skysight-inc/HackerNews huggingface dataset:
> But books (usually) only go one way - the author speaks, the reader listens. This allows strong power-laws to take hold

Why do power laws necessarily follow?
The problem with Moore's law is that it is about transistors per ship but most people interpret it as computing power.

Intel may have shrank the chip but the chip isn't really getting any faster. One might argue that smaller chips means more cores packed on the same dice but that's not true either. The vast majority of computers still only have 2 or 4 cores (in fact it has become impossible to find a 4 cores ultrabook, something that existed a few years ago - Vaio z series).

So chips are not getting any faster. We're not getting more of them either. They might consume a bit less energy. But as far as I can tell the icrease in computing power is dead in the water and has been for 5 years.

Today the only reason to replace a computer is if someone spilled some coffee on it.
bringing freedom & democracy to the iraqis AND doing a startup - man, what a hero!
I agree that their style in responding to questions is really bad (one liners etc). Yet I'm having the experience that they responded quickly and with helpful information if you had a question.

I'm now just curious what happens to my data if they're sold to China.
I mean, the amount of personal data they are asking for when acquiring a certificate is not really small.
A parable about concurrency (demonstrated with comical cartoons)
Thanks for this write-up.

I was a somewhat inspired by Monograph when I started on Car Projects (a space for people to share their garage projects). I had seen Monograph somewhere a while back, and then when I wanted to find it again I'd forgotten the name and it was REALLY hard to find. Googling things like 'website for sharing physical projects' took forever.

I'll email you when I get closer to launch with Car Projects because I'd love to get your thoughts Moe.
I'm completely with yoi about his GMO stance and debate style, but (1) being write or wrong is not correlated to being famous or not (Hitler), and (2) he was right about many other things, and deserves respect for that.
Yeah sounded like they got a non-english speaker to do their intro. That or someone on the autism spectrum.

I wouldn't trust my data to a vendor that can't even pronounce data correctly...
Windows XP and Android 2.x comes to mind. Non-HTTP protocols (IMAP, SMTP, XMPP, SIP etc) may also struggle with SNI.

But the biggest problem here is wildcarded subdomains, since LE doesn't let you get more than 5 certificates per domain.
I think I was pretty plain. Designers suck at code. Coders suck at design.

That use case is the "we should only have to pay one guy and he should know everything" use case. Or the "I have an idea for an app. I'm a company now." use case.

Know why so many bootstrap sites look pretty much exactly the same?

---
If someone wants to change the color of the header on a website, should it require a code change?

If there's a table that someone wants to change the border on, should that require a person who knows three languages? Or should that require a guy who read an html book last week?

Conversely, what if there's a bug report about an element that is not displaying on a Nook Color? Should that require a developer to look at? Or wouldn't his time be better used working on an actual programming problem?

---
I interviewed a developer recently and asked him about a particularly difficult challenge that he worked his way through. Usually people respond with a problem that manifested itself in multiple ways or tracking down an important bug in a widely used library. This particular answer was about an errant price change on a major retail web site that took 6 days to implement. A price change should be a zero down time absolutely no-brainer data change. But some idiot along the way decided that he should embed html AND javascript in his java class and it took a team of people several days to track down where exactly the error was that produced the errant price. There's stupid code like that all over the place.

With experience, you learn that you can avoid those kinds of problems completely with very little overhead early on.
This is an excellent article. Also brings to mind some of the writing that Nadia Eghbal has been doing recently about open source (https://medium.com/@nayafia).

Not being an asshole is obviously the right basic mindset. But if you're a maintainer of open source, there are a number of other considerations to keep in mind. You really want your project to be as accessible as possible.

People talk sometimes disparagingly about "drive-by pull requests", but these are good things! Your core contributors can only do so much, and you're likely to get only so many people capable of making core-level contributions. You want to take advantage of the long tail as much as possible.

This is especially true when you consider the pool of potential contributors is often much wider than seasoned open source contributors. You'll get people who have never squashed commits before, or never even submitted a pull request. A welcoming mindset is the first step. But you need to be thinking hard about how difficult it is for a new contributor to onboard onto your project.

I know it's a lot of work for maintainers who are already stretched thin. If this is a topic that interests you and you want to chat, feel free to email me. I'd love to help figure out how to make this easier for more maintainers.
Like it or not, they do have a crack team of engineers. 90%+ of the Windows kernel hackers in China have worked, or still is with Qihoo.
> (... now if only I could get rid of the ads...)

uBlock Origin
One day we will have a 'no-awkward'™ english like syntax: https://github.com/pannous/english-script
Everyone gets funding
Yangler.me is the first online accelerator program (MOOC) after which every team that gets 95% or more can get funding in return of a small stake 7-10%.
The mission of the program is to give anyone the opportunity to build a tech-startup. You can improve your score as many times as you want till you get needed % for funding.
The program is welcoming entrepreneurs from the US, EU, Singapore etc -please, read more here: http://yangler.me/
Online poker in the US
10..100 is a Range in Ruby. 10..100 does include 100 (it includes both bounds). On the other hand 10...100 (note the three dots) does not.
Tory government’s war on porn: Age verification proposed for all smut sites
https://hn.algolia.com/?query=Buffalo%20buffalo%20buffalo%20...
We detached this subthread from https://news.ycombinator.com/item?id=11107209 and marked it off-topic.
MOVIE Online Watch: WALL·E
AppleScript tried to do just that:

https://en.wikipedia.org/wiki/AppleScript

It doesn't work out very well in practice. Inevitably the syntax diverges, and then it's pretty confusing for the novice user: why do some sentences work but most don't?
me three... I even offered
Your climate change friend was right. The technology for converting coal into oil has existed for decades. Nazi Germany used it during WWII. Peak oil is a scientifically illiterate concept. Of course, these days, it would be smarter to use micro-orgranisms to create oil from some energy source and feedstock (like solar).
I think it's quite obvious strict aliasing is implied in this case. The bug is than even with strict aliasing he should get the result he wants, because the last time he wrote to the pointer before reading it as an int he wrote it as an int and hence it should keep the int-value 1.

Having that said, balancing aliasing like this is just asking for trouble, don't try this at home.

EDIT: The more i look at it the more i think he is wrong. Since pi and pd shouldn't be able to alias, the last assignment to both of them is allowed to reorder. This is just UB.
Reading this I'm more worried about the personal data StartSSL has about me. I never felt good giving away so much personal data to CAs when acquiring certificates to identify myself. Do we know how StartSSL handles this? Do the Chinese now have a copy of my passport, electricity bill et cetera? (well, I've been to China already, so the state already got my passport, but not necessarily a "private" company).
Ask HN: What telegram bot should I build?
I'm a competent game developer without any server-side experience. I recently noticed the rise of chat apps and bots in them, and Telegram, with their open bot API, seems like a good place to start building something. But after writing a couple of simple exercises, I find myself unsure what to build next. (I constantly see new bots released for Slack, but this office-oriented network is a completely different story).

What seems like a good bot that would be not prohibitively hard to implement (so, without features like natural language processing) and at the same time, useful to people?
That was not a comment directed at jacobr. It was a statement about code.

There's stupid code all over the place. Twenty years ago, you had to know networking, hardware, relational databases, and programming to get anything done. Nobody did QA testing, AB testing, or even had a development environment seperate from production.

We're slowly growing up and realizing our mistakes. If we can't call our own code stupid, then we've achieved a level in our political correctness culture that ... well, that's just plain impressive.

If anyone felt personally attacked, I certainly did not mean for it to come across that way. I am in a bit of a mood tonight...
Single downvotes don't really mean much - the voting buttons are hard to hit on mobile, and it could have been someone trying to vote you up. Don't take it too much to heart.
MOVIE Online Watch: The Dark Knight Rises
It's a side effect of their implementation and you should continue to not trust their default ordering.
It took me 2 hours to realize how funny this comment was.
Yes! That was way better, thank you!
For example farmers are complaining about lack of open-source cattle managements software.
For $499, You Can Buy Your Kids a Little Tesla Model S from Radio Flyer
The desktop download softens the blow somewhat...
...except it's not possible to run APIs on schedule - which is exactly what I used it for.
Gutted.
Radio Flyer now makes a Tesla Model S for kids
Odd. Did you try to reverse the dimensions then?
It appears that since Ruby 1.9 they guarantee insertion order: http://ruby-doc.org/core-2.3.0/Hash.html

I guess there are two approaches to solving the problem of people using your data structures the wrong way.

Edit: wrong link
Ah, nostalgia. I used MSN Messenger religiously until I started college at which point had to switch to Linux (thank goodness). Lots of fond memories. At some point I figured that since MSN lists the online "buddies" in unicode order, putting a space at the start of one's display name puts them at the top of everyone's list!

Also, it's interesting to see how people corrected their typos back in 80s, "Er, " instead of "*". I like the former better actually.
Live Object Programming in Pharo MOOC Is Open for Registration
Download the Kimono desktop tool for Mac and unzip it. It is nothing but a nodejs based web application.
> Begging the question is an informal logical fallacy

Usage dictates meaning. More people use and understand 'begs the question' in the GP's context than in the logical fallacy context. Few members of the public could even tell you what an 'informal logical fallacy' is (even the idea of it without that specific label).

Edit: your own wikipedia link even points out this same point, at the end in the Modern Usage section.
I have read every book on Postgres, they are literaly all crap, boring, tedious and simplistic.
On contrast, the on-line docs on the postgres web site, are superb, matching the very high quality of Postgres itself.
It is possible to write interesting books with personality even for a dry topic such as Sql eg Itzik Ben-Gan for sql server for general sql Joe Celko opinionated but entertaining, Stephane Faroult one if the best ever sql books "The Art of SQL" , Use the Index luke is great - even Chris Date's academicy books are more interesting than any single postgres book which is a shame since Postgres is truly amazing application.
Nissan's Self-Parking Office Chairs
Not that wrong. You're just saying you have to enable China.

Do you make it clear in the UI that a private key is ending up on Baidu's servers operated by Baidu's people? I don't use CF so I don't know - I'm just curious what the user experience is like. I'm asking because your CEO addressed concerns in the CNBC article about Baidu having access to your intellectual property so they seem to have full access.

I think the issue of user education is a real problem. I'm Wordfence's CEO - we're the biggest security vendor in the WordPress space. (We occasionally work with your support staff to solve a customer issue) and I know that user education in infosec isn't what it should be. We're actively working to try and fix that with a vendor neutral learning center we created.

So for example I'm not sure users understand the impact of having a partially secure connection to the endpoint when you only have SSL to a Cloudflare edge server and are reverse proxying in the clear. Same issue here - I'd like to learn more about the UX and how the location of their private keys is explained to them.

I think as vendors we're often to blame because the marketing team gets a little too excited at the cost of user education and clarity.
Disagree. GPU. Vector computing. Ex: SSL is faster.
That's wrong. You can get more than 5 certs/domain: either you have to wait a week (it's 5 certs/domain/week), or you include multiple hostnames in a single certificate (up to 100 IIRC). The latter would allow 500 subdomains/week.
HN should disallow hyperbolic, clickbaity titles.

this thing reads like PR 101.
Not really, just my personal experience.
That's weak I know.
I feel like a designer would have the opposite sentiment.
good point! all syntax highlighters should color negations in neon red
It's like with those "Play X backwards to hear the Devil" type videos. You understand it perfectly with subtitles, but close your eyes and it's gibberish.
IT has to be satire right?
Blogging with Hexo
I like when a source claims it's dead, while not showing a proper graph to explain how far we are from the actual prediction of the Law. Ars, you couldn't try a little harder?
Beşiktaş Bahçe İlaçlama
from my experience Apple's problem with AppleScript was not so much diverging syntax but constant undebuggable crashes
Quote from the article:

"StartSSL already refused to revoke certificates affected by the HeartBleed vulnerability and accused the user from negligence."

That's wrong. They did charge a $25 fee for the revocation, however. I think it's reasonable since there is probably some manual process involved and the certificate was already free. They have to earn money somehow.
> For me and all of my friends text messaging is practically free (there's no unit cost, and every plan we would want has no unit cost)

I'm guessing you and your friends all reside in the same country.

SMS/text messaging can get very expensive, quite quickly, if you're regularly communicating with people in different countries. Eighteen months ago convinced just four of my most "messaged" contacts in different countries to switch to a messaging app (Telegram in this case) and I estimate savings in the region of £50-£75 per month.
I like the ITRS roadmap as much as the next person, but maybe we could wait a month to see what it says before reporting about it?

I imagine some folks in the right places already know what it is going to say and this is ars giving us a piece of that, but... there's not tons here yet. Would rather just read the actual roadmap in a month.
The Secret Search Engine Tearing Wikipedia Apart
Is there any alternative to StartSSL for free S/MIME certificates that are trusted by the popular mail clients?
Teletraan – Pinterest's deploy system
Which countries are mentioned the most on Hacker News?
... and from smilies, to emoticons to emojis.
How about storing the letsencrypt certificates in a data-container/locally on the host and mapping those files to the nginx container when you start it?

For the very first time, you can use let's encrypt's manual verification process, but then have the let's encrypt client set up to renew certs automatically (possibly even from a separate container) using same data file mappings.
you never heard of irc bots?
> it's unlikely he would be as receptive to me reaching out to him.

On the contrary, it is very likely. His site encourages readers to contact him.
Hi, thank you for the feedback and suggestions. We will make sure to include the pricing in the new homepage we're working on. :)

By the way, we're more about quick sharing than syncing. We will be overhauling our homepage to make that clearer. Here's the app if you're using a Mac (Windows app is coming soon): https://itunes.apple.com/us/app/jumpshare/id889922906
Was going to say exactly this. I just realized the other day my macbook air is now almost 5 years old, and the only thing I want to replace is the battery.
I agree that's sneaky. I would never use that feature - it's an invitation to do MITM attacks later on.

When I first saw the form with this option on their website I thought "oh so that's why the Mossad is running this CA for free..."
Yeah...ELI5, what are those additional transistors really doing here if no big performance gain in benchmark or application, but in fact they still grow exponentially until now?
These alternatives don't offer S/MIME certificates, do they?
Ars is not the source, the source is the people who makes the chips, who said it won't increase anymore.

And when they actually say it ahead of time, instead of try and potentially fail, that's when you know it's really over, they gave up on even trying.
Those are proof Moore's law is dying. We're stuck eeking out more work per transistor with specialized approaches because we can't just throw more transistors at the problem.
Moore's Law isn't exactly scientific... It's more like a Nostradamus-esque good guess. Counter-arguments can be just as lazy without deserving unrestrained criticism, I suppose.
Get rid of deadlines to get more done
Funny, these terms are used in my field: https://en.wikipedia.org/wiki/Validity_(statistics) and https://en.wikipedia.org/wiki/Reliability_(psychometrics).

Terms aside, this is a very good article. I've experienced the trade-off between reliability and validity in devising measurements myself, but had not realized it is unavoidable.
I've had good experiences lately, when they relaunched their website the option to create your own certificate for S/MIME had disappeared (on Mac - apparently it was still there when using Windows). I opened a ticket and the next day it was fixed. Now you can even upload your own CSR for S/MIME certificates which allows for 4096bit S/MIME keys. Previously they only had the in-browser key creation. Nice.
have you tried using something like https://gethttpsforfree.com/ as a front-end to the Lets encrypt process?
Let's say we want to know how usage differs in one subreddit vs another. If you just train two entirely separate models, you end up with two vector spaces. The meanings within each space are entirely relative --- the absolute positions obviously aren't significant. You can try to learn a mapping, but the transform is not necessarily linear. (Interesting empirical question there...)

What you need is a 'seam' that connects the two vector spaces. I would do it like this.

Train a single model, with the words decorated by their subreddit. So you have combat:/r/gaming and combat:/r/history as different tokens. Then you have shared tokens which aren't decorated in this way.
The official Let's Encrypt client is bloated and wants to fiddle with your HTTP server configuration. Bad idea.

Use something small like https://github.com/kuba/simp_le or https://github.com/diafygi/acme-tiny
With open chat in Hearthstone, wars would be fought, friendships would be hopelessly broken and feuds would run eternal.
This links to a blank page for me.
I was hoping there would be a link to "Alan"'s work so we could see for ourselves how genius he is...
Windows XP and Android 2.x both have big security problems. You should encourage your users to upgrade.

Also I think with Firefox on Windows XP it should work.
Would like to know that too. For websites there's Let's Encrypt but I haven't found any suitable solution for S/MIME...
This is good for passwords right?
Battle Camp Hack Tool No Survey 2016
Both pronounciations are correct:

https://www.quora.com/How-do-you-pronounce-the-word-data-cor...
That's a really weak justification. For most of those "braindead" packages, it is actually fairly easy to get them to install into arbitrary locations. After all, both Fink and MacPort have been doing that with great success for over a decade.

Sadly, you are correct about "not every single Homebrew formula has actually been tested with a non-/usr/local install path". In fact, while there are many Homebrew formulas of great quality, my impression is that there are also m many of rather poor quality, with other problems in them. E.g. just yesterday, I discovered that the Homebreak lmdb formula does not build properly versioned shared libraries -- because upstream didn't, and the packager either didn't notice or didn't care to fix it

I rarely (if ever) this kind of issue with MacPort and Fink, which try hard to avoid such problems (at the cost of a higher entry barrier for packagers -- for better or worse). Mind you, I am not everything is golden with them, either.

Disclaimer: I've been involved with the Fink project since OS X 10.1 or so.
> The highly integrated chips used in these devices mean that it's desirable to build processors that aren't just logic and cache, but which also include RAM, power regulation, analog components for GPS, cellular, and Wi-Fi radios, or even microelectromechanical components such as gyroscopes and accelerometers.

This sounds like very bad news for companies that currently make those components.
As a totally-naive-to-your-problem-particulars and totally-hacky suggestion, why not start nginx with a starter cert, then mv the new cert into position and reload nginx?
You're doing fine. I think there's need to be potential for friendship in the first place. If one person don't get the other's humour or the other person don't get the response, I think it could be because there's not enough shared experience or shared perspectives for the two people involved, and that's that. There's nothing you need to do - the kind of person you are, will likely be friends with, the kind of people, your kind of person tends to be friends with, so enjoy. :)
you must be real fun at parties...
I would have guessed Narcissistic; but it's important to remember that at this far remove it's just a guess.
> The vast majority of computers still only have 2 or 4 cores (in fact it has become impossible to find a 4 cores ultrabook, something that existed a few years ago - Vaio z series).

This is entrirely false. Intel i7 current generation models have 4 cores. Are you trying to say that it's hard to find an ultrabook with one of these chips?
I found this to be an intentionally trite and surprisingly insightful and concise description of humans thought patterns [within the context of people who start thinking big-picture operations are concerned with small-time operators]
A more objective title would have been how a side-project led to an acquihire at Automatic.

It is still an inspirational story somewhat similar to path taken by patio11.

Are there any side projects which actually have turned into sustainable lifestyle businesses or better?