skysight-inc/HackerNews huggingface dataset:
Can fecal transplants save 14,000 lives a year?
While its actually an interesting post, the truth is:
Don't copy your private keys around. Keep em on your desktop/laptop.

Making your passphrase twice harder to crack is nice.. but whats 15 days instead of 7?
Making your passphrase 10000x harder to crack would also be nice... but why care, if i have access to the file, i can just record your keystrokes when you type the passphrase.

And that's why you can use an ssh-agent, and probably why OpenSSH doesn't care much about changing the key format.

If you do not trust your laptop, the problem is still there. You can still capture the keystrokes easily if you have access to the file, anyways.

I would suggest using something like a cryptostick or any openpgp smartcard when the laptop is not trusted (actually, even if its relatively trusted I would still recommend it!). This ensures the key is never transferred somewhere it can be copied.
Probably too late for anyone else to see this, but how many families in the USA handle relations seems utterly warped to me.

Perhaps the two biggest lifecycle stages--having children and growing old--we deal with absolutely terribly. Young couples go through many sleepless nights taking care of kids, and struggle to find a way to care for them while still maintaining a connection with the outside world. Old people have a different problem: many face total social isolation, feel great sadness at not being connected with their children, and want some way to feel productive. (Indeed, one of the best predictors of year-on-year survival rates is number of friends an old person has.)

They're two problems that seem to me to almost solve one another: why not have older generations help more with the kids? Not like it's a unique solution either, because it's been done pretty much everywhere until recent times.
I'd like to see this too
True, but at the very least they should keep the support for XMPP they had until now and make an effort to publish specs (not as standards, but as public documents), such that at the very least we can have third-party clients and not leave it up to third-parties to reverse-engineer the protocol badly, violating some TOS in the process.

Or at least commit to doing it in the future at some point. Nobody's rushing them into doing it right now, but changes such as these create anxiety. I mean, what next? Are they going to drop POP3/SMTP support from GMail or something?
I once asked people to choose between

1) Making a contribution to society as profound as Isaac Newton's, but leading such a harried life that they died before the age of 50 from a stress-related illness

2) Leading a content, good, happy, and unremarkable life

Everyone in the Valley chooses (1)
Or, you could end up with something unique that is not found anywhere else in the world. And when people visit that "island" it helps people codify their revolutionary ideas.
That is a good idea. But where do you have your jekyll blog repo? Github?
Clickable: http://superspeedyservers.com/Web_Developer_Wanted.html
Plus there is rx reactive, tpl and tpl dataflow.
Meet the airline I booked with yesterday: two email fields, with paste disallowed only on the second one.

:(
Its not a weak negoatiation position that the OP didnt do his original due-dilligence. If he is employed at will, he can resign immediately and that is his bargaining power.

Said that, no reason to believe the company is acting in bad faith, they were offered a bargain and took it.

As it was posted, the best thing you can do to leverage and feel comfortable in your position is interview for another job, however, i would talk directly to your employers and talk about this directly.

Its probably better for you to suck up a month or so with a bad salary than start looking for a job from scratch which might take you as much time.
You can atone the initial mistake with one cheap month of salary, and negotiate the next one. If the company strongs their position, you can always look for an alternative.
I am on the same situation and mental state. It's good to know that we are not alone. I even get bored reading all the comments here. Anyway, good luck.
Loom (YC W12) - More space to play
Is... is this a troll?
<rant>
Too many different terms: provider, service, factory sharing more or less the same functionality. They should use less common words with inside meaning. It's confusing until you learn all of them.

And now, Polymer looks pretty similar to Angular, and I kind of like the focus on components. The idea of packaging snippets of HTML, JS and CSS with syntactic sugar is great. Why mix CSS from lots of things into one big file? It's hard to follow the links after a while. Same with JS. Why put so much JS in one place, instead of splitting it into components? Polymer does this divide-and-conquer strategy better.

Not that you can't make components with Angular, but you can't dynamically load them with controller and everything, or at lease you can't do that easily.
</rant>
I disagree to a bit. You need people who really believe that they are going to take down myspace (or friendster...) even if they are irrational. Was there any serious, rational reason why any engineer would believe facebook would grow like it did when it was first started? I think you need to suspend disbelief if you are going to be part of something game-changing (although I have never been a part of it, so I could be wrong).
I think the biggest concern is the day you try to expand beyond the niche. When you do that, you realize that your product has been so focused on one niche that it takes a major effort to grow your product. So, anytime I build a feature I ask myself if this is something that we could scale to another group of people outside of our niche.

Regardless, I think going after a niche is a great strategy. Crossing the Chasm talks about the value of niches a lot. My major concern would be building in a way that limits your future growth options.
Thanks for that - I should have linked to what amway was/is (quixtar? no - amway again!) :)
That's cool. I didn't know browsers could parse it in that manner, but I suppose it makes enough sense.
Cyber Maryland Map
Yeah, but it you want to get all the emails in a text like "Please contact me at myfakemail@gmail.com. I already sent an email to contact@mycompany.com, but no one replied...", then you would have to use regexp.
> The bitcode you're referring to is LLVM. It's an architecture-independent assembly

It is abstracted over specific CPU instructions, but is not portable and not intended to be. It can contain CPU and OS-specific patterns.

It is possible to convert LLVM bytecode into something portable though, or at least a subset of it. That is sort of what Emscripten and PNaCl do.
"which is the worst kind of sleazeball sales opener."

This, exactly. In the US, car dealers have a pretty poor reputation, because people generally believe that the salespeople are especially trained to trick/beguile/confuse shoppers, in order to maximize the dealers profit. In turn, I think many people dread buying a car from a dealer.

Do you really want people to view your operation in the same light as a car dealer?
I'd think the general way forward in a situation like that is fairly easy: you've proven you have a team that can develop a great product for a niche market. The next step is to identify a similar market that you can use your technology and experience to break into, and then raise funding to get the resources you need to break into that market. Raising funding at this point is much easier: you have a proven track record and are profitable.

I think the article overstates the problem a lot - a Galapagos product is not a problem, it's an opportunity in a good starting position to finding a solution.
Apple’s WWDC invite suddenly makes sense
For me, it depends on the salesperson and store.

The worst is salespeople who ask questions, but don't actually know their product any better than I do. Car salesmen almost always fall into this category. Same thing at most of the big-box retailers (Best Buy, Target, etc).

But, if a salesperson actually knows their stuff and wants to help, I'm usually quite happy to let them. The local Nordstrom (department store) is good at this. As is the local bicycle shop.

It really comes down to selling an experience as well as a consumer product. I'll happily pay a bit of a premium for a good shopping experience.
Yep. Without correct exposure its impossible to reach the right audience.
Nope, I'm in the US with an .edu email address. Checked the spam filter and everything. Nothing.

EDIT: Registered again and it worked! Goodbye bitbucket.
I only had a chance to gloss over it but it looks great. I love the fact that it uses Jekyll and not rails like Obvtse.

Can you use Jekyll plugins?

Does it output a static website?

Is it possible to write the posts using mark down instead of the web editor?

Not so much a question but a suggestion, you should have a version of this hosted on AWS/Heroku so people can see it live.
I think the custom domain migration started a month or two ago.
Which was largely non-video related, and implemented on IBM WebSphere
[video] Paul Tudor Jones comments on the lack of female traders
Cross-validation, ensembles, and dataset splitting from the command line
I agree, but looking at the way he has been trying hard to build something (doesn't matter whether he was building it for himself or someone else), I think he is pretty much a startup guy. Success is something unrelated altogether.
And first of all, change that stupid username, 'shameonme'. No, you might think it doesn't, but it really, really affects you in a negative way.
Of course, this doesn't address what I consider the greatest weakness in using ssh - distribution of host keys.

By design, ssh does not make use of certificates. So there is no way for ssh to know upon connecting to a host for the first time whether the public key presented by that host is authentic. After the first connection, ssh caches the keys in ~/.ssh/known_hosts, and will then give you a big warning if the key changes. I imagine when this happens many folks blindly delete the the cached key and re-connect.

So you should be aware of the potential for MITM attacks to occur unless you have some out-of-band mechanism for distributing or authenticating host keys.

Edit: huh, apparently ssh added support for certificates. "ssh-keygen supports signing of keys to produce certificates that may be used for user or host authentication." So now you just need to distribute your CA certificate everywhere and you're golden. http://justanothergeek.chdir.org//2011/07/howto-authenticate...
Find a timesink project «sort of» impossible.
Hrm... It looks like these talks are pretty recent. It seems like he is still exploring interaction and visualization and is creating some pretty fantastic work. That doesn't mean he is ready to or has something to sell.
I mean, you mentioned Google, so yes, expect 200-300+ character links for the most simple of urls, with about fourteen layers of different metrics baked in.

Nothing worse than trying to get a link from Google search results.
I've suspected this was the case but never quantified it, so very cool.

A couple of things I've found work very well are:

1) not creating deep view hierarchies in your table cells - ie. keep those very flat.'

2) Make your images as small as possible in terms of file size. Do background processing to make them smaller and lower the quality if you don't need it. This is by far the easiest way to increase speed if you aren't doing it already.
Though, I have to say, Pagoda by itself is an awesome project because it supports mobile devices as well.
Here is another example from Microsoft - http://www.youtube.com/watch?v=5KSZuHGTcC8

Logically we should be seeing higher and higher levels of abstraction or languages, but unfortunately the process to get there is extremely messy...

Just take a look at asm.js or NoSQL. 10 years ago I used to work in C and when things like asm.js come out it makes me shake my head and wonder about progress.

It is not fair to call it going backward, as it really is a fix (on top of fixes on top of fixes...) trying to solve the eternal problem of incompatibly. And many of todays beautiful apps are built on an unholy amount of such fixes. But that gives me hope.

Evolution is a highly messy and inefficient process but we will get to Bret Victor style interfaces soon enough...after wading through a whole lot of shit.
What benefit do I have for signing in?

If the game saves state, so I can login again later, then I'd prefer to start playing without signing in at all. Then, when I'm ready to leave, if I want to save, then I'll give you some identifier. At this point, the identifier doesn't matter much because I've decided I want to give you something.
Working from home is not for everyone.
Exactly; it would be effective, but inappropriate.
http://lmgtfy.com/?q=kaboom+(firearm+OR+gun)
I use -drawRect any time I need a UIView's CGContext. For everything else, I use -layoutSubviews.

When you do anything in Core Animation in -drawRect, that throws all drawing on CPU, instead of dividing the work between the CPU and GPU. Which, in one project where I was doing Core Animation alongside OpenGL, that had some very bad consequences.

Core Animation is pretty interesting. Internally, it does some drawing with Core Graphics, but that's only if you use certain features (i.e., use of CAShapeLayers, anything involving shadows)... and even then, CG is pretty darned fast.

I've found CAShapeLayers can be a bit of a resource hog, but since those resources tend to be thrown behind 60 fps animation, that might not be such a problem.

The CAShapeLayer issues only came up when I tried scrolling within a scroll view that contained a CAShapeLayer with a CGPath that had 20 points defining lines. Setting the CAShapeLayer to -shouldRasterize:YES after the animation completed "fixed" the issue, as long as you didn't need to scroll while the CAShapeLayer was animating.

(Don't even bother animating a CAShapeLayer while -shouldRasterize: is set to YES. That just causes even more fun problems with dropped frames.)
You can get a list of the available cipher commands with

openssl list-cipher-commands

A description is available if you do

man enc

Doesn't seem to be any reason you couldn't use AES-256-CBC if you wanted to. Not a security expert though, so other than speed concerns, I don't know the repercussions of doing so.
finally! someone in this mess says something of substance!

jeremymims said:

> I work with hundreds of newspapers and

> a dozen or so have contacted me to ask

> how they could use Scroll Kit's technology

> in the past few days. In fact,

> one of my larger top-100 newspaper clients

> signed up to use Scroll Kit this week.

> They won't be the only ones.

looks like scrollkit's gambit, as misguided
as it was, actually _worked_ for them. :+)

-bowerbird

p.s. and maybe _i've_ made a mistake calling it
"misguided". in one sense, sure, it was stupid to
use copyrighted content from a protective source.
but can anyone honestly argue that the brouhaha
didn't get extra juice because it was "snow fall"?
would an example based on "pride and prejudice"
have garnered so much attention? yeah, right...
i mean, i thought cody was a bit crazy because it
seemed like he expected praise for scrollkit and
he ended up with a shitstorm instead. but maybe,
just maybe, he was crazy like a fox, and knew that
a shitstorm was exactly what he needed right now.
Awesome article. Very evenly balanced in its conclusions, though it avoided the subject of asynchronous rendering/layout. I would add that it is possible to achieve the 1/60th sec. setup time for more complex drawing (NSAttributedStrings, composited views) through the use of background rendering/compositing into CALayers that are delivered to the cells only when complete, though it gets complex very fast, and as noted the performance in newer devices is rapidly getting to the point that I don't have to think so much about this anymore. Now if only we could get everyone to drop the iPhone 4... (just kidding).
I looked at your website and remember reading about few of your submissions such as trying to find a co-founder, web developer etc. I can help you with some development on that front (no fees). But I would like to know more about you as person. I could not find enough information about you, what have you done in the past etc. Connect with me on my email id (its in the hn profile).
Apollo Robbins (the pickpocket http://www.newyorker.com/online/blogs/culture/2013/01/video-... ) explains an approach that worked very well for me.

When I managed a retail store (ages ago), I would take a clipboard, get near the customer as if I was checking inventory, then wait a moment. If they didn't ask anything, I would turn away, then look back briefly and say "Let me know if I can help you find anything."

It worked amazingly well for a 6'2" athletic build guy like myself. Other approaches failed pretty badly (partly because of my intimidating size to some).

It let me sense how comfortable people were with me near their space, and customize how "nonchalant" I needed to be in asking if I could help them find anything. All in all, a way to enter people's space with them feeling comfortable having me there.
I had a silly idea. Why not make LLVM a part of browsers? I heard it was a really performant albeit hard to write languages in. It seems to not have the stigma attached to JVM, especially association with oracle.
This is interesting - I've never thought to investigate how ssh stores keys.

For managing passphrases, I strongly recommend the program keychain:

http://www.funtoo.org/Keychain

It's a thin wrapper around ssh-agent, but ultimately means I only need to enter my passphrase once.

The nifty feature is that you can add a command to your .login to clear your passphrase, so it's safe to use on remote hosts - if someone else is able to ssh in, they only get access to that host, not others that your ssh key allows access to.
Gun violence is caused by people with fingers.
Love to see this kind of stuff. I wrestled a long time before ever deciding to go into computers, and the mental toughness aspect is very necessary in both practices.
The top engineering talent goes to financial companies in New York because that's what's fashionable there. There's an actual cultural difference.

I think that was the case, but it certainly isn't now.
What happens if that one customer leaves?
Some services can be configured to GET or POST to a URL of your choosing when something happens. E.g. you can ask Github to "GET http://my-site.org/action/ whenever you push commits to your repositories. If you control my-site.org, you can have the /action/ script do whatever you like. These "push" notifications are super- simple, reasonably low latency, and don't require polling.

I did something similar when taking an operating systems class. Linux kernel compiles take quite a long time, so I set up my site to send me a text message when I "GET /compile-done." Then, a quick "make ; curl http://my-site/compile-done would drop me a text message and I could get a sandwich or something until it was done.
Money may or may not be the path to happiness, but I find it hard to believe that true happiness is going to found in trying to convince others that it isn't.

To quote the author, I'm sure there is "a much more direct path" to living a fulfilling life than focusing one's energy on asking others to question their true motivations and suggesting that if they're "brutally honest with themselves," they'll come to the same conclusions as the author.

Ironically, much of the time, public displays of introspection like this are driven by the acceptance-seeking that the author is apparently not very fond of.
Hi, OP here. Thanks!

This method is actually pretty quick but it is very throw away. It doesn't replace more dynamic prototypes you might make at other stages. This is designed more for making something real that you might have only previously played out in your head.

I usually do this right along side Photoshop (copy paste).
IIRC, controllers are indeed the only thing you can't load dynamically. The controller store is strictly private, and controllers can only be registered a initialization time.

Nothing prevents them from making it public, though. I don't know why it is not accessible.
All depends on whether it's flat or "flat". Apple is the kind of company that would use a subtly textured background even for the flat UI.
Ask HN: iPhone design change, if you were Jony Ivy?
What one design change you would make in iPhone if you were Jony Ivy?
Can you use Jekyll plugins?

I haven't tested with plugins. But I doubt if it would work. It works great for Vanilla Jekyll with Markdown.

Does it output a static website?

This is independent of your jekyll site generator. What it does is, gives you an editor for your files inside _posts. It understands yaml matter and saves in Jekyll format.

Is it possible to write the posts using mark down instead of the web editor?

The web editor isn't rich text. You edit in Markdown in the web editor. It is an easier way of creating new posts.

Not so much a question but a suggestion, you should have a version of this hosted on AWS/Heroku so people can see it live.

Totally agree. I had thoughts on hosting a demo site. I'll do it.
Easy management of ssh passphrases
> Right, and in Silicon Valley the top engineering talent tends to go to advertising companies (Google, Facebook, Twitter, etc). What does that matter? Advertising and finance are both industries flush with relatively easy cash right now, of course people are going to seek out jobs in those areas.

Right, I'm not saying it matters at all other than if you're a competing business, you're going to have a hard time recruiting against these firms. It's not always just a money thing either.

I don't think SV is any better than NY though. I work for an SV-based company remotely. Both cultures are kinda terrible and both cities are only chasing after 'easy money' industries without trying to bring in other business. If the money suddenly dried up in advertising, the Valley would be in a bad way just as much as a slump in Finance would crush New York.

Politically, New York has to do a lot more to attract other business. Maybe an incentive to financial companies to fund/start businesses in STEM fields. Otherwise it's never going to happen.
I've been keeping an eye on Double and would really love to try this out. I wonder if could help solve an interesting problem... remote employees in companies that are otherwise not really remote.

I'm the only employee at my company not in SF (I'm in San Diego). We've got a fairly remote/asynchronous culture though.. there's one other engineer who works full time from his home even though he lives in SF.. but the culture is slowly shifting as we grow, especially now that we've got a real office :)

I'd be curious to see some case-studies like this one from teams that don't have skin in the game.
One way to deal with creepiness of friend requests is to not have them "mutual". Friendship in real life is one-sided relation and so could be on a meet-new-people platform.

This is one of the insights that we have used at Chatimity (www.chatimity.com) - for building a place for making new friends online. It is like old style chat rooms but much more civilized due to a good amount of behind the scenes measures being put in place. We have had fair bit of adoption and continue to flesh this out more.
Sorta, except we generally hire where the talent is available -- Anywhere USA.