skysight-inc/HackerNews huggingface dataset:
There's an interview (just getting to that stage is extremely hard). I think that over 50% of those interviewed make it. See the sibling comment for the application process.

Read up on successful applications (google "my yc application" or "succesful yc application").

Some things I believe help making into YC much easier (but not guaranteed):

- Female founders or co-founder

- Very fast and demonstrable traction

- Large potential market

- Founders with successful backgrounds

--

Stuff that won't help on its own:

- Interesting / world changing project (unless you have demonstrable traction). They say they invest in idea-stage companies, I believe that only happens with founders with huge exits on their backs.

Note that this is just my own opinion and I did NOT get into YC and I'm still a BigCo employee.

Sample succesful applications:

https://www.themuse.com/advice/the-muses-successful-applicat...

big list of applications and advice:

https://yourstory.com/2014/10/guide-list-y-combinator/
Right, there is a line. The game is over, no more content :)
> if the user getting their password stolen is not a problem for you because it's not your responsibility to handle these issues (like a hacker news account for instance) then just let the user pick whatever they want and deal with the consequences

Yes! Please. Let users determine the value of their accounts for themselves. If I decide that say, my HN account isn't valuable and use a common password that is shared with many websites, I know the risk I'm taking and I'd rather take it than have to mark down a unique password for HN.

On sites I write I advocate for no password rules at all (hit enter is good enough for me, yes we can hash an empty string), have usually compromised on a simple length check.

Proper password storage is important, use the latest bcrypt/scrypt/argon2, don't cheap out there. You can cheap out on password rules. If you want to write a fancy entropy checker, run it client side and tell the user how secure their password is, let them choose whether they want that or not.
You may have missed that you can ↓ to any container and ␍ to see a detailed perf graph https://github.com/bcicen/ctop/blob/master/_docs/expanded.md
This is why it's helpful to have a consistent code style across the team, or at least across the codebase, so that personal opinions in either direction don't cause too much conflict in code review. Some companies value low quality but running code now over better quality code tomorrow.
> In a 16-bit address space (64K), you hit the 16-bit limit _all the time_.

Depends on the way 16 bit is implemented. For example x86-16 uses segmented memory - enabling adressing of a little bit more (including High Memory Area) than 1 MiB of memory. The Z180 uses as far as I know a MMU (but not completely sure). Another approach that is/was in common use is to use bank switching.

Depending on the kind of algorithm that you use this can make the coding much more complicated or can also be no problem, because the scheme that is used to address more memory than 2^16 bytes fits the algorithm quite natural.

One interesting hack for example when coding in real mode (x86-16) that I read about is rather to use some clever sharing of bits between the segment register value and segment index:

- One scheme is to consider the value of the used segment register as a pointer to a 16 byte block of memory and use the segment index to adress the specific byte in this block (with an option to increase the index "a little bit" if you want to go further)

- Another scheme is to (mostly) use only the 4 highest bits of the segment register (and zero all the other ones).
Like an arms race, this approach (formally dedicating to the public, effectively terminating the patent at the PTO) only works if everyone does it.

Otherwise, it's strategic and prudent to have a patent portfolio, so you have trading cards and leverage if someone asserts against you.
You can't know that they won't litigate it, only that they haven't. And it's always possible for that policy to change, or the patent to be sold, or even for IBM to go bankrupt and the patents sold to trolls to pay the creditors.
What about http://www.roguebasin.com/index.php?title=Main_Page ?
And how much do you pay for this timely an update?
Yes. This.

In particular, the company operating the data center your server is in can reliably do this, and so can the backbone provider they use, and probably the server's local government. The DNS provider that controls your domain can mitm the ca process too (though with a higher chance of detection).

The argument for making domain validation yellow (and not red) is that domain validation protects against attacks from residential ISPs / coffee shops, and it would also be hard for a foreign government to launch the attack against their own citizens. They basically have to compromise the CA, tamper with your browser, or just randomly break https with "bad certificate warnings".

Over time, I'd hope more bad security practices (crypto related or not) would lead to yellow bars.

For instance, intel secure enclaves help cloud security a lot, but they are still exotic. If they catch on, and you're at a vps that doesn't offer something like that, then you get a yellow bar starting in 2027.
I think that's one of those things that's better to have been born well after (assuming a good outcome) or born well before (assuming a bad outcome). It's really hard imaging the transition as anything other than misery and chaos.
For a small team you should probably only TDD the most critical stuff, and not everything. Stuff that has huge paybacks, critical code. Generally I have been reverting to coding first, unless in scenarios where I waste more time trying to manually test it.
I could never get past Joss Whedon's inability to write dialog.
Bounce rate was just used as an example. I agree that it can be meaningless depending on the type of website.

The problem is not about bounce rate, is about cookies and the inability of tracking users correctly. Give it another read ;)
Same here. Started off with home, upgraded to pro and I get the add too. I'm wondering if people that started off with pro get the message.

Again, not justifying the add- but I wouldn't be surprised if its because our accounts were at one time linked to home.
It's things like this that I use to point out why raising the minimum wage will only hurt -- because now this robot is cheaper than a human, so instead of getting a higher wage, the job is just gone.

Those displaced people need direct assistance, not an increased minimum wage.
I'm quite hesitant towards using a password manager. All secrets are protected by only one single password, and to make the tool useful, it should be accessible from anywhere and I would use it quite often too, increasing the limit of my master PW being stolen (whatever way, keyloggers, shoulder surfers, cameras...). Thus, I rather memorize a handful of unique high-security passwords for important services and one or two low-security ones for all the rest I don't care about.

Of course, it's a different situation when e.g. managing many sensitive servers which you only access from work or so.
I respectfully disagree. I don't think there's some feature that is enough to dislodge Windows. I think it's going to take something like iOS on the desktop.

By that, I'm not really talking about the touch-based UI (although that's part of it). I'm thinking about the app model. The model used by Windows is too complex (and Linux is even more so).

There are a lot of things Apple got right with iOS, but I'm especially fond of the security measures. Apps are sandboxed, they hide filesystem details, inter-app communication is mediated by the OS, and updating happens mostly transparently. The tight integration between iOS and the hardware for security reasons is also something that should be copied but will be difficult to do.

As a software developer, I couldn't use something like that to do my work, but most of the non-developers in my life could. Microsoft's current approach where they half-ass everything isn't going to work (IMHO). They are in no real danger though, because nothing else is challenging them today.

Potential challengers are around though. Apple is pretty close with the iPad Pro. Valve's Steam box is also on that path.
Yeah, its reminding me more of the ones with bad ending though.
This AI doctor knows what's wrong with you by checking your genome
Correlation is not causation! the only data it has is group of people who ate chilliest died 13%
Well, there was recently a case where one of the developers for Google's custom LIDAR hardware stole the plans and gave them to Uber.

And people argued he had no option to hide it.

As I mentioned there, too, it's trivial to break that security if you have the knowledge to design and reverse custom ICs, and you could just steal the laptop of someone else, clone their trusted hardware system, and ensure their laptop is back in place.

Then later use that account to download the data to be sent to Uber.

I mean, for many cases of corporate espionage this is easily doable — it's just fancy DRM, after all. Not by the average dev, but for people who design this hardware or similar hardware in the first place, definitely.
I actually ended up on the phone with PayPal support because of this, they were one of the companies I had in mind.
> 1 contrived example
>The relationship between the two roles would be much better without "I'm better than you" or "you can't do what I do, so you test" attitudes. Both sides, and the organization, profit when we work together with respect and appreciation.

The relative pay scale for a developer and tester with equivalent education and coding experience already speaks volumes about how deep that respect goes. Also, note who gets laid off first when the budget gets tight.
Why use ssh over telnet?
I don't believe that's the case (an other commenter notes they run solr processes up to 160GB), however they may have run into the compressed oops optimisation, or more precisely the end of it: because Java is a very pointer-heavy language, if the maximum heap size is under 32GB many 64b JVMs use a variant of tagged pointers where they have 35 bit pointers stored in 32 bits (since the lower 3 bits are always empty they can shift them in/out).

Except once you breach the 32GB limit, your 32 bit pointers grow to 64, and depending on your application you might need to grow your maximum heap into the high 40s to get room for new objects: https://blog.codecentric.de/en/2014/02/35gb-heap-less-32gb-j...
Is there a risk model where you control the network enough to fake domain validation but only if the target initiates the request to Let's Encrypt?

Otherwise it doesn't matter if you use Let's Encrypt as the attacker could just initiate the validation regardless of your CA and end up with a valid certificate (which would still fail cert pinning)

Edit: Oh I see, it's a more about if DV should ever be green.
One of the many reasons "Angel" didn't work. At all.
Visual Studio Code is a wonderful text editor. But it's far from being a full-featured IDE.
It would have to be literally unusable.

Quality is not the thing keeping most people away from Linux. It's not even software availability (although that is still relevant). It's PR and forced Windows distribution.
reverse this: https://www.youtube.com/watch?v=HqjhYmDDWlI
Uh, why would proof of extra terrestrial intelligence induce misery and chaos?
7 Things That Happened After WikiLeaks Dumped the CIA Hacking Files
This is the "free market cannot fail, it can only be failed" argument of the day.
Until I got a Kindle Voyage, I found the Kindle reading experience to be subpar to books (but still more convenient in most cases). But with the higher resolution of the Voyage (300ppi), better backlight, and most importantly, buttons to move forward/back instead of swiping, I now prefer the Voyage over paper books.

Much easier to read one-handed on the train, and having a good backlight makes for convenient reading at night (with the screen brightness turned down enough that it doesn't bother my partner). I've pretty much stopped buying paper books now, while with my old kindle, I'd alternate between paper and digital books.
it looks like Groove will be releasing a mobile app any day now (expected release early March 2017).

https://help.groovehq.com/knowledge_base/topics/does-groove-...
No, but even if it was, the vagaries of DNS and propagation time make this kind of uninteresting to me.
Learn about the pregnancy fetish
^ I think this answers sums up the SNS value prop well.

1. It's a managed service you don't have to run or maintain.

2. Aggregation across multiple messaging channels. Your code can become more agnostic.

3. It's very easy to integrate in a side project where for example you have just one node running on a PaaS for your app, etc.
Would be interested to see if this changes when intelligent people are socializing more with other intelligent people vs. average people.

I just have no interest hanging around people that just parrot mainstream talking points or don't have anything to say beyond meaningless chit-chat and having to interact on that level to fit in just becomes exhausting.

It's also a matter of being friends with people who just don't have their shit together and the benefits are very one-sided. Constantly having to bail them out or do favors and while they would do the same for me, I just don't require favors that often.
Forget Intercom or Drift, have a chatbot for website
It compiles with -std=c++11, graph one fails with 03 on WSL at least
Appreciate the insight. For edification who are the other big players Tesla would be ousting here? I'm curious to see if the public play has long term consequences for the competition. The transparency here is great, obviously it forces an interesting conversation for deals that are on the table for others - Musk likely made a bad weekend for some sales oriented folks in that space. And that's great for all of us long term (hopefully).
So would it be ethical if it was done in a single payer healthcare system?
And moving to what? Linux? OS X does the exact same thing forcing icloud down your throat and nobody seems to be up in arms about that.
There's also Mozilla's WASM demo, which is much more graphically impressive (though probably not quite as fun): https://s3.amazonaws.com/mozilla-games/ZenGarden/EpicZenGard...

I had it working in Chrome Canary yesterday. Can't seem to get it to work on Chrome 57 now though, even though in theory it supports WASM and WebGL 2.
Bootstrap Vue – Bootstrap 4 components for Vue.js 2
You may not understand something important about Windows API. Let me explain.

There's the documented, public functionality that Windows implements and wants all the applications to adhere to. This should be documented and it is.

Then there's the functionality that Microsoft had to implement behind the scenes because some important application used it in an incorrect way or it worked by accident. They didn't want that application to break with a new release of Windows. Now Microsoft doesn't want new applications to use this, so they don't document it. I think that is absolutely correct.

MSDN API documentation is meant for people that write applications the way Microsoft wants the applications written.

Wine isn't an application. They want to emulate what Windows does. The API documentation is not for that purpose and it shouldn't be.

That being said, there are APIs in Windows that are secret and undocumented. Those should not be used by applications. Windows isn't open source. Accept it.
The trick of password rules should be (and this is what xkcd was getting at) to trick users into using passwords that they find easy to memorize, but are still high entropy. Long passwords can be high entropy, but, as highlighted at the end, they can just as easily be low entropy. If they needed to memorize it quickly, most users would pick a low entropy long password. Also, every users opinion of what makes a long password easy to memorize will be about the same - repeated letters, patterns on the keyboard, english words. This means that you can try to detect easy to memorize password, and flag them as bad. However, users will find something easy to memorize you don't block, and use that instead. This new thing will probably be common to all users as well. I once had someone inform a group that they should all use the first three letters of their names to overcome a password restriction. While the restriction probably assumed people would pick a random three letter string, they instead chose an even more obvious one then they would have otherwise.

When making password restrictions, try to force every user to come up with a different opinion of easy to memorize. For example, you could display pictures of ten foods, and ask users to pick their favourite food. Since eveyones likes different food, their choices would probably have a relatively even distribution. Moreover, upon returning, each user would reidentify the same food as their favourite. By extending this to a larger field of subjective values, you could make the overall datapoint high entropy, while maintaining memorizability.
Oh, this is super cool: http://www.roguebasin.com/index.php?title=How_to_Write_a_Rog...

That doesn't get me out of my language/framework paralysis, but otherwise it looks like a decent roadmap.

Thanks mate. Also your game is amazing; thanks for sharing it.
We surly don't want anyone in academia to have anything but hard-left views.
That's my point. It's not changing ethics, its just not being obtuse.

A classic example is Apple under Jobs. They weren't ethical (locked down iPhone) but they weren't obtuse.

WSL is a classic "shut up and take my money" - it's not open source, it doesn't let me write cross platform GUI, it just let's me keep windows as a desktop when me server is Linux.

The only thing is that MS (under Ballmer) was obtuse and didn't realize they lost the server, and now they do.

VSCode isn't cannibalizing their existing VS installations, its cannibalizing Sublime and Atom. So the most they spend on it is a team of programmers? It pays with mind share.

With .NET core also, they realized that no startup will touch .NET on the server because they don't want to spend money on a windows license. As MS isn't interested in being Oracle, they OS .Net for the server.

Note, they didn't OS .net for the desktop.

What will happen when they'll be be on top again? Will they keep Open Sourcing things (like Google is doing) or will it go back to Closed Source vendor lockin?
And, while the plural of anecdote isn't data, here's another vote for reading on dead trees, whether it is for enjoyment or work. (I typically print a hard copy of the datasheet for any component I consider using; I keep the PDF handy on screen for searching, then study the hard copy, make annotations and highlights as I go.

A colleague of mine refers to my bookshelf of datasheets as 'Odd's 20th-century Kindle'. :-)
The quest for the unknowable password to protect your data at the border
One argument you missed is that IP laws generally create state-granted monopolies, which is something capitalists usually claim to be against.
French touch  Avec la Smart Audio, redécouvrez votre musique
Serious answer: companies use aggressive and abusive tactics because they work.

Why? Because users aren't power users. Most don't know better.
BitClub mining pool launches transaction malleability attack on Bitcoin
Fire him now, before he creates the minefield in your codebase.

I mean, try to fix him first. But if he refuses to be fixed, fire him. He'll be toxic to the codebase, and he'll be toxic to the culture.
If you don't use OneDrive, I also recommend just straight up uninstalling it from your PC so that it doesn't randomly boot up while you're using Explorer.
He's asking for what most of us want: a unified SMS and video calling app for our phones.

Is that what you want or what most people want? I like WhatsApp more than Allo/Duo, especially for the desktop integration and a few other features, but I'm a dinosaur who uses desktop. Nobody uses desktop anymore, but until Google launches a desktop client, my hate of typing on a smartphone keyboard will keep me away from those apps. If they launch, I'd guess that my existing network on WhatsApp will keep me away from them as well.

"They're not addressing my own usage profile" != "They are not addressing a large % of the potential users".
That's true. I bought my first house (I'm in the US) because I wanted to be able to alter my living space - plant a garden, turn a bath into a shower, upgrade a circuit from 15 amps to 30. Even when there's no disputing the change is an improvement, landlords don't like it when you modify their property, and I don't really blame them.
We are terrified, because we don't know, how to handle it yet. This should not stop us, the humanity. Our descendants will figure it out. There is no progress, if we are afraid of mistakes. The real problem is when we don't learn. Gattaca is a good example, what we should avoid.
We ethically should.
It seems like enemies can't open doors, at least from what I could tell. So even if you can't outrun them you can hide behind a door?
You can sort of imagine that there is a faction that hates the idea of moving to managed code, and that is causing an impasse.

Personally, attaching a managed code port to the 64-bit migration sounds misguided. The managed code port sounds much more involved and disruptive than migrating the existing native code would be. It's probably some manager's pet project and it makes no technical sense.
It is not that different, but the art is in the attention to details (the sender can be posed as your colleague) and subtlety in execution.
How Dutch Police Decrypted BlackBerry PGP Messages for Criminal Investigation
oh cool, ok, then that isnt so bad.
What do you mean 'that's not how go works'? Go provides GOPATH: using a different GOPATH for each of my projects works, and it works really well.

> You need extra work to make it work.

What extra work? I set GOPATH, and everything just works. What more is there?

> That's not up to debate anymore anyway

Neither were type aliases, until they were, except they aren't.

I have no idea what dep adds that using the standard GOPATH doesn't do: I've read the background and the docs, and I'm familiar with using the vendor directory in the past; frankly, now that I've switched to using GOPATH all of those things look like a mistake. It all reads like tha Javafication of Go.
DJI About to Release Cheaper 'Mavic Standard' Model
For a while, there was a Swift plugin for JetBrain's CLion. https://blog.jetbrains.com/clion/2015/12/swift-plugin-for-cl...

I don't know what the future plans are for that ...
Shades of Larry Niven.
More like you could get on a list that would have you in another apartment eventually (if you lived that long). In practical terms it's no different from "affordable housing" in the US.
same here. apropos xkcd:

https://xkcd.com/1279/

My most entertaining email yet was a group thread that kept track of a young missionary's progress as he traveled through South America. He's home now, so I don't get weekly updates anymore :( I almost miss it.
I always felt that building (on Linux et al.) was a separate skill and that's why it can be frustrating.
I was hoping there would be some machine learning in here. This just seems to be cross referencing a couple of different data sources.
Not an expert, but there is a lot that is probabilities. E.g. many genes play a part in disease, so changing one set may get you a risk reduction but not full prevention.

The other issue is epigenetics. Gene expression is regulated by various factors and that gene expression can be passed between generations.

https://en.wikipedia.org/wiki/Epigenetics
> You can go back even earlier to Twin Peaks

Yep. Or Homicide: Life on the Street.
Any advice for a prospective speaker applicant? I'm an educational video game developer (supermathworld.com) and would love to share my experience and insight into the space, especially the intersection of artificial intelligence, education, and simulated worlds.