skysight-inc/HackerNews huggingface dataset:
Ask HN: Startups, you work/code 24/7. How do you get sex?
This is a serious question for unattached, startup founders or employees, who are humans with needs.
Reactive Collections
In extreme cases, I combine templates and macros to achieve the desired conciseness of code. Templates are powerful, but often a lot of verbosity/boilerplate is still needed, where macros may come in. That is usually in a basic form as described in this article (one can do much more advanced stuff with macros e.g. google X macros).

Just to annoy you I'll show some code of mine. It's a compile-time expression wrapper.
Code: https://github.com/ambrop72/aprinter/blob/master/aprinter/me...
Test: https://github.com/ambrop72/aprinter/blob/master/tests/expr_...
If Grandma is that technically incompetent, the only thing viable for her is cash and check. They couldn't pay with PayPal anyway. Someone who is technical enough to pay with PayPal, however, can pay with Bitcoin all the same -- the hurdle is in making sure it's understood as a cash transaction with refunds at the mercy of the seller.
Looks to me that these are all discount vendors. I didn't even know Realtek made their own consumer devices.

That they were all using the same or a variation of the same firmware shows that the problem isn't maliciousness but carelessness. Someone writes a reference implementation that happens to have a hard-coded username as a debugging option. It may even have come with a note warning you that this needed to be changed before being put in the final product. But in the rush to a product to market as fast and as cheap as possible, they forego any modification to the firmware beyond branding and push it out bugs, backdoors, and all.

I think it's a stretch to say these are "major" vendors. I've only seen TrendNet in the wild and usually because someone is complaining about their internet not working well and I say, "Yeah, that's not a good router. You should buy another one." You get what you pay for.

Of course if a truly malicious actor wanted to place a backdoor into a router on purpose, I expect it'd be someplace other than the flash firmware that can be easily overwritten.
If you can use stripe, that should be your first choice.

Failing that, 2Checkout and http://www.fastspring.com/ are really good and 2Checkout works in many countries.

The other option would be to just get your own merchant account and use something like WorldPay
Almost certainly nothing, in a very reassuring and adult-in-the-room manner.
they should list the ones that they tried that are safe too.
i tried my cisco epc 3925 and super/super does not work.
OP here, I learned a lot from asking this question. Specifically that the Deadlines I have seen fail, were not due to Agile, but failure to implement Agile. Agile takes buy in both from the Customer, managers and dev team. This also takes education on roles and expectations. Without buy-in, you lose the check's and balances and end up with dev teams on a death march, or product deliveries not providing value for the Customer.

Ron Jeffries has a great post on this topic that I highly recommend http://xprogramming.com/articles/jatmakingthedate/
It's off topic but what's the best way to know whether your router has a backdoor if you're not very tech advance.
Hi! If you didn't have your Norwegian sim card in your phone though, you wouldn't be able to receive it. Also some people don't have a local sim card (eg. I travel around Asia, no sim from Australia) and those that do may have to pay global roaming charges to receive SMSes. I should probably explain the need for it a bit better. Thanks for checking it out :)
That's a great idea, and would be a natural fit for both Consumer Reports and Underwriters Laboratories in the US.
I wonder how many of the affected routers have their remote management interfaces turned on by default - if they are off (as they should be) then it probably isn't that big a deal... I mean, loads of routers have admin:admin set and left unchanged
Q: What's the difference between a consultant and a contractor?

A: A contractor knows the difference.
More of a general (i.e., not embedded systems specific) book on C is "Deep C Secrets", by Peter Van Der Linden.

Amazon link: http://www.amazon.com/Expert-Programming-Peter-van-Linden/dp...
"You misunderstand basic time averaging and the problems of proxies"

Nope, the actual data is the one thing I haven't looked at. Because my studies of science haven't sufficiently educated me in that area and I know I'm not qualified (ask me to, say, visualize a molecule in 3D, that's another thing). But I am qualified to understand a programmer's tribulations, having been paid good money to do "software archaeology", and most certainly am qualified to interpret overt conspiracies to keep people from being published, or to get their community to shun a journal that did publish a paper with thoughtcrime.

I have no idea who came up with the name ClimateGate, but seeing as how I was political aware when the Watergate break in happened, and followed the drama to the bitter end, I know that [Fill in the blank]Gate is an automatic, if not the default US naming scheme for scandals. If that makes me influenced by the GOP, by Richard Milhous Nixon no less, so be it!

And again you demonstrate how the GOP lives rent free in your brain, for you cannot even conceive of someone saying what I do from first principles vs. "just regurgitating GOP talking points" and lying about it all.
That all their routers in that list are discontinued and out of active maintenance, probably.
On the other hand, there is a legal obligation to process dollar bills for debts. In a world where everything is increasingly digital, it would be nice if there was a government-sanctioned option that doesn't discriminate against any [legal] services.
So did I understand correctly - you too are not happy with the 9/1 rule?
How Boko Haram Uses Female Suicide Bombers to Terrorize Nigeria
Heh, that reminds me of when the "Trillian" IM client advertised "128-bit blowfish" encryption, but used 128-bit DH to negotiate the key (this many years ago).
Procrastination definition and how to overcome it?
I am glad that Thunderbird increases in popularity. But this makes me wonder even harder why they don't work towards a features that allows syncing Thunderbird (and it's calendar [sunbird]) with their FirefoxOS apps. Apparently there aren't many people interested in offline-synchronizing anymore these days. :(
Talk to your Bank;
You can't know for sure, but the best way to avoid vendor software backdoors is to get hardware that supports OpenWRT and run that.
Thought experiment applied to variance in daily life
We are running a custom container implementation. The goal of our implementation is containers that perform like VMWare.

Process isolation is hard, but we've achieved it. We currently have some tens of thousands of users on our public cloud with zero container breakout, and while no security is perfect, we're constantly trying to improve our offering through White Hat bounties and constant security testing. In this case, I can tell you heuristics with which you can infer security, but I can't blanket label something as secure. I would say I think it's the most secure new virtualization tech, but I would also note that's a matter of personal opinion. Again, zero container breakout is probably the main point.

You can run our virtualization inside of Amazon, in which case you only really have the pain of Xen host + Amazon Xen, but it performs faster on bare-metal (as one might expect).
Baby trafficking is a lucrative business in Kenya
That's an internal VPN though, not a service with customers.
Facebook Employees Can Access Your Account Without Password
Apple Pay: the speed of the product
Arbitrage Discovered
"The e-mail services provided by other service providers shall not be used for any official communication," the notification says..."

The U.S. government also mandates that official government e-mail accounts be used for official business, since we have laws that require the archiving of official communications (to avoid corruption, etc.).

For example, there was a controversy a few years ago when the head of the EPA, Lisa Jackson, was found to have been doing EPA business using the e-mail alias of "Richard Windsor", in an apparent violation of federal records laws.[1]

There are also industries like finance where laws mandate that e-mails must be archived for a certain period of time to make them accessible to regulators in case improprieties are alleged. Many other businesses also want to keep archives of employee e-mails in cases patent disputes or other lawsuits arise.

[1] https://en.wikipedia.org/wiki/Lisa_P._Jackson#EPA_Administra...
> And the last options is to use Open Source firmware if your device supports(eg. OpenWrt)

The first shall be last and the last shall be first.
If it's all client side JavaScript, then the source code is the webpage.
Yes, something like this but more full-featured.
No one codes 24/7. As eccentric as the crowd is, they are more balanced than that.
I'd be interested to hear where. I'd like to try freelancing, but my skills are in embedded, so I figured I'd need to get good at web? Where are you finding your customers?
Yes. VMWare VMotion and Xen Live Migration are both VM migration tools, not containers.

The difference is subtle, but important. VMs have overhead because of virtualizing the kernel, Containers don't (or rather containers benefit from kernel performance much more than VMs).

In other words, you can achieve the same thing with VMotion, but it's slower and more overhead and harder to manage.
I'm solidly persuaded by RNA before DNA in chronological order.

Can you offer a logical argument for DNA first?
Ask HN: Can you recommend a decent web file manager?
For apache on debian 7 to share files between users.

Doesn't have to be fancy, just something basic and functional and easy to use.
Don't know that we have plans around that at this time. I'll try to dig and see if I can flesh out our story around this.
I have never seen someone making a big deal about the theoretical problems of limited liability, so I wouldn't know. Rothbard in particular only mentions it - in a single paragraph of one of his books - because he's trying to show that corporations don't need the State to exist, not because he's railing against it specifically.
Spaniard living in Belgium for 3 years. For every purchase I make online with my Spanish card (issued by a Spanish bank), if I don't receive the code into a Spanish phone number, there is no other way of receiving it. I might start using this! :)
It's much faster and doesn't use VMs.
The 5 Best Apps to Maximize Your Free Time
Apache Spark – Lightning-Fast Cluster Computing
Me personally? No, but I've seen them presented. Next time I see a good one I'll submit it to HN.
This somewhat reminds me of the Netburst era, when AMD's Athlons were in the lead while Intel decided to chase after high clock frequencies with much higher power consumption as a result. Then Intel went back to the P6 to produce Core, and rapidly overtook AMD.

I still hope AMD will make another sudden leap like that, to keep the x86 market more competitive, but they seem more intent on keeping to the path started by Bulldozer...
Take a look at Object Oriented Programming With ANSI-C.

http://www.cs.rit.edu/~ats/books/

It is complicated, but you can take parts from it and built your own system.
Reminds me of Temple Grandin's hug machine [0]. I wonder if there's a connection?

[0] http://en.wikipedia.org/wiki/Hug_machine
Find the most recommended movies, music, TV, books
Firefox OS has a dedicated Email app which supports multiple email accounts and offline mode.

https://github.com/mozilla-b2g/gaia/tree/master/apps/email

https://github.com/mozilla-b2g/gaia-email-libs-and-more

What exactly do you mean by syncing Thunderbird with Firefox OS apps?
Intel makes 160 wH chips too, but you would probably compare something like a 95 wH Core i7 with a 125 wH FX. That's about $42/year in the USA, but that's assuming running at full power 24/7. Real cost would be a lot lower.
Probably the fact that no positive feedbacks or 'tipping points' happened during the Holocene Climate Optimum, so it's fairly easy to figure out that this is your usual alarmist nonsense.
I disagree. You know, borders are open. And anybody who wants european benefits can just go there and have a good european life. And many people choose that way. Those who stay just don't give (excuse me my lexic) a shit about Europe. We just do not care, and we are not interested in conquering something. We have a lot of our land to develop, so why we should bother about exhausted Europe?

Poland, Czechoslovakia and Hungary and a lot of smaller countries was just necessary for safe belt between USSR and the West. If there was no Cold War, there was no need to control that countries. But the West preferred to confront not to cooperate. And what we supposed to do? Should we allow to position NATO's nukes around our borders?

And now Putin have no interest to get something from Europe. May be only money and technology to build enterprises here. Nobody needs or wants conrol over Europe. Even more, a lot of people thinks here that we should learn from Europe...

But now. Europe just pushed us away into "friendly" Chinese hug. And it would have far far different economical consequences for Europe. Because China wants your markets badly. And with Transsiberian Highway it will get them.
"Autism" is probably like "cancer" in that it is likely a series of pathologies with similar presentation rather than one specific disease.

It wouldn't surprise me if neurosteroids and neurohormones are involved, as they're the next frontier in psychopharmacology. They affect the brain further up the metabolic chain, so they don't have the nasty rebound effects of monkeying around with neurotransmitters directly.
Yerka: The Unstealable Bike
maybe the type of people that go along with the homeopathic novac etc etc are not the type of people that give birth to autistic kids.

i find it hard to see how they can control for factors like that, in studies like this. another example being longevity and alcohol intake - where the type of people who intake more alcohol are more social.

how can you control for another more important factor, that you aren't aware of?

the researchers as you put it: "didn't know what they didn't know".
Thanks! Didn't know this. Will check this out and decide what to do.
Eclipse of the Sun has European solar power producers worried
> Why not a user chosen passphrase, with pretty extreme key stretching (w seed)?

Because users simply cannot be trusted to provide secure passphrases. Never, ever store or transmit data secured with a passphrase; it will be broken at some point.

It's okay to secure data on a user's device with a passphrase; that requires that an attacker access the device itself.

To move data between devices, consider systems like JPAKE and/or using NFC to communicate between the devices themselves.
It also reminds me of "soothe rocking" in autistic children, which frequently involves tightly constricting the knees up against the chest with both arms, creating pressure.
"I wanted to write something that is concise, easy to understand, easy to extend, and reasonably efficient. There is a subtle trade-off between conciseness and extensibility: If we use a very high level language that already has a "neural_network_train" function, we can write very concise code but we lose the ability to change the training algorithm. If we use a very low level language that only provides primitive arithmetic operations, all the algorithm details are exposed and modifiable but the code is bulky and difficult to understand. For a happy medium, the code should reflect the level at which I think of the problem"

The tradeoff is not between concision and extensibility, but high- and low-level computations.

Even if the language natively implements a "neural_network_train" function, as long as the language also offers low-level primitives to implement all the necessary parts of the neural_network function, the language is no less extensible than the OP's suggested alternative. For example, almost 100% of R users use "lm" to run linear regressions, but R has all the necessary pieces to implement the linear regression calculation (either by inverting matrices or running iterative gradient descent algorithms)

The OP conflates the library-level abstraction and language-level abstraction. I am with him in that there is a trade off between concision and extensibility w/r/t language-level abstraction. The library-level abstraction is pragmatically important (i.e., you would not use OCaml to run websites) but theoretically uninteresting (Ocaml can certainly express all the needed computation for a web server).
Because if the user chooses a bad passphrase (hint: he will) then his key will be compromised forever.

Users will choose 'password'; they'll choose '12345'; they won't choose 'VPSJjNwytizY7vtGzRv208' or 'cZD2N49caaSYkDuWZMHuyiuKuk6AhA5jdC29g3moHmX' (128- and 256-bit, respectively).
Hosted Android APK Decompiler (Upload APK, Get .java)
Fumbling to Success: How Founders Do Things the Wrong Way
I used to use thunderbird before switching back to apple mail - I thought they had discontinued work on it? I know I heard something about that. It also doesn't do a few things apple mail seems to do; i think it was a matter of rule execution and multiple from addresses.

The UI could also use some cleanup. While I don't like apple changing things because they can change things (when they do), i feel like Thunderbird UI has room for improvement in usability and aesthetics.

Well, i've been thinking about setting up a mail client in my linux VM, guess I could install it and see how it fares.

Are there any other open source email clients that people use, that are maintained?
I would especially like to synchronize Firefox OS with my Lightning calendar. As far as I know, you have to publish your Lightning calender online to make it accessible for Firefox OS.
That's some interesting logic. Do you bother looking both ways before crossing a street or does that make you a servant to the highway system/common sense?

> I'd rather have an OS that doesn't get me viruses...

No problem. The OS isn't the one getting you viruses. It's you.

> Plus, it's not even about "scanning"...

Yes, that's why I said to do a quick search on the Internet, to see what other people are saying about a given piece of software. If you can't be bothered to do that, then you deserve every piece of malware that you get.
Why aren't these vendors being prosecuted under the "exceeds authorized access" provisions of the Computer Fraud and Abuse Act? There's no EULA to protect the vendor.
I don't consult anymore, I have a SaaS company now. But when I was consulting I got to the point where I had a small, loyal group of clients who always needed work every month and always paid their bills without complaint. I would pick up new clients very selectively. I also employed a few developers and had payroll to meet.

Of course I could fire any of my clients at any time, but it would have only been harmful to my business. They were great clients and I wanted nothing but to keep them happy. Thus the "illusion" of freedom as I mentioned.
Not my tool, but super useful.
12 Steps to Social Media Marketing Success
Here's a good article on Moz for the basics. http://moz.com/blog/meta-data-templates-123

If you have an iOS app, you'll need smart app banner tags https://developer.apple.com/library/ios/documentation/AppleA...
The White House response:

http://www.whitehouse.gov/blog/2015/02/26/investor-state-dis...
How are you going to guess the password given just the salt, not even the hash? Hell, even with the hash itself it's nowhere near easy.
Be careful what you wish for... giving more control to the authorities is something that may have quite oppressive long-term effects.

You might solve this problem in the short term, but end up with only being able to buy approved devices containing more obscure, government-sponsored backdoors instead.
Why the stigma against agencies? I'm actually finding agency work more rewarding however I am a strategist working directly with multiple clients on how they can grow their business.

Is it the pay/workload/clientel?
To answer your question about the the salt and the PBKDF2:
salt ensures that the hash of my password is different from someone else's, even if we use the same password (or I use the same password on another site).
Thus, if someone has the hashes, and wants to attack the system, then need to attack each password independently (they can't just run a password dictionary through the PKDF2 (or SHA256 in this case - very bad choice)) and then compare the results against all of the password hashes. They have to start with the salt (different for each user), and then run each password guess through the algorithm. Much slower. Much better.

Which brings us to PBKDF2 instead of SHA256: SHA256 is designed to be fast. That's bad when hashing passwords, because it makes offline dictionary-based attacks faster. Password Derivation functions are designed to be slow. That makes logging on very slightly slower, but makes offline attacks much, much slower.

However, doing the encryption in Javascript is a fatal problem: At any time, they can update (or be forced to update) the javascript to send the server my password when I use it, and the only way I can protect myself from this is to audit the code, EVERY TIME I USE IT.
> Germany has long been our #1 country for usage

I also heard that Firefox enjoys a major market share in Germany (a not-that-reliable source is http://www.quora.com/Why-is-Internet-Explorers-market-share-...). I even heard from a fellow German university student that "everyone [in Germany] uses Firefox" - obviously an exaggeration, but there must be some truth in it.

Anyone has an explanation (preferably backed by data) for the popularity of Mozilla software in Germany?
Braintree was bought by Ebay last year. Someone looking for an alternative to PayPal probably won't be too inspired when they see "A PayPal Company" below Braintree's logo[1].

[1]: https://www.braintreepayments.com/
That list would be way too long really.
How to test your web applications with Selenium
Yes. And you also created your account 1 minute before creating this reply.
Most startups hire hookers to give BJs to engineers while their code is compiling. Standard part of the comp package.

Or if you're a good enough engineer, your CEO will probably blow you himself.
How is this an apples to apples comparison? Instantiating CRTPInterface with Implementation is no different than just calling DynamicImplementation::tick() directly, so why not benchmark that?
Why the web Giants can't go mobile-first
It baffles me that any router manufacturer would have the nerve to hard-code login credentials into their routers.

But to be clear, for this to be pulled off remotely, the router must first either disable its firewall or a DNS rebind attack or some other vulnerability must be possible. In the case of a rebind, a victim must also first visit an attacker's server. What would be even more concerning is if any of the routers hard coded with these login credentials are also vulnerable to a rebind or something else by default. Many manufacturers patched the rebind vulnerability back in 2010.
I wonder if this can be extended to produce candlestick charts [0]? The underlying concept is the same; candlesticks just have additional data points for volatility.

[0] http://en.wikipedia.org/wiki/Candlestick_chart
From Pizza Truck Driver to Millionaire (Interview)
So make an app that creates random passphrases. You don't need completely new protocol for that.
Agreed. If we're going to have laws like the CFAA they should be applied equally, rather than assuming that "mere consumers" don't have any data to protect.
That is true, but the author definitely took a giant leap to leave the field of programming - twice. Getting another programming job would have been a substantially less risky jump.