skysight-inc/HackerNews huggingface dataset:
Kiln Harmony was awesome, as I'm one of two developers in a team of eigth who prefers Git instead of Hg. Then we decided to use sub-repoes/submodules, and kiln harmony can't handle that, and our other team members simply WONT use git :(
I don't understand your analogy. 100%* of sites with passwords use the same method, transmitting the plain text to the server where it is hashed and discarded. Do you want 0%* of sites to claim that passwords are secure, even if they use a well-configured bcrypt and follow best practices?

*rounded to the nearest percent
Deis open source PaaS now supports DigitalOcean
> Those are the majority, and if we want them to use Free and Open systems (which is my whole point here), then we have to create those systems in a way normal people will start switching from the closed systems

It's trickier than that. There are many open and federated XMPP services around, including those with web clients / interfaces available. Options are around. It's the sabotage of federation by "big" players which is a problem (or sabotage of interoperable protocols altogether).
Why do you even need the slab? Just get some concrete blocks, bring the home in, put in a septic tank...and you are in business.

Bonus if you live in the boonies and have to burn your trash.
6 things I look forward to in CSS level 4
The exact same link was posted one minute earlier, weird. https://news.ycombinator.com/item?id=6677624
Protective barrier? For falling out of bed?
i use xfce + xmonad. they play together very nicely.
Review: Apple’s iPad Air is a big tablet without all the baggage
This is pretty cool and its nice that you can knock your phone to unlock while in your pocket but it means if I leave my phone at my desk to charge anyone can unlock my computer, which is a no-go.

I wish someone would just hurry up and implement unlocking of your mac via touchid(I have no idea if its technically possible to use touchid for other apps then apples).
From one of the postings (https://weworkremotely.com/jobs/20):

"We're looking for a younger developer who wants to learn and be exposed to new technologies. "

Is it legal to discriminate for an equity-only position?
https://www.trypaper.com/
(Disclaimer: I work on Sync at BitTorrent)
Sorry if that language is confusing - we'll try to clean it up. If you build a SaaS product using Sync that's totally fine and you're welcome to sell your service. What we're trying to prevent is people who try to sell something that we are giving away for free. Happy to try to clarify if there are any other questions.
That is a dumb comment. Open sourcing the code doesn't mean you know anything at all about what's actually running on a server purporting to use the open source code.
zeromq is not secured - but they are working on adding security in the protocol.

In the meantime the safest way to avoid any security issue is to run IPC-only zeromq sockets or to set properly a firefwall and to use an SSH tunnel. There's such an option in Circus, where you can pass the ssh server to circusctl.

also, read up http://circus.readthedocs.org/en/latest/design/security
This is true but even for strict liability crimes there may be vagueness problems unless you can show some degree of at least a very general intent.

The problem here is that the prosecutors hold a lot of sway over how much Presumption of Innocence should be relaxed in each case, as they are the ones who advise the governments of local jurisdictions about these matters. That would be like the umpires always being on the payroll of the home team. I'm not so sure this situation is conducive to a level playing field.
Other People's Money. There's a reason they're all smiling in the final photo.
Problem with histedit and rebase though is that they won't allow you to change published history. This means if I want to push my changes to a backup repository (not the main development repository) I loose the option of rebasing my feature-branch before pushing it to the main repo :(
Your marketing is awful, please stop self-advertising and get someone that actually knows what he's doing. The idea is great this is just a marketing problem now.
So, this is basically using the Google bot as a proxy. I don't see what Google can do about it, or does Google have to do anything at all.

Just secure your website as if the attacker is not going to use the Google bot as a proxy, because well, nobody can guarantee that the attacker will use the Google bot.

Google bot is nothing more than a computer sending HTTP GET request to your server, so if your site is vulnerable to HTTP GET requests why you write like there is something special about Google bot?
Thalmic Labs Developer Program is still accepting applications
OP here. On dating websites like okCupid and match.com, you have to write a message to the other person to start a conversation. On Truffle, there is no online messaging. You are presented with 3 users every 3 days, if you like them, you send them a coffee invitation at one of our Truffle meet up cafes.
Please, don't use DMG. Just .app in a plain .zip please.

The nifty "presentation" adds a several needless steps and pitfalls to running an application:

• Mounting and verification of DMG is slow (Zip CRC and Developer ID signatures give you verification too).

• "Nothing happens" after clicking DMG — user has to find DMG mount on a cluttered desktop.

• Clicking app icon in the DMG window is tempting, but generally it's a no-no (some apps don't mind, but some ask to be moved to Applications, and some throw "error -13 read only volume" kind of errors).

• User is expected to copy the app to Applications folder, with instructions given in form of non-localizable non-accessible text-in-image, and it's trickier when sidebar with shortcut to Applications folder is hidden (and remember "Applications" folder name is localized and sounds nothing like it in many languages).

• User has to unmount and delete the DMG, but that gives non-obvious behavior when the app is running off the DMG.

• It gets super confusing when user has pinned app in the Dock while it was running off the DMG
> They aren't sabotaging it by not adopting it.

Oh, really? Inaction can be damaging as well. In this case - it's sabotage. Since you bring SIMPLE, which of these major closed networks support it?
There's one called BluePill: https://github.com/bluepill-rb/bluepill
Thanks, good point. Do you have the link to another thread so I can upvote that?
After a routine traffic stop.
"Balances security with usability" is here literally a euphemism for "trades security for usability".
http://www.mophie.com/shop/iphone-5/juice-pack-helium-iphone...
Help beta test our site
We could use your help beta testing our site! Come test out @sporticulture during today's Champions League matches! http://www.sporticulture.com
If you try to hammer a nail with a crowbar, you are going to experience some difficulty.

Large projects like Android get along swimmingly on git because they have structured themselves such that git is the right tool for the job. If Android insisted on having one single git repo, despite that not being a git best practice, they would have trouble too.

Structure things right and a git based system will scale far beyond what centralized monolithic repos like perforce can handle. If your codebase is growing properly big, splitting your code is something that you'll need to do eventually anyway.
In terms of CLIs for Amazon S3, 'aws s3' is a collection of commands that are almost equivalent to 's3cmd' functionality, while 'aws s3api' is a collection of commands to interact directly to API using corresponding action names.
I think Bitcoin's extremely cool, and I think it will take off and increase in value, but it's not yet obvious if it will be a net positive or negative for the population as a whole.
The 3 Big Product Decisions Behind Rithm
For a scenario like the one Lavabit was trying to address, trusting the service provider to "avert its eyes" isn't good enough. If I'm Edward Snowden, I need to assume that my service providers are all actively hostile to my interests. Crypto that doesn't protect me in that environment can't be trusted to protect me in an "non-hostile" environment, either.
I think a couple reasons this is accurate also includes the fact that w/ 5 million incarcerated americans a VERY large section of impoverished families include a "Role Model" behind bars--this does NOT set a very good tone for the family.

Some of these being non-violent offenders. Face it there are a lot of areas where we need reform, Education, Criminal Punishment, Mental Health, Gun Laws, etc...

Fact is it will probably get a lot worse before it gets better - if it ever does get better.

--- We need to go back to where prisons were only for hard criminals that were dangerous to society--let everyone else be on home-arrest so they can still provide for their families.

Non Violent/Non Sex-offender? Go-home be w/ your family, but still pay a penalty, still pay your fines, still support your family, and do community service....
Much harder to loose changesets? The reflog keeps changesets for up to 90 days (default, can be configured), if you don't notice that changesets are missing for 90 days, then chances are they don't matter :/
It's a comment on https://news.ycombinator.com/item?id=6677629 which is the same URL submitted one minute later. The duplicate detection on this site doesn't always work.
Did you read the article? It's about weakening, not replacing.

As I say:

«Facebook is taking over the web and we need to save it. The issue is too complex to have one solution. The most obvious solution is federated social networks, but it’s also a very long term solution. We need more, sooner. One of these thousand small solutions should be to take back chat and subscriptions, by making them dead simple to use for everyone straight from the browser.»
Built one myself sometime ago:

https://github.com/lsh123/stats-rrdb

An important part for me was the desire to completely separate data and UX (so no graphite). Added bonus is ability to control resources (e.g. memory/disk usage).

We run it in production for quite some time processing hundreds of data updates per second and tens of queries per minute.
I'll say this, I feel for the YC partners reading through submission after submission. After reading the few that have been posted on HN the past few days, I'm exhausted. It's hard to give a lot of attention to each of these without skimming through and just saying "meh, next".

Much like an English teacher reading through 30 essays.
OP here, I agree. I guess @mlyang put that in better words than us "people with similar intellectual interests/career aspirations"
So all of their acquisitions and burn has come from (crunchbase caveat) ~7MM? There's some missing pieces to be sure, but suffice it to say that having that much cash in your back pocket allows a different set of considerations.
That really doesn't change the equation. That's only if you can trust the client code...and it just isn't feasible with JS sent to you from a 3rd party.

pgp works because it transfers data and not code.
It probably made more sense on the P&L statement until it was dumbed down.
Aren't these problems with Lavabit related to the fact that they still had to support plain old SMTP coming and going?

Dark Mail is intended to be a new protocol.. not just a new Lavabit (which would mean, theoretically, that it could be point-to-point secure)
Luke Walton hired as L.A. D-Fenders assistant
Making Big Data Real-time and Ubiquitous Is Key to Enterprise Adoption
And they will still sell it for 1 million in Silicon Valley.
You can use a polyfill that falls back to WebSQL (Supported on iOS): http://nparashuram.com/IndexedDBShim/
This is a terrific post - If liveninja doesn't work out Will should start an PR agency.

Note these points he manages to get across in a subtle way:

- We're disappointed that Google with all their resources couldn't make a better product. (Our product is superior)

- You made the exact same mistakes we made a year ago (we're a year ahead of you, and you don't know what you're doing)

- We're glad Google entered the scene and validated the market. (this is now a validated market niche, investors take note)

- We really hope for the sake of Googles customers that they'll stick around and not make this an experiment like buzz, wave, etc. (We're in it for the long haul, Google will shut down their service and leave you hanging if they don't see instant success)

- You're dealing with customers who need this tool and are willing to pay for it (Investors, did you read this?)

- I'll be visiting tomorrow because I won an award and the prize was a trip to Google. I'd be happy to have a conversation and help you out. (Why don't you buy my company instead)

Never does he condemn Google for stealing his idea, bullying or entering the space. He comes across as happy for the competition because he knows his product is better. (whether it is is another matter, I don't know)

This is a textbook example of how to deal with a large competitor entering your business niche.
No. It matters because courts have ruled that your system cannot claim "averting its eyes" as a defense against providing intercepted data.

Recent (in the past year) court rulings have decided that passwords in memory are accessible, even if your softwre normally throws them away -- so you could be legally compelled to implement interception of those. (IANAL, and this assumes that I understood the things others wrote about these...) Sure, it's likely only in some circuits, but I'd be surprised if other judges did not rule similarly.

A safer system would be where YOU create your own key pair, and only send your public key to the secure mail provider. You know that your e-mail, your text, etc is never in cleartext on the remote system, which means that even if that system is completely compromised, all an attacker is getting is encrypted copies of your communications. (Well, and cleartext metadata, since you need that for sending mail.)

In such a system, you know that encryption is happening, because you are doing it on your computer before sending bits to the server. (You'd also need a way to exchange keys in a way which doesn't require trusting the secure server not to be MITM-ing you.)

Even that's likely not fully safe, but it's very different from having the server avert its eyes and pretend you never sent it plaintext keys/credentials.
We could use your help beta testing our site! Come test out @sporticulture during today's Champions League matches! http://www.sporticulture.com
Please keep your chins up on this one. I think this is a great concept and it could legitimately solve the one major beef I've always had with dating sites like OkCupid (for long-term relationships, I'm only interested in working professionals, and it's quite a hassle to filter out the right profiles sometimes; I also generally find the messaging phase to be worthless, as most people decide whether they want to meet someone based only on the profile).
I like your point and it is a valid critique of HN commenting. Many dismissals are perfunctory and incorrect.

All the same, though, it is expected that almost all new startups will fail and most products will not be "the best" or even original. That's the nature of competition; only the top products get any traction at all. Given that, I would expect critiques of most new ventures.
It appears to be a service hosted by Thomson Reuters:

http://corporatesolutions.thomsonreuters.com/investor-relati...

Many more examples (including several large companies) can be found at:

https://www.google.com/search?q=inurl:http://phx.corporate-i...
Maybe because this isn't an original idea at all.
I meant SSL. Edited for clarity.
FYI - I just got the subscription cancellation notice. It says "Your Everpix subscription has been canceled. You can continue using your account until [my renewal date, well beyond December]." You may want to change that to reduce confusion.
I don't know all the details on the project and if there are some single point of failures, but as far as Circus is concerned, a properly working graceful shutdown is a must-have when your app is getting data to process.

e.g. 1/ notify the world you don't accept data anymore 2/ process what you have enqueued 3/ shutdown. In Fabien's use case 1 -> 3 can last for over 5 minutes.
That's not a bad idea. Take the browser engine and embed it in your app...then never load code that isn't your own. That's not a web app...thats a native client.
Quite dangerous to sleep like that, right over the stairs...You can easily fall down. Also it looks like its going to be hard to get in/out of the bed.
>any kind of templating system at all with them? //

I'm going to go ahead and guess search-and-replace is their version of templating?
Because he "appeared to be clenching his buttocks".

There should be criminal charges for everyone involved in doing this to this man, including the doctors at the second hospital they went to. The doctors at the first hospital rightly refused to participate, demonstrating that the doctors at the second could have as well. Instead they repeatedly raped him after an x-ray showed that there were no drugs.
Right, companies like Rogue Amoeba, Flying Meat (Acorn), and Running with Crayons (Alfred) don't know how to write software for a Mac. Sure!

I'd buy the argument five or ten years ago. But times have changed.
Why does this happen even when the instance isn't using all of its CPU?
Internet.org Acquired By Zuckberberg
This is exactly the intent of the blog post.

"Hey, we're better than you. We've been here for awhile, we've already solved the mistakes you'll be making. Oh btw, we won Startup World. Why don't you just acquire us already?"
... and immediately down the stairs.

It's not like people don't fall out of bed from time to time. I'd rather not have to include "down the stairs" in the story.
I've never used Amazon EC2, but with this kind of application, I might have to give it a try. Buying a $300 graphics card just to try some GPU programming is ridiculous.
If it's a squeeze bunt and the batter is out at first base, presumably the runner scored. That is exactly the purpose of a suicide squeeze. Safety squeezes are extremely rare, and "a squeeze bunt" nearly always refers to a suicide squeeze.
Show HN: Run viral promos, sweepstakes & competitions
Find a good idea for an app in a jiffy
Aren't this really really old news?
Job interviewing is definitely a skill that improves with practice. Next time you'll do better :)
While commonly used, chat is just one feature there. There are many popular and closed chat services like Whatsapp for example which aren't connected to social networks. So I don't see why you focus on this problem in the context of Facebook. The problem is a problem in itself. I.e. "how to break the walls of walled garden instant messaging networks".
Honest question, but can you point me to some of the critics that are saying the N5 is smoother and silkier than the iPhone 5S? I haven't seen any yet.
When I was in highschool we had this debugging macro:

#define dbg(...) fprintf(stderr, __VA_ARGS__)

So the dbg function is just a shortcut to "printf to stderr".
It also was easy to disable with #ifdef.
Never seen curly brackets called flower brackets before :) That's new.
Could you outline what it is that you think makes Git better?

From my daily experience with both Mercurial and Git, i would say the exact opposite. I can't think of anything that Git does better than Mercurial. I can certainly think of things it does in a needlessly more complicated way - the handling of remote tracking branches and the use of the index are obvious ones. Git's fixation on branches over commits is a persistent deep source of pain for users around me. And you can pry revsets from my cold, dead hands.

Now, there was a time when Mercurial didn't have bookmarks. During that time, if you wanted a good lightweight branching model, Git was your only option (er, well maybe bzr or Darcs were, who knows). I was never that excited about lightweight branching; the weight of heavyweight branches does not seem substantial. Today, Mercurial has bookmarks that work pretty much like Git branches, so this advantage has evaporated.
Given that the YC partners have a ton of applications to read, and given that your second sentence ("It simple.") suggests you didn't proofread your application, it's possible they didn't continue reading it.
Wow, those providers need to lose their jobs. Performing a surgical procedure without getting consent from the patient in a non-life threatening situation? Seriously messed up.
I finally switched to xfce because it does things how I want, rather than how the Gnome or Unity people think I should have them set up. Maybe those are better for end user type people, but... that's not me.
This probably competes with the IKEA houses announced in the past few years. But the best concept for modular, mobile micro homes in my opinion is still the Nagakin Tower (https://en.wikipedia.org/wiki/Nakagin_Capsule_Tower).

Imagine taking your home cube with you to another big city and having it attached to a fixed base (your choice of floor and orientation as available), or even just relocating to be in walking distance from your new office.
Building a competitor as well (http://pivotal.ws)
I spent the last 3.5 years running a company that provides professional education to government contractors and was a government contractor myself. Before that, I worked in government for a couple years. Shoot me an email - happy to discuss.
Because the real audience is not some guy on HN, but the small number of people at Google who could acquire his company and might meet with him while he's at Google tomorrow?
I don't think the math implies that it's a single person 5 days a week for a year, in a staff augmentation fashion. It could be e.g. 2 people for a month, then nobody, then 3 people, all at different rates.

Why would you do this? Examples:

* a team to write the Android port(s)

* a Web design team

* QA

* HR

* Legal ($$$$$)

* etc.

All of these will be at different rates. You might outsource parts of the technology to hit your other growth goals.
... For certain definitions of the word "house" this is a 30k house.
So, what you need testing for? it's pretty straight forward.
No of course, that's what they do - but that doesn't mean it's easy. I was merely commenting (and not on your specific application, which seemed fine to me) on the general task of reading about ideas from a vast array of industries & niches. You have to do this context switch constantly and in a short amount of time make a yay or nay decision. It's tough. And again, it's not exactly reading for pleasure, like a novel. It's reading dense copy from developers. It's tough.
I can't count how many times I've had to hard reboot this way. And only 3gb of photos and movies (no music?), come on.

And whats worse is that if your streaming it, your gonna be eating your battery even more.
Or someone committed career seppuku.
I think you've hit the nail on the head with all of these. Regarding 2) there were several other grammatical errors, the second sentence for example. "It simple".
Thanks for the great explanations. It actually makes some sense that Koreans are getting hacked all the time, since the binary rootkits they're required to install have probably not seen the scrutiny that more open solutions have. Secure systems used in the rest of the world get hacked because of weak entropy or through timing attacks: fairly esoteric stuff. It wouldn't surprise me if these ActiveX blobs have basic algorithmic errors. Do they crash quite a bit?
Because they can be used on CDs, used directly by VMs, and also imaged to USB/flash drives with tools like UNetBootin. It's just a convenient disk image format.

http://unetbootin.sourceforge.net/#features