skysight-inc/HackerNews huggingface dataset:
This...

If I want to make a very high salary, what would be the best process...

...doesn't jive with this...

Relocation after college is not a problem. It's not about the salary(cliche)but about being a leading expert in the field.

If you want to become an expert in something that'll last a long time, consider academia or niche security work or something. If you want to become rich, go into finance or investing or medicine or try the startup casino.

Regardless of which you choose, learn how to write more clearly--your post could benefit from better spacing and being broken out into multiple paragraphs.

Oh, and one more thing. Don't confuse the tools for the product for the skill: nobody cares too much if you use Java or C# or C++ or whatever to accomplish your goals, so don't get hung up on that.

Also, do try and spend some time in college socializing, drinking, getting laid, and learning about people; you don't want to end up a monkish developer until you've seen what you'd be passing up.
Disclaimer: I didn't write the article, just found it linked in the DDG forum (https://duck.co/forum/comment/36997) and thought it was interesting.

I do use DuckDuckGo and love it, but the article does make some good points. Mostly about the fact that DDG is based in the USA, and so secret court orders (even without DDG acknowledging it, as their host could be the target of an order as well).

Nothing new anyway, at least in my opinion - If you want "real" privacy, the only way to get it is to use a system like Tor, I2P and FreeNet.
Yep. This is a good blog post by Development Seed about their static-only website approach: http://developmentseed.org/blog/2012/07/27/build-cms-free-we...
Show HN: On-demand chat service for communities
AWS SDK for Java now supports Client-Side Authenticated Encryption for S3
Similar tool in pure Python: https://github.com/eliben/pss
I see this "pyramid" across society in general, and I find it extremely troubling:

- There is no effective monetization scheme to develop, maintain, improve, or redesign basic infrastructure that is critical and used by everybody

- There is lots of money thrown around for tiny little non-reusable services that depend on that infrastructure

Where and how money is spent on the core infrastructure is typically sporadic, subject to the whims or neglects of the big companies that have R&D budgets, and typically their best interest for the infrastructure is not quite that of the general public.

Example: the web, which grew from a simple consumer-is-in-control document sharing system to an incredibly complicated and misengineered producer-is-in-control application engine that abuses user data/privacy all throughout. Yes the infrastructure was developed, but very poorly and incrementally, and with bad intentions.

Yes the infrastructure is largely open-source / open-protocol, so that counts as a win? But I wish we could invent a society in which shared-infrastructure is valued and monetized proportional to its contribution to the society (which would outweigh the utility of the services on top of it), rather than vice-versa.

Open-source verifiable operating systems, security libraries: these are more important than your text-messaging app! But we don't know how to fund them.
Depends on the price. 1$ for TB seems more than reasonable to me.
I am one of the reporters of this issue (Fraser Newton of Clio www.clio.com).

We applied the following patch (and configured the blacklist as described in the comment) to resolve this issue. This works by rejecting any query parameters that look like user-supplied hashes while allowing developer-supplied hashes. e.g.,

Model.where(something: params[:something])

raises an exception if params[:something] was constructed to be a hash while

Model.where(something: {id: 1})

works as expected. This also doesn't require any casting to work around the vulnerability.

diff --git a/activerecord/lib/active_record/relation/predicate_builder.rb b/activerecord/lib/active_record/relation/predicate_builder.rb
index 413b81c..a114f08 100644
--- a/activerecord/lib/active_record/relation/predicate_builder.rb
+++ b/activerecord/lib/active_record/relation/predicate_builder.rb
@@ -1,6 +1,22 @@
module ActiveRecord
class PredicateBuilder # :nodoc:
+
+ ##
+ # :singleton-method:
+ # Refuse to trust attributes of the given classes when building predicates.
+ # For example, the following...
+ #
+ # ActiveRecord::PredicateBuilder.blacklist = [ActionController::Parameters]
+ #
+ # ... would reject any user-supplied hashes submitted via controllers.
+ cattr_accessor :blacklist , :instance_writer => false
+ @@blacklist = []
+
+
def self.build_from_hash(engine, attributes, default_table, allow_table_name = true)
+ ActiveRecord::PredicateBuilder.blacklist.each do |blacklisted|
+ raise ArgumentError, "Blacklist violation: instance of #{blacklisted.name} found" if attributes.is_a?(blacklisted)
+ end
predicates = attributes.map do |column, value|
table = default_table
The opposite effect, a bad movie being rated highly, also occurs. One example of this is with the film "The Oogieloves in the Big Balloon Adventure" (http://www.imdb.com/title/tt1520498). This film was panned by critics on release and was a complete flop at the box office. Its IMDB rating languished until sometime last year when it began to rise. Around the same time, a bunch of poorly-worded unequivocally positive reviews showed up on the page, all following the same pattern (including one that appears to have been run through a translator and back). The rating made it up to 8.0, although it's since fallen to 7.6. If it's not the movie's production or marketing team involved in this clear manipulation, I don't know who it would be, as I can't see that this movie has any kind of cult following.
Starting Small but Aiming large – Ambitious Entrepreneurship
Too bad these guys have burned out all the good will.

First company to wave [phoney] money at them... Sold!

(Most of the transaction is in FB stock)

No previous talks about seeking a large company to boost them to the next level. No rumors they may sell. It quite literally was, first come, first serve.

Now we all know FB has to get value back out of this... Its an investment. Being a tech company investment, we can presume FB is looking for a short-term return, ie. <5 years. How will they do it? By selling your privacy of course... Its FB's model.

Pathetic sellout.
How do you make a quick million? You start with two million.

That is: Trying to make money fast usually means that you lose money fast.

To actually succeed at making money fast, you have to build something that a lot of people want, and that you can rapidly scale up. The best you can do now is put yourself in a position where you bump into problems that might fit that, and people who can help you get to a solution. The people you are most likely to find at college. The problems... you may find them by keeping your eyes open.
I was expecting somthing more that a proportionally space line with text.
Great niche tool for some good laugh! Way to go Michael!
That's what burns me. We already pay ISPs to deliver the data that we request. They should take our money and improve their infrastructure. Instead, they want to get paid again, by e.g. Netflix, and the result would still be basically the same shitty third-world service we get in the US today.

Many of us already get a Slow Lane Demo every day during "prime time" evening hours.
This is true. Just look at how EA was voted twice in a row as the Worst Company in America. They have problems, sure, but it's ridiculous for it to beat out companies such as Monsanto, Bank of America, Comcast, Halliburton, etc. Companies that have seriously harmed the country.

But no, a game company is the worst because a bunch of fanboys rallied to say so.
This method also incentivizes ISPs doing their damndest to get rid of the lowest consuming tier of customers, even if there is no other service available (seeing as how they've managed to monopolize service carrying in most municipalities).
Slow is so more infuriating - as perfectly illustrated by this Oatmeal...

http://theoatmeal.com/comics/no_internet
Very interesting visualization. One thing I want to point out however is the rearrangement of the widgets should not be based on its size, but on relatedness instead. An for that to happen, you need to design the layout instead of using auto re-arrangement based on screen size.
Odd from my experience (I helped with a campaign when President Bush made two trips down to Georgia for us). The Venue security and logistics of the trip are vetted and verified by the Secret Service and White House travel office well before an announcement is made. Makes me wonder if the Political Affairs office is not in sync with the Secret Service. Which would not surprise me because the Protective Detail Secret Service agents that I met were some of the nicest coolest people you could hope to meet, while the Political Affairs people tended to be pricks to say the least.
Don't use Machine Learning for everything
Everything you say is right, of course. Yet, I upvoted the story.

I thought it was indicative of a larger trend where crowdsourced data are used to illustrate a point. Like the Google flu trends articles, which have gone around HN at least twice, once when they were successful (https://news.ycombinator.com/item?id=5040204) and once when they were critiqued (e.g., https://news.ycombinator.com/item?id=7455307).

I work a lot with sampled data, and I have found that sampling issues can be some of the most difficult to appreciate and to quantify -- even for experts.

I guess it comes down to sampling from one distribution, P(x), when the situation you really care about samples according to a different distribution P'(x). If P is far from P', your conclusions from P can be arbitrarily bad. If you have an adversary moving P around deliberately, as here, it's even worse.
I like drysart's criterion above (the delta-Q factor) as a way of discriminating between lowbrow but honestly-crafted crap like the usual MST3K fodder, and expensive yet incompetent crap like SW Episode 1.

But you raise an interesting point, in that there should also be a penalty for novel, provocative work that, while perhaps well-executed, rests on principles that can never be used again, so they don't advance the state of the art or otherwise leave us with any enduring influence. Works like Blue and John Cage's 4'33 would fall into that category, I think.
I was so close to buying a nest when they released ones compatible with my system. Then Google bought them a few days afterwards and I couldn't be less interested now. Its just one of those things, I do what I can to hide from Google now, the last thing I want them having dominion of is precisely when I am in and out of my house.
Great idea, and impressively simple interface. Love it.
Ask HN: What are some best practices for mobile automation testing?
It looks like a bunch of the other replies to your query have touched on most of the points I would make, but I thought it might still be worth my response.

The majority of the content I consume online doesn't _need_ js. In the sense that it's easily possible to design websites to display text and writings without needing js. So from a practical standpoint, I think js is mostly unnecessary. There are obviously services which wouldn't be possible without js (e.g., openstreetmaps), and I do un-block js for those sites.

You are of course correct that js is not the only way users can be tracked, however it is one of major components in tracking.

Looking at the EFF's panopticlick [0], with js blocked:
> Within our dataset of several million visitors, only one in 57,814 browsers have the same fingerprint as yours. Currently, we estimate that your browser has a fingerprint that conveys 15.82 bits of identifying information.

With js enabled:
> Your browser fingerprint appears to be unique among the 4,104,774 tested so far. Currently, we estimate that your browser has a fingerprint that conveys at least 21.97 bits of identifying information.

So even something as simple as disabling javascript turns my online fingerprint from being unique to being one of 5% of users who have used that site. So while disabling js doesn't make one immune to tracking, it does make it more diffuclt.

In summary, for most of my use of the web, js is unnecessary and does more harm (tracking) than good (it's not needed for consuming text). I enable it on a case-by-case basis for some websites, if it's needed. But unless the js is truly critical to the presentation of the information, I won't enable it and I'll likely leave the site. Because, yes, much of the web is broken without js; but that's frequently due to (in my opinion) poor site design which doesn't fail gracefully in the absense of (usually unnecessary) js.
I'm pretty sure UA has more than 48 flights a week to the NY area as well if you're aggregating JFK, LGA and EWR,the number should be closer to 20 per day. I just arbitrarily picked Friday, 10/17 from SFO => NYC and there are 23 flights. Your number might be right if excluding EWR, which like SFO is a major UA hub.
> Can anyone think of any advantages to a non-neutral internet?

Yes. In the early days there was a competing networking technology called ATM. It provided quality of service (QoS) aspects in the protocol. So, you could prioritize packets, e.g. protocols affected by latency could be prioritized (e.g. VOIP, gaming), while those that weren't could be given a low priority (FTP, email).

The beauty of ATM was that on a relatively low bandwidth connection you could utilize all of your bandwidth and services like VOIP would still work beautifully. TCP/IP still today struggles with this.

So, as a consumer, I'd be happy to pay for QoS so that my VOIP packets had an expressway on my 2Mbps connection. However, that ship (for many) has sailed. With my largely under utilized 50Mbps connection there is no reason to pay for QoS because we've largely solved latency by throwing bandwidth at the problem.

However, with the approach that the FCC/comcast/et al are taking, I see no benefit.
You are burning an artificial technical straw-man. There is no technical capacity limit at play here. Networking technology has leapfrogged the bandwidth available to consumers many times over, and to boot, it is pretty much infinitely scalable.

So when theres no problem transferring all of Netflix, Skype and BitTorrent simultaneously, why slow any of it? Sure, at times hardware fails, fiber is damaged, and ISPs can feel free to prioritize traffic at that time, we certainly have the technology to do that.

But what is certainly not ok is slowing traffic because you are not willing to invest into your connectivity, investing not even enough to actually deliver all of the meagre bandwidth (100 Mbit is 1995 vintage technology, where in the US can you even get that?) you have sold to consumers.
>>>"Ironically there is a lot of hatred among the locals about “tech” but I was honestly surprised since the west coast is largely transient population."

It's interesting to note the parallels between SF and Bangalore in this aspect.
Ask HN: Would self-taught programmers be interested in such a book?
I want to write a book on operating systems that actually lets the reader build one. It's going to cover stuff like C, x86 assembly, computer architecture, and operating system architecture (basic stuff like task switching, file systems, virtual memory etc). It's also going to provide exercises that lets the reader fill in gaps to make sure they comprehended the material instead of just copying and pasting code. The targeted audiences are mainly self taught programmers and motivated cs students who want to learn more than what their typical operating system courses has to offer. Would people be interested in working through such book?
I am going to assume the engines themselves are the most expensive part and would require reconditioning regardless of landings on water or earth, why not just make that part recoverable? Parachute it back?

Can the method used by Scaled Composites, jet lifting a rocket to higher altitude, be employed as a better solution? Why not rocket power the plane portion and go for even higher based launch? Granted some cargo would be lost to weight for control surfaces and wings but recovery should be simpler, a glide path cannot be as hard as landing upright.
The server side is currently relaying messages for the in-progress iOS and Chromium clients. That's functionality that exists today, even though the clients are still under development. The TextSecure server is an elegant and important part of TextSecure's infrastructure. I stand by my assertion that it's an oversimplification to say that TextSecure == Google's Servers.

Google does not have access to any metadata, other than the fact that you are a TextSecure user who has received a Push notification. GCM payloads are fully encrypted. Google cannot tell who a message was from, they cannot see which numbers were involved (users are free to register with a number that is different than the one assigned to the cell phone that is running TextSecure), they cannot tell whether or not it was part of a group conversation, and they cannot see its contents.
There is hope on the streets. The cogs of the American economy seem like moving.

[...]

A lot of people are homeless. Every year I visit it’s increasing. Maybe I am using the wrong streets. I am surprised there’s no startup to fix this.
You're right, the article reads like a PR plant. However, the author doesn't seem to be a shill for PR flacks in her other stories[1]:

- a relentless stream of articles on appalling behavior of apparel manufacturers exploiting workers in Bangladesh

- retailers putting religion at the center of their brand image

- the struggle for a living wage by fast-food workers

- the launch of Walmart's money transfer service, along with stories about Walmart exploiting workers and taxpayers

[1] http://www.forbes.com/sites/clareoconnor/
A Server With Docker, Part 3: The Foundations
I'm not sure that landing is more dangerous than takeoff. It's true that the thing is pointed towards the earth, but on the other hand there is a lot less fuel to explode.
cscope and ctags are language syntax dependent searching tools for c-like programming languages. They let you search specifically for all instances of a function names 'foo' for example. Ack is instead just a normal pattern matcher like grep except that it has some cleverness by which it knows not to search certain file types and directories. It will return all lines which match a string rather than just variable names or functions.
> A lot of people are homeless. Every year I visit it’s increasing. Maybe I am using the wrong streets. I am surprised there’s no startup to fix this.

Does he mean a startup to help him avoid streets with homeless, or a startup to solve the homeless problem?
Why did they choose the same name as minix compiler ack (http://tack.sourceforge.net/) ?
Firebug exists and it is great, I think there are other stuff that is much more important to fix/implement in Firefox.
Show HN: Buildbox Continuous Delivery Pipelines
We do not yet have prices. We have designed this to be a low cost service though.
This is a point that folks new to Go often miss. I oftentimes see people compare "interface{}" to "Object" in Java, which is not true.

(If you don't believe me, note that not everything in Java is actually an Object - since there are multiple typekinds[0], that means that not every type can be used where Java expects to see an Object). That is part of the reason for the mess surrounding the so-called wrapper types like Integer (which are themselves neither objects (wrappers are passed by value, not reference) nor primitives (they are in most[1] cases unboxed to primitives, but are not themselves the same things as primitives).

Aside from the fact that Java didn't add generics until 1.5 (if I remember correctly), which certainly didn't stop its popularity, it cannot be emphasized enough that the need for generics is dramatically reduced if one actually understands how to use interfaces idiomatically in Go and understands how they are different from "interfaces" in Java or other languages[2].

While I occasionally run into a situation in which Java-like generics would make things marginally easier, they're few and far between; interfaces bridge far more of the difference than non-Go programmers often realize. And has has been explained to death already (both at Gophercon and on the mailing list) - generics are not out of the question for a hypothetical Go 2, but there are going to be no more changes to the language syntax for Go 1.

[0] I counted either 5 or 6 at one point when I was using Java heavily in university, but that was several years ago so don't quote me on that exact number.

[1] emphasis on "most" - there are some very "fun" edge cases that you can find here!

[2] I'm reminded of how Haskell has both "class" and "return" as keywords that have nothing to do with their Java counterparts - I think Go's "interface" is along the same lines - it's the same identifier/term, but a very different meaning.
> I do use DuckDuckGo and love it, but the article does make some good points.

To be fair, the article suffers from what the author's main gripe with DDG is – a lack of actual evidence to back up the narrative. I think the burden is on DDG to provide information proving their case, but this article isn't much more than "he said, she said".
Laughing Giraffe’s new Soundpix app makes your photos talk
PostgreSQL Connector for Loopback: create Node.js powered APIs for Postgres
The article, as I understand it, suggested a banner on the site stating why the site is slow, and to get out of the slow lane 'click here'.
Thank you for this! `pip install pss` is one of the first things I do on a new computer :)
Fly over the Hollywood fault zone
The Signs of Developer Burn-out
Thoughts on Karl Schroeder’s ‘Lockstep’
> Palo Alto, Mountain View etc. are no more part of Silicon Valley

Seems somewhat exaggerated to me. There's definitely a shift from the valley to the city (and Palantir eating up all available space in PA sure catalyzes this process), but I wouldn't say PA/MV are "no more part of SV".
Mining bitcoins in javascript on someone else's computer. Surely it would be quicker to get the 386 computers out of the landfill and use them than to mine bitcoins in javascript remotely in some botnet of sorts.

I am intrigued. Can you send me a URL of somewhere that will mine bitcoins on my computer?
I've already started memorizing War Games for this very moment.
I have a fairly simple alias that does a find, but excludes directories like .svn .git etc. and a separate one that excludes common binary extensions as well (.o .fas .fasl etc.)
Yeah, we tried that with Second Life.
Good point, the tradeoffs between making something visually interesting vs relevant from a visualization point of view were really tough on this project. I will look into some kind of compromise. Related data does not always look good next to each other.

More broadly, when I visualize a set of data I follow Alberto Cairo's guidelines of Organize, Compare, and Correlate. In this project, I moved away from that quite a bit because I was seeking to make something interesting as opposed to useful.

I was scratching an existential need I had to make this data accessible and interesting. :)
How Startups Are Changing What It Means To Be An Advertising Agency
> Why not rocket power the plane portion and go for even higher based launch?

That's what the first stage of the Falcon 9 is - a rocket powered boost to enable the second stage to launch from a high altitude.
Testing Against Datomic
"We'd pick them out of the ocean, but we spent a lot of time cleaning those things up when we got them back"

And there's the rub. SpaceX is working on having reusable components land on solid ground.