skysight-inc/HackerNews huggingface dataset:
If you can't get traction with licensing to a big partner, I would start with pillow cases since you mentioned the acne use case. That's something smaller, easier, more personal, an impulse purchase almost (even if online). You could do a kickstarter, or set it up as a small business.

If you think about people who suffer acne, a lot of them are young, even young enough to still be living with parents. It's possible their parents still change their sheets for them, lol... so the end customer isn't really as involved with the purchase, with sheets. But pillow cases, on the other hand, the end user will take things into their own hands, and it's an easier sell.
Yeah this is exactly it! Thanks!
>Con: Doesn't protect against attacks that can read files readably by the webserver.

This isn't a con for the custom API, it's a con for a forking solution instead of a serialization between two different users.

If PKCS#11 is indeed a good fit for that protocol then it's indeed a much better solution that something custom for the reasons you mention. Good luck with the implementation.
I couldn't see it being around $200, as even a decent frame for prescription glasses will run you several hundred dollars, I could see Glass being around $500 when all is said and done.
The issue is clearly not about the price of the licenses. The IRS is paying 200$ per machine to extend XP support (which is more in a single year than what they would have paid for new Win7 licenses).

The expensive part is upgrading the hardware to support Win7, rewriting all the software that aren't compatible with Win7, training the personnel to use Win7 (and all the newly re-written software). Now, imagine if they were actually trying to upgrade to Linux. They'd pay much more to train the personnel, they'd have to re-write almost every single software they have been using. On top of that, they'd still pay for custom support (and Linux support is considerably more expensive than Windows support).
well said and i completely agree. That said, the story of the hamburger maker is instructive. While it is true that many people in Japan practically lose their minds with the stress of contemplating perfection or failing to achieve perfection, this is the negative aspect of the mindset. The positive version, the version that drove that hamburger guy to success, is that anything you put your mind to doing, you should do with the intention of aiming for perfection. that may require years of practice and iterative improvement, but ANY task you decide to do is not worth doing half assed. I have seen people working in fast food serving water the best way it possibly could be done. They were not being paid extra for it, there is no tipping. It just reflects an inner pride of excellence.

That said, I think many people or even most of society misses that angle, and get cought up in the stressful negative side of perfection, leading to various horrible outcomes.
...nerds and social outcasts...maintaining core infrastructure...

You say that like it's a bad thing?
The wiki article on this syndrome is very interesting. Apparently there is a substantial number of people with this genetic deletion that are not diagnosed as they are cognitively normal. There does not seem to be a term for such 'mild' Williams syndrome like there is for autism.
I would use smart drugs to make myself smart enough to escape work.
I thought Rails had taught us that extremely opinionated infrastructures are doomed to at best be influential, but not widely used.

Sometimes actors have to be stateful. Sometimes they should be the interface to large, complex computations that take 20 minutes to run.

The market is choke full of techs that solve very narrow cloud problems. What we need is something that isn't so terribly narrow. Microservices is very, very narrow. Even people working for Fred George admit to that.
I'm not saying it should but I figure it would be easier to fully integrate an application that already used the Libre Office subsystem rather that integrating external mail clients.
> This is the wrong funding model.

It's only the wrong funding model if there is a superior alternative. It's a non-ideal funding model, but as is the main point of the article, they are and have been actively looking for alternative sources of funding without success. I hope your gripe is not directed at OpenSSL but at those who could be supporting it financially.
Going to have to be cynical about this. What problem does this solve? Cats-eyes[1] do a very good job the world over at the moment.

[1] http://en.wikipedia.org/wiki/Cat%27s_eye_%28road%29

edit: Now I think about it, that Wikipedia article makes it sound like Cats-eyes are mainly a UK thing. People in other countries - do you not have these?
It's amazing how we can identify the exact brain disorder responsible, directly or indirectly, for most British comedy of the early 20th century.
There would also be regular lights as I understand, just that those lights would be turned off when the lines can glow brightly enough.
> "This is why OpenSSL looks like a hodgepodge of hacks upon hacks in order to accomplish narrow goals with limited impact testing."

Can you point out specific examples that you view as hacks upon hacks?

Maybe I've spent too many years in the code base, but I've also seen worse.

OpenSSL does a lot. Maybe smaller modules would be better and more testing certainly. Organizations using it should also be contributing back more.

Hacks upon hacks seems like a stretch to me.
It takes some effort to recover quality standards after an entire country's industry and economy have been reduced to burning rubble.
The problem is that corporate capitalism is a system that delivers the best of both systems (capitalism and socialism) to a well-connected elite and the worst of both to everyone else. For a microcosm, look at commercial air travel. The experience (especially in the lower classes) is Soviet, but the fare-setting (read: price gouging) is hideously capitalistic.

Capitalism generates a set of wealthy people, who pull up the ladder by restricting society to the sorts of capitalism that enhance their wealth, while destroying any variety of business activity that challenges it. That's what we see in the VC-funded world. The VCs have enough capital to kill any fledgling business by funding (or creating, this being the purpose of EIRs) a competitor, but their note-sharing and co-funding makes of them a reputation economy that has more in common with the Politburo than a free-market system.

The problem isn't that capitalism is a bad system. It's that, when you don't have checks and balances that prevent financial and political power being traded for one another, you end up with a corporatist-statist structure rather than a free market. As power concentrates, it only gets worse.
Councils maintain streetlights:

https://www.gov.uk/report-problem-street-light
Online resource for hardcore computer science and other "headbanging" subjects, collaboratively written by, and for, people who haven't had a formal background in computer science or the equivalent "headbangology".

EDIT: I made my sentences, make sense.
Yep; not easy at all ... if it were easy everyone would do it :) I think with tools like puppet and orchestration tools like heat, etc it is getting closer to being easier.

I did got to a Netflix talk once where they said that while moving from AWS would huge, they had a plan and I think from memory they said it would take about a week.
It's a way to shift the value proposition. Nobody in their right mind is going to pay for free things. You can try to appeal to people's good will in funding rounds but it requires a recurring effort that detracts from the work. This is because we still have the view of software as being a thing you get in a box. A specific delivery that you use for a while until the new version is on the market. This is how proprietary software like Microsoft Office is structured.

Now in practice, software is never a done deal. You have bugs. Platforms evolve and you need to adapt the software to it. New features might be added. This is all things you might want to see happen in the future. A subscription service could be a way to participate in the process indirectly. Obviously things need to be balanced as to not corrupt the projects in question.

There are already actors in the place like RedHat and Canonical or product companies like MongoDB but they are focused on their platforms and usually sell "support". As a customer I have a big and changing variety of open source project upon on I depend and negotiating contracts with each of those is time consuming. I would rather pay a fixed amount and have access to a body of experts and direct (part of) their work on projects they own or not. If I scale my subscription up I get more throughput.

A lot of details are conveniently left open to keep the narrative simple and idealistic :)
Pinkie Pie disease?
Idea: Wikipedia like graph db for curated content

1) An API framework with an ORM of sorts around the existing graph dbs ( it could be Gremlin based ).

This would allow queries on levels of nodes ( tutorials -> { python | ruby } -> { django | flask } , etc. Another dimension would be { beginner | intermediate | hard }. An important search dimension might be the popularity of the curator (submitter), the upvoters and downvoters, etc.
The API would allow RESTful retrieval of nodes, and based on permissions granted to the user allow operations such as voting, modification, creation and deletion.
Wikipedia like data could be public domain, but the API itself could be self-hosted on private servers allowing for enterprises to have their own internal wiki of sorts.

Licensing should allow extension of the API if needed for premium revenue models that might allow users to create 'n' relationships on a server that is a kind of bookmarks, can keep private graphs, clones/forks of existing graphs/sub-graphs with annotations, etc. Or contributors may contribute code to extend features on the open source platform as well.

2) A web/mobile UI that would leverage this API and create the UX around searching,
for example, a) cross-indexing wikipedia and storing as graphs and allow different search algorithms to be built. b) a knowledge graph of maths ( similar to the ones at khan academy ) and linking in the URLs / videos based on dimensions such as target age, content length, language, pre-requisites, etc.
>Even buying dinner for a member of Congress is a felony.

But hosting an Obama fundraiser in Silicon Valley where each couple who wants to attend writes checks for $64,800 to the Democratic Party, why, that's just the cost of doing business!

This is, of course, what happens when Obama comes out here for fundraisers at the "Portola Valley home of star Silicon Valley venture capitalist Vinod Khosla and his wife" and the "home of Marci and [Flipboard founder] Mike McCue of Palo Alto":
http://blog.sfgate.com/nov05election/2013/05/17/obama-headin...

Now, this isn't limited to the Democratic Party, of course, though they're better at extracting money from tech execs nowadays. Point is that it's rather silly to say "buying dinner for a member of Congress is a felony" when there are far more lucrative alternative means for influence-peddling politicians to extract $$$ from influence-seekers.
Your content is often not in the webservers user, it's often stored in a SQL or NoSQL database somewhere. Various access controls can be applied there. But your right, unfortunately this isn't a 100% magic pixie dust solution to everything.

When you say "you can get new keys" which is true (although startssl appears to be the fly in this particular ointment), browsers don't validate CRLs, so the old keys are still just as valid as the new ones. Which makes getting new keys potentially worthless.

This is providing similar protections for your TLS keys to what your database server already applies.
It could be useful to have a site where researchers could post their failed attempts at solving difficult problems, a sort of "Journal of Failed Ideas".

I saw this suggested in a reddit thread a while back, might've been the Bill Gates AMA, but the comment was something to the effect of, "What if cancer researchers could post things they've tried in some central location, without the overhead of publishing papers in a journal?"

This wouldn't have to only apply to researchers. I had a similar idea while ago for a site where motorcyclists could post how they got into an accident so that others could avoid the same fate, like an informal NTSB-style accident report.
If you're concerned about using a hosted scraping platform because it might disappear check out https://morph.io - it's open source as well https://github.com/openaustralia/morph
Sorry, I didn't knew that... My bad.
What happened to Jai Alai? Echoes of a dying game
If you read the wiki article [0] they love meeting new people, but have problems forming strong relationships.

[0] http://en.wikipedia.org/wiki/Williams_syndrome
QADE uses Cloud9's ACE editor, so the frontend will look very similar. The backend is written in PHP instead of node.js, though.
Open source ad serving platform. Or P2P ad serving platform . Basically like Google Adsense minus Google, the middle man.

I have a site, and every month I get a check from Google with a seemingly random amount. Yes, it is connected to traffic, but what cut Google makes is a complete mystery. In my opinion Google Adsense is an unfair scheme for millions of publishers.
What's wrong with coffee? If anything, the current state of research says it's possibly beneficial, and otherwise inconclusive [0].

http://www.hsph.harvard.edu/nutritionsource/coffee/
I see where I've not explained myself properly. The existing code I'm referring to is the code that right now handles the TLS sessions in apache/nginx. That's the code I'm suggesting could be run from a forked process instead of in the main process. To need IPC to offload the RSA crypto you'd need to be doing Apache->TLS session code->fork->RSA operations. I'm saying you could do Apache->fork->TLS session code. Just run all your TLS sessions in a different process with the normal single process, no PKCS#11 GnuTLS/OpenSSL code. Is that not feasible?

To do that Apache needs some form of internal IPC to communicate its TLS sessions to the forked process. Maybe that's more complex than forking and doing IPC at the PKCS#11 driver level? Don't know.
Inside the Soviet Army (1982)
Sure, but to access a private class, I'd typically need to message the class to obtain an instance. I could obsfucate my access of the class, but equally I could obsfucate obtaining the selector.

The fact that selectors aren't tied to classes is exactly the reason this is so insane, as the example above (and the OP's) show!
No, "more or less for free" is not close to hundreds of thousands of dollars plus whatever funds came from the EU and NWO.

I have to say I am confused about your reply in the first sentence you seem to acknowledge that the wordingwas related to the cost of "writing and testing" crypto software. However in the second sentence you seem to indicate that your thesis was about the switching costs users face. Which is it? You did not say I get to use nacl "more or less for free" you said that "people have been writing and testing small, auditable and usable open source crypto, more or less for 'free'." That quote seems to be about the cost of creation not the switching costs.

Do you think djb et al produced nacl "more or less for free?"
Why did you stop taking it? Any side effects?
Any simple means of raising IQ would be so powerful economicly that many countries would have a huge incentives to disregard IP agreements. The market for illicit synthisis in contries that enforce monopolies would likely be bigger than modern recreational drug markets. It's the type of thing that would get cheap fast, as pretty much everyone would like to be smarter, most people don't care about improving their biking speed.
I don't find it aggressive, it seems more like Dutch directness to me. As an inhabitant of a neighbouring country, I must say it's an acquired taste ;)
It's not exactly a proof of concept if it doesn't protect the keys, is it?

It strongly hints that even if this is 'only a POC' that their actual implementation is still vulnerable since their POC failed to protect against the very attack is was written to protect against.
As a side note, the NaCL library you mention does only a fraction of the things OpenSSL does. OpenSSL could certainly stand to be broken into smaller components, but trying to compare it with a very small library that does mostly primitive operations is...an improper comparison.

I like Dan's work and have used in in projects, I just think your comparison and analysis are quite off base.
I've written a couple "polite" crawlers in Go (i.e. obeys robots.txt, delays between requests to the same host).

- Fetchbot: https://github.com/PuerkitoBio/fetchbot

Flexible, similar API to net/http (uses a Handler interface with a simple mux provided, supports middleware, etc.)

- gocrawl: https://github.com/PuerkitoBio/gocrawl

Higher-level, more framework than library.

Coupled with goquery (https://github.com/PuerkitoBio/goquery ) to scrape the dom (well, the net/html nodes), this makes custom scrapers trivial to write.

(sorry for the self-promoting comment, but this is quite on topic)

edit: polite crawlers, not scrapers.
I disagree. The post is written bluntly, but it argues with factual assertions, not with emotional appeals. I don't think criticism of its tone is warranted or really all that appropriate.
Great to see these guys are now out of Beta!

While their real-time Extractors aren't quite as quick as doing it yourself, we've found them to be particularly useful for sites requiring JavaScript and/or cookies to use.

It's also worth mentioning that it's quick to get started. You can start playing around with real data without having to dig into a site's URL structure, and then write your own scraper later if needed.
Just curious - what does this have that Gist doesn't, with the exception of creating an account?
When I first saw this headline I thought oh no, have we created another "syndrome"? But after reading it I realize this is probably what my wife has.

in the last 17 years I've noticed all of these traits over and over. She's extremely nice, friendly and approachable to the point where she's not only vulnerable but people have said it's "annoying". She is constantly reaching out, talking and being extremely friendly with people everywhere despite having HUGE issues with anxiety.

She has some learning disabilities and issues and works in healthcare where she is in a unique position because of her personality. She's unable to learn or retain certain things beyond a base knowledge developed over the last 10 years or so. She struggles with charts and paperwork and hasn't been able to move up beyond a certain level. She rarely makes mistakes but also doesn't take any risks with patients and doesn't do a lot of critical care.

But the reason she hasn't been fired is quite simply because there would probably be a revolt where she works. She is absolutely LOVED by the residents of the facility, her coworkers and even management. She's a "ray of light" that comes in and cheers everyone up no matter what and I honestly think if it came down to it they'd pay her just to come in talk to people if they had to.

It's one of the things I fell in love with so long ago that makes the downsides (frequent anxiety, OCD, over engagement etc) so much much worth it. It's very hard to be in a bad mood around her.

I'm glad to have found this article and it even inspired me to create an account just to post about this. It was eerie reading this article describing my wife... even the "buzzing bee" thing. Absolutely intolerable to her. Clicks, noises, things like that create great anxiety. But get her into a crowd of people and she'll be talking, relating and stealing the show.

I'm definitely going to do some more research into this.
Reading about this disorder reminds me of my sister. She has Down's Syndrome and is one of my favorite people in the world. She has basically the same strengths and weaknesses as WS -- open and friendly when not anxious, but unable to determine when it is appropriate to trust someone. It's been a blessing having her in my life. She's the linchpin of our family in many ways. I'd probably be more of a black sheep in my family's eyes if it wasn't for always being so excited to see me regardless of conflicting religious beliefs with my family, etc.

The brain is an amazing instrument and it's fascinating (and scary) how it can be wired so differently in edge cases, but deep down, no matter the abnormality, there's a "soul" waiting to connect if you can meet them on their terms.
Stoic Philosophy + Quasi-Algebraic Logic
ohh yes natch....I like the suggestion. A lot of people have suggested me to launch it on kickstarter. I also like your idea about launching pillowcases. I think its a must :). Thanks again :)
>Last I heard, Ubuntu was free to install

Ubuntu is free to install only because your free time has no monetary value. For organizations whose time has monetary value, the cost of an OS license is swamped by the cost of the time it takes to rewrite applications, retrain users, roll out the upgrade, and fix the inevitable breakages.

And like I said above, these costs are present whether you're using Linux or Windows.
I stopped taking it as I didn't feel the need to. As far as I can tell there's no reports on long term usage.

As for side effects, was a little harder to sleep, and I had to remember to eat. I lost about a stone in a month, but then my appetite came back.

Oh, and it has asparagus-like effects on the body.

I've still got some in a drawer I keep for the days I've got a hangover. Beats the hell out of coffee & a fry-up as a cure.
Which of the assertions in the post do you disagree with?
Isn't a POC supposed to prove a concept? i.e. shouldn't a POC defend against the attack it is stated to defend against?
Ask HN: Do you use antivirus software on your Mac, which one?
My company has installed Sophos antivirus on all of their macs and is now rolling out McAfee, but I've heard its not actually that helpful. Curious to get the HN community's thoughts?
This is a very comprehensive write-up by Daniel Tenner, startup founder, about his experience taking Modafinil:

http://swombat.com/2012/2/27/modafinil-and-startups
Why would you go with a market that offered lower spreads? What a strange question. You'd pick the market that offered the lowest cost of trades, which absent some other fact you haven't named, is the one with the lowest spreads.

There is the opposite of a cost to normal investors of "all these trades" occurring. The volume of trades makes the pricing of stocks more competitive and increases the odds that when you want to trade, someone who agrees with you about the price of that stock will be available to take the other side of the trade.

This discussion keeps waving the term "spread" around like a totem, but in reality the term just captures that paragraph.
Couldn't your problem be solved by Google just being more transparent? My thought why they aren't is to avoid people over optimising their pages.
Some people don't want to do "jobs" per se. I know I'm interested in development because it's something I like doing, and I have an unfortunate liking of expensive things. Some people are genuinely content with the company of other people, and only want to work so they can spend the rest of their time with other people, and making their days better. Would you say that someone who is a checkout operator in a store because they need money to be able to do the things that they want to do (go on holidays, or go to the beach with friends and family) has a handicap because they find themselves in what you consider a menial job? I certainly wouldn't. Sure there are a lot of people who would rather be making more money, but money isn't everything for some people.