skysight-inc/HackerNews huggingface dataset:
> Some of their cities are today near uninhabitable, some are just unbearably smoggy.

I remember hearing about an 8-year old girl suffering from lung cancer. This is very sad

http://www.theguardian.com/environment/chinas-choice/2013/no...

Recently read a story in Rolling Stone on pollution in Vernal Utah from fracking.

http://www.rollingstone.com/culture/features/fracking-whats-...

Many high risk wells in the US are not being inspected. And the fracking industry doesn't want anyone to.

http://thinkprogress.org/climate/2014/06/23/3451919/high-ris...
"But this time I didn't want to use a Linux installation which wants me to reboot every 5 days because of some critical patch. I'm looking at you, Ubuntu."

Critical patch... I think you mean kernel update and you don't have to perform them. A critical kernel patch that requires you to restart every 5 days would be ridiculous.
My understanding is that the median fund underperforms the S&P, and that investment managers at pension funds and endowments put money into VC funds because their strategies require them to put a slice of money into that asset class.

And, again: that's the outcome for investors that have preferred access to dealflow.
They lost me at the very first sentence.
I'm not sure I'd go that far. I'm not into Rand yet this is quite nice to see. I think it's been a bit too long that we've had a lot of politicians making laws about things they don't understand and while this does not mean Rand Paul "gets" tech it certainly is a step in the right direction.
Looking for: a domain expert with a great idea they want help on executing

Me: a full stack developer with some startup & business experience

Why: I have savings and a drive to launch a startup, but no good ideas

Where: NYC currently

Contact: me@morgante.net
https://en.wikipedia.org/wiki/Great_Smog
100% agree.

It's nowhere near enough time in most cases. If you're justifying this volunteer work based on billing yourself, what are you going to say to the person with which you've made a relationship? "Sorry, your hundred hours are up, I gotta get back to my routine now."
I didn't even realized it was Conal Elliott. You're all invited (one at a time) to visit his blog and enjoy the ride. http://conal.net/blog/

Especially if you're into Functional Reactive Programming, rendering, etc, ...

His [re]definition of 3d rendering was gold:
http://conal.net/blog/posts/3d-rendering-as-functional-react...
You are still missing my point, which is frustrating, because I tried to make it clearer last comment. I am not saying Google will try to screw you. I am not even saying the author of the specific Javascript that provides an easy NoScript evasion will be trying to screw you. I am saying that it is not uncommon to find DOM corruption flaws in clientside JS libraries, and if those libraries are hosted on whitelisted CDNs, those flaws are all NoScript evasions.

Two things that may not be intuitively clear to every reader:

1. No way do all of those sites actually do full security audits for every .js file on their domain. (Google comes close.)

2. The specific kind of security flaw we're talking about is not necessarily "interesting" outside the context of NoScript. There are plenty of clientside DOM corruption bugs that don't even get documented, let alone fixed, because they can't easily be used to compromise a user session. But they will work fine for getting the right chunk of malicious JS delivered to end-users.

I'm not anti-NoScript. But don't kid yourself about its utility against browser JS vulns. Before you get your dad to install NoScript, make sure he's patched. Try to get him to switch to Chrome while you're at it.
I'm working on developing open source pharmaceuticals. I'm located in Oakland, CA. The stage is "on-paper only". Looking mostly for someone who is on the business end of things (referrals welcome). I've got the tech down. I am probably okay at but could use help getting media attention, and I am probably not good at: wrangling legal issues, and (most importantly) developing business relationships with commercial partners.

The plan is to enter an incubator to pilot a proof of concept and then seek seed investment. I also have a strategic plan (hires, etc) on taking the seed to a series A with MVP potential.

Requirements: Passion for the idea of expanding open source. You're also willing for the company to make 1 billion, instead of 10, but leave the world a better place. An ability to understand and communicate either biology, code, or both.

Bonus points for experience in law/IP materials.

Contact info in profile.
I really like http://gitimmersion.com/
To view this site, you need to come from google.com:

1. Go to: https://www.google.com/

2. Search "Hawaii Wrestles With Vagaries of Solar Power"

3. Follow the first link
I've used the python package supervisord with good success. Out of the box it manages stdout & stderr, rotates log files, restarts crashed processes, and has plugins for things like REST APIs to restart the process (for example, during an automated deploy). Another plugin can monitor memory usage & take some action when thresholds are reached. I find it very easy to use. You can commit your configuration file for supervisor into your app's repo, and symlink it in to supervisor's conf.d directory. Other plugins add stuff like web based dash boards. Its great for everything from managing a single process on a single machine, or a large cluster of worker processes on multiple servers.
> You're supposed to do the fault tree analysis before you build the rocket Elon.

How can you do a fault tree analysis before things go wrong?

Maybe fault tree analysis means something different to you.

According to Wikipedia, it is "a top down, deductive failure analysis in which an undesired state of a system is analyzed using Boolean logic to combine a series of lower-level events."

There needs to be an undesirable (and presumably unforeseen) state to be analysed before you do the fault tree analysis.
Long-term log analysis with AWS Redshift
I've developed https://www.ux-app.com, I'm looking for someone to partner up with who is interested in business development/marketing.

If you're a UX or Interaction Designer with an interest in business dev and marketing then I'd be keen to hear from you too.

my email is eli@ux-app.com
the subject of race has to somehow be implied or involved for the comment/person to be racist. No one is claiming racists will just tell you its a race issue.
I feel for those caught up in it. But boy, oh boy, did it look like a scene from Hell!
Yeah, that's concerning, and I thought about it before posting. Ultimately I figure I'd let the community vote and decide for themselves.

Full disclosure: The reason I saw this in the first place is because I'm a Rand Paul fan. And I like that he's hosting hackathons for the same reasons that I'm on this website-- I think tech is cool and I like to see how it affects every part of society. I think that other people on this website share that exact sentiment and would find this event interesting regardless of their political feelings. Is it advertising simply because it reflects positively on Paul or involves him?

This is probably the first politician hosted hackathon, and you can be certain that this won't be the last. So it's cool to see IMO.
How about spending financial wealth on an educational program that redefines wealth? I've started studying what Arthur Brock is doing and am trying to implement it into my alternative economics startup as much as possible. You cannot break down the Co2 that is processed by a tree into dollars...It's like breaking down the value of a human being through how much plasma can be extracted and selling it at market rate.

http://www.artbrock.com/videos/arthur-brock-transitioning-ne...
> What about marriage makes it specifically require a man and a woman?

Is that a serious question? What do you think marriage is, State recognition that two people want to have sex exclusively? Why does it even make sense to have State recognition of a sexual relationship? It really doesn't.

Now, I don't think it makes particular sense to have the State recognise sexual relationships which may produce children, because there's no real need for it too: modern paternity testing can easily solve the actual problem civil marriage addresses.

As for the rest, why should those civil benefits be limited to people in a sexual relationship? Why should I be able to put my brother on my insurance? Why shouldn't a fraternity be able to form a civil union if they wish?

What possible benefits does civil marriage confer that should be restricted to two people who have sex, but not restricted to two people who might produce children?
ETS: http://www.erlang.org/doc/man/ets.html
Your Mom Tweets and Blogs: Do Better Marketing
I think the spirit of this is misguided and goes against the spirit of the compensation. The stock based compensation is designed to align everyone's incentives as well as filter for individuals who believe in the prospects of the company.

Hedging out your stock based compensation goes directly against this, and misaligns you with the rest of your company. I think if you don't believe in the companies prospects it is best to take another job or ask for more cash and less equity.
I'm no Risk expert, but going from memory, you hypothesize potential failures based on experience and knowledge of the module. Then you use the FTA to understand what faults may result in the failures under examination.

FTA can be used either pre- or post- event.
That looks quite a bit like Postscript.
"You don't understand that "common good" is impossible to define"

Maybe I do understand that. I'm not "sea-lioning" you at all. I'm just responding to a derisive and dismissive remark you made to a (IMOP) valid point. I don't necessarily believe in the validity of "discoveries" of utilitarian ethics. But I do believe "good" has, as you say, no general meaning. Which is why it is an interesting question.
Nonsense. People put up open systems because they want others to enter them. That's why public wifi is public. That's why public http servers are public. That's why public restrooms are public. Et cetera, ad nauseam.
I'll provide a quick TL;DR as the paper is somewhat lengthy but I think the message is worth discussing:

Much of what privacy advocates focus on in terms of privacy violations on the internet neglect to take into account privacy gains from those same technologies. A key factor to this is focusing on what information is being shared but neglecting to account who it is being shared with and the privacy benefits associated with interacting with that service instead of traditional alternatives. For example, Google can see every search a person conducts regarding their sexual preferences. However, a closeted homosexual might turn to Google to find social and support groups because they're afraid of judgement from their family and peers. Groups like the EFF would say that buying a book through a Kindle is awful for the privacy of the reader because Amazon tracks the fact that you specifically bought the book and can see when you're reading it and even what page you're on - but most readers don't care that Amazon knows they're reading 50 Shades of Grey; they'd rather that everyone else on the subway just sees them reading their Kindle instead of an erotic novel paperback.

In general, people are more afraid of having their sensitive personal details disclosed to the people they interact with in person - their families, friends, coworkers or even the checkout lady at the pharmacy. The loss of privacy to a remote party like Google is worth the net gain in privacy to avoid disclosing embarrassing information to people they are more concerned with. This is also dependent on the type information being disclosed - the set of information that you'd want to keep from your friends is not the same set that you'd want to keep from your spouse, which is not the same as what you'd keep from your coworkers, which is not the same as what you'd hide from the police.

For those that would prefer an audio version, Ben Wittes gives a good discussion of it on the Lawfare Podcast at http://traffic.libsyn.com/lawfare/Episode_129.mp3
Casualties of Terrorism (1970–2013)
djb's clockspeed is amazingly simple, straightforward, and reliable: http://cr.yp.to/clockspeed.html . I prefer it to the more complicated ntp daemons because I can make it do exactly what I want in weird situations.
Both. And Red Hat also does both. You don't get access to download their software if you don't pay. If selling custom binaries for Octave works (under the terms of the GPL, of course), we should try that too.
As legal as connecting to an http server, using public wifi, or a public restroom.
If there's something interesting worth discussing, and some people can read the article and start the conversation, I don't see why we should skip it because it's behind a paywall.

Here's the gist of it:

"With 21% of its power now coming from renewable sources like wind turbines and solar panels, Hawaii has become a laboratory for those intent on reinventing the grid. A new law mandates that renewables supply all of the state’s electricity by 2045.

But Hawaii’s grid is already running into problems with its heavy helping of rooftop solar and other carbon-free renewables. Among them: sudden swings in the output of solar and wind, which force the state’s main utility to scramble to try to keep the overall supply of power steady."
Yeah, it's a trivial operation, but if you forget and start populating the whitelist it quickly becomes hard to spot the entries that don't belong.
NetBeans experience revisited
Primrose Editor is a syntax-highlighting text editor component for virtual reality applications built in web browsers. Very soon, it will be a framework for creating applications and games in WebVR:

https://www.primroseeditor.com/

I have also developed haptic devices for use with VR applications.

We will pitch consulting services in VR to universities, hospitals, retail spaces, reception halls, etc., to continue to build out the framework. The framework will be the core technology to games and applications we create.

I'm looking for help with biz dev, marketing, sales, systems ops, and software development.

Contact me through my HN profile.
Count me as one who's glad to see it made the front page. In this case, I don't think the OP was endorsing the candidate because he thought to have a Hackathon, but rather found it interesting that the idea of a Hackathon had made it to politics.
Technology and The Evolution of Storytelling
About the same as Latin America, which is to say: in some places, yes, in some places not at all. Be happy to set up in Ghana...
For anyone who reads this and is put off by the thought of having to update their system from source; there are binary patches available (both OS and packages) using the `openup' utility from https://stable.mtier.org/
Bit torrent it to the other side of the pacific. With a 35mbps connection will take like a month.
When you get one alert that you realize isn't false and has the forensic data tied to it, you can use it as a harness against the loads of information from all the other sensors (firewall, endpoints, sandboxes etc) to give you a definitive picture you're certain in.
Welcome to check up for a blog post in coming weeks at blog.asianops.com. We're also redoing the websites listed in my bio that will have tons more pics (live 4-6 weeks from now).
I like supervisord for these reasons too. It's really handy.
> FTA can be used either pre- or post- event.

Fair point.

OP's objection to a post-event FTA still makes no sense, though.
I wrote it poorly my apologies. I guess I could see how my messages is misinterpreted.
It seems like a more interesting approach to take advantage of price discrimination would be to execute 'persona swaps'.

That is, if Amazon is offering me a microwave at $100 and offering you the same microwave for $120, could we digitally switch places so you could order the microwave at $100 if you wanted?

A common method of e-retailer price discrimination is coupons so it'd be interesting to do real-time swaps in these situations too.
Why would anyone leave a passwordless VNC server accessible to the internet?
If you donate the investment directly to a non-profit, you will be able to deduct the full value of the investment, and won't have to pay capital gains on it.

Keeping the money in an investment account is a fairly good idea - I should have enough by the end of the year to make this worthwhile.
How many people come from companies with large exits like that? We're talking what a total of 200, 300 people tops? It seems pretty unrealistic to expect most "top talent" to be in the situation you describe.
It should probably only whitelist HTTPS as well.
I have been mulling over a similar idea. I was thinking about including the creation of an MVP as part of the offering to encourage non-technical founders to get involved.

However, the financial model I had been thinking about was that I would charge the founders at cost for time and materials for all the initial set up. With scale you could do it much faster and cheaper than they could and would reduce their risk. Max implementation time frame of 2 months. Hard limits on scope creep/late changes. Use frameworks to make implementation as fast as possible. Probably cost the founders $20k - $30k. You want them to pay up front to make sure they are committed to the project and aren't just wasting your time. I would head towards having standard code bases for various types of start up models.

Retain 20% equity in the start up that you've helped create.

Worst case scenario, the start up goes nowhere and you've covered costs. Best case start up does well and you've got 20% equity.

It's a good deal for founders because they reduce their risks, they get speed to market and they have access to a development team for further development if they get traction.
Whole-heartedly agreed. Until you have more money than you know what to do with, the expected social returns from just about everywhere you put your money would be far dwarfed by the returns you'd get from investing in yourself and giving back once you've got enough piled up to where it doesn't matter one whit whether you have it or not.
Like was said before, you have to attack the decoy to recognize it and that enables catching the attack traffic. Also the mere fact that they recount every single action 10 times over before acting is a huge value in and of itself.

On another note I agree that they will try and we will be constantly remembering that fact :)
In these discussions, it's helpful to when you see "talent" to substitute "cheap talent".
treating noscript (or adblock, or ublock) as security seems misguided. None of them are audited in any real way, or even designed to be security tools. They're nuisance blockers. If they make your web browsing experience slightly less annoying, they're doing their job. Expecting security from them is only going to lower your guard to actual potential threats.
False. Forwarding is an action you can set on any filter.
What are the unique advantages of Silicon Valley?
I wish the authors had focused on the design of DUAL_EC_DRBG, since that's a more objective and compelling response. Mathematical features of the standard make very little sense without a backdoor, and the original article provided essentially no justification. Rather, it attempted a distraction by pointing to alternative configurations and standards.

The authors might also have focused on the NSA's consistent refusal to deny that it backdoored DUAL_EC_DRBG. It is difficult to see what intelligence harm could come from such an acknowledgement. After the Heartbleed issue went public, for example, the NSA quickly denied that it had previous knowledge.

Unfortunately, the authors focus on NSA skullduggery and misconduct, citing primarily to non-expert (and semi-sensationalist) reporting. That's not very surprising, since Bruce Schneier is an activist critic. (As is Green, I'm not familiar with Heilman.) I think it undermines their case, though.
Seriously! I've lived in beautiful suburban family neighborhoods, idyllic rural areas, and a dangerous inner-city neighborhood where two friends of mine were robbed at gunpoint in our backyard and in none of those cases would I have been worried about calling the police.
Use your brain. Not kidding.
I was focusing on what to do with money in the article. I agree that sometimes time is needed instead.

It's definitely hard to compare the effects of different humanitarian efforts. The problem is that you have to choose something. Whenever you spend money to you're acting based on an implicit ranking. Rather than throw up our hands with "this can't be quantified" and give randomly, or give according to your whims, I think we should try to make the best decisions we can.
Some places have, other don't. Africa is not homogeneous at all.
The thing I like most about the startup I work for: if anything goes wrong, everyone just objectively addresses what happened, where we are now, and what to do to move forward - an obsessive focus on the next step to success.
Wait, so just walk up to a poor person and say "hey, I'm going to rescue you?" Then give them all your "advice" they probably don't care to hear?

I have a lot of very poor family that make a lot of very poor financial choices. Unless they ask for my advice, I won't say a word - its very rude otherwise.
Do you want to talk bioprinters? I got one built.
Looking for a co-founder who has a strong ML background for SaaS business in retail/brick'n'mortar space.
The trick is to make the breadcrumbs the type of data that an attacker is interested in, but a regular user will never be aware of.

For example in windows there is a cache of used credentials along with passwords, it is a known infection spreading technique to read that of an infected machine and use t across the network.

A breadcrumb would put a decoy's credentials in that cache. Thereby never doing any side effect to the user and definitively flag attackers by looking at any usage of those credentials.
I kind of am. Been doing done stuff since 2009, considering taking it past "personal project" and into something bigger.

I've refused money from, among others, NASA and Google.

http://www.robots-everywhere.com/
You're wrong there. I know that, because unlike you, I work for a domain registrar. And let me tell you something. There are actually people there who purposely trawl WHOIS looking for invalid data, just so that they can submit WHOIS inaccuracy reports to ICANN. The ICANN compliance department is far from underworked. You should talk to some of their staff some time.
Great post. Not beeing a systems dev though it kinda lost me when he talks about pipes. Pretty great overall though, I learnt some stuff :)
What: HypedSound, http://www.hypedsound.com, soon to be http://www.hype.co, community where creatives can upload their media and sync their social networks to one simple, clean profile to showcase to their audience. Currently have API integrations with Facebook, Twitter, SoundCloud, YouTube, Instagram, and tumblr. Example: http://www.hypedsound.com/hypedsound

Stage: Self-funded, bootstrapping

Where: NYC, but willing to talk to people elsewhere

Who: Django developer who wants to help take the site and community to the next level. I'm the only person in the company, I work with freelancers, so I can offer very fair equity and possible stipend/contract work to start.

Contact: jonathan@hypedsound.com
Mail a HD.
Spritz vs. Traditional Reading
As am I. And I still feel you are hugely overreacting.
One little known feature added in Linux 3.4 is the PR_SET_CHILD_SUBREAPER prctl(2) [0] that lets you designate the process as being a "subreaper" and it will be notified of any descending subprocess exits, just like init would be.

[0] http://man7.org/linux/man-pages/man2/prctl.2.html