skysight-inc/HackerNews huggingface dataset:
I remember creating all sorts of games back when I was a student. I dreamed big, and created at least some games which fell far short of my dreams -- but I never imagined that I would be able to find an audience for them.

Nowadays, Kickstarter creates the illusion that it is easy to become a commercial success. Put a few screenshots up, create a website and video, and shazam! Get rich. (Or, in your case, get enough to pay your expenses for three months.) Except... as you discovered, it doesn't actually work like that.

Unfortunately, as other commenters have explained, you don't currently have the ability to convince people that you are going to make something great. But that is not to say that you can't make something great. Just to say that commercial success requires a lot more than a big vision and the talent and energy to see it through.

I urge you to give up on getting funded for now, and instead focus on finding another way to see your vision through. Even if you never get a red cent -- even if you never even convince anyone to play it for free -- you will have created something. Of your vision and conception, and through your own hard work.

And something pretty damn cool, at that. Won't pay your rent, but in the long run that's worth a hell of a lot more than eight thousand quid.

Good luck to you!
It will take you an hour at most to read up on all the significant changes in Python 3. Its not like learning Scala or Perl at all. It just cuts some things that have been depreciated for years, makes everything more consistently iterable, adds some nice new comprehensions and literals, modifies certain bits of metaprogramming, and a few other smaller changes. The hardest thing for me was remembering that print is a function in 3, and needs parens.
This is great. What's the maximum number of filters for one TwitterStreamAgent?

Edit: I mean keywords in a filter.
I find irony in how Americans Against the Tea Party is sourcing Ben Swann who is a pro-liberty journalist that chronicled the Ron Paul media censorship.
A couple of issues with this:

1) most of the arguments for call auctions instead of continuous trading assume a centralized call auction that in and of itself adds no cost above our current decentralized exchanges. This seems like an extremely troublesome assumption given that we have seen the negative impact of centralized monopoly exchanges.

2) If it isn't a centralized auction there needs to be some price sync. mechanism. The most obvious one seems to be either latency arbitraging HFT (which for some reason people don't like) or a governmental central auction block the type of which is already causing legislative arbitration in the current markets.

3) Call auctions in and of them selves do not solve the major issue with our current prioritization system. If the auction algorithm has several prices that match the same amount of participants, or if the price it determines has an uneven number of buyers & sellers, who gets priority?

4) Price discovery is currently harder in call auction instruments. That could be because they are only done in illiquid markets and liquidity itself will fix that, but it is an issue with the current examples of this style of trading.

5) "Market" order mechanism. Many, many market participants are more worried about making sure they buy/sell than about high fidelity price fairness. If I say, "I want out of Goog no matter what", that complicates any auction methodology and introduces opportunities for gaming.

At the end of the day, I can't figure out who will actually be protected in this style of market and to whose disadvantage. That is a lot of added complexity for a very vague benefit.
#2) Something like http://www.reddit.com/r/somebodymakethis ?
Ask HN: Why do we fail? We were sure it would work.
How many times we believe that our idea will work. That our start-up would rock. That even our submission on HN will get many up-votes. Personally I get disappointed each time that I try to make reality the ideas that were theoretical in my mind(ideas that seem to me very very possible to happen and succeed).

What do we do wrong?
Any idea on why theory is so much different from reality(at the field of internet and businesses).
Submitter, please provide a better URL next time. Here we have:

https://medium.com/cyber-security/9ed56d483eb?utm_source=Twi...

i.e. all the twitter campaign garbage. Instead use this:

https://medium.com/cyber-security/9ed56d483eb
For other curious readers:

HSM = Hardware Security Module (http://en.wikipedia.org/wiki/Hardware_security_module)
Unfortunately the non-native experience was never very good, and even the example implementers they pointed to were hit or miss for actually working cross browser.

I do kind of hope they use heartbleed to make a second push with it fast, while people are paying attention to the problems with current models.
Isn't that just because PKCS#11 is an in-process API so not really meant for calls over a socket? So wouldn't you need to actually write a PKCS#11 compliant library to plug into the server, a software HSM and then some form of serializing protocol to talk between the two? Or is there a standard way to do PKCS#11 over a socket? A quick look at the spec made it look like a "here's how our struct's are packed" kind of standard.
IANAL, but I don't think that would be GPL compatible. You're only explicitly allowing Apple to use it under the GPL, not other parties. And even though "unless you're Apple in which case it's the GPL" involves the GPL, it's still a licensing restriction which is not included in the GPL.
Google maps will cache the current map view at the highest detail resolution if you type "ok maps" into the search bar and hit go. You don't even need an active SIM to use gps and zooming. I cached all of central London and used it from my otherwise non-functional Verizon CDMA iphone for months.
Wait, what? You're less than 20 people and the CTO doesn't write code? That's news, and weird in all ways. Danger ahead!
But there are many things I assume in this story. Is everyone full time? How many people are there? How much of your money/time so far versus other money? Did the other founder have the same vesting schedule? Are there Angel investors? Is the CTO a friend of your co founder or other investor? There's too much unknown here. Make sure you answer all of this for your own lawyer!
I wish protocols like TLS-SRP (or SRP as an HTTP auth method?) would become more prevalent. At that point you can authenticate over a clear-text stream and it'd be secure. I don't see any reason we should still be sending secret information to a server like this.
Debugging: You can step from one service into another in the same debugging sesssion.

Profiling: Analyse one snapshot to find the main bottleneck across a number of services.

Performance, security etc. etc. Basically the ability to use a lot of the things that make the JVM powerful and save you time and money. (Not only that but the things that make clojure powerful like its concurrency mechanisms etc across services)

Besides one process is often simpler than many. Interprocess communication suffers from some of the "Fallacies of Distributed Computing."

If you like to keep your UNIX process mental model just think of JVM threads as processes.

(One other thing: Running services in multiple JVMs uses more heap than multiple services in one)
LearnerNation – Awesomely Effective Training Software With Incredible Ease
The power of the US cable barons must be challenged
What are your thoughts on Neal Ford and Stu's Clojure from inside out series?
I disagree. A strong type system is good, but in this case pragmatism wins the battle. I personally have been bitten innumerous times by bugs where division was rounded down (usually to 0, which is especially destructive).

Most of the numbers I encounter start as integers and most of the calculations I need are floating-point. This language behavior saves me from sprinkling "* 1.0" everywhere on my code, or from introducing extremely subtle bugs.

And the integer division is always there, one character away:

print(1//2 * 1000) # 0
Thanks. The Twitter Stream API allows you to track 400 keywords at once. https://dev.twitter.com/discussions/7687
This is one of the better comments I have seen on OpenSSL in the past week. Well said.

"This is why OpenSSL looks like a hodgepodge of hacks upon hacks in order to accomplish narrow goals with limited impact testing."

It doesn't just look like a hodgepodege of accumulated hacks, it is a hodgepodge of accumulated hacks. :)

"It should be no surprise to anyone else: clients are literally paying OpenSSL developers for this, and nothing else."

One could say this with respect to many popular open source projects, including ones with corporate sponsorship. The complexity just keeps building over time and there is no such thing as "finished, accepting bug fixes only".

"Who is paying OpenSSL for developers to clean up the code base and remove ancient #IFDEFs? Who is paying OpenSSL for developers to analyze code paths and do case analysis? Who is paying OpenSSL for developers to write unit tests or even have a test harness at all?"

Those are rhetorical questions. We know the answers. Alas, when the people who pay for (open source) software and consulting pay to have "features" removed instead of added, "pigs will fly".

Doug McIllroy is quoted as saying, "The hero is the negative coder".

(Just in case this need explanation:
Prof. McIllroy is the mind behind UNIX pipes and one of computer science's most prominant contributors.
"Negative coder" means someone who removes code instead of constantly adding, or "committing", new code.)

We could really use some more heros. And as we switch away from OpenSSL there will be a lot of links to libssl to remove.

Meanwhile some people have been writing and testing small, auditable and usable open source crypto, more or less for "free".

http://tweetnacl.cr.yp.to

My guess (and hope) is that pathological requests for "features" to be added would be met with heavy scrutiny. The authors already have day jobs in academia.
The community doesn't treat the lack of learning resources / documentation as a serious problem.

This is what drove me back to Haskell from Clojure. Haskell is miles ahead in documentation, references, tutorials and tooling. Tools like Hoogle are manna from heaven for beginners and experienced developers alike. Couple that with the self-documenting aspect of types and even undocumented Haskell libraries are grokkable in a reasonable amount of time.
> While it's mathematically conventional and maybe event elegant to represent integers that way, isn't it ridiculously inefficient to actually implement it that way?

It would be, but the compiler recognizes the pattern and does ordinary integer arithmetic where it needs to (the pattern is relevant, however, to the use of individual natural numbers in defining other types, which is pretty important to Idris.)

> Also, I really wonder why there is no language with "nice"/"conventional"/C/ALGOL/... syntax for dependent types.

I don't think C/ALGOL-style syntax is all that nice when it comes to even Haskell's level of typing, much less dependent types.

That said, if dependent typing takes off, no doubt we'll see languages that fuse it with C-style syntax soon after, just as we saw with OOP and basically every other thing since.
That's great that you use NLTK3 and Python 3.x and it works fine! There are no known Python 3.x incompatibilities. But if you find something then please report it.

Issues that prevent a release are not related to Python 3: check https://github.com/nltk/nltk/issues?milestone=2&state=open, https://github.com/nltk/nltk/issues?milestone=3&state=open and https://github.com/nltk/nltk/issues?milestone=1&state=open.
I think that's also a lesson for the people who are unhappy with the changes. People grumble quietly and just decide not to use the new versions, so the devs have no idea how many people like or dislike each change.
From the comments section: http://www.southfayette.org/cms/lib03/PA01001917/Centricity/...

From Page 37 of the “South Fayette High School. Student-Parent Hamdbook, 2013-2014:” “Understand you have the right to live without fear and harassment. If you are harassed, there are people who can help. Report the incident to a teacher, parent, guidance counselor or another adult.”

I hope he gets the justice he deserves.
Quora does this. It would just be hard to standardize across all the variations of publishing.
> To remove side channels and preserve validation, you need to be slightly clever. You validate that a C implementation of one of the functions does the same thing as a function in the validated package, then swap them in the build output. This can be done for miTLS.

Aha, this is interesting! Thanks for the link.
https://news.ycombinator.com/item?id=7579523
It's okay. It's only tax payer money. They're not paying it out of their pockets.
I usually initialize my git repos with an empty commit. Several reasons why this is a good idea (detailed in this blog post - http://kevin.deldycke.com/2010/05/initialize-git-repositorie...)

I have a git alias for the same -

start = !git init && git commit --allow-empty -m \"chore: empty initial commit\"

Note: That's not my blog.
Ban "Digital" Learning
From the number of Python programmers out there and the percentage using Python 2.

In fact there'd be "tens of thousands" websites made with Python alone (Django et al), so the number of apps in total will be much higher.

Heck, people doing scientific Python are more than 10.000, and they write more than one new apps for their research every year.
Can you tell VS by now to ignore warnings in 3rd-party libs? Everything that's in Qt's headers is pretty much out of my control but those were by far the most common warnings (or at least I didn't see many real warnings amidst them). At least that's how it's in VS 2010 and it kept me from turning code analysis on more often.
Just out of curiosity, isn't this already possible with the Google Calendar API?
This is quite a stupid idea.
How exactly am I supposed to log into my passwordless email to check the email containing the code to get into my email ?

The assumption that "the ability to send an email or SMS to users reliably and quickly" doesn't mean the user will receive it in a timely manner or at all.

But even assuming this article is actually sound and works as described, would replacing password with email/sms authentication improve the overall security ?
I'm not so sure that sending unencrypted email containing authentication data is improving security or that trusting a phone to be handled by its owner at all time is a sane assumption to make.

Then there is the issue of the whole authentication process being turned into the quite annoying and not always working password reset process which often is not handled in a secure manner.

The correct way to fix this stale password issue is simply to revoke passwords and ask users to choose a new one as is usually done when security has been breached.
Right, I'm a big fan of functional programming, but I never got warm with functional languages. One big reason is the syntax. I'd love to be able to specify (in pseudo C(++):

typedef positive_int: int {
ensure {this > 0}
}
typedef ambulance: vehicle {
ensure {this.has_siren && this.has_bed && this.color == "red"}
}

and so on.

(aside: The other main problem I have with functional languages is the following, I'm not sure what to call it but it bites me every time: You finally find out how to do what you want in an elegant functional way, you code it up and you're happy. Then, you want to make a small modification, but it turns out that it's impossible with the current code, and you have to rewrite everything with much less abstraction. I can't remember a great example from the top of my head, but a simple one is, you'd like to add a progress bar to a computation. It's trivial in imperative languages, but much harder in functional style.)
This sounds interesting, but doesn't make much sense. Do you mind explaining a bit more?
YubiKeys are quite a good solution to this issue. OTP always, and a unique User ID as well. It can even go so far as plug in the key, press go and you're all ready, no usernames or passwords needed.
This is what the backup, one time use codes are for. You should keep a set in your wallet, bag, or whatever non-electronic thing you keep with you all the time. I have so far had to use that once in the time since google introduced 2-factor, but man was it ever useful.
Try ANSI C then!
paid for with taxpayer money - so it should be made public.
we own those patches!
I use http://beeminder.com/ for this. For my weight, I have a Fitbit Aria scale -- I weigh in daily, it uploads my weight to Fitbit and the data is pulled in by Beeminder. So there's no friction in getting data into the service (I just blearily step onto the scale every day) and there's no way for me to lie, even if the thought of financial loss tempted me to.
The larger problem of 'language drift' seems inevitable- C++ from 15 years ago will have auto_ptr's sprinkled throughout, Common Lisp (compared to Scheme) has had stuff added and added to it, Java has more stuff tacked on as it grows... but it only really causes a problem when you have something like a dynamic language because you're using one interpreter (usually) for the whole project, and so anything breaking backwards compatibility causes huge problems. (Add to that that interpreted languages tend to have more changes in syntax more quickly than compiled languages).

Could dynamic languages avoid this by having (say) a byte-code compiled backwards compatibility module? I would imagine it looking something like this for Lua:

luac -version=5.0 module.lua -o module.o

and then call into whatever functions you need from module.o in the rest of the project, using the new interpreter for whatever doesn't need to use legacy features.
Performance will depend a lot on your application & database, but it shouldn't take more than 10 minutes to get some rough performance numbers. Try pointing the apache-benchmarking tool `ab` at your site. There's some great tutorials around for the uninitiated:
http://www.cyberciti.biz/tips/howto-performance-benchmarks-a...

If your site is behind a login screen, you can manually login from the browser then copy+paste your session cookie into the ab commandline.
Having a split like that in a language is terrible. You find libraries that work with not-your-version and you envy features that would make your code cleaner/faster/better, but you can't use them.

- "Ugh, that thing is lacking/stupid/messy."

- "Oh, no problem, that wart has been fixed in Python 3"

- "Can we use it?"

- "No."
The story of the flash crash recovery has players of both varieties. When the dive happened, on trading firm, let's call it 'B' backed out of the market. Another trading firm, let's call it 'G' stayed in. 'G' had to stay in because they were contractually obligated to stay in the market by their market maker agreement with NYSE. So for some HFT, yes, they can and do bail, but others don't.
Open web based CAD application.

I think the problem with previous attempts at this focuses on accomplishing computation on the client side. I believe it is possible to set up a framework where the client passes CAD messages to the server and the server returns the appropriate WebGL object for the client to render.

I've been playing with this idea for a while but I've been struggling on how to execute such a project. I think the Blender Python module would make a great CAD engine. However, I've yet to figure out how to rebundle Bpy such that anyone can simply import it and use as a python library.
While we're at it * :

Funding Monday - where everyone pitches to VC's in the same HN thread.

Trial Tuesday - where everyone provides a link to their demo in the same HN thread.

Writing Wednesday - where everyone writes an informative hacker-related topic on their blog and shares a link to it in the same HN thread.

Throwback Thursday - where people all share something informative about past experiences or past apps/etc. in the same HN thread.

Free Work Friday - where people request work to be done by volunteers to develop their product with a possible chance at employment at some future date all in the same HN thread.

* - with slight sarcasm
It's support, not purchasing the rights to the product.
Alternatively, Windows 7 / 8 is such a disaster that the IRS is paying a few million dollars (out of their 10 billion dollar budget) to stick with something that works.

To me, that seems like a very prudent decision.
For me, this is not just European history, it is family history. There is a lot I did not know about the city my mother is from.

Enjoy.
The revitalization of American central cities: fact or fiction?
Please, tell us how you really feel about it.
The federal government hasn't had a budget for four years until less than a month ago[0]. Up until then, our government was funded with a variety of appropriations bills as stop-gap measures. When a large organization doesn't have a budget, how do they make long-term investments in their IT infrastructure? So, the IRS can't very well execute a major migration when they don't have a budget and they aren't going to do so a few weeks before April 15th.

Yes, this is wasteful, but what else could the IRS have done without approval from congress?

[0] http://www.reuters.com/article/2013/03/23/us-usa-fiscal-budg...
Phone is no better than email.
Security through a physical object that can run out of battery, be stolen, have no signal, cost money to have service, offers no cryptography while being under mass surveillance across the world, etc.
Import.io – Structured Web Data Scraping
I'm glad to see dependent types move a bit closer to practical programming. I read (well, skimmed) the tutorial and learned a little of what it's all about. Being able to pass around assertions as first-class objects seems pretty interesting.

However, I'm still confused about what's happening at compile time versus runtime. Apparently some functions can be used in proofs (and are therefore evaluated at compile time), while some proofs must be evaluated at runtime?

The notation isn't very helpful here. Since types are no longer strictly compile time and values are no longer strictly runtime, it seems like we need some other way to easily distinguish compile time and runtime.
Ah, yeah. Sorry, my history is a little hazy. I claim I was going for the spirit of the situation, rather than the details... ;-)
> This sounds less convenient, harder to implement, and no more secure than OpenID

In what way is it less convenient? A standard user has their phone with them...24/7? At least in the sms realm it's more convenient than trying to come up with a password that has: A capitol letter, a number, a special character, a lower case letter. Also way more secure, a user gets sent a message of a one time code looking like 037.820.374.839 the time it would take to guess that, the one time code would have been timed out and the hacker would have been no closer to getting in compaired to a static password.
I think Windows 7 is quite solid. What's wrong with it?
The technique of not having the keys available to the process that's dealing in external bits works really well for DNSSEC. There's a program called opendnssec which takes care of keys, rotating them, and .... accesses them via PKCS#11. So you can use Hardware Security Module, or a softhsm. Since it's opendnssec that's doing the rotation of keys, that can run as a different user than your DNS server, so the fact that softhsm runs as a shared library is less of an issue.

opendnssec unfortunately is a little... industrial strength.
It takes some time and consideration to configure unlike bind's "gimme the keys and I'll just take care of it for you" approach.
The Spectacular Failure Of Better Place
While this has no bearing on anything you or anyone else should do today, it's worth noting Haskell is 24 years old, Clojure 9. I'd be astonished if Haskell wasn't miles ahead on all that you mention.