skysight-inc/HackerNews huggingface dataset:
Ask HN: Product/Tool suggestion request
A small medical practice has for years (going back to 1988)used written records for their patients. They have a book where they assign a number, add the name and postal address of patient. They then use a card with the assigned number to write the medical stuff (age, symptoms, prognosis, etc). As well, they give the patient a matching (smaller) card for follow up visits.
Patients often misplace their reference cards, and end up being given new files that make no reference to previous files.
To solve this, they had the book records (manually assigned, unique -but with clerical error repetitions and omissions- file numbers; name and P. O. Box addresses) typed into excel, hoping to be able to search in the excel file for multiple repeats by the same patient as well as for when a patient returns without their patient card. There's about 60,000 records in total.
The problem is that excel is not very useful when a search for John Someone yields 22 John Someones from a batch of 60K records. I want to give them a tool that, when they search for John Someone, it brings up all the 22 John Someones, but sorts them,say, in order of date (most recent first), and if the addresses are the same, it can flag records that represent the same patient. That sort of thing.
Can you recommend a tool for this? I've no idea how elastic search works, but reading about it makes me think using it for this would be akin to using a space-ship where a hand-glider (maybe?) might be enough.
That's actually a feature of Rust that I liked the moment I saw it. In particular, the forced '!' suffix makes macros stand out as something that might potentially introduce non-trivial control flow; for instance, the try! macro does an early-return of the containing function on failure. In C, putting control flow in a macro is generally considered poor form; in Rust, it becomes much more sensible precisely because of the macro naming convention.
"Those are toy scores and one should not take them seriously."

People keep saying that about The Shootout, but I don't think so. They reflect the combination of two qualities: the main implementation of the language, and the community around the language. It's way too cynical to say that the results cannot be taken seriously -- they just have to be taken carefully.

For instance, we can see that the Rust community was able to make their runs quite snappy quite easily, even though the implementation isn't even ready yet. That's impressive!
fwiw Visa and MC have both been interested/open in discussions with us and our product is doing exactly that (removing the plastic).
This would really require the underlying package management system support this, and then it's simply a shim from osquery to the package manager to do the actual work. The main problem would probably being making it work across all the disparate systems it's supposed to support.

That said, it would be awesome to query specific package versions, or even individual package file MD5s from an SQL interface to check system exposure when new exploits come down the pipe.
Ask HN: Any recommended end-to-end free cloud storage provider?
With Wuala stop offering free storage, I was looking for some good end-to-end encryption cloud storage, and hopefully either free or some affordable price.
No particular reason - I hadn't decided if I wanted to name and shame them directly (though if you really wanted to find out, there aren't that many food delivery startups in NYC...), and in the absence of intent to name and shame, my default inclination is to not.

The issue was reported a while back, and after convincing them that, no, HTTP auth is a terrible idea, they did switch to HTTPS. This is not an open vulnerability.

Hint: tcas seems to be referring to the same company.
I am working on this product. It really is awesome: the level of excitement among the engineers reminds me of the HP of 15 years ago. And I completely agree with your assessment. Figuring out the right workflow is going to be the cornerstone, not only for our printer but for the future of the industry.
Show HN: Create your own 3D printable phone case
I'd like to try this out but is there a way to install it that's as simple as all of the other Linux software I've ever installed before, and doesn't require installing vagrant, installing virtualbox, downloading an ubuntu image, creating a whole VM (which failed) so I can then make a package I can install? I can usually try these things out without making a whole thing of it.
How the IoT Will Rule Your Workday in 2020
Statically-generated site with client-side customization?
Maybe it's just me but seeing the cartridges in the front of that printer reminds me of why I bought a laser printer and ditched my (HP) inkjet printer. The supply cost for a 3D printer that uses plastic filament is significantly higher than buying the same weight of beaded plastic used in injection molding. I suspect buying HP's cartridges to be the same order of magnitude more expensive. They like the consumables business ... why would they change?
Show HN: Free My Data
Don't forget providing a way for security researchers to report XSS and similar bugs.
Considering the already known issues with CurrentC, where the customer is liable for any type of fraud and they want to connect directly to your bank account, not to mention potential issues with health information, I was already feeling roughly hell no on having anything to do with these guys. Having a data breach in like the first week only makes it look more dangerous.

I know it's just email addresses - this time. Sounds like next time, the hackers might be able to clear out the connected bank account, and you'll bear full liability.
The Drupal Security Team decided to post a PSA today reinforcing the criticality of this bug. Most of the big sites, including all the sites hosted on popular Drupal PaaS services like Acquia Cloud and Pantheon, were updated or otherwise protected promptly when the original vulnerability was released.

Many other sites were patched within hours.

However, there's a long tail of sites still running Drupal <7.32, and all those site's owners should assume, at this point, they've been compromised. As such, this PSA gives instructions for how to avert total disaster.
I don't know why I'm down-voted for the comment above. Relations have certain semantics that are very hard to preserve without RDBMS controlling the data. For example in a relational system a query like this:

`select p0.name, p1.name from processes as p0 join processes as p1 on p1.id = 1 where p0.id = 1;`

Should never produce two different values. This is impossible to guarantee in all cases if data is updated asynchronously by OS.
I did not consider it a good thing, when I had convinced myself and all my opinions to lay at a middle/neutral point where I couldn't select a single one. It made me feel as though I had no sense of self. I studied a bit of Zen with some folks, where I started simplifying every point of view to 'thinking about thinking', or a deconstructionist approach to every conceptual construction. This allowed me to assign a more weighted value to every opinion I could have, so I felt as though I was being somewhat more careful. With this mindset, I still feel as though I am tricking myself, but, I add concepts/values/ideas/understandings/acceptance of understandings much more slowly and less definitively.

Even then, there's the foggy feeling that remains, every thought exists in some context with some assumptions. You can continue to question what assumptions exist that you aren't aware of, and redefine your opinions through that vocabulary instead, and perhaps convince yourself into a point of view you would never consciously switch to given knowledge of the prior, through the trickery of time and language.

Trying to maintain a coherent view of the world assuming the possibility of relativism across all domains is insanity. Trying to function with that mass of unanswerables leading to possibly infinitely descending chains of undefined, fuzzy variables is like hitting a wall of meaningless symbols. It makes doing things in reality trivial. The task of coming to know what you explicitly, continuously define as unknowable is impossible.

In theory, logic is beautiful. But there's stuff that makes logic seem incomplete, when it comes to application. At the trail end of the thought, it still feels like thinking about everything all at once, while knowing nothing.
We did a lot of Drupal work at my last job, and I sent my ex-boss a friendly warning about this when it was first announced, but I don't think he patched all of their Drupal sites. I could be wrong, but I just checked the CHANGELOG.txt on a couple of them, and they're still on 7.27.
Ask HN: How do I save Places data in my app?
Hey all. I am working on the next version of our app for our 250,000 monthly active users. We expect this userbase to grow to millions of people so this issue needs to be solved in a way that is legally and strategically sound.

The app helps people make plans to meet their friends and coordinate the logistics among each other. To make things easier, I would like to present them with places around them (given their interests etc) in the process of making plans.

What I am worried about is relying on google. I can obviously have a backup built later with bing or yahoo, but ultimately I would like to lower the amount of stress and reliance long term on their relationship.

At the same time I would also like to store the places people selected. I can store a google places id, but would I be violating their copyright? I think under DMCA of my users choose a place then it's fair game to store the public domain data - ie the address, but not the photo that google has of the place. Which means that our millions of users will be making a lot of requests to google throughtheir browsers, increasing our reliance on them / bing / yahoo.

Ultimately, I understand that companies negotiate multi year contracts for this stuff, and that I am also somewhat trusting Amazon or other hosting. But I do not believe that they really are in the same space as our app.

So I wanted to ask also about altenatives like OpenStreetMap etc.
I once caught a pair of police officers trying to break into my home through my 2nd story bedroom window (while I was sleeping) in the middle of the day.

I was home and caught them in the act, which was evidently unexpected because one of them nearly fell off my roof when I asked them wtf they were doing.

They claimed they had received a 911 call from my home, despite the fact that I was asleep and was home alone. After searching the home myself looking for a possibly incapacitated relative (with them in toe, despite the fact that I had not granted them access) and finding no-one, they left. I asked around, and this apparently happens very frequently in my area.

If there's a 911 call and it is disconnected, that does sound like grounds to at least attend to the residence. But breaking and entering when there aren't signs anyone is even home? I have a hard time agreeing that this was called for. I now live in an apartment building or I would block my windows from opening wide enough for someone to enter through them.
AeroJet owns pretty much all of the existing NK-33 inventory and a license to manufacture them. The work for integrating the NK-33 into the Antares rocket was actually done by a Ukrainian firm: http://en.wikipedia.org/wiki/Antares_%28rocket%29#Design
Interview with the CEO that's creating a unique and affordable travel experinece
Actually, the White House was hacked two weeks ago. [1] Not much is officially known, some think that the hackers managed to penetrate a lot of their systems (some employees leaked info before the announcement).

[1] http://www.usatoday.com/story/theoval/2014/10/29/white-house...
I presume most of the bigger Drupal sites are run by teams that care about security enough to follow security lists closely and have release management in place that would allow hotfixing within hours, if not minutes, of a critical vulnerability being announced.
Lightweight DBMS guides Linux-based cow feeding robot
Common Interview Mistakes Even the Biggest Companies Make
This comment is very true, but I would like to add that if the public Universities have quite a bad reputation for the first two or three years, the level of the Msc (in France it's 5 years of University) is decent, and still free.
Is there any reason to think that a plain configure/make won't work? I think they're just explaining it via vagrant VM due to the monoculture.

edit: reading the source, I may be totally wrong about this.

edit2: https://github.com/facebook/osquery/wiki/building-the-code
I was not suggesting that liberal arts degrees are worthless, I have one. It's been extremely valuable. What I mean is: part of liberal arts education, especially at the most liberal artsy institutions (University of Chicago, Swarthmore, Reed, etc) is specifically training you the tools of an academic discipline. In its highest aims, the new university pitched in the article aims to keep the best of the liberal arts education (teaching you good thinking) and throw out the rot (teaching you a specific academic discipline).
It depends on the complexity of the attack. This Drupal one took our team less than an hour to have a working proof of concept (just based on the diffs).

The exploit is very simple, and doesn't require any interaction with the remote site. Explaining why they started on it very fast.

On other more complex exploits, we generally see days (if not weeks), before the attacks start.
No ads. I live in a country with barely any ads targeted at it (only 1M people live here) - so I usually get none. It loaded up so incredibly fast that it must have been cached and stored on the server.
If I'm using something like Composer to manage dependencies, should I be running an update every week on every past website I've created? I feel like having this run as a cron job would be a bad idea.

If I'm not, is there a way to be notified about critical patches? Should I be signed up for a mailing list for every Github project I've incorporated?

Where I work, it seems like the standard practice is to finish the project, deploy it, and let it sit until the client requests any changes.
Very slick.

I would definitely use this if I had a need for it beyond changing the default notifications on my phone/desktop.

One suggestion, I think the those little 'devices' are the perfect way to demonstrate why I would want this, but it wasn't immediately obvious to me that they were interactive at all.

A unique color or subtle animation for the play buttons to make them eye-catching might be worthwhile since clicking was definitely a revelation.
I don't know what they are afraid of. Can you imagine how shaky a movie recording would look from someone wearing google glass? No one would watch or download that. I'd assume you'd need a tripod to get anything watchable.

I wonder how long it will be until you need to give fingerprint/iris scans just to watch a movie?
I think it's prudent to reinforce that macros in Rust are currently very wobbly. It would be an epic folly to stabilize them anytime soon, which means that any forthcoming stable Rust 1.0 release won't feature user-defined macros (stdlib macros like `println!` and `regex!` et al will still be available in 1.0, because only their interface needs to be stabilized, not their definition mechanisms). You'll have to stick to the nightly releases if you want to define your syntax extensions and such, at least until we straighten out this towering pile of hacks.

That said, we're looking at interim ways of providing some sort of relief for people who want to metaprogram in Rust 1.0. There aren't any concrete plans yet, but we love the idea of user-defined macros and we're not going to leave people out in the cold if we can help it.

(And perhaps you're wondering why we don't delay Rust 1.0 until macros are ready? Because the rest of the language works (or very soon will work) just swimmingly, and it doesn't make sense to deny stability from people who can live without macros (whose definition mechanisms can be introduced without breaking backwards compatibility). Rust 1.0 will be only the beginning of a gradual transition towards ecosystem stability, not a sudden leap.)
Sphinx and Pyramid Twin Peaks on Mars? A Sphinx Revisited
I wouldn't say that's okay.

If they want to actually deliver some pizza, perhaps. But the standards of deception should be very high for law enforcement.
Sure, but it's hard to induce significant current in devices more than a few cm away. Considering we can't wirelessly power phones in a room, getting the phone to wirelessly power a wearable seems unlikely.
You still have server-level vulnerabilities to contend with. It might be a simpler task to maintain server-layer security and not have to worry as much about application-layer, but security is still something that needs to be dealt with, if you have a server that is powered on and connected to a network.
Neat. The license terms make it difficult/impossible to use for something created by a business, or other kind of team, rather than a single individual:

> The maximum number of users of this sound effects library is limited to ONE. It is unlawful to distribute any of the audio files to ANY ADDITIONAL USERS. This license allows ONE individual...

So... if a company (or university department, or non-profit entity, or small volunteer team) wants to use it, they need a license for... every employee that has access to the source code repo? And another one for every new hire? Or...?
GREAT TIPS FOR SALESFORCE USE #1
Destroy All Software Talks – “Wat” (2012)
Hmm, okay, I guess it could be just one scan.

But unrelated, the steps you quote: gawd dahyum. I'd rather stand behind the old lady writing a check, as mentioned by another commenter. Thing is, retailers have mostly solved the check-writing problem (but they still can't make Mr. OldSkool fill out everything but the amount before he gets to the front of the line). No more "I need check approval on aisle 3", no more 3 pieces of ID, just scan it and stick it in the drawer. It sounds like there's a strong possibility that they're bringing us back to the time when those behind get to roll their eyes and sigh as we all wait for the person at the front because "oh, gawd, they're using that thing".
Are your passwords similar in the first few chars? ex:

thisismypassword12345
thisismypassword54321

I've heard of password hash issues (amazon had this problem) where they only used the first 8 chars of a password when generating the hash that they stored.
>Figuring out the right workflow is going to be the cornerstone

Rule 1. There is more than one workflow.
Ubuntu and Centos are both Linux distributions.
Codejury » Continuations in Haskell
Interesting. I studied low at Harvard for two years in the middle 80s. Around 75% of my colleagues were from "yacht club" families. Maybe the things have changed since.
Jimmy Fallon and Will.i.am EW Parody. Pop Culture. Wtf
"How you doing" ,"Hello Beautiful" these are not harassment.
RDP Replay
Ask HN: Formula to calculate how much is your equity worth during an exit?
What is a generic formula to calculate how much is your stock option worth when the company is acquired?

How much is the equity worth on the following scenarios?

Scenario #1 (everyone is fully vested)

- Your equity is 1% with $0.10/share strike price (common stock)
- Investors own 20% with $20M invested (preferred stock)
- Founders own 70% (founder stock)
- Employee own 9% (common stock)
- The company is acquired for $30M.

Scenario #2 (everyone is fully vested)

- Everything is same as above except the company is acuired for $50M

Scenario #3 (everyone is fully vested)

- Everything is same as above except the company is acuired for $100M

Let me know if I am missing other data.
It would definitely be a bad idea to run Composer update via cron because unless you know for sure that future versions of packages won't break any functionality you built on top of them, your website could stop working (or worse start working in unexpected ways) without your knowledge.

Maintain a staging environment (even in a temporary virtual machine if necessary) and run your updates in that environment first, then check it, and then deploy to production once you've confirmed everything is ok.
Did you attend a liberal arts college? Because regurgitating the professor isn't at all what happened at the one I attended. Every student was required to do independent research.

As for whether learning critical thinking in the liberal arts is a direct or indirect result, I like this quote from Reed College's dean of the faculty Peter Steinberger:

"There’s only one thing that I think I can do, only one thing I’m qualified to do, and that’s help students learn how to think, to analyze, to develop intellectual discipline, to acquire a degree of mastery over one or another conceptual apparatus that helps us organize experience in compelling and defensible ways." [1]

He is not alone among teachers of the liberal arts in believing that while they are compelled by their individual disciplines, they are ultimately teaching students to think.

1. http://www.reed.edu/reed_magazine/sallyportal/posts/2014/an-...
With the provisioning flexibility I wonder if these are internal or external? If internal, seems like they eat a lot of cost if they are never provisioned. If external, how do they keep them as fast as local?
"This is a lot worse than Heartbleed, Poodle and others."

There are many security vulnerabilities that have permitted full machine takeovers in an automated fashion for a long time now. Generally speaking though such attacks only work against very small fractions of the Internet, and, no matter how big Drupal may be in absolute terms, in relative terms, it is not that large. Heartbleed was so bad because it was so widespread. So many things use OpenSSL. That you could lose private keys was just icing on the cake; the arbitrary memory read was bad enough on its own, and the difficulty of detecting it also factored into its high rating. So, yes, I'd still rate Heartbleed far, far above this. Or the Ruby YAML attack.

(POODLE was by contrast well-named; annoying, yappy, ultimately not significant enough to warrant its own entry in the Great Security Vulnerability list. Enough to worry about and mitigate and it if helps bury SSLv3, hey, great, but not a thing for universal panic the way Heartbleed or Shellshock were.)
Consider any undercover operation - they're always pretending to be a 'pizza man' of some kind.

The rules are in place to prevent entrapment, which is the solicitation of an illegal act. Cutting off your power - while mean and objectionable, doesn't seem to be covered under entrapment.
Are You as Busy as You Think?
> just more grandstanding by Sarkeesian.

Care to expand on what you meant to imply, then?
Hacking the Hill: Can tech entrepreneurs game Washington?
Someone should make an ORM wrapper. Perhaps with one of those trendy fluent APIs, so you can just pipe the output from one command as input to the next.
How I built a community around my product
I think users of reddit still approach it like it is composed of outsiders (even though it isn't). For example plenty of people I know use the site but people don't talk about it like they would twitter. Using twitter is a sort of normal social network. Reddit is treated far more analogously to a tv show that some people like and others don't.

Of course I can't really back this up with anything as it is just a feeling.
As someone on the job market right now I can say skills is all that companies seem to care about at all.
I'm sure there are also indexers out there who catalogue known Drupal/Wordpress/RoR/etc sites in anticipation of quickly hitting them with an exploit once a new one is released.
Yes, he obviously is. This thread is a nice case study for why CS students should have to take gen-ed classes that require close reading and analysis.