skysight-inc/HackerNews huggingface dataset:
If anyone is interested in getting into algo trading, other books not mentioned but are highly regarded are:

- "The Evaluation and Optimization of Trading Strategies" by Pardo

- "The Elements of Statistical Learning" by Hastie et al
California Lemon Law
California Lemon Law can cover one’s small business lemon. If the car or any other consumer product appeared to be a lemon, one may be entitled to have their money back or make a replacement and even cash settlement. Thus, there is nothing to lose.
Here you have access to free Lemon Law information you need calemonlawinfo.com
Having a per-user pricing model also helps :)

Sorry not trying to detract from the stat, but it's worth adding that bit of context. Per-user priced startups who create an awesome product are in a sweet spot when it comes to ramping up their paying customer metric. I admit I'm quite envious of SaaS startups like this, or like Slack that have nailed it on execution and can linearly scale their price according to the size of an organization.

Definitely something I tell new entrants to SaaS to bear in mind.

(I run a SaaS based on the more traditional "3 plan" model)
The original post doesn't claim they didn't do marketing. In fact, the first sentence in the post is "Short answer: great product, some marketing and a bit of luck.".

The whole quote about "without any marketing is" is:

Pipedrive could have grown to 10,000 paying customers without any marketing: by describing it as "it's a piece of sales software" on an uncrawlable site without any design, without onboarding emails, without press mentions, without a single ad and blog post.

I took that as the author using hyperbole to critique how "enterprise" sales systems work by literally just existing.
The Republican Party and to a greater extent, the Tea Party, have mobilized a mostly-white, mostly-male, mostly-middle-to-lower-class pool of voters who are in many cases irrational - voting against their better interests in the name of conviction, mostly based on race and religion. It's why there is constant saber-rattling about "wedge issues" like abortion and "takers" despite a significant portion of Tea Party voters being around or below the poverty line, or reliant on some degree of public assistance.

This army of people does often mobilize as a single unit, dictated to through the likes of Fox News. Talk about how black people want free "X" and you can get lots of people to fill out a form letter without trying.

We're a Republic for the very reason that it was known that en-masse, often times people are irrational and do go against their own benefit for ideology.

http://www.theguardian.com/world/2012/oct/29/working-class-v...
Why index from 1 or 0 when you can overwrite $[ in perl and index from ANYWHERE?

(Dammit, as of Perl 5.16 this is not merely deprecated but outsourced to a module ... mutter, grumble)
Also, "... used by 20 or so companies" is marketing. Sometimes getting to 1 company can be challenging.
> I don't know, I would google it

That's exactly what I would answer and that would exactly be the reason why most companies won't hire me.
No, they only have they key if they have the address of the content, which may not even be publicly known.

https://wiki.freenetproject.org/Plausible_deniability
In the age of zero cost "letter writing" why would anyone consider the count of letters received as a valid indicator of sentiment? There are other legitimate means to determine public opinion if that is what the FCC really wants to know. My fear is that they don't really care what the public thinks.
Could have been an inside job, but I wouldn't dismiss the possibility of some kind of extreme social engineering, where an outsider gained trust and was able to glean a lot of the information you mention through non-technical means.
The IP address of a computer should never be known. It should be impossible to ping a computer directly. DNS servers should be the proxy who get requests and fetch data on behalf of a client. They cache and mask DoS attacks. Clients and user-facing machines only communicate with proxies
The ones kidnaped and taken to Guantanamo would disagree also.
Conference Proposals That Don’t Suck
https://www.riskbasedsecurity.com/2014/12/a-breakdown-and-an... < for me is the canonical source of news.
I would like to propose a new hypothesis. Autism rates are linked to the incidence of people non-ironically drinking fruit juices to cleanse themselves of "toxins."
Will trust, connection, and confidence win you better clients?
Browser progress bars are hardly reliable though.

IE's can get to ~80% before a single byte is received.
A correlation would certainly help back up their suggestion (but not prove), but lack of one wouldn't necessarily mean they were wrong as it would be impossible to control against other possible factors.
Since ETags are optional in the HTTP-1.1 spec, I think we should all just be able to turn them off in our browser. But I can't find an about:config setting in Firefox to do it. WTF, Moz people? Fixing the protocol itself seems possible, too. Have the client side compute a hash of the image (once, upon first retrieval of the image) and cache that with the image. The hash algorithm will be specified in the protocol. Then when the client side wants to know if the image has changed, it sends the hash that it computed. No choice on the server's part, no ability to make the client store an ETag full of arbitrary data. (Yes, malicious servers could perturb their images for every HTTP connection, and precompute the hash, and then store that hash so when the browser came back later, the server could id the browser from the perturbed image hash the client sent. But at least this would require running an expensive hash function for every connection. For that matter, cut out the middle-man. Any server that uses dynamically generated HTML can embed a 1x1 transparent GIF in the page, the URL to which is uniquely generated URL. Then any GET request on that uniquely generated URL would identify the browser. But a cache clear would solve both of those, so at least we'd have a counter-measure...)
Wellable Wants to Simplify Your Company Wellness Program
Whilst I agree that following security best practices is important, I think you miss the point of my post. WE are implementing the rules they drew up. From what I can see they did not.
Unfortunately, I don't think there are historical numbers on Autism diagnoses that fit with our current understandings. The widespread recognition and frequent diagnoses of autism is a relatively recent phenomenon.

In other words, even if rate of incidence is declining, rate of diagnoses has sharply risen in recent decades, complicating the data.
What about M2M communication? Or server initiated communication (something like LWM2M)? How would you get around having an IP address there?
Good point. That said, in the first 3 years of Pipedrive it too had the good old "3 plan" model. There was no dramatic change in traction after flicking the switch.
The keywords is "presumably". There should only be a drop if your hypothesis is correct which given population growth, car ownership trends and overall economic growth is doubtful.
Rewriting it as follows, with an overflow check:

void memzero_range(char* array, int start, int end) {
int i = start;
while (i < end) {
array[i] = 0;
if (i == INT_MAX) {
assert("overflow!");
}
i++;
}
}

Clang does indeed manage to see that the check is equivalent to a start > end case (with -O1) and hoists it out of the loop. It also then rewrites the body of the loop to use the LLVM memset intrinsic!
http://www.epa.gov/air/airpolldata.html

There are probably more APIs out there. Autism numbers by location should be known. Simple correlation could go a long way to check the consistency of the hypothesis.

EDIT: The autism data needed would be age of diagnosis, to map it to the proper air quality metric.
The app isn't out yet but the Bluetooth API is fairly simple: https://github.com/neilpa/circulate and I ended up hacking together a very basic app in node.js in about 3 hours.
Yeah, V8 is a bit of an odd one out here. Everyone else just promotes once a signed 32-bit int overflows.
My reasons are complicated and probably sound loony to you, but I'm sure I would find ways to get distracted by the web on the kindle (hey, look at me, I'm responding to you 10 minutes after you posted on a dead thread). Moreover, I want hardware that just can't possibly fall prey to practices like having books removed from it by Amazon or having my reading habits reported to Amazon. The only way to ensure that thing is with free software and/or no internet hardware.

I've been looking for a long time for an e-reader that I like. My ideal music player has been a Sansa Clip+ with Rockbox installed on it. Cheap, featureful, runs a free OS. I have a large collection of mathematical pdfs I'd like to read, but I have not found the device to read them on.

For what I want, printed copies are still hard to beat.
x86 doesn't support it.
Why You Should Demand Proof on North Korea and Sony
Tom and Jerry Kids Show – Tom and Jerry Episodes 01
Show HN: Tcomb-form – React.js UI library for developing forms writing less code
They went into the computer lab at their university

That's civilian; the military is a whole 'nother story:

From a Reuters story about the Sony hack [0]:

Military hackers are among the most talented, and rewarded, people in North Korea, handpicked and trained from as young as 17, said Jang Se-yul, who studied with them at North Korea's military college for computer science, or the University of Automation, before defecting to the South six years ago.

Speaking to Reuters in Seoul, he said the Bureau 121 unit comprises about 1,800 cyber-warriors, and is considered the elite of the military.

"For them, the strongest weapon is cyber. In North Korea, it’s called the Secret War," Jang said.

One of his friends works in an overseas team of the unit, and is ostensibly an employee of a North Korean trading firm, Jang said. Back home, the friend and his family have been given a large state-allocated apartment in an upscale part of Pyongyang, Jang said.

[0] http://www.reuters.com/article/2014/12/05/us-sony-cybersecur...
What kind of position is it? Even for a junior developer position two months of experience is very little.
maybe. i'd also be interested in population growth and migration into urban areas.
If you'd answer that for everything than it might be a red flag, but i think as long as you can demonstrate actual competence, at least enough to be able to judge the quality and merit of what you're googling, then it shouldn't be a problem.

Google and SO are too valuable not to use sometimes, and for PHP, php.net is almost unavoidable.
This exploit requires the currently logged in user to be a member of the 'Admin' or 'Administrators' on OSX or Windows respectively. Windows also employs an innovative "defense by frustration" strategy, where the control panel is wildly different in every damn version[1].

Still, you should be locking the screen if you leave your device unattended. The only things OTP guards against in a physical access scenario are hardware keyloggers and shoulder-surfing, neither of which were part of this attack.

[1] 😉 Just kidding, mostly.
I guess it was changed. When I ran a node a years ago the only option was to encrypt the entire store with one key.
Show HN: DialZoo for iOS. Call emails(for free), not phones
What about a movie like Syriana?
> On a side note, living in Portugal, it was odd to learn that call center jobs are the de-facto go-to job for foreigners and the jobless. Overwhelmingly so.

Yeah, it's cheaper for the companies* to hire call center operators than to solve their clients' problems.

*Not saying telcos, but of course telcos. :)
The Secret World of Stolen Smartphones, Where Business Is Booming
https://snowdrift.coop/p/snowdrift/feed can be fed into an RSS reader, but it's not the blog specifically, it's a busier list of all sorts of activity, including links to blog posts.
Is there any information whether the fix is in 3.18.1, which was released yesterday?
Rust does "computer" (silently overflowing) arithmetic by default. Saturating[0] and checked[1] are optionally available but require converting to methods (and some other changes for checked as it returns an Option)

[0] http://doc.rust-lang.org/std/num/trait.Int.html#tymethod.sat...

[1] http://doc.rust-lang.org/std/num/trait.Int.html#tymethod.che...
It's more the sociological Internet-savvyness which strikes me as unlikely than the technical feat. Besides, we don't know the relative importance of computer hacking skills vs. social engineering vs. victim incompetence in the breach's success, although we know that all three were required to make this possible.
That's good point, because the rate is, of course, escalating.

It is interesting that these sorts of articles ("BPA exposure associated with 7 point IQ decrease" was a recent one on the HN front page) seem to gloss over the fact that when these exposures were higher, the Flynn Effect continued unabated. Lead is another substance that, although nasty, is blamed for IQ declines, yet, when lead levels were highest, average IQs continued to rise. Now that lead levels are plumbing new lows, is there evidence that those "lost" IQ points have been gained by younger generations? If BPA is banned, I am sure that there will be scant evidence of those 7 IQ points coming back in a generation or 2 (if anyone bothers looking). Your point about inter-generational autism rates is similar.

I'm not an expert, but I can't take these sorts of environmental toxicity studies seriously anymore.
Yet another example of meme-science. Only idiots would try to explain a complex, subtle phenomena to a single environmental factor.
if North Korea really wanted to train a cadre of hackers.

They've done this -- they have an elite military-hacker unit called Bureau 121 of about 1800 people, as described by a defector in a recent Reuters story I quote in my comment above:

https://news.ycombinator.com/item?id=8767033
I didn't know that. Is that a law, or just the way it's currently done?
FYI that link is 404
One thing I miss a bit is that I cannot just run a small server somewhere, because of things like NAT. Although this "addressability" problem is slowly solved by using a bigger address space.

With the influx of low power devices, implementing distributed versions of many of today's centralized services could be much more fun.
Shame, I tried utf256.com and it doesn't exist ;)

Great talk. I love how pointing out all the horribleness of languages makes me realize there must be something better to be had. Now we just need a language that removes all the nonsense he describes (and can of course be programmed by Business folks!)
Awesome talk (I've seen only the first 15 minutes, gotta get back to work). BTW Although it's not a joke language and people actually use it (and some apparently like it), K was worth mentioning there right after APL.
I didn't interpret the article as just listing Mayer's faults.

It also says decline is inevitable for all big companies, and the process is accelerated in tech companies (like everything else in their lifecycle). Turnarounds are rare, and no choice of CEO would have made a difference for Yahoo.
Exactly my point – it's unreasonable to expect that higher level of reverse engineering will be done reliably for every release of even a small percentage of the apps being published.
The Limits of Police Subterfuge
We built one - or more like, we're building one. Not a HN clone, but a tool to let you create a HN clone.

http://postatic.com

It's a work in progress, but there are handful of cool sites that have been created so far.

Examples

http://tools.robingood.com
http://self.postatic.com
http://www.slackchats.com
"There is a large inherited component to autism, but lead researcher Dr Marc Weisskopf said there was mounting evidence that air pollution may play a role too."
India launches largest rocket into space [video]
I applaud the author's brutal honesty. This seems like a real-world problem that is likely to affect many teams wanting to jump on the bandwagon.
Very nice video, great use of slides as mentioned elsewhere.

In case someone was going to take encyclopaedic knowledge away from this, the Greek semi-colon is actually a mid-dot-like period character (not exactly mid-dot, as I think that's quite fat). And since we're on the subject, is no separate unicode "Greek questionmark" character, so you'll have a hard time compiling BS 1.0.

Although the fix is obvious - through the UTF256 character submission website ;)
The author mentions 2 backtesting platforms, which platform is better: BattleFin or Quantopian?
> ... in reality the entire West acts as one.

You might have to narrow the definition of 'reality' somewhat for that to become true.
>great product, some marketing and a bit of luck

no shit Sherlock
Please remind me again why we spend BILLIONS on Intel, let them trample our rights, and operate in complete darkness? Oh yeah it's to prevent... Oh, well, uh....

What use is the FBI/CIA/NSA/etc good for if the same attacks happen regardless of how much money we funnel their way? I couldn't care less about this movie, I might have watched it when it came out on DVD but pulling it from theatres because of threats from an unknown entity? Even if it's from NK that's an even bigger reason to ignore it.

This is a dangerous precedent we are setting when a threat can stop a movie from getting released. We are caving to terrorism (this is probably one of the first times ever "we are letting the terrorists win" actually fits the situation) of an unknown entity.
I would take "Person of Interest" out of that list. As a non-American, I don't feel it's US propaganda.
Deal forcing Microsoft to offer browser choices ends
> I won't respond to the drive-by ad hominem.

For the record, I appreciate your technical critiques! But you seem to take a perverse delight in being the critic.
You could also make the argument that publishers are getting pennies for those ads because they're running thirty of them on a page. I've done tons of ad work online, many specs have limits on how taxing the ads can be for the end user's computer not because they don't want to degrade the experience, but so they can run 10 ads on a page at once.
Pharrell made less than $3,000 from 43M Pandora streams of “Happy”
It's worth pointing out that many of these startup "threats" use AWS, including Postmates (https://angel.co/postmates/jobs/44964-software-engineer-infr...).
Mitch Altman on Living from Your Passion
The keywords is "presumably". There should only be a drop if your hypothesis is correct which given population growth, car ownership trends and overall economic growth is doubtful.

I think it's safe to say, that, in the West, air pollution has dropped dramatically:
https://en.wikipedia.org/wiki/Great_Smog
I’m torn on the NAT dilemma. One the one hand, it obviously makes point-to-point communication harder. But on the other, for each one of us wondering why we can’t ssh directly into a home machine, there are 10 people with insecure machines protected from automated attacks by the box running NAT.

It’s probably helped at least as much as it’s hindered
Honest question on your last point: What would you offer to prevent the somewhat dark-market forming around the limited number of meaningful identifiers? Using non-meaningful identifiers worked with phone numbers when they were bound to a region, but the web is global so I suppose you would not be happy with something like newprotocol://europe.germany.berlin.101010.servicename ?
Dogfooding in to a False Sense of Security
This "solution" is about on the same level as saying that you just have to pour more stronger lasers into a bigger thicker metal cage that contains hydrogen in order to obtain fusion reactors. That won't get you the pressure and temperatures you want yet? MOAR LAZOR!
Airbnb to Start Collecting Tourist Tax in Amsterdam
Amazon Brings One-Hour Delivery to NYC with Prime Now
This has happened at plenty of places!
Ever worked on a Marvel film? They're insane about security - only certain parts of the studio are actually allowed access to that show's dailies, assets, etc.
"Big Four: Apple, Facebook, Amazon or Google" - he made 9 mistakes in the word 'Microsoft'.
Maker Pro: Soylent Supply Chain
Vonage first VoIP service to debut gesture tech for Android Wear smartwatches
They have a few theoretical physicists (one that I know of) working on string theory, so I wouldn't be surprised if they had a few computer scientists as well. Hacking into a computer system is not exactly rocket science.
It's good to note too that if you really have the skills, you can work for yourself. You don't need to impress someone enough to have them hire you on. Real ability is rare and very valuable so if you can learn that you'll be fine.

What a shop will gain you is a larger pool of capital to work with, so you're open to safer strategies that may only net say 1-5%/mo. (the higher the return the higher the risk, so if you're doing a high risk/reward strategy, the only way to not completely bankrupt is to quit at some point before you blow up, which almost everyone cannot do).

There are a number of ways to pull 1-5% mo. out of capital, which doesn't make it worth the time unless you're well capitalized, so it can make sense to get with a firm, but keep in mind if you have the skills, you don't need to go impress anyone. Your record will speak for itself.
>Pipedrive could have grown to 10,000 paying customers without any marketing...The main thing that got Pipedrive to first 100, 1000 and 10000 customers was having a great product.

I'm sure that it's a great product. That's usually a prerequisite for success, but hardly guarantees it. For every extremely successful product, there are hundreds of equally great products that falter - primarily for lack of luck. This kind of statement shows an extreme lack of perspective.
Well, what incentive do I have to help people I'll never see again with things like holding doors and watching their stuff for them while they have to go to the bathroom, etc? Nothing more than being a good citizen. Freenet and I2P, etc, don't cost you much to run. Just some bandwidth and CPU. If you demand payment for that, you should understand that far from all of the people who needs these networks can pay for it. You can't let greed run everything.
Locale information includes things like encodings to allow a human language to be stored as data.

It is probably the case that the most common encoding is ASCII, with the most common modern encoding being UTF-8. If you're writing code you don't want traced to a particular language, use ASCII.

You would only need a separate encoding if you were going to be writing the code with special characters. In this case a Korean encoding would only be useful for comments and string literals as most computer languages are ASCII based. Since the messages from the malware are apparently in English, this seems superfluous and more like a sign of a false flag operation. In this context, setting a Korean locale is an unnecessary and ill-advised step that would normally force you to go out of your way to get right.

Wikipedia has more specific information regarding Korean language encodings: http://en.wikipedia.org/wiki/Korean_language_and_computers
I would have gone to Berkeley and swayed the decision to use 48bit ipv4.
https://www.youtube.com/watch?v=DEEr6dT-4uQ#t=2067
I don't think that you can accurately measure this, because we didn't have a concept of "autism spectrum disorder" until recently.

I doubt you'd be comparing apples to oranges over a long timeline. Actually, I don't think it's a slam dunk that we have more autism today, or more diagnoses.
If you're addicted price won't matter. You will find a way to get that money and that probably means theft/mugging etc. The only people hurt by this are ordinary citizens.
Analyzing Twitter with Neo4j and Rails
>If this research is correct there should be a corresponding drop in the numbers of autistic children.

That's not correct, this research says nothing about other factors that could affect the rate of occurrence of autism.