skysight-inc/HackerNews huggingface dataset:
And yet MS is now shipping WebGL so it seems like your point is moot. MS doesn't believe the WebGL is insecure else they wouldn't have shipped it.
My understanding is that Google has made it pretty difficult to generate bogus Youtube accounts.
I wonder how many employees that got stock options will just retire...
Just wondering, do they assign the time slot or do they let you choose?
An Interesting C++ Templated Parameter Gotcha
When recruiters contact you, GPA doesn't tend to come up at all, at least in my experience.
I've interviewed with Google a couple of times for PM type roles over the last few years. I found the interviews pleasant enough, a few brain teasers hidden as algorithm questions and some very basic experiential questions...that sort of thing.

I had the distinct feeling that the outcome of the hiring process really had nothing to do with the interview so long as I answered competently enough.

One interview I nailed, got to the second round phone interview nailed it and then didn't get a call back...ever.

Out of curiosity I send some emails off, turns out the recruiter had quit or "was no longer with the company" or whatever and they had filled the position, please feel free to apply again.

Regardless, it didn't really matter, I had a good time, it was fun, I didn't get the job, but meh. I didn't have to go through the hassle of relocating either.

The few other SV type company interviews I've been on have been similar. Not terribly hard, a few brain teasers, lots of vocalized processing of my thinking process, but even with the ones I got an offer for, came away with the distinct impression that the interview particulars just didn't matter all that much. They were simply confirming some predisposed hiring assumptions and would probably go with whoever went to the best school or whatever arbitrary metric they were using.

They were looking for X, using a hiring process that looks for Y, and it all ended before a committee that hired for Z anyways.

I think this is the most important factoid that's come out of this all is this realization that Google finally had after crunching years worth of data (which was already common knowledge among the rest of the world):

"G.P.A.'s are worthless as a criteria for hiring, and test scores are worthless. ... We found that they don’t predict anything."

Well, they do predict that people who are given near term ranking and validation of their work will work their asses off to get that ranking and validation.

A little etymology: valedictorian, from valediction, from Latin valere

validate from Latin validus (see valid) from valere

So it's no wonder that valedictorian and validate have the same root. A high achiever is by definition somebody who's efforts have been validated against the measure of achievement (whatever that measure might be) and confirmed to be valere "well", "strong".

It's too bad that what a company needs is an employee that does their job, not one that needs to be constantly validated in their efforts.

And thus a hiring system, put together by validators, who designed the hiring system to validate and filter for people who focus on validation, forgot to look for people who get shit done and don't need to be thanked for it.

And as a result, Youtube becomes more and more unusable every single day.
It's obviously less exploitable, because a memory corruption flaw that affected the TLS handshake would be devastating regardless of whether your application used a TLS connection to update your email password or refresh the available episodes on the Nightvale podcast feed, and the certificate validation bug isn't.
It's funny how you can always pick out a sexist by how they refer to women as "females".
Do yourself a favor and read the rationale and see if you can get past your defensiveness. I bet you won't find it odious. https://medium.com/the-web-we-make/79403a7eade1
Hehe, well we agree on that...
I think roads are entirely different.
This is a comment that seems to suggest that it's abnormal for dumb bugs to cause huge security problems. It is not. If the foundation of our economy is C software security, well, hate to break it to you, but...
Sorry. I stumbled on it and thought it was interesting.
Switching could afford some decision-maker the means to choose a new development team without losing face.
Google has a great video on generation C:

http://www.youtube.com/watch?feature=player_embedded&v=q9wwY...

And here's their article:

http://www.thinkwithgoogle.com/articles/meet-gen-c-youtube-g...
We are definitely using the term PRISM that way.
Because every effort like this will have false positives and I don't think it's meaningless overall. If my goal were to change policy, I'd have addressed this to my congressperson, and reached out to Treasury, not talking about it on HN.
Artificial intelligence, currently popular by machine learning. Lots of potential and undiscovered applications. Everyone will have their own opinion on this, however.
It's hard to believe if you pay no attention to bugs caused by code refactorings, but easy to believe if you, for instance, saw the OpenBSD IPSEC team refactor authentication checking on IPSEC packets out of the kernel by accident, in almost the exact same manner as this bug.
Unix koans
You'd think one would be a little less sloppy when hacking on the very core of the SSL libraries being deployed on hundreds of million of devices

Hahahahahaha.
I had just wanted to document the moment and thought it was kind of funny to do sort of the anti-Upworthy headline.
> so companies tend to try to use more expensive, less reliable proxies of IQ tests to get the results that IQ tests would give them more reliably and less expensively

I wonder what the legal defense would look like if an employee was turned down on the basis of a test that wasn't an IQ test, but had a near perfect correlation with the results of an IQ test.

https://en.wikipedia.org/wiki/ASVAB
It was supposed to be silly, not a literal consideration of the ecological impact.
Ask HN: How do you keep from getting burnt out?
HN -

What do you do when you start to feel burnt out with a gig? Aside from the obvious answer that is?

I've been working a lot, for quite a long time, at my current start up. It's a mixed bag, I love it, I love the team and I want for it to work so very bad. But just like you're favorite cereal, after a while you can get tired of it. In my case, I don't want to give it up, I just need to find a way to recharge.

Any Advice?
Because it's better cram everything in a server.js file ! sure.
You're depressed, mate. I bike 10 miles a day( 4 - 6 times a week ) to keep myself in the saddle. After that, I have no issue with this kind of stuff. Eating right is huge, too.
Those lucky brass players! We saxophonists have to deal with stuff like this: http://www.wwbw.com/E-sax-Practice-Mute-System-for-Alto-Saxo...
The docs are wonderfully readable. The writing is clear, concise, and devoid of fluff. Great work!
Amex has a credit card called Blue Sky. Now I kind of want one.
If it's any consolation, the stack ranking is done with the institutional knowledge that performance isn't evenly distributed between teams – i.e. some teams will have zero people who are underperforming. (in fact, this has been the typical experience for me in my three years at Google at least; most of the time everyone on the team is doing well both from a performance perspective and a career development perspective).
My iPhone apps are sandboxed, but thanks for simmering down a complex, nuanced topic into an authoritative statement of contrarian truthiness.
Can you give an example of someone in the real world who has "a high IQ, but lacks the ability to be able to connect different ideas and/or come up with solutions which require more than just processing mathematical computations"? IQ is not a measure of arithmetic processing capability.
This is cool, and a great improvement over the previous generation Yamaha product. However, "Brass Resonance Modeling" may be confusing to some non-tech savvy consumers as it sounds similar to "physical modeling," a method of synthesis. The technology improvements are not synthesis, but rather a non-generative process more similar to a pair of noise-canceling headphones.
Ask HN: Non-tech founders, what are your biggest tech challenges
My co-founder and I are working on a course for non-tech entrepreneurs who would like to build an MVP in order to validate their idea(s) but who lack the required technical skills to do so:

http://www.omg2mvp.com

Despite all of the recent hype around the need to learn to code, we believe that it isn’t necessary to know how to actually program in order to build an MVP, however there is a certain requisite skillset that every non-tech entrepreneur needs to have in order to be an effective and useful co-founder, and get results from their developer.

Being marketers who have taught ourselves these core technical skills and used them to launch a number of startups and digital products, we now want to share our experience with the global community of entrepreneurs and we’re currently developing a guide for non-tech founders that will help them up-skill in relevant aspects of startup engineering as well as showing how to go about securing a tech co-founder.

Below is a list of questions that we would love to get your feedback on:

1) Is this a course that you believe would assist you with your challenges as a non-tech entrepreneur?
2) How much would you be willing to pay for such a course?
3) What are the biggest tech challenges you face as a non-technical founder?
It sounds like the ads were directed at Facebook pages. Then the 150k was the number who clicked then ad, then clicked through to his actual website(s). In which case, that's actually a pretty fantastic clickthrough rate. At least, that's the understanding I got from this paragraph:

At one point, data from Facebook indicated his ads had delivered 606,000 clicks, but the site itself registered only 160,000 incoming clicks from Facebook, according to data supplied by Brar. (160,000 clicks is a not insignificant return. After all, these are not clicks on a mere Facebook page, these are users who clicked through to an off-Facebook site.)

Otherwise I'm not sure what they'd mean by "160,000 clicks is not an insignificant return." Maybe I'm reading too much into it though.
>If PRISM means Apple supplies data directly to the NSA there's no need for a MITM attack.

Why collect data once when you can do it three times for to verify all your other collections are working?
ideally you could train the data set from stories i've upvoted on HN

https://news.ycombinator.com/saved?id={{username}}
Also 1% of 1.23 billion[1] is 12.3 million. Which might only be 1% of the total users but is still a very, very large number of fake people.

[1] http://www.theguardian.com/technology/2014/feb/04/facebook-1...
Oh great, Thomas Friedman.

http://www.salon.com/2012/07/25/the_value_of_tom_friedman/

http://nypress.com/flathead/

http://www.rollingstone.com/politics/blogs/taibblog/no-kiddi...

http://jilliancyork.com/2011/12/14/the-definitive-collection...
JavaScript is not a real virtual machine by any means, even with efforts like Asm.js and Emscripten being considered, and even if the recent implementations have been drawing ideas from real virtual machines. Compared to real virtual machines like the Java VM or the .NET CLR, it's very, very lacking.

At best, it's merely an interpreter that's targeted like it were a VM, since there is no other practical choice within web browsers today. This is part of the near-total lack of openness I referred to, by the way.

And it's very absurd for you to suggest that "there's far more language choice on the web than any mobile OS". That's not true at all, given that every major mobile OS today includes a web browser of some sort that can run web apps. And then the mobile OSes still allow the use of languages like Java, C, C++, and Objective-C, among others. So the choice is clearly far greater on mobile OSes, given that they support so many languages, plus JavaScript.
There's a list of all the apps that have been built based on this API: http://hn.algolia.com/cool_apps
You can paginate using the created_at_i parameter (edited OP)

Just pass created_at_i<X, where X is the time stamp of the earliest submission.

I was able to download 500k stories (i.e. about half of HN's 1.26M stories) before I ran into memory issues; I've fixed them and am downloading the rest.
Canadian Court Establishes New Safeguards on Disclosures in File Sharing Suits
Ukraine's president calls efforts to push him from office a 'coup'
I know we have a football field size room of coders over at LAUNCH hackathon in SF this weekend:
http://hackathon.launch.co/

Pretty bad scheduling trying to grab what's left.
Thanks. I think that speaks for itself.
Rent vs Passion
Newspapers are trying to show you what they think is actually important. But of course omnibus papers will never really tell you what is important only what is current.
Ask HN: Disable GPS chip on Macbook Pro Retina
I'm concerned that the GPS is still active from a hardware level despite me choosing to not enable iCloud.

Has anyone disabled / extracted their GPS chip from their computer? Tips?
For display purposes, yes. I want better text readability when I'm working on an article. A nice variable-width font, more line spacing, etc. I want my Vim buffer to look as good and be as comfortable to read as a native text editor like Byword.

For formatting, I mostly use Markdown. Ideally, I'd like to see the literal markdown for the paragraph under the cursor, but formatted text for the rest of the buffer. There's actually a script with a pretty good first pass at achieving that kind of Markdown support via Vim's "conceal" feature, but some of Vim's inherent limitations make it imperfect: https://github.com/tpope/vim-markdown/pull/9

I'm hoping that the way neovim decouples the UI layer from the underlying editing engine will make it easier to address issues of that nature.
These generators are excellent tools to learn how to organize your code, setup your tools, etc. I have used Yeoman and am amazed at how the community has grown. I'm a big fan of Addy Osmani as well.

HOWEVER a "scaffold" doesn't really teach you how to use OAUTH to authenticate with Facebook, handle sending emails (welcomes, password resets, etc.) or even how to really build something. Instead I'm a big fan of working site examples:

Drywall: http://jedireza.github.io/drywall/
Hackathon-starter: http://hackathonstarter.herokuapp.com/
Skeleton (Mine): http://skeleton-app.jit.su/

You get all the scaffolding + real working code for all the basic site functions. You then build from there.
It all depends whether their customers are repeat advertisers or not. If they're able to continue growing their first-time advertisers, but few of these businesses are satisfied, repeat advertisers - then I wouldn't say "clearly" is appropriate.
Who said anything about Android?

You might find this article a good read: http://www.theverge.com/2014/1/21/5307992/inside-the-mind-of...
Learn how to program: Free screencasts (JS/jQuery, TDD, OOP, Rails, Ember)
My own conspiracy theory is that these times match up where they adopt some form of widespread XMPP. Google Talk, iMessage (2012), MS Messenger, etc... and aligns with the recent talk of re-doing encryption in federated XMPP: https://github.com/stpeter/manifesto

XMPP isn't just for chat, it's for video, server to server message passing, status updates, etc...
A Derek Sivers post that appeared here recently goes over some of the rationale for copying-as-learning, and imperfect-copying as an essential part of creative work:

http://sivers.org/mirror

HN discussion (with more personal & famous historical examples):

https://news.ycombinator.com/item?id=7168467
You're getting downvoted for slagging someone, but the real reason your comment should be invisible grey is that very few people with your attitude succeed in business. Every company operator I know has a story to tell about handling months or even years of rejection.
So is there evidence yet of this out in the wild? And was it discovered by Apple or an independent researcher?
Thanks for that extremely insightful analysis. Haven't looked at pandoc before but will do.
There's really no need to shoe-horn bitcoin into _every_ hackernews thread.
I remember a tenor sax hanging off my neck was enough work let alone having its entire hard case attached :) It seems, to me, the best solution for all of these issues is just to rent a practice space and go play until your cheeks and lips fall off. I am pretty amazed with how the trumpet output sounds through that Yamaha mute, though - it looks like you could even circuit bend that gadget to do some nasty things to a trumpet's tone.
I thought the date NSA was added to prism simply had to do with Steve Jobs dying. It's the kind of thing I could see him refusing to cooperate with.
Just to clarify... QNX also powers the newest generation of BB phones as well. So while it's not the phone OS getting used, it is very likely an extremely close relative; newer versions of the Car platform clearly borrow from the BB phone OS.
Thanks Jason, seriously we owe you so many beers. "when" not "if" is how we operate ;)
VC Cliché of the Week: Ask for Advice (2006)
Php-encryption: Simple Encryption in PHP.
The click discrepancy is what always has bugged me about Facebook ads (well, aside from the poor CTR). I've tried small FB ad campaigns since they've had the service and they ALWAYS report significantly higher clicks than what GA reports as coming from Facebook.
What a weird entry...

https://www.google.com/maps?hq=http://maps.google.com/help/m...
Fellow sax player here. I've never seen anyone use one of those.
Samsung unveils (two) new Gear 2 smartwatches, ditches Android for Tizen
I think being a valedictorian has a lot more to do with saying goodbye (vale) than it does being validated, but I do think you might be right about Google's bias toward those who seek validation.
"Embryo Selection for Cognitive Enhancement: Curiosity or Game-changer?"
No. No. No.

Code reviews only mean your code is going through two sieves instead of one.

Of course it helps. But there is no guarantee of anything unless the reviewer is incapable of making mistakes, in which case you could just ask him to write the code in the first place.
Shulman & Bostrom 2013 excerpts: https://plus.google.com/103530621949492999968/posts/Z8wRcsWt...
>it doesn't get around the network effect that WhatsApp and others capitalize on to stay in the lead

I've seen over 5 IM platforms rise and die (ICQ, AOL, MSM, etc), in the last 15 years, so this "network effect" is not that great a barrier...
See also: http://www.google.com/humans.txt
i didn't see that. that makes it even worse. this design is supposed to avoid that extra var.
Why the hell would you ramp from virtually zero spend on FB to spending $100K/day, especially if you're a "small business"? Quite frankly, this guy seems like a bit of an idiot - ramp slowly! That is an absolutely insane budget for FB ads.
Yeah, it really is remarkable! Synthesized brass/winds are generally quite bad. I was very skeptical, but watching the video changed my mind. I do have an old trumpet lying around...

I did see a video for the sax case where a person had it mounted on some kind of stand, so that's probably a lot more feasible!
The main problem that I experienced on our 2013 ford edge is when I would play Spotify over bluetooth audio, for some reason the car itself would start skipping songs halfway through for no reason at all. After install the latest update for the my ford touch, it doesn't seem to happen anymore.
It sounds like the ads were directed at Facebook pages.

I don't think so, the article says

After all, these are not clicks on a mere Facebook page, these are users who clicked through to an off-Facebook site.

I.e. the link that the user would go to after clicking the ad would be an off-facebook site, not a facebook page.
Well, IEbook would be an awful choice for the name. I hope we never see an IE OS.
And, to be clear, I don't think it would be a success or that I'd get one. I'm just saying Microsoft has been acting so erratically that they might very try that.
FB says they track clicks. If I click an ad really fast, say 5 times before my browser can redirect and load the target site does FB count that as five and server analytical show only one because only one of the five clicks resulted in a request? I might have to do a micro experiment to find out....
The statistics sounds BS (as a lot of them are).

FWIW, I don't know anyone (across 5 countries of friends and business partners) who doesn't use Skype.
But it will reduce their profits, as they have to face competition.
I dislike Friedman a fair bit, but I can't hold this one against him: restriction of range is a subtlety that pretty much no one understands in interpreting correlations, and I only know about it myself because I happened to read a paper torpedoing a previous famous paper as having fallen prey to restriction of range (and then did some more reading on range restriction).
This actually leaves you worse off than doing nothing at all. The reason being, once you push out actual content, the engagement with your content will be so abysmally low that facebook won't show your content prominently to many of your actual fans.

It's worse than useless, it damages your ability to use facebook as a means to connect with your customers in the future.
There's a reason for the old kernel - basically the company that owned the Vyatta project really started neglecting the free version by the end and it hasn't seen much proper maintenance in ages.

I'm starting to get invloved in the fork that was recently taken, called VyOS [1]. Updating the base to a newer version of Debian is a high priority, but there's a fair bit of work in it.

Since Vyatta Core (the community version) is essentially dead, and there is at least one Ubiquiti guy involved in the fork, we hope that VyOS will eventually be the base for EdgeOS.

And as for the hardware acceleration - I wish the drivers were open source but even as it is, it's really a necessary evil to get very good performance on low cost hardware.

1. http://vyos.net
That video explains one aspect of the issue (the fake clicks), but what I found most troubling from the article was the five-fold discrepancy between the FB link count and the Bitly and Google Analytics visitor counts. If anything, you would expect Facebook to be able to detect at least some of the fake ad clicks, so their count would be marginally less than Bitly and GA detected.
That's incredible. Will you upload the raw database somewhere, please? If you make a torrent, I'll help seed it. Would you email me at sillysaurus3@gmail.com whenever it's ready?
>Could they, though? Facebook's DNA is information accumulation. As is Google's.

I don't think companies have DNAs. Just idiotic managers who don't give enough freedom to teams to work outside the company's box.
Get sleep. Get exercise. Eat well. Only drink alcohol on weekends and never during major development stretches.
Only on HN is this "contrarian". Exactly what does sandboxing do for you here? Consider the actual vulnerabilities carefully.