skysight-inc/HackerNews huggingface dataset:
No need for much money. There are hundreds of adapter types available for most mainstream bodies. Cheap Canon or Nikon digital slr (used, old generation, etc.) and an adapter, you can use lenses from yesteryear.

I have my dad's Nikon F first gen 50 on an old Canon body and can switch it over to my Fuji XPro-1 as well, all with some $20 adapters off ebay.
It's a work as many hours as I like and need to and they don't own or have rights to my start-up companies nor can later profit from them.

I made it clear to them I am working towards raising money for my start-up and will be able to work a few days a week (weekends included).

My focus is turn in solid/perfect work and rinse and repeat. Not try and worry about trying to create friendships/getting the right people to like me.

I am likable and have a good amount of friends, but when your doing more then just the 9 to 5 and getting visible attention for it, it seems to effect people negatively towards me. So goodbye office politics and thankfully their office is 4 hours away from home.
Marketing channel attribution on big data – on the fly calculation with AWK
Interviews at the grocery startup
Show HN: The mobile companion for The Oakland Post's website, written in Swift
Paul, why do you say it's wrong that Float(Long.max - Int.max) is equal to Float(Long.max)? Float has less than 32 significant binary digits, and Long.max - Int.max has the same MSBs as Long.max. You would need to use Double to see the difference. I'm not sure what implicit conversions/promotions have to do with that - you want a warning or error when going from Long to Float? That would be reasonable. You can even lose significant digits between Int->Float and Long->Double even though they have the same total number of bits, so you could require those to be explicit. (from a slide in https://www.youtube.com/watch?v=TS1lpKBMkgg )
"Having such detailed feedback wouldn’t require diving into the data, but having someone spend an hour stress-testing my thinking and assumptions would have been gold dust and could have prevented a lot of effort wasted."

Hrm... I get asked (on occasion) to do this sort of 'stress test' on someone's idea - and usually they don't want to hear the negatives anyway. Sometimes it can morph a not-great idea in to a better/great one, but sometimes the reality is "this should be dropped". I wonder if the author had actually received some of that hyper-critical thinking on dinnr earlier, and the feedback was "this is bad, don't do it", if he'd still pressed on or not.
Well its how the CPU architecture exposes the hardware to software i.e. drivers. The Mill does MMIO but doesn't have rings.
I've been doing my startup and have been working in companies on and off on the side and to be honest I have a quite strong opinion towards the point of view that people need to collect experience in a company before starting their company. I think this is really bad. More specifically, every single day that you work at a company

1. The likelihood of you starting a company and the final size of your company decreases, because every day you learn more about what's not possible. Your mind becomes more restricted and corporate experience will certainly not encourage you to invent Snapchat, Facebook, Twitter, Uber. These ideas can only be done by people who have NO restrictions whatsoever in their minds, who think everything is possible. Corporate life will prevent you from having these ideas and that is why I want to prevent working in a company by all means as long as I can. Which brings us to our second point.

2. You get more used to corporate life, which includes receiving a pay-check, which is mostly not based on how much money you made the company, adapting your personality so that you are good in company politics, so that you look good, so that you get promoted, but that's actually not good for the company. These learnings are very bad for starting a company.

3. You come closer to having kids. I think having kids is probably the biggest factor preventing people from starting companies. Having kids is almost like starting a company, they are your own startup, so having 2 startups is near to impossible.

There is some merit in working at a company, to learn about how politics are weaved into corporate life. This helps you to understand that when you need to sell to a larger company that the person you are selling to care much more about how they look by buying your product than how good your product actually is for his/her company.

This is why working 6 months does have value, which is how long it usually takes to understand how company politics work. However everything more than 6 months will reduce your capability in starting your own startup, every single day.
Interview with an Auschwitz Guard: 'I Do Not Feel Like a Criminal'
it's always interesting to me that we (north americans in particular) seem to think that just because a person is rich, that they therefore:

- are interesting people

- are smart

- have opinions that are well founded and worth listening to

- are good leaders

- are role models

... moreso than people who are not rich
According to CrunchBase [1]:

Most Recent Funding
$15 Million Series A on August 9, 2014

Not bad!

[1] http://www.crunchbase.com/organization/plated
Let me clarify.

If you use a deterministic nonsense value, the compiler can turn the result of decrypt(nonsense) into a constant at compile time, and just directly output the constant to the volatile variable, without actually ever calling decrypt again at runtime. So it can turn this:

decrypt(real);
nonsense = <whatever>;
volatile junk = hash(decrypt(nonsense));

Into this:

decrypt(real);
volatile junk = <the appropriate constant value>;

But even if you nonsense is non-deterministic (although I question where you are getting the entropy - if you're using a syscall / random / etc your performance has potentially just gone out the window), the compiler is well within its rights to optimize the second junk decrypt of the nonsense input differently than the first (real) decrypt - in such a way that it does not overwrite everything left behind by the first decryption.

(Same with encryption)
Alternative Evernote Client for Mac OS X
Hey guys!

We’re developing an alternative Evernote client for Mac. That’s why I wanted to know which features you would like to see in an ideal note-taking app? What’s bothering you most in Evernote?

We’re launching really soon, so subscribe to our private beta at http://alternoteapp.com
Can anyone recommend any good security books on hardware, for example covering power analysis, glitching etc.?
You could also say that TV is increasingly for the young. Vice, House of Cards, etc. are great but they're targeting the 20+ crowd. There's an explosion of new shows and programs for kids on cable. Some of them, like Adventure Time, are so well done that I enjoy watching them. In fact, you could call this a bit of a "golden age" for this sort of thing.

Watching shows on the internet is great. The acting talent and quality there has really improved. But, I see this less as taking away from cable, and more as taking away from the box office. Kevin Spacey was doing great movies 10+ years ago, and now he's headlining Netflix's service. Honestly, I think these long running tv shows are a better format for a lot of actors. Breaking Bad just can not be done in a 2-3 hour movie, or in a syndicated format where each episode needs to be treated more or less independently (e.g. Law and Order). However, Netflix didn't really start that trend, cable did.

Also, cable/tv "owns" the coax cable running through the house: the fastest and most reliable way of moving information around the average US home. There's new technologies like Moca that are going to make a lot of things possible that currently are very flakey with current wireless/alt-ethernet solutions.

TV has always been (mostly) about mindless entertainment. I think the shows that are successful outside of a traditional cable package succeed because they were probably inappropriate for the cable programming format anyways. Services like Netflix are filling a new niche, but I don't think they can significantly take away the core value of cable for most people.
Time to participate in open wifi or a mesh network :-)
If I have enough control to the point where I can read your memory in some way, I can just use ptrace. Heck, I could attach a debugger. It seems ludicrous to want that level of protection out of a normal program running on Mac/Win/Linux.

Now, if your decryption hardware was an actual separate box, where the user inserts their keys via some mechanism and you can't run any software on it, but simply say "please decrypt this data with key X", then we'd be on to something. It could be just a small SoC which plugs into your USB port.

Or you could have a special crypto machine kept completely unconnected to anything, in a Faraday cage. You take the encrypted data, you enter your key in the machine, you enter the data and you copy the decrypted data back. No chance of keys leaking in any way.
Why patience is the key to great pet photography
Thanks, I hadn't seen that before.

End-to-end encryption is needed to increase the load on a spammer as much as possible. Even if the spammer tries to re-generate the message "at retrieval time" the receiver should request retrieval several times (to obfuscate when the message is actually read) and the message should use multiple iterations of a cipher (and possibly HMAC) after an initial DH negotiation, or any other means to increase the cost for a spammer _and_ tie a message to a unique sender for reputation-tracking purposes.
Author here, will try to answer questions as best I can from my phone.

Yes, I think I was watching one of those amazing explosions shows on Netflix. I liked the way it sounded, and it suggested some simple logo ideas.
Wow, good work. Seems to work well for tablets too.
AKA tactics some of the worst, spammiest apps on the iOS app store use
I am working full-time on my new thing. I had to take August off to take care of my firstborn. Then he had an ER visit followed by emergency surgery a few days ago. Now I'm about to dive back into the code.

Trust me when I say that startups are not scary compared with your 3 week old baby going into lifesaving surgery :-)

(He's recovering well. Fingers crossed.)

I lived off a meager savings for my previous startup initially and raised angel money from a rich guy that I worked for in the past. It was me and my buddy in a room for 2 years. We had some success but not enough, so I had to go back to a high paying corporate job for a while. Big lessons were learned the hard way.

At least: #5 and #8 and #10 and #11 and #12 and #14

http://www.paulgraham.com/startupmistakes.html

But the big missing one there is: Not Having Guidance.

It's very difficult to see you're making a fundamental mistake yourself. You really need outside expertise.
Looks great, waiting for release!
The most underrated websites
Indeed, IPV6 is a possible entry point for pen testers, as plenty of admins will leave ipv6 enabled, but not bother to setup ip6tables. Plenty of software is setup to bind on "all interfaces", which includes your link local address. Fortunately, takes some effort to scan the link local address space.. But if they are based on MAC, and you can just ask for the MAC of the host via ARP...
i guess putting graphite in an inverted container made of glass should make it a bit safer.
One thing I particularly like about this: managesieve support. I am only aware of one major email service that uses sieve as its filter language to begin with (FastMail), and none that provides a managesieve interface to the filter rules. Since these are supposed to be the Internet standards for email filtering, it seems very surprising that practically nobody actually uses them.
You could try for an abstraction / language that provides deterministic execution.
Looks great! Are you going to have reminders support?
See: False equivalence.
Thanks! Not in the first version, but we’re going to have full Evernote api support further, including shared notebooks & reminders.
Yes, it uses STARTTLS, HSTS, modern cipher settings, DNSSEC and many more security best practices! [I'm the guy behind the project.]
Hardly just the view of Austrian economists. Plenty of liberal economists including Robert Frank, Dean Baker, even Matt Yglesias think that corporate income taxes are a bad idea.

It's not about "unqualified evil," it's more about the fact that business taxes decrease productivity, take money directly away from employees and consumers, and could easily be offset by any other individualized progressive tax, not to mention the repatriated corporate dollars that would result from a competitive tax scheme.

Here are some fun sources from the NY Times and NPR:

http://www.nytimes.com/2014/01/06/opinion/abolish-the-corpor...
http://www.npr.org/blogs/money/2012/10/18/163106924/a-tax-pl...
git isolate! I've been trying to make something like this :( Unfortunately my git-fu is failing me.
Chef Thomas Keller: Bouncing Back from Setbacks
"Choose a URL" made me think this was for scripting a web client to interact with another site. Like you'd enter "www.imdb.com" as the URL and write a script to find the latest movies opening.
Wow surprising to see OU on HN. Looks very nice.
I think north Americans are looking for the secrets about how to be rich.
Who's to say that the 36% one is not a potentially misleading stat?

Assuming the 18%/20% stats are correct, it is a 34.4% success rate from the 18% and 20% stat.

The 36% stat may not be out of the realm of possibility with the difference in values here - there may be context missing from all the numbers cited here. They don't seem to disagree with each other significantly though.
Yup, didn't mean to imply that I had solved the whole problem. :)
In light of the current discussion, it's hard to make such a clean distinction. Your private key is going to be stored in a file that goes through the PEM and ASN.1 parsers. It's going to hang around for a bit while you sign stuff (using some sweet asm code), but now you need to dispose of it. The object lifetime is often much longer than we'd like even with perfect zeroing, and there are some ways to address that, but it casts a long "shadow" on the call graph, not all of which can be made minimal.

In short: imperfect buffer zeroing probably reduces risk enough that it drops below several other concerns.
What you're describing is called a smartcard, and readily available on the market. I keep my PGP key on one.
I'm gathering Swift resources on my site.

http://www.h4labs.com/dev/ios/swift.html

If other people have blogs, source, etc maybe they can add them to this post and I'll go through them next week.
I just wish more manufacturers would sell dual-SIM variants in the west.

Apparently you could import the old Moto G with dual-SIM from India, but I am not at all sure that all the radio bands fit my operator etc. The support in Cyanogen for dual-SIM is also reportedly somewhere between bad and nonfunctional.

I often carry three phones in my bag and it feels so wrong. I, and everyone like me, could surely pay a premium for this. But those products are kept to lower spec phones sold in Asia or India.
The subnet space is 64 bits long. Collisions between pseudo-random values only become likely when you have billions of nodes, so it's not worth the effort to preemptively avoid them.

This would also require all nodes to implement the same algorithm, which means it's not incrementally deployable.

Edit: The actual RFC7217 algorithm contains a DAD_Counter field in the hash input. In the event of a collision, the counter increments, generating a new address.
Paul is not a "Scala founder". Martin Odersky started to create Scala, the language, by himself 10 years ago. Typesafe, the company around it, was founded 5 years ago and Paul was one of the co-founders.
"Bully" is not for that comment or his words (Ofcourse he should have contacted me first) but for the following: (copied from below comments)

1). more than 20 1-ratings (You cannot see these 20-25 negative ratings as there are were no text reviews written with it.)
2). mass complaints sent to Google that day.
3). And my app rating came down from 5 to 4, thats a huge setback on the competitive end. (Lost the app's repo which took an year to build)
4). Few false reviews which have been cross-upvoted so all new users sees them on top. And my reply down-voted by the same group that it was removed completely by Chrome.

And there has never been such thing as Inspectlet in the app, and also the person who commented this is not communicating with me, so I would let this one go. And thus no need for that statement. Will make the app opensource, so this will never be an issue in the future, "hopefully".
"e.g. you're mining titanium from the moon using gravity fields, you're desalinating sea water"

The fundamental disconnect here is that while there are some "startups" that actually do novel things, most are more like "build some ruby on rails app that does XYZ thing that has always been done, but do it on computers, and maybe cheaper than the big guy can by just ignoring existing regulations until we get big enough that anyone cares".

And then you wind up with a startup company probably full of 20 year olds who are smart and driven but haven't yet seen the hundreds of ways in which they can paint themselves into a corner with bad software practices which creates this negative feedback loop where everyone is working 80-120 hours spinning their wheels trying to get shit to "just work" whereas if they had more experienced technical talent (say people who have worked on highly scalable software at google or microsoft or whoever for 5 years) who have already "seen some shit", they would likely have much higher quality at a fraction of the development time.

(And while the salaries for experienced folks would have to be higher per employee, they could get by with a lot less of them and still have better code).
The "issues with IPv6" are with education, operation, configuration.

I personally ran WiFi networks with 8000+ wireless clients on a single /64 subnet (my employer's CiscoLive conference), and assisted/consulted in running the networks with more than 25000 clients on a single /64 subnet (Mobile World Congress).

The default kinda suck, and the bugs may happen. but the statement "IPv6 is not ready for production" is wrong.

I'd be happy to volunteer a reasonable amount of time to work with the OP or others having a network of >1000 hosts, to debug the issues like this, time permitting, vendor independent. (glass houses and all that).

There are bazillion knobs in IPv6 and a lot of things can be fixed by just tweaking the defaults (which kinda suck).

Network of <500-700 nodes generally don't need to bother much. It's not optimal a lot of times with the defaults but it will work.

EDIT:

the seeming "charity" of volunteering the time isn't. I want to understand what is broken, so we can bring it up back to IETF and get it fixed + make better educational publicity to prevent folks shooting themselves in the foot. It'll make it to the stacks in another decade, but it will.
IPv6 is powering nontrivial millions of hosts now - so the correct words to use "needs tweaking for my network", not "not ready for production". Let's see what the tweaks are and if we can incorporate them into the protocol, if necessary.
Location: Boston, MA

Remote: Yes

Willing to relocate: No. I may be able to relocate in mid-to-late 2015, but I am unable to consider relocating any sooner than that.

Technologies: Python, Haskell, various SQL and NoSQL tools, machine learning, Bayesian statistics, scientific computing, math modeling, big data.

Resume: Request by email

Email: spearsem a t g m a i l

I wrote up a summary of my skills and what I am looking for in my next job: < https://news.ycombinator.com/item?id=8129505 >.
Does your PGP key stay on the smartcard or is a copy of it transferred to your computer on occasion?
Cooking is much more a thing in Germany than in the UK, so it might just work.
The Generation Ship Model of Software Development
Set your reachable and valid lifetimes to the max. Though you will still end up cycling through some of the privacy address, it's not going to be bad.
Have you run any benchmarks? Do you have any rough estimations on how does it compare to Lucene in terms of speed and memory usage?
I have a Linode VPS and am happy to fire up another VPS to handle email exclusively. In fact, I already did and installed Mail in a Box as mail.mydomain.com.
I have to say (being a developer with enough Linux knowledge to handle hosting and simple stuff) that nameserver setup is completely confusing. I should stop using Linode nameservers? If so, I should set up glue records and place that into NameCheap domain specification instead? And then set up www CNAME to point to original website server?
Very confusing... Why not having a section in the guide titled something along: "Adding Mail-in-a-Box as additional server to your existing website"? I am not sure if that defeats security/reliability, as External DNS section message is kind of scary:

"Although your box is configured to serve its own DNS, it is possible to host your DNS elsewhere. We do not recommend this.

If you do so, you are responsible for keeping your DNS entries up to date. In particular DNSSEC entries must be re-signed periodically. Do not set a DS record at your registrar or publish DNSSEC entries in your DNS zones if you do not intend to keep them up to date."
Ask HN: Turning over a website to a nontechnical “client”
A few years ago I built a simple Joomla based website as a favor for a friend and agreed to host it gratis on my "project server". Since then he and I co-founded a start-up which failed and we are no longer on good terms. I am still stuck hosting his site, and removing the malware that gets installed every couple of months on his, now ancient, version Joomla.

I am currently in the process of changing hosting providers and have to do something with this site. Something in this case means either giving him his data and walking away or doing a migration to another platform and making him responsible for it. The challenges are:
1) He doesn't have the technical skills to keep it up to date or clean up the mess after a hack.
2) I'm not interested in being involved in the ongoing maintenance of the site.

What I'm looking for is any advice/best practices for doing this type of turn over.
"Inspectlet records videos of your visitors as they use your site, allowing you to see everything they do. See every mouse movement, scroll, click, and keypress on your site. You never need to wonder how visitors are using your site again."

Why would you use a service like this in your extension? Sounds like a dumb idea to me! They are privacy intrusive and say that proudly on their main page, so you were not tricked into using a malicious tracking service, you diligently chose it - the bad reviews are justified.
They're enabled on quite some of the Linux distros. And if someone did not know the consequences of what they were doing when they decided to play with the reachable/valid lifetimes on the prefix, they could end up with a lot of addresses.

I'd love to know more on the origin of the story to understand how we can fix the defaults in IPv6 so they do not blow people's network - but I have a vague feeling someone played with them anyway.
Dunno, I've been very happy with egg. But then, due to a large part of my career being maintenance, I've fallen into a lot of self-discipline patterns that tend to keep me out of messes.
Google is only available in the US.