skysight-inc/HackerNews huggingface dataset:
First of all, as dangoor points out, the presentation linked to here lists a dozen companies, some including thousands of employees, operating by teal, hierarchy-of-people-free principles.

Secondly, teal does not mean "flat hierarchy". The meaning is far more subtle than that. There is some impact on hierarchy but calling it "flat hierarchy" is very misleading - arguably that's more a green approach than teal - this is not surprising if you're operating in an orange environment at the moment, as people typically only see one level higher at best. Teal recognises that people are different and different people are likely to have greater or lesser accountabilities, impact, etc. What it rejects is the idea that anyone owns anyone else. We are all free agents operating in the organisation by choice. No one has the authority to order another person around. That is not a "flat hierarchy", nor is it a false declaration of equality between all - it is something else altogether.

Thirdly, yes, the traditional management hierarchy serves many, many functions, including conflict resolution and making decisions. Those processes have to be handled in some way. According to the RO book, most teal companies end up developing robust conflict management practices that teach people to resolve their own conflicts. You might think that doesn't work - that's because you're operating in a traditional hierarchical environment where indeed it can't work. GrantTree has been going down the teal route for over 2 years now and it's only this year that we started developing a proper conflict management process. As for the decision making, I cover that in this article, if you're curious: http://danieltenner.com/2014/11/06/the-advice-process-defini...

So, while your points are totally fair and skepticism is always a good practice, based on my direct experience and based on the dozen or so examples of companies doing this, in the book - I believe that this is not utopian at all. In fact, I am fairly convinced that just as 100 years ago the red and amber models were dominant, and today the orange model is dominant, give it another few decades (I reckon less than 3) and the green and teal models will start to dominate.
My recommendation:

1. Go to YouTube (or Vimeo).

2. Search for "Alan Kay".

3. Watch any video that is longer than 20 minutes.

Repeat for "Leslie Lamport" and then for "Rich Hickey".
119,000K views * $7.00 cpm = $833,000

i found the average youtube CPM with a google search
Btw for any other grumpkins reading; I just discovered scoop and found out powershell seems to finally be usable in windows 8.1 pro even for part-time ms users.

Run>powershell

set-executionpolicy unrestricted -s cu
iex (new-object net.webclient).downloadstring('https://get.scoop.sh')
#yeah, I know - no signarure, code from curl...
#but this is windows, beggars can't be choosers
scoop bucket add extras #optional
scoop install ssh

If you want oneget, it's in the extras-bucket iirc:

scoop install oneget

But while scoop could use some love (eg vlc is a point release behind oneget/chocolaty) -- it's much nicer than the FindPackage mess IMNHO.

More at http://scoop.sh
I was more curious about the part regarding bootstrapping a hosting business. ;)
Unfortunately no, I haven't really gotten into that stuff. It doesn't take that much time though if you have a basic knowledge, it took me like a night to set it up.
How exactly do you save them money? If they connect from Iceland to Iceland, they haven't changed their point of origin right? So any use of overseas servers would still cost them?
Thanks, and very cool project!

> Quick question - are you concerned about trademarks (Amazon and such) being included as the phishing templates?

I'm honestly not 100% sure, but I think in the context of a phishing site using trademarks like that falls under fair use. But IANAL.

> Github has spf records setup so I would be interested to know how you manage to spoof the actual email address itself without getting flagged as spam.

I don't know much about spf records, honestly--for every site I had to try multiple "From" and "Reply-To" addresses to get the emails past gmail's spam filter. Some of them didn't even arrive in my spam folder, (apparently they just got killed on some intermediate hop). support@github.com definitely works, at least for me--you should try it yourself and see how it goes.

Hope this helps!
This is an interesting read! Like some of the others here I too am trying this. A friend and I founded a VPN provider[0] targeting short term subscriptions (i.e. VPN while at a coffee shop, etc) and later some other novel features as we get further down the road.

I first got an idea for this after publishing my OpenVPN docker image [1][2] which received more attention then I ever imagined. The BackRoad[0] service runs all the VPNs with the exact docker image in the public github repo[2] + CoreOS and all that jazz to make it scale.

I come from a hardware background where starting something is completely different then a web service. I think it's interesting with only minimal risk as you've pointed out.

Thanks for sharing!

[0] http://backroad.io

[1] https://registry.hub.docker.com/u/kylemanna/openvpn/

[2] https://github.com/kylemanna/docker-openvpn
How to Jailbreak iOS 8.3 with TaiG 2.0
VPNs are cool :D
Think about how it'd have to work. By including a "compromised" cert that any company can get use, and that every Windows customer trusts, the CA system would be entirely destroyed. Microsoft wouldn't do that - it makes zero sense. Cisco might have something that having a CA for makes easier, but including a MITM cert in every Windows install is not close to reality.
Sci-Hub tears down academia's “illegal” copyright paywalls
Actually, I love C, C++ and Java all the same. They are great tools for writing great code. But regarding the comments I've stumbled upon, I think you're right.
"..., since making videos appear more popular than they actually are can help lead to genuine virality."

"genuine virality" is a term I need to think about for a while.
Did someone acessed the website through mobile? I can't go past the title.

Edit: Using an iPad 2.
How are these sorting diagrams drawn? Any sort of UML?
Wow, again! I don't know what their system looks like, but it doesn't seem to me that it should require a lot of authority to bounce the trade back to the trader for a second confirmation -- or maybe send it to a second trader in case the first one has a hangover or something.

I had to stop and think about what actually happens when someone posts an order like that, well outside the current bid/ask. What price(s) does it get filled at? Apparently -- if it works the same in Japan as here -- each bid already in the book would execute at its existing price, despite the fact that the asking price on the new order is far below that. You might think that they would execute at the average of the two prices, but that doesn't seem to be the case, from what I've managed to dig up. An example like this suggests to me that an even better choice would be the geometric mean. But the difference would matter only when someone had screwed up very badly.
The other commenter is right, but I'll break it down a bit further. There are actually two related ways of using the word DOM.

Usage 1: the set of rules (API) for manipulating a document

HTML is a way of writing down a webpage so you can send it over the internet to the browser. The browser then reads in the HTML and uses it to build the "actual" webpage in memory. Different browsers may represent the webpage in different ways internally, but they try to provide a common set of rules and methods for interacting with and manipulating it. That common set of rules and methods is the Document Object Model. These rules include things like the way forms work or the kinds of properties input boxes are allowed to have (such as placeholder text, a current state, etc.).

Well, a "common set of rules and methods for interacting with something" is exactly what an API is. This is why the other commenter can correctly say that the DOM is "an API ... that allows you to read and modify a markup document."

Usage 2: the document itself

HOWEVER, while "DOM" technically refers to the API for manipulating a thing (the markup document), people most often use the word to refer to the document itself. This makes sense, since you never interact with the browser's internal representation of the document, you only interact with its public interface, and so gradually you come to think of the interface as the thing itself.

This double usage is why it's confusing to put the DOM on the same level as HTML, CSS, and JS. Technically it may be true that it's a separate and parallel technology, but since the document itself is built by reading in HTML and CSS, and then can be modified through JS, it's probably easier to think of it as one level above them (or below or whatever).

Edit: to reply to your questions more specifically:

- SAX/DOM: ignore this, it's arcane and not relevant

- schema for data exchange: no, that's exactly what HTML is — a format for sending data between computers. the DOM has more to do with how they represent that data to themselves after they receive it

- web tech vs. native UI: if you're trying to understand the DOM, don't worry about the UI of the browser, just worry about the web page itself
I'm sending the emails directly from my server with the unix "mail" utility.

Ending up in spam is actually what most concerns me about this idea, and in fact this concern was what led me to choose the "you don't pay unless someone clicks on a link" pricing--I was worried that some of the emails might eventually start ending up in spam after a few customers and wanted to make sure I wouldn't be charging people if that happened.

I'm planning to see what works once/if the phishing emails actually start ending up in spam.
That's what jumped out at me too :) I'd favor longer term release sometimes it's difficult to mobilize organizations I work for to upgrade :

Love django been using it for 5 years, go to web framework
I agree with him as well.
It's more like $1-$2, maybe even lower for an audience that is mostly children. Still a lot of money.
Usually, home users would by a fiber/dsl connection which includes an unlimited amount of domestic bandwidth and a set amount of "international bandwidth", typically from 10GB to 2000GB. When exceeding this quota, users would typically be billed somewhere around $15 for each 10GB increment they went over the quota.

The size (measured in GB) of the international bandwidth "addon" determined the price of the connection far more than the speed of it.

By hosting my servers in Iceland, the traffic through the VPN would not count towards the "international bandwidth" of my users. And since I was hosting in datacenters, I would be paying less for the bandwidth than at a typical home connection.
Because leap seconds aren't inserted on a regular, predictable schedule. They're inserted irregularly, based on astronomical observations, to account for irregularities in the Earth's rotation.
Awesome.. As much as I dislike Google as a business, I love their engineering and despite being totally biased coming on to GCP, they won me entirely in a day. We're so, so very much happier dealing with GCP. No RAID to get perf - just ask for more. No complexity. Simple, damn fast, and cheap.

I cannot imagine how Azure or AWS compete (esp Azure - even without making a cheap comment about their terrible new portal) when it comes to IaaS. GCP is just flat out better.
And then there was the i860 https://en.wikipedia.org/wiki/Intel_i860 (the original target for WinNT!), and later of course Itanium. Intel seems to have embraced the "x86 everywhere" vision much later than others (maybe 2004? http://www.anandtech.com/show/2493/4 ), only uttering the phrase in early 2008 http://www.computing.co.uk/ctg/news/1819476/intel-x86-future afaics. (Talk about awkward timing...)
What do you want? – Alan Watts
Well maybe they surmised that any way they can avoid law enforcement would be worth the effort. These guys are very smart and they know that clear links between US guns and Mexican cartels might mean a political obligation in Washington DC to send resources to fight them further.

Also, they arm a lot of people. They really do have small armies of soldiers ready to kill, if the videos of them in action prove anything.

More likely though someone just got this $25k milling machine really cheap and decided what the hell. They got busted and they were going to sell to the cartel. News Translation: The
Cartel is Making Guns!
Ah gross, that's pretty messed up. I guess I have s romantic view of Iceland where they wouldn't let that cheesy kinda pricing to exist. Or especially that they'd fight your company. Insane.
I almost think you're trolling. But just in case you're not....

I wouldn't even worry about "fundamentailists" or "fanatics" in interviews because they _would not be there_. They'd be on some private commune that generates its own power from a water wheel and everyone where's linen, and no bare legs or arms. Honestly. Religious or ethical people that show up to a company office, on-schedule, and can answer interview questions are, basically by-definition, not fundamentalists or fanatics.
I'm interested in rightly adjusting my content filters. How could I do this?
I don't think people understand how widespread YouTube viewing is for kids.

The Psy "Gangnam Style" video is the most popular video on the site because kids watch it over and over again. (If you ever wondered why it was so popular.. that's why) Same reason why that Disney collector is the most viewed YouTube user.

Kids love YouTube.
A simplier answer. It's the only cars 2 content on YouTube and it's particularly enjoyable for two year olds. Guessing that many parents show it to their kids.
ah sorry my bad
How cancer made me wish I was a woman
You forgot to include the fill rate factor.

Not all views include ads.
Graeme Hart: the undercover billionaire
Ask HN: What's the best way of generating/intepreting persistent data?
I have to generate some metadata about some files on disk for a side project I'm working on. Aside from using a database, what's a good way of generating persistent metadata that could be read/written fairly quickly?
Fundraising While Female (Dating Ring (YC W14))
Even if everything was one system, how do you handle side effects? An order I make on Seamless causes physical inventory to be consumed. That's just de nature of the system. No way to undo that. So there's still a reason for account takeover there, if someone else could consume on my dime by hacking my account temporarily.
Move to India, build the largest on-demand hyper-local marketplace of the world
Why:

Exploration is a specific invention of specific civilisations conducted at specific historical times. It is not ... a universal property of all human societies. Not all cultures have explored or even traveled widely. Some have been content to exist in xenophobic isolation - historian Stephen J. Pyne

What:

Facts:
We have grown 4X month on month in terms of transactions. We are disrupting the local market by solving real and tough problems everyday. Did I mention - we just launched 6 months back?
First movers advantage - we are 2 years ahead of everyone (Including biggies in e-commerce). The only on-demand hyper-local marketplace in India, which is present in 10 cities with widest serving categories list - grocery, bakery, fresh products, pet care, cosmetics, electronics and more coming soon.
Closest parallel - Uber, Tesla, SolarCity. If you admire them - you would love it here!
Indian startup ecosystem has received investments at 300% growth totalled at $ 3.4 billion 2015 ( 6 months ), where as US has received $ 9.7 billion. India has one of the toughest problem at its shelf to solve. The opportunity, sheer scale and problem statements are uniquely present only in India.
You’ll feel at home. India is known to be the best host :)
We raised the biggest series A and series B raised by any Indian startup from:
Sequoia capital (Google, Whatsapp)
Tiger Global (Facebook, Flipkart)
DST (Twitter, Airbnb, Xiaomi, Facebook)

How:

Act now - just write down a couple of lines in the email about what you are doing and send it to ankur [ at ] grofers.com. Alternatively just ping me on Skype ( grofers ) - would love to chat more about what we are building under the hood and how we can work together.

We are looking for the software engineers, product managers, designers and many more to join the mission. Not sure? ping me on Skype ( grofers ).

PS: If you live outside India, your relocation and setting you up in here is on us.

Let's build the future together - grofers.com/careers | Get app - bit.ly/grfrs
Because, see, the 200 day average line crosses the 50 day average line here, and just yesterday we already had two dead cat bounces, so it must mean a market head fake, so it can't possibly fall again today.

(Human beings are great at finding patterns that aren't really there)
So you're positing that Microsoft is going to intentionally destroy their TLS-CA verification system so any company can compromise any Windows device in the name of BYOD, without explicit action from the user?
I'd possibly agree with you, but, can you give references for the allegations about Thiel and Levchin?
So NASA can send a probe to Pluto, but can not show pictures and text without resorting to Java Script. I believe this conclusively proves that HTML is not rocket science.
A good point. I didn't cite it here because its implementation problems were severe and the reason it failed. Yet, I do give credit in more thorough discussions on INFOSEC history because the architecture was pretty awesome for Intel. Then, they watered that down with BiiN's i960MX. Then, even less radical (in security) Itanium. They lost hundreds of man years on the first, around a billion on second w/ Siemens, and at least $100 mil sunk into Itanium w/ HP.

Intel certainly tried to make up for their x86 monstrosity several times. They got smarter and smarter about how they did so in terms of market acceptance. A combination of engineering mistakes and foolish market choices (imho) made them pay. As you said, they learned to give customers the insecure garbage they wanted or risk extremely large losses. Links below for those interested in the specifics of their better work.

Intel i432 Capability System
http://homes.cs.washington.edu/~levy/capabook/Chapter9.pdf

Intel/Siemens BiiN System (w/ i960MX manual)
https://en.wikipedia.org/wiki/BiiN

Itanium Security Features
http://www.intel.com/content/dam/www/public/us/en/documents/...
There is pcc which looked like it had a chance for a while. There was at least a lot of excitement from the OpenBSD and NetBSD communities a while ago. I know it was imported but then I think it was removed. Development continues on but at a slower pace.
So you're running a Chrome window on top of V8/Node.js, and at the same time starting up a WSGI server just to serve your Python application in that browser window.

If that doesn't sound completely batshit insane to you, you have a problem. Or you're a Node.js developer.
Well said. I was using Gentoo around the GCC 3.3 -> 3.4 migration (that's when the ABI last broke seriously). That wasn't fun.
You're very confused. I don't work with the Archive Team, I was offering my experience regarding our project's move move from Sourceforge to Github and why GGGGGGGGP's (or something...) comment was way off base.
Wow, the most amazing space venture in a very long time, over 9 years in waiting, and you complain about JavaScript? I'm sorry, but I just don't understand. I wouldn't care if the images were delivered to my house as a deck of punched cards!
It works fine on the default "older" web browser on the Samsung S4.
Indeed. But there are also dual pricing schemes in datacenters. They don't want you to peer with RIX (Eeykjavík Internet Exchange) and charge those who do a higher price (hence forcing one hosting provider to change their routing.
What did you use to generate the grahps?
One might gently point out that the SubjectName in that cert is "C=US, O=Cisco Systems, CN=Cisco RXC-R2". Microsoft just seems to have abbreviated it to "RXC-R2".
I find these sorts of platitudes totally useless to someone with a practical and well-defined problem: can't find a job because he can't pass a background check. As a hypothetical (I have no idea if this is possible), maybe there's a way for an official diagnosis of his neurological condition to enable him to circumvent/solve the background check issue.
It's first time I encounter someone sharing this sentiment too.

I'm so tired of hearing 'they're born this way' argument. It just sounds like if it was a choice, it would be totally ok to persecute them.
My son was a YouTube viewer before he could talk. He is now 2 1/2, and every day he spends 20-30 minutes watching videos. Occasionally more (esp. when his parents are sick.) Sometimes he follows a video stream. Other times he asks us to put specific genres up for viewing.

He will unquestionably be able to type on the iPad long before he can actually write.

It is very much going to change the next generation.
I think this person confuses 'IDE' with 'editor', and compares apples to oranges in the process.
Not that it's an easy solution, or even the right one for you right now, but I'll just note something:

There's (generally) no background checks required for starting or running a business.

You have listed the constraints that currently apply to your life. Think about what sort of life you can create within those constraints, or how you can get around them.
Rats Dream About the Places They Want to Explore
The FAQ is wrong, likely entirely outdated by now.
We make almost no money on the hosting. Almost all of our income comes from on-premises installations at larger organizations. So that is why I can recommend monetizing open source with an open core business model.
> Does the pope shit in the woods?

One of my favourite phrases, though IMO its complement is better: "is the bear a catholic?"
My favorite quote: "I conclude that there are two ways of constructing a software design: One way is to make it so simple that there are _obviously_ no deficiencies and the other way is to make it so complicated that there are no _obvious_ deficiencies."
https://cuttlephish.com/img/silly-trust-seals-you-cant-actua...

Well, I trust them.
But this could be auto blocked by blocking style.css.

My assumption is that i am in control of both (a) and (b) so i can mess around with the output of (b) to have all of (a) within itself.

The problem is how to best inject (a) inside (b), without using any 3rd party resources, which could be blocked automatically
You should send the emails, and charge me to view the report.
Consider changing pricing to $/click (pay per victim), so that companies are paying for the value you provide (detection security holes), and the CTO can "bet" the CEO that employees need better training/protection.

Much more upside for you.
Would a company want to give you a list of corporate email addresses?
Go jogging and lift weights, you'll figure out the rest.
> From the beginning, the relevant question has been, when will I be unable to get an IP? And every time the answer is "real soon now".

It's going to be a long time before you can't get an IPv4 address at all. But what is going to happen over time is the cost of an IPv4 address is going to go up, since demand will increase, but supply won't.
Hmm, have you tried an online contracting job (https://www.elance.com/)? Maybe get a passport and move to SE Asia, or Latin America, for a fresh environment?
What is this, the brogrammer's solution to every problem in life?
"As far as I can tell from the article, Young's stance is that the contract lab doing the reproduction doesn't seem competent enough to correctly reproduce the experiment."

I'm suddenly having flashbacks, something about cold fusion and how groups with the right competence were indeed able to reproduce the results, for some value of "reproduce".
Just a quick and minor note, the title of this link has a spelling mistake, "Survery".