skysight-inc/HackerNews huggingface dataset:
Then the devs aren't being creative enough!

You could do as I do: Syncthing on laptop <> Raspberry Pi <> phone.

Now all changes made on either the phone (OS #1, in your case) or laptop (OS #2) will be synced to the Pi (or VPS) ready to be picked up by the other device when switched on/synced. Placing a device between the two others ensures that all files are up to date.

Without it you can run into situations where you've updated a file on the laptop that is also open on the phone, accidentally saving the phone changes over the laptop changes, then saving the laptop changes back over the phone changes. Syncthing has versioning, but this setup negates the need for most rollbacks.

I use it to keep notes in simple text files with Vim and Notepad++. No need for markdown or images here, so I just use basic formatting, timestamps and hashtags to help with searching and browsing.

Including an encrypted filesystem, alongside Syncthing's encrypted syncing, can keep data that bit more secure.

All open source, all encrypted, all self-hosted. Give yourself 30 minutes to set it up, if that.

Notes:

The Pi is the Pi2, but until a recent upgrade it worked fine on the Pi1. The phone is an n900, still doing a great job 5 years on... but in need of a replacement, preferably another phone that can install arbitrary Linux software and is not walled into an 'apps' ecosystem.

The OP was interested in Android support. I don't think there's an app for Syncthing, but you could SSH to your VPS, with notes synced to your laptop? You're just missing that middle device in that case.
I'd suggest checking out Flexbackup (http://flexbackup.sourceforge.net/). It's super simple (always a plus), I've been using it for many years without fail and you can integrate encryption (http://rolandtapken.de/blog/2011-01/encrypted-files-flexback...).
Some people believe that young children know more about The Truth in a spiritual sense than adults. They just have it forced out of them by the time they grow up.
Hello, I'm the author of Snebu (the first item mentioned on the list) -- I've been trying to figure out how to get more exposure to it before I let it fly mainstream (i.e., submitting packages to the various distros, etc).

On the complaint that it doesn't do encryption -- That is one item that I'd like to seek some advice on. My plan is that if you want encryption, then use a LUKS encrypted filesystem on the target (communications to the target is already encrypted with ssh). The main reason is that I'm not a cryptographer, and even if I use existing libraries there is still a strong chance that I'd miss something and end up using them wrong. Just for example -- to do it right, you would add unique salt to each object you are encrypting (from the client side). That would then render any type of deduplication useless on the backend side, since multiple files with the same contents would have different encrypted contents.

That being said, I am adding code that lets you have replicas to other storage devices (tape, cloud, other disk based storage). So you would do your primary backup to a local disk device (that possibly has an encrypted volume), then the secondary stage would be packing files together into an (encrypted) object, for sending to a remote location.

I've got a small list going, after I redo the web site I'll put up a planned feature list along with comparisons with other backup utilities. If anyone has ideas to contribute, either drop me an email or open an issue on the Github page.

Thanks.

Edit: On the encryption side, am I correct in thinking that multiple files with the same contents should encrypt to different streams (via a random salt)? Also, should the file names themselves be encrypted? Finally, metadata, such as mod date, file size, and checksum -- should that all be encrypted too? Thanks.
If you're using Linux, it's something a lot like that. If you're using Windows, go fuck yourself.

: )

jwz's method is fine for disaster recovery, but it doesn't work for recovery from other kinds of errors (including human) since it only saves the last copy of the files.

In our case, the most important backups are the databases (servers can be rebuilt from config management), and having past copies definitively helps.

With rdiff-backup, we can restore the databases from any day for the past couple of years, and since it's incremental, it doesn't really take up much space.
Except this basically leaves the passwords in the hands of the companies. It's like Yahoo saying "you don't need a password anymore, we'll just create one on the spot for you".

That's not what I imagined for a passwordless world. I don't want the companies to basically keep the passwords for me. I'd much rather put my trust in fingerprint scanners or other biometrics.
How Does One Effectively Market an iPhone App?
Nice idea, but I'm getting so sick of seeing just-another-signup-form again and again and again...

Instead of offering the next useless service I would be better off performing myself, someone really should fix sign-ups (i.e. making them obsolete). That would really be progress for a change.

As for authoring, you could also use a decent SCM instead of git for versioning your texts. After all, the workflow model of git is hand-optimized for open-source software development which has nothing to do with book authoring. You would be better off with a centralized repository in typical cases. But git is all the rage now, no matter whether it's actually the right tool. Maybe someone ought to remind the kids that SCM is larger than git, regardless of what fashion dictates.
Peer Review as Censorship
The future of mobile may not look like apps
"they spent $8 million on god knows what"

Their opex was incredible. Look at salaries alone just what was mentioned in the article, somewhere around 4 dozen people? That's less than $200K/yr salary per person don't forget they had a website and office space and misc expenses and presumably the employees had benefits (per my W-2 form my families health insurance cost my employer $24K last year, and there's only 4 of us).

There is a simple math problem that explains the problem. Eight million per year in opex divided by six million visitors a month means somewhere around ten cents per page view cost. If you get more than a buck or so worth of ad revenue or "whatever" per page view you win. If you get five cents of ad revenue or "whatever" per page view you rapidly run out of money and close. The number of sites that get a buck of revenue per page view is pretty small. The other strategy is yellow journalism "click here for 10 things you never knew about hacker news" and hope for 60 million page views instead of 6.
Looks interesting, but I have a couple of questions:

- I'm assuming you aren't signing the certificates yourself, so how do you as a business handle this? Do you do the actual verification of users, or do you just provide the basics then hand that off to your supplier?

- DigiCert (who I think are your supplier as they signed your certificate) charge $295 for a EV certificate, what the extra $174 your charge give me that they don't?
drop me an email - contact details in my profile
there is a topic for this on reddit: http://www.reddit.com/r/ArduinoProjects
That is very cool. Does Skype not have a direct peer to peer connection anymore?
>A modern, publishing toolchain, simply taking you from ideas to finished, polished books.

This commas here don't work in my opinion. Bad start for a book site.

"A modern publishing toolchain. Simply taking you from ideas to finished, polished books."

"A modern publishing toolchain that simply takes you from ideas, to finished, polished books."

"A modern publishing toolchain simply taking you from ideas, to finished, polished books."

Any of those would be better.
They won't even need to bother. State-level actors usually have access to the phone company networks.
I said I would write it up. I love the title: "Yahoo's On-Demand (In)Security." http://blog.atomicinc.com/2015/03/16/yahoos-on-demand-insecu...

I should submit it directly to HN...
Erm ... I don't see the price anywhere on the linked page.

Clicking on "Get Started" scrolls up and expects me to start filling the form. Sleazy, very GoDaddy-ish, but OK, since it's on HN's frontpage, let's type in some junk and click the button -

{"err":"missing required field: preferredDonation"}

So not only doesn't the site show THE most important bit of information for the cert - the price - it apparently inflates it to offset the cost of the donation. Excellent. Apparently this is how one "promotes honesty in the SSL industry."

--

EDIT - AH, apparently the prices are shown only if you come from HN. Lovely.

Single domain EV certificates are €429,
multi domain certificates are €699.
Both last two years.

Vs. "$234 per year" of getting the cert directly from DigiCert - a price that can be knocked down by 10-15% by sending them a quick email. This works out to $421 or €399 and it includes direct support from them, which is pretty much what they are selling everyone as their primary competitive advantage.
A subresource is basically additional content that a page includes via a URL (e.g. script, iframe, images). The problem underlying this is that any page on the web can currently probe and then attack devices and servers on your internal network or local host. So, the proposal is to block that by preventing remote websites from navigating to or including sub-resources from anything on your internal network or local host (unless some explicit opt-in or exception is configured).
I'd guess PDE people could claim prior art on this?
At least Steam is available on all desktop OSes and once you buy a game for one platform, it is available for all of them.
I share your concern on the absence of ownership and the DRMs though.
Writing the first draft of your science paper – some dos and don’ts
Also, the example they chose for their front page is full of errors: "Setup the development environment" and "How boot works?" as headings.
What's to suggest the majority of peoples work is stored on github or bitbucket ?
Lots of negativity about this here, but let's take a step back and look at something:

When you lose your password to an account, how do you reset it? With your email (in the case of Yahoo, with your backup email). Which, if someone has your unlocked phone, is likely already compromised as part of the unlocked phone.

Sending an OTP via SMS doesn't really open up any new avenues of attack, if they already have your unlocked phone.

Now then, if you're displaying all text messages via lock screen, why have a lock screen at all? Sure, it protects the rest of your phone from intrusion, but it's leaking what should be considered private information to anyone who has it. You're probably also getting email summaries, chat summaries, and upcoming meetings as well.
Just some feedback on the site:

The images/iconography appear to be @1x resolution, making things appear blurry on my MacBook Pro with Retina Display. I'm guessing it would be the same on my iPhone or iPad.
Here's an idea: aggregate available APIs (Google, Zoopla, TFL) to help people make decisions which neighbourhood(s) might be right for them. Make users answer questions (e.g. What newspapers you read? Where do you work or regularly commute to? Do you have children? etc) and narrow the options based on the answers.
I remember seeing something about VR-enhanced roller coaster rides which took advantage of this, too -- the path of the virtual track and the real roller-coaster diverged considerably, and (iirc) there were places in which you were travelling "backwards" in the VR world.
Woah, John C. Dvorak is still alive and podcasting? I remember listening to him on Leo LaPorte's podcast back in like 2004 (before I got kinda sick of LaPorte) and thinking Dvorak was the entertaining cranky old man of tech back then.
We'd be blocking sub-resources and navigation from web to private. Of course, direct navigation via a bookmark or the omnibox would still work. And navigation or resource inclusion from private to the web would still work.

As I explained in another comment, we're also working on exception mechanisms (including per-page opt-in, possibly via CORS) to cover the valid use cases.
Back end software engineer – Xeneta, Oslo, Norway
Xeneta is looking for talented Software Engineers to expand our unique and rapidly-growing ocean freight data analytics service. Our service collects and aggregates large amounts of data and we rely on MongoDB to store that efficiently. We use Python for most of our projects, along with libraries like Flask, Celery and Pandas.

We need to develop new services rapidly and efficiently and are dedicated to using the best tools for the job, encouraging constant improvement. Our projects are deployed in multiple datacenters, relying on Docker to effortlessly deliver code in development, testing and production environments. We get to work with Git, Jenkins and Phabricator and various external services which we deem to be the right tool for the job - AWS, Github, Serverdensity, Slack.

We are looking for people passionate about developing internet services, enjoy working with large data sets and aren't afraid of taking care of the full stack of technologies involved.

To apply, email hiring [at] xeneta.com
Click: http://www.getmustapp.com/
Rent controlled apartments are effectively removed from the supply of housing in the market. Thus, anyone who isn't lucky enough to get a rent controlled apartment (which are most people) faces a market with decreased supply and thus higher prices. It's one of the economically proven ironies of rent control -- higher prices for everyone else.
Show HN: Hadouken – a cross-platform, extensible BitTorrent daemon
+1 to this whole list. Great advice.
(Mike here: posting from my old openid account because 'you're submitting too fast')

DigiCert are indeed our parter CA - they do Facebook, GitHub, Stripe and Yahoo's SSL certs. We looked at a number of CAs (and actually wrote code against their APIs when we were testing), and chose DigiCert based on a combination of EV verification time and business practices.

Our retail prices are the same as DigiCert's - I suspect you're looking at the 'per year' price on https://www.digicert.com/ev-ssl-certification.htm. With the HN discount, you get the ability to apply for a certificate in less than a minute combined with DigiCert's fast verification practices.

With CertSimple the big number is always the final price.

That includes unlimited server licenses, we don't try and upsell SGC, etc. We're actually really picky things like that, see: https://certsimple.com/about
Please subscribe me to your "buying today" newsletter !
From the perspective of a non technical person the name 'GitBook' has even worse implications.

'Git' is a common insult in British English (being short for 'whore's get', i.e. an illegitimate child born to a prostitute). This may possibly reflect some private humor on Linus Torvald's part, since Git is putatively the 'son of a Bit[ch]keeper'. The term is used to indicate someone foolish and obnoxious. A non programmer unfamiliar with version control would hear something like 'AssholeBook'.
Command line switches are a bitch on OS X.

Is an about:config switch not being considered? If so I'd imagine the thinking might be "too easy to social engineer round this".
Outside of tech, people are going to interpret 'git' not as version control software, but as a mild insult.
One thing to mention is that Duplicity supports S3 as an endpoint.

So does Arq (OSX backup software), as well as Glacier.

This makes large-size backups very cost-effective.

I mean, some of the newer ones (e.g. Attic, Bup) certainly do look good, but you need a full-fledged Linux server at the other end, as opposed to being able to just shove it into S3/Glacier - this to me is a drawback.
I found the most important idea regarding backups was to stop searching for the one perfect tool that does it all. The most productive step was to accept that for every [group of] machine[s] and every application / scenario there are different best solutions.

Unfortunately most backup software designers seem to think in an extremely one-dimensional way about how backups should work and I do not know about one tool that offers all the flexibility you need for real life backups.

There is really room for invention here.

IMHO BackupNinja shows the right direction: it is a meta-tool that helps you to manage several different backup strategies. This is the way to go, but it should be generalized and have an API and several GUI options (web, qt, rest).

Also some more brain could be put into the application, like a nice wizard will ask you to define how you would like to have your backup and select the right tools for you:

[ ] source
[ ] it is a database
[ ] which one: ________________
[ ] very big files (oh, I already know about this)
[ ] Mickysoft client
[ ] Outlook
[ ] other crapsoft that needs special handling
[ ] look up the plugin repo for the best way to handle this
[ ] Linux / *BSD
[ ] destination
[ ] encrypt backups
[ ] versioning
[ ] frequency
[ ] make backup files browsable by filesystem tools
[ ] also browsable for users (readonly)
[ ] make backups available via samba
[ ] make backups available via nfs
[ ] make backups available via web gui
[ ] where to browse: ________________
[ ] import csv with usernames
[ ] auto-generate login link for users (no future support hassle)
[ ] decide which is the best (set of) tool(s)
[ ] and just do it and let me do the real work

Certainly there is some more to it, but maybe you get the idea.

If you are bored and do not know which should be your next project, please release the world from all these backup pains (and wasted hours and weeks) and build it, thanks! Good Luck!
"If you make "don't get stuck" a motto, you can easily imagine people skipping over difficult problems and not thinking about a good solution."

It is also important to define, what "getting stuck" means. For the research the alpha performers where the ones who fulfilled the goal quickest. If you switch the point of view from the teachers to the learning student, instead of fulfilling the requested goal quickest, you might follow an interesting problem that you discovered on the way. Is that getting stuck? No! It is following your own path of learning which is a very effective method. It does not look best to the teacher, but it can be very good for the learning student.

Asking your own questions and answering them is an important part of a learning process. It also makes you independent, so you don't simply do most efficiently what someone told you to do.
Solving Open Source Discovery
A stupid question I imagine, but wouldn't em be more appropriate than px for the defined units ?

Couldn't the size be defined proportionally to the expected size ?
I can't speak for the developer, but my response to 'why not android' is generally:

- Development is easier on iOS (APIs, number of devices etc), and a higher level of quality can be achieved with less effort.
- It's hard to saturate a market of 700 million devices.

Basically until it seems like all iOS that have downloaded will, there seems no need to go Android. You're doubling the development effort, support costs etc for little gain.
The site is clear and beautiful, as needed for a new product.

But you ask us to review your startup and not your website right ? :)

So here's my thought on your product: Having "must have" content on one platform is a good idea. It then garantees new & quality content. But my question is about this very content: How will you filter the photos in order to keep a great content while filling up your user base? is there moderators or content-filtering algorithms? Because in case you haven't thought of that, the risk for your app is to besome an lesser instagram...

Great design work though !
(sorry for my poor english)
You won't get real answers here. Go and talk to people in the real estate market and listen to their pain points. Forget about finding actionable data on the web. The real world has it available right now. Just pick up the phone.
Show HN: Ascii2MathML – Easily turn AsciiMath into MathML
2) Well, given the associated uncertainty, that's not strictly true. The relationship between money spent on aging research and lifespan extension could converge on a marginally higher average lifespan rather than growing infinitely long with infinitely increasing expenditure. Until better than marginal gains are realized, I would say it's premature to hold massive lifespan lengthening out as a realistic possibility since we don't know what road blocks lie ahead. Sure, it's possible in the 'anything is possible' sense, but, IMO, not as a practical consideration.
Looks interesting, but to me "database migrations" means something far more boring and well catered for already (etl tools etc), hence I almoat didn't bother looking at the site. From a quick perusal I'd call what flyway is doing more like 'database version management'.
I loved the video.
As I explained elsewhere, the origin header in WS(S) allows a server to overtly protect itself from a client. Unlike CORS, it doesn't allow the browser to make security decisions regarding requests, and so would not address any of the attacks we're trying to prevent.
I had issues with Duplicity and Glacier files in my S3 buckets - Duplicity thought they were regular S3 files, tried to fetch, and failed. This was a while back, though, so I'd imagine it's fixed.