skysight-inc/HackerNews huggingface dataset:
I actually love the idea of 90 day (or less) certificates! Once you automate the process of replacing your certificate (which let's encrypt will greatly help with), it won't matter how short the period is. Also, if a key gets compromised, it'll be valid for a shorter time. Give https://letsencrypt.org/2015/11/09/why-90-days.html a read! If you want to get more in-depth about certificate revocation, http://news.netcraft.com/archives/2013/05/13/how-certificate... is also a great/depressing read.
"blue blockers" probably refers to those sunglasses that filter out blue light
The fact that you did not include Skype seems like something to point out.

It means it's dying after the MS acquisition.
Overall dollar for dollar it's even or in the black for Fidelity for what it's worth because of the massive Uber write ups.

Seems like a non-event to me, people just want to believe these valuations are insane. Are you really feeling that much better that Snapchat is worth $10bn instead of $15bn if you hate Snapchat?
For anyone who reads the comments first and hasn't clicked through the link... if you don't know who Delia Derbyshire is, she's probably most well know for creating the realization of the Doctor Who theme composed by Ron Grainer. Of course she also did much more, but if you've seen Doctor Who, you've heard her work (of something inspired by it).
To be honest I didn't read the legislation. The interesting thing about FB and SecondMarket is FB agreed to allow that and probably approved each and every sale. Since this system already works I can only imagine the legislation will make it either compulsory or painful to avoid.

The other interesting thing is the FB/SecondMarket situation did actually look like an investment round in the way that it set a share price and valuation. From what I remember SecondMarket set up weekly auctions for FB shares right up until the IPO and guess what the IPO did? Closed at the open.

There is no way to tell but I bet if the SecondMarket sales hadn't happened it would have done what most hot tech IPOs do, set an artificially low IPO price and cash in on the pop.
I've thought a bit about sortition. My favourite way of explaining it: Suppose a billionaire is looking for someone to marry. They want a partner who is interested in them for more than just a paycheque. Say gold-diggers represent just a very small fraction of the population but are extremely good at feigning fascination in pursuit of their goals and finding themselves in the company of billionaires. In fact they are so good at ingratiating themselves with billionaires that any potential partner this billionaire picks from the people he or she knows is likely to be a gold digger. What is a good but non-optimal solution? The billionaire should pick 1000 random people of the gender he/she prefers and make their selection from this pack. This cuts out the influence of the adverse selection effects the billionaire experiences just from being a billionaire. If all they’re looking for in a partner is someone in at most in the ~99th percentile of people this approach will work with little cost, as candidates can then be selected from this pool using conventional means. This would not work if gold-digging is a reaction to circumstance rather than an in-built characteristic - the same is true of corruption.

For politics, one approach would be sortition applied to those in the 99th percentile on a widely used standardized test like the SATs -it's important that this test be used outside politics, too. Sortition would then be applied to narrow down the pool from ~160000 (about the number of people with sufficient scores over a 10 year time-span) to say a few hundred, a few dozen, or less and then a conventional election from there. Though, you may need very attractive salaries to ensure those elected choose to serve as most don't have an interest in politics - perhaps a ridiculous pension for life after a few years of service.
It may not be, but lunar colony involves a lot different types of technology. It's what you see in the "space romantics and progress" stories, which I agree would be a better focus than what we have now (i.e. absolutely none, just random walking along incentive structures generated by market economy).
I think you really have to understand that at its heart, Let's Encrypt is not about free certs as much as it is about automatic certs. If you just want a cert, definitely use an established provider. But a year from know, LE will be making this a "set and forget" thing, which is how it should be. LE is NOT a painless way to get certs for legacy infrastructure. I found this out by using it for an elastic beanstalk hosted site. I just wrote about it at https://go-to-hellman.blogspot.com/2015/11/using-lets-encryp...
"What makes Waterfox so fast? It's built with Intel's C++ compiler. One of the most powerful compilers out there. This enables us to make the fastest possible web browser for all the code changes we make. This potent combination makes for an unparalleled browsing experience."

Mm-Hm. How's that working out?

https://www.waterfoxproject.org/blog/
"Just a quick heads up why there hasn’t been any news from me in regards to the latest Firefox release. Mozilla have a new tuple header that they’ve created and gets used fairly frequently and unfortunately, this causes an internal compiler error as can be seen here." [Written by Alex Kontos
November 9th, 2015]

Always a pleasure to count the number of clicks needed before you can establish that the only platforms are Mac and Windows.
Please go evangelize your religion and its anti-empirical dogma somewhere else.
"The story of secular stagnation is that we have too little demand to keep the economy and the workforce fully employed."

The standing assumption here is that it is obviously Right and Good for everyone to have a job and work and that the Government must, at all costs, do everything in its power to create jobs so that everyone can work. However, not everyone wants to do traditional work- some want to be caretakers to their family, some want to pursue alternative lifestyles such as homesteading, and yeah some just want to be supremely lazy. Assuming that it is always ultimately Right and Good to have jobs for everyone regardless of inclination and ability leads to crazy finagling to "create" jobs and to never even consider eliminating jobs by any means (such as dismantling Government agencies that have been shown to be completely useless cough cough TSA cough cough).

Personally, I think having a base income for everyone in the US would boost the economy way more than job creation and assuming everyone should work. Eliminating homelessness, poverty, and hunger would ensure that every person in society lived at a high basic level of existence and would free up time, effort, and money that is currently tied up in serving the poor, hungry, and homeless. However, I cannot see that ever becoming a reality in the US so the point is probably moot.
Great questions. We'll line up a more analytical post on the topic as I don't know all the answers here, and we all should. In the interim, here's a few rough from memory answers:

> Thats an average of $357/vuln

The 14,000 includes resolved bugs where no reward was offered (Bounties are optional with ~40% of programs not offering any. i.e., "responsible disclosure", a drop in replacement for security@company.com). If you reduce the set to reports where a reward was offered, the average is closer to $750.

> What % of the $5MM or the 14K did the top hacker or group take home?

The top earner last year took $280k.

> How long is the tail of zero $$ per hacker in the community of the 2K?

This is a diverse group. Several hundred are active "hackers" driven financially. The rest are developers, hobbyist, technical consumers, who just happened to get curious about something in particular or even stumbled across a security problem in passing (this is far more common than you'd reasonably expect).
No One Minding the [Mac App] Store
"...but nobody in the business of deploying production Posgresql should ever have been using the various models of desktop SSD that were tested." this is one of the reasons why this article was written. To show you how to test, to see what you should use and what you shouldn't in production. When we did these tests we already knew we shouldn't use those SSDs, we mostly did it just for the sake of testing, to see if the tests we wanted to use make any sense and to show others how to do it.

Also I know it may sound funny to use these SSDs in production, but when we started with our game Top Eleven we didn't know that, when you have 5 people working on a game, you don't have time (nor resources) to think about a type of an SSD; you order server with an SSD, you get an SSD (you usually don't even have a choice when you rent) and you use it. This is how it still works with almost any server renting company.
How Wildbit Builds Multi-Million Dollar Products Working 40 Hours/Week
One thing to keep in mind is that even if we can't use Gecko on iOS, having _something_ on iOS rather than nothing means that people who use Firefox on Desktop or other platforms will be less likely to switch away due to issues like their bookmarks / tabs / etc not syncing between devices.

It's an indirect way of getting more people to use Firefox (which promotes standards) over another option, but it's certainly better than telling iOS users "If you want synced stuff, switch to Chrome or Safari."
IMO it's all due to the developer ecosystem. NVIDIA had a big head start with CUDA. AMD effectively embraced CUDA and transformed the best of CUDA into OpenCL (jointly with NVIDIA, Apple, via Khronos). NVIDIA's OpenCL support lags the standard, while they keep improving CUDA. NVIDIA probably feels commitment to their early adopters and doesn't want to divide up their engineering capability.

Meanwhile NVIDIA also seems to have really good marketing behind their GPU software stack. Lots of people who use CUDA have no idea that OpenCL exists and no idea that porting between CUDA and OCL is not super difficult. (It's been years since I've looked at CUDA it might have diverged more significantly since).

AMD's stability (on linux at least) is pretty poor. I don't know if it hurts adoption much, but it can't help.

Also, AMD absolutely dominates on integer workloads which is why it had been used so much for cryptocoin hashing machines prior to the widespread availability of ASICs for most algorithms. On floating point workloads, NVIDIA might do better than AMD, and those seem much more common in science than integer math.
I'm assuming the largely useless animation on the homepage is meant to make Chrome or Firefox start eating CPU and increase the perceived need for a new browser? I opened the tab, walked away for two minutes and came back to a hot and angry Chrome on my MBP.
It's a practice done by many Lutheran churches - each person writing who they'd like for leadership roles and writing it on a slip of paper, and then drawing one of those slips randomly.

From a theological point of view it allows for the Holy Spirit to act among us.

From a personal standpoint it works well as it allows candidates to put their names forward without the embarrassment of losing based on popularity.
That's (surprisingly, to me) not the main point of the article- the point is that if more people take more vacation time then companies will have to hire more employees to ensure the same level of base coverage and voila job creation!
Is this the part of devtools that was built using React & Redux? I remember hearing something a it that a few weeks ago
Choosing flowery, poetic prose to translate into into modern techno-babble doesn't sway me to the point of view that the former was better than modern English. Neither is a good example of clear, concise communication IMHO. The former's reason for being lengthy is at least understandable. It serves the purpose of both slowing the reader, and supplying them with examples and metaphors to ponder over. The latter's reason for being obtuse is much less understandable, since it actually hampers communication for the sake of style (that is, the style provides little to no extra informational benefit).
And they still try to do everything in their power to sneak in some real progress in the Senate Launch System project and hide it from changing political winds. I feel both saddened by this situation and impressed by NASA engineers.
He also wrote emacs.
Yes, there is nothing morally good or bad about evolution and natural selection. It just happens to be. People say we stoppped evolution like it's a catastrophy. First, evolution is still happening, we provide a very different context for it. Second, we benefit way more from modern medicine than from slow natural selection. We made our choice, and there is nothing wrong about it.
Not sure Twitter agrees with you, since they're collaborating with Google* et al on the Accelerated Mobile Pages (AMP) project - which can be thought of as an open, web-based alternative to Instant Articles.

*my employer
A twitter feed isn't random though. You choose who you follow on Twitter, if the links they provide are unhelpful you unfollow them. It is more random than Google but still tailored to your preferences.

I think you're hung up on the "stare at" wording. I interpreted the words to mean "use" - hope that clarifies my point.
There's definitely some rough edges on the tooling that will make this less painful. You likely used it with development endpoints, which only give certificates signed by untrusted CA (happy hacker fake CA or something like that). However, the point[1] of short lifetime of the certificates is to incentivize automating it. I'm highly hopeful that in a short while, having an HTTPS certificate is a matter of apt-get install.

[1]: https://letsencrypt.org/2015/11/09/why-90-days.html
Behavior economics suggests that you're wrong[1]. Users do not like metered useage even when it benefits them. An anecdotal illustration of this at work:

> What was the biggest complaint of AOL users? Not the widely mocked and irritating blue bar that appeared when members downloaded information. Not the frequent unsolicited junk e-mail. Not dropped connections. Their overwhelming gripe: the ticking clock. Users didn’t want to pay by the hour anymore. ... Case had heard from one AOL member who insisted that she was being cheated by AOL’s hourly rate pricing. When he checked her average monthly usage, he found that she would be paying AOL more under the flat-rate price of $19.95. When Case informed the user of that fact, her reaction was immediate. ‘I don’t care,’ she told an incredulous Case. ’I am being cheated by you.’

The transactional friction between "free" and "not free" is high, even for very small values of "not free." This has been backed up by experiments[2]:

> In his book Predictably Irrational, Ariely describes a series of simple experiments that offered subjects something desirable – chocolate – at a variety of prices. Two types of chocolate were used – a Hershey’s kiss and a Lindt chocolate truffle. While the kiss is an inexpensive and common treat, a Lindt truffle is a far more tasty confection that costs an order of magnitude more than the kiss.

> The first experiment offered subjects a truffle for 15 cents (about half its actual cost) or a kiss for 1 cent. Nearly three out of four subjects chose the truffle, which seems logical enough based on the relative value of the offers.

> The next experiment reduced the price of each product by one cent – the truffle was offered at 14 cents, and the kiss was free. Although the price differential remained the same, the behavior of the subjects changed dramatically: more than two thirds of the subjects chose the free chocolate kiss over the bargain-priced truffle.

It's not about getting the right micropayment system, it's about overcoming something about how humans understand and deal with price signals. You can either sit around trying to rewire people or you can come up with a business model designed for people. Micropayments as a business model for web content is wishcasting.

1) http://www.dtc.umn.edu/~odlyzko/doc/case.against.micropaymen...
2) http://www.neurosciencemarketing.com/blog/articles/the-power...
>In-N-Out attorneys claim that DoorDash uses an "Imitation Logo" of In-N-Out on its website.

The logos look nothing alike.
I personally don't see problem with your site. I probably wouldn't pay for the service since I wouldn't want my site plastered all over the internet at once.

I did added your site to my bookmark site for me to look at later. www.post2zip.com.
And Microsoft wouldn't exist if the Bush Administration hadn't ordered their monopoly conviction pardoned.
I am intrigued - what is the argument to be made for a pro-fat, pro-meat diet?
The event is not the mark-down, but the publicity of it. Most of the mark-downs of privately-held startups happen behind closed doors, and they are only visible when new rounds are announced (and only if they include the valuation).

Having Fidelity investing in startups adds a whole new layer of public disclosure to the VC world, specially relevant in the light of the large number of stale unicorns.
Alabama state is devoting tons of money to Type 2 Diabetes research. However, the problem is already there. And with all those pre-diabetics, I'm not sure how the healthcare system will be able to function in few years time.

I think it's in part a sociocultural issue. If your rent is low, you tend to avoid buying good food which is usually way more expensive and less satiating than cheap and simple carbohydrates.

Abusing soft drinks is also really problematic. These completely wreck your metabolism with their high concentrations of soluble syrups.
>If we really wanna get evolution back on course

Evolution doesn't have a "course," it's just what happens when organisms reproduce with modifications. Until we stop reproducing, evolution is working exactly the same now as it always has.
Show HN: A tiny password manager for OS X and Linux
> Those topics are poisonous because they can't be driven to a conclusion in two paragraphs or less.

They are poison on voting sites because one side quickly becomes grey. Votes do nothing but squelch conversation, and many choose to self-censor to avoid that.
If you're willing to use an alternative web server, this is possible: https://caddyserver.com/blog/lets-encrypt-progress-report

Caddy (currently in beta) will issue and renew SSL certificates automatically with no downtime (on Linux; Windows has very brief downtime during restarts).
KDP is far from "oppressive." Authors are totally free to sell directly from their own websites, through DRM-free platforms like Gumroad or Smashwords, and a whole bunch of other options.

What authors get from KDP is a larger cut of revenue, opportunities to list on Kindle Unlimited, and an easier time overall selling ebooks on Amazon. Plenty of authors are 'internalizing their oppression' all the way to the bank. Because DRM ebooks from Amazon tend to be delivered in an incrementally more convenient way, and it's incrementally easier for the average user to sync their library across devices when they buy that way.

This sort of ideological rhetoric around DRM probably alienates more people than it converts.
Yes it is. I also wrote more about the backend implementation on lobste.rs <https://lobste.rs/s/cvtz0x/firefox_s_new_memory_tool >:

Hi folks,

For the last year or so, my coworker Jim Blandy and I have been designing and implementing APIs in SpiderMonkey (Firefox’s JavaScript engine) to support various kinds of memory allocation/retention introspection. We are finally shipping a frontend to users as well, and this blog post is an intro to that. This is very much the tip of the iceberg and we wanted to just start shipping since we’ve been building APIs for so long, but this is really a fraction of the things planned. Nightly already has filtering/searching and will soon have import/export of snapshots as well as diffing <http://i.imgur.com/qjWOERs.gif >. Dominator trees and shortest paths from GC roots are incoming as well.

How is this built?

We made an abstraction called “ubi::Node” <https://dxr.mozilla.org/mozilla-central/rev/a8ed7dd831d1969a... > (for “ubiquitous node”) that sees the GC’s heap graph with a traditional nodes-and-edges view so that we don’t have to worry about the difference between (say) an object and some jit code when writing graph analyses. What is cool is that this interface can be backed by either the live heap graph or an offline heap graph. When you save a heap snapshot, we traverse this graph and serialize it into protobuf messages. These can then be reconstructed into an offline graph which you can run analyses on at your leisure.

We also make pretty extensive use of stack capturing, because that is a concrete way to tie retention and GC pressure back to something that feels concrete to users: locations in their source code. I’ve written a bit about how we minimize the overhead of (potentially very frequent) stack captures before by hash consing individual frames so that tails are shared <http://fitzgeraldnick.com/weblog/61/ >. Since then, we have also found a neat way to avoid walking the stack repeatedly if we have already done so once.

If anyone has any questions, please ask away :)

And I made a quick update:

Also, Jim loved writing this comment so much (it is a fun read) that I feel I have to share it :)

https://dxr.mozilla.org/mozilla-central/rev/a8ed7dd831d1969a...

We use this for sampling object allocations to give insight into GC pressure.
Works fine on FreeBSD, also is in ports.

https://svnweb.freebsd.org/ports/head/security/py-letsencryp...
Turns out there's no good public API from Webkit that can let us do that easily.

We're working on an alternative here https://bugzilla.mozilla.org/show_bug.cgi?id=1164067
Probably not a dumb hypothesis, but this author turns this into a lament about the changes in publishing. Next.
My wife has synesthesia (https://en.wikipedia.org/wiki/Synesthesia) in which every word or name comes with a taste. Admittedly, it's not exactly the same as a smell, but it's funny how she describes a name. It's most often indeed not a single "crisp thing", but an elaborate description. A certain type of butter in particular state, etc. Of course I test her every year, but it's remarkably consistent. :-)

I often like to come up with new words for concepts. One of them is the equivalent for being blind/deaf, but then for smell. How would I describe myself if I can't smell things?

I'm smeff?
In the long term, we're all dead :)

But I agree with your point. Sadly, long term is too long to have enough information to make decisions ex ante.

And on your pesticide and nutrient value claims, I'd love to see data on that, sounds pretty dubious to be honest.
Distributed Vulnerability Search – Told via Access Logs
As soon as Webkit/WebViews are available on AppleTV
That quote, "You can have any color you like... as long as it's black" was said by Henry Ford: https://en.wikiquote.org/wiki/Henry_Ford
> One side says, "We want X." The other side says, "Ok, we'll support X if it also has Y." Repeat that, in this case for a few years, and you have a very large number of Y's.

Why don't they separate these into distinct pieces of legislation (or whatever the term may be), and tie the votes for each together?

Someone should write a law about this...
There is very much pressure for that. Natural selection is just about passing genes to the next generations. If by living longer you can increase the safety, and the reproductive success, of your offsprings, you select for that.

Reproductive success in a natural selection context is not only about the sheer number of offsprings you have, it's about how good you can disseminate genes to the next generations. If genetic mutations allow you to increase that dissemination by caring for your offsprings, then it's selected.