skysight-inc/HackerNews huggingface dataset:
a pointer to anything, no matter what type it is, is ALWAYS the same size as a variable or embeded in a struct, (8 bytes in 64 arch and 4 bytes in 32 bit) cause it only needs to keep the address in memory to the thing its pointing to..
thats where the 4GB of memory limit for 32 bit architecture came from..cause you could not point to any memory address that would not fit into a 4 byte int

i think what you are saying is the thing the pointer is pointing to, dont have a known size if its a pointer of void.. since its the only untyped type of pointer..
and the programmer would need to check the size of the thing being pointed in memory at runtime.. (so sizeof wouldnt do it)

Also, if you incremment/decrement a pointer , no matter what type it is, you will have a "cursor to the memory" and can even overflow and see memory beyond what you have allocated.. thats where the nasty bugs come from :)

the type in the pointer will only tell (when you increment) by how much this incrementation will go for each iteration..

So if its a integer pointer you will advance 4 by 4 (in 32 bit)
and if its a void* 8 by 8.. .. a small int 2 by 2.. a char .. 1 by 1.. etc..
Missing from these job posts is "WHat's in it for me": There's largely no mention of compensation in any form on most of thes e job postings. Most don't even mention the office culture or expectations beyond the fact that the company's virtual and they want good engineers.
You don't need an MBA to solve those problems. It's a problem with prioritization, not lack of ability.
But he doesn't spell out the ways in which LiveNinja is better, like others here, I was waiting for the comparison? He's deliberately held off on specifics to use it as a selling point for acquisition.
"Buy us and I'll tell you what we learned"
Very nice! Not sure if you're familiar but there is a solid competitor in this space: http://www.getapp.com/
I think the real problem here is that the author is assuming the Google Bot somehow gets special treatment. Why are you concerned that the bot is sending SQL injection attacks? The same thing could be done by a regular user. Are you defending against regular users? If so, then you're defending against Google bots too. Now if the problem is that your firewall is blocking Google bots, well then you're going to have to let them through if you want Google traffic. It's unfeasible for Google to fix this on their end. Your application should be secure from SQL injection without the need for a firewall anyway, so it shouldn't be a technical problem having to make an exception for Google bots.
That's the same Catch-22 situation I'm in. I'm trying to find work and eveyrwhere I look it's "We want to look at your Github profile and open source contribution!" Fuck. I don't have any of those because I mostly code at work and if I do stuff at home it's very unprofessional and only for personal use. I don't have time to contribute to open source and frankly I don't even want to but that doesn't make me less of a good programmer. I love my job but when I'm at home, I have other hobbies and interests.
> "I wonder if there's some kind of hack"

There is: international tax lawyers. There are rarely real prohibitions on employing people who live outside of your own borders. The main disincentive for companies to hire outside of their own country is potentially severely increasing their tax complexity.
this is huge beyond graphics, new levels of performance can be achieved with GPGPU for data intensive startups. i would love to see someone build a company around this.
LiveNinja is a terrible name.
The author's response is here: http://www.businessweek.com/articles/2013-11-05/responding-t...
I saw a job posting about "you can show us your resume if you want, but we really want to see your GitHub." The company doesn't have its own Github page. Should I tell them mine is just as populated as theirs?

(I do have Githubs, but they are because I like coding for fun, and I don't like coding for fun to find jobs.)
I have got to digest all these points. If nothing I have got amazing points for marketing Truffle as well as improving our vision. For now all of our focus is on getting traction. Thank you for your feedback :)
Ember is a "no" for me beacuse of explicit getters and setters.

Angular's Object.observe like digest mechanism is superior.
Thanks, I wasn't, indeed. Just curious, and the answers are interesting. Pity that most people here see trolling where there's just questions.
that doesn't mean there's no value in options like this

Actually, your proposal has negative value, because the danger is you might actually go on to implement the broken design and trick people (along with yourself) into believing it's trustworthy.

a roll-your-own version would shift that trust burden from a US company to you or whoever sets up your server.

You've shifted the burden, but away from commercial pressure is almost always a bad idea. Now instead of having a team of people thinking about security issues 24/7 and paying strict attention to their server configurations and minimizing their attack surface, you have only yourself. You may be capable, but most people aren't. And even the very best of us make mistakes.

Once your server is breached, the security offered by this design drops to nil. Compromising the server compromises the security. That's a fatal flaw. It's no accident that all modern cryptosystems are based around the idea of "Here's your secret key. Don't let it get stolen." It's the strongest guarantee we have. It's incredible that it's even possible to get such a strong security guarantee: "As long as you don't let your private key get stolen or get MITM'd, it's impossible for anyone to eavesdrop on you." That's incredible! Governments for thousands of years have been wishing for such a thing, and now our generation finally has it, because we live in the future... and you're going out of your way to give it up.

Your design is literally "transmit your secret key to the server while hoping it's still under control of friendlies." This kind of thinking is dangerous precisely because it tries to frame blind faith / hope / "probably won't happen to me" as a security pillar. But it's not a pillar. You can't trust hope. Your trust is the very first thing any adversary will subvert. In fact, if the cryptosystem is designed properly, adversaries won't have any realistic route of attack short of physically compromising the boxes you're receiving secret messages on. By fooling yourself into believing in the myth of "better than nothing", you've opened up an attack vector for the adversary. If you were to use a proper cryptosystem, then the adversary wouldn't be able to attack you. And since you're opening doors for the adversary, it would not be unfair to characterize that as "you're doing the adversary's job for them."

I apologize for the negativity. Usually when people pick apart an idea, they're expected to present a better alternative. In this case I don't know what the better solution is, because it hasn't been invented yet. But you're talking about a cryptosystem. Cryptosystems fail silently, because adversaries break them without informing their victim. So all it takes is one misstep to completely lose: the adversary will be able to intercept everything, and you'll be none the wiser. By transmuting the trust guarantee from "don't lose your secret key" to "trust this central server," it exposes dozens of attack vectors. Every vector that leads to a server breach is now a vector that can subvert you.
India Launches First Mission to Mars
a) G.grandmother is 2 years older than grandfather (young mothers in my family)

b) 15-20 years of being completely and utterly crippled, unable to walk (over a few minutes at a time), eat salt at all, lay down, stand, etc... not sure if this is much of a life.

FYI: if you have clogged arteries, your heart is unable to move the water in your blood, thus if you lay down all that water gathers near the lungs and you can't inhale.
Yes, YC rejection has made us even stronger to improve our product further.
uTorrent was one of the best (if not the best) engineered Windows programs. It was small, fast and really really well thought out. Just beautiful. I would be so damn proud if it were my creation :)

Then BitTorrent came along and bought it. On one hand I'm really happy for the dev, but on the other hand it was the start of a steady decline of both the quality and the ethics. BT does some really interesting stuff, but I really wish they wouldn't pee on their own parade with all those uT ads and bundling.
Well, the change affected only configuration files, I would be scared if a change like this required a source change.
Introducing an API Commons
Is there much VoIP federation going on? My impression is that VoIP providers still interop through the PSTN.
There's a lot to be learned from the non-open source players in this space. Specifically, kdb+ has always provided everything I needed. It's built for HFT, and does millions of data points per second with analytics, with history going back years.

It is, however, rather expensive.
I did this math at Eye-Fi, a competitor of sorts to Everpix. What I learned, is the answer to whether to build or buy is the classic: "it depends". The driving factor? Data retention policy. The one move Amazon made during my analysis that had a huge shift in the calculus was to introduce Glacier.

My takeaway, the economics of a lifetime storage offering are very difficult to achieve. Glacier changes the rules by altering the SLA for data access to make the money work out.
I have an MBA and MS in CS from Arizona (who at the time was ranked top 10 in entrepreneurship). I did not have a focus in the MBA so I could do Computer Science but the entrepreneurship track sounded like a less serious/competitive YC with a few classes thrown in the mix. You grouped up with others and worked on an idea for a year. The program recruited successful retires to both teach the classes and advise you on your idea. It actually sounded fairly practical, and the caliber of advisors they recruited was pretty good (most of them had run several businesses and made a few million dollars over their lifetime). It was definitely less tech-oriented though.
Red Hat wants to be OpenStack's big dog
Employers also want US law on their side in case the employee does something like try to steal from the company.

EDIT: Employees also don't want their home country's protections in case that company in Uzbekistan decides not to pay them.
Because that's a pretty laughable idea. There's no reason for browsers to choose Dart over CoffeeScript or TypeScript, and Dart is so far behind CoffeeScript it's not even funny.

Google wants to do it, sure, but that doesn't mean they'll succeed, even if they try something as stubborn as running Dart alongside Javascript in Chrome.

There simply isn't a path to ubiquity for Dart, and if there were it's not the only language on it.
As if the javascript version was so good that it doesn't require anymore work.
what about "' OR 1=1;--"

are you going to ban the word OR?
Todoist for Gmail: A more powerful todo app for Gmail
If you're sharing a CPU with a neighbour and you're using 3% and the neighbour is at 100%, the hypervisor needs to somehow squash that 103% into the 100% it has available - which means you lose a little bit of the scheduled time slots that otherwise would have been yours. If your neighbour drops down to 50%, there's now enough CPU time to handle both of you, so there's no 'steal'.
Even in the bay area, to most normal people, it comes off as silly. It only seems 'reasonable' among startup founders younger than 30.
Report on Government Information Requests [pdf]
10 Places to Source Investor Meetings
I'll second what Chubot said that I'm not liking the SQL much.

The interface I'd like would be something close to numpy (or matlab/r, if those are more familiar). Let me do vectorized operations and write functions in code. Let me load a few different timeseries into a dataframe. Most likely the easiest thing to do would just be to either embed numpy into your engine, or create simple wrappers to load data to it.
For the record, you don't need to enable the transplant and graphlog extensions anymore. Those are now part of core mercurial:

- The transplant extension has become the "graft" core command (do "hg help graft" for more details)
- The graphlog extension functionality has been rolled into the core log command. You must simply use the --graph (or the equivalent -G) flag.
This would be great. I actually was searching for something like this only a week or so ago.

In my current role I have been doing a lot with Elastic Beanstalk. Many cool features are non obvious and/or not clearly documented. Especially in the case of extending its functionality with various hacks and recipes.

By now I have a fair accumulation of notes on this stuff, would happily pour this into a wiki.
This board is a fine example of why you have to charge for job board postings. Even Craigslist charges $25 to keep out junk.
Why Manufacturing Matters
You just outed your source.

Edit: still too many details.
This is completely false. Firefox extensions have access to everything the browser does and can contain arbitrary native code.

There's a reason Mozilla's addon repository has a review process.

What makes addons better than ActiveX controls is that they're understood to extend the browser for the user's benefit, not merely make a crappy website work. Fewer people would buy that a bank website needs to install a Firefox extension before you can log in.
I get the impression he would like to sell this information to Google, in an acquisition.
This!! Minimal design should be feature packed, not feature trimmed.
Sad. It looks like their technology did a great job at solving a very real problem.

If any of the founders are here, can I ask a question: why did you chose to implement this as a cloud based service, when a little basic Math would suggest that it was a better match as a client-based tool with upgrades?

Take me for example. My internet is 20mb down, 1.5mb up. That's pretty good for Western countries. I currently have around 300gb of photos taken in the last 10 years. That'll take months to upload. But if you made it client based you could do conversion & classification locally. Then uploaded the best into a pinterest style gallery for your website (with social features).

Then offer backups, custom galleries etc as professional features ($5/month for low-res jpeg backups, $20/month for 500gb RAWs). Maybe you could have found a niche with semi-pro photographers who're fed up with flickr? Or families who want to share photos with relatives without the risk of Facebook/Google using them in adverts?
It's more of a swiss army knife. It's also still pretty new - the aws documentation misses out on some things for it (like autoscaling) and it's still in development to some degree, but it means you have to remember one command with one auth, instead of a handful (s3cmd, boto, others I can't recall)
What do the other browser vendors gain by supporting Dart?
This is a more general comment about job postings in general - Why are salary ranges so seldom listed. If you look at a lot of leading job boards even the company name isn't listed (recruiters).

Isn't salary a basic piece of information that every job listing should have?
This is a definition from the London Metropolitan Police.
I'd rather see a definition from a UK statute or a UK court decision.
The police don't make the law.
Hey Keith,

Hope this isn't too harsh, but that landing page needs work. Is there anyway you could turn what's in that video into a compelling landing page? I'm not sure where you're at with testing or usability, but I can't imagine that landing page generating many signups.
Amazon regularly features SmugMug at their conferences and in case studies. I haven't looked at the specifics recently but they basically went all-AWS. (SmugMug is also a bit different from your typical consumer photo site but they are a photo storage and sharing company.)
There have been a few, like Suitable. Definitely rare, though.
The "Ugh", that's what the GP is talking about. A number of the posts come across as spiteful, which is not objective and as such, has no place here. In fact objective criticism is something that developers aren't good at at all, but such an important engineering skill. Speak to designers and learn how to do it. You'll be a better engineer as a result.

Edited for clarity.
Mercurial comes with a built-in "hg serve" command that you can use to serve repositories through http. It creates a web server that you can access through any web browser. Unless you need authentication or you have a lot of users you don't need to setup any external web server.

Otherwise setting up Apache + mercurial on windows is not very hard. If you need help please drop me a line.
You seem to be upset.

http://www.gifti.me/i/ABT8Ex.gif
I typically don't go on about this, and I suspect it's dismissed by most, but ...

It's amazing (and amazingly satisfying) how much of this debate one can simply ignore when one uses ssh to log into an account and run pine (or elm).

A lot of this just becomes irrelevant.

Did you know that not one intercompany email at rsync.net has ever traversed any network ? It's just a local copy operation ... and no browser has ever touched them.
Another approach to this is to stop looking for a job with a salary and strike out on your own as a contractor/company. If you have contacts in the industry already, this isn't as hard as it might seem, and makes it far easier to truly work remotely without being tied to one specific office.

Having said that from experience (I did Paris-London for a while) I think you'd find it hard to telecommute or work remotely between countries for a long period - the time differences, travel time for meetings etc and the lack of physical presence in the city make it more difficult to keep in touch. It is much easier to work for and get work from people in the same physical location. I was surprised just how important physical presence is in order to maintain the contacts which keep work coming in, and reassure clients that you will be available.
A lot of your assets are not retina compatible. Specifically your logo image: https://d2avfbmbvwlo8q.cloudfront.net/assets/logo-fd9cab1e82...
I replaced the glass on an iPod without purchasing a new screen.
web hosted MUA < curses client over SSH [1]

[1] like pine
What's so difficult about New York? What job level are you searching for?
Do you prefer to not use headphones? Because it's a problem I pretty much never think about because I always use headphones.
User Experience Belongs to Everybody
You might want to have a look at who 'they' thought the terrorists were before 9/11:

http://web.archive.org/web/20010611142635/http://www.fbi.gov...

Note how all the terrorist incidents of 1999 were by animal rights save the world types. Al-Qaeda gets a mention but it seems that the feds were annoyed by the 1999 'Seattle Riots' that went with the ruling elite meeting that went on there for some three-letter-acronymed body (IMF, WTO, who cares).

The Terrorism Act 2000 (UK) was introduced into the UK when terrorism wasn't widely regarded as a problem. However activities by the likes of Reclaim The Streets were a problem, hence the need for legislation that was so broad that domestic dissent could be criminalised as 'terrorism'. With the Miranda incident they had all the legislation they needed.
I tried debian 7.2 default gnome.
It feels like bloody Windows Vista.
Switched back to the beloved Xfce.

Debian, you are wasting time with that.. thing.
If you don't fuse (glue) the glass to the display, and don't leave an air gap, the result is an easily-damaged screen as the glass sheet rubs the LCD. Framing the display would change nothing about this equation, and the decision to use Corning glass has nothing to do with optical fusion.

Just about the only downside to fusing the display is repairability.
http://GhostThe.me has quite a few how-tos and articles on Ghost.
That's exactly what an MBA does. Teaches you to prioritize effectively. It also gives you countless examples of businesses who don't, and the consequences they suffer. Sometimes learning these lessons in the real world can be very costly.
Xfce behaves like I want it to. Cinnamon looked nice on Mint but had a habit of hogging all the CPU for no reason at times. Unity was a mess and made me ditch Ubuntu.

Xfce behaves the way I expect my desktop to, and the way I am used to. I prefer that over shiny.
It's easier and cheaper for them to lug around a spare $8 battery.
I switched to LXDE after years of XFCE. Seems faster and does everything I need well. Worth a look.
NSA Official Positively Compares Metadata Searches To Stop And Frisk
I wonder how well this works if your phone is on an unyielding surface, like a tabletop, instead of against your thigh or in your hand.
Amusing Similarity between Microsoft and Google logos
What's the story behind both companies essentially using the same logo?

If you open these two urls, the logos/fav-icons are essentially the same:

https://developers.google.com/apps-script/

http://www.microsoft.com

Google's logo looks like Microsoft's logo stretched :)
> A fresh engineering graduate will stand to get around 40K INR per month.

According to the Googlez, this is 650 USD/mo. This does not seem like much to me, but I live in Seattle.
OP here. This is great, YC doesn't give you feedback on the rejection but the HN community does. Thank you guys so much for reading through our application and giving us some very useful feedback.
It might also be because that's the way debian-installer's written. I'd like to get it working with a copy of the CD filesystem on a drive - boot via UEFI
I'm pretty confident there's no real DRM possible when the NSA (potentially) controls the hardware.
Yep! They're awesome too! Would love to have them on the WebMenu. They're a great Saas directory for business. We feature business apps too, although we're open to a wider range of consumer apps as well.
It's a tough call sometimes. Or it feels like it. I didn't care for the site. Took too long to show what it was about so I closed the tab. Just a bit too cute for my taste.

I was going to post a comment about it, mainly as a data point, in case such things matter to the site owner. OTOH I have on iPhone and I don't have a Mac I use often enough to care about this sort of product anyway; it's in perpetual sleep mode 99% of the time. I'm not the target audience.

Does mentioning my dislike for the site make me negative? Is it to the long-term good that people feel reluctant to offer criticism?

I do get the point about "Knock stuff to show your IQ"; it's unpleasant and an easy habit to fall into. I've been with groups of geeks where it's impossible to discuss almost any piece of software because it turns into a dick measuring contest. (So to speak.)

Still, sometimes some things really are flawed and those flaws are worth pointing out.

I suppose that every criticism should be accompanied by some suggestion on how to fix or improve things, but that's not always possible.

I don't have any really good suggestions on how to temper negativity other than to encourage people to pause and consider why they are posting something, and for others to try to ignore the posts that irk them.
> Just doesn't makes sense.

Not only that, but it seems to me that it'd be a more efficient use of resources to spend the time hardening your own site rather than lobbying Google to implement something that only mitigates one potential attack vector. Even then, it just seems stupid because I'm sure there are valid GET query strings that might have select, insert, update, delete, or some permutation thereof in them.

It seems to me that it's just a punt on poor programming habits...
This is the first thing that stuck out to me also. It's a very polarizing topic and needs to be said differently.
Yes, that would handle it. I look forward to playing with the sandbox.