skysight-inc/HackerNews huggingface dataset:
Nice post and congratulations on the progress, my only suggestion on the growth metrics is to only include ones that actually directly, or will soon, affect turnover/profitability.

Facebook likes, Snapchat followers etc are not that useful for you guys right now I wouldn't think. Newsletter subscribers are valuable to a point, if you don't know the conversion rate to paying in some manner (hopefully via some kind of automation campaign) then that is also just a vanity metric.

I'm enjoying the series of posts to keep it up
Mentorship is a relationship in which a more experienced or more knowledgeable person helps to guide a less experienced or less knowledgeable person. The mentor may be older or younger than the person being mentored, but she or he must have a certain area of expertise.
Yes it does, because getting accurate numbers from Facebook is a key part to calculating either of those things. You definitely can't do it with certainty, but you would hope the entity you're paying to record the data necessary to get as close to possible would in fact be an accurate source of said data.
They gave him service for free and covered many, many smaller attacks, including the 20-100Gbps attacks he reported earlier this month. The fact that they decided not to cover one of the largest attacks ever documented pro bono isn't great but I don't think any of their clients would fail to understand the difference between a favor and a signed contract.
تحميل برنامج مشاهدة القنوات على الكمبيوتر مجاناً Digital TV on PC
"I believe that management processes are a tax on organizational obesity."

Fantastic metaphor.
> But he didn't buy anything. We can't extrapolate what happens to paying customers from the experience of a non-paying customers.

So, if he had paid one cent (thus being a paying customer), you could extrapolate?

I don't see how the price is in any way relevant here. They promised to protect him, and they failed to do so. Claiming afterwards that the premium was too low isn't the way this works.

Also, I doubt that it actually was "for free". He may not have paid in money, but likely in the form of (at the time positive) PR, for example.
Why all the goofy eligibility rules? Just get rid of the rule where exercising stock options counts as income under the AMT(1). It's line 14 in Part 1 of Form 6251. Just get rid of it!

When people talk about our tax system being too complicated bills like this are why.

1. For that matter we should get rid of the AMT entirely. The fact that we have 2 separate tax systems for individuals is insane. That's a bigger story though.
Facebook also "should" be able to report numbers in a way that isn't misleading to their customers.
"This was flagged to my attention and I've reviewed all the interactions between the author and our team [cloudflare]. The site in question was using the free version of CloudFlare's service. On February 2, 2013, the site came under a substantial Layer 7 DDoS attack. While we provide basic DDoS mitigation for all customers (even those on the Free CloudFlare plan), for the mitigation of large attacks a site needs at least the Business tier of CloudFlare's service. In an effort to keep the site online, our ops team enabled I'm Under Attack Mode, which is available for Free customers and enhances DDoS protection.

The attack continued and began to affect the performance of other CloudFlare customers, at which point we routed traffic to the site away from our network."

https://news.ycombinator.com/item?id=5214480
There are a number of factors that go into play (did the site use custom SSL, what edge locations were they providing caching in, etc), but had Kreb been a normal paying customer, this could easily have been a over a million dollar bill (if it was sustained long enough to alter his 95th percentile bracket) in the cheapest case. If things like custom SSL are in the mix (which Akamai charges absurdly high prices for), or lots of traffic from more expensive POPs, or lack of already having pricing commiserate with high volume traffic commitments, the bill could've been 5-10x that amount or more.
Thank you for actually contributing to my understanding rather than just saying "it'll be dealt with by someone!" as if the situation as-is shouldn't already have been dealt with by someone.
Your list is very similar to my own. I think a philosophical approach will set the proper state of mind for thinking about the specifics of the more modern theories.
Why would it be interesting?
Because one would think that it would be in CloudFlare's interest not to harbour criminals on their network.

It's also not in their best interest to take on the burden of deciding who the criminals are.
Ask HN: Is there an appropriate way to host advertisements on my site?
Hey HN folks-

I run a website that proactively notifies people when I observe their credentials in the clear (1.6 million so far). I do not host advertisements on my site today because I don't feel that doing so would be appropriate.

I don't run the service expecting to make money. However, recovering what the service costs would be a plus. I get a lot of people who thank me, some rare donations, and many who wish they could donate but can't. That's ok. However, this brings me to my question:

Would it be appropriate to create a advertisement page that the user could visit if they chose to support the site?

For instance, the page could hyperlink to the site in the donation section like:
If you would like to support this site in another way, you can visit this page to check out sponsors: hxxp://site.com/sponsors.

Thanks everyone-
I would say inefficient management processes are a tax on organizational obesity. To be quite frank, good management is worth the $$$ when you have it. Even if you have 3 people, you need to oversee the dynamics. You might outsource management by (for example) adopting "Agile" for a software dev team but when you adopt a particular process, you have created an implicit management process.

I used to be one of those "lol marketing lol management" guys but after having spent many years doing those very things, I have great respect for those who do it well.
You cannot stop attack because web is decentralized. You cannot tell other Autonomous System to stop sending traffic to you.

> Why do backbones allow it to be carried?

Because they get paid for any traffic passing through. The more traffic they have the more profit they earn.
I don't know what anyone else's story is, but for myself, everything was given to me by my parents. We weren't exactly rich, but I was certainly privileged. Whatever I asked for, I got. So, when a university education was given to me, I thought I could just "follow my dream" and not concern myself too much with making an income, because why should I? Making an income had never seemed like a concern, so I studied pure mathematics.

When my father died and my personal gold mine with him, I had to drop out of mathematics (which I was half-assing anyway), find a way to make money, and here I am now: software developer.
"o>-<|= for messages of interest to women"

I'm glad we are past that.
Very interesting! That's actually pretty shocking that they can be unloaded in 12 hours. I would've expected far longer than that, though now thinking about it I suppose it seems reasonable with all those crazy crane systems that industrial docks have.
You can easily bruteforce against a dictionary. They're getting 6 million passwords/sec checked. Not enough to get an arbitrary hash, though.
The definition of "open ocean" in my area is that part of the sea unconstrained by the effects of land masses, ie open. It's where waves are defined by wind alone, without any obvious influence of land or shallow.

Another version would be those areas where ships may navigate freely without worry of obstructions. That would mean, for sail, that some areas are open or not based on the direction of the wind.
The concern is that the police are considering peaceful activism as hostile intent, and escalating scrutiny accordingly.

Furthermore, more monitoring of activists provides more chances for incitement/provocation by the police as needed.
Программисты старой школы: преклоняться или бояться?
Can someone explain: if you exercise and hold the shares (eg leave the company) do you owe tax after year seven, even if the shares remain illiquid?

That's the core issue: the IRS is taxing individuals on truly illiquid assets.
vi vse krasavi
A user below summarized the issue the way I understand it:

> what happens is that views under 3 seconds aren't counted towards the average. So if you have 999 999 views of <1 second each and 1 view of 3 seconds, the reported average is 3 seconds / 1 view = average view time of 3 seconds, while the true average is something like 500 000 seconds / 1 000 000 views.

This is massive fraud, especially if you're shouting from the rooftops "Look at how much more attention people are paying to your videos in our platform!".
You're forgetting that in many cases these protests turn violent as a direct result of police confrontation. In that regard these surveillance operations only increase the likelihood of escalating tensions between citizens and police.
Most employees get hit by the AMT and the step up in basis when exercising their incentive employee stock options, and from just skimming the bill, I don't see how that is prevented.
The first thing a lot of people are thinking (and saying) is "switch to Cloudflare". But there's another name I think needs to be said - OVH. OVH can withstand a Tbps scale attack as far as I know, and it provides this to pretty much anyone. They have a pretty good interface and some of their plans are extremely cheap. They're also great at standing up for free speech, which I really appreciate.
Boom – Supersonic Passenger Airplanes
nUCHITE IIIKOLNIKa DDOSIT
It can't be iTunes' fault only. You're able to extract the data from the devices by sending the right commands, therefore the device is vulnerable.
Governments can already block traffic on their border and can organize attacks again foreign targets (remember China vs Github case).

Oppressive governments can do even worse things to human rights activists, like banning a person from international travel (like Mr. Snowden or Wikileaks founder) and getting them extradicted from other countries.
did you mean that as a joke? or do you really think it's nice? <:-)
Yes, given enough time for enough manual work, and enough tests, and enough code review....

The whole point is not to have to do this stuff manually, which is very error prone. Ad-hoc REPL work, and tests are very likely to have missed something.
A 10.000+ container vessel uses 100-120 tons of fuel per day (see https://people.hofstra.edu/geotrans/eng/ch8en/conc8en/fuel_c...). Bigger ones are more efficient per container, but it'll still be more than 120 tons of fuel. If you fuel up, that's a lot of bunkers to take in. That's not paid in cash. Credit is used.
To be perfectly honest, this bill affects mostly middle class near as I can tell. The following is entirely personal understanding of my own stock option agreement and is subject to mistakes and misconceptions...so someone can feel free to correct me.

The problem this bill targets is the "exercise tax" interaction. Say you are an employee at a start up. Said start up can't afford your full normal salary so they pay you something less but offer you the OPTION of PURCHASING stock in their privately held corporation at a fixed rate (stock options) and often at a "discount" (more on this below).

So a private "board" (of the company) meets and arbitrarily assigns a dollar value to the shares of their company...again this is more or less arbitrary since all stock is privately held so there is no market interaction for price setting. Based on this dollar value, they offer you, the employee, a "discount". So if your board sets a price estimate of $1.50 per share, they might put in your stock option agreement a fixed price of $1.20 per share for X number of shares.

But this means, at least according to tax law, that when you purchase the stock at $1.20, you, the employee, have an IMMEDIATE realized gain of $0.30 per share...lucky you! So this is of course taxable.

Problem being that the current share "value" and the corresponding discount was arbitrarily assigned and actually...you spent $1.20 on a share of a company that has no resale value. So not only do you "buy" (or "invest") into ownership of your start up...you then get taxed on top of it for a "realized gain" that actually doesn't exist. So it's not like you can turn around and sell some of your new "stock" to be able to pay the tax...
True but I think his point was "it's not my problem that you didn't start your R&D in a timely manner...say 5 years ago".

Anyways that's what I read into it.

As consumers we assume hugely successful historical automotive powerhouses like BMW would have something ready to go NOW because they've been working on it already for 5 years (or ten years+ considering Prius).

Maybe not always fair, but it's generally what people are going to assume.
Troll.

They're independent, eg just because we need to fix roads doesn't mean we should stop funding science.
Your actual argument is the stupidest of the stupidest users can't read a prompt so AV is useless for any user? LOL
So, so naive
>Social media gives the government and spy agencies undreamed of power. They don't have to create a file on each citizen, the citizen will create and update it for them!

Which is exactly why accessing this kind of public and innocuous info needs to require a warrant when the police do it. Unreasonable surveillance/stalking of an individual is not acceptable.

We also need to clarify what "public" social media postings really mean. The intent is for a limited audience of peers to recieve postings, not the entire world, and not the police. Conflating a desire to communicate with friends with a desire to be surveilled is a mis-step that the police and state are happy to abuse.
AFAIK bitcoin miners can't be used to crack hashes.

See https://security.stackexchange.com/questions/62800/is-it-pos..., https://rya.nc/asic-cracking.html
I was looking for that language as well - I expected to see that "gains" from exercising options do not count towards AMT, and that related taxes are completely deferred until the time when the investment becomes liquid (or 7 years?).
The argument could be made that this is actually a gift to businesses and executives.

Ultimately this bill makes working at a startup more attractive when they are already a pretty poor choice, so we'll just have more people making poor choices and putting themselves at financial risk to the benefit of their employer.
OVH got hit with record attacks yesterday too: https://twitter.com/olesovhcom/status/778019962036314112
Definitely agree, esp with the textbooks part - a macro 101 and micro 101 book will do you well.
However it treats them as product values (tuples) instead of sum values (Either), so it's perfectly possible to ignore the error and take the result anyway.
Heroku's SSL certificate has expired
Alternatively, fighting traditional crime does not actually require that much of their budget, so they try to open up new avenues of finding criminality in order to ensure they continue to get the same budget.
That doesn't happen on container vessels, but shipping containers on trucks. On a container vessel you might have a stowaway. Meaning: someone sneaking onboard. They usually run out of food and are then discovered.

Due to all the anti terrorist rules, it's not easy getting onboard of a container vessel.
Sure. But all the things Gmail offered were things that probably looked like lousy investments to Yahoo. Why offer more storage? Why have better spam filtering? Why have better security? It all costs money!!!

The point is only looking at actual cost, not opportunity cost.
it's a tax on organizational size

and well spent taxes aren't a bad thing, in fact, they're a great thing
Improve your workflow with continuous deployment
Essentially, your backups are encrypted with a key that is generated using a key derivation function (KDF), which takes in your password and outputs a "hash" that is fed into the encryption algorithm.

It's obviously much faster to brute force SHA256(dictionary_word) than a 128-bit key.

Apple was previously using 10,000 rounds of SHA-1 (with PBKDF1) as a KDF. This is much slower than one round of SHA-2 they've switched to by orders of magnitude.
Wow that's interesting

(:
He didn't say Tesla is missing the point, he said they are at least getting the point in marketing terms.

That is, that the switch away from fossil fuels is bigger than stories about petty details of industry competition, it's about the environment, and about orchestrating a radical shift in driving culture in general.

Musk markets Tesla as changing the world, while their competitors market themselves as... competitors. The scope is much less ambitious.
I have fond memories of this game, and a lot of what they spoke about in the interview regarding what gamers enjoyed ringed true for me. The movement of Mario did feel great, and I had a lot of fun exploring the environment, jumping in the water for swimming or seeing how Mario's movement was different in different environments. (I did notice his centre of gravity as well, and it seems like a great fit).

It is great to read that they actually had players like me in mind when they created the game. This article actually makes me want to dig up the game and play it through again.
Do you have any customers currently?
Great! Problem is not that scientists are often paid less than McDonald's burger flipper.

No! It is social and gender issue! Lets push even more students into this career path.
GM is a very early adopter of the connect car, with their On Stsr technology. Your Chevy Volt should have it and if it's a newer model probably LTE. I would guess that there's some contractual or legal obligation that says GM cannot do work on your car. The dealers must do the work, and then get reimbursed by GM.

There's antiquated laws hat dictate manufacturer and dealer relationship, the most famous one being a manufacturer must sell cars through a dealer.
You're right the actual amount of money is not relevant. What is relevant is that the contract he signed with them is not the contract paying customers sign when they do business with Akamai.

Since we have no idea what was in the contract this guy signed and it's all speculation, this discussion is totally vacuous and pointless.

> They promised to protect him, and they failed to do so.

How do you know what they promised? They could have promised protection, or they could just as well told the guy "hey, here is some free caching for you, m'kay? No strings attached". Hell, it's possible he didn't even sign anything, and there wasn't a contract at all!

If he were a regular paying customer, I would make the assumption that the contract he signed is likely the same, or similar to the contract I would potentially sign, and this would put Akamai in a very bad light to me.

Since the contract this guy signed is not the contract I would sign, I cannot rationally infer any information from this incident, good or bad.

If Akamai emails me and offers me some free service, then yes, this information would be valuable and relevant. Until that day, I can't make any use of this information.
This was about a factory line possibly shutting down. In those cases it'll be shipped via air.

To be clear: I work in this industry. In case of an (factory) assembly line shutting down they'll resort to airfreight. I noticed people downvoting my reply, while it is entirely factual.
Obligatory "Heroku is Dead" article: https://circleci.com/blog/its-the-future/
> abstraction/polymorphism, concurrency and dependency management which are all simpler and clearer in Go than in Java

Really? A lot of copy/pasted code, generics replaced with casts on empty interfaces, poor support for collections, only very primitive concurrency tools, and so on...

I can understand that simplicity is good for small CLI/network tools, but it is hardly an alternative for really big applications where Java is vastly used
Well if they are blackwashing the image results, they would be blackwashing the regular results too. I am not 100% convinced but I think you're best argument is that a search for "european people" gives the results you would expect. If they were blackwashing results, you would expect to see the same phenomenon there.

What do you make of the results for the search term "American inventors" which returns largely black inventors.

http://i.imgur.com/uTF3FTN.jpg
You can also use `goimports` with IDEA.
Comparably will help you determine what salary to negotiate
OTOH a colleague of mine has a new Mercedes, and the UI is a complete nightmare... No touchscreen though :)
When your front door isn't secure enough, you and/or your insurance company eat the loss. The point of this headline is that when Yahoo gets attack their customers are going to eat the loss, yet it's Yahoo who screwed up.

That's IMO a clear example of mis-aligned incentives.
Isn't it a well-known phenomenon that the children of well-to-do parents often end up in the arts and other fields with high cultural capital? Having money allows you to not worry about money.
This isn't an isolated problem; it comes up in other contexts as well. Consider the default zero-zero GPS coordinates (and use an app for plane or shipping tracking to look at it). It's about 200 miles off the coast of Africa and there are thousands of dodgy transponders identifying various vessels as being located there.

And then there was this deplorable incident ( http://www.freerepublic.com/focus/news/653846/posts ) in which changing the batteries in a special forces' air controller's GPS receiver caused it to reset and display its current location rather than the previously dialled in coordinates of a target, resulting in a fatal friendly fire incident.

Moral of story; if you're building a geolocation database or application of any kind it's a really good idea to ensure that the default values it returns in event of a reset or a query with inadequate input parameters points somewhere harmless or pointedly asks, "are you sure about that?"
Context? Are people actually switching to single dash flags? If so I'll get my pitchfork out of the closet.
Here is a list of popular emoticons: https://textfac.es/
No, that's a promise from a company that routinely misses ship dates.

State of the art is probably the Chevy Bolt, with its 200+ mile range and cost around $40k. And unlike the Tesla Model 3, it exists. There are lots of reviews of it, and full production starts next week.
the easier kids have it during childhood, the harder the reality hits later (if ever). some frugality in upbringing instead of just throwing money on them to compensate lack of time spent with them goes much, much longer way
Using Go mobile on iOS for real
"A casual stroll through forums frequented by flashlight fans (yeah, it's a thing) and you'll see plenty of demonstrations of what happens when a Li-ion cell begins a thermal runaway. And plenty of memorials to those who gave up their passion because they're on ventilators after experiencing profound damage to their lung tissues."

I was interested to read about flashlight enthusiasts on ventilators, but all I could come up with was this:

http://www.candlepowerforums.com/vb/showthread.php?141137-In...!
BMW wanted to charge me €450 for an update for my navigation CD. That was around 2004 or so. Oh, and around €1000 for an iPod connector. The nerve of these guys.
To improve safety, Uber turns to an unconventional measure: selfies
Taxes are only deferred.

This is good for employees NOT for employers.

The current/old method coul create severe Problems for the employee:

People working for an extreme very successfull Startups like Google, Facebook and the like, could become very rich on paper.

Imagine an income of 200 Thousand and quite suddenly 2 Million in Stocks.
Now they had to pay taxes on the 2 Million from their normal income, since they couldn't or didn't want to sell their stock Options yet.

200k income 400k taxes? Yes you're fucked.