skysight-inc/HackerNews huggingface dataset:
I really don't understand the thinking that %1 equity should have anything to do with salary especially after the company raised some money. That %1 is compensation for the risk you took joining a company with a questionable future... pretty much every new business by the way - even one that raised three million bucks. The only way you should ever, ever earn less than market rate is if you are a founder with a founder level stake and control in the company. Call it 10% or more... and even then it's a bad idea not to pay founders after raising capital. People who are worried about their bills are less effective. So yeah, I agree with samt in this thread "Either double down and ask for a shit-ton more equity, or quit and find a better job. Life is too short."

edit: You are not getting screwed by offshore talent you have already been screwed by the founder :)
I wonder if only working a few months a year is enough to keep your skills updated to the point where you can charge $100/hr at will.
Wow... the only comments are about the scrolling...
>Go doesn't really offer a whole lot in terms of security, except for better managed memory.

What makes it better? Haskell's GC is very advanced.
You know sir, as fun as Jackson problems are and as exciting modelling plasma sounds, I've been thinking of doing other things...

Thanks for the implicit encouragement.
What do you mean by 'full on private mode'?

You can set the privacy for anything you post to 'only me' (which is about as private as it gets, in a way), though I suspect that's not what you have in mind.
GSF Explorer
Not to mention your blog engine/site is broken. Please fix the fact that we can't click on the right scrollbar due to your fancy shmancy javascript side menu.

Put it on the left hand side, or don't overlay it over the scrollbar.

Damn #hipstercoders
Well, first off, if you have digital products like ebooks, it's not as if people will just stop buying them. He may not write more books but I imagine Nathan will still make a decent amount of monthly revenue with little intervention.

But selling actual software requires a lot more maintenance than ebooks.

Also, some people (myself included) are a lot more susceptible to parkinson's law with regards to money. I don't have an "enough money" number. I'm not greedy but if I can maximize my income while working a healthy amount, I'm going to do it. (All my kids are in school anyway). If I want to take extended time off and embark on adventures with my family, I'm going to do it.
no, but jakevdp is a great blog, and er.. that is some relevant info i should incorporate so thanks!

but i remember just scanning, it had a dark background and had many plots of mcmc output - sort of looked like a splom plot.

thanks for that link though anyway

--anyone remember this
Wow, thanks for sharing my post. I'm honored. I wrote this quickly and didn't expect it to go anywhere (I didn't even send it to my email subscribers), because it was more personal to me. Glad you all are enjoying it as well.

I should answer a few things:

1. This is possible because I sell products. I don't do consulting and haven't for over a year. My products will continue to sell even when I'm not working like crazy to create new ones.

2. I live in Boise, Idaho which is not very expensive. I could live quite comfortably on $80,000 per year. In Q1 2014 I made $140,000, so I'm not exactly hurting for money. If I hadn't purchased a house last week, my bank account would have plenty in it. This is not a risky financial move.

3. The consulting example was just a story I heard from a friend. That's not me, I don't do consulting. Being able to do something like this is another reason I like selling products even better.

4. This would not be possible without the great team I have in place to run ConvertKit. While it still takes my time (and I really enjoy it) they handle all the support and serious issues.

Anyway, hope that clears a few things up. Thanks again for all the kind words and attention.

-Nathan
Isn't it then marvellous that Rust is (also) a low-level language?
Design Patterns in Dynamic Languages [pdf] (1996)
Heartbleed: What it is and what options exist to mitigate it
Excuse my ignorance, but which book on GC is the famous GC book, I recently looked at a book on GC from the Uni library, and it was pretty awful.

Is there other books, papers, authors you would recommend related to compilers, optimisations, runtimes (vm or otherwise) and programming lanugauges?
Bluehost 70% off discount Coupon Code
I don't do consulting anymore. My living comes from products that will still sell (for a while) without new work. I'll be fine.
Apache Mahout to support Spark
The author took 23 paragraphs (with outlandish detours that equate technologists sleeping in cars and participating in CrossFit to "fetishizing the homeless" and trying to make a connection between that and libertarianism) to basically say that the tech community should get mad at institutions that lead to homelessness instead of the homeless individuals themselves. No concrete advice was provided on how to improve said institutions except for a quick mention of how Salt Lake City and Phoenix have helped reduce homelessness by giving away homes -- of course the caveat that those places have far more affordable housing and far more units to actually give away was not at all mentioned even though ~22 paragraphs previously the author was talking about how expensive 1 bedroom apartments are in SF and other tech hubs.
Exploring effects of parallelism in I/O operation on a single EC2 instance.
The title is misleading. StartCom is asking for its fee for revoking, that's all. Not making revocation free of cost isn't refusal to reissue cert.
I max out retirement accounts (plus a lot more) each year.
I more or less did this last year. I didn't say "no" to everything, but I basically stopped looking for new work by May. I then worked a max of a couple hours a day for the rest of the year.

Starting in November and December I started looking for stuff again-- I picked up a number of great clients for the new year, and it worked out quite well.

This plan obviously works a bit better if you have a few months savings to cushion any unforeseen droughts.
You're definitely right. It took me 48 hours of trying to stop working (or at least slow down) to show me I had to find something else to do. Now I'm just trying to find a balance between general life stuff and (more slowly) working on my business.
I'd have a lot more marketable skills if I wasn't forced to do the same old thing day in and day out for my boss all year. I had a 1 month sabbatical last year and I learned a ton.
The blurry photo shows that the new redesign features only two privacy settings:

* Public

* Friends

Below there is also some tiny blurry text that may stand for "advanced".
It's hard to do in the consulting world. I've moved away from consulting, but know exactly what you mean. Another good reason you should move more towards selling products. :)
Nice! What did you spend your time doing over the summer/fall?
> "Homeless people in these stories, it is worth noting, are almost always referred to by their first names, while their tormentors, or benefactors, are afforded the dignity of a surname."

Unfortunately an incredibly moronic story on a serious issue.

What sort of asshole would put someone's full name on the internet forever that they were once homeless.
I was in exactly this situation back in 1996. I moved back in with my parents and enrolled in a couple classes at the local community college. I guess the assumption was that I'd get back on track and transfer back to a 4-year program, but that never happened (academia really wasn't for me). At the same time a friend connected me with an internship doing what amounted to desktop PC support, though it developed into more than that over time.

It turned out I was much better suited to (and motivated by) real world work. (I already had a reasonable amount of software development experience prior to college.) I quickly proved my usefulness, was able to take on more responsibility, and learned a ton about networking hardware over the next year or so. I should point out that during this internship, I was working a lot. I was really into what I was doing, really enjoyed everything I was learning, and seeking lots of feedback from everyone around me.

Since dot-coms were all the rage at the time, there were tons of places hiring anyone who knew anything about the internet (today, it would be mobile or web development perhaps). After a year or so, when I started interviewing, it was apparent I had the relevant experience and no one cared that I hadn't finished college.

I got lucky with the internship, I got lucky with timing (dot-com boom), and I got lucky that I really enjoyed doing something that happened to be highly marketable. But I also was really motivated and worked hard. I hated school because it felt so pointless. But entering the real world, I felt super-motivated because I felt I was doing something productive that wasn't just a contrived assignment to be graded and discarded. If this sounds like you, maybe you'll follow a similar path. On the other hand, if your poor performance in school is a reflection of general lack of motivation that would carry over to work, you've got a tougher problem to solve. My guess is that based on your previous internships, you already know the answer.
So true. I thought about removing it for this post, but then figured not many people were going to read it anyway (I was wrong).
I wish someone could do a genuinely free SSL CA with "reasonable" procedures, just to disrupt the industry. Charging $19 to 500/yr for something which is fundamentally non-rival (unlike, say, a domain name) with very minimal marginal cost is basically bullshit rent-seeking.

SSL certs are an utter commodity, and generally the CA system is a broken system, but we'd be a lot better off with free "real" SSL certs everywhere rather than a bunch of self signed stuff. The loss here is the large number of applications with self-signed certs on the Internet, as well as the general hassle involved in purchasing and renewing certs for everyone who does.

The cost of having a well-run base CA is small number of millions to set up and maybe $1-2mm/yr. It would do a lot more good than many other charities. The marginal costs to do mail-from auth S/MIME and domain-verify certs would be limited.

I used to think StartCom was a good solution for this, but after recent staff departures, and their shortsighted-at-best policy here, I can't recommend them.

With commercial CAs, people use wildcard certs in a lot of places where they should be using distinct other certs. It's maybe not an issue for https for main company websites ($49/yr isn't too big a deal), but I want people to use real certs for START TLS email, client certs, etc. I also want one CA to be really popular, or at least one simple cert-issuance protocol to be popular, so "automatically generate a cert and CSR and get the cert loaded" becomes an automatic part of software setup.

I'm kind of surprised Google hasn't done this, in exchange for people proving ownership of a Google+ account or something. FB, Twitter, etc. could all easily bury the costs of a genuinely free CA.
Add heartbeat extension bounds check
Add Le Corbusier's LC2 (to the eames and barcelona chair) and and you have a few timeless designs, all from mid-century.

http://ecx.images-amazon.com/images/I/41a30HNuKeL.jpg

To the people discounting timeless design: yes most of contemporary industrial design is disposable, but some pieces from Braun and Apple will be considered classics.
> Brand new implementation of ssl library

Which will take some years to reach the security level of the current OpenSSL implementation (if at all).
I've heard of it, but have never used it.
Considering that he is Indian, I wouldn't be surprised if he plagiarized or took credit for some unsuspecting white guy's work.
"That's how much your equity is worth"

On the other hand, if the company never becomes successful enough to go public or be bought by a larger company, your equity is worth zero.

As for what to do: I agree with the people who say look for a job somewhere else. They've already lied to you about bringing your salary up to market rate, so why should you trust them to look out for your best interests in the future?
Um.. HBO's "Silicon Valley"?  Amazing.
Just sayin'
I've updated the ‘Learn Ruby on Rails’ book for Rails 4.1:

http://learn-rails.com/learn-ruby-on-rails.html

Also, there are 5 starter apps for Rails 4.1 from Rails Composer:

http://blog.railsapps.org/post/79115273530/5-starter-apps-fo...
Intel closes Costa Rica operation, cuts 1,500 jobs
Watch Episode: https://www.youtube.com/watch?v=VvkmsI54ss4

Thanks, HBO!
No, in this case it actually is price gouging.

If there are 1000 hotels on the market for a certain weekend in month X. Those hotels will see people search for and book a room. Initially those rooms will go for a very low rate. As the date nears, demand will increase and the price of the remaining stock will rise, so that the few rooms that remain as the weekend nears are made available at really high prices.

However if there are 1000 rooms and the hotels know the specific weekend and the nature of the people that will require the use of those rooms and they proactively price all those rooms at very high rates prior to even experiencing the demand, that is price gouging.
I believe that says "More Options" if I'm looking at the image you're referencing.
There are extensions to warn you about certificate changes even if the new is signed by a CA, so that's a terrible reason.
Flaw found in encryption method
I'm doing something similar. I don't have a mortgage or kids, so I don't feel it's much of a risk. If I keep up my skills, I can always go back to full time work.

In the interim, I also decided to reduce my cost of living (cooking more, cheaper apartment) so I can weather any droughts of work.
IMHO this article is pretty one sided.

In general, homelessness is terrible, there are very few people who will dispute that. What is in dispute is how to
deal with it. There are undoubtedly people who "want" to live on the street, and there are absolutely people who desperately do not want to be there.

I grew up in San Francisco, and while not completely immune to the plight of the homeless, I don't really have a ton of sympathy anymore for the folks who refuse help and just want to skate by. There are actually quite a few problems that are exacerbated by "outsiders" who try to help but really make the problem worse by supporting the habits of addicts and chronic bad actors.

If homeless people make you feel bad, donate money to the organizations that help care for them, anything else is just not really that helpful in the long run.
Mozilla comes to mind as an organization that could be trusted to do this.
80% more pixels is a lot.
Well reasoned and researched, the author solidly frames the moral conundrum. There is no "solution", obviously. To recognize that the homeless person and the successful entrepreneur are outliers on the same sliding scale, in their essence both disruptors of the status quo, is a step towards an adult perspective on the goals we pursue. I'm glad that Silicon Valley is feeling it too.
What is all this rewrite talk about? Just use NSS. Done.
I use StartCom, and I revoked and re-keyed yesterday. In the revocation reason, I linked to the CVE. They waived the fee, citing "exceptional circumstances." It could be that they're waiving fees only for paying users. My certs with them are all class 2 wildcards; definitely not free. Or it could just be inconsistency during a very hectic time for them.

I've used several CAs and StartCom is the one I dislike the least. I wish Amazon would become a registrar and CA. Then AWS would really be one-stop shopping.
The main cause of homelessness is a lack of political will to fix the issues. When Utah does a better job on a social issue than California or even Oregon, it's not because of a lack of resources ( CA, OR and WA all have greater GDP ) it's because we can't for all our vaunted liberality bring the resources together with the people who need them. Whether it's providing "wet beds" for people who aren't able to stay clean or just a straight up housing subsidy until everyone who needs a place is taken care of; it's not that hard. Except at the level of convincing voters to approve it. In many cases a direct housing subsidy would save taxpayers money on multiple levels, but we have large segments of the electorate that are emotionally driven by a refusal to help the indigent. Often framed as a disgust for moochers. A disgust which oddly never gets applied to bankers and lawyers the real parasites on the body politic.
One gist post and all these sites and their security drawn into question. Damn. I'm extra cynical after just reading http://goo.gl/bVDzqG, but damn.
It's not about "obscure SSL implementations", it's "alternative implementations", and letting different projects theoretically play off each others strengths and mitigating consumer risk similar to investing in an index or mutual fund rather than all-in with any single entity.

Also, there's nothing wrong with security through obscurity, but please don't let that be your only security.
Arq 4 SFTP critical issue
>= 9 digit exits.

I'm not a VC, but if $5MM (7-digits) is raised and the exit is only $20MM (8-digits), that's an okay return, but it's probably not what the people who put money in were hoping for. 4x seems good until you consider the tremendous risk the investors exposed themselves to.
> The AES implementation uses AES-NI when available (on x86 and x86-64 architecture), but fallback gracefully to a software C implementation.

> The software implementation uses S-Boxes, which might suffer for cache timing issues. However do notes that most other known software implementations, including very popular one (openssl, gnutls) also uses similar implementation.

Oh, well if OpenSSL does it..
I've actually been re-reading some of the "best of creative computing" books published by ahl. It is really sad instinct to see how the future was largely predicted.

As far as colloidal caves, you should check out The "get lamp" documentary.

http://www.getlamp.com
Thanks. That is what I was suggesting.
It's a cool idea and I've seen this work pretty well on the Android phone. I wish iOS was open enough for you to do it for the rest of us. :/
Every flaw we have seen in OpenSSL in the last year would definitely have been impossible in a managed language.
I switched to a career in programming at 35.
Fair question. The basic internet email spec has virtually no security features whatsoever, and is completely unauthenticated. Mailing list management software doesn't forge sender information, but rather often retains it and generally trusts incoming headers. Back in the old days, some folks even referred to discussion lists as "reflectors."

The proper usage of SMTP mail headers is outlined in RFC2822 (originally RFC822), and the definition of the headers From, Sender, Resent-From, etc. The rules for specifying sender information are spelled out in 3.6.2. [0]

That said, system behavior also depends on if the MLM software is running behind a mail transport agent that enforces authentication protocols for incoming emails, scans for viruses, etc.

When discussion list owners are concerned about receiving forged posts, they usually use list moderation features so they can ensure emails do not get distributed that haven't been reviewed first. But the biggest problem for MLMs isn't usually dealing with impostors, but rather blocking email-borne viruses and misconfigured auto-responders that could cause bogus emails to get reflected out to subscribers.

The behavior of the outgoing From header from MLM software typically depends on the configuration of the list. Some lists (especially digests) are configured so outgoing messages are "From" the list itself. But most discussion lists are configured to retain the original From line, while clarifying their role as an email proxy through other headers.

[0] http://tools.ietf.org/html/rfc2822#section-3.6.2
You're not confused. OP is confused.
It comes up from time to time, but I was thrilled when I found this: telnet telehack.com
Caltech also has a fantastic open sourced machine learning course[1]. In fact, students taking the class are instructed to watch these lectures, and class-time is used for answering questions about lectures/homework. (disclaimer: caltech student)

[1] http://work.caltech.edu/lectures.html
Heartbleed Security Update
cached: http://webcache.googleusercontent.com/search?q=cache:_g-9Lnd...
All Turing complete languages allow you to do anything all Turing complete languages allow you to do. You can allocate a huge block of memory in Java or C# and then write your own malloc to allocate buffers from subsets of it. In some cases that may have better performance. It also allows you to have buffer overruns. You can run right off the end of one buffer and into the next and the language won't stop you because it only knows that you haven't reached the end of the array it allocated.
I can understand if they want to charge for revocations, fine, but their attitude here is horrible. The customer wasn't demanding free revocation, he was politely asking if they would offer free revocations. StartCom jumped straight to quoting "Subscriber Obligations". Wow.
Also, you can't issue a new cert for a domain until the old one is revoked.
>OpenSSL is equivalent to monkeys throwing feces at the wall. It is, bar none, the worst library I have ever worked with

Ah, he haven't worked with MS Crypto APIs.

I was implementing TLS/SSL in one of the services working at MS. I couldn't figure out many things from MSDN and samples - they would not cover error and some variations code paths, and there was just no way to figure it out. And recovery would be something like "in third buffer there will be value x, you have to it pass to other function". And there was a need to do it correctly for obvious reasons, really. So finally I got IIS sources to see how it's done correctly, and discovered couple thousand lines of code with comments like this "xxx told us that buffer X will contain value bla if condition Z is met, and this is why we are doing it here". I had no choice but to cut-n-paste it to my service. I can tell you for sure, nobody outside MS can implement TLS/SSL correctly by using MS Crypto APIs. At least with OpenSSL you can read sources for both library and services and figure it out.
Nice move!

I was already wondering, though: might Mehta and/or Codenomicon have been put on the scent of the Heartbleed bug by an inquiry from one of the journalists with Snowden docs?

I hope we hear more about how each of the researchers found the bug – code auditing? fuzzing? observing attempted exploits? etc – and in the same general timeframe.
I have free Class 1 certs, and had to pay for all revocations. They did ask me first and pointed out that upgrading to Class 2 would be cheaper, and suggested that reissueing at Class 2 would be sufficient. However, they admitted it would create more latency. I bit the bullet and went ahead with the revocations.

My wallet is unhappy, and I do feel like charging for revocations is a bit odd, since revocations usually happen for security reasons and this deincentivizes good security. OTOH, they do run a business and I've created work for them at no charge previously, so I'm not mad.
Playing Hockey With Putin By THOMAS L. FRIEDMAN
Using Git Grep
Even if everything Hoefler says is true, and he owns the company outright, the fact that he let a high-ranking employee of his for many years believe they were a full partner is utterly deplorable.
A better enum for Rails 4.1
People are happy to leave horrible comments whether or not they're anonymous, have a pseudonym, or are using their Facebook account.

What's important is if there's an active community encouraging them to do something better. (This is different from just stopping them from doing bad things.)
>What makes it better?

Better than C, that is. Haskell is on a whole 'nother level of "what are memory bugs?"