skysight-inc/HackerNews huggingface dataset:
I traded in my MacBook for an i7 ATIV Book 9 Plus about a year and a half ago. The Samsung was (I think) thinner and lighter than my Air, but had a higher than MBPr resolution display and i7 processor. Basically like a high end MBPr in an Air form factor. The Samsung was a pretty dramatic upgrade and I sold my MacBook almost immediately. I only miss it occasionally when I'd like to be able to build an iOS app.

Today, I'm using a Surface Pro 3 and actually like it even better than the Samsung. There's something impressive about being able to carry a full i7 development machine around like it's a thin, hardcover book.
Reading the article, I was reminded of pg's essay on trying to create another Silicon Valley: http://www.paulgraham.com/siliconvalley.html

I think its great that the author is putting his own money and efforts into making northwest Arkansas a better hub for entrepreneurs. However, I think that one of the reasons that it was/is difficult to get money from investors in the area is due to the fact that many of the current investors may not have earned the money through recent startups, which seems to be a key factor in whether they would want to invest in other startups in the area.
Inb4 the newLISP cultists arrive.
Localhost connections? Watching your own traffic on a LAN for debugging purposes?
Cops need to get jail time.
You must be Korean, no?
You mean like the stability in the cost of things like food and gas?
Semantically if it's a surcharge for paying by CC it's illegal in several states, but not if it's stated as a discount for non-CC transactions.

http://www.ncsl.org/research/financial-services-and-commerce...
I will say something that is very unusual but I hope other fellow HNers do the same...

They pay me in CASH inside a cool envelope.

And it feels great seeing real cash, the volume and smell.
There is nothing on the market competitive with a MBPr in terms of hardware (completely ignoring software).

The XPS 15 is the closest, and it's apparently plagued by coil whine.
While I certainly agree that STEM students with a background in humanities would be valuable, we still need to ask if this is a rational career path for someone with this kind of ability.

Medicine is also a good career choice for academically talented students with strength in both humanities and science. To get these students over to STEM you'll need to offer career prospects, pay, stability, and prestige comparable to dermatology or radiology.

In short, I can see why STEM employers would want these students, but the students have better options than STEM.
That, a long with many many other things that become a matter of getting a rubber-stamp from some stakeholder that is protecting a fiefdom, but doesn't really have anything to do with why that software is being bought.

Although, legal review is always a good idea to make sure you understand what you are agreeing to.
Great questions.

Hosting on your own: Yes.

Security: Currently a "Roll Your Own" approach, where you wrap GUN behind some firewall/throttling like system.

Why? Because permissions are so app-specific behavior, I haven't figured out how to generalize it. I don't think it is possible to do it, so in the future we'll probably provide various security plugins that come with app specific assumptions.

Scalability: Run the example folder in the GitHub Readme, and open up hundreds of tabs. Gun is running individually in all of them. See how it handles that.

I'm trying to have a production-grade battle-testing suite developed soon, such that you could just run a script, it would ask you how much you want to spend on the test, and then it would deploy a ton of GUN peers to the cloud and generate a ton of traffic and load. This is not available yet, but something I'm focusing on within the next 6months or year.

Anything I can help with?
As Stalin said, quantity has a quality all its own.
Why does there have to be any key transfer at all?
Why are they not generated in a more decentralized manner, at the manufacturer for example?
Why are there servers for the NSA to hack where they can exfiltrate the keys in the first place?

Information minimization and avoiding single points of failures could have prevented this.
What we need to do is to discern between education and training. Once we do that, we can begin to elevate the vocational back to a place where it's valued, and institutions dedicated to education can get back to it and not have it's resources diverted to a task outside the charter of education. I look forward to engaging in the debate of the line between the two.
Great article, but really it's the pun in the name that made it for me. Good job, Count.
I purchase services on behalf of a company; not a huge one but has some "enterprise-y" trappings. That said, make sure you're doing thinking and research about the companies you are targeting with your business. There's no one answer that covers all B2B transactions.

For me, dollar amount matters. Is your service $100/month? It can go on a credit card and get expensed; Legal might take a quick look at your online standard terms and conditions and privacy policy (which must exist if you want to sell to enterprises) but not likely to argue anything.

Is your service $5,000/month? Then I need a contract that is approved by the lawyers and signed and dated by human beings, and an invoice that Finance can validate against the contract for audit control, and then they will send you a check. Because all that is a pain in the butt, I prefer to do the whole thing only once per year on an annual renewal.

Is your service $20,000/month? All the same legal stuff above, but now I might prefer monthly or quarterly invoices for cash flow reasons. But I'm guessing since you're asking here that your SaaS business is probably is not charging $20,000/month. :-)
You shouldn't be editorializing titles. The title should read "Komodia Redirector with SSL Digestor installs non-unique root CA certificates and private keys"
Um, this is missing even a link to an explanation of what the issue actually is, seems to just assume the reader knows. I do not and googling isn't working out. Am I being dense?
> If you want nicer functions, add a new, parallel API.

This has been one of my 'shower' (think about in the shower) projects for quite a while :).

One day I might even take a stab at it.
Seems pretty clear to me. They will try to provide updates for the product faster and with less or no required user interaction, pretty much like any of their competitors are doing currently.

But I'm 100% sure there is nothing in this sentence saying it will be mandatory, or that non-os applications are included in the updates, or that the user cannot opt out of updates.

Sincerely, I'm not sure what's your point here.
Though I never got a degree, I did take a LOT of history on the opposite side of the campus from the CS building. (There were a lot more women on that side of the campus as well, which was nice).

History was tons of fun, and remains one of my favorite types of reading to this day.

More practically, I highly recommend taking a number of courses on writing, because one of the things you'll need to do in your great CS career is communicate effectively to people, up and down your management chain, and to customers. Hell, good writing skills come into play when you're filling-in bug reports.
I appreciate the suggestion and response. Understand it is v.0.1.0 but you should also understand that when you bring something like this out with next to no academic backing behind your theories and algorithms there is DEFINITELY going to be skepticism and doubt.

You are exactly right, though. It's early, and I'll give you the benefit of the doubt that you will achieve what you want.

Also know that there is a TON of research in these areas (which you clearly are aware of based on your comments in this thread) that basically refutes a lot of what you are claiming. I would love to see more clear documentation along with actual proofs showing how your algorithm is sound.

Until then, good luck, and I look forward to hearing about your success!
New Yahoo Mobile Development Suite for App Makers
The overhead of GC is independent of heap size. Take the following variables:

L = total size of live objects in heap
H = maximum size of heap
P = time between collections
R_a = rate of allocation
R_s = rate of heap scanning

It's easy to define P and R_s (assume a mark-sweep collector so we can ignore copy reserve):

P = (H - L) / R_a
R_s = L / P

Substitute and simplify:

R_s = L / ((H - L) / R_a)
R_s = L / (H - L) * R_a

In other words, it doesn't matter how big your heap is. If you make your heap twice the live size, the amount of heap scanning you do will always be equal to your allocation rate times some constant. If H = 2L, that constant is 1.

So the way to improve performance is to cut down on that allocation rate. If you use RAII for most objects, and GC only occasionally, your allocation rate, net of non-GC allocations, will be very low, which means your scanning rate will be very low. You'll have to traverse all live objects every GC cycle, but you'll rarely have to do a GC cycle.
Click on any of the number of links on the front page concerning "Lenovo" or "Superfish".
I'm attempting to draw a connection between your comments on ACID and what ACID actually means, and there doesn't appear to be any parallel.
Some articles posted with a picture of thinkpad which is non-affected products for this issue.

>>Lenovo Y50, Z40, Z50, G50 and Yoga 2 Pro models.

Above is announced from some sources and

>>Lenovo-branded devices sold between September 2014 and January 2015 through consumer online and retail stores, like Best Buy and Amazon.com, are likely affected by the Superfish adware

Has anyone got any additional info?
"Carly Fiorina, former CEO of Hewlett-Packard, credits her degree in philosophy and medieval history in helping her be the first woman to lead a high-tech Fortune 20 corporation."

Yeah, allot of good she did to HP. Hewlett & Packard were engineers.
However distasteful Lenovo's business decision to bundle adware on their consumer laptops, the finger of blame should now rightly point to the third-party software provider, Komodia.

Lenovo did not vet the software properly before bundling it and heads should roll, but I do not think they are deliberately evil or malicious.

If Lenovo are to be condemned, then the entire open-source community must also condemn itself for allowing OpenSSL and Bash to have remained vulnerable for so long. Just like Lenovo, our eyes were wide shut, and it took a shock to open them.
Some of my largest customers pay me via Paypal. I've offered to take credit cards or ACH, but apparently they like Paypal.

Mind you, my largest customers are paying a few thousand dollars a month, so I'm sure they're avoiding paperwork compared to the million-dollar-purchase-order payments.
On the plus side, there's also often very little motivation for the person doing step 2 "provide a PO number" to not sign up for a dollar amount that comfortably covers your expected "interminable amount" of time you'll be providing their purchasing department with credit. You _do_ need to anticipate and factor it in up front though - you can't come back 4 months into the process and say "hey, the price just retroactively went up because you're so slow paying!".
Double standards are also seen in their "Removal Instructions" post on their forum. When uninstalling SuperFish, it seems suddenly important to remove the root certificate...

"It is very important to delete the certificate even though the application itself has been removed."

http://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series/Removal-...

Didn't seem that important earlier today:
https://web.archive.org/web/20150219151726/http://forums.len...

"files in user directory will stay intact for the privacy reason. Registry entry and root certificate will remain as well. "
Someone extracted the certificate from superfish and found that the key was protected with a password. The password turned out to be "komodia" which is a company that makes an ssl redirector. this has lead to people looking at komodia certificates.

more information here http://blog.erratasec.com/2015/02/extracting-superfish-certi...
text-shadow: 0px 0px 7px #DDD;

That 3rd number is a 7px blur radius starting from a 0,0 point and #DDD is light grey, blurring between solid black and solid white. I think you're just weird, very few people consider blurry text preferable.
A net $324B flowed out of China in 2014
It's hard to judge without digging into this spaghetti mess of files. But having the word retarget in your code seems like straight up lying to me.

Tracking is more ambiguous a word and I couldn't find where they define the userid. But however it is generated, it reads like it's unique. And in order to retarget users, you'd have to track which products they've viewed in the first place, that would imply storing browsing history (they deny storing user info as well) and uniquely identifying users across websites.

Given the coding style, I don't think the person(s) who wrote this code is/are doing anything clever other than what it seems.
> Is anyone besides Facebook using Hack?

It's way too early to expect adoption outside of Facebook. It's not even a year old; how many companies were using Python in 1991 or Scala in 2003?
A new version of django-hijack is out
django-hijack, the reusable app that allows superusers to hijack (=login as) and work on behalf of other users without knowing their credentials, now comes with official Python 3 support, CI tests and for- backwards compatibility.
Visit the Github project page https://github.com/arteria/django-hijack or get the latest release from PyPI https://pypi.python.org/pypi/django-hijack.
"Ladies and gentlemen of the jury. We will show you how the defendant used the notorious hacker tool known as 'strings' to facilitate his vendetta against Lenovo."
> The CLR's floating point performance is absolutely abysmal on Xbox 360

Can anyone speculate as to what went wrong here? I thought the Xbox 360 would have very good FP performance.
I don't know German, but I have a huntch that Romanian, my native language, is more complex than German, except that Romanian has firm roots in latin, therefore more people unfamiliar with both will have an easier time with Romanian, since we have a significant portion of our vocabulary similar to Italian or Spanish, plus we borrowed words from French, along with many neologisms coming straight from English. Just because a language is unfamiliar, that does not make it hard or complex, just because you're not speaking it.

Consequently, just because a language seems superficially familiar, that doesn't make it easy to learn - for programming languages it takes weeks to understand the basic necessities, whereas it takes years to become a master, regardless of the programming language you're talking about.

Also, Erlang's Prolog-like syntax sucks, not because it's unfamiliar, but because it objectively sucks.
* https://pypi.python.org/pypi/django-hijack
* https://github.com/arteria/django-hijack
How's that working out for adoption of Python 3?
You should write a post on how to delegate.
I'm a cyborg platypus, nice catch. Just two chromosomes is not enough to express all the variations of an algorithmic gender. And by the way, we also sometimes have Z's (but that's considered a racial thing, so no asking).
>...and eventually gave me my money back. How many Mt. Gox users got their money back?

these are not the same situation and I think it is disingenous to act like it is.

A comparable situation is that when you had your card skimmed and locked up you had to go say 3 days without access to your funds until a new card turned up, and again lets be charitable and say your bank refunded you within 2 weeks. so you were inconvenienced for 3 days and out of pocket for 14 days. if you paid with bitcoin you would not be locked out of your wallet or at risk of further loss, or need to call your bank. now when you scale that up to something like the recent hack at target that resulted in 1000's of stolen CC details along with personal info resulting in a lot of potential for identity theft and CC fraud. If those buyer had all paid in BTC there would be no theft or fraud possible, no need to try and attack the organisation as list of BTC addresses and customer names and addresses are of no use. they may seek to steal the companies bitcoins but securing properly one small area of your network is much easier than securing a huge sprawling network that covers a whole host of functions, where sensitive data is liberally spread around, making for a lot of vectors of attack.

Now Mt Gox is comparable to the Bernie Madoff Ponzi scheme, do you know how many of those investors got their money back?
Writing is quite important in software development, especially on open-source projects where much communication occurs via email and bug tracker. With the glut of projects competing for attention, copywriting ability can be important in attracting other developers to a project.
I've gotten those same questions, but never felt a negative subtext. I've always considered the question an easy way to start a conversation about versatility.
>> I think GoogleX projects are fine, b/c they are in fact PR projects

Two much collaboration with serious companies for that to be true. Unless you're saying everybody invests time and money in such PR efforts.
Openssl and bash serve useful purposes and don't try to sneakily alter the user experience without being upfront about it. Pretty big difference, there.
Honestly, this adds nothing new to the discussion. "Everywhere" with no data to back it up.
TheVerge gave the new xps's touchpad a fairly bad review; but ya, I think it is the biggest blocker for most of us.
I spent the past three days trying to buy a conference ticket. My card wouldn't get accepted, my bank was being incompetent and unhelpful, claiming they weren't seeing any charges pop up.

I didn't even think of it until your post, yet I was still involved in this not five hours ago. When you look back, it's surprising the amount of artificial shit we have to sift through with CCs.
oh snap, the HN "DDOS" has peaked! I'll see what I can do to get things back online. Thanks for putting the github link in here in case others get the same issue.
I'm done with open source web development
.lgbt as a gTLD? LGTM.
List of SSIDs Nintendo 3DS will connect to without user input or confirmation
Raising is a great thing. Bootstrapping feels harder though.
its very easy to predict if a transaction will confirm.
Spinning a lack of reversible transactions as being a "Benefit" is disingenuous because there is real demand for them. You're can't always do business with trusted merchants like Amazon, especially internationally.

The point for #3 is that "How can I use these bitcoins I've been gifted?" is not a real problem for the majority of people. It's a solution to a problem that many don't have.

I'm glad you found my story cute, but fail to see how pointing out imperfections in credit card insurance policies is supporting bitcoin, because bitcoin doesn't fill those imperfections. In fact, even with imperfections, using credit cards are still better than getting my account hacked on a bitcoin exchange.

Bitcoin transactions are also not immediate as you say they are. The entire world's supply of bitcoin is limited to 2.7 transactions a second, meaning if 10 million people used bitcoin, they would only be able to do 1 transaction every 43 days [1].

I'm not even going to go into why you would compare Mt. Gox to Madoff. Madoff is an uninsured investor and in prison, Mt. Gox is an exchange and the thieves are where?

[1](https://bitcointalk.org/index.php?topic=941331.msg10360199#m...)
I feel this is a common situation for many people.
I've used Splunk in the past, which is very good.

Their search interface and field extraction let you perform complex queries on your logs. We used the following query to identify users that were having a bad time on the site, by counting slow queries by user and adding them up:

"slow query" source="/var/log/application.log" | rex field=_raw "in (?<time>\\d+)ms" | search time>2000 | rex field=_raw "User: (?<login>[^\\s]+) " | top login

You can do much more complex queries--it's better to think of Splunk as a temporal database than a log aggregator.

Does anyone know if Graylog or other logging solutions can do the same thing? Splunk is amazing, but it's annoying to manage the infrastructure and it's crazy expensive.
It mostly comes from people buying Amazon gift cards with stolen credit cards.

I wouldn't get anywhere near that site.
EtherChip EC482 Will Bring “Active Steering” Tech for Wi-Fi
Thanks! :)

Quick question though: I'm claiming an AP system, not that I have all three. What research are you referring to that suggests you can't have idempotent/deterministic conflict resolution? CRDTs are out there in the wild and working. Do you have any papers in mind?
And the Oscar goes to..mapped by state
Hm? As a business selling with Stripe, you won't be taking any FX risk. You request $20, and you receive $20 - 0.5%.

I am a huge fan of Matt Levine's work, but the articles you reference are about banks who participate in the FX markets, which is... different.

(Relevant disclosure: I work at Stripe.)
Apple Said to Be Targeting Car Production as Soon as 2020
If you have access to the internal network you don't need SIM card keys which is the subject here.
Less technically inclined people will still buy Lenovo's lower range products, and I'm sure businesses will do the enterprise thing and continue to buy Lenovo, since they tend to be the definition of ossified. But what about power users? I think Lenovo (and ThinkPads in general) have a reputation as the power user computer for Windows and Linux users. Not the biggest hit to be sure, and nothing to get the attention of CNN, but surely Lenovo will lose a certain segment of power users.
Is there any description on how this works? Does it install to a custom folder you specify? Does it alias over currently installed packages? Also, if I run a script of some kind (say make), am I guaranteed to call the right gcc if I install it with NORM?

I'd like to take advantage of something like this, but quite frankly I think you haven't quite hit the nail on the head with regards to https://www.reddit.com/r/dredmorbius/comments/27d5xr/please_....

I don't mean this in any offensive way, of course, but the site leaves something to be wanted describing just _how_ your project works. I can garner a few things from the README and some of the scripts in the repo, but I shouldn't have to read the source code to know where you'll install things.
"Point to the supplier" is a standard tactic, but also wrong.

They did put their customers up to harm, for no other reason then trying to squeeze another buck out of them. They provide no additional benefit to the customer.

OpenSSL and Bash are free services providing benefit to their users.
I understand what you mean.

Could you do me a favor and point me to your favorite description of ACID?
Perhaps you could have it redirect to the wiki?
It's funny that you mention doctors and lawyers, because the way doctors and lawyers artificially keep their numbers small has earned them a very bad reputation among the general populace. They aren't doing it for quality either. They have their own interests in mind (just like businesses do in the STEM case) and they are willing to deny other people the same opportunities in order to get paid more.

My parents are actually doctors and we used to get in debates about this all the time. They of course follow the party line about how an influx into the medical field would lower quality of service. But of course they say that because they want their own earning potential to remain very high.
The upcoming Lenovo LaVie Z machines will weigh 1.7 lbs but be in a bulkier (tough) Magnesium-alloy case. Not sure if they'll have enough RAM, hd-storage, or battery-life for many, although if they're that light I'd probably be happy to carry an ac-adapter around for periodic charging:
http://news.lenovo.com/images/20034/Lenovo%20LaVie%20Z%20Spe...