skysight-inc/HackerNews huggingface dataset:
I may not have been very clear about the point I was trying to make. Search (and other services) do make up their core business, and people confuse the issue when they exclusively focus on advertising because it is the source of most of their revenues.

One could choose to talk about Mozilla as a front end to Google, or newspapers and broadcast television channels as sellers of advertising. However, focusing on this intermediate step to the exclusion of the complete system obscures rather than clarifies an understanding of how these businesses operate.

It is not merely a question of semantics. Fixating on advertising alone doesn't shed much light on how Google optimizes its business decisions and creates value for its owners. A parallel might be to focus only on the income statement, cash flow statement, or balance sheet of a company rather than looking at all three. Narrow perspectives, even when masquerading as pithiness or cynicism, are poor aids to understanding.
Well people may be excited about them getting already to 100k. Problem is 50% of that money comes from people who spend 1k or more - three of them spend 10k each. So I don't see potential for a failed Kickstarter campaign which would be a disaster for them
From what I've seen, men who actually push women down get thrown off the escalator, so to speak. I don't think men are actually pushing women down. Crowding them out, maybe, but not pushing them down. Of course I'm not in SV, so who know what brogrammer stuff goes on there.
I could already do that by composing in a separate window.
Honestly it doesn't bother me at all if they are self-sustained. If they generate more revenue than their costs, then big deal. If, long term, they spend more money than they're able to generate, then the project is a complete failure imo.
If you are indeed underpaid, the first thing you need to do is get better offer from another company. At that point, your current company has to match or you leave.

Don't ask for more without an offer - it might work out but you risk compromising your current position without a having a backup.
Hmmm, code-signed js would seem to fit the bill, no? I guess that fundamentally, it is still using the same CA structure that SSL is. This, however, has no solution even for compiled applications: if the servers private key is compromised then all bets are off.
Do you think white women historically had it harder than black males?
I filter to a label and skip inbox. Once in awhile I scan the list (rather lower volume at this point) and see if there is anything I can help with, then I select all for that label and delete.
I'll happily do that. When can I swing by to chat?

Different systems are secure against different threats. Sticky notes are secure against people who can't get physical access to their location.

The question in this case is what attacks this experiment is secure against.
Thou shalt have but one Gmail label, and that label's name shalt be "Needs Reply".

I'm glad this works for you, but keeping track of and searching through years of emails -- and chats -- with dozens of disparate people and clients makes labels, or something similar, indispensable to me.

Going overboard and having a label for everything under the sun would, for most of us, decrease their utility. But in at least some use cases, having many labels definitely is not in and of itself a bad thing.
I don't follow what you're saying about a list, but if you're saying that either or both help, the key thing to remember is that it isn't a dichotomy. In the context of HN, what startup isn't trying to hire all the smart and capable people it can?

If it comes down to two people, and there is a perception that A is better than B but both A and B are excellent candidates, a great company hires both.
Maybe the higher ups want the manager to fail. They've given the manager one team already which failed and now they've given him another team. The poor dev is just stuck in the middle of a power play.
If this:

> Vocal fry is just another manifestation of "I'm cool because I don't care."

is in the spirit of scientific inquiry and not a value judgment, then I probably need to get some fresh air.
Yes, in the middle of the 20th century almost no doctors or lawyers were women (just a few %). The change in the status quo did not happen by magic. The respective professions made a concerted effort to address the historical disparity, and did so simply by hiring/admitting more women. Eventually, the fields stopped being so blatantly male dominated and the new ratios were "sticky." Today, law schools and med schools don't have to consciously try to hire women--their pool of qualified applicants just breaks down evenly.

But tech is too idealistic/libertarian to do something like that. They'll continue to complain and be criticized for the representation of women in the field, even though at this point I think it mostly comes down to a self-perpetuating equilibrium: women self-select out of the field simply because their representation is low in the field and very few people want to bring upon themselves the challenges of being a minority.
Biggest problem I see how would a customer find your app? And how do you get enough users for a barber to care?

Also, what would be the benifit of this over groupon's scheduling?
http://techcrunch.com/2011/12/07/groupon-debuts-scheduler-to...

I'm not sure your target market is big enough. men that don't use franchised shops, want another barber, and search for an app.

I'm not trying to be discouraging, but i think you may want to pivot your idea a little. On the plus side I like the website.
12 obsolete technologies Americans still use
Ahhhh, I recognize that user name! Thank you!! :D
This analysis is very much wrong. So many people don't use their ISP's DNS servers, especially in Europe/Asia. Physical proximity does not guarantee improved latency, and many times latency varies to/from the same node, based on traffic.
JackDB Support for PostgreSQL Run-time Configuration Parameters
I'm going to have to give it a try, but 1Password doesn't require a yearly fee for the "across devices" version, due to Dropbox being essentially free, whereas it's $20/yr for Dashlane if you want that.

Any way I can get the 1Password+Dropbox goodness for Dashlane without paying $20/yr?
Show HN: Storage.js - Light-weight LocalStorage jQuery wrapper for quick usage
New service Copy offers 22GB for free and is iOS/Win/Mac/Android compatible
TPM and other political blogs often cover national security, etc. Recent posts on that site indicate that they spend at least some time and money on legal counsel, but not necessarily for libel.
The Walt Disney model of sustained growth
How Happiness Changes with Age
If Amazon were as ubiquitous as Facebook, we would.

In most situations where we've used a Facebook login, it's simply to avoid forcing the users to create yet another account. We don't pull any real data (except maybe a couple things, again, for their convenience - to fill out their profile) like their name. We push nothing back.

Being able to say "Hey, just login. We don't actually care about your information." would be much preferable to Facebook's unnecessary "This app is requesting permissions to access your profile and friends list." We don't need that information.

I guess maybe that's our fault for abusing Facebook integration by using it simply as a single sign-on service.
> A metaphor is not an argument. It can be a great way to introduce or conclude one, but it should never be the main course at an idea buffet.

I liked how you illustrated this by making an argument and then concluding with a metaphor.
True, especially since Mad Men ends up on Netflix a few months later.

It's even worse with movies; most you can't rent, and buying them costs as much or more than buying DVD's or Blurays (if you impulse buy on sale, which I always did).
There's a difference between problems that are challenging because they're complex puzzles, and problems that are challenging because they're poorly defined or full of bullshit constraints.

Asking you to empty a dumptruck with a spoon in four minutes, by your reasoning, is hacker ecstasy (and no, you aren't allowed to threaten the operator with the spoon).
I'm sorry, but this blog post is suggesting I should have a big shiny button at the top of my email inbox that will show me "Promotions" from Google Offers and Zagat (also owned by Google). That rubs me the wrong way.
Well, I think it's pretty obvious from the comparison with the Leaf that the author doesn't have great faith in Tesla succeeding in making a profitable car and surviving without subsidies and credits, so there would be no future jobs or real environmental benefits.

This can be disputed, of course, but as it stands it doesn't make much sense to point to such factors as missing, in my opinion.
In that case is it possible to design a secure application? Can you design an application used by real world people that will remain secure even if the infrastructure that controls it is taken over?

If a server is taken over, the best one can hope for, is sufficiently layered defenses to limit the immediate gains of the attacker and an alarm to warn users not to trust the application until further notice.
Absolutely. I'm not saying they shouldn't do it, or that it's bad or anything like that. New email interfaces is just one of these things that has never been really useful to me. I tried Mailbox for a bit but it's solving a problem I don't have. This new feature seem as well.
Worse: red blood cells contain no DNA, right? No nucleus. So they're depending on finding the much-scarcer white blood cells?
> Leave something on the table

This is super important. In business, everyone is trying to make money, and if you don't help others achieve that goal, you are a dysfunctional businessperson. And generally, leaving some value on the table translates to better relationships with people—a natural consequence of giving people what they want. An employer becomes a boss when he or she can't get you to pull your weight.

You need to deliver.
I'm not trying to say programming in it's nature is a 'masculine' thing but the things that draw people to programming tend to be things men seem to enjoy more. There are industries that tend to draw men and there are industries that tend to draw in women (but not exclusively with either).

The article suggests that women are not 'doing well' in the tech industry because men are holding them back while completely ignoring that fact that many, many more men that are interested in tech, than women. Many women are just not interested in the field and never even make it to the scenario the author suggested.
This is a biotruth argument. It is a post hoc rationalization of society and its institutions to say that existing inequalities and problems are justified via biology. Not only does this argument depend on stereotype definitions of men and women that are useless, it also serves to deflect criticism of actual problems with sexism ("It's just nature!").
It's easy to underestimate how many years you need to be willing to put into the startup. A fraction of startups succeed, and a fraction of that fraction succeed quickly. If you're only willing to put in a year or two your odds of success are astronomically low. Plan for the long term, it's not a sprint.
Indeed, I think the analogy hides circular reasoning - OP simply assumes what she wants to prove (men have a steady rise to the top).

Just looking at two other comment threads today - the guy on the doomed project and the guy sacked from Facebook within his first six months (https://news.ycombinator.com/item?id=5784751 and https://news.ycombinator.com/item?id=5785759) - I have an alternative analogy. Y'all can let me know if this is more accurate:

There's a whole row of elevators. Some slowly head upwards, some downwards, some don't move at all - however, elevators can change speed or direction at any time. More often than not the change is in the downwards direction. Some of the faster-moving upwards elevators have velvet ropes or guards blocking them. It's hard to tell, because you can't really see more than one or two elevators at a time, and the guards are inconsistent, but it seems that to get onto the upward-moving elevators it helps to be straight, white and male. But to get on the really fast moving upwards elevators it's more helpful to be rich, well-educated, socially polished, and connected.

Complicating the picture is the shit cannons. Patrolling the top of the elevators are grinning guys in suits holding super-soakers filled with raw sewage. They blast the climbers at random. A few climbers make it to the top from their own efforts, fortunately avoiding any shit. They believe their success was down to hard work - onlookers say that they merely got lucky. What they really mean is that they weren't unlucky enough to be blasted in the chest with enough shit to send them back down to the bottom. Some people get blasted with a weaker, endurable stream of shit - these people often say that shit sucks but that you just have to deal with it. If you thought that it was grossly unfair that some people had access to the super high speed escalators, keep in mind that these escalators also feature the most brutal and indiscriminate shit cannons. A lot of the shit guards intentionally target women, though a few intentionally leave women alone. Others have other prejudices. It's pretty arbitrary.

Sometimes an entire escalator collapses. Everyone falls to the bottom and has to start again. Except the guys at the top, they're safe.

It's generally agreed that in the past, many more escalators moved upwards. With a few exceptions, a lot of escalators have collapsed or starting moving downwards in recent years. Still, everyone agrees that they're luckier than the guys born far away, who have to fight desperately just to get access to the least desirable escalators.
The software source for stuff like /usr/bin/ssh is a thing that has some serious infrastructure, well-established procedures and well-organized people. Right from the start the trustworthiness of that source is higher than average, arbitrary site.

I say "arbitrary", because I assume you would want to serve this JavaScript solution from your own site, the way people do with jQuery.

On the other hand, if you do decide to serve it from one central place, then you could establish similar level of trustworthiness for that source, but your solution would still be at a disadvantage. Running JavaScript is like downloading new software to your home directory on a regular basis and executing it; you don't need to compromise the software source for /usr/bin/ssh, you just need to compromise a less trustworthy bit of software and then make that bit modify the in-memory behavior of /usr/bin/ssh (because JavaScript doesn't have the kind of security the OS gives processes).
This is bad even as contests go.

1) You don't provide a concise summary of what threat models you are considering. So in that case, my attack is: I break into your server and silently swap your code with code that ships me your user's password.

2) You don't even give a human readable listing of your site's source code. Reverse engineering is tedious work that's entirely different from cryptography or security analysis. You can be sure that any motivated attackers will have skilled reverse engineers deconstruct your system and then hand off their results to skilled security analysts/cryptographers.

But that sure as hell will cost more than the paltry $1000 you're offering here.
You posted the link like this:

"...I wanted to see how easy it was to fail in practice so I built a simple app: notecrypt.appspot.com"

If you copy and paste that into your browser, your browser will make an HTTP request. Your webapp will send back a 302 redirect with an HTTPS link, but if I'm an attacker running sslstrip (http://www.thoughtcrime.org/software/sslstrip), that won't work.

What's more, you don't set HSTS headers:

$ curl -i https://notecrypt.appspot.com/
HTTP/1.1 200 OK
ETag: "ibqapA"
Date: Wed, 29 May 2013 18:59:37 GMT
Expires: Wed, 29 May 2013 19:09:37 GMT
Cache-Control: public, max-age=600
Content-Type: text/html
Server: Google Frontend
Transfer-Encoding: chunked

...so anyone that types "notecrypt.appspot.com" into their browser in the future will continually expose themselves to the same vulnerability.

At that point I can just modify the JS that gets transmitted back to the browser such that it doesn't actually do any encryption.

As always webapp-based JS cryptography is reducible to the strength of SSL. If I can break SSL, I can break your JS crypto, so there's really no point in doing the JS-based crypto.

How do I collect the $1000?
If you ask for a higher pay based on an offer from another company, you're already screwing yourself over.

Your current job MAY accept your pay increase but if they do, there's already a break in trust. And you're setting yourself up for being replaced. You may as well take that new offer right now.

Better option is to negotiate based on skills, experience, responsibilities, and other factors.
I care little what timber companies do with the land we gave them last century. But if they're cutting down OUR trees on OUR land, then they have to replant that acreage. If they can't do that profitably, then too bad. There is no right to profit.

You have shown you know very little of the timber industry. Private landowners are under the same laws with respect to replanting as the public lands are. Public lands are logged, sold, and the profits returned to the public in the same free market system. No matter, it ALL has to be replanted.

On what planet do you think someone is just letting perfectly good land that can support a forest just sit barren? Unless it's re-zoned into something else, that's not profitable nor sustainable. Our forests are very sustainable.

Timber, pulp, paper are all cyclic. Always have been, always will be.

If you think the pulp and paper industry will ever be what it once you are fooling yourself. In the electronic age paper is far down it's not even funny. I grew up in a pulp and paper town that is a shell of what it once was.
If you add up the total time the telescope will be available to the public in minutes (please, correct me if I'm wrong) you get:

30 * 1000 + 3 * 30 * 500 + 3 * 30 * 500 + 10 * 30 * 100 + 25 * 30 * 50 + 25 * 30 * 50 = 225000 minutes = 156.25 days

This is not really a lot. The remaining time will be used by Planetary Resources. There is no way for public to continue using the telescope after that.
That makes more sense. That would be pretty neat.
Yeah... I've actually lived in Texas. But you just keep on believing whatever makes you feel intelligent.
Just FWIW, I love the new Gmail compose as well. It is indeed useful to be able to go through and consult previous emails without doing the back and forth for writing one mail. And I really love Gmail for all the small convenience things they keep on doing, like including a 'Track Package' button in the 'product shipping' email's subject itself ! As far as I know, they were the first to do many innovative things, like drag and drop to attach files! They shouldn't stop trying new things.
I asked an astronomer friend of mine to look at the specs and got a small list of advantages:

-No atmosphere. Seeing would still be a considerable factor; getting 1 arcsecond resolution on Earth is not easy.

-No clouds

-Ability to focus on the same object for an extended exposure

-Infrared

-Can look north and south

There are a lot of advantages to this, even with their aperture size.
There are a few legal reasons: there is a difference in the expectation of privacy when you never actually hand the plaintext message to the server. This is the logical equivalent of a the difference between letter mail and a telegraph. With a telegraph you have no expectation of privacy and therefore no legal right to keep that information secret as opposed to your letter mail. Furthermore, the government cant legally force a company to not insert a backdoor but crack their own security (at least as of yet). The latter statement meaning that it cant force a security company to hack their customers to get their keys. I think that while these dont result from any specific crypto issue, they are very real legal issues.
Counter offers have a really low success rate in my experience. That person has already weighed the pros and cons of staying and decided to leave. It won't take much to push them to leave again.

In addition, everybody else in the company now has an incentive to look for a new job themselves since they see a short cut to get a raise.

Better to keep people happy by offering market-rate salaries in the first place.
The Taco Truck gets one thinking about a concrete example and looking at its processes. Unlike a bank, any software solution for a Taco Truck is likely to be generalizable across a large range of businesses [whereas a bank might get one thinking about something as narrow as international wire transfers].

Look at the examples given in other comments - inventory, vehicle maintenance, planning - if a Taco Truck could use it, a lot of other businesses can too.

The danger is coming up with a Taco Truck specific payment handling solution rather than a generalized one. The Taco Truck Solution leads to an email feature implemented in a subset of Common Lisp. The generalized solution leads to Stripe and competing with PayPal.
Making A ListView Timeline
Just as an anecdote, a friend started playing the guitar in high school and he loved it and played constantly. However, he never reached a level at which he could be considered an expert despite his incessant playing.

What did happen is he eventually hired an expert to teach him, and well into his 30's he's improved his playing significantly, now that he's focused his playing into actual practice. I think that's the key difference in this discussion.
>The requested page could not be found.

The article seems to have vanished.
Its naive only becaue it is idealist. If you have read her non-fiction, The Romantic Manifesto might give you the reasoning behind it. Art is the realm of the ideal, not the real. (I often give the analogy of the cave painters wasting their time painting skinny meatless cattle (which may have been the reality) instead of fat cattle that would feed their tribe for months...). And we all know what ideals are don't we?
> Interesting metaphor, but the author could've substituted "women" with "blacks", "hispanics", or any non-white male demographic and the article would've had the same effect.

There is an important distinction between women and blacks and hispanics, which is that the various challenges facing the latter groups are deeper and more varied. If you pick a random black man in the U.S., statistically his parents will be poorer and less educated than if you pick a random white man. So equality for those groups is deeply tied up with persistent economic disparities.

But with women that problem doesn't exist. An equal number of boys and girls are born into rich, well-connected families. Which eliminates a whole class of issues that could cause disparities between males and females, and makes the problem of gender representation in a way "easier" to solve.
So? You guys wrote an article about it...

http://www.matasano.com/articles/javascript-cryptography/

"SJCL is great work, but you can't use it securely in a browser for all the reasons we've given in this document.

SJCL is also practically the only example of a trustworthy crypto library written in Javascript, and it's extremely young.

The authors of SJCL themselves say, "Unfortunately, this is not as great as in desktop applications because it is not feasible to completely protect against code injection, malicious servers and side-channel attacks." That last example is a killer: what they're really saying is, "we don't know enough about Javascript runtimes to know whether we can securely host cryptography on them". Again, that's painful-but-tolerable in a server-side application, where you can always call out to native code as a workaround. It's death to a browser."
What your content marketing strategy can learn from the SEOmoz rebrand