skysight-inc/HackerNews huggingface dataset:
Hi, John. I'm not the poster, but the way I look at it, everybody has to learn caution sometime. If this guy's lesson costs him just $2k and a little headache, I'd say he got away cheap.

I can think of a number of important business lessons I learned that cost me more time or money. E.g., "be careful picking business partners", "don't start work without a signed contract", or "crazy clients don't get saner". All things I should have known, or could have discovered reading. But had I waited until I had read and appreciated all business lessons, I never would have started anything.

And I appreciate him sharing the lesson with Hacker News. It reminds me of the Despair, Inc poster on mistakes:

http://www.despair.com/mistakes.html

"It could be the purpose of your life is only to serve as a warning to others."

So thanks, eam, for getting a bunch of young entrepreneurs to say, "Hey, maybe I should double-check our fraud prevention."
One of the authors of that duealec paper had this to say [1]:

>Our results <dualec.org> say nothing about whether NIST, the NSA, or anyone else inserted a backdoor into dual ec. Instead, they say that if you know the relationship between P and Q, then some TLS implementations can be broken at a given cost. The precise results are more nuanced than that. You can read the website for a summary or the paper for the details.

[1]http://www.ietf.org/mail-archive/web/tls/current/msg11730.ht...
With a new name, Breeze is solving Uber and Lyft’s supply problems
Facts that conflict with identity can lead to rejection
No, why? It should be installed in /usr and so on if it conforms to debians packaging guidelines, otherwise it should stay in /opt.
Do you want to live like 'The Wolf of Wall Street'?
I'm glad you asked. I was not aware of any published documentation of HN's algorithmic workings, and had the same question.

I also appreciate an established name in HN pointing out that the linked article was not from a moderator. It points itself out quickly, but it's nice to know something is derived information before clicking.
Ask HN: Now that my site is live, how do I make changes to the source code?
As a newbie web programmer, I've been editing the source files directly through an SSH connection. Now that the site has traffic, I'm not sure how to make new updates and furthermore test new features that are guaranteed to be broken upon their release.

Am I supposed to be using some form of revision control system, or is this a game of hidden subfolders and permissions?

Thanks
4chan.com was created in 2003. Does 'prior art' exist for trademarks?
Games don't compete on concept, otherwise there would only be one RTS, or one FPS. Games compete on art, story, level design, and game mechanics, among other non-game specific components like marketing, distribution, and pricing.

Realistically, a concept alone is not sufficient.

I bought Threes, then moved to 2048 because while Threes had components like cute tiles, fun voices, and features like showing the next tile, it was still simply easier/quicker to open a new tab and play from there.
I had a conversation the other day with a bunch of wedding photographers and it’s amazing how much money they spend on a yearly basis on backup. They all shoot raw and they end up with something like 50-60GB of data per event. And that’s only for photographers, videographers are on a completely different scale.

Now, their number one problem isn’t storage per se, since cost per TB is constantly dropping, but uploading data to the cloud. It takes them anything from days to a full week to upload data.

So here’s my $64.000 question. Why hasn’t anyone tried to disrupt this industry? How about setting up a cloud backup company that sends you a portable disk where you write your data and then send it back. From my understanding money isn’t an issue, they would gladly pay tens of dollars on a monthly fee if someone could handle all their backup issues for them.
You mentioned in a comment above an occurrence where someone's DO account was compromised leading to many droplets being trashed but that the account holder was able to recover because of the waiting period. If you add a flag to bypass the temporary snapshot would not this mean the hacker could have succeeded in their attempt to wipe out all the droplets?

I actually prefer the enforced cooling off period for destroying droplets. (As long as the UI/API docs are cleaned up a little to communicate it better.)
Maybe Bhutan.
Thanks, we started this due to the enormous amount of 'grunt' work involved in getting hardware into production. The essence is this;

You as a designer probably have a pretty loose spec for a 3.3V regulator, why not just have the factory tell you the one everybody else is using and better yet here's the symbol and footprint.

We were careful not to restrict people though, you can use any parts but we try and gently nudge you onto the more popular stuff!
The most remarkable thing about the 60 Minutes segment was the simplification of Tesla Motors' history, and Elon's apparent unwillingness to correct the record in front of the camera. Elon was not the founder of Tesla. He was an angel investor, and then became a major investor, and over time took over after ousting the early founders. That is a very different story than he founded the company, that it was his singular vision, blah blah blah.

Don't get me wrong, I'm a huge fan of Tesla Motors and a believer in the vision and how Tesla's going about achieving sustainable transport for the world. But I am also a huge fan of accuracy, and having founded some startups and co-founded some startups and worked for a bunch of startups that I did not found or co-found, I try hard to get the story right and not give people the impression that it was all me. I wish Elon didn't do that. I wish he insisted 60 Minutes get the story right, even if not convenient. I don't like a manufactured story, especially when it's supposed to be nonfiction television journalism.
Google Wants This April Fool's Day To Be The Very Best
You can pre-warm without a support subscription if you want to take the time (and know how) to do it yourself.
The US web is not really censored. DMCA is not censorship and COPPA is a violation of federal law for various reasons.
Big Data Vendor Revenue And Market Forecast 2013-2017
A book that any founder should read. It's a great set of interviews with founders telling relatively unsanitized versions of their startup stories. It serves as a great antidote to the business press's "all winners are perfect geniuses" school of reporting.
spendING. "spend" is a verb, "spending" is a noun.

(Yes, I know marketing says "ad spend" but it's still wrong)
"The 0.1 percent isn't the same group of people every year. "

This makes it sound like some if not many members of this group are one-time members who have huge capital gains that calendar year; many of those could be entrepreneurs who sold their company or those that had a huge gain in some investment.
Web Components: have we not been here before?
Just seems like billion is the new million when acquisitions are concerned, but yes, I guess it wasn't that small overall. Did not realize PA Semi was founded by a lead designer at DEC. Thanks for the info, and Wikipedia filled in the rest for me :)
I think it's incredibly important that we get a new FOSS EDA tool with a focus on modularity and usability. I have a really hard time using KiCad because it's so clunky compared to Eagle. The UI for Eagle is better, and the design flow is much easier (for me).

My dream EDA tool is a highly extensible, scriptable, and modular core performing stuff like routing, impedance matching, DRC, etc. and then have that wrapped by a nice Eagle-like UI.
Indoor Clouds created by Berndnaut Smilde
You can turn it off in the UK; right?
No, you're entirely correct... I completely underestimated the prevention loss factor. Being a side project, I really didn't dedicate 24x7 monitoring, only late at night and early mornings, so this has been an important lesson to me. I have actually already shut it down.
Moving from Jekyll to Pelican
If you use R, you may want RStudio
Features Sygic GPS for Android and iOS
An application that allows you to have the maps even without internet connection is really something that can be considered useful, and for this reason, we will detail the main features of Sygic GPS both for Android and for iOS.
Equally skewed as using scientific journals as your only source of evidence for complex human issues.
It's one thing to have a product that will meet a customer's needs and make them happy and to not say anything during initial discussions that will present a distraction or needlessly turn them off. It's another to say something misleading or to elide a detail that is material, which the customer will reluctantly suffer later on, in order to close a deal. It seems to me that modern sales organizations have incentives perfectly calibrated to do just these things. This situation corrodes trust.
npm = node package manager. That's for server-side javascript with node.js. Totally different deal from what we're talking about here, which is client-side javascript.
Absolutely agree. My impression is that Threes tried to do just that with the cute names and faces on tiles as well as the music but it simply isn't in a game like this where the player simply isn't engaged in that way.
Cron in production? That is a double edged sword
API Driven Development
"Uses Heroku buildpacks to embed all your dependencies within the debian package. That way, no need to mess with stale system dependencies"

That does mean, however, that it's now your job to rebuild your package whenever a library gets a security fix. Possibly worth the sacrifice, but an important one I think people need to understand.
I'm really glad someone took the time to do this, and came with quite a wholesome set of resources in the end. For someone who has moderate web dev experience such as myself, I think it's also definitely useful for review as well as the aspects of web dev you may be less/not at all familiar with.
If I were a Founder
New Year's Countdown
Show HN: abortion map + line chart. d3 with angular
At least some large cloud storage providers offer it. For example, AWS has Import/Export[0] and Google has Offline Disk Import for Google Cloud Storage[1].

[0] http://aws.amazon.com/importexport/

[1] https://developers.google.com/storage/docs/early-access
Now I understand what you meant.
this isnt new news. This has been brought up before.

They question really should be "is this bad?" I have yet to see a compelling argument on why income disparity is bad.

Unless you are stealing, scamming, or otherwise breaking the law to obtain enormous wealth then you deserve it. You are providing a good or service to the economy and are rewarded appropriately. If someone else can do it better than they reap the reward. Competition ensures that only the best deliverers of value are making the money. I am sure someone will cite some bankers <insert other regulated market here> raking in money with barriers to entry that are artificial...but that 99.99% of the time means that they lobbied the US Govt for regulations which protect them.
Nvidia's Denver is said to have 7. It's also rumored to have 2x the performance of Cortex A15. If it's true it could reach Sandy Bridge performance level either at first or 2nd gen (on FinFET 16nm) and Haswell/Broadwell level by 3rd gen (most people don't realize the performance between Haswell/Broadwell compared to Sandy Bridge is only like 15-20 percent, since Intel stopped focusing on performance). I also think in 2nd gen Denver SoC (2 process nodes from Tegra K1), Nvidia will have at least a 1 Tflops, possibly 1.2 Tflops GPU (Xbox One level).
This is great. I look forward to trying it out.

Does anyone know of a repository of open designs? Kind of like an http://www.thingiverse.com/ for PCBs?
You can use a key file in addition to password, so yes.
I think you mean Raymond Chen. ;)
New Digital learning materials and MOOCs
>Financial services are considered a product

Absolutely, but you won't die if you don't receive financial services. That's what makes healthcare very very different. It isn't simply a "product," it is a lifesaving measure.

>Don't confuse "health insurance" (which ACA enforces purchase of) with "health care" (which, oddly, ACA doesn't).

Of course I am not confusing the two, but if you don't purchase health insurance, you can still get healthcare in some respect. If you cannot pay for it, then someone has to foot the bill.

If you are living, there is a good chance you will, at some time in your life, require healthcare past your ability to pay. Withholding care in the ER based on ability to pay or insurance status is already illegal (not to mention immoral). Requiring one to buy insurance to protect you, and everyone else, in that position isn't in the same realm of most things.

Note: I don't actually support the ACA because it is a very poor bandaid on a gushing wound with a lot of inefficiencies attached.

Note: most (if not all) States require car insurance as a requirement of owning and operating a motor vehicle. This is because operating a motor vehicle is dangerous and can potentially cause damage. There's a chance you'll cause damage beyond your ability to pay. Required insurance is to protect you and others, because a significant number of people will forgo insurance on their own.

However there is an arguably better chance of you getting sick or injured sometime in your life beyond your ability to pay than there is causing damage in a motor vehicle beyond your ability to pay.
It still bothers me they call it "Income Inequality".
The server could check which page is embedding the script and then server evil.js instead of good.js :)
Well there's at least one other document coauthored by M Salter and E Rescorla [1], so the notion that Rescorla was manipulated into co-authoring the Extended Random paper has is a bit more problematic since it wasn't a one-off collaboration.

[1]http://tools.ietf.org/html/draft-ietf-tls-suiteb-00
I did not realize until checking out this source that dividing by zero in JS outputs "Infinity".

https://github.com/kitcambridge/evil.js/blob/gh-pages/evil.j...
I work for an ecommerce site and we generally have a diff. sub domain which will have the "beta" or "test" version of code in live. Users are welcome to use it, but with fair warning. We also trickle, small percentage of users to the newer experience to gather feedback before enabling it site wide (A/B testing).
I have the old style addon to put the bookmarks star back in the address bar, because the Australis bookmarks button comes with the bookmarks menu stuck to it, which I don't need, I have ctrl-b.
IIRC quote stuffing is an attempt to trip triggers to the benefit of the HFT. Basically you have a trigger that says when the market hits $X, do Y action (say sell). Since your trigger is slower than their processing, assuming a small enough market, they can "move" the market to $X but reverse before your trigger finishes.

This only works because you don't actually have a "Sell at $X".
If a 5 year old child asks you if he will be killed by pirates (yes this has really happened to me), would you say no? If so, you're lying, but I don't think there is any "moral wallpaper" here, it's simply letting a kid sleep at night.

Not to say there aren't many dishonest people out there, but the parallels between sales (especially software) and this story are all too common.
As a "bonus" you will make your site unusable for suffix proxy users.
MIT Scientist Responds to FiveThirtyEight on Climate Change Disaster Costs
C# is fast because 1) we try really hard to make it fast :) and 2) it's not an optimizing compiler.
"Income Inequality" is a complete misnomer in this case because even according to this article, the wealth gains are made from investment income ("And it's this investment income, rather than ordinary earned income, that's creating this extraordinary wealth gap").

Increased investment income is a good thing because it points to investment income for everyone else, too: your grandma's pension, your 401(k), your stock portfolio. This is just evidence of the pie getting bigger, not a small handful of robber barons running off with everyone's money, as this amusing "1%-er" talking point is always presented to be.
Invest little money then. That could still become a significant retirement fund for him after a few years.

That said, I think Bitcoin is low risk if you secure your coins properly. I don't think there is much risk of the price going down to zero.
So you're sayign what I can do it duplicate my site onto a subdomain, test the features there, and when they're bug-free, I can just copy paste the new code into the source files on the live site?
Ah, I see. Well, I misunderstood the question I guess. I'm not sure why my answer was downvoted, however, seeing as I don't think I said anything incorrect, and it is a reasonable (though incorrect) understanding of what he was asking. Namely, responding to the implication that a C bot will be necessarily faster than a python bot.
I'm not sure what you're trying to say here that my comment doesn't already say.

It might be helpful to note that there are crypto people --- some of the authors on the recent Dual_EC exploit paper included --- that believe TLS already discloses too much random state, even without the TLS extension.

I think it's uncontroversial in 2014 to say that any more state disclosure --- 2 bytes, 200 bytes, 16k bytes --- is probably not a good thing.

It might be a little controversial to say this next thing, but I'll stand by it for the sake of an interesting argument: in 2005, when this discussion started, it was not known to be a bad thing to increase the amount of random state in the handshake.
> Unless you are stealing, scamming, or otherwise breaking the law to obtain enormous wealth then you deserve it.

Yes.

> Competition ensures that only the best deliverers of value are making the money.

I'm not convinced that "competition" is occurring at that level. At least, not in any way comparable to the '2 entities competing in the market' sense.

PS: I like money, a lot. And I have no problems with other people having a lot more of it than I do.
Hi wyager, I'm Chris Denney by the way, CTO for Worthington Assembly

Couldn't agree more. I really think it's going to happen. The EE hobbyist movement is really only in its infancy. The more people that jump on this and get excited about it, the more people will invest their time in FOSS projects like you described. It's only a matter of time.
As a recent graduate of a Rails bootcamp, I am excited to see what you guys cook up regarding Rails.

I also wanted to see, in the future, if you guys would be interested in making a Javascript track (Javascipt, NodeJS, AngualrJS, maybe even MeteorJS too). This is something that many people are also looking to dive into as am I.
callmeed, this excellent advice and information here. I urge everyone to read this before getting yourself into a hole. Many of the payment API's such as Stripe and Balanced Payments make it super easy to deploy an ecommerce site that it makes you think you're done, though as I have learned, that's only half the work. The other half is fraud and loss prevention. And as markbnj commented below, you need to monitor it quite often (24x7).

> Law enforcement at all levels were completely unhelpful (I dealt with CA police, AR police, and feds). Once I located the bank and got them on the phone, they at least were able to freeze the checking account (I believe they are required by law to do this once fraud/cybercrime is reported). That's really only a temporary fix though.

I actually did call the bank 2 days after the transactions. I believe it takes 2-5 days for direct deposits to arrive to destination bank. When I called the bank, the support agent said they could see the deposits and that they would freeze the account. Though they haven't been very cooperative since then and communication has been limited. The bank agent I was assigned to has been difficult to reach and work with, even my processing company has had trouble getting a hold of them. I'm really hoping the account is still frozen and they will fulfill the reversals. That's my only hope.
I would take a dividend paying stock that is slightly under performing than the market, than a non dividend paying one. Also everytime a dividend is issued, the price is adjusted for any possible arbitrage.

If you were to solely depend on S&P500 as the index for performance, I guess investments in Lockheed Martin would be a waste.[1]

[1]http://finance.yahoo.com/q/bc?s=LMT&t=5y&l=on&z=l&q=l&c=%5EG...
And it exploded just for those reasons. I sent the link around my company to all the gamers and pretty quickly I saw it crop up on everyone's screen.

The same can't be said for Three's, because there is greater resistance in spreading it and people trying it out. First, I probably wouldn't have tried Threes. Second, I wouldn't have been able to link it easily to people who might have been partially interested in it. Third, the variants and mods were what kept people coming back.
FCC certification are also a roadblock of sorts for product development.

In theory, I should do testing for verification and or "declaration of conformity" for any run over 5 devices where I have a clock over 1.705 MHz for a battery-only device or over 9 kHz (yes, KILO-Hertz) for a digital device that plugs in, even to recharge batteries.

UL (or equivalent) testing/listing isn't required by law, but represents additional possible expenses if you want to sell to consumers.

It's already pretty daunting, tech-wise, to make the leap from "I have an idea" to "works on my bench on protoboard" to "works on my custom-designed PCB", but at least the out-of-pocket costs and risks are low there.

It's a much greater leap, cost-wise, to get the FCC paperwork in order, even for "unintentional radiators", to say nothing of trying to get a BTLE or wifi device certified.
I don't know if there's any place without de jure Internet censorship, but there are several places where there is de facto no Internet censorship.

Most of the Balkans fall under that.
This solves a real problem. Nicely done. Can't wait to try it out.
QFNs and most reflows are tricky as well, since it requires you to also design the board properly to reflow correctly. For example, if the QFN has a large ground pad in the middle, putting unmasked vias in the middle can cause solder to get sucked down to the other side. To the best of my knowledge, there isn't a great handbook that explains all this, since it crosses a bunch of fields (the electrical design says you will want a few vias in the pad to lower impedance, while the manufacturing might say otherwise [0] or will be able to do it no problem).

In regards to memory and more advanced stuff, the beaglebone/raspberry pi/other system on modules are great for the hobbyist and low volume production, since making what is essentially a computer can be very difficult. It might work on the first spin, but hard to spot issues might occur if the power / grounding isn't good enough, or if there are noise or other signal integrity issues.

[0] http://i.screamingcircuits.com/docs/Via_In_Pad_Guidelines.pd...