skysight-inc/HackerNews huggingface dataset:
I think the issue is down more to a lack of awareness than a lack of care.

A while ago a site was hacked because they didn't upgrade rails which put out an urgent security update a few day's previously. This is sloppy. There is no excuse.

In many other cases the problem is that people running and building the website are not security experts. They know the fundamentals and learn new things from exploits used elsewhere. However, this knowledge falls short of attackers who relentlessly look for and try to create exploits every day.

I think this is the main issue. Too many hackers, not enough security experts, not enough funds to continuality audit the application and servers running the website.
Interactive Website Feedback Tool TrackDuck Launched Chinese Version | TechNode
WHY SPEED READING IS FOR FOOLS
The idea that cryptocurrency "startups" are "financial institutions" is more than a little tenuous. Currently dogecoin is more or less equally legitimate as any other cryptocurrency, that should tell you something about the state of the "industry".
Move categories again in Prestashop's back office
No apology and a short little post. Disgraceful. Is that all it takes to run off with $630,000+ of customers money?
Ask HN: How do you manage technical scope?
I'm charged with producing a technical architecture for a big enterprise web app. The scope of the application involves lots of moving parts which end up making a consumer financial services website with including purchasing stocks/financial products online.

Nothing too out of the ordinary apart from lots of SOA/enterprise systems integration complexity.

The biggest challenge I face is not really how I would build this, but how the client would like it built. They want a custom CMS to control almost every aspect of how the system business logic works. This will naturally add huge overhead to the build and is making it very hard to quantify. Red flags are popping up everywhere with regard to managing scope. This is looking like a big multi-year project.

I'm curious as to how others deal with this? Any suggestions greatly appreciated.
Well, it sticks to the facts. Given the recent Mtgox debacle at least it explains what happened and what they're going to do. Obviously if you had money there you'll be pissed but at least you know where you stand and what you lost.

IMO it's a pretty good way for them to deal with the situation.
The gov't start issuing notes based on how many coins you can present, and then those notes gets traded instead actual bitcoins?
A hash of the NHS number would give a UID without compromising the person's details. Providing a UID that is one-way linked would allow HSCIC to go to the actual data if a care situation warranted it.

I'd argue that the first half of the postcode and month of birth are ample for outside-HSCIC use. Monday-deaths is the kind of thing that's done internally anyway.
Due to the permanent nature of bitcoin transactions, I wonder if all bitcoins stored in banks must enable multi-signature transactions. That way the money can leave the bank only if there are 2 thefts. 2 thefts are exponentially harder to pull off because second signature can be stored in different places by different people.
Yes, but it is a little different than the traditional used car "lemon" information asymmetry problem, since there is an ongoing relationship and the reputation effects are much stronger.
It is even better hearing the story from him straight http://www.youtube.com/watch?v=V4_MeS6SOwk
It amazes me that despite all the efforts made to improve programming languages, the debugging tools we're using are so clunky. I really wish more effort was made to improve them.
Flexcoin via Twitter:

"While the MtGox closure is unfortunate, we at Flexcoin have not lost anything."

"Flexcoin will be shutting its doors."
@pja you are hereby awarded 1 Fermi (see recent link on the topic of Fermi estimates).

I shall wear it with pride!
When things like this happen, I try to explain to the skeptics why I will always have faith in Bitcoin.

Suppose you make a Bitcoin service where they print your keys onto pieces of paper and store them in a big vault. When people want to withdraw coins, they must visit the vault location and take money out, where the transaction is verified by a physically present person. The owner of the vault could also release an API to allow trusted third parties to conduct transactions on behalf of the people who deposited Bitcoins in the vault.

We wouldn't need to worry about hackers, and if the vault is strong enough we wouldn't need to worry about thieves.

But we would have to worry about the banker. The owner of the vault can devise ways to increase the apparent value of his vault, through financial mechanisms like derivatives and credit default swaps. To prevent this from happening, we could get a big organization with lots of guns and power to regulate the actions of the banker.

But then again, the banker controls all your Bitcoins, so he can just use your money to pay off the people with all the guns and power. Nowadays, everything is for sale, everything can be stolen, and nothing is what it seems.

That's why I have a lot of faith in Bitcoin. Even though we haven't figured out how to make a good vault, there's no real place for crooked bankers and powerful organizations.
What prompted you to use the HN design, and not use something more "modern"?
It seems to be about the _assumption_ that they were unencrypted.

We mail out encrypted DVDs semi-regularly. Works fine.
Projection-Based Olfactory Display with Nose Tracking
They seem like really easy problems to fix, too.
caveat emptor is the only recourse until enough people deal with bitcoin to make laws about it.
she did not return because of his success, she returned because he was no longer bringing shame upon his family. As the article mentions, there many taboos in their society, there is the caste system that provides separation (even tint of skin can) and of course separation of sexes. So his single minded pursuit made life untenable for her where they lived, it even drove off his own mother. You did note that she merely went back to her mom, she didn't run off with another man. Essentially, she was waiting till he either gave up the pursuit or succeeded, I am quite sure they would be together regardless.

Hell there is odd separation in the states amongst some of the workers from that country. You can see it in the groupings, who has lunch together, those who walk apart or turn down a hall when meeting
>> doesn't seem like a game-changing difference to me

The big difference here is that there is women selling these in private to other women. No man behind a counter. When the women come together about this, it may end up not being such a taboo, and they get advise on how to actually do this. So the game changer here isn't the price, but the community and independence for the women evolving around this product.
Why can't they mass scrape your service, though? After all, what you built is essentially a very specialized REST database.

As for harvesting email addresses, I think you could solve that by using a CouchDB view, which is essentially a function that processes and returns JSON documents. In this case, it could just delete the "email" key and return the rest.

You would probably still need to block the direct access to the document via frontend proxy, since I don't think Couch allows you to specify fine-grained per-user permissions, which is definitively a drawback.

Alternatively, since you're already willing to send hashed versions of the emails (as Gravatars), you could just store only the hashes in the first place, and never commit the plaintext to disk.
The Bitcoin Icon Set: 100 Free SVG & JPG Icons
"I imagine that if this catches on, the larger manufacturers will likely just cut their margins to compete."

That'll will never happen because these village women have never been their customers.
By doing this, you've turned your local hard drive and the backups you made from it into an extraordinarily valuable object, thus massively increasing the incentive to steal it.

"But wait!" you say, "I shall use modern cryptography to protect my wealth from prying eyes!" Yes, and the thief in the night will use rubber hose cryptography on you.

There is a reason why the vast majority of people entrust their wealth to banks & not a safe buried under the floor of their house. I'm sure the BitCoin community will learn this truth about monetary systems at roughly the same rate as they've learnt all the others & probably the hard way given recent evidence.
I think it is you who is trolling.

There is lot of crapware on Windows (even in default installation) which slows down system a lot. Antivirus, toolbars, keyloggers...

Also Linux (and nix) in general IS FASTER*. Especially the filesystem operations and multitasking. I use Java and the same build takes 2x time on Windows.
Code Complete is really great. I also recommend Clean Code. I started reading it before going to sleep, and it got me so excited I couldn't sleep. It was 4 or 5am when I finished it. All I could think about was refactoring all the code I had ever written.
"He fashioned a sanitary pad out of cotton and gave it to Shanthi, demanding immediate feedback. She said he'd have to wait for some time - only then did he realise that periods were monthly. 'I can't wait a month for each feedback, it'll take two decades!'"

Sounds like he got a pretty solid biology lesson along the way.
I found this diagram informative (although not comprehensive, and probably a bit politicised):
http://reason.com/assets/db/07cf533ddb1d06350cf1ddb5942ef5ad...

(via http://reason.com/blog/2008/09/24/new-at-reason-mike-flynn-s... )
I'm not very into BitCoin, so I have a question: To me, it seemed like everyone were saying that one should use an online bank a year ago. Why? What do you gain by having them in a bank?
Adding your enterprise to the list: http://bit.ly/africa-hackpad
Amazon AWS: New SES Endpoints And Creating SES Credentials For IAM Users
Every time a new bitcoin exchange opens, on the homepage one of the first things you see is that they claim that is "secure". And than things like this always happen.
As I recall your account was cancelled by Joyent for abusing the support staff and you were offered a refund at that time of your account.
Their lawyers probably told them that saying "Sorry" is an admission of corporate and/or personal liability.
You may also find this real-life story inspiring ...

http://en.m.wikipedia.org/wiki/Dashrath_Manjhi

One man's epic struggle against the landscape, to not let others suffer as he did.
Hmm, I wonder if this could be used to find a decent pub whilst in a strange city?

It's always a problem when you're on holiday and you know there are n pubs around, but you don't want to spend all your time going around and checking each and every pub 'cos that gets tedious. The question is - how many pubs should I visit before I give up?

As a general rule is this saying you should visit n/e pubs and then just pick the next best one?
I would think the decentralised approach would always be able to compete when we factor in transportation costs which usually make up a pretty significant percentage of the actual sales price with centralised mass production. Much more of the money stays in the local economies too.

http://www.mapsofindia.com/top-ten/india-crops/cotton.html

Even if this particular business model would "only" work in India it'd be a success.

I'm still in total awe, Mr. Muruganantham is a true hacker.

http://www.catb.org/esr/faqs/hacker-howto.html#believe1
I wasn't planting a straw man, I was just pointing out that it's possible to write subtly broken C++ (or prolog, or ADA, or whatever) code as well.

Maybe it would make it harder to introduce this kind of bug (after all, goto error handling could be considered a hack because C lacks proper exceptions) but no language is bug-proof by design. If you're writing security-sensitive code you should have complete code coverage with tests. If you have that you could implement the library in assembly for all I care.

I'm not attempting to bash C++, it's a language I use from time to time. And I agree that RAII is a convenient patter that I often yearn for in C. It's just that in my opinion in this case (and in the "goto fail" bug of late) that's not the core of the issue.
Well, yeah.

However it has also been the game with patents to use as obtuse and as confusing and as little detail to get the patent while making sure people can't reproduce it.

So yeah, we get the worst of both worlds: money extraction of exclusivity and lack of understanding that patents were supposed to solve.
Hassle.com

We take the hassle out of finding and booking a cleaner. We are currently in the UK but we have big plans and we want an amazing tech team. If you want to be part of a rapidly growing tech startup with big ambitions, come and join the team.

Hassle.com is written in Ruby using the Ruby on Rails web framework along with multiple integrations to other external services. We move fast making daily changes to the site to improve the experience for our users. The Hassle team is London based.

We are looking for:

Senior and Junior full stack developers with the following experience: Ruby + Ruby on Rails, JavaScript, HTML, CSS

Would also be good if you have had experience with Angularjs and building REST API’s

You will help to build, test and support new features along with optimisation and support of the existing site. You must be keen to get stuck in, love solving problems, have good initiative and enjoy working in a team. We will support your continued development and offer opportunities to experience and learn about other aspects of startups outside the tech environment.

Apply at hassle.com/tech_jobs
I would love to take a glimpse on the Basecamp code, dhh ;)
Also, as someone researched below, the price now is between 10-25 R. But as someone else said, I think the involvement of the women in production and distribution is the real game changer.

I also liked his quote that no person dies of poverty, but from ignorance.
I like the idea of using Glacier as a Backup solution for ones devices. However one thing worries me: Looking at the Glacier pricing table[1] there is a section 'Request pricing'. This looks to me like there is a price of 5.5 cents per 1000 upload request. Considering Arq will upload multiple times an hour, this looks like it could amount to quite a bit. With two uploads per hour I arrive at 5$ per month, but there could be significantly more uploads. Even 5$ would already be a 50% price increase compared to only the storage pricing for 1TB of data.

Could anyone clarify whether my calculation is wrong?

[1] https://aws.amazon.com/glacier/pricing/
Need to Cover Up a Bad Tattoo
I am not trusting any crypto-currency site anymore unless they have an active pen-test team employed.

We know good security is difficult but this is getting ridiculous - it has to be a priority.
After spending more than 6 years in china, I can see the USA is not really that bad on those two points.
Is "github" for designers with badges and challenges.
We already do have such vaults. At least most traditional banks in Europe have storage vaults for their clients. e.g. you can lend 1 usually quite cheaply, e.g. 60eur / year.

A bank teller is always present while you're making a withdrawal, and you need 2 keys to open your vault. 1 key from the teller, and 1 key from you.

The chances of this kind of vault getting robbed is very, very slim. If you're worried about that, you can BIP38 encrypt your paper wallet's private keys, so its impossible to use them even if paper itself is stolen.

There is also some chance that the vault will be struck by a flood, earthquake etc. For that, I recommend using a USB as a back-up, where the keys are encrpyted using truecrpyt etc, and the physical drive itself being kept in a very secret location, ideally located in a different city than the bank vault itself, so that the chances of being affected by the same disaster as your vault is minimized.

This is almost a failproof setup in my opinion (you can worry about loosing your Bip38 or truecrypt encryption keys, or what happens if you die etc -- there are good ideas about how to deal with these kind of circumstances as well, e.g. write a hint for BIP38 key which only you or your family may understand on the paper wallet).

So best place to store your wallet might very well be your good old bank, ironic enough.
I'd significantly disagree on this - speed reading as the norm to ascertain value and then, re-reading especially on the internet worlds and with randomness of shared links.

It's sensible to read in depth for when we know / establish value, but in general, better to skim and identify / perceive value or added knowledge, then take the plunge.
Distributions can't take advantage of the system libraries exception, it only works for software that isn't shipped together with OpenSSL. The whole GPLv2 clause:

"However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable."
Are you a bot or something? You posted the exact same comment 4 times.
Actually, it's being "ressurected" through the work of ocamlpro & ocamllabs. The tooling in particular has improved a lot in the last 2 years.
1. Open bitcoin bank
2. Receive deposits
3. Claim you have been hacked
4. Run off with everyone's money
I also appreciate this man's efforts. But I slightly disagree with your view point. He never tried to build a startup, he just tried to solve a problem in our society. All these news about businesses and startups corrupted our mind, aren't they?
Well this is ironic. Here is Bill Gates' letter to the Homebrew Club, dated February 3, 1976:

To me, the most critical thing in the hobby market right now is the lack of good software courses, books and software itself. Without good software and an owner who understands programming, a hobby computer is wasted. Will quality software be written for the hobby market?

Almost a year ago, Paul Allen and myself, expecting the hobby market to expand, hired Monte Davidoff and developed Altair BASIC. Though the initial work took only two months, the three of us have spent most of the last year documenting, improving and adding features to BASIC. Now we have 4K, 8K, EXTENDED, ROM and DISK BASIC. The value of the computer time we have used exceeds $40,000.

The feedback we have gotten from the hundreds of people who say they are using BASIC has all been positive. Two surprising things are apparent, however, 1) Most of these "users" never bought BASIC (less than 10% of all Altair owners have bought BASIC), and 2) The amount of royalties we have received from sales to hobbyists makes the time spent on Altair BASIC worth less than $2 an hour.

Why is this? As the majority of hobbyists must be aware, most of you steal your software. Hardware must be paid for, but software is something to share. Who cares if the people who worked on it get paid?

Is this fair? One thing you don't do by stealing software is get back at MITS for some problem you may have had. MITS doesn't make money selling software. The royalty paid to us, the manual, the tape and the overhead make it a break-even operation. One thing you do do is prevent good software from being written. Who can afford to do professional work for nothing? What hobbyist can put 3-man years into programming, finding all bugs, documenting his product and distribute for free? The fact is, no one besides us has invested a lot of money in hobby software. We have written 6800 BASIC, and are writing 8080 APL and 6800 APL, but there is very little incentive to make this software available to hobbyists. Most directly, the thing you do is theft.

What about the guys who re-sell Altair BASIC, aren't they making money on hobby software? Yes, but those who have been reported to us may lose in the end. They are the ones who give hobbyists a bad name, and should be kicked out of any club meeting they show up at.

I would appreciate letters from any one who wants to pay up, or has a suggestion or comment. Just write me at 1180 Alvarado SE, #114, Albuquerque, New Mexico, 87108. Nothing would please me more than being able to hire ten programmers and deluge the hobby market with good software.

Bill Gates

General Partner, Micro-Soft

---

48 years later, it turns out that the following response highlighted the answer:

http://www.digibarn.com/collections/newsletters/homebrew/V2_...
There's already Springer Protocols (http://www.springerprotocols.com/), not free, but IMHO, universities and research facilities already have it better than whatever free alternative may come up in the future. This is not the sort of project that requires only upfront costs, this is why I unfortunately don't think it will live for long, if it ever gets completely funded.
Years ago, when I hadn't yet completed the switch from the lab to computers, I used http://www.protocol-online.org/ from time to time, which is, in my understanding, a similar project. Though checking it out just now indicates that not much has been going on there for the last couple of years. irollboozers already mentioned http://openwetware.org/wiki/Main_Page as an alternative project with a wiki-style
interface. Those sites attracted some participants but it seems they never really went mainstream - should ask the wet lab people about this to confirm.

As I'm working in Next Generation Sequencing (NGS) now after a stint in the software industry, I'm actually shocked by the lack of standardization and documentation in the wet lab, which makes a thorough statistical data analysis so much harder. Few use electronic lab books and even fewer associate those with experimental data.

I think that is what is really missing, a push to easy-to-use electronic lab books that use open, machine- and human-readable formats and a straightforward way of associating these with the generated data. Upload these documented and annotated raw data to a central repository and you create a computational biologist's wet dream.

But that would require a huge amount of work to create the necessary ontologies...
Scientists revive largest virus yet from 30,000-year-old permafrost
Abstract Management for Associations. Solutions for complex symposia or panel sessions. Skilled managers available to administer the entire process for your organization. A full range of support options ensures a professional experience for your membership.
http://www.owpm.com
38% discount + 10 new jobs per machine. And each additional woman who can now afford to use them, is one more woman who is now more likely to be able to hold down a job or complete school.

I also don't think it's as simple as cutting margins. Note how much of the issue is/was down to social taboos and people being embarrassed about even things like buying them from men in the local shops.

Eventually, sure - as it says in the article he does not see himself as competing with the big manufacturers, but as opening up new markets for them. But if they make inroads it will not not be a bad thing.
Or you just get menstruation cups? Might be a bit more expensive initially but cheaper longterm and a lot more environmentally friendly. http://www.ruby-cup.com/en/
I predict wearables, specifically smartwatches, are the next huge consumer category. The tipping point to
mainstream will occur when the fashion of the watches catches up with the technology.
I saw your submission on /r/startups and was going to suggest the tool I just released but here it is http://www.castbin.com/casts/ruGwZPcv

Do let me know your feedback.
The Price of Fixing One Bug in Our Programs PVS-Studio and CppCat
Did you mean

http://en.wikipedia.org/wiki/Nelsonic_Industries

?
Buy an Arduino Ethernet and make it respond with HTTP/1.1 418 for every request ;).

Or get it to local Hackerspace, they might make it actually work ;).