skysight-inc/HackerNews huggingface dataset:
I would recommend two websites for SEO (the ones mentioned above are good as well):

http://backlinko.com/
http://source-wave.com/

Everything on these sites isn't "white hat" per say, but it gives you a different perspective on SEO that isn't the typical "white hat" stuff like on Moz (for the most part it is all pretty white hat) for example. I am not talking about hacking sites and placing links for SEO, but private blog networks and that kind of thing on these two sites. Hope that helps. If you have any questions shoot me an email at caleb.lane4(at)gmail.com.
You could make the argument that if the implementer has to know anything about why the protocol or crypto works then the spec is poorly specified.

Certainly it helps to have a minimum of appreciation of the other parts of the domain, but I think you greatly overestimate how important that is for the kinds of problem we've been seeing lately.
As long as there is no deadweight loss, and I can't see how that could happen, all I see is a transfer from consumer's surplus to producer's surplus. But to this, you should add the fact that surge pricing puts more cab drivers on the streets than usual, thus increasing supply, which will in turn become a net benefit for society (although probably not paretian).
Epson Unveils Moverio BT-200 VR glasses | High Tech Point
Wait I think we are getting confused here. What code are we talking about here.

Copyright of code belongs to the author of the code, or a company that employs him.

If they took say GCC and then replace copyright notices on it, it doesn't become their code, they are using it under a license from the original authors. Replacing a header in a file doesn't magically give you complete control and copyright over it. That would be silly and it would nullify most of the open source software licenses.
Here's a few options you might try:

—Activate the SMS Channel with your wife's cell number instead of yours, that way when you're near using an iOS Locations Recipe she gets the text instead of you.

—Do the same thing but with the Phone Call Channel instead: https://ifttt.com/phone_call

—Use Twitter to send Direct Messages to your wife when you're near with this Recipe: https://ifttt.com/recipes/132947-nearly-home-direct-message-...

—Lastly, you could install any number of the notifications apps supported (Boxcar, Pushover, Pushbullet) on your wife's phone and use that specific account on IFTTT to send notifications.

What do you think? I hope this helps!

—Alexander, who works at IFTTT.
Speculators are people or institutions who purchase an instrument (stock, commodity, etc.) in anticipation of price movements in order to later sell the instrument, without having an underlying business need for the instrument. [1]
In the case of common stocks, unless someone's intent in buying the stock is to take over the company, use the voting rites to influence the makeup of the board, or otherwise use the voting rights, you are a speculator. You may be a long-horizon speculator, but you're still a speculator.

Now, if you're a long-term speculator and the reason you dislike people who typically speculate over shorter term horizons than you do is that you believe they adversely affect your prices, consider that short-term speculators are often the people with the highest bids and lowest offers are shorter-term speculators.

[1] http://www.nasdaq.com/investing/glossary/s/speculator
> The article wasn't particularly good, which may explain that.

So it's not that you think the article isn't very good but instead it just isn't? Bold statements like this need an explanation...

Stating that the article isn't very good and using it as an explanation as to why someone's comment was downvoted without giving any reasons does not really contribute to the discussion and also does not prove your point. Just because awalton has a different opinion does not mean that he/she is wrong.
How Stripe came up with its name
I would recommend using LastPass as a password manager. Here is some advice I recently wrote up on passwords.

In regards to Heartbleed, the Security Check that LastPass offers will help with that in terms of notifying you of the sites that you should change your passwords on since they were vulnerable to Heartbleed, but really all sites could be vulnerable to it, so I would recommend changing all your passwords fairly frequently over the next few months.

As long as the password is not contained within a list of commonly used words and isn't in the dictionary, length is the most important thing. The second most important thing I would say is using the widest variety of characters possible including lowercase letters, uppercase letters, numbers, and special characters.

You want to generate a secure password from a password generator such as GRC's Password Generator. I always generator my passwords to be 50+ characters but everything over 15+ characters will be fine.

Also, make sure you change your passwords every 3 months and don't share your password with anyone. Lastly, store your passwords securely using a password manager such as LastPass (https://lastpass.com/). You should have a strong master password with LastPass and use two factor authentication. You should also use two factor authentication with all of your other accounts that offer it.

If a site requires a secret question, make sure the answer to that question no one else would know or make it a password or phrase that you would remember. Don't reuse passwords on other things as well (only use the same password once).

Make sure when you are logging in that the site is using HTTPS (the browser addon HTTPS Everywhere can help with that) and you aren't logging in from a public network such as from Starbucks. Even if you are logging in from a private network, I recommend using a VPN that uses encryption such as proXPN. For your home or office network that you are logging in from make sure it is using WPA2 encryption, it has a random network name, a secure password, you have changed the default credentials for the network settings to something secure, you have disabled WPS, etc.

That is all I can think of right now in terms of password security, but those are the main things that you should focus on in terms of secure passwords.
Great idea! Too bad openssl uses #define instead
Chaos: Animation of a double pendulum
WordPress 3.9 Is Coming: Get Ahead Of Any Suprises
CircleUp Raises $14 Million in Venture Capital
NY Times updated their headline:

"Obama Lets N.S.A. Exploit Some Internet Flaws, Officials Say"
Every pointer is potentially null, until proven otherwise (which in the general case means solving the halting problem).
I previously used KeePass and the password database corrupted one day. I would only use KeePass if you are comfortably keeping several backups using TrueCrypt and your system is compatible with it.

I prefer LastPass because it has more features that are valuable (I can use one tool/service instead of several), I can use it on all of my devices, it is very secure.
They aren't banning it because they use it internally.

They aren't banning it at all. This is an accident.
I ate there a couple times, and had excellent service both times.
You can encode the length of an array in the type in C++, at compile time.
Please do the "Scientific Visualizations with Blender" talk!
Great advice. When you're that young you barely know who you are, let alone figure out your life's calling. I'd just add that every step along your career journey (no matter how random or seemingly insignificant) will help you get there.
I'm pretty sure the Boehm GC isn't heap compacting.

It at least didn't used to be, and if it is it works in some way I cannot fathom, as I'm not sure how you can compact the heap without changing the value of pointers, which the Boehm GC cannot do safely.

That said it's still a very good GC and you should be fine. (It does try to minimize fragmentation in other ways, but nothing is as effective as heap compacting.)
Are you certain Threes isn't a JavaScript game wrapped in Phonegap/Cordova?
But then it would be the author being hostile and destructive, when this is clearly an accident.
I was not able to go this year, but one of the perks of my job is paid trips to cons. It is worth asking for most reasonable employers will say yes.
> Another outdated signing technology I encountered when I lived in Taiwan was the "chop" (印章) which was used to sign everything from post office receipts to contracts.

They use something similar in Korea and I believe Japan as well. There are some differences though between signing and stamping your seal. Both systems have terrible security. For example, forgery in signature based countries is unbelievably common -- it doesn't even have to look like the original person's signature to "work" in most contexts.

Some interesting things about the seal system, at least in Korea but I think it's probably true in other stamping countries, I can give my seal to somebody to stamp on my behalf and the transaction is perfectly legal. Whereas I can't easily give somebody my signature ahead of time. We deal with this in signing countries through power of attorney paperwork and the person granted the power of attorney just uses their own signature on your behalf. It's basically the equivalent function, and terminating the power of attorney requires getting back physical possession of your stamp or 인감.

It's actually pretty common, with the large Korean diaspora, to give a trusted person in Korea your stamp so that you can maintain property or take care of other business or legal obligations remotely.

In court cases concerning forgery in signature countries, the victim is sworn in, shown the signed document and asked "is this your signature" and or "did you sign this" and the victim can confirm or deny it.

The equivalent in seal countries has been harder to prosecute and presents two kinds of "forgery". Either somebody using your stamp without authorization, or using a fake copy. It's kind of turned into a bit of a mess and after a couple thousand years, at least in Korea, they're moving towards a digital based signature system if I recall correctly.
It's still not supported by Apple's slide.
Yeah thanks! Here is a little zapier zap to send email alerts when new videos are posted http://zpr.io/Hkyh :)
Hobby turned Career turned Shit
Back in high school, I started graphic design because I liked it..then my friends started liking my work so I started charging for it. Years later it became a career for me, but now I hate it. Maybe it's just me (hopefully not) but knowing that graphic design is what I do for a decent living creates a great amount of stress.

Has anyone else ran into this problem of making a career out of your hobby, then finding that the stress is making you dislike the craft as a whole? If this happened to you, how did you get back on the right track?
He's not dumb. Therefore, he's made a conscious decision not to.
Geneva drive: Converting circular motion to intermittent rotation
What do you love/hate about Elance?
As a web developer I'm thinking about going the freelance route and using platforms like Elance and ODesk to find work. Before I do, I'd like to hear from those who have used these platforms in the past.

Specifically, what did you like about them and what did you dislike about them?

Cheers!
The TLS library that our company uses for its applications is http://www.yassl.com/yaSSL/Home.html. Not sure if it's considered obscure or not.
Hm, seems documentation for for targeting Linux as a build target is missing? Or am I just looking in the wrong place?
We think it'll be useful.

You're right re the payout amount for blackhats, but it only takes one whitehat to claim a reward for a bug to get killed, and the idea of a sprint is to get a bunch of them focussed on the same target at the same time. We've been running sprints alongside the more traditional ongoing bug bounties since we started, and they're very effective.

Hopefully we will get enough individuals and companies backing this to make the rewards attractive to the right kinds of researchers.
Right, but presumably they want to have one library that can be used both in projects built for the app store and in projects not built for the app store.
Ask HN: CTO wants me to leave
I'm the tech orientated founder (the other is the business guy), not the best coder but I understand my domain and know my abilities.

We brought in a guy as CTO to help us move past problems we were having (feature creep, project management, enterprise level etc.).

The guy has a lot of experience as CTO (I had very little, also little as a coder), and he was instrumental in getting us to the point of launch where we were enterprise grade ready (as opposed to hacker ready).

Now he is advising me to leave, that I'm not a good coder, that he wouldn't hire me if I wasn't already a founder and not what the company needs.

I have improved significantly in the last few months from where I was (generally unstructured development, no tests, poor formatting / naming etc., but functional, generally coding to working with others instead of by myself) but he has said that it's not enough.

We have hired another coder who I get along well with and I have learned from.

My question is, does he have a point? Is this something that is common? Has he overstepped the boundaries?

EDIT: He's not asking me to leave now, since I'm still desperately needed, but in 3-6 months time after we have raised more funding.
Google Domain Name Exploit
Thank you, that's very helpful advice.
The MIT license is typically used by people who want their code to be broadly used.
You guys have been a huge inspiration to me. I love what you're doing, the systematic approach taken to everything, the total focus on customer happiness, the technical depth and quality of the platform...keep it up.

P.S. Funny to see my right leg in your launch video. ;)
Well opportunity cost is a real thing. If a problem is small enough it may just not be worth worrying about at all.

I upvoted the article because I thought it was interesting, not because I thought the knowledge was useful or important.
I think you might be confused about what Open Source means. It does not mean access to the source code. Even Microsoft didn't try to hi-jack the term with their "shared source" licenses.

Open Source is a made-up word. It did not exist before the OSI used it to promote OSI approved licenses.

With that out of the way I fount at least one non-open source product: http://www.binpress.com/app/pdftouch-sdk-for-ios/859 The licenses is almost 100% non-open source: http://www.binpress.com/license/read/id/1565/app/859 The only Open Source like-clause is the non-expiration!

The OSI trademarked the term Open Source to avoid confusions just like this. Not allowing redistribution is BIG difference! Not only is BBpress selling proprietary software, its diluting the very meaning of Open Source!
Illustrated Guide to Apple Computers by Matt Groening (1989)
Is "Descriptors and Metaclasses - Understanding and Using Python's More Advanced Features" really 3 hours long?
you are a salty mofo. Bret Victor is dedicating his life to making tools that will augment our intelligence, putting out A+ caliber design theory lectures on his personal site at free of charge.

What have you contributed?
I see this often too, usually when Google brings me in via the "duplicate" question. I end up steered to a question that is kinda close, but no cigar.

But these moderators have a job to do. If they allow too many "duplicates" SO might run out of drive space or something.
Is this article supposed to be suggesting that autopens are an example of "outdated, bloated government"? Because those machines look like they would be really cool to have (although also maintenance-heavy).

When I think about how much I love HelloSign, I can imagine the appeal of a physical machine that does the mundane work of signing for you.

Plus, it always drove me nuts when my elementary school sent home letters "from the Principal" and the Principal's signature had JPEG artifacts in it.
I tried this but the response says the API is not yet ready?
Of a waiter is upselling because they expect ME to pay commission on their ability to overcharge me, the waiter deserves 0 tip.
I would recommend an air gap, disabling autorun, removing the CD hardware, and any hardware used to connect to the internet. You could also remove any other hardware and uninstall the drivers you don't need such as a webcam.

Here is a good article on the Malwarebytes Anti-malware blog for some recommendations: http://blog.malwarebytes.org/security-threat/2014/04/windows...
you make much assumptions about how well read Bret is in other areas.
The NSA may be trying to repair its image. This is a bit offtopic, but I think the NSA is in serious trouble because they need good hackers to join them, and it seems like almost nobody will want to after last year's revelations. (Even their salary offers seem to suck in comparison to an important SV engineer's salary, which struck me as odd.)

One way to start to repair their reputation would be to responsibly disclose some vulnerabilities and then take credit for their disclosure. That might motivate whitehats to join them, and whitehats are exactly the type of people they need.

In 10 years, the US is going to be in trouble unless they can continue recruiting good hackers. In 20 years, they'll be in serious trouble when foreign powers have clearly begun dominating the SIGINT arena. And at the rate technology is changing, those timelines seem optimistic.
Which I recently read about on Raymond Chen's blog. Link: http://blogs.msdn.com/b/oldnewthing/archive/2011/09/21/10214...
This seems important and something I should look into implementing, but you completely lost me here:

> "Keep a hash map of URLs. In other words, instead of having the URL in the query string, have a key that refers to that URL there. In this way, only the URLs for the keys that YOU define are redirectable."

Huh? I wish you would expand on this a little bit.
> It sounds like you have everything figured out, the solution is beyond comprehension for mere mortals, and that you'll have 100s of millions of dollars shortly.

That's definitely the plan except for the part about
"mere mortals".

Mortals suffice, but not "mere mortals": Instead need
some help, or, say, need to "stand on the shoulders of
giants". The giants in question are not in computer
science -- "a field with much that is new and good however
the new is not good and the good is not new", too close to being fully true.

Without standing on the shoulders of the right giants,
your "mere mortals" is fully correct -- can't do it.
That is, one guy has, in practice, no chance of
reinventing all that stuff needed from the giants. Indeed,
it's tough enough just to get through the exercises
in one of the better books needed. More than one guy? For the original work needed, that is nearly always done
by just one guy; two are less good.
Configuration Errors are an example of "one-off" exploits. Things which are specific to a environment, rather then a code base.
Real Analysis by Royden is the source of my nightmares.
there is some voice says that .ng is not the most expensive cctld,because there are some cctld even higher than it.

but do you know that .ng belongs to nigeria,a country of over 170 million people, only 26,000 domain names were registered with NiRA.

do you know south africa,a country of 50 million people,
but nearly 1,000,000 domains registered with .za registry.

compare with other cctld such as .de/.co.uk/.co.za...which should have more local registered,.ng is the most expensive cctld.

http://www.DomainRobbing.com
(DomainRobbi.ng,No appeal, no compensation?!)
visit the link for more details.
Contacts with the app review team are scarce, and they can be obstinate even if you do manage to find somebody to talk to. That whole area is straight out of Kafka.
So, the plural of anecdote is data, and data still isn't information?
There are a lot of parametric (as opposed to the nonparametric FFT) methods for tracking frequency, I'm not totally convinced they're applicable to this case, but I think they might be fun to try out. Maybe start here: http://en.wikipedia.org/wiki/Multiple_signal_classification
That's really useful. I've wanted this exact thing a couple of times.

They say not to use this CDN for anything production related, but I personally think you shouldn't be using any public JS CDN for anything that matters.

reasoning here :

http://daemon.co.za/2014/03/from-trenches-js-cdn-point-of-fa...
> “Given enough eyeballs, all bugs are shallow” – Eric Raymond
> only obvious problems are easily caught. An issue that manifests itself only under very specific conditions or not in a way that is obvious to the end-user, can go undetected for a long time.

There are fundamental differences between bugs and security holes. Bugs are something everyone has an interest in fixing. If a bug rarely manifests itself - then it is not that much of a problem.

Security holes are things which some people scrupulously search for, and then sometimes keep secret, for their own ends. Sometimes people even try to create security holes where there are none ( http://lwn.net/Articles/57135 ).
You claim otherwise, but it is generally not possible to have a meaningful discussion about why your app is rejected. Even when you do the person you are communicating with is not an engineer, just someone going through a checklist. As someone with some iOS apps out there, my only chance to communicate with an engineer is to go to wwdc.
I'm surprised nobody has mentioned containers, e.g. Docker, as a way of limiting the damage from this kind of bug. In a container whose only purpose is to run the application, /etc/passwd should be as uninteresting as:

root:x:0:0:root:/:/bin/sh
bin:x:1:1:bin:/dev/null:/sbin/nologin
nobody:x:99:99:nobody:/dev/null:/sbin/nologin
app:x:100:100:app:/app:/bin/sh
First off, I'm sorry about your situation. Nobody here will be able to judge with any degree of accuracy whether he has a point. I personally would not look at this situation as a technical one; this is a business relationship situation.

Regardless of whether there is any grain of truth, the CTO has lost confidence in you. Not just a little bit. He has asked you to leave. The rest of my advice assumes the CEO (your co-founder) has quite a bit of confidence in the CTO. If that is the case, I'm not quite sure you can come back from having the CTO asking you to leave, nor am I certain you should.

I think it would be advisable to talk to a lawyer to see how you can cleanly and professionally leave on your own terms. Save the emotional stuff for friends and your alone time. You will no doubt need to grieve (this was your baby). But I think it would be better for you to be proactive about leaving and professionally extract yourself from this situation. That said, make sure you know your rights and what your contracts entitled you to in such a situation.

Once extracted, take your hurt pride and prove them wrong.
Make a mapping of some ID to a URL in a database, make the final URL that redirects have the ID in it, not the target URL.

That being said, this whole thing is pretty silly with the given examples. If banks were doing this it'd be another issue.
The point is that this is a fog harvesting device; it collects tiny droplets of water in the air efficiently. Fog is where you have > 70% (roughly) humidity, even if its only for a period of time.

Deserts have highly variable humidity, often 10-30% during the day, and great at night; maybe 50% ... but you dont get fog in deserts, or, for that matter, in many other places.

In some very specific regions, like Ethiopia, where you have misty mountainous regions; this is a useful device (see the article for the other very misty locations they talk about deploying this in).

If you put it in your backyard, you'll probably get a tiny trickle from it occasionally, unless you live in Wales.

The refrigerative water generators (http://en.wikipedia.org/wiki/Atmospheric_water_generator) can work in places with relatively low humidity; these ones do not.