skysight-inc/HackerNews huggingface dataset:
Also: bare-ass raw HTML5 is actually really, really good. It does a nice job of providing structural definition, and I strongly recommend Mark Pilgrim's Dive Into HTML5 as both a guide and demonstration (in its Web incarnation) of that ability.

It still lacks a few things, which both hNews and ePub could extend, and a few other bits.

1. Metadata. Authorship, publication date, title, and some sort of content valididty really need to be a thing. hNews and ePub both go there.

2. Notes. I don't care how they're presented, but sidenotes, footnotes, endnotes, need to be integral to HTML. I've gussied up some solutions myself, they kinda-sorta work. I'm not entirely thrilled. These should be entirely browser-native and not require JS.

3. Some sort of hierarchical discussion. Comments, etc. Essentially a marriage of the browser and the Mutt or tin/rtin newsreaders. With filtering and other capacities.

4. Reputation management. Entirely local, or distributed. Good and bad authorship, as with elections, should have consequences.

5. Curation. Why this is lacking from current generations of Browser I don't know.

Add to this an in-browser set of styles which can be applied to the document templates mentioned above, and we're getting somewhere.
Me neither. Looks riveting.
My buddy enjoys rendering weather data. Using just one source- NOAA - he has to update the app several times a year to respond to their capricious, random changes to web interfaces, server names, random hosting requirements and so on. Its a real thing to factor into any data-repackaging app.
Ava: A refined, futuristic test runner
There's some conversation about this fairly far down the page. It would appear that the HN crowd are not even slightly concerned about the privacy implications of 'passive' biometric identification. Given HN is a fairly intelligent and tech-adept demographic, I suspect the general population would care even less. Pretty worrying IMHO.

Short of surveillance cameras in our homes, I can't think of anything worse for privacy than government coming in to possession of passive biometrics like voice signatures (e.g. a google voice DB dump collected through a FISA warrant). Just in case people genuinely don't comprehend the danger:

1. They allow a third party to identify you against your will.

2. They allow a third party to identify you without your knowledge that you have been identified/authenticated.

3. You can't revoke a voice sig credential like you can with a password credential. Once the government has it, they can do (1) and (2) at will for the rest of your life.

http://www.scientificamerican.com/article/biometric-security...
Interview with Josh Kalderimis from Travis CI.
Josh is a co-founder and Chief Post-It Officer at Travis CI.

But be sure to listen to the last 5 minutes.
I’ve got some bonus audio that didn’t quite fit into the rest of the interview that I tacked on at the end.
Google to File Amicus Brief Backing Apple in FBI Case
Hah yes - it's easy to spell, it rhymes so it's easy to remember, and we got the .com ;)
Apple files motion to vacate FBI's request
Blog post on Kube vocab is really clear and simple.. any other suggestions how to learn/read more?
Decide What You Want, and Get After It
This feels a little like wishful thinking. Remember YellowBox back when Apple originally bought NeXT?

YellowBox was going to be a cross-platform updated version of the OpenStep APIs. While I remember some alphas of it, it basically got nixed.

http://www.roughlydrafted.com/RD/RDM.Tech.Q1.07/4B800F78-0F7...

As much as I enjoy using Apple products, their history says that they would not directly support something like this.
Could you tell me the difference between Spread and [Helm](https://github.com/helm/helm)? What is the advantage of using spread over helm?
I've been thinking recently about crowdsourcing our own dataset of airplane data. When you get on a plane, tap a button that says 'we're delayed 5 mins'. When you land, tap a button that says you've landed. In fact, you probably don't even need users to tap those buttons. The better way would be to use the accelerometer and barometer to automatically detect takeoff and landing.

Airplane data sources are ALWAYS wrong in my experience. I have been on a flight that was 2 hours late but all the flight data sources/apps would say 'On time'. Bullshit. And very often there are delays that the flight data does not account for, but are real delays. User's phones could provide a much more real-time view on where airplanes actually are than any existing flight data source. I hate sitting on a plane and knowing that I am more up-to-date on how late we are than the official data source is. That's super annoying and it seems like there's an 'easy' fix: just build a new kind of crowdsourced, real-time flight data service.
I think most people don't understand Xamarin. Up until pretty recently Xamarin had no cross platform UI components. That is although all logic was shared, views had to be written separately for the different platforms - just like React Native.

With Xamarin Forms this has changed - you can add a Xamarin Form component and this will work adapt itself across the different platforms. The key word there is adapt - it is not like an HTML page, a Xamarin form input will look different on Android and iOS by default.

So I think your point, while valid, does not apply in any way to Xamarin!
"BBM" == Brilliant Bipolar Mind. The acronym is used in "The Lisp Curse" citation of The Bipolar Lisp Programmer, but defined elsewhere in material not cited.
To be excruciatingly precise: That text is not part of the GPL itself. It is instead part of a standard small boilerplate text you are supposed to include in every code file; the text references the GPL “as published by the Free Software Foundation”, so the whole of the GPL is invoked, and the code file therefore then has a license. But the GPL itself does not have the “any later version” clause.
Good point. I did mean statically.
I was about to post that that is disingenuous and that they are backing apple due to the case at hand, which a software person knows relates to the intrusion matter at large, but... the majority of the population only cares about headlines and political platitudes that they can obtain in 10 seconds or less. "TLDR" is not just a meme, but a sad reality.

[edit] As in some might interpret this to be: "Wow the headline says Microsoft supports Terrorism too!!!" instead of appreciating that the request has much farther reaching implications.
The US marines in particular went through a massive transformation int he 80's after their experience in Vietnam. The name people want to look up is John Boyd.

I would hazard a guess the average Marine officer knows more about Kurt Gódel's incompleteness and its real life applications than the average techie.
It's not about small-time donors - Wikipedia solicits these only as a PR measure, the real money invariably comes in form of large grants, such as the Knight Foundation grant, and it's inevitably with strings attached. Think Obama's 2008 campaign.
The order was issued to effectuate a search warrant for the phone: https://www.documentcloud.org/documents/2714001-SB-Shooter-O....
Sure, NIST ran the competition, but AES was designed by Daemen and Rijmen in Belgium, and vetted by a whole host of other academic cryptographers in an open process.

There's enough to be paranoid about already. No need to looking for problems where there aren't any.
Why would I want to have a ctr file separate from my pod or rc?
No it wouldn't be better. 'user' would be better. That's literally what OP wrote. OP would like terrorist not mentioned in the headline. Why isn't that obvious to you?
Apple brief opposing assistance order [pdf]
Although I can totally see how this is a vulnerability, the implications are quite limited. Basically you can log people out for fun, and you can log them in to an account of yours, which I think would be noticed quite soon.
FBI director admits Apple encryption case could set legal precedent
Yes, that is correct. That is not possible, modules might offer things in this direction.
I couldn't decide what to title the submission. Dang or others feel free to re-title as appropriate.

Edit: and i just noticed this is a dup
https://news.ycombinator.com/item?id=11177613
No one said that Atlas was directed at fintech.
Gary Vaynerchuk did an 8 hour preorder drive yesterday. From what I recall, it peaked at 211ish on Amazon in that time (giving him #1 in most of his subcategories) and they said they had about 8000 preorders in the bucket, most of which were via Amazon. TBH I was gobsmacked he wasn't at #1 given the book market.
Are you sure you are not arguing my point?

I'm not even sure what your point is any more. Looking through your comments in this thread, your argument appears to be that negotiations on international agreements must happen in secret, because reasons.

Representatives have enough time to familiarize themselves with the draft and decide what to vote.

We've already seen procedural technicalities used to set up end-runs around proper scrutiny by elected representatives, in the context of international agreements in the recent past. This has been done both in the US and the EU.

Even if those elected representatives do have ample time for scrutiny, if they have no meaningful opportunity to actually represent their electorates by advocating substantial changes as appropriate, the scrutiny is of very little value.

True or false? "When they are called on to scrutinise and approve TTIP, the directly elected representatives of people in the US and the EU member states will have available to them an effective mechanism to change the substance of the proposal in areas they do not believe to be in the interests of those they represent."
Sounds from Scientific, Meteorological and Commercial Satellites
Same here. I was fortunate to read it when I was young & impressionable (~16). It left a profound effect on me that's hard to succinctly express.
Great to hear that Matt!
Maybe the Medium "we're-shutting-down" post will become the occasional "hey world we exist" strategy.
Arithmetic is one place where infix notation is generally easier to read. If I were writing a program that basically just did a load of mathematics I may even consider using a different language.. However looking over the software I generally develop, I probably need to use arithmetic in about .01% of the code.
I think that's his main point about the discovery process in the App Store. Even being features numerous times by Apple wasn't enough.
I'm a self-made millionaire, and I'm convinced there are only 5 ways to get rich
That's an interesting project. Is this script open source by any chance? It's not of any practical use, but it'd be interesting to graph the fluctuations if there are any.
Working at work is a thing of the past
Racket doesn't get quite as bad (well it does but it tries to keep things looking like S-exps) but consider CL's Loop macro http://www.unixuser.org/~euske/doc/cl/loop.html loop is (from what I understand) idiomatic too. Yes it's a macro (so is (defun ...) though) but it's syntax a CLer needs to know in order to deal with CL in the wild. Format is famously even worse.
Wasn't there recently an announcement that OpenSSL was planning on removing FIPS 140 support in the near future and possible add it back at a later point in time?

Specifically mentioned here, OpenSSL 1.1.x won't have FIPS support: https://groups.google.com/forum/#!searchin/mailing.openssl.d...
The crippling thing about growing up poor that stays with you forever
Compression required to "diesel" petrol (gasoline) is lower, which is why some autos have the problem of continuing to run ("diesel") after the ignition (and spark) are shut off. Most now incorporate other controls and limiters, such as controlled fuel injection, to eliminate this.

Gasoline is comprised of a shorter set of hydrocarbons (mostly 6, 8, and 10 chain) than diesel (about 12-16 chain length, though 8-21 carbon are listed at Wikipedia). Volatility (and ignitability) increase with shorter chains -- methane (C2H6) and butane (C4H10) -- that is, two and four chain hydrocarbons -- are both gaseous at or near room temperature.

Longer chains still get you heavy fuel oils, tars, etc.
Beautiful ideas! Do you have a way to control the final stereo-isomer that comes out of the synthesis? I'm thinking of the "256 stereo-isomer" molecule that you mentioned. Or is it a case of brute force and select afterwards?
Looking at the architecture, there are two major differences:

* XtreemFS has POSIX file system semantics and split-brain safe quorum replication for file data. With Quobyte, we pushed that further and have now full fault tolerance for all parts of the system, working at high performance for both file and block workloads (Quobyte also does erasure coding). GlusterFS replication is not split brain safe, and there are many failure modes that can corrupt your data.

* XtreemFS and Quobyte have metadata servers. This allows them place data for each file individually as it can store the location of the data. With Quobyte we pushed this quite far and have a policy engine that allows you configuring placement. When the policy is changed, the system can move file data transparently in the background. This way you can configure isolation, partitioning and tiering. GlusterFS has a pretty static assignment of file data to devices.
Hey! Good question. So we're encouraging a .ctr file because we think container reusability will become really important, especially as more organizations share containers across teams.

We're playing around with this idea of embedding different kube objects and containers to construct applications across directories, so setting up directories with .ctr files will make the introduction of that feature pretty easy.
Apple's Motion to Vacate [pdf]
The implications depend on your app. If the user doesn't notice being logged into a new account, they may go on to create data in the attacker's account that they expect to be private (e.g. YouTube watch history).

On e-commerce sites, they might add a credit card - thereby allowing the attacker to use it.

Fortunately, HN doesn't have these risks, but it's a good illustration of how CSRF works in the real world.
Looks like it was yanked, the book is linked at the bottom of the article:
http://www.amazon.com/Putting-My-Foot-Down-Featuring-ebook/d...
Just a Good J.P. Morgan Chart
Naughty words
We finally did something about [Ember on] Android Performance
Alternatively, in many browsers you can create a shortcut that you can use when entering a URL. I have:

https://www.google.com/search?q=%s&num=100&tbs=li:1&filter=0

aliased to "v" for "verbatim". Here's instructions for adding a custom search engine to Chrome: http://www.swestwood.com/blog/view/fast-searching-chrome
Go-trigger: gloabl trigger library for golang.
We are long long days since that.

https://github.com/apple/swift-corelibs-foundation
https://github.com/apple/swift-corelibs-libdispatch

Works is well under way.
Meet Brain, the AI Engine That Wants to Replace Search
Nomad 0.3 Released - A Distributed, Highly Available, Datacenter-Aware Scheduler
I thought that gas based engines topped out at 30% due to the heat loss intrinsic with burning fuel(all that waste heat). Is this tackling that in some fundamental way or is it just an incremental improvement?
Selfies, Dating, and the American 14-Year-Old
Honestly, just stand a little bit farther back. The main factor seems to be the angle at which each participant has to crane their necks in order to make eye contact.
Definitely sounds like you would still need to coordinate with the host, but perhaps the different culture and mindset makes people more cognizant of the fact that they have to do the coordination quickly and be ready to do it.
> "For your convenience, DisneyPAC has implemented a payroll deduction system, through which your contributions to the PAC will be deducted from your weekly paycheck"

The idea of suggesting employees donate to your PAC is tacky, but payroll deductions are just over the top.

While they're at it, they should ask their employees to donate to a fund to help the company purchase office supplies.
The article pulls you in making you think there is some subtle dynamic.
Then the first discovery is psychological safety.
Very important but not that insightful because everyone is looking for this environment.
I wonder if Alan Turing's enigma project had a psychologically safe environment?

Now this notion of psychological safety is interesting because it makes me think of our larger environment (too much a leap!)
that it's similar to our personal safety ( perhaps requiring more surveillance?).
It reminds me of Hayek’s notion in "Road to serfdom" opining that submitting to less freedom for more safety will make you worse off.
I do have to say I would probably submit to more safety - it's so much easier.
Playing devil's advocate, could this also be a means by which Amazon increases their influence in the book selling world by decreasing the value of the title of "best selling" author? In the traditional sense, we think of best selling authors as achieving certain sales numbers in a given time period (NYT Best Seller's List for instance) where access to the club is limited by the amount of space on the list. In terms of a writing career, it used to be an illustrious achievement to make one of the major newspapers' best seller lists and became an advertising perk for later writing and speaking endeavors.

Now, with the advent of Amazon, anyone can be a best seller based on very fine grained categories (as shown here) but claim the same accolades based on the title of Best Selling Author. A lot of people accept the title at face value. Over time, this shifts the power from the traditional lists to Amazon since Amazon has most of the power in determining who gets a "best seller" label and at what granularity.

I think this is what the author is really concerned about. In the article he mentions his job consists of working with authors to promote their books and their metric of success is aiming for the NYT best seller's list. If that list loses its value and the cache of being a NYT Best Selling Author decreases, then the author's value add to an individual author is diminished thereby threatening his underlying business model as it stands now.
Commonly converting to decimals like that means 2.5 is read as 2 and a half = 2 years 6 months.
Both Michal Zalewski[1] and Chris Evans[2] have commented on this, and I tend to agree with them. The actual implications for a CSRF like this are very minimal.

[1] https://lcamtuf.blogspot.com/2010/10/http-cookies-or-how-not...
[2] http://scarybeastsecurity.blogspot.com/2010/01/logout-xsrf-s...
When a teenager attempts to build a breeder reactor
This was ten years ago, but I had a company that made streaming distance learning software and one of our first customers was the Cherokee Nation, who used it for teaching the language online. It seemed to me that teaching the language was a priority.

A bit of looking reveals they now publish archives on YouTube, for example: https://youtu.be/2DE691WwWac -- they do seem to get badly out of sync as they go (fact of life in flash video, with no timebase reference, dropped frames basically mean your video gets shorter.)

List of archives here: http://www.cherokee.org/AboutTheNation/Language/OnlineLangua...
> With well over 2 million apps by now (oﬃcially 1.5M as of July 2015), the iTunes App Store is an incredibly crowded place where it’s almost impossible to get noticed. Despite the persistent myth of the app developer millionaire, it’s extremely hard to make a proﬁt—let alone a living—as an iOS app developer. The Google Play Store is a similar story, except with the added bonus of rampant piracy and a zillion devices to support. There really isn’t gold in them hills, at least not anymore, and independent app development will soon be in sharp decline, if it isn’t already.

Is this true? Is the app store deceiving developers by pretending that earnings are better?
Kickstarter: App controlled lighting system
More power, less control
Thank you! So I've also compiled a list of K8s resources we found to be the most helpful: https://blog.redspread.com/2016/01/05/most-useful-kubernetes...

For example, the Godocs for Kubernetes are always kept up-to-date and are great for jumping around structs.
I don't necessarily believe that it's either the landlord's or the tenant's fault, but I also think don't like how often people dismiss human suffering with "it's a free market" and a shrug. Markets are meant to serve humans, not the other way around.
This is platform agnostic, correct? I can use AWS or DO, right?
It saddens me to read everyday how afraid the Americans are for their safety.
The best way to build a dev team: Go where the devs aren’t
Hi DrScump,

Author here. There's an important distinction I'd like to clear up, our product is a platform that provides monitoring across a lot of different areas and supports varied use cases.

Your concerns would be valid if this was something like not having up to date definitions for a security solution. What we are teasing out here is that the product was deployed to address other business requirements (such as Citrix performance, or Network performance)and our Systems Engineers were working in conjunction with another Healthcare entity to build this solution. Seeing how critical this issue is for all of our customers they then made it available for free to other customers.

If Microsoft or VMware built out runbooks for their orchestration products that met the needs of most Enterprises and gave them away for free I would hope people wouldn't see that as a limitation of their platforms but rather validation of its extensibility.

We cannot account for every possible use case when we ship the product, but its awesome when we see the community and our SEs come together and build on top of the platform and extend its value.
With Pyjion on the way from MS and the Python core devs declaring if it works they'll make the API changes[0] to connect CPython3 to an external JIT like Pyjion changes the game.

The window is closing to declare PyPy the successor to CPython2 before Python3 finds a way to steal the thunder and more people migrate from Python to new languages like Go or Python3.

PyPy is a fantastic piece of technology that should take the forsaken mantle of Python2 for itself. Just needs a few political moves. PyPy is pure technological innovation. Python3 is pure technological churn and pure politics.

You guys deserve the money and fame that will come with being the successor to Python2. Do it and good luck!

[0]https://github.com/Microsoft/Pyjion
The discussion in your link specifically says it does not apply to "searches by persons acting on behalf of a city, state, or federal government.". It links to this discussion of Fourth Amendment rights which seems more applicable to the case here:

* http://criminal.findlaw.com/criminal-rights/when-the-fourth-...

That page contains this quote:

>The Supreme Court has explained that what "a person knowingly exposes to the public, even in his own home or office, is not a subject of Fourth Amendment protection ... " But what he seeks to preserve as private, even in an area accessible to the public, may be constitutionally protected (see Katz v. United States, 389 U.S. 347 [1967]).
Gmail account contacts were stolen in a CSRF attack (combined with another vulnerability). This type of attack is often overlooked, but it's very real.

http://archive.oreilly.com/pub/post/gmail_exploit_contact_li...
> use the accelerometer and barometer to automatically detect takeoff and landing.

Or check location with a given interval and see when they no longer travel at mach 1?