skysight-inc/HackerNews huggingface dataset:
A backdoor or 0day for a Huawei router would be of limited use to the NSA, because the control ports are behind firewalls. Hacking behind firewalls would likely give full access to the target network anyway, making any backdoors/0days in routers superfluous.

But embedding themselves inside the support infrastructure would give the NSA nearly unlimited access to much of the world. Huawei claims that a third of the Internet is running their devices. Almost all of it is under support contract. These means a Huawei support engineer, or a spy, can at any time reach out through cyberspace and take control of a third of the Internet hardware, located in data centers behind firewalls.

So the companies that use Huawei's products put the control ports behind their firewalls, but somehow are allowing unrestricted access through that firewall to/for Huawei's support mechanism?

Is that common?
We use RDS (they now support Postgres) and Elasticache.

The pricing seems reasonable for the performance (I've not done benchmarks if I'm being honest), and you get to treat all your EC2 instances as expendable.
Kickstarter backers are going to get everything they paid for.

What did backers think was going to happen? If the project succeeded, it was going to make money. Should they be prohibited from making money?
That is so wrong it's not funny. Call? Isn't our use of computers predicated on the notion that we don't want to do manual labor?
what happens tax-wise if I buy $100 of Euros and in a month I sell them at $150?
Related: This tool:

https://github.com/dbro/csvquote

will convert all the record/field separators (such as tabs/newlines for TSV) into non-printing characters and then in the end reverse it. Example:

csvquote foobar.csv | cut -d ',' -f 5 | sort | uniq -c | csvquote -u

It's underrated IMO.
This isn't about bugs in the sense of "code that is incorrectly written for what it was meant to do." It's more about bugs in the sense of "code that was written correctly, but which does not do things it should do because you either didn't think of or didn't care about them when you were writing it." It is easier and often simpler to allow vulnerabilities than it is to prevent them.
This presentation echoes a lot of what we've seen. For what it's worth, we scan a lot of Clojure apps and find a lot of the types of vulnerabilities Aaron/John are talking about. Feel free to run a free scan at https://www.tinfoilsecurity.com if you want to try it out. :) Would love feedback.
Just to make sure I'm reading this right, the upfront reservation fees are higher, but the reserved hourly rates dropped a good bit. It's cheaper over the duration of the reservation, but you owe more of the term upfront.

Given this tidbit, might you reserve an instance now, pay the lower fee, but still take advantage of the new hourly rates on April 1? Or are you locked in at whatever rate your reservation is for?
The Secret, Fast-Growing World Of Influencer Marketing
Would it work if the file was encoded with UTF8 or UTF16?
Twitter tackles Turkish takedown
> Just the fact that people need a ton of shell extensions to make it barely usable is a problem in itself

Other than 'native window placement' I find that pretty much every extension I have installed is a customisation where I want something to work in a particular way. It's not that Gnome is unusable by default, it's just more the minimal set of features that everyone uses.

For example, including a time tracker on the top bar by default would be wasteful, as would a timer. I want both of these though, so I go to a website and click a button and they work.

However, the lack of proper sandboxing / permissions breakthrough for the extensions is a real problem I don't believe has been solved yet.
Sure you can, just got one of them with dnsimple.
This news is about exactly one year old. Is there another game coming? (Edit: I found the 7th game here: http://jsb.cs.uec.ac.jp/~igo/eng/, it has passed, but I can't find the result.)
Let's just hope they all stay in business so we don't end up with only one player in the market...who can then jack up prices at will.
can you please write about this? I'm a 20-something looking to create a SaaS for Enterprise customers, and I'm constantly coming up dry. There's a lot of literature revolving around 20 bucks/month for a simple web app but pretty much lost and overwhelmed by the technical language behind most Enterprisey websites and the sheer number of features that seem dumped into a product which confuses the software engineering inside of me.

I've begun researching Oracle Partnership and Salesforce, but even then, I am just lost as to how I can acquire my first enterprise customer because I don't know what they want and what they are looking for.

I understand that enterprise sale cycles is long and I've posted numerous questions about hacking my way into this space with little response.
You are assuming that the left hand knows what right hand is doing.
Didn't realize continually updating a game these days is considered "never finished". Minecraft is more of a game than anything on Facebook.
Luckily he doesn't have authority over that as their CEO. He addressed the things he does have authority over.
Hmm, the micro instances don't seem to have changed ($0.020/hr).
Also Amazon's Gdrive competing equivalent is cloud drive.
Remember, you get what (the reliability, service) you pay for.

And what happens when AWS is no longer a revenue source?

Shareholder (owner)'s decision: cut it.
Fiction: Market Forces
I don't think you're giving his argument enough credit. Since he's a pro, he probably knows what he's talking about.

I've tried Magic-Plan, and yeah, it was frustrating and too inaccurate to be useful.

Start at the use case: Why would you need this? As a home-owner who's done it, I can't think of any except remodeling. Wether you're replacing the carpet, getting rid of a half-wall, putting in a new beam, measuring out a bathroom for a remodel, you need good, accurate measurements for this stuff.

If just eyeballing it was good enough you wouldn't need the tool in the first place. Guess. Look at your 1' floor tiles, count 'em, and you've got a probably better read on everything.

What would've really helped me out when doing this was a great, simple to use tool to help me build floor plans. Most of what I found on the App Store for the iPad was pretty shoddy, or just difficult to use effectively. Like I want snap-to-grid. But once I put a wall in the exact location I want the option to lock position. Or lock length.

So I dunno. I feel like he/she has a point. When approaching this problem, and needing to make a compromise, you don't compromise on accuracy or you've made your tool irrelevant. If they'd just focused on a really great floor planning tool that would have been the better compromise.

That said I haven't tried it yet, so maybe that's there. I'm gonna give it a shot.
NASA spots Washington mudslide from space
That was good info, thanks for sharing.
I think you see a lot of negative reactions about WordPress on places like HN because hits a bitter-spot (anti sweet spot) for most web application engineers:

* You don't start interacting with it via code or text files -- you administrate it through a series of web forms.
* Customization is done through plug-ins rather than composing familiar framework abstractions
* If when you do decide to look under the hood, it's not organized like any familiar back end from the last 10 years and will take you longer than usual to figure out
* Oh, yeah, PHP

It's pretty hard to argue with its success for people who aren't webapp engineers, though. And even from the engineering standpoint, after I had spent 2-3 years working on projects that used it as a basis for a platform, I came to a grudging (if tepid) respect for it.
Expressing sorrow for causing hurt isn't the same as taking responsibility for it.

The very first action should be an apology, but that hasn't happened and doesn't look like it'll ever happen.
I agree. The controls are a bit sluggish, but the lag is minimal.
Isn't it? Amazon's server team is way better than your company's.
Amazon RDS Pricing Effective April 1, 2014
Would you believe him even if he did? If this whole event caused him to change his stance on gay marriage, it would probably be the wrong event to do so. If Brendan decides to support gay marriage it should happen because his values have changed, not because people are mad that he is a CEO who doesn't support gay marriage.
What do the other asteroids call him, the Lord of the Rings?
It's hard to make a comparison like that because Go and Chess operate on fundamentally different models. Chess is about capturing a specific piece and putting your opponent in a position where they have no options but to lose; to that end, it's a war of attrition where players slowly lose resources until the game is over (note that I do not play chess at any significant level).

In contrast, Go is about capturing territory by fencing it in. Placing four stones on the board is like placing four free fenceposts; you can't really call it a tangible resource like a pawn, but it gives you more of a structure and gives you some influence over the rest of the board.

It's possible to remove resources from your opponent in go, since you can surround pieces and capture them. But it's not really an attrition thing like in chess; it's more about territory and control.

Trying to make it a numbers game and saying "four stones is 1/45 of your expected endgame material" isn't really relevant to go, because the position of the stones matters so much more than the number. If you have four more pawns than your opponent in a game of chess, that's pretty clearly an advantage; if you have four stones in a totally useless area of the board, or four stones in a really useless configuration, then they're not helpful at all.
Which companies have CEOs that have the power to prevent anyone from marrying?
we have many customers on AWS, ec2 or compute is about 70% of the average bill.
He just wanted to take an opportunity to "express [..] sorrow at having caused pain."

Eich does not regret his actions, he's just sorry that you felt pain because of the things he did. Classic business-ese non-apology.
To be fair, he explicitly asks for being held accountable on those grounds. That, you usually don't do if you are just talking about your "best black friends".
In 2008, when Prop 8 was on the ballot, Obama was for civil unions but professed to believe that marriage is a sacred union between a man and a woman. "I'm not somebody who promotes same-sex marriage, but I do believe in civil unions."

http://www.youtube.com/watch?v=N6K9dS9wl7U
You're locked into whatever rate your reservation is for. This is why you see rate fluctuations on the marketplace for the same instance type. It's also why a 3 year reservation may not make sense.
It never left

https://en.wikipedia.org/?title=Z/OS

It's just not cool
Not yet, but I've been meaning to try it out. It sounds nice.
This, except that it applies to all managers not just dev managers.
Tell HN: Pending comments are now per thread (and off by default)
For those who missed the change of plan:

pg 4 days ago | link | parent | flag

Pending comments are now per thread, or more
precisely per item tree, rather than sitewide.
That was the original plan, and it turned out to
be only a little more code. The moderator (who
is not me) will turn pending comments on as
needed when conversations turn nasty.

That doesn't happen on most threads, but it does
happen on some, and pending comments may help
fix the problem. I'm not sure it will. The
moderator will have to experiment to see what
works. But since the code was slightly
complicated I wanted at least to get the initial
version done before I left.

https://news.ycombinator.com/item?id=7449857
I disagree with this:

> when you're developing a site, you want caching disabled on that site

I don't know why you say that. I only want caching disabled if I'm debugging something I think might be caused by caching.
Let us hope that RDS prices also drop as a result of this. It's enough of a value for us at the current price rates to be happy with it, but there will need to be some decrease to make sure that it makes financial sense over straight self-managed EC2.
It really wouldn't have mattered if he weren't. The Air Force officer corps largely consisted of careerist sycophants who wouldn't have accepted anything that bucked the conventional wisdom of Bigger-Higher-Faster-Further.

We can speculate as to whether Boyd could have been even more of a superman than he already was and what he could have then accomplished. He was able to get the ear of incredibly powerful cabinet members and was successful at pushing projects through an uncooperative and actively hostile Pentagon. It's just that the weight of the status quo was just too huge for even him to move. It's not like he could fire every single general that was in his way, though he did manage to get at least one that I read about, though he never made general himself.
Are you finding that you are getting better at asking the kinds of questions whose answers identify potential problems that would have otherwise only been apparent after you had accepted the job? It's just possible that this might be too much to ask, especially if the problems are sufficiently different every time. The answer to the 'is it me' question may quite possibly have less to do with your compatibility or suitability but may have more to do with 'diagnostic skill', in which case, perseverance may just pay off as you get better at it over time.
Haskell: What is foldr made of?
The point is that generally people in management can be assumed to be doing their best.

Yes, but people in general judge themselves on their intentions while judging others on their results.

Part of maturing is figuring out how to not do this. Until that happens, it's easy for someone to find faults with everyone everywhere.

For me, I'm reminded of the times early in my career where our marketing people were making what I thought were the most boneheaded moves I could have imagined. One project in particular seemed especially bad and like we were flushing marketing dollars and IT resources down the toilet. That project ended up being responsible for 60% of our business for several years. From that, I learned to fulfill my role to the best of my ability and always respect the opinion of experts in other roles. They might not bat 1000, but I don't either.
you should never try to parse CSV yourself

Why? Writing a correct parser is not significantly harder than figuring out how to interface to an existing parser library, and allows cool things like heuristic parsing of malformed files.

OTOH it's shocking how many people can't write a correct CSV generator, even after being explicitly told what they're doing wrong (which is always either "you need to put quotes around the data" or "you need to double any quotes that are part of the data") and given examples.
The king who leads the charge dies first.
Congratulations for making out that much from the voice-over on the video. I could barely understand a word she was saying. Sounded like a cat on helium being strangled.
If you're able to set up a service that risks a high bill, but cannot set up something that turns an email into some other action (anything from a text message to automatically shutting down your service), I don't think the limitations of AWS are the problem...

(Having said that, AWS could really do a lot better with it's notification targets than just email.)
Unless the support staff use screen sharing software for doing support, and what was witnessed was an unannounced support session?
SELECT * FROM PLANS WHERE HOW_TO_RULE_WORLD='1'
It's kinda sorta specified in English prose. I wouldn't call that formal, though.
Just use Spotify, choose an artist you like and generate a radio station from them. Then it'll play you new related artists, and the original one you chose.
> How does this effect your privacy? If you put your own router between your machines and their device, sure, their device can see the WAN interface & IP address of your router, but it can only access your LAN like every other machine on the Internet at that point, if you have your router do NAT. (Which is the point of doing this.)

To clarify, I meant putting your own WiFi bridge or access point behind Verizon's router. (This is what was suggested at the bottom of the original article.) If Verizon has total control over their routers (they do), then using your own WiFi won't matter.

The way to get more privacy is to replace Verizon's router with your own, or to nest your router behind Verizon's.
RDS prices dropping too.

http://aws.amazon.com/rds/pricing/effective-april-2014/
And it's his right as a private citizen to have his own opinion on the matter. That's why people vote, because they don't agree on all issues.

That's totally irrelevant with respect to what he'll do as a CEO. And, last time I checked, prohibiting your employees to marry, was not in a CEO's powers (or responsibilities).
Preview of Docker Performance Benchmarking
A little luck and a little experience. Plus 4 years of community growth.

I prefer not to say the site if you understand.
mind. blown.
Sure - but I'm assuming RDS uses EBS under the covers...

I meant rather that is there any other option for persistent data on AWS?
I absolutely despise this sort of dissection of expressions of regret. It's poisonous and never raises the level of discussion.

I have serious questions about the sincerity of the motives of people who do it.
Sprint to launch HD Voice calls nationwide in July
I'm pretty sure the intention behind something like this:

(def a-password (-> pass
(hmac server-stored-key)
(scrypt-kdf work-factor))

is to prevent all information necessary to calculate the stored hash being on the same system where the hash is stored. By HMAC'ing and not storing that key in the database (but on the app server), you now make the attacker pull off two attacks.

You could replace HMAC with encrypt with AES (or scrypt for that matter) to get the same practical effect.

Edit: clarification
Thanks, good sir! This is exciting!
If you can get something to monitor your billing rate, you might be able to get PagerDuty to call you if your billing rate goes over x per hour.
We picked a good time to start using AWS! Nothing but positive things so far.
I too, took some punishment for making a joke. HN is a dead serious place, I guess.
That makes sense, thanks for the clarification.

Bummer, though. We just reserved a multi-AZ m3.large RDS instance last week. I wish AWS would take up Google's system of graduated price reductions over steady run duration.
It's only 300% for the first TB in S3. It gets progressively cheaper after that.
would you be less likely to fund tech-based projects on Kickstarter in the future?

No. Why in the heck would I do that?

What if the project's creators pledged a no acquisition policy?

No, that would be stupid.

How could that even be enforced?

More to the point, why would anybody even think to do that?

What, is everyone who contributes to a Kickstarter supposed to be operating under the belief that Real Life is some anti-capitalist-hippie-commune-love-fest where the companies that raise on Kickstarter ha ve to forevermore forswear the profit motive? Bollocks.

OK, I know nobody (where by "nobody" I mean "all the hipster wannabes") likes it when their favorite indy band signs with a major record label, or when their pet Open Source project becomes the seed of an evil capitalist for-profit enterprise. But ya know... they'll get over it.
If you blame management every time, you'll never take responsibility for your own actions.
A ‘Rebel’ Without a Ph.D
He is sorry like the NSA is sorry you found out what they've been doing.

Brendan Eich doesn't just dislike gays getting married. He hates the concept so much he officially donated to prevent it from being possible.

I'm sorry, but I don't sympathize with the argument that he's "entitled to his opinions," because it's more than that. Nevermind that he's now CEO of Mozilla.

(I personally don't care if gays can get married in the eyes of a church or not; I care that gays are fundamentally unable to get the same benefits as other people.)
You will probably have a higher chance of developing technical skills if you take some time to study and code during your free time. You shouldn't depend on your job to train you on new languages or frameworks. There are a lot of things you and I don't know and we won't have time to learn about them while at work.

Also being a developer isn't just purely coding. There's the ability to write legible code, write tests, know what to use when, know how to read code that you didn't write (or even in a language you aren't a master of), find the cause of a bug in an efficient way. You need to be able to talk effectively to non-technical people to figure out why they think X is a bug or how Y is really supposed to work. Those type of skills kinda evolve during your work hours but you have to be aware about improving on them.

I think if you don't spend some extra time programming you very well might grow stale. Years will pass by and you'll realize you want to get a new job but you don't really know that much beyond what you did at work.
Or just google for "ASCII table" and open the first hit:

http://www.asciitable.com/

But your link does have more in-depth explanations (including historical info) for some of the control characters.
Great post Rick! I'm thankful that companies like Comprehend led the way for enterprise companies at YC. After my batch (S2013) and the most recent Demo Day, I think it's pretty clear that YC provides a lot of value to enterprise startups.

For any B2B founder wondering if YC is a fit for your company, don't let old stereotypes get in the way of applying. YC is not just consumer. It's not just 20-year olds (I was 35). YC is a network of the smartest, most passionate people you've ever met.
I wish the cost for PUT requests would drop.
Seeing that we can use top notch computer power for cents per hour these days, the more trouble I have with Apple selling an overpriced generic computer for a few $K.

In a few years from now, we will laugh at ever having owned a power horse of a computer - slurping electricity and wasting space. "And you had that in your living room? AHAHAHA" Instead, we will have thin clients hard-wired to a Cloud-vendor for a fraction of the price and effort.
Funny last night found my Walmart "dumbphone" (rebranded blackberry?) has a Java version of Google Maps that's actually useful.
"My ongoing commitment to our Community Participation Guidelines, our inclusive health benefits, our anti-discrimination policies, and the spirit that underlies all of these."

"...and in the meantime express my sorrow at having caused pain."

Ouch, how can somebody hold two opposing thoughts in their head at once? That's basically a denouncement of his own personal efforts.

At this point, the best thing he can do to level set things, is to make some equal and public donations to same-sex marriage causes.

It sucks when your actions have consequences...especially when those consequences hurt other people.

"At the same time, I don’t ask for trust free of context, or without a solid structure to support accountability. No leader or person who has a privileged position should. I want to be held accountable for what I do as CEO. "

And that's exactly what's happening. I hope he keeps getting held accountable for participating in the oppression of a minority group until he takes substantive steps to make public amends.
I think this is 95% satisfactory.

It's unreasonable to demand that someone change their mind about something (and would you believe it if he claimed he had?), but it's imperative to be sure that his personal opinion will not bleed into his executive function.

He knows he's outnumbered, and on the wrong side of history. But he recognizes that he can't change himself on demand. It's the best we can hope for in an honest person. Or, at least, it's the first step.

Vigilance, however, is warranted.