skysight-inc/HackerNews huggingface dataset:
What the hero sees: Calculating field-of-view in a roguelike
In general, fingerprints should not be treated as a password or key. They unfortunately are being used as such by Apple and Samsung and these fingerprint locks. A key is something you keep private, but you leave your fingerprint on everything, including the doorknob you're trying to keep locked. Additionally, once compromised, the key cannot be revoked. I don't doubt it is much more convenient, but I would personally never trust the security of my home to one. The one area that electronic locks clearly win out on is with auditability. You can show when the door was opened and by whom, if they each have separate keys. And when a key is lost, that specific key can be revoked, rather than changing the entire lock.
"Slickle" has an entry as slang in the urban dictionary.

"Revergent" gets a definition here[1] as "a mutation that precisely restores a mutant DNA sequence to a WT DNA sequence".

[0] http://www.urbandictionary.com/define.php?term=Slickle
[1] http://www.flashcardmachine.com/questions-set-2.html
Maybe this explains why New Zealand looks like it has about as much land area as California even though California is actually about 60% larger than New Zealand.
Imo at least the following important subjects would be too unprofitable for industrial research labs: philosophy, pure mathematics, particle physics, astrophysics, religious studies, philology, history, anthropology.
Ah, yes. Not only do I pay $50 for my light switches, I also have to write my own interface before they behave differently from $10 light switches. What an incredible value proposition.
Maybe not exactly what you had in mind, but the economics of allocating scarce resources via queues is pretty well-established (and interesting). You might enjoy this read: http://www.jstor.org/stable/724744
Pinning necessarily has to restrict the times a certificate can be changed because otherwise we have to solve a different problem "How can I tell this new certificate is a good certificate".

You have proposed a solution to that second problem, let's look at the threat model:

You adversary is:

* Capable of forcing or otherwise being able to create valid certificates.

* Has the capability to MITM nodes in a network.

The solution you have provided adds an additional hurdle for the adversary:

* must also be able to subvert your CA (or more generally, a specific CA - it doesn't actually matter if you or someone else controls it - what matters is it is a specific root certificate).

So the browser, now TOFU'ing the initial certificate makes a note of the current certificate (and pins it) as well as the secondary signing CA (and also pins that).

When you want to rotate certificates you have your new cert signed by the two CA's, one of which has to be the pinned CA.

I actually think this is a fairly elegant solution (for the operator), although it does come with some fairly large assumptions:

* If your adversary is large enough to be able to corrupt multiple CA's (say a federal government) - then they are powerful enough to corrupt all your CA's (even you - although, to be fair, if the can force you to do anything then the MITM capability is less interesting). So while this scheme benefits the operator, it provides negligible benefit to the client.

* You are reliant on the secondary CA to remain static (or having a backup CA) - this is the same problem as the original simply shifting the capability up one level - maybe this is OK.

Overall, this approach does provide more flexibility to the operator of the site - but provides no to negligible additional security on the client side (it upgrades the capability from being able to mimic any CA to being ale to mimic a specific CA), and may even put clients at greater risk - since there is now an additional avenue of certificate rotation which means extra code, extra verification to mess up etc.

These were a few thought that jumped into my brain - I would like to see a more detailed threat model / paper exploring some new schemes as I think there are wins in this space that haven't been realized yet - and there maybe improvements / clarifications which can improve this model further.
Reading his wikipedia page told me nothing... why is Dhirubhai relevant to Ritesh?
This documentary seems to largely follow "The Man Behind The Microchip," a biography of Robert Noyce. Noyce and his work at Fairchild really set the tone for entrepreneurship in modern Silicon Valley -- a lovely piece of history to know.
The Internet of Things Comes to the NFL
Literate Devops with Emacs [video]
I agree with your take, but I don't see that happening; I prefer to take care of media acquisition on my own because I don't trust these companies to do any differently than the media companies they seek to, ultimately, replace.

Roku has the private channel feature that I think makes it more interesting than the other players, and I wish more effort was exerted to explore the possibilities with private channels. Have you used this feature?

It seems to me that if the streaming providers had better APIs, the device makers could make use of them; I imagine Amazon's devices have access to private APIs that Roku does not.
Pretty feeble argument IMO. You restrict your analysis to companies you deem trivial and then you claim they aren't innovative. Yet you ignore the entire smartphone revolution that was started by Apple and Google.

Innovation and invention aren't the same thing. The invention of a technology is only a small component of its success. Combining it with other components to fulfill a good usecase is what makes it something useful. Google is the main player making self driving cars actually something useful,not DARPA funding.

You can continue to be apologetic for other countries being so far behind in tech innovation, but it doesn't change the point that it's happening in the US even though some ignorant commenter thinks the education system gets rid of innovation.
YC Summer 2015 complete startup list
This makes it sound like I'd need to be sysadmin/devops for my home. I get paid to do that sort of thing at work. I certainly don't want to be doing it at home.
Two quick thoughts:

1. Monica's completely absent from this episode- she should appear in future ones. Would be nice to get Carla back, as well.

2. Can Charles be British and played by Paterson Joseph, who played Alan Johnson on BBC comedy Peep Show?
The Software Engineer Mindset
> bought a second-hand (...) Potential sale for Samsung lost.

Not necessarily a bad thing in a grand scheme of things. Apple's hardware for example is famous for commanding rather high price on a second-hand market. This trend helps a lot in justifying high price point for a new unit, further strengthening margins.
The point as I see it being got at here is that changes in the approach to raising a child has resulted in fewer SIDS over the past 30 years [1].

Introducing new technology, or techniques, regardless of how absurd it appears, needs the data to identify whether it really does have an improvement in child safety.

Simply saying my generation (born in the 80's) turned out just fine so why change is actually incorrect. The rate of deaths was higher in the 80's compared to now and changes were made in advice that has reduced death rates.

Technology could be used to reduce this further, but we don't know until we have the data. Do I think it's likely that an IoT onesie will make a difference? Not really, purely because the cost and adoption rate would probably make it impossible to detect its impact as safety concious parents who would buy it would probably have mitigated most risks anyway. The chance of getting a significant number of would-be SIDS outcomes to be using such a device would, in my opinion, be extremely small.

[1] http://www.babywill.org/sids-information/what-is-sids/sids-s...
That's what I thought at first but if you search for a country then drag it around, it will change its size as you get closer to or further away from the equator so it takes the distortion into account. So maybe pointing out the distortion in the Mercator projection is part of the point?
No.

If it was first in, last out it wouldn't be a queue, it would be a stack.

Come on, author, this is literally computer science 101.
I am teaching Computer Graphics for about the 15th time this fall. I have always wanted to to an animation of the GL pipeline -- I think it would explain a lot -- maybe this will inspire me to do so.

The problem, is soon as I finish, the pipeline will change, technology will switch, and it will soon be archaic. This is a huge amount of work!

I applaud the herculean effort and great result.
As a teacher I've looked into TpT in the past, but as an end-user it has rarely saved me any time or effort. At best, documents could provide fresh ideas - but document discoverability + adaptability feel severely inadequate.

What the success of this site does speak to is an underlaying desire by educators to have a shared resource for the rapid creation/adaptation/implementation of curriculum materials.

Teaching still remains a craft-based occupation and experienced educators naturally want to individually create their own curriculum materials; however, I believe this has less to do with the inherent inadequacy of shared documents then it is the cumbersome nature of adapting someone else's documents to your purposes. A strong teacher creates their curriculum documents based on the specific needs/interests of their students (not the ones down the hall, or the ones from last year) so even with the 'best' lesson materials they will need the documents to remain flexible.

Yes - a Word .doc does this to a point, but even fighting the oddities of formatting can be a sufficient enough time-suck to abandon the document and begin from scratch. The document format should instead be a combination of structural curricular patterns (sharable + driving discoverability through the assigned utility of a given pattern [e.g. discussion pattern for groups of four]) + instructor assigned style guide (largely automated in application based on instructors previous style/formatting decisions). I couldn't care less about your font/color choices (which may conflict with customs in my classroom) - but I do care about the underlaying utility of your {activity, introduction, guide, etc.}.

If it doesn't save me time (in doing something I'm already capable of) or empower me to do something (I'm not otherwise able to do), then what's the point?
2) Golang depends on code generation for a lot of it's features. Executing generated code immediately could be helpful.

That's horrifying.
> These are odd facts, very suitable for puzzle columns and likely to amuse amateurs, but there is nothing in them which appeals to the mathematician.

I very much disagree with any statement which says a mathematical fact is unimportant. It is impossible to know which facts and theories will be useful in the future. People thought number theory and prime numbers was intellectual masturbation until cryptography and computers came about.

Any fact about numbers that someone can figure out is worth publishing, no matter how "useless" it seems.
The Arrakis team did it with Haproxy, Reddis, and Memcached, but in a research operating system:

http://people.inf.ethz.ch/troscoe/pubs/peter-arrakis-osdi14....

BSD has had userland networking for a while:

http://www.bsdcan.org/2014/schedule/events/447.en.html

I'm not sure if there's anything comparable for Linux.
I don't understand some of the herd mentality at airports.

For a long time, the budget airline Ryanair used to seat its planes first-come, first-served style. This meant everyone would stand and queue at the gate immediately, sometimes hours before the flight, just so they could get good seats. Fair enough, if that's what you want. But Ryanair switched to allocated seating over a year ago, and yet people still stand and queue long before the gate opens, even though there's little benefit. Can it be worth it just to get to your assigned seat slightly earlier?
The big threat to coral reefs is posed by ocean acidification and warming. In the long run, it's not about sea stars, it's about the very water in which corals live.

The gradual loss in hospitality of the oceans and the associated effects on marine life are among the most serious, rarely-mentioned environmental threats currently in existence.
There's definitely interest!
Why Some Security Experts Use Mutt
"Research has shown that users are already desensitized to privacy and security warnings."

This along with the quote below are my biggest takeaways from this article:

"it can be difficult to avoid information leakage through URLs or cookies or more sophisticated attacks."

People may not even realize they are giving the keys away until it's too late. It's unlikely that a dialog box for confirmation would be explicit anyway, especially if Ancestry and others stand to monetarily gain from your DNA.

Moreover, if you're a malicious actor you can simply display an ad from Ancestry and when you have a logged in user you could potentially identify a whole host of other information that can be associated with their email and other aspects of their identity. The malicious actor could resell this to even worse offenders.
Kippt is shutting down
Home automation always was and continues to be a puttering around hobby or suckers game.

A friend bought a house that had a late 70s state of the art home system. Central radio/vinyl/8track player, intercoms, and a broken CCTV setup. Also cool stuff like central vacuum.

The big difference between that house and the modern gadgetry is that the 70s stuff was hard wired and still works. None of the IoT crap that is on the market now will be completely unusable in a decade.
> I'd do it in a heartbeat

If the benefits aren't really significant why are you interested in doing so anonymously?
Hmmm, that's a good point. I was thinking more of a typical webapp, but you're probably right that there are certain classes of applications (e.g. caching) that are I/O bound under load.
Can't they just assign seat and board in strictly sorted order, queuing be damned?
Unreasonable Institute
Woz: Aaron Sorkin's Steve Jobs movie gets it right
I don't know how they managed to do it, but on the mobile version of the site, none of the useful links are actually links...
The examples seemed clear enough; I understood what they were in about 30 seconds, vs. a nearly 3 minute video.
The Organisation Song (Mr Wurr) [ridiculous Music Video]
SXSW – Before and After, Airbnb Price Surging
That might be tricky to measure, especially as it's not obvious whether your gate is going to be bus-loaded or just a walk to the plane.
You mean “pushing it forward in this particular direction”. Again, it's great to have people working on this and better if the companies using Linux support developers working on the problem but it's only a deal-breaker for a much smaller number of people.

Just to use an example which you see a lot today: how many of the developers jumping on Docker care that much about network performance at this level? I would argue that continued development of the container system has done more to boost Linux usage than low-level networking performance, even though both are entirely legitimate and worthwhile concerns worth developer sponsorship. (ZFS has pulled in the opposite direction for people who care about storage)

From the other direction, imagine if *BSD had gotten serious about package management by the mid-to-late 90s when it was obvious how much better the experience was on Debian so that a generation of developers wasn't trained to favor Linux to avoid getting sucked into dependency management. That doesn't have anything to do with the kernel but it mattered more for many, many people. This would have been really interesting if kfreebsd had hit critical mass and made the cost of switching that much lower.
Maboo Interviews Tedde
Your links redirect me to your German site, just FYI
"All these pants have 3 holes, some sort of fastening/cinching mechanism, and the layout's basically the same in each case!"
I prefer desktops. When I leave the office I don't want to take my work with me. When I've had them (desktops) I've always felt a better/healthier segmentation in my life.
It's not really ironic though. This is a site for discussing articles. Having to pay to play really ruins the experience and excludes a lot of valuable discussion.

Nobody cares about sites trying to make money. What people complain about is when it means an HN reader has to directly pay to participate.
Again: the dominant factor in reducing infant mortality in the US has been prenatal care. Infant mortality in the sense described upthread is not about SIDS.

The latter half of your comment is a bit hand-wavy. "Purely" because of adoption numbers? What does a "smart onesie" actually have to do with SIDS? Companies have been selling ever-more-complicated baby monitors to parents for years using fear of SIDS, but SIDS is not a problem of monitoring.
There are no instructions because the code exec method is not (yet?) public. The exploit is, but not the payload to run applications. There is no announced release date for code exec method, or indeed announced plans to release, as far as I am aware.
Lawrence Lessig is running for President
The Atlas of Beauty
C++ - "A tour of C++"

http://www.amazon.com/Tour-C--Depth/dp/0321958314

I read this book after having programmed C++ with the common "C++ is C with classes" attitude for a while, and it really made me change the way I looked at this language.

It was the book that made me realize how beautiful the RAII idiom is, that the STL was clearly not hacked together by a bunch of crazy monkeys, that you rarely need raw pointers in your code and that -- in contrast to popular belief -- you seldom need to care about memory management.

When I finished that book, and though in the full knowledge that I was dealing with this ugly monster of the Frankenstein kind; just like at the end of "the beauty and the beast", I had somehow come to respect and appreciate that language.
the whole list at http://yclist.com/
If the WiFi drops out, can you retrieve your trash and throw it back in the street?
Mining Secret API Keys from GitHub
> If I could do so anonymously, I'd do it in a heartbeat

You can. See "How to use 23andMe without violating your genetic privacy", https://www.abine.com/blog/2013/23andme-without-violating-yo....
I agree with nearly everything you have said except for:

> and don't get me started on the smart baby monitors, etc... if my siblings an I were brought up just fine in the 80's without being in a "smart onesie", I'm sure we can do just as fine today.

I even agree that the baby monitor mentioned is a little over the top (I don't care for the lights/music/coffee aspect) but it's important not to write things off just because "I was raised just fine without X". That logic doesn't hold for most things. And for high-risk babies that onesie is probably multitudes of times cheaper than expensive medical equipment to do the same level of monitoring.

(Sad Personal Anecdote Below)

My youngest sister died when she was very young (<2 mo old) due to a medical condition (birth defect). Now this isn't to say that this product would have saved her life. In fact I'm nearly 100% positive it wouldn't have. My parents were already awake due to me waking up from a bad dream and so my mom caught her stopping breathing probably almost immediately and we lived next door to a doctor who was over within minutes before she was rushed off to the hospital. She still died but I can't help but think that while she couldn't be saved there are other babies and young children out there that could be saved from such a device. Also there is nothing to say that constant monitoring wouldn't have caught signs of this a little earlier allowing my parents enough time to get her to professionals. All I'm saying is don't write off this just because you "got by fine without it".
It's "Nitrokey"!
The only type of people that door locks keep out, are mostly honest people. That's why fingerprint locks are mostly about convenience, not drastically boosted security.

If you have a normal door lock, a professional thief of the sort that would be able to (or try to) steal + use your fingerprint is already a threat. It's no worse than the ways a pro can break into your house without a fingerprint lock.

If someone has procured your finger print, and is now targeting your house, you've got much bigger problems than what a key lock can prevent. It means you're being specifically targeted, they've cased you and your house.
I propose one simple reform. The grant-giving institutions are currently (in the aggregate) spending $X of money per year to pay the salary of various people. Some of these people are employed as tenured professors, some as non-yet-tenured tenure track professors, some as postdocs, some as students. The salary of the postdocs and students (if any) is coming entirely from the $X, the salary of the professors is coming partly from interest on the schools' endowments. The number of postdocs and students is (almost) directly proportional to $X.

The proposal: the grant-giving institution instead earmark Z% of $X for endowing new tenured professor chairs at the schools.

This reduces the ratio of (postdocs + students) per professor. In the extreme case, if all institutions set Z=100%, there would be only professors and no students or postdocs; the number of professors would be less than the number of professors+postdocs+students is today, but this number would be growing at a substantially faster rate (there will be some critical value of Z, large but <100%, such that the the number of students funded is roughly equal to or slightly greater than the replacement rate of retiring professors). Note that this is not all-or-nothing; you can incrementally convince one grant-giving institution at a time to implement this reform, with Z set at various levels, and see incremental benefits.
Hi, fair points, I would agree Lattice out of the box is not quite ready for production usage, mainly because it has stripped out a lot of the security/multi-tenant features from Cloud Foundry to simplify the experience.

That said I would say it is just a matter of time (this Fall) however. I mentioned it because it is a way to wrap one's head around Cloud Foundry ; really the production alternative to K8S is Cloud Foundry today, depending on your goal. (If you must have rootfs control and Docker, then no. If you want to stage/run your app in a scalable, reliable container scheduler with a set rootfs then yes.)

As for Garden containers, yes, the main issue has been security -related gaps between Docker images and the Garden runtime, as Garden locks things down differently. Most (not all) of these have been fixed in recent builds, as the push for Diego GA in Cloud Foundry gets close over the next few weeks.
this is a joke right?
Man who stole indias past
Agreed. I do wish that on projects--both commercial and individual--when the owners have decided not to continue contributing, they'd put a note to that effect.

A lot of times it's hard to tell if, say, there's been no dev activity for six months, whether the project is just temporarily quiescent or whether the owner has decided to move on to other things.
Can anyone speak to the difficulty of homebrew automating some very simple processes?

For instance, I have no interest in buying into an ecosystem or any sort of smart appliance - but I would love to have low-watt floor lights turn on as I half-asleep stumble to the kitchen for a glass of water at 3am.

I want my idiosyncratic needs to drive 'smart' home additions - not the shared needs of target population Y.

Is there a community around this sort of thing I could link up with?