skysight-inc/HackerNews huggingface dataset:
Are Tesla Superchargers 3-phase 480V on the incoming side? It seems they would need to be to support 120kW charging.
Nah, that's cheating. I like my restrictions. They keep me sharp.
The transform looks fairly simple; just approach it the same way you do error-correction (i.e. reed-solomon), find vectors of characters that are far apart in phase space and use them rather than sending messages directly.
Error correcting codes?
YES, and the reason is the whole basis for the argument around Net Neutrality: traffic through Comcast's peering connections is a result of demand by its customers. Comcast's customers pay for bandwidth and expect to get it when they use any site on the internet, even sites that use heavy bandwidth like YouTube and NetFlix.

Any normal business would respond to demand by its customers, but the telecoms have an oligopoly which they can leverage to increase revenues at their customers' expense. If the "fast lane" were allowed, Comcast would have a decent argument for not providing its customers the bandwidth they paid for to high-traffic sites: "we'd love to give you the bandwidth but the Googles and NetFlixes refused to pay for it". That position is totally back-asswards, is a result of their oligopoly, and is not in the best interest of consumers.

Comcast will continue to do just fine without forcing companies to pay for the "fast lane".
Not only is this a duplicate, but the previous two submissions were also by you. I believe that's generally perceived a poor behavior.
thanks for this! best thing i read all day.
Interesting case study. I think we will write in couple of months how it ended in TimeCamp. Did you have clear goal and saw how this statistics was used and if it was usefull?
Hi hartator,

That is a feature we are thinking about from day one but unfortunately to do this we either have to run multiple proxy servers and allow you to configure them individually or do process monitoring to understand who is connecting to the server. Both are on our todo list but we think that the second one have no chance to get approved by Apple due to the sandboxing limitations. We are currently researching this.
You, my friend, are the best. As a huge soccer fan and a developer, getting this sort of data is really hard unless you shell out hundreds of dollars a month.

Already thinking about the apps that will use this! Thank you.
On the future of Metafilter
Greg Weber gave an awesome talk at BayHac 2014 on just this subject.
https://docs.google.com/presentation/d/1suMuLRo1xS5NxWn-L9lG...
Yes. Interest rates are low now, but over a 100 year period like you are complaining about compounding will offer a significant offset to inflation.

My point is largely that if the charitable argument still makes your point, it makes the situation look even worse than the favorable number and rhetoric against the system that you are using. Government policy towards inflation is partly a result of a desire to have people put their money to work, exactly in things like savings accounts, so it makes sense to account for those benefits, even in a criticism.
> However, under this rule, they can still do what they're already doing: slowing down everyone's Internet, and then charging websites money to "get it back to normal".

It would be fairly hard to construct either the actual text of the proposal itself or Wheeler's statements of the FCC's intent in applying it to find any rule under which a "fast lane" would not be "commercially reasonable", but intentionally reducing the quality of service for normal use and paying to bypass that reduction would be "commercially reasonable". In fact, its hard to see how the latter is not exactly the same as the former.
Did the bank charge you for the replacement cards? Is there any real reason not to just regularly - say every 3 months - request a new card for peace of mind?
In my current position I can't have work email easily accessible on my phone. I have a security token on my keychain that changes every 30 seconds or so, as well as 2 additional passwords I need to remember. This is enough to deter me from checking my work email outside of work 95% of the time. I used to be the person sending emails from bed at 3am.

I go hiking in the Smokies almost every weekend, and I enjoy the fact that my post-hike tranquility won't be interrupted by work emails that inevitably hijack my brain even if they aren't pressing.
We changed the title because, as users pointed out, it was misleading.
everyone.
And kudos for calling it football :)
I think its important to say why it's difficult. The individual components of a web proxy/fuzzer range from easy to more challenging. At the extreme edge, they can get pretty hard:

HTTP proxy - Fairly trivial, annoyingly harder if you want to generate certs to MitM SSL.

Scaling it out - not too bad. fuzzing is highly parallelizable. How your parallel tasks work together is more challenging, (think rotating cookies) but do able, and you need to really do this right to maximize requests/seconds.

The audits themselves - If you actually want pre-built attacks, basic attack+response regexs (ala Nikto) are very easy, though building the DB is time consuming. Multi-request tests (looking for stored XSS, etc) are harder because an audit thread need to share state, or become somewhat sequential.

Dealing with the modern web - Harder. You need a JavaScript interpreter. I used Spidermonkey years ago, PhantomJS and the like more recently. Also means you need to support different packaging formats like JSON, MVC-style path parameters, etc and the associated escaping.

Keeping state - Harder. What does logged out look like? How do you detect this? (and no, don't make the user supply a Regex...) Has you audit screwed up your account so that "logged in" is all jacked up? Was there Stored XSS, but another audit clobbered the payload before your sweeper found the reflected value? (think updating your address on one page, displaying it on another, all while multiple things are auditing that update address form...)

All that said, I have found the main challenge people overlook when writing web pen test tools is the UI/UX. A shitty UI/UX ruins a tool because it ruins your flow. How do I specify what to fuzz with what rules? Can I resuse and reapply settings easily, how are results reported? Can I easily mark something as a false positive? But can I do that in a general way so that all issues matching on this host, or this file, or this URL frag are ignored? etc etc etc.

Please, if you are going to go down this path, think about how people are going to use the tool, and focus on maximizing their throughput.
We have no demo for this at the moment. We are not prepared to issue these kind of binaries at this stage. We will update as soon as we can.
Interesting writeup, thanks.

I'm a user and have been negatively impacted by the feed fetching optimizations - daily feeds are often a few days behind and come in bunches. Two examples:

- Penny Arcade updates its comics Monday, Wednesday, and Friday, always at 7:01AM UTC, and then news other times during the week. It's Wednesday at 4:25PM UTC - 9 hours after - and goread hasn't picked it up.

- Dinosaur Comics is updated weekdays. I'll eventually get all of them, but usually two or three at a time. For example, yesterday I marked all my feeds as read; today, I have entries from Monday and Tuesday, but not from Wednesday.

I had hoped that the move to the everyone-pays model would give you the resources (either developer or quota) to fix these issues, but they've gotten no better or maybe worse.

I haven't looked at what you're doing, but I believe Google Reader used pubsubhubbub where available to reduce/eliminate polling for many popular feeds.

I honestly didn't have a great experience with my last bug report, so I haven't tried again.
In the United States the normal distribution voltage, prior to being stepped down for consumer use, 7.6kv phase to ground, 13.2 phase to phase. So yes, you're pretty close, except the 13.2 kv would be 3-phase. For heavy industrial use, 4.4 kv is common for actual end user equipment, but above that would be some pretty serious equipment for an end user. Larger transmission lines operate anywhere from 60kv on up to 1.1 million volts, so lots of power is possible, as long as you don't mind the brownouts.
> To me, whether it's NP-complete is of little concern, since humans have been allocating registers (and beating compilers) with little difficulty.

Following that logic, one would conclude that writing an AI for Go is trivial as well [1].

> if I can describe the algorithm that I, as a human, take ... then a machine can probably do it just as well if not faster

This is pretty easy to disprove. You can probably look at a program's source code and tell whether or not it halts. But it's been proven that a Turing machine cannot [2]. The halting problem is one of many undecidable problems in computer science [3]. If any one of the undecidable problems can be solved by a human, that proves that the human brain is not Turing equivalent.

[1] https://en.wikipedia.org/wiki/Computer_Go

[2] https://en.wikipedia.org/wiki/Halting_problem

[3] https://en.wikipedia.org/wiki/Undecidable_problem
This is exactly what http://teamgum.com does. It is meant for team based link sharing. So google search is topped with relevant articles from teamgum along with names of team members. Also, it allows to connect with pocket, delicious & some other bookmarking services.
I must say a very interesting post, as well as the second post. Almost done.
Most of the energy is spent reducing the bauxite, an ore of aluminum that is the world's main source of aluminum. Once that's done, you don't have to spend it again.
Show HN: My new running app, Vima
From my mother's sleep I fell into the Startup,

And I hunched in its pixel mines unable to doze.

Sixty miles from home, loosed from its dream of life,

I ran into black tasks and the nightmare deadlines.

When I was canned they washed me out of the company with no equity.

(all apologies to Randall Jarrell)
This was my initial struggle with Clojure too, trying to fit my existing world views into the language. It didn't take me long to realize my world views were completely wrong, not Clojure.

Most developers don't want to learn, they want to ship. Even if this means reusing the same old school OOP+MVC approach and all the potential bugs and balls of muds it almost always creates over time.

Yet this is what I like most about Clojure: the language makes it harder for you to write big balls of mud. If your design isn't simple to implement in Clojure, it's a pretty good sign it isn't such a good design to begin with.

(I'm also someone who thinks Clojure is the best language right now)
Can you give an example of the type of feature you were required to remove due to the approval process?
Hi ahmadeus,

Don't give up on us. :) It is probably something very simple. Just contact us via our contact form and we will get it sorted. http://www.websecurify.com/desktop/proxy.html
Maybe Wheeler's plan is to keep making confusing nonsensical statements until we get fed up with him and stop paying attention. Seriously, it seems like the FCC just can't be clear about what it is they actually plan to implement.

Just reclassify broadband as a 'telecommunications service' already. The court in Verizon v. FCC said the FCC had the authority to reclassify. So do it and stop wasting everyone's time with your vague contradictory incomprehensible statements.
OP Here. Feel free to ask any questions. I'd love to get some feedback on it from anyone that runs or bikes etc.

If you're curious, Vima is Greek for "Pace"
Bingo. Clojure gets a lot of things right, but there's a lot of us that find dynamic typing absolutely unacceptable.
Not at all what it says on the tin: it's illustrating that San Francisco is reducing waste (a benefit, to be certain), but says nothing whatsoever about the cost.
i am part of the team which runs bookmarking service for teams (http://teamgum.com). it has a sidebar as an extension which shows live bookmarks from your team, discussions & notifications. It connects with google aswell while you try & search for something.

Also, it is available cross device on IOS, android & blackberry phones for clutter free & offline reading. for IE users, it also has a web app.
Just to provide a counter-point, some people ebb and flow in their energy and ability to produce high-quality work. Some people prefer working odd hours. They siesta during the day. Some people go on three-day benders doing amazing things, and then crash for a day. And that's their preference. They just get into the zone in different ways.

I think that if you want to hire the best people and let them do the best work, you should work around the schedule that works best for them and judge them on their work product and that of their peers.

As an aside, in the venture-backed, growth-focused startup world I work in, I doubt there is a single high-performing successful company that operates with the mentality that OP suggests people adopt. It's just too hard when the focus is to grow insanely fast. It's not for everyone, and it has serious consequences to work/life satisfaction, but it's a choice a lot of people on YC have made, or make... I'm fatter, with more gray hair, and more stressed than I would be working at a larger company with more reasonable hours and stress. But I enjoy what I do, feel it has purpose, get paid well to do my job, and get paid even more if we do something incredible. So I keep doing it because despite the downsides, I feel quite privileged. :-)
Great article, especially love the closing line "Just because something is being endorsed by our idols, doesn't make it ideal."

Makes me think of other idols with personal or business traits that are widely lauded but would cause many to ultimately fail.
Is there a static site generator with support for multiple authors and multiple languages?

e.g. with archive pages like /<author>/<lang>/<yyyy>/<mm>/
and category pages like /<lang>/<cat>/<subcat>/

I fail to see any. I've tried to configure many of the available generators, but no one seem to have the same itch I have.
The new design looks pretty slick. I really dig the bootstrappiness of it. I do, however, have a couple of nits. I couldn't figure out how to make the weather in centigrade, so I tried searching for this:

https://duckduckgo.com/?q=weather+palo+alto+in+centigrade

It came up with some interesting results. The images opened automatically for me (not sure why) and were a little off the mark. Ideally there would be a link to switch between Celsius and Fahrenheit, with maybe even a cookie to save your preference, although I don't know if that's very anti-DDG (does DDG store cookies for anything?).
Yahoo "solves" this by having you go to weather.yahoo.ca to default to metric. At any rate, given that 95.5% of the world's population uses metric, it'd be a nice feature.
"... on GitHub."
Or for people who wanted to buy bitcoin as a way to get into it. New users aren't likely to go out and build an asic farm; they buy some coins then figure out what to do with them -- while they linger in their gox/coinbase/etc accounts.
Sure, but that is neither answered by the OP nor any of the numbers that are usually thrown around. Still, some events claim that they are outliers if they have no or almost no women on the roster.

My point is more that there is not sufficient hard data in the discussion to support anything.

(the first sentence in my post was half in jest)
I'm so tired of large corporations not taking infosec seriously. This is a shame, in all honesty.
Because if you have a Java project, it's trivial to write a few classes in Kotlin. It feels perfectly natural to have a mixed Java/Kotlin package. Integration is seamless. Scala/Java integration, OTOH, is a pain, especially if you want it to feel natural in both languages, or even only in Scala. Even Clojure/Java integration is easier than Scala/Java integration.
Thank you! Will work on these ASAP.
I didn't say it was the "right" thing to do, only that 20-somethigns can do it because of their current lifestyle. The post referenced in your comment is basically a guy who realized that while he can operate in this way, he shouldn't.

Even if you're fresh out of school and have no kids, job, or friends that you care to spend time with, you probably shouldn't be coding 80 hours a week, even if your body and lifestyle permits it.
There was a court case regarding "database rights" for horse racing data in the UK, where the British Horseracing Board sued William Hill (a bookmaker) and lost the case. The BHB basically wanted to charge for the right to publish the horse racing fields (i.e. details of each race, the runners, etc).

Details of the case law here: http://www.out-law.com/page-392
And of the court case: http://www.out-law.com/page-5055

The lawsuit backfired completely. The BHB had wanted to charge newspapers for publishing horse racing fixtures, but it inspired the newspapers to turn around and question why the BHB wasn't paying them for devoting pages to the sport.

(Looks like the case also involved football fixtures as well)
Guide to Landing Page Optimization
> There are businesses that should raise VC and those that should not.

Well said. Raising capital is something that should be considered in the context of the current business. From a wealth creation perspective, selling a business for $10m with 100% ownership is exactly the same as building a $100m business with 10% ownership.

> Some businesses are not possible without a large capital injection.

Absolutely. Plus, some businesses will be substantially smaller without outside capital.

Conversely, some businesses will grow into nice size businesses without outside capital, but will spend themselves into oblivion if they raise a round.

A lot of thought should go into whether or not the current business is the high growth, large market business that's a good fit for venture capital.
I was kind of hoping for an analysis of what happens to whatever goes into the compost and recycling bins, whether it's actually recycled and if so is it done at all efficiently.
Where are the mobile standing desks? [video]
We say kilowatt-hours in Brazil too. Since it's a SI unit, I believe other countries use this too. It's probably because it's a more convenient unit to use when talking about electrical energy consumption, because 1 watt-hour is the energy consumed by something that has 1W of power running for one hour. One kWh is 3.6 megajoules, so it would be less convenient in this context.
You're reading the poem too literally if you think it endorses the idea of sacrificing parenting for your startup. The power of the piece is how viscerally it captures the price of that sacrifice without being preachy or whiny like so many blog posts on the subject.
Not yet, but it's possible.
you should try http://teamgum.com
Bug report:

Graph does not work in Firefox.

Fix:

Change lines 93-94 to

td.insertBefore(div, null);
this.parentNode.insertBefore(td, null);

Rationale:

`insertBefore` requires two parameters in the spec: http://www.w3.org/TR/2000/REC-DOM-Level-2-Core-20001113/core...

Chrome and IE do not follow spec: https://bugzilla.mozilla.org/show_bug.cgi?id=964212
I always wondered -- how are some sites able to get an up-to-date mirror of HN, when HN blocks usage of its API after a while?

Are they using some alternative API that was blessed by HN?
Is this a reasonable way to implement React/Flux with Backbone?
OwnLocal (YC W10) acquires Whoosh Traffic to help save newspapers
I'm not sure about Kotlin's plans re Javascript standard libraries, but I guess the approach is similar to Clojure, i.e. being a "hosted language" aimed at easy integration with the host environment (plus a very basic "common" standard library).
Yes of course. We had to remove the integration with the notification API and also remove the facilities which allow us to install the CA certificate smoothly into your device. The second was flagged as breaking a clause which states that all applications should be self-contained. Which in our opinion is understandable concern although the feature would have saved a lot of people an extra step to get the CA and other certificates in the correct place in order to ensure smooth communication.
"Everyone knows that "success" is what you make of it."

Where on earth did you get this idea? Success requires a lot of luck too. Not everything is within your control, no matter how many hours you put in.

"And a huge commitment of time is just your ticket to the game."

Then you overpaid. Are you listening to the scalpers?

I know a number of people who got great tickets to the game and lead normal, balanced lives.
You'd want to write your logs to S3, and then process and cache in-memory, either in something like Redis or in-memory in your analytics app on an EC2 instance.
we just use their RSS
> For most use cases other than video, existing wireless technologies are sufficient and will only continue to improve as things like beam shaping and micro cells become more prevalent.

Excluding today's most demanding use case doesn't get you anywhere. If you need a wired connection for that then you need a wired connection. The installed base of smartphones and tablets is still growing significantly and that's going to eat any technological improvements you can make to cellular and then some. Meanwhile people still want to be able to watch Netflix on a tablet from the back of a minivan, and to be able to make that happen at scale you're going to have to remove as much other traffic from the cellular network as possible.

> Wireless is easier to deploy and as its use grows, more spectrum will likely open up. Free markets have the benefit of deploying scarce resources where they are most in demand.

Free markets can't change the laws of physics. Allocating more spectrum is a linear increase. 20% more spectrum costs billions of dollars and only makes it 20% faster. The market solution when there is a high demand scarce resource is to shift usage to a resource that isn't as scarce for any use case where the alternative resource is viable. There is a reason one of the first things you already do when you get to a friend's house for the first time is ask for the WiFi password, and it's not because there is no cellular coverage.

> The biggest advantage of a wired home broadband connection over a wireless one that I see is the ability to stream video.

The advantage is that it allows you to transfer more bits cheaply. Today's most prevalent use case for that is streaming video, sure. It's hardly the only one. Anything that requires uploading or downloading large amounts of data is a bad fit for cellular. And we can't predict what interesting applications will become commonplace once the typical connection is 1Gbps.

> A wired connection has a lot of disadvantages: it's useless outside the home and the infrastructure is significantly more expensive.

The infrastructure is significantly more expensive, once. The cost to maintain fiber is not materially different than the cost to maintain copper. And it's not useless outside the home when everybody else has one too. If you're at home you have WiFi. At work? WiFi. Friend's house? Coffee house? Hotel? WiFi. About the only fixed places there is no WiFi are the places there is also no cellular, like the middle of the woods.

Using cellular when you're in a building with WiFi doesn't make sense. Using cellular when you're on the move does -- and that's the use case we should be preserving the scarce wireless spectrum for, by using wired connections everywhere else.
Convert to hex, replace c with g. That avoids the ...hic and s->sh transforms
Sailor convicted of hacking websites from aboard aircraft carrier
I'm not saying developers should use security tools to do security testing (although that is also a good idea).

I'm saying that in terms of the day-to-day workload of developers building web apps or APIs, a tool like Burp is as valuable or more valuable than a debugger is to a C programmer.