skysight-inc/HackerNews huggingface dataset:
As RealGeek stated, it will destroy your company, and it removes the incentives for you to work hard and win.

You are going to be doing the hard work of running your company. An investor who wants to take 50% or more of your company is saying, "I want control."

They may argue that the deal provides opportunity to technical founders. I would argue the deal is unethical and exploits unexperienced entrepreneurs.
Not bad but I must say https://domai.nr/ looks better for my needs, thanks though.
You'd be a happier person if you didn't assume people were editing their comments just to make you look bad. You can be assured that if I had seen you respond to something I'd written, I'd have noted where I added to my original comment.

But I agree that you & I are better off not discussing things.
(I'm the author)

Sorry for my lack of clarity here. We weren't pitching customers in Mountain View, we were just walking around a block a few hundred times -- talking and thinking with each other.
Ok, that's good to know. That's an order-of-magnitude less than I was told. I guess I should look into it in more detail. In the meantime I have accepted a postdoc position in Europe, so I'm in no immediate rush to get the visa situation sorted out. Would just be nice to be able to sort things out so that once my postdoc is done I've got a better chance of returning to the Bay Area.

With regards to the O1 visa, I've heard that you have to really stand out in your field of research, as the original article states, and unfortunately, during my PhD I haven't really achieved that level of success.

Thanks in any case for the info!
As a student at Northwestern, I 100% agree with this. Students around here are always complaining about the vast amount of things they have to do, midterms, papers, student group meetings, greek events, school events, when most of these things can be easily cut back if they make the choice to.

Do less. Do Better. Know more!
Alternately: https://chatsecure.org
> It's virtually impossible to create deterministic builds of common software.

Nope, it's definitely not. If projects like Tor and Mozilla (they're working on it) can do it, then the 99.99% of packages out there which are less complicated than Tor / Mozilla can do it too.

> It can still be rife with security holes.

You're just rewriting what I wrote: I didn't said it would mean the software would be secure. I wrote it would already be a huge step forward.

> "I don't know what you mean by 'functional package managers'."

I mean for example this:

nixos.org

> Root-installed software is as big a deal to a single user system as a vuln in your copy of Adobe Flash.

Definitely not. Especially in a system like Linux where it's easy to have multiple user accounts (including one used just for surfing). I'm a "single user" and I do have several user accounts on a single machine (including a user account which I use only for surfing the Web). No Adobe Flash here btw and no Java applets either (I'm a dev and I do typically target the JVM, but there's no way I'm allowing Java applets in a browser) ^ ^

You say: "deterministic builds cannot be done", "there's no point in having deterministic builds because there could still be security holes", "local exploit is as bad as root exploit on a single-user machine"...

And I disagree with all that. And thankfully there are people disagreeing with you too and working on tomorrow's software packaging/delivery methods.

I thank Tor, for example, for showing us the way. The mindset really need to change from: "it cannot be done, it's too complicated" to "we can do it, let's follow the lead of the software projects showing the way". There's a very real benefit for users.

The "why":

https://blog.torproject.org/blog/deterministic-builds-part-o...

The "how":

https://blog.torproject.org/blog/deterministic-builds-part-t...

Honestly I simply cannot understand why there are still people arguing that deterministic builds aren't a good thing or people arguing that it cannot be done.

It can be done. And it's a good thing.
My closest toilet is in Japan (I'm in Australia)

I would have thought that being a two sided market, any available public information would have been already entered, rather than relying on others to submit toilets.

For example, entering all 33,000 McDonalds locations would have been a great start. I'm pretty sure that is a true global source of toilet location data.
>> You're still doing it. You're spouting inanity you contrived out of your own head, and feigning to attribute that inanity to typical LSD use.

I may as well say the same to you, having started by misquoting me and then failed to answer any questions.

>> But do keep promoting your conclusion - I'm sure there's some important insight there.

My conclusion is there's no evidence that widespread use of LSD would change much or result in major changes to society.
Do you have any evidence or are you just spouting shit too?
I applied for J-1 waiver last summer. It's a painful bureaucratic process but it's not too hard to follow. You have to fill up DS-3035 [1] and get a no objection certificate from your embassy or government. Most embassies in US have some standard procedure for sending no objection certificate directly. After that, they'll take about a couple of months to approve your waiver.

You can do it all by yourself and in total you won't have to pay more than $500 ($215 for DS-3035 + fee for no objection letter.) Go for it!

[1] http://travel.state.gov/content/visas/english/study-exchange...
The 'Nokia Pure' is one of the best (if not the best, IMO) of the modern sans types. Pretty unique but very clean. It's used on their website (as Windows Phones use Segoe UI), and apparently on the new Android phone too (notice the 'g'), for example: http://www.nokia.com/global/products/phone/nokia-xl/

I'm just hoping that someone would make a similar but open-source version of it. :)
This bug is entirely random. It causes certificate validation to break at a point where certificate validation never breaks. Obviously, once you know it's there, a unit test keeps you from ever having the bug again. It's less apparent to me that it helps you before you realize that the bug could exist.
They can certainly induce a sense of the profound but I'm not sure they actually produce profundity.

What's the difference?
This really depends on where you live. if you are in a poor country with a decent amount of good developers, 100k can buy you 4-5 programmers for a year or 2 really good ones for year and a half or two.

But yeah, 50% for 100k is a really bad idea.
>If I implement a network protocol I will make sure to write automated test involving clients and servers. Setting this up on localhost or on a virtual network using TUN/TAP is not that hard. And this has made me find TONS of bug ahead of time.

I agree that it's helpful, but the problem is coverage. Your test code, most likely, doesn't cover EVERY single possible condition that can happen with a simple TCP/IP connection. Especially once you get out of localhost land, where you're dealing not only with your code, but all the hardware and software between the two systems

The fundamental problem is that even with a rigorous test suite, you're probably going to run into things you didn't even think were possible once the code is out in the wild. For example, we just ran into a scenario where we were seeing corruption through a TCP connection. Knowing the wire, it was impossible for the packets to be appearing in the way that they were(there was some packet level corruption). After going through multiple wireshark logs, we found that the culprit was a hardware firewall in between the server and client. Thankfully, our code didn't crash, but it's also something that we never tested for, because(in theory, at least), it should never be possible for that specific corruption to be sent in the first place.
Is it Lightgangstart or Lightbankster? Is it a penetrator or an accelerator ? I don't have my glasses.

Do you need the $100k ? Like do you really need it.

I've heard that Genentech got started with about $250 grand. And that's medical research that led to changing the world.

Unless you're doing something bigger than what these guys did, I doubt you really need the money.
Useless complexity
1. Walking + photography. This forces both movement and expression into my days.
2. Power naps. Every day, 15 minutes. Tea + whatever gets you to sleeping in < 5 minutes. for me this requires covering my head with something (dark + warm).
3. Meditation. Very useful for focus and state of mind.
4. Other exercise. Push ups, stretching, yoga, basketball. Get yourself out of that chair.
I'm quite a happy person and thanks for the irrelevant concern trolling, based on a comment thread that's calling you out (do you always assume people that think you're wrong are unhappy or otherwise defective?). And no, I didn't assume those words you've placed in my fingers. I was, rather, annoyed that I invested a few minutes into a playing field that you'd already moved while I worked.

If you'd permit me a brief bit of my own concern trolling: I remember when I looked forward to reading your comments, several years ago. Now I see your nickname and say "bah, again?" What changed? Was it me or you?
Founders Equity Webinar by Mike Moyer
Yeah, the driver boards they are using aren't exactly the same but ultimately serve the same function.

I do hope this Kickstarter does well because the more options we have for driving really high resolution displays the better, and the more open they are the better, but just as a practical matter if I wanted one of these devices right now I'd order the Adafruit one -- it is currently backordered by a week or two but that beats getting the hardware in June-July (maybe, if they buck the trend of kickstarter hardware projects shipping late).
>> The effects of LSD on freeing people's minds lie elsewhere, not in making people aware of the governmental abuses of power.

So please describe what these effects would be?

And please don't think when I talk about it inducing a false sense of the profound that I speak from ignorance or inexperience.
No. I meant the dependencies contained in vendor/ directory. And the composer.phar file itself. Is there a reason why you're versioning these things?
FlexCoin shuts down after attackers steal 896 BTC from hot wallet.
I am more amazed at the lack of smog blocking visibility.
Disclaimer: I'm Chinese and I love Beijing as a city, on a good day it's about as clean as LA and on a bad day its...well you can barely see airport terminal when you land.
Who is widely renowned for his skeezy business practices -- see http://tech.fortune.cnn.com/2011/06/10/groupon-eric-lefkofsk... , http://www.theverge.com/2013/3/1/4043566/andrew-masons-deal-... for many examples.
Thanks for that! I was curious because Booking.com is the only company that I know of. Layar looks really awesome! I actually interviewed at Booking.com and got a job offer as Data Scientist. After a lot of deliberation I accepted a postdoc position instead but I'm going to keep my eye out for opportunities in Amsterdam for when my postdoc is done. Hope Layar is still doing awesome things when I check again!
Well I think the problem is that if we take the assumption of "being owned" at face value (and that seems justified by the evidence) then "reducing risk to management levels" doesn't stop these disastrous events from happening. It only makes it more disastrous once the black swan finally lands in your pond.

It seems that the only way for this line of business to be feasible in the long term is for the hot wallet :: total assets ratio to be as low as possible. Your income to build assets is proportional to transaction volume, but so is the required size of the hot wallet.

Maybe a massive up-front investment to allow for start-up assets to be suitably large in comparison to hot wallet size... but even then you'd need to be careful not to grow too quickly and to ensure that you proportionally build up your reserves for when your hot wallet gets wiped out.

But this means that you have those stored assets that you can't invest elsewhere, so are you even making a profit now? The only way to reduce assets needed is probably some kind of insurance arrangement, but why should the insurance company offer low fees for this with the risk profile we currently see?
There is virtually no correlation between the people who need to have their secrets protected from hostile governments and the people who are savvy enough not to use applications that make security promises they can't keep.
Mastermind Groups for Startup Founders
I think this is something a lot of entrepreneurs can benefit from joining, especially in the early stages.
You wouldn't use drug money for spy satellites, they're happily paid for by Congress. Drug money's for stuff you don't want tied back to the organization - assassinations, corruption, etc.
Well, this is embarrassing.

My colo server died earlier today (completely unrelated to this) and didn't come back up because GRUB hadn't reinstalled properly on a replaced software RAID disk.

But yes, Nagios did tell me it was down :)
relevant what-if: http://what-if.xkcd.com/83/
I would have to disagree.

>And that presuming that people with money in MtGox were Bitcoin proponents is not a giant stretch.

It is a giant stretch given that most people who knew a lot about bitcoin and the bitcoin economy, the proponents of bitcoin as it were, have had concerns over mtgox for quite some time. Actually I imagine many people who lost btc and/or fiat at mtgox were relative newcomers who were unaware of the ongoing problems and just saw mtgox as the largest exchange and most public facing one at that. So you are making a huge assumption on which you base your choice to condemn people for their choice.

There have been plenty of these sorts of comments all over the internet since mtgox collapsed,essentially saying:

"champion that it is not regulated, go running to the regulators when a problem arises"

the thing is that never has any one of these comments been followed up with an example or instance where the same person has espoused both beliefs/statements. This is generally because they dont exist and/or the commenter doesnt want to do any work to prove their point they just want to denigrate people they think they are smarter than. An exercise in self-pomposity essentially.
> As I said - do you need acid to see the problems in our human society?

You are on a red herring streak :)

You do not need acid to see the problems within human society. But acid helps when it comes to seeing the problems within yourself, and giving you motivation to fix them.

The transformative potential of acid on society can be expressed in statistical terms. If a sufficiently large number of people were to embark on a course of self improvement and personal evolution towards humanistic and compassionate values, this phenomenon would bring about societal change.
Steve McConnell, in Code Complete, said in 1993: "These articles contain the whole goto debate. It erupts from time to time in most workplaces, textbooks, and magazines, but you won't hear anything that wasn't fully explored 20 years ago."

Thankfully he's got the whole section on his site.
http://www.stevemcconnell.com/ccgoto.htm
If you're writing that code, you SHOULD know every possible incorrect certificate format. If you don't, you should learn from the relevant standards and other materials, or admit that you're not capable of writing that kind of code.

But in this case this is not about that. It's about testing code already written. All you need to do is go through that code and verify that every branch does what is supposed to do. Which is pretty straightforward, if time consuming.
> then (hopefully) never think about ovens again.

If "baker" denotes an individual whose job is to bake bread in a small bakery, then perhaps.

But we're more like industrial chefs, hired to "make" bread at scale (e.g. for Tesco or Walmart). As a software engineer, our roles may be much more about combining, improving, or making our own ingredients, machinery, and processes.

Then, when it comes to baking the bread, we're able to produce much more with less effort, or even hand off the final production to others.
No worries, I want to read this after work, thanks for posting the information. I'll edit/update with any feedback.
You don't have to follow TDD at all in order to build a test suite for a project. I think all anyone's suggesting is that some of the complicated nature of getting crypto right actually can be put into a suite of tests.

I know I could come up with a very basic set of test cases, and my only experience with TLS is reading parts of some book I found in my company's library. Heck, OpenSSL has a ton of tests it runs on every build, I know this much.

And even in Haskell you'd need tests. At no time will you ever be able to write code without testing it.
To know more about free online engineering courses . http://www.freeitonlinecourses.com/online-engineering-degree...
I don't see how you can suggest that the scenarios I'm discussing are unrealistic. This thread is in response to a concrete female only conference of exactly the type I'm discussing. They don't fit the model(s) you're proposing as well, but that makes them different cases, not unrealistic ones.

I think we are talking about a fairly different types of things. I'm talking about low-touch high n networking as you find in events, conferences, and meetups; I am not talking about high touch networking like accelerators and degree programs. Whether my suggestions are valid or not in the high touch scenario you're discussing, I don't know, as I haven't considered that case in sufficient depth.

Your suggestion of there being value in a separate network hinges on, I think, there being a fundamental incompatibility between the groups. 22yo vs 32yo MBAs have real structural differences in their lives that make divided self help a plausible solution. I just don't buy that the differences we're talking about are significant enough to create fundamental incompatibilities. "The female tech network" vs "The tech network" smacks of separate but equal to me.

I have no problem with female focused accelerators, but remember that YC doesn't systemically exclude MBAs to create a network of 22y.o.s.

I'm enjoying the discussion (minus the part where you try to dismiss my cases as unrealistic) as you're bringing up models and cases that I hadn't yet considered.

Is the goal to have two networks, or to achieve gender neutrality in the existing meta-network? I think our goal is gender neutrality.
Who is having difficulties converting Bitcoins to dollars? Have you personally had difficulty, or are you just repeating hearsay?

I ask because I've been in Bitcoin since 2011 and I've never had trouble converting Bitcoins back to USD. Right now, I'm not happy about the wire fees I'm paying (and may switch exchanges), but it's as easy as pie to get the money.
I didn't say "acceptable", I said "prejudicial".

If I'm looking for ordinary gainful employment, or plan on raising a family, there are minimum standards which are imposed, whether through social expectation, law, regulatory requirements (e.g., immunizations for children attending schools, water, power, and/or septic connections for residences, etc.). Not meeting those requirements will put handicaps on your ability to find and/or keep gainful employment independent of your qualifications otherwise.

Arguably a similar state exists within India, but prejudices are far more baked in to the system and are generally acceptable (I turned up numerous articles discussing discrimination by caste, religious affiliation, sex, etc., while doing some associated research for this thread, they make for ... interesting reading).

I'm not addressing the morality of the differences in living standards between the US and India, or even between Park Circus vs. Malabar Hill (both of which are within India, and, arguably, represent a larger divide than that between the median incomes of the US and India (roughly: $42,693 and $1,219/$3,608 nominal/PPP). That's a separate issue and independent of this discussion.

The question at hand is: what is the minimum wage necessary to provide for a sustainable supply of labor, meeting present standards, within the US. And the answer to that question is, of necessity, relative to prevailing conditions, including expectations, within the US.
> Sure, returns "true" or "false" which are not things in C

#include <stdbool.h>

Available since C99.
I agree with you, but the network over-the-air broadcast method and license for the spectrum in the public interest (which has made them such huge networks) leaves them open to businesses like Aereo picking up their content via antennae.

Once networks ditch the spectrum that is given to them by the government, then they can start complaining about people using antennae to pick up their signals. Until then, I am unsympathetic.
This is not a bug that leaves "linux" open to anything. It's a GnuTLS bug, and you should be using openssl anyway.
Introducing kpatch: Dynamic Kernel Patching
The noise factor can be remedied with clever tweaking of the Cas9 protein, as mentioned in the article. This research is currently underway.

The key is, optimizing the Cas9 protein is much easier than optimizing an infinite number of designer proteins targeting individual sequences, which is what previous methods required.
Lots of (negative) reactions from when they started in 2012: http://blogs.wsj.com/venturecapital/2012/09/21/readers-react...

I'm surprised it's still going.
What is GnuTLS specific in "The failure may allow attackers using a self-signed certificate to pose as the cryptographically authenticated operator of a vulnerable website and to decrypt protected communications"? [1]

Apparently just a self signed cert. It was accepted as the "CA signed." Since 2005.

1) http://arstechnica.com/security/2014/03/critical-crypto-bug-...
CDE - Common Desktop Environment
There are plenty of places willing to sell you $1000 in bitcoins on a credit card?
You're right.

But my point is that sometimes people get caught into pre-mature optimization. The baker analogy, within the context of what I'm saying, is about a baker who never bakes any bread, because they spend all of their time iterating on ovens, and not bread.

Having some super fancy bread-making-machine is totally vital...eventually, or if you're doing something very cutting-edge, or out of the ordinary.

But not when you're writing a personal blog.
> If I ran a bank and didn't bother to lock the doors or keep the money in a safe and someone comes in and steals the money, I don't get to do a chargeback and get the cash back.

That would be one thing if physical security were just as hard (or harder) than cyber security.

But it's in fact the complete and polar opposite; physical security is much easier and much better understood by the actors who need to engage in defense.
Back when I still used Apache it didn't have support for TLS 1.1/1.2 due to the dep on OpenSSL and thus none of the better FS ciphers. So compiling against gnuTLS allowed for those. That's now been rectified.
In case anyone is wondering - this appears to be reference to this scene from Patriot Games:

http://www.youtube.com/watch?v=ZoVWedQOQl4
You dont even need a "no extradition treaty" country, just be russian and move back to russia, of course that has the negative points of, you know, having to live in russia.
What sort of changes?

Why do you think LSD would necessarily bring about more humanistic or compassionate values?
Tracking and visualizing NBA player movement
If you scroll to the end, out beyond Pluto, it says, "Might as well stop now. We'll need to scroll through 6,771 more maps like this before we see anything else."

For those curious, after scrolling 6,771 more maps, that is approximately where you would expect to find Proxima Centauri.

However, there are actually some other points of interest along the way (between Pluto and Proxima Centauri), including Eris, 90377 Sedna and Voyager 1, to name a (non-exhaustive) few.
The Bystander Effect [video]