skysight-inc/HackerNews huggingface dataset:
> If they want to get serious about it, they should just disable http support and require https for all actions. Or throw up a big in-your-face warning on http pages, not just make a small change to an obscure icon that nobody really understands.

Even though I agree with you, I think that it's still a little bit too early for that. My prediction is that the browsers are going to start experimenting with this near the end of 2016 and that it'll become a part of stable versions of browsers somewhere in 2017.
Many years ago a CEO friend told me about this book. I was an useless office drone daydreaming the startup dream. I read the book. I was super motivated for 3-4 days but nothing happened. Nothing. After one week motivation was gone and I had been an office drone for a decade.

In hindsight: the book is great and the key message is very true. And this book is a great motivator (three days motivation is better than nothing) but in my case I needed way more to enter the dark side than reading a self-help book (which would be another long post).

Life is more complex.
> That's like going "QA is identifying a lot of bugs. QA are a problem. Fire QA. There we go. No more bug reports.".

That hits so close to home it's a gutshot followed by a knee to the face.
Navigate your way. Sidebar and Sidemenu
There are too many security holes and corner cases to serve any authenticated page over http. It's better to have your login page be served over https, but if you use authentication cookies, any MITM can easily pick them up from the following http pages and do what they want (for as long as the cookie is valid).

And that's beside a whole rake of issues from having http and https on the same domain. It's just easier to have https everywhere.
JSON Web Token Tutorial with Example in Python
Scale Bitcoin: Updated BIP 102 Gets Community Support, Now It’s Miners’ Turn
Note that you can have multiple types of plane with very similar controls & software, IIRC that's one of the advantages of Airbus the systems are pretty uniform so once a pilot's qualified on one plane it's much easier to qualify on others.
Just delete that test, it was failing anyway
I wonder if this project has struggled so much, because of the increasing difficulty in acquiring talent and talent getting poached in tech. Perhaps they left for SpaceX. I'm sure a project like this has an intense amount of technical debt that needs a stable workforce in order to churn out a quality product.
Apache Usergrid[0] (used by Globo.com, Apigee and others)

Kinto (Mozilla Services)

[0] - http://usergrid.apache.org/

[1] - https://github.com/Kinto/kinto/
> It's just easier to have https everywhere.

For what it's worth, this was not true ten (or maybe even five) years ago.

I'd say it's true today, for most websites, but it's worth keeping in mind that it's a relatively recent phenomenon that HTTPS is now pretty easy to set up, use, and maintain. That wasn't always the case!
Dashboard is essential. Thanks in advance for releasing a fully functional open source Parse dashboard.
Currently the Danish government keep deferring the selection of new fighter planes for the Royal Danish Air force. Partly because it's a huge decision to buy plane we can't really afford, but I also suspect it has to do with the F-35 not being done. It really seems like the plan was to just pick the F-35, because that was going to be the plane the US and many other allies fly.

I have no proof of this, but I won't be surprised that the moment the F-35 is deemed operational, the Danish government will announce a contract for buy a small number of planes. In the mean time all other potential supplies are going to leave the table because they believe their losing money trying to bid, and rightfully so.
Y Combinator, Khan Academy, and Stack Exchange Are Better Than Universities
There is Freenom that let you register free .tk, .ml, .ga, .cf, .gq domains. And the number of scam web-sites IMO discredit those domain zones.

Though according to the feedback online, Freenom to domains is not what Letsencrypt is to SSL. Their business model (cancel domain name registration then ask $xxxx to register it again) looks like fraud to me [1].

[1]: https://www.quora.com/Is-Freenom-a-fraudulent-company
Microsoft Sees Email as Magical Key to Cloud Growth
What a founder learnt after his startup failed dramatically
Browser should display a scary warning popup when submitting form to http (either always, or maybe at least when there is input type=password in a form). This would be annoying enough to get management buy-in to implement https, if someone still maintains the app - better than a tiny icon.

Breaking stuff is a last resort, nuclear option. There are many forgotten, old web apps that would totally stop working and people would switch to another, less secure browser as a result.
Dashboard is essential. Thanks in advance for providing an open source Parse dashboard today!
Rather than a desire to be active, I think it's a need. I can manage without medication but only if I'm active physically. That's why we shake our legs or arms while learning or digesting information. We need the activity.
Ask HN: Successful webdev freelancers, what are your recommendations?
I am in the process of starting my freelance business which will focus on helping innovative companies, which are trying to change the status quo, with their web/app development and server challenges.

I was wondering, whether any successful freelancers in this field could quickly help me (and others) out by sharing their experiences:

* How did you end up serving specific clients, how did they find out about you?

* What do you do to spread the word about your work?

* Any general advice for a freelancer just starting out, something you wish you had known back in the days?

I am looking forward to your replies, thank you very much in advance for taking the time and effort to reply.
>only Snow Leopard Server, which is not quite the same thing

Well, it's hardly different. It's Snow Leopard, same kernel and userland and everything, PLUS a number of extra packages.
I think posting a review of a game after playing it for 1 hour is awkward. But what is more awkward is upvoting reviews of other people that played it for 1 hour.
Login forms over HTTPS, everyone. This time we'll finally fix web security.

This time we'll be safe.
It think its about how much systemd comes with.

Init, session tracking, DNS client, DHCP client, etc etc etc.
That's not good news for many of Parse users :(
Here are some of the options to move on,
- https://www.firebase.com/
- http://www.kinvey.com/
- http://shephertz.com/
Five years ago was 2010. Other than Let's Encrypt, AFAIK, there hasn't been exactly leaps and bounds in terms of making https easier, at least for self-managed servers. It's still buy a certificate and set it up in nginx/apache/your favourite load balancer/etc.
There is 30 characters limit for the mail field :(.
Eve:  My Concerns
Do what makes you feel uncomfortable
You forgot your [1] URL
Yes, it's disturbing how many sites still do this. Most of the big shopping sites like amazon.com, ebay, Target, WalMart are http until you log in. Was also until recently very common on credit card sites, though all of mine are all https now.
I see, thanks for the info! It sounds like (to me, someone just starting down the microcontroller rabbit hole) like the 8266 might be something to aspire to use down the road. I'm not sure if the ESP8266 is as easy to use? The big advantage to the Arudino boards seems to be ease of use, ie; there are so many pre-built libraries to use for components, and "programming" them after that involves issuing it basic commands, not a whole lot of deep code (the way I understand it so far, that is).
[e: typos]
Yes! We have over 20 apps build on in during our alpha phase - ranging from e-commerce to payment wallets. Let us know if you'd be interested to try out the beta version releasing next week. You can write to us at build@hasura.io or @HasuraHQ.
This is not a feature complete replacement AFAIK. No push , no cloud code , no webhooks , no admin panel , no analytics though I'm sure people will contribute to the project and add some of these features.

EDIT: Hi folks, I was obviously talking about Parse, not Kinto. Kinto seems to have more features than Parse Server for now ! Looks like an awesome replacement.
The F-35 was a bad idea. In theory it made sense: fast, high tech, and stealthy. Then reality settled in:

The plane can only really support a small handful of missiles, nothing close to the Arsenal the Navy's F-18 used to be able to haul into battle. It's fast, sure, but that comes at a cost to fuel efficiency, so while infantry in remote Afghanistan can get air support in less time than a pizza, "one pass, haul ass" means that if the air strike wasn't perfect, they need to call in a second strike group and wait again, not to mention the immense cost for the first few jets and bombs.

The military is trying too hard to make a one-size-fits-all solution, when there has been one for close air support since Vietnam: the rugged and powerful A-10. In fact, with more and more of the fighters being forcibly retired, special ops teams are rightfully concerned, since they could previously rely on the A-10 to make 10+ passes before having to refuel, giving ground forces a significant advantage.

The moral of the story is that more tech, more cost, and more complexity does not always culminate in more value. We have become so accustomed to the notion that things will always get more advanced, and therefore better, that we have forgotten to look to the past to replicate the same success in the future.
If you think about it, the year of the Linux mobile has happened already.
Building it would be a very strong learning experience, I'd be surprised if you didn't know it after that.
Yea, my concerns are threefold: overdiagnosis, the diagnosis of young children, and the impact of treatment on developing children. I don't doubt that ADHD is a real disorder, but if the true rate of occurrence is 2-5% while the US diagnosis rate is 10%, that means that a huge proportion of American kids are overdiagnosed. And the leading treatment for ADHD is quite intense: lifelong use of very powerful drugs, with no real understanding of how that impacts normal child development.

I would be surprised if exercise alone works for people who struggle with a very disabling condition, but I suspect interventions less extreme than a full ADHD diagnosis and medication regimen would do a lot of good for kids who might otherwise be overdiagnosed as ADHD.

And as far as the concern as to whether the 95% should change to accommodate the 5%, what we're talking about here is "getting more exercise"—and when huge numbers of schools don't require recess—it's something that the 95% would benefit from.
I still can remember how 20 years ago my image processing professor used this guy as an example how you can create a successful company out of nothing with the help of computers.

The successful image processing company of this professor was killed lately by a patent troll.
Introducing the Three Amigos (2013)
So that you are lifting with 90 - 100% of your strength. Then you are developing your strength. I try to stay away from the 100% end by always gradually working my way up there. "warm up with weights"
A tool for live bands and musicians
Interesting setup. Is the table deep enough? Seems like when sitting, your knees could hit that shelf under the table.
If you want to leave any feedback I will be more than happy to hear it. Do you find any information missing? Do you have any suggestions on how to improve the experience etc.
I assumed corporations were relevant as much of this discussion has been saying unions should be banned for the public sector, implying that they're acceptable in the private sector. It's also where unions started.

Anyway.

At my previous job, in the British public sector, there were three unions who represented the staff, and I joined the one the others in my office had joined. Initially, this was because I appreciated the support a union had given someone in my family against a bad manager. Later, I stayed in the union in support of those with much less skill than me — the union was campaigning against "zero hours" contracts¹.

A year or two ago, the government imposed significant cuts. (Contrary to a lot of posts in this thread, government budget for salaries isn't unlimited.) I found out that my union seemed to be prolonging the negotiations unnecessarily, by being needlessly difficult — submitting 1000-page documents in the last hour of a 3-month consultation, for example, which had no more content than a 5 page document on the first day. Most staff I spoke to were more interested in knowing whether their job was ending, rather than hanging on for an extra month's pay during negotiations. (We already had 1-3 month notice periods.) I left the union, and didn't join another. Several colleagues left, and joined the more reasonable union.

For another example, the RMT is the more extreme union representing London Underground employees, ASLEF is more moderate (there are others, these are the two biggest, and not all staff are in a union).

Quoting from [2], just as an example, "The RMT has attacked a fellow Tube union for failing to call strike action as part of the ongoing Night Tube dispute. The RMT accused ASLEF of being "happy" with alleged assurances that London Underground (LU) would put forward new work rosters for drivers." And just look at the language in the RMT newsletter "only resolute determination will prevail...".

RMT goes on strike much more often, and make a lot of noise about it, but most of the staff in that union are less essential (ticket checking, platform staff, etc) and the trains keep on running. The train drivers generally belong to ASLEF, which is still a powerful union, but rarely tries to defend drunk drivers or similar.

[1] https://en.wikipedia.org/wiki/Zero-hour_contract#United_King...

[2] http://www.ibtimes.co.uk/tube-strikes-rmt-attacks-train-driv...
> Use https. And don't do client-side hashing, it's no improvement.

Well, it's an improvement if your users are reusing their passwords. Then multiple different sites will have different hashes sent.

But that's all besides the point, we should've been using zero knowledge proofs for authentication since the beginning.
Lots of plugins and a very customizable ecosystem. For me atom is a full IDE replacement, not just an editor.
In a way it is. The difference is that you do not need a gadget created by someone, but you create one yourself.
I have found Caddy (https://caddyserver.com) really helpful in this regard. By default it grabs a Let's Encrypt cert and serves your site over HTTPS (oh and it handles renewals too.)
Caddy + LetsEncrypt = easy https everywhere :D
[Objective] C++: What Could Possibly Go Wrong?
Japan Introduces Negative Interest Rate in Bid to Boost Economy
[dotfiles] my-public-ip: a shell function providing just Public IP at console
:D only if its really really funny
The problem is when people are seeing all their labour disappear as rent / mortgage to people who are adding no value. This is happening way too much.
The best solution is just to make everything use HTTPS. Using HTTPS for all traffic also helps to obfuscate which connections are the important ones.

Certain unnamed three letter organizations and nation states have the computing power to crack HTTPS encryption if they really want to, but using that power is expensive. Making sure all your traffic is encrypted makes it a lot harder for potential snoops to decide which traffic is worth spending the time and money decrypting and which isn't.

By using strong encryption for everything, even just reading wikipedia pages, you're doing everyone a favor by helping to make user privacy that much harder to violate.
If you're just scanning, it's not THE Difference Engine, it's a replica:

>"To be clear, the museum's difference engine isn't an original built 160 years ago by Babbage, but rather it is a working model painstakingly designed and assembled in the 1990s. ... The London Science Museum keeps one Babbage Engine on display, but its design team also assembled a second model for a private benefactor who financed the project. That donor, Nathan Myhrvold, a former Microsoft executive, originally loaned his Babbage Engine to the Mountain View Computer History Museum in 2008 with the idea to exhibit it for just six months."
My Blog Publishing Workflow on iOS, Part 1 [Tutorial]
>First; I run the same software on all my computers for around 15+ years; some libraries etc have been added ofcourse but basically I develop with vim in python, c#, java, c/c++, haskell, haxe, ruby, perl, php etc and the Chrome browser since it was out.

So, clearly, unless you SSH, you also install all kinds of stuff to support those languages (compilers, runtimes, linters, the whole of cabal, etc).

>I do not do 3d work or video editing and maybe it is faster in that; to me while coding it just does not feel as snappy and I can just show the beach ball to you on the pro while I have never even seen it on the air during work.

Well, I'm a coder too, and I use Vim too (also ST3, Eclipse, XCode and Idea for different stuff) and I've never seen the beach ball while coding with vim on my MacBook Pro. So what now?

In any case, I don't think a support team in a company is the one to solve such software issues. They are just some random guys (not even CS degrees) with general knowledge of computers, that mostly run through "customer service" scripts.

Given that it's 100% a software issue (and not e.g. a faulty HD causing slowdowns), the best way for someone who is a programmer is to go down and trace the root cause themselves. Try booting from another drive. Run dtrace (or what's called on the Mac). Check Activity Monitor. Etc.

Whenever I have such issues, on OS X, Windows or Linux it's just a hour or so to find the culprit. At worst, a day, after you already have a strong clue.

The battery life seems to be of the same origin. Increased CPU usage depletes the battery faster. I get 6-7 hours from my MBP, with Chrome and programming and mail and stuff going on, and it's a 2 year old machine.
There are many things beyond what is written in article that makes rich people rich. However this is good book for all people in general.
I recommend http://alterslash.org/ as a "real time" best of of what's on slashdot.
I have a suspicion that the project (not just the software) came off the rails when 'and VTOL' was put in the requirements.
Sure, that I have no problem with. Go forth and create wealth. Do not take land monopoly in a flawed system and force others to give you their labour.
Yeah. I find that it doesn't give me the preciseness that it wants so we're thinking of building our own.

Manual works - no point automating something that's going to save you 10 seconds :)

Thanks. I'm going to have a look at Zapier.
The Tuned Mansory Rolls-Royce Wraith Palm Edition 999 Smites with Luxury
If art for you can be replaced by this kind of mimicry, it begs the question of whether you really need or care about art in the first place.
The quality of the code is a factor. Parsed wasn't originally intended to be open source.
The insight on mobile device access among the homeless was very non-obvious and interesting.

> it didnt cost tax payers a cent to develop or host
Wasn't clear from the site on how it was funded. Could you share?

That seems like an really large number of data sources to put into one interface.

Could you share some insight on how the data came together? How is the data accessed - api, datadump? How is it kept current?

Nicely done! Thanks for sharing.
I guess that was the point: everyone was trying to conquer the desktop when the desktop was already giving way to a more dominant form of computing.

But hey, the Linux kernel and Konqueror basically won consumers in the end.
Mandrill is having  major issues
For too long popular a lot of popular gambling sites such as betfair and skybet have done this. I think betfair now is all https, but I'm not sure of skybet (and I can't be checking while at work).
The US: a mixture of economic fear, economic hope, and pseudo-Christian rhetoric that is stoked for gain by many.

“Socialism never took root in America because the poor see themselves not as an exploited proletariat but as temporarily embarrassed millionaires.” Ronald Wright

"17 percent of Christians surveyed said they considered themselves part of such a movement, while a full 61 percent believed that God wants people to be prosperous. And 31 percent—a far higher percentage than there are Pentecostals in America—agreed that if you give your money to God, God will bless you with more money." Time magazine, Does God want you to be rich?

Healthcare costs cause 62% of personal bankruptcies in the US; 72% of those who file for bankruptcy due to medical costs had health insurance at the time of illness. RomneyCare didn't change those figures in Massachusetts much even though everyone had health insurance, and ObamaCare has not made much of a dent there either.

What will an average person do in the face of such market forces? One (God-given) illness will wipe away everything they ever had, and just getting a better job won't in general help -- it's not a big enough pay bump. And collective political action is for socialists. So... pray!

edit in response to some downvotes: I'm not saying anything anti-religion or anti-Christian here; read carefully.
It's debatable - 'trap' isn't extremely well defined, it depends on the architecture. For x86 you'd really call it an exception rather then trap (Trap is used for a bit of a different meaning as far as interrupts go). At the end of the day though, with x86 exceptions/traps/interrupts are all handled like an interrupt (With a few differing details in how they are setup), so saying it's "basically an interrupt" is probably fine, at the very least it's close enough for a high-level explanation.
Although this may not be helpful to you, when getting started I just showed cool stuff I built to my friends. Some friends of friends needed code written, and I did their projects. I've been doing this seventeen years now, with no advertising ever - just word of mouth from people I've worked with.
> Mission “data load” software is also causing concern. This software is loaded on a mission-by-mission basis, working in conjunction with the permanent systems, to operate sensors and respond to conditions for a particular battleground

This sounds like a stupid idea to me.
It's interesting that the ages of the bankers are so prominently mentioned in the article. Everyone is fairly young, how much experience do they really have?

It could be justified if a more senior banker with a lot of experience was overseeing them. But seems like that wasn't the case.

It really makes me wonder, how much value are these guys actually adding to the transaction? If a bunch of 20 somethings can broker this deal, are the services really worth the insane fees being charged?
This reply indicates that you are several layers of reading comprehension behind the conversation that 'buserror and I were having. Please note that 'buserror's post helpfully began with a <sarcasm on> tag. It would have taken you less time to re-read the thread, than copying-and-pasting that pile of irrelevance took.

If the irrelevant block-quote was an attempted meta-comment on a thread that you found irrelevant or confusing, then keep trying! Don't let me discourage you!
New NHS testbeds highlight need for security in the internet of things
My understanding is that "interrupt" is the most general term, and "fault," "trap," and "exception" are all various kinds of interrupts with a very unclear set of rules distinguishing them.

And of course this is all architecture dependent.
I've been using VMWare Workstation for years and it is awesome product reasonably priced, but other VMWare products are too expensive. I think they have missed opportunity there big time. There is nothing in their offering for startups for example.