skysight-inc/HackerNews huggingface dataset:
No, this is exactly how early-stage startups often work. It's a great lesson to anybody who hasn't experienced it.
Planned launches rarely go as well as planned, and big visibility happens when you are the least prepared. Been there, experienced that.

According to the team, this was a side project, they had put a crappy landing page out there (with Times Roman as a font and got some flak for that) and somebody else submitted it to Product Hunt and it took off. They quickly improved the landing page and started handling orders.

Now almost everybody reading HN knows them. They chose a brand name that is easy to remember. If they get their shit together in 6 months and relaunch, they will be totally fine. Most early stage startups can only dream of the kind of visibility they got.

The bigger problem is that this kind of surprise success doesn't necessarily validate the idea, but at least now they can see and start to measure retention.
I actually think reframing these issues as something that might necessitate a fork for corporates could be good for all involved because that hopefully would mean less egg on Mozilla's face when someone finds out they're being DPIed.

There's a lot more nuance than I've acknowledged, but I'd much rather people make a fairly consistent set of assumptions about the trustworthiness of Firefox and a second, different set of assumptions about corporate MITMfox.

Even though I'm not a fan of it, I also recognize that companies own their assets and need to protect their networks. But should Firefox stay completely quiet by default when an IT department MITMs an employee's traffic? Even if we all acknowledge the same IT department could turn those warnings off, I think it would still be a start.

This will always be a cat-and-mouse game and I agree that Mozilla may not be able to permanently 'win' on behalf of users, but I think browser vendors in general could do more to shift norms and change the 'framing' of whether users see (for example) a monkey-in-the-middle icon instead of a lock icon by default when they're being MITMed by adware or corporate DPI.
Product page: http://gopulsar.io/

Source code: https://github.com/pulsarIO/realtime-analytics/
BBC lol.
Show HN: Simple HTTP Client in OCaml
I don’t know where you thought it was turned.
This is the reason for which we have always done clean OS installs on any Windows machine we buy (mostly just laptops as every single desktop we have was self-built). It is unfortunate that the PC world hasn't shaken off this practice of adding crapware to store-bought machines.

Microsoft could bring this into the realm of the sensible by adding a clause in their licencing agreement that requires a clean install and allows a single popup that prompts the user for authorization to install various add-ons along with full disclosure of their intent and function. In other words, "Welcome to your new Windows N PC. Here's the crap you can choose to install and what it does." If the user selects "NO" everything is deleted and you get an absolutely clean OS install.

That would be fair. Give OEM's an opportunity to make some money and users the ability to purchase potentially useful stuff during first power-up. The point is to give users full control of the machine they just purchased and not be surprised with crapware they were not looking for.
Europe’s online alternative finance market grew by 144% to nearly €3b in 2014
Brief reminder that what you hear is being reinterpreted by your brain to match the things that you see.

https://www.youtube.com/watch?v=G-lN8vWm3m0
I guess I am wondering how Magic is supposed to succeed. Most sites I need to go to tend to have very custom means to make ordering efficient, in the few cases where you might not know where to order something from a quick search is all that takes?

Who is their target market? Let alone if I saw another service hitting up my site like this I would likely try to find out why customer's weren't finding it on their own or using it on their own, two things which would be at the top of the list to improve all the time.

Perhaps to give people a separate billing point to reduce exposure of personal information? Look I just paid thirty bucks for a pizza and Pizza Place will never know it was really for me!!! Seriously the only convienence I can see if reducing the number of entities with my CC info
I spent more time and care speccing out my personal computers than I did buying my home

LOL, I can relate. Good one.
This doesn't appear normalised making it pretty worthless. Meaning is car A sells 2x as many as car B, then car A will likely be "more likely to kill you" on this chart, regardless of how safe it actually is (even if it was much safer than car B).

It would be much more interesting to make a chart with an ordered ratio with [car] total sold/[car] death per million. At the moment all you're telling us is which cars sold a lot.
2015 Silicon Valley Startup Hall of Shames award goes to .... Superfish!
It's certainly not in the spirit of the competition to get tickets. Just because the "inside knowledge" necessary to exploit the game is exceptionally simple doesn't make it OK to use it to your advantage, at least if you believe in fairness and equality.
Can a Bitcoin-style virtual currency solve the Greek financial crisis?
I think its low by comparison to other apps that generate significantly more and/or if your expectations are relatively high. But his expectations were to get ~$100/month so I'm sure he is ecstatic. And besides, an extra $36,000 a year in relatively passive income isn't too shabby.
Worth repeating that it's hard to change uid to the connected user if you don't start as root.
How to Remove Lenovo SuperFish Installed Malware
It auto-installs via nagware however.
Why Twitter Favors Net Neutrality
Citation Needed. I live in the Bay Area, and cannot find an x86 laptop with desktop Linux preinstalled at Central Computers, Frys or Best Buy. Is System 76 what you mean, or ordering online from Dell for the XPS 13? Because that is not my definition of easy, certainly not compared to walking into a retail store.
IIRC the "office hours" are only for YC companies, but the availability of the office hours is forever, not only for the first 3 months official part of the program. [It would be very difficult to allocate time to everyone that wants to talk to someone at YC.]

[I'm sure that this has been asked before, and someone (¿pg?) gave and official answer, but I couldn't find it.]
That seems silly, given the AWS is in the business of selling things as cheaply as possible.
More documentation (examples, tutorials, troubleshooting) for new users.
What are the best resources for someone looking to learn react and jsx?
Its obvious to me that Kaspersky has to follow the pro-Moscow line of, "But the Americans are so much more powerful and sophisticated than us," which gives them excuses for things like "buffer countries" and other questionable geopolitical moves. Kasperky's connection to the FSB, Putin, and Russian military is well documented.

I also find the timing interesting here. Suddenly Kaspersky has what could be nation state cyberwar tools, while coincidentally in a propaganda war with the West?

http://www.wired.com/2012/07/ff_kaspersky/
Yes, that's correct, it's their defense. I think my claim is that this claim is so broad as to be meaningless. It can retroactively apply to anyone because it's very unspecific. My subtext is that because the language is so broad, it can be used to excuse any firing, with or without cause. And they may cite specifics, but in reality, they could come up with similar specifics and cause for people who have not been fired.

It's somewhat similar to when there are explicit rules one must live or work by, but then there are implicit rules to follow, which allow skirting of the explicit rules. This then allows the implicit rules to be used against a transgressor of choice, since they broke the explicit rules. And that aspect makes it arbitrary.
Let's be real. It's 2015 and we need quite some hoops to get, in most cases, some very simple data rendered on the screen. And even with all those hoops, we are still not sure that it works in all cases. Isn't it time for better tools than react? Like functional languages that support incremental computation?
everything over HTTPS is encrypted except the ip addresses and port #.

hostname is also encrypted (cause it's a header), though your insecure DNS pre-queries will give that away to anyone listening on the wire.
RC4 vs. BEAST: which is worse?
Grim stuff and morbidly interesting, though the article was a little light on exposition.

Things I noticed: one lethal injection around 1820; an 'other' in the 1950's (what was that?), a peak in the state's blood thirst in the 1930's, and a moratorium in the '70s I didn't know about.
No debugger? As an editor it looks very nice.
I don't think you understand HTTPS. The URLs are, in fact, encrypted. That's why it's called TLS.
The Disney collector lady is something like the #1 youtuber in terms of views in North America (or close the last time I checked). I don't think youtube is going to skip her.
Abuse and Harassment: What Could Twitter Do?
Our prototype had functioning debugging with breakpoints/locals/etc. It will find its way into the main branch in the next few weeks.

Screenshot of the prototype debugging a scriptcs .csx file: http://i.imgur.com/NMK00Jc.png
Google and Apple Fight for the Car Dashboard
If you block all trackers (eg ghostery) ads usually just don't show up. Seems like there are no ads without tracking.
It works with competitors, but it's really easy to find products with keywords dominated by expensive enterprise versions who overspend on AdWords, rendering it ineffective for smaller competitors. Just the way it is.
> just following orders so to speak.

Maybe talented people have a different perspective than you? Maybe they recoginize the worldwide cyberwar and don't want to have their pants down when Russia and China do whatever they want? Or they realize that good intelligence has value, if not moral value, assuming good intel could stop or minimize future armed conflicts? This is like calling Turing a baby-killer because he worked for the UK intelligence. Turns out good intel is a lifesaver.
Amazon silently pulled Cloud Sync clients
"Luck" is based on probability and chance, which are definitely not things that you have direct control over. Yes, you can make decisions based upon a good understanding of probability and can even often do things to improve the odds in your own favour, but only up to a point. There is a very big difference between making the most of the cards you are dealt, and choosing your own (and your opponent's) cards.

I think you are referring to attitude prior to the roll of the dice and interpretation of the outcome of the roll of the dice, rather than being able to influence the roll of the dice itself - with a positive outlook you can appear or feel more "lucky", and that is generally a good thing.
Risen: Obama administration is greatest enemy of press freedom
Medium and artstyle are no particular indication of content; you get "really weird" videos in every form and style.
Most Popular Node.js Frameworks for App Development
New Vivaldi browser snapshot 1.0.111.2 has an experimental 64-bit build included
I have a younger-than-thirteen daughter who would love to be able to post her video creations to YT too, and have her own channel. I had created a gmail account for her before, then she tried to create her channel and was asked for her DOB which she answered truthfully resulting in… not only no channel, her whole email was blocked and, according to their statement, eventually deleted. Yes, mea culpa.

YT for kids is welcome, but alas, does not yet help make my little one happy. Is there a way to let little ones publish their own creations on their own terms? anywhere?
"The complaint is not that Lenovo shipped adware, it's that they shipped computers which were unable to make secure network connections over HTTPS"

The thing is, the computers are capable of making those https connections. It's that they shipped with extra software on them that gets in the middle of those connections, undermining the security of the laptop in the process, to allow Lenovo and Superfish an extra revenue stream.

"That's like selling a car whose brakes don't work, not a privacy issue"

That's not how I see it. I think of it like a courier service. You're getting a letter from your bank that's sent through Lenovo Couriers Ltd (or any other courier service) that's sealed and private. Lenovo Couriers Ltd allow (and gain financially, presumably, from allowing) a third-party, who we'll call Superfish to get access to that letter. Superfish open it, read it and see if there's anything in the contents that could allow them to upsell a.n.other product to you. Then, they seal it all up again and deliver it to your door pretending to be from the bank. To me, that's a breach of privacy.

Not sure I agree with a lawsuit here though. I'd be happy to see AV firms rate all these types of applications as spyware / PUPs and get rid of them accordingly.
>but Seagate makes me make a DOS bootdisk to do it.

They don't want to worry about your "reg cleaner" and ask.com toolbar suddenly taking 100% of the CPU and screwing up the firmware write.

Heck, BIOS updates are done the same way, pretty much. The Windows installer shoves the new firmware binary into a space the BIOS can access, reboots the computer, updates during POST/BIOS, and then only when its successful, reboots again into Windows. Its not run when Windows is running. You'd have to be a little crazy to do that.
Marketing Trends – Part 9
It's easy to speculate that better solutions are possible, but noone has ever actually done it. React (used from a more functional language, like ClojureScript) is the closest system to the world you describe which actually exists.

And no, papers and toy proof-of-concepts don't count. They are extremely interesting, and a necessary first step, but someone needs to build something large and demonstrate effectiveness in the real world before you can make an honest bid for large-scale adoption. As far as I know, no other FRP or functional UI system has done any better than React on that front, yet.
The real kicker is that even the slim chance of "unwanted mental health effects" could be reduced without removing the substance's pain and inflammation-relieving properties, if the US Gov't would simply allow the plant to be researched for pharmaceutical purposes.
Which problem is more important
a) Make simple algorithms more accessible to the masses who do not get it even after reading a book. OR
b) Make more complex algorithms and programming patters/styles more accessible to the good programmers who want to become excellent programmers ?
I would like your opinion and how you define "importance" ( it could be market size, or economic impact in the world, or as some people have argued -- reduces gender inequality in tech)
Neat. Which ones are cheapest? I figured I'd buy one but they seem quite expensive.
Well there currently 0 jobs in that area, so I fail to see you point.
"researchers" change their mind every single week.
Gotta love how media present science.
Just bought a domain thanks to this tool. Do you get a kick back for referring us to the registrar?
PUT is almost always the wrong way to go, since it requires a complete replacement of the target resource, meaning your browser needs to know the entire structure. to add new items you would POST to /carts/<cid>/items. to update an item you would PATCH to /carts/<cid>/items/<iid> with qty=3 or some other partial attribute update

what I do for my carts is PATCH to /carts/<cid>/items to partial mass-update all items with items[iid][qty]=x
It doesn't matter if their technical solution wasn't perfect. It was good enough, and those who bypassed it (whatever their motives) showed up in the logs. Seems like it worked just fine.

That's the problem with the HN bubble. We seem to think everyone should come up with the perfect solution, when good enough carries the day.
Superfish CEO: “Superfish software does not present a security risk”
I have my Raspberry Pi set up as a DNS adblocker: https://github.com/jacobsalmela/pi-hole
Recently, I've seen two things change on YouTube:

1) (a few months ago) Adblock stopped working. Fine, ads were rare, short, and skipable, didn't bother me enough to try to fix it.

2) (a few weeks ago) The percentage of videos displaying ads increased significantly, and most of them are now unskipable.

I even had one that lasted for maybe two minutes with no sign of ending the other day (it hadn't repeated yet, it was that long! There was no indication of how much longer it would be) which eventually prompted me to reload the page, which clued me in that the "unskipable" ads can be skipped immediately by refreshing the page—it rarely (maybe 5% of the time, tops) plays an ad on the second load.
Pebble smartwatch with color display leaks ahead of announcement
I would've thought of it this way;

Is the user bringing a cart (/user/<USER_ID>/cart/<CART_ID>)?

Is he bringing his own cart (/user/<USER_ID>/cart)?

Is the store supplying a cart for the user (/cart)?

Applying real world objects and thinking, makes more sense in my mind. The third option instinctively is the most suitable way to go (IMO).
BitBucket is down
BitBucket is down again..http://status.bitbucket.org/
> Number two - if you don't run Gnome, you're screwed having to resort to very complex, not-self-documenting command line tools to do the simplest of stuff. How do I change the volume of the box from the command line ?

You can use pavucontrol without Gnome. Don't know what command-line tools, if any, are available for Pulse Audio.
1) Performance. Zero copy ("The kernel writes them from the NIC to shared memory, then the kernel uses that same shared memory for O_DIRECT writes to disk. The packets transit the bus twice and are never copied from RAM to RAM."). Parallelism.

2) Disk management. Rotates old data, etc

3) Indexing and supports efficient retrieval while writing.

It allows to analyse the traffic after the fact, at 10Gbps line speed.
Here's a simple list version: https://gist.github.com/hanula/7959a214fcf55eca1e3e
Hugo is great. It seems like a lot of people use Octopress / Jekyll for this kind of thing, but they bring in the entire Ruby / RVM ecosystem to do so, which is way overkill. I find Hugo to be much simpler and easier to manage.
> Do vendors normally perform a full security audit of programs they include? Is there an expectation that they would give closer scrutiny to smaller outfits vs. top tier software vendors?

OEMs absolutely should own up to responsibility for the crapware they load on their boxes. Saying "it wasn't built in-house" makes about as much sense as an automaker washing its hands of the airbags or other critical parts in the cars they build.

As for how deep of an audit, Komodia's own description of their product should have raised massive alarm bells. Anytime I see websites rewritten without my permission I get incredibly spooked, and that's when it's just HTTP over a network. Intercepting SSL/TLS is just not something any OEM should ever contemplate loading on a consumer machine. It's willful recklessness and engineering malpractice of the worst kind.
Things I learned about TDD by looking at the tests in the JUnit source
I clicked a domain name and it briefly routed me through a Share a Sale page, so I'm assuming yes.
Thanks and well put!
If your LTV > CAC then yes.

LTV = Lifetime Value of your customer

CAC = the customer acqusition cost

Since the CPC on AdWords are quite high and finally the resulting CAC will be also quite high (still depends on your conversion) you need a product with a high LTV. I don't know how much LTV you try to achieve with HackerEarth but it should above be $100.

Cheaper channels: affiliate (so CPA based deals) or SEO
The article is the translation from Russian. Let me try to bring the author here.
Here is the price list:

.AF
$125.00 USD
.AG
$119.00 USD
.CX
$49.00 USD
.FM
$99.00 USD
.GD
$49.00 USD
.GL
$89.00 USD
.GS
$49.00 USD
.GY
$50.00 USD
.HT
$129.00 USD
.IO
$99.00 USD
.MS
$49.00 USD
.MU
$99.00 USD
.PE
$99.00 USD
.TC
$49.00 USD
.TL
$79.00 USD
.VG
$49.00 USD

https://iwantmyname.com/short-domain-search
10 Do's and Dont's for Parents with Dyslexic Children
How to set drivers password on Windows 8/8.1 save data from theft and hackers
I did not know that. Makes sense I guess. Just laying the odds for publicity.
Leaky battery attack reveals the paths you walk in life
There's an open-source implementation of a different approach to the same problem in ToroDB (http://github.com/torodb/torodb).

ToroDB creates tables dynamically, which match the types (mapped to columns) of every level of the JSON documents, obtaining a fully relational database. This is effectively "partitioning" (automatically) the documents based on their effective "type".

ToroDB actually uses PostgreSQL as its backend to store the data relationally.

Hope this information is interesting.

Disclaimer: I am one of the developers of ToroDB
This is a valid point. However, technically, nothing is changing on the third party site. Those sites are changed locally on the user's laptop. I don't think that's much different from something like AdBlock. I'm not sure there's much any third party site could do about this.
Thanks, I've actually _never_ seen that suggested anywhere! Would be a great idea for when my wife and I both have jobs.
Linux and Mac versions, I bet.
If we need to compare value to price ratio using JetBrain's products, for example, $100 (discounted to $75) is a bit too much. I won't even compare to the free Atom, which thanks to plugins and architecture is turning quickly into a fully-featured IDE.
Ok Google, turn on flashlight
Ok Google, turn on flashlight
Why bother with a compatibility shim for legacy versions of V8 instead of just updating to stable V8?
Thanks. Yes. Used https://iwantmyname.com/affiliate .
I could see the cross-platform capability being a draw for coding for mono.

I would love to have a free for education use cross-platform minimalist IDE for C# that I could use for middle school programming classes I teach.
Never trust the client or the data they send. Talk about a rookie mistake.
Using Google App Engine to Power Bluecore's Ecommerce Triggering Solution
Getting to the top of a category in the app store is a metric based on installs. Ad revenue is based on number of times the app is actually used.

Developing an app that thousands of people install but don't actually use often won't make you especially rich.
This is the second outage I've seen them suffer in less than a week. Does anyone know if it's being attacked?
The idea looks great. Do you have some actual success histories to share?
Visual Studio has been effectively free for almost ten years with the Express Editions launching in 2005 (which can be used for commercial purposes).

The only thing that has really changed is that Microsoft has re-merged all of the individual Express Editions into one coherent [free] product, and they have enabled things like Visual Studio Extensions.

The biggest "problem" I have with the free versions is lack of Microsoft unit testing. Aside from the differences aren't that great (and I have Visual Studio Ultimate at work, and I still rarely notice the differences).

As to what their USP will be: I would imagine that it works on Mac and Linux. It is cross-platform, so it works on all three of the major OSs unlike Visual Studio (but somewhat like Sublime).
Probably from installing the utility program that often comes with the SSD. I bought a Samsung 840 EVO recently and it came with "Samsung Magician" which dutifully tells me about the Feb 2015 update available.

http://www.samsung.com/global/business/semiconductor/minisit...

Now tedu being a BSD guy ;) probably is finding out some other way but I'm going to guess the vast majority of SSD customers have a Windows or Mac computer and just go with the utility provided by the hardware vendor, Samsung or some other company.
It often feels like the only users of perf are its developers and Brendan Gregg.