skysight-inc/HackerNews huggingface dataset:
I like the concept. I and my team have probably reached out to tens of thousands of reporters and have seen hundreds (maybe thousands) of write-ups written, so I would like to think I have some experience in this (though I'm not a PR firm).

A few months ago I wrote "the hacker's guide to getting press" (http://www.austenallred.com/the-hackers-guide-to-getting-pre...) that distills the basic strategy and how someone could hack a solution together for free. Granted, it's nowhere near as elegant or simple as yours.

My concerns:
1. I'm not sure your questions are driven enough to create a short enough pitch. I tried it, and my pitch was 3-4 paragraphs long (2-3 paragraphs too long)

2. I know you think your pricing is fair, but you need a cheaper option for the lowest tier. Most of the people I talk to and work with are happy to shell out a bit, but $50/month is too steep. I would say $30/month is the right target, and that's month to month.

3. I got 10 results; trying through a Buzzstream scrape or a Google News scrape I'm getting hundreds. Part of the value is in quantity; I need to make sure that it is there. Are you only showing contact information if you can find it? What if you can't find it programmatically and I'm supposed to go out and find it on my own? I guess the question deals with the method, since this is one of the most difficult parts of reaching out to reporters.
Ditto. What makes me excited about their model is that this is working across several cafes in a neighborhood.
$45 is not for the usual Starbucks Double Grande White Chocolate Mocha with soy milk and two shots of vanilla flavoring, that would be $85. With at around a 8% discount (rewards) and a price of $4 per drink it comes out to around 23 drinks. Or 1+ per weekday for the same amount.

Not the greatest deal for those users I guess.
I'm a canadian student and I give money to the EEF each month because they're one of the strongest defendant of the web out there. I don't care if they're focused in the US; I care they're there to protect us.
That's a very weird lesson to learn from the heartbleed bug. What I learned is cryptography experts should be consulted on matters of math and ignored on matters of software. Any non-zero application of software development best practices would have prevented the heartbleed flaw, including:

1: Don't implement features you don't need. Nobody needs TLS heartbeat. Nobody. Don't implement it until you have a use case and the calling code in hand.

2: Test the features you do implement. What happens if this field is the minimum? The maximum? A power of 2? A power of 2, less 1? Negative when treated as signed?
... drop-kick your CEO? Could work.
Yes, I just recently switched to their Business Expert (or something like that) shared hosting plan. It's been fine, except for a few nitpicks and the fact their support staff has been sloppy at times (I social engineered my way into a password-protected page, thanks to them). I switched over from Lunarpages, so anything seems great by comparison.
The point of responsible disclosure is that it limits the damage done to users of the system in question by reducing the window in which the flaw is known and the systems are unpatched.

That doesn't apply for a book. Keeping the critique private for a week doesn't help the readers at all. In fact it harms them by keeping incorrect information in play and uncorrected for longer. Perhaps it softens the blow to the author's ego, but that is not at all what "responsible disclosure" is about. Helping out misinformed readers takes precedence over the author.
In general, the search space even for email addresses is probably too large for me to crack in a few days, but in the context above, where the author's email was already available online (on her website, in SPAM databases, in leaked credential datasets, ...), there is hardly any difference. In any case, if you consider my email address "personally identifiable information", I consider its checksum such information as well.
I'm sure the author is a nice guy. It is hard to put yourself out there like he has done. That said, when you put your name on something and put it in the public space, you have to be prepared for people to write these kinds of things. Furthermore, I think tptacek's blunt and at times snarky style is necessary to make his point. It is extremely hard to write clear critiques that don't sound harsh while at the same time clearly conveying the gravity of the situation. In short, tptacek can't afford the risk that softening his natural style means a major point will be missed. It's a bit like the old quote, "Sorry this letter is so long, I didn't have the time to make it short.". Politeness is a luxury one can't really afford when a book that has factual errors is already out there (and to be clear, I'm not qualified to assess whether this is true, I'm just speaking about the approach here). It is far better to write precisely what you're really thinking, than to couch it in all sorts equivocation and self-censorship.

Academic researchers get these kinds of critiques of their publications all the time. It's extremely useful to the whole academic process despite being infuriating and depressing. That said, most of those critiques happen before publication and in private. But as a book author, that's something one can control. If I were writing a book like this, my #1 worry would be that I was making claims or errors that would be held up on HN by folks like tptacek as evidence of my incompetence. I would therefore made it the highest priority to approach the most likely people to have an opinion to get them to review my draft ahead of publication. That's what people writing serious publications that have real world consequences do. Make no mistake: crypto is in this category. It's not like writing "The 4-hour Work Week", "Web Design for Programmers", or "JavaScript for Aspiring Ninjas".
Of course, that's why everyone suggests hashing passwords with SHA1, no salt. /sarcasm
I find it's really hard to make a homemade espresso that comes close to the one you get from a café around here. But then again maybe I should invest 10k on a new machine (and then 20k to renovate my kitchen to fit it in).
Argentina launches a national program to teach the basics of CS to all students
I'd prefer a link to some scientific discussion about the problems with caffeine.
No gurantee of reply. You do all the reaching yourself. We help you find a relevant story, relevant reporter, create tailored pitch, and then we give you the email address.
Gary Bernhardt – The Setup
WordPress Themes startup with a crazy approach
How does this improve over a french press and $15 of coffee grounds?
“That might be exactly the right transition for BlackBerry to make,” says Dulaney. “The problem is, you just can’t make that transition in the eyes of Wall Street.”

In that case, Wall Street is the problem.
Not quite. The "Americano" (espresso with hot water) common in countries with the espresso coffee culture was invented during WW2 when the GIs requested bigger cups of weaker coffee.

The american "regular coffee" is (weak) drip brewed coffee.
Bash scripting is one of those domains that people just randomly enter without a full walk through the documentation. It's one of those things that almost everybody learns by copy and paste.

Given that, I think it's nice to be a bit more explicit, as it means the person who reads your script to copy and paste a bit out of it is more likely to learn something new in the process.

Not that the copy and paste approach to learning a language is good, but that's how these things typically go in practice.
you could just ask for an empty cup and split the drink with a friend. then a little bit later, get another one. During a long talk with a friend, you could continue to do that and go through several cups. I don't think a random barista who makes 10 bucks an hour will care, especially if you leave a tip. The owner probably won't care because he makes more money every time you get a cup of coffee.
It's pretty much the law of businesses this days. If you pump enough money to market your product/company, then your sales will be orthogonal to the product itself. You can sell any crap, as long as your marketing team is good enough.
Those health benefits are more for people in their 80s. The coffee bean is actually a poison that the coffee plant uses to deter herbivores. Not to mention a recent Danish study that suggests pregnant women should abstain from caffeine as it's lethal to the fetus.
I'm not saying the review was personal, it's pretty clear that you're only talking about the facts. It's just that there are phrases that have a lower "hurt-to-information" numerator with the same denominator.
Hi Guys, I've been developing minicron as part of my dissertation at university and I'm at the stage now where I need to get as much feedback as possible so I can evaluate the success of my project in general. I'd really appreciate any comments/feedback you have, be it on the code, documentation, idea in general or anything else you think is relevant. Thanks!
Alright, if it's about amazing startups of DC then please add https://bubbl.in to this list too ... :)

We're all about flipbooks, started in 2014 at Reston area.
Well, we've consistently gotten a better bash as bash development has proceeded. As for something that removes the warts and doesn't cut out anything too important and winds up with adoption - it'll be interesting to see...
Radare Summer of Code
There's also these: http://www.ablogtowatch.com/citizen-satellite-eco-drive-watc...

Btw. I happen to know the guy who directed the ad. I just don't understand why Japanese watchmakers don't market their GPS watches more heavily and in a much lower price range. I feel that there is a huge market gap for well made $300-700 watches with GPS synched time. There's cheap quartz that aren't synched, there's the expensive Seikos and Citizen watches ($1000-$3000), there's mechanical Swiss watches you have to set up yourself ($500 to whatever you want to pay) and there's mechanical watches with perpetual calendar (start at $10k or so). As a result, Swiss watchmakers get most of world's earnings. Others just try to either emulate the Swiss or cheap Japanese quartzes from the past.
I'm guessing it's because he's from Slovenia (as well).
That is exactly what we are trying to avoid. We do not want you to spam 1000 reporters at once with a generic email. We want you to formulate very highly tailored emails to very relevant reporters. That is why we are look at articles from just last 24 hours. We are still improving the news search results.

Again - 14 day free trial with all the plans, and we just launched private beta, so not much to loose here.
8 creativity inspiring documentaries on Netflix and YouTube
Is An Ideal Entrepreneur Right Brain Or Left Brain?
> I personally like WP a lot, but this is (again) a winner-takes-it-all market.

But iPhone had seemingly won initially, and Android ate up ground from it even back when Android was complete shit. I think there's less lock-in for average users than there was with PCs, so it seems like what is required to gain market share is to give bigger cuts of the sales to the carriers who are selling the phones.

How long has it been since you went into an AT&T store and they tried to sell you an iPhone? They push Androids like it's crack they need to get rid of before the cops catch them. Because they make more money there.
This is silly. There is no advantage to using PBKDF2 other than to placate PHBs. PBKDF2 (as commonly implemented, with HMAC-SHA2) is faster than bcrypt and scrypt and particularly straightforward to implement in GPU crackers.

bcrypt is also approximately the same age as PBKDF2.

And, finally, standardization is a very poor substitute for security analysis. PKCS1v1.5 is also a standard. If you want to argue against bcrypt, you'll have to marshal actual arguments.
Writing a book to teach other people should not be considered first and foremost a way to learn a subject. You may learn when corrected, but at the expense of the readers that read the mistakes and did not see corrections. This is more important the more advanced or important the subject.

I would not write a book on structural engineering to learn the subject or become an expert. The stakes for the misinformation being spread are high.
Looks good man. Telling your story through some high quality photos and a video would really go far in validating your USP and pricing. If I were in the market for something like this that is the story I would want to support.
> I'm not clear on why layer-7 level MTU discovery is preferable to regular ICMP-based pMTUd, which actually does work with UDP (though you have to use recvmsg in a very complicated way)

One big reason is that it's really, really common for ICMP messages to be dropped by firewalls, which is really unfortunate. Doing it at the protocol layer ensures that such misconfigured routers don't cause problems for the application.

> or why fragmented datagrams would be much of a problem in the first place - but that's the reason.

Packet loss. If there is 1% IP packet loss, and datagrams are barely over 1 MTU and thus fragmented into two IP packets (such as when an intermediate link uses IPsec encapsulation, so the IP packet itself gets a little smaller), you have 1 - (.99)^2 = 1.99% datagram loss. Splitting up the datagrams gets you down to 1% datagram loss, same as the IP packet loss. Much worse for larger datagrams.
To me, this was annoying. I was interested in "trying" the product, i.e. seeing what kind of questions I would have to answer. You should just highlight empty, required fields when the user hits submit.
"this pervasive "experts only" attitude is a big part of why "secure" open source projects have hard times getting and keeping contributors. "

Exactly

Not to mention the need to have to filter through all the BS criticism. I've read people arguing that there was no issue in having the e in RSA (the public exponent) equals to 1. Really.
This is not a phone, as someone noted in another comment.

It is a good old pocket computer, and it is modular, and mine may (or may not) have a telephony module.

I have a Galaxy Note, I think I use it as a phone twice a week on average. I use it as a HN browser, a camera, a podcast downloader and listener, a navigation, a game console, an e-reader, a translator, for contacts and calendar, and phone calls. Having a big screen is helpful in 9 of these 10 activities. Being big is annoying in 1 of them.

Moreover a big device has a much bigger battery, thus a somewhat better battery life (only somewhat because the screen is bigger too, and you use it more.)
Just because an algorithm isn't suitable for use as a cryptographic hash function doesn't mean it's easy to crack. There's a world of difference.
Coffee is very good for you.

Water from the tap is not free, it is a cost everyone pays in some way or another (built into rent or part of property taxes). Even if you still live with your parents, a dollar they spend on the water bill is a dollar less for you.
>I remember computers built in the 90s and 2000s, touting their modular construction and never having to buy a new system again.

Did these actually exist as a specific product, or are you just referring to all computers that weren't made by Apple?
Yep.

For basic apt-get Ubuntu starts by merging with debian for each release: https://wiki.ubuntu.com/UbuntuDevelopment/ReleaseProcess#Mer...

Magnet links have been supported since rtorrent 0.8.9 which was release in June 2011. It was available for debian sid in September 2011 and is currently available in wheezy backports even. It was available for Ubuntu in April 2012 (possibly October 2011.)

GIMP 2.8 has been available for Debian since May 2012 if you run sid (or backport from sid). Debian stable since May 2013. Ubuntu since October 2012. Not sure where Mint gets it sources from.

These seem like reasonable delays in getting the package made available for testing.
This book doesn't come within an astronomical unit of being the worst book on cryptography I've read; _Applied Cryptography_ is far worse. Which is why I didn't write anything like "goddamn this is literally the stupidest book that has ever been written".
I am a novice in F# and pretty much have no idea about R, but what I can see here is that World Bank Type provider is providing the OP with the data.
This brings back memories of reading through Norton's programmer's guide to the PC, figuring out how all the various interrupts worked. It was always faster to write to b800:0000 than use int 10h (assuming a color display of course!).
The Truth about Google X
Nothing beats drinking an espresso from a cafe's machine around the corner - I'll give you that.
"Full Stack DevOp", worst three words of 2013 in the same title.
I think it's a decent metric, and I'm surprised you don't agree. If we forget the "human time" part, it's a clear indicator of which method is more efficient.
Say Hello to Sidenotes
I'm pretty sure that's still a thing (in Denmark at least). It's a different economic proposition, it's more of a "loyalty program" to make Statoil the default choice for gas than an effective way to pay for coffee. Also, the quality of the coffee wouldn't be competitive in NYC, to put it politely.
> It allows me to continue to support the deconstruction of abandoned homes and buildings in the Detroit area, which is one of my main focuses.

This is a good bit of the story, and the value proposition I think, as are the things on the About Us page. I’d suggest you get at least one more of those bullet points on the homepage. I’d go with something that hits: Reclaimed, Recycled and Biodegradable, as those seemed like strong points to me.
Isn't the main point of the stock split to give Larry and Sergei the control to not care if their shareholders want short term profits?
And yet, probably 99% of their owners will never purchase a replacement battery.

For a given sized phone, a replaceable battery is necessarily smaller capacity than a fixed equivalent, due to space wasted on additional housings, clips and connectors.
You're spot on with the cultural shift.

To me, complaints about tone are for critiques that contain phrases like "fucking idiot" and "worthless waste of space" and other such direct insults or attacks.

If something legitimately makes you stop and stare with your mouth hanging open, it is OK to say "this statement made me stop and stare with my mouth hanging open." Phrases like "I am not making this up" are reasonable shortcuts to expressing that sentiment.

Could Mr. Ptacek's review have been worded more kindly? Of course. Do I care? Not at all. It was nice enough. It concentrated on technical flaws rather than personal attacks. It was informative and useful. The tone was just fine.
I'm a recent zsh + oh-my-zsh convert, and I have a severe case of "why didn't I do this before"s.

Here is a great gallery of oh-my-zsh themes: http://zshthem.es/all/
I love the camera on my 920, it takes great pictures (for a phone), and I have been wholly satisfied with WP as an OS. I have missed the integration with Gmail etc on Android. That's been the worst of it, and it has been manageable.
Guy Kawasaki Joins Australian Design Startup Canva As Chief Evangelist
I'm not willing to answer the challenge, but I definitely believe it could be done. If someone was willing to purchase a large list of harvested e-mail addresses and sha1sum them all, it is very likely a commonly used address would show up in it. Now, if the address you used above is actually some single-purpose address similar to what I use for all my online accounts, that would not work, but I believe that very few people use dynamic partial addresses in that way. Not even the simple ones that gmail provides.
As the witch from Princess Bride would say, "Booooooooo! BOOOOOOO!".
This is great. I wish I could get this in the suburbs, with Tim Hortons on delivery.

Recently I purchased a Keurig k-cup brewer. The machine wouldn't always pump out water, so thinking I was screwed I ordered another Keurig brewer, this time the Vue. $150 for the first Keurig, $100for the second. In the meantime I purchased bullet proof coffee to give it a shot, thats an extra $45. So, in a matter of 1 week I spent about $300 on just getting my home coffee situation together. And I still go to Tim Hortons on my way home from purchasing coffee at the grocery store, or if I am out.

FWIW, I called Keurig thinking they wouldn't do anything and they sent me a brand new k-cup brewing machine that is in a box right next to me. But I do love my K-Vue machine, its the best single cup @home experience I have been able to find and I probably drink about $45 worth of coffee out of it each day.
Looks great! Testing it later :)

Could you write a bit more about the Hub/CLI architecture? is the CLI pushing the output data to a publicly available Hub?
It's not specific to cryptography. There is a hierarchy in all fields:

1. Top researchers come up with algorithms and techniques

- The research corpus reviews them

2. Top programmers implements these techniques

- The programmers communities review them

3. Top engineers write books to explain these techniques

- which everybody else relies on in their tools

1 knows more than 2 which knows more than 3. But each group needs the two others, and the rest of the worlds needs all of them. People who write books are rarely the same people who come up with cryptographic breakthrough. Instead, they are engineers, and they can use a bit of help to get things right.

Your review was harsh, because you know more. What, I think, was missing from it is a bit of "This is a great first step, let me help you make it better so we can move everybody else forward. Here are my comments."
+1 for DCHN meet up!
Sorry, I have a habit of not clarifying enough. I'm not saying you said that, I'm just pointing out that one can say the same thing more innocuously if one is a bit more dry/factual.
Keeping Your App Updated Matters
5 Tips on How to Craft a Great Brand.
It appears the next beer is on you:
http://imgur.com/YcqwAI1

Crossed the 60 second mark just now.
Definitely interested in reviving the existing one, but preferably in DC. :)
The fact that this spans multiple coffee shops is the most interesting thing here, I think.
90 minutes is legendary!

I work a 45 minute morning yoga routine. That seems to be an optimal amount of time for me to do some good work and find my bearing.

After warming up, the core of the routine is a modified version of the Surya Namaskara (Sun Salutation). For example, the flow for this is:

1. Start in a standing position like Mountain pose, but with hands in Namaste.

2. Stretch the arms up and out to either side (parallel to the floor) and bend forward (like a dive).

3. Move the arms in and reach down to the floor.

4. Flow into plank (push-up position: palms on the floor, elbows slightly bent and knees off the floor).

5. Flow into upward dog (knees off the floor).

6. Flow back into plank and do a push-up.

7. Flow into downward dog.

That is the start of the routine, and everything revolves around it. For example, after step 7, I perform different asanas, like Warrior I, Warrior II, Reverse Warrior, Triangle pose, etc. Then, I flow back by reversing the steps (i.e., 7 through 1).

Near the end of the overall routine, I close out with balance asanas, including Chair pose, Side arm balance, Warrior III, etc.

Once my coding day is done, I rock a 45 minute round of some other form of exercise (i.e., not yoga). I personally find that a twice-a-day routine really helps me with my cadence and outlook in all aspects of my life.

Hope that helps!
Thanks! :)

Edit: Yeah, so the CLI sends data over HTTP(s) to whatever host you configure it to, that could be public or not. As I've said in https://github.com/jamesrwhite/minicron#security though until I add authentication to a bunch of places and review some other things I don't recommend exposing the hub to the public internet, it should be behind a firewall or only accessible over a VPN etc. Hopefully that clears it up a bit but let me know if not!