skysight-inc/HackerNews huggingface dataset:
Awesome. I love seeing real businesses on HN. As in, businesses that can make money from Day 1. (Anything else is a potentially lucrative hobby.)

There are hundreds of solo entrepreneurs who own ecommerce properties. Some dropship, some carry inventory.... but all order from wholesale at some point. This is definitely a good market to get into.

In your site you have "Bill sells to Joe" as an example. My advice is that you market to both Bill and Joe, regardless of who pays you. It sounds like both Bill and Joe benefit, so you really only need one of them to convince the other.

To target the buy-side of wholesale ordering, I would recommend posting to marketing forums (Wickedfire comes to mind, maybe also forums around 4hourworkweek, millionaire fast lane type "lifestyle" businesses). You'll find very specific clientele there who will definitely use your software.
I'm kinda sick of people self-consciously talking about how they use PHP even though it's not "hip" or whatever. It's a HUGE language, maybe the hugest, it is everywhere.

And those of us who have used it and decided against using it further are not obsessed with "hipness" or anything of the sort. A lot of us think it sucks and it's broken. Feel free to disagree but please don't frame it such that people who don't use what you use are bird-brained and obsessed with being trendy.
So basically, its QRv2 without cameras and instead nfc/ble or some other physical layer.
Thanks! Yeah, I bought it as a refurbished unit and the company that did it does a nice job.
People who are working remotely from Eastern Europe or other remote locations are almost always coming to Mozilla into a more senior position, with very demonstrable skills, and typically have access to more of the market than just what's available locally, and I believe we take that into account (but again, I haven't personally been involved in compensation discussions in those areas). Still we make a distinction in terms of cost of living, and realistically the Bay Area just has a different labor market than elsewhere – so to be competitive in the Bay Area while also hiring elsewhere it makes sense to differentiate to some degree.
Nice article. IMO, two of the key points are:

1. But you still need to figure out things by yourself: YC will never tell you what people want

2. If there is one thing that is true about YC partners, it’s that you can’t expect them to do the work for you.
He only got through 3.
I use it for ad hoc data analysis. When I just want to put data in, get it out without thinking about the ultimate picture of schema. Probably not a solution for all needs. For example, I wouldn't use mongodb in apps where atomicity is critical.
We don't necessarily need AI, we just need APIs to be standardized so everything knows how to interface with them. This is IMO the killer app for the Semantic Web (I just wrote an article on this: https://medium.com/@mcriddy/semantic-web-design-92ef35f66c9f).
> They were screening you, looking for employees who wanted to work with them so bad they'd drop everything.

It isn't healthy in personal or business relationships for one partner to expect you to break promises. I keep my agreements and I expect others to do the same. If you expect other people to break promises to indulge your whims, you are too selfish for me to tolerate you.

I would never, ever, ask people to fail to meet their obligations to other people unless it was an emergency. Anyone who does is someone to avoid at any reasonable cost.

> I think this sounds intentional.

I know it wasn't intentional because I had made it clear in the previous email that it was a line I wouldn't cross. The effort they went through after that email made it very, very illogical for them to have continued the conversation. They wasted at least 30 minutes of their time on the phone + whatever it took to setup the environment they wanted me to use.

The alternative is they didn't believe me, in which case they are stupid, given the weight I give to promises and clearly established boundaries. I'm assuming since they got into YC they aren't stupid.
After rapidly falling profits, Angry Birds maker Rovio cuts 130 jobs
The fourth point in the article raises some red flags for me. I agree with the Capn:

>My job is not my identity, I feel its healthy to generate a life outside your work that is entirely separate;

You've hit on an important point here. There are lots of way to express similar sentiments, and you state it in a very practically appealing way (i.e. wrapping our identity firmly around our jobs is a dangerous path). I agree, but will state it slightly differently

As active agents we _do_ things, but those things we do are separate from who we _are_ (IMO, of course). If what I _do_ is be a Google employee and all I _am_ is a Google employee, what room is there left to grow? Ask yourself the question: who is this I?

If I is what you do, perhaps consider the consequences of a future where that job opportunity is no longer available or you don't enjoy doing it anymore. So instead of building your self identity on something external to yourself (in this case, a job), identify with something that is more concrete in it's foundation (what that is is up to you).
That is the most useless visualisation I think I've ever seen.

I love it.
" But General Groves feared that would draw undo attention."

Geez, the NYFT used to have copy editors. Dismayed to see that this goes back to 2007. I wonder if they were using voice recognition.
GitHub.com momentarily blacklisted in Russia
http://eais.rkn.gov.ru/en/#form (requires captcha)

The requested address is blacklisted

Blacklisting Authorization Date 24.03.2014	Blacklisting Authorization Number 4138	Blacklisting Decision Maker Роспотребнадзор	Blacklisting Date 02.10.2014
Resource: github.com
Prosecute Woman Who Threw Her Dog in Garbage Chute – The Petition Site
> Rapid interconversion between vector and bitmap formats remains hard.

More important, if you abandon the vector form in favor of a bitmap, there's no going back -- information is irretrievably lost.
Hound Reviews JavaScript for Style Violations
If votes alone can speak, why are guidelines needed?
Evernote increases upload quota
We've been fans of Bitcoin since going through Y Combinator with Coinbase in Summer 2012. Back then the value of BTC was just over $5. We're excited to announce that we are now one of the largest product catalogs now accepting Bitcoin.

What is Zentail.com? Launched in July 2014, we're a fast-growing online shopping site that is relentlessly focused on providing the lowest possible prices on over 100,000 products primarily in the electronics category.

https://www.zentail.com
You sure have an impressive Board of Directors!

However, as a medical devices engineer, I was rather disappointed that the site doesn't say much about the underlying assay technologies you're using.
So, I Spoke about SEO to a Room Full of Developers
Sharewave — New York, NY

Lead Front End Developer, Full Time, Salary + Equity

We're a team of 8 building a network that builds upon transactions happening in the private marketplace (from small startups to pre-ipo). I co-founded Sharewave with Josh Levine (former CTO of eTrade) and Robert "r0ml" Lefkowitz (long time technologist in financial services).

More about the position and our company here: https://sharewave.com/careers/
I haven't cleaned up the code yet, it's not even linted. coming releases will fix this.
> "When doing netcode for an FPS, your engineering decisions are game design decisions."

Of particular note: your engineering decisions directly affect which tactics are viable and to what degree. Can you wait for the last instant to dodge, or do you need to dodge a shot well before it reaches you? Can you kill a laggy player before they have a chance to react, or can they dodge your shots long after they appeared to hit? Can a player with a better internet connection control an area simply by virtue of their shots taking effect sooner (destroying an opponent, or at least wrecking their aim, before their shot gets counted as having fired)?

This came up in the Descent series with a change to the networking model between Descent 2 and 3. The top competitive communities didn't consider Descent 3 to be "real Descent" because the move to client-server (as well as physics changes) changed the gamescape so drastically.

[Disclosure: I'm married to Dove, and we have been playing Descent together for 16 years.]
Censors delete news of Hong Kong’s protests, but not quite fast enough
There is exactly one provider in my area which is capable of supplying my family's bandwidth requirements.
Download security
am online and download has stopped
Except parsing all the Android.mk and computing the dependencies is slow as hell.

Try running make at the top of an AOSP tree, it takes about 60 seconds, and that part cannot be parallelized.

If you are looking for alternatives, have a look at http://martine.github.io/ninja/
My dad collected some usb memory sticks from a trade show and he tried to empty them for his own use. One of the sticks he could't use: when plugged in, it sent keystrokes <windows key> + r + http://whatevermarketingsite.com + enter.

So it was just a dummy usb hid device that emulates a keyboard. No exploit or anything but a simple marketing gimmick that people take because of 'hey, a free usb stick!'.

Here's some more info: http://blog.opensecurityresearch.com/2012/10/hacking-usb-web...
JQuery and Cross-site Scripting
Great essay! It makes me feel good to know that random curiosity may prove to be a good thing somehow. Alas, I am much older than his intended audience.

And as a proof of being old I would like to congratulate Paul Graham for being one of the very few people in the world to actually use the "begging the question" phrase correctly.
Just a note: On your website, numpad keystrokes are rejected as not numbers.

Win7, FF32
Well, in the adult world, you hire mature, professional people who learn to work with each other and overcome their differences.

You just described a specific personality trait - that of someone who can moderate their desires in order to get along with the broader group. This is exactly the same reasoning that people are looking for with "culture fit" - they are looking for a very specific personality trait.

This cannot and should not be the way that people conduct business in the tech world.

Why? The tech world, like any other business place, is a mixture of people with different attitudes and personalities. If you clearly would have a personality clash with someone, why would it be worth hiring them?
I thought this works by each beacon broadcasting a URL with BLE, with the app sorting the received URLs by signal strength and not how you just described it. Correct me if I'm wrong, though!
It seems more popular now than ever, am I misreading the current state of things?
> people on the internet state their opinion as fact without substantiating that opinion with facts

Do you have any evidence to back this claim up?
If you're a sysadmin, you should be more responsible over your infrastructure than to first hear about CVEs on Hacker News.
I really dislike this "catty" journalistic style. It reads more like celebrity gossip than news, and it's becoming more prevalent.

>Oh, sure, president Thomas Bach said reform is needed for the bid process but this is a guy who spent his time in Sochi clinking champagne glasses with Vladimir Putin in an effort to help soften Vlad's global image. It worked for a week or so and Putin sent troops into the Ukraine. (How's that working out for you, Thomas?)
The Creative Class Boondoggle in Downtown Las Vegas
GE Geek: A Quick Reference Collection of Tech Related Bookmarks
Depending on the required level of security, that is probably fine. Protecting the origin server of a CDN via IP whitelisting is fine, if the content is publicly available via the CDN anyways and you treat that as a "we don't want everyone to use the origin, please use the CDN"-level of security. Using whitelisting to really keep people off the origin, however is probably not.
tl;dr Stop allowing everything to be concatenated with everything else, and just because PHP tried bad solutions to a problem doesn't mean that problem is unsolvable.

> it was a disaster because the compiler isn't aware of the context the programmer is

This is completely true, but the underlying cause is that everything is a string. As long as the "solution" is converting strings into strings (eg. magic quotes, escaping, etc.) they're doomed.

At a previous job we modified the PHP interpreter to give user input a 'dirty bit'. Dirty bits spread to anything they touched (dirty . clean -> dirty, implode(dirty, [clean]) -> dirty, etc.). Trying to output dirty strings (to stdout, DBs, files, etc.) was a fatal error.

Escaping functions unset the dirty bit. Escaping a non-dirty string was a fatal error. This worked quite well.

> > introduce a proper API that can be used to filter all incoming data.

> Things like magic quotes, etc. were tried. All failed because its a bad idea.

Not really. Making everyone access GET/POST vars in the same way is a bad idea. Better to provide getter functions like "get_param_unsafe" and "post_param_unsafe" for this, then provide a bunch of common alternatives which provide escaping like "get_param_html", "post_param_quoted", etc.

Even safety-conscious languages like Haskell know that there's no one-size-fits-all approach; but as long as you cover the basics and give scary names to your escape-hatches (eg. "unsafePerformIO", "unsafeCoerce", etc.) then it limits the damage.

"unsafe" is basically a big red warning sticker, telling you to pay extra special attention to what's going on. It only ever occur in custom validation/sanitising code, eg. in the definition of "get_param_my_custom_format". If a codebase has "unsafe" all over the place, that's an alarm bell which says the code is dangerous and needs to be refactored to provide and use some safe APIs.

> PDO isn't the answer.

Meh, library problems. PDO shouldn't be baked into the language, but neither should anything else.

> You can't magically make people do things correctly.

Yes you can: you can make it impossible/very difficult to do it incorrectly. Again, stop allowing everything to be concatenated with everything else and this issue will be magically resolved.

> Without knowing the context (say, expecting a date vs. markdown), it would be an awful idea.

If only PHP were capable of providing some kind of "interface", which other code could "implement"...
The keyboard navigation is ridiculous. Why do I press up to move to the next slide???
How to downgrade iOS 8.0.2 to iOS 7.1.2
> Aspen, Colo., (complete with bullet train from Denver which has no practical use post Olympics)

I live in Colorado and I strongly disagree with this statement. The bullet train would be extremely practical. In the next couple of years DIA (Denver airport) will be connected via train to Union Station in downtown Denver. There is already talk about how easy it would be for tourist to fly into DIA , catch the train to Aspen, ski for the day, then catch the train back and stay in downtown Denver. This would help with traffic on I-70. In regards to the Olympics being hosted in Aspen or anywhere in Colorado, no thanks.
Why not something like a USB Firewall?

Black/white list vid/pid (which are easily faked, yes). Closes the door a small amount.

But can also blacklist all HID.
> You know nothing about me except that I criticized your post for being misrepresentative. That's all.

I know you made the top comment on my article say you're glad when people say bigoted things so that the folks most impacted by them have to donate time to educating them. 'Bout all I really need.

> There are much more effective, humane ways to win the hearts and minds of others and achieve your goals.

Did you miss the part where I said that wasn't anything close to my goal?

Again: I expect people to demand the right things because they're the right things. Not because people are "nice" or not.

> you call me more names

Citation needed.

> When I say that I feel victimized by you

Whew. The privilege to call being disagreed with "victimization." Incredible. Tech in a nutshell, right here.
WizMaps
"It seems that bad things are much easier to promote these days."

I don't see why that doesn't mean you should work harder at it. Maybe the marginal benefit is minimal, but if the marginal benefit of everything else is zero then it might still be the best option.
Location: Aarhus, Denmark

Remote: Only on a temporary/trial basis

Willing to relocate: Yes - Not interested in local jobs, looking to relocate to another country, preferably US/Canada.

Technologies: Java, Python, Javascript. Some familiarity with a range of other technologies: Clojure, Ruby, Haskell, C#.

Resume: Let me say this right off the bat - if you are looking for somebody to produce code and nothing else, year after year, implementing whatever feature is next on the backlog, I'm not your guy. If you are looking for somebody you can trust to find the optimal solution to a wide range of problems that you don't already know the answer to, there may be a reason for us to talk.

I would be happy to learn a new technology, and while I have no aversion to any specific technology (the optimal tool depends on the task at hand), a functional language would be a plus for me.

My CV is not up to date at the moment, but please see my linkedin profile for prior experience: http://dk.linkedin.com/in/mikkel3

I currently spend some of my spare time contributing to an open source angularjs project on github, from a SF-based startup: https://github.com/ripple/ripple-client.

My github profile: https://github.com/Madsn

Email: m@madsn.net
Are there certain positions where remote (same timezone) is possible?
iOS 8.0.2 jailbreak with Evasion8 jailbreak
Would it be possible to:

1. Connect innocently as a plain storage device
2. Wait a period of time or even monitor voltage fluctuations to guess when the user is not at the computer.
3. Disconnect and reconnect (or a new side-connection?) as a HID device

Users often won't mentally associate the long-delayed attack with the USB stick, and if it attacks when they are AFK the timer might hit 0 in total secrecy.
1) A VC network of known quantities on the quality of the VCs is pretty helpful. These are people you are putting alot of faith in and vice versa. I'd say that is not something to be underestimated.

2) The Alumni network for successful YC companies is probably harder to tap into from the outside than you are thinking. You'd have a hard time getting a meeting with a founder of Stripe than, say, someone from the '14 summer class.
Some researchers at Yale have been working on a project [1], due to be presented this weekend, that disables the FBI from gaining any meaningful information via Javascript exploits. The idea is to contain each "pseudonym" in its own virtual "nymbox", and only that one box. Read the paper for more, it's interesting.

[1] http://arxiv.org/pdf/1312.3665.pdf
Important CVEs, updates, and announcements hit HN minutes after they drop on the relevant mailing list. Unless you're an insider, it's really hard to outrun HN.
There needs to be a built-in pairing button on the computer that you have to press to allow a new device to be activated. Sadly, it probably won't stop this attack because when they plug it in they will just press the button.
I work in the US but I never went to University here so it's hard to say. The German system worked great for me but honestly, I think the US systems would work just as well, assuming I could pay the tuition at a decent school.
On a scale of 1-10, this registers a solid 7 on my personal rustle-meter. Especially since I have friends in Russia who do open source work on Github :(
> If relationships are easy to maintain when everything is going well, it’s a whole different story when the pressure is on.

This isn't YC-specific, but I want to highlight this piece of advice because it's extremely important.

This is one of the most important things I've learned through my years of starting/running small businesses. I'm particularly susceptible to falling in this trap because I suffer from typical founder syndrome of "perpetual optimism". (Good for certain things, bad for others.)

It's also an easy trap to fall into as a new founder, because you just don't yet have the history to see both the ups and downs. But I can't emphasize it enough: People who are wonderful when things are wonderful can become bitterly awful when things turn around. Finding partners (both teammates and investors) who you can sail both the rough and calm waters with is absolutely essential to the survival of your business.

How to figure this out? There's no secret, but it's a mix of intuition and asking the right questions. Speak to references and ask specifically: "How was he/she when things were good? How about when things got tough?"
I'm not here merely to help women.

I'm here to fight marginalization. That's my fight, too. In quite a big way.

I respect that your approach may be different from my own—as marginalized individuals, we do have common cause.

You can and should view HN however you'd like. But there's a lot to be angry about on the merits. And a lot to be angry about when those problems are excused or dismissed. I can't apologize for that. And I must maintain my original position: I would loathe to work with someone who is this unaware.

Where I do apologize is if my tone carried a righteousness you found alienating, and if my frustrated words denied you the sense of solidarity I would aspire to offer. That's crummy and worth examination.

Thank you for your candor and clarity.
"we only counted users that really tried the app"

...which are the only ones that matter, no? So if only 300 "really" tried the app and 2,201,302 signed up, you obviously only care about the 300 if that's the number you're mentioning.

Why try to sound mightier saying "these figures are very conservative" and "we only counted users that really tried the app"?
Meteor has an oplog-tailing MongoDB driver, implemented here: https://github.com/meteor/meteor/blob/devel/packages/mongo/o...

You could use Meteor as your server, and talk to it over DDP from your frontend C++ app.
When Teachers Need Help in Math
Looks nice, but one recommendation: when you are moving a window, make the drop box cover the window bar as well. Also, the resize bars can cover the window bar to the point that if there is no content you cant click on the name because all you get is the resize action. Lastly, I somehow dropped a window to vertically split another one and it lost all of its content. I tried to resize the bottom border down but it wont move.
At this point I feel I'm missing something as we now have two legal documents going "Nuh uh!" - "Yuh huh!"

FBI's Explanation[1] states (Page 4, Footnote #5) that the admin himself kept logs explaining that there were frequent IP leaks due to misconfiguration of the web server.

At this point aren't we lead to believe that he showed multiple cases of mismanagement. From this can we not call bullshit on the very definitive declaration by the defense that the webserver was explicitly configured to deny external connections?

[1] https://www.scribd.com/doc/238844570/FBI-Explanation-of-Silk-Road-vulnerability
I'm loving all the history of the atomic bomb and related articles, but I'm curious. Is this just a trend on HN right now or is something I'm not aware of going on?