skysight-inc/HackerNews huggingface dataset:
My understanding is that there are some privacy regulations which still apply to sharing with the government and this is why CISPA was being proposed- http://en.wikipedia.org/wiki/Cyber_Intelligence_Sharing_and_....

I do not know if the NSA is exempt, or certain data is exempt. But I share your concerns and see this as another reason why CISPA must be defeated.
When I got my Nexus 4, I let my brother in law play with it while I went into the other room. When I came back, he was gone to the bathroom and my 18 month old niece was playing with my brand new $350 all-glass smartphone on my mom's hardwood floors.

It does happen.
I read 'minimalist framework' as being a framework that is minimalist, as opposed to a framework for people that are building minimalist software.
I agree. Having just finished a project with Flask, I ended up using no less than 8 million dependencies that I'd never heard of. "BYO everything" frameworks would be more appropriate, but even then, Flask brings with it an entire basement of sub-frameworks that I would argue make it so that you might as well just use a full-fledged framework like Django.
Quite. But if you make a contract with me (in the US) you wouldn't be able to blow it off under cover of Australian law, is what I mean. So if Elsevier's contract terms are legal in their (Elsevier's) domicile, people who enter into contracts with them need to keep that in mind - which is why most contracts have a 'choice of law' provision saying which laws will govern the enforcability of the contract in the event of a subsequent dispute.
> Not even a little bit. What, you think a hiring manager is going to try to track down your college transcript?

He said "most jobs out there" not "developer jobs." Pretty much every job outside software, as well as every grad school application, will ask you to submit your college transcript.
Better than TOR for stuff like that is to rent a server and create an ssh tunnel through it. This is not anonymous and will not hide you from law enforcement, for example DPR did this and his information was subpoenaed by the FBI. But whoever you are renting a server from cares a lot less about you and what you do on a network than your college network. Your requests over the ssh tunnel will be encrypted and also much faster than tor. You can set up squid as a proxy and change your Firefox or OS proxy settings to connect via your proxy.

This is also a good way to get around GEO IP restrictions. Like if you rent a server in the UK and do this you can watch the BBC.
Seriously, enough with the XKCD 538 fallacy. That is not how interrogations work. It just isn't. Violent torture is not how you get people to provide information.

Actual interrogations are far more cunning and complex, involving psychological tricks and play against weaknesses in the human mind. Perpetuating this "they'll hit you until you confess" bullshit stops people from learning actually useful information about how to resist interrogations.
Just to be clear, coming up with this pretty obvious hoax to get out of a final exam isn't a good sign of brilliance. Let's not fool ourselves about the population distribution of intelligence at any institution, and the fact that that distribution must have tails.
Why yes, that word does mean what I think it does.

If we're talking about what inflation is, well, prices going up is not inflation to begin with. The expansion of the money supply is inflation. Prices going up is merely a potential symptom of inflation.

Inflation does in fact harm the poor dramatically more so than anybody else. They're the most susceptible to rising prices, their incomes rise the slowest, and they have no capital or assets to leverage to keep pace with inflation through hedges (such as stocks, gold, commodities in general, housing, etc).

Incomes do not inherently go up hand in hand with prices. In fact it's the exact opposite, the greater the inflation the less able incomes are to keep pace. America is dramatic proof of that over the last 40 years, as the cost of major goods such as housing, education and healthcare have vastly outstripped gains in income.

Your theory that wages inherently keep up with inflation assumes that there are no spin-off consequences to inflation, that's blatantly not correct. It generates a downward spiral, cascade effect; just ask Argentina how that works, their economy has been getting hammered by it the last few years. As you expand the money supply, devalue your currency and generate inflation, all sorts of costs from external sources begin to climb, such as the cost of imports (raw goods like plastic or steel, completed goods like toasters, commodities etc). This one effect alone guarantees domestic wages can never keep pace with inflation.

Inflation also destroys savings, and the poor always have the smallest base of savings to begin with, and are least able to shift their savings into higher yielding investments.

There are numerous recent examples from around the world where inflation outstrips wage gains.

Brazil is an obvious recent example of it, the cost of goods in Brazil is outrageous, and was one of the reasons for their recent riots. The high inflation there, requiring incredible interest rates to fight, has far outstripped their wage gains. Venezuela and Argentina are two other recent examples of it. And there are extreme examples of it, in which the people of a country have been wiped out by inflated prices while their incomes did not keep up (Zimbabwe is an easy example of that).
That's why you stick them on a desk, or guarding a prisoner, or doing something unrelated to and away from the public while under investigation. They could still be doing something useful rather than getting a vacation whenever there's a complaint against them. The military doesn't give you time off for this stuff, they just change your job until the shit's figured out and the same should apply to civilians who work on my tax dime.
Hint: after high school, nobody cares about your grades anymore.

This is actually not true, especially when applying to Google and a lot of tech, Wall Street, and other blue chip companies - or of course to grad school, law school, or med school.

Which is no reason to call in a bomb threat.
Do you mind sharing your current revenue run rate (roughly)?
> Why would a site want to target only Chrome? If your site has a URL, I think it's of the site's best interest to target many modern browsers and provide a graceful upgrade/download experience.

I agree that sites should do it, but developers have not done this in the past. If Chrome has a commanding market share, history says that developers will not bother to target other browsers.
No, they're bad because the majority of their product (that is, knowledge) isn't developed by them, or paid for by them. Instead, it's funded by universities and funding agencies. It's a parasitic relationship with very little benefit to the host.
copy and paste commands into terminal without understanding what they do, receive blank hard drive.
This troll and others like it are as old as sin.

Reminds me of the first forkbomb post I ever saw.
yea, in hindsight it does seem weird. Perhaps they were relying on the attractiveness of the job circumstances overall (great location near the university and a bunch of high schools, reasonably flexible shift times, not really difficult)? Or perhaps that unemployment rate doesn't reflect the actual number of teenagers willing to work but not really looking.

I quit, personally, when my schedule got screwed around at the last minute. They seemed kind of shocked.
It's "hostile government" when analyzing the failure of Tor, because the tool should have kept this kid off of the suspect list.

I'm guessing you don't even believe this to be a laudable goal, and that's precisely why we need anonymity tools.
I used mailcatcher. It's pretty awesome for this stuff, but glad to see it in core.
By most you must be excluding the print media, pharma, and financial industries, all sectors I've worked in (as something other than a developer), no transcript.
Foundation 35 // Brian Armstrong (Coinbase)
Nice. Down votes without explanation. Love it.
Not using a framework requires creating your own and just not calling it a framework. One way or another you're using a framework, it's just a matter of whether your framework is grid-only, like Skeleton, Suzy, etc, or includes a ton of additional bells and whistles like Bootstrap and Foundation.
Bananas are basically all clones (Seedless and all that)

This makes the risk very high for such things, it is surprising that we have gone this long with out issues coming up sooner and more frequently.
Ever heard of the slashdot effect?
The Case Against Multi-vitamins Grows Stronger
Why weren't the SQL Server tests included? Technical limitation, something else?
What Happens When You Ask Strangers To See The Last Photo On Their Phone
> no HTML helpers, [...] no default templating language

Flask has HTML helpers and uses Jinja2 as its template language, though...
To a true believer, nothing is ever bad news.
>Does this mean Harvard could in theory have this transmission recorded as it goes in to the TOR network?

They would not be able to decrypt the traffic, but they would be able to tell that it is traffic going through the TOR network.

>Would something as simple as going across the street to Panera Bread have thwarted this kind of investigation?

Probably, though they may have figured him out through different means.
Let me take a stab at this, and I hope you dont take this offensively. I am guessing you are somewhere between 18-24 years old, right?

These are the kind of lazy ideas that get people in trouble. I emphasize lazy because to genuinely believe this is like playing a game of chess and only thinking one move ahead. Stop for a moment and seriously consider what kind of effects a theoretical wealth cap at $5-10 million would have. What are those ripple effects, the unintended consequences of this? Tell you what, and I mean this seriously and without derision, why dont you tell me what you think the big picture effects would be. Would it be all sunshine and roses? It's a worthwhile thought exercise.
They are still in use for modern mechanical watches with a date display - to advance the date wheel one day per two revolutions of the hour hand.
Well I'm glad I phrased it as a question then :)
I met the Geneva drive when I was trained in servicing IBM 514 and 519 reproducing punches[1], in the mid-70s when these machines were on the way out. A 514 could reproduce a deck of punch cards[2] at 100 cards/minute. A punched card was fed from the "read hopper" and a blank one from the "punch hopper" and moved through the machine under steel feed rollers that were given intermittent rotation by a Geneva gear.

Driven by the Geneva, the feed rollers would move the cards the width of one of their 12 rows, then stop. On the read side, that row was under a gang of 80 little bronze wire brushes. On the punch side, the row was over a gang of 80 sharp little steel punches. When the cards stopped a pulse of current went through the brushes. If there was a hole in the card on the read side, current flowed on to one of 80 little solenoids. The solenoid would yank a bell-crank that pushed a punch through the blank card.

The punches withdrew, the Geneva swung its next lobe, and the cards advanced to the next row. Twelve rows per card, 100 c/m. It was quite noisy despite heavy sound insulation on the insides of the covers, a distinct brrruup, brrruup, brrruup overlaid with a general mechanical roar.

[1]http://www.columbia.edu/cu/computinghistory/reproducer.html
[2]http://en.wikipedia.org/wiki/File:Blue-punch-card-front-hori...
Does the placebo effect make it any less useful?
This describes how deterrence is justifiable, not how it is fair.
You keep saying the OP 'clearly exceeded that threshold, by leaps and bounds', but recall, the story is about how it worked! So you're conclusions are directly disagreeing with the OPs actual experience.

Can you share a story of your (non-dating) experience which contradicts the OP? So far, you've just been spouting disagreements, and maybe you're right, but you haven't proved your theory with any real-world experience, where the OP has. So if you want to continue to disagree with the OP and many others on this thread, please provide your proof so we can then question the OP taking your experience into account.
Study: California drivers are worse than New York drivers. 
I know that this study is not "startup" specific but it's an interesting question. Which state do you think would have the better drivers when it comes to the startup community?

According to this study, CA is #19 and NY is #21.

Uber or Lyft drivers have any thoughts?
They ask you for your college transcript to verify that you have the degree not to check all your grades.
Great question.

I think this is a data issue, not a weather issue.

The data they are using over oceans comes from microwave scatterometers, which use radar to measure disturbances of the ocean surface caused by near-surface winds. Basically, the power of the radar return is affected by the interaction of the radar waves with the irregularities in the water surface (https://earth.esa.int/applications/data_util/SARDOCS/spacebo...). To get a wind speed and direction from the radar power, you have to hit the surface from several different angles and perform an inversion.

There are several ocean winds space missions that do this continuously from ~90-minute Earth orbits. For reference, one is QuikSCAT -- http://science.nasa.gov/missions/quikscat/

There is no analogous sensor that works over land. Hence, the data over land is not nearly as uniform, dense, and regularly observed.

All that said, this particular visualization seems to have a calibration issue, because the land winds seem to be off in magnitude. I'm not enough of an expert to know if this is a problem with their data merging, sensor selection, stratification (e.g., winds at land surface may be lower than at sea surface, but up 50m they may be comparable), or something else.

You can get other surprising things from remote sensing over oceans, including salinity, temperature, and incredibly precise elevation.
Latest startups accelerated by Y Combinator
Out of programmer curiosity, is there a reason you have to stop rendering the globe while its moving?
Hm... well maybe my definition of 'minimal' is a bit more minimal than the norm then.
Life Size Lego Car Powered by Air
As the very first bullet point on the tor project homepage says, "Tor prevents people from learning your location or browsing habits." Why bother going to Starbucks when using tor means you're safe?
Smugness aside, I am actually concerned about this implementation and Telegram's response:

> The rest looks like matters of taste as opposed to objective reasoning. Can you name an actual attack?

The response to that is, "I shouldn't have to!" Anything that replaces a proven secure component with something that we haven't (yet) found an attack on is grounds for suspicion at the very least.

SHA-1 isn't a MAC. It's not that hard to make it so (HMAC), but Telegram hasn't.

> Again, we do not use MAC-then-encrypt. Our scheme is closer to MAC-and-encrypt with some essential modifications.

Out of the three options: MAC then encrypt, encrypt then MAC, and MAC and encrypt, only encrypt then MAC is secure (http://cseweb.ucsd.edu/~mihir/papers/oem.pdf) I don't care if they've made "essential modifications", they're replacing a component that is provably secure, with one that may or may not be secure.
I can assure you Seth Roberts has heard of the placebo effect.

http://blog.sethroberts.net/?s=placebo
Scorched may also be nice to add.

https://github.com/Wardrop/Scorched
Just time. We were already two weeks late on Round 8 due to a host of other issues. We'd like to do one round per month if we can get our routine ironed out.

We'll make it a priority to get them run in Round 9.
The GuerrillaMail to Tor link is explained by the last line in GuerrillaMail's TOS (https://www.guerrillamail.com/tos), which says that they inject your IP address into the email's headers. So there was no subpoena required. The use of GM was a no-op in this case.
If that's all they really want then they ought to ask for an academic certification instead.
It already is. It probably always will be. So we can ignore reality and live in some fantasy-land where everything is perfect and none suffer and everybody walks on gilded streets and has a pony... or we can accept reality for what it is. But if attempting to build this polly-anna'ish dream world involves violating the fundamental essence of what justice and equality under the law mean, then I - for one - want no part of it.
> more time with my kids then almost all other dads

:|
LESS, SASS and rework/stylus are all supersets of CSS, so they can too "post-process" anyone else's CSS.
Who owns the patent? This is very similar to the service Buffer and Boomerang provide, isn't it?
I feel bad for this kid. It was obviously a bad decision.

We all make bad decisions. Some haunt us longer than others. I know this was very wrong, but I wish the kid got a do over.
Insane Bike Trick Seems To Murder The Laws of Physics
> "Paid vacation days" is easy to demonize, but 1) we don't want to take away people's livelihood before making sure there is a problem

Sure, but this is what happens in any other job, you don't get paid when under investifation.
Turing Complete Return Oriented Programming (ROP) Compiler
Seems to make a lot of big claims ("this might explain Dutch height!") based on an overall evidence of 'it worked for me and two other people I found on the internet, and for one friend, but not for the other' being called 'lightning doesn't strike twice' (which of course is a ridiculous claim itself).
String equivalents in Erlang are binaries quite often. There are also iolists, those are pretty efficient.

This blog post describes this in a lot more depth:

http://jlouisramblings.blogspot.com/2009/01/common-erlang-mi...
Plenty of sub-$100 tablets in walmart. I didn't even know about that segment, and it is already super crowded.
So you don't think criminals should have to reimburse their victims, or make some appropriate restitution? Just lock 'em in cells and make them suffer until they've paid their dues, or maybe put them on a chain gang? Gotcha.

I don't want anything to do with it. Locking people in cells, forced labor, etc. are for the (few) people who are simply so dangerous that they can't roam the world without representing an imminent threat to others.
I really like the opening statement

"here’s what we’ve been fortunate to achieve:"

Even being really good you gotta have some luck too.

Being able to see that I think makes people being not assholes when talking about their achievements.
To be fair, sending from a public WiFi spot is relatively benign in general. From released data, it's only because he was on campus that they caught him. If he had done it from a random McDonalds in New Jersey, he'd have been fine.

And, for all we know, if he simply didn't say anything, he'd have been OK, too. The only evidence in the affidavit besides his confession is "he used Tor".
The comic is not literally suggesting that interrogations imply violence any more than it is literally suggesting that any violence must be done specifically with a wrench.

Pedantism and comics do not go well together. The format is not meant for conveying exactingly precise information. Interpretation is required.
I think in many cases a good minimalist framework will get a core set of functions out of the way (in web for example: routing, autoloading, dependency injection, etc.). Grabbing something small that provides a proven but efficient backbone can let you focus on delivering core value, but then can easily be switched out later as the solution grows.
TextSecure seems to be pretty popular.
> If they bend the rules, they are severely punished.

Huh. Ever heard of the "Blue Shield"?

Check out the "bad cop no donut" subreddit sometimes. There's some petty stuff posted on there, but also quite enough to make the hair on the neck of any thinking, feeling person stand up.
Yes, I'm aware, but what was the problem with storing configurations under `Rails.application.config.thing` as ENV['vars']?

It just seems like bloated featured.
Kill Lists and Network Analysis
They might exist but I dont have acess to them.
We use Flask for most things at my work; while it can have many dependencies, you usually don't need that many. Of course, you'll bring some in for certain tasks that your app needs to do, but especially for little doodads that just need to present a RESTful interface to some service, this usually isn't that many (or if there are many, they'll mostly have to do with the service, and not the app). Of course I don't know the details of your project. Either way, the advantage of a minimal framework like that is having the ability to easily install just what you need, so obviously that advantage is going to be less and less the more it is that you require it to do.
There's also the possibility of critical failure from transport. Old hardware can wind up as a sort of brittle "dead man walking", where even the slightest unpleasantries in a shipping container kill it for good.
ifconfig was deprecated on linux long ago. While it is compatible with other unixes, it doesn't really map onto the capabilities of the modern linux stack well.

`ip` really is a better tool, and you're doing yourself a disservice if you're not using it, especially if you have anything more than the basic single IP/default gateway network.
Not necessarily there applications like Magento that still only run on PHP5.3 so this numbers are actually relevant.

And we can agree FastCGI support is nice indeed.
Yeah, where's the double-blind study?
Harvard huh? You'd think he'd be smarter than this.
Facebook Is Collapsing Under Its Own Weight
The importance of A/A Testing (no, not a typo)
Have you heard of Uber? Airbnb?
Like an after school chess club? What if the tagger chooses not to go?
Would it be possible to get the actual test files? I would love to do my own benchmarks against my current stack
Oh, for god's sake.

First off, don't put words in the anigbrowl's mouth.

Second off, it's not government hostility to investigate a bomb hoax that costs a lot of people money and inconveniences a ton of people. This guy wasn't engaging in civil disobedience.

Third off, the dude could have just walked to any of the dozen coffee shops in harvard square with free wifi and done this all in the clear, and been fine. Tor cannot and will never prevent traffic analysis if you're dumb enough to plug into the organization you're hoaxing's network. Tor created reasonable doubt, that's all it could do in this case, as a matter of physical limitations.
They have to pay tax once the money is repatriated, so no, you're wrong that they're paying zero tax or less tax than the actual rate.
The Focused Leader
Beautiful!

If you turn the globe upside down, the controls for rotating it are backwards.

Some way to pan/zoom without pausing the visualization would be nice, but probably very difficult without moving to webgl-based rendering.
Very cool! Do you have any solid numbers that speak to performance gains of the go version vs. the rails version of your app?
> Conceptually, they're the same thing, but since Zeus is written in Go, it's totally different code.

Thank you, this is what I wanted to hear. :)

> I personally use environment variables to handle this case, but basically, every single approach has pros and cons, not to mention that there's legacy codebases... small steps.

I just think it's a bloated feature when `Rails.application.config` already exists.
Identifying from a cellphone connection would require the FBI to get a log of all Tor connections from all cellphone users in the area. And it still doesn't prove anything. Compared to just asking the campus for their records, it's a totally different league. It's not even clear if cell ISPs track every TCP connection.
Kurt DelBene, former Microsoft executive, will take over HealthCare.gov