skysight-inc/HackerNews huggingface dataset:
I don't think it costs $175K to push a string into DNS, but I could be wrong. Where does that figure come from?

When I searched for: ICANN $175,000 I found some talk about a Uniform Rapid Suspension slush fund for them to host 2 summits to talk to the intellectual/imaginary property community about lowering the price to file an infringement claim.

I also found the "gTLD Budget Explanatory Memorandum" [1] from their FAQ page [2], question 1.7 and it looks like they basically spend millions because, Lawyers.

[1] - http://newgtlds.icann.org/en/applicants/customer-service/faq...
[2] - https://archive.icann.org/en/topics/new-gtlds/explanatory-me...
When you're feeling tired try going for a short walk or running an errand (if you can get away). I find a quick walk or running an errand, especially if it's cold out picks me up from feeling tired.

Try taking a full day off from devices on a weekend day or maybe both days. Pick up some hobbies with less screen time.

When you are on the screen try to limit the time you have so maybe give yourself a half hour to get X complete and work against a timer. If you're doing interesting work usually you're excited to keep going/make progress. I use the pomadoro technique (work 25 min/5 min break) and sometimes if I'm making progress I just keep going through the breaks.

Also coding all day and most of the night is probably too much. Typically you only have X hours of productivity per day so if you exceed that you will feel tired sluggish and want to give up. So maybe code in smaller sprints to make the most of your time.

There are plenty of evenings I'd like to code more or do a tutorial, but I'm out of cognitive energy and just don't have anything left.

I would try coding less, making the most of the time you allow yourself on screen time. Exercise more, take breaks, get out in the cold, try a shower to wake up and see how that goes.
I guess they removed that porn line. I clicked through on it and was perplexed what the big deal was, and I had to read the comments here to know.
That's a bad comparison. Marriot is hugely leveraged [1] on purpose (tax shield reasons, etc. etc.), while Airbnb isn't.

It would be better to compare the firm values instead of equity values (which you can change in one day just by issuing debt and using the proceeds in a share repurchase)

[1] http://marketrealist.com/2014/10/why-ev-ebitdar-multiple-bes...
Apparently they do a trick to put most of their debt off the balance sheet, through lease obligations. Thus, if you just do a quick glance at their numbers, they appear to have a low leverage.
Mcdonalds carved out a pretty good niche not catering to your yuppie friends.
EDIT: I'm not sure I understand the problems with fructose. It gets mentioned a lot on HN.

http://www.newscientist.com/article/dn26868-do-sugary-drinks...

"Ah, so that's why the study found an association with sugary drinks?"

"Possibly. The study found that girls who drink more than 1.5 sugar-sweetened beverages a day started their periods 2.7 months earlier on average than girls who consumed them twice a week or less. The finding didn't apply to fruit juice – which contains a sugar called fructose – only to drinks sweetened with sucrose."

"What is the mechanism then?"

"That's one of the problems: we simply don't know. Karin Michels at the Harvard T. H. Chan School of Public Health, who supervised the study, says that sucrose in sugary drinks causes a spike in the hormone insulin, which controls blood sugar levels. Over time this may make the body's tissues less sensitive to the hormone, with consequences for metabolism. Quite why this would lower the age of menstruation isn't understood, but a drug called metformin, which makes the body more sensitive to insulin, has been shown to reverse early puberty in clinical trials."

They don't find this insulin spike with fructose.
Virtually every breach disclosure press release I've seen has included a line like this, as if it actually matters. Common practice.
Actually, not that it matters for this thread other than to speculate...

What if every IP enabled commercial video monitoring device [1] on the planet were now able to have a functional and durable dynamic DNS service, ostensibly, for what comes next [2]?

[1] http://www.axis.com/products/index.htm
[2] http://www.canon.com/news/2015/feb10e.html
Please explain what you mean by "Not wise to compare to valuations of established businesses in one vertical."
> what motivates you to create an account for the purpose of commenting on this story.

airbnb is a YC company, HN is a YC site, so it's easy to imagine that comments critical of airbnb wouldn't be taken kindly.
Who has gone public at valuation greater than $20B? Facebook?

Is Airbnb a bigger company than Facebook?

I just don't understand how these late stage investors think someone is going to take them out of their trade at a higher valuation.

Here's a table of recent IPO's. I have to do the math to get to the market caps, but I don't think any of them is above $20B.

http://www.renaissancecapital.com/ipohome/pricings/priced.as...

In short, where is the greater fool for these late stage valuations?
> One last point to consider, why can't Google apply for .googdev or .googblog?

Or just give them ".goog", and every corp gets its stock symbol as a TLD.
“Million Dollar Murray” – homelessness and other power-law distribution problems [pdf]
Book Review: Hacking and Penetration Testing with Low Power Devices
google is a branch of the us government. nothing will ever happen to them and as long as other countries don't produce a better search engine we'll all have to live with their control of the www
You may be clinically depressed. Go to a psychiatrist. Doing just that was one of the best things I've ever done for myself.

Another thing to look into that involves a doctor, is the possibility of type-2 diabetes. Or possibly some other ailment.
Is this a signal that we should expect another large round of funding for Uber?
I always use the Startup Guys as a reference this.

https://www.youtube.com/watch?v=LMmdl4VltD4
Stick with Prawn, as it is sanity saving for this task. For web based previews, use GraphicsMagick and Postscript to turn the PDF into a gif or image. One command line, takes half a second. Saves you from doing CSS hell on layout, where the preview pixel wise matching the print data really matters for your app.
Do you snore? You may be having some sleep apnea.

It might be thyroid.

It might be some mood disorder.

I'm (obviously) not a doctor and you should probably see one. This is the kind of thing that they're happy to see people about.
I don't think it would require a quantum leap forward in tech to take traffic into account...
I think YC owns about 3 point something % of the companies (7% less dilution) so their portfolio is worth ~ $1bn
It would be great to see examples of the design/modeling of the system. I really like functional languages have done since my university days, but there seems to be a dearth of examples on how to actually lay such large projects out in Clojure/Scala etc.

Having something like the J2EE Petstore (for all its sins) would go a long way to allowing more projects to make the switch than more articles on how great things are.
New Social Media Not So New
Thanks for explaining. I question my sanity when I see lots of comments and can't tell what's so exciting about a black & blue dress you can change the lighting for.
Your title says "thing", not "tree". The original title fits under the 80 char limit.
I wrote an Irc script called TextBox as a teenager. Among other things it was one of the first that could implement Irc bots via DCC RAW tcp connections from the script itself, allowing you to martial armies of channel takeover bots. Seemed cool when I was 15, and it was actually through Irc channel wars that I learned the basics of network protocol design.
yuppies eat plenty of mcdonalds. primarily breakfast/coffee, and salads. they 'pivoted' away from only junk food a few years ago after the supersize me fiasco and have done quite well with it. have you seen an mcdonalds at 8am in a business district? it's like a fuckin' crime scene.

also, when yuppies get drunk in the city... all bets are off.
Foreign Policy: When did Obama give up?
it's also the abbreviation used on the coaches going from San Francisco to "MTV"
> One last point to consider, why can't Google apply for .googdev or .googblog?

They can (or, rather, could have when the window was open for new gTLD apps.) Anyone who had the money to put down could apply for anything they want.

(I'm guessing they applied for .dev because they are already using it internally for much the purpose that they describe, so given the probability that someone will pick it up for some purpose, the least disruptive thing for them is to pick it up as a closed domain.)
I tried it on a couple of articles, and it failed miserably:
http://newscenter.lbl.gov/2005/03/31/a-search-engine-that-th...
http://www.wired.com/2015/02/silicon-valley-home-schooling/
Last year Uber was using Backbone and the JSON returned to the client included ALL information about the drivers you have used for trips including home address, phone number, etc. I wonder if this has something to do with that?
Some thoughts on how a hacker might defeat this;

* Broadcast signals at the PFP enabled devices to cause false alarms, in order to convince the operators that the devices are unreliable.

* Hack the system at a time where the administrators are performing an "unusual" operation (such as installing a firmware update).

* Write your exploits such that they establish a minimal beachhead in the hacked daemon faster than would cause alarm (the article said it could detect malware in "milliseconds" -- you can do a lot in a millisecond), and then proceed very, very slowly. The PFP would still detect your malicious activity, but you would keep the signal/noise low enough that an alarm wouldn't be raised.

* In some circumstances it may be possible to achieve exploitation while restricting yourself to "usual" activity. Turning a switch into a hub would raise alarms; enabling a disabled ethernet port probably wouldn't. Similarly, using functionality which is already included on the device (such as functions in libc) would probably go unnoticed.

This is, of course, pure speculation.
Google's new headquarters: an upgradable, futuristic greenhouse
You could also use an auth token from the Android app and snoop around other users if you knew some info about them, which you could if you had access to a driver's phone (I did/do).
Show HN: RedPepper – spice up your curiosity
The information leaked was most probably a few views/menus. He's only tricking the client in to thinking he's an administrator, not the server.
You should definitely consult a doctor, just to exclude all the possible physiological reasons, for example diabetes.

After that you can consider psychological mechanisms, for example a defense reaction against forthcoming job change and it's requirements (learning new things). It sounds like a stressful situation and your reaction is quite common among people in similar situations. So it's absolutely ok to seek professional help, instead of trying to find a solution on your own.
A huge chunk of the short term housing market is corporate. You're talking about stays of 30+ days and you need to book multiple rooms regularly with a single phone call. That's not Airbnb's sweet spot. The pricing in this market is also pretty competitive. I know because the investment bank I used to work at used corporate housing and the rates we negotiated for rooms in Manhattan were much better than what you can get on Airbnb for Manhattan.

If you want a publicly traded comp for short term housing, look at Extended Stay. $1.2bn in revenue. About $500m in EBITDA. $4bn market cap. And it offers a 3% dividend yield.

As for my motivation, you want the truth? It's Friday night and my wife is out of town. I had a long week and instead of sleeping with one of her boring girlfriends like I usually do I'm trolling you on HN.
neat!

the drop at the end could easily make a reader think that immigration has dropped recently. to avoid giving that misimpression, i'd recommend to multiply the last datapoints by 10/4; equivalently, think of your y-axis units as immigrants per year, rather than immigrants per 10-year bucket.

the problem with smooth curves is that they create data that doesn't exist; like someone who invents a few extra details when telling a story in order to make it more interesting. there's no clear line between editorializing, clarifying, embellishment and fabrication; even a blue dress can look white.

anyway, smooth curves obscure the limits of your data; without them it'd be more clear that we're strictly dealing with decades. for your most interested readers that clarity would be helpful.
> So, who was going to spend the $175k to make these generally available?

Nitpick, but it was $185,000 minimum "evaluation fee" (on top of the cost to actually have, and demonstrate that you have, the "operational, technical and financial capability to run a registry"). [0]

[0] http://newgtlds.icann.org/en/applicants/customer-service/faq...
hi dlandis. yes i must admit that the documentation is currently very poor. doing what you suggest is going to be my weekend :)

it has been released despite not having these things in place because it's forcing me to sort it out. the project sat untouched for a few months late last year and i didn't want that to continue.
> I've heard people say "just Airbnb it" or "just use Airbnb", but I've never heard anyone say that about Marriott or the Hilton...

So you haven't booked a trip in a corporate environment then? There are places where companies have deals with chains like Hilton and staying at an Airbnb would require some extra explanation on the expense report.
It actually is. The last two paragraphs are reworkings of Sir Humphrey from Yes Minister, a British political comedy from the early 80s that mocked bureaucracy and politics (while scarily showing it for what it really was).
Snapchat Is a Giant Threat to Google, Facebook, and TV
Alibaba ended their first day at about $231 billion and I haven't heard anyone say they were 10x overvalued lately: http://www.theguardian.com/business/2014/sep/19/alibaba-shar...

Other big ones include UPS ($60 billion), AT&T ($58 billion), Facebook ($81 billion), Kraft ($54 billion), GM ($49.5 billion), and Visa ($44 billion) plus a bunch of non-US ones. This article has a great table of them: http://blogs.wsj.com/moneybeat/2014/09/05/alibaba-biggest-ip...
i should note that the repositories aren't actually private but the README wasn't updated to say so at release time. check the README again now and you'll see that you can skip this bit about needing a quay.io account.

apologies for not making that clear.
Probably so and also an indication of a probably lack of defense in depth and failure of access control. It will be another example to add to my Litany of Data Breaches the next time I speak with developers about appsec. You can see my last talk at https://www.youtube.com/watch?v=dj196NhPyWs&t=19m50s. So much failure to go around in application design and implementation.
Any other concerning side effects, if one were to use this? (or, why is it an illegal drug?)
1. Google Container Engine runs Docker containers, the same as other providers like AWS EC2 Container Service and Joyent Compute Service.

2. I don't understand what you mean.

3. You run your containers on virtual machines dedicated to you, so you rely on the hypervisor for security.

4. Cgroups is one of the technologies that linux containers are built on. What is your point?

5. Google is building their container service on docker and kubernetes [0]. Both of these are open source, already adapted by multiple providers, and possible for you to run yourself.

[0] http://googlecloudplatform.blogspot.com/2015/01/everything-y...
:) this was pretty hilarious
I agree. I actually rolled back to the previous version since there's an extension that works perfectly for this that is broken by the new version. Check it out:

http://vlcsrposplugin.sourceforge.net/

Just like to add my thanks to the vlc guys. I've been using it for 15 years and it's a true credit to the foss movement.
I work in info sec, and in one of the "Who's Hiring" posts a few months ago (do we still do those? I haven't seen one in a while) I asked "why are startups never hiring security guys?", because I never see a security engineer position open in those topics. I never got a response. To me that indicates the response is "we don't".

Listen, guys. I don't care how small you are. If you are handling PII or credit card data or anything that, if leaked, would harm your business or your customers, you need a security guy. Not a programmer who knows some security stuff. Not a manager who checks off the online PCI self-assessment. Not "we outsource to an MSSP". At least one security guy, full time. Make sure that everything you do is run past that person. If you're so busy that you can't run everything past that person, hire another.

It's not a joke. Stop fucking ruining people's lives. It's 2015, four years past "the year of the breach" [1]. Get with the program. It's not okay to have a breach. It's not. It doesn't matter how much money you saved from not having a security guy or the tools they need. Get someone who knows what they're talking about and listen to them.

[1] http://news.softpedia.com/news/IBM-2011-is-The-Year-of-the-S...
This project takes a whitelist approach, rather than a blacklist approach. Malware authors could certainly turn their programs into random GOTO spaghetti in order to obtain a unique power consumption pattern. But this approach is to fingerprint the pattern of normal operations, and raise an alarm when the device starts doing abnormal things.
EXPEdia has a market cap of 11.82B, is airbnb really this big?
I would say, if you want to take your sites typography to the next level... pay for a font library.

That was the theory, but I'm still waiting to be convinced about it in practice. I check in on all of the major rent-a-font services from time to time, and I'm rarely impressed by their results.

Consider TypeKit's home page. Personally I would not consider some of the fonts and typography they use themselves to be acceptable for professional work.

For example, they're currently using Adobe Clean for a lot of the text, but it has more hinting glitches than an excited child the week before their birthday. They get away with it -- up to a point -- because many visitors probably still have a default browser font size of 16px, but if your default is a bit larger or you zoom the page, the text rendering is awful. (Actually, their whole layout breaks if you set your default font size a bit larger, but that's a separate problem.)

Notice how in the font showcase section, under "THE BEST ARE ON TYPEKIT", all the examples are actually screenshots and almost exclusively of very large text? What happens if you actually look at the samples of a popular Adobe font, say Minion Pro, which they feature there? Well, in tests based on TypeKit's own specimen screen, 3 out of 3 main Windows browsers render it with nasty weighting issues, and even significant gaps in the letter forms in narrow areas. This isn't a problem with either Minion Pro or the hardware I'm using to display it; it renders just fine at the same physical size in InDesign or Adobe Reader. It's a problem with Minion Pro served as a web font by TypeKit.

The quality of web fonts from Cloud.Typography generally seems to be better, but again, even their own home page shows plenty of fonts that either appear blurry or have hinting problems and appear with uneven line weights, uneven spacing, counters closing up, etc. The blurring might be acceptable to Apple users who are used to that style of rendering, but unless your target audience doesn't include anyone who uses other platforms, it's going to look very odd to a lot of people. The other hinting glitches might be unavoidable results of trying to render fonts designed for print faithfully on screen, but they are glitches all the same.

I just don't understand why anyone who cares about the quality of their work would voluntarily choose these options, and pay for them, when you can have similar or better looking rendering for free with native system fonts on most platforms these days and with several of the standards from Google Fonts if you want a change.
I'm glad to see more differentiation rather than everything being .com, as if it were a technical requirement. If we reach a point where gTLDs become an issue, it wouldn't be hard to replace DNS with something like Namecoin.

It would only take a browser extension or native browser behavior to toggle alt DNSs like user profiles or VPNs. I don't have anything against anyone buying a gTLD, but if it becomes an issue, we can easily fix it.
I think relevance is the thing to work on. I did a search in a space I know a lot about and the majority of first page results were domains for sale. The company I have an interest in, which is the first result for certain keywords on Google and Bing, wasn't to be found anywhere in the first 4 pages on here. It would be interesting to hear a bit more about your plans for moving this forward.

I have a few questions it would be great to hear about either here or in a follow-up blog post:

* Is your reimplementation in JS a translation of your current from Pascal or a redevelopment?

* Why have you decided to move from Pascal to JS rather than spending the effort improving the current implementation?

* What lessons have you learned from your current implementation that you are attempting to overcome with your new version in JS?
Go uses garbage collection, not ownership and borrowing.
Room rental startup giving out free Polaroid for registering
Recently, I see a lot of new comers to private tech investing, particularly established wall street companies like Coatue, Fidelity, T. Rowe Price, etc. It seems like with recent recession, new regulations, and low interest rates, it is no longer very profitable just to be in the public stock market and they are trying to seek other options to bring large returns and justify large salaries/bonuses. But these bets are way more risky... Basically we are back in the same corner of financial institutions taking enormous risks for enormous rewards with no regulation.
Roomcrunch is a new LA based startup that creates travel connections based on similar interests. Hosts put up their rooms for rent, and guests rent them out. We launched very recently, and we're looking for all the help we can get!
All that you have to do is register with a Facebook account on our site, and you will be automatically entered to win a new polaroid for the month of February, and a brand new PS4 for the month of March
98% of Marriott properties are actually owned by people who are not Marriott. Source: their annual report.

I went looking for this gotcha, because the first time I realized it, I became much more bullish about Airbnb's chances. Most of the major hotel chains have been working hard for years to adopt the capital structure that Airbnb had on day 1.

Everyone wants to be a brand/online ordering system which just drives business to contracted hotels for a fat cut. This makes them vastly more capital efficient, reduces their exposure to e.g. Chinese real estate, and lets them get e.g. 20% of a night's stay with 1% of the staffing requirements of actually running hotels.
It's definitely not just Uber. And drivers' license numbers are serious PII! It was my exact example that I gave to my last appsec talk for Ruby developers this month in Nashville.

Starting with the user story: "As a Pawn Shop Clerk, I scan a copy of the customer’s drivers’ license because the company is required by law to keep this record at least two years from the date we purchase a used valuable from a customer."

https://www.youtube.com/watch?v=dj196NhPyWs&t=26m00s

There was a good Q&A about data retention, that included a lawyer in the audience.
Damn, rats have a better health plan than I do.
Consumer Privacy Bill of Rights Act of 2015 [pdf]
Browser extensions are kernel modules for browsers