skysight-inc/HackerNews huggingface dataset:
I once nearly lost access to my coinbase account when I got a new iPhone and lost my 2-factor-authentication codes I had stored with the Google Authenticator app. I then stupidly managed to delete my fallback phone number from coinbase. Luckily I had clicked "Remember this computer for 30 days" and managed to transfer all of my bitcoins away from coinbase before loosing access to the account.

I tried their support, but they never really tried to help.
While their vault seems like a good idea, I would not trust them with my bitcoins anymore :-/
Does he really defraud Google? They're still getting paid.
He's talking about the PXE kernel option specifically: http://coreos.com/docs/running-coreos/bare-metal/booting-wit...
Thanks for the response. What I wonder then is when does a startup reach a point of hiring a dedicated compliance officer (so that argument becomes relevant)? Now we split the work and pull in 3rd parties as needed. Even for medical or health technology I wouldn't expect it would be in the first 10 employees or first few years of most bootstrapped (and cash-strapped) companies.

That being said, I understand HIPAA compliance (or what it implies) is VERY important and shouldn't be taken lightly...
The animations are CSS powered, which takes advantage of GPU optimizations better than JS animations. If the browser does not support the necessary CSS animations then jQuery animations will be used.

jQuery is still necessary for the logic behind implementing an accordion, but the "heavy lifting" is done in CSS where possible.
web development that doesn't hurt! (cake)
Pitfalls to avoid when instrumenting analytics
Just curious, what would you say about this font sample: http://i.imgur.com/DSXqMCZ.png ? (It's a modification of Terminus, with smaller letter height to have a bit more whitespace between the lines)
Happy birthday, Rails!

Looking into the future, I hope Rails API will take off.
Who at the Table is an Indie iOS Developer?
That's how Emacs works though! There's a bunch of TeX junk in Emacs but since I never use TeX, Emacs never loads that lisp. It's just sitting around in a directory waiting in case I do need it at some point.

And Emacs has a command line for its stuff: "M-x".

And if you really want to have separate executables you can do that with small 'emacs --eval' wrappers.
You are countering your preconception of his arguments.
Airlines are now paying extra-close attention to this, so I really wouldn’t worry at all when flying through this region. (No one is flying over Ukraine or conflict regions inside Ukraine anymore, anyway, but there is really no reason at all to worry about Russia.) It’s rare that civilian airplanes are shot down with weapons, anyway. I don’t think there is any reason to worry. This won’t happen to you.

(Oh, now, don’t get me wrong, were I to fly through this region I would be more scared than I would otherwise be. However, that would be irrational on my part and in many ways an involuntary reaction and no reason to change my plans.)
haha how old are you? :p
Sorry, not trying to be impersonal. It was just the name I signed up with when getting accepted into YC.
What it would take for Uber to replace our personal cars?
Latency is a real problem, so I don't think doing the noise cancellation in software would ever work particularly well. You almost certainly need dedicated hardware, or at least a programmable chip with a low latency connection to the headphones and all the other necessary components connected at low latency as well (some microphone(s) picking up the ambient noise, for example.)

You're certainly not ever going to do noise cancellation over bluetooth.

I bet the headphones could be much cheaper, though. Bose almost certainly wants to monetize their R&D investment and take advantage of their significant marketshare. (There are non-Bose noise cancelling headphones, but I don't see them around often.)
We're up[0]. CloudFront requires a browser that supports SNI indication for SSL, which may not work if you're on Windows XP. We'll spring for the dedicated option soon.

Our current operational status is available at http://status.aptible.com/

[0] http://www.downforeveryoneorjustme.com/aptible.com
Why wouldn't one write something like that directly as an httpd or nginx module? You get fastest possible C http server, together with a very good utility library and just need to write your own routing and handling functions. I mean, why rewrite the server component when you can just use an existing one? I can see not wanting to use one of the CGI interfaces for maximum performance (and ultimate fun), but there's very little point in rewriting the http(s) handling yet again.
That sounds shitty, but I assume Goldman Sachs employees are at least well compensated for it.
Did you read the article? They've been developing this tech for decades and releasing actual products based on it. Products people like enough to buy.

What innovation's being hindered here? Beats didn't do anything new.
the government very easily could have imposed an academic rich-text file format that was available for all platforms... and bypassing the whole .doc/.pdf closed fiasco... :/
No credit card required!
But it's extra money. If you don't want to pay corporate taxes, spend the money on expanding the business, wages, or dividends.
I find Emacs's default Perl mode isn't so good. Luckily Emacs also comes bundled with cperl, which works much better in my experience. So much so that I have this in my .emacs:

(defalias 'perl-mode 'cperl-mode) ; perl-mode sucks; use cperl-mode
This is actually startlingly true - it would make a lot of sense for someone to steal OP's idea and capitalize on it. I hope, however, that no one does. It's a great thing he's done.
> So how do patents "encourage innovation" again?

On one hand we have Bose, who "for almost 50 years...has made significant investment in the research, development, engineering, and design of proprietary technologies now implemented in its products, such as noise canceling headphones" [1]. On the other hand we have Beats, which dressed up commodity tech in a nice design and well-executed marketing campaign. Not sure if this is the best case to torpedo patent law with.

[1] http://www.scribd.com/doc/235098824/Bose-v-Beats-Civil-Compl... §5
> They don't really detract from the content.

They do, though.

I do believe that programming has a low social status compared to some professions, but this article doesn't do a good job of illustrating that point. The poor grammar/spelling come off as ironic, in fact.
> The second criticizes an API design with the scrypt code.

Yes, I didn't claim otherwise.

> Neither makes a case that password-based KDFs are "not for storing password hashes".

The first one did quite explicitly for scrypt: "And that's why I don't recommend it for password storage."

> Using a good password KDF as a password authenticator is a fine decision.

Apparently not so for scrypt, and scrypt is the best KDF I'm aware of (heard something about yescrypt being better but haven't had a chance to look into it).

I don't see why a KDF is needed for password storage. What's wrong with SHA256 + random salt? If for some reason you want a slow hash function, use the salt MOD some constant to do several rounds of SHA256 (though I don't see why that would be necessary).
I suppose that was the wrong phrasing. I should have said defraud Google's customers.
Oracle's new in-memory database option could trigger unanticipated costs
This is an awful oversimplification, but in my experience, there are two different kinds of applications:

- User-centeric (think: an e-commerce site): your costs are going to grow somewhat linearly with your userbase/traffic. Do a load test to figure out how many concurrent users each dyno supports and then model your costs with that in mind.

- Data-centric (think: an analytics platform): your costs are to going to grow linearly with the amount of data points each customer is going to be using. Figure out how many data points a single worker dyno (running 24x7) can process and then model your costs with that in mind.
Ok, so you're super-admin. And about the ROI aspect? What's the cost for achieving the 1M write/sec metric in that mammoth cluster?
I'm comparing maths with programming and every other subject I learned in school and after :) I do find maths difficult, which is also why I am fascinated by it. It's alien to me.

As for physics, although I have never studied it to any depth, I did enjoy reading the Light and Matter series of textbooks a few years ago.(http://www.lightandmatter.com/)
[2005] the Internet services disruption
Quite interesting. When you zoom out slightly further you can see a very visible avoidance of the entire country: http://puu.sh/ar1f4/b7231c1b24.png
At the very least, it devalues Google's own service. Victims of this service will see lowered impact of advertising through Google, so they are more likely to simply drop/lower reliance on Google as a form of advertising and look for alternatives.
A lot of the comments here seem to assume that only the rich play golf. I'm from a golfing family (don't play myself) and that is definitely not always the case, at least in New Zealand. Sure you'd get doctors and lawyers playing but the bulk of the club would be middle class people making well under the equivalent $100k. Certainly not people who can afford to drop say $1000 casually.

For instance my local club ( http://www.akaranagolf.co.nz/akarana_join.php in the middle of Auckland ) charges $1875/year ( $NZ but close enough to $US) for a full member while the club I used to play at ( http://taierigolf.co.nz/?page_id=49#membership a bit out of a smaller city ) charges $650/year. You could play all year for just that amount.

I just asked my relatives what the rule is at their club (which is fairly nice/expensive as clubs go) and they said "In the old days the club would shout the bar, at our club new the club pays $150 and you pay the rest. So normally people wait till few have left before buying". So just a single round of drinks. I've found similar bits in the rules of other clubs
This is really great. Obviously, we can't prevent every bad outcome, but I think sometimes people don't realize how little efforts like this actually go a really long way.
I use ^[, and I use my pinky a lot less than I would in emacs, because I do a lot more in command mode than I do in a single emacs chord. I view "insert some text" as its own command. Vim's commands are structured so you can combine orthogonal pieces, where emacs has a separate chord for everything.
Or, you could render to greyscale texture at 3x resolution and then scale down the texture with subpixel precision when rendering on screen?
Nice project, if it were in Java or PHP maybe it could gain some traction.
DEIS is already a better solution than Flynn... just saying.
That kind of thing just makes me trust them more, I don't want people to be able to talk around the support staff to get to my Bitcoins and I actually wish my bank done the same.

That being said I don't trust any third party with any of my wallets full stop at the moment.
> Already removed the NSA wording. It's amazing how many people it spooked.

Much obliged.

> Offering some sort of en-route layer to our product seems likely. There will always be a weakest link when it comes to data security (proving your social for some, your data being stored in the cloud for others, etc.) and the fact that you're shipping the drive to us is ours. We'll work on making this as much as a non-issue as the business model allows.

Fair enough. Being aware of the potential security hazards involved is a vital first step for security assessment in any scenario, so it's good that you're open to that criticism and willing to investigate ways to alleviate it.

> The service that your hospital has is exactly what big corporations can afford. We're filling a gap for companies that are not there yet.

We're not really a big corporation, though. We're a little hospital in a mountain town with maybe 5,000 people in it, tops. We still shell out the big bucks for data security because we're well aware that it's cheap compared to a HIPAA breach.

> Shoot me an email at alex@destroyer.io with your address and I'll send a Destroyer.io sticker your way (if you trust me with your address :). The feedback here has been great, and the goal is to offer a service that makes everyone feel safe, this thread definitely pushes us in that direction.

Done. :)
GitHub issues are so fundamentally unsatisfactory so that I can't use anything which lives on top of them. For example, it is impossible to remove maliciously or accidentally added issues...
Maybe I misunderstand the issue, but... Well, everything is responsive at 100% width, right?
> tech companies and incubators need to be targeting young black males for immersion and mentoring programs as early as 5th grade.

Unfortunately I have no power in SV. People who do are reading this, and I hope they notice how on-point you are. I'll do what I can in the regions I can effect most greatly.

> A more well rounded approach is needed and that can't begin until we are comfortable with admitting that the job isn't done in regards to young black males

I have a bit more power here, albeit not much. Honestly -- and I'm very ashamed of this -- I've been reluctant to call out the elephant in the room (publicly, using my real identity) for exactly the reason you identify (it's not "sexy" and seems "political" somehow).

Anyways, thanks for contributing. I'm now resolved to finally do the right thing.

edit:

> Areas where they are currently.

I hadn't thought about it like this before, and mostly focused on how to increase AA representation in CS programs. Great idea.
The golden days of search engine domination are over
This issue[0] was what was keeping xmonad from building for me, though I don't have a mac to try on again.

0: https://github.com/haskell-pkg-janitors/X11/issues/24
So? Working is just one of the things you can do with time. If it was the only thing, everyone would work until they died.
Why I quit setting goals and how it helped me get more done
The Evidence Is In: Patent Trolls Do Hurt Innovation
Why Ivy League Schools Are So Bad at Economic Diversity
Announcing Homer
I'm using a throwaway account so that I don't inadvertently reveal my location.

The area where I live is on the map. I found it very interesting that the safety ratings seemed to be closely correlated with lighting. Street View took pictures of one popular outdoor area near me on a rainy day. Of course, it was deserted due to the weather, so the entire area received safety ratings of around 0. However, on a sunny day, the area is filled with families, and I'm sure that it would have consistently received a 10.

Likewise, my building received low ratings when compared to the surrounding area due to the presence of an alley (which is actually a gated entrance). However, no crimes have taken place there for a very long time. An area just up the street received a rating close to a 10, yet armed carjackings have taken place there before.

At least from my own (rather anecdotal) experience, it's fascinating that the factors which cause people to perceive something as safe or unsafe can actually be far from reality. Anyway, StreetScore is an Awesome piece of research from the ML. I'm interested in seeing the direction that it's headed.
I would say that's maybe one of the reasons this company had crashed.
Would be fascinating to see how these data correlate with crime statistics, in particular for violent crimes. Perhaps more fascinating would be if changes in these scores could actually predict changes in crime levels. I'm sure the authors–or their colleagues-are already working on this.
The last sentence of this comment is exactly why I called it out. If "for some reason" you want a slow hash function? You must have a slow hash function to store a password authenticator. The salt provides virtually no protection; it blocks a single corner-case exploit.
I am (was - haven't played in ages) a truly terrible golfer, and I've gotten a hole in one. I don't remember EVER winning a round.

Funny story - when I got the hole in one, my foursome spent 5 minutes or so looking behind the green for my ball before someone looked in the cup and asked, incredulously, if I was playing a Titleist.
Vim has buffers too. Evil + emacs is definitely the best for me though.
eh yeah but it doesn't hurt to have an admin GUI and a ton of default stack config done for you, that's all I mean. WebSphere is like a 1-click install for a massive stack. The open source community seems to like DropWizard, Websphere is just like that on steroids.

I'm sure a comparable stack can be made from open source components though and there are other companies who do the pre-packaged stack approach, I know. But WebSphere is kinda convenient and nicely integrated is all I mean. After spending a ton of time chasing down gem dependency conflict/upgrade issues using package managers in Ruby, I'm kindof impressed with the prescription full-stack. It's just like having a corp do all the dependency/interop checks so you don't have to. Limiting in a way but reduces a lot of friction.
My thought was english-as-a-second-language. I didn't have too much trouble figuring it out once I switched into inference mode reading.
Local Bitcoin wallets have no future
I have my own code editor...

That's the best line I've heard to finish an emacs-vs-vi argument!
Scholarship platforms
What are your thoughts on the scholarship platform? Do you feel is it effective and that the two most popular sites (zinch.com and fastweb.com) make the scholarship process much easier? Would love to hear everyone's opinion on it and how it can be improved?
No. The time to do D/A/D conversion and signal processing would just leave you with noise above the wavelength equivalent o the time loss, plus a whole bunch of spurious transients. It would sound quieter on a first impression, but probably prove more fatiguing over time due to the departure from natural noise spectra (which our brains are better at filtering)...which is exactly why I find Bose's headphones impossible to tolerate for more than a minute or two.

If you want quiet, get a pair of large close-backed headphones with good insulation, such as Sony MDR-7506. OK, so they weigh a bit more. OTOH they cost less and sound better, which is why they're a fixture in the gear boxes of location recordists.
http://emacsformacosx.com/builds

The latest nightlies and pretest (the ones marked "Multi") have this fixed. It's a super frustrating bug.
I can't shake this image of someone holding a $5 Starbucks in one hand, paying a $3 insurance premium to cover a less than 1 in 10K chance of losing $500 and complaining that they can't "afford to risk the $500".

Let's see: you just paid $3 to hedge a risk with less than a nickel's worth of -EV and you're holding your daily Starbucks. I'm beginning to understand why you can't afford the risk...

Yes, yes. I know I'd be erecting a strawman if the coffee was central to my argument. I don't think it is; I'm just trying to share my mental frame.
Thanks. That's hilarious. If I ever decide to kill a man, I guess I now know where :-)
I think this should be read as "kids under 6 failed [to perform better than chance] every time"
> But it's extra money.

What? Who are you to decide how a company or individual spends their money?

Your tone implies you feel that just because some company or individual has more money than they can spend, means they should pay more in taxes?
>Emacs+Evil is the next Vim.

Actually, Vim is the next Vim--it only seems to get better and better.

After switching to Vim full-time about two years ago, I recently tackled exporting the text from a 10-year old PDF to markup it up using AsciiDoc[1] so I can output HTML and ePub.

It’s over 37,000 words but I was amazed how easily I was able to jump anywhere on the screen with just a few keystrokes fix all of the little things that need to be fixed in a text file.

And because editing paragraphs of text is somewhat different than what I normally do (writing HTML and CSS), it was pretty cool being able to leverage the composability[2] of Vim and how seamlessly that knowledge works in new contexts.

[1]: http://www.methods.co.nz/asciidoc/index.html
[2]: https://medium.com/@mkozlows/why-atom-cant-replace-vim-43385...
Are you saying 2.0 isn't usable ?

Because there are many companies (including ours) who would strongly disagree with you about that.
Agree. A hole in one is usually achieved on a par three green which requires no real skill to hit (but plenty of skill to rarely miss) and subtracts no more than two from your overall round which is not a huge advantage in a tournament with players of mixed abilities. In a tournament the pin might well be placed in an awkward part of the green intended to deter golfers from intentionally aiming directly at it, leaving the more accurate and strategic golfers most likely to win the tournament actually less likely to score a hole in one. If anything, a hole-in-one represents the opportunity for people without any chance of ever achieving the consistency to win a golf tournament to earn bragging rights.

Anecdata: As one of the most erratic, temperamental and limited golfers ever in my teens, I once nailed an approach shot from 150 yards straight into the hole on the second hole (arguably, given that I was playing my second shot from heavy rough, a more difficult shot than a hole-in-one on a regular par three). In the same round I then managed to lose five balls in the process of scoring seventeen on the 17th during the same round. To be fair, it was quite a difficult 17th. Strangely, I haven't played much since.
Yes! I completely agree that there is some improvement possible here. There is a sense in which social networks in general have greatly helped the fund-raising process for missionaries.

I don't mean to seem unscrupulous, but the process of raising money for a missionary is not unlike what is done by a sales rep or a realtor: you have to keep yourself at the top of people's minds or the money dries up.

In that regard, software like facebook and even contactually are invaluable.

But, it seems to me, there's even more work to be done around custom platforms.

That said, how are you going to make money? Take 30% off the top? 10%? People (rightly) want to make their money go as directly as possible and so often won't even pay by credit card because you lose 3% in fees.

These platforms do cost money to run and not every church has someone on staff qualified to host an open-source solution. So if someone doesn't create hosted services that are financially viable, everyone loses out.

I also know several genuinely good people who desire to go to seminary but simply aren't able to take 3 years off of work (because they have families etc.). Of course you always have the risk of folks taking advantage of the system, but in the success / genuine / majority case, I feel that a kickstarter for people who want to do domestic ministry is a real need right now.

If anyone is interested in working on (and working through) these kinds of problems, drop me a line. My email is in my profile.
Great idea - a matter of execution wizardy to seize the huge opportunity.

A couple of questions - mostly about performance. While heroku offers fantastic start for early and small size startups, one of the issues off late are it's performance issues when you reach certain growth stage. I realize that you are not working directly off AWS instances but using docker. How are heroku dynos different from aptible containers?
Awesome, would love to chat. I'll drop you an email.
Wait, so you're saying that most shareholders in public companies want to sacrifice earnings in furtherance of Obamacare subsidies or whatever the expenditure du jour is?
Higher Education cost
With college rising and being over a trillion dollars in debt, how can we improve the student debt situation and make higher education affordable? Are scholarships a good resource? Are they being distributed enough? How can we make college affordable for everyone but also not risk the chances of them defaulting or accumulating so much debt?