skysight-inc/HackerNews huggingface dataset:
Security theatre for the win(?) Do these people [EFF] not realize that the people they're trying to win over are network nerds? These are people that actually understand this shit and the repercussions of it.

I can't profess to understanding all the details of encryption infrastructure, but I learned very quickly in kindergarten, you can't trust anyone you don't know. It doesn't matter who they are, who they know or what they know. Half the time, you can't even trust "cold hard facts", the facts are frequently misinterpreted, fabricated or eventually proven to be wrong - once it was a fact that the earth was flat, then we were the centre of the universe, now the universe as we know it is held together by a God particle. Science claims facts that invalidate there being a God... all facts are a matter of our fallable understanding of this scientific instrument we are building. Even people you do trust can be coerced into doing things that compromise your ability to trust them or their motives.

If you want to automate trust, then you're eventually going to have to realize that you can't. All you can do is mitigate the cost of being wrong.

Absolute power corrupts absolutely - the CA (or whoever controls that CA) has absolute power in this scenario. If you have the director's family hostage, everyone else's security just went down the pan.

Chain of trust is like putting all your eggs in one basket. You just don't do it. Web of trust is a marginal step up, but it's more of a pain in the ass and can also be overcome by a group with malicious intent.
So I had to look this up.

On Arch at least, wget depends on util-linux (package containing kernel tools like mount, dmesg etc.): https://www.archlinux.org/packages/extra/x86_64/wget/
And util-linux depends on systemd: https://www.archlinux.org/packages/core/x86_64/libutil-linux...

I have to assume this is Arch-specific, because I can't anything that basic as util-linux including a dependency on a specific init tool (and given there are still distros using other inits than systemd and still working fine...)
Robot trucks do the jobs Australians shun
I think you've got a point there, but also it's important to not discount that for a contract to truly be valid that there are 5 key points that have to be in place. (Note, IANAL)

1) Intention to create legal relations
2) An offer
3) An acceptance
4) Consideration
5) Capacity to agree

The issue with "click-through" TCs and other forms of agreements is that they do not have consideration, they cannot ensure capacity to agree, and they're presented to someone who doesn't have the intent to form legal relations.

Unfortunately, in some cases "clickwrap" and "shrinkwrap" EULAs and TCs have been upheld by the court system (for reasons unbeknownst to me), in others they've been put down. Recently, regarding the Zappos user agreement the courts determined that their "browsewrap" TCs were not valid. http://blog.ericgoldman.org/archives/2012/10/how_zappos_user...

The biggest problem with these types of agreements isn't that the law needs to change, it's that the courts are upholding things and establishing a positive precedent for things which are clearly not legal even to a layman. This is similar to the situation with software patents, where patent law clearly does not cover software, copyright does, but companies are having them issued anyway and the courts are treating them as valid.

So, yeah, we're lazy and we've developed habits of just clicking "Okay" or "Agree" to get that message out of our way so we can move on with our life, but that's because any reasonable person would not even remotely consider needing a contract to utilize their phone beyond potentially signing an agreement with the carrier. Most of the TCs on software are trying to use contract to remove rights you actually have under copyright law or to subtly get you to agree to giving up information or other rights you may have as a consumer. In many ways, it's arguable that in common case circumstances such as installing an app or using a phone or computer, it shouldn't be legal for you to even give these rights up. A bigger piece is that simply many of the people utilizing phones are underage, so cannot legally consent to a contract.
Just tried the demos on my phone (iPhone6) on the way home. Works wonderfully.
I believe threadless designs are much more refined that what I have produced.
Some do, but they have them Mozilla-approved. Vendor-specific patches are allowed in a product called "Firefox", if Mozilla approves the patches before release. I believe Red Hat is one vendor that does that. Debian won't agree to include a package that needs third-party approval of modifications, though.
Would you mind telling us how you got into such an area?
This is not true, unless you happen to have too many dollars to spare. Also, Windows can also be forked, by distributing patches instead of binaries.
No, when the buffer is full, the write() call blocks. Otherwise no UNIX pipes could ever reliably transport data.
This is pretty fantastic, and at a bare minimum looks like a nice replacement for jQueryUI's drag-and-drop.
Do you have a normal full-time job also? I sold my rental property partly because it was taking up too much time on top of mine.
aleem from streak here, this is cool. i'd love to share some stuff we're working on that should make it much easier to do what you're working on. mind emailing me at aleem at streak?
Both sides did lots of work to make their solution better and each side had a sizable list of legitimate advantages over the other. The ultimate decision came down to a subjective value judgement about which advantages were more important and inevitably wound up ignoring about half of those honestly held priorities (not to mention the work that went into Upstart). I don't see how it could have happened any other way.

It's sad that people resigned over it but the pain itself seems unavoidable from where I'm sitting.
On Debian/kFreeBSD? 1, but that's 1 more than after systemd.
And in a large app it is hard to know if all relevant code has ran. Finding pieces that uses the code you just changed is much easier in static languages. We might not go to a fully statically typed javascript but supporting optional typing seems like a really good idea.
Conferencebadge.com is very clever!
The coaster doesn't even need to be that good, really, especially if you add in that gamepad they mentioned last. Then it would be all about the length of time on the coaster over sheer thrill/vertigo.
Android 5.0 update causes problems
How My Book Launch Went
The apathy and cowardice of the American people allows this to continue.
New Game: Help Tyle escape the parallel universe
pinching and multitouch wont work on my Lenovo Flex 15 notebook..
Buffalo Suburbs May Have Set a Record for 24-Hour Snowfall in a Populated Area
> "EU doesn't exactly make law. They make more of suggestions."

(a) The EU can make "Regulations" which come into force as laws in each member state. But those are rare.

(b) ... The more common form is "Directive", and member states are legally obligated to implement into national laws. This is effectivly "EU law".

(c) ... membership of the EU, also requires membership of the Council of Europe, and European Convention of Human Rights, and European Court of Human Rights, who can make judgements against a member state to force them to do things.
Automatic Financial Data Integration with FIBO
Yet, some process that reminds me at the time I'm living work of everything that I need to do by then is something valuable.

Maybe the problem is taking it too far.
To answer your question: some parts of our SaaS (e.g. data gathering/processing) are on both AWS and Azure, but the customer-facing portal web app is 100% on Azure (in two regions North East and North Central), so we couldn't just swap the DNS.

We're changing that now, will need to replicate across different cloud providers, too. We're changing a lot because of last night's outage.
What "results"? This isn't a poll. But i agree with the second-half of your comment.
Right, and if I can't work for that business what difference does it make?

Do you have any links that show that ads on a blog are legal? All the research that I've done came to the same conclusion.
Why India shouldn't be succeeding – but is
Only because some caching DNS resolvers are broken and keep the referral cached for the TTL of the CNAME record.
How we chose our new help desk software
I've spent couple of months in southern California and I was using my Jolla with a sin card, that I bought there (T-Mobile). It worked without any issues, also I didn't have any problems with roaming using my European sim card.
It is doable, but still not legal :)
Rule of thumb is that the monthly rent should be at least 1% of the purchase price.

More specific ROI calculations are good, but people typically forget a lot of expenses (repairs, vacancy, time spent managing, etc) and end up calculating an unrealistic ROI. After accounting for all that stuff, at least 8% cash-on-cash, plus more in debt repayment.
Are you serious? sysvinit's modular architecture allows an easy substitution with other alternatives, that's why you can replace it with say systemd and have a working system.
Actually one of the biggest problems with systemd is its refusal to cooperate with other system components. Need a binary log format? Let's write our own! Need a database? Let's embed our own! Interoperate with ConsoleKit? Nah, we'll just reimplement a replacement.
The point is that the people providing the technology have an interest in the SEC not deciding to push for additional, non-HFT friendly market rules.

Is it possible that there's no way to get it besides from a company which might/probably/definitely have a conflict of interest? Yes. Does that somehow negate said conflict of interest? No.
I think betterment is AWESOME, and well worth their nominal fee. As a matter of fact I am switching all of my non-tax advantaged investments over to them very soon.
Mr money mustache on betterment: http://www.mrmoneymustache.com/2014/11/04/why-i-put-my-last-...

I like lazy allocations, take a look at this: http://www.bogleheads.org/wiki/Lazy_portfolios

Also, keep in mind that any investment you do it is WAY better to do it in tax advantaged accounts (401k, roth ira, ira, etc). Typical advice goes like this

Max out 401k up to company match
Max out roth ira (currently 5500 a year)
Max out 401k fully (up to 22,500 a year)
Invest in non tax advantaged accounts

When you contribute to 401k it lowers your taxable income, so if you make 80k, and contribute 20k to your 401k, you only pay taxes on 60k which can be great for tax savings.
Lanyrd.com is all about discoverability. Conferencebadge.com is more utility. Really different in my opinion.

I think the success of the plateforme was in our ability to mitigate all the pain points of managing attendees badges, which is not a sexy business.
This is not good news if it bypasses the spam filters! Does it?
Interesting, how is pricing decided?
We run a network of product microsites that use PricePlow's API to hook users up with good deals and free samples.

The new microsites are actively maintained (blogging, product updates, support questions, security) and definitely not passive, but some of our older ones from 2010-2011, like http://www.coconutwaterlife.com sit around collecting Amazon money for doing next to nothing.

The non-maintained network of sites earns about $500/month.

That sounds great, but honestly, I wasted so much time building so many of them -- scaling business in the wrong direction instead of building a real brand -- that at this point, I believe that had I spent the time working on the main PricePlow setup in those two crucial years, my returns would be far higher than what I'm getting from screwing around with a ton of microsites.

Plus, pareto principle. 10% of the old sites make 90% of the passive revenues. The rest of them were total WOMBATs.
The thing that would make me, as someone who is recruiting heavily right now, not want to use this is that I fear it will be a massive turn off to really great engineers. If I was interviewing with a company and they made me do this before talking to them I probably just never would. If my first interaction with them isn't an opportunity to also sell them on the company/opportunity then the first impression is hugely suboptimal. I'd rather waste time on 5 phone screens and have 1 really great one where I get a chance to build a connection with the awesome engineer, it greatly increases the chance we'll end up hiring him or her.
Same here. I wonder why Chrome on Windows doesn't work.

Fortunately I'd seen this story on my Ubuntu box before leaving home, so I wasn't totally out of the loop.
Wow, so is improvely is run just by you? 30k a month is impressive. I checked out your blog, but have you ever had anyone else working on it or have you always maintained the full stack?
Mendeley and writeLaTeX integration is here
I thought it was emoticons at first. Now I can see the title.

Works fine on chrome for mac, doesn't work on chrome for windows.
Because it would be unfortunate if one were to accidentally forget to authorise one's mortgage payment to be paid for a few months, only to find oneself repossessed. Direct debit allows a regular bill payment to be forgotten about, but with the protection that you are informed well in advance of any changes (for instance if the mortgage interest rate goes up).
I'd like to buy a vowel, please. Let's go with "e".
What is your sharpe ratio?
Well hello there VP9. We've been waiting for you.﻿
This struck me as the most important part of the article:

Liu pointed out that while research surrounding marijuana's cancer-fighting properties is nothing new, his team is the first to document its effect on the disease when used alongside radiation. "The results showed that the final effect was superior to the sum of the parts," he said. "Hopefully, these results will support calls for formal trials in humans to test these combinations."
Don't know if they are the best, but I used zazzle.com and redbubble.com. One argument for zazzle is, that you create a product once and it is available in all countries where zazzle is present, e. g. UK, Germany, Spain etc.
I understand... it is doable, but still not legal :)

We should not have to come up with "creative ways" to do something simple like ads on side projects (be it a blog or a free app).
It's always just been me. This is a lifestyle business for me, and I don't really feel time-constrained at all. The variety of skills you have to develop to run a software business alone is what makes it interesting to me; I never get bored with the work since there are so many roles I can choose to take on each day. There's always something new to learn on the horizon, and great motivation to do the learning (like ack! you're about to have more traffic than one server can handle, better learn how to handle that!).

The only downside to working alone is being on-call 24/7/365 for the servers. I have a good alert system that will wake me up if anything goes wrong overnight, though most components of the stack can fail without taking down a site. Lots of load balancing and warm failovers at a second host just in case.
I don't see any information about how information is communicated between my phone and the app's servers. To me, that's a pretty big privacy concern. If Pulse, for instance, is connected to my LinkedIn account, are my credentials for authenticating with the app being sent over plaintext?

I suppose the above is more of a "security" concern than a "privacy" concern, but I think they are ultimately one and the same.
> partly as a result of Google changes which I haven't made the least bit of effort into looking into

Do you know what google changed at least or simply that google changed _something_ and organic traffic dropped significantly?
I think the original submission announcing unicode support may win that prize: https://news.ycombinator.com/item?id=111100
We decided to start with just a few topics that we are relatively familar with to get a sense of the quality of the curation. We plan to expand to broader and more mainstream topics in the future.
I have some properties while working a full-time job. If I didn't have a manager, I wouldn't have the time for them, full stop. Sure, hiring someone will eat into your margins. But it's worth it unless you're willing to make real estate your full-time gig. I tried to do it without help once, for about half a year or so. It was painful.
You cannot be a proper parent to 20+ kids (hell, I'd argue 5+ kids of elementary school age would be difficult) simultaneously. I just don't know what more you expect out of teachers. Additionally, teachers only have children for 3/4 of the year and then the parents have them, and then a new teacher has them.

Parents are important; if you see your parents acting bad, neglecting you, are even encouraging you to act in these manners, then what can someone who spends 1/2 of 3/4 of a year with you really change that?
Welcome to Lightweight Java Game Library 3
If it was for an organization, you only got the cert because they didn't catch it. For some reason, my account got flagged as high-risk, and every cert I request needs manual review. During one of those reviews, they rejected my cert request and told me that since it was for an organization, I needed organizational validation. This was for a standard certificate—not extended validation. I think they must've either visited the company website or checked whois.

Their FAQ alludes to this, but doesn't really make it explicit:

> The certificate is for my company, what shall I do?

> In the Class 1 settings (free), the only possible relationship between StartCom and the subscriber is
> with individuals, i.e. natural persons. StartCom has no relationship with the organization a subscriber
> may represents and acknowledges only the subscriber. All responsibilities according to the StartCom
> CA Policy are that of the subscriber personally, even in case he/she decides to obtain certification as
> an employee or representative of an organization.
> Organizations should perform Class 2 validation and an organization name may only appear in a digital
> certificate at Class 2 level and higher.

http://www.startssl.com/?app=25#2
What really good example of executing very nicely on one thing. Congratulations.
Probably accidentally, due to a poorly abstracted dependency chain.
The Distributed Developer Stack Field Guide
I can't imagine how much effort that would take to maintain. Arch Linux tried it and dropped the idea after a few short months.
Jerusalem Synagogue Attack a Stunned Sense of Shock
I would consider following the site if categories had RSS feeds.
No better place to ask – how do I find a CTO?
Hey all, Joey here from Baron Fig. I've posted several times in the past about our journey from Kickstarter-backed project to full fledged company. We're ready to take the next step, and that involves a full-time CTO to work alongside myself and my partner, Adam.

Do you have any suggestions on how to go about finding a well-rounded CTO in NYC with hustle, creativity, and drive? That's a lot to ask for, but it's the only way to get things done.
Any help is greatly appreciated.

About us: To refresh you guys: our startup is called Baron Fig, we make Sketchbooks & Notebooks. Last September we launched a Kickstarter and surpassed our goal by 11x. We ended up pre-selling 8,760 books to 4,242 people from 48 different countries. In March we launched our website with full web store. To-date we've sold 20,000+ books in 17 countries worldwide.
I would recommend to head over to investopedia.com and play with fake money first.

Do this for about a year or two before thinking on investing real money. It sounds long and boring but that's because it takes a lot just to understand what's happening, let alone make any money.

Read everything you can on commonly used definitions and get used to reading financial news. This will help you measure how much do you actually understand and get more proficient at it.

Then you can start investing with small amounts and see how it feels. The hardest thing I have experienced while trading is the emotional rush of either losing money or winning money. So getting used to it is pretty useful if you want to follow an strategy, etc.

Quantopian is a good reasource if you have already understood at least some basic stuff. Another good resource is
http://www.babypips.com/school

Although it refers to Forex market and not stock market, a lot of the stuff there applies as well.
Can you do z̝̗a͈̣̳͓l͏g̱̭͖̜̙o̢̦̫̯ as well?
I just remembered the snippet forgot "Sehr geehrte Herr oder Frau". Oh no! -1 bureaucracy point.
I think you missed the point. Prior to systemd, Debian was truly the universal operating system in the sense that it ran on just about anything, and you could swap out the kernel (not a trivial thing to do, but possible) for the FreeBSD kernel, for example. Because systemd is Linux-only, this is no longer possible. Because the list of smaller userspace utilities dependent on systemd is growing faster every day, it's likely that Debian will end up being no different from Arch, Fedora, RedHat, or Mandriva overall, apart from the package manager. Basically GNU/Linux is becoming GNU/systemd/Linux.

Some people don't have a problem with that, some do. In the end it's not about choosing an init system; indeed, I think a lot of the arguments and opposition to systemd would go away if systemd were interchangeable with any other init. But that's not the case; if your distro of choice has decided to go with systemd, then you're running systemd or you're not booting (yes, there are shims in Debian right now but they exist only for migration purposes).
What software cooperatives are – and why we structured
@zrail and just for anyone out there who wants a product idea.
I really would pay for a book on the same subject but for ppl outside US and the first world.

To setup and collect payments world wide outside those countries is a pain in the ass. Any book on that (or good services) deserve money & success.
I really like this thread because it reminds me (and others) that creating a product is not only about leaving full time job, doing crazy hours and trying to raise money, like it's often portrayed. You can simply create a product with reasonable cash flow as a side project.

Thank you all for contributing to this thread.
Android Lollipop update causes problems
STEVE JOBS in colors
That is the 4th criteria of the Open Source definition at work. I think it is a good rule, and makes sense. Mozilla is sharing their code, but doesn't want their name to be used for code they didn't approve.
It's not legal to launch a web service in your home country that makes money from people in your home country? How do other businesses operate?
Building a maintainable bi-directional cross platform protocol
$0.00 from my free game "Barnyard Politics" on Android. Immeasurable wealth realizing I could make the game in 4 days with a game sdk verses the whole summer I spent chasing an idea that I never released but used OpenGL, Android NDK, OpenCV. All the technologies I learned led to the next couple years of my work innovating for my employer so it was a good thing. Time well spent.

Long live SDKs, APIs and other ways to get a product out the door without coding every bit myself.

Fun teamwork results from these side projects also. Such as my wife recording her custom mix of "Old McDonald" + "Hail to the Chief" to be used as my background music for the game. She did this at 1AM of election day, 2010 so I could release the app that day.

Can lessons in life be measured as recurring revenue? Maybe not monetarily but certainly in wisdom and the ability to execute better the next time.
Yahoo Finance Down