skysight-inc/HackerNews huggingface dataset:
I'm not sure but I think you may be right because the researchers have been granted access to some IBM cell libraries. (I was wondering why IBM agreed to this, but this probably explains it.)

My understanding is that the main concern here are chips in COTS equipment bought from countries that are considered by some to be untrustworthy.
Ask HN: Do you use the same Analytics code for your blog & mainsite?
Do you use the same Analytics code for your startup's blog as your startup main-site? Presuming that they are both related and branded identically.

The more deeper and point and question I am not asking is, while it might be nice to say that your startup is drawing in 20k+ uniques a month, if the majority of those come from posts you make on your startups blog, you can't really regard them as "interested leads which are targetted" can you?

While you could create segments to ignore your blog, would you regard it as easier to just segment before the fact, and just go for two UA codes?
We used client certs in my last project, a private cloud document storage API. Big mistake! I probably spent a quarter of my time helping other teams organise their certs.
Friend challenged me to develop an APP in 2 hours with HTML5.
Way too few startups use price anchoring strategies when presenting their prices - the iPad intro is definitely not the first, but possibly the most well-executed anchoring I've ever seen.
If your product is disruptive in the sense that it potentially can replace a more expensive existing solution, you should simply point out the math - the higher the original number, the better, as even the higher price points you've been thinking up for your product will seem small.
Interestingly, anchoring can also work outside of mere price comparisons. That is, sometimes it's enough to just present high numbers to effectively prime customers towards higher price points. The most famous example is Kahnemann's classical experiment on using subjects' (obviously random) social security numbers for anchoring:

"...an audience is first asked to write the last two digits of their social security number and consider whether they would pay this number of dollars for items whose value they did not know, such as wine, chocolate and computer equipment. They were then asked to bid for these items, with the result that the audience members with higher two-digit numbers would submit bids that were between 60 percent and 120 percent higher than those with the lower social security numbers, which had become their anchor."
http://en.wikipedia.org/wiki/Anchoring
Nobody adopted them (my opinion, not sure what the official take is). Don't think anybody understood them either.
I had a very similar idea to, been working on it for a while. We pivoted a little. t

This seems to be a very popular genera right now, maybe it has to do with how easy it is to create a photo app?
Although not open source:

- content is openly CC-licensed

- some components are open-source, like their thin ORM

- the SE team regularly and openly discusses about their architecture through their blogs
This is just the thing I love to see on Hacker News. Every time you see this I remember why I spend all those hours hacking and learning. Really lights a fire under your ass.
Wait, aren't you the same guy who got into trouble at the US border while crossing from Canada?
Artist and Hacktivists Sabotage Spanish Anti-Piracy Law
While I think DHH is a very good developer and conributed a lot to the community (more than majority of us ever will), I still think he's becoming a web diva. Richard Stallman is getting company :)
I created my first POC of a single-page app using #Node.js #Backbone, #MongoDB
I created my first POC of a single-page app using #Node.js #Backbone, #MongoDB, CS, #RequireJS and TW Bootstrap.

Comments, improvements and questions are welcome!

I managed to test Models and Collections from console executing require(['collections/posts']) and require(['models/post']).
I'm also using Twitter Bootstrap.
You can check code in github http://bit.ly/xBLemw
I don't agree with this–or maybe I do. It's hard to tell without knowing what he means by "testing your price with customers".

I think asking customers "what would you expect to pay for this?" should be part of your initial usability or beta test with potential customers. 2 Reasons for this: (a) your target market has certain price expectations for products and (b) you might "tell them" what to pay and still be too low.

I just did this with a new product we launched. My lowest plan was priced at $9/month. We did a usability test with our target market and ask them (at the end) what they expected to pay for a product like this. Only 1 person said a number lower than $20/month–and they went as high as $100/month.
I had the same experience -- it's so simple and beautiful to use, BUT every time I encountered a merge conflict it somehow wouldn't accept my resolutions, and kept re-generating the same conflict. I'd tried it both in "sync" mode, and in normal push/pull mode, and both of them kept corrupting my repository somehow.

After this happened three times, I switched to SourceTree, which I haven't had any problems with. I think the #1 priority for GitHub for mac is to get the Git functionality itself actually working flawlessly.

(Plus the constant random "empty dict" bug messages, etc., that pop up at random times during the day, even when I've just left it in the background!)
Ask HN: Do you think Windows will eventually use Metro as it's only interface?
My friend and I just have a debate over whether of not Windows will eventually use the Metro interface in favor of Explorer/Ribbon (As in Explorer eventually no longer existing, leaving us with tiles.). My friend thinks this will eventually happen because the end user is usually watching YouTube of browsing the internet. He also thinks that services like Steam/Origin may eventually use the Metro interface. He also believes that developers will adapt to a Metro style IDE...

I feel that explorer will always be around because the need for complexity in business apps. I feel that developers would loath the cuteness of the Metro interface when trying to debug an app. Or for example, hospitals, and business networks that use very complex software for data management. I also don't feel that developers are going to like tailoring their applications to the Metro interface.

Do you think that Microsoft will offer a Metro only version of Windows? They're already removing Explorer use on tablets. Or do you think Explorer is here to stay?
Can be defeated by earplugs or a bit of training. Seriously not a concern.
Show HN: My one-sided anonymous chat site reached 120K+ members with only viral
"... your lead guy gets blown up and you spend the next hour or so casevac’ing [ed note: casualty evacuating] him ..."

that's CASVAC. Correct pronunciation. A portmanteau or joining of "CASualty" and "EVACuation". The difference b/w MEDIVAC and CASEVAC? The former is by medical vehicle, the later ad-hoc.
Can you tell reality from Konami's Fox Engine?
GM suspending Chevy Volt production due to low demand
The term I was thinking of is "knock-off artists."

I don't like what they do. It's ok to take an existing idea and adapt it. E.g. to try to make a web-based version of a desktop app. But there is something contemptible about copying something so literally that you even copy the mistakes.
You will get more than 8 hours with just the 9 cell, which will bring it to under your weight - http://forum.thinkpads.com/viewtopic.php?f=43&t=98466

You don't need the 9 cell as well as the plate - it was just a suggestion if you needed more.
Of course, the real problem is crappy metrics. And this is why "teach to the test" is given such a bad rap.

If the tests were actually well-written, testing all sorts of critical reasoning and problem-solving abilities, then teaching-to-the-test would be the correct strategy, and metrics would be tremendously useful.

It makes me think somewhat of exams used for foreign students of English. The American TOEFL exam is extremely limited, and test prep can be extremely effective, without actually improving your day-to-day English. The British IELTS exam is extremely wide-ranging, and test prep is basically worthless, because it really does a good job of testing your English. To improve your test scores, you truly do have to improve your real-world English.
Japan invents speech-jamming gun
Whoops, yes. The original wording of my comment was the definition of TL;DR. The point I was trying to make is that in this case, the first paragraph of TFA was its own TL;DR, so GGP was particularly redundant.
Cleo (technology behind LinkedIn's typeahead search) open-sourced
Installing Active Directory on Windows Server 8
Isn't this the same problem as SSH keys though? I already take care to bring my SSH keys with me where ever I go and have an agent to handle them. In fact, if I could get the browser to use them for authentication I'd be thrilled.
This has happened to me before wrt software I've written. Them: "Do you have any qualifications on $FOO?", Me: "..."
I wouldn't worry about the age thing. In terms of pure skills, a designer who can hack one of the most valuable roles to fill for any consumer web/mobile product today.
Our Experience With jQuery Mobile and Sencha Touch - http://blog.roveb.com/post/17259708005/our-experience-with-j...
I don't think that there is anything terribly indirect about linking (explicitly) the blood of common Americans with hawkish politicians.

An intellectual argument is irrelevant in the face of the masses--by definition, half of them are of below-average intelligence, yeah? So, we should pursue policies that make it concrete--even to the slowest citizen or smartest zealot--that there will be immediate, personal sacrifice for any military action they support.

I would also question the analogy to women and minority rights--neither has particular import here, and only muddy the waters. War is an issue that has faced all states, regardless of race and gender; it is somewhat misleading to treat it as something that may be "overcome" like a silly cultural preference of the West.

"In fact, my fear is that my generation will be unwilling to take preemptive offensive action when it is necessary (e.g. to prevent untrusted parties from acquiring nuclear or biological weapons)."

This is also a place where I think we differ in viewpoint.

Why is it so that Pakistan can have the atomic bomb, but not Iran? Why Israel and not Iraq?

I do not live in fear of my fellow man because he is armed--I only am worried if he is actively hostile. If your state does not pursue hostilities, what does it matter what they have in their stockpiles?

I believe that the bigger threat to my (apparently, our) generation is to continue to live in fear of terrorism, war, weapons, and each other--so many problems would go away if people would just accept that some day their ticket comes up, and do the best that they can in the meantime.
That says 'discipline' and 'military forethought', but it doesn't say 'civilised society'.
Set low level passwords and use filesystem encryption. eg: passwords on all networking devices, boot loaders, and BIOS.

Three letter agencies and foreign governments could attack your data if they took it off line, but you monitoring should detect that.
Ask HN: What will reduce ADHD 
Social media is making us less connected http://mashable.com/2012/03/01/social-media-less-connected/
instead of blaming social media, what are the steps that could reduce our distractions permanently? i am not talking about any tools but lifestyle changes. Like meeting people in person [ http://www.LetsLunch.com disclaimer: created by me] but the root of all evil is lack of discipline - what else do you suggest
By "sell" you're implying that the sense of community is in some way diminished by selling advertising. I don't find this to be the case, unless it leads to a conflict of interest (i.e. SO deletes all Linux articles at the behest of Microsoft).

Now if you were to use "capitalize on", "monetize", or one of the many verbs that don't imply a transfer of ownership, then I would agree with you.
Didn't stop us from going to war in Korea for three years, or in Vietnam for 15-20...
Ninjablocks: www.ninjablocks.com
Use BIOS & boot loader passwords. Encrypt the file systems. This will not stop 3 letter agencies, foreign governments, or aliens.
I truly believe that a civilised society does not fall apart after the death of one man.

The Mongolian Empire was an incredible military achievement, but it was only an Empire in terms of conquest - it wasn't an Empire in terms of sustained society (like the Roman, Byzantine, or British Empires). The guy at the top dies, and the whole thing falls apart? That's not really a 'civilised society'.
Is there a place for technology on a path of finding our inner stillness?
I remember reading an interview of a guy who enlisted to see what it feels like to get the 'rush' of killing another human. Disturbing comment on motivation to begin with, but he also reported his disappointment on killing his first person. Nothing happened. He pulled the trigger over here, a man over there fell down, dead. No rush, no spiritual oomph.
Show HN: Visualizing Vendor Focus in Information Security
Well this is certainly a great idea as we've since with the launch of https://iamexec.com/ You should aggressively pursue the London market. Good luck.
I think there's a huge need for your service. However, your customers aren't going to be very open in public forums. Maybe you should think of strategies to take the conversation offline or in private/less exposed chat rooms.
You can't just use draftees, as you'd have no senior staff unless you draft for life.

In my opinion, draft is only justified for defensive wars where the nation is in total war.
Even the CSS is nicely organized: http://editsquarterly.com/lib/css/edits.iancoyle.css?0.0.0.9
And an explanation of the PBS paper as applied to Cassandra: http://www.datastax.com/dev/blog/your-ideal-performance-cons...
So in my case, the Finanzamt argues that what I did for the startup does not fulfill the definition of a "gewerbliche Tätigkeit" and consequently I can't deduct the "Vorsteuer" of my expenses. (As a business you get the VAT you paid on expenses back from the Finanzamt, which is called Vorsteuer.)

Download the Umsatzsteueranwendungserlass and go to page 63 of that PDF (section 2.3. "Gewerbliche oder berufliche Tätigkeit") to find a list of things that indicate whether you're having a business or not:

http://www.bundesfinanzministerium.de/nn_112540/DE/Wirtschaf...

In theory, if you fulfill the definition in that PDF, you're on the safe side. In practice however, the Finanzamt often tries to fleece you by simply making a claim that something can't be deducted, shifting the burden of proof to you. My particular case is still in dispute, I have an appeal (Einspruch) running against their decision. Most likely they'll lose, but they try to fleece people nevertheless because they figure that people will just pay and not spare the time to counter their evil tricks. If you do decide to shoot back, you have to be a German native speaker so you can read the laws and you should have some experience with the tax system. Alternatively, get a Steuerberater but be prepared to waste more money on your Steuerberater than what you would otherwise have paid for the Finanzamt's tricks.

One final word of warning: If your startup fails and you wind down the company, be prepared that the Finanzamt will conduct a detailed examination of the tax declaration of the past 3 years (Betriebsprüfung/Außenprüfung). This can drag on for several years because they're pretty slow. Apparently they routinely do this whenever a company is shut down.
Quite a bit. Enough, actually, that Apple now has a policy that you can only sit on a name for four months without posting a binary: http://techcrunch.com/2010/09/10/app-store-name-squatters/
One of the authors here. I put this together with my team over a couple of days this week with most of that time spent struggling to make the layout somewhat easy to use.

I'd love to hear thoughts and criticisms from the HN crowd. Be gentle, we're security and data people by trade, not web developers :)
Sometimes I wonder about the YC investments on things that I just dont find all that novel, or revolutionary...

That's why it's nontrivial to do what we do. The best ideas always look like bad ideas.

A good test for your reaction to a startup idea is "would I have said the same thing about Dropbox when it was first started?" On the face of it, there was nothing revolutionary about Dropbox. There were already dozens of similar things.

There are a lot of domains where the people with least experience tend to have the most definite opinions, but startups are an extreme case of it. I find that as I get more experience with startups, I am extremely reluctant to dismiss ideas that seem unsexy, or crazy, or (my favorite) "toys." In fact, when we use those terms to describe ideas to one another during YC interviews, we usually mean them as compliments.
In-App Purchase Fraud on iOS - Handling it and Where it Comes From
Various thoughts:

1. Trusting chip fabs is a non-starter. Institutional security only helps large institutions. You will not audit your fab, nor can you trust other people to do it for you. Unlike software, there is no "certificate" that is easily verified in the event of a backdoored fab.

2. There's two phases in the lifecycle of a backdoor. First, is its latent 'offline' period which is noninteractive with respect to the attacker. For example, a backdoored compiler [RoTT] basically propagates a virus to new copies of the compiler. Solving this seems tractable by eliminating bootstrapping as the sole method for compiling a compiler, and research into interpreted languages that are easily ported to new platforms for the stage0 compiler.

3. The second phase is when the introduced vulnerability is 'active' and ready to be exploited over the network by an interactive attacker. The case of a network-facing compiler-infected binary should be easily solved by solving the first problem. The case of backdoored hardware/microcode is much more insidious, and requires coming up with assumptions to frame the problem for even a chance at being tractable. (Also, it requires the trustable software tools from (2) for implementing the solution)

4. Secure 'offline' computing on its own would be a boon for things like maintaining the integrity of master cryptographic keys (although keep in mind one still has to prevent against a backdoored CPU acting as an infected stage0, but this is much easier in a noninteractive setting). I'm less familiar with state of the art in this area than I should be, but I'm guessing implementations are probably still in the dark ages of 'trust the company'.
"Retina Display" should have a very clear definition. It should refer to resolution at which anti-aliasing becomes unnecessary. Anti-aliasing is rightly classified as a hack placed on top of modern drawing systems, and one of the reasons that many games don't support it out of the box. With a high enough resolution, anti-aliasing technology will become irrelevant.

This is going to be different for each resolution depending on the distance that you view it at, I built a quick image that you can test this on. http://dl.dropbox.com/u/1437645/alias.html Put that on your phone or desktop and see how far you have to step back before the aliasing affect disappears
One of the things I think of when I see autonomous quadrotors is a localized missile defense shield.

A swarm of disposable quadrotors surrounding a ship, set on a rotating recharge schedule, that intercept missiles and detonate a small explosive payload.
Interview with independent videogame developer, Draknek
I'd suggest making this more clear on your pricing page -- I was initially interested, but confused about what a subscription meant to existing apps.
It's bizarre that we're reduced to forms-based authentication. Surely even basic authentication could be improved to include the basic signup/forgotten flows. Odd that this crucial UX is so overlooked by browser devs.
In the next post, I'll cover my approach to not only how to test price with customers, but how to get them to want to pay.

Yes, pricing is a conversation but you need to lead the conversation because if you pause and think about it, there is no rational justification for your customer to offer you a fair price.

They are either clueless on value and don't know
OR
they'll low-ball you because they want a good deal.

"The fair price for your product is usually higher than what both you and the customer think".
Firing Employee #1
Your second point makes no sense, bcrypt factors are manually increased and require a new write for every item in the store. If we time capsule the SHA1 hashed db of passwords and the Bcrypt db for 10 years you cannot prove that the SHA1 database will be more easily compromised than the Bcrypt database. There may be a cryptographic break in blowfish in the time.

They don't mention a work factor for their SHA1 hash storage, they could be using PBKDF2 for all we know.

If you're looking for something to pick on about Linode here, go after something else, this isn't the worst thing to come out today.
Speech Jamming Gun Invented By Japanese Researchers
Couldn't have come at a better time, with the G8 and NATO summits taking place in Chicago this summer. Should be a fun time.
Eventually the Geek Squad founder did admit it: http://money.cnn.com/2008/03/11/smbusiness/geek_squad.fsb/in...
What do you look for in a tech magazine?
SpeechJammer
Yes, but this kind of anchoring is "artificially" manipulative. It's possible you convince a customer to accept a higher price at first, but pretty soon buyer's remorse will set in and you're screwed.

I do believe you want to pick "valid" anchors and sometimes be more selective (as-in the iPad case) but the comparison has to stick.
As an outsider, in the last decade it's been really weird to watch the US public demand war while at the same time demanding that soldiers don't die. It just reinforces how distant people are from the idea of war.

Hell, the entire Vietnam War had less US dead than there were Allied dead in one day of the bloodiest battle in WWI. And after a decade of fighting, the US efforts in Iraq have less than 10% of the US deaths in Vietnam. Afghanistan less than 4%. And still the rhetoric is one of siege and difficult fighting. How soft and spoiled are the commentators who think war should involve no sacrifice at all; that effectively it should be like a video game?
Actually we love novel, revolutionary companies. But we like it even better when what's revolutionary about them is not immediately visible.
I can hear the ghost of Robert Heinlein sniggering right now.
"Windows"? No. I do think there's a possibility that in the future we're going to see another NT/'95 split, i.e. one "professional" system for offices or "experts", one for entertainment, network and media management. The "NT" one could possibly be a superset of all the "95" features, and I wouldn't be too surprised if Windows Phone gets merged with the entertainment/tablet version. Right now I think they're keeping the options open, depending on how the landscape for devices will turn out in the near future.

It could be Bob 2.0, after all.
Class 1 felony charge? Something's wrong with law enforcement in Illinois... or I guess slightly less wrong now. But how does this kind of BS pass muster in the first place.
LOL, I was going to write this. I worked on Government PKI for 4 years. Most enlightening security course ever.
I really look forward to this event, all the startup related ones i have been so far were mostly business graduates and no hackers. The guys at the CCC Munich are great, but don't have much interest in startups.
teameat is pretty funny. Well done. The mind boggles.
And yet plenty of inefficient companies and executives exist. Harmful even.
Google Reader does the same: when you click on an item it scrolls to it.