skysight-inc/HackerNews huggingface dataset:
What's sad about it is that there's no entrepreneurial spark in the founders. They're not hungry for success. They're paying themselves way too much and working with no effect. The company will fail, and they'll go on to whatever nice lifestyle awaits them.

This is interesting and insightful. I suppose the learned laziness these kids have is just as adverse to creative accomplishment as the learned helplessness that the rest of us end up with.

I should add that I don't actually think every VC-funded startup is bullshit. It just seems that the good ones are quite rare. They're also very selective (which they should be) but that becomes a problem when you've worked for garbage startups that have damaged your career. So you have to be really careful in the VC-istan game.
Treasure that forever! And let it be a lesson in humility for us all.
Hi there. I'm junto and I'm a social-network-oholic.

I'm addicted to the early adoption of privacy intruding internet applications.

When I first started using them, I thought they were safe. They said that the first taste wouldn't hurt.

Once I was hooked I couldn't stop. I kept signing up for more, just to get the same username across all these apps.

But today I've taken the first step on my 12 step program to healthy living in a private world.

I have just permanently (apparently) deleted my Facebook account.

Where we go from here Neo, is up to you.
You could try https://www.whitetruffle.com. It's meant to be geared towards tech talent - I don't know how much luck there is with this since I'm a designer, dammit, not a developer! But it's got a number of hot looking start-ups on there.
Found the list of windows bugs after a bit of searching: https://github.com/mozilla/rust/issues?direction=desc&labels...

Seems like there are a few straightforward "fixables" in there.
> I use a Qt/Mac app every day for work, and would ditch it in a second if a native alternative was produced

Name please? You know, this community is full of makers, people could get ideas and make your wish become true...
Global Warming Alarmism? Physics isn't alarmism.
I guess I still think of C# as typed.

My point being that CF has a license, whereas Ruby and Python do not - which has little value in gauging success, a la IIS v Apache/nginx. (Ignoring the reality of open source Railo and Open BlueDragon for the moment)
Very cool, thanks for the numbers! A few bits of info on the benchmark in the post.

It uses a single process/thread/connection. Adding more concurrent clients would improve performance, though there is still some scalability work to be done.

Ops/second in the graphs measures number of documents, not groups.

One fundamental aspect of the benchmark is that it uses random keys, which is significantly slower (in any database) than using sequential inserts. I'm not sure how you insert into Postgres wrt to keys.

I suspect postgres has better latency, and since the benchmark in the post is very much latency bound, this would account for the factor of four performance difference. It's something we still need to address. EDIT: 1 million documents / 37 seconds / 8 connections = 3378 ops/second, which is about a factor of four off from 800 ops/second that RethinkDB does on this. (This is obviously back of the napkin math.)

There's lots of work to be done, I'm very much looking forward to publishing authoritative, scientific comparison benchmarks.
Hey if anyone's curious about what this is, here's my video:
https://www.youtube.com/watch?v=GK-tFvpIR7c&feature=youtu.be
It's not intended. It's clock and/or data-signals that leaks and has gotten amplified, if you look at it in an oscillator you will probably see a square or sawtooth wave at around 1KHz. You might even be able to read that data...
Why the downvote?

Because I asked for evidence?
Well he's got to create some publicity for the Blackhat presentation. Though I only bought it in March, I know my android phone has downloaded several system updates since then. It isn't clear to me from TFA precisely how the signature validation process was broken, and I'm not familiar enough with Android architecture to be sure this is possible, but it seems like the validation for un-hacked devices should have been fixed by now.
The VPN in question is owned by Peter Sunde, a co-founder of The Pirate Bay. I think that's a factor in the decision to stop doing business with him...
ABI compliance checker
Your scenario doesn't work at all given that such traffic is encrypted -- you can't simply inject into it. If someone breaks that, we have much bigger problems.

However, to your ending comment, some time back I asked whether passwords actually gave you security from other people who know the same password (e.g. a coffee shop that has a big sign telling you the WPA password). While I have zero knowledge to confirm or deny this, someone in the know claimed that no, given that the wifi password is used for the initial key exchange, it offers superficial interception/monitoring protection against someone malicious who knows the same password. Take that with a grain of salt, but I never could find other resources on that.
I like to think about products as stories. Some things fit into a certain story and some don't. Some stories work well for some audiences and don't for others.

You can imagine and tell any story (build any product) you want. The art is rather to build a great story and often leaving things out even if they sound like a good idea makes the story way better.

Here are great insights about how Pixar creates great stories:
http://www.prdaily.com/Main/Articles/Pixars_22_rules_of_stor...

Obviously not directly applicable to Product Management but I'm pretty certain that being a great story teller is one of the key skills for Product Management.
Have you got Cleartype disabled?
You know, I thought that, but they seem to get stronger over time. Maybe I'm just imagining that, but without bolas they often seem to be able to take me down. That's even with a spear, both swords and a rifle.

I never use the laser rifle since it's a pain to get energy packs.
We do care, it's just that we are cynical about real change that actually makes a difference for the populous at large. Any course of action won't have results or will have bad results.
Simple text parsing + service restart obviates the need for an API. The shell is your API.
e.g.: I love this hack:

"When you're stuck, make a list of what wouldn't happen next. Lots of times the material to get you unstuck will show up."
It's just an implementation optimization. The interface didn't change.
No offense, but I don't think you understand what numpy and scipy are. Numpy is the specific use case mentioned in the post.
It would be interesting if you could render a Flash depiction of a live website and allow interaction without degrading performance or having it "look like Flash."
What's the difference between copying and pasting from a single text file to both CL and krrb and copying and pasting from a CL post that you wrote to krrb? They're functionally equivalent as you're the author and retain your authorly rights in either case.

The krrb tool extracts data from a file not on craigslist servers, but from the browser cache on your own computer. It's a browser plug-in, not a server-side tool. If CL is okay with you downloading a copy so that you can see the post that you just made (which they obviously are by virtue of how their service works) then in fact there is no additional bandwidth being consumed!
I'd definitely use a job board that was a better interface to a whoishiring thread.
There is already SCOM+SCCM for this but you better have some bars of gold lying around that you can afford to toss out of the window.
I think I put in 6-7 hours over a few days.
I don't have a Facebook account, so I can't sign up. I think this is probably true of a lot of Bitcoin users--for a lot of Bitcoin users, Bitcoin is a way to stay off the grid, and being on Facebook would defeat the purpose.

My suggestion is to provide a way to sign up without Facebook.
I see one posting in England, but damned if I can see how to add another! I'm assuming location has to match the auto-complete whitelist, and the only London(s) that show up are not the one I need.
Looks very nice. The blue/green text especially. Has a very modern look.

Been thinking about a new theme for my personal site, and this would be the perfect theme. :)
I'm working on the full RMS. The only obstacle so far is nivida cards, but nouveau is improving at every release.

The OP was calling for distributed social interactions using open and standardised peer protocols/applications. All for that. Not clear that this precludes proprietary implementations.
Well, only to the extent that the PKI model is trustworthy. If somebody can perform a MITM attack against you, you are wholly reliant on them not being able to generate a certificate for the domain you're looking at. It's better, but there are 650+ different companies who can sign certificates for all domains worldwide.
Splitting founder equity – how we did it and why we’re sharing
Neat study maps the different paths we take when reading comic books
I hope you're right. The obvious counterpoint is that off-the-shelf crypto has been available for 20 years, and effectively nobody uses it. Also, the government has a significant ace in the hole: they get to send in men with guns to tap corporate pipelines and issue gag orders. More home computing power isn't going to fix that.

I'm still optimistic in the long term. It's just a shame we've forgotten the lessons of history, and won't take action until there's real abuse, instead of being a smart enough culture to nip the problem in the bud.
I don't exempt Republicans from my scorn, but the quoted text seemed to be an excuse to let the liberals off the hook in the name of non-partisanship.

I could cite plenty of examples in which the Republicans eroded our civil liberties and grew the military machine as well, but that didn't seem to be what the grand-parent was objecting to.
Simple Ways to Automate Your Marketing Tasks and Be Everywhere
I don't have a specific source, but there was a lot of talk about this kind of thing in Europe earlier this year, around the time certain governments proposed or implemented big cash grabs, particularly in Cyprus. Likewise there have been draconian restrictions proposed or implemented on withdrawing large amounts of cash from bank accounts, taking currency out of the country, and so on.

Presumably those governments can't afford for the wealthy to run from centrally controllable banking systems to tangible assets like gold, because short of raiding everyone's home the cash grab strategy fails at that point. If those assets are small enough to be smuggled out, then even raiding homes wouldn't help.

The problem they now have, of course, is that some places have lost anything resembling public trust in either the government or the banking sector. The moment they lift the restrictions, they're going to see a large chunk of wealth leaving their borders. Moreover, their chances of getting serious investment from anyone to help their countries recover from the financial mess of recent years are now very low, and any investment they do get is going to have all kinds of horrible strings attached and high interest rates.
Dick thing or no, it's just business.
What's wrong with https://news.ycombinator.com/jobs
I had the privilege of meeting these guys while they were developing the initial version of the app. It has come a long way! Excited to watch it take off.
I've basically stopped using my credit cards. I am cash only nowadays except for the occasional online purchase, and I am starting to use prepaid debit cards purchased with cash for those too. The straw that broke the camel's back was their move to start using my purchase history against me - i.e. manipulative marketing:

http://online.wsj.com/article/SB1000142405297020400230457662...

I think it is a terrible state of affairs when the only people who can have privacy are those either rich enough to opt out of the mainstream (no mortgage, no car loan, no college loans for the kids, etc) or those willing to live in a state approaching poverty. I'm fortunate enough to be in the former group, but I have a lot more compassion for those in the second group.
Introducing Qt Quick Controls in Qt 5.1
Would be happy to post a Flight Software Developer role at SpaceX but it seems that the site is down.

I guess for now, people can go to http://hire.jobvite.com/j/?cj=ojolXfwJ&s=HN to apply
Express is not a client-side MVC framework at all-- in fact it's completely shrugged off view engines to other modules since 3.x (which is supported in Sails 0.9-- I'm releasing that very soon)
I'd be curious to see what information is transferred by Android phones that is not through SSL. Given all the apps out there that have access to your personal data and could be transmitting whoknowswhat through non-ssl requests, probably enough ways to mess with someone.
This is the same Germany that issues mandatory RFID based national ID cards, and requires all citizens to register with the police when they change residences?
Thanks for your help at the hackathon Elliot! You're still user number 3 in the database.
That would be my assumption as well, but there are third-party application stores, like Amazon or the custom application repositories of carriers/manufacturers.

Presumably it is easy for any individual app store to filter for apps with duplicate cryptographic signatures but different content. But if someone could find an app and a spoofable signer that is present on one store but not another, they could submit an altered app under a spoofed name on the store that lacks the app. Spoofing privileged signers would hopefully be difficult on the Play store, but might be possible elsewhere.
This tantilising and makes me want to work out what the problem is pre-Blackhat. Looking at JAR signing in general (which is what Android packages are) I see a few possible flaws:

* The zip format doesn't structurally guarantee uniqueness of names in file entries. If the APK signature verification chooses the first matching file entry for a given name, and unpacking chooses the last then you're screwed in the way described.

* The JAR signing scheme signs a file containing hashes of file name/data hash pairs. However, there seems no part of the verification steps (in the JAR specification) where extra files not mentioned in the signed data cause signature rejection. This seems like a bad idea.

From the description, though, it sounds like a key management problem. Anyway, this talk is definitely on my Blackhat schedule!
Been to a couple of these. Best ROI in terms of mentorship and networking per time spent all the events I have been to.
One of the two designers who worked on it is a woman-- feel free to ask her:

https://twitter.com/KallunaLovegood
I was thinking more about things that make people emotionally uncomfortable, rather than real-life trolling that has the potential to trigger a life-threatening stampede to the exits.
Good thing I stopped using mail like 7 years ago.
Hey it worked. My only gripe was with a few (very minor) aspects of the design, like not being able to stop and eat meat after a fight, or dying of starvation despite carrying a large amount of fresh meat. I noticed a couple of tiny display bugs, but none that interfered with operation. It may have been prototype-level code, but I played through to the end which is something I don't usually bother to do!
Google set the time frame and gave the go ahead for public disclosure based on their work with the manufactures.
Definitely looks interesting, but it seems more oriented towards full-time jobs and not freelancing. Will check it out though, thanks!
If the DB is determining the schema and your code just mirrors it, you will inevitably do things like triggers, stored procedures, etc. that essentially put application code inside the DB. This makes testing and maintenance of such things all but impossible, even if it does make the DB queries fast.

I don't believe this is necessarily true. I think it depends on the structure of the enterprise.

The traditional relational database seems to center on what could be called the "traditional large enterprise". This large enterprise tends to have many projects sharing the same static data and here a single store for that data makes sense and that store can and should have a standard interface, which can be embodied as stored procedures if necessary and would have to be well-defined enough that individual applications can deal with it.

That's the "traditional large enterprise". Today, however, we have large companies where single application has become the essence of the company (Google, Facebook, etc)and the one-datastore, multiple-applications model no longer makes sense and it does make sense to move more data manipulation the application level.

Still, when making pronouncements about what works best, I think context is important.
Plain-Text Offenders "Celebrates" 1500 Offenders; Asks For Your Help
Hi HN,

I'm @omervk who, along with @hmemcpy, started plaintextoffenders.com a couple of years ago. Since then we've found ourselves wonderfully supported by the tech community. We'd like to thank each and every one of you for your support.

We've just reached another important milestone on our site, of 1500 offenders listed. We're both very happy and very sad about this.

And then a thought came to us. We've had too little success making the offenders realize the errors of their ways (so far we've had a conversion rate of 0.67%... :( [1]) and we'd like to raise awareness. So we're going to celebrate 1500 offenders by asking you, the community, to help us raise awareness[2].

Find your 'favorite' offender and tweet their official account the link to the post about them on plaintextoffenders.com. We've already gone ahead and made the first move[3]. Now it's your turn. Help us make the web a better, safer place!

As is with every thread about us, there are bound to be lots of questions about why we accept certain submissions, what's even wrong with storing passwords, etc., so I'll attach a link[4] to answer all of your questions up-front.

Thanks for supporting us for so long. Let's raise awareness and reform some offenders!

[1] http://plaintextoffenders.com/reformed
[2] https://twitter.com/plntxtoffenders/status/352398181029511170
[3] https://twitter.com/plntxtoffenders/status/352398338634678272
[4] http://plaintextoffenders.com/about
That's both fascinating and inspiring, but note that the story is here is that are just reading the outside of envelopes, not the contents. And nothing is being censored.
I was in something of a hurry, so perhaps I over-nutshelled.

I haven't read the full decision, so I will, and will likely be informed. I also don't claim superior legal knowledge, though I am studying for the bar, but that is despite not having a juris doctorate, so there are large gaps in my knowledge, especially in crim.

I could cite more examples, though perhaps the Mehenna case will be the best example of the ones cited anyway.

Regardless, thanks for the corrections. I'll look into them.
Weird Is Good: What Portland's Economy Can Teach Every City in the World
This is an interesting article, it pretty clearly illustrates the threat dispersed messaging systems are to organizations attempting to exert control. And it was one of the reasons I was pretty incensed when BART pre-emptively shut down the cell network prior to an #occupy protest (essentially jamming the digital airwaves).

That said, it is useful to develop technologies that make these systems more robust in the presence of a determined adversary. When I read the article on turning the Raspberry Pi into a micro-cell-site using the SDR kit from Attus I felt like here is a way you could spontaneously replace a cell network "on the fly" as it were. That stuff is still pretty expensive, a recent addon board for the Zedboard (which has an FPGA fabric already) is $3,000.
7 Steps to be a Game Changer in the Lives of People
True, 'tis only an example. Some rooted phonesmight be using 3rd party apps not on the Play Store that doesn't go through SSL. Not really sure how that works, I haven't rooted my phone.
Also, I am assuming apps can make standard HTTP requests if they want to other external services, so an app that has access to your sensitive data might transmit it to home base non-securely.
Hopefully this never actually happens, but given all the junior-made apps out there, some security holes like that probably exist.
Cool project! Have you considered some sort of a selector that lets you choose how much text you want to generate? Generally you'll want more than a sentence of filler text.
It's not production-ready yet. However, we're using it for Servo, and there are various projects using Rust.

Here's a page with some of the projects I know off the top of my head: https://github.com/mozilla/rust/wiki/Projects-using-Rust
Reclaim your name: FTC Commissioner’s Big Data Plan
The high availability of pirated APKs could make it easy to sneak something in to a relatively popular app.

This is one reason why you'd have to be crazy to pirate a keyboard app for instance.
Sorry, I thought you meant dynamic in the context of the opposite of static HTML content and didn't realize you meant interpreted vs. compiled.
Ha, I’ll just empathetically wince at them instead in passing.
His point is that this metadata has one intended use, and that it is not supposed to be re-purposed to aid in the harassment of the people you disagree with.
A readable introduction to the bits of US history that high-school textbooks delicately gloss over is Loewen's Lies My Teacher Told Me.

Includes not only an intro to labor history, but also to civil rights history, and American Indian war-of-extermination history, and of course the charming US imperial history of the 20th century. (Not that any other country's imperial history is much prettier.)
As someone who is selling his car, motorcycle, and liquidating part of his retirement to buy a sailboat to live on, I'd like to subscribe to your newsletter!
That was because the NSA was unable to track wikileaks sympathizers through PRISM. They just want the credit records.
Stare at the Samsung S4 for 60 minutes to win it.
Android app vulnerability