skysight-inc/HackerNews huggingface dataset:
> I would think a "good customer" to them is someone you walks in, buys coffee, and then leaves.

No, that would be a "great" customer in their eyes. I am merely trying to not be a jerk of a customer, while still spending some time working in their shop.
> If your startup is wildly successful and IPO's and turns into a giant, you don't think you will have to pay a lot of lobbyists to control the legislators?

No, I think I'd be sipping cocktails on the beach. (This is probably why I'm an employee rather than a founder)
Pttrn, Just pattern pieces..
Coffee isn't poison! YAY! Oh...wait...but...

https://en.wikipedia.org/wiki/Coffee#Health_risks

Seriously, my point was, whilst everyone ran around hyperventilating at the thought of saving money on coffee (oh my god oh my god oh my god cheaper coffee) they (possibly - I didn't perform any research) overlooked the quite probable (I'm actually not a mathematician) fact that they're already drinking too much, and such a scheme will cause them to drink even more (up 20% you say?).

I love sarcasm. I hope I didn't offend anyone. I'm in a weird mood today.
up-voted just to ease the pain
I wouldn't need to spend $1500 on a desk that would outlive me but if I did, it would need to look far better than the one in this post.
Photo-Sharing App Frontback Comes To Android
Show HN: Kronos Open source, python based command line cluster manager
Just the opposite is probably more important. Since sales taxes can vary locally (city, county, state) hiding the real price prevents people from noticing they can get cheaper goods by driving across an imaginary line.

Example: There is a walmart in both Cityville and its suburb Township. Cityville has a 9% sales tax but Township has a 7% tax rate. Both stores can advertise that they're selling a tv for $500, even though it costs $545 in Cityville but $535 in Township.

This helps prevent people from driving to the Township store to save money, because the advertised price is the same and most people won't think about the tax rate difference.
The model is scalable outside of NYC, and "can't be bothered to carry a credit card around every day" critique can be applied to any service that tries to improve payments flow (Square, Starbucks' mobile app).

On "techy enough", for reference, 11% of Starbucks purchases is happening through their mobile app - http://news.starbucks.com/news/starbucks-accelerates-mobile-...
Password hashing algorithms make it a bit harder to guess passwords by doing thousands of iterations ("rounds") of hashing, in addition to adding a random salt to prevent creating a dictionary for common passwords.

However, e-mail addresses are generally short, human readable, and have a high probability of being at one of a handful of common domains. It would be easy to brute force your way through common e-mail address patterns at common domain names fairly quickly, if they were only protected by a single round of SHA1.

OpenSSL's benchmarking tool claims that one of my servers can do 30 million SHA1s per second given 64 bytes of input each. And we know from Bitcoin that GPUs and FPGAs can do many orders of magnitude faster than that.

How long would it take to get an arbitrary "firstname.lastname@gmail.com" given only its SHA1? The US Census reports that there are about 5,200 common first names and 89,000 common last names, for a total of around 460 million pairs or 15 seconds on my server to try all of them.

I suspect that with some heuristics to favor common e-mail address patterns, guessing at least half of a list of arbitrary e-mail addresses really wouldn't take that long.
Whoever you think is in the wrong here, the real takeaway is a reminder that when you use a VC-funded for-profit service, you don't "own" anything.
Clearly, the answer is yes. In a commodity business, where your customer does not necessarily know much about your product, brand name recognition, price competition, and other-people's-money buyers are your bread and butter.

GoDaddy advertises heavily. NetSol relies on the fact that they were the first and no one ever gets fired for recommending them.

The people who are still their customers obviously do not realize they can get better value--though not necessarily a lower price--from other companies.

And, apparently, there are also the buttmunches out there that are customers because the customer service (and self-policing in particular) is awful.
I use iwantmyname.com for just domain names, but they have great one-step integration for email with Google Apps/Live for Domains/Zoho/pick-your-choose.
Well color me shocked. A company using lobbying to protect its sources of revenue.
That always happens with branding, the terms and concepts are never understood, think Xerox, Kleenex and even iPad; every copy is Xeroxed, every nose tissue is Kleenex and every tablet is an iPad. This sort of usage does not benefit the brand owner.
Coffee is not VERY good for you. That's a story you tell yourself so you don't have to stop drinking it...because you can't stop...you need it...you're life would be nothing without it. GRRRR...I'm so itchy without my morning...uhhh...water.

Yes water costs. Jesus, point out the small things.
Successful private key extraction from OpenVPN using Heartbleed
Hi HN,

We have successfully extracted private key material multiple times from an OpenVPN server by exploiting the Heartbleed Bug. The material we found was sufficient for us to recreate the private key and impersonate the server.

As you may know, OpenVPN has an SSL/TLS mode where certificates are used for authentication. OpenVPN multiplexes the SSL/TLS session used for authentication and key exchange with the actual encrypted tunnel data stream. The default TLS library for OpenVPN is OpenSSL. Since OpenVPN uses the OpenSSL library but merely passes through the TLS traffic to OpenSSL, this means that OpenVPN is exploitable using Heartbleed, in theory. However, until now there hasn't been any solid evidence that private key material can be extracted from OpenVPN just like it has from some web servers.

This was the server setup we used:
Ubuntu 12.04 (VM using KVM)
OpenVPN 2.2.1
OpenSSL 1.0.1-4ubuntu5.11

Our exploit is decently weaponized, and while the code is an abomination that even Eris would be embarrassed to present, we believe it may severely impact those who have not already upgraded. Therefore, we will not be publishing the code. Nevertheless, you should assume that other teams with more nefarious purposes have already created weaponized exploits for OpenVPN. Just to be clear, we don't intend to use this exploit ourselves. We merely developed it to examine the practical impact on OpenVPN as part of our incident investigation.

To our knowledge there is currently one published proof of concept script that checks an OpenVPN server's vulnerability to Heartbleed.

Private questions that are not requests for the exploit can be emailed to stromberg@insto.org or admin@mullvad.net (PGP: 0x2C62E8AE).

Best regards,

Fredrik Strömberg, Co-founder of Mullvad

(edit: Formatting, because I'm a HN noob.)
(edit[?]: Giving up on the formatting.)
While you probably won't receive a 5% grant as a non-executive hire at a venture-backed startup, my point still stands for salaried employees. If you can make $125,000/year, a company offers you $80,000/year and suggests that it's making up the difference in equity, you should still run the numbers. For 5% to compensate you for your sacrifice in this scenario, the company would need to be worth $900,000.

One of the problems employees face in Silicon Valley is that the valuations on angel and venture-backed startups are exorbitant, so the equity is overpriced. Seed stage startups with no traction (and sometimes no launched product) can still sport million-plus valuations. As an employee, it takes a leap of faith to believe in these valuations and use them as the basis for valuing your equity. Fortunately for these startups, enough individuals are willing to take that leap of faith.
What does this have to do with Facebook and the acquisition? Anyone working at Instagram pre-acquisition would also have been able to reclaim inactive handles.

Twitter does this as well and that's how I got my current username. There are a couple of things that are required before you could reclaim a handle (I forget the exact timespans, but it was close to this):

* Has not logged in for one year
* Has not tweeted in a year and half
* Does not any have applications linked to Twitter

If Instagram has a similar policy, I really don't have any sympathy that the username was taken.
I wonder if this is just really, really clever PR to get people to use their accounts more.
don't forget about Spinnakr! (Spinnakr.com) :)
Re [1]: Windows has included a tool for migrating data to a new computer at least since Vista (I think for legacy versions it was a separate download). It works really, really well.
If so (about the IB-types), that sounds a little worrisome. These are the type of people that one could imagine being good at faking early progress on paper / online, and not following through because building a startup and being poor for multiple years doesn't feel very prestigious.
You guys are missing us, HelloWallet http://www.hellowallet.com

Been in DC for over 4 years. Have hosted many meetups and we are growing...very very fast. We are based in the West End, off of 22nd and M st NW.

We LOVE the DC startup scene. We want to build it out and make it the "Silicon Capital". :-)

We're also hiring...
http://www.hellowallet.com/about-us/careers/
Something along these lines would allow using bash without making your script completely broken:

#!/bin/sh
if [ -z "$BASH_VERSION" ]; then
if which bash >/dev/null 2>/dev/null; then
exec bash "$0"
else
echo "ERROR: bash was not in your PATH" >&2
exit 1
fi
fi

# now start using bash-only shortcuts safely
if [[ "hello" == "hello" ]]; then
echo Bash has been achieved.
fi

I'm not promising that's completely foolproof (it clearly isn't), but it works with the default Ubuntu 13.10 config of having /bin/sh linked to /bin/dash. And you could easily expand on the idea to look in specific locations for the bash binary even if it's not in the path, check those binary's versions, etc.
RE Digital Ocean:

I actually wrote in to Digital Ocean about this incident, twice, over the course of the last year.

The first time I wrote in, I received a bullshit response from some support peon saying exactly the wrong thing "we support our CTO, blah blah blah."

The second time I wrote, curious about their offerings once more, saying how perverse I thought his actions were and asking how I could trust such a company...

then, to my surprise, I had one of their co-founders write me back saying that such a thing would never happen again and that it was more or less inappropriate abuse of power. A sufficient response. We've yet to switch to them, or try 'em out, but at least they're now in the running again.
Yup. Taxes are too complicated.

But it's not the IRS's fault. It's the fault of Congress. They write the tax laws; the IRS does not.
Tooling is still difficult. I've used Puppet, Chef and Ansible all in production environments and though I like Ansible the best I just think none of them are all that great yet. Chef had some major issues between versions (entire suites of cookbooks made obsolete) and certain operations weren't deterministic. Puppet's DSL is just awful in my opinion though they have probably the best feature set . Ansible is definitely much simpler than the other two and easier to use, but a lot of the gotchas are just frustrating, e.g. jinja2 templating issues, a lot of new features that have unintended side effects when used with certain other features, where you can use conditionals and where you can't use conditionals seem arbitrary, etc.
(1) Blackberry isn't an American company.

(2) They don't have a ton of traction anywhere these days, but the US was the first market they lost. What growth they have now is in developing nations.

(3) sigh
Lavabit appeal confirms original ruling [pdf]
And "Transport Layer" should ring a bell to anyone familiar with the OSI model (for example, a student that has taken an introductory course on network protocols).
The worst part of YC is that they make groups of people compete with each other, instead of cooperate. The results are startups that have mediocre ideas that fill the needs of people who have money. If the phrase "vote with your dollar" is true, then it becomes obvious that the services and products society creates will cater to those with the most money.
You can get a pretty good quality espresso with a fairly cheap setup.

To me, the most important thing is the freshness of the roast, then the quality of the grinder, and and actual espresso machine comes third.

I have a $800 setup (machine + grinder), and I roast my own beans, on an iron skillet, once a week.

It's pretty difficult to find anything outside on par with the quality I can get at home (most of the time..)
> Tap water for drinking is effectively almost free

The average 2013 annual water rates bill in England is £390, or $650.

> and free water fountains are indeed ubiquitous

I've just been on a day-trip to England, through two major regional airports. I paid about £12 in total for bottled water during the day, suffering inflated airport shop prices, because there was not a single water fountain ( I asked ). Average price of a 750 ml bottle was around £2.20 and I had to gulp-and-chuck frequently due to passing through security three times.

Coffee would have been cheaper...
I don't know how to say this other than directly: you're wrong. I shouldn't write a book on how to design cryptosystems, because I'm not qualified to do it, and I'll get things wrong. I can barely write an HN comment on crypto without being corrected by 'pbsd and 'cperciva.

I am an odd duck, even for my odd little field: I'm a software security person who has spent a couple years getting decent at breaking crypto, and (weirdly) few people in my field do that, so I sound like more of an expert than I actually am.
Im a 29 year old. Moved to DC 5 years ago and if your job doesn't pay well, you won't have the means to buy a house. Housing is the biggest downfall here. They are just vastly too expensive.

Hiring? C# & .NET pro here.
Well, may be you should think of the difference in production of a Aston Martin vs a Ford.
Yeah, the word is only meaningful when the speaker and listener have enough shared context to pin down the meaning. In that situation, there's probably a better word anyway.

It's not quite the red flag that "ninja" and "rockstar" have become, but it definitely makes me wary when I hear it.
The deal With Dirt Cheap Dirty Boards PCBs
Sure, that's a pretty important bit to understand so I'll try and add some more information on that.

Yeah, so to convert a cron that ran `ls` to use minicron you would change it to `minicron run ls`. Currently the full command that gets added to the crontab is something like `/bin/bash -l -c 'minicron run ls'`, I use /bin/bash -l so it's easier to get working when you are using something like rvm for managing ruby versions. The command then gets run by minicron in a pseudo terminal so I can capture output line by line or even character by character and send it on.

At the moment the hub only knows about jobs which you create via it or for when you first run a job it gets created, so if you ran `minicron run ls` manually from server1 a job called ls on server1 would be stored in the db. Currently there is a potential for them to get out of sync yes, I had some ideas about how a push/pull type sync feature could work but I ran out of time to work on it. It's definitely something I want to improve in the future though!

Yeah, so the hub knows about any 'schedules' i.e cron expressions that you set up from it, so if you set up a schedule of '* * * * *' i.e every minute and that cron doesn't execute every minute it will send an alert via email/sms/pagerduty if you have enabled them. It does this by polling the database for executions in the background. I'm sure a way to expose those alerts to Nagios could be added.

I hadn't heard of rcron, I will have to look into that.

Yes and I agree! I did have SQlite support at one point but I dropped it because I was using triggers for cascading deletes, I'm not doing that anymore though so it should be possible to add it back pretty easily.

Thanks for your thoughts!
To contrast this with a real world example, if your neighbor is having a party and you call in a noise compliant to the police, I don't think they tell the party host "we got a noise complaint from your neighbor at 123 My Street".
All the time. Literally every day. Helps me get going.
I'm not sure how much blame should be placed on Microsoft or credit given to Google for software trending away from native applications and towards "the cloud." I think that would have happened with or without either company.
It's not quite like having a coupon or carrying a credit card, but more like insurance. You're insuring that the maximum you'll pay for coffee every month is $45. If you think of it that way, it's a pretty good deal, and doesn't come with a ton of friction (you're more than likely already carrying a smart phone). Now you certainly could pay less than $45/month on coffee with coupons, but this takes away the hassle from both the consumer and from the coffee shop.

I'm curious if the discount being offered to individual coffee shops is negotiated or if it's a flat rate. I would imagine that each shop charges different amounts for a cup of coffee, although maybe it falls around some uniform distribution. Certain locations probably skew one way or the other though; does a cup of coffee cost more or less in midtown or the financial district than SoHo?
Project Tango Teardown
That's innovation. Simple, elegant, disturbs the equilibrium. Great idea!
Why don't new services default to using a random string as an identifier, along with an alias for display, instead of a requiring a unique username?

Managing overlapping names among friends is something most people know how to do well enough already.
I wonder if she could claim the @InstagramHelp twitter account. It seems dormant to me...
Yes it is. It uses canvas and HTML DOM manipulation without using plugins like d3.
If I do what I want to with your code, that doesn't mean you aren't going to sue me for doing it.
Comparing Node.js Promises, Try/Catch, Angular Zone.js and Zone
YouTrack 5.2: Helpdeskers, Support Multiple Customers in a Single Thread
I've been using Dynadot lately and have been pretty happy. My only complaint is that their 2 factor authorization is not Google Authenticator compatible and doesn't work at all if you have 2 accounts on the system (like work and personal).
Dude was setting up shop ... if I walk by a coffee shop and see 12 mobile offices I don't think "this must be a good coffee shop" I think "they must have good wifi and not give a shit if you work there". It would appeal to my business-owner side, but not my consumer side.
Google BigQuery and Datastore Connectors for Hadoop
URL Blocked

The URL that you are attempting to access is a potential security risk. Trend Micro OfficeScan has blocked this URL in keeping with the network security policy.
URL:	http://www.wtfpl.net/
Risk Level:	Dangerous
Details:	Verified fraud page or threat source
> The value may go up according to the market, but the owner's taxes are capped.

So, the value according the market is not accurate. The value is actually higher. The problem isn't the laws. The problem is the market simply doesn't want to pay an appropriate amount for the person's property.
I've said this downthread but I'll say it again:

Rendering someone's content inaccessible without any means to get it back is outrageously insidious. It violates the implied social contract you have with your users. It's gross.

This would be just about tolerable had they renamed it – preserving all of her social network links – and then told her about it. Frustrating and possibly even humiliating, but at least not actually destructive.
Twitter no longer let anyone claim any inactive accounts. And only honour Trademark based claims if it's obvious there was intent to confuse and it's causing confusion.

It would be a no go.
I am exactly the same way.
Make Smarter Hashtag Choices With RiteTag
making it clear to you that he did not mean any harm is a way of apologizing

A better way of apologizing is actually apologizing. The young man's reaction was more like exasperation that I should have been put out.

My impression is that the comment was/is a comment on social media. My comment was written in that context.
Wow mate, don't get me wrong (I'm a SysAdmin/DevOps guy) but...

From where I came and from my background... RPM/DEB packaging is a SysAdmin job.

And... In a properly built infrastructure, what is recompile python 3.3 if not just repackage it?
A rant-y personal opinion: I hate when people say “Product Guy.”
Cloud vSaaS::Seeking Co-founders/Partners in the US
LiveOnSpot is a Cloud based vSaaS. It is likely to be in Beta soon. We are seeking co-founder(s) / partner(s) in the US who could come in and add value, specifically from a Financial / Funding and Growth perspective. US is the key market. We are seeking highly experienced and technology hands on, plus business driven people who have industry connections or who can initiate, network and explore industry potential to kick start and lay the foundations of the business in the US.

Where we would start is a demonstrable and a 'Ready to Go' Cloud vSaaS service that is post the ideas and concepts stage, with an ability to kick start potential business engagements.

Interested may reach out to liveonspot[at]liveonspot[dot]com
Thanks, it's been fixed.
Notfound.org Use your 404 page to help find missing children
CGamesPlay and TuringTest are both right, the gravity and springs model allows us to neatly show the data. These calculations take time and for bigger systems one might have to wait tens of seconds for it to settle. For smaller systems it's perfectly feasible to do this before rendering. To make sure the user sees a result instantly and to promote the interactivity the movement is shown.

I'd like to add that vis allows you to store the positions and use these for the next time someone views the graph. That way it may take some time to settle initially but is loaded nearly instantly the next time you, or another user, views it!
I'm trying to also include a Git workflow here too. I figure, the more realistic I make the process, the more useful it will be?
Thanks for sharing this Seth!
Brown University's Istrail Wins Grant For Haplotype Reconstruction Algorithms
I apologize, I believe it's functionally untrue. I believe functionally that Intuit has approximately 0% effect on tax reform.

I was being glib in saying that they do have an effect, because to me a 0.01 - 0.05% level of effect is negligible.
I can't upvote this comment/joke more. Reminds me of that guy who bought a bank building and forced out the band who foreclosed on him.

Found it: http://business.time.com/2011/06/06/homeowner-forecloses-on-...

On a more serious note, what is the procedure to get one of these dormant accounts? Is at all automatic and on the day I sign up simply makes it available to me? or is there some kind of internal system, or "drop" (as with domains) where these newly renamed accounts are made available? Transparency from Instagram on this issue would be best.