skysight-inc/HackerNews huggingface dataset:
Suppose I ran a small company with a small dev and ops team of 3-4 people, running a Rails app with a MySQL database, typical setup say, Nginx front end proxy to servers running mod_passenger, a separate staging and QA environment. What services would you provide to me if I paid you what I would pay a well qualified security person?

Just asking out of curiosity, I've been dabbling in web/app security for the past couple years and know it's a very broad and deep field. I know about protecting against XSS, CSRF, SQL injection, and the basics of OWASP Top 10, but not sure what you'd be doing and how you would provide me service. Would it be an ongoing contract or a one time or as-needed service?

As a side note: http://lcamtuf.coredump.cx/tangled/ makes me feel like I've never considered the possibilities of anything thoroughly.
Or use fancy-regex. Not ready for prime-time, but potentially the best of both worlds.
This was not publicly known before.

To my knowledge this Google trick was first discovered by the researcher Samy Kamkar (https://samy.pl/mapxss), though the tool no longer works.

When the tool used to work, I tested it using my home router address and it accurately located me. Then, I moved to another house, and the location remained being my old home. Then, after a couple of weeks, it got updated.

I think in the final product the resulting location is not only based off one WiFi address. It might try to crossvalidate using the multiple addresses you can see.
America’s Monopoly Problem
Otto sold for 680 million to Uber in August 2016, the company started in 2015, that's atleast one company that was willing to sell and I figure most of them would, they all have no end game other then being acquired for the most part

http://www.recode.net/2016/8/18/12540068/uber-paid-680-milli...

time will tell if the Cruise acquisition pays off or not
Even thought I'm not "inb4" Glass comparisons this really does hit a market that I think is untapped. I used to have a "flipcam". It was before I had a phone with the ability to take HD video and before a GoPro was a choice for me because of cost (I still don't have a GoPro).

The ability to have cheaper, stylish, handsfree video recording of my POV has a lot of potential. How-to videos, the "capturing memories" as noted in the article, even just easily recording benign life experiences (police stops, for instance) seamlessly and without hassle is huge.

I do hope there is a tattletale light or something so that the average user can't surreptitiously record things and otherwise easy privacy controls... and I hope it's not long before someone hacks this or they unlock the product to do more than 10 second clips...

If I were GoPro I'd be nervous.

Edit: Actually a second thought- this would be a lot better than body cams in a lot of situations (or certainly a good companion) because it would capture the officer's line of sight.
Isn't access exposed to whatever medium you use to transmit the URL?
Other than using your .gitignore or .ignore files to ignore it, that is indeed the intended way to do it.

Sadly, I have an embarrassing bug. Should be fixed soon: https://github.com/BurntSushi/ripgrep/issues/43
I think the privacy safeguard here is that they're nothing but a camera, so if you're interacting with somebody who's wearing them you can assume you're being filmed.

Glass's problem was that it was a device that you were supposed to wear all the time, and a camera.
> So, now you just need to build a highly-optimizing, C++ compiler instead of a browser?

No. You just use gcc. Like everyone else.
One man's garbage is another man's gold. I believe that the suitors will be able to make more value of the data from Twitter, than Twitter could by itself.
What's even worse?

A mountain of bureaucracy that slows down everything as much as if you had strong defenses, but is effectively as weak as bad security.
It's not 'price gouging', it's the free market..and it actually helps us. Why? There are only a finite number of hotels for a specific weekend. If the demand is going to be much higher than the supply, hotels will raise the price to prevent all of the hotels from getting sold instantly at the lowest price.

If they didn't do this, you would have no chance at getting any hotel during the busy times. Which may happen now, but it isn't going to fix the situation of not getting a hotel room during busy times.

Uber has been accused of this as well. In reality, it's the only way to get drivers to specific areas during undesirable times (otherwise, the demand would overtake the supply and customers would be waiting forever and a few people would get rides).

AirBnB will lower the price of hotels if it gets popular enough simply because it adds more to the supply side, which naturally reduces the overall price in the market.

Hotels profit handsomely by raising prices, but it's the only way to reliably curb demand.
a) they really don't need to know the content, they can infer most of the content by 'who' watches and how much, aka collaborative filtering.
b) Shouldn't bias towards who "posts often" esp if the videos are shit. "Hooked the longest" would be ranked highly if you get hooked like the 'hooked users', makes sense?
c) those are poor systems, and actually, I think amazon has one of the much better rec systems.

Youtube has one of the worst. Just today their 4th ranked vid for me was the 2 hr long 9/11/2001 broadcast. Wat? Then, they never boost new videos of a channel I subscribe to and have seen every video of theirs over the last 3 months. I literally have to check the channel most recent vid list daily to see if I missed something.

I think youtube's weak recommender system is more a result of them having a hammer(deep learning) and seeing every problem as a nail.
Looks like absolute horsecrap.
Superb work, and a superb writeup. It's really great to see such an honest and thorough evaluation.
Its been done. The first CRTs were circular. Take a look at this one on a PDP-1 from 1959:
https://en.wikipedia.org/wiki/PDP-1#/media/File:PDP-1.jpg
(yes, that thing next to the typewriter)
Metaclasses and ABC
Any good resourse on Python metaclasses and ABC, including at C-API level?
Sonar or lidar is a great idea if it can be made really small and not use much power.

Simply, don't include a camera, and make it obvious there's no camera - make the conspicuous bit transparent. You don't need a camera for many applications, like a GPS based heads up map display.
Mithun Rashifal 2017 in Hindi II Mithun Horoscope 2017 मिथुन राशिफल 2017
This is a dead-end product.

People aren't going to wear this, because they don't want to creep out people by having a camera pointed at them all the time.

This was the real problem with Google Glass.

Also, everyone already carries around a camera in their smartphone. They aren't going to add another.
You may find the following useful for creating custom events with a countdown timer: http://countdownmaker.com/

For example: http://countdownmaker.com/countdown/3vnlvm/
Snapchat has a huge opportunity in its hand which it has limited to take full advantage of: starting a revenue share program with influencers on the platform. Facebook has yet to do it and Snapchat, which is strapped with VC dollars, can attract a lot more influencers to its platform. I think the companies on the Discover are already in some sort of revenue sharing agreement with Snapchat but brining this to the massive number of young influencers unlocks huge opportunities for Snapchat.
What are the methods in ML and predictive modelling that are used to counter 'bucketing'. As much as it is necessary for product creators to land us in groups by behavior, i think it is also necessary to have counter techniques to eventually split those groups and create new ones, no?
For those who have never heard of ControlMasters, I highly recommend them. SSH can multiplex multiple sessions (you invoking ssh at the terminal) over a single TCP socket — this feature is called ControlMaster. The first ssh command takes the normal amount of time, but every command after that is just ~a round-trip. No slow asymmetric key exchange. If you close all your connections, there a (configurable) timeout until the ControlMaster's connection closes.

You can combine this fact with zsh's autocomplete powers, and get pretty-close-to-instant (on a good connection) tab-completion of directories on the remote server, which is extremely nice when trying to scp something, as you can tab complete the paths in that command.

(It also saves a few PIDs on the server, as a single sshd child deals with all your connections.)
What's the problem with ECDSA?
I've been tracking my sleep, my weight, my body composition, my exercise, and everything I've eaten since Jan 4 (new year, new me, as they say). I was planning on doing an analysis of my own data to see how things affect my body, and maybe throw together an app like this.
Do you have a link to a gist and/or your other work?
Sweet, this is like finding out that the Bible has been revised and updated. Except that I immediately went and read this.

Sutton & Barto is the Bible for RL. Having it be freely available updated is wonderful!
they aren't really competitors, comma.ai offers level 2 autonomous retrofitting for certain cars and Cruise pivoted from initially a similar offering to comma.ai at a higher price point to a level 4 system that uses lidar and is sold to car companies or in this case exclusive to GM with no direct to consumer offering
Front Page of Hacker News
Oh, I very much realize that about Java. I was so excited about Java, 20 years ago. (of course the industry alternative was C++, so I'd rather be shot in the foot than the head).

I never saw any Simula 67 until VERY recently. Hmm. So its what Borland patterned Turbo Pascal 5.5 (and beyond) after, more or less. And Eiffel, as well. But the MIS industry keeps trying to rehabilitate a portable assembler for general application programming (C, C++, Java, ???)
The IRS itself goes into detail: https://www.irs.gov/pub/irs-pia/imf_pia.pdf

"IMF is located at the Enterprise Computing Center – Martinsburg (ECC-MTB) and resides on the MITS-21 GSS. IMF is written in Assembler Language Code (ALC). There are no direct users of IMF. IMF receives data from an array of systems and then sends data to several systems as well."

MITS-21 GSS == "Modernized Information Technology Services (MITS)-
21, IBM Master File General Support System (GSS)"

https://www.treasury.gov/tigta/auditreports/2011reports/2011...

There are two mainframe systems, Unisys and IBM:

"The Unisys mainframe at the Martinsburg Computing Center processes all of the centralized Individual Taxpayer Information File workload for the 10 IRS campuses. The Unisys mainframe at the Memphis Computing Center processes all of the centralized Business Taxpayer Information File workload for the 10 campuses.

The Unisys mainframe at the Martinsburg Computing Center is configured to run with 950 MIPS for normal weekday processing. For weekend processing, the Unisys mainframe at the Martinsburg Computing Center borrows MIPS from the development and test environments to increase capacity to 1,200 MIPS for managing the increased workload. The borrowed MIPS are returned to their respective systems on Monday mornings to support weekday processing. The Unisys mainframe at the Memphis Computing Center is configured to run with 675 MIPS for normal weekday processing."

"In October 2010, the IRS upgraded its Martinsburg Computing Center mainframe computers from the IBM z/9-series mainframes to the IBM z/196-series mainframes."

The report even provides nice utilization graphs.. Your government at work.

edit: The type of Unisys systems "The IRS Unisys mainframe environment contains two Dorado 280 mainframe computers, with one located at the Martinsburg Computing Center and one at the Memphis Computing Center. Because vendor hardware support will be discontinued as of December 31, 2011, the IRS has decided to upgrade the Dorado 280s to Dorado 780s during Fiscal Year 2011."
I think this is kind of an unrealistic view of startups that's been championed a lot. I'll concede that I only have 4 data points (4 jobs), but when I worked at a startup, my responsibilities were much more limited and defined than where I am now (200+ people, 80 IT). A lot of that was due to cycling through management styles like scrum and kanban, but this is to be expected at startups that haven't figured out what works for them yet and want to copy everyone else. I also think I've learned a lot more at my current company than at my startup where I was surrounded by "fake it to you make it" people. I value the network I've built up there more too. Before you jump into that circus, look at the middle. It's not startup or 5000 person company. There are plenty of established companies in the 50 - 300 person range that are nice places to work and to learn and pay market rates. I was able to jump into trading from there and get 2-3x market rates
Multiclick analysis – When 62,000 people click wherever they want
Wikipedia says the atomic bombings of Hiroshima & Nagasaki killed 129,000–246,000+ (in a single week). The bombings of Tokyo killed 75,000–200,000 (over 3 years). The debate over whether more lives would have been lost if the bombs had not been dropped is entirely hypothetical and moreover has been the subject of debate amongst historians since the end of WWII, notwithstanding the confident pronouncements of authoritative-sounding posters on hackernews who don't appear to be able to accurately compare the relative death tolls of the two tragedies.
The delivery driver isn't my employee. Doesn't apply.
You're assuming that software developed "slowly and deliberately" is higher quality than the best engineers and a sense of urgency.
Said elsewhere, but I've not done Haskell or F#, either, but I understand they are both similar, at least in regard to currying.
The lawyers don't work for Oracle, they work for the law firm, so your analogy doesn't fit.
Circus of Dolphin with Human – ডলফিন মাছের সার্কাস
Maybe be careful with OS X Sierra
Ask HN: Any bad experiences going through YC Program?
The previous thread was this - https://news.ycombinator.com/item?id=1807979 - quite a while ago.

Just curious to know since I have never heard any bad experiences from anyone about going through YC. I am sure there are quite a few hiccups as the program grew - just like any startup. Even better would be if it had comments on what was done to address them.

Personally, I have gone to their interview once and their office hours for international founders - both were pretty incredible. It is crazy how much clarity you can get just by going through one office hour.
Famous last words on this product.

I obviously don't agree with you based on my previous comment but I could be wrong. I will say this though that we all vastly underestimate what people want to do and share with each other. This is the company that spawned the self deleting video. I thought that was the dumbest idea ever. My point is privacy is something they thought of and this isn't as dumb as it looks.

This product could evolve to become more than meets the eye. No pun intended.
The point you are missing is that new technology such as the 'panable' 360 video on youtube can take the rectangular structure beyond its current form
Carrington Event https://en.wikipedia.org/wiki/Solar_storm_of_1859

"Telegraph systems all over Europe and North America failed, in some cases giving telegraph operators electric shocks.[13] Telegraph pylons threw sparks.[14] Some telegraph operators could continue to send and receive messages despite having disconnected their power supplies" - wiki article
Not necessarily. They could pay for the platform to be around just so that people are there to banter and generate content for the news programs.
Those references all seem to be negative as well. Which one do you think agrees with you?
AMSI: How Windows 10 Plans to Stop Script-Based Attacks and How Well It Does It
Otto was designed to be sold to Uber before it was created, there's a reason it was self-funded despite having nearly 100 employees by the time it was acquired. Anthony Levandowski met Travis Kalanick years ago and had been planning something like this for a while. It's basically an open secret.
> the confident pronouncements of authoritative-sounding posters on hackernews who don't appear to be able to accurately compare the relative death tolls of the two tragedies.

Right? One thread a JS expert, the next thread an authority on WWII. Welcome to HN :P
you think comma.ai is legit? seems kind of pointless ...
Web development has the most innovation because it is the least entrenched. It is not hard to write a bare-bones web application that produces output that can be read on browsers everywhere.

Compare that to the difficulty of writing a cross-platform GUI framework. It's not even easy to write bindings for existing GUIs because it's hard to wrap C++ in a way that doesn't have you manually managing memory or discarding other language features and philosophies.

This is why we're seeing the Electron approach to GUI apps grow. It's easier to write bindings for chromium and feed it HTML.
He uses large scare words without any context.

To wit:

"But the problem is the one-eyed following the blind: these self-described members of the “intelligenzia” can’t find a coconut in Coconut Island, meaning they aren’t intelligent enough to define intelligence hence fall into circularities — but their main skill is capacity to pass exams written by people like them. "

Wtf is Coconut Island? And what are circularities, and what do they have to do with the topic at hand?

This sentence does not parse for me. If you shredded an intellectual thesaurus, loaded it into a shotgun, and shot the contents out in the form of HTML, you'd get roughly the same thing. The rest of the article is just like that. "They are also prone to mistake the ensemble for the linear aggregation of its components as we saw in the chapter extending the minority rule." What the fuck?
When to use a JavaScript framework
It's impossible for attractive, socially connected, young people to be creepy.

So, it's pretty brilliant for Snapchat to be making this sort of thing. Probably the devices to hit the market will be given to a very carefully curated set of people, and ubiquitous surveillance by camera-glasses will become fashionable.
Gaussian Processes for Dummies
Maybe it is, but I don't think it's clear at this point. People certainly aren't going to wear this all the time, but I could definitely see it getting worn for many specific occasions. I see the niche it as something closer to a GoPro for things that aren't extreme sports. I already get random snapchats from friends and coworkers in their early to mid 20s who are dancing at a club, doing whatever it is people do at music festivals, running around in the park, or whatever. It's awkward to pull out a phone and start taking video when you're in a club, but people do it anyway because these are social experiences that people want to document and want to share with their friends. If there is a hands free, less annoying way to do that without looking like a dweeb, I could totally see a large demographic doing it. These aren't the types of events where people are creeped out by there randomly being cameras -- clubs often have semi-official photographers who will go around taking pictures anywyay. I think most people in their early twenties (or younger) are generally very used to cameras being present in these types of situations.
seriously has anyone actually got to work any of these third-party options? Don't they all depend on IIS which is not free?
The goal is to create open source software for self-driving cars. That's a win if the quality is anywhere close to what Uber and Tesla have developed.

The first challenge is to create a conv net that decides how to turn the wheel to stay in the lanes, similar to what Nvidia described in their devblog.

https://devblogs.nvidia.com/parallelforall/deep-learning-sel...

Expect data to be released within a week. Join the Slack team at http://nd013.udacity.com for more details (channel: challenge-1).
Or the "spy glasses" that have been around since the 1990s
You are dead wrong. Cameras on glasses is a brilliant marketing play into owning the AR market. The reason why is the ego.
The ripple effects of API growth on technical writers
Companies seem to hold on to extra data because, "why not?" Previously, they were limited by sorting and storing physical documents. Let's say you changed your address. In the past I imagine most companies would update their file (discarding the old address, because that would cause confusion) and nowadays I can see companies keeping the old one around because it might be useful later.

I would like a scenario where companies choose not to store data not immediately useful to them. They already have incentives to store old data (it's cheap, audits, monetizing later, direct advertising, etc). The best tool I can think of is liability.

I don't think the balance between companies and individuals are always equal. If I want to sign up for cable TV I have to agree to their contract (I don't get to negotiate terms), which commonly includes; giving them your birthdate or social security number, giving up the ability to sue by agreeing to arbitration, agreeing to a 12 month contract, etc. Yes, I'm not forced to agree to that contract and can go without cable (and I can see why they need much of that info--at least upfront), but the limited alternatives (and less-than-diligent consumers) allow companies to add creepy data collection without much pushback.
You can do really cool things with Linux RAID, like RAID stripe across 8 virtual (i.e., EBS @ EC2) volumes and then layer dmcrypt on top of that or other things for use cases that it was never even designed for. Linux RAID (and volume management) were really designed The UNIX Way as modular, small tools that can be applied like Lego bricks, and no where is that more user-visible than in the RAID/LVM/etc subsystems.
New devices in the sub palm top class. Something like the psion 5mx, but with current hardware.
My 2 cents:
- I don't like the logo, it looks like you just picked a font on google fonts
- The whole brand identity seems completely disconnected from 'hardbacon'. It's a strong name, why have it then?
- I don't get it, are you a content site for financial advice? With comparators? What's the business model, referrals?

Don't mean to be a dick, just trying to offer my sincere view. Good luck!
What a useless comment. I personally think that self absorbed, histrionic people come in all ages.

Just look at the frequency of the use of the personal pronoun in that article (the article written by the person who walked out). It's "I", "I", "me" over and over.
P2P web powered by torrents and blockchain
I remember reading one story about getting kicked out of YC [1] before it started.

1. https://news.ycombinator.com/item?id=2208155
Do you know any engines that actually do this? As in, is it really standard? I thought maybe Spencer's Tcl regex engine did it? Although I confess, I've never read the source.

I guess RE2/Rust/Go all kind of do it as well. For example, RE2/Rust/Go will actually do backtracking in some cases! (It's bounded of course, maintaining linear time.) But this doesn't actually meet the criteria of being able to support more advanced features.
Hmmm, even in "good" feudalism, the people below were entitled to protection and justice, and if they can always get it from the real government, there's a lot less the aspiring proto-Lord can offer.
Believe it or not, having quality content that's presented simply with clean URLs is also a good search engine optimization.
What were you expecting to come up?