skysight-inc/HackerNews huggingface dataset:
You are very correct. It is still a valuable thing to have a research company where researchers and designers do not have to worry nearly as much about money.

AT&T/Bell Labs was a government regulated monopoly so it is definitely a different situation. AT&T watched very closely what they profited off of and made sure it stayed within the realm of telecommunications for fear of antitrust lawsuits.

Regardless even if no one else can access it for the first decade or two many innovations would still make their way out into other places.
Echoprint sunsets song/identify API
> Married twice, divorced once. Not much angst in his life.

I don't know. Every divorce I'm familiar with is dramatic enough for at least an arthouse drama if not full-blown Hollywood Oscar bait.

And I'm not sure why you would need the personality or proclivities of von Neumann to carry the entire film. The topics he was involved in are interesting and important enough for a good writer to work with. Many, many main characters are outright dull, but we enjoy movies about them for other reasons.
I think you're misunderstanding something. This has nothing to do with selfishness -- you're only really considering the upside.

The harm/good ratio of screening depends crucially of the false positive/negative ratio vs. the actual prevalence of the condition or disease being screened for. (Plus, obviously the psychological/medical "cost" of a false negative/positive.) I would recommend the talk at [1]. This particular issue is brought up about midway through the video, but I recommend watching the whole thing.

[1] http://www.ted.com/talks/peter_donnelly_shows_how_stats_fool...
bookmark'd!
> Also signing up usually involves more than a login/password (address, phone no., etc)

No. Using some features may involve more than a login/password, but even on most ecommerce site the signup itself is just a login and a password. Amazon needs a name (whatever), an email and a password. That's it.
Iranian engineer finds out his computer problems were cause by Stuxnet
You could put a captcha on your login screen once a user from an IP has failed more than N logins on a given IP address. You could also check for the existance of a cookie, and not allow logins that don't have it set.

There's lots of things you could do.. but displaying an obtuse error doesn't add to usability. I was talking about the password recovery screen, not the signing up.

The "you'll get an email..." is a message I've seen.. and had to deal with it being broken (the email provider the site used was overloaded/down) .. no email.. more broken usability...
Forcing the user to interact with an email client during the signup process before they've confirmed the availability of a username might be good for security, but it's a horrible way to gain users. That's a very high friction process.
I generally agree with this comment, however.
Looking at the code[1] this seems to be a simple wrapper around systemd-nspawn[2]

[1]: https://github.com/coreos/rocket/blob/9ae5a199cce878f35a3be4...

[2]: http://lwn.net/Articles/572957/
Manage Chef Cookbooks in an Organization Repo
I second that. At the begining Docker people were mentioning adding FreeBSD Jails support, what seemed to me an awesome thing, a platform independent containerization middleware, but recently they just seemt to forget about it and they're doing only linux-centric things - what a shame.
Well, it's also perfectly fine to require a captcha after one or two failed attempts of login. What achieves the same goal.

(Altough, some real rate limiting is better, except when dealing with a distributed bot. Maybe both.)
Show HN: Starter project for creating Desktop apps with Atom Shell
What I'm saying is that every "signup" event should appear as if it was a valid, brand-new signup as far as the web user is concerned.

The email will be sent regardless. If it's a valid new signup, then the user gets a transparent experience. If the user has already signed up, send them a helpful "hey, you've already signed up" message in their inbox.

In case it was an attacker, maybe check the IP against known IPs that have had valid logins. If it's a new IP, add a section to the email message that a potential attacker may be trying to login and that no action is required, etc. Whatever fits your business case.
There are many types of hard problems. Some are hard because the data just isn't there, and someone needs to connect the dots.

The ISP model is hard because it just requires fucking shit tons of money to solve, and there's no getting around the tragedy of the commons problem. With telecom infrastructure, you can either use wired (expensive and with a heavily fragmented regulatory environment) or wireless (expensive with extremely limited spectrum - see the $12+ billion spectrum auction happening now).

Disruption is well and good, but it requires new technology that delivers similar services for a fraction of the cost. Until someone figures out a way to bring the economics of delivering content to end users down by a factor of several hundred, we're stuck with the current ISP situation.
SEEKING WORK - London or remote

I'm a back end web dev with 5 years experience, focused on Python, Django, and plain SQL. I'm proficient with Javascript, JQuery, AWS, and ansible, and am fairly comfortable with numerical computing (NumPy/Matlab) from a degree in Physics. I enjoy working on useful tools and APIs.

https://github.com/MatMoore

Contact: mat [at] mooresoftware.co.uk
And that's the reason I still fight everyday with non-mobile owa interface...
Bullshit work, unnecessary meetings was about the same both sides.

Ding ding ding I think we found the culprit!
Has libcontainer[1] been considered as a minimal Docker alternative?

[1] https://github.com/docker/libcontainer
That's why I use davmail¹ -> owa to access my corporate mail over imap instead of exchange directly.

¹http://davmail.sourceforge.net/
There actually is a significant difference between having 'rkt' as a setuid-root process that's invoked from the command line, and having a docker server always running waiting for commands. There are more ways for a potential attacker to get at the server. So, Rocket at least looks like they're trying to shrink the attack surface.
Exactly how I felt! I'm 31 now myself. I'm really hoping my experience is like yours, because I'm still not 100% myself again. Currently 2.5 weeks in.

I can't even imagine what my levels were prior to taking the 500% RDV supplement I was on before having my blood checked. But at <9ng/ml, I most likely have osteomalacia.

All doctors will only prescribe D2 (ergocalciferol); so you really need to go and get D3 (cholecalciferol). Your body naturally produces D3, and the latter is much more bioavailable. Because of this, you will also want to scale down your dose and not take as much. It's possible to go too far and end up with hypervitaminosis, which ironically can also cause random bone pains, and calcification of your arteries.

It's important to test your 25(OH)-D levels every few months when taking extreme supplements.

Also, be sure you are getting enough calcium and magnesium. These are the chemicals needed to maintain healthy bones. Doctors do not prescribe the magnesium, and large vitamin D supplements will deplete this, also leading to calcification and other problems.

Finally, for anyone living north of South Carolina, you will not receive enough UVB radiation from the sun to produce sufficient levels of vitamin D during the winter months, and milk really has very little vitamin D. So you might want to test and possibly supplement if you are experiencing random musculoskeletal pains. Low levels are fairly common, and usually not a huge deal. But at my level, it was fairly severe.
Signpost | New York, NY

We build cloud-based marketing software that gives local businesses the power to effortlessly build and manage customer relationships.

Our platform builds customer profiles by capturing every email, call and credit card transaction. Signpost’s automated marketing engine then uses this data to drive new customer conversion and loyalty, reviews and referrals from existing customers. We empower local businesses by delivering measurable results while saving valuable time.

Named one of America's Most Promising Companies by Forbes, Signpost is backed by Spark Capital, Google Ventures, OpenView Venture Partners, Scout Ventures and a group of angel investors including Jason Calacanis, Thomas Lehrman, and Jack Herrick. The company is headquartered in New York City with locations in Austin and Denver. We're looking for smart, passionate leaders to join our team and have real ownership and impact from day one.

Open Positions:

Senior Software Engineer (NYC) - http://grnh.se/e1xs87

Software Engineer (NYC) - http://grnh.se/ohl0nk

Front-end Developer (NYC) - http://grnh.se/juc2s1
Certainly. The kernel can simply pass through the device, although you lose some of the security of containerization that way. There may be issues with multiple containers sharing the same GPU though.
Ask HN: How to monetize unpatentable idea?
I have been sitting on an idea for a few months which is quite simply an extension of already existing functionality which is basic to most programs. This is one of those "doh!" things where people will wonder why nobody had thought of it before. It will add intiutive functionality, make things far more accessible, and probably have far more uses then I've thought of. It will also have no problem garnering tons of press. I have a working prototype, but that is irrelevant. Once I release it, the idea will be picked up and incorporated into everything. While it does require some coding, it is really that simple.

The question is, how can I monetize the idea with a general implementation (or any way at all)? There is no way to make ad money as this will not involve going to a website or any possible ad placement at all.

Do I need to form an llc or something, release the technology as say a free extension to one program, and then sell the company whereupon some corporation can then claim they "bought the technology?" I'm really at a loss here as I am terrible with people (which I'm fine with) and do not have any social or business capacity whatsoever. I have no prolem spending a few months writing a freely useable extension and building a website for it, but I do not want to go into business. I just want to release an implementation and sell the company which I released the product under. This is totally feasible as I've seen corporations license similar, but far less useful technology which is not patented, and which they could have hired a team to incorporate into their own programs instead of licensing it. The point is, I'm not going into business. I sat in a cube for a long time and am now going to school and pursuing my own research projects which is what I'm going to continue doing regardless.

Any suggestions, advice, books, help, etc.. would be greatly appreciated.
Honestly, the only interaction with G+ I've had lately is wondering why the HECK it's ruining google cal.

"Why are events showing up on google cal that I've never heard of?" Turns out anyone who's in your circles on G+ can invite you to events and they who up on your google cal by default.

I was asked to upgrade google cal yesterday. I did, and all of a sudden there was a new calendar with TONS of birthdays spammed everyplace. Turns out now the birthdays on every person in your circles on G+ now show up in a calendar on G cal. You can't seem to delete it either only turn it off.
I used to feel the same way, except that this really boxes "intellectually challenging" into a fascinatingly narrow set of problems.

The meme that dealing with problems of physics and mathematics is somehow harder or more noble than dealing with problems of people should probably be considered harmful.
They haven't chosen their next city yet. Austin was selected on April 9, 2013, and Provo was selected a week later.

http://en.wikipedia.org/wiki/Google_Fiber#Locations
Jail Breaking the MBA: Get Your Entrepreneurship MBA (For Free)
Famo.us; Full Time; SoMa, San Francisco

We're looking for senior software engineers who specialize in math + javascript, development operations (devops), curriculum design or design programming.

https://jobs.lever.co/famo.us?lever-source=hackernews

We're currently a team of ~30 with an office in SF and a new office in Amsterdam. Learn more about Famo.us and our latest projects: http://famo.us/blog/
> This one is illegal, with enough proof it should be easy to fix in courts

Since when? Do you live in Germany?

Do you remember the issues a few years ago with Hartz-IV and recruiting people for "Spargelstechen", as Hartz-IV was better than the salary being offered?
For me it was opposite. Over 50 seconds for HTTP! With a little more than half a second for HTTPS. Tried it 3 times.

Mac OS X 10.10.1
Safari Version 8.0 (10600.1.25.1)
Software Engineer at Help.com in Austin, TX.

Help.com is building the next generation of customer service software. We're looking for software engineers with a few years of work experience to join our small-but-growing team at our downtown Austin office and work together to get our initial web application into the hands of an eager market.

We are predominately in the JavaScript/Node.js ecosystem, but have developed a microservice architecture that gives us immense flexibility in our choice of languages and tools. (We've authored code in JavaScript, Java, and even Haskell!) The engineers on the team make technical decisions and have full authority and responsibility for their work. It's collaborative and challenging, and it's been very rewarding.

In addition to competitive salary, comprehensive health benefits, and equity in an early-stage startup, you will have the opportunity to make an impactful contribution to both the product and the team. You will also get to work with some multi-talented and friendly folks who come from diverse backgrounds and experiences. We're learning a lot from each other.

Email jonathan.dawe@help.com with any questions (or just to say hello). Job posting and application is here: https://jobs.lever.co/help.com/1b641dfc-f3b9-4557-9a35-e21b3...
You're ignoring that most modern apps will give you rudimentary account access even before you confirm your email address. Which would be difficult to do if that account already exists.
You'd be surprised... After removing the "type it twice" box during registration, the bounce rate of "welcome" emails went up quite a bit.
Why did you create it?
Your comment led me to look up low-background steel. Very interesting thanks.
The UbuTab. A 2TB Ubuntu tablet for media lovers
Same here, add poor circulation to the list of symptoms. I no longer have perpetually cold feet. I had to have my GP refer me to an endocrinologist though. The endocrinologist spotted it right away. Super cheap to treat. Been taking it for about ~6 mos.

>So, moral of the story: get your Vitamin D levels checked. And take D3, not D2.

Especially if you work indoors or otherwise avoid sunlight. (I don't take special pains to avoid the sun. I like the sun, but I do avoid outdoors when it is too hot, which is most of the time in my area.)
And, if you're returning the correct error message, it doesn't matter.. the whole point of a timing attack is to determine the difference.

IMHO usability is more important. There are other ways to improve security. Rate limiting with < N failed attempts via an IP in under < X minutes.
Show HN: PSequel – a free PostgreSQL GUI Tool for Mac OS X
Happy Cyber Monday!
That's surprising. I thought the FCC banned those types of deals: http://arstechnica.com/tech-policy/2009/05/federal-court-uph...
This comes off as overly defensive and entitled, like "we brought you containers and you stab us in the back!?"

I don't see why they need to view this as an opportunity to fight back and criticize another app container system, rather than enthusiasm about the continued spread of containers and expressing a desire to cooperate on building open, interoperable standards.
WebAction in Downtown Palo Alto - Full Time Hiring Front-End Engineers

Jobs@WebAction.com

WebAction is a streaming analytics company based in the San Francisco Bay Area.

Our goal is to make real-time, predictive analytics simple. Every component of our platform is controlled by a web-based drag and drop app designer and/or a declarative, SQL-like language. This enables our customers to focus on rapidly solving their business challenges, rather than being consumed in building out big data infrastructure. As a culture, we love challenges and strive to improve our product everyday.

===Front-end/UI Engineer position===

With the power of the WebAction platform, our mission is to build new visual interaction models that combines real-time analytics and predictive computations. This means we want to streamline the process of bringing data into our platform, visualizing it, and managing analytics pipelines for users with ease.

Our front-end stack includes HTML/CSS, JS/JQuery, Backbone, D3.

===More about WebAction===

It's founded by a team of Silicon Valley executives with multiple successful exits in the enterprise (our CEO has sold 1 company to Lockheed and 2 companies to Oracle). We've raised north of $11m since 2013 and our advisors/board have done amazing things like creating the Apple logo and founding one of the top VC firms in Silicon Valley. With every product release, we delight our customers and engage new ones at an ever-growing rate.

If this sounds interesting, shoot your resume to HR at jobs@webaction.com. If you have questions for me, feel free to send a message to john@webaction.com
GNOME is working on sandboxing + application packaging that's basically containers under a different name. http://blogs.gnome.org/aday/2014/07/10/sandboxed-application... http://blogs.gnome.org/uraeus/2014/07/10/desktop-containers-... http://www.superlectures.com/guadec2013/sandboxed-applicatio...
If you're only giving the message when the username doesn't exist, wouldn't that mean the attacker would know when the username does exist?
Show HN: My 8th grade documentary on cryptography (2005)
Tokyo's density is more like 8800/km^2
Silly rant... It would be more useful to explore why a service/site would like to 'hide' user names... and how it should be done.

If a site/service needs to hide user names then it needs to do a better job with signups. It's possible to hide user names / emails during signups too and say: "if you already have an account you'll get a reset password link otherwise welcome message from us".
> These capabilities should not be monolithic. Individuals should be free to use, modify, or not use these services and their higher level APIs.

Let's hope they mean it.

> While we disagree with some of the arguments and questionable rhetoric and timing of the Rocket announcement, we hope that we can all continue to be guided by what is best for users and developers.

Interesting way to end their reply to the announcement of Rocket. The whole post reads like a typical PR response without real arguments. I'm looking forward to their followup post.
It's quite likely that the skill and experience level of the average OpenJDK Hotspot committer is a couple notches above the average... and to them things like the manual resource management you have to put up with in C/C++ are not a pointless distraction from their business problem, they are a core part of it.

Besides there are JVMs implemented in Java too, just not with as high performance as Hotspot... search for Maxine or Jikes RVM.
Feeling nostalgic as I enter my last week of college classes. Perhaps some people will find this funny. I guess some passions never change...

(We had to find an "expert" for our documentary -- not so easy for this subject -- so I gave my dad a script. That's him. He's not an expert.)
Two of those 3 are peripheral to the tech world. They employ tech to disrupt other industries. And dropbox is not disruptive. It competes with similar offerings from the tech giants.

But stuff like Oculus is bought in its infancy - that is not desire to profit, but to control. FB could have acquired 20-30% of the company to provide them with liquidity.
"We of docker, advise docker. "

Despite their arguments being valid or not, I cannot help but hearing this message over and over in my head.
Why is it for the government to decide for the people how much time to work? where is the individual freedom of choice?
How Wealthfront Uses Misleading Charts to Make a 2% Improvement Look Like 100%
Exponential backoffs also have the problem that it makes it far easier to lock someone out of their account. Or rather, it makes it possible to lock someone out of their account for an arbitrary amount of time.

> When a password is set check it isn't in a common password dictionary

I agree with this with short passwords. But for passphrases? No. I find it rather frustrating that (ex) diceware passwords are often rejected as too insecure or flagged with a nasty warning.
Feds want Apple’s help to defeat encrypted phones, new legal case shows
To amplify a bit on EGreg's reply: In 2008, several trillion dollars evaporated. That's why "If all the people dependent on the US-dollar-based economy realized what the Federal Reserve has been doing, there would be hyperinflation" is false. All the people dependent on the US-dollar-based economy realizing what the Fed was doing barely avoided a deflationary collapse.

Now it's true that, if the Fed isn't careful (and lucky?) winding this down, there could be problems. But we are not (yet) at the point where hyperinflation is the rational outcome of the Fed's moves.

> It doesn't "just happen" because the smartest guys in the room are so much smarter than the median that they are effectively fooling all the people, all the time.

By "the smartest guys in the room", I presume you mean the Fed, since you seem to be casting them as the ones who are able to pull the wool over everyone else's eyes. But do you really think that they're enough smarter than the ones at, say, Goldman Sachs, to be able to fool them all the time? I don't.
> While we disagree with some of the arguments and questionable rhetoric and timing of the Rocket announcement, we hope that we can all continue to be guided by what is best for users and developers.

What's he talking about regarding the timing of the announcement?
I get that. But streaming for free over mobile is far from the only way to compete.

T-Mobile is the third-largest carrier in the US. Probably a small minority of T-Mobile users even know about the free streaming feature. If your business plan requires that tiny market segment to bootstrap you, then you need a new business plan.

I just don't see it as a big enough differentiator to kill a new service, even if other carriers started doing something similar to T-Mobile.

A new streaming service doesn't need to rely on free mobile streaming at all to bootstrap; if its focus were mobile streaming, a better answer could be to pre-cache hours worth of streams when on wifi. I end up in dead areas frequently, and I end up in roaming areas where T-Mobile won't give me data at all. I'd love a service that would auto-cache exactly the music I like to listen to so I could play it when roaming.

I've heard Spotify CAN cache, but it's too expensive for my tastes. Something like a cacheable Pandora would be nice.

But my point is that while yes, it grants an edge to certain established businesses, it's not an insurmountable barrier. Not like Comcast throttling Netflix; if you can't use the service in its primary form, it's DOA. And T-Mobile seems to be adding new services pretty quickly: Even indie stations like Radio Paradise are on the list.