skysight-inc/HackerNews huggingface dataset:
Currently working on an open-source phishing framework called gophish [1]. It will let businesses and pen testers conduct phishing simulations/engagements easily. And it's a full web app sitting on a go backend.

[1] http://github.com/jordan-wright/gophish
Consulting - Once in 3 years.

Once every two years is pretty common early on in consulting.
Assuming 230 volts for UK sockets drawing 1 amp of current, the wattage draw is 230 watts. Assuming this was done for 15 minutes (typically enough for me to get up a few percentage points to make a call or two), this represents 57.5 watt-hours. At 12 cents US per kWh, this comes out to $0.0069 total money stolen from municipal sources. It's literally a more serious offense to take a penny without leaving a penny.
​Startup lands $100M to challenge smartphone superpowers Apple and Google
Not working for me.

- Uncaught InvalidStateError: Failed to execute 'send' on 'WebSocket': Still in CONNECTING state.

- WebSocket connection to 'ws://spacetime.tv:9090/' failed: Error in connection establishment: net::ERR_CONNECTION_TIMED_OUT
Those are good points but I'm not a fan of two factor SMS. It made sense in the day where a cellphone could make calls and do texting and nothing more, but smartphones are used like computers now. Say you have the typical situation with no pin on the phone and password auto-filled by the mobile browser for the site. Now if someone loses that phone, another person can login, looking at history or auto-fill settings for clues. Alternatively, if there is a password for the site, it's either really simple or the password reset request will come in to the mail client on the phone. Since phones are way more than they used to be, for two factor these days it should be a separate dongle that only does the one factor and it is forced to have a pin by the vendor before it can be used. So SMS two-factor is not really all that much better security-wise and it makes it more inconvenient, doubly so for those like me that don't even have a cellphone.
Sounds like competition to Tinder. That being said - this is awesome! Excited to start playing with DCOS.
I disagree with your requirement of immediately and continuously producing--least of all because, in all odds, the codebase of such a culture (optimizing for "throw code on the wall now now now don't waste time thinking") is going to result in a big pile of garbage that will take a little time to get up to speed on.

This is because unless you are mature, you generally goof off when you don't visibly see other people working hard.

So what? God forbid anybody in my super lean startup have fun in a non-company-mandated way. If I've got a dev who "goofs off" but when they're on point they're really on point, I'm fine with that--I just know not to put them on time-sensitive things, because I'm experienced enough to know how that'll work out.
Probably 1-5% if he's the first employee. Less than a percent if he's not unless he got awarded more later or they have an unusual equity situation. 30% is founder territory.
Your Commute Is Killing You (2011)
I'm putting together a web app that let's you manage a playoff pool. Every year my friends and I have an NFL confidence pool at playoff time and my buddy does it in Excel. It can be so much better and there really is not much out there.
I'm not clear on what you're after exactly but on the first of every
month there is an automated "Who is Hiring" submission here on HN from
the "whoishiring" user where a lot employers post engineering related
jobs. This account also posts the Freelancing and "Who wants to be
hired" submissions.

https://news.ycombinator.com/user?id=whoishiring

https://news.ycombinator.com/submitted?id=whoishiring

There have been a few creative uses of the data in from monthly "Who is
Hiring" submissions:

https://news.ycombinator.com/item?id=9890180

https://news.ycombinator.com/item?id=9838955

https://news.ycombinator.com/item?id=8079958
I didn't see a link to Aleksa's patch set, so here it is for those curious: https://lkml.org/lkml/2015/2/22/204
I love that we have an operational “deep space network” - emotional moment as New Horizons reconnects after Pluto fly past last night https://amp.twimg.com/v/e360e83b-b3dd-4862-9a7f-7b111b33e27d
This site is really difficult to read on mobile devices (profile photo overlaps first paragraph of text, paragraphs are very narrow due to large padding/margins). A couple of little fixes would make it a much more comfortable read.
I'm working on private hosted Wordpress plugin and theme updates. My goal is to do for Wordpress updates what Github did for Git.

Its currently in a private alpha, but I've already got 26 users signed up! I have lots of ideas for doing automated builds, webhooks, and third party integrations, but the going is slow because I lack a lot of time to work on it.

Check it out at https://kernl.us
> Having said that: I also saw how it was being abused.

There are easy ways to ensure productivity. For example, using Skype and requiring offsite workers to be available (i.e. green status) throughout the day.

If workers are not being productive at home it's management's fault for not laying out a culture and guidelines to ensure productivity.
Hmmm... Spacetime.tv works for me when I connect two browser windows to make a game.

a) What browser/OS are you running?

b) Maybe your firewall is blocking sockets?
I had no idea there had been any nuclear explosions above the 100km line, let alone above ISS's orbit. How did I not know that?
At least for the US, the issuer of a credit card (and thus the format) can frequently be determined from as little as the first digit. For instance, nearly all card numbers starting with '4' are Visa.
Very timely, considering the possible resurgence of the crypto wars.
Absolutely! I've had terrible experiences with vanilla socket.io regarding reconnections, performance, and reliability. This is even after the 1.0 release.

Lately, I've been using primus [1], which is an API unification layer for socket.io, sockjs, faye, and native websockets. Swapping one engine for another is trivial, and they've taken pains to abstract a core subset of functionality.

[1] https://github.com/primus/primus
I mean, how can that be? How stupid easy is it to have a web app that sends out an email? Like every 2 person start-up out there has something like this for messaging them. Honest question here, are you really the first, in the year 2015, to do this for congress in one 'clearinghouse' type site?

As I have your ear, some more questions then:

How about a direct calling option? I've used your calling to eff then connect to a congresscritter function before and it works great. I also remember hearing that a phone call is much more important than some email.

What about accountability? My emails mean nothing if I still vote for them or have no other options. I signed up for GovTracker.us to send me email on my rep's voting, but I honestly cannot make heads or tails of the 300 odd bills they all voted for the last week. Some sort of editorial function is really needed if accountability is to be implemented.
What is to stop the bad guy from calling the bank at the same time they call you, and passing your challenge and responses on to the bank teller?
I didn't see anything that I don't see on woot or other deal sites on a daily basis. When I last looked one of the "front page" items on the lightning deals was a lanyard, which I think says a lot.
Throw me an email if you'd like an invite.

Edit: I don't have any more!
So you mean you have some 'quantifiable metrics' when you say OS X is a 'mighty fine' OS?
It's a complex matter with different factors: for me money is important as well since I've family with two children, even if, indeed, I'm not crazy about getting as much money as possible in general. However, how good is money if you have no free time? Coding is something I can do from Sicily, but bootstrapping a company, I'm sure would require me traveling a lot more, compared to someone who is based on SF or London. So given that, as David Welton said in this thread, in Sicily is not super expansive, I tried to balance things, getting SF-style compensations while living here. This does not made me rich at all... I purchased a 350k euros house a few years ago and I'll have to pay half of it for the next years... But still, I can travel with family, go buy food without checking the price labels too much, have a small garden, and so forth. For me this was a good quality-of-life/money balance. With Redis Labs my compensation improved since Redis Labs is focused on Redis, is not just a part, so they are able to compensate me better, and this is good since I'll be able to work from home in a similar fashion.
Ah, it does! They did the original "sneak peak" on Instagram and this was the file: https://igcdn-photos-h-a.akamaihd.net/hphotos-ak-xfa1/t51.28...

I hear so many complaints about Twitter recompressing pics I figured that would happen here.
"google docs" of handwriting / freehand with real-time collaboration. A bit like if google docs had a child with OneNote...

- vector graphics/drawings created by freehand / writing
http://write-live.com/d/dba21681-8d3f-4fbe-8b4b-e5c1983df934

http://write-live.com/d/8f9b7846-a7b9-4e5c-b704-dad9aa87d14e

- unlimited* levels of zoom
http://docs.write-live.com/WriteliveServer/webview.html?d=34...

- draw on a tablet, view on tablet / web
http://write-live.com/d/538254c5-7d31-41f2-83bb-bcd0a7cee7ab
Vim Directory Structure
Oh, a clarification: the Node client will be replaced by the Go version. The `keybase` command line app will be a superset of what's available in the Node client now. Sorry. So yeah - still providing those API's.

PGP support will continue, always, it's just that you won't need to have PGP on all your devices -- just the ones you use PGP on. Your PGP key will be part of a family of keys you're known by. If you install Keybase and have no idea what PGP is we don't make you get a PGP key.

By switching to device-specific keys via apps on every platform, we can solve security and convenience problem at the same time. As the blog post says, this can only work if you can bring pairs of devices together. Which has only been possible and convenient the last couple years.
Federalist: a unified interface for publishing static government websites
New Tomcat monitoring with java call tracing
Yeah. I should get around to doing that. I'm not a web developer by trade, so I've always felt iffy about doing responsive designs. :/
Agreed. And actually, there's plenty of case studies and efficiency research on this subject.

What it really comes down to is:

Get the right team of remote workers together, provide the right tools, and apply the right policies and you can give yourself a great market advantage.

But it's exceptionally hard to satisfy all those dependencies.

Many individuals aren't nearly as effective in remote positions, and many more might be effective with some practice but don't actually have the experience required to do it well yet. Paying for their inefficiency while they learn the ropes of remote work is a dangerous and competitiveness-risking bet, especially if they never even quite manage to figure it out.

Tools and policies are a whole other issue, as those not only need to be identified but they need to suit the team that you assemble and put constraints on who else can join that team. Not every toolset and not every policy is a good fit for every worker, remote or not -- and it's much more important that they are for remote workers.

So at the end of the day, you absolutely CAN have a great company that works remotely and there are many out there. But it's not reasonable to suggest that many or every company can see benefits from it any time soon.
I was going to sign up, but no way to pay without paypal or bitcoin. Don't have the latter, won't deal with the former. Too bad the only way to contact them is 'on their social networks'. Seriously?
You think CC #s are a pain? Try phone numbers.
I actually introduced Slack which is much better than Google Hangouts; having any sort of shared chat room is much better for team cohesion but I feel there's something missing the culture because we don't constantly chat. At my last workplace we had no one remote but since everyone was on different projects the Slack #general channel was the place to make sure you get that cross-team and company-wide communication happening and to have fun. Here with 25% remote and 75% in office it feels like the watercooler and team cohesion aspect can't ever really happen.

Your advice is sound.
What is the size of the equity stake you received, roughly?
Its "she", btw.
Commenting about downvoting is against the guidelines. https://news.ycombinator.com/newsguidelines.html
So? Windows is pretty solid too, after XP, and especially post Vista.

The main issue with Windows, if there is one nowadays, is some UI cohenrece, not bugs and stability.
I have to talk to people all day long. When I take uber I get a few minutes of peace. My apologies to the uber driver that just really wants to share their life with me.
Set proper expectations. Everything takes about twice as long as you think, so it's best to break things down into as small steps as possible. This is the heart of agile / iterative dev, where productivity is measured by what you learn and validate about your startup's premise.

If you're not feeling productive from day to day, it's because you're biting off more than you can chew.
I'm not talking just about dreaming, I'm talking about lucid dreaming and dream control. If you're not lucid in your dreams, then I don't think it's too ridiculous of me to assume that those dreams are "normal" for you, so you wouldn't expect to see any improvement, even if dreaming about things like that could offer improvement.

What I'm talking about is people who can realize they are dreaming, and then make a concerted effort to consistently use that time for mental training like the article mentions. That seems far more likely to yield results than sporadic running dreams.
Bits of Advice for VM Writers [video]
I'll update the post to include it, but the actual merged patchset is this one: https://lkml.org/lkml/2015/6/9/320. This is the first part which was merged separately in 4.2: https://lkml.org/lkml/2015/6/5/857.
Why you should intern at a startup
https://www.primroseeditor.com/

RAD programming framework for WebVR. It will soon have a huge set of features above and beyond the basic text-editor that I've demoed here on HN before. I never really intended to make a framework, but I have ideas on some products I want to build, am trying to make iterating on those ideas very productive, and I figure I might as well let everyone have the core stuff in the mean time:

BTW, I'm always available to talk about projects, if you need a freelance developer or just an ear off which to bounce ideas. Find my contact info in my profile.
No, to El Capitan. It's a bugfix release mostly, with few new features and changes introduced.
Welcome Texas
For worker value the important input isn't time, its focus. Does an extra hour on personal life, rather than commute create an extra of hour of focused, innovate, high productivity work? Answer depends on the person.

I've run a remote team for not quite a decade, but close. I've run an office. I have a lot of friends that work remotely, besides my own developers. There are big pros and cons to both. For an information worker there are huge health downsides to being inside at home all day, even with a full family around.

My conclusion based on these experiences is having both a physically active and healthy social life is what matters. Both working at an office or remotely from home can make these better or worse, dependent on the person and who they work for.
absolutely. calling the devs incompetent because of a bunch of ad network bullshit is not cool. Most of the JS probably comes in directly from the ad system that devs are unable to improve because they are proprietary. I mean just look at scripts like "Add This". The product people want social sharing easily done. Add This gets installed then suddenly the page hangs up an extra 15 seconds loading god-knows-what of 200 legacy social network scripts and trackers.
Automatic Detection of Cyber-Recruitment by Violent Extremists
Not if you give the workers the option to work remote or not. Believe or not there are many workers who prefer to be onsite. This is the case in my office, the onsite people are more social and want to be close to the core of communication.
Hopefully they'll be able to address this then:

http://i.imgur.com/3VAMerv.png

(from https://twofactorauth.org/)
A Curious Analogy Between Ethics and Machine Learning
Before we can compare remote and local teams productivity we need to solve the problem of measuring developer productivity. Very smart people have been trying to solve that problem for a long time and it seems to me like they have made very little progress.
I'm teaching a course on data visualization, which is something of a side project for me.

Check it out here: http://nsrivast.github.io/data-viz-nairobi/

I'll be posting the student projects tomorrow after the presentations!
http://googleweblight.com/?lite_url=http://arstechnica.com/g...
Jopwell (YC S15) Is Building the Missing “Pipeline” of Diverse Candidates
This does not make any sense. Any modern kernel(including the ones you mentioned) is going to be complex. The only way to get started is to dig in. Even if you do not make changes right away, trying to understand the code is a reward in itself.

I also don't get your point about conflict of interest. There is no one corporate sponsor of Linux. And just because you are a newbie, your patch is not looked down upon. There is a great community willing to help if you put in the effort.
Sounds like that could be trivially solved by restarting bluetooth.

In any case, it's not something that ever affected me.
I have been unable to be opted out from 3D Secure. It just doesn't seem to be possible. The argument the credit card companies usually use is that they aren't forcing it on us; it's the merchants, who set a flag in the transaction saying they require it.

If you know how to opt out of it, I'd love to know.
Currently picking back up a side project I started a few months back called The Daily Drop (http://www.thedailydrop.co). It aggregates EDM songs from around the web into a single location with the usual playback/music controls.

Originally created it because I just wanted a way to not have to manually go to different sites, forums, and blogs looking for new stuff, so I automated it. I 'launched' it thinking others might find it useful. Pending an approval from Apple, a native iOS app should be out in the next few days or so.
FSF's Statement on Canonical's Updated Licensing Terms for Ubuntu GNU/Linux
Might just be me, but I immediately thought the order should be switched. I'll be reading in the editor 90% (left to right) of the time so the editor should come first.
>Want to do login to your bank account? 100% required that you have an two-factor SMS token in addition to your user ID and password.

Thing is, if making the choice to have two-factor authentication for the bank is rationally wrong (i.e. the cost of security exceeds the damage of compromise), this isn't actually helping?

The point of the article is that users reject security advice for good reason. Forcing them to accept your security advice doesn't help; quite the opposite, it is forcing them to pay the cost of security despite it being not viable.

(in this particular example it maybe that the two factor auth is low-friction enough that it 'pays off'. If the article is right, simply giving people the option of two factor auth will have them use it)
https://keybase.io/jobs is timing out (504).

=)
From my limited following keybase.io it seems like this is mostly hobby project. How does one get investment for this kind of projects? Do you need to know someone already? Or do you decide to pull a plunge and create business plan and present it on one of these demo days organized for investors?

I feel like there is a huge gap between potent, but still hobby, project and series A funding.
I think one of the unfortunate things is that most people don't understand what the military experience is, and how it might help their companies. Veterans should do a better job selling it to help bring awareness too.

Veterans often deserve some fault as well - many don't make good decisions with their life due to some desire, and end up regretting their choices. I've seen many not make every effort to set themselves up for long term success, and often shoot for & encourage short term success, even if it ends up in a long term dead end. Perhaps they are not much different than a lot of the US population in that regard, but wishing for things to be different based on past experience is not going to do anyone any good.
Right now the About button just shows the same Hostel Hawk popup from when the site loads; clicking it while it's already displayed does nothing. But I'll add more info about the site soon and fix that.

Basically you can explore the map and see what cities are most popular with travelers right now. You can zoom in and check out how many travelers are staying (approximately) at the tops hostels. The app also displays ratings weighed by number of reviews, so a hostel with only one review and a high rating won't outrank another one with thousands of reviews but a slightly lower rating.

My ultimate goal is to make finding popular sociable hostels super easy and ultra quick.
Both of your issues have to do with files, and I'm guessing you have some exotic setup, with the remote server and such.

Extrapolating from that experience (which might be entirely to the remote server setup or network issues) is not exactly scientific.
> Instead of giving them an advice, we who understand how it works should make these things defaults and not let them exposed.

This is missing the point. The article states the security advice is actively harmful, in that applying it is more costly than the expected returns warrant. Just enforcing those costs on users doesn't help.
One ongoing project I have is http://simplesharingbuttons.com.

I've been meaning to do a complete rewrite, but I was at least able to do the most important, functional updates incrementally.

Lately I've been playing with (chat) bots. One fun experiment I made is https://twitter.com/bartleby_scrvnr/ .

I don't particularly care for many of the Twitter bots that are out there, but I found some interesting projects, like @congressedits, @YesYoureRacist or even @TheRiddlerBot or @mothgenerator. I'd like to explore more ideas in this area.

My next big project (in a very early stage) though is a forum -- with a _twist_ :-)
Worse than that, it's all bounced through a site called securesuite.co.uk. Take a look:

https://securesuite.co.uk/

Impressed?
I really like the TextArea that auto-grows http://nikgraf.github.io/belle/#/component/text-input

It grows/contracts just as expected in Android and iOS too. That's handy. Nice job!
Can we have a Google Moderator/User Voice-like tool with a "page" for every representative, where they can then be encouraged to look to see what their constituents want most from them?
I've been partially remote for the past 5 years, averaging 2-3 days a week in the office. During that time I've also had stints of being fully remote while overseas for a few months at a time. The fully remote time is vastly more productive, but could be very difficult regarding communication. The work environment wasn't designed to be remote-first, and this puts a strain on anybody who isn't in the office.

In my experience remote all-the-way works wonderfully. Remote partially suffers around communication when the rest of the team doesn't emphasize asynchronous tools like chat/comments/email.