skysight-inc/HackerNews huggingface dataset:
Why can't long-term private keys be protected, and used solely by, the kernel?

Linux CryptoAPI seems to have an asymmetric key interface[0], RSA signatures are implemented[1], and there's even a x509/ASN1 parser[1]. Shouldn't this be the default on Linux rather than furthering the NIH syndrome with crude library-local allocators? In the very least, shouldn't there be a secure malloc in glibc? If not, why doesn't OpenSSL use an existing secure malloc library[2]?

[0] https://www.kernel.org/doc/Documentation/crypto/asymmetric-k...

[1] https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux....

[2] http://www.jabberwocky.com/software/secmalloc/
Usage licenses are enforceable. At least in the US for sure, and the DMCA builds on that.

Now, to prove that someone is running AGPL software and that they have modified it, that seems pretty hard in many scenarios.
Have you ever had steak in Japan? In my experience, it was uniformly excellent, much better than what you can find in most places in the US.

And the same parking spot issues apply in Manhattan as well. But it's moot because you don't need to own a car in either place, and you probably don't want to, because it's a huge hassle.
I built an application to solve a problem but got nobody to buy it
I have built a Windows Desktop Application to solve a problem, the problem of creating Identity cards of a large number of students/staffs. The creation of ID card is generally done with photoshop and separately edited for each card, arranged in a sheet of 10 cards. I automated this whole procedure. I showed this application to people who make ID cards in manual way and have suffered a lot in past. They want the application but not interested to buy. Why do people want everything for free when other have put a lot of effort on making it?
A World Cup betting app, to play among friends! Built with NodeJS (backend), Firebase (real-time chat), and Meteor (front).

http://i.imgur.com/79zO1YZ.png
The NSA would monitor hacker message boards and the various black market websites for exploits like this.

If they find something which they don't see any chatter about on any of these sources, then it's reasonable to presume no one has found it. Moreover, actually exploiting heartbleed would leave a signature. You can fake SSL certificates, but eventually someone has to lose their money, or some innovation has to come out of the blue. MitM's involve traffic diversions unless they're conducted at a government level.

Espionage always leaves a trail - even if you don't know where someone gets their intel, you can always tell they must be getting it somehow.
About 20 years, yes.

There's nothing bad about being a terrible coder who manages to put together a basic product. There are plenty of terrible musicians who still release albums for example. But it takes wisdom and maturity to understand ones own limitations.

If I owned 50% of a company, and a guy who had measurably increased my wealth by improving the product and hence the value of the company, gave me some advice like this I would listen very carefully. I would not "cut off my own nose to spite my face" or "throw the baby out with the bathwater".
I see you're still perceiving Japanese culture through your native Western lenses.

Well done on wasting those 16 years understanding nothing but the superficial.
A friend of my family knows a few female Japanese expats. They are all very adamant that they absolutely would not go back to living in Japan due to the sexism.

Another thing to add to that list is the Japanese justice system: no trial by jury at all.
But it's still GPL and anyone who works at the company is free to share it. Whereas with Apache they can just make the entire thing proprietary and forbid sharing. Granged, we don't know that that's what happened here. Maybe their version was still Apache licenced and nobody bothered to share it at any point.
For a second, I thought you were alluding to Mac Akasaka.

Turns out this one's just as insane... I can only imagine this being a comedy sketch or something.
I'm reading the two stories completely differently:

In the OP's case, he's the technical co-founder without sufficient technical skills to launch a company. I think this is actually under-reported in start-up failures and missed as a root cause in debacles like the ObamaCare web-site. So you have to ask whether the company would still exist without the CTO and whether this co-founder was/is a liability.

In your case, you were clearly the technical guy and capable of producing the required product, but you were worse at picking your co-founders.

I'm not disagreeing with the idea of legal representation, but I think your best paragraphs are buried near the end. He should let the CTO take over the technical domain and move onto another area where he can help ... or he should leave.
How war created civilization over the past 10,000 years
Nine years after the initial Django release, somebody's finally written a good Hello World tutorial for it. Good work.
Proxy List API Bugs
For an example of a compiler other than GCC that does whole-program optimization see the Stalin Scheme compiler: https://github.com/barak/stalin
Wow. The lawyering up stuff. It is so depressing that the US works like that. Anyway, as someone who fired himself from his own company twice, I would say that he might have a point. You don't lose your shares (if you do, then arrange that you don't) and he is just making things better. If you are (like I was on occasions) the wrong person for the job, he is just making solid management decisions. The paranoid and lawyer crap could be true but often isn't. So you need to find that out. Sounds like you need to move closer to your co-founder in the business or indeed leave and just enjoy your equity.
Pity, it is a bad book. Im still very much against HFT.
If you have 3 hours to watch a tutorial, David Beazley's generators talk. Also, Jess McKellar's keynote on the sorry state of K12 CS education in the US (and some things we can do about it).
No, this is incorrect. Just because the original code is GPL, doesn't automatically make it legal for any modifications to be released to the public as GPL without the copyright owner's consent. (In this case, the company owns the copyright.)
What I don't get; shouldn't it already have vested if he is a founder? I'm not sure about the system there but when I found a company those shares are mine?
Not this year. He was unsure he could be there, so PyCon used another company. He'll be doing PyOhio in July though.
From the article it looks like he admits it?
Interesting. Well, my current way of thinking is that there are no terrible coders, it is just that mature and experienced engineers are slightly less prone to making terrible and difficult to correct mistakes. Like using an obscure language or something, just because they feel that way and without considering the implications ;)
Design was never about creativity (surprising the user, being unique, being different), it was about letting the user get things done. Now that this has been achieved what more do you want? It's like fashion industry people wondering why everyone's cloths are so boring. Their idea of fashion is art and expression, the normal person's idea of fashion is usage.

The more "different" and "creative" and "unique" your site's design is, the more trouble and friction a user encounters trying to learn how it functions. So every site on the net looking similar might piss off designers but for users it's a joy.
I am not an American but I have some idea. Let me list them:

- Pride of national armed forces

- America flags outside houses

- Tailgating

- Extensive participation in volunteering

- Jazz/Blues/Hip Hop/Country

- Stand up comedy

- Improv comedy

- Fortune Cookies

- Deep Dish Pizza

- Sports Watching Craze

- Little holiday

- Guns, Guns, Guns

- 1st Amendment

- Religious

- College sports

- Road Trip!

- Weekend sports

- Hipsters

- Shitty Cable News

- High quality ethnic food/fusion

- NASCAR

- Dive bars

- Addiction to pharmaceuticals

- Friendly, easy smiles

- Cars, Cars, Cars

- Kids Lemonade Stands

- Walmart

- Fields of corns

- Scumbag food corporations

- Keg Stand

- Fake ID

edit: formatting
Quick Tip: Crack an Egg in Blender
You are probably pitching your product to the wrong audience.

Your customer is not the one actually making the cards, rather their boss. Making the cards only costs the employees time, something they don't mind wasting for the most part. For the manager or owner it directly costs money, time wasted on making cards costs the employer money in the form of wages. They are also the one with the purchasing power in an organization like a school.

Creating a more efficient organization is generally speaking not part of the scope of someone making ID cards, but it certainly is for their employers or managers.
Fire. CTO. NOW.

You are a co-founder, not an employee. Remember that. It is you company, he works for you. If you would be hired in an company, would you dare to ask to the owner of the company to leave?? It doesn't matter how good or bad are you for the company, it is your company!

Fire him now.
Modifications made to non-distributed GPL code are not automatically GPL. Only distribution of code derived from GPL-licensed code requires a GPL license for that derivative. But even on publication a modification/derivation of GPL-licensed code is not automatically GPL. It can also just be copyrighted code published in violation of the GPL.

So, it's also not true that "any employee of the company can publish the modications to the GPL-licensed code".
How much value does the application create for end-users?

If you're targeting consumers, they can be very fickle. As we've seen time and again, they easily shell out $5 for a cup of coffee but complain about $1 mobile applications.

If you're targeting businesses, you got a better shot. Demonstrate how much money you're saving a business, and they'll easily buy. But if your product doesn't create a significant amount of value, it'll be hard to change the status quo.
Simply because the Skype team doesn't seem to be responsive on the subject on its own forums...
thanks. it's back up now. it seems like all Linode servers had outage
The old form was: "Andy giveth, Bill taketh away."

Referring to Andy Grove [1] of Intel and Bill Gates [2] of Microsoft.

[1] http://en.wikipedia.org/wiki/Andrew_Grove

[2] No link required
Isn't PolarSSL like that? Maybe pure open source isn't a good fit for critical applications.
I Was Assaulted For Wearing Google Glass
From my years with my Japanese wife, and the time I've spend in Japan. I've learned that the key difference of Japanese culture from American culture is is that americans consider quantity as the measure of value, and Japanese consider quality to be that measure.

Japanese people will pay more for the higher quality of equivalent goods, and are interested to learn the difference. While americans feel cheated if they pay more for a great meal served in small portions, and consider stores like costco and k-mart to be some of the best shopping choices.

I can assure you if you think Japanese people are missing the point by copying others you are very much mistaken.

They are not making a copy, they are embracing the point.
I've been working on a new way of structuring data which results in fast, easy querying (here, of semantic data).

Here is a screenshot of the result of a query for "all museums in Paris that have art by Picasso."

http://imgur.com/Cskqx0f

And here: European countries with a life expectancy less than 83, along with a graph of another one of the columns

http://imgur.com/NhgVtW5

These are from the Windows app, but that may never be released. The web app is coming along really well and much faster than I expected. In any case, I'm really happy with how the it's going overall.
:) http://i.imgur.com/kcrt5iJ.png

Working on my toy functional language in Ruby [1]. Gives constant-space recursion, true higher orderism and homoiconicity in a Ruby environment. I've used it to create a static site generator, which I use to post snippets of code I've been working on [2]. It's a tad rough around the edges, but I hope to have it pretty usable soon!

[1] https://github.com/bobjflong/drog_lisp

[2] http://bobjflong.co/
IANAL, but I don't think that's how it works. The GPL allows the licensee to redistribute the code and so on. But if you're working for a company, you are not the licensee, the company is (in the same way the company owns the copyright on your work, not you).

Otherwise, the AGPL would never have seen the light of day.
Startup #2: Meet-a-Mom – how I got 30 signups in 12 hours
Don't forget trash cans. I regularly spend 10+ minutes walking around looking for a trash can. I know they got rid of them due to terrorism but c'mon that was 15 years ago.
Uniformity in user interfaces is an emergent property when many website owners optimize for UI ease of use. Who would want to sacrifice pageviews, conversion rates, purchases for non-standard interfaces? Also Bootstrap is very easy to use and solves the problem for website owners and users.
Nothing to do with reddit, the real thing: http://screenshotsaturday.com/
Interesting. I was just thinking, do the CTO and the CEO know each other from before? Was it the CEOs idea to hire this CTO maybe? If that's the case maybe this was planned between the CTO and CEO.

Since you're the founder with the focus on the tech aspect (basically you should be the CTO) what was the reason for hiring the CTO in the first place? A CTO that's obviously not a better software developer than you. Hard facts, but maybe it was your partner who planned this since the very beginning.

After you've talked to your lawyer you could possibly strike a deal with the CTO / CEO and go become an employee if you are interested in just keeping on coding for the company. Maybe getting a bonus that if you decide to leave or still be on the companies payroll provided that the company reach a certain revenue / value etc.
http://i.imgur.com/jkVY51F.png

I'm developing Computer Aided Manufacturing system in the browser (chrome Application for the USB connexion). And I developed the embedded code for the controller too.
https://github.com/nraynaud/webgcode
http://nraynaud.github.io/webgcode/ (for a taste of g-code)

last week I worked on some pocketing and lettering code :
http://nraynaud.github.io/webgcode/text.html (it's a excuse to introduce Ember into the codebase and learn it). The display is multi Level Of Details (it's visible when scrolling quickly), and the computation is done with a worker pool.
Or use zsh, which will do something like this globally.
The win-win here is not between you and the people who you are unemploying, it's between you and the person paying their salary.

Go and talk to the business owners or managers of those ID making people.
"Do you think that Zuckerberg is the best developer at Facebook - legend may say so but it's not true"

What is this legend? I think everybody is aware of the fact that the infrastructure that allowed facebook to scale was not (and probably could not have been) built by Zuckerberg. He had guys like Adam D'Angelo working for him from the beginning.
Most people assume their colleagues are their peers. Not all management people though, but that's the best type of CEO/CTO an employee could have IMO.
Just use gh-pages
Because they are used to that by now. Maybe offer a basic version for free and premium addons for a fee? And in the future I suggest first asking some potential customers before making your product. Will save you some time. But did you ask ALL the people that might be a customer? And the are also other organizations besides schools and universities that need to make ID cards. Maybe they are interested. Or change you software a little and you might be able to apply it to another problem?
Darkmarket: the world's fastest response to a govt takedown of digital markets
"A CTO that's obviously not a better software developer than you."

What? The OP clearly points out the CTO is a better developer.
http://www.cs.utexas.edu/users/EWD/transcriptions/EWD13xx/EW...

Finally a short story for the record. In 1968, the Communications of the ACM published a text of mine under the title "The goto statement considered harmful", which in later years would be most frequently referenced, regrettably, however, often by authors who had seen no more of it than its title, which became a cornerstone of my fame by becoming a template: we would see all sorts of articles under the title "X considered harmful" for almost any X, including one titled "Dijkstra considered harmful". But what had happened? I had submitted a paper under the title "A case against the goto statement", which, in order to speed up its publication, the editor had changed into a "letter to the Editor", and in the process he had given it a new title of his own invention! The editor was Niklaus Wirth.
This is really cool! Are you building it from scratch or is there some existing knowledge graph you're building on top of?
All these scenarios don't matter because wherever you are going most of the time you won't have anything BUT a jet and not a maglev train to bring you there (because it will only connect 2 cities to each other, and you'll never map out the whole territory with maglev train lines due to their prohibitive cost). Unless you want to take you car.
That's pretty sleek. He is in a rather powerful position then.
Shall we generate a list of "stolen" games? Duke Nukem, Warcraft etc.
> - French pastries are better than in France

Is this a joke or something ? I live in Japan, I'm French, and there's no way the pastries you buy over here are as good (or even as cheap) as in France. Or you must have been to the wrong part of France.
I didn't but akamai itself did [1]:

To test this belief, our engineers have rebuilt
every Akamai configuration since August 2012,
when we upgraded to openssl-1.0.1. This included
every kernel, hardware, and edge server software
combination; and then a careful inspection of the ways
in which memory was allocated, to see if any
non-long-term memory allocations might border
on our secure heap. Most of the configurations
were proven safe; but we found one configuration
that was not - there was an available memory block in
range of the secure key store.

This less safe configuration was active on our network
for nine days in March 2013

[1] https://blogs.akamai.com/2014/04/heartbleed-update.html
It's too smooth and polished to be a JS/HTML game IMHO.
Yeah, I was slightly offended by that remark, too.
I have used plenty of japanese cars and japanese electronics to know that the japanese are NOT perfectionists in general. Fastidious workers yes, but that don't make perfection.
I wonder how this meshes with Japanese innovation and creativity - which require risks, mistakes, trial-and-error?

Clayton Christensen on Sony's founder:
http://www.forbes.com/free_forbes/2003/1013/082_2.html

...the original battery-powered pocket transistor radio, launched in 1955, and
the first portable solid-state black-and-white television, in 1960. Plus:
videocassette players, portable video recorders, the now-ubiquitous Walkman and
3.5-inch floppy disk drives, launched in 1980.

How did Sony find these foothold applications? Morita and a trusted group of
about five associates observed and questioned what people really were trying
to get done. They looked for ways that miniaturized, solid-state electronics
might help a population of less skilled and less affluent people to accomplish,
more conveniently and at less expense, the jobs they were already trying to get
done through awkward, unsatisfactory means.

There's other innovations, such as Honda inventing the trail bike (there were previously only road motorcycles).

As an example of creativity, there's Hayao Miyazaki. While he is a perfectionist, there must be some tolerance for experiment, exploration, discovery - else there can be no original creation.
Actually, they are the sole investor in lots of companies - and have stated they don't mind doing that.

Two I can think of off the top are Github and Rapgenius. There are more.
pmarca only highlighted a practice that he thinks is unethical.

Lure a startup into accepting a term sheet at a crazy high valuation and get them into a no-shop clause. Once they break off with other investors, renegotiate the terms on the term sheets to a lower valuation. Since you're in a no-shop clause, you have no leverage over the VC and you have 2 options: Accept the lower valuation because there are no competition or reject the term sheet and start over. I bet lot of companies go with option A.

In the valley this is unacceptable and I am sure if someone would do that thing, companies wouldn't deal with that VC.

a16z sets price on the key deals but they don't renegotiate the terms later on as a tactic. This is the _key_ difference.
Out of interest, how are you getting your data changes at the NodeJS level to automatically propagate to the Meteor clients? Or by "NodeJS" do you mean you're using the full Meteor stack?
Do you have a website for this your product? Perhaps you are pitching it to your locality and the market is not large enough.

You may want to make is a SaaS product and as people have suggested have a free version with limited features. e.g maximum of 10 ID cards at a time.

Remember again, it is in the interest of the people that have the business of making cards to have this as complex as possible so they can charge companies more.

So you may want to pitch this to the companies directly and not the people who make the cards for them.
I understand this, just with the amount of attention OpenSSL has been getting not much worse seems to have come out.
degen?
Here's how it works in Australia:
- no tips
- if your restaurant provides bad service, you die
- if your restaurant provides good service, you live

It's as simple as that. You don't get better service because of tipping, and the Linkery was obviously too far out of the comfort zone of the American workers who were used to working for tips.

Don't blame the poor service on the lack of tips until you've seen a number of tip-free restaurants fail and can attribute the failure to the lack of tips rather than poor management, and inexperienced staff.
When buying a cup of coffee, I am normally pretty sure that I am going to get a cup of coffee that I will enjoy to a certain extent.

When buying a mobile app, I may be buying myself a waste of time. Which is double loss.

Most, if not all, of the mobile apps I've bought so far either have free Lite companions or come free with an option to unlock all functions via an in-app purchase.
I completely agree. By talking to the guy making the cards and not the boss, you are essentially showing him a product that makes a big part of his value as an employee obsolete. Buying it would be like cutting off a big portion of his value to the company and future as an employee. To his boss however, it could be a huge savings, he saves on wages and he no longer needs someone with good Photoshop skills to do the same job, thus he can probably find someone cheaper.
How are you doing your sales - one to one? It helps if you have some pilot customers who can give you some testimonials or referrals. You could offer the software for free for a charity or event (e.g. creating ID cards for volunteers).