skysight-inc/HackerNews huggingface dataset:
Ask HN:  Password manager?
With the recent news about Heartbleed and the advice to change all passwords (which should be done periodically anyway), I figure it's time to look at the state of password manages again.

I've got a general set of requirements, but I'm also interested in what HN likes in general.

My general requirements are:

- MacOS/iOS/Linux support

- Cross-platform syncing, but not reliant on a specific service provider (e.g., WebDAV sync or folder sync is preferred over Dropbox sync)

- Encryption done locally - the syncing should really just send a blob of encrypted data.

- The usual browser integration, password generation, storage of metadata (password last changed, notes, etc) stuff.

So far 1Password with WiFi sync looks like the closest fit, but I'm curious to know what else is out there.
How to Puppy – it's Hacker News Nation #21
Glenn Greenwald returns to the United States
An analytical way to look at this would be to compare the "net present value" of the future earnings from the two opportunities. Given that the startup has not raised any funding or revenue yet, and I don't hear you saying anything about how exciting it is, I'd have to guess you have more upside in the training and learnings from getting proper software development mentorship.
But the more you accelerate the spaceship, the more energy you need, with the energy diverging to infinity as your speed approaches that of light. At some point, your spaceship will become so energetic that it, too, will collapse into to a black hole.

That is simply wrong. It is called relativity for a reason. An object might be traveling arbitrarily fast, but in its reference frame it is not moving.

That pretty much invalidates that part of the article.

For curious readers: http://physics.stackexchange.com/questions/3436/if-a-1kg-mas...
How Founder Control Holds Back Start-ups
Greenwald, Poitras to return to U.S. – POLITICO.com
Hi, I am building a messaging client that is designed to be cross compatible with all types of messaging (email, sms, xmpp) but more importantly sort / group the messages in an easy to use way. I could really use some feedback on the product and website: http://raven.enterthemist.com you can email me at my gmail address: ofer dot sadgat.
Businessweek hijacks Galaxy S5 launch to highlight deadly worker conditions
SQlite is -- or has been, at least, not sure if it still is -- used in Firefox. What they haven't included in Firefox is a WebSQL database implementation, because they believe -- and rightly so -- that WebSQL database wasn't appropriate as a web standard, and didn't show any sign of heading toward something that would be appropriate as such a standard.

Istill haven't seen any argument on why it isn't possible to freeze it at some point and agree on the fact that that's already an interoperable standard that works in the field right now.

This is IMO still an the result of a NoSQL biased group of people that decided to go another way for the sake of being cool. SQLite is specced and tested inside out and back and forth (LITERALLY!) You can write a spec on that better than you can write a spec on how IE 6 behaves.
"You wouldn't even need to run the program if you could prove absolutely anything about the properties of a program."

That's not really true.
Tinder Valued at $5B
NSA Said to Exploit Heartbleed Bug for Intelligence for Years
Not necessarily an Internet connection, but definitely a local network. Before we caved in and started using Quickbooks across the board for both invoicing and POS retail in our storefront, the bosses had me whip together a custom POS based on parts of OpenBravo and OpenPOS. I was running a virtualized, modified OpenBravo ERP server that was connected to the front register running a heavily modified OpenPOS front end. It was quirky, buggy, and ugly, but even if we lost Internet we could still operate as long as the LAN stayed up.

Now we're using Quickbooks for everything, because our accounting office wanted easier reporting. It's a nightmare, but at least we have good outside support across the board, instead of me being on call 24/7.

I'd love to give your project a shot in my spare time, and see if it might be useful for inventory management if nothing else. Quickbooks sucks in that area without their expensive add-ons.
Americans can't keep up with outsourced foreign factory workers, either. Americans are unwilling to get paid $5/day.
If you're rich enough to spend $2500 on speeding ticket insurance, putting away $50,000 for an insurance deposit isn't a big deal, so no, that $50,000 deposit costs the same as it did.
Ok, I stated "many", but not all or most.

I of course have not your expertise. I am also not totally up to date with the newest mitigation techniques. I think, it depends largely on the focus of the allocator. Most have only speed on focus and that is what is implemented.
Yeah, also, Koa has a lot of express sugar baked-in, express turned into sugar on top of connect, then left connect behind and so on that koa is actually really removed from connect.
Of course they were shocked, they pay nothing for equal or even better service and they are covered through the whole EU.

The problem is not if $150/mo is too much or not. The problems are [1] copay and [2] what happens when you don't have a job or money or neither.
We all heard the stories "This car ran over me and I'm $100k in debt now" or "I got this $15k bill because I passed out and the ambulance took me to the hospital". That's just plain impossible in the UK or pretty much in any other country in the EU.

That doesn't mean that you can do just fine in regards to health care if your salary is $100k/year in the US.

And I'll give you that in reality it doesn't look cheap when your paying 40% of your salary in taxes, but I'm happy to know that today I'm the one contributing and tomorrow I could be the one receiving treatment "for free" or "paid by others". It's called society.
A police officer friend once told me, to put your hands out the window when you get pulled over, and leave them there, until the office tells you to stop. Then you casually say sorry and mention that an cop-friend told you to do it, to put their (the cops) minds at ease while they walk up. Anecdotal evidence on my end, suggests it works.
I think the author is conflating the document-oriented variant of NoSQL with the whole family of databases.

I cannot criticize him for leaving Couch|Mongo if their data is rich in relations, but I would like to read his thoughts on graph databases for instance.

Maybe their data is too large for Neo4J, but for querying n:m relationships, this model can offer advantages.
Interestingly enough, I have the opposite mindset. I never learned to play any instruments (although I would still like to buy a keyboard/synth one day), but I came across a reference to music programming the other day, which led me to ChucK. I'm intrigued by the idea of learning this (or one of the similar products) as a way to explore creating music without needing to learn to play guitar or whatever.
For a start it would have stopped me mistaking the first commit for the last commit. More importantly, where you see the commit message next to lines of code[1], "initial commit" hints that you can assume the line came with an import or boilerplate.

1. https://github.com/expressjs/body-parser/blame/master/index....
Not just on the logo, but on the Home Page: He’s running for Congress as a Democrat in New Jersey’s 2nd Congressional District.
Bloomberg Article: http://www.bloomberg.com/news/2014-04-11/iac-said-to-buy-bac...
What incentive to the incumbents have to give up their lockin?
Meta commenting about down votes is frowned upon on HN. You should probably remove your "NB" as it could be considered as complaining/baiting and turn into a self fulfilling prophecy. From the guidelines (http://ycombinator.com/newsguidelines.html):

Resist complaining about being downmodded. It never does any good, and it makes boring reading.
Please don't bait other users by inviting them to downmod you.

Regarding your comment, I don't think I can help but I'd be curious to know what are "outbound recovery attempts". Is it related to those "postmaster" emails you get when you try to send an email and it fails to deliver?
This is optical microscope with 5mp digital camera. Multiple shots (from 4 to 800 for large chips) are stitched in 1 big panorama.
The problem with only using Twitter for customer support purposes is it reflects poorly on your online identity. Twitter's profiles will rank pretty high in Google and if everything that comes up is you looking to resolve something (even if they are legitimate concerns with companies where you weren't at fault), it comes across as a one sided use of the medium.

You also describe the usual chicken and egg problem any social medium involves. Nobody will follow you without interesting content and if you have no followers, you're less inclined to spend time posting it. Break out of that cycle by spending a limited amount of time on our tweets first. Make mistakes and figure out your voice while you don't have a bunch of followers yet. See if the 140 character limit works for you e.g.. Find value in the process of coming up with the content in the first place. If you still enjoy that, then you're well equipped for a larger following.
The sentencing blows my mind too. Like you said, the information was out there for anyone to see.
Even after deleting the file, you can still find it in git's history, it's just very slightly less easily accessible through github's web interface. The whole point of git is that nothing ever actually gets deleted.

You need to do a reset of any credentials that end up in public, ever.
I am building a lightweight ebook reader (currently ~32kB compiled) that will be used to gather statistics on how people read books, magazines, etc.

The idea being, if we know how people read we can help people learn better. Obviously, there are other uses such as improving reading speeds, comprehension, and more. Further, we can potentially learn how structuring of sentences can effect peoples interest and learning as well.

Github: https://github.com/lettergram/basicbookreader

Email: austin at agw.io

Currently, I need help with cleaning up the project, and enabling Epubs, PDFs, and HTML files to be read.

Future goals: make it compatible with android and iOS, set up a central location of the data, improve statistics functions. The current version on github does not have any statistics, I'll update later with a fully working version of statistics.
If a 11-99 license plate frame were an effective protection against speeding tickets, the obvious question would be "why not counterfeit one?"

The cost of making even one frame would be far less than $2,500. Even better, why not make a batch of them and sell them illicitly?

The economics don't seem to add up.
If you want to complain about foreigners displacing americans I think you would have a better argument with graduate school. At BU more than half of the engineering PhD students are foreign, and that isn't just displacing Americans, it is also 100% tax payer funded.
In five years your personal online security could protect your identity
I would be interested in theories as to how many additional accidents and deaths this leniency has caused. The thought of a police force increasing the death rate on their roads in order financially support their coworkers is depressing to say the least.
I am curious, what is the worst that can happen to someone if their email address + iPad SIM identifier is exposed.
These are pretty clever!
For a simpler model, if you don't want to wade into consistent hashing and DHTs, there's also IPv6 Cryptographically-Generated Addresses[1].

[1] http://en.wikipedia.org/wiki/Cryptographically_Generated_Add...
People go to such amazing lengths to avoid getting a ticket, but it's very easy to speed and not get pulled over.

1) Don't drive stupid. It's perfectly possible to drive very fast without driving badly. If you're swerving a lot, accelerating then stomping on your brakes, jerking from lane to lane... it's an indication that you're not planning ahead and are therefore driving badly. You deserve to get pulled over. And for heaven's sake, don't race unless you're willing to get pulled. Be a little grown up.

2) Go as fast as you want - but don't be the fastest car on the road. Always let a cop-catcher run about a 1/4 mile to 1/2 mile ahead (don't tailgate them, that'll get you pulled over for speeding and being an ass).

3) Don't use a detector. They give you a false sense of security and will guarantee that if you do get pulled, you get a ticket. Not only that, 90% of the time no officer is going to leave the radar "wide open" on all passing cars - which means your detector won't go off until after you've been tagged.

4) Don't speed in residential areas. There's just no gain.

Bonus tips:

1) As much as possible, stay out of the left hand lane. That's just easy pickings right there. edit: that doesn't mean it's okay to zip around people on the right. Just don't sit there with the pedal on the floor. be there when you need to be - but don't be there when you don't .

2) When in an area that you can't see possible hiding spaces get adept at feathering your speed down a bit and letting a car (ok) suv (better) , van or truck (best) on the left side shield you from that spot. Edit: again to clarify this doesn't mean zip around on the right. You're actually going to be gong slower or matching these cars, preferably from two lanes away. If you don't have two lanes, don't do this.

3) At night it's especially easy. I don't know if it's the same in all staets ,but every one I've driven through cops have their headlights on while they wait. If you look far enough ahead - and you should be anyway otherwise you're driving poorly and deserve a ticket - you can see a copy waiting a half mile off or more.

4) If you think you've been tagged, don't slam your brakes. In addition to being a hazard, the cop has already tagged you - and the sudden flare of brakelights is a surefire giveaway to the fact that you know you were speeding. (This one is the hardest for most people...)

In the 1980s "A Speeder's Guide to Avoiding Tickets" came out, written by a state patrol officer. I think most of what I do up there is a variation on what's in that book. If you speed a lot but are willing to do so intelligently and safely, you should get it. It's excellent and still as valid.

Anyway - that got long-winded. TL;DR: speed smart and safe, don't be an idiot, and pay attention and you don't need to spend money on a fancy license plate frame. (Or a FOP sticker in other states...)

- Speeding ticket free (and driving fast and smart in muscle cars) for more years than I can recall.
If you want to use a purely document oriented model and not have redundancies then you have to partition your object graph into a set of documents that do not overlap and have no relationships between them. I can not think of any real example that fits this model.

Start anywhere, for example, pick your users and create a document for each. Now you take the orders of each user and also put them into the document belonging to the respective user. Fine, that works. Now we come to the products they ordered, and now we have a problem. Unless no product has ever been ordered by two different users we have to duplicate product information and put it into several different documents. And there is the same problem within documents if the user repeatedly ordered the same product.

All interesting problem domains just don't fit the idea of piece of JSON without references, internally or externally. There is of course support for reference in document oriented databases, but then lets just call your documents rows in a table and your references foreign keys and we are almost back at the relational model besides that documents still have a richer model, a bit like a NF² relational model or database with deep support for XML or JSON columns.
In my country noone uses twitter I know. I only used it once to message Digital Ocean why are they so slow. It worked out better than I expected, they responded in 5 mins and I could see others with the same problem. Other than that I really don't know why would I use it. I think for me reddit multis are the perfect solution.
Yea I'm pumped for the fact-check stuff as well.
Did you read the whole article? People are doing exactly what you're saying.
"You don't _get_ user experience, twenty years after even Microsoft got it."

Just as terse, no sarcasm.

I don't see how it saves time when it necessitates you to follow up with a wordy response - if you were after saving time, you wouldn't even have responded to my response. But I guess this is yet another case of me not _getting_ something.
== Help Me Out: With growth/marketing for ShelfLife.net, a social marketplace.

ShelfLife.net makes it easy for collectors of toys, action figures, video games, etc to buy, sell, and research collectibles, and track their collections. We've got a solid product built, and trying to figure out how to grow the userbase significantly.

nick-at-shelflife.net

== I Can Help:

* Startup/entrepreneur mentoring.

* Ruby, Rails, JavaScript, MySQL, PostgreSQL, MongoDB advice.

* Certified parkour instructor.

nick-at-deadorange.com
This is a great victory for justice and due process.
A forum discussing plates like these: http://forums.officer.com/t124675/

> Those are just as useless, they actually make me want to stop the car to see what the person is trying to hide...
I did not check the contents of the article on correctness. It seems to me, that OPENSSL_Malloc is really only malloc by default -- but I lack the time to really check.

I wrote this sentence, because there is a big discussion ungoing, with some people blaming the self written allocator of OpenSSL. See the link, I gave. My point is, that even when it is so, having the standard allocator does not guarantee that you find this bug /in testing/ -- what is claimed in that article.

Correction: When you read the article of this topic exactly, the freelist implementation (allocator) is used for recvd data. That is what started the discussion.
If stopped by an officer, do you pull out the paper and say "by the way, i'm a member"? Doesn't seem smooth.
Yeah, that's not good.
Yes, that's why I said the economics didn't make sense.
It's tough to make a direct comparison. They're very different systems. Here are a couple thoughts:

- From what I recall, ChucK doesn't really have any equivalent to CSound's score -- you just procedurally schedule changes. If you've every seen JSyn [1], I think ChucK is roughly equivalent to it, but with the language adapted to be more music centric than Java. JMSL [2] is roughly a Java equivalent to CSound's score file, and I don't know of anything in ChucK that fills that role.

- CSound is not really built for modularity or flexible routing between components. ChucK is better in that regard.

- CSound also has the benefit of a couple decades worth of usage and all sorts of interesting corners to its ecosystem.

I'm sorry if this isn't a very coherent comparison. I haven't used CSound in a few years, and ChucK in even longer. If you're doing classical music, I imagine you'll value CSound's scoring capabilities over ChucK's synthesis flexibility.

[1] http://www.softsynth.com/jsyn/

[2] http://www.algomusic.com/jmsl/
$20 dollars and make your own:
http://www.autoplates.com/store/custom_apps_a_FrameStandardB...
Careful there, tiger...

http://en.wikipedia.org/wiki/Double_Jeopardy_Clause#Dual_sov...
I find it very likely that when the foundation issued these license plates they knew people would donate to get them in order to avoid some speeding tickets. This probably resulted in a lot more funds raised than if they gave away jackets, hats, or something like that. Thus, it was clearly in 11-99's best interest to do this.... And I don't even think it's a bad decision. Sure, some more people get off on speeding tickets, but the additional money raised allows 11-99 to better support the families of officers in times of crisis. At the end of the day, more of the latter seems a lot better to me than less of the former.
NSA said to exploit Heartbleed for Years
You're way of calling people stupid is a stupid way of thinking.
Hey! I watched the full video and clicked around your site a bit. I think this is fantastic. It's just anecdotal, but I've met quite a few people who are far more comfortable in HTML/CSS than they are in any backend work, so although this doesn't count as market validation, I don't think you're targeting too small of a segment.

In fact, I had someone pick my brain just a few days ago because they want to build a professional-looking site for a friend, and they're comfortable with HTML and CSS, but they don't understand how Wordpress works.

I did find a few things that I think needs some work though.

You're presenting a commandline interface. I love commandline. I much prefer a sensible CLI to even the best graphical interfaces. But your target market? I'm not sure they'll like that nearly as much. If they were comfortable with CLI, they'd be probably be comfortable enough to find their way around a server. Is there any way you can manage testing & deployment without the CLI?

On your site, you advertise the virtues of a static site as being fast. But, in the video, images are loading slowly on your demo page. It really stood out to me. You might consider having the page's images already in your browser cache when you load the demo page.

And the video -- the video is really a bit rough. You're clicking around way too fast in the video. I had trouble keeping up with what you were doing. The page template you're using in the video isn't sexy at all, so that makes it less attractive to designers. Having some kind of default page template along the lines of what you'd find for Wordpress would probably be good.

The video was also too specific. You went into some detail on embedding podcasts or Soundcloud stuff, but didn't really explain any of the rest of the interface. In your intro video, I don't necessarily need to know step-by-step how to embed a podcast, I maybe only need to know that it's possible. At the end of the video, I still felt like I had no idea what Webhook could do, which sucks because although I'm not your target market, I probably know 6 people who are. Along the same lines, there were a number of typos and miscapitalized things in the video, and some of the dialog was a bit hokey (like when you remembered that you actually had to go into chat to invite a participant). This adds to the "rushed" feeling in the video.

And the thing is, it looks like you've got a really polished product! Then you have the video, which makes it feel a lot less professional.

Also, it seems like you could tap a secondary market, by hosting a template shop on your site and taking a cut from sales of the templates. Just because someone's comfortable with HTML & CSS doesn't necessarily mean that they want to start from scratch. With the explosion in popularity of things like Bootstrap, I think there's pretty good evidence that people are avoiding that as much as possible.
Liquidity for shareholders. A private company's shares are in most instances essentially worthless or are substantially discounted because the "value" of the shares can't meaningfully be converted into cash (because there is either no market or a very limited market for those shares). A public company's shares are highly liquidable.