skysight-inc/HackerNews huggingface dataset:
Yeah, it's hard to really pin down. They're all really image-conscious and they're looking for specific things -- I don't even know what sometimes. It also really helps to meet with their recruiters that come around your campus and get feedback from them on this. They have a difficult job that they'd love to make easier.

Also keep in mind that they have an image to maintain and some of them are really hurting right now. They may have to look like they're hiring when really they aren't.

(looking over your profile) You might be better off at some of the smaller, specialized HFT shops out there (I hope you like Chicago) if you really know your way around linux kernel programming. That's a really small industry though.
We found 10 repositories which would have been blocked on push with the new restrictions. None of them were found to be malicious.
Ask HN: Holiday project feedback – Bashoto Arcade
I want to expand my main platform at Bashoto https://bashoto.com and I've got a few weeks of open time over break and I'd like to do something different, so here's what I'm thinking:

Pitch

Create local leaderboards with Bashoto Arcade to keep your players coming back to your game by competing with people nearby.

Product

An API for gamemakers to submit their top scores to similar to Google Play Game Services or Swarm. Scores are also submitted with a GPS location. Leaderboards are created locally and in real-time. So if I am playing a game, I see the top scores of people around me and can compete with them. If you had the second highest Flappy Bird score in your town, you'd play all goddamned day until you had the top score, wouldn't you?

Unfair advantage

The local leaderboards are not only a new game mechanic, they'd also be completely fucking FREE. That's right free.99. Maybe I charge for high-usage apps (100k+ scores/day), but I think I can build all this out and have it scale to ~10 million submitted scores a day for dirt cheap out of my pocket based on the tools I've already built out for Bashoto.

Why would I do this?

I want to use those the scores being submitted to create my own "arcade" app that consumers can use to see top games and scores being played in their area. The app turns more into a market place and I can charge for ads in the form of promoted games.

So I have two revenue streams

1. High usage and popular games paying for the API

2. Promotional ads in the arcade app.

And the value it creates for gamedevs for free is:

1. Local leaderboards game mechanic to increase competition and replay value

2. Geospatial game usage analytics (where is your game popular)
Here's a screenshot my current dashboard http://i.imgur.com/2BInRpU.png that would be adapted

3. Exposure in the arcade app

Thoughts?
The problem with flyover country is that you typically have to fly into it - in case of a great disaster, my odds of walking to Indiana aren't great.
A lot of my notes aren't super well organized (and wouldn't make sense w/o scrubbed captured flows) but I just posted a comment on your post thread talking about the BTLE as well as the remote API stuff.
Show HN: Run Haskell Online
Yeah, but typically you have a certain level of trust in your project dependencies. Adding a library to your project often means granting access to your system anyway (if the dependency contains executable code).
You are correct that such things are outside of the C abstract machine, but GCC provides a lot of extensions that are outside of the C abstract machine. For example, __sync_synchronize and other atomic intrinsics (https://gcc.gnu.org/onlinedocs/gcc-4.6.2/gcc/Atomic-Builtins...). C had no memory model when these were introduced (which, of course, is why they were introduced), so they were outside of the C abstract machine.
Hello everyone! I'm the developer. Just found out it was posted here, haha.

Any and all questions welcome!
Monetize Your App with the Printchomp Print API
Also not all of the world agrees upon whether 0 is a natural number or not.
Great work and congrats! I'm a user and love the product, surprise, surprise :)

Great advice on getting focused and measuring the hell out of everything.
I'm reminded of a scene from the Inheritance series of books that I read when I was younger. The main character, Eragon, was telling his mentor how he blessed an orphan baby with the magic words "Atra gülia un ilian tauthr ono un atra ono waíse skölir frá rauthr".

His mentor's response was "Wait what? Are you sure you said skölir, and not sköliro?"

Turns out while he had meant to say "May luck and happiness follow you and may you be shielded from misfortune", he instead said "May luck and happiness follow you and may you be a shield from misfortune". Because of this, the girl grew up prescient, supernaturally aware of when other people were in danger or about to be harmed, and compelled to do anything in her power to protect them from it.

I'm pretty sure I've seen problems that are almost as bad in some of the codebases that I've worked with.
The Persistent APT: A Paradigm Shift in the Threat Landscape
Because he is.

"Social" apps are driven by a small number of trend driven, high sociability, sexually active females in the range of 16ish to 25ish.

If you get them, everybody else will flow to your "service" (other girls will follow the trendsetters--guys will follow the girls). It is no accident that SnapChat got popular from sending naked selfies.
http://i.puthtml.com/content_forever/phpQnrhxq

From Smash Mouth to cryptography and signet rings.

From what I can tell: "Fush Yu Mang" was an album, albums were once made as LPs, which were developed by Western Electric, which was an appendage of AT&T back during the Ma Bell ("We don't care. We dont have to. We're The Phone Company.") days, which had a statue called The Spirit of Communication at its 195 Broadway location, which jumps directly to AUTODIN for some reason (195 Broadway was owned by Western Union... ?), which leads to leased lines, which leads to OSI, PKI, csexps, digital signatures, and signet rings.

The End.

It's like when I take too much caffeine.
What? He's saying worked for them. It's all good advice and he gives many caveats about how it may not work for everyone.
And don't copy&paste the above code into the terminal! (Potential vulnerability, though HN is probably safe.)
Yes, I asked for a CVE ID for hg but the mitre folks never got back to me.
Just for a second imagine a men-only conference for developers. Shit-storm would be stronger than anything you've ever seen.
While I agree that IT industry is generally dominated by white men (no racism implied, I simply haven't seen a single black programmer yet), such events might be useful for women, but still would be interesting for me as a man to attend. I'd like to know what's going on on the other side of this whole situation. How are we going to bring equality here if we are separating ourselves from each other? I recently visited a conference in Moscow (Highload++), and there wasn't a single woman presenting. That's just sad. In the company I work for right now, there are probably about 10 women writing code vs over a 1000 men.
Between that slide and some easily-googleable numbers about their 2012 revenue, it's not too difficult to come up with a reasonable guess about the values on the Y-axis (assuming a linear scale)
Total fossil fuel depletion is a bit extreme, but let's talk about oil depletion:

First of course, we'll rapidly turn to a conservation economy where energy(and critical commodities) are used only for necessities , probably under some kind of martial law. And of course we have some huge reserves for a case like that.

But , we have such a huge redundancy in food. If we go to the basics, people can live on a big bowl of rice/wheat a day. That comes down 100-200g per person per day. that's tiny.

We also have some amount of fuel diversity - some vehicles models can run on pure ethanol, some can easily converted to natural gas(LNG), and we already have 40K LNG based trucks in the u.s. .

Also there is at least one plant that can make fertilizer from LNG, and others can be built.

As for drugs, which are usually made using precursors from oil derivatives, there are new methods to make those precursors from other means. And some drugs are'nt manufactured locally , but it's possible to import using fuel reserves,or by converting ships to lng.

And since it's under martial law, i assume we will work on rapidly converting our economy to LNG, so as to not be dependent on reserves and increase the living standards .
Ok, it's in Wikipedia! But, backbone's are normally singular and control a single organism. I think that the metaphore held fine until 1995, but that which has come since then does not look, act or smell like a backbone to me...

(see what I did there with the metaphore thing :))
Indeed. Should we also make Black men only conferences to encourage more male Black engineers and cofounders?
Wow, I applaud you for defending marketing on HN. Bravo, brave soul. I wholeheartedly agree as well.
>In addition, the following updated versions of Git address this vulnerability: Not everyone has the patch.

The Git core team has announced maintenance releases for all current versions of Git (v1.8.5.6, v1.9.5, v2.0.5, v2.1.4, and v2.2.1).

I have one Windows machine and went to update http://git-scm.com/download/win (preview Version 1.9.4)

It was released 3 months ago, on 2014-09-29.

https://msysgit.github.io (Version 1.9.5 preview BUT no documentation that this is for a security fix)

Doesn't seem like I can update my git client
You're looking at things from the perspective of IE6 in 2014, not IE6 in 2001. Of course it seems shitty today, but that's because browsers from then are shitty compared to browsers today. It's only a victim of its success and the fact that rolling updates weren't a plausible model then.

If the contemporaneous Netscape 6 had been anywhere near as successful as IE6, you'd be cursing it now. Almost certainly more than you curse IE6, whose problems come not from the software itself but the fact that it was good enough for companies to lock it down as the standard and the fact it went for years without real competition. Netscape 6 didn't see this fate, because it was... outcompeted in the marketplace.
Global Internet Authority ICANN Hacked Due to Spear Phishing Scam
Client Updates Button Without Website Monitoring Software, Loses $4k in Sales
Why not? Are researches not hungry for grants, quick fame and cheap sensations? Do they never neglect subtleties of statistical models, like necessity of a third "control group"? Are they all flawless and brilliant, or there might be some halo effect, overconfidence and jumping to conclusions? Are they never trying find a support for their hypothesis form correlations barely distinguishable statistically? Kahneman suggest that this is rather common.

The first question is "How does they manage to properly test this "link" with a distinct control group". Could you explain, please.

So, I prefer to read Simon Baron-Cohen.
Regarding your first point, changing the tipping medium does not solve the underlying problem. Tipping sucks.
On Mac OS X, from Homebrew. The bug doesn't seem to affect Linux (most Linux file systems are case sensitive). I'm not sure about for Windows.
> Also, on new enough kernels with new enough glibc (I think), even 32-bit programs use vdso timing.

I saw a patch being discussed but wasn't sure if it made it in. I'd rather it didn't because some people are insisting they need it so they can run 32bit Java (for performance reasons because GC is marginally faster). The irony is entirely lost on them.

Really useful little set of experiments, good to have them in one place.

Not familliar with pcmcs, what are they?
> Do you know in which part of the phones this is supposed to be in?

The baseband chip.. it runs its own RTOS (separate from Android/ios/etc):
http://en.wikipedia.org/wiki/Baseband_processor

Rather than explaining, I think this link is a pretty good example: a chip from qualcomm that was sold at least through 2012:

http://www.osnews.com/story/27416/The_second_operating_syste...

It was demonstrated at BlackHat in 2011 on an iPhone 4 and HTC Dream (android):

https://www.blackhat.com/html/bh-dc-11/bh-dc-11-briefings.ht...

http://www.infoworld.com/article/2625180/smartphones/coming-...

Edit: Slides from a talk at DeepSec:

http://2010.hack.lu/archive/2010/Weinmann-All-Your-Baseband-...

Edit: video:
https://www.youtube.com/watch?v=fQqv0v14KKY

edit: I think this is the paper:
https://www.usenix.org/system/files/conference/woot12/woot12...
But why serve house ads repeatedly when you can tap into programmatic exchange and monetize at least a portion of those impressions? Programmatic doesn't need to be first look on all impressions.

If I'm on drdobbs.com in one tab and only being served house ads, but in my second tab I have retargeted ads being served to me, that's lost revenue for drdobbs.com
Voice of reason, thank god. Are we working at P&G here? This is startupland, nothing is scientific in the academic sense, least of all marketing or customer behavior. "Peer reviewed?" Please....
Ah, I was probably tipping more average amounts. But most of the time I just walk in to town and pick things up myself, so very small sample size.

Next time I order delivery I'll have to try a giant tip and see what happens.
What, exactly, is the segment misrepresenting? It was mostly video clips of Ayn Rand expressing her thoughts directly, with a voice-over (rightly) mocking conservatives for supporting her given the fact that she was both militantly atheist and militantly pro-choice.
Instant Search in 966.141 Dribbble shots
...though paying off handsomely.
You were and are vulnerable to malicious projects by running:

git clone git://...
make

or anything similar, since you are running arbitrary code out of the repository. This release fixes the problem of:

git clone git://...
git show

etc. Git cannot fix the "clone and run" problem, which is a social one. But it should be safe to run git commands to inspect the repository contents.
Definitely affects Windows. Git for Windows users should update to 1.9.5 immediately. https://msysgit.github.io/
As in many things, it's a combination of both. For example:

- We wanted no more than one recurrent layer, as it's a big bottleneck to parallelization.

- The recurrent layer should go "higher" in the network, as it's more effective at propagating long-range context when using the network's learned feature representation than using raw input values.

Other decisions are guided by a combination of trial+error and intuition. We started on much smaller datasets which can give you a feel for the bias/variance tradeoff as a function of the number of layers, the layer sizes, and other hyperparameters.
It's not just the SR-71, also that ancient, straight-winged laggard the A-10. The internet loves these two aircraft.
Use These Cover Letters That CEOs Read
Can you use Thruk?
All it takes is one dependency getting infected to ruin your day (or more).
In Presto, we support the popular but non-standard IF construct as a shorthand for CASE, so you can do this: sum(if(bar, foo))

We also have a count_if() function: count_if(bar)

http://prestodb.io/docs/current/functions/conditional.html#i...

http://prestodb.io/docs/current/functions/aggregate.html#cou...
Misfortune Cookie crumbles router security: '12 MILLION+' in hijack risk
Wow downvoting because I ask for binaries instead of source? Majority of people reading this want a fast, immediate solution from a trustworthy source.

edit: obvious places still haven't updated. git-scm still provides 6-month-old binaries
Bootstrapping vs. Billionaires: How to Grow Market Share vs. Massive Competitors
One idea: I can easily imagine research studies getting IRB approval for this. The red light could alter the subject's behavior, and video analysis could be part of the metrics (for measuring attention/distraction or gross estimates of gaze, etc).
My bet: End-to-End encryption, not even automatic but through the use of a plugin, will only appeal to the niche of people who are concerned about that and may not be using GMail. For the most part of its user base, nothing will change.

Things will start to move for the majority when end-to-end encryption can be done directly in the protocol, by default, i.e anything but email.
Tarantulas aren't insects.
I did some back-of-napkin calculations on the Falcon 9's 1st stage numbers here: http://www.spaceflight101.com/falcon-9-v11.html

Including the rest of the dry mass fraction of the vehicle, (the tank, the structure to hold the tank etc), each Merlin's dry thrust-to-weight ratio drops to 43.05.

(654kN * 1000 N / kN / 9.8 (kg * m/s2)) / (Inert mass / 9.0).

The GE F414 in the high-thrust configuration is the dry-mass comparison using COTS. Let's say it's 8.0 when factoring in some control system and inlets.

Isp of a jet engine burning liquid methane is ~2000 even in full reheat. Isp of rocket engine is ~330 for methane-lox in the newer full-feed Merlin. The impulse to fuel weight ratio is almost 10x inverse in favor of the air-breathing system.

The dry mass thrust-to-weight is decisively in favor of the rocket engine. The wet mass thrust-to-weight is decisively in favor of the jet engine.
Affect of these factors on cost is inconclusive from the napkin.

How can air-breathing engines potentially lower the TCO?

46 reusable RS-25 were flown on 135 shuttle missions, so the average lifetime of each engine was...8. The lifetime of a gas turbine is measured in thousands of hours, so let's say 200 missions and without so many major overhauls. Even if Space X is pulling out some cool voodoo for Merlin reuse-ability, gas turbines are in a different league in terms of both reliability and lifetime.

While a 1st stage rocket body has to re-enter, land, and be transported back to the launch site, an air-breathing 0.5 stage can fly itself back from its short distance downrange, thereby incurring zero transport cost back to the launch site.

An extreme application of air-breathing might include ram-jet inlets that opened after mach ~1.8 and took over air-breathing duties up to Mach 4.0 as the 414's idled. Even in that case, the whole system is not that far downrange and can use altitude to make up quite a bit of the journey back and use some vertical landing system if it saves weight. The fuel efficiency lets you do this with 414's in spite of their lower T:W.

Does using air-breathing assist pay off by making a lighter 1st stage or heat-shielding the 1st stage to make a faster release point? Only extensive analysis of the various options can answer these questions. I believe the mechanisms are there, and that's what justifies the design research.
Yeah, you can either mitm or just block prodwus0sts.blob.core.windows.net to prevent data from being PUT to Microsoft servers. In that case you'd want to decode the data stream (or access the BTLE sensor access protocol that some people have already reversed, but doesn't seem to be publicly documented anywhere yet)
I think you need to read up on what a sommelier is and what the exam is like. People pass it, and the pass rate is such that it's not due to random chance.

I realize that you have a study that's vaguely related but the two are not the same. Not at all.

What are the credentials of the people on the "wine tasting panel"? I can't find that information anywhere.
I feel like any discussion about worst languages would be incomplete without brainfuck [0], an 8-command turing complete joke.

[0] http://en.wikipedia.org/wiki/Brainfuck
The "improved version of the phone network" metaphor is the exact reason why we should thank our lucky stars for the Internet we have today.

If a global architecture of this scale were to be planned out today, every nation would have its own competing standard for civilian oversight. There would be dozens of competing commercial standards...and Sprint would change theirs every 24 months.

Copyright interests, ISP billing meters, Computer A only working with Network A...all these things would be a part of an Internet designed from the ground up instead of what we have today.

The Internet certainly has its warts, but at least it's gotten us this far.
"A grain elevator full of maize is not accessible calories."

Only to those who so little imagination they literally can't pound rocks: http://en.wikipedia.org/wiki/Metate

Although as Nuclear War Survival Skills (NWSS) points out, bundling three metal pipes together works a lot better.

Boil with water and you have edible gruel. Maybe not enough fat to keep children thriving (NWSS said that about wheat, at least), but that can wait a bit.
Ultimately this is a good problem to have, no? Your startup is alive and growing, you can afford an ops team, your product proved itself. Most startups will have been dead for years at this point.
I would suggest having much more continuity in the content. I think there would be much more value in a probabilistic content retrieval mechanism that doesn't combine pieces of content but understands how interesting and relevant the content is and how long it would take to consume. It really isn't far off from what you have, just a lot more simple and would be much more pleasant to read.
Apparently! I was extremely disappointed, got this "unlocked international" phone but it's an AT&T version that has a locked bootloader, I was incredibly blown because I can't even mess around with the internals. I think the Nexus models and the newest Moto phones are the only ones with L so far. Grr...
git-scm does not seem to be a reliable source anymore. For Windows, go directly here: https://msysgit.github.io/
Current discussion https://news.ycombinator.com/item?id=8769667 (101 points, 29 minutes ago, 21 comments) (It was submitted 5 minutes before this.)
PCI DSS 3.0 SAQ a vs. SAQ A-EP
That's what I used for about a year before Spectacle, but it's too heavyweight for my taste.
Yep, I like adding some space between windows.

I proposed something like that for spectale some weeks ago. Got refused. https://github.com/eczarny/spectacle/issues/290

I mostly use apps in fullscreen and sometimes need to see 3 /3 apps at the same time, then switch to fullscreen, then back to tiled mode again...

Small aesthetic gaps around windows may not be such a waste of screen estate.
If you are selling crafts online, you have to take a purchasers location in order to deliver stuff. If you are doing this through your own shop, then all the decent ecommerce backends have plugins for eu vat stuff and if you are doing it through an existing marketplace the same applies. And I don't think whether they are women really affects this.
I don’t think your assumption holds for repeat interactions. Drivers want to get consistently tipped, so they do have an incentive for treating people who already tipped them well, namely insuring that those people will remain customers.
FWIW, we've been pretty happy with the Froala Editor: https://editor.froala.com/
So close to having a pair of Darwin Award winners.
Good points, awareness certainly is an issue. I found out a few months ago and just finished updating the payment system for my site. I have learned a few more interesting gotchas:

- You are responsible for verifying the location of your buyer (how? who knows!)

- It is not enough to know the country code of your buyer. For example the Canary Islands have country code ES but have a different VAT rate from mainland Spain

- Some VAT rates can be fractional, so you can run into problems if you were using integer calculations in cents to prevent rounding errors (thankfully, for digital services all VAT numbers are round number starting this year, let's hope it stays that way)

- If you register for a MOSS then you pay VAT in euros, but you may have charged your customer in a local currency (GBP, DKK, CZK or SEK). You need to use the exchange rate at the day of the sale

This is just the top of my head, there are probably a bunch of minor issues I forgot.