skysight-inc/HackerNews huggingface dataset:
When I started my first small business, I poured my life savings into it. Six months later all that cash was gone and I wasn't making rent or car payments on time. PayPal gave me the option for a lump sum of money ($10k) in exchange for a percentage of my sales (30%) - the loan cost me about $750 dollars in interest to PayPal, and saved the business. With enough runway for 2 months, I fixed the business model and cut unnecessary staff/expenses. Six months later, the business was profitable again, all thanks to a small cash infusion.

The point is, I could have been homeless. PayPal's financing gave me enough time to fix a broken business model, which is a situation I'm sure many other small business owners are in.
Whats your application? We have a pi up a mountain on a solar panel and it is doing ok.
I looked for a library for a similar WebRTC project. All of the libraries I found contained superfluous functionality, as I was only interested in data channels and did not want to be locked in by a particular third party. I ended up rolling my own; the WebRTC API is simple enough [1] and there is some example code from Google that points the right direction [2]. Additionally, Socket.io makes for a convenient signalling server prototype, though it is overkill.

[1] http://dev.w3.org/2011/webrtc/editor/webrtc.html

[2] https://bitbucket.org/webrtc/codelab
I don't have as much experience with pandas, but I've used window functions and psql queries in place of that sort of data munging for production web applications. We have tens of millions of rows and near real time reporting requirements.

Reach out if you want to compare notes.
I recently came across this link (Apr 15 2014) [1] which references [2]. Wonder what happened.

[1] http://www.infoworld.com/t/encryption/sloppy-secure-open-sou...

[2] https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_A...
truecrypt.org does a redirect to this sourceforge page, so perhaps it is the DNS that got hijacked, and not truecrypt website itself.

I don't remember TC ever being hosted on SF, so I think this is a bad redirect...
Call me paranoid but this just looks like really good evidence that Truecrypt was secure.
At the request of the content owner - sure, but what happens when I ask them to take down someone else's content because it mentions my name?
wow this is a kick in the nuts. i've been using truecrypt for years. i probably won't stop just because development has ceased... but i'm still curious to know what the real story is behind this. seems sketchy.
https://wiki.archlinux.org/index.php/Disk_encryption#Compari...

This might help.
How America’s source of immigrants has changed over a century
Marc Andreessen tweet essays
And to go a little deeper, "Can I get a full TRM for the chip?"

Freescale and TI are pretty solid in this area. The i.MX6 TRM is a freely available 7000+ page PDF.

AllWinner and RockChip? Not counting on it. I went through an ordeal with Ingenic (nee ChinaChip) where it took three levels of pleading with reps to get a badly-translated 50-page document.
Education Stock Footage
The page contains instructions for creating a virtual disk file (VHD) and encrypting that with BitLocker.
Interesting analysis, but it only focuses on the financial side. In software development, there can be a lot of other costs associated with hiring contractors that can't be expressed in terms of dollars. Emphasis on one of his last statements 'there's no one size fits all' answer.
Who is Benjaman Kyle?
I'm in a similar position. I dualboot and have a truecrypt volume I share between Linux mint and Win7. Works great.
After staring at the two logos for awhile, I managed to convince myself that the second "o" had changed color, becoming slightly yellower.

Now I'm starting to doubt my sanity.
This doesn't make any sense, and why just MS ?
Option 1 explicitly discusses using pipes, which aren't hugely easier than sockets. The downsides of overloading sigstop have been fairly widely discussed.
What will make you believe they aren't part of some type of large NSA cover up feeding your clicks to the government? A personal tour of every rack in every datacenter to inspect logfiles?

Trying to discount official policies or responses as "weasel words" or any type of other hand waving to every response they give sounds more like you are set in your agenda vs. wanting to accept a reasonable response.
My money is on the site being compromised. If this were a legit, why would they be doing a 302 redirect to a SourceForge page instead of keeping the notice it under their own domain? Also, if TC only existed for XP users, why even have a *nix version? None of this makes sense in the context of this being a legitimate notice.
Unless you own a Kindle Paperwhite.
Since you are here, I want to voice agreement with prior comments on the need for an open ended trial for learning and evaluation but with restrictions only on making it commercial.

I've tried these kind of limited time trials in the past and have found in every case that my time proved to be even more limited. Suitably restricted open ended time trials, if possible, can only help you with sales ultimately. This is especially the case for people with sporadic bursts of time limiting loads.

I also agree with the criticism of the very large bump required just to use Visual Studio. OTOH, I might find that of no real consequence given enough time to fully evaluate the tier that contains just your IDE (which looks pretty nifty actually.)
I missed the part where this document lists the vulnerabilities in TrueCrypt.
I remember TrueCrypt from several years ago when I was looking into various options for encryption. Haven't used encryption for a while, but if this is true, is there now an encryption software/service that doesn't involve being authored by a large corporation in the country that gave us the NSA, and which allows things like hidden volumes/partitions, algorithm choices, and use with various portable devices?
https://news.ycombinator.com/item?id=7745547
I cannot do this in any way with Bitlocker, can I?

Yes. There's BitLocker to Go for encrypting removable drives, and with Windows Professional editions you can create and mount a VHD virtual hard disk file as if it was any other drive, and Bitlocker encrypt it, e.g.

http://www.concurrency.com/blog/encrypted-container-using-bi...
At least the main CPU on the Parallela has a big company supporting it, Xilinx.
[node] Collaborative HTML5/WS Whiteboard
This is a node express project that uses html5 and websockets to create a collaborative whiteboard.
But without a similar audit on the alternatives proving their security, surely the most responsible action would be just to explain there is a problem and stop there.
"Soccernomics" claims iirc that the home stadium (not exactly the same as home country) advantage is a full 1 goal
I'm with you. This seems like an odd move, given that most likely only a minority of their users used XP for some time. Why haven't they been warning Windows Vista, 7 and 8 users to use Bitlocker for years (not to mention Mac OS X and Linux users)? Perhaps I just missed the warnings, but I am really puzzled.

I suppose the developers could have just found a massive vulnerability (perhaps they're doing their own audit in advance of the public one?).
Why have they only talk about how to secure a partition in Windows. Would the developers, or persons who took over the project, not care about other operating systems?!

Of course, by 'they', I mean the fake development team that the hijacker of the site wanted to portray... no way this is real
Wow this is a real surprise
Spark should be better than MapReduce (if only it worked)
The paged linked in the post explains how to create a VHD file, mount it using windows disk management, and then encrypt it using bitlocker. It supports dynamically expanding disks as well as fixed size disks that can be manually grown and volumes extended at a later date.

Using this method you can easily burn or transfer your VHDs, you can also store VHDs inside of VHDs.
A kind of OT question related to socket.io.

I am trying to develop an application that can be horizontally scaled. I understand using the socket.io-redis package seems to allow you to emit to a particular socketid from one instance while that connection itself is connected to another machine and the redis connection will take care of the communicating. This in a sense abstracts away the fact that there are multiple servers by just taking care of it transparently.

Are there any provisions within socket.io or another package that allows you to sync normal js objects across servers as well? The alternative as I see it is to use redis pub/sub to keep the state in sync but this feels like it should be a solved problem that one need not reinvent the wheel for.
Heralded medical treatments often fail to live up to their promise
Seems legit enough: http://sourceforge.net/projects/truecrypt/
In case this is legit: Bitlocker so far so good, but neither Bitlocker nor any other crypto solution offer plausible deniability (aka hidden volumes).
I don't know much about the intel framework, they seem to be really all over the place. Sench seems tried and true, I don't have enough experience with it to say much, except that it's a lot more flexible than building the UI in PhoneGap/Cordova in terms of widgets and controls.
A significant concern of mine with this is that Windows 8 has support for syncing your bitlocker encryption keys with microsoft. If privacy is something a user is seeking, how easy would it be to subpoena bitlocker keys for a user under duress?
I spent so much time with TI and Motorola chips, first in undergrad then at a division of Raytheon that used to be TI, that I got spoiled by being able to pick up a document that had detailed descriptions of every functional unit, external signal, programmable register, and instruction. Then I ventured outside that world, where I couldn't even buy some chips without signing an NDA and submitting a fucking business plan.
FrogVentures
I have had the exact opposite experience. People weren't using mocks therefore when you changed something at a low level, it caused tests all over the system to break that didn't particularly care about that behavior. It also makes test data set up much more complicated for both unit and integration tests.

I think there might be subtle differences is how we are mocking objects and how we organize our code that might make mocking have different outcomes. That's why I would like to see actual examples that can be deeply analyzed. I suspect that it's in fact the way the code is written and what the underlying platform allows that makes one more suitable than the other rather than mocks being fundamentally a poor choice.
http://sourceforge.net/projects/truecrypt/files/TrueCrypt/Ot...

All of the files are freshly uploaded.

--

Check this out too:

https://webcache.googleusercontent.com/search?q=cache%3Ahttp...

http://sourceforge.net/u/tc-foundation/profile/

====

https://webcache.googleusercontent.com/search?q=cache%3Ahttp...

http://sourceforge.net/projects/truecrypt/
Not just Apache, Nginx frequently has this problem as well. A decently written bit of documention on how a module is supposed to work and what it does, but very unclear on how the syntax is actually meant to be written.
On the other hand, SourceForge lists the project as having been created in 2004: http://sourceforge.net/projects/truecrypt/
Comparison Grid for Ansible / SaltStack / Chef / Puppet
Chrome is quickly starting to become a bullshit Google product with no real value, not even as a web browser.
Ben Davenport Joins Bitcoin Startup BitGo As CPO
I totally agree. Just certain factions of the media make that portrayal.
Well, if red Times New Roman on a Sourceforge page says so...
Baen do indeed do that: http://www.baenebooks.com/t-ereaderinstructions.aspx#kindle
The argument is for a smaller business not for a business at a certain scale. You can argue that at a certain scale you can build out your own solutions and not rely on third party APIs, at a certain scale you can purchase the absolute premium platinum support package so you can be sure your email is answered within minutes. At a certain scale you can do a whole lot of things but this is about when you're not at that certain scale. so let's think about context here.
From Poverty to Prosperity: A conversation with Bill Gates [pdf]
Put That Gem Down
The binaries are properly GPG-signed with the same key as the previous binaries, check for yourself. [They] either compromised their private key too or the actual developer(s) did this. Be it voluntarily or by force of secret three-character agencies / a massive pay check.
> percentage of my sales (30%)

did they take 30% of each sale until the full $10,750 was paid back or... ?
http://truecrypt.org/ redirects there, too.
How do you figure that? Yes you might not have an ebook store built into your device but you are not locked into ONLY obtaining your ebooks from Amazon.
This Letter To The Justice Department Could Be Uber's Worst Nightmare
Maybe EncFS [0]? Its Windows port is experimental, alas. I suppose it would be suitable if you were willing to make frequent backups.

[0]: https://en.wikipedia.org/wiki/EncFS
I can raise you one: www.artmoney.org
Because the VCs who fund them all use iPhones.

EDIT: Don't mind downvotes, but please explain. I think this is really a huge part of the reason.
I would say Scala is convenient, popular, supported and with good performance. It also has the static safety and memory safety you desire. All the while with an excellent library collection which is a superset of Java's library collection. Clojure should get a mentiom too. Rust needs to get its game on to compete with that. It should at least beat JVM stuff on memory consumption, so it has that going for it.
Why does the price of the iPhone, which you already own and which is a sunk cost, factor into it?

Further, why do cellular services factor into any of this? Both iOS and Android devices run apps fine without cellular service. In fact, lots of them don't even have the ability to use cellular service.

If you're insisting on only examining the scenario where you own an iPhone and a long-term cellular contract, then you can still switch to Android for $30-50 through the simple expedient of buying an unlocked Android phone, taking the SIM out of your iPhone, and placing it in the Android phone.
OP here, I came across this link via this Tweet [0] and it's probably a good idea to stay away from the linked TrueCrypt version on the site. It's version 7.2 and afaik the last version for Mac was 7.1.1 (At least that's what I installed recently).

I really hope it's "just" a defacement/DNS issue.

[0] https://twitter.com/maclemon/status/471727027356434432

Edit: Just saw the comment that they are properly signed. I'll just sit tight and wait for an announcement then.
Half a million dollars of load balancers? Either you are buying from the wrong vendor, or you have some wonky ideas of how many load balancers you need per data center, or are not using them correctly. ( hint: check a10 networks and Zeus)

The reality is, that if your problem is only L3, then arguably this can be solved many ways. For example, networks have been doing 10s of gigabits of L3 load balancing using DSR for ages. Dynamic route propagation doesn’t have a hold on this ( albeit it’s more “elegant” ).

But most people do more than L3, and really do L4-L7 load balancing, and most modern “application load balancing” platforms are really software packages bundled up in a nice little appliance. This is where packages like varnish with its vcl/vmod’s and caching, Aflex ( from a10 networks ) and Traffic Sscript from Zeus , amongst others, come in. Shuffling bits is the easy part! Understanding the request, and making decisions on that is the harder part.

If you split the problem, and are using varnish or nginx as your application load balancer, you can’t claim you’ve gotten rid of them, you were either not buying the right initial platform, or using it correctly. When you put a “stop buying load balancers”… you must first define what you mean by “load balancer” ;)

For the record, I've used both commercial load balancing platforms as well as contributed patches and used OSS load balancing platforms..
You can keep on using your Kindle with other stores...
But neither really makes any money for the vast majority of developers. At least not from app sales. And if you were to divide it between games and non-games the difference would be even larger. The ship has long since sailed for making money by selling an app on an app store. Might as well play the lottery, same chances.
8 hours ago on the IndieGoGo TrueCrypt Audit page [1]

> p.s. We hope to have some big announcements this week, so stay tuned.

[1] https://www.indiegogo.com/projects/the-truecrypt-audit#activ...
I've been hacking Rockchip RK3188-based devices for a few months now. What caught my attention are the low cost Android PC-on-a-stick and tablets using this SoC. We're talking about $50-ish delivered for a PC-on-a-stick with 2GB of RAM, HDMI output and a WiFi+Bluetooth adapter and $150-$200 for a decently built tablet with similar specs, some even having high-DPI screens.

Radxa Rock (the article keeps talking about 'the Radxa' when that's the name of the company selling Radxa Rock, by the way) is similar to the various PC-on-a-stick, but in a development board form factor and with more I/Os and GPIO exposed.

Rockchip only provides support for Android and more recently Chrome OS, with GNU/Linux support being mostly community developed. The good news is that most hardware is working on GNU/Linux, with the exception of the video decoder and encoder (which is typical for most SoCs)and the NAND driver is closed source because it includes the flash translation layer which is treated as a trade secret by flash vendors. The bad news is that the kernel code developed by Rockchip is a bit crap and the community forks are quite fragmented because there's no central place to centralize various patches. Even so, it's generally straightforward to add support for a new board. We have a wiki[0] and an IRC channel - #linux-rockchip on Freenode if you're interested. The Radxa guys maintain their own fork so at least for their platform it's clear what to use.

I'd say it's a good choice for running Android or for hacking or for doing processing tasks (things like a building packages, running a low power webserver, continuous integration, etc) on GNU/Linux.

Some people in this thread ask/complain about platform-specific GNU/Linux distributions. There's Picuntu[1], but my view is that platform-specific distros are completely unnecessary and even a bit silly. On x86 you don't run Thinkpad-Ubuntu, you just run the generic Ubuntu. This is no different for ARM computers, you can use any generic distribution with a ARM port, with a kernel image compiled for your hardware and maybe one or two other drivers which need to be set up in userspace.

Compared to RPi, RK3188 (and other similar SoC) devices have a massive advantage since it's ARMv7 while RPi is ARMv6 which most distros don't support anymore. The difference in CPU performance compared to Raspberry can't be understated, it has 4 cores which are maybe 2 to 4 times faster for most workloads, about three times the memory bandwidth, four times the RAM, etc.

[0] http://linux-rockchip.info/
[1] http://home.g8.net/
I'm looking forward to my Soylent arriving, but I am not going to deny myself the joy of cooking something delicious on my own accord.
PipelineDB (YC W14) is hiring employee #1
We are on a mission to build a new type of database for a modern world in which information is constantly moving, and moving fast. PipelineDB runs SQL queries continuously on large volumes of streaming data, giving companies the capability to easily develop scalable, realtime applications and services using only a familiar SQL interface. No application code is required.

This inherently involves solving a lot of big problems, many of which are novel. We’re looking for creative engineers who appreciate the value and freedom of choosing their own projects, approaches, and working with other top talent in a low distraction, streamlined work environment in our new SOMA office.

We are well funded by top investors including SV Angel, Susa Ventures, Data Collective, Paul Buchheit, and more.

If you’ve been waiting for an opportunity like this, please send your resume and a quick blurb about yourself to jobs@pipelinedb.com. We're hiring for two positions:

1) Software Engineer - San Francisco, CA

Requirements:

* Bachelor's degree or higher in CS or related field

* You've worked with large C/C++ systems in a Linux environment

* Strong system-level debugging skills

* Strong understanding of how performant storage systems work

Bonus points:

* Experience with/contributions to PostgreSQL, Storm, Kafka, Samza, Kinesis, or Esper

* Experience with database internals

* Experience building distributed systems

* Experience building realtime systems

Compensation:

$90k - $120k + 2% - 4% equity

--

2) Frontend Engineer - San Francisco, CA

Requirements:

* Strong design sense (please send us a link to your portfolio/work if possible)

* Experience with a framework such as Django or Rails

* Strong HTML, CSS, and JavaScript skills

* Ability to implement your vision effectively

Bonus points:

* Bachelor's degree or higher in CS or related field

* Experience with databases

* Experience with monitoring/operations/admin software

Compensation:

$80k - $110k + 1% - 3% equity

--

jobs@pipelinedb.com
Can you please elaborate on your comment concerning the lack of talent in Canada? What's wrong with the large pool of CEGEP and university graduates or more experienced developers who are well able to pick up new technology?

What does U.S. talent have that's missing in Canada? Are the good ones really all moving away to where the money is? Or could it be that, despite all the available funding, Canadian entrepreneurs are less prone to risk training new recruits?
Why isnt java convenient for web development? too many semicolons?
You could also just use Primus which exposes a Stream compatible wrapper by default for the client and server.

https://github.com/primus/primus

(Primus uses engine.io,sockjs,browserchannel,websockets internally so you're no longer locked into a specific framework)
Agreed, If the fallback is using another service provider's API. I wouldn't recommend that because you then have to maintain version changes to each API. A fallback could also have been caching, slowly adding data to your own solution as users used the API so that the outage would affect some users whose queries were not cached or part of own solution. There could be more fallback strategies but I totally agree with you that using fallback APIs is not a good idea in terms of long term maintenance.
It's opt-in/disabled by default. What's the problem?
Android has a Linux kernel, but most of the OS is not what you'd find on a normal Linux desktop distro. It was started by Android, Inc. in California and is now developed almost entirely by Google.
Must be fake/ a hack. It wants you to download Truecrypt 7.2, but according to Wikipedia[0] and other download-portals the most recent version is 7.1a.
[0}https://en.wikipedia.org/wiki/TrueCrypt
I think you meant to comment in another thread (https://news.ycombinator.com/item?id=7809809)
And I get 2 downvotes for this? really? downvoters care to explain why, just for asking if it was a reference from bash? Wow...
Edit: Thanks to the other 2 posters who provided alternative sources. You learn by asking, no? or at least some of us do..