skysight-inc/HackerNews huggingface dataset:
Came here to cross post this from reddit, but with a different source: http://money.cnn.com/2014/08/11/technology/uber-fake-ride-re...

This is abhorrent behavior. Here I thought "startups" (if you can call Uber that now) had more room for moral/ethical diligence.

How should Uber be penalized? 10k cancelled rides to their service?

Seems like these services need a more effective way to identify real reservations.
I'm curious what you mean by "so useful."
This happens all the time in the startup world. It's not something you'd see on the tech blogs.
How was this article found? You go up to the directory and there is a whole host of cruft. Not discounting the likelihood that this is how the attacker was successful -- none of it's bullshit anyways -- but seems odd that someone would just stumble upon this. Can't find out much about that site either other than the Datalove reference that makes it seem like some Telecomix thing. Anyways, interesting submission. Shows how quickly an attack can escalate and what easy tools are available for you to test your own sites for vulnerabilities.
Ahh...ok.

Thanks!

P.S. Have a link to that somewhere?
Did it ever happened any investor to YC startups tried to take advantage of the founders before, or this post is just an act of prevention?
Clone Graphs on GitHub
+1.

The private registry story is horrible in docker. You have to tag your image with your registry's FQDN, which is an absolutely braindead idea. It's nice to default to docker.io in the absence of options, but I should really be able to do "docker pull --registry myregistry.local ubuntu:latest" and have it work. Instead I have to do "docker pull myregistry.local/ubuntu", which pulls the image and tags it as "myregistry.local/ubuntu". Great, now my registry FQDN is in my image tag. For any decent automation now you have to re-tag it without the "myregistry.local" so you don't depend on your registry FQDN everywhere. But then you better remember to re-tag it with your registry before you push!

In our case we wrote an HDFS driver for the registry so we could store images everywhere, and a service discovery layer to discover registry endpoints (using a load balancer just plain didn't work.) It's an unholy nightmare (but at least we've automated it) to continually re-tag images to go to the endpoint you want.
It's very simple, straightforward and unambiguous. No-one will be able to say "oh, I didn't realise" afterwards.
Simple way to create disposable chat rooms or integrate chat into your website
Not working with them is a great step. Will you also publish names of people who act inappropriately (assuming it is safe and legally in the clear) so others can steer clear as well? Not only would that be further discouragement, it seems like an area where keeping the knowledge internal isn't a competitive advantage and would likely lead to a backchannel of gossip floating around (I hear x can't work with yc companies anymore)
In CA, if your gross under a certain revenue, you owe a base amount in taxes ($800 in taxes + your biz license and other fees). If you are over a certain revenue, then you owe a percentage (which comes out to equal or greater than the $800 + biz license and fees). [1]

This sucks a lot for small side businesses/projects, most of which may not even make $800 in the first year. It's a very anti-small business law/tax, which is why a lot of internet based companies incorporate out of state like Nevada where their tax liability is significantly lower or none at all.

[1] https://www.ftb.ca.gov/businesses/bus_structures/LLCompany.s...
Ken Kutaragi who was the "father" of PlayStation and boss up to and including PS3 was known to be a big fan of developing exotic hardware. The PS4 is the post-Kutaragi machine.
> hard-to-code-for devices

In game development, the vast vast majority of your development expenses will be in art assets (graphics, textures, models, animations, music, sound effects, scripted events, etc.) and not in the engine development. Once the engine is built, most of the rest of the game is art production.
A lot of tips for DNS and Docker were discussed two weeks ago: https://news.ycombinator.com/item?id=8107574

- serf, consul, etcd, dnsmasq, zookeeper, rubydns, skydock
Glad to see that this was not dropped! I did notice that matasano.com/articles/crypto-challenges/ has been returning a 404 for the past month or two.

Will there be a way to automatically submit / advance, for those of us that would like to do them without encountering spoilers?
Agreed, there are several potential issues that make it difficult to say there's no downside. There's a difference between Vitamin D production and absorption. Have we firmly established that it's better to absorb all via digestion?

Moreover, tanning is due to an immune response. I can't speak to whether that in itself could have positive effects of the immune system, I would like to know more.

While the cons may very well outweigh the pro (ie cancer & skin damage) not sure why the other isn't discussed in context of moderation.
This is disgusting and anticompetitive.

I love Uber and use it almost daily but they need to grow up if they want a grownup reputation.
I find it difficult to imagine a time where this would no longer need to be said. It's human nature.
One of the things we try to do with this project is simplify things so that people can more clearly understand. Intuitively it's not clear why there are risk from our work (beyond the unknown unknowns). We have engaged in a number of panels with expert ecologists and after one an MIT professor asked why we were always talking about glowing plants as there were no serious risks here. You can read one of the reports here: http://www.wilsoncenter.org/sites/default/files/SYNBIO_res_a...

Also, specifically to your point about transgene flow. Higher level organisms (eg animals, plants) very very rarely exchange DNA - this is a good thing or else you might start photosynthesizing after eating salad for lunch. There are a couple of recent papers saying maybe (and that's maybe in a scientific probability, ie small probability) this happens on the order of millions of years. APHIS doesn't even look at this issue anymore, here's their comment on it:

Potential impacts from transferring genetic information from plant to organisms with which it cannot interbreed
•	First, many genomes (or parts thereof) have been sequenced from bacteria that are closely associated with plants including Agrobacterium and Rhizobium (Kaneko et al. 2000; Wood et al. 2001; Kaneko et al. 2002). There is no evidence that these organisms contain genes derived from plants.
•	Second, in cases where review of sequence data implied that horizontal gene transfer occurred, these events are believed to occur on an evolutionary time scale on the order of millions of years (Koonin et al. 2001; Brown 2003).
•	Third, transgene DNA promoters and coding sequences are optimized for plant expression, not prokaryotic bacterial expression. Thus even if horizontal gene transfer occurred, proteins corresponding to the transgenes are not likely to be produced.
•	Fourth, the FDA has evaluated horizontal gene transfer from the use of antibiotic resistance marker genes, and concluded that the likelihood of transfer of antibiotic resistance genes from plant genomes to microorganisms in the gastrointestinal tract of humans or animals, or in the environment, is remote (Council for Biotechnology Information, 2001; http://vm.cfsan.fda.gov/~dms/opa-armg.html, accessed 1/26/10).
•	Finally, a recent review of issues related to horizontal gene transfer concluded that this type of gene transfer is unlikely to occur and poses negligible risks to human health or the environment (Keese 2008).
I think in this context, investor <--> founder is analagous to boss <--> employee, so I guess you'd have to take similar steps to manage it i.e. recuse yourself from investment decisions regarding that company.
As someone who worked on writing protocol specs as code for simulation purposes, I can see how much fun this is. A pure python network simulator (ns2 is C++ and painfully hard to debug) would actually be nice and encourage a lot of theoreticians to get into real programming. I've spent a reasonable amount of time in the industry building distributed systems and I can say with confidence understanding low level protocols improves your thinking.
It's important to understand WHY this is so: if you're an investor you are in a position of power over a founder. It is not possible in such a situation to make a romantic overture that is not tainted by the possibility that you are looking for a quid-pro-quo even if in fact you are not.
Well yes, but I'd argue owning a corporation is pretty similar. The right to organize in a form that lets you incur debts you're shielded from paying back isn't some kind of natural state, but a creation of law in order to encourage certain kinds of commercial activity. Things like corporate taxes are imo a perfect legitimate part of the deal, if a government chooses to impose them.

I do think sole proprietorships should not require registration as businesses or payment of a separate tax (besides any personal taxes), though.
Just put a 6TB drive in my media server. I was going to put in another 4TB, but the cost per TB was not that much worse, so I decided to give it a go. There's also the issue that I only had room for one more drive anyway, and I wanted to RAID-1 the OS and important data partitions too.

I'm still learning the ins and outs of using btrfs too. I recently found this btrfs snapshot based backup utility that I'm going to give a try:

https://github.com/ruediste1/btrbck

This should be a lot, lot faster and more efficient than using rsync and rsnapshot for disk-to-disk backups with my current scheme.
The subset that is the interception of both? which would be a subset of C. (Although I am pretty sure that wasn't what the author had in mind)
Man, I keep seeing awesome posts about Backblaze, and really would like to use them. However I run exclusively on linux these days, and they don't seem to have a Linux client.

Public pledge, if backblaze releases a linux client, even if it's command line only and requires that I manually edit an XML file, I'll purchase a 1 year subscription.
I always look forward to backblaze's posts.

Does anybody know if drive manufacturers pay attention to their posts about reliability? I know when I worked with mainframes we sent every bad drive back to IBM for failure analysis, but would Backblaze's aggregate data be useful to somebody like Seagate?
Still inappropriate after demo day. Investors are a tight knit group and retaliatory action is always a concern. The recent two exposes from two female founders both pointed to investors' power/influence as coercive factors, even if no specific deal is on the table.

It's maybe unfortunate it has to be this way, but investors should not hit on founders, full stop.

For those who didn't see this when it was making its way around, these are the two articles that have come up recently:

http://www.wired.com/2014/07/gender-gap/

http://www.forbes.com/sites/jeffbercovici/2014/08/07/what-it...
Guacamole is just a go-between. For that sort of OS-integrated lockdown you will need to configure your target server (the box actually running VNC or RDP). No special support on the Guacamole end required.
One of the local tv stations here did a great story on traffic light phasing.

They first had viewers email them their worst bottlenecks and where they felt traffic lights hampered their commutes. After several weeks of collecting angry emails, they narrowed it down to a handful of intersections.

Then they interviewed a local DOT person, and then brought them out to the worst intersection the viewers identified. The reporter said they spent about 30 minutes working on the lights and signaling. The reporter did say that traffic was flowing better and there were less cars backed up at the light after the DOT person corrected some of the signaling issues.

Of course they ended the story by lamenting about how many traffic lights there are in the city and clearly the DOT have an uphill battle in keeping every intersection flowing well, but said they spend a lot of time at least trying to monitor the bad intersections.
Wow, if a damn IT sec company can't get secuiity right, how am I supposed to?
I don't know if it is related, but this was on Forbes and bounced around Twitter very recently: http://www.forbes.com/sites/jeffbercovici/2014/08/07/what-it...
Nothing too specific. I read this article last week and found it appalling: http://www.forbes.com/sites/jeffbercovici/2014/08/07/what-it...
Maybe you're thinking of Michael Abrash.
What about simply asking for his number?
Matt's show is amazing. He lands interviews with some of the most legendary names in gaming. A real joy to watch.
Is it a big problem then? I'm waaaay out of start up circles so I'm surprised it even needs to be stated.
I'll expand on my "Edit:"

I had lowered productivity a couple of periods from undetected health problems (allergy troubles and a bacterial infection).

I have been both a high producer and a problem producer. And I have surprised bosses in both good/bad ways, and they have changed their opinions about me.

The main personal difference was self confidence ("I burn out easy these days? :-( More exercise/relaxation don't help?! I am old?! :-(". Afterwards, my reaction was/is "So I was physically sick, I am not a complete luser that turn everything I touch to shit.")

The only difference in "dedication" was a later natural effect -- of burnout from working like an animal to get productivity when it was failing.

And the lesson I have learned is compassion; the cynical failures that are a depressing pain on us others might not be stupid or sociopaths. I am happy for the insight, it made me less of an asshole, but it was probably not worth the high cost.

Edit: To make this into a point, I do believe in the "Pygmalion effect" and I have seen it in action. But it is far from the whole story. There are probably also many other effects than bosses' behaviour and those I know personally which influence workers.
No, you are pretty much right. Our national identity is our ancient (not just the cultural - more recent poets for example are not that prominent in our daily pride-talk, and more recent events like the civil war are comfortably omitted when we talk about "Greece") history. So there is a lot in stake for us with those matters.

However I would disagree with the "Macedonian barbarian" note you made: Alexander was educated by Aristoteles and he was elected as the main greek general in the war against the barbarians (Persians) by the rest of the greeks.
How about: You just don't do it, period.
"all the time" in the mind of Shanley Kane, et. al. Disclaimers like these are mainly CYA statements such that the rabid hordes of social justice warriors don't throw Y Combinator under the bus on Pando because of a disgruntled founder looking to capitalize on feels where capitalizing on actual talent or acumen failed.
>'Why did Sony keep creating such hard-to-code-for devices and yet end up with such a monstrous install base?'

* Exclusive Titles: They managed to lock down some of best regarded franchises in each era.

* Backwards Compatibility: Each generation, at least initially, has been fully compatible the generation prior.

* Versatility: DVD capability in the PS2 was a fairly big deal at the time. Blu-ray in the PS3 was not, but it did look good in a bullet-point comparison against the 360.

* Free Online Features: The price of an XBL subscription is a deterrent for some.

* The direct problem of being hard-to-code-for always improves with time as developers gain experience and the toolset improves. At some point, you're only going to worry about content, not what's underlying.

A couple of those points are the sort that don't matter at all to 'smart' gamers and well-heeled adults who can own as many consoles as they like, but these are devices that ideally ship a few hundred million units to people of all ages and wide demographics.

By the way, the Cell [1] (PS3) is pretty interesting stuff if you're into computer architecture.

1: http://en.wikipedia.org/wiki/Cell_(microprocessor)
I'm guessing most lawyers would never give you the "all clear" to allege sexual misconduct in a public venue. The liability for libel is high.
Ask HN: Access to Mailbox for Mac Beta
Anybody have access to Mailbox for Mac beta? Postbox.app really sucks and I don't want to use Gmail's web client for desktop mail.

Thanks!
GoPro's biggest missing feature is not having gps and momentum logging.
YC is one of a small number of organizations who can write something as simple as this and have this impact, because VCs compete for their dealflow. It's not the writing itself, so much as the realization that they could have this impact by writing it.
Launching Worldview-3
Biz Dev tips for early stage startups
This seems likely, but also easy to work around by advertising a smaller window size.

When you send ACKs, not only do you send the acknowledgement number indicating which byte you expect next, but you also send a window size indicating how many bytes you're willing to receive before the remote end has to wait for another acknowledgement. Normally you want this to be somewhat large so you don't spend lots of idle time waiting around for ACKs. (But not so large that packets get dropped). This is the key to TCP flow control, which was kinda glossed over in the blog post in the interest of keeping things simple.

But perhaps by default, you're advertising a too-large window considering the circumstances. I bet you could make this a lot more reliable just by advertising something smaller.

Good TCP implementations have overcome a lot more than some unwanted buffering.
This article has already been submitted 3 days ago under the pastebin link: http://pastebin.com/raw.php?i=cRYvK4jb (https://news.ycombinator.com/item?id=8155177)
Sigh. Let me guess - you're a white dude, aren't you?

Of course you don't see this happening. Of course you don't see discrimination in the workplace. Maybe - just for once - accept that the people who actually do face this stuff are telling you that it does happen, and that we should do something about it. Maybe try listening to a perspective - any one will do, really - that is different from your own.
According to the Chrome guys...it isn't a thing [0][1], and I tend to agree. They've kept up, and often exceeded FF, IMO, for real code by making a better JIT compiler. They still haven't implemented asm.js and yet their "naive" approach to asm.js style code is on par.

[0] https://code.google.com/p/v8/issues/detail?id=2599#c53

[1] http://mrale.ph/blog/2013/03/28/why-asmjs-bothers-me.html
Nope. The implication of quid-pro-quo would make any potential date/relationship/other an ethical mess.
Once solutions are up, will there a be a way to test your answer against solution without actually viewing the solution, as there is on project euler?
We know it does happen. Then: the optics that result from however many incidents happen have an outsized impact on all women (and, for that matter, similarly vulnerable men) considering venturing into VC-funded tech.
True, but the amount of new people matters. Does 1000 people per year really move the needle all that much? How many jobs does that indirectly create?

edit: Wikipedia say that (e.g.) H1Bs are capped at 65k/year. Spread across the US, I'm curious how much this affects job creation? I could see an argument if they were concentrated in one place though.
Rackspace DevOps automation service broadly available
You don't need a separate Guacamole application instance for each user or even each VNC/RDP host -- each user in your Guacamole config has its own connection settings and operates independently of other sessions.
For those who prefer to just view the videos in a web browser, the content can also be found here: http://www.neckbeardrepublic.com/screencasts/
It's worth noting that sunscreen in countries other than the US does more to prevent skin cancer, so the balance might be different in different places.

http://www.washingtonpost.com/national/health-science/2014/0...
> Public pledge, if backblaze releases a linux client, even if it's command line only and requires that I manually edit an XML file, I'll purchase a 1 year subscription.

Consider how many Linux users would need to do this to a) pay for the developer time to write/maintain the client and b) pay for the support time for Linux issues
I can't tell if this is serious.

How does this improve on the existing notification infrastructure?

Even IFTTT would probably be better at this.
DevOps the movement, or the function?
Phone number for a business conversation? Of course.

This isn't difficult. I know techies have a reputation for being socially awkward but if you're suggesting that asking for someone's phone number in a business context could be mistaken for asking in a romantic context then you're wrong. It's very, very easy to define intention.
Oh, c'mon, the word "community" is thrown around willy nilly nowadays. Every day I read something about the "tadpole-owning community" or whatnot.

It could be the other way around: we are born into families and nations and therefore we post-hoc accept and value them.

We can't wait to leave and get away to the big city and then, eventually, from time to time, we yearn to return home. Not due to some innate preference or unexplained genetic mechanism but simply because that's how we grew up.

However, few are willing to give up their new-found freedoms for a circumscribed tribal existence. Which doesn't mean we can't or shouldn't honour our pasts.
"Scrum" is often an attempt to take micromanagement, or the low-status programmer culture, and institutionalize it in a way that seems impersonal and policy-based. Hence, the haggling over story points (a low-status behavior, because it refuses to recognize the meaninglessness of the involved currency and the way the team has been pitted against itself). But high-status programmers just ignore that sort of process and work the way they want to.
You know, I'm rather surprised that there hasn't/isn't a fund or group set up explicitly for that purpose--just being up front that yeah, there's tit-for-tat, if you want funding you may have to deal with this nonsense. I further wonder how close that would skirt the lines of laws against prostitution.

I imagine such a thing would be amazingly toxic and hopefully collapse into a vortex of bad.

EDIT:

It's an offensive idea, sure, but at least explain why you're downvoting. This is a solid example of downvoting in HN being used incorrectly. I hadn't advocated for such an arrangement, and merely brought up a question of "does such a thing exist?" and a prediction that such a thing would implode quickly.
Couldn't the submitter have waited a few weeks until they actually found something? (Also, how did this get so many upvotes?) The article doesn't even quote the archaeologists, but only a government minister, for chrissake.
Except that all evidence points to the fact that sunscreen/sunblock usage doesn't have an effect on vitamin D intake through sun exposure.

People that use it tend to spend more time in the sun than those that don't. Also, vitamin D is more effective through ingestion as opposed to sun exposure anyway.
It's really upsetting that this even needs to be said.
Apologies if I did not post my question in the proper format. It was my first post. I am not sure why I was down-voted. My question was sincere. I couldn't find a clear answer with a quick search.