skysight-inc/HackerNews huggingface dataset:
If certs would have included both MD5 and SHA1 signatures, and required both to match, would that have bought a lot of safety? What if another hash had been added too? Because then you'd need to find simultaneous collisions across multiple functions, which at least sounds a lot tougher. But perhaps not?
Saudi Hay Farm in Arizona Tests Supply of Groundwater
It's to continue providing security and hardware support to all the companies still running it.
> think of it as them saving themselves some work and money.

Not every unlocked car containing valuables is a guaranteed theft report, so rummaging through every unlocked car with visible valuables sounds to me like potentially more work and money.
"I'm not talking about torture! I'm talking about 'enriched interrogation methods'!!!"
The Mozilla CoC seems to be oddly "oh, you'll figure it out". Not only am I fairly certain that doesn't work too well - see your "adult enough" argument - there's also no way for Mozilla to know if it has any effect.

I'm looking more at something like the LLVM CoC[1], which specifies how exactly disagreement should be escalated, and how it'll be handled.

To me, that's a major point of a CoC - if you have a disagreement what proper behavior is, it's incredibly difficult to handle at the peer level. You need an escalation path. As you say, and as I alluded to above - you need someone to enforce those standards.

What does a CoC achieve? It sets a tone for the community, spells out what is considered unacceptable, how you can ask for help with unacceptable behavior, and what the consequences of unacceptable behavior are. Or at least the kind of CoC I refer to.

I completely agree that a generic feel-good document does nothing.

[1] http://lists.llvm.org/pipermail/llvm-dev/2015-October/091218...
Object.observe proposal is being removed from ECMAScript 2017
And Dropbox has one for API v1: https://github.com/dropbox/dropbox-js. There will be one for v2 as well.
I think we solved the common issues with REST for Schema (https://schema.io) in a way that makes it really nice for developing web apps. For example, to include related resources you can specify an `expand` field in a get request, and if you want to include unrelated resources you can do it with the `include` field.

There are probably good ways to solve most if not all of the problems people typically run into with REST APIs for web apps, but it could take a lot of experimentation to figure them out. It sure took us a while.
Watsi rules!
Expedia buys HomeAway for $3.9B
The "Conditions" as described on the "Samples" looks promising - looks like you can search for a pattern which is within X lines of another pattern. That's useful for finding lines used only in certain contexts. AFAIK, there's no way to do that with ag.

https://sift-tool.org/samples
It's to do with the browser security model and JavaScript restrictions on file:// paths.

I'm not entirely sure of the class of attack that it prevents, but it's been that way for quite a while now.
Good point, people should know that.

What I had in mind is that some people get a lot from the the community features on Coursera, more active while a class is in session. So that's all I meant.
I agree with idea of the general idea of AMP. BUt this is simply wrong.

What happens if I am an owner of "minor" ad network. It's essentially trying to prevent anyone entering ad bussiness in my oppinion.

And what does it mean to the developer who has to create some custom interactive component because that's what management wants?

I fully understand that it's counter measure against facebook and apple. But there should be better ways to improve websites performance not just removing years of web standards development. Google as a major search engine could influence faster web by giving it more influence on SERPS which would make publishers take a notice on how to make their sites faster.

This is not reasonable to create yet another version of the website just to please google.

Sorry for the rant, you can guess what I do for a living:)
Before They Created Apple, Jobs and Wozniak Hacked the Phone System [video]
I'm finding this tutorial really hard to follow. It doesn't track my mental state very well; each successive sentence that qualifies an idea doesn't follow from the last one to me.

I'm struggling to describe this phenomenon exactly, but I want to try because I'm interested in quantifying it. So here's an attempt:

When I'm reading a tutorial to a new idea, a qualification needs to follow naturally. If you tell me "this is an A", and then follow it with "note: it's not a B", that qualification only works if I would have thought, in my head "oh, is it also a B?" after the first sentence. Otherwise, I'm left in a tough spot: I believe you that it's an A, but I don't trust that I know what an A is, because I'm apparently supposed to have realized that that suggested it could have been a B as well - because you just jumped in and pointed out that it wasn't!

So such a qualification is not just a clarification; it's also narrowing down the possible meanings of A. But I didn't know about all those meanings, because all I have is the word 'A' right now, and I don't understand the complexity of that yet.

Here's a specific example:

"A noun is an atom or a cell. An atom is any unsigned integer. A cell is an ordered pair of nouns.

The noun is an intentionally boring data model. Nouns don't have cycles (although a noun implementation should take advantage of acyclic graph structure)."

As of sentence #3, it looks like a noun can contain cycles. I mean, it can be a cell, and a cell can contain nouns, so that seems like a cycle. Then, in sentence #5, I'm told they don't have cycles. What? Now I don't know what to believe. I thought I understood nouns, but I don't anymore. Then, in the parens, even more concepts are thrown in. Now we're talking implementations - but I don't know what we're implementing. And we're taking advantage of acylic graph structures. Taking advantage? To do what? And the word 'although' shows up. They 'don't' have cycles, 'although' we should take advantage of their not having cycles? Either this is mis-worded or there's even more context I'm missing.

.. anyway, that got wordy. Point is, almost every sentence in this article confuses me further, instead of confusing me less. There are no 'ah-ha' moments. It's just "huh?" after "huh?".
The downvotes are undeserved. The solution is npm on the OS level - you specify the version of the dependency you require, and each version is installed across the OS only once.
Is it pointing to the FAQ that you consider "responds poorly", or is it pointing to Veedrac's refusal to be unambiguous?
I'll be impressed when breakfast machines can do this: https://www.youtube.com/watch?v=NWd5D8wUc88
The ASCII code for * is 42.
I can't figure out if you are being downvoted because you made a joke or because you used the word "torture" in vain.
You could always say no as I did. though its not loaded in the time I have taken to write this.
The Hard Truth About Boiled Eggs (2014)
Problem is another supplier can claim to sell the same item and benefit from the positive reviews. I've seen a lot of this with unbranded items like USB chargers for cars.
This post really resonates with me. I think there is a "silent majority" type of situation going on. Most people venturing out do it for the reasons DDH states: independence, the ability to work with people of your choosing, etc.

Most of us don't care about winning some ridiculous lottery where smarmy Wall Street types stakehorse tech wunderkinds.

Things have a way of balancing themselves out.
> As a side bar, I honestly believe that a lot of objections to CoCs stem from the fact that people are either not aware of the group size growth, or are actively grieving for the time when their group was small enough they didn't need one.

I find the problem is usually that these sorts of documents are invented by a minority that does not have the support of the majority, or they are sold poorly to the group as a whole. This is why culture changes from major group-wide issues stick and become permanent much easier in any group size. If I am member of a group and I arrive from one day and there just suddenly is a new CoC where there wasn't before I am extremely put off by it, because the CoC rarely describes the group as a whole but a particular mindset about the group by a minority.

If you are going to do a culture change properly you need to sell it to the group of both the power players of the group (the people who are looked up to informally) as well as the formal people 'in charge.' When I see it fails and when it has the most kickback is when they don't bother to try and seek out the power players of the group, because then the subgroups of the whole talk amongst themselves and can't see the reasoning and the people that are leaders in those subgroups aren't on board to bring reasoning into the discussion.

If there is a mailing list that tries to enforce a CoC on a related IRC channel and the IRC channel isn't on board with the plan- you've got a completely unnecessary clash from people not seeking out to understand the community as a whole. This also happens just as much from people trying to make an organization Agile or some other methodology. If you don't do right to understand the group, move at a deliberate pace so the group as a whole can move with you, it just is not going to work.

This is something I have dealt with many of times as both being an informal leader and the actual leader, and my direct feeling on CoC's is that if they exist they have to be deliberately vague to a point so that a discussion must occur. If they are too specific they become weapons for people until the people that are only moderately invested abandon the group along with the people that clearly don't fit the new policy depart. Sometimes this is filled out with new blood but just as often what made the community good from those that were passionate and invested in a group (# of creators to # of consumers) is completely lost. More often than not new members to the group can't contribute in that fashion for some time until they learn how they want to contribute.

If you CoC or some other policy by aggressive moderation at the beginning you set culture for the entire group, if you tack it on later you will leave some % behind but it is often not obvious to people how large that % is unless you do it in a managed fashion.
Discussion a few days ago on the NY Times version of this article: https://news.ycombinator.com/item?id=10495758
Yea, would be nice to give an option to enter a zipcode.
Good lead management system for manage lead
Can any one suggest good lead management system for manage leads.
How do you superheat phosphoric acid? Wouldn't it dissociate?

It's not used for an active reactor, but rather to dissolve cold fuel and extract more usable uranium.

Liquid fuel reactors don't use phosphoric acid, they use uranium tetrafluoride (a salt) or water.
It is hard not to be overwhelmed by such sadness. I feel, the list of patients shouldn't be so sad. There should be, at the right, a panel of patients who have been treated, to make it more upbeat. And the goal, is to make patients from the left go to the right. I hope you see what I mean. If it was less depressing, we wouldn't shut out from the cause, from so much pain to deal with. Because as it is, to help it means to accept there is so much pain in the world. Whereas if we see also the treated patients, then we know at the same time that there is help too, and it isn't so bad, so the reason doesn't shut out. This is only my opinion. Maybe it works better like that. (edit: nevermind, I saw there are fully funded people at the bottom. I feel like a fool, now.)
Sorry for the interruption. Everything is being served from an Urbit. We have done okay under HN load in the past but may have just screwed up a hotfix.

For the time being, here's a paste of the markdown: http://pastebin.com/G3zMqZN8
I just bought a 3 footer from Joto, seem's to be pretty well made.
I get what you're saying.

My wife is an in home hospice care worker. She's seen people who have gone crazy from Alzheimers. They have these rare lucid moments where they understand what they're trapped in, and have begged her to kill them.

She's also worked with people who have Parkinsons, where their mental faculties are fine, yet their bodily control dissolves. They die by losing the ability to send the muscular commands to breathe. Suffocation.

So yes, when you talk about making durable organs to substitute failing ones, it sounds like a great idea. Until you hit end of life. At least ones where stuff fails isn't as bad, with all-mechanicals. The diseases that hit the brain and destroy cogent thought are the absolute worst. At least a family can potentially go to Oregon for physician assisted suicide.

Another solution to this is a kill switch: you hold the key to the destruction/End of Life of the device, killing you in the process. That would allow you to use these devices, and when you decide, to have a good death.
But worse?

I assure you that we're not shipping Urbit with non-standard keyboards printed with "com" rather than ",". If these syllables rub you the wrong way, you're perfectly free to pronounce them any way you like.

Most people aren't speed-readers. I am, but only because I learned at an early age. I don't know anyone who speed-reads code in the sense you mean.
If you can deal wih maybe 20 people, a rafting trip on the Tamur in Nepal is the closest I have come to absolutely "no one else here". No wifi. No electricity. A couple of nights with only the group and a large bonfire.
We watch CVEs and update accordingly. Assuming you're using the latest stable release of the docker image or are using the latest stable release of Confidant (we're still working on making releases through github) you should be using a version with secure dependencies.

Using >= doesn't ensure security, but it does ensure less stability, and part of security is availability.
Then I will check Xubuntu too. Thanks.
i mean, aren't specified versions crucial for compatibility? what am i missing?

on second thought, i guess you are suggesting to specify the major, with an ambiguous minor? but doesn't this require that no package will introduce a breaking change in a minor version? not sure you can rely on that assumption.
Level3 Suffering Major Outages
internally message passing, futures and actors are all about state.
especially in erlang and scala. the libraries just wrapping that state so you don't need to care about.

also there is always state. look at the io front there your application needs to deal with state, if you are using fp your program maybe doesn't contain state. but the public api mostly deals with it.
> that's just racism in that one man's view on a technical matter is somehow different because of his race.

It's just ethocentrism or more specifically in his case Afro-centrism. Racism as a condemnation shouldn't be bandied about this lightly. The US media already devalued it and made it a joke by their excessive and irresponsible use of the term.
Which phones allow running the latest AOSP today?
Thanks for your opinion, +1 to Ubuntu on my list :)
I'm not going to jump until I see some sort of technical explanation of what Sift does that Ag is missing. It just seems implausible.

As for the additional features, I am not looking forward to memorizing more command line crap. Anyone want to write an Emacs/helm package?
>This means because of his reputation (Google engineer) it's easy for him to dismiss one cable manufacturer and support another while getting some form of a kickback either directly or indirectly from said manufacturers.

That's always a risk, but I think it is more of a risk having used his real profile and Google affiliation. On the face of it, I want to think that Google pays Benson well enough that he needn't go tell lies on Amazon as a side job.

>As such, I would discount his advice based on the possible bias towards products that could possibly line his own pockets.

This isn't like for example "audiophile" cable reviews where people just make crap up in ambiguous terms hoping to sell a thousand-plus dollar pair of speaker cables knowing full well that no one can argue sensibly about the warmness/depth/color/scent of the sound.

He pretty clearly explains his major complaint being the lack of a proper 56k pullup so that the cable identifies itself correctly. This is testable by almost anyone. It makes very little sense to publicly tell a lie that can be verified so trivially.
I'm sure there are people who'd like you not to run AV. But the link you presented does not mention anything about them arguing "that running antivirus is morally wrong."
Combining weak hashes doesn't provide any assurance. Let's assume that finding a new way to break MD5 is a rite of passage into certain professional cryptoanalyst circles. Do you know what they know?

Besides, there are no X509 signature types that are a combination. You'd need to update browsers... and it would be much easier to just update your hash.
This is discussed in the reddit comments. (It was my first thought to.) The weak consensus was that this is rare enough away from the 20 to not be enough to account for the data, which shows a similar bias toward 5-yard increments the entire length of the field. Further, there was an anecdotal report that NFL referee training specifically advises them to err toward a 5-yard increment in certain situations.
It's easy to poke fun at people writing these emails until you have to write one yourself. Then, not so much.

Big changes have consequences, and trying to be too 'caring' or personal can lead to further problems. There were a couple of threads on hotmail a few months ago that covered it well.

But the basic fact is that these types of emails have been A/B tested over time and you're looking at the winning format.
Good mathematical work is rarely an all or nothing proposition. Many independent ideas are required and when the mathematician is very good it is rare that there will be many mistakes.

So even if there are issues with some aspect of the proof there is usually lots of interesting stuff that can be salvaged. The proof of Fermat's last theorem as originally given is an example. It was wrong, though it got patched later, but the original work was still very exciting I think.
> What happens if I am an owner of "minor" ad network. It's essentially trying to prevent anyone entering ad bussiness in my oppinion.

I'd suggest reading the whole page :)

You can load any ad as long as it can go in an iframe and is served over HTTPS
Negative reviews are the first thing I always read.
My side project is
1. http://www.dealsmanager.net
2. I got this idea when i am searching for good crm for lead management but i think why not create my own as my reuirement.
3.just started it hoping good success in future from it because going to make it huge crm for manage leads.
Thanks for your opinion, I see that both have their advantages.
Feminists Are Trying to Frame Linus Torvalds?
The grandparents post's first argument about semantic reading was much more important than the speed reading bit.
Bloggr is worse still.
kerning!
This post is not useful or meant to be useful, I think. It's just supposed to be entertaining enough to get you to think about Sift. You shouldn't blacklist Delaware addresses or elderly people…

That said, your point about noise here is a good and interesting one
How frustrating that I can't manually enter a location.
I’m a successful software developer. I often want to hurt myself
Only in the sense that anyone making a site with Custom Elements are taking their own stab at WML.

It's really just a library that uses (polyfilled) Custom Elements. The only unusual thing is the auto-CDNing.
Plus, typing sift is twice as long as ag.
The good thing about jQuery is that it makes developing web apps easier. The bad thing about jQuery is that it makes developing web apps easier.
> Really? I thought REST says you shouldn't assume URLs follow any pattern.

It does, but that's an unrelated issue to the one addressed in GP, which addresses the condition where the information exists on the server side when the response is sent to know what subresources are part of the composite that is desired.

> I'm not sure there are any popular, really REST APIs out there.

The Web itself is a popular API, which provided both the motivation for defining REST and which was, itself, shaped by REST in that REST was developed in parallel with and influenced the design of HTTP/1.1.
Ha, this is basically saying to go to the bar during business hours.
They avoided kerning.
Widely available in the UK.
Stable release of Flynn – open-source container deployment
I will check Linux Mint too. OMG so many options to evaluate. Remembers me the Guardian's article Why too much choice is stressing us out http://www.theguardian.com/lifeandstyle/2015/oct/21/choice-s...
You're the torturiest person I've seen today.
So is this the API for clients or for servers?

I would like my web server to be able to slurp up all the images from my customer's Dropbox. Unfortunately, shared folders can't be downloaded if they are larger than 2Gb, which is quite often for me.

Is there an API suitable for this?

EDIT: oh yes, yes there is! https://www.dropbox.com/developers/chooser

EDIT 2: It would be sweet if you guys also exposed SHA2 hash of the files in Choser. Often times they user will mistakenly load the same file, and I would rather not do the work at all if I don't have to.
Not to derail further, but I just signed in, logged out, and it doesn't require me to sign in...
Amusing and provocative concept, but pragmatically challenged as the majority of people don't use apps like Foursquare or other check-in services. Moreover, those that do are likely not a representative sample of the broader population... so, as a proxy for crowdedness, the data feeds from apps/online services fail in most cases/places, IMHO.
https://www.intelexit.org/

"Exit Now!"

Endorsed by both Bruce Schneier and Thomas Drake.
> He's promoting Opal on that same Twitter account, though.

So? It's his personal twitter account. He can do what he wants with it. He can say the Surface Book is great, or Opal is great, or Opal sucks. That doesn't make anything he says there into an official endorsement or opinion of the Opal project.

> A parallel: It's like saying he can bully someone outside of class, and that as long as he sits nice and quiet in class, the school shouldn't do anything about it.

The difference is that bullying is actually against rules. Expressing your views on something controversial like this is perfectly allowed due to freedom of speech.

> True, but his statement was a soft-core version of hate speech.

For one specific definition of hate-speech, sure. But not one that's universally agreed upon. In other words, that's like, your opinion, man.
> But there’s still the concern that wearing a colored filter while taking the D15 test will alter the relative brightness of the chips, providing a context cue that can help subjects score higher.

I'm confused about this statement: isn't the whole point of these glasses to provide such clues? I may be more knowledgeable about the subject than the average Joe (I like reading about it), or I may be completely wrong (I'm no pro), but it's obvious to me that real color vision is indeed impossible without gene therapy -- you can't show to the brain what the eyes can't detect, at least not through the eyes. Do they claim it provides real full color vision? I don't even think this is testable, for that matter (qualia etc).
So apparently, to avoid humans in my low density suburb I should - rather than, say, go to a park or trail - go to (1) Dunkin Donuts; (2) the local pizza place (3) the supermarket.
Thanks for your opinion, +1 to Fedora on my list :)
A word of advice to founders from the US: ignoring user requests to delete accounts or personally identifying information is a crime in some countries. (I'm only familiar with French and Canadian law.)
Announcing Semantics3's latest round of funding