skysight-inc/HackerNews huggingface dataset:
> Verify the ROMs integrity in that first stage (...) need open firmware or some mechanism to hash the ROM that is installed, you need to have a means to read it in its entirety"

Does such a mechanism exist? If you can do this[1] from BIOS, why is it safe to assume that the same can't be done for the dump-bios-image routine? AFAIK the BIOS handles this in real-mode [2] (overrides the OS), and "returns" the image by copying it somewhere in low memory. So, you're trusting the BIOS that it's copied the right data out for you. (goodguybios)

> I say open firmware because you need to be able to guarantee the FBI couldn't embed a backdoor firmware.

This reminds me of this NSA RAID controller rootkit for Dell Poweredge Servers [3]. Nuts. Every closed firmware on your servers is a potential hiding place to someone with (soldering-iron-to-the-motherboard) physical access.

In our Dread Pirate use case, you don't even have to think that far as you can't ensure your own BIOS. Who are you going to buy TPM servers [4] from, when you're defending against the FBI? Intel? HP?

The Rootkit wikipedia page is alarming, to say the least. [5]

--

[1] A Real SMM Rootkit: Reversing and Hooking BIOS SMI Handlers http://phrack.org/issues/66/11.html#article

[2] http://en.wikipedia.org/wiki/Real_mode

[3] http://resources.infosecinstitute.com/nsa-bios-backdoor-god-...

[4] http://en.wikipedia.org/wiki/Trusted_Platform_Module

[5] http://en.wikipedia.org/wiki/Rootkit#Bootkits ("Bootkits??")

[6] https://www.blackhat.com/presentations/bh-usa-07/Heasman/Pre...
Are the comments you're quoting really hate speech? They seem to not be, and they are pretty mild as far as internet misogyny and racism go, no doubt because of where the posters came from.

Speaking generally, this is more evidence that anonymous internet communities that prioritize short messages converge towards /b/, which is to say, trolling and pornography. What was unusual was seeing an anonymous and less-so comment platform interact. I found the anonymous scrutinizing of one particular user's behavior and the calls for his ban discomforting.
Finding friend it is! Thx for all the help!

(Can't ride anyway before April due to SWEDISH WINTER)
There is a concept of prosecutorial discretion, and the current administration is not shy at all of using it.
Sometimes, it’s just time to go home
Just wait until cross-channel attribution (particularly dynamic attribution vs. fixed model which is more commonly available) really takes off. CPA-based buys are going to come under a LOT more scrutiny when Joe Advertiser suddenly realizes that his retargeting campaign didn't actually add a ton of value to the path for the vast majority of his conversions, especially if he's giving <gasp> 100% credit to view-throughs.
You satirically quoted an imaginary job posting and Secret Service showed up? That sucks, I guess we need to close down Duffel Blog and The Onion then.
Where’ve you been? Your smartphone’s Wi-Fi is telling everyone
This sounded like a good idea until I signed up and saw the service costs $30 to ship a book! Not quite sure its worth it yet.
Rules of Communicating at GitHub
In this series there have been a lot of lectures that really resonated with me, while others didn't for various reasons. I don't think you can find out without at least partially watching them.
AtScript makes decent sense in that it's ES6 plus other things they want to land in ES7. JavaScript is here to stay, they have to support it. Dart is also here to stay. It will be the answer to structured (typed) web apps and its server-side story is great and getting better by the day.
Expand your worldview:

https://en.wikipedia.org/wiki/The_Worst_Jobs_in_History

https://en.wikipedia.org/wiki/Dirty_Jobs
SEGA / Three Rings Design - San Francisco, Madison, and Philadelphia

We are looking for engineers with mobile experience to work our new slate of games currently in development.

==Responsibilities==

Ownership of server components and client-side game features
Contribution to game design, reusable code projects

==Skills & Requirements==

2-4 years professional experience
Experience shipping games on iOS and Android
A broad understanding of major game systems – graphics, client/server, physics, etc.
Knowledge of Java, C# or similar languages
Familiarity with Unix environments and SQL (MySQL, Postgres)
Knowledge of good software engineering practices and a willingness to learn
A solid academic background, not necessarily in Software Engineering

==Bonus Points==

Experience with mobile 3D Graphics
Experience in Unity

==About Three Rings Design, Inc.==

Three Rings has expertise in MMO development and mobile games. We work in small teams of 5-8 engineers to make amazing things. We encourage autonomy and personal ownership.

We are a studio in the SEGA family, whose strong backing and commitment to quality allows us to continue to create innovative and exciting online and mobile games. We believe that good work gets done as part of a balanced life. We encourage new ideas and creativity. Our office is a fun, friendly place, complete with a fully stocked kitchen, a steampunk submarine and other geeky goodies. We live for games and are looking for people who share our passion.
Sound interesting? Send your resume and cover letter to jobs@sega.net!

-Eddie
That doesn't necessarily mean that any word is an option, just that your set of options is larger than 1.
Taxing companies is actually very European and it dates back to the era of big trading companies such as the East Indian..
Taxing companies makes zero sense in the current market and it is not only double but triple taxation.
Companies profits are taxes, however if they are not taxed any direct benefit from these profits will be taxed any how(usually at much higher rates), outside of operational expenses companies can't do much with their money which will not be taxed as releasing the profits as dividends to the share holders or owners will incur either capital gain taxes or income tax. Investing that money will incur a capitals gain tax. The only thing that a straight corporate tax does is forcing companies to operate at operational losses in order to avoid paying tax.
Not having to pay tax on operational income means that the company can grow faster, hire more, divide the profits across is share holders and invest it in the market generating greater wealth.
All of the above benefit the people much more than the taxes the companies pay in corporate tax.
And yes abolishing the income tax in favor of a sales tax(not VAT which is a horrible solution) is much better. Sales tax means makes it much easier to reduce the tax burden on lower classes, especially in times of crisis.
The economy is in the shit? reduce sale taxes on diapers and base food products.. Need more money? increase sales taxes on luxury items. Need to help young couples attaining a home reduce the sales tax on properties for people under 30.
All these are much easier to adjust than income tax, allowances, and mortgages they also can be managed on the local level when others require a huge political effort to change.
Also a direct sales tax is far superior to VAT, VAT is utter nonsense, sales tax is charged at every sale of the product which means that the car you bought will generate revenue for the state every time its sold. And more importantly sales tax affects everyone including companies/self employed which are exempt of VAT. Why does Google have to pay 20% less for it's care fleet or desks than you?
Hats off to them for a genius attack. Wow.

Retargeting was definitely ripe for abuse. This underscores the importance of getting MUCH smarter and pickier with your audience lists and how you actually define them and value their contribution to a given conversion.
You can't buy a Tesla from a dealer. There are no Tesla dealers.
Other incubators/accelerators have focused on companies at different stages, but none that I know of are expanding, as YC is doing, from beginning to middle (to end?). This makes sense from YCs perspective because anything with network effects increases with more people/cos. Additionally to borrow a phrase from a16z, YC is becoming a full-stack or bundled company: Go to YC to get your start, your growth, and perhaps in the future, your IPO, who knows.
Amazon’s Echo Chamber
Not really. At least e-commerce has a pretty capable incumbent (Shopify).

CMS is an interesting case, though. There are 4-5 companies trying to take on WordPress. I could go with the incumbent, but I'd love -- LOVE -- some real dev reviews of that stuff.

Like, where's the fucking unboxing video for developer software?
Nice work yonas... here's my side project as well, doing something similar :)

https://packageindex.com/#!/

All the best Yonas...
people who smoke should pay more for health insurance

If the risk is priced properly, it shouldn't be that scary for other big life choices to be priced in. Health insurance for smokers is a lot more expensive, yes, but that isn't just a whim. Tobacco use costs us a lot as a nation[1] and most citizens are not thrilled to subsidize other people's choice to smoke, especially given everyone (smokers included) knows it is very bad for you.

We are OK with people who have big houses and speeding tickets, being required to pay more for home & auto insurance. Both are choices- like smoking.

Insurance is about risk pooling; grouping people in pools of equal risk is the core idea of insurance. In fact when you group people at high risk in with people at low risk, that becomes a subsidy.

[1]: http://www.cancer.org/research/infographicgallery/tobacco-re...
quite the opposite..!
really good practical advice! Thank you KR!
Your description of Namibia hits home. My family and I had the same sort of experience when we got stuck in the sand in very, very remote Saudi Arabia far from any paved roads or assistance. We were hopelessly stuck as the sun was setting and could do nothing but settle in for the night. But what a night. There were no lights or city glow horizon to horizon - not even an airplane overhead. Just a light breeze, blowing sand and the glorious stars overhead. Even though we were in a bit of a difficult and dangerous situation, I was utterly at peace.
call me paranoiac.. but don't they release as a small font instead? and more importantly, why as a web service?

¬¬
I think you just wrote an episode of Tim & Eric's Bedtime Stories.
Also it's the first-step problem of knowing what to ask pkg-config (or any other tool that can tell you). Header file names don't always map to the library or package name.
Attribution requirement is enough to break the FSF guidelines, and not compatible with free licenses. What means that this font can not be used in BSD or GPL software.

No open source software has attribution as a requirement by definition.

Anyway, there's nothing wrong with any of that if it's really what you want. What's wrong is thinking that the requirement is banal, and thus harmless.
tl;dr one person has been aggressively and successfully trolling the sci-fi/fantasy literary community for over a decade under a variety of identities.
>>> and Peter Edge, Executive Associate Director of Homeland Security Investigations (“HSI”),

I wonder how is it "Homeland Security". Looks like this confirms "Homeland Security" is completely coopted into War on Drugs. Not that after this: https://www.eff.org/deeplinks/2014/10/peekaboo-i-see-you-gov... there was any doubt, but basically every time they talk about doing something to fight terrorism, it's probably means drug enforcement.
Donald Stookey, chemist who created kitchen staple CorningWare, dies at 99
> It's very strange that you say 'why, then' while coupling these sentences, as if the existence of the first makes the second less sensible.

I'm not asking you why because I think that the two ideas are inherently tangled, but because I don't understand the relevance semi-objectively declaring a "line" has to the discussion.

> Obviously, physically damaging one's body works as one line - a line - for physically harming someone.

Where is the line drawn when it comes to damaging one's body? Eating too much? Sleeping to little? Hitting someone in the face? Too little exercise? Bad ergonomics? Suicide? Watching TV? Smoking? When do you leave the domain of physically unsafe and enter the domain of physically safe?

> Surely you can see how radically different this is from so called 'emotional harm'.

Surely you can see that this isn't an actual argument, and I won't respond to it as such. Explain how it is radically different and I will return to you.

> Oh, did someone say that, somewhere? Did someone say that something must be objectively defined in order to be _considered_?

No, you didn't outright say that, but it's the idea I got from your reasoning. Your argument seems to be that the phrase "safe spaces" is abused, and the only reasoning you support that conclusion with is based on the idea that emotional harm is hard to define. That seems like the opposite of the dictionary definition of considering something.
The author's statements about Windows bother me:

> It changed the world economy by being all things to all people.

...

> That said: Windows is the Superbowl Halftime Show of operating systems. Given what everyone got paid, and how many people were involved, you’d think it would be a lot more memorable.

What more did the author want? Getting pretty damn close to being all things to all people is quite an impressive feat. I'm reminded of the classic blog post "How many Microsoft employees does it take to change a lightbulb?" by Eric Lippert:

http://blogs.msdn.com/b/ericlippert/archive/2003/10/28/how-m...

In particular, this summary:

> Getting software right -- by, among other things, ensuring that a legally blind Catalan-speaking Spaniard can easily use the feature without worrying about introducing a new security vulnerability -- is rather expensive!

Things like internationalization and accessibility really matter.

And this brings me to the real head-scratcher from the OP:

> You can no longer be all things to all people when it comes to computers, but Microsoft keeps trying.

Presumably this is a dig at the poorly executed attempt to target both desktops and tablets in Windows 8. But Microsoft might actually pull it off in Windows 10. More worrisome to me, though, is the implication that the level of universality achieved by Windows is no longer worth pursuing in software development. If that attitude prevails among developers of software that is used in business or education, then pity the aforementioned hypothetical legally blind Catalan-speaking Spaniard who needs to use a particular application to do her job or complete some coursework.

It may not literally be possible to be all things to all people. But Windows has shown us that a piece of software can get pretty close. And I say it's still a worthy goal.
Easy mode is to encrypt the device key for each individual device, store it only with the manufacturer. Make it more difficult by requiring m-of-n agreement (probably via a parity block scheme) between HSMs to derive the key if you wish (with the key material being guarded on separate stores so that an insider can't simply hack into access), but that's not that difficult in comparison to what we're talking about.

Even easier might be to have the device itself store an encrypted version of the data storage key, encrypted to a PKI private key that only the manufacturer controls (i.e. leave a GPG-encrypted file accessible in an unencrypted partition that unlocks the rest of the storage). Since we're assuming that skilled hackers will forcibly encrypt sensitive data anyways by jailbreaking if needed, it's not that much of an additional stretch to leave the key on the device itself, and FBI can still get warrants served on the 99.9% of accused criminals who can't be arsed to figure out that their iPhone can be unlocked.

I'm not even close to a crypto expert either, someone with deep insight into the crypto literature (I hear NSA has a few of those...) could undoubtedly point to more applicable research that would be useful here.
Set up the site so all the database transactions take place in memcache or redis and every 10 minutes it's written into encrypted entries on some kind of distributed blockchain (Datacoin, Namecoin, etc).

Use Docker to wrap up the front-end and make it easy and portable. You can then spin up a new iteration of the site on a new VPS in a matter of moments. It can download the DB entries from that blockchain, decrypt, and then keep the DB in memcache/redis. To speed things up, you can also do daily encrypted DB dumps to a DHT address and write the DHT address into the blockchain to bootstrap the service restart.

Once the DB is bootstrapped and caught up, the site can register itself on the Onion network and since it'll be the newest entry, traffic will start ending up at the new site pretty quickly.

Such a system could be automated pretty quickly where a person could register VPS's at Linode, Digital Ocean, AWS, etc. Then write some kind of encrypted config file into a blockchain so the site software would pull down the config and make the transition to the new provider automatically. Could be an automated daily move and by using a blockchain as an intermediary for communications it prevents worries about making mistakes with accidentally leaking IP addresses at each new service provider.
> The second counterintuitive point, this might come as a little bit of a disappointment, but what you need to succeed in a startup is not expertise in startups. That makes this class different from most other classes you take. You take a French class, at the end of it you've learned how to speech French. You do the work, you may not sound exactly like a French person, but pretty close, right? This class can teach you about startups, but that is not what you need to know. What you need to know to succeed in a startup is not expertise in startups, what you need is expertise in your own users.

Mark Zuckerberg did not succeed at Facebook because he was an expert in startups, he succeeded despite being a complete noob at startups; I mean Facebook was first incorporated as a Florida LLC. Even you guys know better than that. He succeeded despite being a complete noob at startups because he understood his users very well. Most of you don't know the mechanics of raising an angel round, right? If you feel bad about that, don't, because I can tell you Mark Zuckerberg probably doesn't know the mechanics of raising an angel round either; if he was even paying attention when Ron Conway wrote him the big check, he probably has forgotten about it by now.

I agree that this talk is useless, even dangerous, unless you are post A series.
This is really cool, I've wanted to create something like this myself for some time. How did you go about initially curating enough data?

On another note, it would be great to see a brief description about why the company uses a particular technology.
Texan charged in first Bitcoin securities fraud Ponzi case
>>> Google Chrome web browser version 35.0-1910.3 and the Apple OS X operating system, version 10.9.0

Hello browser fingerprinting, not a theoretical concern anymore I guess.
ICE (Immigration and Customs Enforcement) is responsible for controlling the import of goods (such as counterfeit Dutch passports and ID cards, but probably including drugs too) into the country, and they're a part of DHS.
Could you share any examples? I'm really interested in this.
Does YC publish a diversity report card of their partners?
Your browser may be part of an evil DDoS bot-net
I'm guessing it's Android under the covers, and I believe that Google voice recognition is now processed on the device - so it might well be powerful enough to do the voice recognition without the cloud.
Hm. At first glance this doesn't seem too bad: idiomatic autotools usage involves files that are relatively easy to parse and are also relatively declarative, so making a non-autotools buildsystem that's capable of directly reading configure.ac and Makefile.am files seems doable.

Why doesn't this work in practice? Non-idiomatic usage? Custom autoconf scripts?
Meta: this feels like a cheap, lazy political potshot and I wish it wasn't the second highest comment here.

It seems like more and more low quality comments are being upvoted so long as they pander to the majority political leanings around here.

Are we a discussion board or a platform to push an agenda?
Most subreddits handle this but requesting that the OP post a case number and the phone number for law enforcement investigating so that people can get directly in touch rather than posting personal information on Reddit.
It doesn't depend on where you work or whether or not it actually is faster. It depends on what terms you are using and you are using Big O notation. 2n =/= n but O(2n) == O(n)
Very sad indeed - his friend's blog post on the subject:

https://the-pastry-box-project.net/charlie-robbins/2014-sept...
We don't have real data about this to compare but I imagine that if your company is doing well you can make it work without stress. That's why you have thousands of employees and billions of dollars to spend. I don't think you are a good CEO if you can't see the stuff at a higher level and not rest well.
And muddy our uninformed opinions with actual data (however anecdotal it may be)?

No thanks. ;-)
Interval Kalman Filtering appears to be a practical application.
let me add it was terrible for me. I'm using a modern macbook pro over a slow 3g connection (there's not currently wired connection near by).
As soon as the page content loads, I hit "ESC" to stop loading images.. with most sites this approach just works,
this was not the case..

Anyways, this looks like a really great project and looking forward to re-open over a wired full-speed connection.
This is, of course, the perfect clickbait headline.
Damn. I am really sorry for your situation. That fucking sucks and is crazy. Keep your head up homie.
Dealers can sell a used Tesla.
Glad you asked! We started off filling it out for the popular startups, which eventually created the desire for others to join in and do it themselves (hence the rebranding from Leanstack.io to StackShare).

Regarding your suggestion, every page has this tab: http://stackshare.io/stackshare/stackshare/details. This feature was released today so not many stacks have the details just yet. But we'll be highlighting companies every week and having them fill this out, so stay tuned! Also, feel free to share your stack :)
I think the echo looks awesome and I can't wait to put one in my kitchen. Your post reads like clickbait, citing no specific reason for your hate of this new device that you've obviously never even used.
A glimpse at the future of StudentRND
I'm fine with the phrase "unfair competition"; I want the competition between peers regulated. The horrible part is the assumption that the public is a peer, rather than the authority under which corporations are allowed to operate. If the public decides that it will be more efficient to provide some service itself, why would it grant special status to a project to provide that service less efficiently?

It's unfair to private corporations that we can do it cheaper without them?
Not always. I got invited from the audience when I was a kid for a stage magic show.

The guy was doing a trick where he wrote on a ping pong ball, gave it to me to look at, destroyed it and then made it reappear.

While I was looking at it I marked it with my thumbnail.

When it reappeared he asked me to verify that it was the same, but it didn't have the nail-mark on it, so I told him that it definitely wasn't, and how I knew.

I was 12 and my parents were furious with me about it.

For some reason they never ever took me to a magic show again.
Robot That Makes People Feel a Ghostly Presence