skysight-inc/HackerNews huggingface dataset:
"The advice to focus on nothing but growth applies to startups where market risk is the dominant risk."

Yep. But there's also a class of startup that we might call the Secret Hoverboard: it's the sort of problem that looks like a Twitter ("would people want to get more stuff delivered if it only costs $5?"), and when you poke at it with the stick of "doing things that don't scale", you see strong consumer demand -- market validation! Secretly, however, there's a hoverboard-sized technical problem between manual labor and profitability (e.g. "if we can just get our fleet of bicycle messengers operating with X% efficiency we can deliver anything by bicycle for a flat $5 surcharge, which will undercut the business models of all existing delivery services!")

These are tricky, because people are so used to market risk being the dominant factor that they can be fooled into believing that the strong consumer demand means that the rest is easy. But really, it's telling you that people love to get something for nothing, and the market got the solution right the first time.
8:00 AM - alarm, check emails, tweets
8:15 AM - wake up, brush teeth and bathroom
8:35 AM - water plants
8:40 AM - go out for a walk (chai)
9:00 AM - shower
9:20 AM - get dressed
9:35 AM - catch an auto (tuk tuk) to office
9:50 AM - breakfast
10:10 AM - coffee and read emails, reply easy ones
11:00 AM - attend daily stand up meeting
11:15 AM - start the work
That is also my experience. LastPass is pretty good if you use it with website logins, with everything else not.

However I think that is something that could easily be improved once the guys over at LastPass realize they must invest more in the UX. I for myself did already open a support ticket for that. If everybody would do this, this might raise the attention.

On the other side it's not so bad from a functional only perspective and the pricing is fair - I'll give it a chance and stay another few months with them.
Yes, this is why I always find sad that language performance gets thrown around in discussions forums without reference to what implementations are actually being discussed.
I think this sentence exemplifies what's wrong with this "glitzy Web sites for Dummies" approach:

> Just throw in videos, images, text, products and more and magically get a website that looks like it was poured over by a million-dollar design team. Once and for all, content is king.
got a magnet uri for bittorrent instead?
If you install superfish and then chrome, you will be affected. If you install superfish, then Firefox, you won't.

Thus Firefox is the more secure browser.
Track location without accessing the GPS or any other coarse location indicators
May I be downvoted, but I was just opening http://www.sonicstadium.org/music/ when reading your comment.

Turing coincidence.
I just discussed this with some other team-members. The consensus is that changing what information is displayed is confusing. We don't have a lot of space to work but but we can add 'by' and an avatar. So go from:

#337 assigned to Sytse Sijbrandij
=>
#337 by AVATAR assigned to AVATAR Sytse Sijbrandij

When you hover over the avatar it should show the name of the author in a tooltip.

If you don't feel comfortable making this please make it into a feature request on http://feedback.gitlab.com/forums/176466-general
How I Spent Six Years Developing a Product
Oh I see, I wrote thinking you are on the support side.

I think you as a customer acted rationally and with honesty. Most customers, when hearing such an initial reply, do not bother responding at all (probably gone forever as a customer). And the worse thing is, support/devs think that, with no further response from the customer, they are doing a great job.

I myself am a customer-dev to at least two websites (been working with them for the last 5+ years). These sites have made at least a large share on their niche market, but their support is terrible. Business-wise, they think they can afford to lose a customer, so their 'default' support mode is to brush customers off (or leave support requests hanging). I believe many businesses are like this.

About the condescension, many devs are like that, treating support as 'inferior' to development and not equally important (cost center vs profit center mentality). When in fact, it's a profit opportunity. The customer's requirements are very specific, and from the correspondence, I can see that the customer understands that not all customers would request for such a feature, and probably would be willing to pay a premium for a custom-made solution. Most people here are devs, so they sympathize more with the support side (personally, I work on both domains).
Well, you could be very solid on the technical aspects of what you're doing, but realize that you're wining it in terms of whether your proposal delivers economically, ie how long it will take to implement or what cost savings will be realized. Being brilliant within the scope of your own specialization will only take you so far; you need to understand your colleagues and their constraints well enough to productively address resource conflicts and so on. If you're too competitive with your colleagues that can lead to zero-sum situations that fall short of collective potential even though everyone is sincerely trying to deliver the best possible result.
It's a funny joke. I didn't see the broadcast, but laughed at just the description.

However, in the context of the Oscars, its humor will be lost on a large performance of the Audience.

In the context of the narrative of the evening, the result of the joke is that a lot of viewers will be able to dismiss CITIZENFOUR without watching.

But it was a good joke.
> Replace (in the context of Unix-like software) means completely replace, as in: no longer needing the original for any purpose.

There is nothing about the context of Unix that makes this use case different than any other. If you yourself always blindly take "replace" to mean "completely replace", then that's fine. I would contend, however, that most regular people see the above scenario precisely like I outlined.

> then you're using bash, albeit indirectly.

This line, however, makes me think that you purposefully ignore the example because with your reasoning we are all using C no matter if we've never seen the language at all, if the case is that a language we use is compiled to C. By this reasoning users of Chicken Scheme and Gambit Scheme are using C, because both of these Scheme variants are compiled down to C.

I find it strange that you would be so interested in setting the limits for what other people constitute "use". I've told you several times that for personal use I've replaced bash with fish. This, apparently, is not enough for you. I made a scenario to illustrate how silly it sounds to say Person A hasn't replaced Haskell.

Someone calls you and you are in your study. Your friend Janet is in the living room downstairs. The person on the phone asks: "Is Janet there?". How would you respond to this question?
Whereas closed source proprietary software has no eyeballs on it. Open source is at least an opportunity to identify problems by third parties without reverse-engineering. Open source also allows code analysis tools to do automated tests across wide numbers of codebases.
"update culture"

Don't forget feature bloat & the increased attack surface they inevitably create.
Senior Software Developer – NYC or Remote
Linus' Law is not some kind of catch all that applies to auditing code for security weaknesses. It specifically refers to the rapid quality control that happens when you release early and release often - the bazaar method of software development, as outlined here:

http://www.catb.org/esr/writings/homesteading/cathedral-baza...
Eh. Investors invest in lots of companies, some of which make pretty bad mistakes. I think Superfish should be forced to wither on the vine because of this - and especially because it pawned off responsibility by saying, "hey, it was those guys, not us!" as should Lenovo ("it is just theoretical!"), but I doubt the investors explicitly backed something with the intent to break security. Few do.
While it is true that you cannot "connect the dots" looking forward, you can improve your future prospects by making sure that the "dot" you're on today is a meaningful one.
Alternative to TestflightApp: RivieraBuild
Hey folks!

A year ago, I started to work on an alternative to testflightapp to distribute my iOS apps... I wasn't a fan of testflight, but more importantly, it was a pain to maintain the list of UDIDs when I was using an enterprise account.

What I ended up with is RivieraBuild. That is an ultra simple way to distribute both iOS AND ANDROID builds, in 1 click. Really I think you should try it. I've been using it for a year, and improved it a lot recently (API to integrate it to Xcode, and more features)

Why am I posting that here? Well I'm looking for some feedback to improve it, and I also want people to be able to use it when testflightapp is shutting down and all alternatives are basic copy of it.

Let me know what you think about it, and use it :)

To try it: http://beta.rivierabuild.com/
More info about it: http://rivierabuild.com/
Blog: http://blog.rivierabuild.com/

Thank you all!

Jeremy.
No corporation would continue to use a private key they divulged to outside sources, there is no reason to other than a minor syncing headache.
Having the url point to an utterly huge file instead of a landing page can cause problems for some people. The default behavior on my phone in chrome, for example, is to start downloading in the background.
And that is the key IMHO. Closed-source requires enough commercial incentive by one firm to look at it. Open-source requires enough incentive in the aggregate across many problem, each of whom may have their own reasons... and who cares what they are.

Most bugs I have seen figured out have been a collaborative effort. One person finds one part, which leads to the next person figuring something else out, etc. Much harder to do when it is just your job, and you may not even be paid for this work.
ayyub rana
As a kid, I would have loved that! But can't you just picture the musty smell the classroom would have with 20 soaking wet kids? :p
You are vehemently and loquaciously defending malware. You are also callously disregarding sites operating on razor-thin profit margins from their ads which, if lost to a firestorm of theft of revenue by criminals distributing malware such as Superfish and Privdog, will cause them to have to shut down their sites altogether.

The only site owners who aren't hurt by this type of malware are the terrible ones with no regard for their users, who are willing to double up on now many popups they slam the visitor with, or ironically even willing to join shady pay-per-install malware networks just to get their revenue back up to normal levels.

I'd like to believe you've never run a site before, because otherwise you'd have an idea of just how expensive it can be.
magnet:?
xt=urn:btih:799e43f3aff3fa9af8b7bfc2950501721829ddee&dn=+Citiz
enfour.2014.HDRiP+Xvid&tr=udp%3A%2F%2Fopen.demonii.com%3A1337&
tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969&tr=udp%3A%2F%2Ft
racker.leechers-
paradise.org%3A6969&tr=udp%3A%2F%2Fexodus.desync.com%3A6969
I prefer to read the news than to watch--it gives me more control over what I consume and how I interpret it. I don't watch much TV aside from the odd sports game here and there.
SmartPesa could bring the Underbanked into the credit economy
The Grumpy Programmer: The Cult of the Coffee Cup
The non-regular-format pieces might be a better example. Here's a recent one:

http://penny-arcade.com/comic/2014/12/12/fan-fiction
Ask HN: Do Google ads work for user acquisition?
We're looking to use google ads to sign up developers on HackerEarth.com. Has anyone else used Google AdWords for a similar activity? Does it work as well as Facebook?
Closed source often has eyeballs specifically paid to... eyeball it.
This may have been covered already, but... The purpose of a resume is not to get you hired. The point of a resume is to catch someone's attention for long enough to keep you in the race, or get to the next step.

A successful resume is one that will be NOT discarded by HR drones or automated resume scanning software. A successful resume will get you a phone screening or an in-person interview.

If your resume is, as you said, awful, but you are getting to the interview stage then you are getting there DESPITE the quality of your resume.

If you are not getting past the interview step, the problem is not with the resume (it's out of the picture). So "something" may be going wrong in your interviews. I don't have any ideas about how to go looking for what might be going wrong.

Separately, I don't see any mention of the web site http://asktheheadhunter.com/

This guy has strong opinions that are carefully expressed. Many of his opinions contradict "common wisdom," which I often found eye-opening. He has a lot of interesting things to say. Poke around the site... read some articles, subscribe to the newsletter. It could be helpful.
Super easy iOS app distribution
But that's entirely because they have to comply with federal law, not because they're "anti-privacy".
While I agree with the post... And most of your comment, I find that a large issue with a lot of "Agile" development, is that not enough thought is put into the architecture and overall design ahead of time. Another big breach is when early on a lot of conveniences are put into place, and the knowledge therein is lost in the ongoing development.
Thanks, that explains it clearly.
Yes, everytime you go into the vault you feel like Jason. Not kidding. Free experience ;)
I live in Finland, and the whole concept of not being able to send wire transfers from your online banking (or even a phone app) sounds utterly ridiculous.

This seems to be the norm in most of Europe. AFAIK the big US banks let you do wire transfers online too.
brush teeth, shave, wash face, arrange hair & dress
eat breakfast (while coffee brews) read email or an article
leave home with coffee, two apples and a bottle of water
drive to work
Go watch it on a big screen. The chilling effect is way bigger in a large audience than at home.
Happiness is when you hear “Awesome” from Google Exec. about Your Product
Agreed. Though, I don't know of any way to directly send money to Laura Poitras and co.

I'm sure they would also appreciate donations made to the EFF.
The Believers: The story behind deep learning
At the place where I work, I've recently described the role of Software Architect. It is a project-role, so only exists in the context of a project, and usually only in the first weeks of a project.

We describe it as follows (feedback is very welcome):

# What is expected of a Software Architect?

* Makes high-level technical design choices.

* Records those choices, and the supporting arguments, in a deliverable.

* Ensures feasibility of the technical approach (and informs the PM).

* Identifies risky aspects of the project (and informs the PM).

* Dictates technical standards (e.g.: coding standards, tools, frameworks, platforms).

* Provides the team with a "standard way" to develop the software.

* Ensures compatibility with Hoppinger's technical road map.

* Aligns all his decisions with the resource constraints of the project.

* Recognizes "reuse" opportunities (either existing software that can be incorporated, or spin-off contributed/reused).

* Observes and understands the broader system environment (of the customer).

* Creates architectural overview diagrams and/or descriptions when needed.

* Knows which applications are used in the organization.

* If possible: subdivide a complex application, during the design phase, into smaller, more manageable pieces.

* Understand the functions of each component within the application, and the interactions and dependencies between components.

* Communicate the technical design, "architecture", to developers.

* When needed also provides hardware requirements (or several options), considering the needs and abilities of the customer.
I agree and I also wouldn't call most of what software developers do "engineering" either. There are so many people with "engineer" in their titles who really just develop applications and websites. What ever happened to "Software Developer" or "Programmer" as titles? They are much more appropriate, but I guess they don't sound high-falutin' enough.
I'd say anything done for the US Gov. or NASA should be public until the release of payload with the exception of Dragon which all should be public.
As an Israeli, all I can say is that I am ashamed.
Speed up docker pull with local registry image mirroring
I've bounced from UX developer, to systems developer, to architect, director and back to senior developer... I'm currently working in an architect/senior developer role... The title is just that.. it associates with a role you play. I'm designing a relatively large system, and making suggestions towards the tools, technology and implementation (as well as doing a lot of said implementing).

I can't speak for most... but for me, it's the position I'm in... Of course my role is much closer to that described in TFA... which is what being in a smaller organization calls for. I like solving problems, and developing solutions.
OP may be referring to jQuery's removal of the sourcemap comment last year, starting from 1.11/2.1 [0]. Basically, many sites deploy the minified library without the sourcemap, leading to tons of 404 errors which confuse users.

0: http://bugs.jquery.com/ticket/14415
Also probably they don't see enough demand for people being able to effortlessly reflash/reprogram their harddisks to invest the necessary R&D to make it work seamlessly. There are hundreds of tricks to make flashing more reliable and unsusceptible to data corruption, but it's cheaper to just use a DOS tool and write "DO NOT TURN OFF OR RESET YOUR COMPUTER!" on the screen.
They probably deserve it but the net effect would be to break many sites for many users. One step forward, two steps back.

What privacy-minded users need is a trusted list of root CA's and a (relatively) easy way to instruct their browsers to use only that list. For example, The Hong Kong Post Office is a CA installed in your browser and you can choose to delete or distrust it. Same thing for Turktrust, AOL, etc.

I imagine there are plenty of other CA's which could be distrusted but I don't know enough to make an informed decision and I don't want to start deleting them randomly and breaking my browsing experience. I'd love to see a list curated by a trusted organisation like the EFF or the Open Rights Group, which I could refer to when choosing which CA's to remove from my browser.
I wish I was able to watch it online somewhere and pay for it.
> Ruby standalone is nothing its power comes when you put Rails on top of it while Java standalone still is powerful concurrent, class-based, object-oriented language

Thats seems like a bit of a loaded sentence. I certainly don't agree with it. Native java offers speed and strong static typing (i.e compiler/ide support).

But native ruby is immensely expressive. If anything too much so.
Visualizing the civic tech community
maybe? How can we be sure?
It's perfectly fine to link to a large file directly - it seems like your browser is broken.
And not to forget that you get rid of all the folks who don't know what they do. No support calls. No complains.
While technically, it is possible to use statistics as "proof" with N=30, but it is stretching it a bit, IMHO.

For example, stating that the amount of reports per year corresponds to the amount code added, by stating that both are "somewhat linear" is not very solid. I could just as well state that the amount of reports per year is "somewhat exponential" and conclude that it does not correspond to the amount of lines of code added.

This does not make the point overall any less true, it is just that the foundation: the numbers, are too few to make any grand conclusions from.
Security Evaluation for ARC
Issuing an NSL is not really "trouble" for them. As we have seen now countless of times...
The term and interest rate limits were on the LOW side. i.e. being forced to renegotiate after 2 years if you haven't raised money yet (which happened to a lot of people, and the investors never had a problem with it), and charging a 0% rate (which is below the applicable federal rate and thus potentially viewed as a gift) is not the issue. It's not that YC/notes were trying to charge usurious rates or whatever.
Not parent, but I agree and can explain my thoughts. If a topic is really new, it's inherently not generally well understood. Therefore the reporting on it is likely to be inaccurate, misleading, and missing some really important bits. Even the choice of what to report on is made without good understanding.

Have you ever read a news article about a subject in your field that you knew a lot about? Think about it. Remember how everything was a little bit off or a little misleading or misinformed or focused on the wrong thing? That's the case with every news article, ever, we just don't think about it most of the time.

For anything really important you'll find out about it quickly enough. Someone you know will tell you or you'll overhear something. Trying to search for important information by reading or watching news reports feels good because it satisfies our instincts to hunt and search and collect. But it's not a good use of our energy 99% of the time.

HN is a bit "meta". Here we search not for useful or important news articles, but for insightful, intelligent comments from people who actually understand what is going on. The 99% rule still applies, but at least when we find a comment like that here it is more likely to be well-informed and something we wouldn't find elsewhere.
Closing the Chasm Between Strategy and Execution
Domain Name suggestion tools
This Week in HN – ep 2 (podcast)
Why would I want to spend money to learn something, I could learn for free in various free online tutorials?

Where is the difference to your business here?
And also, why have a ridiculously slow loading site with a super ultra HD background image, just to be able to click a link that shows a site that is extremely hard to read properly and THEN find out that I have to pay to do it?
Yes, that's the party line. If it was true, the number of open bugs would decrease over time. For most open source programs, it increases.

Mozilla has passed the 1 million bug mark.
Looking at the "Lavabit" incident, there's obviously some legal framework that allows a government entity in the USA to force a company to surrender a copy of the private key used for email encryption.

If said company would change the private key, obviously the same legal framework can be used to get this new key, in turn. So it's fruitless.

Of course, if it's an "inofficial" leak, a revocation and renewal of keys makes sense.
If you first design your software to near-perfection and then find coding it to be tedious because no problems remain to be solved, I recommend that you obtain a thing called a “compiler” to do the coding part for you. You see, a “compiler” takes a formal specification of your design as input, and automatically produces a program as output! I know this sounds like science fiction, but we’ve been using these things for a while now, even though they took a while to get accepted.

Alternatively, if you’re already using a compiler, have you considered that maybe you’re doing some things by hand that the compiler could do for you? Modern “high-level languages” (as the design notations compilers accept as input are known) are astonishingly capable of eliminating repetition in the “source code” through the use of “abstractions” and “embedded domain-specific languages”.

Of course, there’s always the risk of making your system so abstract that you can’t figure out how to debug it! So you probably don’t want to remove all repetitiveness.
Tensioned Suspension – Sculptures Suspending Themselves