skysight-inc/HackerNews huggingface dataset:
Unfortunately for the author, this analysis is rooted in a faulty conclusion:

"Asking around, people assume the TCP handshake verifies the IP addresses on both sides."

Not true - in firewall and security circles this was long ago observed and addressed in many different ways - it is now standard in at least the major Enterprise Firewall Vendors.

Still though; the analysis is good, and clearly determined through work, observation, and sound logic. I would work alongside a person like this anytime.

If the author can find a venue to assert his findings he/she should, but I wouldn't expend too much time on it.
Can't you run it under Chromium then?
Updated:

http://fivethirtyeight.com/features/our-favorite-examples-of...
> if they can't find out how their revenue is being affected,

Does "being affected" mean reduced? Because they're not losing out on ad revenue they would otherwise gain. That's the piracy argument with ads: if only everyone who used our product would pay us what we want, we wouldn't be losing so much money. You can't count browsers with ad-blockers as lost revenue. (You also can't count search engines, REST and curl, etc... as lost revenue.)

> then how can they decide if a change in revenue source is necessary?

Shouldn't a change in revenue model be driven by the opportunities of a subscription (or other) model, not by issues with advertising?

It seems like you're selling a service that will make your customers unhappy about reduced revenue, which they can't do anything about. What can a customer do differently if they find 16% using ad blockers, or 34% using ad blockers? Their ad revenue is the same regardless of the percentage. Their other revenue models haven't changed. All that's changed is that now they're mad about users with ad blockers. At best, if the percentage is going to drive a decision about changing revenue models, all they really need is a single data point, not a monthly service.

> why are you opposed to websites knowing how many of their visitors are blocking ads?

Because people aren't rational. They'll get angry about a transaction cost of the advertising model, and do all the same stupid things we saw 2 or 3 years ago: rants of moral indignation, poorly implemented content blocking, big obnoxious pleas, etc...
moxie has stated previously someplace that the goals are

1. Simple encryption for everyone to prevent mass data collection
2. Prevent targeted collection for the crypto enthusiasts

The main focus is on step 1. now and they are doing a great job at it. It's slow like anything new, but I managed to convince my parents to switch so that means it's working!
Somewhat true, though first release was 2006 and it was pretty clear everything was going multi-core by then.

But regardless, its their pool and they choose how they want to operate it. We're fortunate that they share it with everyone because it is a very cool project, but that doesn't mean we can't take note that it falls under the weight of itself fairly quickly in practice.
Yeah, lots of squinting needed, or a terribly shallow understanding of FP to say that. Merely providing first-class functions and map/reduce idioms does not a functional language make. Python has those, so is it also FP really? R is as much a FP language as Haskell or OCaml are imperative "at heart."
Why MakerBot and 3D Systems Are Losing the Desktop 3D Market
Yahoo’s Marissa Mayer Has Run Out of Time for a Turnaround
Earth-based metaphors and forms of thinking break down here, because it's not Earth. There's no "tearing up every square meter" analogue here. To the extent that there is one, the entire universe is already "torn up". So far as we know, it's not "alive", there's no meaningful way in which it is "pristine", there's nothing there to "hurt".

On Earth, you can casually assume that effectively every cubic centimeter has some life in it. That assumption, and other similar ones, must be examined when discussing space.
This would be smart. It doesn't need to be ominous, just informative.
I think the author is writing under the assumption that there are diminishing returns as one gets better at a skill, when really the opposite is true. The number of topics you can absorb per unit term obviously increases with your pre-existing competency with the skill.

There absolutely are diminishing returns in mastering a skill. For example, if you spend a year learning how to play the piano, you might be at a level where you can play some pop songs and impress your friends. To be at the level where you can play some Rachmaninov will probably require an order of magnitude more time (10 years), even though you know all the basics. In the process of mastery from years 1-10, you won't unlock an order of magnitude more songs that you can play as a result. In fact, each year that you march towards mastery, there'll probably be less and less songs that you'll be unlocking as a result. Your returns are diminishing.

This isn't to say that you shouldn't seek to master something (or several things), only that if you are trying to accomplish something which requires mastery of a lot of skills (like starting a company) you should eliminate blind spots by learning a bit about what you don't know. Even reading a book about sales is better than not knowing anything at all about it. Even if you have a sales expert on your team, it helps to empathize and know what they'll be thinking about as you build the product (if you are an engineer). Being an entrepreneur is all about being well-rounded.
SEC Steps Up Probe of Pre-IPO Share Trades
Awesome to hear! I often long to return to some previous jobs I've worked at which had somewhat inferior tech/methodology, since I feel like I could do so much good and really move the organization forward.

Awesome that you're taking time to educate your coworkers on the newer tech and methodologies! Even better that they're receptive and are learning. There's some pretty cool stuff in newer versions of the .NET ecosystem
SEEKING WORK - Remote or based in SW Ontario, Canada

LinkedIn: http://ca.linkedin.com/in/zamkhan

Recent client: "As an academic entrepreneur, I have engaged in a number of out-sourcing processes and truth be told, _kohanz_ was one of the few that I would still continue working with. He is skillful, honest and up front, knows what he is doing and does his job very quickly and within the time frame promised at the beginning."

Experienced (10+ years) developer of software for medical devices and scientific applications, many with an imaging component. Have architected and led teams to deliver on software for systems in both diagnostic and interventional contexts. Comfortable working in an FDA-regulated & ISO 13485 compliant quality system.

I excel at iterating research or early-stage prototypes (e.g. MATLAB developed by researchers) into commercial-grade software ready to impress the right audience (clinicians, investors, etc.). Developing scientific applications involves a high degree of uncertainty and requires an engineer that actively participates in all phases of the SDLC (e.g. requirements gathering, risk analysis, etc.). My ability to communicate has always led to my role as the technical point of contact for researchers, clinicians (surgeons, radiologists, etc.), and senior executives.

One of my current freelance projects is creating an automated trading platform for forex and equity markets through a well-known online broker.

Outside of the medical domain, my development projects have included an automated stock-trading engine (including backtesting suite) and various sports analytics software solutions.

Technical keywords: C++, C#, Java, Matlab, VTK, ITK, OpenCV, LabView, Rails, R, Python, and more.
I found flights to Toronto on flychecker at € 527
It's not just about education.
PHP encourages bad practice. The language is implemented by people who haven't learned from the past 30 years of language design. It's made available to beginners and presented as "easy" when dealing with all the gotcha's is everything but. Etc.
Sure, you can learn how it works and a competent person could probably write safe code with it (given enough time). But it's really a dangerous language, the use of which should be discouraged. Better alternatives exist.
Forget 100 hours, how about 20? Josh Kaufman already beat
them to this topic, and has not only a TEDx talk where he finishes 20 hours on ukelele, but he's also written a book:

http://tedxtalks.ted.com/video/The-First-20-Hours-How-to-Lea...

https://www.goodreads.com/book/show/16158493-the-first-20-ho...
You're forgetting the recent "phablet" fad. Many consumers seem to have developed a taste for bigger screens and bigger phones.

There's long been a wide range of phone sizes to cater to different tastes and different needs. So making a bigger phone with more desirable features may well be a winning strategy.
Corner cases involving time are endless (you can use this joke for free):

- Can your code handle a datetime if the logic expects midnight times?

- What happens if you have a duration that starts on November 1 and ends on November 2, and the user decides to change the end time by an hour? Daylight savings?

- If I fly from Denver to Arizona in December, how does it deal with the time zones? Oh great, you need a table.

- What's the next business day? Another table, this time with holidays.

- When does an all day event start? Midnight? Midnight where?

- Pre-gregorian time? Warhammer 40K time?

Then there's platform based problems:

- Is there an easy way to do time arithmetic?

- Is there an easy way to extract time parts? (iOS I'm looking at you!)

- Are time zone aware times different to UTC times?
The header photo looks like a Windows screen photoshopped into OSX.
In other words: it doesn't matter who is voting, what matters is who is counting the votes.
I wonder how long it will take for someone to integrate this with Google recaptcha...
Guide Financial | Full-Stack Developers (Ruby/Rails) & Product Designer | San Francisco, CA | http://www.guidefinancial.com

FULL-STACK DEVELOPER
The Full-Stack Developer role is a critical position for us. We are seeking a developer with experience working extensively in both front-end and back-end software development, reporting to the Head of Engineering. Your initial focus will be on our core web experience, and may expand to mobile platforms as well.

You will be responsible for developing, testing and maintaining some of our most important and ambitious technology features, and you should have a proven track record of delivering well-engineered and tested software at scale.

PRODUCT DESIGNER

We are seeking a Product Designer with experience, passion and expertise in both visual and product design. As part of this role, you will lead design efforts as a lead designer for Guide Financial (including our financial advisory platform and future product releases in new markets), as well as collaborate with other innovation teams within John Hancock. You will report to the Managing Director of Guide Financial.

You will collaborate closely with colleagues from the ecosystem of innovation labs, including the Lab of Forward Thinking, to drive innovation across global markets. This includes collaborating with customers and business leaders to identify opportunities to improve the customer journey of lifetime financial wellness, and lead the design process from initial mockups through launching new businesses.

ABOUT GUIDE FINANCIAL
At Guide Financial (http://www.guidefinancial.com) our mission is to use technology (artificial intelligence and applied behavioral finance) to enable millions of middle-class families to increase their savings rates, make better financial decisions and achieve retirement security.

We've recently joined John Hancock as part of their long term innovation plan. We’ll be continuing to support our core advisor technology and also build out new, innovative technology in huge markets that will impact millions of customers.

We seek to combine the best of a startup - small team, great technology, lots of fun and a fantastic culture - with the benefits of an industry leading firm - including very competitive benefits/comp and the ability to see our technology deployed rapidly across millions of households worldwide.

To start a conversation - drop us an email at info@guidefinancial.com with a brief note about yourself and a resume.

You can also read more here: https://www.guidefinancial.com/careers
Which you posted from a pseudonymous throwaway account. Classy.
Requiring a google email address and chrome for a secure messaging system? Very strange move.
I wonder what this'll mean for startups like https://imagga.com/ and how pricing will change.

Also wonder if they'll bring the ability to train your own classifiers using their networks...
Improving Your Ruby on Rails Applications with Effective Use of Hash Objects
So do we -- and it's how I noticed this.

We have a "debug" build that compiles everything and runs unit tests, which runs on every commit on every branch (we use gitflow, so all actual work happens in feature branches).

There's also a nightly (or manually triggered) "release" build that runs on the master and any release/* branches (if there are changes), and additionally does some i18n stuff (which includes the convoluted step of compiling a VB.NET app and then decompiling it into C# so we can run gettext on it), builds installers and does some other packaging tasks.

The problem is this bug was dependent on when the tests ran. Commit on November 30th, and the debug build would be fine, but release build would fail the next night (Dec 1). Commit on October 30th, both will be fine as the release build runs on October 31st. November 1st is a Sunday so chances are no one was working on Saturday, which means no build, which means this failure isn't visible.
Using Google Vision API to break Google Recaptcha? Interesting...
They're using Google groups to manage the beta testing program.

Make sense since that's how you sign into the Chrome app store to download the app.
I have a question about this...

Say a team of volunteers were willing to spend time to make something like a QT- or GTK-based native desktop application instead.

How much more difficult would this be compared to what they did/used now? (the chrome-app) ?

Also, will it take significantly longer to build such a native app?

Anybody with experience building native apps, please share.
I wonder what this means for computer vision startups like http://clarifai.com?

Its hard to compete with Google on a task like image classification when Google has immense computational resources, tons of data, and hoards of top researchers.
The White-Savior Industrial Complex
That's exactly it: they're a good solution to the problem, but since type classes work specifically by avoiding subtype polymorphism (and are instead a mix of parametric and ad hoc polymorphism), they cannot be part of a discussion that is centered on whether or not subtype polymorphism is a good fit.

But, yes. The more I code, the more it feels like type classes are never not a good answer.
Beijing air pollution before and after
This isn't surprising at all if you see how REM sleep works. In short, you get more REM sleep in every subsequent cycle (each ~90 minutes), but a significant break between sleep cycles starts over the process. So getting 9 straight hours of sleep means you get significantly more sleep than getting 6 1.5 blocks.
The history of maths is also the history of art
Article says: "Changing global trade winds have raised sea levels in the South Pacific about a foot over the past 30 years, faster than elsewhere. Scientists are studying whether those changing trade winds have anything to do with climate change."
Would we live longer if gravity was higher than 9.81 m/s2? I think it might be difficult to actually test this, but it is a fun question.
>It feels bad, but considering the resources we'd need to pour into getting one of our better devs trained in all the facets of web app security, it's unlikely to change any time soon.

Consider the resources you'll have to expend in the event of compromise and compare. While this analysis doesn't always prove the slower but more secure approach to be cheaper, it usually does. Unfortunately, you usually can't get the people holding the purse strings to accept the trade until they've been bitten.
Why do I need a phone number?
Out of curiosity, how much ad revenue has that video generated for you?
I'd agree, for a new comer I think Rails will be much more forgiving and easier to work with.
Show HN: Topick, Communities around your favorite topics
Thanks for the info! I didn't know some of this. Two questions:

1:

> there is a very real possibility of that certificate being blacklisted by browsers

Why would a browser blacklist a certificate? Is it possible for a browser to detect a MITM attack when the SSL traffic is all signed by the private key of a trusted root certificate?

2:

> Further, unlike the Kazakhstan certificate, those root certificates cannot bypass HTTPS public key pinning (HPKP).

You are saying that pre-installed root certificates behave differently than user-installed root certificates? Wouldn't that behavior be system-dependent? I was under the impression that no root certificates can bypass public key pinning... isn't that sort of the point of pinning? That it allows traffic encryption outside of the normal trust hierarchy? What makes the Kazakhstan cert special that allows it to break pinning?
Just a random guess, but maybe it's a regulation thing. Like the empire made such military-grade weapons illegal on civilian ships. And having an illegal military-grade autocannon mounted on the side of the ship would attract attention from authorities.

Of course this is all my own rationalization: it's not like Lucas thought all the intricacies of the Star Wars universe through for their technical accuracy. This is more like literary interpretation, only instead of showing "The Old Man and the Sea" is a metaphor for the tragedy of human existence, we figure out how space ships work!
This will really make it a lot easier to move existing apps to a PaaS setup on Mesos. I'm excited that I won't need to do any more port re-mapping, and won't need any more complicated Service Discovery tools. Instead I'll just be able to address my containers using mesos-dns.

This is one of the biggest changes Google added to Kubernetes when moving from Borg, and it eliminates a lot of the complexity in Borg.
And actually, earlier this year, WhatsApp started using the encrpytion protocol developed by the signal folks (Axolotl) to encrypt message data, Which is super cool. (I think group chats and images are still not encrypted, or something) I wonder if in the future Signal will focus on integrating their encryption into other existing chat systems like Facebook messenger, and put the Signal apps on the backburner.
Color trends of 2015
Bindings as sets of scopes: Notes on a new model of macro expansion for Racket
https://news.ycombinator.com/submitted?id=booksnearme

https://news.ycombinator.com/submitted?id=pinkbicpencil

https://news.ycombinator.com/submitted?id=cuphalffull

https://news.ycombinator.com/submitted?id=rubberducklyfe

https://news.ycombinator.com/submitted?id=bagelspark
I use wget because that was the first tool I used. I never think of curl until I want to do something aria2c is over kill.
> 1. Simple encryption for everyone to prevent mass data collection

Google might be the second biggest mass data collector, after the U.S. government. Using Chrome, one of Google's tools of collection (if I understand correctly), wouldn't seem to further that goal.
Does your service respect the Do Not Track header?
4 Questions with Martin Ford: Author of “Rise of the Robots” on Future Work
Cosmic rays have enough energy to travel through the atmosphere and damage the sight of commercial pilots. Its not a leap to think that the exposure is significantly higher in orbit.

http://news.bbc.co.uk/2/hi/health/4131232.stm

http://www.ncbi.nlm.nih.gov/pubmed/16087845
Kill claims are notoriously overestimated during this period, frequently by ratios of 5:1 or more. The only reliable way to estimate kills is to look at enemy records and see how many aircraft were recorded as lost during a given period.

Take a look at some of the entries here; April 17th stands out.

https://en.wikipedia.org/wiki/Confirmation_and_overclaiming_...

"the 91st and 306th Bomb Groups claimed 63 German fighters destroyed, plus 15 probable and 17 damaged. Only two were confirmed destroyed, with nine damaged."
I doubt it - the outsourcing industry would cry foul a million times over.
Yeah it's been a fun learning experience. Still going strong but not as much as when it hit the front page of reddit.
They may already had the foresight to train what their Recaptcha looks like.
This phenomenon appears in more than one culture, and I think in just about every culture it is damaging to conducting effective business, but not _extremely_.

Only companies big enough to endure this kind of damage (or smart enough to make sure it doesn't happen) are the ones that make it. If you're running a startup with 3-5 people, and someone is wrong about something, chances are the stakes are much much larger than a 100 person company. As such, you can't afford to have this kind of culture at startup scale, but you can, at large scale, because everyone gets more chances to be wrong (and have the company stay afloat). Then you start thinking about 1,000+, 10,000+, 100,000+ people companies and you can imagine how many small inefficiencies/mistakes like this companies can withstand.

Depending on where you work in the US, there are still managers/bosses that don't like to be contradicted, because of some perception of loss of authority/power/credibility/etc (and most likely some personal insecurity).
I think I found the law, anyone read Kazakh[1] or Russian[2]?

[1] http://egov.kz/wps/poc?uri=mjnpa:document&language=kk&docume...
[2] http://egov.kz/wps/poc?uri=mjnpa:document&language=ru&docume...

Edit: I think I got them this time. They seem to be ministerial orders under Kazakhstan's 2004 telecoms law:

In Kazakh:
http://info-con.mid.gov.kz/sites/default/files/pages/2_kaz.d...
http://info-con.mid.gov.kz/sites/default/files/pages/6_kaz.d...

And Russian:
http://info-con.mid.gov.kz/sites/default/files/pages/2_rus.d...
http://info-con.mid.gov.kz/sites/default/files/pages/6_rus.d...
Once upon a time in a Fab far away...

We had received three reports over as many months of a system that failed mysteriously in a manufacturing setting. We sent a field tech out each time. He examined the system, examined logs, found that an error had happened, but found no explanation for it.

On the fourth report, while examining the system, the field tech noticed that single thread of sunlight was passing through a high window and into the viewport of the system. He immediately realized that the optical sensor on the automated arm would be spoiled by that beam had the system been operating.

We had the manufacturer cover the window, and filed it as a bug that only happens at a specific time of day in a specific season when the sun is shining.
Slack and several other chat apps are web based. You don't really need it. Dev time and cross platform compatibility would be worse. With this they get at least 4 platforms.
Ask HN: How to build Android when you don't have 16GB of RAM/swap?
Infographic on Difference Between Continuous Delivery and Continuous Deployment