skysight-inc/HackerNews huggingface dataset:
marpaia, Did you consider using OpenTSDB?

At CloudHelix, we did a Postgres FDW to OpenTSDB, which gives a time dimension as well.

That was an issue at Akamai - how to get historic as well as realtime with Akamai's Query system ([WARNING: PDF direct download] http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd...)

Interesting stuff though! Maybe a FDW could connect Postgres to osquery, which could allow joining with local tables or other FDW-accessible data.

The FDW approach to OpenTSDB looks like:

select to_timestamp(atime::float), value, hstore(regexp_split_to_array(tags, ',')) as hs from chf_realtime where i_start_time >= now() - interval'1 min' and agg = 'sum' and metric = 'df.bytes.percentused' and tags = 'host=*,mount=/|/data|/ssd' ;
to_timestamp | value | hs
------------------------+-------+---------------------------------------------------------
2014-10-30 01:15:33+00 | 84 | "host"=>"XY4.iad1", "mount"=>"/", "fstype"=>"xfs"
2014-10-30 01:16:33+00 | 84 | "host"=>"XY4.iad1", "mount"=>"/", "fstype"=>"xfs"
2014-10-30 01:15:33+00 | 9 | "host"=>"XY.iad1", "mount"=>"/data", "fstype"=>"btrfs"
2014-10-30 01:16:33+00 | 9 | "host"=>"XY.iad1", "mount"=>"/data", "fstype"=>"btrfs"
2014-10-30 01:15:33+00 | 49 | "host"=>"XY.iad1", "mount"=>"/ssd", "fstype"=>"btrfs"
2014-10-30 01:16:33+00 | 49 | "host"=>"XY.iad1", "mount"=>"/ssd", "fstype"=>"btrfs"
2014-10-30 01:14:55+00 | 63 | "host"=>"XY.iad1", "mount"=>"/", "fstype"=>"xfs"
2014-10-30 01:15:55+00 | 63 | "host"=>"XY.iad1", "mount"=>"/", "fstype"=>"xfs"
2014-10-30 01:14:55+00 | 1 | "host"=>"XY.iad1", "mount"=>"/data", "fstype"=>"btrfs"
2014-10-30 01:15:55+00 | 21 | "host"=>"XY.iad1", "mount"=>"/ssd", "fstype"=>"xfs"
2014-10-30 01:14:55+00 | 21 | "host"=>"XY.iad1", "mount"=>"/ssd", "fstype"=>"xfs"
2014-10-30 01:15:50+00 | 63 | "host"=>"XY.iad1", "mount"=>"/", "fstype"=>"xfs"
2014-10-30 01:15:50+00 | 8 | "host"=>"XY.iad1", "mount"=>"/ssd", "fstype"=>"btrfs"
2014-10-30 01:14:56+00 | 89 | "host"=>"XY.iad1", "mount"=>"/", "fstype"=>"xfs"
2014-10-30 01:15:56+00 | 89 | "host"=>"XY.iad1", "mount"=>"/", "fstype"=>"xfs"
2014-10-30 01:14:56+00 | 55 | "host"=>"XY.iad1", "mount"=>"/ssd", "fstype"=>"xfs"
2014-10-30 01:15:56+00 | 55 | "host"=>"XY.iad1", "mount"=>"/ssd", "fstype"=>"xfs"
(17 rows)
Because it's easy to see the shortcomings of something, and hard to see the potential, especially the potential for sea-change products.

If it was easy to create or see the potential of universe denting products, then everyone would do it. But it's hard.

This is so common, not just amoung the HN crowd, that the proverbial phrase "missing the forest for the trees" exists to describe it.

Of course, we could just also say "No wireless. Less space than a Nomad. Lame."
Failure during production is bad. Failure in design/testing is fine, that's when you can correct it most readily. Not all failures are equal.
An In-Depth Look into Malicious Browser Extensions
I did. I interpreted the parent as saying he was interested in doing technical rope stuff, which was a reasonable interpretation, given the content of the article. I don't think most penetration testing guys have those skills, which is why I discussed fields where you can acquire/use them. Any clearer?
Great, so now we can have SQL Injection at the OS level.

/sarcasm/
The Hackaday Prize: Interview with a ChipWhisperer
> Any way Sprout looks very interesting and promising.

Interesting, I agree completely. Promising? I dunno about that. Given the price, I'd be afraid to buy it, given the high likelihood that HP forgets it exists in 6 months. Unique hardware like this requires serious development effort to utilize it properly, and if this doesn't get traction—and at almost $2,000, I think it's unlikely to get any traction—then nobody's going to bother writing that software. It's a chicken-and-egg problem; without sales, there won't be much custom software, and without that custom software, there's no reason for most to buy it.
Yes, you're right - that is unnecessary. I only really wrote it like that to make it clear that you could digitize documents that didn't start out as a digital file.
Wow. "Nescafe Ambassador". (so that's what "amb" stands for in the URL)

And that page you linked is so well done in styling it for the Japanese female audience.
My 2c for internal / enterprise tools:

- Foundation ceases to be an option since they drop IE8 support in Foundation 3, far too soon IMHO
- Various jQuery UI-based frameworks out there (e.g. Kendo UI) has good Bootstrap theme support
I feel like Apple does a good job of describing WHY you'd buy a product of theirs. This doesn't do that.
I get the impression that that is not actually his name. ;)

I believe this is his twitter account: https://twitter.com/SgtHowardPayne
Well this is exactly how I managed to get a lot of free food and cruft back in the days when I was an undergrad at MIT. There was a mailing list for this stuff called Reuse, but rather than subscribe to the mailing list (whose servers were slow), I subscribed instead to the Zephyr class of the corresponding discuss archive and pulled the message out of the archive -- often 30-60 seconds before the e-mails would show up in peoples' inboxes. Too bad it doesn't work anymore after they switched to Mailman and killed the discuss archive.
I think Bootstrap had the benefit of being called Twitter Bootstrap during the early part of its life. That alone brought a ton of initial interest and it just continued to build from there.
Taking risks is good in testing/design, but not a great idea for a production rocket. You want to find all the failure points during the design phase instead of blowing up expensive payloads.
The security guards were brutal at Intel in the 80's. You had to sign a waiver that gave Intel permission to keep anything you were carrying on your way out. They did it too (confiscate things they felt shouldn't leave the building). Most people were smart and just left everything at the desk.

That said, these days with phones and laptops being nearly attached to the wrists of folks it would be a very hard policy to enforce. Google's solution was conference rooms that were outside the security perimeter and had bathrooms outside the security perimeter as well. That worked pretty well and would have defeated this particular attack.
Frida 1.6.5 is out: inject JavaScript into iOS 8 apps
Really? Insured by who, and to pay out under what circumstances? What if every coin disappeared tomorrow?
Lock your doors, try to get into your house, fix the security issues, try to get in again.

Buy a safe, try to unlock it without the key, buy a better safe, try to get in.

If you're especially lazy, put an ad on craigslist looking to hire janitors, take the resumes, put your name on it, and apply for real janitorial jobs.
Ahhh, that explains it. Thanks for the detective work.
A 70m rope (depending on the building) should manage 7 floors with a double strand (only just, and you'd want to use some webbing to anchor to the edge). The fact that he mentions a tibloc indicates he was rapping on a single strand though as that device would not handle a double strand ascension. I doubt I'd be comfortable anchoring to an AC unit though. Also, really, don't try this at home. There are lots of non-obvious hazards here. For instance, climbing ropes are incredibly strong and in practice, just don't break, unless, oh, say, they are weighted over a sharp edge like the corner of a building. And no, do not try the "shake the (insecure) knot free" technique, really. Rappelling is (statistically) very dangerous as it is one of the few situations in climbing where you are trusting your life to a single point of failure (redundancy is good! and is probably responsible for more deaths than climbing falls are [1]

[1]: http://publications.americanalpineclub.org/search/solr?all=R...
god damn you augusta
It depends on your market. I've worked on apps that have never even seen a visitor using internet explorer at all. This happens all the time in b2c software. So that analogy of leaving money on the table is not very realistic.
Also known as lithobraking.
What about environments with both Windows and Linux? (and OSX, and BSD, and what not).

I think a lot of people/companies have some of these. Even if you're 90% Linux for example, and 10% Windows, its nice to have a tool that works across the board.

Since this also seems to be targeted at laptops however, I bet Windows is still a large percentage there!
Seconded.

Paths as array is a much better way than escape codes. That would save people a lot of time in explaining and understanding, especially if this is going to be standardized.
Hey Team Instrumentl, I'm Dan, one of the founders of Stempaks. We were really really lucky and somehow got an interview for this batch.

Our company is also focused on STEM ... and I'd really love to chat with you guys. daniel@stempaks.com
Wow, this makes me wish HP didn't make shit hardware.
Flash Pack Exploit Leads to New Family of Malware
Wow...there are some amazing companies out there. Kudos to those who got the interview, but for those who didn't, don't give up!

My team (www.stempaks.com) was really fortunate enough to get an interview. But like rgbrgb said, our goal isn't to get into YC; it's to create a good product that people will want.
Is this a real thing, or is this whole site just sort of autistic ramblings of a wannabe spy? I guess I'm inclined to believe the story only because it's not particularly exciting as fiction.
MIG author here. First, congrats to Mike Arpaia for shipping! That must have been a busy couple of months :)

There is a number of conceptual differences between MIG, GRR and OSquery. MIG does not retrieve data from endpoints, but instead focuses on answering yes/no questions.

For example: find hosts that have a file in /var/www that contains the regex '12345'. MIG will run the search on all endpoints and return the location of files and hosts that match. But it won't return the files themselves. Privacy is preserved, but investigators need to manually retrieve files if needed. MIG takes this approach to keep the search very fast (parallel AMQP runs in seconds across thousands of endpoints). Retrieving data at large scale is too expensive for Mozilla (bandwidth, storage, execution time), and we like to protect privacy.

I really like the SQL approach taken by osquery. I brainstormed something similar last year [1] but did not get around to it yet. SQL is very natural to use for a lot of IT/Security people, and it's great to be able to transfer that knowledge to search tools.

GRR and OSquery are awesome tools. And I can tell their authors are solving some really hard problems. We're competing a bit, but it's OK to have multiple tools with varying goals. And it's great for borrowing each other's good ideas ;)

[1] http://4u.1nw.eu/Presentation_workweek_20130916.pdf slides 10 & 11
JSON data is not always stored as texts.
I proposed this feature a few months ago. I am not sure if anyone is working on it though.

http://www.postgresql.org/message-id/CACu89FSYikxdUj+J01BoAv...
Then dive right in!

https://sites.google.com/site/markcasida/dft
It's interesting to me that people expect that people expect Bootstrap and friends to grow to large scale projects. As implied by the name, Bootstrap's great for getting your new project off the ground. Once you're up and running though, you should have the time (and/or the team) to take care of things in-house.
Terraform Mars for the same cost as mitigating climate change
Thereby forestalling the inevitable increase to the total number of bugs in the world.
From what I can see, what you talk about here is more the wishy washy magic the PR companies use to fool the masses.

How does Sprout do great OCR or facilitate joint collaborations?

These are both problems that need solving but have nothing to do with Sprout. PR often has things like this ‘solved’ for their mockups which people then falsely associate with the product.

See the mass delusion many people have with the Minority Report interface.

Why not just edit the email/document using a keyboard, you can even do it in a google doc so the other person can live collaborate, but as we know live collaboration is fine in movies but in real life is very very hard to do. Humans are just not build for it.

This isn’t about applications or Sprout, it’s about solving very hard problems.
It doesn't have to be a SEC-specific thing. We can make it a general service - it publishes a public key + "release time" well in advance, then publish the public key at the exact "release time". This allows anyone to release information on the exact specified time.

Sort of like GPS - maintained by one party, useful for the whole world - but much simpler to implement.
Yeah, but it knows the global "window" object. That's enough for it to keep track of stuff. Let the browser correlate that global object with an actual UI window/tab.
A hypothetical extension-less mode isn't a bad idea. Unfortunately, it doesn't exist.

An XSS attack in an unrelated part of the webpage can escalate. If someone hijacks the session key of an admin, they get access to the admin panel. That access may or may not let them further escalate their privileges. If they manage to break into the box that serves the JS for the key generation page, then they can alter the JS however they want, including so subtly that no one will notice it's broken. Think this is unlikely? Privilege escalation attacks like this happen all the time. Again, the potential payout for a successful heist is in the range of millions, and due to bitcoin mixers, they're less likely to be caught.

Also, I bet at least one person reading this has the "Cloud To Butt" extension installed. It's not only untrained users who install that sort of thing.
Any idea what is going on in this LinkedIn web form?
It sounds less nuts than imagining the guy with a cool t-shirt design to know anything about running a mail-order distribution business (i.e. Kickstarter).
Fair enough. I was responding to commenters that I felt were being glibly dismissive of the ACA. I am a strong supporter of it for a number of reasons.
maybe, but I think its something that goes with the territory, every pentester I know is borderline obsessive about their bags.
I hope this doesn't make me sound like a hipster, but I can't remember the last time I saw a wheel.
Because you may not want to serialise your data.
Because the order of a json dictionary key is undefined.
Ask HN: How can I transition from Founder to Employee?
Hi everyone,
Long time lurker first time poster.
I have worked in a founding capacity for a few startups but I feel it would do me tremendous good to work for someone else to learn the ropes and get some good mentorship. Unfortunately, I feel that most large traditional companies and even many smaller/startup ones have viewed me as somewhat of a flight risk. Has anyone experienced such a transition and is there any advice or insight you might have for someone in my situation?

Thanks!
Thanks for the suggestions. I've already dabbled into lockpicking as a hobby. I honestly have no idea what you are talking about with the last sentence though. Are you making a joke about the likeliness of making a career in pentesting? Or is this a way of describing how to infiltrate a building by running a long-con as one of their janitorial staff...
As the creator of a static export module for Drupal, and a maintainer of another, I agree that in the end if it's not built into the core, it's not going to have much long-term viability. That said, D8 is built on services, which makes an interface for static export available basically out of the box.
Free Download iOS 8.1 Games
The culture of faith
Two thoughts:

1. Your nearest definition of consciousness "emergent properties of lower level functions" or something along those lines doesn't really cut it, either. To say that something is an emergent property of another thing, without showing the steps of that emergence is kind of like defining red as "an emergent property of the sun and a sheet of cellophane". It's HOW it emerges that's the hard question.

2. If you were pleased to hear another person's discovery that "my experience of experiencing is irrefutable", you might like to read Descartes's account from over 400 years ago in his Discourse on Method.

He veered off into some strange and tenuous territory, but the opening of that book is excellent and it uses that discovery (a.k.a. the Cogito - I think, therefore I am) as the first axiom from which to build a whole philosophical system, and it's a really interesting read.

This is the guy who invented algebraic geometry, from which we get the Cartesian plane, and the idea of ordered pairs, which is such a fundamentally useful idea that it's hard to see just how brilliant a discovery it was. He had some things to say about consciousness that have not yet been improved upon.

EDITED to say that the book I was talking about was Descartes's Meditations on First Philosophy, for anyone interested. He decides, "let's doubt that anything at all exists, just doubt everything - where does that take us?"
You'd be surprised, most "gamers" I know can't tell you what a graphics card is. There are a lot more "gamers" than those on HN and reddit.

I know three guys at my work, all software developers, who play SC2 daily on their mac minis.
as far as I understand it, shredding hiearchical documents into a relationa store is optional feature of Oracle XMLDB

http://www.oracle.com/technetwork/database-features/xmldb/xm...

It is called XMLDB structured storage (vs binary storage, that one actual stores the hierarchical XML naitively)

The XMLDB structured storage I think has been available since 2003 (but I might be wrong there).

Oracle's XMLDB structure requires XSD declaration. Within that declaration XMLDB can use 'hints' to indicate if a given set of attributes across documents is related. And if yes, it will shred the docs in a way that the related attributes will be co-joined.

The advantage, as the author of ToroDB noted below is
a) space saving
b) ability to use relational joins that are using disk-optimized access strategies.

The disadvantage (at least in Oracle XMLDB structured option) -- is the need for declaration of the model ahead of time, and joins for deeply/complex structured documents.

It looks like ToroDB 'senses' the model of each document on the way in. I think there are definetely use cases for this approach, that tolerate the trade off between ingestion speed and storage control.
Plus using a relational engine underneath allows for ACID properties (eg multi-object rollback/commmits) -- which native mongo does not provide.
FWIW - we're gathering issues / improvements at: https://github.com/json-patch/json-patch2/issues
Microsoft outs Band fitness wearable in Apple App store screenshots
You really going to try to bring in the guy who said that small tablets and large phones were a non-starter? Today? Without irony?
It's their platform. They can run it however they want, short of doing something illegal. Why is this still surprising?
Surely supporting "increment"/"decrement" would break idempotency?
Power Your Apple Wireless Keyboard with USB
JSON Pointer is a pretty nasty. How can a sane person decide to escape "~" and "/" with "~0" and "~1"?!
I find those years reasonably believable, but where did they come from?
Look into how far they are already, and the relationships they have already formed with manufacturers.

It's pretty much a sure bet that this is going to ship.

Now, whether there is enough interest to keep it alive is another thing altogether.
David Carney http://www.dvgmusic.com/

John Hughes http://twune.com/

Symphony of Spectres http://www.symphonyofspecters.com/

These guys have all worked on my own and some of my friends' games too.
By the way, FreeDOS and MS-DOS use 100% of the CPU when running on a VirtualBox virtual machine [1].

[1]: http://www.freedos.org/wiki/index.php/VirtualBox_-_Chapter_7
I would love a modular tablet. And I've love for them to eventually allow modules to swap with everything, like tvs and professional cameras and laptops.
Guide to Longer Living Through Science
After the spreadsheets were going full steam you often heard or read how people scoffed at why anyone would want to play games on a business machine. Most people played on their Atari or Commodore consoles not on an expensive "IBM Compatible PC".
Very interesting approach. One question I have is around the licensing. I see that it's licensed using AGPLv3. I would think that would require any code that connects to it to be open source. Am I reading that right? If so, then I am guessing that there will be a commercial offering w/o the restrictions?

Thanks
Why do you need a calculator when you swipe down when you already have a calculator when you swipe up?
Kdbus implementation added to Linux kernel
Yeah, better get some good insurance for when that person goes postal ...
The Salesforce $1M Hackathon Experience
Because it's by its nature arbitrary. After all of these years (I've been developing since iPhone OS 3), they still have problems managing developer expectations.

Even if Apple is predictably bad about this, each instance of them bringing the hammer down is still a surprise, because that's the nature of the problem.
The new etcd raft implementation is working well and has a solid set of deterministic tests. We recently released an alpha of etcd that utilizes this improved raft implementation: https://github.com/coreos/etcd/releases.

The core raft state machine comes in under 600 LOC last time I checked and the docs are here: https://godoc.org/github.com/coreos/etcd/raft. There are a few non-etcd projects that have started working with it, most notably the cockroachdb folks have started to use it to implement the "multi-raft" that they need for their DB. You can find the discussion and work on github.com/cockroachdb.

It turns out getting a raft implementation that is easy to audit with a copy of the paper in hand and easy to test in a fast and consistent way requires a significant engineering effort. I hope that based on the lessons learned from goraft that this implementation is something that a number of Go projects can use and leverage. Particularly since we carefully separated the WAL, RPC and state machine from each other.
The guy who built the company with the largest market cap in the US and the phone I am using today and is still my favorite gadget, yes.

Who he is is of little relevance here, by the way. I am not appealing to his authority. I'm simply citing the most prolific source of this mindset I know of to make the concept I am talking about clearer.
I think your interpretation is flawed; I thought you were trolling to be honest.(or are you still?)

If you're describing your dream-job as 'repelling off of buildings' why would you mention your pen-testing experience?
Or simple "gear whoring". Working in lucrative tech can allow for expensive toys, and the personality type of a tech pro as a tool maker/builder crosses over to other hobbies/interests. See also http://www.militarymorons.com/ which I believe is primarily self funded.
I think the janitor bit is for real: go for the long-con.
Here's the link to bookmark: http://thespanishsite.com/dictionary
As a Hipster CEO owner, I think this is perfect!
Its really funny to read all the criticism against ara over the last year. People keep saying X is impossible. Y will never happen. They are not going to be able to do Z, and this will thwart the whole project.

And yet that ATAP group working on ara has ploughed through X, Y, and Z; and they keep going.

The real question is: what will consumers do?

I think most consumers are going to turn up their noses to this. But if there is just enough of a community to motivate hardware makers.... then its going to be f'ing awesome.
Hmn, no, not really. there is no underlying datastore for the data that you query. it's all generated on the fly.
WebGL Ghost Map