skysight-inc/HackerNews huggingface dataset:
Ask HN : What are some great books an aspiring entrepreneur should read?
Over the summer, I've read several great books including "The Lean Startup", "Thinking, fast and slow", as well as design and marketing books.

During the next year, i'll try to follow up with a "challenge" : A book per week. Above all, I want to learn stuff concerning startups, computer science, design and marketing, but I'm willing to read just about anything as long as i'll learn something.

I've found several great lists, and started to cross-compile them for the best references. However, I felt like asking might yield interesting results.

So, what are, in your mind, the best books any aspiring entrepreneur should read ?
Well, it would have to be a pretty big mistake since they also say:

>And if all vehicles on the road are equipped with both adaptive cruise sensors and communication, capacity can be increased by a factor of 3.7

which is consistent with the headline.
Can you elaborate on which societal norms you feel have changed for the worse? And can you explain your criteria for eras of societal decline?

Aside: speaking metaphorically for the moment, you could characterize the early history of the United States as: young upstarts (puritans) disagree with the social norms of their forebears (the Church of England), run away from home (colonization of America), and misbehave often in violent ways (the American Revolution). The English may have regarded that time period as a societal decline, even as Franklin was writing his 13 virtues!
http://code.google.com/p/go-wiki/wiki/Ubuntu
Using your KPI goals to drive product development
how about the many small time, one person delivery outfits that are already bonded and insured? Create a network of these companies and a backend for boxco to connect with.
Really, it's not a particularly hard problem to solve. By letting the car drive itself, courts must necessarily conclude (for reasons of practicality if nothing else) that you are taking responsibility for that decision. Any collisions that result are handled by liability insurance. As time goes on and the robot car industry proves itself in practice, insurance companies will give big discounts to owners of robot cars, which provides a market incentive to buy one.
I left a comment on the blog about this 7 hours ago. Seems it hasn't been approved but other comments have. Strange.
I think the idea would be that relatively few of iPads sold, percentage wise, are cellular/LTE, while all iPhones will be. The absolute number of devices sold probably doesn't hurt the case.
You can tell Parallels to never cross-associate OS X or Windows programs with each other via the configuration preferences (http://goput.it/s5h.png). I can't speak for Fusion but I would be surprised if they didn't have a similar setting.
In my opinion, there can be another argument: Preplanning carefully and doing things when they are less painful but in advance, we can avoid huge last minute pain and thus less prone to procrastinate. But if you fail to preplan and execute, you have to go thru huge amount of pain to achieve success.
Two Startups in Thirty Days (Video)
> With Google leading this charge rather than Ford, I think the best hope is for American car manufactures to strike a quasi-monopolistic partnership to gain advantage over foreign manufacturers.

I'm glad Tesla is around for precisely this reason. Does it occur to anyone else that self-driving cars could be a solution to the chicken & egg problem for non-gasoline/diesel refueling/recharging stations? Cars could take the role of taxis, and computer algorithms could ensure that cars get routed to charging stations when they need charging.
I'm sorry, I should have been more direct. No, I meant to say. Using "strcmp" in a typical C program is not a security flaw. It was clear to me you were thinking of "strcat" or "strcpy".

Using strncmp in this situation makes very little sense and is probably more dangerous. The lengths given to strncmp() are inevitably going to be derived from something else that requires a NUL terminator. Meanwhile, strncmp() leaves you open to logic flaws where you compare too few bytes.
No, strcmp is not susceptible to buffer overflow attacks.
Personally I think it is sad. FB tricks people into paying too much, and then some wealthy guy who should have been able to evaluate the offer properly gets fooled, but because he can afford the loss he tries to justify the whole thing, so that perhaps he can pull the same nasty stunt like that sometime in the future.

Using Cuban's own auction analogy, he was basically defrauded by buying a 'fake' collectors item, and thinks the fault lies with the purchasers (for not recognizing a fake when they see it) not the sellers or the auction house for perpetrating this ruse.

Paul.
I think a lot would hinge on cost, especially for the larger forums. What is your idea here to monetize?
That's rather optimistic. There will still be collisions, and there will still be a role for insurance. At a minimum, there will be a transition period--but even afterward, there will still be cars that malfunction.
Marissa Mayer Reviews Every New Hire At Yahoo
> Also this would be affected by your circumstances, so if you work in tech/IT you might have a job arguing that you didn't know that running an unsecured wireless AP was a bad idea.

Pointing to a renowned security expert saying he does the same might help, though:

http://www.schneier.com/blog/archives/2008/01/my_open_wirele...
We're getting ready to deploy Varnish in (non-devops) work. Not having control over production and having the potential for C inline in the config was already making me a bit nervous. This thread is not helping!
Seen more white cars lately? It’s the Apple Effect
A baseline comparison of the same tests running in Boot Camp might give a nice understanding of what kind of general performance loss you're going to get by virtualising at all.
This is also known as "happy hour".
He wasn't in California, he was working at an air base in Thailand as part of the war effort. Read the article before snarking.
A lovingly-designed vim cheat sheet
Previous post from a year ago:
http://news.ycombinator.com/item?id=3115872

Kudos on the transparency, it's refreshing.
If this attempt at price discrimination does indeed become popular it will be via digital menus that update their pricing automatically, not via fiddly coupons. We are quite aways away from this still due to hardware costs and the sheer number of tablets that would be needed at most full service restaurants.

I have no doubt it would be a hit with consumers. Tuesday nights out would become "a thing" for the price sensitive. That's good for everyone.
While it's great to read about the success, this part gets me:

> They put up a simple web site and announced that they were accepting applications. And soon enough they had more applications than they had spots.

Methinks there is more that was done between step A and B rather than just putting up a webpage and sitting back. Would you be able to give more specifics on what they did between those two steps to get all those applications?
When they are mainstream and people are comfortable with the idea, it will start filtering down to use by kids. Then we'll see the reinvention of suburbia and even deeper changes in the culture and the fabric of society.
A "pop" for an IPO means an increase in share price. Think pop vs. fizzle, not pop in bubble terms. Companies generally underprice the stock going through the underwriting banks so by the time they're sure to have a liquid market. The banks have an asset they have to give away at a price everyone knows is almost certainly below what it should be, so it winds up being a patronage thing.

Not this time though. Someone who worked on the deal at JP Morgan told me one of the big causes of the problem was that the clients in on IPOs usually ask for ten times as much stock as they actually want under the assumption they'll only get a small amount of what they ask for. With Facebook there was such a huge quantity that they actually got it and freaked out. But that's one data point from someone with a lot of incentive to self-justify.
I was thinking of pricing based on pageviews/month.
Livestream: Bell Labs tribute to Dennis Ritchie, co-inventor of Unix/father of C
IRC clients can be improved.
Look again.

LUKS is used for all filesystems. Qubes was specifically engineered to block the Evil Maid scenario and similar vectors for notebooks. See pg. 31 from http://qubes-os.org/files/doc/arch-spec-0.3.pdf:

"There are several things that all together make the storage secure in the Qubes architecture:

1. Confidentiality, understood as preventing one VM from reading other VMs data

2. Confidentiality, understood as preventing access to the data when the machine is left unattended (full
disk encryption, resistance to Evil Maid attacks, etc)

3. Integrity, understood as preventing one VM from interfering with the filesystem used by other VMs

4. Security non-critical role: a potential compromise of the storage subsystem doesnʼt result in other system
components, like other VMs, compromise. Storage subsystem is not part of the TCB in Qubes OS."

See also, Section 7.1 System Boot Process, and 8.5 Resistance to Physical Attacks (or just search for "disk encryption").
Hey, look at any torrent sharing site: you will see result of monitoring (e.g. 10 seeders, 5 leechers, 140Mb, healthy) near to each torrent file.
Of course, each torrent file, which you will see at torrent sharing site, is monitored by torrent sharing site.
I was trying to avoid the "Receipt of stolen property" issue, while maintaining personal privacy. Usability was lower on my list of concerns.
Free version available here: https://cdn.shopify.com/s/files/1/0165/4168/files/preview.pn...
3 points should be considered:

1) Even with robots there will be unknowns which the robots will have to deal with which will still require a margin of safety. Likely that margin of safety will be lower with robots, but definitely will not approach 100% capacity. (things like tire blow-outs, deer, even sudden rain etc).

2) Road wear will still need to be considered in any cost benefit analysis. Presumably road wear is less of a factor than jamming cars on the road, but I don't know that for sure and someone should do the math on that. There is also a point where if you exceed a certain capacity percentage, anytime road work needs to be done it would dramatically impact traffic since there is less of buffer to absorb the lack of lanes.

3) As we increase capacity, we may run in to additional problems that we cannot imagine. Bridges for example could be an issue as the amount of weight would be increased dramatically, even more remote a possibility would be damage from additional vibrations etc. Those are just ideas that come to mind, but there are probably many other risks we are not considering.

Overall, I am 100% for robotic cars, robotic passenger jets, etc. I just wanted to brainstorm a few future problems that may need to be considered as we move forward. The last thing I want to see is a 5 year setback.

Then again, the engineers at google and elsewhere have probably considered all these things which just seem new to me as a casual outside observer.
Quoth the parent: "It does not apply here"
There are others who did not even need to read the prospectus to know the points you made. If you had been following the company closely enough, most of these points were fairly evident.

EDIT: I am wondering though, if the artificially high price was a ruse - a scam used by those who COULD sell at the overly inflated IPO price to cash out tons before it dropped to what they knew was the correct reflection of value.

I'd be willing to bet this was the case.
My userscript for Greasemonkey users:
http://userscripts.org/scripts/show/138037
I mean, we wouldn't see as much rash driving, there will be less accidents etc. which would increase the life of a car, which means lesser cars sold, and lesser profits for the auto industry
Articles like the Sorkin piece have been appearing since the IPO because public shaming is the only tool disgruntled investors have to influence the company while Zuckerberg retains voting control. The market is looking for a dramatic (if temporary) gesture that will fluff the stock long enough for the muppets who got stuck holding the bag to dump their stock on some greater fools.
https://buildsecurityin.us-cert.gov/bsi-rules/home/g1/847-BS...

If passed an unterminated string, the function will fail at least. How much you could exploit from that, I guess I exaggerated.
"Entrepreneurship is hard but you can’t die."

I liked this post by Steve. However one thing to keep in mind is that people can suffer greatly in their mind as a result of their wrong actions, failures and the consequences of their mistakes. For many many years. While the current culture in SV (and on HN) celebrates success but also attaboy's some of the failures there is an entire other world out there (spouses, children, parents) that create pressure on stress on and individual that fails and only really care about success.
Couldn't they? Letters are cheap to send.

They could simply send out a few million or so letters, maybe costing a million £ or so. Offer everyone a settlement of a few hundred £ to cover all past transgressions with the threat of suing for a much greater sum if there is a repeat offence or if they do not comply.

If you work on the basis that about 50% just pay up straight away that's quite a lot of money. This money can be used to subsidize going thermonuclear on at least a few thousand of those who don't.

Besides, they don't need to sue everyone to make people scared enough to avoid pirate sites.
These same statisticians are less attune to how you collect and disseminate that data in different ways (a different "way" could be: how do I automate spam Craigslist subsections at relative intervals related to the frequency of postings in each particular subsections, and, of course, make this spam not look like spam?)

Fair point.
The Startup Owner's Manual
I hope you can at least understand how it would be more broken by actually having different cards, because again, even after shuffling the events that took place here are still possible. No amount of shuffling or not shuffling can change how many face cards in a deck.

With regard to it being "certain enough", consider whether you would have done the same thing as these people. I can tell you that had I sat at that table, I would have not continued betting higher and higher with the possibility that the next deck is not in my favor and thus possibly losing everything. It of course looks certain in retrospect knowing the whole story of how they were actually unshuffled -- but when you are actually at the table, without this knowledge -- it is again just a chance. You have no idea how many decks come from what company or anything thats going on to result in this. For all you know it might have just been two decks that had the same order due to some weird malfunction. I am sure in the history of gambling lots of people have thought they've seen a pattern recur, bet a lot on it, and LOST -- again, to the favor of the casino.

In other words, consider it from a game theory perspective -- the casino's "long term" winnings absolutely rely on this kind of behavior from patrons. If patrons were to think to themselves "uh oh, something is fishy and this might be unfair, better stop betting" every time they thought they had spotted a pattern or had a system, then the casino would lose tons of money, since they are 99.99% of the time wrong. Casino's winnings fundamentally rely on greediness. That's the basic point I'm trying to make: you can't have it both ways, you can either have greedy patrons who almost always lose everything because of it, or weird bizarro-world patrons that are looking out for the casino.
AoS vs SoA strikes again?
It's great to see the labeled points on the graph relating to the timeline of events/mentions.
I think it's worth to note that all startups should keep careful track of what types of events/mentions work well, and which don't.
> They'll turn on the autopilot and take a nap while blasting through a school zone or something.

The entire point of an automated car is that it can handle stuff like that for you. Eventually it'd be safer than humans, who are quite happy to blow through the school zone outside my house at 50mph.
just checked and saw that you added "because" has this changed the user behavior in any way? No worries about helping me back. Just keep creating and doing awesome things. The more people that do that the better for everyone else.
Veracity on the iPad
I've always had a few questions about the move toward fully automated cars (and I don't mean to raise these as luddite objections, I'm just curious how it will play out, and what steps are being taken to address this)

1)How will manual cars (and motorcycles) be managed once we have non trivial percentages of cars on the road automated? Will there be automated-only highways? Automated-only lanes? Is the beginning of the end for those of us who really enjoy driving (or motorcyles?). Or will those things just be limited to non-urban/track environments?

2)How does all this automation & closer car traveling @ high speeds work when natural events intercede. The most obvious one is weather (rain or snow), which can be a huge problem for cities as is, but it seems like having cars on the road with no "bubbles" of space to buffer great exacerbates the potential for massive accidents when there is marginal traction. Secondly, in many areas of the country, wildlife on highways is a very common occurrence (even in cities there's the occasional road debris/unexpected obstacle). I wonder how well an at-capacity automated highway could react to a sudden bit of road obstruction w/o running into a massive accident (or massive traffic jam) situation.

Of course, many/most human drivers don't handle adverse weather or unexpected obstacles very well either, so maybe these are just facts of driving, not arguments against automated cars as such. Still, I'm interested to see what attempts are being made to mitigate the effects of such variables.
Sure. The flaw here isn't strcmp. In fact, most crypto compares don't use strcmp, even in naive code; an HMAC-SHA1 MAC, for instance, is an array of 8-bit bytes, not the hex string that programs encode them into for human consumption. "memcmp" is the normal culprit.

Timing attacks aren't a flaw in memcmp or strcmp. Touching every byte of a string is stupid behavior in the overwhelming majority of cases.
jpdoctor: it makes no sense to judge his long-term results based on a short stretch of under-performance. According to that same paper, the portfolio he managed for Cambridge University beat the market by 8%/year on average from the early 1920's until his death in 1946. That period includes the Great Crash of 1929 and the Great Depression of the 1930's!

PS. That would be like judging Warren Buffett's impressive long-term investment record based on the sharp decline in Berkshire Hathaway's share price during the financial panic of 2008!

PPS. If you think Buffett's record is explained by luck, check out the subsequent long-term record of the seven investors identified in this article he wrote for Columbia Business School's magazine in 1984: http://www4.gsb.columbia.edu/null?&exclusive=filemgr.dow... -- all materially outperformed the major stock indices after being identified by Buffett -- what are the odds of that?
Thanks for the comments.
Also, we decided to go that way to make it more practical.
It doesn't change anything for the developer and can just provide more value in some case. Especially when using some weird clients.
Hi guys, thanks for the feedback. We didn't have access to a copy of Parallels 7 for an 8 vs 7 comparison, but we're working on getting one and will update the article when we do.

We're also planning to run tests in native Boot Camp, and we're going to take a look at the free VirtualBox to see if it's worth even paying for these apps at all.

Thanks again, and let me know if you have any other specific benchmarks or apps/games that you'd like us to test. We'll do our best to try everything.
actually I totally agree - I meant 3d gestures with hands in space, not multitouch.
Yup, Fusion has the same setting: https://s3.amazonaws.com/uploads.hipchat.com/6574/26709/ff8q...
This is a relevant link:

http://cooper.edu/sites/default/files/uploads/assets/site/fi...

Total net assets: $439,524,986

"Run out of money" needs to be qualified.

[That's not to say this is/is not not a good cause]

___________________

edit:

and this ...

http://chronicle.com/article/Cooper-Union-Need-Not-Start/129...

[November 27, 2011]

The bottom line is that the college is in a far superior financial state than during similar external conditions in the past, and I firmly believe that it has the potential, the short-term resources and long-term assets, the creative capacity, and the intellectual capital to address the current challenge and to carry on its extraordinary mission, which has contributed so much to the nation's scientific, cultural, and social infrastructure.

George Campbell Jr.

President Emeritus

The Cooper Union

New York
If automatic car implies networked car, routes that are under construction could easily be converted into toll roads (presuming there is a toll that will offset the congestion). I guess lots of people wouldn't like it, but lots of people already don't like traffic jams.
Beanstalk is migrating from Rackspace to colocation
thanks, we think it is extremely important.
#Antisec Hackers hack FBI laptop and leak 12 Million Apple Device Records
That's not a buffer overflow.

This whole subthread of picking on the guy's implementation because of "strcmp" is pretty silly. There are times where strcpy() is safe to use, but most of the time it's a red flag. There are conceivably times when strcmp() is unsafe to use, but to a professional reviewer, it is very rarely a red flag.

I should have just come right out and said that, rather than begging for the rationale for picking on strcmp().
A discussion of the benefits of a DVCS on frequently disconnected mobile devices.
> I really don't know what else GitHub would be missing from the overall process of checking in code.

CI as-a-service is a massive undertaking, and requires different focus from what GitHub is currently doing. Three main differences are

1) lots and lots of devops. You have to support dozens of ruby, python, php versions. You have to support the version that Heroku uses, the one that EY uses, the one that AppFog uses. Same with databases. Then you have to somehow deal with the fact that gems that compile on Ubuntu 10.04 don't compile on Ubuntu 12.04

2) Then you have to make all of the above fast. We (I'm one of the founders of CircleCI https://circleci.com) spent months improving build speed, to make a compelling product. People don't pay for build results that take longer than their laptop can provide.

3) CI-aaS is high touch. A large percentage of new users will have lots of support in their first month. We don't track this stat yet, but Jason Cohen (founder of WPEngine) does, and his customers require 4x the support in their first month , compared to existing users.

3) Doing this well costs (and is worth) more than git hosting. It'd be a little strange for GitHub to buy a CI product, and then charge 2-10x for CI what they do for github.

4) GitHub has released multiple OSS CI products, and their employees have told me they don't think it makes sense to do hosted CI.

So I'm not holding my breath for an acquisition. But in the meantime, you can start testing on CircleCI today.