skysight-inc/HackerNews huggingface dataset:
Don't compete on price, per se. Compete on value. Value is related to price, but it's not the same thing. Identify the customer segment(s) you believe you're building for, and that your competitors might not be -- either because they have to go broad, or because they're focused on a segment or two themselves. Then really nail the value prop and solution for the segments you're targeting. You'll probably want to price cheaper than the big guys, but it's not to position yourself as "basically the same thing, but less expensive." Instead, it's to position yourself as the simpler, easier, case-specifically better solution for a certain type of customer.

Patio11 puts it well, as usual. Especially this paragraph:

"Is their product generic? Make yours hyper-specific. Is their product hyper-customized? Make yours the 'It only does 10% of what the other guy does, but it is the right 10%, and it actually works out of the box.'"

The good news is that $1B+ companies usually can't afford to target niches. Their divisions are expected to move the needle for, well, a $1B+ business. This puts enormous pressure on them to develop big, broad solutions that are maybe 75% adequate for as close to 100% of the market as they can reach. This is a strategic vulnerability that strongly favors the smaller player. It's one of the very few advantages a smaller player has in competition with a big player, particularly in the SaaS space.
Fantastic answer!

One thing to add, is that if you have a big market, and they get 90% of it, 5% of it to you, might be enough to be successful. You are worrying too much about their product instead of improving your own.

As Patrick also said, go out and talk to customers. Often you don't need a finished product. What we did, was actually quite different, we talked to a bunch of customers _before_ we began developing the product. We did that for two reasons.

1) Get to know your customers, and learn about their pain points. Try not to fix all their issues, but if you can find a few common issues and fix 80% of their problems, you are in for success.

2) By talking to them you got your first beta testers. Let them in before your are finished (You shouldn't have any errors, but you might lack some features (we didn't have a change password for starters)).

This relationship will make it easier to sell to the customers, because you have listened to their issues, and actually fixed their problems.
White House Pressures States to Reverse Mandatory Ebola Quarantine Orders
A developer who thinks xml is holding them back in anyway is not a very good developer.
> What is the alternative? The author does not propose any.

The author is an academic. He is concerned about writing papers. His solution is to write papers in Word, submit to journals, and let the publisher worry about the final layout.
probably one of the most important things to remember in OP's shoes: 3. Don't piss off anyone at your current company.
That's $30,000 per month. These pods will last 3-5 years, which is $1-$1.8M of S3 storage.

Say you store 3-4 copies of the data on the BackBlaze pods in order to attempt comparable durability, and then the cost comparison comes down to power, space, network, and manpower costs. These costs are extremely variable, so depending on access to these, I could see someone still going with S3. S3 also scales larger and smaller quite quickly, unlike investing in your own equipment.
You shove it up your.. heh. no.

Start with trying the idea. If you can't implement it in whole, implement it in smaller scale first.
"Opportunity?"
They openly admit committing crimes to the press.
No API. Only backups, and you need their client.
I'll add another:

It doesn't matter where you go, until you change, everything will remain the same.

edit: For relevant context: if you're thinking about quitting, your alternatives are 1) give two weeks and leave, for another job or not.

2) stay and say nothing, hope it gets better

3) Risk it. Talk to your boss. Apply for other jobs quietly if you want some security.
Ask HN: How to report/revoke malicious Comodo code signing certificate?
Just came across this page:
http://update-for-pc-1024.com/?dist_id=365&channel=ac_h1gv&v=icrs&c=e7982022e2acb355c97cb18725d4df5e

Which serves 'adobe_flash_setup.exe' which is signed with COMODO Code Signing certificate of OOO "Finans Servis", proezd Serebryakova 6, 129323 Moscow, Russia. It's also found under different names, see http://www.herdprotect.com/adobe_flash_setup.exe-b6e4cc61a87f6633f5ef683be5525f9686475a4f.aspx .

I think this is at least they violate '1.6. Restrictions. Subscriber shall not:
(i) impersonate or misrepresent Subscriber’s affiliation with any entity,' and also '3. Revocation. Comodo may revoke a Certificate if Comodo believes that:
(xi) the Certificate was issued to publishers of malicious software;
(xii) the Certificate may have been used to digitally sign hostile code, including spyware or other malicious software;' - https://www.comodo.com/repository/docs/code-signing-subscriber-agreement.pdf

But how to report such an issue? I cannot find any security related email address on the Comodo website.
Kevin is a genuinely cool person. His offer of assistance and advice is something people should be happy about.

Mattermark went through YC recently with Kevin as CTO.
- AI might be (one of) the tool that make semantic web actually relevant. The reason why I believe google has an important part to play in it.

AI is definitely big, on multiple levels. Even without AGI, the ability of AI/ML techniques to help serve as a bridge to the SemWeb world by, for example, extracting semantic data from unstructured text, is huge. This is why Apache Stanbol excites me so much. I foresee the addition of progressivly better and better enhancement engines for Stanbol, constantly improving the ability to do that structured extraction. This will make the overall Semantic Web vision that much more practical.
Only people who receive an invitation can use Inbox by Gmail, and they can only access Inbox through their personal Gmail account, not through their Google Apps accounts. People who receive an invite to their Google Apps account can forward it and use it on their personal account if they want to.
https://support.google.com/a/answer/6082718
As a beginner semantic web researcher I believe it is very successful. Just came back from an international semantic web conference [1] where a variety of useful, interesting and important things have been presented.

I want to stress that the semantic web will probably always be a more academic field rather than "the next big thing". Similar to the artificial intelligence field or other academic fields that don't always have to lend themselves to "help industry make more money".

Nonetheless lots of our technologies are being used by industry (startups and enterprises). But again, our success doesn't depend on industry adoption. It depends on how useful the things we research about are from a research point of view - which is sometimes more theoretical.

As an example, most semantic web people think RDF is a more useful model than ad hoc data models because we care about generality and serendipitous reuse of data. Industry rather cares more about simple and efficient and fast tools.

All in all I hope some of our findings can be useful to industry and adopted by many startups but I hope we'll always find a niche where we can do things that industry can't afford to do. In a way, semantic web exists as an academic field precisely because it's unexplored by industry. If it were widely used, perhaps we'd never need academic fields as industry would take over. I hope that never happens for the semantic web.

1. http://iswc2014.semanticweb.org/
Sorry but like basically every other scientist's guess about nutrition, this latest guess is anecdotal, with huge assumptions built in, a lack of control subjects, making it, like all fad pop-diet articles spouting the newest half-baked discovery about nutrition, vague bullshit at best.

Also it comes with the huge caveat that it's only true for those in the USA with their poor impulse control and huge portions.

It would be good to apply "Nakedrobot2's law of nutrition articles" which states that they are ALL A BUNCH OF LIES :-)
Ah corrected, thanks!
FWIW I personally don't buy any products or services for my business, that are backed by a one man company. The risk that you may get sick or bored or bought out or hit by a bus, etc. is too high.

If you're not a sales ninja, you'll have to finish building the product, before you get any sales. Contact your competitor competitors, see if they'll be interested in cooperating.
I doubt any of the companies are willing partners in PRISM

AFAICT that was xenadu02's point - that data from Apple et al are being collect by PRISM, but Apple is not a "partner" in the sense that "partner" implies cooperation. If intelligence agencies have to steer clear of management, that's not a partnership, that's espionage.
So, can anyone suggest a safer alternative? Or should I use this as an excuse to pick up a new language?
Are Atheists Really Smarter?
I've done this. It mostly worked - but I had to give up some of my management responsibilities because of my health problems. I'm still gainfully employed but my superiors don't look at me as being the number one player on my team anymore- probably the number two. Another guy who spends all of his time working on weekends and on nights has taken on that role.

It's always a trade off. The organization does what it can get away with. You can pull back to 40 hours but someone else will fill the vacuum that you left behind.

So: I agree. Tell your bosses that they need to better manage client expectations, but recognize that they won't because they think they don't have to (other people are doing the work right? Management's work/life balance is fine!) You might be giving up some upward mobility or your 'irreplacable status' in your team. If you're anything like me, this will be an acceptable price to pay for you to regain some work/life balance and your health.
A decent guide to using perf, with a number of carefully selected use-cases with example commands and outputs.

That said, I have Brendan Gregg's "Systems Performance" on my shelf here edging towards the top of the "needing to be read" stack. His flamegraphs were embarrassingly useful and the few examples his webpages give punch well above their weight. Maybe everything I need is in there.
5 Myths about Crack
The engine looks solid, I loved AOE II growing up as a kid.
also: I can't tell if they're joking when it comes to contributing...
Care to write something about your experiences with Ceph? I was recently looking at something that could be a use case for it, but it is a bit too close to the holy grail of storage for me to feel comfortable. I've toyed with similar systems in the part and they've always been very iffy with their POSIX semantics.
> Rather than vilifying "upper management" and quitting and being bitter about it, can you have a constructive conversation with someone up the chain to help you AND the company out?

While this may theoretically work in some situations and is arguably "worth a shot" for someone with so little to lose, I've seen workplaces similar to the ones the original post is describing and the times I've seen this happen talking things out with management was not fruitful.

In my experience (admittedly anecdotal and a relatively small sample size), in a company that goes sideways as described by OP you have 1-3 levels of manager on top of you who are just as frazzled by the whole situation as you are. They will commiserate, throw their hands in the air and tell you they've tried pushing for changes, realistic release dates and/or hiring more resources and have been denied by levels above them. Talking directly to their managers (VP or perhaps higher at this point) ends up in a pleasant conversation about vague, nebulous reasons why things can't change right now and everyone has to buckle down to help the company toward the brighter future that is right around the corner. They will rarely-to-never give you direct reasons, eg. the company is running out of money and seriously can't afford any extra resources, and the next release is a hail mary attempt to save the business and that's why it needs to be out on date X because the runway is totally gone at X+Y where Y is a laughably small number if you ever actually learn it.
All of the above. I don't like carrying my wallet, but I always have my phone, so being able to use it in place of my wallet is something I want. I love the added security - I shopped at each of the major retailers to have a breach in the last year, and got a new debit card issued each time, which is a huge pain the ass. And, in general, it pushes the industry forward, which is good for everyone. If ApplePay gains traction, so will Google Wallet, and Windows Phone will have the road paved to offer NFC-payments.
A corollary to this: if you want to be a badass entrepreneur, focus on getting lucky.

The people who really strike it rich - the Elon Musks, Larry Pages, Evan Williamses, Marc Andreessens, Steve Jobses, Mark Zuckerburgs, et al - all seem to devote significant thought and attention to figuring out where the opportunities are that are almost ripe for a company to come in and pick them. To an outsider, it looks like they single-handedly changed the course of history, but if you read in-depth biographies or listen to them speak in person and then try to trace through what their thought process might be, there's a lot of attention to paid to what social or technical trends are just on the cusp of developing, and what the implications of them are. Good entrepreneurs realize that they can't do it alone, so they're always looking out for things that lots of people want to have happen, but need a slight catalyst to get things moving.
5 months from my first startup fail. Lessons learned
I work in security for a large financial firm and demo enterprise products like these pretty frequently.

My answer to this would be a simple "no". Obtaining and structuring honeypot logs is not hard, and is basically a solved problem. This falls under the greater umbrella of "threat intelligence", and there are a ton of open source and enterprise solutions for threat intelligence feeds and collection. You would have extremely contentious competition, plus odds are a lot of what you're doing can also be done by an in-house analyst with some Python skills and access to public and private feeds.

Some sort of significant value would have to be added on top of the logs, and no, not just categorizing or grouping or ranking the logs.

If it's still honeypots you're interested in, then a better idea may be to offer an "active defense" honeypot service to get early warning on targeted attackers. This can include things like decoy/trap email accounts, web and network services, documents, and more.

Some startups are in this space, but it's a pretty immature field. It also has a lot of problems because many top managers and execs feel very uncomfortable with the idea. My own company has discussed it before but management has declined due to legal concerns, and also the concern that baiting an attacker may make you more of a target.

But I feel this area may be ripe for disruption. Get a few of the big names doing things like this and it's easy to convince smaller companies in the same vertical to do it as well. Actually, some big names may already be doing it, but if they are they're probably hush-hush about it.

In summary: honeypots sitting open on the Internet offer some interesting intelligence, but the honeypot you run and the honeypot anyone else runs will generate roughly the same intelligence and logs. And a lot of these logs are already converted into network indicators and rolled into hundreds of threat intelligence feeds that many security departments are already consuming. You won't be able to generate a lot of value by running and processing your own personal honeypots, in fact I would consider it a massive waste of time from a product or service perspective (though running one certainly is educational and can be fun).

But a honeypot sitting within an enterprise network/domain can be very useful and very valuable to a company. If you provide such a service, I would recommend it as a software suite set up by the client, definitely not as a cloud service.
The two JITs are completely different. LLVM uses method level inlining, and doesn't do too well with removal of GC malloc calls, or at least it doesn't do this by default.

RPython's JITs however, are tracing jits. They trace from the start, to the end of a loop, and inline all methods along the way, then remove all conditional jumps (replacing them with guards), then remove all unneeded mallocs, and then optimizes everything else it can. The end result is a trace that is highly optimized for that one path through the code. Thus, if your code is highly polymorphic, but only ever uses a certain path through the code, RPython jits can out-perform C++ in some rare cases, and can probably outperform most custom jits in many cases.

Some links to read:

http://en.wikipedia.org/wiki/Tracing_just-in-time_compilatio...

http://morepypy.blogspot.com/2011/08/pypy-is-faster-than-c-a...
"Don't note the irony, you idiot"
This post has moved to http://bamos.github.io/2014/10/26/preventing-passive-voice-l...
It’s tsundere-speak. Only they are young white males.
Preventing passive voice in LaTeX documents
Fish and birds don't use propellers or jets.
http://w3techs.com/technologies/details/en-windows1251/all/a...

Three orders of magnitude more for the de-facto standard. Which is, according to the site, third popular after unicode and latin1.

Of course, it's technically possible to use ISO-8859-5, some misguided software might even default to it. But it's exceedingly rare and doesn't have a point. Even KOI8-R is ten times more widely used.
1. Open the hosts file on your computer
2. Add the website of your competitor with some random IP address
3. Go back to work with your product and talk to your potential customers
I think his point was to only do this temporarily while preparing to leave for another company, whereas in your situation it seems you sought to stay at your current company while maintaining a lighter workload.
I just want to sudo apt-get install it and play it.
Could I ask, is there a "bullying culture" where you are now?

The reason I ask is because that is the only way I could reconcile "The workload is unmanageable and it just never ends." It's hard for people who haven't experienced it to explain why you can't just start saying no to requests and leaving the office on time (even though this is possibly the only way to salvage the situation).
Number one, if you are using Apple products in a high-security environment (e.g. HIPAA compliance) you should enable 2-factor authentication.[1] This will provide good security for data stored in the cloud.

Number two, there is an easy way to prevent data from ever even touching the cloud. Just immediately save the new document to a local non-iCloud folder before you populate it.

In terms of whether defaulting unsaved docs to iCloud is a good/bad design decision:

Defaulting unsaved documents to the cloud means if someone steals your account login and you don't have 2-factor auth enabled, they can access your unsaved docs.

Defaulting unsaved documents to local storage means continuity doesn't work and kills a lot of value of iCloud.

I think it's a good decision.

[1] http://support.apple.com/kb/ht5570
oh haha, there it is!
Steve Jobs on privacy
It's not really about what he knew about actual technology, though. Gibson has said
"And somehow I knew that the notional space behind all of the computer screens would be one single universe."
It has a lot more to do with the idea of an interior and a collective unconscious, that kind of psychological stuff, rather than projecting what technology will do.
With VR actually becoming practical, it feels to me that the idea of spending time in a private one-user VR experience will rapidly become something socially frowned upon and perceived as solipsistic.
React's V and Angular's V aren't entirely compatible, in fact it's be nasty to use them together. Sure it's not a full alternative, but I believe when people are saying React, they are inferring that they will be using Flux with React (Or Backbone, Knockout, etc).

React can be much more than just a view. Even before integrating Flux or a lightweight library, React can be powerful.
Hack together an MVP, share it, iterate iterate iterate, who knows ...
">>> Upper management does not think it's wise to hire more people so they are burning everybody out and people are leaving."

If you see a large number of co-workers, especially good ones leaving. Its a sign something is wrong.

">>> It's time to move on but I am just too burned out."

If you know its time to move on. Leave. If you have savings, pay off your rent and bills for 3-4 months and rest. Take walks(seriously take slow walks and relax), take up a relaxing hobby, cook food (fresh food - no canned food), and get enough sleep (7-8 hours minimum),whilst looking for another job.

I love working hard and I enjoy challenges, but if it means risking your health/social life/family life to meet an unrealistic deadline, this is where I draw the line. I used to work for a big company during summer vacation and the upper management had the exact same attitude your said about hiring people. They wanted a 5 man team to do a 10 man job.Into the second month I was already depressed, hoping for the summer to finish quickly. Since the day I left the place, I told myself I'll never work for a place which has a crappy work/life balance again.

Remember you are replaceable and they know it.
>>It is in everyone's, and especially upper management's, best interest that the company does well.

I think you're attributing a level of rationality and benevolence to upper management that doesn't always (or even often) exist.

It may very well be that the reason they aren't hiring more people is because they want to increase the money that goes into their own pockets. Or maybe they themselves have burned out and become bitter about "disloyal" employees who keep quitting and they don't have any energy left to do something about it.
http://leanstack.io/ -- This also has all tools and useful resources for a startup .. very handy
Even though I generally dislike the man, I gotta say I admire how he handled that. Especially considering how much of a prick the other person was being.

If I had been in the same scenario, eventually I would have responded:

"Are you trying to obtuse or are do you simply lack basic comprehension skills?"
http://play0ad.com, 0 A.D, a free, open-source, cross-platform real-time strategy game. GPL 2+ license for the game engine and the CC-BY-SA for the game art.
Some good points in here; even better is this from Clay Shirky: http://www.shirky.com/writings/ontology_overrated.html
I don't see anything on that page that couldn't be done with, say, InDesign.
I had no idea that LaTeX was popular among philosophers.
Wrote my thesis in IDML, worked surprisingly well, yet Adobe InDesign is a beast of its own. And once you run into more problems you're pretty much on your own.
Show HN: Sourcery – View Website Source and Preview Custom CSS on iOS Devices
Hot off the press: Please view my latest steno coding video, where I transcribe a somewhat longer snippet of Python from the Plover codebase!

http://youtu.be/jRFKZGWrmrM

I'm still just a Python novice, so obviously I didn't write this code originally; I'm just transcribing it from a text file into Vim to demonstrate how easily and fluently code can be written with steno. It's not primarily about speed, but about chunking commands and words into single strokes, as opposed to breaking them down into individual letters and typing each letter out one by one as in qwerty. Also notice how simple error correction is; an incorrect word is deleted with a single stroke.

For more information, visit: http://openstenoproject.org
Carbheads on a downvote crusade again...