skysight-inc/HackerNews huggingface dataset:
I believe I may accidentally be one of these "hackers."

For those of you who don't know how the line worked, TicketFly sent registered users a link to a page that would allow them to purchase tickets at 12:00pm PST. Like most people, I clicked the link just before noon and ended up in a waiting room with a countdown clock and a note explaining that a continue button would appear at exactly 12:00.

My coworkers and I were curious if the button was simply hidden from view using JavaScript, so we did what any hackers (in the Hacker News sense) would do – we viewed the page's source. There it was! In the middle of the page sat a small javascript function with a link to reveal the button. Curious again, we clicked it. I believe the waiting room page just refreshed at that point, and we though nothing of it. A few minutes later, the queue began, and after sitting in it for about 40 seconds, I was shown the purchasing screen. I assumed I got lucky and left happy.

When I read this blog post on Saturday evening, I realized what had happened and freaked out a bit. It appears that clicking that link placed us at the top of the queue, even though we couldn't actually start the purchasing process until noon. Because of this, I am probably going to lose my tickets. Yet the fact that we could cut in line never even occurred to us, because we assumed that any queuing logic would have happened on the server side to prevent exactly this kind of exploit.

I feel bad for the users that I apparently cut in front of. I feel equally crappy, though, because I'm certain that other "hackers" are in similar situations to me. From what I've read in subsequent reports, using NoScript or otherwise browsing with Javascript disabled would have revealed the button before noon. That means that those people, too, will be labeled as hackers and have their tickets revoked. I'm relatively certain that even having a system clock running a few minutes early would mark you as a line cutter.

Not sure what to do next. I suppose all I can do is wait. This sucks.
FPVTV – Easily Search YouTube for the Latest Drone and FPV Videos
If you need to be root to access Linux PAM, then linux is more fucked up than I thought.

> Its just a profoundly ignorant dismissal.

and its this FOSS jerk attitude that guarantees that things won't change. Linux is perfect! It cannot be criticized! sigh
Authorization to access resources is a big problem in REST. Round Four seems to be an appropriate approach.
Find a workout buddy nearby
This was discovered by Richard van Eeden of Microsoft Vulnerability Research (https://lists.debian.org/debian-security-announce/2015/msg00...).
I get that part and to some degree understand. Maybe I am misinterpreting the "track your location" as something more accurate than "this person is in a 10 mile radius of this tower". For instance, wouldn't you need to know details of how different buildings are constructed? If you are in a busy downtown area, tracking with this method seems impossible. I could see if it was a remote area with few buildings to sift through.
اغنية بهاء سلطان الله اكبر
I'm not sure they ever released that much radiation. It's hard to find non crackpot sources of information, but in mono displays there's surely not high enough voltages for that. The back of my oscilloscope (a mono display pretty much) mentions X-ray emissiom but on some ridiculously small scale.
Mrs. Nguyen’s prestidigitation
> I had to wait days to receive the new credit card

That may be a problem with the current implementation, but it doesn't have to be. There's no reason your credit card couldn't be e.g. loaded onto your phone, using NFC to talk to a reader, and then it could be updated instantly if need be.

> I had to re-set up all the bills I had set up to be automatically paid with the previous card to now be paid by the new card, etc.

The only reason this isn't a problem for Bitcoin is that you can't set up bill payments in Bitcoin at all.

> Still, some fraud scenarios are completely eliminated with Bitcoin. I pay a fraudulent restaurant with a CC that gets skimmed, I get to deal with the hassles of having to have the card replaced, potentially having my credit score damaged, etc. I pay a fraudulent restaurant with bitcoins, I know the restaurant can do nothing to steal the bitcoins remaining in my wallet.

It works for a restaurant but that's a very special case - you pay after you already know that what you got was right. More often you're buying something where you won't realise if it's broken until you get it home, in which case much more serious fraud is possible with bitcoin than with credit cards. And even the restaurant case is not a compelling advantage for bitcoin - if your credit card gets skimmed the worst case is really not very bad.

> Private keys can be very well protected and almost impossible to steal

Sure. But the kind of person who gets their credit card PIN stolen (which is what we were comparing to) isn't going to have a well-protected private key.

> Every day, millions of Americans use financial instruments that are not FDIC insured

Sure. But almost everyone gets an FDIC-insured account as a backstop before getting any of those other instruments. And it's convenient to have all your accounts in the same currency.
Rooted Cyanogenmod actually has privacy settings which enable you to restrict some permissions on a per-app basis. For example I don't allow Facebook Messenger access to GPS and Android asks me before Messenger gets camera access.
I'd recommend targeting the user group who would be interested in your product, rather than the usual startup suspects.

There are a lot of very large sex blogs and sex-related communities out there, and they're not at all shy about products with suggestive - or indeed extremely explicit - names.
> The perils of Agile. You are only allowed to do what you stakeholders understand. The rest is ignored.

Sounds like quite a passive aggressive way to solve a communication problem. "You only said we needed feature X, you didn't tell us not to mess up our codebase during the process".

It's not the stakeholders responsibility to tell you how to do your job. You don't wear clothes at work because it's in the backlog, you do it because it would be unprofessional not to.

Even when stakeholders have asked me to take shortcuts, they usually seem very level-headed about it once you start the dialog.

I've talked to stakeholders proactively about tradeoffs of taking shortcuts and they seem to understand when I compare "not refactoring" with "making a mess". In my experience, people understand what messes are.

If we make a mess, it will slow us down as long as it is there. We can clean it up later, too, but it will cost us more because it is slowing us for a longer time.

Taking shortcuts without telling stakeholders is unprofessional. If the stakeholders don't explicitly tell you to not refactor, refactoring is implied.
My understanding is that any users who entered the queue between 11:55ish (when the waiting room appeared) and 12:00 PST (when purchasing officially started) will have their tickets revoked.
Because they overwhelmingly had nothing to do with it.
Systemd includes no only comprehensive process management, but also socket management (to the level of listening on a socket and starting a service), device mounting, process isolation... and this is just the init daemon, not counting the remaining daemon projects which come with systemd.
You really don't want anything like Windows services. The nice thing about Unix "services" is that they are just regular processes that happen to be started at boot (and know enough to daemonize themselves, typically). Windows services are a whole separate thing with special APIs and are kept track of in the binary registry. To manage them you have to use the arcane (and very old) sc.exe program, or some new-ish Powershell cmdlets. It's not possible to deterministically "delete" a service--it will just be marked for deletion, and the only way to be sure it's done is to reboot.

My nightmare is that systemd evolves towards a system like this--opaque, baroque and difficult to debug.
I can't find mention of whether or not there are ads. Ads are a deal-breaker for me with the kidlet. Currently whenever she asks to "See ostriches" or "People throwing fish!" (we brought her to Pike's Place market in Seattle and the kid was oddly obsesseed) it's a dice roll whether we sit through a Lexus ad. I'd happily pay a modest amount for a product like this one provided she doesn't have to see ads (regardless of whether targeted to kids of their Lexus-purchasing parents)
On one hand, I get where you're coming from, but come on:

"Wow, everyone! This is truly amazing. We released Magic under 48 hours ago as an experiment and a side project, and now the traffic and requests are streaming in faster than we can handle."
Because they have thousand Linux nodes for Cassandra.
I bought a "decommissioned" Sony Trinitron monitor for $200 from a company I worked at at the time. It was 27" flat screen, and glorious, was amazing for gaming and counter-strike.

Now, carrying it up 3 flights of stairs on the other hand almost made the cheap price not worth it. That thing must have weighed 50lbs.
Re-Hiring an Employee That Quit Your Startup
After only a few hours, some awesome people from OSM already improved my changes. Awesome!
I think that the 'magic' people were simply not prepared for a runaway success. Wait a while to give them a chance to get their act together and try again.

First user experience during the hockey stick phase being 'poor' is to be expected for anything with this degree of growth. Try scaling anything through three orders of magnitude in 24 hours and you'll get why.

The amazing thing to me is that your order got delivered at all.
Finding the Common Denominator for Developing a Mobile App
Thats not accidental.
Expert Panel Answers Common Fundraising Questions
China to credit Ukraine for $3.6 bln to reduce dependence on Russian gas
It's not just authentication, it's authorization. Files should be accessed with the identity of the remote user in order to present a consistent view of the file system, test and set permissions consistently, and set ownership consistently. It's either that, or build a completely parallel permissions and ownership system maintained in a separate database, with mappings per file, etc.

(Samba kind of does build a parallel system, but it's not completely parallel. Technically I think it could be possible to improve, so that Samba forks off subprocesses that switch identity based on the connected user's supplied credentials interacting with PAM etc., but that's not how it's done, and I don't know enough of the details of CIFS authentication to know if there's roadblockers there.)
Thoughtbot opens an office in Portland
I'd rather see someone try to release something new and get a few things wrong than have no one try to release anything at all until it's perfect.
Class action lawsuits don't usually uniformly increase costs to all suppliers--some companies get sued less than others and have an incentive to keep it that way. The exception is industry-wide actions like tobacco.

The fundamental problem is that it's really easy to get away with cheating people out of nickles here and there so long as you limit your scale enough to not attract the government's attention, and such activity is pervasive. The European approach has been strict consumer regulations and government enforcement, but compliance also has a cost, one that does fall uniformly on the industry as opposed to just on bad actors. The alternative to all that is to let things slide, but that's not wholly satisfactory either.
Despite the humour and, on the surface, being a story about ordering a burrito, I think this is actually a very useful 'what not to do' cautionary tale for startups. They've clearly got a concept which, on paper, sounds like a good idea. They've then rushed development and gone to market without actually testing enough to know that they can deliver (literally) what the customer wants. That kind of early0stages growing needs to hapen before the company can gain a public reputation.
I honestly hope Magic amasses a lump sum from all the suckers and takes off.
> You can see the marketing already; it'll be Apple wading in on personal profiling and data capture with shiny marketing that points the finger squarely at Google. I suspect their search engine will be crap however, unless they are logging everything you do with your phone :-D

The difference between Apple and Google is that the former makes money by selling products and the latter makes money by providing free services, building profiles, and selling advertisements.

Even if Apple did start building profiles of users, their end goal would be to create a better user experience, get users into the Apple ecosystem, and sell them hardware. It would not be to directly make money from the search engine by building profiles and serving advertisements.

Personally, I would be completely fine with paying Apple a monthly fee for access to a fully featured search engine that doesn't profile its users.

Having said that, it's completely possible to build a good search engine without profiling users - for example, DuckDuckGo.
Wow, it looks really good, especially the old school Sesame Street giving me some memories. Lego channel is cool too but damn App Store search is not even showing it yet I had to download to the desktop and find it in Purchased.
https://uk.linkedin.com/in/rvaneeden
But here's the thing - dedicated architects often aren't just focused on software. The same architecture patterns you use for building software are just as applicable to business processes or organizational design. Architecture as a function has been consolidated to ensure effectiveness across all parts of the business, not just software development (which is why it's often called enterprise architecture or solution architecture).

A good architect should work WITH the software experts to determine the optimal architecture, but sometimes the business needs will require an architecture that is less optimal than it would be in a vacuum. In organizations large enough to require a dedicated architecture function, software developers are poorly positioned to understand the various requirements of the architecture.
Well, it's both different and inconsistent. I still have to use netstat for processes who manage their own sockets, but I can't rely on the output for all processes anymore.

Also, netstat has existed and worked for more years than I've been a sysadmin. I'm not opposed to learning new things, but this magnitude of change and inconsistency is hard to keep up with.
Forget Windows, the most vulnerable operating systems in 2014 were OS X and iOS
Title should be "Turn any door intercom that calls a 'phone into ..."
Six Ways to Improve Your Sweepstakes Marketing
Kinda surprised nobody has brought up the whole Microsoft Ireland thing going on right now.

Maybe Apple sees Ireland as a privacy conscious data-haven.
And that's why you never put that kind of logic on the front-end. Or if you do, always make sure there's a back-end double-check. In this case, from what I gather, an unique key that could only be known if people got it via an email would've been adequate.
I would also want to know how much stuff is tracked. Disney knows the secret, that the shortest path to a parents wallet is through the kid, I am not against Google-Youtube making money out of this, but just want to know what is and what is not tracked. Of course, ad policy will also help.
Indeed. If free-text SMS was an ideal way to interact with online delivery and concierge services you'd think someone would have done that already on an existing service. So then, why can't I just order from Seamless or Instacart via SMS?

Oh right, because that experience sucks mightily. I have this lovely full color screen that can display menus, location and delivery times, let me search by cuisine, choose various customizations, etc etc. Then a "magic" computer sends the orders to the restaurant via an already configured and tested system so they are expecting an order and can fill it quickly and efficiently.

Or alternatively, thanks to this innovative new startup, I can SMS to some random number and say "I want food or something do you have any burritos" and then have them text me back, etc, etc.

BUT WAIT says the new startup. IT'S NOT JUST BURRITOS, in fact it's not just food. You could ask for a burrito today and a flight to Cancun tomorrow, and you only have to put one phone number in your address book.

Aha, the real value proposition emerges. This startup uses their proprietary technology to know that Seamless or Instacart or Expedia exist already, and then they use it for me. Except it takes twice as long, without the UI/UX those services have perfected, and costs 30-50% more money.

Step one: Landing page

Step two: Corner the market on taking SMS messages and using them to punch orders into existing apps, using skilled college graduate US based labor.

Step three: VC/YC EXPLOSION

Step four: Profit
Great use for Erlang (e.g. WhatsApp)?

Given that Erlang can scale near linearly with more cores and it's not uncommon to have 100+ cores for a single Power8 node - it makes me wonder how much investigation has gone into Power8 as an architecture for companies who have highly network centric products like WhatsApp.

Edit: WhatsApp is a highly network centric product and they also run on FreeBSD / Erlang.

Edit 2: If you want to try out Power8, OVH has cloud compute available of Power8 at https://www.runabove.com/instances/ibm-power8.xml
I wish there was a standard way to do batch operations in REST though
Yes, it's not as trivial as just grabbing the data and running a generic algorithm. Ideally you would want to measure all routes where you want to track people. Kind of like how google knows where every wifi access point is and uses that for location information.

Also, you need people to move. Because you only have power data, you only know the aproximate signal strength if the person isn't moving.
List of programming languages by type
Just ask the user for their location right away. Most don't care anyway.
The Rihanna Effect
Better title: "Linus Torvalds: Online polls" or "Linus Torvalds: Hurr durr I'ma sheep"
I saw the original link on my phone yesterday. The screenshots in the post were unreadable since pinch and zoom was disabled, so I didn't fully understand until pulling up HN on a larger screen today.

I have no idea how many other people might have read your submission on their phone and had the same issue though.
Indeed. If I were a prospective employer who was intereseted in your presence on Hacker News as a way to separate you from the crowd, this would not be the article that did it.
In the case of Greece, this is literally true.
I've launched something (once) that went from 0 to breaking in less than 10 hours. I aged at least a couple of years and it took weeks before we managed to get a grip on the situation. We were about as unprepared as could be. This is what all of you starter-uppers are dreaming of, but when the growth is higher than you can handle you're going to have to move really fast if you want to capture your potential. Unfortunately we had no idea what we were doing so I'm pretty sure those first weeks cost us dearly. Fortunately for the magic people their scaling issues are something that can be overcome and I really hope that they'll do well because of this.

Cut them some slack and think about how hard it would be to pull this off with such rapid growth without having any delays or issues during the first phase of rapid growth. Dealing with high levels of traffic and orders is hard, dealing with high levels of growth is a lot harder still.

Amazing they managed to ship the order at all.
If Brin had stayed in Russia, it's almost certain he would not have founded Google. Some American, on the other hand, likely would have.
My impression is that hardware support is not at Linux level, which is itself somewhat spotty.
> For instance, wouldn't you need to know details of how different buildings are constructed?

They learned the typical profiles of power use for different journeys and then tried to distinguish between them (at least in one experiment).

http://arxiv.org/pdf/1502.03182v1.pdf
It's not about waiting until it's perfect, it's about waiting a little bit longer and focusing a bit more on the "viable" part of MVP.
But phone tower triangulation is only readily available to nation states on their own soil. For tracking foreigners tracking signal strength might be a useful alternative.
What are your thoughts on having a workout buddy? Would you be interested in being matched with one?
I'm having a heck of a time getting this to build in a ubuntu VM, however.

Things installed on updated, fresh trusty32 VM:
build-essentials, automake, texinfo, libmpc-dev, dependencies mentioned in repo

Might just give up and install on Mac but I use pkgin instead of brew.
People complained about ConsoleKit (which logind replaces) as well.

This seems to be the initial design document for logind: https://docs.google.com/document/d/1_ev4f0gwBuvs6SH_N8fN5LO4...
I never visit links to Twitter.
> I imagine for example, data centers willing to pay the same price for a chip that only reduces power.

That's not valid with the original statement though.

Unless the new chip that costs the same but runs at reduced power does not have an lower-cost version that runs at the previous power.

Not seeing the logic here. If a mobile SoC of performance X and TDP Y and cost Z on the previous node, and the current node provides performance X at TDP<Y and cost Z on the current node, then you could substitute a lower performance part, running at the previous node's power envelope, and realize cost savings (e.g. performance X(OC <X -> X) at TDP Y(OC <Y -> Y) at cost <Z).

I'm not seeing the possibility of "performance improvements without cost reductions" other than at the ultra-high-end (aka "what was previously not possible").
That's their claimed reason for (constructively) terminating her, right? It's not the basis of an actual claim against Pao, but a defense of their own actions.

It reads like standard HR speak for an exec termination.
At the very least they should've set up an auto-reply that explains they've been flooded with unexpected high load, with an average reply duration of half an hour or whatever it was at the time.
In a way, LCD monitors allowed creation of the open-plan office. With CRTs, desks had to be deep enough for the tubes (often 18", sometimes a lot more). The stand for the LCD is usually the thickest part of one, and they're thin enough to allow for people to work on opposite sides of a trestle table.
That's simply a function of growth. You can not prepare for runaway growth like this, it's easier said than done and from the sidelines it looks like a piece of cake.

At this level of growth any action that you did not automate away will bite you in a terrible way. And that's what all the handbooks say right: wait with automation until you've found your product:market fit. But what if that outruns you?
Excellent piece and congrats! What's your app called just out of curiosity? Would love to check it out b