skysight-inc/HackerNews huggingface dataset:
I've been in the online advertising world for 10 years and it still befuddles me to see that most ad dollars still haven't switched to cost-per-action (CPA), i.e. only paying for actual conversions. One big benefit of advertising online after all is that tracking conversions and their referrers is much easier than with offline.
The State of Flux (ReactJS)
I think this may be his hn account.
https://news.ycombinator.com/user?id=blakeeb
This makes perfect sense, since as a user-generated content community, a large portion (not a majority, but a large part) is in very shady shit. /r/jailbait, /r/thefappening, etc.. But for everything shut down, there are countless others that are still operating, like /r/FacebookCleavage, /r/photoplunder, /r/redpill, /r/greatapes, etc..

Reddit has expressed that it wants to be totally neutral so that it can model a "new type of online meta-community" that has literally no curation for types of communities. They want to have /r/MensRights'ers and /r/feminisms'ers on the same site, fighting with each other, generating ad impressions. They want to attract white supremacists and misogynists and feminists and people of color alike.

So, the main thing they need to guard against is conflict on reddit spilling over into the real world, and the best way to do that is to strictly prohibit posting personal information.

Of course, "personal information" doesn't extend to things like naked photos taken and distributed without the consent of those depicted, but you can't use that to make Reddit a scary place for misogynists. So it's okay.
I feel the general the fear about "dragnet surveillance" is misplaced and uncalled for. As long as you haven't done anything wrong, hearing your conversations should be a total waste of time for whoever made the effort to do so. There are 100 million+ people in America, don't think people from NSA will waste their time on going over family conversations of every family.
Rarely touched privacy? If somebody wanted to spy on me, they could use the microphone in my phone or my laptop, right? I almost never turn either of those off. Bringing Echo into my home doesn't give the NSA new opportunities, my phone is always in my pocket anyway. If I'm worried enough about Echo to avoid buying it, I should also get a laptop without a webcam and get rid of my cell phone.
OpenBazaar.

https://openbazaar.org/
Agreed. Anything with product liability attached requires careful consideration. Spending extra time and attention on quality can yield dividends in better sleep at night.

If you operate with a mindset of, "what you ship, you can't take back or modify," you're on the right track. It's in partial conflict with the software ideology of, "build an MVP and iterate fast." You can still do that, but the MVP can't suck.

Source: Shipped a pretty great product, still stay awake at night.
Or Frederick Pohl and Cyril Kornbluth

https://en.wikipedia.org/wiki/The_Space_Merchants

(Or Alvin Lucier: https://en.wikipedia.org/wiki/I_Am_Sitting_in_a_Room)
Spoken like a Juju developer. The list of problems with Juju is not short, but the primary two are whatever is the opposite of synergistic: you are completely locked into ubuntu for every step, and the support available from canonical is utterly unacceptable. In this space, "the code is there" is step 1, and it took Juju an awfully long time to get there. Step 2 is "the system is sustainable" and that's currently where Juju falls over.
> The system largely ignores a large majority of the people

Have you been under a rock the last few years?
I wonder if all the alternative words have a "hard" sound in them. Like the X in alexa.

The way I think they work is they constantly record 2 seconds of audio, and look only for peak "hard" sounds. Like K in Ok, and X in Alexa. If they find a peak they search back to see if the word was the one they are looking for, but otherwise the CPU is mostly sleeping.
A software engineer at Space X [1] is also behind Silk Road 2.0? Crazy

[1] https://news.ycombinator.com/item?id=7277371
I meant assembly product that people used and had some traction.
There is this interesting paper titled “A Few Useful Things to Know about Machine Learning”, which basically ...

That link leads to the Japanese toilet maker Toto, not to any ML paper. I suspect it was pranksters, not the author.
> For instance, to turn a button red, we shouldn't have to write code. We should just be able point to the button and select a shade of red. Instead of talking about concepts the computer cares about (like variables and servers), programming tools should talk about things the programmer cares about (an image or a cloth order).

This is the concrete example of what the revolution will look like. It doesn't involve interfaces or logic, just a color customization, which has been possible in most user-facing software as long as I can remember.

The only thing that can bridge the gap between as-yet-unknown interfaces (in the most generic sense) and non-programmers is some flavor of artificial intelligence, which is far from a forgone conclusion.
And why would anyone learn computer coding in a country closed off from the world-wide-web? and What's the point of a computer in a hermit country sealed off from the internet?

That's right folks, the only programming that exists is web programming, and the only use of a computer is to look at pictures of kittens on the internet.
My dad did something like this up in northern Canada at the DEW Line (http://en.wikipedia.org/wiki/Distant_Early_Warning_Line) to monitor the Russians during the cold war. He was a radio tech and while he told me stories about how bad the weather was combined with the loneliness, he also told me it was one of the most unique and best experiences in his life. It focused him into going back to school and becoming an aerospace engineer.
Everything you observe at all times has the right kinds of interpretations that are true.
I meant "power outage" as the pretext that would justify (to the HS owner) why the server has been power-cycled (assuming they decided to cooperate with the FBI/whoever).

Here's how I would do it:

- I assume that your hard drives are in RAID. I gamble that they're in RAID 1 - most typical - and strip one out while the server is still running. Some kernel messages are logged, whatever.

- I start imaging the disk. If it isn't a mirror of the other after all, I strip the remaining drive(s) out and start imaging them too.

- While the disk(s) is/are transferring, I patch both your boot loader and your kernel with a rootkit. This should be laughably easy for the level of adversary we're talking about.

- When the disk(s) are done, I power cycle your server. I may cold-boot your RAM and get the passphrases there if i'm lucky. The downtime was either seconds (if it kept going with one RAID 1 disk) or <however long the imaging takes>.

- When you realise your service is down you may contact customer support. In that case they will respond (with their usual timing) about something-something-blown-fuse-UPS in your rack.

- When you log onto your server, you will most likely be faced with the passphrase input and most likely will go for it, but even if you don't...

> I'd compare the bootloader to a known good image as an early boot step

If you do so after you've given away the passphrase, you've lost already. Destroying the data won't help, as they have the encrypted copy of it and you just gave them the key.

I don't think you could detect a good boot/OS rootkit remotely at all. One would cover for the other. You can't unplug the disk and examine it. You can't plug a read-only drive in and boot some forensic tool. All you have is your lying bootloader and your lying OS. Your encrypted partition doesn't protect the integrity of the binaries there either, as after it's been decrypted, the rootkit would happily intercept any values that would give it away.

I'm not sure how you could ensure hardware security without ensuring physical security. Usually, physical access == pwned. Maybe TPM changes/will change that, but I somehow doubt it. Some other routes not covered here (probably easier, heh): Getting host to decrypt your TLS/KVM session where you typed the passphrase in the first place, malware in firmware on misc devices, etc.
Naively I would have guessed you include something like a 1kW resistor + heat sink package, and divert to that.

Assuming such parts exist, are they just cost prohibitive, or is there more to it?

(Thanks for taking questions!)
This is indeed a non-educated opinion. Please don't spread FUD.

Lithium-ion batteries are perfectly safe to regen. You need to monitor the cell and pack voltages and limit regen under certain conditions, but it's well understood how to do this.

Any electric vehicle with a lithium-ion battery (and there are millions of them, from skateboards and scooters to cars and trucks) does regen braking. Without regen, you lose one of the most compelling advantages of having an electric vehicle in the first place.

In general, supercapacitors do have much better power density than batteries, but much worse energy density, making them impractical for vehicles at this point in time. There's a reason the vast majority of electric vehicles today use lithium-ion batteries.

Disclaimer: I was formerly a controls and systems engineer for a hybrid-electric vehicle company.
I severely doubt that if it were a drug investigation, or a cop-killer ala Chris Dorner, the cell company would wait a billing cycle to provide location data.

Notice also that nobody needs to file a subpoena. The cell companies can just hand it over, and often do. Because your brother is less important to the police than a drug dealer, they're not willing to blackmail the cell companies.
what about charging the onboard laser?
The obvious way to estimate the difference would be to assume Uber isn't actually lying about the average fare/trip length/speed. The "math he's done" involved arbitrarily cutting the average fare in half based on a guess that Uber is lying somehow to juke the stats. My guess would be that they're not and the better numbers they get are merely the result of differences between how people use Uber and how they use cabs.
Please forward that link to my 2014 Honda Civic, which didn't get your memo and has the same fuel efficiency like my old 02 Civic.
Former Space X Employee Arrested for Alleged Silk Road 2.0 Involvement
Before Microsoft used to be this tightly integrated system. You had Office only on Windows, all mobile apps come on Windows Phone first. Satya has changed the company quite a lot . Each division works as an independent unit, they compete. Another example of this was the dropbox integration into office. Clearly one of the reasons to use Skydrive was the easy integration into Office. With the new integration, Skydrive will have to compete on features instead of getting fed because of its integration with office.
Waiting for the day when IE becomes cross-platform.
Well, if you're aware of that blog post from February, then you should also be aware of all of the work that he and his team have done since then. They're working on solving the problems with LLVM and more advanced GC.

As for Dylan, Dylan can use Boehm (and does for now in the C and LLVM backends), which is conservative.

However, Dylan can also use MPS (http://ravenbrook.com/project/mps) which is a much more advanced GC that does copying/compacting and all that. Dylan uses MPS with the compiler backend that generates native code.

The plan is that once the LLVM backend is up and running using Boehm, efforts will be made to get it working with MPS.

Julia uses a home-grown GC, but I'm not familiar with it or its characteristics at all.
I've been in the space for the same amount of time and I'm not at all surprised by this.

It all comes down to risk tolerance for both parties involved. On one end of the spectrum, CPM models put ALL of the risk onto the advertiser, and CPA is at the other, putting ALL of the risk onto the publisher. CPC falls in the middle.

Depending on who has more leverage in the negotiation, what is possible for one advertiser may not be possible for another. But given the low-quality traffic I've seen on some publishers, and specific instances where I know publishers were arbitraging $.01 CPC clicks into their inventory counts, I'm not at ALL surprised they are clinging to CPM as long as they can. Their very existence depends on it.

High-quality publishers have little problem going with CPA in cases where they can control more of the funnel (which is often the weak link), and they can command a much higher spread as a result.
> "Hey Siri", works well for me, and is enough to play the occasional song, or check wikipedia facts if I need one.

Siri works on the iPad 2? I thought it was only on later models.
You're commenting like I refuted or disagreed with you about something - I was just positing the opposite, that yes, because of what you said it's more difficult for someone who wants to go run away from everything to do so. I was agreeing with you.
It's kinda like the British royal family: Prince Charles is just one heartbeat away from the throne, but as long as the queen is healthy, she's the one who gets to be on all the money.
Well you might as well go off the grid completely then, don't use anything that could be used to track you like phones, tablets, laptops, stay away from people in general because you never know who the spies are that are trying to catch you. Don't use credit cards, debit cards, etc. Don't keep your money in banks. In fact probably don't even keep currency, buy gold instead. But you won't need that either because the only way for you to be truly safe is to live the jungle and live off the land....until the spies come for you there too.
......or, you could realize that probably NOT everyone is trying to achieve world domination and enslave all of humanity, starting by spying on you with amazon echo.
It's funny that Microsoft is advertising the Surface as a sort of iPad++, while at the same time making full Office free for the iPad, but not for the Surface. (I know, Surface Pro is a full Windows PC and the iPad isn't, and Windows Office has more features than iPad Office... Just saying the marketing is kinda inconsistent with the sales approach.)
Use Source Sans as System Typeface for Yosemite
I'm not saying this isn't going to happen in Colorado, but it hasn't happened in Chattanooga, TN. They've had municipal broadband since 2009 [1] which far outstrips the national averages for speed and price.

[1] http://money.cnn.com/2014/05/20/technology/innovation/chatta...
Very cool! Right this morning I was looking at who's using django+mysql.

Can I ask you how accurate is the data and if/when it's "certified" from the source? From my morning search I found pinterest and rdio using both django and mysql, but this is not reflected in StackShare (missing mysql for pinterest, missing both django, mysql for rdio -- again, I'm not sure about my results, it's just a coincidence that I was searching that).
Are you asking because you plan on doing so? I'd be interested to hear what you find. Here's something to get you started: http://online.wsj.com/articles/j-p-morgan-fined-92-million-b...
This is basically leanstack right? Whats the catch, rebranding?
500 Startups Announces Batch 11 in Mountain View
I hope you don't put your phone on the table while eating with your family, or have it in your pocket at that time.
Ask HN: Is it time to engage less with our prospective customers?
We launched a landing page in the beginning of the year and we have diligently followed up with every person who has taken an interest in our product (which is still under development and has not launched yet). We have learned a tremendous amount from the feedback we have been getting and I am happy with the performance of the campaign (we have a conversion rate of 20 percent). However, we have reached the point where we are not not learning anything new from this process and it is consuming resources that we would prefer to spend on product development.

What would you do in this situation? Stop engaging new users who sign up or simply provide lower-quality feedback? (People send us their Excel spreadsheets to learn if they are good candidates for conversion to apps -- which is what the product does -- and analyzing these spreadsheets is time-consuming.)

I would like to think that engaging with users this early has the added benefit of creating solid beta testers down the road when our prototype is ready, but I am concerned about not being able to devote more time to product development. Thoughts?
Two years of PhantomCSS
Would be nice to see some rationales. For example, you could npm install Mithril.js and get a lot of the things mentioned there without wasting time evaluating options.

The main criticism I have of that list is that he dismissively says "or anything else" (or drops a bunch of project names). Why should one pick Browserify or why should one pick Webpack or Duo or...? The paradox of choice is one of the main reasons people just go w/ Angular.
Back in July, hundreds (thousands?) of sites noticed a surge in traffic in their analytics. Hundreds to thousands of additional visits per day above their normal traffic rates. Curiously, all this traffic identified as Internet Explorer 7 on various version of Windows, but each visit came from a different residential IP, and viewed only one page per session.

Eventually the common thread between all these sites was identified -- they had retargeting tags from sites like AdRoll: http://www.thesempost.com/adroll-retargeting-bot-attack-behi...

For months now, huge botnets have been producing huge amounts of fake web traffic, picking up retargeting cookies in order to later be served ads and have whoever's behind the network paid for those views. That surge has never ended. It's only grown (including becoming less easy to spot), yet nobody seems to be talking about it anymore, including the retargeting companies.

I'd love to know who's behind it and how they control so many computers.
What do you mean by disturbing? To me it felt sort of like a slideshow, but a little smoother to navigate.
Good for you :)

I would check the Lenovo recall page (google it) before paying for one. That's where I got my new one from - they replaced it free of charge ;-)
> Another example, ads that follow me. Oh god how I hate these. I visit a website, usually for a product that I already own, and the freaking ad from that company follows me wherever I go. This is money wasted.

Wasted on you, probably not on the majority.
All about Angular 2.0
Nothing would stop them, but there would less of an incentive in such business considering the profits wouldn't be as enormous as they are now in the underground market. Profits are huge because the supply is low (and risky) and the demand is high. Legalization, I would think would bring up the supply, after all it would be legal to farm it in mass-production just like tobacco, dropping prices significantly.
>I don't think a desire for privacy is paranoid; it is normal, healthy behavior.

We on Hacker News spend our free time criticizing anyone we perceive as complicit in surveillance, bemoaning centralization, and championing Bitcoin and Uber for disrupting authority. To HN, a desire for privacy is literally normal: it is a social norm of this community.

That doesn't mean that people outside this community do (or should) care nearly as much as we do.
Or you could learn how to powerslide.

https://www.youtube.com/watch?v=2QJVDGtzvEE

Not sure if this is feasible on this board, but you never know. If the wheels are soft enough, I think you could pull it off.
It was her wish before she left us.
If you can get a business plan from those observations, yes, you can fix it. The advertising industry seems to be much talentless, despite the image they advertise.
What's Your Most Controversial Technical Opinion?
Of course, you could be monitored by the laser bounced off your window, or by your EM leakage. But it is an order of magnitude cheaper and easier for the commercial/governmental entity to use your own voice-enabled communications device for their own purposes. The commercial/governmental data gathering dragnet has come to its current state because it works on devices and networking services that the consumers themselves have purchased.
> You had Office only on Windows

Mac versions of Office have been available for decades. In fact, the first version of Office was actually released for the Macintosh and not for Windows
Swift for Entrepreneurs
How would you lose portability by moving to a high-level language?

Further, why would timing attacks necessarily be more or less of an issue in a higher-level language than C? This is a genuine question.

I feel like in any case, there are some things that should just not be done in C. For example, the base64 encoder/decoder that gpg uses for ASCII-armoring should not be written in C; in general any parser should not be written in C; there's no reason for the code that interfaces with the user (for example, checking a password given to gpg-agent) to be written in C. You could write these in OCaml, use the FFI to natively link them into a single executable, and you'd have safety for string handling while retaining fine-grained control of the hardware during crypto.

However, I'm skeptical that you literally cannot use OCaml to implement crypto that's secure against timing attacks. You can always fall back to C for primitive operations, and you can control the garbage collector enough that gc pauses wouldn't be an issue.

IMO, the most compelling reason not to do this is that for all its fatal flaws, C is the most widely-used systems programming language, and so it has the largest share of experts ready to review code. But this doesn't seem like a good enough reason, given the severity of memory corruption bugs.
>I've been out of the loop for a few years, but no the votes aren't manipulated.

Could you then explain the, pretty much on the dot, massive score changes every 2 hours? That was even more noticeable when the downvotes were shown - although they were 'fake' the final score, which is according to the FAQ correct, was changed.

I noticed this when I created a simple graphing script, you can see example graph of what I'm talking about here: https://github.com/Nikola-K/reddit-thread-graph#example

You can see that on any popular thread until the score is "normalized" around 3k points.
The Vaporware of Techno-Utopianism
Drug prohibition is about police departments getting federal grant money based on how many arrests they have made, seizing property of people arrested for drug crimes, and getting bribes from large-scale dealers.
Until you present some proof of any vulnerability, your word has not more weight than mine, and I claim that you don't understand what you talk about and that you can't find a way to compromise her setup.
I don't think reading the code replaces the post. A good example is that even when you implement an algorithm you monitor it, measure the results and tweak it.

Code is the theory (bottom to top) and his research (which is great) is a top to bottom analysis
Maybe it compares output file timestamps against input file timestamps to decide whether to re-build, as make does? It's hard to figure out details like this without either documentation or source.
Now, replace "Alexa" with "Hey Siri" and you don't need another device.
8tracks updates its website with better playlist curation and tools for DJs
11 books (and summaries) every tech entrepreneur must read
Thanks mate !!! means a lot ...
They're already heavily invested in Bay Area real estate according to my contacts.
We explain the relaunch and new features here: http://stackshare.io/posts/leanstack-io-is-now-stackshare
Does the average person like to purchase an item they already own if they see an advertisement for it? Of course not.
Can someone tl;dw this for me?