skysight-inc/HackerNews huggingface dataset:
I’d like to do some research into the time it takes from when blackhats find 0-days to [when] whitehats find them.

I'm also interested in this question. Is there existing research on this topic? Earlier in the piece he also claims this:

The thing you have to remember is the black hat world is 10 steps ahead of what’s commercially available. When a 0-day is released blackhats have used it for months.

Is this statement true? Are the top level blackhats more talented, driven, or greater in number than the top level whitehats? Obviously there is money to be made as a blackhat but not everyone has criminal inclinations. Script kiddies aside, intuition tells me that the intersection of people who have the skill to write an 0-day and the inclination to be a blackhat is smaller than the intersection of skilled/honest people. Not to mention that you can make a perfectly legal fortune (ethics aside) selling exploits to security firms which on-sell them to governments. [1]

I'm also interested in his statement about virus scanners - are they really useless? I use Chrome, MS Security Essentials, dont click on devious looking links...and I've had 1 infection flagged in the last 3 years (thanks Adobe). Are there stats on how many infections dont get noticed by anti-virus software, even if you keep the definitions up to date?

[1] http://www.forbes.com/sites/andygreenberg/2012/03/23/shoppin...
we ignore at our peril.

Yup, developers do. But clients and users don't. Just make it work!
The worst place to start a startup from is "I have to start a startup." It's hard to do that even if you're awesome. Take a long break and don't do any startups.

Do some side projects, get interested in something. If you've got a lot of interests you'll invariably have a lot of inspiration.

If your inspiration consists of "FUCK I NEED AN IDEA" you'll probably fail miserably.
> they won because they were literally better than the rest of us at what they do

That's just not true. Are you saying Katy Perry, for example, is better than the rest of musicians at what she does? It's just not true that "success" follows "better than the rest". It trivializes what success is to frame it in that way. There are many, many more factors that contribute to "they won because..." other than being good/better/best.
I think they're trying to best duplicate a real universities course listings.
Stop Validating Email Addresses With Your Complex Regex
And this is why they say to keep politics off of HN. None of your assertions are backed up by fact. It's really disheartening to see this nonsense here.
Why would they need/want f.co? They already own fb.me. f.co is one letter shorter and isn't as easily identifiable as fb.me.
That (or something like it) is true for the process as a whole, but not necessarily for main. It's usual to call main from a library-provided function, so it returns just like any other function. This removes the need to special-case main in any way, and provides a space for any system-specific startup and shutdown code.

If you've got VS2012, you can see this code in the file at something like "c:\Program Files (x86)\Microsoft Visual Studio 11.0\VC\crt\src\crt0.c" (it should be easy to find for other versions - it's been in pretty much in that place, with that name, probably with those contents, since VC5 I think).

For glibc, see http://sourceware.org/git/?p=glibc.git;a=blob;f=csu/libc-sta....

My post was a bit x86/VC++-specific but the principles have been common to all the C environments I've used. I don't think I've ever used one that by default called your startup function directly, bypassing C runtime initialisation. (Though it's very easy to set this up with Visual Studio.)
Steve Jobs in 2002: "Design's a really loaded word, I don't know what it means. And so we don't talk about it much around here, we actually just talk about how things work Most people think it's how they look, but it's not really how they look, it's how they work"

Video: http://youtube.com/watch?v=sPfJQmpg5zk
and he was all like "19 grand, brah!"?
Interesting that npm is being used to deploy a regular old CLI application that has essentially nothing to do with javascript development. Are we seeing the future of package management with these distribution-agnostic tools?
Katy Perry is not as technically capable as some other musicians. Yet she is more popular than them. Which is she trying to do, make music or be famous?
Look dk domain http://dk resolves even without the subdomain.How's that possible?
Not working:

http://a.co/B0083PWAPW

Working:

http://amzn.com/B0083PWAPW
Link doesn't work for me?
Got A Wound? Science Says Rub Some Dirt In It
Ask HN: Now that time has passed, what RSS reader did you settle with?
Great write-up. I've started recently to compose a lot of table view cells just using subviews, not thinking back to the days where I had to drawRect the subviews. Performance has seemed to catch up, as this article notes. Thanks, Florian!
You wish that were true? It's fucking terrible.

Take a look at their front-page right now. Or tomorrow. The whole op/ed section is filled with the same crap that every politician is talking about. Strategically balanced so that they're acting as stenographer for both side's media consultant.
Seems like you've been going at 110% for a long time. My recommendation: take a break. A month at least, and just explore passions that you never had the time for during your adventures. Build something fun (I like go-karts and mini bikes), read about something totally new and unrelated to programming (history, evolutionary psychology, fiction), and challenge yourself physically (strength training and endurance).

It's easy to get caught in the echo chamber of the Startup world. The reality is, it is very hard to strike it rich in any industry. That doesn't mean we should stop trying, but just try to enjoy your life along the way by diversifying your time investment portfolio. That means that even if every attempt you make fails, you still enjoy the journey.

So go out there and have some fun. Don't worry, there will be plenty of opportunities for startups when you return.
Doesn't resolve for me.
I guess that's what I'm asking. The only thing I know it's really useful for is making small QR codes. Of course, a lot of people would disagree about the utility: http://picturesofpeoplescanningqrcodes.tumblr.com/
You are very confused. 501(c) status is about being a non-profit, not necessarily a "charity". Only a few of the current 27 categories of 501(c) organizations can reasonably be called charities, look at the list: http://en.wikipedia.org/wiki/501(c)_organization#Types, e.g. see 501(c)(16) for farmer's coops.

501(c)(4) organizations are mostly not charities, e.g. the NRA's lobbying arm, the Institute for Legislative Action, and the current version of Obama's Organizing for America (Organizing for Action) are examples that passed IRS muster, and the vast majority of the ones maltreated by the IRS were going for that status.
Slaves had a capital cost, and for a healthy young male I've read it wasn't small.

True, but you also got new ones for free when your existing slaves had children.

They then had to be provided with food and shelter

... which was provided at the absolute minimum level required to keep them alive. Clapboard shacks and gruel are not exactly expensive.

Not sure if it's relevant or not if they got what went for medical care back then

Medical care? For serious? Slaves cared for each other more than their owners cared for them.

The 19th century was when slavery and serfdom was technically abolished in much of the world, but the US was the only place where that loss of wealth was not compensated, and the country as a whole suffered from the impoverishment of the South.

Blame the slaveholders for that one. Proposals for compensated emancipation were routine in the years leading up to the Civil War. But the slaveholders weren't interested in compromise; they took a hard line against any proposal that involved emancipation, compensated or no. And when it looked like they couldn't hold that line any more, they seceded.
z.com used to go to a site for Nissan's Z
10 Survival Skills for Knowledge Worker
Wow, I'm still a relative newcomer, but I constantly pull up the CSS and JS for any site that seems interesting. Considering how easy Chrome devtools makes it to play around with sites, I figured most enthusiasts/professionals were doing the same thing.
Lighten up sourpuss.
It's written in javascript and requires nodejs to function, which comes with npm
If it wasn't being used by the public, then the protocol wouldn't be rapidly changing. Internal use, even by a company as large as Google doesn't give enough variety of circumstance and use-case to drive the changes.
Why Suicide Has Become an Epidemic--and What We Can Do to Help
Addicted to Urgency. Project Management & Retail Marketing In Crisis Mode
both of this links "worked" for me, only one of them took me to the product directly, the other took me just to the homepage with Kindle suggestions instead of the suggestions served up by http://a.co i'm guessing that's what you meant.
It's owned by the danish top level register. I guess they just added a dns entry for that.
A TLD can have an A record, so in theory you could have a "0 character" domain. You could also use it for email, so a@co would be a valid email address if co. had an A or MX record associated with it.
I genuinely believe LIFX, Spark Core, and Lockitron are currently the best new products in their markets.
This time I'll argue the other side.

A lot of web applications routinely do many I/O operations per request handler. For example, do a DB query, then do something with that data, then conditionally do another DB query based on the results of the first, then do something with that data, then query a REST Web service, and so on. Blocking APIs make this very natural; add high-level abstractions such as an ORM, and you don't even think about the fact that you're doing I/O. With something like Node, application code of this sort degenerates into callback spaghetti, unless you use something like the fiber module, or a compiler that transforms the natural, straight-line code into continuation passing style. Though I've previously argued for the potential advantages of using the same language for both the client and the server, I fail to understand why something like the fiber module isn't standard in Node, or why the kind of compiler I described isn't more popular. Perhaps that's just dogmatism or a cargo-cult mentality.

An event-driven system might be good for "real-time" applications where many clients connect and wait to have things pushed to them. Even then, I think coroutines or lightweight threads would be fine, as long as they're the norm for a runtime environment and its standard library (e.g. Go, and Haskell IIUC) and not bolted on (e.g. Python's eventlet and gevent).
Time/date/UPC. That should fit over a 9600 modem line, and that's before you add compression.
Take a break. Code for fun, not profit. Connect with your community, see who's working on what.

The excitement and passion that leads you to create something rarely sticks around when things get tough. You have to press on regardless or quit. It's difficult to press on if you can't see any progress, but its often more refreshing and exciting if you step back and take a totally new angle on things.
Does the browser keep the entire gif in memory? That could be a problem with long lasting sessions...
So...can anyone who has worked on CMS projects explain how the costs for such things could run up to $150 million?

I honestly want to understand.
There was a post on HN a few months back of a gif-based realtime message transport : https://github.com/videlalvaro/gifsockets#readme
I have always wondered about x.com and how they got that domain. Does anyone around here know?
this isn't about lisp books, this is about examples in lisp books translated to clojure.
Yeah, that is about what my closest call was like.

What I've always found interesting is the lack of sound in about half the cases I've learned of. In my own closest call, which was 23" away from my left arm (streetlight), I remember hearing a buzzzzzz-bzzt and then wondering why I was in the air falling toward the mud.

About half a second later a giant crack happened, from a stringer off the main bolt.

In the first video I referenced, it wasn't even that loud! The whole sound/proximity question still fascinates me.

As for your experience, I've been a fisherman for most of my life. Thankfully, I've not had really bad experiences with lightning while fishing, but yours is a great lesson.

And one thing to note is that a fishing rod is one /hell/ of a lightning attractor. If you've got carbon fiber near you, get away from it rapidly.

> Small storms can be more dangerous that big storms. If you hear thunder, take it seriously.

This is extremely important as well, because we'll often disregard a towering cumulous cloud with the classic "aw, that ain't a storm!" That can change in seconds, because powerful updrafts can move upwards of 100mph. Being outside in a highly unstable weather environment is inherently dangerous.
The Day our investors came to see the office (2011)
News service served with cease and desist after server access
Mine is a short reflection but I crave for the day in which all human beings will be able to work for free, not for money.

That's just never, ever going to happen. Never. No one would do the "dirty jobs" if there was no reward for doing so. Take law enforcement for example. Sure, everyone would "play detective" for free, or everyone would be the captain. But who would be the guys who ride in the motorcade to protect a child rapist while he rides to prison? No one would do it "for free". There's too much risk. Who would be a prison guard "for free"? It's absolutely asinine to think that "technology" will progress to a point at which humans are not needed for any menial/dirty/dangerous jobs ever.
It is "just a domain". Top level at that. If you control it, you can point it to an IP.

There are more, http://shii.org/tech/tld.html
one major use-case is tracking. The short-url goes to a redirector where the visit gets tracked. That's the most annoying part of short URLs.
Didn't they get the call last year: http://www.pcmag.com/article2/0,2817,2409669,00.asp
watch the show first otherwise you will hate it... i made the mistake of picking up the books after season two and now watching season three is torture
It sounds to me that you are burned out/living on thin energy/emotional margins, you don't know enough people, and you are following idea groupthink so you don't really believe in what you come up with.

I think that all of these problems will be solved by working a good full-time job for a couple years while writing an interesting blog and promoting it. You'll recover your energy and confidence. You'll be working through your thoughts, finding your voice and grappling with ideas every time you write. You'll be connected to people who share your interests, and who will give you strong feedback on/insight into your ways of doing things without your having to build a whole company first. And eventually, you'll intersect a great idea with the right person/people and be ready mentally and physically, and things will seem much different than they were in your last go-around. Hope this helps.
Seems appropriate that the default C program, as it were, segfaults.
> By this point you could easily have been confused for someone describing amd64 (nee ia32, nee Pentium, i486, i386, 80286, 8088, 8080, 4004.. circa 1971).

He said "We need a real bytecode for the web" not some architecture-specific machine language like x86 et al.

LLVM or JVM are examples of bytecode. They're highly portable (at least the JVM is), and they're not the mess that practically any real hardware instruction set is.

> last I checked they were busy trying to shoehorn an architecture-specific binary format (bitcode) into something that might run on multiple machines

The bitcode you're referring to is LLVM. It's an architecture-independent assembly that can be used to target most major real ISAs. For instance, the Clang compilers use LLVM as their backend. Any programming language designer could use LLVM and instantly (and easily) be able to generate native code for who knows how many different architectures.

So I think the parent poster was right in what he/she said.
Huh. Color me confused.

I lived there 1998-2001 while attending Gonzaga. We had a ton of storms in the spring and summer those years. Must have been a string of odd years.

I live in San Diego now - I haven't seen a good blitz of a storm in sooooo long ~_~
That makes a huge amount of sense.
I use them when sharing links to things that have seriously long URLs. For example, a link to Google Maps looks like this: https://www.google.com.ar/maps/preview#!q=Great+Pyramid+of+G... (291 characters long).

And other people use services like goo.gl to get analytics on links.
The same reason Google owns Gtaxes. It might be useful in the future and better to have it yourself than someone else? I'd imagine FB would want to squat on it at least.
the last point is the best one, maybe just scroll down and read that one
First: Sorry for my English, French people are dumb with other language

I failed few startups too.
Same story, same problems....
Sadness, Depression, Shame...I take a break (2 weeks)
Since 3 years, 5 startups, I find my solution a morning right behind my coffee.

LEARN BLACK SEO !

It's just what my new projects run better than other, I learn BLACK SEO for push up.

Don't forget to enjoy your life, mine are not so bad during 2 weeks :)
This is great. I never learned GIT because I didn't want to pay to get a private repo. My next project will be on GIT thanks to this!
Twitter explains their use of t.co on the root of the domain:

http://t.co/
A coffee shop in my city uses Stampt[0], so I see someone scanning a qr code nearly every day. Still, that tumblr is pretty dang accurate.

[0]: http://mobivity.com/stampt/
Nothing special about a tld resolving. You can put an A record on anything. Many companies set up internal DNS names like "go" or "wiki" so that they resolve to helpful internal tools. This is like a public version of that.
The global top-level domain is a dot (.)

Point your browser to www.google.com. and it will resolve the same.

com. and net. and dk. are top-level domains, but still are "subdomains" under the global ".".

The administrator of the dk tld just pointed a dns record at it.
that story makes me sad...
OFA only switched to a tax-exempt organization in January 2013. I don't know the full story behind that, but I feel that their activity before 2013 was primarily political and shouldn't be tax-exempt (and it wasn't).
I might have purchased ap.pl or aa.pl instead. (Which one is their stock identity?)
Good enough don't enter into it--luck more than anything.

The wrong product at the right time can help you laugh all the way to the bank, while the perfect product when nobody is buying will languish in obscurity.
Mr. Money Mustache answers early-retirement doubters
"need to accept that you're not good enough ..." - Are you kidding?
1) Dont ever put someone down like that
2) Just because you are a quitter doesn't mean other people are.

Thank the heavens all the great men and woman who pushed through failure after failure before their success made a dent in this world don't think like you
The oldest "0" in India for which one can assign a definite date
I always say No because I usually enter a store with a product (or product type) already in mind and just desperately want to avoid getting upsold by the packs of roving sales peoples trying to boost their commission by selling me something I don't need.

I have occasionally had good experiences talking to sales types at retail places (including just a couple days ago) but normally if they get persistent I just end up ducking out and getting what I want from Amazon.
I use them when sending URLs through text messages.
>What exactly is $40 a month going to fix?
Just for the sake of the argument, lets say:

- Facebook

- Google

- Microsoft

- YouTube

- Twitter

- Pinterest

- Good old Gov't

- Medical insurance

- Pension funds

=> 9 * 40 = $360
Still not a wage, but nothing to sneeze at.

Not that I believe this is feasible, but it's not just FB collecting massive data and translating it into revenues.
working here , thanks for sharing .
Yup, freenode is a great place to get on the inside of any project.
Yea - I always wondered why they even bother splitting a 2 pager into 2 pages.

I really like the trend of single page long form content now though. NPR does a great job of it that makes it a much more engaging experience - http://apps.npr.org/unfit-for-work/

They also don't have to worry about ad revenue though.
I'd argue that Scrollkit damaged their relationship with the NYT in order to ameliorate their relationship with Silicon Valley.

It's hard to tell Scrollkit's business model from their splash page (like the article says, the only copy is "we are looking for publishers with big stories to tell."), but if I were to guess, the 'big fish' like NYT/WSJ/etc. are never going to use scrollkit, at least in the short term: these are the publishers with dedicated engineering teams.
"People wouldn’t (especially men) enter a store just for the sake of it, they want help."

I prefer to engage with others as little when I enter a store. I want to find the stuff I want, pay for it, and get out. I'm even willing to spend twice as much time (or more) looking for what I want than I would have if I have go engage with a store assistant.

I'm not exactly socially awkward, either. I just hate shopping. I find stores quite adversarial. I feel that assistants aren't really there to help me; they're there to maximize profits for their employer. I prefer to make a buying decision without the time pressure I feel if I'm being helped. If I'm told "you look great in that" I am unable to figure out if it's really suitable for me, or if the assistant just wants to make a sale, or if the assistant hasn't been able to judge me accurately.

My answer to “Are you after pants or tops today?” will always be “I'm just looking; thanks.”
Is there a business in recasting software from one domain to another?
As a software developer, one thing that bothers me is when I see quality software in one domain that seems to be a good starting point for solving problems in another. For example, a nursing home patient management solution that could be a good starting point for school/student management. Another example might be a secondary ticket marketplace that could be the basis for Affordable Care Act state insurance marketplaces.

Understandably, the companies developing the source packages are reticent to take focus off their primary businesses to even consider my 'recasting' proposals. So any solution to this would have to be super easy and effortless for them.

Anyone else ever think about this?
Motion capture for dogs
http://www.dk redirects to http://www.telenor.dk
"Rosen, who has not been charged in the case, was nonetheless the target of a search warrant"

From the article. So in spite of not reading the article, their comment was correct.

You do know that it is believed that someone died as a result of this leak?
I agree, its a mess with regard to expression - isn't that why this thread exists? The language is fun to write but eye-gouging to maintain. Of course you could apply strict conventions to make it maintainable, but at that point you might as well be in a statically typed language working at full speed in an ide.

After coding JS by hand for years (while doing other languages) I'm done with it. I'm ready to go preprocessor full time, either static language based but also interested in lisp variants, because if I have to go typeless, might as well do it in style.

I tried CoffeeScript for a while, but the philosophy is too similar to JS to keep my interest. It did reduce the code dramatically though, on avg about 70%.