skysight-inc/HackerNews huggingface dataset:
Yeah, but it still isnt the same -- because for the first investor, you still have to get them to agree to pony up the full 500k.

When dealing with smaller angels, its easier to get your first 250k - 500k in 50k-100k increments.

I do like the idea of setting a price instead of a cap. Even if it means your price is a bit lower than the cap, it should be relatively straightforward to transition from a cap to a price with sophisticated investors, and it protects you in any weird situation.
Microsoft Lays Off 2,100 Employees
Why on earth would it be illegal?
Wouldn't you want to prevent "passive" tapping? Passive in quotes because depending on what they find people will be killed, tortured, executed, kidnapped, arrested, etc. It's not passive when the NSA scoops up everyone's data and sends it to their spook friends around the world.
OH! Now I get it. Honestly, this is hilarious
Could a lawyer or someone with familiarity with warrants like these explain how a "warrant canary" is legal?

I understand the concept, but discloses something you can't disclose. They can compel you to lie/not comment if asked, "Hey, Apple, did you get any of those National Security Letters".

Is there a clear cut loophole or is this something yet to be challenged?
This is a dupe of https://news.ycombinator.com/item?id=8306849.
The idea that piracy hurts big labels is laughable. They long ago read the writing on the wall and started signing new acts to 360 deals that give them a cut of every revenue stream.

"Buy a fucking t-shirt"? There are two possibilities.

1) The artist is signed to an exploitative label deal. If this is the case, the artist is not seeing any more money from that t-shirt than they do from an album sale. Nor are they taking home their gate, so seeing them in person isn't helping either.

2) The artist is signed to a limited or ethical deal. If this is the case, then they have a good relationship with their label, and pirating music will hurt them either directly (lost royalties) or indirectly (hurting the label and forcing succesful bands to sign with a major).

I'm sure you play music, but I think your sense of the industry is incomplete or not up to date.
I though Elixir was not a whole new compiler, more like coffeescript:javascript than clojure:java.
Sochi, abandoned
Yes, the excuse reminds me of the (very apropos today) No True Scotsman fallacy:

https://en.wikipedia.org/wiki/No_true_Scotsman

Person A: "No Scotsman puts sugar on his porridge."
Person B: "I am Scottish, and I put sugar on my porridge."
Person A: "Well, no true Scotsman puts sugar on his porridge."
Thank you!!!!!! Grrrrrr..... Nail polish failed me miserably.
I think it's effective rebranding for those wanting to repeal the tax. Fyi, I'm more interested in the marketing, than the politics.

So an example of the ineffective branding, from the book "positioning: the battle for your mind", is high fructose corn syrup. They suggested rebranding it to "corn sugar."
Meme generator powered by MMS picture messaging
This is hilarious, but what's up with this line?
>jamiehankins.co.uk descriptive text "v=spf1 include:spf.mandrillapp.com ?all"

Why is mandrillapp.com (tranactional email startup) included?
Show HN: Collaborative SMS inbox for companies
I suspect he means one that has paredit.
That would make SEC filings a disclosure of surveillance.
Can a Silicon Valley CTO save government software from itself?
One could (in theory) use Dropbox to store the encrypted ~/.Private directory. For example by making it a symlink pointing into the Dropbox directory. And it could be auto-mounted using the Encrypted Private feature at ~/Private. It would probably work very well as ecryptfs only does file-by-file encryption, and thus Dropbox can efficiently track changes.
Best POC ever.
Convertible notes are a way to incentivize great execution by the founder team between the angel round and the series A. Execute better => Higher series A valuation => Less dilution from the convertible debt.

At the angel stage there are very little metrics and multiples to go by, hence why you need to invest in the team and incentivize them using convertibles.
It's my personal domain, I use mandrill for some stuff.
I recommend Black Mirror as well, but I would suggest skipping the first episode. Like the twilight zone, each episode is independent so it doesn't matter what order you watch them and the first one is... unpleasant (and in my opinion not as well done as the others).
What to Do with an Old iPhone
Democratizing Big Data
Most people in this area are now older. I'm approaching 40 and I was recently at a tech demo and everyone around me seemed to be older than me. I remember taking Assembly in college and our professor explicitly telling us that we would not need to know any of it, but it was a good foundation to build on. As far as I know, of the people in that class I'm the only one that ended up actually writing a ton of assembly after joining a semiconductor company. Most of the embedded people were from EE, but didn't actually have as much of a programming background. I had approx. 2 college courses dealing with hardware in undergrad and that was not enough.

So, it seems you need to either accept a recent CS grad who seems adept at programming and can learn, or pony up the 200k+/yr to poach someone if you want to hire quickly. Most people I know that have done embedded work tend not to move around a bunch and aren't motivated by small amounts of money to move jobs, so you'd have to offer a large incentive to find the good people.
What SHOULD be illegal is not sanitizing all inputs.
Why Google Plus Is Irrelevant
As a point of comparison, how do you feel about comments that Westboro Baptist Church is un-Christian?
Data Visualization: How Students Listen to Music at 40 Colleges on Spotify
VC wants to make money.

VC wants to make money off of your work/startup/company.

VC makes money using the given terms.

When it comes right down to it. The money they "give" is not given. It is a loan with terms and conditions. You need to be aware of this. You need to know what a loan is. It is money you are borrowing that you must pay back WITH INTEREST. Find out how much interest that is.

"It’s like we need a finance 101 course for entrepreneurs"

Debt money is bad. I realize a lot of people will tell you that this is how the world runs, or this how they run their business, or I got successful in business taking out a big loan, etc and so on. Like the gambler, they don't tell you about all the losses.

Save your money. Keep your work/startup/company.

http://www.gamesradar.com/nintendo-doomed-not-likely-just-ta...

I've read that Microsoft has always had enough money in the bank to operate for a full year without making any money.
I can't see the point of zeroing the js as I'd end up needing to reimplement most of it.

CSS - however - yes! Our admin skin zeros the existing CSS just by making sure we add an empty CSS file for each of the django admin css files - and that they come afterwards in INSTALLED_APPS and therefore take precedence.

We then add Bootstrap and our own styles. Took less than a day to get it all working nicely and it looks nothing like Django Admin at first glance.
I built a little prototype for a 24-hour Meteor Hackathon:

https://callmemaybe.meteor.com/

Unfortunately, the Connect API was a bit confusing to implement, so you actually have to paste in your API key.

My goal is to rewrite it soon with basic features like call forwarding, blocking, etc.
Yes, convertibles are a debt instrument and can even have interest payments attached to them.
Twilio's test MMS (or any Twilio SMS) messages have never worked for me on the AT&T and Tmobile MVNO Straight Talk which uses Tracfone's MMS servers. I'd be curious what other MVNOs lurking about in the US are not handled by this. Does Cricket work?
I once saw it on TV and they cut that last 10 seconds.
How I Mind Map
I don't have any past experience as a Christian or know enough about Christianity to comment about that.
I thing probably_wrong is more likely to object to the appointment Conoleezza Rice, despite this no longer being the latest change: http://www.drop-dropbox.com/
Islamic terrorists and sympathizers are the scum of the Universe. Cancerous vermins that need to be wiped out.
Not exactly what you're asking for, but I did a priced first round because my investors insisted on it and believe it helped me a great deal more than a convertible note would've.

In particular, what Suster says about the importance of having a lead rings absolutely true to me. My investors were a huge help when figuring out a complicated merger that eventually led to a terrific outcome. If I had raised from a big bunch of smaller, not-particularly-invested angels instead - well, who's to say, but I suspect I would've botched it.
Show HN: Facebook group for HN
dam, that got downvoted into oblivion haha. honest question...

although i dont believe it should be, a third party injecting javascript to demonstrate an exploit might be...
Well, all the kudos should go to Bandwidth.com the primary carrier of of Twilio, Plivo, Google Voice, etc ...
The EFF has a good FAQ on the legal considerations for warrant canaries.

While there's plenty of precedent for gag orders, there's not much case law for compelled false speech.

https://www.eff.org/deeplinks/2014/04/warrant-canary-faq
I suspect this is to comply with some regulation requiring physical contact addresses. I can't imagine that Google cares about being able to send you mail.
Comments moved to https://news.ycombinator.com/item?id=8335310.
Kinko's also seems like an ideal place. They're 2-D printing your uploaded designs already.
See: Secure session capability using public-key cryptography without access to the private key.

https://www.google.com/patents/US8782774
They're nothing but effing inbred retards.
> I understand the concept, but discloses something you can't disclose.

Until they have been served a warrant, they are not under a non-disclosure warrant. That's how the canary is legal.

> hey can compel you to lie/not comment if asked

No, no they cannot. They can prevent you from commenting, they can NOT compel you to lie.

Lying and not commenting are very, VERY different.
Grapelli chose not to stick to pure CSS. It's not a trade-off I think was worth it as they have no cut themselves off from much of the 3rd party admin extension ecosystem - unless those apps actively do a 'Grapelli version'

Pure CSS skins are a bit more work and you occasionally have to choose between overriding more template code than you'd like - or doing a sneak bit of jQuery DOM manipulation - but it's a better bet long term.

A really simple fix for the core Django team would be to add a heap of {% block %} tags into admin templates so that we can selectively inherit and override.
Given how many whois sites cache results, I wonder how many of them are also vulnerable to SQL injections...
I'm building an HTML editor – adding text node manipulations
How to test async Ocaml code
Yep. It's all been way overdone. Brazil and 12 Monkeys were different because it was all more or less new then. Both also had great arc and reveals, but It's Been Done Now.

I say "new then"; dystopian SciFi was a staple of drive-ins in the '70s - from Silent Running to Planet of the Apes to Logan's Run...

It's not like there isn't a huge backlog of great sci-fi to draw on that isn't dystopian. I'd like to see The Foundation Trilogy as a multi-year "Breaking Bad" style series.

It's basically a massive essay, but Scorcese's "Personal Journey" manages to explain why movies are in terrible shape without being hopeless about it. The reasons are profound.
I enumerated all IPv4 PTR records a few years back, and I saw a couple XSS things there as well. If anyone wants to host that data set somewhere, let me know, would be interesting to see what others do with it.

Edit: I found my data and have a grep running on it, will share what turns up.

Edit2: Somewhat less exciting than I remember:

$ fgrep -- '>' *

x.x.101.130.csv:1298607746,155.92.101.130,<hostname>.nebula.msoe.edu.

x.x.110.35.csv:1298587462,41.191.110.35,www.ahnigeria.org\032<http://www.ahnigeria.org/>.

x.x.126.67.csv:1298594206,75.127.126.67,\032>.

x.x.229.74.csv:1298608599,139.78.229.74,<hostname>.suites.osuit.edu.

x.x.39.239.csv:1298594005,129.89.39.239,<hostname>.uits.uwm.edu.

x.x.49.198.csv:1298613894,195.164.49.198,test.str!\@#\$%^&*\(\)}{\":]['><.,end.domain.test.pl.

x.x.49.199.csv:1298613720,195.164.49.199,test.str<hr><br>end.domain.test.pl.

x.x.49.206.csv:1298603066,195.164.49.206,test.str<hr><bR>omain.test.pl.

x.x.88.109.csv:1298606801,95.211.88.109,ilo.>.88.211.95.in-addr.arpa.
> "how can Google use this data against me"

I look at it the other way: What do I gain from allowing Google to build this profile of me, including information from potentially multiple accounts, devices, location history, search history and communication history.

Because if Google is offering their services for free to all comers, that data must be valuable to them. And if I can't deduce why the value is what it is, that's far more likely a failure of understanding on my part than any indication of fairness or harmlessness in the exchange. [1]

And to me, all I see is a convenience function I can't rely upon. It can identify flight or meeting information. Maybe (who knows what parser errors exist or will exist as things change). And it can only even try some of the time, as google doesn't have access to every channel by which my itinerary is set and changed (emails to non-Google accounts, phone calls, text messages, verbal communication, etc.)

And if I can't rely upon it, I have to double-check that it is operating off the right information. And at that point, I might as well have explicitly handled the bits Google Now might have gotten right as well.

The rest of your examples are replaceable with client-side data-detection features -- that have been identifying likely dates, addresses, flights, etc and offering convenience functions to simplify dealing with them for some time -- and location-snapshot information [2]. Nothing there requires indexing all my communications and locations across history.

Maybe Google Now can become something that's worth the trade-off. Or maybe Google will offer a (for-pay?) version with guarantees about who has control over what is retained and who has access to it. But, to me, it's not a good deal right now.

And besides all that, I'm personally a pretty private person, so I have a particularly good imagination of the downside risks, even beyond weighing my benefits vs google's benefits.

[1] It's that old saw: "There's a sucker at every table..." Applied to internet services it suggests: If you can't tell why a company with a free service has a massive valuation and a willingness to pay through the nose for users, you literally have no idea what you're trading away by using it. So you better be damn sure you're at least getting something worth the per-user valuation in return.

[2] Yes, it requires some degree of trust or self-deception to believe that there's a difference between a company that states it's collecting your location history and one that claims it doesn't -- as providing snapshots implies the ability to log said snapshots. But such is life. At some point you make peace with the level of paranoia you can handle, or you opt out of society altogether.
Tom Christie's stretch goals for the Django Rest Framework Kickstarter are worth a peek. :-)
There is a reason why I mentioned DR-DOS when I was discussing the OS/2 2.0 fiasco. Another favorite is how Win9x's dependence on DOS allowed Caldera to continue to sue MS.
No, it is not like coffeescript:javascript. Coffeescript compiles to javascript source code, which is then turned into bytecode by the VM. Elixir is _NOT_ compiled to Erlang source code; rather, it is compiled directly to BEAM bytecode.

So the clojure:java comparison is accurate.
Don't know or have plans to use Elixir for now since I have always seen the Erlang VM as tackling only the problem domain of requiring high fault tolerance and distributed computing systems but no so much for general purpose programming as languages like ruby/python/js/clojure etc. For example: how may programmers are writing systems like Riak, Amazon's SimpleDB, CouchDB, RabbitMQ every day?

That said, from reading the article you forgot to mention Hex, the package manager.
Wish there was a warning, because I accidentally clicked this link in class just now.
In general, it is far easier to (legally) force a company to not announce something than to force them to announce a lie.

So no, it is not perfect. But it is better than nothing.
"Elixir compiles directly into BEAM byte code."

from http://elixir-lang.org/crash-course.html
It's Celine's First Law.
Some random thoughts from working on a proprietary intranet app that manages proposals/jobs/billing and uses some single-page-JS sections:

1. Some users want to have almost an in-browser spreadsheet where a change in one text-cell ripples through dozens of causal relationships. If you choose this, you need to fully commit to all the focus-handling / concurrency / algorithmic issues (e.g. avoiding cycles) that it raises, and sometimes push-back against certain things that just aren't practical.

2. Assuming you don't take the tabular approach, consider task-based interfaces, where there is information about what the user wants to do and you provide an interface that works best for that specific route. (As opposed to "here's a whole bunch of facts, change whatever you want" approach.)

3. Your experienced users will probably want to use tabbing to move between fields for data-entry. You may want to make this an explicit part of the design process, or else they'll get used to whatever the browser default is and then fixing it later will break somebody's learned workflow.

4. Carefully consider what groups of information people will want to enter and then save as a unit, versus pieces where it should be saved on-blur or automatically.

5. If you do use on-blur to save data, make sure you have some feedback so that users know when the field is still in the process of saving. Also consider how to accommodate users who try to make a lot of rapid changes to the same field.
Its an interesting note but it raises more questions than it answers. Sure SMA's contract when they heat, the robotics community has played with it as "muscle wire" for a long time (at least since the 90's), but in space its really hot, and then its really cold, and then its really hot, Etc. The difference in temperature between shade and sunlight is extreme. As the SMA doesn't care how its temperature changed, using it in such temperature dynamic environments is really really really challenging.

The second issue is that getting into and out of skin tight space suits is probably not #1 on the list. The issue is how do you bend your elbow? Even at 2 - 3 PSI, a 24" long sleeve (4" diameter cuff) has 650-975 pounds of force holding it "straight". That means you need a mechanical elbow joint which is both air tight and light which breaks the sleeve into two 'segments'. Astronauts get exhausted just opening and closing their hands while on EVA.
> Apart from trying to filter spam, Yelp doesn't "manipulate" reviews.

Many restaurants have claimed that yelp has offered to remove negative reviews in exchange for money. Some also suspect Yelp of writing those negative reviews.
It's a research project. Maturity has nothing to do with it. There's literally no plans for Servo apart from research.

> It's always been that way, and it always will be. I doubt a new library/platform will change that.

Except that we have ridiculously few memory-safe systems programming languages. Rust is one, I believe Ada is another. Provably memory-safe code means no more stack/buffer overflows, no more writing to random bits of memory, and in Rust's case it can be for almost free.
In addition to "never trust user input";

Never trust your program's output

You should have two sets of sanitization, one that sanitizes incoming data, and one that sanitizes outgoing data.
Anybody saying "this is illegal" should be required to cite the law they think is broken and explain why the act in question violates that law.
We merged the comments from https://news.ycombinator.com/item?id=8335470 into this thread, since the stories are the same.
This looks awesome so far - kudos to the team. I also started benchmarking it just for fun[0]

[0] - http://marianposaceanu.com/articles/ruby-2-2-0-preview-1-qui...
A PR announcement of an initiative to form a coalition to investigate making it easier to use security tools that most people don't care about. How thoughtful of you, Google. This wouldn't be an attempt at improving the public's negative view of you with regard to privacy issues, now would it?

Funny how Google doesn't offer a messaging service that's secured to a physical device the way Apple does, and these projects when combined would result in something like that.
But now it's a commodity.
I say that women are dumb/shallow/whatever all the time. I'm sexually attracted to those that are not. (I also say that men are dumb/shallow/whatever all the time, so I'm not sexist, just an asshole, and exaggerating a bit). :)
Apple's privacy statement is a direct shot at Google and I love it
Not enough, I would only trust it if I can deploy my own instance and read its source.
Right, because studio time, publishing CDs, booking tour dates, and promoting it all is free.

Before an artist earns money from album sales, they have to pay for all that stuff. When album sales drop, either the artists get less of all those things, or they have to pay for them from other revenue sources. Either way it's not good for them.

The idea that album revenues never did anything for anyone makes no sense.
That's not to say that packages aren't being written in CoffeeScript as source and then being compiled to Javascript for distribution. That wouldn't require CoffeeScript to be in the deps at all if a dev doesn't use build tools (gulp-coffee, browserify+coffeeify, etc).
I don't understand it. Why is it cheaper to design a colourful background animation then one of a cyberpunk city? Or cloth or items?
He hasn't injected anything. It's just his public DNS record that this page has chosen to display without sanitizing.
Lawn Love (YC S14) Is Hiring Engineer #1
Lawn Love (YC S14) is hiring our first engineer. We're a small, nimble team working on revolutionizing the very large, very stagnant lawn care space.
You'll be joining as engineer #1. This means you'll get to work in a ton of different areas, have direct influence on the product and help define our culture as a company.

Here's what you can expect from us:

- Great compensation and real ownership (both equity and over the product).

- We'll make your life easier with great benefits.

- New gear and whatever else you need to be productive.

- A tight-knit, cross-functional company culture.

- Anything else you can think of - help us decide what perks to offer!

- We're well funded by great silicon valley investors and are growing fast.

Our requirements:

- You love working hard, not just for financial rewards, but for the opportunity to grow personally.

- You are intellectually curious, and you get stuff done. Results are what matter to you.

- Experienced with the full LAMP stack. We need you to own the product and features all the way through.

- You live in (or want to move to) San Diego.

- Bonus: Previous startup experience.

We'd love to hear from you at jobs@lawnlove.com. Send us samples of anything you've built!
The most clever exploit of XSS I've ever seen. Beautiful. Bravo.
The way I see it is that journalists (directed by the French government in this case) like to use foreign terms to make the "enemy" more scary and different. We hear a lot about "jihad", "sharia", "burka", "fatwa" and now "daesh".