skysight-inc/HackerNews huggingface dataset:
The NSA did its best on INFOSEC back in the days of Walker's Computer Security Initiative:

http://lukemuehlhauser.com/wp-content/uploads/Bell-Looking-B...

Many systems, under A1 label, were created back then which defeated NSA pentesters. NSA was mainly evaluator rather than developer, but developed some interesting tech of their own. EKMS for key management and especially the inline-media encryptor come to mind. My own IME designs were based on theirs.

https://www.nsa.gov/ia/programs/inline_media_encryptor/

However, most of the developments came from computer science, U.S. military organizations, and defence contractors. They produced a lot of secure technology. People in NSA's IAD helped where possible. Those same methods are used on select systems today although NSA is fast-tracking everything now for some reason at low-assurance. Probably part of BULLRUN.

Anyway, NSA could easily offer good INFOSEC by just applying what's proven to work to various use cases as Bell said. Anyone could. Some did to varying degrees: Sentinel's HYDRA firewall, GEMSOS's thin clients, Mikro-SINA VPN, Secure64's SourceT OS for DNS, and so on. Each of these either had clear security improvements or did vastly better on penetration tests with GEMSOS and HYDRA surviving NSA pentests with much praise from evaluators.

So, people wanting security should just apply what works to every part of the stack. Won't be easy. Will take time. Will probably be incremental. Nonetheless, insecure protocols, monolithic kernels, C libraries... these things have never worked and never will. Just doing the opposite of mainstream in key areas will get one far. Imitating the best of the past will get you really far. And the hardware is the most important battle from there as I said in counterpoint to Dan Geer.

https://www.schneier.com/blog/archives/2014/04/dan_geer_on_h...

So, screw Alexander's outfit. Nobody needs it: just lessons NSA and others taught us long ago plus what we've learned in mean time. So, use them instead and save yourself the consulting fee. You'll need it for the premium that real security costs you. ;)
They should start then considering owning their operations or assets and not renting them like what happened with Homejoy. It seemed at least from this analysis to me that they were on the fence all the time torn between going full-scale and building a reputable home cleaning business that's adequately equipped for the 21st century life or keep feeding off those maids through commissions into perpetuity which is totally unrealistic in my opinion.

This indecisiveness and the lack of vision or clarity of business goals really cost the company very dearly in execution and contributed to their demise
The thing that has helped me the most is reading CSS. It's a lot easier to write CSS than it is to read it. Start with CSS you already have that works and re-type that into a new file and you'll soon start experimenting with what you can leave out, or just what does what.

One thing that really helps me read code is using a syntax-highlighting editor with a decent colour theme. You don't need auto suggesting, automatic tag closing, or anything. Every keystroke you press on the keyboard should map to one character being added or removed from your document.

Soon you'll find a formatting style that helps you quickly scan and read. For quickly skimming CSS it's best if it's all on one level. Selectors can be long, so starting them at arbitrary indents makes it a mess.

What they mean by nesting would be grouping 'blocks' of CSS together by indenting them. This might be one way somebody would nest button hover state under a CSS rule for a button:

button {
background: darkgreen;
}
button:hover {
background: green;
}

This is a super clean example, but in a big CSS file it can get pretty messy pretty quickly.
The Shocking Mediocrity of Islamic State 'hacker' Junaid Hussain
A formal requirement isn't what engineers are against. Dressing up and getting management attention because of it is a positional good, and they're enforcing a clique of "if nobody dresses up, nobody has to dress up or get ignored by management."
This raises an interesting thought in my mind. While the stresses of long-ago might have been more easily life ending, I wonder if people of long-ago laid in bed at night worrying about getting a broken bone.

Lethal stresses have the added benefit of preventing further reproduction, so we probably don't need to consider them in this scope.

While I agree conditions are pretty good for a lot of people, especially in countries like Australia where I live, people do seem to find a lot to worry about.

The non-lethal stressors are the ones we have to worry about. Or shouldn't worry about, as the evidence may suggest.
https://github.com/eBay/fabio might also be an option for you.

Disclosure: I'm the author.
These security measures can backfire too:

http://time.com/3760424/germanwings-plane-crash-locked-cockp...
Completely Irrelevant: How do you have 2,000+ karma when your account was created nine days ago and have two comments and zero submissions?
I am going to bet that he doesn't actually know the details of any of those vulnerabilities. He was the head of the entire agency, not a technical guy. He probably know that something was done, but not how it was implemented on a technical and usable level.
Do higher interest rates raise or lower inflation?
Vue.js 1.0.0 Released
Why single out Microsoft here? Which other commercial vendor is going out of their way to enable bootstrapping OSS code on their platform?
RankBrain is at the front, query-interpretation end. PageRank is at the back end, for picking pages which reasonably match the query.

Does RankBrain have an intermediate form which shows its interpretation of the query? Wolfram Alpha does, and will show an explanation of how it interpreted the query. (It has to, because it may give you an numeric answer). It would be useful for Google to tell you what question they think you are asking.
This report directly disagrees with Further, at the time of its commissioning, the tsunami it experienced was accepted by the best engineering data at the time to be impossible. Directly.

This part uses scare quotes to describe the 'quality' of the work:

Its initial application was based on the 3.122 m measurement local tsunami height (above Onahama Peil (O.P.) reference sea level), observed during the 1960 Great Chilean tsunami at or close to Fukushima [32]. The flooding estimate was provided to the nearest millimetre, underscoring a false sense of accuracy in the safety assessment that is impossible even today. With hindsight, it also underscores the ‘quality’ of the engineering work and of its review.
Funny how things circle and change, and sometimes, like political parties, end up flipping completely over a generation or two.

I suppose the original reason tech rebelled against the suit was because a suit represented conformity, an aggressively enforced dress code. Now, I suppose you could say that tech aggressively enforces a casual dress code, to the point where wearing a suit becomes an act non-conformity. I'm not joking here, the blog post is absolutely right, wearing a suit may seem mildly eccentric in a tech company. I see various people (including coworkers) wearing suits, and there is a counter-culture element to it. Suits are worn in different forms at the Dickens fair, by jazz and ska musicians (and people in the audience), and by other counter-cultural types (there was a guy who worked at Peet's coffee who always wore a suit and bowler hat).

SF is a place where this is particularly mixed up, since SF was probably the most east coast-ish of west coast cities where it came to wearing suits as part of the old dress code, and there are still a few more conservative industries here (banking, law) where suits are work as part of the older formal work culture than a new countercultural trend.

As for me? I like suits, I think they look great. I have never been required to wear a suit to work, so I never really associated them with conformity (I wore them mainly at weddings and a very few parties, so I have positive connotations). Like Greg Foster (author of the post), people would give me a strange look if I wore a suit to the office, but now that I think about it, there actually is one guy who wears a suit to the office every day...
Not sure what you're implying here. Are you saying Medium loads slowly or the fact that they used Closure makes the site load slowly?
Perhaps dreaming smaller should be considered. In the end $1000 in recurring income can still make a difference, and is better than almost-billion-dollar-idea.
Nice! Was this done during the Berline refugee hackathon?
To be fair, football is already the most cable-cutter friendly sport there is. I can watch every game except for MNF using just my antenna.
Impostor syndrome
I have read that many times, and it makes some sense. The issue with this line of reasoning is that the move would be a design change which is not required by the specification (as I have read and understood it), which would have been seen as unnecessary waste at the time.

A study which I would find more important and useful than the one here would be a cost/benefit analysis of increasing all specifications relating to all (similar) low probability events. In other words, if you had been a designer of the plant looking to spend an extra $500000 to make the plant safer, would you have spent it on moving the generators? How many other contingencies would have been higher priorities than this one (if any)? What would be the total cost/benefit of applying this heightened standard to all new facilities? Would this be statistical murder?
isn't the lack of tooling primarily due to the fact that it is very early? I would expect all of that to improve in the future
The company I work for is extremely casual, but there are couple who wear suits to work every day (though sans tie) and nobody much care. That said if wear a suit at a conference then my first guess is not that you are a programmer, unless you do something else to highlight that you code for a living.
Apple investing in Webkit again?
What were you watching on? I was just using my basic wifi and the streaming was unsurpassed.
>My only option is shady SD streams. It's better than nothing, but I'm willing to throw money at the problem if they'll let me.

>I don't have a legal option to watch my team play unless I grab an overpriced cable/satellite plan that I don't want.

Sounds like you do have another option! (DirecTV pays the NFL 1.5 billion dollars a year to be able to offer you that overpriced plan.)
Doesn't matter. It's the "reflections on trusting trust" kind of thing - we, our parents, grandparents, etc. form a chain; some runtime modifications to replication mechanism could propagate forward indefinitely, without changing the DNA in the process.
Diceware password shop
No, the virtual DOM and the Shadow DOM are distinct concepts.

The virtual DOM is a parallel representation of the DOM which is used to diff against—it's only used for "logic" rather than display.

The Shadow DOM is actually almost the opposite: it replaces the visual/interactive presentation of the tree without changing the exposure of the underlying elements to the rest of the page.

That being said, they bother offer mechanisms for writing modularized frontend code effectively.
Sure, throw enough bodies at something and they'll get it done. But I don't think most parents are looking to play the odds so brashly, nor most modern organizers of any activity or goal.
> actual software engineering principles to building websites

What are the actual software engineering principles Polymer enables developers to apply?
Yes, clearly a baity title. We changed the HN title to better reflect what the article argues.

The argument itself is interesting, so let's all focus on that now.
Yes how dare he complain?!

He pays taxes so some other non-contributing zero can reap all the rewards.
Of course it was, as were things like the explosions afterward.

However, management always gets in the way--either up front, because there is profit pressure, or on the backend, because there is profit and/or political pressure. This paper covers the up front failures.

However, backend failures, like spraying water on the core (NOT one of the established procedures because calm engineers knew that the reactor could dissociate the hydrogen and oxygen) rather than letting the core melt into the bottom of the containment area which was designed to deactivate and contain the core, were also rampant.

This was just like Three Mile Island. If people had sat on their hands, done nothing, and let the engineered last-chance safety systems do their job, things would have turned out better.

Reactors should not be for-profit. Rickover showed us all how to do it right, but we lack the stomach.

Here is his quote about real reactors: "On the other hand, a practical reactor plant can be distinguished by the following characteristics: (1) It is being built now. (2) It is behind schedule. (3) It is requiring an immense amount of development on apparently trivial items. Corrosion, in particular, is a problem. (4) It is very expensive. (5) It takes a long time to build because of the engineering development problems. (6) It is large. (7) It is heavy. (8) It is complicated."
- Instead of giving away supplies, raise the percentage of the fee that you pay out. Then buy bulk supplies and sell them to the cleaners at a discount.

- Partner with P&G and Unilever to get access to trial products that you can give to your cleaners to try

- Act as an agent to negotiate group rates on stuff like health insurance

- Provide business services if you book a certain number of appointments each year. Tax help, those kinds of things.

- Maybe you can provide access to events or something where Homejoy books a group of cleaners and since it's a business you can charge them good rates

- Find other way to book cushy jobs that you can give access to for your most used cleaners

Obviously there's a 1099 line that they don't want to cross but if you provide access and opportunities and tier it based on appointments booked then you provide incentives to stay on the platform.

Similarly for customers, do things like give away cleanings or discounts randomly. Use your partnerships from above to give customers free stuff or coupons. Sell cleanings in 10 packs or offer a monthly or annual subscription that comes with a discount.
The original rational thing to do would be for the person doing the hiring to just go and pay the $10/hour. "Because I like her" is not an economic justification for extra value.
Because I had an anonymous account so I did not contribute under my name. I asked if that could be corrected and it was.

Many women in IT chose to contribute anonymously. Recent articles on HN about the place of women and the lack of role models decided me to act.

If you have read the first comment I posted under my name, you already know :-)

As you were a bit puzzled by that, I added that piece of information to my account to avoid similar questions in the future.

EDIT only to realize my comment had now been downvoted. Still, I intend to participate under my name. Sorry for the irrelevance of this, I only wanted to answer your honest question.
> Having said that, I don't think Linux will be a good fit for this device. People will first have to reverse-engineer the locking mechanism (which is done in software in Windows).

The way MS has been acting lately it wouldn't even surprise me if they release Linux code for it, stating: People should use Windows because they want to, not because they have to, -anything else would be considered a failure.

I can dream... : )
A realistic option, then? I've no use for anything else that DirecTV has to offer. I've got Netflix and Hulu, so I'm set on TV shows and movies. Unless you think paying that much money just to watch football is a realistic option?
> filter_map(|x| foo(x))

Thanks :D

I've been really struggling to get iterators in rust. I don't have a very strong functional background :|
Honestly, that's what makes LaTeX great. Formatting is decoupled from content. If you want to make a formatting change, you can Google it and chances are that somebody else has done the same thing.
Why I Identify as a Mammal
Live configuration via the stats socket is frequently overlooked, but works a treat. I'd recommend investigating it before giving up on haproxy.
I'm guessing he'll just apply stuff they developed in NSA for NIDS, patch deployments, etc. Just a good HIPS (esp whitelisting) and patching knocks out 75% of so-called APT's per Australia's DSD. Good monitoring catches many of the rest eventually. Those by themselves, combined with NSA's improvements, would dramatically improve security for organizations that had little of it but lots of money.

Probably sells them on an image and liability benefit, too: "bank shouldn't be liable because we even went so far as putting former director of NSA in charge of our security. What more could we have done!?" Trying to counter liability in courts or with lobbying is main security model for big business. So, something like this is undoubtedly a benefit.
The Swift Reflection API and what you can do with it
This was originally in reply to a comment that was deleted before I was able to submit my response. I'm posting it anyway.

(I'm hoping it's okay that I quote from it. I won't mention the user's name. I'm not making this up, by the way.)

The general contractor I used for a house remodeling didn't
have, didn't need, and wouldn't benefit from a college
education. I, on the other hand, do happen to hold a college
education and benefited greatly from it (personal enjoyment,
most likely a higher salary, entrance into jobs otherwise
inaccessible to me). Should he have to subsidize my
education?

As a European, I get depressed whenever I see Americans complain about a certain percentage "subsidizing" some other percentage of the population, or talking about "wealth transfer". It's such an simplistic worldview that I don't know where to start. Equality isn't about fairness, it's about equalizing and elevating society as a whole.

For contrast, the American people also "subsidizes" weapons used to kill a percentage of the world's population (of innocent bystanders), and a lot of other things that are to the benefit or detriment to a highly asymmetric ratio of the population. A lot of people don't need to go space, a lot of people don't get cancer or other diseases that the government study.

Cherry-picking benefits is not on the table when you're talking about society-wide effects.
A photo caption from the article: "Silicon Valley vs Mad Men — who would you rather be?"

But Mad Men is a show largely about its characters' bad behavior--their casual bigotry, crass money-grubbing, etc. If you're wearing a suit because you want to be Don Draper, you're not just a poor interpreter of television; you're probably a pretty poor excuse for a person.

I don't have anything against suits, per se. I'd point out that there are a lot of points on the spectrum between full-casual and a suit, though. I tend to wear business casual; comfortable, flattering, not too expensive. But it feels pretty grotesque to complain that you're being discriminated against for choosing to wear expensive, tailored clothing, especially when there are people really suffering discrimination because of their gender or the color of their skin.
"There is a long, long list of the kinds of people I don’t befriend. I don’t generally befriend people with whom I don’t quickly click. I don’t befriend people with largely different sets of values, political views, interests, or senses of humor. I don’t befriend people from whom I get bad vibes. And, I don’t befriend people who I just don’t fucking like."

Somebody so deadset against getting along with people and making friends probably shouldn't be surprised or angry that her coworker is concerned that they aren't getting along.
cf. https://en.wikipedia.org/wiki/1983_Soviet_nuclear_false_alar...
> "Too heavy" seems like it should be qualified—maybe you mean they are "too heavy to use for widget-level components in a web app with the current implementations"?

Current implementations yes but when browsers have 100% integration? I want to say yes but would love to say no. My biggest issues (latency, trying to concat and minify down and duplicative CSS) are not really addressed anywhere but until all browsers have the full implementation I can't say for sure I'll admit.

> I imagine for example Stripe's payment widget could be a pretty nice use case? In other words, higher-level widgets that are substantially encapsulated already, and are already often loaded as remote resources.

That seems like a great use case. I'd prefer, and probably most others, to host my own components versus externally referencing them but in some cases where you can't really get around it (I'm not familiar with Stripe's payment widget but Google Maps is certainly like this) I could see that being a good use case. Honestly that in and of itself may justify its existence but I'm just not convinced of its use fullness outside of that just yet.
I can't open it. Is the URL correct?
Docker security: making sure you get it right
/askforraise 10%
This is one of the shittiest password generators out there. Use two consecutive numbers and see how most of the generated password is so same.
Just to set the record straight, part of the reason we have so few cases of infant botulism each year is that pediatricians actively recommend against feeding honey to kids under 1 year old. There aren't really any immunological benefits to early honey, so it really is an unnecessary risk. Please don't recommend people disregard medical advice that is there for good reasons.

http://kidshealth.org/parent/infections/bacterial_viral/botu...
> Vest and tie? Lookin' good.

No, this really looks genuinely terrible. Never wear a tie without a jacket.

http://putthison.com/post/29635680290/q-and-answer-when-can-...

> The answer is pretty much “I work at a cell phone store.”

(vest without jacket is just as bad, except it's "I'm a waiter")
No, privilege assertion is showing up to the office in pajamas.
Not sure why this got posted, but the gist of it is:

LLVM has reasonable reasons to want to move to either a CLA or straight Apache license (which has a CLA built in).

Then the discussion bifurcates into both a ton of armchair lawyering, and an IMHO reasonable discussion of the merits of each option.
For that one there should be altitude mapping.
Oracle releases new JavaScript framework
Why do you hesitate to call their involvement coerced? Everything Facebook has done post-revelation has been pretty combative toward the program. Facebook has spent substantial time lobbying against SOPA/CISPA and related legislation.

Facebook company officers even presented in front of Congress to protest the U.S. government's surveillance programs (since it negatively impacts business).

All I read from your comment is unsubstantiated speculation. What's the basis of your assertion? Smearing an SV company on Hacker News shouldn't go unchallenged.
(I think you mean a clipboard, not a paperclip.)
So are fonts for Japanese and Chinese.

Font designers have to literally author each letter and there are thousands of them...

Fortunately, there are enough interests in Japanese fonts, so there are varieties of them. The problem is that many of them are fairly expensive to license perhaps because of work involved making them. (Thus, most of people use ones come with the OS; in case of OS X, they bundle premium fonts. Japanese government also distributes free fonts,[0]) I don't know the situation for Chinese, but probably similar situation.

[0]: http://ipafont.ipa.go.jp/
Show HN: I Created an Online Store with Jekyll and Stripe on GitHub Pages
Perhaps counterintuitively, but I actually find this somewhat reassuring - another example of regular soldiers declining to initiate a nuclear war. Yeah, the magnitude of the mistake is awful, but the final failsafe (ie, human conscience) seems to work. See also Vasili Arkhipov, Stanislav Petrov, etc.