skysight-inc/HackerNews huggingface dataset:
This post spurred a lot of great discussion but a lot of it hinges on a nearly literal reading of "bend over backwards." What did I mean by that? I meant that I expect

* The business to do anything reasonable in its power to make me happy. Different people have different definitions of reasonable. But most reasonable people can agree that "reasonable" does not include giving me unadvertised discounts/spending unreasonable amounts of time with me/or offering me services not usually rendered.

* Service with a smile. I'm choosing you over your competitors - be nice about it.

* Don't resent the customer. My taste might not be as good as yours. I also don't work in your industry.

And for the record - I too worked in retail.
Fine them. Fine them more after fining them. Arrest executives. The powers of contempt of court are rather wide.
"The next real step in this, and one that is really at the core of the microservices architecture, would be to cluster etcd and remove nginx completely"

Nginx is useful to stop slow clients attacking app servers, so still a useful layer to have depending on how the clojure app servers handle slow clients, etc.
True. Actually, it probably wouldn't be too hard to just write AppleScript within Perl to begin with. ;-)
This is a great and concise description. So in effect, are the terms on convertible notes just bets on the following round's valuation? In that case, it seems to me that's not much different from valuing the company right now, because if you have enough information (from projections & standard multipliers for the industry/sector) to bet on the A round's valuation, you could just interpolate a valuation at the current time...

I'm starting to realize that my gut reaction to squint skeptically at convertible notes wasn't too far off the mark... it's like going to Vegas and betting your company, but everyone else at the poker table has been playing for years longer than you have...
Ask HN: Will web-based email ever catch up to or replace desktop email clients?
Web-based email clients like Gmail & Yahoo mail are highly functional, have the available-anywhere benefit, and run with the support of some serious server muscle (so things like search can be fast and awesome). Plus they don’t bring your computer to a grinding halt. However, as advanced as the web has become they are arguably still clunky, and lack the Pizzaz and responsiveness of desktop mail clients like Outlook and Apple Mail. For something that we use every day, those things are important.

Given the convenience of web-based mail clients (and barring the obvious downsides like a full store of offline email) - have they finally come of age to replace their desktop equivalents?
So much of informations! #ILIKE!
First, because folders are far more performant for accessing child objects. That's mostly an implementation detail, but a big one - there are tremendous optimizations made on the filesystem that are not accessible for something like ZIP. Particularly relevant to bulk searching/listing - the intent in ReiserFS is that ID3, EXIF tags and the like would move into sub-files.

Second (and this is more a problem in Windows where the 3-letter extension is more important) the OS needs to know which tools it can associate with which type. If a file is a .zip, then it's a .zip and it can use zip tools. If it's not a .zip, it can use the file's own tools (like if it's some kind of music archive). But not both.
Oh yes, Calibre is the swiss army knife from the digital book world. In this case, I am voting with my wallet to put my money in companies that support open standards. The Lev can use that horrible Adobe DRM or open formats. The Kindle Format 8 with DRM is not something that I'd like to support even though its technically good.
This is what I got from my googling:

Plastic parts are often made by pouring hot plastic into a mold. When the plastic is done drying, often a robotic arm or crane needs to pull it off to bring the plastic to the next stage of the manufacturing process. But it's hard to get the plastic off the surface once it's dried; it needs to be "popped" off of it. So manufacturers build ejector pins into the mold. When the plastic is done drying, the pins pop up and push the plastic off the mold, into the crane or whatever will take it to the next part of the operation.
The judicial powers of 'contempt of court' are some of the most powerful IN government. I have no doubt they can force Apple.
Putting pressure on individuals is the simplest, most logical and very effective option. So, yes, Cook getting charged with insider trading or tax evasion would fit right in.
I agree. The tooling that is released WITH the language is an amazing bonus. Of course, no one is forcing you to use ExTest, but it's amazing that they decided to just give it to you with the platform itself.
Because ultimately we can control it?

Unlike printed text that is finished finished, text on the web changes per device, time of day, etc.

You might be very interested in https://www.readability.com/ which allows a person to instantly morph the majority of articles to their set reading standards with a plugin or bookmark.
why doesn't the author use objdump so there is no need to bypass ptrace()?
They hired the brilliant Bould[0] design for ID and partnered with a Tier-1 Taiwanese ODM for manufacturing[1]. This takes a bit of money, connections and being able to demonstrate you will have volume.

What the article doesn't mention is that you can manufacture in Apple's wake. After Apple started purchasing 4" touch panels and LCD displays for iPhones, and then larger displays for the iPad, the capacity increased and prices went down. Same with all the CNC machines purchased for the iPhone 4 frame - they are no longer being used to manufacture Apple devices, but they are being used to manufacture other devices.

Second part is that modern manufacturing tech means you can have lean hardware startups. As much as cheap hosting, software as a service, etc. have made software app development cheaper manufacturing tech has made hardware manufacturing cheaper. You can now get rolling with complete custom hardware in thousands of units (as opposed to millions) with 6-figures in capital.

The key is knowing one of the small number of people who understand design, materials, the capabilities at the ODM's, the right people at these companies, supply chain etc. and have them design the product to fit the current manufacturing capacity without requiring customization. It is easy to hire an industrial designer sitting ten thousand kilometers away from Shenzhen who can CAD something nice, but knowing that manufacturing that fancy designed device would cost extra millions in tooling and setup is where the real skill is. Good ID people can design great products and in a way where they can be manufactured easily and with a smaller investment. If you don't have one of these people on your team, your either going to get something that is very ordinary looking (think Chinese knockoff) or you'll attempt something ambitious, run out of money and fail.

What Nest did is use clever ID to create a product that looked unique without over-stretching the manufacturing requirements. They didn't go anywhere near the scale Apple does.

[0] http://www.bould.com/

[1] not certain which, but it is 3-4 possible companies.
E-ink displays goes a long way. LCD light hurts my eyes after reading for a long time. The E-ink displays are just too comfortable :-)
Whether or not he was in contempt, that's still a bullshit way to approach the problem.

Contempt of court? Fine and then jail him for non-compliance. Seize Lavabit's assets if required. I doubt he would have let it come to that.

But their solution was analogous to "won't give us back that alleged stolen $20 we told you about? We want your whole bank balance."

Aww hell naw.
"Daesh" is short for "al-Dawla al-Islamiya fi al-Iraq wa al-Sham", which means Islamic State(or Nation) of Iraq and al-Sham (the Levant or Syria)... so basically ISIS. [1]

So then, the point of view here is that you're not referring to it as a state when you use words from a non-Western European language?

I think it would be better to spin it as an armed group serving it's dictatorial leader, the "Caliph" Abu Bakr al-Baghdadi, by calling it something like "Al-Baghdadi's Army."

Much better to leave Islam, Iraq and Syria out of it.

Then you have at least one clear, achievable goal: http://imgur.com/UcIhJmU

[1] http://pietervanostaeyen.wordpress.com/2014/02/18/on-the-ori...
CM = Contract Manufacturer
CNC = Computer Numerical Control (an automated mill)
BOM = Bill of Materials (a parts list)

It is jargon, but it's jargon that someone who would be concerned about "not showing ejector pin marks" would probably know.
Elixir is the #1 language I want to succeed. I can't imagine how amazing it would be if web development counted Elixir among its top 5 languages.
So uh. This works on a few websites. A couple I've found

http://dig.whois.com.au/dig.php?dom=jamiehankins.co.uk&type=...

http://mxtoolbox.com/SuperTool.aspx?action=txt:jamiehankins....
Ultimately didn't move past the proof-of-concept phase, but I wrote an implementation of distributed latent Dirichlet allocation for NLP.
They can certainly make life difficult for Apple and its executives; see what happened to Phil Nacchio of Qwest when he pushed back against surveillance requests.

http://www.denverpost.com/business/ci_25845407/unrepentant-j...
Perhaps a LiveCD/LiveUSB, with a VM inside of it?

Then a compromise would need to be:

Local VM user -> root VM user -> local LiveCD user -> root liveCD user -> hardware exploits
I left Dropbox for BT Sync and have not looked back.
Elixir reminds me a lot of Clojure.

- It's a language that sits on top of another language's bytecode (Erlang vs JVM)

- It has its own task runner and dependency manager (mix vs lein)

- It has homoiconicity and macros!

- One of its main features is amazing concurrency support.

But Elixir has been in development for a much shorter time than Clojure. Yet it's approaching the same level of maturity of Clojure very quickly.

I'm eager to see where is Elixir is adopted. I hope to see it gain some traction in the web development world.
The Great Architect Rebellion of 2014
I think "It's clearly worse than doing nothing" is from a purely security perspective. This opens up a larger attack surface, so it's worse in terms of security. But it's better than doing nothing from a business perspective, since it allows for better performance and better handling of DDOS attacks. It's a comprimise. Potentially it is slightly worse in security, but it is much better for performance and uptime.
What does the actual word "Daesh" mean and why do they hate it?
As much as I hate TC, these are well written:

http://techcrunch.com/2012/04/07/convertible-note-seed-finan...

http://techcrunch.com/2012/04/21/convertible-note-seed-finan...
Phony cell towers are the next big security risk
I did the same thing: I wanted something like Google Voice, but it was impossible to make it work here in Canada. I also have a tiny little HTML page you can use to retrieve your voicemail and transcriptions:

https://github.com/mmastrac/snippets/tree/gh-pages/voicemail

Obviously you'd want to host that yourself somewhere private and possibly hard-code the keys.
I'd like to see Hangouts eventually implement some of Signal/TextSecure's crypto.
Build a Facebook lite for such and such...
Are convertible notes treated as debt before the conversion happens - i.e. are they liabilities on the balance sheet before then?
Alternatively, the activation temperature could be lowered to body temperature, only requiring cooling to exit (or enter) the suit. As long as sufficient metabolism happens within, the suit would remain sufficiently pressurized.

Standard HN disclaimer: IANAMS.
And? It's vetted by a cryptographer who noted the caveats that apply. Do you take 'vetted' to mean 'unreservedly recommend'?
Are they not doing all the things they're doing for Islam's sake (misguided or not)?
It was proprietary was most of it's existence and was not opened until 2011, which in turn was likely as a result of everyone using FLAC instead.

I have no doubt this new codec will be proprietary, and only if it fails to gain any traction is there a chance of it becoming open.
key developer-related features introduced in iOS 8
This headline is misleading. Nothing says it needs to be your home address, just a physical address. Also this is only for paid apps. Seems like a good step IMO. If you're selling a product, you should have a physical address to contact you if needed.
Is there an entrepreneur willing to say "Yep, tried them, got bitten in the hindquarters", even anonymously? I don't necessarily disbelieve here but it strikes me that VCs have the curious property of always giving fundraising advice which is in the interest of VCs. I acknowledge that somewhere in this wide world there may actually be a VC motivated primarily by friends-and-family getting appropriate compensation for risky investments but that is not the way I will bet.

My understanding -- limited, in that I've been a party to two but from the other side of the table -- is that a major reason they became popular is because they take the fangs out of collusive behavior by investors. The Valley had evolved a "Well, I'll invest if you get a lead" "Well, I'll lead if you close $X" system which froze out a lot of companies if the founders didn't have deep, pre-existing social networks. "You want a lead!" sounds a lot like wistful nostalgia for this gatekeeping behavior. I understand why a gatekeeper would see it that way. I don't understand why the gated would.
Could you be more precise? Reengineered what? iCloud mail, CalDAV, and WebDAV are not encrypted. So, I guess you are referring to iCloud backups? Did anyone repeat the mud puddle test with iOS 8?

http://blog.cryptographyengineering.com/2012/04/icloud-who-h...

If you are referring to actually remotely retrieving information from a device: they could still fulfil request by pushing the targeted user a signed application update with a trojan.

As someone said in one of the other Apple PR topics: it's as much a political problem as a technical problem. Since Apple, Google, and Microsoft are able to push any update to devices, they can always be forced to put backdoors on devices.
BitTorrent Chat App Bleep Alpha Goes Public, Introduces Mac and Android Apps
Now you don't want to hand over this private key to Cloudflare if you don't need to, because then they can read all traffic.

Generally the key you would give them is for, and limited to, the resources that they cache/reverse proxy, so the same "read all traffic" concern exists.

What Cloudflare did is essentially, as others have mentioned, PKCS11 over the internet. PKCS11 is an existing, very well proven technique of sequestering the key in a hardware device, that hardware device doing what Cloudflare is moving to the client location here. It's neat enough, but they seem to kind of exaggerating the innovation a bit.
Foursquare reintroduces ‘lists’ feature after power users panicked
Did you read the article? That would be a good start.
Here, have a cookie: 🍪
The same strategy gave us the term "Nazi", according to Mark Forsyth:

"[Nazi] was a derogatory term for a backwards peasant – being a shortened version of Ignatius, a common name in Bavaria, the area from which the Nazis emerged. Opponents seized on this and shortened the party's title Nationalsozialistische Deutsche Arbeiterpartei, to the dismissive "Nazi"."
Nearly 80 Startups Take Center Stage at Tech Venture Conference
Nothing that complicated is required. When the server needs to sign the DH handshake, it sends the value to be signed over to the key server, and the key server replies with the signature.

Although the diagrams in the blog post show the non-PFS RSA handshake, I'm sure the architecture already supports the PFS DH handshake too.
> Never trust user input.

Never trust any input. I think this is a case where people assume that is isn't pure user input because is would have already been parsed/checked/verified.

"Oh, its in the DNS system so it must be safe" is worse then "well, it came from our database so it should be fine". Don't even trust something coming out of your own database. You never know what various input checking bugs might have accidentally let in over time.
Microsoft Cuts Another 2,100 Employees Worldwide
They still don't have physical keyboards.
>The similarities with FPGAs/ASICs are really quite interesting.

FPGAs are essentially the exact same thing as neuronal systems, but in silicon.

You have voltage-gated transponders with a slight delay. These transponders can have their output connected to one or more neighbors in such a way as to form arbitrary circuits.

A neuron isn't quite as capable as a LUT, but en masse they can do basically the same things.

I think it's very likely that the first strong AIs will be built in reprogrammable logic of some kind (possibly FPGAs).
> And is only the gas in the body that you really need to worry about

The only gas to worry about, aside from carbon dioxide.
An ascetic theme for Jekyll: jekyll-lambda
Is it propaganda or is it a honeypot?
Ask HN: How would you write front end code for bookkeeping app?
A lot has been said about writing and organizing frontend code. Tools like grunt.js, clojurescript, all sorts of reactive libraries and all-in-one frameworks have been invented. But every time I see something like this discussed it's mostly about rich-UI web-services, one-page apps, stuff like Netflix and such, but it is very different from what your typical back-office app. Clear UI is the key for the front-end site, but CRMs and such are notoriously known for their insanely complicated interfaces. One-page js-apps also don't seem like a good idea here, as things are complicated enough without that and dramatic changes in UI happen on a day-to-day basis, not once in a while like on your front page. I don't really see how should I organize and compile clojurescript sources, when I'm using pretty much unique js-code for each page.

Both users and developers often don't really care about that, because business-logic is the king on the back-office side. But still, have you any articles that would talk about that or maybe you have some thoughts of your own? I'm writing stuff like that for quite some time now, but still have that feel that there could be some way to do it right, and I'm not even close to it.
How Corning Made Gorilla Glass Even Tougher
Note throttle and debounce are slightly different. Debounce will delay firing until the event causing the timeout reset stops (or pre-fire on the first event and then ignore all subsequent events until they stop for a given interval,) where throttle will fire one event within a given interval no matter how many events it receives (as long as it's >=1.)
Disregarding the UAP thing you mentioned, I believe you might be dismissing the complaints of "magic" in Ruby too quickly if you think all it is meant by it is what you said.

In the contexts I usually see, the complaints of magic are regarding Ruby's fondness of Spooky Action at a Distance. I would then argue that Ruby or its frameworks do seem to rely too much on this "magic" that otherwise is condemned by recent literature (and Code Complete).
How to fix Obamacare
I tried tools like pandoc and they promptly choked on the latex. Every code sample that had an _ was problematic, and that issue likely didn't come alone.
Old westerns and war movies and gangster movies and the like all exhibit the same issues with violence.
Honeypot? How so? See who gets pissed off when you call them that?
Pandoc exploded on the first code sample with an underscore it met. Too bad.
I jumped to Gmail exclusively for my personal mail in 2004 and never looked back. If my work email followed suit, I'd be thrilled.
Wasn't expecting that at all! Had several tabs opened and was really confused for a few seconds while I tried to find the tab with 'youtube on autoplay'.

Firefox needs to show the 'play' icon for the audio tag.
So you want to join a startup?
I think the point is, as the article points out, moreso that the group hates the name:

"The Associated Press recently reported that the group were threatening to cut cut out the tongues of anyone who used the phrase publicly, and AFP have noted that the term "Daeshi" has been used a derogatory term in some parts of the Middle East. Some analysts have suggested that the dislike of the term comes from its similarity to another Arabic word, دعس, or Das. That word means to trample down or crush."
Can we please stop linking to this whenever there's a discussions about a new standard? There are other reasons for creating a new standard besides unification of the current standards.
Entrepreneurs anonymous: People should understand how hard their lives can be
Yeah, I would take their word for it that they are Muslims.

But in addition to being Muslims and generally really bad dudes, the principal thing they are doing is installing Abu Bakr al-Baghdadi as the leader of a caliphate/country.
very interesting.. Napoleon Hill once said that he came up with the title of his global best seller "Think and Grow Rich" while he was asleep.
And when the pins hit the plastic part to pop it off, they often leave small, circular marks on it.
CLANG's Final Update [Neal Stephenson's Medieval Sword Combat Kickstarter]
There is no reason why people need a physical address to contact you. I think electronic communication is a reasonable expectation for developers of purely digital products.
It is where I come from.
> It's all method calls.

Probably nitpicking, but it's actually all messages. An object might not have a method "foo", but happily respond to the "foo" message.
Browser extensions are cryptographically signed and verified, while web application javascript is not.

The problem isn't with javascript, it is with delivering javascript in a web-based application (amongst other concerns).

Most of the other concerns about web delivered javascript also don't apply to extension security. Example: a web application can't interfere with the execution of extension code since extensions reside within their own context and cross-origin rules apply (there are special API's accessibly only from the extension to call into the web javascript).

End-to-end from Google is a browser extension, and it is signed by the developers and then verified on install. It is more secure than a traditional desktop software installation.
I know then from the time they used to collaborate with Embarcadero. Although I left Turbo Pascal/Delphi when Windows 3.x was still actual, I kept on following Borland.

What I am doing are very basic hobby projects, when private life allows for, which is seldom the case nowadays. You can check some of them with my nick at GitHub.

If I would be doing a commercial app, I would be buying either Qt or Xamarin, mainly because they are better known and using Pascal like languages (except maybe Ada) is no longer relevant on my CV.
I wonder what happen if Russian, China, India, Japan, EU all demanding same level of access to Apple's data.

Apple might not care about Iran or other smaller countries, but how is it going to deal with big market like China, India, EU?
Check out the 'more details on Convertible Notes' link for the answer to your question.
Their attention to detail in casings is the same as the very high end hi-fi, jewelery, or sports-car industries. Nobody else in computing seems to come close.

In terms of electronic components however, you can nearly always get more bang for your buck, the exception sometimes being the screens.
I wouldn't mind reading a book in the tub with a $50-$100 eReader, but I would certainly not read a book on a relatively expensive tablet or smartphone.

That, and battery capacity suffers noticeably (at least on a smartphone).
Under what conditions would the warrant canary statement reappear? I'm thinking of those workplace safety signs: "This corporation has operated for [ 179 ] days without a Section 215 warrant being served"