skysight-inc/HackerNews huggingface dataset:
I was literally working on almost the same thing all day, except with dot syntax compat (so you get all the GraphViz/LaTeX/Docbook/Doxygen benefits). Oh well, excellent work, my good man !
Medicare is an insurance program. You don't get it unless you've already paid into it. It's administered by the government, but it really isn't paid for by the government.
I can't wait to see what sort of strategic shit they will try to get away this time leveraging "superior" technology.
Nothing about CPS ensures asynchrony.
This is one of the books that Elon Musk recommended (http://www.adweek.com/galleycat/the-science-fiction-books-th...)
103 points, 20 comments, different site: https://news.ycombinator.com/item?id=10622955
Yes, yes we should. When HN even has a feature made to bypass paywalls, it's absurd to then subscribe to a strict legalistic position which provides no benefit to anyone.
>It doesn't really make sense to do that with domestic software and to give imported software a free pass.

Yes but what is applicable are domestic laws that can differ from country to country. What really would not make sense would be for an international treaty to restrict what a country can do with its own software in that country.

> Why does it need to be a country? The domestic software maker whom the government forces to do something that is not allowed under the treaty should have standing.

Because the parties in this agreement are countries - and the terms in the treaty provide remedies for businesses and individuals who are infringed by another country that is a party to the treaty. You are not a party to this treaty with your own government.
And a thoughtful response to this article: http://upon2020.com/blog/2015/11/responding-to-ben-werdmulle...
> But a the OP pointed-out, if a site using LE is compromised then the attacker has basically an infinite duration of valid certs, because they are automatically renewed.

As zeendo mentions, this is only true while the attacker can continue to provide proof that they control the site in question.

> There is no manual challenge to receive a new cert.

You're talking about a server on which an attacker has the ability to

* Read the server's ACME private key

And one or more of

* Add new documents to [scheme]://[domain]/.well-known/acme-challenge/

* Stand up a HTTPS server at the domain for which a key is being requested that responds with LE-provided data using a LE-provided temporary key.

* Sign challenge information using a previously issued private key.

* Add a TXT record for the domain in question containing data specified by the LE server.

This requires a server to be pretty thoroughly pwnt.

What's more, even though cert revocation works poorly in the real world, the LE servers almost certainly respond correctly to cert revocation requests. So, if a server operator notices that his box has been pwnt, he can revoke the certs that were issued during the time, closing the "Sign challenge info using a previously issued LE key" barn door for good. (Or until his machine gets pwnt again.)

Frankly, I think that OP hasn't actually had a good look at how the LE software works, or the design of ACME.
This submission came from smaddox's comment on an earlier thread about hydrofluoric acid: https://news.ycombinator.com/item?id=10683134

Thank you to the editor who massively improved on my submission title. :-)
Try/Catch complects: we can do so much better (2013)
Dupe detector not working? https://news.ycombinator.com/item?id=10673934
Nice article and I'm also a bit anxious about facebook/internet vs internet/phone lines, but I actually got more intrigued by the tilde club mentioned in the article than the Facebook DC.

http://tilde.club/

More info:

https://medium.com/message/tilde-club-i-had-a-couple-drinks-...

Also, reading about tilde I can't help but think about http://urbit.org/
Trains. There's similar scars in San Francisco. Potrero Hill & Mission District particularly.
> Science is cooperative. We all want to find the truth.

You'd think so, but no. Scientists want to get funded, and getting their work invalidated like this is a problem. So is making enemies among those that will review your articles in the near future.

That's why contradictions are usually softened and hidden behind praises of unrelated parts of the work - they're all in it together and they need to cooperate in order to keep getting grants. You'll usually find honest criticism in informal conversations, not published for all to see.
"Developers developers developers developers" :)
almost anyone can set up trivial end to end encryption using any number of methods without relying on outside agencies. SSH, VPN, PGP, the list goes on. The issue is getting a HTTPS cert trusted by the general public, which is a much harder problem. Before letsencrypt, you had to pay a CA to issue you a cert. For a DV cert, they verified that you had permission to get a cert through a small number of ways. Most involved just getting an email through the whois entry for your domain, or setting a specific entry in DNS. Those aren't any more "secure" then letsencrypt's methods. If anything, a letsencrypt cert is arguably MORE secure, as it only lasts 3 months, so the domain needs to be rechecked more often.
But it's not "discipline at the heart of the problem".
http://achewood.com/index.php?date=02062007
Mercury is all-natural after all.
What's weird is the metal and inorganic salts of mercury aren't particularly toxic.

It's not too weird if you think about their physical properties.

Metallic mercury - not that reactive or soluble in water; in fact eating metallic mercury is not that dangerous, it tends to just pass through your body

Mercury salts - Mercury(II) salts are water soluble, but Hg(II) reacts with thiols pretty rapidly (it's chelated by them). That includes all of the sulfur containing amino acids in your body (cysteine and methionine). The problem is it will also bind to important enzymes. Hg(II) salts with trash your kidneys, but don't make it into the brain.

Organic mercury - fat soluble, can penetrate most membranes of the body; that means it gets into the brain and through metabolic transformation results in neuron death
> however that seems to be an annoying middle step before DNSSEC.

Do tell. How is LE a middle step before DNSSEC?

(I would appreciate it if only tenfingers replies. I'm interested in his response, not speculation from the rest of us. :) )
> There is little incentive to spending time making one's work understandable to a wider audience.

I wonder if there's a way to create incentive here? Or perhaps even a need to fill for the academics who are poor at explaining their work? Maybe some kind of layman's explanation service for technical papers with the authors' hope that by better explaining their research, they might be able to gain a wider audience or be more often referenced?
Short-Story Vending Machine
How about open sourcing the whole browser?
Seems to be related: http://www.wired.com/2013/09/building-a-better-stronger-safe...

Also, von Pragenau's obituary (he died a few months before the Wired article was published, apparently): http://www.hamptoncovefuneralhome.com/fh/obituaries/obituary...
No love for the BSDs or Redox or TempleOS
Here is my daily git workflow:

1 - Clone the repo (only need do this once)

2 - git checkout branchname

3 - Make some file changes

4 - git add filenames

5 - git commit

6 - git pull (make sure you are up to date BEFORE you push to remote repo)

7 - Build and TEST

8 - git push

That's 90% of what I do.

Merging branches is simple.

1 - git checkout destinationBranch

2 - git pull

3 - git merge sourceBranch

4 - build and test

5 - git push

Cheers!
It's going for two grand on Amazon http://www.amazon.com/Ignition-informal-history-liquid-prope...

Yikes!
My point is not that it invalidates the argument (because I agree, the difference between 100% and 90-whatever% isn't that important here) but simply that it indicates a lack of awareness about the very thing being discussed.

You're right, reading the whole thing is the only way to know for sure. But time and attention are finite resources. We can't actually read everything. When deciding what to read, I tend to lean heavily towards those things that get basic facts right, because they're more likely to be in some way related to reality.
Here's a link to the referenced paper where Marcus, Spielman, and Srivastava present their proof:

"Interlacing Families II: Mixed Characteristic Polynomials and the Kadison-Singer Problem" http://arxiv.org/pdf/1306.3969v4.pdf
The Mission E's aesthetic appeals to a certain class of person that would buy a luxury sports model.

The Tesla appeals to a different class of person who is purchasing a car for different symbolic reasons.

Initially, the Toyota Prius 2nd Gen was panned for its ugly look, but ultimately its distinctiveness became a marketing point as it became a status symbol of its own right - as evidenced by Honda copying it in its 2nd generation Insight.

The subjective qualities that define the 'desirable look' of the Misson E may be rejected by some segments of the Tesla market.
Don't be tiresome.
You could just leave them out ;)
A program as a DAG.... Whoa. That's an interesting concept to try to wrap your mind around.
Even though using Alpine as the base image for a container is a lot beter/cleaner than other base image imho we shouldn't rely on distro package management inside containers.

Not only does running a package manager inside the container mean you'll need to satisfy its dependencies in your image you also increase the image's attack surface compared to an image without a package manager.

Ideally we'd have a simple way of installing stuff into images from the outside so you can always start `FROM scratch` and add the minimum deps you need to run your app.
Adding stuff could be as simple as extracting tars with the tar's contents following the Filesystem Hierarchy Standard. Each tar could be a layer so it matches well with how Docker images work as well.

Since it isn't possible to extend the Dockerfile syntax I started prototyping a static binary written in Go to add to `scratch` to do this. It worked better than I expected :)
Only thing I couldn't find was a distro that packaged it's packages this way and it would obviously suck to create another packaging standard.
He said it was not impossible, he never said MS was considering it ATM
Good Compositions Take Self Control
Anything.js
Maybe an example of this: http://www.michaeleisen.org/blog/?p=358
While that may be true for generically publishing the work online, there are dedicated disclosure journals that are included in prior art searches by patent examiners. If you want to publish as an alternative to patenting, this is where you do it.
HN has a feature for bypassing paywalls? Well, it could at least be argued (I don't know how persuasively) that that isn't copyright infringement. This pretty clearly is.
It's not about truth it's about self-esteem.
>The results may be negative, but they are valid results.

Except they were mostly (if not all) uncontrolled. Uncontrolled trials for depression are bad science, because the placebo effect has such a large effect. Even if an open-label trial for depression is successful, it tells you absolutely nothing.
Raspberry Node
Overlayfs, aufs, etc. are really irrelevant to containers. They are used in Docker because it's built around opaque binary disk images that do not compose, which I believe is a big flaw, but it doesn't have to be this way. For example, GNU Guix has a container implementation that does not use disk images at all but still achieves system-wide deduplication of software across all containers running on the host via simple bind mounts.
heres one i like:

"git stash branch <branchname>"

like "git stash" it stashes away all the untracked modifications you have, but it puts them onto another branch. i often end up making partial progress on things that should be conceptually in different branches at once - this way, you can stash unrelated changes into different branches, and then merge each branch as you finish.
Would you mind filing a bug with more information? https://github.com/d3/d3-shape/issues
Speaking as someone tuning a JS game, I focus on V8 over other engines because there are great articles around that explain in detail what v8 knows how to optimize, what causes functions to deopt, what kicks object property lookups into slow mode, etc. Articles explaining this for SpiderMonkey would be greatly appreciated!
> What really would not make sense would be for an international treaty to restrict what a country can do with its own software in that country

That's why people are concerned about the TPP, it appears to do exactly that. Not just in case of source code audits, but in general TPP seems to limit a country's ability to pass new legislation pretty significantly, including in areas that are not related to global trade (e.g. IP).
I talked to a government researcher recently who expressed this exact opinion. Ultimately, contractors are the one who build things for the government, whether it's a space shuttle or an aircraft carrier. Patents can provide an incentive for contractors to invest in certain areas by ensuring a measure of exclusivity.
At one point, California had about 110% plastic bottle recycling. Then the California Highway Patrol caught the outfit that was bringing in semis full of crushed bottles from out of state and the recycler that was paying for them.
If you have Amazon Prime, you can buy downloadable tractor-trailers.

It's not recommended for customers who lack high-speed, unlimited data plans.
Yup.

I actually noticed this one day in Noe Valley. You would have a block of old houses (early 1900's) and then in the center of the block would be buildings built in the '50s or '60s. Why is that?

This is a nice zoomable map of SF from 1938 that shows why. There used to be an elevated set of train tracks that ran from 27th and Dolores down to San Jose and Randall. The rest of the tracks were at ground level.

http://www.davidrumsey.com/luna/servlet/s/x0k3ok

The removed the tracks and filled in the gaps with new homes.
HATETRIS is pure evil. Try it.
Ha you weren't kidding about the number of HA MySQL drop-in engine replacements out there, damn. At least most people follow the ANSI-SQL standard, which is something.

I'm not being snarky, but what are the use-cases that everyone have? I'd argue authentication and authorization would be one of the few things, and it was already solved with JSR 196 like 15 years ago. It worked, had a well defined spec, and most importantly it had interop with PAM on UNIX, Kerberos, LDAP, raw db's, mixed mode, you name it. Everyone complained it was too enterprisey and no one used it, so they re-invented the wheel in the early 00s with Rails and Devise and Authlogic and a billion other non-standards. Transactions? Persistence? Java's spec took care of that too, and fairly rigorously. So I'm with 100% with you on this being a solved problem.

We're making gradual progress (i.e., the option to develop in a language where the correctness of our code can be formally verified thanks to more readily available, mathematically sound type-systems) but like any society there are trends, and where there are trends you'll have the recurrence of many old things (Interpol ripping off Joy Division) and the invention of a few new things (where are often the composition of two older ideas, or the implementation of a new idea which wasn't computationally feasible previously but now is, or a concept from another industry like signal analysis or three-phase road traffic theory applied to our code-monkey'ing domain).

RE: Overall progress - Microsoft is doing some fantastic things in Powershell, effectively taking concepts like package management, man pages, and the shell, extracting the best elements from each of those, and implementing them in a consistent manner. No more choosing between systemd or init.d or other holy wars. If you want to do it differently, you effectively have a standardized interface to write your new implementation against within most of the platform. Don't like ASP.NET's templating system? No problem, it's all open source, and you can swap your own in, but it's all modular so nothing will break, and your co-workers can continue working in the traditional Razor templating.
Facebook Flat theme 2015
This kind of surveillance does not work for prevention. Some of the Paris terrorist were on file, some have been arrested previously, yet they were all able to get guns, explosives, and enough time unchecked to commit the multiple attacks.

All this in a city where the military was already patrolling the streets in the Vigipirate program.

There's no way this is going to fade into the background and stop becoming a nuisance, because making a spectacle out of it is its only benefit. Since it does not work to prevent, it must work to show people that something is being done.
I was going to complain about lack of benchmarking, but then I saw the "Why" section - I wonder what else could be shared using a single tweet.
No mention of the obvious answer here; because coders have jobs, employers and lives. Hence a lot of the time, code has to be written quickly and the company usually doesn't give a toss whether something's been done the 'right' way... so long as it works.

If you've got a deadline in thirty minutes, you're probably not going to try and do everything the best possible way. Same deal if you've got a family or friends to get back to, an event to go or anything else that requires you to get things done quickly.

You're rewarded more for getting things done quickly than you are getting them done properly or securely. When your client wants their site or program done as quickly as possible for a low cost, or your startup needs to 'move fast and break things'... security will usually suffer in the process.
You can encrypt between end points using self signed certs or your own CA just fine, but without the CA system you'll need some other way to prove that the signer is who you think they are. This could be a phone call or whatever other method you like
Driverless cars could spell the end for domestic flights, says Audi strategist
The reasons against smoking is, smoke.

Doesn't matter were it comes from.

Of course the putting it concentrated in your lungs a far more serious issue than it just being around so your statement stands :)

[edit] No idea where glycol based smoke stands as far as cancer goes
Of course. Not all disorders can be treated with the blunt hacks we currently use though. I think depression is one of those things that can't be understood until we reverse engineer the brain.
ECT is often seen as an archaic and barbaric treatment, but there is reasonably good evidence to suggest that it is an effective short-term treatment for severe depression. The question isn't really whether it works, but whether the benefits are worth the risk of side effects. That is largely a personal decision for a patient to make rather than a matter of public policy.

https://www.nice.org.uk/guidance/ta59/chapter/4-Evidence-and...
> C-algebras are an esoteric subject—“the most abstract nonsense that exists in mathematics,” in Casazza’s words. “Nobody outside the area knows much about it.”

Wait what? C algebras are very familiar to many doing quantum information, even those on the more experimental side. I don't think they even make the top 10 for "most abstract nonsense that exists in mathematics".
Steve Jobs and Bill Gates Face Off
base65536 can fit at most 280 bytes in a tweet.

Most tweets I make are pure ASCII, which is 7 bit.

(280 * 8) / 7 = 320 septets

Well, 160 septets is the non-Unicode maximum length of an SMS.

So a tweet can fit two SMS messages in it!
It's actually just rare and out of print.
Isn't this more or less what the DMCA safe harbor was actually intended for?

If a website that is not primarily engaged in massive copyright violation posts a link to a questionably copywritten work, then the onus is on the rights holder to notify.

It would seem like cases where the rights holder is unknown or has lost interest in the work (aka ophaned works) should be tailor made for this. HN has safe harbor, the rights holder has the possibility of protecting their work if they choose, and the public has access to a work that would otherwise be buried in a strictly pre-legally cleared system.
While I agree that Python is seemingly everywhere, I don't agree that people don't come back to Perl. Perl 5 gets better every release, and perl6 really is finally around the corner. Lots of exciting stuff coming!!!
“I received a call to ask if I knew why they faced a bill for over £100,000.”
I feel like Tesla's Slighty-More-Practical-Astin design is pretty solidly aimed at the the same crowd as Porsche's Slightly-More-Practical-911 design.
I believe they're saying they have experience traveling, not that they traveled to build the site.
>They’re working on an 800-volt charger that will power the car up to 80 percent in just 15 minutes, half the time it takes the Tesla.

Not another charger! I suppose the Porsche market isn't filled with range-anxious commuters, though.
PRESENT – a mindfulness retreat in your browser
Hi fellow hackers,
Hacked this up during the thanksgiving break. I found myself lost in browsing for hours without taking a break, not drinking a sip of water. This extension helps you keep track of water intake, shows something inspirational and also brings your attention to the present, hence the name.
Would love your ideas. This is iteration 1 and many more iterations to come.
-RP
Eh I'm not so sure. I used NVD3 as a charting library on a project because I wanted to use d3 after seeing all the amazing work others have done, but found it to be very confusing. I'm not sure how much of that is NVD3 or how much of that was just d3.

I think it helps if you just understand the mental model that d3 is going for. Clearly tons of people are able to do good work with it.
Shameless plug: the design of this seems really similar to my own library paths.js. In both cases, the starting point is observing that nowadays people usually already use some framework to manipulate the DOM, so what is actually needed is some way of computing some description of shapes starting from the data (and suitable accessor functions). see https://andreaferretti.github.io/paths-js-demo
Japan’s disposable workers: net café refugees
Is this the same phenomenon as Rayleigh scattering [1]?

https://en.wikipedia.org/wiki/Rayleigh_scattering
Today I learned that even HN trolls may not always understand a concept of trolling.

It was indeed a joke.

(author).
You could do slightly better by not restricting yourself to the BMP. Full Unicode gives you almost 21 bits per code point, which is what Twitter counts. Round it down to 20 bits per "character" and you have 2800 bits = 350 bytes in a tweet, or 400 ASCII characters.