is far, far more expensive to deploy than HPKP (HPKP is just a header you add to your web server configuration).
Does that hold when you take into account the safeguards required to sanely setup HPKP? I'd say the article explains quite well the issues with deploying HPKP.

Sure, DANE and DNSSEC aren't going to replace the CA system. They can certainly complement it though.
Unsurprising. It's expensive. Of course, you probably needed it more when you didn't make much.

Being unemployed is a huge risk factor for depression, but when unemployed how do you afford treatment?
Maybe, but there's no memory effect associated with CAA and you can change your configuration it any time. You're not actually locked in.
No.

https://www.openbsd.org/errata59.html (although of course OpenBSD is pretty decent generally)

https://www.cvedetails.com/vulnerability-list/vendor_id-6/Fr...

https://www.cvedetails.com/vulnerability-list/vendor_id-33/p...

https://www.cvedetails.com/vulnerability-list/vendor_id-336/...
One of my best friends was able to drop his dependency on anti-depressants (which are a bitch) with 1 well prepared and well managed LSD experience (he had made 100% sure that the substance was indeed LSD and that the quality was the purest possible, spend tons of time researching every aspect). His experience was apparently so profound that he was able to stop all meds and since then never touched them again (remaining free from depression). Obviously, 1 dose of LSD costs virtually nothing, compared to anti-depressant prices (long-term usage), which may be one of the reasons it is not being pushed by the pharmaceutical lobbying powers that be. There's also a (real/licensed) doctor in Switzerland who has researched this substance/field very successfully.

Meditation is also very often mentioned for (not deeply/clinically) depressed people, as well as the Wim Hof Method.

EDIT: The case of the above mentioned person needs the following PSA: LSD is not for everyone: if you have anybody in your family who suffers from schizophrenia or psychosis, you may have this potential as well, which means LSD could trigger a crisis (but not cause the medical condition itself).
Walkups are fine if you're on the first three floors. I spent 3 years in 5th floor walkups (East Village, Upper West Side, Morningside Heights). You never get used to that.

I guess age itself isn't the issue, it's the quality of the unit, and most old pre-war walkup units have terrible quality by modern standards. Those cool old buildings with "character" you speak of - with the super high ceilings and all that - you're not going to find those in Manhattan (and if you do, they are absurdly expensive). Most of the old buildings in Manhattan are former tenement buildings. None of the 3 walkups I lived in had high ceilings or any of those charms. They were just small, perpetually dirty, had tiny windows facing directly into other buildings, nasty bathrooms, disgusting building common areas, etc. I've lived in prewar and modern buildings, and can't attest to any noise insulation advantages in prewar. If living in a tenement like a poor immigrant from 100 years ago is considered having "character", then I don't want character.

Go outside of NYC, and you realize that most people live in modern buildings with central air and large windows. In NYC, those are a luxury.

Personally the thing I like most about newer buildings are the large floor-to-ceiling windows. The sparse tiny windows in prewar buildings are just depressing (though the prewar unit I lived at in the Upper West Side did have nice windows).
Their problem is they are B2B, not B2C, for which social channels tend to be better at. Regardless of traffic, they should always think about running search ads for their branded keywords at least.

Also their differentiation from the rest of the market is E2E encryption, for which there is a small target demographic within project management. Like you said, rather than rely on advertising channels they need to offer functionality to stand out from the crowd, which should be useful but not give away their core revenue services.

They're already starting to do the right thing - Blog posts demonstrating they are subject matter experts, that can get exposure on places like HN (which tends to have demographics who care about E2E encryption).
The problem with working with closures is that stack-traces tend to become very hard to read, close to unusable sometime. Add asynchrony/concurrency to the mix and you've got a wonderful cocktail :-)

Partial blame is on Sun/Oracle for not adding mutual tail-recursive calls optimizations to the JVM ;-)

This is one of the challenges of FP. It makes debugging harder. But then FP code tends to be tested by means of laws described with QuickCheck, a superb automated testing tool that has ports to Scala, Ocaml, Clojure (that I know of) and it raises the quality of the code a lot.
> If anything, the better defended our cops are, the less excuse they have to use lethal force. If a cop knew his life was never in danger, he would have almost no reason to use lethal force.

On what grounds are you making this claim? There are countless families of slain, unarmed citizens shot by police who would say otherwise.
Can someone describe what the "architecture that doesn't eat all your RAM" here is? Is it possible that it will inadvertently provide weaker security protections between tabs than the more naive and RAM-intensive architecture?
In my neighborhood, finished in 2000, houses with identical floorplans were required to have external differences that would keep them from looking cookie-cutter. One of those differences was in the rooflines. My own roof is narrowed at the top, reducing the amount of space available for panels.

A neighbor just installed roof panels a month ago, the first I've seen in this Minnesota city. Their roof is much more rectangular than mine.
Think tank ITIF's breakdown of the presidential candidates’ tech policy agendas
Except you are wrong about them creating the Technology. Most of the tech you mentioned was created in the public sector and then handed over to the private.

Same public sector could have provided you a home. You could have had a smartphone, a laptop, AND a roof.

But those smug rich assholes don't make money off that, so therefore you don't have it. You only have the droppings of gov research after it was privatized.
I had an iPhone 4 for nearly two years and had no idea that this issue even existed.
Creating Pivot Tables in PostgreSQL Using Crosstab
Right, I agree. The theory is sound though. Theoretically, there could be a quantum computing breakthrough (however unlikely) which would break some traditional crypto which was previously deemed impossible.

It is the same with blockchains. It is just that there isn't one that exists (yet) which has enough distributed hash power where it's infeasible for any actor/group to ever get 51%. Bitcoin is just the best example so far, some might argue it's still in its early stages, or that another blockchains will surpass it.
One could argue that recreational drugs harm families and communities, sure. Maybe even nations, if you are talking about drug enforcement.

Antibiotic abuse could wind up affecting human civilization. It could make plague-level events possible. This is a whole different league, and it's ludicrous to turn this into some kind of libertarian talking point.
Sounds like a lot of hit and miss with these schools. With the rise of bootcamps as well, I wonder - is there any organization / website / agency compiling and auditing a list of these types of schools? It'd be great to be able to say "I want to become a pipeline designer" and knowing with Better Business Bureau level of confidence that I was choosing a good training program.
So much pretension, so much bollocks...

Just drop some acid like a normal person, or take a harmaline cap and some dmt later. No need for all this 'purging' and ceremony.
If you want long lasting, storage, and lifetime where cost and size doesn't matter then look at AGM batteries. They're great since if they (probably) wont freeze and shouldn't mind falling over.

I've seen some of these batteries in person. They are huge, heavy, and expensive buy I've seen many of these last for years and years and years. Many hams use them to power their car radios.

One distributor of these AGM batteries is this site I found with a bit of google magic: https://www.batterystuff.com/batteries/rv-marine/agm/
Does that mean my website will now fit on a 700% narrower screen?
The DOE action is based on a risk of business failure produced by fraud lawsuits by the SEC (for securities fraud) and CFPB (for consumer fraud) against ITT

Ah, thanks, that clears it up for me.
Collage students are generally bad at working at a steady pace when given self directed classes they don't really like. So, having a specific time when lecture takes place even if it's just a video has merit.
There is now a sixth taste – and it explains why we love carbs
I'm not sure about that. Where I currently live we now have a regulation that we need to put every article open access on some server, while at the same time providing us with no guarantee or assistance that journals won't sue us. Meanwhile, journals keep requesting copyright transfer agreements.

Basically, our government currently forces us to commit copyright infringement or to end our careers and funding by not publishing in established journals.

In the good old spirit of our country, nobody does anything and the open access servers remain empty until the higher authorities get a basic grasp of the publishing reality. People are used to incompetent bosses around here.
Seems like it would be hard to determine, but also, its against the interests of the drug companies that are selling the drugs. In addition, if it was publicly funded, how would we 'deal' with the conclusions?
Every place I've worked, devs have complete access to dev resources like databases, CI servers, web servers and usually have access to QA resources and it's only by convention that we don't screw with it without asking for permission.

Why would just anyone have access to production resources - which would be required to take advantage of any of the things he stated.

Also, dev/QA should be on a separate domain anyway.
Go Gopher Toy – Kickstarter
I find that I get the most real rest from doing something different. E.g. it shouldn't include typing or a screen, or an activity that involves looking inside my own head. It's one reason I'm a baseball season ticket holder (even if my team is doing dreadfully, I _shout aloud_ and watch people being occasionally-adept at non-cerebral things), and why I quilt or embroider.
Nah, bitcoin has all manner of practical issues. A core element of it is that it closely emulates gold. And gold has been found to be impractical for day to day consumer trades. Even back with the Romans, even while they had gold and silver coins, used copper coins for most of their daily exchanges. Or even just made agreements about paying in produce once the corps were harvested.
Yes, DANE is centralized, but note I was talking about DANE pinning. This means you also still need a CA to break a DANE pinning secured certificate.

So DANE pinning adds significant security as compared to base CA's.
Yes. I don't know if this is still the case, but Firebug used to disable SpiderMonkey's JIT, even when not using Firebug:

https://groups.google.com/forum/#!topic/firebug/q2fuUraVDk8
Most startups at least have some truth behind them, part of the culty aspect of Theranos is that it was all bullshit kept secret by a single worshiped leader.
Singular does the trick.
Puma webserver thread backlog reporter
It's tedious but I'd do some basic troubleshooting like embargo all addons, not merely disable, and trash the user prefs. If you use sync with a Firefox account, it'll have your history and bookmarks. Then add back add ons one at a time. I'm on 48.0.1 on Linux (on a Mac!) and I'm not having the problems you're describing.
Too little, too late; ITT and a whole legion of similar schools should have been erased long ago, given glaring evidence of their mismanagment, often misleading/fraudulent advertising, almost no value delivered (e.g. dismal grad job stats), waste of public money, etc. The pressing question is how long before ITT re-opens under a new name; I highly doubt it'll just go away.
There are already alternate rechargeable battery technologies available, notably lead-acid and nickle-metal-hydride. I wish the article had also mentioned what advantages this new tech might have over them, rather than considering Li-ion the only competition.
Analysing .NET Memory Dumps with CLR MD
Duplicated memory and just overhead from running separate processes (Chrome), as opposed to shared memory and less overhead from a single process (IE? Old FF).

As for security, no, unless there's some unknown vulnerability now (or that they create), that will be ported over and somehow more effective between (potential) processes. So, I doubt it.
I'll keep posting this until I see someone else on HN posting it too[1]: Flow batteries[2] are here now, cheap, and work well. They don't have the power density of the Tesla batteries, but for residential and light industrial use they work well.

[1] https://news.ycombinator.com/item?id=12376322

[2] https://en.wikipedia.org/wiki/Flow_battery
JavaScript was little more than a toy scripting language used to animate stuff and change layouts when html/Css wouldn't fit for the greatest part of firefox's early existence. At the time it was probably the appropriate decision.

Now, it's a huge burden on Firefox and it's good to finally see progress on this front.
What I read from this story is that it's crucial for an invention to reach the stage when it really starts delivering practical advantage. No one noticed early success of the Wright because what they had achieved so far didn't have any practical application. So no reason to blame people for shortsightedness -- it's rational behavior.
I think home storage probably makes no sense as long as the grid works well. No matter how cheap storage gets, it'll always be cheaper to send power to something that needs it right away, if there is such a something. The grid needs dispatchable power or storage for times when there isn't such a something, but less than if every user was their own little island. Combine that with economies of scale and the grid should be able to do storage much more cheaply.

Home solar probably makes sense (or will soon) because economies of scale don't affect it as much and a lot of the power being produced can be consumed right there.

The one wrinkle being the assumption that "the grid works well." It doesn't always. If the grid is saddled with a bad price structure or poor reliability then the equation changes considerably. I suspect that a solar+batteries combo will be really popular in certain third-world countries where grid power sucks.