skysight-inc/HackerNews huggingface dataset:
I don't know if you're still looking here, but after trying out the alternatives, they all had things I didn't like. Source Code Pro was nearly perfect for me, if the latin characters were only as tall as the non-latin characters; the designer seems to like generous space between lines to the point of even skimping on accent length for upper-case characters. The good news is that it makes the Han characters much more legible, as they are larger than the latin ones, but I never use those in my programming.

Looking at alternative fonts, I noticed that the designer of the Meslo font considers Menlo (so also Bitstream/DejaVu) to be "too cramped," so my personal preference must be fore closer-together lines than average.

Here's some samples from a directory listing:

https://phab.jasom.org/orfiles/dejavu-sans-mono-latin.png

https://phab.jasom.org/orfiles/dejavu-sans-mono-non-latin.pn...

https://phab.jasom.org/orfiles/source-code-pro-latin.png

https://phab.jasom.org/orfiles/source-code-pro-non-latin.png
Something's Coming
Can anyone figure out whether USG is Unix Systems Group or United States Government. (I think we're safe in assuming they aren't United States Gypsum (though, from my trips through Empire to Gerlach, that was the first thing that came to mind)).
[Edit - if you read through the entire (epic and wonderful resource) article, United States Government is used where USG might be - so I think we are safe in assuming it is United States Government. tptacek, might be worth introducing the acronym at the beginning.]
How to “Wizard of Oz” your application
Show HN: Install Fonts in one command
In Windows 10 Microsoft is the god.
Yosemite doesn't seem broken. That aside, you are being deliberately disingenuous by comparing a software update notification to unsolicited advertising.
But who wants to make their living working in support, I certainly don't.
We have conjectures and approaches but no proven solution.
Helping customers save $1M: An inside look at a fintech startup
Hi! A few reasons it might fail:

* You don't have your SSH keys on GitHub

* You don't have your GitHub keys on that laptop

* Your key is not RSA (because I'm LAZY)

* Your ssh version uses only recent algorithms not supported by Go's x/crypto/ssh

* You actually disabled IdentityKeys

Nothing to do with usernames or heuristics, by the way. All it does is first enumerate your client keys, then let you in, then check a huge GitHub keys database, then ask the GitHub API for your name.

https://github.com/FiloSottile/whosthere#how-it-works
Can you help me understand what a fair or understanding reading of this looks like?
> But when calling those already on your side to action, using such wording can motivate and mobilize others in ways that more sanitized language cannot.

Well said, it's hard to convey severity without using severe language.
It's fairly pointless of github to publish your public key though. Nobody can trust that it's actually yours.
As New York Rents Soar, Public Housing Becomes Lifelong Refuge
I thought it was the US Government.
>As I understand it the "sex tourism" laws cover behaviour that is not legal in the US, but is legal in some other country.

Well, in the best example, it is a bit complicated. Take age of consent. Within a state, state law rules. Between states, federal law rules. In most cases, federal law is stricter than state law. So it would be an action that would be legal in the state you were a resident of, but not in another state.

Also a counter example. Prostitution is illegal in most states, but it is, to a limited extent, legal for an American to engage in such abroad (much like it is legal for residents of Texas to go to Nevada).

In short, I believe there are laws that do what I describe and laws that do what you describe.

(Note I'm not a lawyer and the laws have changed a bit since I last read them.)
I'm looking for a way to make large amounts of money very quickly, and I need some ideas here.

You've come to the right place.

I'm pretty proficient in both frontend and backend technologies

This is where you fall down. It's possible you are very amazing and nobody knows it yet. If so, you have an advantage — you can create something new and crush competitors before they know you're a threat. It's also possible you're in the "overestimating abilities" phase of a career. The best case here is to have someone else tell you how good you are.

What are some good or creative ways to make a decent amount of money ($5k+) in a short amount of time? (1-3 months)

Put all your money into Apple stock during rumor season.

Read and execute on affiliate marketing.

Read and execute on ebook publishing for in-demand niches.

Bake bacon fudge and sell it on the street corner for a profit.

Bake cake pops and sell them to offices for a profit.

Busk.

Get hired at a place with a sign-on bonus then flee the country after they pay it out.

Sell organs (yours and/or others).

Dance like nobody's watching, put it on youtube, enable ads.
Just use another key. I have like 20. It sucks that doing this is pretty complicated though. Separation of identities is crucial on the internet.
The Raspberry Pi Smart House
That is true! I didn't think about that.
Agreed. I'm not a fan of soylent, nor do I care of the woes of the Tech elite, but this as pointless a piece as any I can imagine.

Got to rake in those page views, I suppose.
Wow. That person sounds like an entitled ass.
Ask HN: Whats the best scripting apart from PHP to code a blog
I have suggested and been asked to script a blog from scratch. I have done it before in PHP/MySQL. I want to know is PHP the best scripting or is there other?

And for the DB, since MySQL is slightly on the heavy side what is the other option.

Please let me know if you have queries.

Thanks in advance
I think they can. Just call it a purchase. That's what I do. I have "purchased" licenses from many MIT licensed projects. I intend to do it for every one I put into my project (once I have it figured out). Also, libre office, mozilla, etc. It just goes into the 'software' account.

I don't think the IRS is going to give a shit. Other companies may have shareholders who cry a little, but they could do it, at least to some level. Sending some love to Debian is a better option than paying for a MS license in some cases.

I think that the companies can and should support FOSS more. Especially if they don't want everything to end up GPL'd.
This show had some street cred as soon as I heard it was renewed for a second season before the pilot episode ever premiered publicly.
A great reminder that public key identity management is quite the unsolved annoyance. Why should you use the same key everywhere, allowing others to track you? Ideally you would have one key per service.
But I wouldn't get access to all these "DevOps-style" startups backends... Oh. Oh, I shouldn't have said that.

;)
Doesn't this essay absolutely bury one of the most important parts of this scandal, that RSA used DUAL_EC as the default random number generator in their FIPS certified encryption product for almost a decade!?! I note that this is glossed over with a description so marginal I would tempted to call it dishonest if I were not trying to apply the principle of charity to its author. "RSA BSAFE had support for DUAL_EC." Support!? Uh no, it used it as the default generator.

"I lean towards “not”; the structure of these proposals makes Clyde Frog’s job needlessly harder, if only by practically ensuring that OpenSSL and Schannel would never default to enabling them. But people smarter than me are convicted of the idea that this was a backdoor attempt." Well yeah it would make their job harder unless one of the largest security companies in the world used that random generator in their flagship encryption product!!!

I feel like maybe their are better arguments for why this was not a subversion attempt, but honestly the points for seem so, so strong and the points against seem like a mountain of wishy-washy humming and hawwing and extending the principle of charity even in the face of the above mentioned giant blaring klaxon of wrong-doing. I will still not say that reasonable people can't disagree over the question at hand but the arguments presented in this article don't strike me as being anywhere near strong enough to make this the sort of grey area the author would like.
So do you not use browsers then? Cookies are enabled by default in most browsers as well. And you can just as easily figure out how to remove flash cookies as browser cookies.
SurveyMonkey Acquires TechValidate
> Can you explain why there is a line going to the airport?

I assume it is because there is a fixed fare to/from JFK so drivers have little incentive to start/stop the meter at the exact pickup/dropoff location.

> Also did you overlay it onto a map?

No. If taxis did not pick up or drop off people on some street, that street does not appear. For example there is an area downtown where there are streets but they have had security barriers since 9/11 thus no taxis.

> How did you get the angled effect if it's just a grid?

None of NYCs grids are exactly north/south/east/west aligned.
he is knowledgeable in the VM implementation, and do develops features in v8 and GNU Guile VM.
If you trust your connection to Github and trust that the person in control of the account is the person the account represents, then why not trust that key?
This is a good observation. All I can think of is that generally the impact of unconfirmed take over offers that might not happen is significantly less than missing earnings projections.

I imagine if anything ends up gaining steam you'll see people jump on board hoping for a premium on the stock purchase.
CoreOS used to do this, but stopped doing it: https://github.com/coreos/coreos-cloudinit/issues/334 Basically, they don't want server provisioning to depend on Github being up.
Is there a framework?
*NEW* Hiring – iOS Junior Developer *Social App* (Los Angeles)
Cydia Download on iPhone
Have a job, struggle to live minimally when I have about $2k in expenses that I'm locked into.
It is amusing that you are getting down voted on a forum supposedly populated by start-ups and entrepreneurs.
If I did, I probably wouldn't be asking how to make money quickly.
Counsel over Capital: thoughts on investment and mentors from an accelerator
Of course no one in their right mind writes code for complex Turing machines, but don't be confused by all the layers of abstractions.

Programming at any level is fundamentally the same, it's about iteration, branching, composition of smaller pieces, and packaging smaller pieces into bigger ones. No matter at what level you write your code, it's always like this. The differences in API are not important.

EDIT: I think that concurrency is a bit different in this respect. It really requires somewhat different prespective, but again it reduces to simple basic elements (like the agent model, or pi calculus) which are reiterated and reimplemented many times.
Indeed. It was probably hard to do because he's using Python which has problems due to its GIL. I myself would have went for Go, whoms CSP model matches this problem perfectly.
> By the way, did you know that GitHub publishes all users' ssh public keys and Ben (benjojo.co.uk) grabbed them all?
> That's pretty handy at times :) But not this time :(

>Better luck next time, I guess :)

Who cares if they publish Public Keys. They're meant to be public, it's one of the few well named things in computer science. They are basically meant to be spewn everywhere.
And I know of plenty of people who play football who make several million dollars a year. The question is, how common is it? In both athletics and engineering, the answer is not all that common.
Think women in tech is just a pipeline problem?
They do, however patron records' confidentiality is generally more favorable than Amazon's privacy policies.

Examples:

1. http://www.santaclaritalibrary.com/confidentiality-of-librar...

2. https://www.saclibrary.org/About-Us/Policies/Confidentiality...
Why aren't conference proposals blind anyway? Seems to have worked for orchestras.
I'm tactically resubmitting this, as the previous post [1] set off the flame-war detector (# comments > # upvotes). But I think this is an excellently written and thoughtful article, and deserves more visibility than it previously received. Please weigh commenting carefully with your contribution to setting up the flame-war detector.

[1] https://news.ycombinator.com/item?id=9959217
Though it may be incredibly impractical or theoretically impossible, depending on the key and time of day, there is always a possibility that a public key can be used as an attack vector to guess a private key.
The Mobilegeddon Effect Is Here to Stay, Ready to Survive It?
https://github.com/HackerNews/API#items

Also the file is ~5.3GB when decompressed, if anyone is wondering.
Rather than reply individually to the messages from this thread, I'm
going to try to clarify some things here. I think a lot of good points
were brought up both with regards to the "taint" mechanism and timing
covert channels.

IFC/tainting mechanism:

The style of IFC we are proposing is not not the tainting style used
by more typical language-level systems. In particular, we're proposing
a mostly-coarse grained system:

- A single label is associated with a context. A context can be the
main extension context or, more likely, a light-weight worker the
main extension context created. This single label is conceptually
the label on everything in scope. As such, when performing some I/O
this label is used by the IFC mechanism to check if the code is
allowed to perform the read/write. This coarse-grained approach
alleviates the need to keep track of tricky leaks due to control
flow: the branch condition has the label of the context so any
control flow within the context is safe. If you want to perform a
public computation after a secret computation, you need to
structure your program into multiple contexts (e.g. create a new
worker wherein you intend to perform the secret computation).

- Labels can also be associated with values. A new constructor Labeled
is provided for this task. You can think of it as a boxing the value
and, by default, only allowing you to inspect the label of the
value. You can pass such labeled values around as you see fit (and
this is pretty useful in real applications). Importantly, however,
when you read the underlying (protected) value the IFC system taints
your context---i.e., it raises the context label to let you read the
value, but also restricts your code from writing to arbitrary
end-points since doing so may leak something about the newly-read
value.

An important requirement of this IFC approach is that there be no
unlabeled (implicit) shared state between the different contexts. For
example, rand() in context A and B must not share an underlying
generator. This kind of isolation can be achieved in practice and is
an important detail when considering covert channels.

Timing channels:

It turns out that if you do IFC in this coarse-grained fashion you can
prevent leaks due to timing covert channels, if you are willing/able
to schedule contexts using a "secure scheduler." In [1] we showed how
to eliminate timing attacks of the style described in this thread
(internal timing channels) that are inherent to the more typical IFC
systems. In [2] we extended the system to deal with timing attacks due
to the CPU cache by using an instruction-based scheduler (IBS). IBS
and other techniques to deal with timing channels are nicely
described in [3]. (I'd be happy to expand here, but this is already a
long reply.)

[1] http://www.scs.stanford.edu/~deian/pubs/stefan:2012:addressi...
[2] http://www.scs.stanford.edu/~deian/pubs/stefan:2013:eliminat...
[3] https://ssrg.nicta.com.au/projects/TS/timingchannels.pml
I mean it's a cute story and an idiom that is pretty much indelible from the language, but Kay was putting it in terms like it's a fact about frogs' biology when it is not. He has a background in biology as well as CS, so I am indeed surprised he didn't check this.
The most despicable use of lie detectors I've ever seen was on the Dr. Phil show. Dr. Phil asked a man who cheated on his wife whether he diddled his kids while he was hooked up to a lie detector. He answered no but obviously a question that is as emotionally charged at that will appear as a lie. This man's relationship with his family, friends and probably any future work relationships were all ruined by a stupid magic trick. The man turned to Dr. Phil and the the former FBI agent who administered the polygraph and start pleading and begging for any reason why the lie detector would give a false positive. Dr. Phil and the former FBI agent were smart enough to know why it wasn't working but they continued be evasive as the man's past and future relationships with his children, family, friend, and coworkers went up in flames.
Good process adds some latency, but reduces risk.
Interesting, thanks for sharing this. That's an odd duality that I wasn't aware existed.
SSH with a keypair should be much more secure than user/pass over TLS.
Your comment is a perfect example of why companies don't adopt this.

Critical feedback is too often construed as 'unprofessional' or 'inconsiderate' when it's simply a subjective statement on the way someone does something.

If we as a people could take feedback more constructively rather than misconstruing it all as some kind of pejorative statement of our character, we wouldn't have this issue.

So really the problem is that we don't have ENOUGH professionalism. Too much personalism and not enough professionalism. The personalism gets in the way of true, transparent feedback.
I'm excited to read the Synthesis paper, I haven't seen that one before.
Same here. Here's my ~/.ssh/config for anyone interested in what it looks like:

Host github.com
User toxicFork
IdentityFile ~/.ssh/github-toxicFork
Host bitbucket.org
User toxicFork
IdentityFile ~/.ssh/bitbucket-toxicFork

And my personal security policy:

- Once I want to use a device for development, I create separate key pairs for all of the services I want to use, register it on that server's account config and then add it to my config file by hand ( I should find or write a script to do these automatically :D )

- Once I want to retire a device (or if it gets lost) I just remove the public keys from the services

- NEVER move or copy private keys, I'd rather create a new private key and remove the references for the old public keys instead
That's a bit... ad-hominum. Maybe I'm mis-reading it, but for me it parsed more or less as "I'm not saying you're a racist, but people who say what you're saying are racists...."

If that interpretation is wrong, please do correct me.

I'd like it if arguments could stand on their own, not be dismissed because someone falls into a particular category.

>I have a dream that my four little children will one day live in a nation where they will not be judged by the color of their skin, but by the content of their character.

and all that.
Effort carries meaning. It shifts focus around and introduces exquisite nuances or even a sub-text (i.e. what if John has mixed feelings about his current girlfriend?) It boosts thinking. It works visually as well with, for example, what R. Barthes called "punctum."
I'm pretty late in responding to your comments, but I feel the need to point something out.

If an annoying UX element actually increases conversions, it is purely a sign that your overall UX or UI or marketing verbiage is failing. Conversions will increase significantly more if you fix the core issue, because not only will a proper UX/UI still elicit the conversions from users who might have been pressured by desperate tactics, it prevents alienating those users who are not susceptible to those tactics.

I have never once come across a situation for which this was not the case.

Edit: I think the perfect example of this is your own website. And I don't mean to insult you, I'm just giving you my take as a visitor and an experienced developer.

I was entirely turned off by the pop-up, which puts me firmly in the insusceptible category. Then after closing that pop-up to explore your actual marketing message, I was overwhelmed. Not just by the meaningless industry jargon, but by the sheer amount of dissimilar and unorganized content on a single page.

I can guarantee, without any shadow of a doubt, that a more succinct and meaningful message will increase your conversions more than the three desperate elements currently on the page ever will.
Turns Out the “Death” of HitchBOT Was Just a Publicity Stunt for a Prank Show
Hi! Would you be willing to hire candidates from abroad (namely, UK) willing to relocate?
I think this is a US-tech issue, and not a tech issue. I'm from Belgium, so maybe other Europeans can confirm or deny this.

My wife is an aerospace engineer who worked as a programmer for quite a while (and in my 'objective' opinion she's prettier than average ;)). She had a surprised "You can work with computers???" comment once, but that is about it. She worked >10 years in the tech industry, and so have I. I've never seen women treated like that, and I worked with quite a few. Such stories would raise quite some eyebrows here, and won't only be considered very unprofessional, but also lacks normal social behavior.

What I notice is that, every time such an issue pops up (about how women in tech are treated), it's always in the US. Seems more like a cultural issue to me, but I might be wrong.
I use notepad++ (windows) on about 10 computers that I use at work to quickly edit python files, mostly sublime text and PyCharm (OOB auto-completion, refactoring, documentation feature, and easy git integration) for more extensive coding on my main computer, and use VIM on remote servers. I've tried EMacs several times in the past but I found the commands a little hard to remember and little bit harder to get around in the editor than on VIM. I use atom time to time to get that feeling of sublime text on my other work computers but I tend to steer towards notepad++ because it's very snappy and i can do things more quickly for simple tasks. I prefer Sublime in most situations but I tend to just use whatever fits the best for the system and tasks at hand. I think this pair programming feature will be very useful when I'm working remotely with my team members located in other states.
Actually I'm looking for the income in addition to my regular job.
A woman who's trying to free grad students from their delusions
This guy is a very angry person without anything constructive to say as far as I can tell. His other articles reflect the same tone. Juvenile ranting, imho. If there's something to actually discuss here please fill me in.
Nice idea, but don't run the command if you have

Host *
ForwardAgent yes

On your ~/.ssh/config
From SpaceX to SolarCity: how the space sector affects sustainability on Earth
Try to practice against real people rather than AI, especially when getting started. It's more fun and veterans can explain things to you. In-person would be ideal, but online communities work too.
> trying to cross a river with a fox and a boat that only holds two...

This is much easier if, as you apparently have, you've lost your sack of grains.
Simple urine test may detect pancreatic cancer earlier
Exactly! Once I get the keys I just check them against a scraped database of GitHub keys and ask the API for your name.

(And if you have agent forwarding active I show you a big WARNING [0].)

There's an explanation in the README [1] but the actually interesting stuff is in server.go [2]. Finally I mentioned a few reasons it might not work for you below [3].

[0] http://git.io/vOVYm

[1] https://github.com/FiloSottile/whosthere

[2] https://github.com/FiloSottile/whosthere/blob/master/src/ssh...

[3] https://news.ycombinator.com/item?id=10005169
HTTP benchmarking tool written in Crystal
QoS or WAN Optimization – Why Not Both?