skysight-inc/HackerNews huggingface dataset:
Full steam ahead on the critique. I wanted to point out that you had no need to start bashing me about it!
An important thing to note is that there are many different aspects of security, and therefore, there are many different types of security "experts."

Here at HN, many of us tend to view things in terms of how it relates to software development, but there is more to security than computer security, and the author mentions this in some of his other articles.

There are physical security experts, often having an extensive background in military or law enforcement operations. There are COMSEC custodians who are experts at implementing, operating and repairing a wide variety of cryptographic equipment, while also managing a program that generates, issues, maintains and disposes of an organization's crypto keying material. There are also security managers who at one time may have been experts in a specific domain, but are now called upon to maintain a bird's eye view of an organization's entire security strategy in order to develop a cohesive plan for minimizing the treats presented to their employer. There are intelligence analysts who make an organization more secure by using their expertise of social engineering to actively track down those who would wish them harm. Each of these types of employees is a security expert in their own right, yet none of these examples really need any knowledge of programming.

When you look at the content from the Security+, CISSP, and CISM, the classes lean heavily towards information security, but they address the other areas briefly. More specifically, they focus on information security from the perspective of a security manager. In other words, you don't take these certifications to gain technical expertise.

Unfortunately, many businesses fail to understand this, and so they end up making CISSP a requirement for their technical recruits out of ignorance.
Does this make the CISSP a worthless piece of paper? Not really. It's just misunderstood by those whom are doing the hiring.
Thanks for the very genteel RTFM. I think you've pointed that out before, I just mischaracterized the process as quarantining the changes I don't want yet rather than rescuing the changes I do and forgot the mechanics.
I'll echo the sentiment of others here in saying that this isn't representive of anyone I know at SU. I'd say it's quite a rational crowd and while Kurzweil and others are a bit on the edge of reason in some of their work on Singularity stuff - it's vastly not blatant wrong facts a la homeopathy. It's at most overoptimism in the factors of exponential growth and supporting tech like cryogenics being more useful than is likely. The Newton reference below is apt - let's judge people on their best contributions - and let only heinous stuff (if Newton ended up a violent dictator) count against them.
The problem is you still have to go out and successfully identify which cryptossytem was designed and implemented by experts and is appropriate for your use-case.
I've replied on G+ but I think it's worth pointing out that I don't disagree that time to the first useful byte matters. The issue is that what's being reported isn't that and the time of header generation is not dependent on the time to the first useful byte (as the gzip example indicates).
I'm starting to wonder... perhaps the "made in USA" tagline isn't a selling point, but a PR move? An attempt to bring back the "don't be evil" mantra?
I find it odd that a site started by a rich guy who decided to put together a for-profit enterprise based on the idea that helping entrepreneurs get their first startup off of the ground would both make him richer, and make them richer, is frequented by so many people who want to believe that the "rich" are "evil" and need to be punished in some sort or another. (and this article is trying to put a scientific gloss on that belief.)

Not only is PG an existence disproof of the belief, but the mechanism by which he is getting richer is very much the same mechanism that other rich people employ, though often with less obvious social benefits. So, PG is not an anomaly that proves the rule. He's a more visible example of the rule that is often obscured with hot air, but that applies in the vast majority of cases. For instance, while I truly despise Bill Gates, I must recognize that Windows made billions of people's lives easier[1] and thus Gates made his money by improving the world.

Some people can get wealthy via pull and theft, for example, many politicians get wealthy essentially by trading pull. I'm sure there are examples of non-politicians that get wealthy this very same way (trading political pull at a net loss to society.)

But the real way to get wealthy is to make other people's lives better-- in fact, this is the startup advice often seen in other contexts as "find a real pain point and solve it."

[1] ...not easier than if those people had a good operating system, but that's not the comparison. The comparison is to those people not having any operating system, or having only MS-DOS if they already had a PC.
I'm shocked at how Cloudflare is downplaying the importance of TTFB just because their service happens to INCREASE them.

What I would have liked to see was them showing commitment to how they will be IMPROVING the TTFB.

I love Cloudflare but seriously, saying TTFB is not important is just non-sense. Whoever says TTFB doesn't mean anything either doesn't know what they are talking about or they just buying into the hype of cloudflare/cdn services.

Take a look at a "typical" magento store for example:
http://www.hybrid-racing.com/store

It has a 1.5 TTFB. This site is slow and no matter what CDN or WPO (front-end optimizations) you do, it will always take 1.5 second page to page.

Only way to speed up this site is switching over to faster hosting, something more preferable like linode's SAS 15K5 RAID10 hosting and/or perform some caching (e.g; full-page caching via varnish).
"Meanwhile Apple Airplay is not getting remotely enough attention"

Better than Airplay is DLNA.... a standard that is implemented by most modern net-connected TVs that I've seen. It still boggles my mind that I have to download an Android app to use DLNA on my Galaxy Nexus.
In QuicklyChat, when you're available and receive a video chat, your client automatically answers it, and the video appears in an unobtrusive notification window in the corner of your screen. We think this better captures the dynamic of a coworker walking up to your desk and being in your peripheral vision.

Most other video chat clients pop up an answer dialog which steals focus, and makes your computer ring, and that immediately interrupts you from what you're doing, whereas when people walk up to your desk, they generally wait until you acknowledge, or use body language/visual cues to determine whether it's a good time to interrupt.
Almost forgot: if you need more than 80 columns, your routine is probably too long. Indicated by deep nesting, and/or variable names that need to be more than one or two English words because the scope and intent of the variables is not obvious.
MAC? Mac!
Friends at my house are able to seamlessly play music from their phone on my stereo by using the $2 mini stereo cable that is attached to it.
That's potentially dangerous advice, because as it may lead someone to use an HMAC and think themselves safe, instead of using something like Bcrypt that's slow enough to foil brute force attacks.
I'm pretty sure Airplay does exactly what you're talking about. If you play a video from YouTube or even streamed off your computer via airvideo, the apple tv connects to the server directly and the iPad or iPhone just acts as a remote. It doesn't use battery or network.

It's just seamless and you don't need to know how it works to use it.
I completely agree. Our legal system already has varying sentences for different crimes. Can you imagine a world where you always get 20 years in jail for every crime, from petty theft to murder?
There are no issues presented here that can't be fixed by pushing a software update. It is definitely not a finished product but the design looks pretty unique and once the software is finished this can become a good product at least in terms of design and functionality.

As far as the price point is concerned, $300 is a lot of money for a set-top box. However, if this can double up as a game console, it becomes competitive.

Google is still an early player in the hardware field and they are still trying to get things right. This is probably a test device for them before they push for a much more competitive product.
There's a better euphonic marketing jargon for "lying". It's called "marketing" :)
At my shop in Raleigh, NC, we order lunch delivery once a week from a local, home-based cook for $8/person (sandwich, side, drink). It's our favorite day of the week now, and one of our most productive because everyone eats together in the office or the park next door.

Its so much healthier, cheaper, and easier than any other option. She just emails us the menu on Monday morning and we all pick what we want and email it back. Couldn't be easier.

Point being: I think a lot of people want to buy this, and would if only it was easy to connect with local cooks (a friend referred us to Thao, or we'd have never known about her). ZeroCater is a great idea as well, but I really like the aspect of buying home cooked food from a local person vs. a restaurant because its cheaper, usually healthier, and its the closest thing to getting a home-cooked meal from my Mom.

(Sidebar: anyone in Raleigh, do yourself a favor and check out Thao Beck at http://www.lunchboxnmore.com/. Just shoot her an email and say you'd like to get the menu next week and she'll take it from there [or email me and I'll be happy to introduce you]. I can't recommend her highly enough, especially for companies. Here's a couple favs I had to photograph: http://imgur.com/a/v80kd)
Child diabetes levels higher in China than in US, Obesity Reviews study finds
Wow! Looks very interesting - Thnx :) People should also check out their new website: http://beta.hackersandfounders.com/
"We need more research" / "We don't know yet" is the homoepathic eqivalent of creationisms "Teach the controversy" ploy.

Homoepathy doesn't work. They've done studies on it. They haven't tested vague "things related to homeopathy" like "does water have a memory?", they have actually tested the 'drugs' themselves. They don't work.
What do you suppose is after futures on wall street, just curious.
Enforcing a law? You mean a law regulating business?

gasp

Someone fetch the smelling salts, I think I may faint!
The exact opposite criticism from me.

Courses should not be "watered down". They should be as hard as they are at top universities, other wise they will lose credibility.

Do primer courses, leading on to the harder courses if you have to.

This revolution should be used to make high-end knowledge available to everyone who seeks it, not to water-down that knowledge. I want online courses, but good ones which are comparable to top courses.
I assumed that sharing media to the Q would show up as a new intent in the Jelly Bean SDK but I haven't seen anything to that effect yet. Hopefully something like that will be in the SDK soon!
using opera 12 on win7 the cursor position isn't matching the color picker circle :(
PBKDF2 is fine. It's not as good as bcrypt, and since bcrypt libraries are trivial to use and pretty ubiquitous most people should probably just use one, but PBKDF2 is okay.
Network i/o puts a much bigger constraint on latency and throughput than serialization, so in practically all cases serializing to ByteBuffers using the standard ByteBuffer API (without resorting to Unsafe) would be just fine.
What a complete lack of imagination. You sound like someone who saw the first flight and said "pfft... 100 meters? I can do better on a bicycle".

Think about possibilities.

Imagine what can happen 10 years from now, when Udacity covers the whole curriculum of all major majors, not the few courses that they managed to build in few months of their existence so far.

Imagine what happens if they have 10 years to tweak and improve their lectures, based on feedback on data they gather from past students. They can only get better! (which is not the case in physical universities, due to rotation of lecturers and the fact that some of them were never good to begin with).

Imagine that they hire faculty to start doing real research project, the way MIT, Standford et al do, all coordinated via internet, live video calls etc. Imagine they do it so well that they are allowed to start giving Ph.D.s.

Imagine that they start giving master degrees via testing centers, after you pay a modest fee for taking the test (something they have already started doing).

Imagine that they start coordinating in-person study groups via meetup or some other such service, the way e.g. programmers self-organize and create "Android SF user group" and such.

Those are just 5 minutes ideas that I'm sure are not escaping Thrun - he's much smarter than I am.

The disruption here is zero cost. If they can maintain that and expand to offer more, better courses, it'll be massive.
I have thought about this too, but how it would work for the iPhone product line. What would an iPhone nano or iPhone shuffle look like? Wold there be a market for it?

Obviously, an iPhone "shuffle" would not randomly call people, but could perhaps be displayless. Even voice-only controlled.
I'm very surprised that it sounds like he used his Udacity course as the material for the actual Stanford course. That's a huge disservice to Stanford students.

Online education is going to take time to develop. If the courses are too difficult, very few people would make it through them. At this stage, they need the idea to catch on more than anything else. Once it catches on and they can establish legitimacy (i.e. being able to hand out degrees or find people jobs), then it'll be easier to convince prospective students to deal with more challenging material. It's a balancing act.
Agree, probably the best example where it's okay to offer 'tip' type dialogs on opening the app "We've setup keyboard shortcuts for you, would you like to use them? (examples)". (Saving preferences for future visits).
SEEKING WORK - Java developer with 3+ years of experience, currently based in Warsaw, looking for an appropriate remote vacancy. Please have a look at my CV:

http://pl.linkedin.com/pub/lukasz-malinowski/b/75b/772

Feel free to contact me at:
maliniakh@gmail.com
To address that statement, I'd say it's quite fair to assume that Udacity type model is the future of higher education. Of course, not Udacity as it stands now, but I don't think it's even 18 months old.

I'm sure they'll see the response, and adjust their approach to optimize everything.
I bought the book. The reason why: there was a clear lack of documentation on Riak at the time (still is). Your book is bar none one of the best sources of material for quickly getting up to speed on Riak. I read it cover to cover several times. Your writing style, ability to explain complex topics with simple prose, and fantastic executable code snippet examples also contributed to my decision to shell out the $29 - after I had read the sample chapter. Frankly, I probably would have had no issue paying more for it.

Now, if someone would just give the node riak driver some love....
Thanks, that clarified things. Unfortunately I too know little about actually writing compilers so my depth is limited. But I will offer some thoughts anyways.

The slow down in dynamic languages is in more than type checks though. The slow down is because dynamic languages are like some crazy awesome dream world where anything can change at any given moment and things are not necessarily what they seem. So VMs must be extra vigilant, checking many things like assignment, for exceptions, if the object is still the same class, if it still has the same methods etc. The term dynamic is almost an understatement! Add to that boxing and the possibility of heterogeneous collections and slow downs are the price to pay for all that flexibility. This makes things very hard to predict both on the compiler level and also at the CPU level in terms of branching - which alone is very costly. Dynamic language programs are not easily compressed. There are ways around that and languages like Clojure offer a sort of compromise, by being able to lock certain parts down in a solid reality, structures (in the sense of regularities) coalesce and can be used to speed up parts of your code. You can choose where to trade flexibility for speed.

You're right (Subtype) Polymorphsism do incur a cost but modern CPUs can well handle these. But with parametric polymorphism and value types you get no runtime hits and also get some free theorems to boot.

That said, how you think has to have some influence. I have never found static types to be constraining, I actually feel like the allow me to more easily plan future consequences. I suppose I trade implementation freedom for the ability to create consequence trees of greater depth and quickly eliminate unproductive branches.
is "woo" a well known concept? I feel like this post would be much more popular if it didn't use such an obscure word in its title
Fluff piece; is extreme programming the new extreme programming? Who cares! What problem is trying to be solved?
Please share the numbers even if things don't go well. A balance of successes and failures helps everyone learn.
>>If you want to learn what AI is generally about, Udacity can help. But if you want to build a career out it, and become and actual expert,

Isn't udacity and coursera aimed at college level education? you usually don't become a machine learning expert after college education, but you can have a career developing software(and maybe use machine learning). Maybe not a career at google but still a career.
Why do they have to ship it by Google IO ?

Apple routinely announces something at a conference and says it will ship in X months allowing them the time to polish. I see no reason why Google couldn't do the same.
You quoted me totally out of context (I don't use SHA and you are implying that I do. I didn't spot that in your original paste snippet, and clearly wrongly assumed that you were just referring to the concatenation of hash to salt.)

Nothing that I said was wrong (in fact it's sound advice), so I'm a little shocked at the massive downvotes, your blunt response, followed up with the patronising advice to rewrite all my software.

(And no, I don't use SHA. I didn't spot that in your snippet.)
It would be nice if phones had an option to treat text messages differently if the number isn't in your phone book. I wouldn't care about text message spam so much if it went to a spam folder and didn't alert like a regular text message.
Prismatic is one of my favourite startups this moment. Bradford's talk on Clojure West was amazing (you can watch it online here[1]).

Their blog bost on Clustering Related Stories[2] was one of the most interesting applied ML posts I've read in a while.

Trivia 1: Bradford Cross was also one of the founders[3] of Flightcaster (YC S09).

Trivia 2: One of his other Flightcaster co-founders (Jason Freedman) is the founder of 42Floors (YC W12).

[1] http://www.infoq.com/presentations/Why-Prismatic-Goes-Faster...

[2] http://blog.getprismatic.com/blog/2012/4/17/clustering-relat...

[3] http://www.crunchbase.com/company/flightcaster
Most of the information that you are asking on your website is part of the elevator pitch. By answering those questions the user will pretty much create the pitch themselves.
The scope of your comment is extremely small. It ignores millions of other rich people that made their money by exploiting people. I'm sure you can think of your own examples without much difficulty. No social findings are ever absolute. Humans are exceptional at breaking "rules".

But I would further criticize your comment with your use of the word "evil". Evil evokes images that are irrelevant to actual behavior. Evil insinuates that these people are intently malicious. The findings indicate the opposite- they are unintentionally malicious.

Edit: I've been downvoted without response. Classy.
a licensed homeopath

Henriette, the late pet cat of Ben Goldacre, a UK anti-pseudoscience writer, is a licenced nutritionist. Poor old Hettie was able to get the certificate after she died.

http://www.guardian.co.uk/science/2004/sep/30/badscience.res...
What about the CompTIA Security+?

Once upon a time I was a contractor at an insurance company, and I saw that most of the people in their IT department had various certifications hanging on their cubicle walls. I thought, "I want one of those."

So I selected the Security+ certificate, inhaled about two-thirds of a book covering the material, passed the test, framed the certificate and put it on my office wall.

That's about it. It was fun.
I agree with you -- I imagine that's why it is the way it is. But do iterative designs work when the initial product is such a dud? The original iPhone was an hugely unfinished product, but still impressive in its own right. This is both unfinished and unimpressive for what it's _supposed_ to do. I used one yesterday and it was almost entirely useless. We could not get it to work reliably.

I hope that Google has tricks up its sleeve in time for Christmas. That's the only way I can imagine this product will do well. They can't wait a year and re-launch it, like what I think they tried with Google TV.
Show HN: Sendfiles2.me - Getting files from others should be easier
Hi everybody,

I'm delighted to share my latest little idea to make getting files from others easier.

It will be like having a public folder and letting people to upload you something.

Please check it out and let me know your feedback, you're always awesome - http://sendfiles2.me
janrain?
Another Women In Tech Blog
Multiply that by the number of party participants with Android that are also trying to add their song. And this action is a bit unintuitive, so I wouldn't be surprised to see people make the same mistake multiple times (not so much if the party is filled with HN readers, but the average Android reader definitely).
Ask HN: How many of you are working on eCommerce idea vs SaaS?
Just reply saying eCommerce or SaaS. If you feel like giving more details then feel free to leave that info as well.

I just want to get a feel of how many of us working on eCommerce vs. SaaS based startups.
State of the art network hop is less than 3us so this is relevant. For on box IPC which can be as low as 100ns then very very relevant.
For the record, it is trivial to change PHPass to use $2y$ instead of $2a$. That said, this does require extending the PHPass class, so it is not ideal. Still, it would be better to extend or modify the class than it would be to simply try to roll your own (if those were your only two options).
Real Estate Brampton
Brampton Real Estate: Search Luxury Homes in Brampton & Mississauga. Halton Hills, Georgetown & Caledon Homes for Sale. View Brampton MLS Listings.
By gem developers that is :)
Did you do any validation on the book idea before you started writing? How much time did you invest before you decided to publish it?
It's not my mind that's closed, it's the book that's shut on homeopathy. It has been thoroughly tried and debunked as nonsense. What more is it, exactly, that you think an open mind should entertain vis-a-vis homeopathy?

Before you trot out the tired "flat world" defense, read Isaac Asimov's essay on degrees of wrongness. Our ideas have been getting better over time -- it's preposterous to propose that we could be as wrong about molecular biology, germ theory and medicine as we were about the earth's shape. We are wrong, but we know we are not that wrong.
Here's a better web page that contains the same information: https://github.com/sqlmapproject/sqlmap
"If the courses are too difficult, very few people would make it through them" - There's an easy way to solve this. Just have primer courses, or introduction courses which then lead on to hard courses.

I think online is capable of delivering hard courses, not to is giving it a disservice.