skysight-inc/HackerNews huggingface dataset:
CandyJapan has been a great source of inspiration for launching a business with a similar business model: Tomotcha (https://tomotcha.com), a Japanese green tea subscription service.

Bemmu gave me a lot of advice at the last HN Kansai meetup to find more customers... thank you again Bemmu :)

At first I hesitated to do it the other way around: to import French wine in Japan and sell it as a subscription, but from the outside it seems harder. The rules for importing goods (especially alcohol) are quite a bit harder than the rules for exporting...
Also, I'll tell you the trick why Birchbox worked and became hundreds of millions of dollars and why these other box startups aren't in the same game.

Birchbox found the best opportunity to capitalize on. They charge subscribers to receive a box of makeup samples. In other words they've convinced people to pay money for ads.

The COGS are basically free and on top of that they leverage and poll their subscriber base for data that gets sold right back to the manufacturers.

Everyone else is just trying to replicate Sears Roebuck but unable to convincingly explain their value proposition.
"design flaw"... hilarious. like it wasn't mandated by jack-booted agency thugs.
I remember well using and playing with Pipes when it came out early 2007. The service worked. I mostly played around with my twitter and flicker feeds. Here's some screenshots of what it looked like.

cloning twit user: https://www.flickr.com/photos/bootload/385441178/

multiple feeds into one: https://www.flickr.com/photos/bootload/385433038/

extracting flickr data: https://www.flickr.com/photos/bootload/385101700/ and flickr backend https://www.flickr.com/photos/bootload/2789198106/

extracting twitter data: https://www.flickr.com/photos/bootload/385194782/

clogged pipes: https://www.flickr.com/photos/bootload/384133421/ and https://www.flickr.com/photos/bootload/384128224/

Read the comments on this link to get an idea of how I used Pipes and the logic behind it: https://www.flickr.com/photos/bootload/385101700
I might. Now that I wrote this post I feel a bit better about being able to do that and still continue this "business experiment" blogging.
We will definitely need to change to a different type of economy, new problems will be:

How do we set a value to things and services, since some resources will still be limited? For example we won't all be able to travel as much as we want.

Some jobs will still exists and will take a long time before they can be replaced by robots. Some will be desirable, we can share those more so people don't have to work as much, but some won't. How are we going to chose who does those jobs?
I was also using it exactly like this until recently! I sent my roommate the pipe and we'd each watch/browse it for new places. It saved us a ton of effort.
Is it possible to do this for Canadian students? I don't see Canada listed on the admission assessment page.
I would be interested to see how it performs against the YCSB+T benchmark. Many claim SSI but very few achieve it.
Groovy cloned and added closures (since made
obsolete by Java 8's lambdas)

Java's lambdas aren't real closures, though. Are Groovy's?

Edit: "Real" is, I suppose, arguable. By that I meant: Java's lambdas don't support mutation of captured variables.
this is a pointless, stupid idea. apple's whole deal is that everyone gets equal service. if you're Facebook, or some kid writing her first app, apple will treat you the same.

if they did do this, then a bunch of developers would have 48 hour updates, and regular developers would have to wait ages and ages. the author already established that apple aren't going to throw money at the problem (to hire more reviewers), so the extra money doesn't serve any purpose other than to allow developers who have 1k to throw away to jump in line of other developers.

there have been a lot of these articles lately, where entitled app developers feel like they deserve special treatment.
No, actual BBS with software running, processing uploaded files, and software running on machines calling in at night. It was proof of concept and not malicious, but rather fun exercise :) It was too long time ago, the only thing I remember now is that BBS software was ProBoard, and bot was spread via demo .exe file using fidonet echo :)
It's the same in Germany. Getting a PhD is basically a job.
I'm afraid this is heading the direction of 'let's define a backdoor'. What remains true is that China targeted a system built for the FBI to get unencrypted access to GMail systems and customer data that did not require 'front door' access. Many people here would call a service run for the FBI without oversight or a lengthy and transparent approval process with the requirement for a warrant a backdoor. We don't have to call it that if you don't like - I think the terminology is not so important for the point.

I will leave the semantic discussion to whether such a system constituted a 'front door' or a 'back door' to folks who enjoy such deliberations.

Ultimately I hope that readers see how hacking of 'side systems' built for intelligence agencies to make full data requests have been used to gain access to the larger systems they connect - in the spirit of the original thread.
OpenStack is as startup friendly as anything
"Privilege Escalation" implies you start from an unprivileged state does it not? That sentence might just be poorly structured.
What happens when this method meets the general public, huge numbers of which consistently lose things, or fail to understand basic security measures (sometimes wilfully)?

Any system based on "so, you have this physical|virtual thing, right..." is going to run into troubles when it meets the general public.
And you know this from what, exactly?

I've seen far more businesses fail due to traction problems than have succeeded and then been driven out due to margins.

Sure, it's possible--but if you've got 4 dump trucks of money pulling up instead of 5 this week, that's a better class of problem.
What rationale was there beyond weaponization for inventing such a thing? This is sick.
Remember FTP leeches? Cool.
Honestly, you shouldn't be posting here on HN, you should be seeking professional help. You have problems.
Love your analogy, sure made me laugh (visualising a geeky dev like myself tending a weathered gnarly monument in a secluded English glade... in real life, that is, not in an RPG).

However, why such pessimism? I hardly think that standard formats and open APIs are dead. Sure, there are some nasty blights upon cyberspace in this regard (ahem, Facebook, Apple), but other players are still keeping the dream alive to some extent (e.g. Google, Yahoo).
All a small framework called 'Ruby on Rails', released by Basecamp.
"namely dads, brothers and other close male family members".

You're right about it being close family members, but the rest of your profile is wrong.

The majority of child abusers are female: http://www.safehorizon.org/page/child-abuse-facts-56.html
Edward Snowden: The World Says No to Surveillance
And here's how to do it yourself. Ctrl+C the pem file (comment + base64 encoding of the certificate) and in your terminal in osx:

$ pbpaste | openssl x509 -noout -text
This is an adorably outdated point of view.

Two ways businesses print money: either be unique and capitalize on tiny amounts of large margins or be popular to capitalize on lots of tiny margins.

If it's popular and is profitable people will copy it. It's not that hard to reverse engineer products, most people just don't bother or try. Give me any CPG brand on the supermarket shelf right now and I can show you the supply chain and equipment needed to manufacture and deliver it.

Everything new gets commoditized eventually, especially considering it's all made in China anyways, and trickles through the global markets at various pacing.

That varying speed is the only competitive advantage one has. Your only job is to stay ahead of the game then when the game is boring sell that information to others to replicate. AKA franchising.

Then you keep spinning and spinning until 30 years later you can stand to wait around while others jump into a new market, burn out, and just take whatever you want out of that situation to come up with a new product and utilize your large economies of scale to immediately sell it in your extended network of retail stores that's making more per square foot than Tiffany's.

But do agree with the second part. Silicon Valley is just a giant R&D college campus built off other people's money experimenting on each other's child like sensibilities.
Rozu is a webhook API server, using Redis and SSE for pub/sub of inbound events
At the same time, it's good to have an experienced teacher with you when you first hit the autobahn. Finding out how fast your car can actually be is quite scary at the beginning, and you need to keep an eye on quite a few things.
You can run Java selectively then, disable when not knowingly using it. Would provide a higher magnitude of security than just having it running while a rogue 0 day exploit hits advertisement servers or something similar.
Steam Hardware pre-order
Automated translation:

"Apple's online store refuses to sell Brazilian album with nipples on the cover"

https://translate.google.com/translate?hl=en&sl=pt&tl=en&u=h...

Sounds like they objected to the cover art more than the music.
Apparently it's in iOS 8: https://support.apple.com/en-gb/HT204132

There doesn't seem to be an authoritative list for Android, but I did find this: https://android.googlesource.com/platform/libcore2/+/master/... -- not sure whether it means it's in the latest versions of Android, or whether that means it's going to be all versions of Android (e.g. with manufacturer/carrier modifications, etc) or what...
Looking for business partner
Hi all,
I am currently developing a website that helps users find events in their area. I believe the idea that I am working on is different from existing sites in this domain in a couple of different ways. I will tell you more details when we have a chance to have a discussion. I am looking for someone with technical background. I am currently doing a lot of the coding myself but probably not my strongest skill. I am learning as I go. But more importantly I am looking for someone who is passionate about making a positive impact and say day and night that I am ready to do whatever it takes to be successful and here by the word ‘successful’ I literally mean making a product successful/solving a real problem (just want to be clear since success could mean, many different things to many different people). I believe if a team has this level of passion, it is a recipe for success. They will take even a bad idea and morph it into brilliant idea. If you got that mindset, please contact me, I would love to discuss more with you. I am targeting to launch the site by the end of next month. I am based off of Seattle so if you are here too, that is better but if not, it is not an issue. Please contact me at shehryar.khan82@gmail.com.
Shehryar
He asked about people dying in a terrorist attack, not in clandestine government activities.
That's not what that means. In the context of bytecode, a stack-based architecture is one where instructions directly manipulate stack entries. For example, the Java bytecode instruction iadd takes the top two entries from the stack, adds them together, and pushes the result onto the stack. This is in contrast to a register architecture, where you might have an instruction of the form `add x, y, z`, which takes the values in two registers, adds them, and stores the result in another register.

To say that Linux or C is stack-based is nonsensical, as it applies to an instruction set architecture. Virtually all hardware ISAs you're likely to encounter are register-based these days.
Crossrail: The monster tunnelling under London streets
My post was about software encryption. Maybe I should've clarified that better. The beefier machines Microsoft pushed for Vista might negate the performance hit that older hardware might experience with the Elephant option. I'm sure others have more expertise (eg performance comparisons of old machines) in that area so I asked them.

Regarding your tangent, hardware encryption will almost always beat software encryption in same process node technology. The next best thing are processors highly-optimized for cryptography (eg GD's AIM), vector processing with crypto-focused operators (SIMD/MIMD), or massively parallel processing with tiny cores (eg FPPA, GPU's) using the right ciphers/cryptosystems. We saw less-mainstream work focusing on these three in late 90's and early 2000's because they would accelerate arbitrary crypto while making upgrades easy. Flexibility & cost-reduction trumped raw performance in many use-cases. Certain defense contractors still sell products like those with more R&D work ongoing. Also support my polymorphic cipher designs unlike hard blocks.
Distributed job scheduler is, in a larger sense, a workflow engine. It will need to understand what is the next job to trigger, handle different situation where job fails\timeouts and do the retry if specified.
so just dump the data in and process via sql. What about pre-processing ie: different data sources (pdf, cvs), incomplete or overlapping data? I imagine some code had to be written to do this?
I find it interesting that the FBI is saying we don't need encryption while 4 million government workers' information has been hacked.
Yes. Corporate titles. JSE 0-1 year experience, SE 2-4, SSE 5-7 typically. There would be multiple SSEs on a team, a team 10-20 in size. So yes, SSE in 5 years is reasonable as a corporate title in multinational type companies.

Above that would be a Team Lead (late 20s/early 30s). A manager would manage 2-4 team leads. A Director / AVP 2-4 Managers. Technical Leads (senior non managers - perhaps what you're thinking) would be dotted around as needed.

But a lot depends on the product and business line. A business line with a simpler product would typically have everyone at 2-3 levels up the hierarchy above a business line with a simpler product.
"As you read this online, the United States government makes a note."
USELESS CRAP. Why post this, when it says NOTHING at this point?

Nothing useful here. Waste of time. Buried.
> either be unique and stand to capitalize on large margins or be popular capitalize on lots of tiny margins.

I love this. Very nicely said.
genius!! ready for t.co and bit.ly

perfectly for small pieces of immutable data!
I think you may have missed the gist of this subthread. The CBC diffuser in Bitlocker was removed in part because it doesn't benefit from the hardware crypto now shipped with Intel machines.
To the extent that BCC was reliant on SEO and paid conversions... let's say you'd told someone the idea 6 months before you had availability to actually execute. Do you think the competitor could've established a beachhead?

For example, they'd have 6 months' lead on SEO, and on the paid acquisition channels they'd have either (a) CPC and LTV data that you'd still be guessing on; and (b) the ability to keep your bids arbitrarily high while you're still spinning up.

In other words: I think your sentiment is valid if you're both executing right now... but there's certainly some first-mover advantage.
I understood the reference full well, I just didn't think that this is the appropriate place to post it.
Oh ok. Thanks for the clarification. It would certainly matter for the ARM editions.
Most (?) robberies are not sophisticated attacks but are simply crimes of opportunity.
Intel Security scares ransomware script kiddie out of business
Any idea when GHC 7.10's static pointers will be supported?
There are a few federal cases that say otherwise. In US v. Kirschner[1], it was ruled that forcing the defendant to reveal his password through a grand jury subpoena was a violation of his 5th Amendment rights. The prosecution used a loophole for In re Boucher[2]: though the defendant still had a 5th Amendment right to not reveal his password, he was required to decrypt his hard drive in order to produce files under subpoena that he had already admitted were in his possession. Because he had already incriminated himself by revealing to a border patrol agent that his laptop contained child pornography, he no longer had a 5th Amendment right against self-incrimination for the charges of possessing child pornography.

As I mentioned in a post above[3], in the case against Ramona Fricosu she didn't have a 5th Amendment right to not produce her password partly because she was granted immunity for any evidence that would have been collected from it (but her husband would not be). If you have evidence of a crime, you are required to provide to the courts when requested. You have the right to not provide evidence or testimony which incriminates yourself - if you cannot be incriminated for it, you no longer have the right to withhold it.

[1] http://cyb3rcrim3.blogspot.com/2010/04/passwords-and-5th-ame...

[2] http://cyb3rcrim3.blogspot.com/2009/03/5th-amendment-bummer....

[3] https://news.ycombinator.com/item?id=9662945
Re-reading the comment, I see now. I think I just read it too fast before. Good catch to both of you. My bad.
Meet RCEP, a Trade Agreement in Asia That's Even Worse Than TPP or ACTA
When you set up the intermediate CAs, I installed the root public key, but the intermediate CAs wanted to know "where" the CA running with the root private key was, I didn't have an online root (I generated then took it down), and the intermediate CA wasn't having any of that.
"Let's give them something to talk about.'
- Bonnie Raitt
JavaScript beats jaVA in every reGARD.. Java is the CoBOL of the 2000s...
Furthermore, other SV businesses fail because they don't charge money.
What is more privileged than ring 0? Microcode?
Why in the world did I go to college in the US??
I hate that the US education system is so capitalistic and not out to provide for the citizens of this country!
Wish I would've included colleges outside the US in my college making decision..
Here is another one for you https://www.otakyou.com/en/otakyou-box (disclaimer: used to work for them)

From the moment the business had this idea I forwarded them your blog and website, don't think they really appreciated the amount of knowledge present there.

As an immigrant in Japan you're an inspiration for launching my own business (one day).
VT-x allows guest operating systems to run in Ring 0. If this exploit works then a guest OS can exploit the hypervisor.
Apologies for the late reply.

I was a Linux support guy at 18, moved into sysadmin roles for a couple years, then quit my job to go to college. I was supported by my parents so I did not work my way through college the way you likely envision.

I did, however, work part-time as a sysadmin all 4 years (20 hours a week), but it only funded some living expenses, not my education.

Also not what you're looking for, but, while I was still young at 21, I thought I'd have a huge leg up on all of them 18 year old youngins. Turns out we all liked pretty much the same music and the cool kids were still cooler than me, and the guys good with the ladies were still better at it than me!

I majored in information systems and am still doing the same work today, 10 years later, but I love it and wouldn't change a thing. I wasn't ready for college at 18, and I got a lot more out of it and was more sure of myself at 21 when I enrolled.

I rarely think of college as improving my career, but of course my degree from a relatively prestigious 2nd-tier private school doesn't hurt my resume.

I pursued a professional services track upon graduation and it took me about 1 week to say "fuck this", and 2 months to quit and go back to sysadmin/ops work. If I had no previous work background I wouldn't have known that my new role wasn't right for me -- at least, not so quickly.
A hypervisor runs below ring 0 and system management mode runs below that.
Let's say FBI has those backdoors they want, how can they make sure that the terrorists won't take advantage of those backdoors? When they can just allow China to come in and steal U.S government worker's data like
http://www.nytimes.com/2015/06/05/us/breach-in-a-federal-com...

I am more worried about them handling the backdoors.
It may be a loaded question but his point stands, fear is not based on rationality or we would be spending tens of billions of dollars a year trying to prevent car accidents that is currently being spent "fighting terrorism".
HN tends to frown on snark or "in-jokes" that don't add to the conversation
Fibonacci number system
IFTTT works well for feeds, also had good success with Huginn in the past for feeds.
Ask HN: With top talent leaving TechCrunch and Verizon buying AOL, is TC dying?
Just a follow up, it's fine until I click on the examples.
What runs the world:
#1) Excel Macros
#2) SQL
#3) Cobol
#4) Abap/Javascript/XML

JavaEE is for oursourced devs in india and people who took on programming to get a good salary.
If your startup is based on execution and/or customer relationship sure this is true. However some startups are IP based in which case this is not true, now admittedly there is a low % of IP based startups on HN.

Some startups can execute better than you and can be better funded. Remember Hojoki anyone, nope - Slack moved fast got the momentum, scaled and wham! Hojoki used to be better than Slack btw. However if you operate in the public arena most people will know or guess your plan as soon as you spin up your MVP anyway :)

Right now down to the elephant in the room. Apple regularly release products/features that look remarkably like 3rd party apps, but not enough to be sued. So yep, idea stolen, implemented and market cornered by a virtual monopoly.

The truth is a complicated thing and the word Nobody is just factually inaccurate.

I'd go with:

'You're more like to fail executing than have your idea stolen.'

:)
> Cockroach is a distributed key:value datastore (SQL and structured data layers of cockroach have yet to be defined) - emphasis mine

I guess this is interesting, but distributed hard consistency pure K-V stores have been done before, Zookeeper, etcd, etc. It seems like the vast majority of the hard work is left to do. I don't want to get into naming arguments, but I wouldn't really call this a 'database' yet. It doesn't sound like you can do anything but a key lookup or range query currently, which is incredibly limiting for most real world applications.

I somewhat question the approach. e.g. why not figure out the hard part first? i.e. build the `SQL and data layers` on top of zookeeper or etcd then replace the backend to scale better? I would think this would get a lot more early adopters. As is, it's a very niche usage case that the alpha fills.
Given your rep, I'll assume you did thorough research and drop NSAKEY for now. I'll dig up that old work later for verification. If it checks out, I'll pass the correction along to others bringing it up along with modifying Wikipedia article to keep it from confusing others.
China hacks U.S. government
Are there any restrictions selling food products from overseas, specifically in the US (FDA approvals, for example)?

In addition, is it also possible to run into export issues or licensing problems with the foreign candy/food makers?

I ask this because I've often thought about doing this for products from "back home", but ultmiately am stopped by stories about redistribution problems.
Why don't you think it should be a factor?

I think it's pretty much the only factor. Domain name. Not too weird. Less than 10 characters. Done.
This is the most hand-wavy, unrigorous talk on a distributed database I've ever seen. You run a test 5 times in optimistic conditions and that gives you confidence that "you can trust it" to replicate your writes?

There are a multitude of failure cases in which it cannot replicate those writes. Ultimately your database has to be a decision based on the availability and consistency needs due to your use case, period. "Trust" should never come into the discussion at all, you should be well aware of what your tradeoffs mean in the worst case.