skysight-inc/HackerNews huggingface dataset:
Ask HN: How would you make a million dollars, working part time?
Or: How did you make your first million?

I'm expecting my first child, about 2 years earlier than expected, and want to make a fundamental change to how I earn money.

I want to transition from my $160k software engineering job to working 10-15 hours a week, and still maintain a decent quality of life and have enough money to buy a house. A net worth of $1million feels about the right amount to settle at (500k home owned outright, 500k in the bank; enough spare money to risk on projects, and enough buffer to sustain a modest cost of living even if there's economic turmoil).

I've been a developer for ~10 years, senior / leads roles recently, consultant or contractor for most of my career. I started my own business 2 years ago and that unfortunately didn't work out. I plan to start more, and feel like I've got a good mix of design + business + tech implementation skills to back it up. Which leads me to the question: given 6 months, what would you do to establish a income of ~10k a month (post-tax) that only requires 10 hours a week of work. I don't give a damn about becoming a billionaire or disrupting an industry, I want to raise my kids and look after my wife and live comfortably whilst doing so.

I'm currently exploring: (in order of likelihood)

* Productised consulting — I specialise in a couple of areas that I think can be turned into products.
* SaaS businesses aimed at small-medium companies, ~$200-500/month digital products (rather than consumer products).
* A half-dozen crackpot ideas that might spin off and make a few tens of thousands at a time.

I'm sure a few of you have had this same thought, and I'd love to know what you're doing about it.
No, it just takes a miner with >51% mining power. Any of the big pools could do it without flinching.
The spelling is "possession", by the way.
Related: https://aphyr.com/posts/342-typing-the-technical-interview
It's true, Java bytecode was basically designed for small size. The goal was to transmit java apps quickly over the internet, a hope which mostly died off as JS took over, but which in some ways has been reborn with android (dalvik bytecode is somewhat different but is definitely small). The main tradeoff for the small size is a total lack of optimization until the JIT compilation stage.

But there's no way it's anything like a 10x difference. There's definitely something else going on here, like some quirk about how the app store is calculating the sizes of assets.
And how much do you need to spend on HDDs and how many do you need for 900TB of data?

WD 10TB Gold drives on newegg are $414 * 90 = 37260, now you want at least a 25% raid redundancy... $46575... now, you need how many U of space to store all those drives? It's not just something you can throw in a 1U host. Even if you can get 125 drives in servers 12 at a time, you still need at least a 3U * 10, 30U, so that's a pretty expensive hosting proposition, beyond the $50K for drives alone
NSProgress Shortcomings and CSProgress
Yes, really. All you have to do is actually read the SPLC piece on Nawaz, which makes no mention of whatever this incident you're referring to is.

I'm not defending SPLC, which again I think overstepped by targeting Nawaz. But the argument that they did so to prevent Islam from being criticized appears to oversimplify. Their problem with Nawaz is that they believe he's a profiteering fraud.
True, it is not finite. Still, considering the algorithm will not attempt to search the tree exhaustively anyway, maybe the fact that the tree is infinite does not make much difference.

PS. On second thought the number of rules is finite, so the number of possibilities has to be finite, at least if you apply the rules one at a time. It's the iteration of the rules that makes the tree infinite.
Yes, since it is easier to gain 51% of the available mining power. that's why coins live or die by miner adoption.
Swift induces large binary sizes through the language itself. You'd be surprised what a simple optional if let creates in assembly, or how it uses template specialization with pretty much every typed collection interaction or some other standard library interaction. That plus the 10-20+MB that the swift standard lib adds contributes a good chunk. Once ABI stability comes in and a bunch of in progress size optimizations come in, binary sizes will decrease quite a bit for swift using apps.

Apple also encrypts then compresses, which means the binaries you download in the app store are incompressible.

If apple wants to decrease IPA download size worldwide, they would let developers not encrypt their app and just sign them. That would be very relevant for developers of popular free apps. I'm guessing they encrypt then compress so they wont have to re-encrypt the binaries on the users phones once they uncompress an app.

Also all the SV big-co have A/B testing practices with weekly release cycles that induces large line counts in their apps.

I think everyone copied the facebook mobile dev style, which simulates what you can do in webdev. In webdev there is no cost to adding another team for another feature that lives in some section of the greater app, since it's just another webpage. You can create many a/b tests and rollback things nearly instantly. With the weekly cycle everything is under a feature flag and you'll see a bunch of half developed features sitting in the delivered binary turned off via feature flag. This induces code size and creates these kinds of issues you see today.

Also large apps start requiring management structures that I call hallways and elevators. A single indie app can make a equivalent of a 1 room hut of an app, which doesn't require any hallways, elevators, floors, boiler rooms, parking structures or stairs. If you look at the layout plan of a highrise, you'll start to realize a lot of the floor space is taken up by the elevator and hallways.

Once apps become as large as a highrise, then they start requiring code structures that help manage the chaos, such as reporting systems, rollback systems, well defined tree structures and so on. That and the shear amount of rooms they have create apps larger than they look.
The Critical Request – A look at how browsers prioritise network requests
Please see https://forum.sublimetext.com/t/rfc-default-package-control-... for the reason that SideBarEnhancements was re-added. In this case not re-adding it would lead to continued tracking of users, which seems to me would be the more negligent action on my part.
The halting problem, basically. It's possible for something constructed in the type system (not the program that's being typed, like a type declaration) to recurse infinitely and never stop running until terminated.

That said, there's some contention in that thread over whether or not Turing completeness has been demonstrated.
This is a very rude response to a question that wasn't directed at you.
Show HN: IRC client example written in Octaspire Dern [video]
It wasn't that limited. Anyone who got an invite could forward them along. Gmail still being in "beta" was a running joke for awhile.
> I think this is a perfect free market reaction to companies not having voting stock.

It's probably as good a reaction as we're going to get, but what in the world is free market about it?

A free market reaction would be something like: "Active investors decide that Snap's governance will lead to poor outcomes, and avoid it, driving the share price down. Future IPOs pick better governance structure in order to obtain higher share price."

Nothing of the kind happened. This is about a single company making a decision, not about markets at all.
>The export of American values through their media is an incredibly powerful tool.

If American made media is such a powerful tool you think American tax payer dollars would go to something like Mega maximizing distribution of American values through this media, rather than spending (tax payer) money to limit the distribution of said American values.
> The company rewards initiative takers

...

> and be considered for significant work tasks.

Hmmm...it looks like you need to take the initiative instead of waiting to be considered.
Maybe I just don't understand, so could you explain to me how gpg signatures actually fix this problem? Would they fix this problem for npm?

I'm asking about the specific attack detailed in the tweet.
Hard data on the H-1B program does much to confirm Trump claims
We are looking for experienced Java Developers (currently we have devs in UK, Portugal, Canada and USA).
The business doesn't DO anything different.

Soy burgers have been around for 20 years and that has been 20 years of failure.

Vegetarians might not care how the product tastes, especially if they make their culinary decisions for ethical reasons. But this is the first time meat eaters are actually saying that they might use a veggie product just because they like it.

That is a big deal.
npm has about $10 million, so that shouldn't be a problem.
I agree that npm et al should support code signing but genuine question: how would package signing solve this particular issue? This was not a code integrity attack. Presumably the author of the malicious package can sign his code as well. I suspect if the malicious author had made the package proxy the desired package's exports it would have been a lot longer before this was noticed if it ever was.
Is there any service that will handle the backend of the Stripe integration for me? I'm talking about simple charging per product, ex. selling ebooks. Or Squarespace like websites are the only solution here?
The video in this article comes as a relief. When I was a teenager, sitting in the backseat of my parents car I saw something exactly like that. Nobody else saw it; there were no reports of a meteorite, and I always worried that it was a dream I was unable to separate from reality. I am sure now that I've seen ball lightning.
Maze Algorithms
5% at Bitcoin's level of volatility is not a dip.
Maybe you weren't charging enough?
> Foreigners on foreign soil have no rights as far as US law is concerned.

Except for, you know, treaty rights. Which there are a lot of.
I haven't listened to music since Grooveshark shut down.
That is a pretty sweeping generalization to make. I've been sick with ME/CFS for several years now and I've never come across another patient dismissing psychological illness as not debilitating. Instead, many that I know have premorbid or comorbid psychological illness and know firsthand how debilitating psychological illness is.

If a person with OCD was told that their illness was due to poor lifestyle choices and that they could be cured of their OCD if they just stop believing they have OCD and that they just need to get to sleep on time and get a bit of exercise, they would probably not appreciate that. This is how people with ME/CFS are treated by many health professionals and medical researchers. There is a large and influential group of psychiatrists that posit that the disease is caused by nothing more than the belief that you have a disease. This is why there is seemingly an intense backlash against psychiatry and a frantic hunt for biomedical proof in ME/CFS.
Show HN: AWS Cloudformation dry-mode with ansible
Big blocker frustration has been bottled up for years and now it's all coming out at once. It's going to be messy.
They probably just stop listening to music if it gets too hard. I haven't bothered with anything since Grooveshark died.
This is an interesting thing, but, in response to the US applying their laws supraterritorially[1], the EU has decided that the EU GDPR will apply supraterritorial (aka, everywhere, globally, as soon as an EU citizen could be affected).

So, if you're outside the EU, and you violate it, you might suddenly experience that your bank accounts get frozen.

[1] Just look at the recent case where US citizen sued Saudi Arabia in a US court, and the US senate overrode a veto of President Obama to allow this to happen supraterritorially.
I don't think Turing completeness is necessarily bad here.

When speaking of a general-purpose language you usually want it to be Turing complete. However, you may not want a single subsystem of that language to be Turing complete on its own. That's a lot of complexity for one thing.

Another reason you might not want a Turing-complete language inside your language is it'd be possible to write type declarations that do things semantically separate from the rest of the code. If you're looking at a program you typically think the only logic embedded in the types is constraining the way data is used in the program. All the code to actually do things with the data is elsewhere. If you have a type system that is by itself Turing complete, it could do any calculation someone wanted to encode into it without assistance from the rest of the source code. That's potentially a security nightmare to audit.
This is great, love it. Even if it doesn't match up with the text quite right, it's still entertaining
Do let us know how much more viewership you get after posting this on HN

Or better yet, write a blog post about it
Sean Spicer: POTUS briefed on Fox News Seth Rich Murder Conspiracy Report
My phone currently only manages 2 non-default apps. If it could actually install to SD like it promises I'd be happy.
The SPLC piece is kind of an unsubstantiated hit piece:

> But major elements of his story have been disputed by former friends, members of his family, fellow jihadists and journalists, and the evidence suggests that Nawaz is far more interested in self-promotion and money than in any particular ideological dispute.

The only concrete fact is that we received a bunch of British government funding. I don't know a lot about the guy, and obviously I don't stuff about surveillance. But wherever the line is for extremist, he's nowhere close.
That's actually an interesting issue I had with it, in some versions that actually didn't work. But, somehow, now it does, and I don't know why (haven't read up on it yet).

TL;DR: Can't tell you how, but it somehow works.
They should first get package signatures implemented, it's a bigger threat to the npm community. At worst, the mispelled packages effect a handful of people who don't double check the package name for the package they're installing. If someone compromises the integrity of an ultra popular package, it threatens thousands, perhaps even millions of people (counting all people consuming the code downstream, ie users). And the npm repo has been shown to be vulnerable to compromise multiple times over the past few years. Here's a writeup of just some of the more egregious security weaknesses of NPM packages in recent history: https://www.bleepingcomputer.com/news/security/52-percent-of...
Don't worry, he has been meticulously collecting evidence and can prove everything! Unfortunately he can't post it just yet, but he'll definitely post it soon! Maybe next week! Or next month! But it's gonna be huge!!!
If you have BBC iPlayer, "Carnage" is a recent mockumentary set in 2067 that explores a similar topic - the end of meat.
Right but I think the parent's point was that, at the moment you're relying on someone to exercise judgment about which shares are too dangerous to be in the index, that's indirectly a kind of active investing.

FWIW, I don't think that concern applies here, because it's a judgment about share uniformity, not performance.
Show HN: Basic Tkinter based photo viewer app
Running gofmt in Browser with 10 Lines of Code (Using GopherJS)
That can be solved by setting a reasonable upper bound on how many types can be nested.

In general, having a turing complete type system isn't a major issue, many languages have that property.
It doesn't. They's not the problem being solved by signing. In all likelihood, if an end user got socially engineered to download the wrong package, there's very little to be done.
Perhaps the install process can do a search and display similarly named packages, and the users could be more alert to irregularly named ones?
>If you really want to own a stock that gives you no profits, no income from dividends, no voice in how its run, and actually no value what so ever other than the greater fool theory then go ahead.

If anything ICOs would show you are underestimating the demand for meaningless stock.
The point is that this qualifier - that research must be "worth publishing in a reputable journal" - imposes significant constraints on what kind of research may be attempted to begin with.

An hypothesis that is too far outside of mainstream accepted thinking may not be studied, if it seems (to the people proposing the study or the people considering funding it) like it will be too hard to get it through peer review or editorial review.

I'm not suggesting this is necessarily a flaw in the system; it is healthy that there are constraints on what kind of research gets funded, and for things that are way outside of established thinking, the bar should be higher [1].

But it does mean there will inevitably be a gap - quite possibly a very big gap - between what has been "proved to work" and what can be effective for those who want or need (like myself) to take matters into their own hands.

[1] Problems like politicisation, egotism and bullying are often said to be rife in scientific research institutions, so it's questionable whether the system is as healthy as it could be, but that's a separate discussion.
And reinstated within a day. That's how reporting content works at scale - it takes a minute to get it right.
Evolution of xptemplate (Gource Visualization) [video]
I'm guessing maven feels safer because its packages must be compiled against a specific interface and few if any execute any code during setup. Maven is rarely if ever used to install interactive tools like npm very often is. Maven is not a reasonable analog here.
The current version on Github is clean (telemetry removed). You can always fork it yourself, or just download the repo files and add to Sublime Text 3\Installed Packages.

If you have the .sublime-package file still, you can unzip it to that directory and modify the extension
Its quite entertaining reading so many comments on bitcoin and crypto currency ..None of you ,and i mean none of you understand the first thing about the entire concept..while all of you invest in ICOs you have to turn your hard real currency $ /£s etc into bit coin ..creating more blocks to be mined ..THEN YOU SUBSCRIBE TO NEW ICOs ..which if you really looked into them are often run by the same groups of people ..Just check the name and image match on the white papers..the ,the price of that ICI moves an people trade out into BTC ,creating more BTC and whatever coin you have traded mineable ...All of you hoping to get rich ...The miners of course are making money ..usualy using piggy backed IP addresses so they don't use electricity ..The mining systems software sellers are all making..the exchanges are and the miners are ..The bigger the player the more they make and only release small broken quantities onto the market for more to be mined ..the $100 billion value of crypto is not much..But the whole concept is trading currency and information blocks cheaply ..When the mined coins run out ..what will the commission be ,much more than existing ..however all the big players will have made a fortune off all the small players suckers enough to believe the cleverly worked hype of the big players ..NOOne will tell you differently ..But That is why satoshi mined the first million coins ..because he didn't want so much easy coins floating around and also why Vitalik Buterin looks so sad at all ICO meets ..because he suddenly found out he was dealing with organised crime
This already happened (probably many times over). I had success with the original mp3.com 17 years ago. They made certain business decisions that got major labels angry and various details not important, they shut down.

What matters is that tons of stuff disappeared. I learned that I can't trust these types of platforms because they are for-profit and may screw us all over or make stupid decisions. I also can't trust non-profit options if they aren't really stable. I trust Wikimedia to stick around, and archive.org and some others (although everyone should donate to keep them strong!), but other, I dunno.

Instead of fully embracing SoundCloud, I've basically stayed distrusting and my creative publishing actually suffered a lot (although my concerns are part of what led me into understanding free culture, free software, etc. and why I'm aware of Hacker News now etc)
The usual way code-signing is used here is that code for a platform is signed with keys issued by the platform manager acting as a CA, who does identity verification at time of issuance. Thus, if the platform-as-CA revokes someone's code-signing cert, they're effectively banning that person (rather than just that pseudonymous identity) from ever publishing on their platform again.

It not only works after-the-fact, but is usually also quite effective as a deterrent to stop people from publishing malware in the first place (except state-level actors who can afford to create and burn real identities for the sake of cyberwar.)
Thanks! an insider tip: you can add # following a search term to change the meaning of your sentence. For example: you are so beautiful #ugly
The block chain offers the following unique benefits for asset transfer:

- Assets move directly between entities — transfer and settlement are one-and-the-same — eliminating counterparty risk (https://en.wikipedia.org/wiki/Credit_risk#Counterparty_risk)

- Assets move instantly, and settlement time is ~10 minutes (settlement can also be instant if the parties trust the other won’t “double spend”)

- The transfer mechanism is public infrastructure and is always improving — everyone has a shared incentive to make it better, similar to Internet protocols like email and http

- Assets and end-user data are privately controlled, and strong security for assets can be achieved by using multiple signing keys across several parties

- Policy rules about the movement of assets can be enforced programmatically — whether those are “terms and conditions” or regulatory requirements

- Assets are fungible and play nice together — e.g., you can use reward points to buy mobile minutes

- A single transaction can include multiple entities and assets, on both sides of the transaction — e.g., you could execute a merger of two companies in a single transaction, with the inputs to the transaction being all stockholders across all share classes for both companies, and the outputs being all the newco shares going to all the new stockholders (again, no escrow service needed)

- Every transaction is added to an immutable record which, while anonymous, can be used to construct a perfect audit trail of an asset’s movement when combined with the private data held by the entities using the system — this defends against fraud, and also gives issuers transparency into asset movements

- It’s easy to integrate new parties

- Like the Internet itself, it’s a global system

Worth a read: https://blog.chain.com/wall-street-meet-block-chain-b2747909...
> Would love to see a better source.

https://ods.od.nih.gov/factsheets/Iron-HealthProfessional/

> - Nutritionfacts.org is non-profit - Their conclusions are based on studies. - They're not trying to sell supplements or food products.

IMO: Your website is trying to sell a lifestyle. Their conclusions are made in advance; then they attempt to rationalize them with studies after the fact.

> Do they omit certain studies that contradict their overall conclusions? Sure. That doesn't mean anything to me.

That is a major red flag in science reporting.