skysight-inc/HackerNews huggingface dataset:
Hard to contribute any more to this. Most of the pros and cons have been given, and are well known anyway.

The problem space should probably be constrained to, pros and cons of joining a startup in 2018, in SV, now vs 3-5 years ago. Otherwise this isn't going anywhere interesting.

My take on it is, founders should be encouraged to only take 3x equity of early employees, not 10x or 20x. This risk is the same, and the founder's contribution is generally small relative to their equity. Ideas are plentiful. Execution is hard and matters the most. A founder cannot get it done by themselves, the entire early team really, really, really matters. And the typical founder is so inexperienced as to really lack what it takes to execute. The point of only taking 3x is not to penalize founders, it's to recognize the early people. It will help equalize the financial problem of joining a startup.

The second major problem is that there are too many startups. I'd suggest YC should halve (at least) the size of each class. Y'all (incubators, angel funds, etc in general) are throwing too many darts for your own benefit, to the detriment of the actual employees. By over-stretching the talent pool for startup employees, it discourages top talent from joining because they know it's that much harder to recruit the best.

I'd suggest also that YC fund/subsidize shared housing situation.

I hope that my comments address specifically problems of SV and problems of 2018.
No, plants crave Mountain Dew
Would love to see an official response. Mozilla has worked hard at adding multi-process, and improving security all over the place, such as at the level of internet protocols and infrastructure.

His focus on memory security is just his personal bias as a systems engineer writing in C, and this focus alone does not provide a comprehensive comparison.
Another development: two top executives of Audi are being investigated, and the prosecution has executed search warrants on their private homes.
Revolut/Monzo/Starling don’t charge it
What It Takes to Discover Small Rocks in Space
Just to state the obvious, there are things to optimize for other than compensation (like happiness); ~$100k/year provides a comfortable life and saving opportunity in many (most?) parts of the country.
This is a bit nuanced, but i'll try to be brief:

- housing in the bay area is substantially more expensive now, so you need to already be pretty qualified in your role to justify your cost
- this partially goes against Paul Buchheit's old point that startups allow you to do work you'd otherwise be unqualified to do
- because startups work on building (rather than maintaining) products, the tech skills that startups want are different from the tech skills engineers in big companies are using
- universities aren't really making up the difference

Options:
- YC makes its own university for engineers/scientists

This goes along Alan Kay's point about not relying on vendors. If there's a particular skillset that YC cos want early engineers to have and people don't have it (at the scale YC collectively wants), it may make sense to teach it.
Well... If you can get 400k per year semi-guaranteed... that puts you in a certain category. I don't think that's average though, even in sv. Anyone making this kind of money (regardless of industry) usually has limited options for employers that can match it.

I do agree there's a problem with early employee comp. They don't have anywhere near the upside founder's do, but may be taking more risk on their equity than later employees. Personally, I think the best solution would be to create some liquidity for employees. 5-10 years, if you're still around is just too long.
Famously outspoken developer is mildly outspoken? I am shocked!
> I doubt firefox will ever focus on security. The security mechanisms we
are talking about require breaking compatibility or performance. This
isn't the stuff one rearranges deck chairs for.

They seem to be willing to break compatibility as illustrated by them ditching their massive library of legacy extensions.

He seems to somewhat contradict himself by saying Mozilla won't do things to improve security then describes a security feature they have implemented for JIT that Chrome has yet to provide.
My point is they could have in real terms, just not nominal, although I'm not familiar with the fees you're talking about in the first place so perhaps I can't really compare.
Bethesda's Skyrim Very Special Edition Can Actually Be Played on Alexa
Show HN: Scrape and backup your website to the wayback machine
Hmm. When we did our ikea order in late 2016, it was $99 for as much as we wanted.
> You need to avoid things like winner take all markets.

i love this idea.

yet, it seems like the whole point of startups nowadays is to become the winner in the winner-take-all market. and VCs seem to be looking for that kind of play mainly. and markets become winner-take-all with alarming frequency.

so, it's like, how do we get to the kind of market with room for multiple long-term, profitable players?
Here are a couple of articles that might help with regards to calculating your equity payout:
https://codingvc.com/valuing-employee-options
https://medium.com/@jamesseely/eshares-option-value-calculat...

I'd also really encourage you to talk to the founders of the company about this and ask them to walk you through their model for how much you should value your equity.

Our advice to founders is to walk every employee through a model that estimates the value of their options under different scenarios.
What problems did you solve and how were they solved with your new format? I'm neutral in this argument at this point, so I'd like to hear your justifications. Thanks!
I agree with this too. There is a tier of engineers that are good, but for whatever reason, can't get into the big 5. They're bad at white-boarding or maybe they don't live in an area where the big 5 have offices.

In those cases, maybe a startup makes more sense.
So well put. Startups in 2018 make economic sense iff you're not CS-ish enough for the big apes, or live in a location they have no presence in.
Travel Agency Fraud – Preying on Mission Trips
This is a bit frightening while I admire the effort I would not want any cars with a hacked self driving capability on the road and I would fully support full enforcement of this restriction.

The concept of level 3 in a multi-agent open environment is flawed as it is and this to me just spells more trouble than the already potentially flawed and provenly limited manufacturer integrated L3 systems out there.

Sorry but taking this on the road without a permit and without precautions like leading and following vehicles that box you in to prevent non participating agents form being in close proximity to you is nothing short of reckless endangerment.
> Are they though?

Yes, they definitely are. Trust me on this one.
There might be potential bias here - people who work at intense startups probably don't have the work-life balance to browse HN and comment on here right now. /semi-sarcasm
> view it through the lense of risk management than any sort of value judgement of crypto currencies.

That a third party is involved in deciding whether or not a purchase is too "risky" to allow is precisely why I want to move to cryptocurrency instead of banking.
Happiness doesn’t provide good health care to my wife and kids, or help me retire years earlier (I get to save >$100k/year because we live in a low cost of living area). I suggest a hobby if you want to be happy, as well as time with your family and loved ones.

Be careful about those who offer you emotional fulfillment or purpose in your job. There’s always a cost.
I can't figure out what their modified version of the Yahoo Benchmark is. Does it still involve Kafka? Does it still involve Redis? Did they only generate tuples in-memory for SABER and the other systems pull from Kafka?

The Yahoo Streaming Benchmark isn't really much of a streaming benchmark, its a "reading things off of kakfa, deserializing JSON, sticking things in Redis benchmark". Really not a good benchmark for understanding the system at test.
Maybe it was more a lack of the DOOM source code or know-how?

According to https://en.wikipedia.org/wiki/Instructions_per_second#Millio...
the ARM2 at 8MHz was 4MIPS. The 386DX at 33MHz was 4.3MIPS. The 8MHz 68000 was 1.4MIPS.

Of course there could be other things that made it hard, such as too few bus cycles when running the 8-bit chunky graphics mode? Or that sound did not use DMA(I don't know if the Archimedes had sound DMA) or that the CPU had to mix samples instead of the sound hardware doing it?
I guess if all you ever need is the press release you're golden.
> I just don't see the attraction of joining a startup as an early employee. You can learn a whole lot from a "usual suspect", where the world's experts reside, and a whole team of competent and hard-working people are also.

I’ve noticed people tend to specialize at larger places, and not everyone wants to go deep rather than wide. Startups are a super easy way to optimize for a wider skill base, albeit at a sharp cost of depth.

YMMV, but it depends on the type of education you value.
He undermines his message at the end, talking about airport security lines. They are irritating because they are BS, meaningless security theater, from beginning to end. They are stressful because they create uncertainty about whether we will miss our flight, and whether we will have our property confiscated, or be incarcerated for things we have no control over, or our pants will slip down when we take our belts off.

Security theater is there to create the impression that something is being done when nothing can be. The stressful experience is the entire purpose of the operation.
Sorry, since when did credit card companies start discouraging reckless spending behaviour? This is dimension C-137 right?
We've updated the title from ‘Theo de Raadt on Firefox security: “all I see is lipstick on a pig”’. We'd rather use a representative phrase from the message, if someone can suggest one.
I bet they mean financial risk, as in personal investment in their own company.
Streamr!
Why being easily distracted can be a very good thing
>The CIS is a dubious source, at best, on immigration matters.

Oh they're certainly biased. That's why I said "it can be argued".

>If not an outright hate group

SPLC plays way too fast and loose to be taken seriously anymore: https://www.nationalreview.com/news/southern-poverty-law-cen...
It was directly related to #2, but I only made it there as a result of reading some other article. It has been a while and I don't remember the source.
Just last week, I heard a member of a minority say "The idea that minorities can't be racist is itself racist." That is, you're saying that minorities are less than fully human if you don't think they can hate as well as anyone else, and for the same reasons as anyone else.

The same is true of sexism. If you hate people because of their sex, that's sexism, and it's wrong, full stop.

She does have a point that men as a group have too many members who have taken actions that tarnish the reputation of the whole group. But her response, if men responded that way, she would be the first to decry it as sexism.
You're being deceived. The price you pay is either baked into your monthly bill or comes in the less tangible form of reduced competition for those zero-rated services (i.e. startups have a much harder time entering the stage).
Blocking transactions with particular vendors as well as classes of vendors is part of the current system of managing risk. Banks already have arbitrary power to decide what transactions to allow.
Moving a lot of critical code to a memory safe language will be a cool advantage for Firefox, performance benefits aside. That being said, I think it's easy enough to see why Chrome may have a lead given that it indeed was designed to be secure from the get-go. I hope Theo is wrong here, and that things are getting closer, but I guess time will tell.
Credit card companies have closed other “buy money on a card and get rewards points” loopholes, I just see this as another such loophole.
AlienVault | Product Manager | Austin, TX | ONSITE | https://www.alienvault.com

AlienVault was founded to help organizations of all shapes and sizes achieve world-class security without the headaches and huge expenses of other solutions. If you have network security experience and “BlackHat” doesn’t first make you think of noggin protection, please reach out!

In particular, we’re looking for a product manager with prior network security experience to help define our roadmap for security capabilities and threat research focus. Qualified candidates must have a bachelor’s degree in Engineering/CS, prior product management experience, fluent in network security technologies and approaches, and a passion to deliver exceptional products and user experience.

Interested in joining the Alien Nation? Please apply at https://www.alienvault.com/who-we-are/careers?p=job%2Foc185f...
I think the open secret is that in 2018 most people who go work for startups are those who simply couldn't get a better offer from one of the big players.
privsep? W^X? Can someone post a link or two? :)
What happened to enforcing trademark rights on the USB logo? Just about every obviously non-compliant 10m long USB extension cable or retractable power-only cable has the USB logo on it. Sometimes it's a bastardized form but it's basically still the logo. If they were more aggressive in eliminating these products from the market, even one-man Amazon shops, then at you could look at the logo to decide if it at least meets the spec.
But the startups will suffer in the same way.
Win10
Seems FB has a pattern of releasing open source projects that have naming conflicts. Another example: yarn
easily displaying many dashboards within your office is something that I haven't found any off the shelf solutions for. Our office has 20 tv's with chromecasts all displaying specific dashboards, but it took coding effort to get it to work.
The paper claims the opposite: "[...] jaggedness is greater for the modern, deeper, networks compared to the less modern VGG16 network. While the deeper networks have better test accuracy, they are also less invariant."
The first 2/3s of Seveneves were pretty good. I think you can reasonably skip the last 1/3 of the novel. Anathem is definitely his best written work. Don't bother with REAMDE.
The pre-2015 net neutrality rules you're referring to were put in place in 2010 by the FCC under then-chairman Julius Genachowski.

https://en.wikipedia.org/wiki/FCC_Open_Internet_Order_2010

The key about the 2010 rules is that they did not reclassify ISPs. These rules were similar (actually much weaker) to the 2015 rules, but they were issued under the authority the FCC claimed to have over Title I services. As most here know, from 2005(ish?)-2015, cable/fiber ISPs were regulated under Title I.

ISPs sued and argued that since they were Title I services, the FCC's 2010 regulations were illegal. The judicial system agreed (Verizon v. FCC 2014). The solution to this problem -- the court explicitly told them this -- was to reclassify ISPs as Title II services; FCC would then have the proper legal authority to re-issue their NN regulations. Wheeler's FCC did this in 2015.
.. And make an absolute fortune on chargeback fees in the process. What problem?
Yes, they do lots of checking. But still, I don't see anything clear beyond the association of newspaper shutdowns and increasing bond rates. Nothing about mechanism except speculative argument. This is very much like epidemiology. And the literature is loaded with retrospective studies that found correlations which turned out to reflect selection bias and/or confounding. You really need prospective studies with carefully matched controls.
Needed the access for Firefox OS APIs. Nothing to see here.
What does this do differently than whatever archive.org is doing already? I've never submitted my site to them but it does appear in their caches.
privsep isn't "memory security".
As usual, the republicans work against the will and simply against the American people. The environment, the Internet, the economy. Just vote the SOBs out next time around, please.
What about Ryan Air?
I'd like to see a reasonably-standard C++ API specification for at least a few graphics-related things (and perhaps more over time), but am not sure if writing a graphics API with the sole goal of eliminating all other APIs or libraries, would make any sense. The people with whom I've talked to, some of whom have done work on P0267/io2d, don't seem to be explicitly aiming for this either, but perhaps I've missed something.

I'd be happy to see vec2/vec3/vec4 style APIs in the C++ standard, too. P0267/io2d does have some support for this, although I think it could certainly stand to get some love + attention!
Former franchisee here - absolutely not true. The vast majority of Domino's are owned by individual franchisees and almost none of them had a corporate car.
You had your wallet on you where? Presumably not in your hand, but in your pants. Your pants weren't affected much, either, even if they were also made of cotton. Why would you expect the banknotes to be different?
Privilege separation and Write XOR Execute. Both have Wikipedia pages.
Well, surely you put the line somewhere? Would you depend on `leftpad`? How about `is-odd`?

Your view of dependencies is very idealistic. And if I'd venture to guess - apologies if I'm wrong - young, at least to programming. I'm saying this because you don't tend to hear such phrases once reality hits.

Everything you said can be flipped:

> If I import this code in my codebase directly instead of using a library, it suddenly becomes my "responsibility" if it breaks.

I have full control & understanding of the code; I can adjust & trim so it fits as much as possible. If it breaks, I can fix it directly.

> And when we're talking about a FOSS side-project, I don't have that kind of time.

Copying/hand rolling some trivial code is often faster than deciding among a dozen libraries which do the same thing, reading their docs, their issue pages and open PRs, adding and integrating to my project.

> Third-party libraries means I get any improvements and bug-fixes for free.

I must keep the dependencies updated. I must read changelogs and hope nothing breaks.

> And if it breaks, I get to talk with the original maintainer to figure it out

I must use inefficient communication with a more-often-than-not absent maintainer in order to resolve my problem instead of fixing it directly.

> I suddenly will be alone trying to figure out what I did wrong

I am able to be self-reliant in fixing the problem, because I wrote the code and I understand it.

I do not have to trust the maintainer of the package or the maintainers of any of its transitive dependencies to be competent or non-evil.

---

For some things this is worth it. IMO for generating 16 random bytes it is not worth it.
Basically, startups started taking more funding, and VCs realized there was more money to be made, so they're squeezing the little guy with terms.

A small startup taking less (or no) funding can 'afford' to give more equity to employees, who are effectively providing the capital (in the form of labor) to the business. Today's startups taking huge amounts of funding AND cheap labor are trying to have it both ways.
So Interesting  2 Pieces / Group 17 CM Mini Animal
If you want to look the average comp at FAANG or any well-paying public company it's "only" 250k. That versus the average case at a startup being closer to 150k (average options are worth 0).
https://en.wikipedia.org/wiki/W%5EX:

>W^X ("Write XOR Execute"; spoken as W xor X) is a security feature in operating systems and virtual machines. It is a memory protection policy whereby every page in a process's or kernel's address space may be either writable or executable, but not both.

"privsep" stands for "privilege separation", which is fairly self-explanatory. See https://en.wikipedia.org/wiki/Privilege_separation.
Risk of not being employed by big-paying corp + risk of not having that big-corp on my resume which consequence with the risk of being unemployed for 3-5 months once startup is gone + risk of working nights and w-ends because of reasons + risk of having a tiny network for my next job hunt + risk of pivot every N months + ... maybe I should really quit my startup and apply to Bezosland.
So, if I understand this correctly, because Merriam-Webster or Oxford give only the mathematical definition of "idempotent", neglecting the one from computer science or distributed systems, that makes the question about idempotency a matter of opinion?
How is the interchange fee different from the merchant fee? Can I take cards for 0.3%?
Counterpoint, deferring maintenance is a classic way to make an unbalanced budget look balanced. A realistic accounting would show that you are steadily headed towards insolvency, and the budget needs to be fixed one way or another. That could be increasing revenue, it could be decreasing services, it could even be reducing the number of paved roads if your muni is really in crisis.

I make no accusations of stupidity or incompetence. My belief is more along the lines of the citizens have unrealistic expectations, e.g. how many miles of road their muni can actually afford to run & maintain for the taxes citizens are willing to pay.
More like encouraging the creators of IKEA furniture assembly instructions to read lots of other instructions so that they can get better at writing instructions.

An analogy for improving one's ability to assemble IKEA furniture, using this pattern, would be to watch others assemble all types of furniture in order to improve your own abilities. Wouldn't it?
You could put literally anything mobile onto train tracks for similar effect. Trash cans. Skateboards. Stolen bikes. I don't see how bird scooters increase this problem in any way.
The beauty of hindsight ... it's 20/20, let us never forget that :)
You’re missing the point. They were spending the banks money, not their own, and they are struggling to pay it back.
How will you raise money for investing from a crypto?
> It wasn’t love of food that led Bourdain to the embrace of a shared human experience, of a world merely hiding its great commonalities behind vast and obvious culinary variations. It was the other way around. Tony was intensely political, a man always aware of those at the margins, or those for whom wealth or status always avoided

> He knew everything ... I don’t mean he knew everything about food or cuisine or travel or even world culture. I mean that for having come up in kitchens, without the formality of any higher education, Tony Bourdain was simply an autodidact. He read voraciously and widely. He read things that were relevant to his work and he read things because he simply wanted to know everything a man could possibly know about a given subject. I don’t mean he read the canon for literature and enough non-fiction to be current or relevant at parties, I mean he read the obscure, often turgid stuff that academics wade into when they want to know the last fucking detail about something. As he was about so many things, he was obsessive about what could be learned and known.

Thank you to the essay author and HN submitter.
Yea this is the big one. Even a good exit won't be able to compare monetarily.
No healthcare at a startup.
W^X is simply the idea that code segments are either writable or executable, never both simultaneously. It does limit some attack surface area. That being said, while it'd be a welcome addition to V8, it almost definitely would come with some performance cost and a complexity increase, whereas Chrome has focused on sandboxing the JIT in such a way that gaining access to the JIT would not get you very far. So, while layered security is almost never a bad thing, I think that it's possible this trade-off is not a terrible one for Chrome security.