skysight-inc/HackerNews huggingface dataset:
Good point - thanks for bringing it up. This option gives you a SOCKS tunnel (only), which is great for web-browsing and other apps, but won't just automatically do "all traffic".

It does seem that SSH has a lot of ways to do a "VPN", some of which are better for different things. I think it is very underutilized!
> The Referer header is just one more thing
> that a sophisticated attacker will spoof.

It doesn't really matter, as attacker wouldn't have your data. For example, you know that on average you have 10 users per hour from some specific referrer and that most of them are coming from a single country. And you know this for every referrer. But attacker doesn't, even if he tries to fake it, his requests are either not going to satisfy the profile (he won't get something right, like country, user-agent, etc) or he will reach the limit (by trying to send more than N requests per hour for specific referrer, as he doesn't know the limit either).

Of course you could make it very precise by using a lot more data points for each user: where users usually go after which URL, how long do they stay on each URL, how many requests do they usually make, do they have your cookie, how long, etc. And I'm talking about cookies as a sign of a user, who already visited your website in the past.
How Much Loyalty Do We Owe Our Employers?
And your choice of state income tax or state sales tax. (for most people state income tax is far higher, and f easier to determine/prove.)
It's their OS, they can do as they please.

As history showed, there wasn't even an MS monopoly in existence. OSX became viable in the early oughts, Linux was always around, and now people write of the death of the PC.

Regardless, abuse of market dominance (note I don't use the overused 'M' word) increases incentives for competitors to enter the marketplace.
Seven hours of Skyrim later. I amused myself by tweeting about my game from the point of view of my character, and had people saying I was making their dreary Monday brighter with these little dispatches from a fantasy world.

Social is where you find it.
I'm curious why an on-topic link to a popular TV show (yes, popular culture exists outside the US) is being so downvoted.
I recently switched from http://www.name.com/ to http://www.namecheap.com/ because Namecheap accepts Bitcoin. All has been well thus far.
Nice one Augusto and Mashape. I checked Java and it is using Maven. I would like to contribute with Scala and SBT.
Thank you. When you instantiate a zerovm instance you give it the associated code as well? And which IPC method can it use? Is zerovm the library you use, is there such a thing as a separate zerovm instance, or is it just the way we are used to talking about virtualization?
Assuming the consequent...
No worries! I'm sorry you felt the title was unrelated; I like more "flowery" titles, and we have the "same title" rule on HN.

The point I was trying to make with the title is that OpenSSH does a lot of what a full "VPN" does, yet is a _lot_ easier to configure than anything else I've encountered. Apart from PPTP, which is apparently the "rlogin" of VPNs ;-)

free652 posted an even easier approach here, which sets up a SOCKS proxy with no extra configuration. If SOCKS is good enough, you should use that! If you want full tunneling, hopefully we can make my script easier / unnecessary.
I don't know who thought binding the arrow keys to change articles was a good idea. I'm still reading on my netbook and instead of scrolling the page so I can fit the text on the screen, it decided that what I actually wanted was to flick articles. No thanks.
This service looks pretty good. After Google dropped Wave, I more or less stopped using AppEngine (useful for Wave robots). I think that their charging a higher price for AppEngine makes it look more appealing (because the service is less likely to be cancelled). Still I was pretty sure I would just go with my own servers and AWS in the future.

My opinion changed when I started working as a contractor at Google 2 months ago. I love the Google infrastructure, from inside the company. It is amazing (that is an understatement!). When my project is done next year and I go home, I am fairly sure that I will go back to using AppEngine, and other services for my own projects just out of nostalgia.

For the general public, I am not sure if the AppEngine and other Google services story is a good one though. It will be interesting to see how their market share for the PaaS does over the next few years.
Don't know if it's already been updated, but if it has the contrast just isn't enough... All I can see is headings (aim for a 7:1 contrast)
I can understand why the question was closed as not constructive, but it's still an interesting question. An OS written in Lisp targeted towards current needs (as opposed to the needs we had in the 70's) would be a worthy research goal.

But I wouldn't go for Common Lisp. I'd go for something smaller and cleaner.
Had to read it a few times to figure out what was going on. tl;dr: Pay $5 to build other people's ideas with the opportunity to win up to $15,000 (Novartis' revenue was $56B in 2012 [1]).

How It Works
• Brands present their business challenge.
• Companies and developers create solutions over an intense weekend.
• On Sunday, an all-star judging panel will score the top 3 mobile solutions and the winners will be announced.

[1]: http://www.novartis.com/downloads/investors/reports/novartis...
I've read the architecture page and I am not clear how multithreading is dealt with if application demands it. If you can expand a bit on that.
Heh, platform-independence...I guess that's one way to get them to use your HTTP library, as opposed to the thousand other libs out there to do HTTP. ;)

But I like it! In all seriousness this is neat and I like the idea of ubiquitous library syntax, especially for new programmers (which there are a LOT of these days!). The API is reasonably simple and it's nice to have one less thing to look up when experimenting with a new language.
You mention sshuttle .. and aside from ipv6, what does your script offer over what sshuttle does?

sshuttle crashes OSX (grey screen of death) about once a day, does your script avoid that?
Bloody hell... meant to type far more instead of far less. Always good to proof thoroughly.
An interesting (albeit impossible to track) metric would be how much time the average YC application took - and if the time spent correlates with acceptance at all.

I wonder if that graph would look closer to a bell curve or exponential decay.
Looks great, one thing though: Under "Kindless ancestor queries" the second Python code sample seems to contain too much code by accident.
Nah, I didn't read it that way. It seems to me it says "hey, OpenSSH can already do tunnels very effectively, but it's not very easy, so here's a quick script I wrote to make it easier".

The author gain to reader gain is really, really low in this case, so I don't think it's content-free linkbait.
Better why? The best value for not accepted application is the time you spent on formulation ideas in your head and trying to make it simple/clear/interesting and of course worth money.
High Performance and Parallelism With the Feel of a Scripting Language
Do eeeeet! :)
I am not being funny, however, shouldn't this form be https? Or did I miss something?
I think this is Appengine's datastore provided as a service. In which case it isn't going away - Appengine is heavily used.
thx but the magic has been done by Chris, Nijiko and Marco. Yes, great, that would be amazing. lmk when ready so we can add it.
While I appreciate what you're trying to say, it seems obvious that "viewing" and "editing the content of" a website are quite different concepts. If you've been told to no longer edit the content of my website and you continue to do so, it would be hard to argue against a charge of unauthorized access.
But keep in mind that the entire point of using a VPN is plausible deniability.

Err.. no it's not.

The point of using a VPN is protection against eavesdropping.

Some may use it for plausible deniability, but that isn't even the most frequent use case (I'd imagine the most frequent use is access to corporate networks).
This really hit home with me, because I used the Verizon business website for a few years with my company. Managing the account was so tedious, and broken with the website, we ended up going to a BYOD setup because of it.

You couldn't call in either, unless of course, you wanted to waste 45 minutes of your life just replacing a line with an existing device.

It is absolutely the buggiest website ever created. The search is broken everywhere, sorting is done with refreshing the page and back button never works. If you want to put an existing device on a new line, forget it. Crash. Change features, Na. Crash. Add international service. Na. If you want to search by ESN number for device. Nope. You have to call your account rep to get it added. Oh yea and when it's added it rarely works. It's also one of the slowest site I've ever used, and from what I can tell it's some BS Spring application using JDK -0.3, and Hibernate 0.1.

So if these are the same people responsible, then good luck.
The micro-transactions are off-blockchain (an in-network transaction between Coinbase accounts) - unfortunately that's the only way to get them for free without any miner fees (many are very small amounts). However, if you accumulate enough tips (at least 0.01 BTC) in your Coinbase account you can then send them out of Coinbase to any other bitcoin wallet and we'll even pay the fee for you. We don't want to have any lock-in there.

It would be nice to receive your tips at an external address like you mentioned, but the miner fees could be greater than the amount you receive with such small amounts.
When we instantiate we give zerovm an executable image (a file) and any other files this executable will need (can be arranged in a sort of "VM image" which is a regular tar file).
Sessions (instances) can communicate by unix pipes.
Yes we have notion of "instance" it is a running zerovm process. Each session runs in a separate process.
Well Porter as an airline is likely making a big bet on this for their downtown airport in Toronto so there is definitely a use-case there. I'm not sure if this is a contingency plan on their campaign to get the runway extended and noise by-laws lifted, but it sure seems like they're hedging their bets on this.

* Written from the downtown Toronto airport lounge.
They're not slow to add features. Some may arrive after a competitor, but every release of OS X sees low-level feature additions and updates. They're documented by Siracusa's mega-reviews as well as the OS X release notes. Nearly Apple's entire product line has been dependent on the flexibility of that foundation, from the PowerPC Macs to the Intel transition to the ARM squeeze, not to mention the recent ARM64 port. So, I don't understand why you think Apple can't or won't work on the foundation or why you believe it's a monolithic relic written in the 1970s, unless you're just referencing some vague bias against Unix in general.
5 Secrets to a Download Boosting App Description
Do you think that Airbus gets no subsidy? Boeing? Embraer?

The aircraft market is global, and I can't fault Canada for supporting Bombardier in a manner similar to how their competition is subsidized.
Another interesting question could be "What is your estimation : how many startups applied for W14?".
>Their treatment of women, in particular, would strike an American as archaic and quaintly Mad Men at best, and at worst barbaric and abusive.

Citation needed.
I've been working in Japan for 8 years, and I haven't experienced this kind of treatment from Japanese men at all.
I like the way you put it,

>>Your loyalty should be a reflection of your employer’s loyalty.

A company a group of people after all. It's easy to think about our jobs as benefits acquired for services rendered rather than a relationship with a group of people.
IPv6 was my primary motivation. The interesting thing here is that - once the tunnel is set up - we're really not running any extra software other than SSH (on the client or on the server). My script just finds unused tunnels and IPs, calls SSH and sets up networking. So it is as unlikely to crash your machine as OpenSSH is :-)

However, I would guess that a grey screen of death bug is due to a kernel-space issue, i.e. the Tun/Tap drivers. They are not built into OS X, which seems a real shame (as they're used with every user-space VPN: OpenVPN, sshuttle etc).

It is possible that sshuttle is doing something wrong causing the tun/tap drive to crash. I would guess that my script would crash as often as OpenVPN does, as I bet/hope ssh is as solid as OpenVPN. If OpenVPN crashes as often as sshuttle, then the problem is likely the tun/tap driver.

I hope to be trying this on a Mac in the next few days... just need to buy one first!
BTW, my estimation - 5000 :) Just a guess based on a buzz I hear.
You may have missed when they jacked up AppEngine prices. It was fine for a lot of people already making significant money with their app but it basically killed my app (would have been unjustifiably expensive to keep running). I won't be trying proprietary google infrastructure again anytime soon.
If you have a legacy application that demands threads we can emulate threads by essentially using coroutine approach.
http://en.wikipedia.org/wiki/Coroutine
Google's share structure[1] means this isn't actually the case at all.

[1] http://business.financialpost.com/2012/04/13/new-google-stoc...
The PHP version seems to be meh... Gotta do a lot to get us away from Guzzle. http://guzzlephp.org/
You appear to be running something that is basically a simple appointment app, directory, and profile service.

No shit you don't need real talent on the payroll--I don't think you're ever going to hit any really hard technical problems that would benefit from that.

It's not a bad model, but it also doesn't apply to everyone--especially folks bootstrapping without funding.
It's open source. https://github.com/zerovm
Can be used anywhere. Can be installed on top of Openstack installation.
For those are interested, I am sure it has been brought up before, the inverse has been brought up before, an in-kernel Scheme for debugging and some more crazy testing, schemix. [0] Unfortunately, the project is long since deprecated.

[0] http://www.abstractnonsense.com/schemix/
why not a different libc, such as musl?
I explain it like this. From downtown Los Angeles, drive to Las Vegas (5 hours) and San Diego (2 hours).

But in 30 minute increments: 30 minutes heading toward Las Vegas, then 30 minute heading toward San Diego.
... pretty awesome...hihihihih
It's a good point. You can actually buy reddit gold using bitcoin right now (through Coinbase) so we are familiar with it. When people give reddit gold they are actually supporting reddit which is cooler in some ways, although the poster/commenter doesn't directly benefit.

We thought about having an option in the Chrome extension that also contributed to Reddit on each tip, so something like "also tip 0.001 BTC/10%/whatever to Reddit each time I send money". The micro-transactions could be broken down like this in any arbitrary way. Just an idea at this point, but definitely doable.
If you really want to help with privacy and stuff and also think long term, it would certainly be better to invest in an internet router where you can directly install TOR (as relay). If a lot of people would do this you could solve the slowness and make it even harder to identify users.

Imagine some ISPs start rolling out such routers per default.
True, somehow sellers in China can get by selling items to the US for less than a buck on eBay, shipping included. I never understood how this worked. Just mailing the same little item within the US would be like 2 bucks, plus eBay fees.
I love Ruby so much that I shuddered a little when I saw the multi-line, multi-hash method call in the example code that made it look like js. Otherwise thumbs up.
Try spending time with him and suggest walking whenever you can, like when you are going to the store. That way it's not just exercise. My gf got her cousin to lose 30 lbs or so over the course of a year.

The hardest part about exercise is getting over the hurdle to actually go do it. Having a partner makes it much easier. Even if I am fit I have a very hard time just going to a gym - I have to go play a sport.
Yes, economics is a science
Whether other countries choose to subsidise development in a particular industry is irrelevant, and if they choose to essentially export their money then that's up to them. It's not like there aren't plenty of other things these people could be doing. If you reach the level of China style product dumping then you have a trade war situation and things are different, but that's not (quite) what is going on here, though if Boeing or Airbus gained a monopoly it would sure look like that.

What is really happening is risks are socialised, profits (if any) are privatised.
Any idea if you will there will be future integration for something like JIRA? This could really speed up the process of getting things up there.
Regarding your idea about the „personal Amazon attic“ which you show to your friends, I wanted to let you know that we are currently working on something very similar.

ShelfFlip (www.shelfFlip.com) makes it very easy to create a list of all your products (by analyzing your received order confirmations or your amazon purchase history) and then lets you put selected products on your personal sales page (your “shelf” - which you can then send to your friends).

I am very curious what you think about it.
Reminds me of a project a friend of mine did recently for the hackMIT hackathon: http://hackmit.challengepost.com/submissions/18025-bashwunde... Has ASCII-art, but I don't think he's put the source up anywhere.
This can work if there is a large enough pool of quality applicants that are either currently unemployed or are already contractors. If they are contractors, they may not be seeking full time employment (they like the mobility of contracting). But if you want to recruit someone who has a full time job, lots of luck convincing them to leave a good position (or any steady position) for a 6-month contract that "may" turn into a full time job.

This is how I was hired at my current job though. I was laid off for a few months, and a contract to hire position opened up. I took it, because it was better than not working -- but I would have never considered it if I was working at the time (they ended making me a permanent offer after 3 weeks, instead of 6 months, and I really like the place, so it ended up working out).
Yes, as they rightly observe the plane does have uses, but if it really had enough, with potential customers to prove it, then they would have been able to get the development cash on the open market.

Gambling with other people's money is a lot easier than doing it with your own.
ObamaCare is the Best Advertisement for Libertarianism Ever
Openstep supported quad fat binaries iirc, supporting x86, sparc, mips, and I think pa-risc. Gotta say the NeXT software architecture has aged well.
I can't speak for his Japan chops or essays, but in Zero History it certainly felt like all his forced and abundant name checking of NY places (I live in NY) felt like he was using vocabulary to indicate knowledge/expertise rather than actual insights. I really liked Pattern Recognition, but I was forced to put down Zero History in frustration about half-way through as the name checking made the novel feel like one poorly constructed long form rap lyric.
I wasn't talking about an acqui-hire, just a business that has outsourced entire functions to specialists who aren't employees. This is not an unusual arrangement in small companies.
Congrats to Zuck on backing progressive looking edtech ventures...
2013 Startup School Notes
Unlike ZeroVM, Docker is not a security solution, it is only useful for managing administrative domains within a machine. (To preempt a massively pointless, ~20 year old conversation, Google "chroot security" and "jail security" and suchlike to understand why). On the other hand ZeroVM starts with statically verifying any code that executes adheres to a fixed protocol, and that protocol only allows invoking a small set of rigorously defined service stubs.

This may sound vaguely similar to how Linux containers and the syscall interface work, but it involves orders of magnitude fewer LOC written from the outset with a robust security design in mind. Compare that to the thousands of LOC daily churn in the Linux kernel, often written by people who are usually too busy fighting with shitty hardware to care about how their driver ioctl might be accidentally exposed to UID 0 running in a container, and even if they notice, might not even care.
Food is a major part of our culture. It doubt that it will be completely replaced by supplements like this. However I can see genuine use cases for this. I can see this might be useful for certain military operations, such as reconnaissance missions, which require troops be travel lightly without support for prolonged periods, and long term space missions where the marginal cost of extra space and weight is very expensive. Athletes on specialized diets may also use this to control their nutritional intake more precisely.

Our culture might even shift to a situation where we take supplements for our routine nutritional needs and enjoy traditional meals for special occasions, like when we have guests over.
The middlebrow objection is not that it's somehow dangerous, but that it's not new or unique or worth getting excited over. It's just another meal-replacement shake, just marketed to a different group. I'm sure that if you use it sensibly. ("a shake for breakfast, a shake for lunch, then a sensible dinner" as the ultra slim-fast guy would say.) it won't hurt you. I mean, as long as the stuff isn't actively and aggressively poisonous, and as long as you get lawyers or something to mealy mouth your way out of the claims that you can live entirely on soylent, you are fine.

I guess... that's not really all that much of an objection, from a business perspective. With all this hype, I'd say it has a reasonable chance of making money. It does seem to be marketed well, and it's timed right

But, I think most of the 'middlebrow dismissals' are more a response to the hype. I mean, meal-replacement shakes are an old product; certainly at first glance, if you dismiss the fantastic claims about soylent, like the idea that you can eat it and nothing else, it looks a lot like any other meal-replacement shake packaged for a particular market. The problem is that the group they are targeting, generally speaking, identifies as more skeptical than most, and they are using the traditional snake-oil style pitch that you normally use to get a product off the ground. On an emotional level, I (and I think many in their target demographic) find that pretty offensive[1]. I think that negative emotional response to obvious hype is the core of the resistance you see here.

[1]or rather, responding positively to something sold using overly-enthusiastic sales techniques would... conflict with my self-image.
Churn kills products
What about crawlers, bots and automated programs?
nb - the Irish "potato" diet also included copious amounts of butter and milk or cream. There's not enough fat in an all-potato diet.
- It is deterministic based on the inputs. You would need to pass in a seed or read from an external source of randomness to get different values out of a PNRG.

- Binaries need to be recompiled. There are two toolchains, a GCC-based one and an LLVM-based one. We can also compile within the ZeroVM container itself.

We expect that a lot of people will use existing language runtimes (Python, Lua, JS) To avoid compilation.

Over the long term, though, a lot of the power comes from composability. Think Unix pipes, in parallel, across the cloud.