skysight-inc/HackerNews huggingface dataset:
I had a bad ride to OAK from Berkeley, wrong freeway, no AC, it was a mess. But the Uber app prompted me for feedback, and I got a personal support message and a credit when I complained.

I will Uber again, as it is easily the most convenient way to get to the airport, and I can tell that the software is rigged to continuously improve the company. After a lifetime of cab nightmares, I'll take Uber with double the warts.
That firmware written in C for a for-profit company is shoddy should surprise no one. Rather, non-shoddy software really would be the surprise. There is a tremendous lack of understanding of the 'rest of the software world' in the embedded world, heightened by people who neither studied, wanted, nor trained for developing software.

This is a perfect example of software development done without management maturity, process maturity, and with inferior technical tools. That large scale systems for life-critical services are written in ASM/C is horrifying. That management did not enforce certification compliance is horrifying. That the correctness process did not account for tin whiskers or ECC memory is horrifying. That the engineers violated MISRA (which evidently they attempted to adhere to) is less horrifying, but still bad.
Show HN: Web Summit - a visual graph of startups connected by buzzwords
See the below comment, but it was the "include" here causing a line break that I couldn't figure out:

https://github.com/philipithomas/www.philipithomas.com/commi...
Erm, looks like it's based in Germany to me:

$ curl ipinfo.io/`dig +short devnull-as-a-service.com `
{
"ip": "213.95.21.200",
"hostname": "o0.n0q.org",
"city": null,
"region": null,
"country": "DE",
"loc": "51,9",
"org": "AS12337 noris network AG"
}
This is a deck by Ben Adida (formerly of Mozilla, where he led the Persona project and now at Square) explaining how that argument is reductionistic.
https://docs.google.com/presentation/d/1bLBb0EIJ0cuoAhsmI1XL...
For my recently-launched consulting site (http://www.acceliva.com), I used a static site generator with a custom bootstrap-based design. I started off with a Node.js stack (Wintersmith + Jade + Stylus) but eventually switched to a Ruby stack (Middleman + HAML + SASS) because Middleman came with better plugins for S3 Sync, Cloudfront invalidation, and asset hashing.
It can be hard work to rebuild your social circles though. Unfortunately for some of us, we are both not great at building social circles, and also fairly dependent on them for sanity.

In my experience I can go for about a year without a solid social circle, but after that I start to go nuts.
Australia operating as 'listening post' for US agencies
Great choice. I use almost the same setup (on Slackware) except with uzbl as my browser (again a WebKit-based browser with vi keybindings) and dwm, although I alternate between WMs and DEs a lot.

The Unix way in general just feels so much more natural. There are alternative WMs and DEs for Windows too, though. I haven't tried any.
Fixed, sorry about that!
> Basically, the JS crypto is reducible to the strength of the SSL connection. Anyone on the other end of the SSL connection, or anyone who can break the SSL connection, can get your plaintext. This makes the JS crypto nothing but overhead. It's just hand-waving at that point.

This is true. However, you can say the same thing about, for example, retrieving an ISO of Ubuntu. A cryptosystem is as weak as its weakest link, and that weakest link may of course be the way you downloaded the cryptosystem in the first place.

But once the cryptosystem is in place, you don't have to trust SSL any more. By default, webapps are always retrieved from the server for every new session, but application manifests and offline storage are an effective means of avoiding this. You can build a webapp that is only ever downloaded once, and from then on loads its own code from the filesystem; and which verifies new "releases" of its own source using whatever crypto it likes before overwriting the client-side stored copies of itself.

Neither Lavabit nor Hushmail implemented this sort of application-release policy, but they easily could have.
So the NSA is not only spying on the Germans, they're impersonating them to cover their tracks!
Oh come on. Who wouldn't look forward to proprietary charging connectors, and only being allowed to buy electricity from Apple? At least it would be a little more apparent to most people how unacceptable that is.
How I hacked my room hunt in SF
"Usually a computer engineer or software person works with the EE"
This does not always happen. This really depends on Conway's Law:

http://en.wikipedia.org/wiki/Conway's_law

For example, if the firmware is controlling a device that does not typically include higher-level computer systems. For example, an ECU originally designed for a non-hybrid vehicle, there will likely be no CE/CS people involved.
What EDN reports aren't really - by and large - design issues. They are more process issues: lack of certification (a big deal for embedded systems); lack of substantial code review (MISRA violations); lack of HW design testing (tin whiskers); inadequate analysis of memory usage.

Process issues can be solved, given motivated management and diligent engineers. Whether the effort to solve them was done and how that effort goes becomes a cultural thing, and I can't speak to the Toyota SW engineering culture(s?).
The previous sentence in the article seems to indicate that a "dead task" in this context will only happen if a specific bit in the controller's RAM is corrupted.
The best package manager on Linux I've ever used is Sorcery, although pacman is a close second.

I'm still partial to the *BSD way of ports, however.
Remind me again why an e-mail client has to be a native app? Is there anything special that makes an e-mail client different from a, say, IRC client, which could be, for example, a browser extension such as Chatzilla?
I think it should be "204 No Content".
The lesser of all evils, and, conveniently, probably also the least of all evils for you in particular since you're an American (or live there).
Cocktail Physics
Shouldn't that be "milligrave" if you're using SI prefixes?
The cost of the level of training airline pilots get (around 100kUSD) would be prohibitive for individual driving. Also, they fly with an equally well trained colleague who will run the checklists in an emergency and correct their mistakes. I assume private pilots make as stupid mistakes as individual drivers.

Aircraft investigation is really good at overcoming hindsight bias and looking at human factors in a more objective way. What seems absolutely logical for you to type, having read about these incidents before, might not be as obvious to a driver who hasn't read about unwanted acceleration but is suddenly experiencing it.
Yes, but inaccurately.
haha, yeah here too
Cool. Easy hack I'll try next time I look for a place.
Zooming will not reduce bandwidth requirement, unless the zoomed image is also pixilated.
It acts as a pretty decent primer for that movement. If you already know beyond the basic intel then I wouldn't bother.

What's stange to me how silent Anonymous went during the whole PRISM/Snowden revelations. Seems pretty dead now.
I second this one! makes more sense than plain 200.
"200" makes sense. See wikipedia article on /dev/null[0]: "discards all data written to it but reports that the write operation succeeded."

[0] - http://en.wikipedia.org/wiki//dev/null
The complaint about the time going from 2 minutes to 8 minutes and also the car getting further away before getting closer sounds like the Uber drivers are doubling as Lyft drivers or other taxi-like apps. They have every incentive to always have a passenger in the car. It sounds like they are communicating with Uber that they will pick Noah up while they are almost done delivering a passenger from another service.
Nice: "...we’re also susceptible to moving on to the new new before the old new has proven itself out or reveals all of it’s innate potential..."
"by far the most benevolent hegemon in the history of the world" - I dunno....Great Britain/the commonwealth did a few good things. Pax Romana wasn't too bad. The mongols were pretty benevolent and accommodating.
I always admire The Economist's willingness to have political ideals, be explicit and unapologetic about them and to be pragmatic about them. It's an attitude that should be standard in the media.
'Aftermath' Dares to Unearth Terrible Secrets of Poland's Lost Jews
VPN access doesn't have to be all-or-nothing. They could (and should) lock each employees VPN access down as much as possible, i.e. support personnel has access to their support tool and nothing else, etc.

Production hardware should be on a separate network/VLAN/whatever anyway.
NYTimes: Are You Competent? Prove It.
The Python library is open source, but no, I don't think we have any open source test code.

Keep in mind that file data should go outside of datastores (in files), so the 10MB is for the per-user, per-app structured data. E.g. contacts, app settings, game state, etc. 10MB actually goes a pretty long way there.

Also keep in mind that, at present, all of the SDKs load the entire datastore into memory, so there's a pretty low limit to how big you want a datastore to get. 10MB is a comfortable limit for now.
It depends on my mood and the time of day.

During the day I generally listen to country. In the evening I switch to classical music and for late late nights - hard rock/metal.

Sometimes during the day I'll put my headphones on just to drain out excess noise - even though I'm not listening to anything.
cryptocat accomplishes this by distributing itself as a browser extension
"security" is always left for after-the-fact ---- exactly as evidenced by this disclosure and their poor in-house practices.
Apple's 2013 Acquisitions
Hooray, as someone who feels similar, we don't all have to "pick a team".
A new approach to fantasy football advice - a community of weighted answers.
ABS is a great example of a simple embedded system. Initial implementations were relatively self contained.

Personally I'd be spun out in a ditch about 5 times a day without traction control, I tried turning traction control off in my car once, and it turns out the way I drive is basically 100% dependent upon traction control functioning!
Basically, the way JavaScript security currently works, browsers trust all code sent from the server you are communicating with to manipulate everything coming from or going to that server.

You could talk about ways to independently sign and verify some crypto primitive or crypto library and be confident that it was being used to encrypt your communications appropriately. But this wouldn't help at all. There's nothing stopping the person controlling the server (or MITMing your connection to it) from adding additional code that scrapes the text input boxes, or captures keystrokes, or simply follows the appropriate variables down to the ones which contain your text before its sent off, and then sending that back to the server in an XMLHTTPRequest, via a websocket, via loading an appropriate image, or even hiding it quite well among the timing of when requests are made to the server.

The fundamental problem is that the code comes from the same person providing you the connection, and it is updated every time you use the page, so it offers no additional security above just trusting them directly.

If you want good crypto and good security, you want stable client side software from a trusted source, and a different source routing your traffic, so that both of them would have to be compromised to compromise your data.

Now, there may be one small advantage in client-side crypto. That's if due to problems with TLS (in particular, the version and protocols supported by your browser), there are TLS weaknesses that can be exploited, like a MITM attacker forcibly downgrading your crypto to a weak algorithm that allows them to eavesdrop but not forge content. In this case, stronger crypto implemented in JavaScript could be used to keep your data confidential. But this is a very narrow corner case, that's probably better handled by fixing browsers so they aren't prone to protocol downgrading attacks.
I purposely did not install the drivers, but that's not saying much as the camera, OS, and Skype software are all Microsoft's, so there is no reason to believe Microsoft couldn't run any driver they wanted to in this situation.
We are doing that, it just tales time.
Common Themes in the Despair of Entrepreneurial Success
Source for the standard of living in the US decreasing over the past couple decades? I'm genuinely curious, as it seems like our material wealth has increased, as well as life expectancy.
OH GOD YES. Seriously. I'm a tourist here. The guy asks me where I'm going. I say "To X please" - They then ask to get my phone out to show him where it's near. While he's looking at his phone plugged in, with GPS. This has happened, easily, 4-5 times. It's fkkd.
Seems like the post tiptoes around the issue of having called out Apple for having awful bugs when in fact it was user error. Interesting post, but a little more forthrightness would have helped.

Also the previous post hasn't been amended.
This is most of the case for me but unfortunately our company isn't going to rewrite internal systems just for me ;-)
So all the vitriol about this issue was simply misplaced?
You jest but... http://www.random.org/clients/http/
Definitely going in the right direction, I remember doing inventory endlessly in an inorg lab.

It would be nice to have a little more info about the products, but I think this is a space that could do with some innovation.

Good job.
If your problem is specifically with "define", you could set up a bookmark to http://www.google.com/search?hl=en&safe=off&q=define:%s with the keyword "define:". Just checked and firefox doesn't complain about the colon in that case.

For the more general case, I agree that firefox can be a bit annoying about treating any address with a : as some kind of protocol. It occasionally bytes me when doing things like trying to google a Python error via copy-paste.
Eh, "the Apple bug" is a bit off the mark in this case, since Apple's own IM client allows one to set away status.
Joel and Josh have it right, we found the actual breach yesterday. You also have it right, the breach happened before Monday. We're hoping to find reasonably conclusive evidence of a start date we can share with affected customers.
It feels like fastmail.fm owe Apple an apology for calling out the client as bugged when it was doing exactly what the user asked it to.
About all those nice bullet points: That's cool, but I'd like to be able to use a grid layout. I'm not looking for an argument or a lesson about the awesomeness of the Apple Way™. I just see people trying to accomodate their 9 Spaces and moving tediously from 9 to 1 and back, while pondering the "huge usability win" that is the linear desktop layout and that's when it hits me: "It'd be nice to have the option of using a grid layout, Linux has that, it's pretty nice".

Then I mention maximize and you tell me "it's not maximize, it's fit to content". Then again, that's all nice and dandy but if I wanted "fit to content" I guess I'd be already be satisfied and I wouldn't be complaining about it now, would I?
Same for fullscreen, I'm sure you actually do understand the difference between maximize and fullscreen. I don't want fullscreen, I want maximize, a feature Mac OS X does not offer (except for a few apps like Terminal.app, which makes it not only an idiotic choice, but also inconsistent across the OS).
I guess, in a lot of ways, i'm not sure about " and not have to worry about individually securing different internal services."

This is essentially something you need to worry about anyway, for other attack reasons.
A site built specifically to answer weekly fantasy football questions.
My name is Jason Encabo and I helped develop a site called http://PigskinBoss.com/polls - an online community for fantasy football advice. I just relaunched it recently with a new design and feature updates and would love to get your guys' opinion of it.<p>Here's my short description of the site: With www.PigskinBoss.com/polls you can get your star/sit/add/drop/trade questions answered by a group of fantasy football minds. You can also answer questions yourself. But the helpful thing about it is that the users voting on your polls have Accuracy Ratings, so the better their ratings are, the more you can trust their advice.<p>Please take some time to check it out and let me know what you think. Thanks in advance!
It looks really nice but unfortunately without MUC support it's fairly useless to me. We have a lot of conference rooms / MUC's for projects, teams etc. etc. that I would lose access to.
> You can build a webapp that is only ever downloaded once, and from then on loads its own code from the filesystem; and which verifies new "releases" of its own source using whatever crypto it likes before overwriting the client-side stored copies of itself.

But if you don't trust Hushmail they could force a back-doored update onto you.
Nextdoor raises $60 million in funding to bring neighbors together
Yeah I agree. This is a remarkably uninformative article by a breathtakingly biased source presented uncritically and with absolutely no context.
>"Right" and "wrong" have no place in international politics. Nations exist, among themselves, in the state of nature, and in nature there is only power: the ability to do. It is irrelevant whether it is "right" for a nation to impose itself as hegemon. It is inevitable that some national will. The only topic of discussion is: would you like some other hegemon better than the one we have?

The realist in me appreciates this point, but the parts of me which are more hopeful think that this idea is the last justification available to people who are unwilling to investigate alternatives. Even if you accept that in nature there is only power: the ability to do, there are many ways to exercise that power. What if that power came from a legitimate belief that the people in the world who aren't US citizens are equally as important? American hegemony does prevent potential worse situations, but that's not its purpose. It's to protect Americans and money.
I don't think most people got the joke here, judging by the replies.
That's actually pretty cool. I'll use some variation of that using hjkl :)
If true, this is horrible. I give 4 stars for an average trip that gets me there on time, with little to no grief. I only give 5 stars if the driver was exceptionally nice, funny, helpful or there was something outstanding with the trip. 5 stars shouldn't be the de facto rating for an average trip.
Except your decision really won't win you as many customers as it'll lose you. I was interested in buying it until I saw this thread.

Having manual status turned off by default, but available to enable in settings, shouldn't lose you a single customer.

Strange design choice, even stranger justification.
Stretch goals are easily one of the worst norms about crowdfunding sites. It's really hard not to do them, because it feels like you're turning down free money... but that's not what's happening.

The rise of small companies handling logistics on behalf of project owners after a successful funding, on the other hand, is a really great thing. I've experienced about 3 different companies (I'd have to dig through my email to get the actual names) and they've generally been competently handled. The more projects that take advantage of these, the better.

What I haven't seen (though that might just be me not looking) is project owners receiving good, professional advice about what to offer as rewards. Rewards need to be almost infinitely scalable and take into account snail-mail shipping costs and packaging time and effort, or you're effectively throwing away all the money you received.
I think it depends on how good you are. If you're a great developer, with deep knowledge of patterns, a strong commitment to refactoring, with lots of experience such that you're aware of the pitfalls you are likely to befall, then you're probably right: frameworks will buy you little.

I'm pretty good, but I'm apparently not good enough, because I find myself consistently learning things from frameworks. I certainly am familiar with the Last Ten Percent you're talking of. But I also know that for every 10% that I have to pull teeth to get, there are many many things that work well because the platform team did a great job and drew on a depth of experience and expertise that I just don't have yet.

DHH built a lot of Ruby apps before he built Rails, and by using Rails I can draw on his experience. As a solo founder that's worth a lot to me. And even now, when I've largely moved on from Rails I still draw on things I learned from studying that framework. And the frameworks I use now are equal distillations of very deep experience.

You're perhaps a more experienced developer than I am, or just better suited to the job.
Woman wakes up after childbirth with no arms and no legs
Same here. There's no way I'd use an IM client that doesn't allow me to set my status manually.
Although I don't always agree with the Economist's position, e.g. right to bear arms, it's always refreshing to read a media that is not pigeon holed into the traditional left / right that we today are accustomed to. Liberal in values, conservative in its economic views, while not being to the extreme of today's libertarians. Total win imo ;)
Probation in the article's context is mostly an artifact of Australia's Fair Work Act and not being an at-will employment country.

For the probationary period the employer can fire you for almost any reason (like in the US) but afterwards there's a procedure involved where the employer has to show cause and give the employee a chance to rectify the issues before dismissal.

It's not like a trial week that last 3 months, it's more regular employment but you receive tenure (or a sort) after 3 months.
Not really the same, but floating nuclear reactors don't primarily float for the cooling, they primarily float for the mobility. What are the chances people are focusing on the wrong perk here?

Then again, I'm not sure what the mobility advantages of a datacenter are... maybe they're going to park it halfway between London and NY and load it up with high frequency trading bots?

That's a little fantastical though. Any more mundane reasons you might want mobile datacenters?
Its difficult to scan the titles on the homepage - this kills my ability to quickly scan the list of links to see if I want to read them - it'd definitely be easier if it was less photo-centric
Interesting idea with face detection, though I'm not sure if there would be any wins over what the video codec already does.
Well, except then you go to another doctor if you are getting bad service.

They get paid by patients under their management so if they are taking breaks that can't manage that many patients.
CC-NC epic fail
Why doesn't Pinboard get any love in any of these icon fonts? If they did, I'd switch from images to fonts for my personal site.
Ask HN:  Where is a template for corp docs used to form LLC
I am starting a company with a colleague and would like to make sure I have my points covered.

An attorney is in order, for sure. But I would like to review a sample doc or even an outline of the points that need to be covered.

Does anyone has a resource for this?

Many thanks!

AD
http://benswann.com/category/swann-tv/
Clearing your cache would make Chrome behave more slowly, because it has to fetch those things over the network again.
After a few years as a product manager, I learned that the best response to a showstopper bug reported by a single user was to just sit on my hands.