skysight-inc/HackerNews huggingface dataset:
How many professional sports players have you actually met? Most don't have or take the time to code/type enough to get carpal tunnel. At worst they may have video gaming related issues, but most contracts have clauses regarding such activities and issues.

Also weight lifting and other physical training helps alleviate carpal tunnel for programmers.
"JFDI" is quite difficult to do in larger companies - unfortunately even most 200 person companies - when you're dealing with several stakeholders, potential bruised egos and such ("why was I not included in the startup?" "how can you launch a new product without the product team?", etc).

I think the article was attempting to address that specific scenario, and not about running a "lean startup" in general.
NSA Eavesdropping on Google and Yahoo Networks
It's nice to see a company writing posts with this much transparency. While it's not simple to grow a blog presence like this it does take persistence and knowing a few solid techniques. Thanks for sharing.
There is more to a book than the end. Just because you know what happens in general doesn't mean you can't enjoy reading the book at all. Why do people re-read books? Why do people watch movies based on books, or go back and read the book after they've seen the movie?

I'm not going to destroy my prose with legalistic gerrymandering just because you're too emotionally underdeveloped to enjoy a story after knowing details about it.
I prefer "Request Policy", which blocks everything that comes from external domains, and allows you to selectively enable what's needed on a per domain basis, i.e. you can enable googleapis.com on google domains, but it remains off everywhere else.

It's usually obvious to spot the CDNs and avoid the spies.

It breaks a lot of things initially, but after a while, the sites you use often are properly whitelisted, and it isn't a pain anymore.
666 bytes per second--this really is evil!
NOTE: This post is probably useless for anyone other than the person I am replying to and the residents in Switzerland.

You can start a business, but it can not be registered as a GmbH or AG(These are like LLC or Pvt. Ltd. companies). From the day you quit your job, you have 3 months, during which you still have to pretend as if you are looking for a job. After that RAV(unemployment insurance dept.) gets off your back for 4 months during which you can devote yourself to setting up the business. At the end of 4 months, you have to either start pretending to be looking for a job again or give up your benefits.
I didn't really have to bother with all this because I really had to register my company. I also thought I was at a disadvantage due to me being a non-european founder but my lawyer assures me that this holds true for everyone. If you own shares in a GmbH or AG, you can not claim benefits from RAV.

P.S. I didn't read the article and my understanding of social security and unemployment insurance is quite hazy. That's why I hired a lawyer. There are people who know how to game the system either to start a company or to go on extended holidays ;-), so that is possible e.g. as an Indian I could have registered my company in India without having any impact on my social security in Switzerland. But financial wizardy and legal games is not what I intend to devote my attention to...
USB devices don't provide their own drivers. Your methods for infection are either filesystem exploits, or changing the firmware of the drive to send invalid/exploitative USB traffic.
My PP homepage and Bruce's PP homepage look really different — it almost looks like PP went through a redesign process while he were doing his redesign, and came to similar conclusions!
The Educational Imbroglio
Just a quick usability issue I noticed: The numbers in the Gross (Amount?) column are only differentiated by their color. Red-green colorblindness is pretty common, so it may be hard for colorblind users to distinguish between the two. Adding a minus sign before negative amounts would probably help a lot for them.
I wonder what the differences between these two logging libraries are?

I know Tim wrote loggo specifically to solve some logging problems with Juju, which as the largest open source project in go, and as distributed system management tool puts a lot of pressure on getting good logging in place. But I'm less familiar with seelog's history, and the motivations behind it.
I've been doing this for a while using the Google Authenticator PAM plugin[1]. I use the same module to add two factor authentication to both SSH and OpenVPN connections.

[1] http://code.google.com/p/google-authenticator/
...then the solution is to write a post that can stand on its own merits. That shouldn't be difficult if Meteor can live up to this kind of hype.
Life does not end after 35, but your energy levels and stamina will be lower than in your younger years. Yes, even if you exercise and eat healthy (indeed, you'll have to stay fit just to keep going). Moreover, with age (hopefully) comes experience, and with experience may come a jaded view of society that can kill your dreams on birth. Qohelet wisely stated that "For in much wisdom is much vexation, and he who increases knowledge increases sorrow."

I hope you will be among the exception.
I did get a startup allowance for 6 months, and I live in Amsterdam, the same city this article is about.

Here's how it worked: My old employer went bankrupt, and as a result, I could get unemployment benefits based on my last salary quite easily. Anyone in unemployment can start a company while keeping the unemployment income for 6 months. You do have to write a business plan which needs to get approved.

And the money you get is technically still for unemployment, so if it turns out you weren't unemployed, you have to pay it back. It's based on the money you make during the first year as an enterprise. Above a certain threshold, you have to repay the entire loan, below it, you have to repay proportionally.

Still a good deal, because it gives you a lot of security, though it'd be nice if it was a bit more than 6 months.
Did you omit the following sentence on purpose?

Earlier this year, Apple Inc. also began offering advertisers the ability to trail and target users through a unique ID on smartphones and tablets.
Admittedly, the article isn't very well written, but it says that Dragos believes the malware to be installed through USB firmwares. Only after that does it communicate with other compromised systems via audio. Supposedly.

The malware, Ruiu believes, is transmitted though USB drives to
infect the lowest levels of computer hardware
Is there a book that teaches best practice C++11 without teaching any of the old cruft?
Pushing to 100,000 API clients simultaneously
Or, if you want to do the same thing without trusting the security of your VPN to a third party, and you're willing to do a little more fiddling with configuration files, you can just use libpam-google-authenticator: http://www.howtoforge.com/securing-openvpn-with-a-one-time-p...
I would agree if it didn't say "Hipster Logo", but it does.

What would I be making fun of if I posted an infographic titled "Wearing the Perfect Black-Person Outfit", and featured pictures of saggy jeans, gold chains, grills, flat-brim hats, etc.?
I wish one of these articles would quote some actual regulations. As far as I understand, the CFRs (FARs) have been more advisory than regulatory in these details, generally leaving it up to the airlines to decide their policies on personal electronics, then approving those policies. The 10k foot rule that Techcrunch refers to was never in the FARs, as far as I've read, rather it is/was an FCC regulation. Seriously, I'd like to see the actual regulations that have changed, if anyone can find them.
that's all correct, but then you ruined it with the .ajax= iframes nonsense and the total waste of time removing jquery. optimizing for the right things is important, but doing the wrong ones is just wasting your time.
"Pray tell us, where does C++ need to be?"

In my honest opinion, C++ needs to separate low level concerns from high level constructs. How variables are captured in lexical closures is a very low-level concern, but lexical closures are a high-level construct -- by mixing in such low-level details, the overall utility of closures in C++ is reduced. This is made even worse by the fact that the programmer must manually maintain the lexical environment of the closure -- and the new "smart pointers" are only marginally helpful, not nearly as robust as a modern garbage collector (which can, oddly enough, improve performance).

C++ could be a really great language if these things were better separated. I write my code in Lisp, and when I have low-level needs I usually have to write some C code and use an FFI. It gets the job done but it is awful to debug and there is a performance hit. C++ is in a much better position: you can write low-level code, or you can write high-level code, or both, and no language barriers need to be crossed (reducing costs in various places).

"As for the reason why non-C++ programmers don't like C++, perhaps you are in a better position to say."

Well, aside from what I mentioned above, I can give you one more: extending the language. You have a few narrow ways to do it, and then you are just stuck. Operator overloading is great, but what if you want to add a new operator? What if you want to change how your type checker works, so that you can have a dependent type system? There are a few hacks that people can do with templates, but on the whole adding a new feature basically means rewriting your compiler (see e.g. what it took to get support for lexical closures), and C++ compilers are pretty hard to write in the first place. This is something of a Lisper gripe, though there are a few languages beyond Lisp that allow programmers to add new syntax or semantics.
For Japanese, in a Unicode context, I've never seen a combining mark actually used.
Java applets are more powerful than any web browser API (you can't get at USB devices from the web browser except through a plugin, for example). BankID (used for banking and electronic payment in the Nordic countries by almost every bank) makes use of this to do validation with a USB device to authenticate based on bank card.
Personally, the PP dashboard works great for me — I almost solely use it for sending & receiving money with friends & family. I suspect one big challenge for PP is that the majority of users have a similar use case ... but the majority of dollars are in accounts requiring the functionality you're asking for.
Better yet, use passwords plus client side certificates. It prevents these scenarios without requiring you to trust a third party with your two-factor authentication tokens.
That happens with Dropbox too though.
I'm not a physicist, but the fact that the universe is exquisitely balanced to support life keeps me up at night as well!
Superstar? Please. He's a good player but hardly more than that.

http://www.cbssports.com/nba/stats
The paypal redesign I want is where they stop showing splash ads while they take 3% of transactions for doing nothing.
The article isn't about the current Swiss system, it's about replacing it with unconditional basic income. It wouldn't be uncinditional basic income if it didn't apply to entrepreneurs.
App Lifetime Value : Why Planning is More Important Than Timing In Marketing
asm.js doesn't because C doesn't, fundamentally. Given both Java and JavaScript strings are immutable, you probably want to for the sake of having non-copying operations for substring and the like.
Presumably that's atypical behavior for a BIOS, so an analysis of the dumped firmware should turn up where it's getting the location of and method to decode the data. That would give you enough to keep digging.
With UEFI/EFI it's pretty plausible that you can load additional code at runtime from elsewhere even outside of the large space available for UEFI/EFI itself. Some versions even self contain quick booting minimal environments that contain web browsers and such.
May be due to HN's recent change of IP address. Feedly may still be trying to use the old one. If this is the case then time will heal this wound.
On leaving the Guardian
So true, I am red-green colorblind and I didn't notice the difference until I read your comment, they look almost the same to me.
That sounds fairly unlikely (the BIOS does executes some code from PCI devices, but he says this happens on a machine without any weird PCI device, and PCI ROMs can be dumped too). We would not have to discuss whether this is the case if BIOS dumps turned out to be different. The issue is that 3 years after discovering the malware, he hasn't even tried to dump his BIOS.

Compression and encryption at this stage would be obfuscation more than anything else, and it's the job of malware researchers to break these kind of obfuscation layer. But again, we have no proof of this even being present.

The BIOS is not a black box that can't be analyzed.
I found it funny.

We could perhaps make a list of websites that fall into this "trap".

Here's one. Ridiculously expensive axes. And red woolly hats. http://www.bestmadeco.com/
> It looks thick. I don't know why, but it makes me not at all interested.

There is no argument for feelings but is there really any practical advantage to thinness, past a certain obvious point when it allows something to fit in one's pocket? It isn't blue, soft or delicious either. :-)
> reducing the limitations and obstacles given by Javascript

What are these perceived limitations? There are fairly standard idioms and pure JS libraries for getting around most problems people find
discovered by a single mom
Downvoting comes around 500 maybe? Not actually sure.

Anyways, lest you think my observation is just a "non-constructive comment":

The great thing about the browser is that it is free of a lot of garbage we have to deal with in C++. The antics required to make C++ work in the browser, while laudable, are absurd.

If you need cross-platform code, write in Java and avoid native extensions.

If you need cross-platform code that has to be fast (i.e., you actually need to have inline assembly), write in C or C++ and actually do your proper cross-platform work (proper abstraction of I/O, proper defines, proper selection of types, etc.).

If you need to draw shit in the browser, use the wonderful ecosystem of tools that have evolved using the standard affordances of Javascript and CSS.

Here are the bits I take issue with:

"write web appli­ca­tions in C++, reusing exist­ing code and mak­ing port­ing of whole appli­ca­tions and games to the browser plausible."

Why? What type of code is worth reusing? What type of performance is this going to get me?

Most C++ codebases are janky and sad--game engines being some of the worst offenders.

" code both the fron­tend and the back­end of a web appli­ca­tion in the same lan­guage and codebase "

Why the fuck would you ever want to use C++ as that language? It's terrible, so much so in fact that it lost out to PHP and Perl.

Let that sink in for a second.

People said, "I would really like a language that's easier to work in!" and then picked PHP and Perl. PHP and Perl.

Moreover, go look at their docs:

http://www.leaningtech.com/duetto/examples/

" Duetto does not attempt at emulating numerical types which are not supported by JavaScript float is supported with 64-bit precision, like double. long long is defined as a 32-bit integer. 64-bit integers are not supported at all in JavaScript and duetto does not attempt to emulate them."

Well thank Christ we never will need numerical types not in Javascript--I mean, I've never used bit-twiddling in my engine code, or my decompression code, or my audio code.

~

Look, it's a really cool use of LLVM, but we don't need C++ in the browser.
There's been a bit of a precedent for that though, so we know how it works.
Any dibs as to what happened for customer.io at Linode/Hetzner?
Netherland has a system somewhat like that: you can keep your unemployment benefits for 6 months if you start a business while unemployed. If you're successful, it gets turned into a loan.
Disclaimer: speaking strictly from a game-devs perspective: I remember that post and from a game dev's perspective the pre-allocated-memory vs. reclaimed-through-garbage-collection argument is a bit weak IMHO. Games have predictable memory usage, and game devs are used to see memory as a static, finite resource anyway (since that's how it is on consoles). Grabbing a chunk of memory upfront is quite common for games. And as for the (big) size of the pre-allocated memory: either your game needs that much memory at a time or it doesn't, if the user doesn't have that much free you're f*cked either way.

The perf comparison is missing a "asm.js + V8" bar, asm.js code is usually faster then non-asm.js code, even if the JS engine isn't implementing AoT compilation as FF does.

Edit: fixed "...uncommon -> common..." above
Unless you care to explain which parts are not practical, and which details are being overlooked, what you have here is literally the opposite of credibility. You have deliberately made yourself non-credible through your anonymous cowardice.
Startup CEOs are Born Bad Leaders
This article is #1 on the front page. The news that Intel is going to fab ARM chips is totally missing from the front page.

Has HN officially jumped the shark?
I'd agree with this point. I don't think Python, Ruby, or Javascript are particularly "functional", whatever that means.
Ask HN: Insurance for bitcoin?
Hi,
Does anyone know there is any company out there that offers some sort of insurance policy for bitcoin? For example, lets say I lose my key or somehow they get stolen?

thanks
Agreed. As a Celtics fan I have no trouble hating anyone who plays for the Heat.
thanks, trying this out.
I stick with GNU/Linux (Desktop or not) because it is the most widespread OS designed and maintained by hackers for hackers. Enough said.
You are only trusting the half of the security which is better IMHO. The evil person would need to hack/steal both you and the (likely more careful) third party in order to access your accounts. In your scenario it would only need to hack you to get everything.
i want to make an infographic of six steps to making the perfect infographic of the six steps to make the perfect hipster logo. it'd be so meta.
GUIs have these problems in spades.

For example, all GUIs must display filenames (say in a file-picker), but how do you display the filenames if you don't know what the encoding is, or if the filename disobeys the encoding? What should you show a user when "control-A" is one of the "characters"? How can you give line-at-a-time display when newline is in a filename? How do you process filename, since it may not be a legal string in the current encoding (a problem both Qt and Python have hit)?

The Qt solution is to mandate that filenames must be in UTF-8. Period. So the nonsense that "filenames can be almost any sequence of bytes" is just that, nonsense. It's silly anyway; why allow ALMOST anything, but not anything?

This also assumes that GUI programs never invoke other programs, which is also absurd. Every time a GUI does system(), exec(), and so on, it risks these filename problems (e.g., if it tries to pass a filename with a leading "-").

The problems are WORSE in shell, but they still occur in other languages.
I read the first sentence and thought "Milgram experiment". For the rest of my time on the page, I had to fight the urge to just press the back button. As the parent said, congrats on tech, but this just made me shudder.
Windows Azure Compute cloud goes TITSUP WORLDWIDE
Cut them some slack, jeez.
Yes, they're rolling out a new design right now. I have to say it's much better than before!
I do it all the time, specially when about to focus on a complicated task.
I think his message goes further than that. Coding is like a new literacy. It's application isn't just in creating software, but getting things done in a digital age.
The customer.io story seems like a great example of why NOT to use budget providers like OVH and Hetzner for mission-critical applications.

You get what you pay for.
DarkWallet Aims To Be The Anarchist's Bitcoin App Of Choice
The all-new AWS-CLI has powers
You say that a computer is equivalent to an orchestra?
I installed and played with BTSync yesterday. It was really easy to get it all up and running syncing between two local machines and a remote server. The config was really simple compared to other stuff I've used. Sometimes it could take a while before the syncing would start which is a bit of a pain.

We run a system where we have a lot of data on a server that we want to see locally. Edits are made both locally and on the server. At the moment we're using Aerofs to handle the syncing. As a general rule it works really well. The issue we've run into is with pre-seeding new machines (ie, when our spot instance based server get killed). I need to play around a bit more but it's time consuming to get a machine back online and totally synced (there may be a solution to this).

Mostly it's a pain being at the mercy of someone else's magic. Aero is great, except when it isn't - and we don't know the rules. That's a real pain if it's business critical. BTSync looked great - until I realised that it's not opensource either.

There are a few syncing options on there but they don't all tick all the boxes. Unison doesn't trigger on fs events so you have to run it manually. BTSync isn't opensource. Dropbox syncs to their servers and back. With AeroFS you don't always know how it's doing what it's doing.

So far AeroFS has been the winner for us. BTSync definitely looks like it fills the same space though.
Only the good parts:

http://www.amazon.com/C-Programming-Language-2nd-Edition/dp/...
It's really weird. Any sort of subculture is kinda hipster now. I am into punk rock and cycling. I am not afraid to say that I am probably a hipster. In fact, I am sure of it.

Hipster-bashing kinda reminds me of being made fun of by jocks in high school because I had spiked blue hair and torn jeans, except now the jokes come from geeks (who were made fun of by the jocks, too).

Maybe I just don't get it.
Hand up - still use one as my only phone. It definitely has its flaws, but the ones you mention have really never been an issue for me, either due to fixes, updates or workarounds.

I somehow get 1.5-2 days use out of the thing, per charge, despite frequent multitasking (browser, SMS, notes, ssh etc.) and typically running it with a slight overclocking to 805mhz. A script switches on airplane mode while I'm asleep, so that probably helps.

Others have mentioned the screen, but I'm really comfortable reading on it. The Opera browser makes the peck and hunt game on desktop versions of sites obsolete. All the fuss about resistive/capacitive differences is beyond me. It's really quite easy to move (things) about on the screen, and I'm not into splitting hairs.

Some have mentioned the Psion series in this thread. I have to agree, the 5MX was a brilliant design for a mobile device. If that keyboard was coupled with modern, open HW in a similar phone it would be game over. For me at least.

I have been considering buying a folding bluetooth keyboard to type up notes and posts on the phone, but I think that's pushing it - my main 'creation' work still happens on the PC, for better or worse.

I don't do a lot on it that you can't do on any other phone, but it does give me a warm feeling that it's at least open and not phoning home at the end of the day to update Sauron.
What teachers make - Zen Pencils
I got tired of the linkbait titles and made a user script to remove all medium.com links from HN. It works in Firefox and Chrome:

https://github.com/rajbot/remove_medium
Actually not. Dropbox has a feature called Selective Sync which lets you choose which files are synced to which computers.
Show HN: Instagram: A business opportunity
Fine-Grained Access Control for Amazon DynamoDB