skysight-inc/HackerNews huggingface dataset:
It is a big deal, just not from your perspective because you're solely focused on data privacy.

The statement is meant to address the data privacy concerns raised about her appointment. This doesn't mean the concerns are valid, just that they exist and Dropbox is aware of them. The alternative would be to not address the concerns and look completely out of touch with or intentionally ignoring the frenzy of the past few days.
I don't think I said anything like that. All I said is there is a culture that embraces the sort of risky investment that VCs make & that hedge funds are comparable investments.

Let's take a reasonable definition of a bubble: when the price of an asset has risen much higher than what is justified by the market. By that definition I don't think we're in a bubble, I believe investors are logical and they know they are taking risks chasing a large return. I also believe investors will continue to chase big returns from tech companies and that there is precedent for this behavior in other types of investments.
In the spirit of this thread, here are some more public projects from HNers on DoerHub:

http://www.doerhub.com/for/bluetooth-sensor (arduino research)

http://www.doerhub.com/for/theodinproject (tech ed)

http://www.doerhub.com/for/lumihealth (health insurance)

http://www.doerhub.com/for/robopaint

http://www.doerhub.com/for/coincashcard (bitcoin)

http://www.doerhub.com/for/crowdfunding

http://www.doerhub.com/for/synaptor

http://www.doerhub.com/for/you3dit (3D printing)

http://www.doerhub.com/for/www-roomva-com (latam hotel app)

http://www.doerhub.com/for/stemfunder

http://www.doerhub.com/for/surgery-boards-app (surgery ed app - in beta)

http://www.doerhub.com/for/securityfirst (human rights)

http://www.doerhub.com/for/vizhack (visualisations)

http://www.doerhub.com/for/pilgrimr (beta testing)
Light Table: the next generation code editor
Marketing. Some numbers to compare:

Virtus raised 1000 Euros in a month. https://www.bountysource.com/fundraisers/329-virtus-1-0-0

While the lib is an interesting one, it is a fringe library in a fringe space (Ruby). Still, it made half of what openssl made in a year in a month.

RVM, one of the Ruby version switchers/installers, raised 50k to fund the main developer a year of work on it:

https://www.bountysource.com/fundraisers/489-rvm-2-0

Thats already 1/16th of your number.

Now, OpenSSL is _far more important_ than both of these but still doesn't manage to get funds? Sounds more like they just hope people to come because they want to.
>The first (and stated) effect of this policy is to weed out the unmotivated employees.

I would argue the opposite. This policy is going to get rid of the most ambitious of your lower-paid folks, leaving you with people who have loyalty - and those who don't feel they have other options. the "lifers" who want to stay with your company long-term, even at the cost of their long-term career. I mean, those people can be good employees to have, but I wouldn't call them more motivated than the folks who will switch jobs for a 20% bonus. (oh god, do you remember when you went from $20/hr to $25/hr? you feel it in a way that you don't feel going from $40/hr to $50/hr)

I mean, I'm not going to switch jobs for five grand, unless I was going to switch jobs otherwise... but that's because it's a very small portion of my yearly income as a percentage. If amazon is offering this to warehouse workers who presumably make around $25K/yr, that's 20% of a yearly salary.

For a 20% bonus? Yeah, I'd probably switch jobs. Or just take a nice long vacation. But, I'm also not the sort to stick with a company if I don't think it's furthering my own career goals.
To put the number in perspective -- this is about how much a single full time engineer will cost to employ. Let's lowball and imagine that OpenBSD in comparison to firefox is 1/100th the size. Mozilla has annual revenues of >300 million dollars, compared to OpenBSD's $150 thousand.

They are asking for donations to cover electricity costs. The real donations, of course, has been in the time the community has put in this.
So they tell you how much they spent on cloud resources and even suggest a gratitude factor? That is actually a great way of getting paid (enough) even if you do not enforce any fixed pricing, cool! :)
They seem to have completely missed the point.
>> "There’s nothing more important to us than keeping your stuff safe and secure. It’s why we’ve been fighting for transparency and government surveillance reform, and why we’ve been vocal and public with our principles and values."

So you've taken on a board member who was part of creating the very government surveillance you want to see reformed.
Look at their business model (at least for SpoonRocket). They're directly addressing the production cost of food - limited menu (two choices a day), menu driven by availability (seasonalize ingredient cost), highly automated delivery (meals loaded in car before sale - use the car as the warming bin).

Limiting to two meal choices a day isn't an option for most restaurants. This is a significant efficiency optimization in manufacturing that also drives significant optimization in delivery. This doesn't strike me as a dumb hack at all. Quite the contrary, I'm very impressed. I wouldn't be surprised at all if they're actually profitable from a production/delivery standpoint, and the losses are just software and market development.

(I have many years of restaurant experience in addition to software experience. I see the optimizations. Wow!)
How the Guardian uses GitHub to audit GitHub
All of heartbleed
I'd imagine the logistics of managing such a thing would be tricky, but I for one would have no issue with an "SSL Tax" that's voluntarily added to various pieces of software, with proceeds going directly to things like the OpenSSL project.
Yup, feel free! It’s actually using the Do What The Fuck You Want To License ;)

https://github.com/eswat/dpac
I was in this situation as a j-2 visa holder. I could not leave the us for more than two weeks and i was not allowed to work for the first three months of my residence.
This sounds like it would introduce a massive conflict of interest.

Also it assumes the OpenSSL team are the first to know about vulnerabilities. Heartbleed has shown that's not always the case.
>> "There’s nothing more important to us than keeping your stuff safe and secure. It’s why we’ve been fighting for transparency and government surveillance reform, and why we’ve been vocal and public with our principles and values."

Ok, so you believe government surveillance needs reformed. Why should you (dropbox) or we (the public) trust the woman who was part of creating that very government surveillance??
I like your site. My only criticism is that there are not dates and times with anything. It would be nice to know how old a tweet is instead of assuming you are sorting from most recent to oldest.

Functionally I also cannot seem to scroll to the bottom of the tweets, and I would fix the loading on the main page. The news articles are loading on the left side of the screen and then shifting to the center.
Where in the opinion does the Court say that? If they did, it would be a serious procedural error that would likely be overruled on appeal. A court cannot take substantive issues into account (other than where the alleged activity took place) when determining whether venue is proper.
> But a behemoth like Microsoft or Sony? Why pay up?

When they pay, they are getting rid of the problem and, at the same time, funding the troll that will hit their competition with similar lawsuits, making the competitors' lives more difficult and theirs easier. It's one of the only legal ways to spend money raising the entry barriers to your market.
The only option for windows is manual compilation using a POSIX library.

Any suggestions for a similar tool?
Note the Scott has made a correction in the comments.
Just store a pointer to the first character and a pointer to the last one. to get the length you just subtract the two.
Why Are Search-and-Rescue Drones Grounded?
Pitbulls Used to Be Considered the Perfect "Nanny Dogs" for Children (2013)
White House says government did not know about Heartbleed
as in .se?

skimmed untraceableblog, picked up some useful insights there
Please give comment and vote for this pitch for TrustLeaf.com
Amazon Preparing to Release Smartphone
The NSA is denying this report.

> Statement: NSA was not aware of the recently identified Heartbleed vulnerability until it was made public.

https://twitter.com/NSA_PAO/status/454720059156754434
They are not just researching, they are weakening security for everyone, especially domestically considering Americans dominate tech businesses. So not only are Americans paying for research that returns no economic benefit (unless NSA is sharing info with American special interests and are not just security?), they are making it nearly impossible to have full trust in the information systems the business community invests heavily in protecting.

I imagine if the NSA was focused on defending businesses and not reading emails of people, they wouldn't be getting the same amount of financing. They are financed for their power to exploit people the government feels threatened by, not their ability to defend citizens from harm.
How about this one: "C++ is horrible because of implicit copy constructors"? That one's not in C :-).

The newest additions to C++ for functional programming and automatic typing are quite intriguing. Blaming everything wrong with C++ on C is as disingenuous as labeling everything about C++ as wrong because one thing about it is wrong.
Don't you think that does not align with the ethics of 'Open'SSL project?
Why not rewrite the whole thing ?
Users connect their card to the Uber app. Drivers simply press "start trip" and "end trip" (on their own device, after having accepted the call and arriving at the pickup location) - all the billing is done by Uber. The driver isn't paid directly.
1) They need to form a 501c3.

2) They need to coordinate with fortune 1000 companies to get their company listed as a United Way alternative.

3) They need to campaign the nerds in the tech community whose companies do United Way donations and ask that their donations are directed to the OpenSSL foundation.

This solves 2 problems: 1 is the immediate need for cash, and 2 is a reliable cash flow. We donate monthly. I currently give to a cancer non profit and a local hacker space. I would move my donations away from the hacker space for the foreseeable future of the OpenSSL guys did this.
The race to contain West Africa's Ebola outbreak
> Let's lowball and imagine that OpenBSD in comparison to firefox is 1/10th the size.

What do you mean by "size" exactly? I doubt that OpenBSD has anything close to 10% of Mozilla's workforce, expenses or user base.
instead of a length field, use a pointer to the last character. the length is the difference of these two pointers. The maximum string length is the size of your address space. Problem solved.
NSA Knew and Exploited Heartbleed
I have no idea how that's supposed to relate to my statement.

I'm just saying that their statement (not the appointment, but what they said right here) is completely at odds with the notion that they care about the privacy of their users.

That's all I'm saying. I'm not focused on data privacy, I'm merely noting that this statement appears to either contradict the facts at hand or be an implicit admission that they don't care about data privacy.
That's what pastebin is for.
"There are basically two ways we've figured out how to create public goods: taxation and assurance contracts (like Kickstarter)."

No, many BSD licensed projects have been created through other means. Partial sponsorship and user contributions (usually non-monetary) seems like a common path.

The problem with taxation is that it requires force, which implies a heavy burden of responsibility on the people allocating the funds after collection. It's really hard to figure out which projects should get funded, and how much, and avoid strange incentives along the way. I just don't think any group of humans could do a good job of this outside of very specific tactical funding (e.g. what the DoD does with some projects).
Show HN: Easy type-mapping for UIMA NLP
The bill is currently stuck in committee in both the House and Senate. I'm sure we could unstick it if we had the leverage.

http://thomas.loc.gov/cgi-bin/bdquery/z?d113:s.1196:

http://thomas.loc.gov/cgi-bin/bdquery/z?d113:h.r.2454:
Dropbox has probably freed up a Petabyte of disk space from free-loading geeks over the past two days.

In other words, Rice has probably already paid for herself many times over.

(Actually, I think the crew behind the Iraq war shouldn't be on any boards but rather in prison. This isn't a political issue in my mind but rather a criminal one. Killing over 100,000 on false pretenses is well beyond the pale of what civilization should allow.)
I agree that the thread is fascinating. Your suggestion is a good one, since whoishiring already does this and is the only account allowed to.

Not on the first of the month, though—too crowded. Perhaps the second Friday of each month, since that's what today is. :)
In theory, yes. In practice, driving instruction and testing in the US is ludicrously inadequate. The driving test here is little more than making sure you're capable of writing your own name.
Got that too:

1ef0: 4E 63 46 39 33 51 75 34 64 2F 48 6E 47 6D 4B 50 NcF93Qu4d/HnGmKP
1f00: 51 42 72 4A 43 50 53 69 54 67 70 2F 63 79 37 70 QBrJCPSiTgp/cy7p
1f10: 71 31 76 63 2F 74 70 49 67 68 4C 4F 4C 4A 4B 3D q1vc/tpIghLOLJK=
1f20: 3D 2D 2D 2D 2D 2D 45 4E 44 25 32 30 52 53 41 25 =-----END%20RSA%
1f30: 32 30 50 52 49 56 41 54 45 25 32 30 4B 45 59 2D 20PRIVATE%20KEY-
1f40: 2D 2D 2D 2D 20 48 54 54 50 2F 31 2E 31 0D 0A 48 ---- HTTP/1.1..H

Curiously enough, one of the first responses, after which they became somewhat predictable (with the occasional "herring").

Seems like some experimenting (based on differing offset, and `%20` vs `_`).
How to add 1Password to your iOS apps
I'll try getting in touch with some co-working spaces to see if their interested in some sort of bulk deal. Thanks for the idea.
I'll follow you, what's your @handle?
Here's a list.

http://en.wikipedia.org/wiki/List_of_tools_for_static_code_a...

but sorry no suggestions or recommendations.
I love this solution, but it probably would have made the move from 32-bit to 64-bit harder.
Great feedback; you're absolutely right. We'll make timestamps clearer and implement an infinite scroll with the next iteration. Thank you!
API Design Principles by Qt team
Email in profile.

HMO: I'm a Bay Area software engineer, but my resume doesn't get me interviews the way it should. Neither does my LinkedIn attract much attention. Since I am currently looking for a job, this is a bit of a problem. :-)

So, I'd like some help polishing my profile and resume, bettering my online presence, pointers to good recruiters, and also any high payoff networking tips.

What I have to offer:

* I studied math in graduate school, so I can help you with a variety of topics from calculus/linear algebra up to graph theory, abstract algebra, and category theory.

* I'm a decent writer, editor, and proofreader.

* I can give you feedback on your startup idea, web site, or iPhone app.
Ambition for $2-5k?
There seems to be a lot of confusion about what the job of the NSA is, with this most recent Heartbleed incident being the most recent example.

The NSA's primary function is performing signals intelligence. To perform that function, they've spent the past ~60 years building up cryptanalytic capability (pretty much unmatched by any other single organization either governmental or private).

Because of this, they have a secondary function, which is to serve as subject-matter-experts for other government agencies. They provide advice, mainly in the form of influencing NIST standards (overtly by providing recommendations, and as we've come to learn, covertly by fucking with standards). This is a side-effect of their primary function however.

Asimov's first law of the NSA is to intercept and process signals intelligence. Any other function is secondary, and certainly will not take precedence over their first function.

What the Snowden revelations have shown, is that there's a conflict of interest between their primary function and being tasked with providing advice. I think it's a reasonable argument to be had that they probably should get out of the business of providing guidance to other agencies, as now all that advice is tainted.

The security of "US-based companies" is so far down the list of priorities that I hesitate to suggest it exists at all. Reporting vulnerabilities to vendors is at best orthogonal to their primary function, and at worst, counter to it. If you want to argue that someone in the government should be responsible for helping companies fix security issues, that's also a good argument. But it certainly shouldn't be the NSA (and definitely not now that we know they have no compulsion about misleading everyone).

I'm going to ignore your side-note about JS browser-based crypto. Unlike the people on here who diligently try to explain the fundamental issues with doing JS-crypto, I'm now of the opinion that you can't reason with these people.
Watch OwnCloud Scale like a Public Cloud at the Red Hat Summit
Didn't Bush himself say "just following orders isn't an excuse"?
Once they've built the app, almost every one of their costs aside from executive salaries (!) is a recurring per-unit cost -- paying the drivers, buying the food, the gas, etc.

Still sounds more like 100k bank-loan material than 10M VC material to me. The only way that 10M makes sense is if they're running a per-unit loss. Doesn't cost 10M to build that app.
If I weigh 200 pounds am I more likely to be fatally injured in a car crash than if I way 150?

A car that weighs more is safer because its velocity changes are slower (barring collision with an immovable object) and because it will usually have better crumple zones that absorb more energy before turning the passenger compartment into a compactor.

If higher kinetic energy or momentum caused higher lethality, heavier people would die more often and/or heavier cars would be more lethal (for its own occupants) in wrecks at the same speed.

Since it's not always possible to know what speed a car was going when it crashed, and since I haven't found any tables or graphs of either speed or KE [or momentum for that matter] vs lethality, I doubt there's enough data to draw any conclusions about KE being better at predicting lethality. I don't understand what the focus on collision energy is for.
> I doubt that OpenBSD has anything close to 10% of Mozilla's ... user base.

AFAIK it's somewhat popular on networking hardware. It's a different category of 'users' but it's users regardless.
I'm less sure how OpenSSL can pull in large revenues on an ongoing basis, but I can tell you how it can easily attract significant money right now: do some bloody fundraising over the next few days or weeks! Just structure it as a crowdfunding drive and stick it up on Kickstarter or whatever for minimum hassle. (You might have to do a bit more work to also avoid tax, I don't know.) If they've attracted €3000 so far in donations without lifting a finger, imagine what they could do if they actually went out to capitalise on the publicity and the unhappiness generated by Heartbleed over the past few days. For that matter, a third party could do the Kickstarter, just as long as people can trust him/her/it not to run away with the money. I previously suggested giving the money to the Internet Bug Bounty pot instead of to OpenSSL itself https://news.ycombinator.com/reply?id=7566208 but obviously money could go to either, or to other relevant good causes.
I can recall a marketing call where I was asked to donate to one association or another and told I'd get a window decal or something to that effect, and while it wouldn't give me a free pass, it would certainly show officers on the road I appreciate them. I've got the exact verbage wrong, but that was the sentiment (this was several years ago). It was quite a hard sell from the solicitor, and I didn't go for it. I was frankly a little disgusted by the call.

That said, I've been driving for 20 years, and pulled over one time. That one time, an out of state cop (in my home town) pulled me over because the license plate frame (from the dealership I bought the car at) partially obscured the state name and he couldn't tell what it was. I suppose it could have been another state that ended in -nois, like lilinois, iiiinois, or something else, but more than likely, it was 5AM in a small town in Maine and I was circling around one-way streets looking lost or suspicious (I hadn't been back there in many years). The cop gave me directions to the street my grandfather lived on, and told me to enjoy my trip.

The secret here is surprisingly simple, and applies to most everything else in life. Don't be a dick. Drive around the same speed as other cars, and if you're the only one on the road, don't do more than 5-6 mph over the limit on the highway. It won't cost you that much time, and if you're the only one on the road it's probably dark and/or rural anyway so you SHOULD be more cautious, and in the end, you win either way, at the great expense of.. a few minutes time.

Another tip I've learned, is do as others do - especially on highways. Think about it, when you're driving across country, how many other cars around you are undertaking that length of a trip? It's far more likely most of them live in the area, and know what's appropriate - both for safety, and for cop-avoidance.
Pretty interesting statement.

Why? Nations have track records of not killing/spying on each others?
They can't implement with most likely totally changing their expenses in a big way. They dedupe content before storing it in s3, totally encrypting would most likely cause these prices to skyrocket.
Nobody can judge what speed is safe for road conditions?

A good driver can - even when that speed is actually lower than the posted speed limit.
If you read my statement correctly, I did not say, that some forms of malloc would not be helpful in finding or even preventing the bug. I only attacked the statement, that some kind of malloc could magically help finding a bug in testing -- a bug that only appears when provoked (and when you come up with the idea, provoking it, you don't need any malloc anymore to find it).
What do you mean "multiplayer"?

In the spirit of this challenge? A single exploitable endpoint where any number of N people are to go at the same implementation?

You can't tease this hard, man.

Also, Friday launch? :)
Thanks for the Wikipedia link. Just wanted to point out that the link identifies more than two ways to fund public goods.

In particular, I'd like to point out the "Privileged group" solution, which can occur when some individuals or organisations obtain enough personal benefit from a public good that they're basically willing to fund the good themselves, even if others are free riding. Many organisations obtain enough personal benefit from secure communications that it's worth it for them to contribute to OpenSSL.

http://en.wikipedia.org/wiki/Public_good#Privileged_group

There are lots of other ways of encouraging funding too. Hacker News is one place where the community constructs social norms around open source contributions.

http://en.wikipedia.org/wiki/Public_good#Social_norms
ChucK's pretty fun, I've played around with it a little to write a couple of electronic demos... I like the fact that i can do full-on generative synthesis with it - samples can be used, but it is more fun for me to craft sounds algorithmically.

This one's a laid-back idea for a 'chillout' song I haven't finished:

https://soundcloud.com/sigint-trax/national-degeneration-uni...

This one is an experiment that involved the main melody being manipulated randomly by a mutation algorithm I wrote:

https://soundcloud.com/sigint-trax/mutation-0x1337