skysight-inc/HackerNews huggingface dataset:
I have found that after a good blog post, I gain a new chunk of followers. But I blog and tweet so infrequently it ends up not mattering. I feel like the only way to get a real payoff on Twitter is to be extremely, hyper active on the internet.
If you are making $25k a year working in a warehouse, another five grand is absolutely huge.

I agree that if you are giving this to people making $100K+ per year, it doesn't really have the same impact. Five grand is about what I'd expect for a "hey, you are doing okay but not stellar" annual raise within the company.

My big point, though, was that ambition and loyalty are often conflicting motivations.
This might seem like a nitpick, but I think you're confusing two distinct camps here: let's call them "Open Source" and "Free Software".

Open Source advocates -- such as Eric S. Raymond -- believe that it is superior on technical grounds, the "many eyes make all bugs shallow" theory. They tend to disregard ideology and instead believe OS is the rational decision of those who want technically better software. In my opinion this is not always true, as Heartbleed shows (but then again who knows how many undisclosed vulnerabilities are there in existing proprietary software! At least now we know about Heartbleed!)

Free Software advocates -- such as Richard Stallman and the FSF -- believe it's a matter of ideology. This has little to do with technical quality. They say "sure, if the software is better that's a plus, but freedom is a matter of principle to us".

I'm not a zealot but I tend to side with the Free Software camp, and I don't see how the OpenSSL fiasco undermines their ideology.

PS: I also take issue with the "paid security researcher" remark. Absolutely nothing in either Free or Open Source excludes paid personnel or private companies from the equation. Hobbyist programmers are not the only ones accepted. I don't understand why you see this as extraordinary.
I'm not even going to get into the politics here, but I'll just say this: If you aren't happy with Dropbox, here's something to look at.

http://www.owncloud.org

or

https://github.com/haiwen/seafile
It could perfectly well be a premium feature.
It's really not always about saving time as another has noted. Speeding is not a significant time saver on short drivers, and I don't think there's anyone who can dispute that.

As you noted on long trips it can make a large difference. That's the only place I tend to bother these days - when I'm doing it to save time.
Oh, I totally get that, and agree. I'm just saying that even if these are bulletproof sources with deep insider knowledge, it would be incredibly risky for them to associate any credentials other than "familiar with the matter" with the story.

It's wiggle-room a mile wide, but I'm not sure if there's a better alternative given the current climate.
That an excellent point. I wish such a system existed under which that was possible to do :(
Yeah, why not. http://www.joelonsoftware.com/articles/fog0000000069.html
Oh ok. I think you're saying that because you think that Rice believes [something bad with respect to data privacy], by Dropbox saying that she's fully supportive of their commitments Dropbox must also believe in [something bad with respect to data privacy].

So I guess that comes down to what Rice's exact views are.

Personally, I doubt she's completely against the idea of data privacy in all cases and thus it's possible that Dropbox's existing views and policies on data privacy are compatible with hers.

And anyway, I doubt that Dropbox could or would stop responding to FISA requests or warrants regardless of who's on the board considering that they operate in the US.
> OpenSSL has an abstraction layer over malloc, which uses an internal stack-based free-list, and which it uses for all allocations

To be clear, this is NOT TRUE. The freelist is used for some allocations, but not in the patch in point. Here is the patch that addresses the bug: https://github.com/openssl/openssl/commit/731f431497f463f3a2...

It clearly uses OPENSSL_Malloc which is basically the equivalent of calling malloc.

https://github.com/openssl/openssl/commit/731f431497f463f3a2...
Yeah, there's no black and white answer to this - but GSS really has a lot of those ambiguities. They're called constraints, but they're more like optimization targets, and while in simple cases it's easy to see which constraint gets violated first, in complex cases it's a little too much like spagetti code: theoretically deterministic, but too much to handle.

CSS also has "constraints" and they're also sometimes violated, but most constraints are never violated (e.g. normal flow blocks are always sequentially after each other even if they don't fit. Those that are violated are violated in consistent, predictable fashion: e.g. though a container vertically grows to fit its contents it may stop growing for various reasons, even if its children don't fit.

In GSS? Since every layout reinvents the wheel for the basics, all bets are off. Since the whole point is that there can be complex, multilevel interactions between the components it's not always clear which "constraint" is violated first, nor even that it may be necessary to violate those constraints.

Basically: I think GSS is too hard to reason about, making it admittedly more flexible, but too error prone compared to CSS. Furthermore, because it doesn't integrate with lower-level concepts like actual content, it's sometimes even less powerful that CSS - GSS can't for instance emulate CSS tables or even simple paragraphs that are no longer than necessary; for that (AFAICT) it delegates to existing layouts.

Then there's the fact that CSS breaks cycles quite rigorously. Usually it't not even possible to define them; and where it is the spec is fairly clear what needs to give. In GSS, I can't see any protection - you won't even really notice you've potentially got a problem until constraints do weird things for hard to predict reasons.

So, I think for most layouts GSS is wordier and more brittle than CSS, and where that's not the case I'd rather have a more robust, predictable system. In essence: the stronger, more flexible, closer to turing-complete a language, the worse. Weak is good. Limited is fast, predictable, optimizable, good for tooling.

GSS goes too far.
She didn't just "serve" in the Bush administration as the f-ing Whitehouse receptionist.

She was a prominent and powerful part of that administration, and as such participated actively in the WMD deception and the use of torture.

If the US wasn't the most powerful nation on the planet she would be in a jail cell in The Hague right now.

Completely ignoring what one may personally think of her, what kind of company would put someone like that on the board?

(Also, do you really not get the irony of using the term "witch hunt" given the actions of the so-called "victims" here?)
> your wife deserves to live with her husband in her home country.

Which doesn't require a Green Card for the husband.
Lets agree that guys behind this project are not business-wise. Thus - they are not really in place to raise money, nor manage funds properly. With such an important "service" they provide, they could easily go in to ~$1 Million a year without sweating. They should look for manager/director to manage finances and growth strategy. I bet many marketing people would LOVE to manage such a project business wise including me!
Sure, but most likely that would cause a huge engineering effort and they probably want to focus on keeping their core product as is and as easy to use as possible.
Ask HN: Jobs after startup flop
Over the last couple years I've launched a few startups, each of which failed in relatively quick succession. Everything was bootstrapped (although we did interview with TechStars) and I'm left in a pretty dire financial situation. I'm still working on one of the projects and keeping it alive on credit which isn't sustainable for much longer, unless we're somehow accepted to YC.

So to regroup and dig out of this hole, I'm in the unenviable position of looking for gainful employment after a string of failures. While I'd like to find a role where I can keep learning so that I'm a better founder next time, getting some cash is the first priority. I'm also not sure what sort of jobs I'm qualified for... like many founders I did a bit of everything so my skillset is more broad than deep. I built the tech for my startups (CRUD apps, nothing fancy) and am about 2 chapters through SICP, but I'm not sure I'm advanced/skilled enough for a software engineering position in the Valley.

Before the startups I was an i-banking analyst at GS/JPM/MS and I passed all the CFA exams. So on paper that's an option, although what I've been doing the past couple years is so far off the finance radar that I'm probably entirely unemployable on Wall Street. And the expectation of being at the office 80+ hours per week would seriously limit my ability to hack on stuff and explore new startup ideas on the side.

I was almost able to use an MBA (I know, sorry) as an escape hatch to regroup and figure things out but, after interviewing with HBS, I was waitlisted and eventually rejected so that's off the list.

Any ideas on where I should be looking or how to approach this? I'm likely to jump back into startups as soon as my financial situation stabilizes so length of employment is another thing for me to consider - I don't want to leave anyone in a bind.
What a nice idea! Inspired me to quickly create a very simple and basic tool. If there is sufficient interest, I will add additional features like categories, leaderboards, profiles, social login, ratings etc. If anyone wants to help me out, email me :)

http://www.helphero.co/
According the the article: " the result of a single sentence tucked into the farm bill lifting the 10-year statute of limitations on old debts to Uncle Sam."
So apparently, no there is no longer a similar period in the US.
Even just considering the top 100 is misleading, unless you only want to talk about Americans and foreign workers that are "top 100 material".
Yeah, wow... Anyone in that group/know anyone in that group that can refocus them on the real problem of them being paid <10 engineer days per year to maintain/improve this vital piece of infrastructure?
Wouldn't it have made most sense to e-mail the OpenSSL team so they could have pushed a critical patch that everyone would have updated to via APT before shit went off of the hook?
That's exactly equivalent to having a "size" parameter with the same size as the pointer, except you have to use a substract instruction when you want to get the length of the string, so I'd say it's inferior to just storing the length of the string.

For instance, if you copy a string you also have to update the end pointer instead of just copying the size attribute in bulk. And you get the same disadvantages of non-portable strings, different representations depending on the architecture/endianess etc...

I completely agree with the OP, there's no perfect solution. If addr + len was truly superior I'm sure we'd see

struct string { long len; char s[]; };

or for your version

struct string { char *endptr; char s[]; };

everywhere. And the C standard library would have evolved along with it.

Out of the top of my head the only thing that makes '\0' terminated strings special in C is that it's the way string literals are represented. It would be trivial to recode all of string.h using addr + len instead of nul terminated.
Anyone who wants to stay in the "hears-about-this-kind-of-thing-early" club should need to pay $10k/month

If I find a vulnerability in code from a project which is pulling this sort of stunt, I will make sure I share details with distributors only under the strict condition that they are not allowed to tell the project about it.

Responsible disclosure usually means "start by telling the authors", because usually the authors know who needs to be contacted and will do that responsibly. If they're just going to sell off exploits to the highest bidders, they should have no role in the disclosure process.
I don't understand what you want to tell me with all you said, after the "Plus".

The point of self implemented allocators is not, that they are all better than malloc or that the implementor is more wise or that there is some magical additional stuff or even that some code is saved (the oposite is true) ...

The point is only, that malloc implements the most general case (what it must, since it is the magical "I can do it all" tool (at least in memory management)). When you go away from the general case you can find several specific cases, that can be implemented specialized for this case -- and those specific cases could be implemented very much more efficient (concerning speed, not coding!).

That is the whole point. Also there are some specific allocators that also implement some safeguides for common memory problems. But that seems to be more of the exception, when I take into account the feedback.
That's probably the most painful wording they could have put in their statement.

Certain people at Dropbox seem to have lost touch with reality.

Even if you want to defend the appointment of Rice, you have to be insanely insensitive to refer to international expansion as a motive.
I'm building an invite-only jobs mailing list that is similar to the monthly "Who is hiring" on HN, except that it is available privately and accessible all the time (to members only).

I haven't advertised this anywhere except HN, because (as I have witnessed companies saying) they find top candidates on HN mostly. This is why I am specifically targeting HN users only.

So if you are a company hiring manager, looking for a job or just an individual that likes seeing job offers (you don't actively have to be searching), then you can Help Me Out by validating my idea here:

https://www.surveymoz.com/s/109791NPJFT

I will continue marketing my idea on HN only until there comes a point where growth through invites/referrals outstrips marketing here.

I know you guys love the "Who is hiring" as much as I do, so go on, signup :-)

Edit:

I forgot to mention...

Help You Out:

If you need somebody for general entrepreneurship advice, need a beta tester for a cool product, need an outside idea for growth marketing, need a Python programmer, need someone who understands finance or would just like to talk to someone about any ideas you have, then I am available and willing to assist.

"You can only gain as much as you are willing to give", so please do let me Help You Out.
And those accounts have all the good usernames :(
Another side note - where is the "My Chains" app? The app store doesn't know it...
Amazon To unveil smartphone in time for Holidays
Keep in mind France has one of the highest GDP per hour worked.
The DoJ decided to ignore the law. https://www.eff.org/foia/section-215-usa-patriot-act The NSA secretly collects the private data of people they know are innocent, which is the opposite of due process.
Navy powers model plane using fuel made from sea water
HMO:

I've got ADHD something fierce and, even when medicated, it takes me a long time to organize my thoughts in a way for others to understand. I need to process my notes for the video linked to below, identify the problems being discussed, as well as how a hackerspace can solve (or begin to solve) them. I've tried to get people to help me with this, but every attempt gets sidetracked by people wanting to debate whether or not the problems are real or discussing their own ideas for how they should be solved.

I need someone to step out of their head and into mine for a little while (couple of hours via Google Hangouts?). I'm totally down for discussing the existential aspects of the problems and any ideas people have as far as how to address them....but not until I've managed to get my vision organized into something that makes sense.

Video of that panel is here: https://www.youtube.com/watch?v=J45z8aMwl-U (apologies for the low quality...I'm a coder, not an editor, and this was a hack job just so that I could rebuild the results of my research, which I no longer have access to. Also, the video is only 75 mins long, but got doubled in the conversation process; it's black and silent for the second half)

Email me at crawford.comeaux@gmail.com if able/willing.

Here's the photo album of my notes, which I'm typing up right now: https://www.facebook.com/crawford.comeaux/media_set?set=a.10...

The beginnings of a mind map based on my notes: http://www.mindmeister.com/397541621

Background on the project:

I'm trying to start a hackerspace in Lafayette, LA with the goals of designing the space & defining the culture I want to cultivate in it so as to meet as many needs of the underserved creative community as possible. A few years ago, I researched innovation ecosystems, what they need to develop a startup culture, and what Lafayette does or doesn't have. A few weeks after wrapping up that research, an event took place with a panel discussion that identified needs/challenges facing the artistic community in town; they were exactly the same as the needs I'd identified for us to (hopefully) begin producing more than just a few startups a year.
Linux KVM Virtualization comes to IBM Power servers soon
Yes I did, thank you! Damn, that text has been there for months...
Yup, we're just waiting on someone to do it. It wouldn't have to be OpenSSL (or even FB or MS, the existing IBB sponsors): it could be done by anyone with enough public credibility to be trusted not to run away with the money, and the time and skills to jump through the tax/charity/crowdfunding hoops.
The Privileged Group case is more-or-less the informal handshake equivalent of assurance contracts, and the altruism/social status option doesn't quite seem to cut it for critical infrastructure like crypto libraries, unfortunately. But thanks for pointing those out!
Rice's exact views don't seem too difficult to figure out. She spoke publicly in favor of warrantless surveillance of US citizens. It's possible that she's subsequently changed her mind, which is why I included that possibility as point #1 above.

FISA requests and warrants aren't really at issue here. Warrants are exactly how this stuff is supposed to be done. FISA requests are pretty much just an odd form of warrant, and any opposition to them comes down to thinking they shouldn't be issued, not that they shouldn't be obeyed. The issue at hand is warrantless surveillance. Does Dropbox hand over user data to the government without a warrant? If not, given that Rice is in favor of such things and Dropbox says she fully supports their commitments, there is a contradiction somewhere.
It wasn't traffic that was revealed, it was server memory. Which could just have easily contained the decrypted passwords as the encrypted ones.
This is a story that has developed over many years. Many other news publications found the developments newsworthy.

My guess is that Gawk's lawyers told them not to get involved.
I'm surprised I haven't seen anyone mention the "tragedy of the commons" economic theory yet. Though in this case it seems to be happening in reverse, rather than depleting the common resource, we are all neglecting to invest in it.

http://en.wikipedia.org/wiki/Tragedy_of_the_commons
Not having enough resources to keep the 'SSL' part working makes the 'Open' part pretty irrelevant.
If that were the case, AWS would've been on the list.
You can assume that any bug in open source software that could have been found using systematic and automated analysis has already been found by the NSA.
Exploit the flaws in the system until people are forced to make changes - and get rich while doing it - the unsung hero.
Yeah, a hacker artist friend passed just last year from a pancreatic ductal adenocarcinoma.
Magic CSS3 Animations
I'll admit that a NASA parking pass got me out of a ticket once.
Apple's iTunes: Ample Demonstration of Harvard's Law
Length-prefixed strings have another disastrous problem - strings cannot be sliced. A substring would always have to be copied.

Arrays decay to pointers when dereferenced, but this wouldn't impede array bounds checking. I didn't bother putting in static array bounds checking in Digital Mars C because pretty much all the interesting cases were buffers passed to a function.

I know C doesn't have first class arrays. That's what my enhancement suggestion was for.
Sort of like it says in TFA.
You could do a defensive publication. Any publication which discloses the invention prior to the priority date invalidates a patent. This works in the USA too now they have got on the "first to file" band-wagon. The priority date is the date when the relevant disclosure was sent to the patent office; usually that's the application date, the date you sent it to the USPTO [or other office, WIPO, EPO, wherever] but it can sometimes be an earlier date.

So defensive publication is a provable publishing of material that discloses the invention in sufficient detail that the notional skilled worker in the relevant field could reproduce the invention. Once published a subsequent patent application for that invention would fail to be novel or inventive. That doesn't mean no one will apply, nor even that such an application wouldn't be granted, just that prior publication of the invention is an absolute defence.

Of course you'd want to be sure whether the invention is already patented before you try to exploit it commercially.
What a nice idea! Inspired me to quickly create a very simple and basic tool. If there is sufficient interest, I will add additional features like categories, leaderboards, profiles, social login, ratings etc. If anyone wants to help me out, email me. :)

http://www.helphero.co/
NSA Denies It Knew About Heartbleed Bug Before It Was Made Public
OK well when people need to do martial arts to get to work then we can talk. And btw in that world, speeders would be the people who swing unsafely fast while practicing with common folk.
Ask HN/YC: How do you feel about Feel (a Twitter for emotions)?
In a nutshell, Feel is a Twitter for emotions - when you post, you share an emotion first (happy, drunk, tired, inspired, etc), and an optional reason (text, check-ins, videos, photos, songs, etc).

The main differentiator is that Feel times how long you “Like" something. Instead of a one-time “Like”, you convey how strongly you "feel” posts based on how long you hold down a "feel" button and how many times you press it.

As an author, your focus shifts from the superficial (what you're doing, food porn, a random link) to the "why” (how you feel, the emotion underlying what you're sharing). As a reader, you're not just incrementing a Like counter; you're communicating how much you empathize with your friend.

Also exciting: emotional trends (how UCLA feels today, or the reactions to #yc or #obama)

—

I’ve been flying solo with design/dev for 3-4 weeks. I surprised myself with what I came up with in that time, but there’s still a lot missing and ample room to improve on implementation/security/UX/marketing/etc issues. Right now I’m in a private alpha with <100 friends, but I’d love to get your feelings on Feel (so punny.)

For a better idea of Feel, you can follow me @randy (can also provide my temp Feel password - email in profile). From YC, Kevin Hale (@rbg) and Joseph Walla (@joseph) also took the time to try it out (thanks!), so you can follow them too.

Thank you for your time! Excited to hear your feedback/questions.

(PS: I applied for YC S14. Somewhat of a risk to put this out there right before they announce interviews, but either way I'm committed to growing Feel through various deadlines/targets in the next few years. Either way, it’s a huge value add to get honest, insightful feedback from a community I respect.)

To Feel, go here:
http://feelapp.co