skysight-inc/HackerNews huggingface dataset:
Dream it! Just don't necessarily expect much and at least you'll know you've tried. I dropped him an email about some work he was advertising and didn't hear back for something like six months, but he did get back. If you put together something brief, professional, and interesting, it could be worth a shot, and it'll only take an hour or so of your time.

Since you're actually in-country, you also have a big advantage: He makes all sorts of appearances; if you can coordinate a trip to match something he's doing, you could always just stop in with a business card and say hi.

Not to say anything would definitely come of it, of course... but it seems like a pretty good upside with a fairly minimal investment. Could be worthwhile.
We recently had an internal debate about whether the anti-hyphen bias extends to the rest of the url. We haven't tested it though. I'd be curious if anyone has ...
In common usage the user will take an server generated API key and embed it within their application that makes API requests. Take a very typical example of a merchant selling snowboards and using Stripe to process the payments as an example.

Since this API key is embedded within their app it'll require a programmer to change (and customers often may be non technical with sites built on contract). These are things you dont want to force customers to change with any frequency as it can cause pain and expense. You dont want to ever be forced to flush all your API keys, it could be a serious disaster.

Now there's protocols that rollover access keys hourly or the like such as OAuth a but that's a complex and often unnecessary use case that's beyond most API implementors. See how Google does OAuth 2.0 with their APIs for an example.

Since it's secure, simple and performant to hash API keys stored in your DB and just compared hashed values for authentication why would you ever not want to do it?
I feel the same way about Eve that I feel about Dwarf Fortress. I love reading about it and find the surrounding community fascinating, but I just don't have the time to devote to properly playing it.
Among other security and privacy protections.
Headphone Styles & Reviews
CISPA had a democrat co-sponsor the first time around is what I mean. Dutch whateverwiththelongname.
The target audience for Rewire Attire, the high end fashion marketplace, was women with enough money ...

Whenever I read "target audience" and "with enough money" in the same sentence, I run the other way.

My experience with prospects "with enough money":

- there are far less of them than everyone else
- many of them didn't earn it themselves, so...
- they really don't really understand the concept of "value"
- they don't understand investing vs. consuming
- they think they are actually the source of their own gifts, so...
- they think they're better than others, so...
- they will treat you like shit, not like a trusted business partner
- they will second guess you
- they will override you
- they'll blame you for the bad things
- they'll take credit for the good things
- they won't pay you on time
- they will protest their bills
- they'll make you hate them and wonder why you're doing this

Save yourself the agony and just build something for the masses, where no one can become big enough to make that much difference.

Edit: Like OP, I'm referring to B2C, not enterprise.

Edit 2: Normally when I see a bunch of bizarre replies to a post of mine that begins with "My experience...", I just close my browser and go back to work. But I guess I'm in a strange mood, so in order to avoid cluttering up this thread (and in the spirit of good clean fun without malice), here goes:

diego, you say "One data point is not generalizable..." and then introduce your own data point. It was never my intent to "generalize", just to share my experience.

chc, I'd prefer to read about what you did over of what you hear. If I'm going to listen to someone else's antecdote, I'd rather do it over beers.

PaulHoule, nice story, but what's the point?

larrys, My list does not directly contradict the success of just about all luxury brands that have been successful. They would probably agree. They've just chosen to thrive in such an environment. I don't.

Samuel_Michon. I believe you. Thanks for sharing your experience.

fredsted, it pretty much does not differ from everybody else? I'd rather have 100 difficult customers with 1% of my ass than 1 difficult customer with 100% of my ass. That's all.

(Sorry if the tone seems negative. I'd love to learn how to better communicate in writing on-line without being misunderstood... It's a work in progress.)
To give a couple of examples: The exemption from liability should be default deny rather than default allow. Don't exempt everyone from everything, make a list of the things you feel are problematic, explicitly enumerate them in the bill and don't provide an exemption from anything else. At least that way we know what we're getting ourselves into -- I don't think the intention is to allow corporations to be exempt from liability for dumping toxic waste in the rivers or releasing information previously required to be kept private to foreign governments that directly leads to the deaths of dissidents, but if they can justify a good faith cybersecurity purpose in doing so, that's what the existing language seems to allow.

The other issue is that the exemption encompasses not only information sharing, but any "good faith" action taken based on the information. I understand what they're going for there. If some law prohibits sharing information, it probably prohibits use too, which would get in the way of what they're trying to do. The problem is, again, that they're not talking about specific laws. So if they respond to the information by hiring Blackwater to raid what they believe to be the attacker's home, no liability? That's not OK.
Storify Aims For Marketers With its New ‘Storify Business’ Plan, Redesigns Free
Not everyone who reads HN reads reddit.

The Internet is a much bigger place than some people realize.
I think you misunderstood me. I wasn't saying the govt. should be allowed to conduct cyberwarfare. However, they should be allowed to conduct investigations into cyberwarfare and protect it's citizens against it. That's one of the major intents here. The FBI and CIA can not work together on investigations when it involves doing something like working with private entities to share maleware or explore attack vectors. To be clear, they can't even do whitehat things today that private citizens are allowed due to regulatory restrictions. I'm not saying this justifies cispa. It doesn't. But, it does help frame the discussion in a productive way.
API keys should be cryptographically strong. If yours aren't, you're using API passwords, not keys. Stop doing that.
Err... Suppose that works. Take it to the logical conclusion: Satoshi drives out every buyer and buys up all outstanding bitcoins. Now what? Bitcoin has become worthless. What does he do with 10m worthless bitcoins to cash out? This is the classic question in attempts to corner a market: how do you bury the body?

When you hold as many bitcoins as does Satoshi, you will profit far more from not selling and trying to help out the entire Bitcoin economy and make it grow.
Why Video Discovery Startups All Fail
I used fish for a while -- and I think I might go back -- and I missed "sudo !!" too. I like this suggested[1] function as a replacement:

function sudo!!
eval sudo $history[1]
end

[1]: https://github.com/fish-shell/fish-shell/issues/288#issuecom...
What Patients Say Works for Bipolar Disorder
EA Shuts Down Social Media Games Without Refunding Money
https://news.ycombinator.com/item?id=5571702
For what it's worth, that guy is preposterousness incarnate.
> they show that temperatures have plateaued for the last 15 years

No, they really don't. The variation over the past 15 years, like the variation over the previous 120 years, is entirely consistent with a steady upward trend. Cherry-picking start and end dates is bad data analysis, period.
I was talking about energy and China seems to think there aren't better paths.
You can build your entire app on Parse and use Facebook for the identity piece. We provide native mobile SDKs that connect to a full stack of backend services including structured data storage, push notifications, and a server-side runtime.
The House of Representatives just passed CISPA 287-118 (18 abstaining)
I lived in both Tokyo and middle-of-nowhere Gunma. While I love Tokyo, middle-of-nowhere Gunma was even more enjoyable.

In particular, the bonds I formed with other foreigners out in Gunma were notable. When you see another foreigner in Tokyo, it's barely worth turing your head. But it's a special occasion out in Gunma—that almost begs for interaction. "What the hell are you doing out here?" And so on.

All the incredible wilderness, all the great hot springs, all the weird people, and you're still just 45 minutes away from Takasaki, and a few more from Tokyo. Here in SV, it takes me 45 minutes just to cross the stupid Dumbarton Bridge to get from Fremont to Stanford. There's a lot to miss in Gunma by comparison.
Statement from National Explosive Assoc. on Defeat of Bomb Control Legislation
This is an extremely smart and thoughtful comment. I can't find much in it to disagree with --- you could argue that the US Code shouldn't nail down specific kinds of network security attacks, because in 10 years there will be 10 new kinds we didn't think of, but there's nothing wrong with baby steps either.
Awesome ;-)

How about comparing to the lifetime of one person? With the US average life expectancy (78 years) that means you'd have to upload 800 objects/second for your whole life to get to 2 trillon :)

Edit: One S3 object for each fish in the ocean (3 to 4 trillion) could also be a nice future milestone (if also slightly underwhelming :)

Edit2: I also love the eye blink as a unit of time. Each time you blink (average is around 15 times a minute), XXX more objects will have been uploaded to/requested on S3
Any pointers? I'm hanging out in Bangkok for a month and don't know many people around here
Yes; we have a number of emails from the p2presearch ML, the cryptography ML, the Bitcoin ML, his Bitcoin forum posts, his whitepaper, and source code revisions & comments. This amounts to easily 80k of text, which should be more than enough to run stylometric techniques on him.

The real trouble would actually be getting enough text from all the 'known actors' you might want to compare him against (for example, one Redditor thinks Satoshi is Mike Reiter, but almost all of Reiter's papers are co-authored and he doesn't seem to have any other online presence, so what would you use as your Reiter corpus?).
Apologies for the confusing title. It just means we're part of the initial launch of the program announced this morning at FB's MobileDevCon.
I can confirm that 'exit policy: reject :' is the default on the Tor Cloud image.

Thanks for the clarification.
Or you can join IEEE for $13.50: http://www.ieee.org/membership_services/membership/join/join... . Just make sure to NOT give them a real email address, these guys are sending more spam than Nigeria.
Thanks for the reply. I've installed the android version and will play with it on my walk home through boston. Should be interesting :)

I do like that it shows billing cycle, however it appears to be off by ~2 weeks on my device.
I think it's mostly a brand awareness/marketing type of trade off. You get your pi hosted for free, and then you are impressed with their uptime, service, whatever, and you are more likely to recommend your friends use this company's services, or get a paid vps or something from them yourself next time you need one. I took advantage of edis's offer of free pi colocation in the past, and since then I've also purchased a vps from them, and had several friends do that as well.
How will web authors choose between Discus, Facebook comments and Google+ comments?
It would be nice to be able to select just one bus/train so that I can see when/where the next bus is.
I just read the definition of Cybersecurity Threat in the bill. I think the EFF's recommendation to specifically exclude the content of communication would be a major improvement.

I think the complaint that there is no real recourse if a company chooses to share information that does not fit the definition- as the bill grants immunity for such actions and there is no way for an individual to know the information was shared (in order to sue the Fed within the 2 year time frame required) is valid. So one improvement would be to remove the immunity clause. (Or something similar to Rep. Justin Amash's proposed amendment)

When Quest refused to participate in the Fed's illegal spying program, they punished them by moving a large contract from the company. I read nothing in skimming the bill that would prevent the Feds from pulling a similar stunt, promising immunity under CISPA as the carrot, while threatening them with a stick (money) like they did to Quest.

Another possible improvement would be to expand the mission of US-CERT, to make them the point of contact for all information sharing, require them to validate it is cybersecurity related, and then they become the clearing house and the single accountable agency within the US Government for all CISPA related data. (There may be another agency more suitable than USCERT, but I use them as an example.)

There have been several amendments proposed to improve the privacy protections in CISPA, but they have been blocked- and thus we are left to ask why? If it is all good intentions, why block the proposed protections that help ensure that good intentions don't go awry?
wget http://whytheluckystiff.net/SPOOL/DISCLAIMER
wget http://whytheluckystiff.net/SPOOL/URGENTLY
wget http://whytheluckystiff.net/SPOOL/JERKS
wget http://whytheluckystiff.net/SPOOL/BRICKS
wget http://whytheluckystiff.net/SPOOL/EXPERTS
wget http://whytheluckystiff.net/SPOOL/WHATSUPDOC
wget http://whytheluckystiff.net/SPOOL/PIRATEO
wget http://whytheluckystiff.net/SPOOL/NOTHIN
wget http://whytheluckystiff.net/SPOOL/TRIALS
wget http://whytheluckystiff.net/SPOOL/READING
wget http://whytheluckystiff.net/SPOOL/BURN

http://www.ghostscript.com/download/gpcldnld.html
http://downloads.ghostscript.com/public/binaries/ghostpcl-9.07-linux-x86.tgz

$ tar zxvf ghostpcl-9.07-linux-x86.tgz
$ cd ghostpcl-9.07-linux-x86
$ ./pcl6-907-linux_x86 <file you downloaded>

Here is what I got: http://imgur.com/a/VSzu0

UPDATE #1:

wget http://whytheluckystiff.net/SPOOL/YOUGETIT
wget http://whytheluckystiff.net/SPOOL/EYES
wget http://whytheluckystiff.net/SPOOL/FAREWELL
wget http://whytheluckystiff.net/SPOOL/FIRELESS

Here is what I got: http://imgur.com/a/4V38q

UPDATE #2:

wget http://whytheluckystiff.net/SPOOL/TORN
wget http://whytheluckystiff.net/SPOOL/AMANDA
wget http://whytheluckystiff.net/SPOOL/REVERSE

Here is what I got: http://imgur.com/a/MR90W
One data point is not generalizable. I was very successful building enterprise products, and I never figured out how to build anything for the masses.

I disagree strongly with your conclusion. If anything, save yourself some agony by building something for a market that you know well, and are interested in.
Completely agree with this one. Everybody wants to change the world, and they can't stop talking about it. All of these platforms started naively, they wanted to be popular, but no one knew how big they are going to become..
NodeFly's Node.js News Round-up for April 18, 2013
Me too...I've never played EVE but every dispatch I read about it makes it sound like something out of a sci-fi novel, as in, I can't believe there's an actual program in existence that allows such open-ended massively concurrent gaming...I mean, yes, all big MMOs (like WoW) have this, but it seems like EVE takes it to the next level in terms of how you can script/coordinate between large groups of players, like an actual general or tactician of a starship fleet in the distant future.
how do they make money?
what is their business model?

apparently they don't charge for messages and don't charge for ad space.

1. Build messaging app
2. !?!?
3. Profit!!
Apple rarely (did they ever?) uses a full kill switch on apps. They will stop further sales, but they will not, typically, disable features that customers already have in their hands. For example, I think the tethering in FlashArmyKnife still works for those who have it.
The limits of human economic growth on planet Earth
What behavioral economics can teach you about product development.
> if a company chooses to write its software in a comparatively esoteric language, they'll be able to hire better programmers, because they'll attract only those who cared enough to learn it.

I cant help but think of Jane Street Capital's use of OCaml when reading that line. From what I understand there are some extremely bright people writing fantastic code over there.
Just a note, it's a printer spool. So as new things are added, old ones are going away.
Obligatory SNL reference:

http://www.hulu.com/watch/285711
Satoshi seems to have been offering bitcoins to play with to a lot of people early on; a hacker of my acquaintance mentioned sending Satoshi 'hate mail' (he was annoyed by Satoshi contributing to the babel of half-baked P2P networks at the time) and Satoshi replied with some links explaining Bitcoin and an offer of some coins to try out. So false alarms are perfectly possible in tracking early bitcoins' movements.
You're missing the architecture:

+-----+
| You |
+-----+
\ <= encrypted _
+----------------+ | T
| Tor Entry Node | | O
+----------------+ | R
\ <= encrypted |
+------------------------+ | N
| Tor Bridge/Relay Nodes | | E
+------------------------+ | T
\ <= encrypted | W
+---------------+ | O
| Tor Exit Node | | R
+---------------+ _| K
unencrypted => \
+----------+
| Internet |
+----------+

The exit node is the only one that the wider Internet sees. All other traffic within the network is encrypted.
They dont need it. Look at the FBI's Carnivore Program, now obsolete. All they needed was a warrant (or, nowadays an NSL) to do so. Just because its not explicitly stated does not mean it cannot be a reality, justified by vague wording and obfuscation.
FYI, They make the top grossing game on iOS, 'Clash of Clans'.

And it's the company not the CEO- the first time I read the headline I thought the CEO was making 2.5 mil per day.
Creative Serial Entrepreneurship: 99Designs Co-Founder Matt Mickiewicz
More corrections--

>>3.1) unzip in ~ directory [ unzip in c:\ ] Requiring a path? Very poor.<<

Unzip somewhere else and see that it works just fine.

>>Where is that INI file? The README doesn't say. Oh its my.linux.ini (its not mentioned anywhere in the document).<<

#4.2

>>Oh, it uses an old way of importing GTop, the new way is to use the introspected bindings
from gi.repository import GTop
lets patch uselinux.py<<

Let's install the required python-gtop bindings

http://packages.ubuntu.com/precise/python-gtop
dpkg -i python-gtop_2.32.0+dfsg-1_amd64.deb
I used to use splits, then I used tabs + splits, now I just use buffers. The only time splits come into it are for quickfix or diffs. Just get used to buffers. Lots of vim commands will work with buffers but not with splits or tabs.

People new to vim will immediately jump on splits or tabs because of how their previous editor work flow worked, but you aren't going to unlock the full power of vim until you get used to buffers.

:b# last buffer used

:b num Switch to various buffers by number

:buffers See a list of buffers

:bd delete buffer

^^ map those to keys

cntrlp for easy buffer switching and opening: https://github.com/kien/ctrlp.vim
You're only using SSL which protects you vs relay attacks (it's doing its own MAC). Authentication is being done through the HTTP request Authorization header and the attached pre shared key.

Use SSL only, tune ciphers and you're good. You're wasting time trying to overthink the problem by adding another layer on top.
Open source software moves into all businesses
Real-Time, Turn-Based Google Games API Surfaces For Android
Nice find.

There were only 2 responses from women earning $100-150k. A suburban woman answered 'No', an urban woman answered 'Yes'. The vast majority of the remaining surveys were filled in by women earning $25-49k, which isn't OP's target audience. However, most women earning <$75k answered 'Yes', so the market might be large enough after all. Maybe not for haute couture, but for reasonably good prêt-à-porter, sure.
I lived in Akita prefecture for just a year while doing the JET program many years ago.

It may be true that it's hard to have face-to-face meetings with coders where you're at, but I would suggest getting involved with the community in whatever way is possible. One great way is to teach an English Conversation (eikaiwa) class for adults. Everyone wants to learn English in Japan and some of my best relationships were from my eikaiwa class. You may not get the coding aspect, but at least you'll form stronger bonds with the local community.
Here's the breakdown of votes by party: http://pic.twitter.com/FxePfKgYRc
The Boston Bombing Witch Hunt Bags Another Innocent Kid
i've made several big websites in Umbraco. It's very powerful, but has a bit of a learning curve for both developers and editors. At the moment, both the programming model and the UI are pretty out of date
WTF can provide instant feedback on anything from an idea to a full product and anything in-between.

One problem with surveys/questionnaires is that they are hard to create without loading the questions. Not to mention, they take time to come up with the questions too.

WTF is designed to give you quick feedback to one question: "Is my idea/project/feature any good?". By describing your project and putting it on WTF you have already filled out the requirements for feedback so you don't need to come up with a list of questions or ensure you are asking the right ones.

In short, we make it easy to validate your ideas and projects, gain feedback, adjust as necessary and then create the product that people want.

The other side to that coin is that you may find out that your idea has no merit which could save you lots of time and money.
publicity probably
Despite privacy concerns, CISPA passes in the House
so if you extend that thought a little further, what is the ulterior motive of the co-location company?
Errr, you do know that every able bodied citizen and those who have declared an intention to become one, aged 17 to 44, is already by law a member of the "unorganized militia"? That basic definition, with suitable updates (nowadays men and women are read where "men" is stated), has held since the very first Congress which also passed the Bill of Rights.

Also, the Supreme Court, 9 to 0, agreed that the dependent clause was irrelevant, and that the "individual" vs. "collective" interpretation was correct. They of course disagreed on what rights it confers, but the collective interpretation is as dead as can be (a terrible outcome from the millions of dollars the Joyce Foundation invested into trying to establish it).
Number 7 and below: how does that differ from everybody else?
Fun fact:
Women seem to be more willing to share their body measures than men:

http://www.google.com/insights/consumersurveys/view?survey=b...

http://www.google.com/insights/consumersurveys/view?survey=b...

n about 450 each