skysight-inc/HackerNews huggingface dataset:
Those incentives are often there when a private company and the government make a deal.

It's certainly not a problem with for-profit entities in general, though: Apple and Ford and IKEA and every other private manufacturer has those same incentives -- decrease cost and quality and increase price, with a corresponding interest in recidivism.

Obviously in government scenarios -- defense contracting, roads, schools, prisons, utilities -- local or regional (or temporal) monopolies suppress the competition that keeps other companies' base desires in check on the open market.

There are a lot of pressures to the contrary and obvious reasons it's the initial path of least resistance to grant such monopolies, but I wonder if there's a better way to structure deals like these to encourage competition at the same time.
I use PDF.js in FF it seems fine for a PDF reader. Its integrated and reasonably fast
Close.

Can add this to the list like thttpd.

Something I keep thinking I'll build is a fast, high connection count, limited HTTP server, something that is essentially a wrapper around a program that works like 'regular' and emits HTML. It is a corner case in a custom corner, but the target it something which is essentially a 'transponder.'

In the 'Internet of Things' I want to build a wrapper/environment such that my program can be

main(int argc, char *argv[]) {
uint16_t sense;
uint16_t chan;

sense = adc_read(atoi(argv[1]));
printf("Sensor %d reads : %d\n", chan, sense);
}

And then link my 'wrap around web server on it' and then it can be accessed with wget 'http://ip:port/?1' have it do the right thing.

The keys are low memory footprint, lots of connections, easily wrapped around a 'regular' program.
Although this isn't new, it should make you throw up in your mouth a little bit.

Malicious compromise is not the only way that an install script can become broken, or corrupted, on a remote site. The ability to checksum what you're running is a very useful sanity check and you should be doing it with all downloaded scripts/packages.

I suppose this is tilting at windmills, though.
Deis: Open Source PaaS based on Docker, Chef, and Heroku Buildpacks
Elliot's right: Chrome's way of storing and presenting passwords is unacceptable and less than fully sane.
Also they're stacking the device 3 dimensionally, so they could be referring to 125 layers of 8gb RRAM, which would spit out the 1TB number.
Show HN: Lister 2 using Dropbox Datastore API
Legal is a cost center at F500 companies; if you have a product that can make a several- percentage- points dent in an 8-9 figure cost center, you should market it accordingly.

Think of it this way: F500's also uniformly have IT departments staffed with highly-paid IT professionals. How good a job do you think most F500's do with IT cost management?
If you were using OpenX at one time and never removed it from your webserver, you can consider yourself compromised. Get that shit removed.
Looks awesome. Going over it I'm surprised how much Vim I know already without thinking.
As noted in the other HN thread, this is a great example of taking time out to help a customer that's having a tough time and reaping a reward.

But.

While it can be great to have a general philosophy of "always provide the best customer service possible, even at 2am, no matter the customer," a great CEO will need to act based on the realities of their business situation -- informed by these philosophies, but not locked down by them.

I agree that in the context of business you should always be as nice as possible, no matter how difficult of a time you're having with someone. But some customers aren't the right customers for your business, and they should be guided elsewhere.
Have to fix this problem without changing to advanced systems
"The goal is actually to not make a huge profit too early, and Bezos manages it perfectly. You want to avoid showing your cards too early as you continue to lay the groundwork for an ever-larger business"

That just doesn't sound right. 10 years in market is not too early. And because it is working for Bezos and Amazon, it doesn't mean that this strategy will work for others.
I'm a Windows user. Virtually every piece of software I install comes in the form of an executable, that I download-and-run directly from the browser. I often give this executable administrator priviledges. The executable can then do whatever it wants on my computer. Usually it will install said piece of software (except when it was made by Oracle, it'll install said software and the Ask.com toolbar)

This has been standard practice for decades. It's very comprable to that wget oneliner. Why is it bad? Or, why is the wget oneliner bad but not Windows installers? Do Windows sysadmins compile tarballs and verify checksums? Or are Windows sysadmins simply dumber/less paranoid than Linux sysadmins?
DC Hackathon This Weekend for Reporters Around the World
+1. Most of the compromises we find is due to old/test/never used/demo/debug tools that were once installed and forgotten.
Isn't logical positivism the idea that "any idea that can't be scientifically tested is meaningless"? By that criteria, logical positivism itself is meaningless.
Not just other applications - MacOS's own Keychain application requires the user to re-enter their login password in order to see passwords that were saved in their user keychain. This is to ensure that while you might be able to make use of those passwords if you have physical access, you won't be able to easily copy them off somewhere else.

Please Justin, explain the real reason that Chrome does this, or admit that it's a bug and get it fixed. The reasons you mention are just stupid.
First, very nice app.

Second, stuff you probably know that confuses me.

On Chrome, I can drop (multiple) imgur urls from another Chrome tab, and they are all placed on the canvas.

On Firefox, I get the Upload prompt when I drag the image (an image hosted on imgur in a chrome tab) onto Firefox, but when I drop it, nothing happens.

On IE 10, same as Firefox, but not even the Upload prompt.

Also, what am I missing? I fail to see how to get the image out of snapnote.io. I don't see a download or upload or url...? Nor do I see a link to this desktop app.
<ramble>
Art is so completely subjective. In a house I bought, we found a painting by an artist named Marshall Merritt - we see his paintings being sold for $10k - very similar in size and composition. But when we had it appraised, the appraiser told us $300. Go figure.

Aside from a portrait of my wife, my favorite art purchases have been from Robert Tinney, who did the covers for Byte Magazine from the early 80s. He sells his "limited edition prints" directly. But the point is not that it is an investment, but that I actually just really find pleasure in his work. His is the only art that I've bought online - and only then because I already had a copy of the work in question as a magazine cover!
</ramble>

I notice that the Amazon works are all sold and shipped by individual galleries. I wouldn't be surprised if you could purchase directly from them for considerably less than via Amazon.
>"If you weren't vetting the code you downloaded before, you don't lose anything by blindly running the commands on one line instead of three."

Nginx is included in the OpenBSD base system (as of 5.2) and it does get vetted.
Holacracy - Social technology for purposeful organization
Quantum mechanics provides a very clear set of postulates that allow the prediction of various phenomena through mathematical equations -- that's as far as I read into it.

Science is about explaining the world/universe, not merely making predictions.
Very cool. I've been doing the same thing lately, writing my own little web server that serves static files. It's been a fun learning experience!
I thought I landed on a 404.

For those who aren't native English speakers,
SOL = shit out of luck (completely out of luck)

"Darn, the concert is sold out, I guess we're SOL."
How does palming the problem off onto the OS help? At least the OS provides the choice to lock/leave open.

Smacks of laziness, especially in a world where it often takes very little to deter people.
From what I know about compilers(not much) - when there is calculation without variables they just compute it on the fly and substitute in the code where possible. And I think this is just what is going on.

You should read the n from the input or given as parameter to the program.
> So far the creation aspect is almost entirely dominated by ordinary citizens.

Not true at all. The in depth long-form journalism that e.g. Matt Taibi does at Rolling Stone http://www.rollingstone.com/politics/blogs/taibblog cannot be done by people who have day jobs with smartphone on a street corner. And it's thousands of times more valuable than the "man bites dog" type of stories that Joe Smartphone can capture.
Logging with Logstash, ElasticSearch, Kibana and Redis
This tutorial explains how to get from a bare bones Vagrant image into something useful. Ideally I would do this through proper automated provisioning with Chef, Puppet or CFEngine but as a learning experience and a way to play around with configuration I’ll go through the steps one by one.
"Non-technical users" is a contradiction in terms. If you're using technology, you're a "technical user".

If you don't know how certain options work, you should leave them alone; but if you don't leave them alone and something breaks, it takes only common sense and not specialized knowledge to suspect that the thing you changed has some relationship to the thing that broke.

De-featuring software for the presumptive convenience of a presumptive lowest-common-denominator user is not a good practice.
Do you have any evidence to the contrary. Other than TV technology improving? I mean, aside from some consumer goods, what hasn't gone up in price out of proportion with wages?
"easily wrapped around a 'regular' program"

Sounds like you want CGI :)
Having been there before, once they get to 70 or so people it all starts to falls apart. Once the founders no longer personally know all the people then structure comes in. By 200 people if you have no structure you are out of business. Also once you have lots of legal issues or are required to follow standard accounting practices or other picky stuff like that this nice holocracy will crater.
Very useful. Needs a few typo fixes, but it's bookmarked on my phone :)
Ask HN: Help We're having a baby. Now what?
My wife and I are expecting our first child in a couple of months. We've started preparing for the delivery and everything that will follow thereafter. It seems that there is a lot of conflicting information out there and at times seem quite overwhelming (i.e. safety of plastic vs. glass bottles, different types of strollers, wrapping the baby in tin foil help thwart the NSA from spying on baby's activities, etc.) Since there is no comparison to tried-and-true experience, I wanted to ask the HN community for tips and tricks that helped you when welcoming your first new geek into the world. What type of hardware (strollers, carseats, cribs) did you decide on and why? What other equipment was essential? What are the best apps (parenting tips/tricks) for hackers with newborns? What are all the good docs (websites/resources that helped you)? Should we implant the GPS chip at birth so that we don't need to do it by force when baby becomes a teenager? And most importantly how did you manage to balance working/hacking with all the new responsibilities that a newborn brings along with it.

Any guidance is greatly appreciate and will definitely be considered for inclusion into v1.0.
Udacity and SJSU
Thanks for the link.

While you are correct that there are now some types of Atom which are used in phones, the part used in that laptop has a TDP of 10W. I can't find much information on the Atom which is being used on that phone, certainly not to compare them.
Gabriel Monroy here, creator of the Deis project. I'll be answering questions here and on Twitter (@gabrtv). I want to give a big shout out to the Docker crew for their support.

I should also mention the release notes (which explain what's next) can be found here:
http://deis.io/deis-0-0-5-public-beta/
I wonder how much work it would be to modify that one-liner to include an MD5 or SHA1 check? Of course it might then be shell and OS-specific...

Unless curl or wget can confirm the sha1? Oh... found it! http://superuser.com/questions/453823/is-there-a-tool-that-a...
Good points. It would definitely be a good feature if explicit retainer conditions could be fed into the system to analyse bills, and certainly a client is in a strong position where associates are photocopying.

The more interesting point would be like in the example provided in the article (billing half an hour for mailing) where the system considers the charge for the stated work to be excessive but the client may not be in as strong a position to question it as with the clear cut example you gave.

Definitely interesting times though!
Probably not likely. There are metal 3D printers (Shapeways, for instance), and IIRC the patents on that tech (laser sintering) are going to expire soon, so there will probably be a big boom in volume and material diversity.
How To Validate A Feature Idea In 5 Minutes
Large brick and mortar retailers also usually have negative working capital, it's nothing to do with being an online company, rather it's about bargaining power vs suppliers.
i wonder if one could really copy more advanced keys (f.e. the ones from KABA [0] are pretty common here) by just having some scans of the keys. these keys generally have different layouts on each side, and sometimes also on the small top/bottom sides. so just a snapped photo definitely would not be sufficient. and even with flatbed scanners like the team in the article used, capturing the depth of the holes might be problematic...

[0] http://www.kaba.com/access-control/en/Products-Solutions/Mec...
For the functionality Feedly provides, plain HTTP is a reasonable amount of security. I also, up until fairly recently, received news via a bundle of paper left on my doorstep. Shocking, I know.
You submitted it to HN as a story. There needs to be some content there or else you're wasting our time.
Yes people are going to dumb things. But that doesn't mean you need to encourage and facilitate it. That's my point. If you know better you should be facilitating the proper way to do it, not the worst way.
For most key brands, though, the possible pin sizes are finite and discrete, so you just have to estimate the height of each pin from the picture and round to the nearest one. It's not that hard.
I host more websites on the same server and as kajecounterhack said I'm using nginx as a reverse proxy. The server is fast and have no problems at all with the HM crowd ;)
Java Validation with Dynamic Proxies
So do hammers.
> and a 42u rack of servers for processing for those times when a guy needs several hundred gigs of ram/ECUs worth of proc power

What on earth? Where do you stick that thing, in the garage?
unlikely to affect you if you're already embedding CSRF tokens in your responses, which would defeat caching anyway. Curious if this response length fiddling will mitigate the attack, can anyone more knowledgeable than me confirm?
> Malicious compromise is not the only way that an install script can become broken, or corrupted, on a remote site. The ability to checksum what you're running is a very useful sanity check and you should be doing it with all downloaded scripts/packages.

Yes, and you still can do that. But the standard installation instructions almost never include it. For example, nginx's build instructions boil down to "run configure, possibly with some flags, and then run make and/or make install". That includes the exact same vulnerability you complain of here — it never tells you to checksum anything. This is true for essentially all the software I've ever downloaded. So again, still not "becoming a thing."

The assumption is that if you're the sort of person who customarily checks code before they install it, you know how to inject that step.
I suspect it is simpler, they don't care about HN's feedback.

A simple check of the account would suggest that they needed a bit of karma, their submission of the Hudsonreed site was DOA (as most, 'create an account, submit a site' type submissions are). They haven't made any comments to get karma that way, so they use the 'other' well known karma farming technique, scrape HN for past stories that were popular and re-submit them at the 'right' time. It has become enough of a signal that I suspect pg could add it into his heuristics for spammers.
That Lenovo phone uses an Atom Z2580 SoC. Anandtech benchmarked a similar Atom SoC, which used around 4 watts in a 3D game [0]. The Atom D2500, in contrast, has a TDP of 10 watts [1].

[0] http://images.anandtech.com/reviews/SoC/Intel/CTvKrait/3dgam...

[1] http://ark.intel.com/products/59682
Making Snowden the story to take the light off of the NSA and FBI spying on everyone.
Yes, delete system32.

P.S. Just kidding, don't do it.
Can you have null pointer exceptions if you program in Crystal? No.
Well, I'm a student and lot of searching for me ends on PDFs. Some with figures etc. are broken and display fine in Chrome. FF is good but Chrome is much better, that was comparison I was making!
I had an idea like this when I thought about creating a small server on an Arduino that I can use to control/get status updates for a pellet stove for my cabin (TBA).

Luckily, there's already code for that, in case you're interested : http://arduino.cc/en/Tutorial/WebServer
I always scratch my head when stuff like this comes up. Not that it isn't a good idea or it doesn't have its place, but more that people think "traditional management" is a thing itself.

For instance, if I could summarize my 15 years of people and exec management it might be this: empathy and seek first to understand, then be understood (can't remember where I read this one). If I had to tack on something after this is it "take the hill", meaning a very clear shared vision so if there is ever ambiguity, people know what the ultimate goal is so they can make the right judgement call when needed (taken from the military, I believe).

My issue with things like this article is that they use different terms for the same things. It seems there will always need to be someone setting direction, someone following up that people are doing the right thing and some key decision makers. What we call those people might be different and how you "organize" could look different on paper, but those roles kinda, sorta need to exist.

Now, the feel and philosophy of the whole company can be different, but I would say that is more about the culture and how people react to good and bad news.

So things like Valve and Medium try to say they are not "traditional companies". Well, no company ever is, really. It's like when every company under the sun says they "only hire A people". They don't. They say they do and they want to, but they don't. Otherwise no B or C people would ever make their way through these companies and we all know they do. Heck, there are C, D and F people leading venture funded companies in SF right now.

So, in closing to this rambling comment, terms don't matter. Systems of management aren't important. Focus on the people, the mission and understanding both and you'll be fine.
Oh great, we've already moved from the already awful "cyberwar" expression, to "cyber-terrorism" now? I predict they'll be talking about the "cyber-apocalypse" or "cyber-armageddon" a year from now. The scarier the words the beter.
Scrollbars aren't bad at the moment, but this one has bothered me for a while: https://bugzilla.mozilla.org/show_bug.cgi?id=780726

A quick resize (redraw) fixes things, but it's the only app on my machine that tweaks like that going from space to space.
This is terrifying.

Who makes up this society? Just the people in your political borders? What about the people in other countries? Or would they count only after their military successfully invades your country? And when their military does this, everyone in that country is responsible, right? Cause it's their "agents", right? So if it is an illegitimate invasion, they are all guilty? Or would the guilty just consist of the immature and irresponsible anarchists who didn't support any of the warmongers up for election? How would we know if it is an illegitimate invasion? Society decides, I guess?

It's amazing how the blatant conflation of state and society that you make is allowed to pass in debates about anarchism with such frequency. And how often the people who make that conflation pat themselves on the back for being all "nuanced" and mature when in fact, through sloppy thinking, they managed to avoid dealing with all the problems that the anarchist has had to work through in order to arrive at his position.
Forgive me for not looking at Chrome's source code on this, but I'm going to go ahead and assume that Chrome doesn't encrypt the passwords on the disk. You can easily do better than this while maintaining all of your current functionality.

On my system, I have installed scrypt and use it as a password management tool. When I need a password, I simply run a shell script I created, type my master password, and the password I'm searching for is placed in my clipboard.

Sure, I could write an extension to do this and I really should be concerned with the security of the clipboard implementation... but, those are fairly trivial (I do flush my clipboard buffer when I'm done).

This would be a simple solution for Chrome, actually. You already have all of the works for managing passwords implemented. All you need to do is add in the decryption process and simply not log the master password.

In this way, even the root user wouldn't have access to a user's passwords (as is currently the case with Chrome).
Much more detailed than I thought.

"To help with this, instead of a focus on employees, there’s a focus on roles. Each circle has a ‘Lead Link’ who determines what roles the circle needs and how they get assigned. In fact, one person can hold multiple roles if their bandwidth and expertise allows. Stirman is both the People Operations lead and Word Master (which comes with final say on punctuation and capitalization, among other word-based dilemmas)."

Isn't this another way of saying he's manager of People Operations and Words? Perhaps there is no more formal career ownership, but it still sounds like he's a manager, no?
Reasons to Personalize a Business Blog
The Editable Web is definitely the next big thing, but this is too narrow scoped, I think.

There's a company called Tomodo (where I work) that allows you to modify any website and publish it as an independent one. Rellay cool stuff. Check it out - http://tomodo.com/
Link to actual paper: http://homepages.inf.ed.ac.uk/s0894589/petrovic13unsupervise...
Do you need help? I feel that blocking all "gamers" might be a hard decision. Maybe there are better solutions, especially if your service is to advertise to a large audience.