skysight-inc/HackerNews huggingface dataset:
The release few weeks ago was "Technical Preview".

Now Relay and GraphQL have been officially released and moved out of tech preview.
It's scary how easy it is to add new roots on all major platforms. You just click on the CA link and get a response with the appropriate MIME type back, then:

* Windows gives you a helpful little wizard wherein you click "next" a few times.

* Firefox gives you a dialog with 3 checkboxes; check them and click okay.

* iOS sends you to settings, and asks you if you want to trust the given CA.

* OS X hands it to Keychain Access, where you have to select 'trust' from a dropdown and maybe enter a keychain password; it's a bit less intuitive.

* Chrome uses the OS trust store, so it hands it off to the OS while claiming it's a dangerous filetype.
That's fine. I've got no problem with making that distinction. But if we do, then 95% of the people who are currently taking CS should be in SE programs.

Note: 95% is a number pulled from absolutely nowhere, but I think it's of about the right order. It expresses the idea that most people are not going to go on to academic CS careers, and therefore need different training.
And this is the popup that plugin gives you when you click the button to save the master password: http://i.imgur.com/s0FgRhI.jpg
When each of my daughters turned 10 (within the last 10 years or so) I gave each of them a TRS-80 Model 100 and taught them basic. One really took to it and used it to write software for a science fair project on genetics - the judges were of the right age to appreciate it (although she didn't win anything!)

In any case, its a lovely computer with a pixel addressable display, which was perfect for doing newtonian physics demos for extra credit in high school physics...

(But they make lousy terminals at 40 col.)
Now that's a statement i'm willing to agree with :)
> I think you underestimate how much people (at least 30 and older, but a good number under 30 also) like owning their own cars and driving them.

Do people like other things as well? Assuming you don't eat, use your laptop, watch a movie, read a book, or play video games currently while you drive, not having to drive so you can do these other things can be appealing. Especially when it's the same braindead commute to/from work every day, day after day.
FWIW, the quantum nature of reality is harnessed by biological processes (see photosynthesis, for example[0]), and our attempts at modeling brains using classical computers have been remarkably inefficient, so far (compare the energy required by the server farm that simulates a mouse brain vs your metabolism).

I wouldn't be surprised if it turned out that cognition relied on quantum phenomena as well.

0. http://www.nature.com/ncomms/2014/140109/ncomms4012/full/nco...
It’s not certain yet that this is an antedating. OED editor Jesse Sheidlower calls it ‘putative’: https://twitter.com/jessesheidlower/status/64305138542510899... and slang lexicographer Jonathon Green concurs but finds it probable: https://twitter.com/MisterSlang/status/643060037221515264

If it is, it’s big news. But bear in mind that ‘John le Fucker’, recorded 1278, (https://en.wikipedia.org/wiki/John_le_Fucker) would be a further antedating from a personal name if it were somehow to be confirmed as a use of the word.
These are great shots, but there's something about them that says "not a DSLR" to me. I'm not sure if it's the color reproduction or the slight chromatic aberration on everything (the clouds in the top half of the landscape scream at me and the hard edge transitions from the child to the chair and from the chair to the wall make everything look like photoshop layers).

But I also think you're right, 90% of people won't notice or care, and that's good enough. MP3 does a similar kind of reproductive job and 90% of people don't care either. It's "good enough" and it lets everybody have cameras on them at all times and that's what's important. You won't miss important moments.
Same thing.

I'm using Linux and my /home directory is encrypted. My laptop automatically logs out after a pretty short inactivity (2 minutes, unless I'm using certain apps like VLC in which case, it logs out after half an hour) essentially locking the access to my /home directory.

With that being said, having to type in my master password over and over again seems like a bit of an overkill.
Prediksi Real Madrid vs. Shakhtar Donetsk
Why is the relationship with key decision makers considered corruption?

I get it's not "expertise", but I don't get why it's corruption either.
> Even on the fastest phones, web-based (including wrapped web components) simply don't offer the native experience. They come close, but there's always a slight but perceptible performance difference

Honestly I used to believe this, but not after the release of the iPhone 5 and 6. Though there is no perceptible difference, it takes a lot of work to mimic the UI in terms of animations, opacity, and response actions, so most apps just use the default web technology which include things like a built-in 300ms delay, no response to clicking a link, etc.
Haha, so true. Have an upvote
Yep, GraphQL is agnostic as to how your data is stored. For example, https://github.com/graphql/swapi-graphql/ is a GraphQL schema that is backed by the swapi.co API. The examples at https://github.com/graphql/graphql-js/blob/master/src/__test... are backed by in-memory JSON objects. At Facebook, we have GraphQL types backed by data stored in a number of backends, including types backed by SQL tables.
If you look at facebook's Relay implementation the graphql queries are indeed sent as POSTs.

https://github.com/facebook/relay/blob/master/src/network-la...
What about inequality operators (>, >=, <, <=)?

What about complex predicates (and, or)?

The language seems rather limited.
I think people are making too big of a deal of SSL. So what if my browser connection to Target or Home Depot is encrypted?
The other side of that argument is that if your registrar is also your CA, they have the ability to give bogus SSL certs to an evil server and the ability to direct your domain to that evil server.
Misused English words and expressions in EU publications [pdf]
A quick search yields this: http://knowyourmeme.com/memes/katy-t3h-pengu1n-of-d00m
Ionic has started to feel native only recently, but I agree that React Native for iOS (and now Android) sounds like a superior alternative. I'm very tempted to try it in my next project.
My biggest issue with LastPass is that they force you to have the _same_ password for your online account and as the master password for your vault.

To have a secure master password, you do not want to be using it to login to their website, because now you are blindly hoping they aren't having it logged somewhere or retained in memory that can be dumped.
If you stick with the tools which actually don't abstract the native platforms (e.g. RoboVM and Xamarin), I think you will learn native development quite easily. I've taken this approach, and I've had no trouble using documentation/StackOverflow to write equivalent code in Java/C#. Since pretty much all the APIs in these tools are 1-1 with the native APIs, I've also had no trouble going in the reverse direction and writing Swift/Objective-C/Java. You will still need to learn the languages, but you won't need to re-learn the APIs (which is the time consuming part).

Personally, I see little to no disadvantage with using these particular types of tools, especially if it means you can use languages like Scala, C#, and F# instead of Objective-C and Java.
I wonder how access controls will work in GraphQL/Relay.
I can't help but recall the lyrics from https://www.youtube.com/watch?v=yhUsPROdgYc regarding this.

(explicit content - sorry linking if it offends anyone - just seams on point :)
sucralose?
Interestingly, the linked article isn't actually available inside of mainland China at the moment. Maybe they're not running their own blog through the China-enabled portion of their CDN?
We're going to be actively encouraging our enterprise clients to use Logrr (http://logrr.com/) to eliminate their password completely in favor of on device cryptography. It's the only way to avoid the vulnerability of password's entirely that I've seen.
Well this guys build a wireless guitar interface, they talk about ~2.5 ms latency, 15 hours operation per charge. But it's expensive 430GBP.

http://www.stageclix.com/images/stories/PDF-Files/Performing...

But they are using basically $2 microcontorllers(from nordic semi) and a bit of analog electronics - so the potential for cost reduction is quite large.
Virtualizing OS X Yosemite on Proxmox
Well that sucks.
GraphQL queries are hierarchical so that the response mirrors the structure of the query. We found that there were needs of the query (query parameters and directives, for example) that didn't feel ideally represented in JSON, which is why we have a different syntax.

We've got a reference lexer and parser in JS at https://github.com/graphql/graphql-js/tree/master/src/langua..., and we have a parser in C++ with C and C++ APIs (that can be used to build a parser for other languages) at https://github.com/graphql/libgraphqlparser.
Ah it was the old US Airways Trial Preferred promo (where you paid $200, then had 90 days to earn 30,000 miles after which you were given US Airways Chairman's Preferred status (their top tier). The US Dividend Miles was subsumed into American AAdvantage they parlayed that into AA EXP. Long dead now, sadly.
> If your request data might be bigger then it needs to be in a POST.

Ok. I was hoping things had gotten better.
I'm reminded of the textbook Axiomatic Set Theory by Suppes, which has on page 137 a proof that 3 + 1 = 4.
Unusable is a bit extreme a description but I also experience the comparatively slow scrolling. It's worse at the top of the page.

It's not a Mac thing like other commenters suspect---I'm on Linux, using Firefox.
One thing I found out (well, actually, just asked them) last year is this[0].

Basically, even though they are claiming not to send your password to the server, if you open their security check:

> Once the master password is entered on the security check page, it decrypts your data (login and passwords) and send the length and character to our server for analysis then send you the result.

So, practically, they're not sending your passwords per se, but they are sending the length and characters used?

[0] https://lastpass.com/my.php?token=T1KUZTUH78P7&lpnorefresh=1
"Simple" in the sense it's minimal, not as in "easy to grasp".
The GraphQL API acts as a layer atop application code; it assumes that the application code takes care of any access controls (since those access controls would apply to anyone querying that data, not just GraphQL). So there's nothing for access control built-in to GraphQL, but GraphQL can map to arbitrary access controls that exist in the application layer.

The GraphQL server can pass down authentication information through the query using `rootValue` (for example, it might pass the OAuth access token that the client provided in the request), which the mapping from GraphQL-to-application-code can pass to the application code's access controls.
They can already do that, as they could temporarily hijack your NS records and buy a cert somewhere else. If you can't trust your registrar, you have bigger problems (I'd say "all is lost")

On the flipside, having a registar act as the only valid CA would mean that choosing a trustworthy registrar suddenly has real value. Power users could make an educated opinion on the trustworthyness of a given domain validated CA. Domain owners could be sure they're not at risk for how in the current system, an adversarity could get a valid parallel SSL certificate from a sloppy bargain-bin CA, even if the domain owner picked the most expensive and diligent CA and registrar for themselves.
Ahh, roger - sorry about that.

Although arguably a more readable bill of rights is usable in a larger way. :-)
In the words of Vice President Joe Biden, "This is a big fucking deal."
This looks excellent! Signed up for the newsletter. Can't wait to hear more. Do you have any other available info beyond what is on the site?
I'd like to read more about the backing data stores. If you're aggregating data across a lot of different stores, it seems you could easily add what looks like a tiny piece of data to your query, but, in truth, is much more expensive on the backend.
Sadly (?), it may be reasonable for password managers to not even offer that option because of technically-invalid PR fiascos like this one -- people are just going to stop using password managers otherwise.
Air pressure is an abstraction over movement of air particles. What a low pressure area is is fewer air molecules hitting the surface, while high pressure is more air molecules hitting the surface. So when you have more air molecules hitting the downward-facing surface, the wing pushes more air molecules down than it pushes upwards.

The air-pressure explanation and the "throwing air" explanation is basically the same thing.
The vast majority of lift for flight is achieved by pretty much throwing air down, the Bernoilli Principle is outdated as a theory behind flight (as can be demonstrated by flat-winged flight or inverted flight which shouldn't work without the pressure differential)

See: http://home.comcast.net/~clipper-108/lift.pdf

Or:

http://physics.stackexchange.com/questions/290/what-really-a...
Anonymous vehicular travel is dead or soon-to-be-dead anyway. Police are routinely using license plate scanners for parking enforcement and for checking vehicle alert status. Toll facilities are using license plate scanning to bill you for congestion fees. Smart phone apps report your whereabouts sometimes by choice, sometimes not.

This isn't to say that pervasive tracking of individuals' whereabouts isn't a problem. I just think that self-driving cars aren't going to make the situation any worse than it is / will already be (exact timing is modulo your present jurisdiction).
Of course it's new. It's new since there are free certificates. Before, you had to pay, always. The amount was irrelevant, but you had to show your credit card. You had to prove your identity. That's a whole new felony there: stolen ID, carding, etc.
I do mileage runs one a year on a few different airlines and have a lot of fun plus get all my reading done! To each his own, I guess.

I'm a United Global Service (which is based on spend, not miles, ~$80K/year gets you that) from business travel that's paid for by my clients, but for other airlines (AA) if I'm on the border of making "status" I will do a mileage run if I can.
How safe can artificial intelligence be?
Less than a year ago, Quirky announced a "hackathon" where people could come to their office and hack on their products. We had to sign an NDA before attending. I went, as did several dozen others - most of the attendees being programmers.

We arrived, in the midst of a massive downpour of rain, and had to stand in their hallway for about 15 minutes. Then they told us that the hackathon had been cancelled, but they would try to throw together a little presentation for us.

So what I know of Quirky is this - they announce a hackathon so programmers can try their products, then cancel it that day. They take this person's money for some merchandise, then ship it out weeks after it is expected. Now we learn, without much surprise, that the company is failing.

This goes along with another point which I've come to believe from my experiences over the years - that a company that just does its job is already ahead of a significant number of its competitors. Just do what you say you'll do - and you're already way ahead. If you announce a hackathon so programmers can try your products - don't cancel it the same day. If you take someone's money to ship merchandise out - don't ship it five weeks after they expect it.

I called a medium-sized server colocation facility in New York in 1998, because our company was interested in hosting a cage with server racks there. I called the sales team and did not get a call back that day, nor the next day, nor the next day. I also called a number of other colocation facilities, all of which got back to me, and one of which we chose and gave however many thousands or tens of thousands of dollars a month to. About a month after I made the initial call, and a few days after we had made our selection and were closing a deal with one of their competitors, the unreachable colo company calls me back up finally. I told them we had already selected a competitor and they hung up. Then a few months later they called back and asked if we needed colo space. I said we already had our machines elsewhere and were happy with their competitor. Then they called again a few months later, really laying on the thick sales talk and pot sweeteners.

Just call me back in the first place! If they had called me back the next day, or the next week, we very may well have given them the contract for tens of thousands. If you get a hot lead (we called them), because we want to sign a contract giving your company tens of thousands of dollars a month - just call us back! By the next day, or at least within a few days. Amazingly, some companies don't do this. Not surprisingly, the company which did this went bankrupt in early 2002.
Welcome to the Block Party: the internet after ad blocking
Why Search is broken and how we intend to fix it
When building out a GraphQL schema, the schema developer chooses which functionality to expose to the client. So rather than having the client do operations or predicates directly, the server declares what functionality is available, and might expose functionality that ordinarily would have used operators or predicates.

For example, we might have the following query on Facebook's GraphQL schema:

{
user(id: 4) {
followers(isViewerFriend: true, birthdaysInRange: {before: -2, after: 2} orderBy:NAME) {
name
}
}
}

EDIT: fix code formatting

Which fetches Zuck's followers, and filters it to only my friends, and only those friends whose birthdays are within two days of today, and then orders them by name.

The `isViewerFriend`, `birthdaysInRange` and `orderBy` parameters were explicitly added to the API by the API developer for clients to use.

So clients don't have the ability to do arbitrary operators, but we also know that the client is only using functionality in the API that the API developer chose explicitly to allow.
How can you say "these people are annoying?"

He seemed to have fun, and the staff at the rental car company enjoyed interacting with him.

And I don't think this man did his mileage run to "protest" anything. He's probably a big fan of air travel, airports, and car rental companies and enjoys traveling.
These shameless plugs are getting really annoying. We know about you

I for one had never heard of these guys and appreciate the mention. Besides, as far as I can recall, it's never been considered problematic to promote your own service on HN as long as the mention is topical and done tastefully.
many people have a 15-year old view of Los Angeles, and downtown in particular.

LA is one of the (imo the) great cities of the future and
will be the biggest benefactor of the transition to self-driving cars and multi-modal transport, when it's collection-of-villages-like-nature will flourish.

The city will be like living in many cities all at the same time that you can easily shuttle between (Long Beach, Pasadena, Venice, Santa Monica, Malibu, Downtown, Burbank, Noho, Manhattan Beach, Topanga, mid-Wilshire, Koreatown, Chinatown, Little Tokyo, Thaitown, Hollywood, etc.) The list goes on and on.

I know of no other place where each "neighborhood" feels as though it is its own city. Right now, due to the nature of transportation, this has MAJOR downsides. In the future, these will be massively mitigated and LA will become perhaps the most desirable place in the world to live.

To add one more example, LA has the best weather of any of the world's major cities. As the global population becomes increasingly mobile, weather will play a larger and larger factor of where people choose to settle.

On top of this, there is major investment in making sure LA sustains its role as the world entertainment capital as entertainment shifts to VR and is increasingly tech-based.

LA is also at the very forefront of the global shift toward increasingly healthy living. It's a city that may as well run on green juice. While at the moment this is trendy and cliche, soon it will be just how more and more people around the world eat. And much of this is invented and perfected in LA and SoCal in general.

LA is amazing. QED.
Did the Russians lose another submarine?
Even if your data isn't stored in a graph, it can be queried hierarchically, like a graph. Hence the name, GraphQL (as opposed to GraphDB).
In Chrome is better but still terrible :/
Oh, the commenter asked for the overly expensive EV type? Let's not be the devil's advocate. This is the wrong way to advertise. This is not the beginners corner. You advertise once, twice, three times, people remember, you can search HN - no need to annoy people till the end of the world. The company seems desperate for new business this way anyway.
Add iOS 9’s Quick Actions shortcut support in 15 minutes right now
Go get is a thin wrapper around git/hg/cvs/whatever. It's supposed to be used by developers, not end users. Note that your link is titled "How to write Go code". For distribution to end users just do whatever you'd do for a program written in C/C++/Java/Erlang/whatever. No need to rub your favorite programming language into your users' face constantly.

But yeah, there's a bunch of Go programmers (presumably those coming from Python or Ruby) that don't really seem to get that you don't need to put source code and a compiler onto your production servers.
Interesting. I wonder how that plays with caching. Most caches ignore POST requests.
What do you mean by >run it in a VM proxying network traffic via the compromised machine?
It's been 500 years since California has been this dry
The power of enforcement is given to those with power. The cartels hold more power (in dispensable cash, manpower, and weapons). They bribe whoever needs to be bribed to look the other way. Those who can't be bribed are threatened and everyone can be threatened. The brave and honest people get turned into examples... and with enough examples, there are no more brave and honest people left.

There are parts of the U.S that operate in the same manner. We have "bad cops" who use their position to help drug traffickers smuggle weapons and drugs. It's no different... you just hear it less in the media.
Great to hear that :) We plan on writing a series of blog posts to cover EdgeDB and some of the concepts behind it.
Yes they quote fuck verbatim but censor shit and fuck when they say it. Sidenote: Oh what a world when deplorable violence and torture and borderline pornographic scenes are okay to show on TV and yet swearing is very taboo (I first realized this watching the show Firefly)
Using Node.js with Parse
You need to drop the space after the 'script' element up there, but otherwise this is a great little tool. Thanks!
Looks awesome!

Does anyone know if there's an undo command for `$ letsencrypt run`?

I would love to try this, but too scared to do it and mess up with my nginx configs.
Seems like the target issue here is water scarcity. Indoor farms require considerably less water.
Motte and Bailey Doctrines
Smart Learning Internet Security Device Guards the Connected Home
Wrong. Laymen typically overestimate importance of force coming from
Bernoulli's principle. You could fly on a barn door if you had enough speed,
because attack angle is more important. Hint: why can planes fly upside down?

We still don't understand areodynamics fully, so you can't arbitrarily state
that difference between pressures above and below wings is the main force.

And no, I didn't downvote you.