skysight-inc/HackerNews huggingface dataset:
Really appreciate the access to the book online http://www.braveclojure.com/clojure-for-the-brave-and-true/ more likely to buy products that you can see. This years challenge, learn two new languages. Clojure might be one of them.

The reason? Lisp based and in spite of the fact it uses cough, Java (JVM), it runs on JavaScript. A better language to run/work with JavaScript. That is a good enough reason to learn and use.
And that will still send the program SIGUP, killing it when you close the terminal or lose your ssh session.
Thank you for asking the right questions!

This should be it's own topic. Can you run an "Ask HN"?

My thought would be an information system that is jointly published in by all nation states - like a broadcast Wikipedia. The idea is that out of the chaos in the reporting the facts that every nation agrees on will get through clearly, whereas the opinions, unfounded accusations and the rest will bury themselves in a quagmire of costly effort.
Maybe a single technician working on repairing warranty/refurbished macbooks before they're re-sold simply had this "trick" as his way to make stuff work.
very interesting, I've sometimes done transcriptions etc. in Sibelius for personal use and it sure takes quite some time!

I have never been able to get things looking as nice as something like the Henle Urtext editions though, wonder what they use to put those together.
I mean Terminator is basically gTmux, right? They aren't quite the same: tmux is a terminal multiplexer, Terminator is a terminal emulator with tabs and panes. Both approaches have benefits and drawbacks.

If you want keyboard only, I don't think GUIs can beat TUIs. But yeah, there's a learning curve.

The problem with GUIs is a very display-session centric view. tmux/vim work fine over SSH, Terminator/gVim don't. With tmux, your sessions are separate from your terminal instance. If your X session crashes, depending on how you started tmux, you just have to relaunch a terminal and reconnect to tmux. This is pretty invaluable. So this separation is powerful, and IMO very Unix-y.
Iceberg the size of Delaware to break off from Antarctica
Show HN: Compare shipping rates from USPS, FedEx, UPS – Good for quick estimates
Like Ghostery, it is important to be aware of the cons but I'm still using CloudFlare.

In my book CloudFront easily ranks ahead of had-been "do no evil" Google's irrevocably merging it's entire history on me ex post facto. https://news.ycombinator.com/item?id=12760003
Still can't reattach after logout/reconnect, which is a very common screen/tmux use case.
Anecdote fight - my extended family are moving towards Apple products - mostly to interact with other family members.

I have several inlaws who <3 Samsung but have iPads, others who do everything on their iPhones - in all of these cases they were running Archos, Blackberry or Windows exclusively.

Macs aren't growing, but iCloud/iMessage (mainly through iOS) is entrenched and extending.
This is the single reason why I am waiting for next update. Which should give us the option of 32GB with LDDR4 (or whatever low power memory they are waiting for). This is possible because laptop speed doesn't really increase as much with each revision anymore.
The report does not establish that there was inflated social media brigading on behalf of Trump. Mostly the report establishes that the DNC was hacked and that they believe the information was leaked to Wikileaks. Then, they believe usual RT coverage was the primary venue for criticizing the fairness of the election and the electability of Clinton.
Shutting Down
Can you elaborate why you recommend starting with ES5 instead of going directly for ES6, which allows doing some things in a bit more sane way?

It's just as likely that OP won't ever write any ES5, if any ES5 code will be needed, then it will be generated/compiled.
The iMac and the Floppy Drive: A Conspiracy Theory
Another way to pose this question might be: among the successful YC B2B companies, how did they acquire their first few customers? I am sure that personal networks play a role, but then what fraction of initial B2B sales did they acquire from outside of personal networks?

This is the hardest problem, I think. Some "out-of-network" routes to market I can think of are cold calling, cold emailing, cold snail mail (FedEx, USPS, etc), cold LinkedIn "inmailing," participating in conferences (getting speaker spots and/or setting up booth), blogging, "ShowHN" style posts on online forums, advertising on search engines, advertising in industry publications, getting referrals from your investors (if you have investors) ... am I missing any? For every one one of these "hacks," you can find people saying that it doesn't work, that it's waste of time/money, that you should spend resourcing on building product instead, etc. Have YC companies succeeded in the earliest stage through these kinds of efforts? Are some more effective than others, for particular markets?

If it really is all just about personal network in the earliest stages, then that's equally puzzling to me because the numbers seem so low - how many prospective buyers could anyone possibly have in their personal network? Isn't it supposed to be a numbers game ("dial and smile")? It would take just a day or two to contact everyone you know who might be a buyer, what do you do after that?

The investor referrals idea seems like a plausible source of B2B startup success (especially if you are selling to other startups), since investors tend to be highly connected. I've heard YC partners say they can be very helpful in sourcing of your early customers. But another philosophy is that the only way to get into YC is to not need YC ... In other words, this leads to a chicken & egg problem because typically you need to get sales off the ground before any investor (often including YC) will invest in your company. It's the same as saying that you should get sales leads through customer referrals - that might not be super useful advice if you're pounding pavement to find your first handful of customers.
Maybe. Of course killer apps don't have to spring full formed as launch titles. Visicalc arrived two and a half years after the launch of the Apple II. I don't think we can count out people coming up with something remarkable in 2017 given that there are platforms from Facebook, Google, Steam and Sony.

As for myself, even without a killer app, VR has gotten me saving memories as photo spheres, in addition to pictures and videos.
Hi Sam,

I'm the CEO of an on-demand app that is getting a lot of traction and partnerships with brick and motor stores.

1) Right now we are doing a simple 60-40 split of profits between us and our delivery drivers. Do you see any downside to this?

2) Should we enlist the help of an MBA grad to help scale for when shit hits the fan since we're growing so quickly?

3) How can we stand out when applying for YC or any other VC? I don't want to be seen as just another Uber for X.
What proxies? Last I heard, they are giving a hard time to VPN players.
> So node will be forever more compute bound to a single thread blocking all I/O.

I don't think I understood your point. But is not Node.js supposed to not block long lasting tasks?
Yes! At my job I've setup a per-paycheck donation to LE because they have saved me so much time (apache, nginx and caddy automagic SSL) and in the long run it'll probably still be cheaper than buying one of the SSL certs from the other companies.
I thought about getting one of those bigger arrays, but I'm concerned that the light they produce may not be as pretty as the 219B even if they have the same color temperature and CRI on paper. The 219C, for example is not, though it's still very nice and capable of quite a bit more output. Output per emitter and overall efficiency aren't major concerns for me: we're talking about around 90W for 6300lm driving 18 219Bs at 1500mA each.

It's also difficult to find the 048Z available in single quantities. I didn't find the R9050 version on Octopart, Other versions cost $50-60, while 219Bs in several tints are readily available from suppliers of DIY flashlight parts for $3/pc. Getting 219Bs and triple or quad copper MCPCBs is easy, and they can be configured for any multiple of about 3 volts, while the 048Z requires a 50 volt power supply.

I was expecting to spend over $100 when all is said and done.
To avoid cluttering "find" with a sorting interface, we could use the modern technique processing push-down:

If you do "blah | sort", then "sort" could ask its upstream processing node whether it supported sorting on the requisite fields, and "push down" the necessary sort-order descriptor into the "blah" step.

That requires two things: That the pipe API sets up a communications channel between the two programs in a way that makes them aware of each other and able to exchange information; and secondly, that the pipe protocol is based on typed, structured data. I want both things.

Imagine if you had that, then you could conceivably also do:

psql -c "select firstname, lastname from foo" |
sort -f lastname

and psql would automagically rewrite its query to:

select firstname, lastname from foo order by lastname

That's the future I want to live in, anyway.

The inability to do this sort of thing really a product of a failure to modernize the 1970s text-oriented pipe data model. I believe PowerShell (which I've never used, only read about) provides a mechanism to accomplish this sort of thing, at the expense of being extremely Microsoft-flavoured.

I don't think there's anything even vaguely scifi about those abilities, but the Unix world is hampered by a curious reticence to innovate certain core technologies such as, well, Unix itself. That's why we still have tmux and such.
I've thought about this ever since visiting the Needles fire watch tower and meeting Margee while climbing there. Sadly, that tower burned down in 2011 [1].

[1]: http://www.buckrock.org/needles.html
I stand corrected. There is no security - or security added - issue.
I think this is what I'd like to see...

The manufacturer of the device is responsible for security updates forever. If at any time a security flaw is discovered in the device, they have two options:

1. Develop and deploy a fix at their own expense, and make it freely available to all owners of the device.

2. Publicly release all source code and documentation necessary for any third party to independently develop and deploy a fix.

This way, any company which still cares about their customers, devices, patents, copyrights, etc which are involved will pay the expense of fixing the problem, as the cost of keeping that which they value. And any company which does NOT care about those things can simply walk away from it all at no cost to themselves.

So, as a dude in your workshop, after n-years have passed and you feel the responsibility is too onerous, you opt for #2 and wash your hands of the mess.

As an interesting side-effect, this opens up a business opportunity for source and documentation escrow services. Because if you've somehow managed to lose some or all of your source and documentation, you've also lost the ability to choose door #2.
The person you're replying to understands this. They demonstrated that they took the effort to understand the person they're replying to by including the smaller scope in their comments.

GGP is either incapable of comprehending the broader scope for whatever reason, or is deliberately limiting the scope to "win."
This was a good book. It would have been better if he had a more critical perspective of the language. As much as I love Rich Hickey and Clojure, the language does have pitfalls and rough edges, and this book was a little too starry-eyed to tackle them head-on like Crockford's book on JavaScript.
>My point is that the combination of those features enabled companies to create innumerable innovative appliances that use radio (from cheap radio clock to my Swedish synth).

I don't think your list is so "innumerable".

The radio clock was merely using FM radio transmissions as intended.

The OP-1 using FM for sampling is the niche-st of niches, and totally irrelevant for 99.99999% of the population.

Between those extremes there are not that many appliances that will miss FM radio transmittions that are not actual FM radios...
"hardly news"

still ^interesting^ though. news is such a low bar these days, I'll settle for interesting over news.
I think the concern is that before the laws limiting this went into action in the 30s, some people got fleeced for a huge chunk of what they had.

That's still a big problem. Read "The Wolves of Tel Aviv", about the "binary option" scam industry.[http://www.timesofisrael.com/the-wolves-of-tel-aviv-israels-...] About 0.7% of Israel's GDP now comes from this scam, and that's just the part that pays taxes.[http://www.globes.co.il/en/article-binary-options-worth-125b...]
> That was a mistake, but not unethical.

No one cares. If you fail to demonstrate professional ethics, it doesn't matter whether it's because you are unprofessional or unethical.
Windows console is very slow (and terrible in many other ways). I think it is beyond salvageable. The only workarounds is probably write into a disk file or a pipe.
No, we tend to keep our staging and dev servers public-facing for the most part. We do a lot of remote work, and it's easier that way.

Everything is kept behind our application authentication, and they almost never have "real data" on them so it's not really an issue for us. And having the certs on the dev machines just makes setting up and testing with HTTPS that much easier and it's a no-brainer with LE (plus it lets us ensure that everything there is working correctly, and gives us fully authenticated HTTPS connections with our dev servers!)

In the rare event that we need a dev server and can't put it behind our application auth, it's generally locked to localhost and we use SSH forwarding until it can be.

As for managing the lifetimes, we just use certbot the same as we do for the production machines, similar to the way the other commenter pointed out. And I believe one of our guys has some alerts setup for monitoring the expiration of the certs and warning if it gets too close to expiring, but I don't really know anything about how that works.
I don't know much but the bash on windows thing was a completely separate thing from vm's.
Thanks for that! We run an isolated model (one database + app process per client), but sometimes it seems like there isn't any good help out there, with everyone building completely shared apps.
>and short of poking a hole in my wall and running an antenna outside nothing has worked.

Isn't that what one's supposed to do in the first place?

At least I live in a country and for the whole lifetime of analogue tv (and now digital) we've had antennas outside.
So a device produced overseas has currency inside it of the person that buys it.

I'm call clickbait BS.
"Ordinary" in the sense bursts strong enough to vaporize every living being within a good couple dozen light years from the source can be called "ordinary"
An artist friend of mine started a 'zero likes' groupon FB where people were encouraged to share awesome content but would get booted from the group if they used the voting button. It drastically changed the shape of conversation (group members were a subset of a small existing community).
This is why I think the best play is to work about 6 month contracts, take a month off to decompress, take another month learn a new hot technology, then jump back in
I don't have to get that specific with time, just hours worked, but I use IFTTT to track the hours I am physically at the office. Beyond that I'm pretty good about remembering work done offiste or at home.
> The only bad thing I remember: default tmux keybindings suck. I just redefined almost everything.

It's true, e.g. ^B / Ctrl+B is a terrible prefix. All of this just makes tmux harder to learn, and less portable/transferrable. But I think there's value in having to feel out the ideal configuration for your workflow - but the prefix is still inexcusable.
I appreciate you taking the time for an insightful and detailed response. The link you provided, "Tracking the U.S. government's progress on moving to HTTPS[1]" gave a lot of the details I was looking for.

You might consider mentioning it in this blog post as it does offer interesting background information and technical details.

As a specific example, the actual Python scripts used to generate the data[2] and the data itself[3], give a great deal of insight into the question I had.

[1] - https://18f.gsa.gov/2017/01/04/tracking-the-us-governments-p...

[2] - https://github.com/GSA/https/tree/master/compliance

[3] - https://github.com/GSA/https/tree/master/compliance/data
I don't get it either.

A report about hacking, a subject in the bleeping title of this site, has been buried from HN. There are now no active posts on the Intelligence Report on Hacker News. And the remaining dead/dupe/flagged posts all have anti U.S govt. rhetoric bubbled right to the top of the comment heap.
if anyone has any suggestions about dependency management and automated deployables in the MSSQL world I'd be open
Yeah, a circular saw + square will get you a long way and provide an inexpensive way to determine whether you like it enough to invest in the more expensive tools. Of course you could end up like me, still using that same circular saw years later while routinely promising yourself that next year you'll invest in a good table saw ...
The New York Stock Exchange used to prohibit listing shares where there was more than one class of stock. (The only exception was Ford, which predated that rule.) We need that back.
The Real Reason My Startup Was Successful: Privilege
I think that's fair. You can look at VOA, Radio Free Somalia, Radio Free Asia, CNN, WaPo and others and get a pretty good understanding what Washington's intentions are.

Having watched/read RT, today and during the election and before the election: I agree with the assessment that the intention was to quote "undermine public faith in the US democratic process, denigrate Secretary Clinton, and harm her electability and potential presidency."

The behavior of the DNC did exactly that for me and in that regard they chose a very good example of electoral corruption to accomplish their objective.
Sam,

What path should I be taking to become a successful startup CEO?

Right now I'm deciding between doing software engineering at a top company vs front end development at an ad tech Unicorn.

I want to get some industry experience after I graduate next year.
> My solution is we prosecute botnet operators and malicious actors

But what if this course of action -- investigation, enforcement, sanctions, etc. -- ends up costing substantially more than the effective cost of device manufacturers giving a damn?

All of DLink's issues (maybe aside from command injection, but I'd argue even that) could've been trivially prevented. I could've identified and fixed these issues in a week or two of time.

So basically, you're saying the country should suffer millions or billions in lost business opportunities (via sanctions), in addition to paying tens or hundreds of millions for increased investigation and law enforcement activities. All of this, to save DLink from having to hire even a single half-decent PM or SE who knows that default passwords are a bad idea and maybe we should not post private keys on a public website?

How is that even remotely fair?

> And ISP's could stop this DDOS activity. We should police this at that level.

This doesn't address other forms of harm. If botnet owners can't use their farms for DDoS and spam services, they'll turn to identity theft and ransomware. Most already have.

> And punish companies that perform bad security in the marketplace

Isn't that exactly what the FTC is doing here? Or do you mean that the marketplace should punish them? Because the latter clearly isn't working...

> Lets be clear, this is selective enforcement

Well, yeah. Literally all enforcement is selective enforcement. From speeding tickets to illegal gambling, drug distribution, and tax fraud. Police and regulators choose which cases are most egregious, and make an example. Even in murder cases, police sometimes choose to stop investing resources in a tough/cold case.

All investigation and enforcement is selective.

> No one who created these devices was ever told that these practices were illegal, or would result in sanction

With all due respect, a lot of us have been calling on the FTC and other regulatory agencies to sue these companies under existing consumer protection laws for a long time now.

And the FTC themselves have been making some noise since at least 2013 about following best practices, together with wording that specifically points out to major companies (like DLink!) that the FTC already has the legal tools needed to pursue punitive actions.

Perhaps DLink didn't know there were already laws on the books that could be used punish particularly incompetent software engineering. If they were a small company, I might be more sympathetic. But they aren't, so IMO, that ignorance is entirely on them.

> Now, startups and kickstarter projects need to have a line item in their budget for security insurance. And an insurer has to take on this risk... So startups will have to buy security insurance. And that will be expensive.

I doubt it. They might have to start following best practices and designing secure software. And yeah, that means they can't "move fast and break things" when it comes to security. Cry me a river...
Reminds me of using an iMac 20 years ago...
No, WSL does not require hyper-v. It is a totally separate system from hyper-v and does not rely on virtualization of any kind. You can use WSL alongside any other VM software.
I disagree pretty strongly with your first point. For starters, Stephen Glass wrote literal fiction; Michael Thomas is, at worst guilty of misrepresenting an otherwise true real-life situation. Glass is among the most notorious fabricators of all time -- we're going to start invoking comparisons to him when something doesn't line up exactly like we think it should? (edit: To clarify, I'm not saying this was a good idea, or an accurate story. But Stephen Glass was guilty of malpractice of the first order.)

I may be off-base, but I think it also seems like you're objecting to the idea that the reporter was trying to fill out a narrative in his story. Even (especially?) good journalists look for the "bigger picture" -- otherwise they're just asking people questions and typing their answers. A narrative is what we expect from journalism. Because he changed pieces of Pieter's story to "fit," then yeah, that's a mess, but I'd expect tech people especially would be accepting of the idea that sometimes you have to leave out some of the details of something complicated.
How have you not retired yet with a 400-800K bonus is the better question?
Somewhat related: https://www.eff.org/deeplinks/2016/12/https-deployment-growi... (my post on HTTPS deployment improvements during 2016, a whole lot of which involved Let's Encrypt)
>FM radio in Norway sucked so much because of mountains. Every fjord had its own tiny repeater, but only if there was at least one inhabitant, otherwise you heard nothing.

Doesn't that imply that there wasn't anyone to hear anything in the first place?
2016 FOSS tithing
See EDIT2 on my post.
"Trust But Verify"
The ‘Tsar Bomba’ Was a 50-Megaton Monster Nuke
Sounds great! I totally understand the motivations behind the decision to leave it out, but it's a great candidate for a compile time flag. I would love to throw out gnome-terminal for this!
You are misinterpreting what he said and then saying no one cares about it, this makes no sense. He's not saying he was unethical by accident, he's rightly asserting that reporters have no obligation to make sure sources approve of the quotes being attributed to them. Sources don't get to copy-edit stories, especially ones they're a part of.
The article equates the difference between the capital gains and income taxes as UBI for rich people.
In this case, Sabrina Erdely is the much more appropriate comparison over Glass.