skysight-inc/HackerNews huggingface dataset:
It looks like this change has more to do with XSS than the "big" exploit.

The more serious fix occurred here:
https://github.com/isaacs/st/commit/6b54ce2d2fb912eadd31e2c2...

And here:
https://github.com/isaacs/st/commit/6d6100eec8b19e2774a6f2bb...

With some icing on the cake here:
https://github.com/isaacs/st/commit/8b2f212f64b762e351f311f4...
I really struggle with some of the thinking on HN.

If anything I might buy the argument that Jobs was a huge control freak and that's what drove him to do this more than anything else, but how do you think this went down.

Jobs really didn't like having his engineers poached because it disrupted continuity. So he said to himself ... what am I gonna do? what am I gonna do? Offer 2x whatever Google is offers? Noooo ... that would never work. I need to call up Google and threaten a poaching war?

I'll go with Occam's razor. The simplest explanation is the best.
But I bet you wrote more, more accurate, and more advanced calculus than he did, and you wrote it the way Leibniz intended. :)
Stealing technological secrets is older than you might think. China lost its monopoly on silk production and trade with the West after Byzantine monks smuggled silkworms out of China using their canes, defying an imperial edict forbidding such a thing.
> proper career track for all you staff.

That forces concepts which are nearly orthogonal in these types of companies (duties performed vs. value-added) to be artificially commingled.

While you could theoretically say that you can fix this by inventing enough job positions to be able to give the most-qualified the best wages, what really would end up happening is that you'd have a unique job position for every person (or in other words, exactly what you'd have without the union).

As a practical example, consider placing your union idea in the context of the NBA. "NBA Point Guard: Paid $11MM". But Michael Jordan was worth far more than $11MM to the Bulls, while even in 2014 Jose Calderon is not quite worth that much to the Mavericks.

So what do you do, split point guard up into "MJ-tier Point Guard: $33MM" and "not-quite-average Point Guard: $6.7MM"? Of course not; you negotiate with each player individually.
I still use links pretty regularly. Not to the exclusion of modern browsers of course, but sometimes it's nice to read longer articles as actual text without all the fluff, and to be able to stop reading and then continue a session on another computer (w/ tmux). The only thing I find mildly annoying is that HN comment threads get flattened.
Was FISC judge misled by gov’t lawyers in evidence-destruction spat?
Not necessarily. For it to be true you would need to make the following assumptions:

1) Perks-related expenditure have a linear effect on happiness
2) Productivity is a linear function of the number of workers
3) The caliber of the 12% additional workers you'd hire after cutting costs is comparable to those of the workers you had before
4) Happiness only affects productivity, but not retention (turnover costs companies a lot of money in lost productivity)
5) There are no positive externalities caused by the presence of happy employees

1), 3) and 4) are debatable -- in many cases, the ability to make employees happy (and thus attract/retain strong performers) depends on the company culture, and having perks is an important part of it. This also means there are probably a lot of relatively cheap and cost-effective perks an employer can provide that can make employees much happier (fun company offsites, flexible hours, etc.).

2) is somewhat true for some industries, but tends to be false for knowledge workers like in the tech industry, where what you want is better quality output as opposed to simply more output. Also relevant is Brook's law ("adding manpower to a late software project makes it later"). Teams do not scale up linearly because it requires additional training, management overhead, and makes communication and coordination a bit more complex.

All these are fairly straightforward, but I think 5) would be interesting to investigate: from my experience happiness and enthusiasm tends to be contagious, and it's probably a good thing for a company to try to get a core of really motivated employees that can inspire others.
But unions almost always concern themselves with such things. I may be attacking a "strawman" (ergo, how virtually every union on the planet operates), but humorously the salvation is just as much of a strawman, no?
Great write up, Andrew. Thanks for the link!
It's only getting worse. Some DA offices are asking for DNA samples from minor offenses ( Misdemeanors ) for a decent plea or no time. When your only job is to win and put people away you're going to do whatever you can to accomplish this. It's the same as any company trying to dominate a particular industry or become the best. Our Justice system needs another change similar to the change from punishment to rehabilitation.
A large part of the $45 is FREE Worldwide Shipping.

I think that's a disingenuous use of the word free. It's more like subsidized worldwide shipping, or normally-priced worldwide shipping paid into by everybody (even locals).
Obviously going for this years ignoble in economics then :-) to be followed up by an in depth proof that water is wet and kittens are cute.
It renders a bit weirdly in w3m (indentation is shown as * and plusses and such), but apart from that, it seems to work just fine, so there is probably little reason why it shouldn’t work in any other browser that understands basic HTML?

(posted with w3m, written in a linked-in Emacs tab…).

Edit: Screenshot: http://chubig.net/t/w3m-hn.png
I've yet to see a proposed redesign of HN that doesn't spoil the two best things about it: its focus on content and its information density. To me that suggests that its current design may be a sort of local optimum.

That the site looks old and minimal seems to me an advantage.
IS RA HELL TRY TO ESCALATE WW3
This is explains all the counter-intuitive formulations and statistical errors in the paper; thank you for highlighting it.

Really, though, this sort of thing happens every single time an _Atlantic_ story is posted.
Do you realise that although you "lost 2-4 years of your career" you created a few dozen higher quality lives?

I think you have achieved a major life goal already that most in Silicon Valley do not. I don't know if HN is the place to praise such deeds, but you did your small part in hacking the world to make it better. Kudos to you, don't ever let it feel as a wasted effort. That's so wrong a way to think.

There are people who want to help others and their repeated attempts fail. You just went and did something that's working for 7 years.

That's a pretty successful startup in my book. It can't go viral for obvious reasons, but it's mature and stable. And you did it without HN :-)
It's also a very out-of-date take of what Huawei is. It is an Ericsson-sized infrastructure gear maker now. Not that that should make Ericsson complacent. They've been a target since the Athens Affair at least.
The incentives don't line up properly if the state pays because the lawyer is the decision maker in these cases. Unfortunately DAs are rather underpaid and so it would probably be a nonstarter to to make them pay the defendant's legal fees.
Adoption can be modeled to depend on ease-of-use driven by apparent need, influenced by a user's risk-appetite. But also popularity, being a differential equation, where it's rate of change is proportional to the number of users. So if the apparent benefit isn't there, most people being reactive, probably won't use something better, especially if it's as hard to get working as old Postgres... They use MySQL until Postgres demonstrates advantageousness.
In some of my not-entirely-sober states of mind I have sometimes thought of ways to eliminate prosecutorial overreach. (It's a problem outside US too.)

A very simple approach would be that for each count that the defense can strike off as irrelevant or spurious, they would also get to strike off any other charge of their choosing. That alone would make prosecutors extremely wary of bringing up random charges in hopes of seeing which they can make stick. They would need to have solid evidence for each charge or risk having the most serious ones nullified.

On the other hand, I'm not naive enough. The cure could well be worse than the poison it was meant to address.
Possibly the "wealthy" appear to be living hand to mouth intentionally. Inflation is a highly regressive tax on cash and savings that rewards hard/real assets.

Buying the most expensive house you can (barely) afford is a wealth building strategy. It's not without risk, but you have inflation on your side. Sitting on cash to save up for that down payment is an uphill fight against inflation.

As a parent of a 3.5 and 1 year old, I'm definitely a believer that our public schools are de facto private institutions. You pay your tuition one way or another for a premium product.
generate an imagemagick text label at a certain font size, then pipe it to identify -size , pull the width out of that and then use the result to calculate the required font size which you then use in a second textlabel

edit - or just generate a large text label to start with, then scale it to whatever is required
You might want to consider using pocket.

http://getpocket.com
Entrepreneurship 101: Say Goodbye To Your Boss And Start Your Own Business
> NSA workers not only succeeded in accessing the email archive, but also the secret source code of individual Huwaei products. Software source code is the holy grail of computer companies.

We need to open-source everything (soft/hard/firmware) and modify these business models.
Would adding pending comments encourage a more diverse and inclusive user base, or a less diverse and exclusive one? Not only diversity of opinions, but of gender and background? Is anyone talking about this?

In ecology and nature conservation a diverse ecosystem is encouraged as this ensures the overall health of the system.

Edits: I wonder what percentage of the 1000 Karma users are women? How about less controversial attributes: What are their backgrounds, Where do they reside?
It's a nice dream, but even if you had that power to go back and time you'd probably just make other mistakes.

There isn't an intelligence capable of designing big open standards like the web, rather they only move forward by natural selection, much like terrestrial life has.

In the end I think we've gotten some pretty remarkable things this way, remember before the web there was no such thing as cross-platform, instantly-available globally, and accessible to any person with any disability multimedia. Few people seem to recognize how much of an accomplishment this is: http://www.youtube.com/watch?v=uEY58fiSK8E
Feature request: Sort by distance. I don't live in SF so it would be nice to see things close to me first.

Edit: Also Facebook only sign in is a deal-breaker. I never use services where it's required.
Go to https://hightechemployeelawsuit.com .

If you were affected, you should have gotten a (snail-mail) letter.
We have gotten somewhere -- the web has become a decent program delivery system.

In the process it's degraded pretty badly as a document delivery system. If you start over I recommend separating those two projects.
This can be fixed. Exteme bowling! New rules!
Stuff like obstacles, special balls, pins, etc. could make it fresher.
Much better than pretty much waiting people to get a almost-perfect score.
I know I used to work at Holbourn and the contrast is amazing - fabulous Georgian buildings and parks you can see why baristers charge £1000 an hour.

I used to work in a building shared with one of the lesser law firms apparently they had complained to our CEO about the staff (of New Scientist) being scruffy and lowing the tone - being Journalists they retaliated by dressing even more casually :-)
How do you think Scott Adams made his money :-)
OK I understand now. I read this sentence in the article:

...suggesting that when he passes away, he’d like for his billions to go to Tesla’s Musk.

Although leaving your billions to X implies not leaving it to Y -- e.g. Gates -- that's not necessarily true.

And more basically, this is the article writer's sentence -- not a quote from Larry Page.

I was wrong. Thank you for helping me understand why.
As you say it's very wonkish and it's hard for me, after a relatively quick skim, to see how they're defining "liquid" and so forth. Now, it's easy for me to believe that there are indeed middle-class (because that's how "wealthy" seems to be defined in this paper) households who have bought more house than they can really afford which, combined with educational and other expenses, means that they are really living paycheck to paycheck. I can also imagine many other such households who don't hold a whole lot of cash or money markets but who have a combination of HELOCs, diversified stock and bond mutual funds, and so forth which give them a significant amount of buffer without resorting to liquidating retirement accounts. It's not clear from my read how such a household would be defined for the purposes of this paper.
How stupid of me, after following nnethercote efforts on his blog (https://blog.mozilla.org/nnethercote/category/aboutmemory/) for months ..
It's Not That Risky
I'm interested in using this for my (original) iPad. As time progresses, more and more websites cause the browser to crash. The latest example was when I tried to view the new apple iCar thingy on apple.com.

Never could get it to load.

I don't think that my tablet is a root kit magnet, nor that I'm inherently less safe. I just find that this hardware works well enough for most of my needs, except now for browsing the web, which I never thought would happen...
I personally have only just realised this issue as i've only just started to submit and use my account for discussion. But yes I completely agree, it would be nice to be notified of replies, up votes etc - something similar to stackoverflow's system would be nice!
There's an API from the search engine provider, Algolia:

https://hn.algolia.com/api
Property taxes aren't the big factor they are made out to be.

School quality varies greatly even within a taxing district, yet still highly correlated to location of high-income people.

This is because wealthier neighborhoods have less street crime,

more parental involvement in children's education at home,

more parental involvement in schools,

children who in aggregate are better fit for school success (general health and safety, other factors),

teachers prefer to work with (and burn out more slowly with) better-behaved students.

The way around these issues would be to randomize school assignment (with residential schools (rare), or bussing (common, with its won set of complications)
Screen writers and actors have a union, both fill some needs that apply to the rank and file but not to stars.

May be the model could work for developers?
I Am Tired of Hearing Programmers Defend Gender Essentialism
Buses I've been on in disparate areas of the UK [England, Scotland and Wales] have all [so far as I recall] had a coin receiving slot - you put the coins in, they are held between plates to enable counting. The drive activates a lever that deposits the coins (in a safe box behind the drivers security screen I think). The drivers don't get to touch the coins. No change is given.

I don't ride the bus very often, it's a bit too expensive. It seems either these are being phased out or you travel on buses in posher areas than I do.
It's just intended to be a fun hack that works surprisingly well, not a serious solution to the problem of providing support for older browsers.

Although come to think of it, if all the rendering is being done on the server side, and nothing but an image map is being delivered to the older browser it should be perfectly safe for these ancient browsers to navigate to even the most dangerous websites, provided that the server side component doesn't get hacked, because the server side component will be delivering nothing but safe images.
Like a limited-scope version of it
That's funny, because in Third-Party JavaScript written by folks from Disqus, they partially explain the lengths they went to so that they didn't disrupt the page loading. Of course, in turn Disqus does have to protect itself from the page using iframes, so there's room for junk in both directions. It's perhaps amazing the web works as well as it does, all tangled up across domains.

Hence the point of this image-rendering proxy. I'd be more interested in a proxy that does the reverse -- strip websites down to bare blue links on grey by any means necessary, including OCR of images. That could be fun. For a few minutes. ;-)
--Spoiler alert--

Someone revealed in that thread that you should never move down. I tried moving only up, left, and right and won easily, so the strategy is solid.
If I'm not mistaken, if the prosecution can't get a grand jury to indict, they can try again later (perhaps with a slightly modified set of charges). In other words, there is no "double jeopardy" for trying to indict someone. Maybe someone who knows for sure can confirm whether this is accurate.
5% of market value, 4-6% brokerage fees, ~3% transaction fees, ~1% in switching costs (double-rent), adds up to most of the home equity most people have.
Maybe I'm misunderstanding your comment, but I think kdbus does allow you to transfer ownership of some piece of memory to another process.
This article is painfully old...

cross memory attach landed in 3.2
http://kernelnewbies.org/Linux_3.2#head-a5e26c6275e85a5c9c41...

kdbus is coming, but its an entirely different implementation by gkh and systemd folks, its not using AF_DBUS sockets, its bypassing the net stack and using a char device.

a more relevant article on the current kdbus is
https://lwn.net/Articles/580194/
Someone was talking about lobste.rs
Tax wealth and capital rather than income. You want to tax gain in capital rather than direct income (just reverse the capital gains and income tax rates, and gains are realised when stock prices go up, rather than when you sell if your stock values are above a certain small number).
Google did similar proxying for mobiles back in the day. If you used Google's mobile search you'd often end up on pages via a proxy. They still do it now, or used to for Windows Phone 8 devices last I checked. Which is odd, since there's nothing restrictive about IE10 on a phone.

I wonder how Google's proxy would work in Mosaic or Lynx?
Credit cards aren't necessarily the best example as they carry horrendous interest rates relative to just about everything else in today's market. That said, they can paper over a very short-term cash flow crunch easily without costing too much. And, as you say, there are often many other sources of credit such as family, HELOCs, etc.

That said:

>they choose to spend to the limit of their income

I'd argue that this is generally not a good idea unless "spend to the limit" includes a budget for savings.
'Overwhelming majority' is speculation. Perhaps hundreds of millions in currency will disappear overnight.
You are describing "rich", not "wealthy". Income is not nearly the same thing as wealth. Wealth converts to income at ~5-15%/yr. Yet income doesn't quite convert conversely, because living costs money every yeat.
Well it depends if that teacher had inherited a property and some income producing assets from a parent or grand parent and have a pension from a former job (say 20 years in the army). They could be very well be wealthy.
No, not at all. I quit Google to work at a startup not because I didn't like Google, but because I felt a startup was a way for my compensation to more directly align with the value I could help create. And obviously my belief at that time was my "real value" was far higher than I was being paid at the time.

I really just wanted to dispute the numbers here, because I disagree that big tech companies are somehow more unfair to the employees than finance companies. Assuming there aren't illegal anti-poaching agreements, market forces operate in SV the same way they operate in the finance sector to drive up salaries of talented employees.

And it seems to me that if you want to strike off on your own (which is a risky but good was of generating "true value" for yourself), it is easier to do that in SV with a tech startup than it is in the finance industry.
Hiring more workers to improve the output ? Not working in every industry.
Does 'out of circulation' mean 'no longer valuable'?
Good post. If you are starting out, it's well worth listening to guys who tried hard and didnt quite get the brass ring. One trap that Zack and I both fell into is consulting. He had a lot of small contracts for a modest income, while I had multi-year contracts for a good income. I averaged $165K for more than a decade, but if you take out the health insurance, vacation/holiday pay, and don time, it's no better than a good paying job. In California it wont make you rich. And you can get trapped in older technology. The pay is good because no one else wants to do it.
> - How many founders do you all have?

There are four of us on the founding team — three of whom have some other obligations, and myself. I spend 90% of my day coding or working on product with our designer.

> - How did you get your initial set of (small) customers?

Primarily through Google Adwords. Initially we had an inside sales rep who worked hard to talk to every trial, even if it meant spending a few hours walking a 4-user shop into signing up.

We were also one of the early CRMs to be in the Google Apps Enterprise Marketplace (i.e. integration w/ Google Apps). We got some free front-and-center placement there, and this brought in a lot of customers. This was in summer 2011, and for a while it doubled our monthly trials.

> - How are you all expanding to new customers (bigger customers): via advertising? word of mouth? initial customers increasing seats? other? salesmen ?

We’re definitely spiraling into more organic growth. We’re also doubling down on some more marketing efforts like a booth and sponsorships at SXSW. The product has also matured quite a bit into a place where it’s a genuine competitor with the lower end of the Salesforce market.

And we’re doubling down on integrations with other services, which (in my mind) is the “partner / channel program” of the SaaS world.

But this is an area of interest to me, and one we’ve been talking about a lot. I’m interested to hear what others are doing in the heavy growth area.

> - Why did you all pick CRM initially? (isn't it pretty crowded already: SugarCRM, ZOHO, Oracle, et al.). I'm genuinely curious as I don't know much about the market.

It was borne out of the sheer ineptitude of the market. Salesforce is ugly, expensive and nobody likes it. Sugar is an OSS clone of Salesforce. Zoho is trying to be Microsoft Exchange as well as CRM. </hyperbole>

We focused on bringing beautiful design and ease of use to CRM: something that a lot of smart people are doing to various components of business software (Freshbooks, MailChimp, etc.)
If they made missing the point an Olympic sport, you would get lost on your way to the podium to collect the gold medal.
Even there the standardization process worked: The flaw in Dual EC DRBG was pointed out very quickly, precisely because there was so much cryptanalytic attention paid to it. The fact that RSA (and only RSA, AFAICT) didn't pay attention to the crypto break in exchange for $10MM doesn't change the fact that the vulnerability had been quickly discovered.

If the algorithm had been left unstandardized and was simply "Foo Corp's Custom Wonderful Bit Generator™" the public may never have known of the vulnerability, while the NSA would still have the resources to have discovered the flaw on their own and use TAO to recover the priv key.