skysight-inc/HackerNews huggingface dataset:
The industrial revolution needs to be understood in the context of land enclosure laws.

Workers had no choice. That is what allows employer exploitation: work for me or starve.

This is why the USA had slavery - there was abundant land. In the UK the UK was the plantation with land enclosure.

This is why now we feel exploited by "capitalism". Banks are flooding the world with fiat money as private debt primarily against land. Don't want to work for the man? You have no choice. Take out your banker debt for education and land and then pay them part of your salary as tribute.

This isn't capitalism.

http://fff.org/explore-freedom/article/enclosure-acts-indust...

When we have access to land we have a choice. Presently we must all toil away to maintain access to living space via a death pledge (mort-gage).

In a capitalist world money is the medium for the message. If we aren't financially free we aren't free.
most of the buses I see round here are full of either school kids or elderly folks. I suspect the annoyance they would cause by becoming drivers might be considerably more than they do as bus passengers.
Disable SSLv2 everywhere.
What planning are the endowments able to do that Vanguard would not also be doing?
That's a fair point. Suppose all the underperforming endowments switched to this strategy. All of that money would certainly lower returns.
Are they still available in the same shipping window? I read of some people no longer seeing "Ships in April", but May. I have not seen any confirmation of this from anywhere credible.
> Industrial revolution resulted malnutrition and deterioration of absolute living standards.

What? Capitalism did not create poverty or famine - it inherited it, and then swiftly solved it. The industrial revolution, if anything, obliterated it from the Western world. Compared to the centuries of pre-capitalist starvation, the living conditions of the poor in the early years of capitalism were the first chance the poor had ever had to survive.
I watched the first three episodes. Every single one had a primary focus of intense sexual shame or violation, and they all ended in just about the most miserable way possible. It was extremely well done, but some of us have enough negativity in our lives without piling more on in our rest & relaxation time.

I might have gone on if they were alternating the pattern or something, it was simply too much of one ugly core theme for me.
To make it more clear:

According to the info page, I can disable SSLv2 on OpenSSL only by installing a newer version of OpenSSL, that is not available on Debian (as I found).

(I also updated my original post)
Anything. Vanguard index funds just track the market so there's no hedging.

The main planning I could see overlap is executing large trades since they're both moving massive amounts of money.
Stop Trying to Be Somebody
Android dev here: There is virtually no submission review. As long as the bundle ID is correct I could upload pretty much whatever I wanted, the only things they check for are matching bundle ID's, correct version numbers, basically anything that could damage the Play store in some technical fashion. Everything else is up for the users to report, which is why the Play store is FLUSH with garbage apps.

Windows Phone doesn't seem a ton better, the only ones that have any handle on crapware are Apple, and even then it isn't as good as it used to be.
> ... and an increase in religion's influence in political and legal institutions.

It's local. It's not worldwide.
Are you sure? The robber barons in the industrial revolution was pretty bad.
Ariana Grande/Justin Timberlake – “Focus/Tunnel Vision” (Cover Mashup)
But my freedom requires the exploitation of millions. Don't impede my creative thought!

Your binary perception of the world doesn't take into account why we have systems at all, be they capitalism or government. The point is to maximize quality for everyone, and you can't get there with a single tool.
No worries mate... I really do need a break heh
Proponents of index funds have been proposing exactly this sort of portfolio for about 40 years. (Well, okay, 40 years ago was the origin of the first index fund, Vanguard's S&P 500 tracker; a portfolio amalgamating three market segments like this would only have become possible somewhat later.) The specific 60/40 stock/bond mix here (with moderate international exposure) is solidly in the "bog standard investment advice" category, too: I wouldn't be surprised if it's what most people would choose if they wanted to avoid accusations of post hoc selection bias. (In fact, that's my only point of concern with the choice: it's a distribution that I associate more with mildly cautious middle aged families than with major institutions. But I think that's the point.)

I think that just about any indexing fan would be perfectly content to say, "Yeah, please feel free to track this mix into the future, too." It's one size fits all investment advice, but again, that's pretty close to what index funds are all about.
It's pretty convenient for him to call the China that struggled several decades ago "communist" while that same country today, whose growth is one of the most impressive economic events in history, is credited with being capitalist (lol).
Just because you don't like an app doesn't mean it doesn't or can't provide value and deserves to be removed.
It would be interesting to see a sensitivity analysis of the mix to see what range of reasonably commonly recommended index strategies would match this baseline. Otherwise, it's very easy to cherry pick a set of funds to prove almost anything.
Does anyone really not know what "You'll be in good company" and "Join over 10,000 companies mean in context"?

The author knows very well that it does not mean he'll be "meeting them at a cocktail party" in context.

Serious question, that terse one sentence header may indeed be wrong but I can't buy the rest of the article because I don't believe anyone seeing that wouldn't actually know what it means in context.
Russian Android Trojan Acecard Compromises Online Banking
This is not hacker news. This is noise. Please don't post this here. By the way, the site is up for me.
Just remind me to -never- look to whatever firms you work at for a job. Because if they tolerate someone like you they gotta be more robotic than Rubio.
Could it be better spent? I'm not an impulsive tech buyer (rocking a 3 year old iPhone at the moment) but I think that every so often, being an early adopter show-off is completely worth the early adopter premium, on top of the personal enjoyment of experiencing a polished breakthrough technology.

With the first gen iPhone, it was really delightful to show dozens of people the future. Likewise, I have a strong inkling that the friends/family I show VR to will have their minds blown in a way that will be great fun to watch, providing them and me a lot more pleasure than if we were to wait a few years.
>Well, yes, but no forces you to do so.

Well, such implicit nudges are much more effective for making most of people do something than someone actually forcing them to (against which they might have rebelled).
Haven't some courts been going back and forth on whether it's 5th amendment kosher to compel someone to enter a passphrase and decrypt data on disk? I seem to remember a case involving mortgage fraud or similar.
I'm not especially great with security, but if this is true it sounds pretty serious. Surprised a spot check in HN Search didn't come up with anything related..?
Oculus made it seem that a headset should cost around $300 in the early days of the company.
Well I could probably create pretty good predictive algorithm (beating the house edge) for (this) roulette and this croupier given enough cameras and math/physics geniuses. After all the game obeys newton mechanics. And muscle memory generates quite repeatable results of ball and wheel spin momentum.

Also I would not be surprised if some really good croupiers with long years of practice are able to spin the wheel in ways that would give statistically significant deviations from randomness.
SSLLabs is the go to place for checks regarding your SSL/TLS setup.

https://www.ssllabs.com/ssltest/

DROWN is not yet marked there but you can look for "SSL 2" within the protocols section of the report.
Quote from paper: "Unfortunately, during our experiments
we discovered that OpenSSL servers do not respect the
cipher suites advertised in the
ServerHello
message.
That is, the client can select an
arbitrary
cipher suite in
the
ClientMasterKey
message and force the use of export cipher suites even if they are explicitly disabled in the
server configuration. The SSLv2 protocol itself was still
enabled by default in the OpenSSL standalone server for
the most recent OpenSSL versions prior to our disclosure."

Hopefully OpenSSL still honored a configuration setting to disable SSLv2?
>Well, yes, but no forces you to do so.

Well, such implicit nudges are much more effective for making most of people do something than someone actually forcing them to (against which they might have rebelled).

>I don't spend more than half an hour a day viewing those or posting replyies. I'm pretty sure I do can assess the said level.

OK, then the issue is with "using". Half an hour each day is not actually "using" those services. Just answering a work email could take 30 minutes for example.
Google allows everything by default, and only takes down apps later if they become a problem, whereas Apple reviews everything that is published beforehand.
Because there is nothing for people to try out and play with, this seems to be more of a "regular" announcement type story than a "Show HN".
Expand Your Business Investment Options
Still not too bad I guess. I wonder what their total sales dos the day were like.
Setting up new bank details, fake names and/or addresses isn't difficult either.

Some people cheat wherever and whenever they can.
I'll second Richard Morgan's Altered Carbon (but not the sequels) and Vinge's Rainbows End. You might also consider some of Bruce Sterling's stuff, Distraction, Holy Fire, and The Caryatids. Sterling has a more instrumental view of AI but I think he does a better job of addressing the social issues of technology than most of the other recommendations here.

Halting State, Rule 34, and Glasshouse by Stross might also be up your alley.

And Blue Remembered Earth by Alistair Reynolds but probably not the sequels.

Oh, and Nexus by Ramez Naam.

I'd certainly recommend Ken MacLeod in general but I'm not sure he's exactly what you're asking for unless you're also interested in examinations of radical political philosophy.
It's within a few percentage points of the holdings of the Vanguard LifeStrategy Moderate Growth Fund (VSMGX). There's a little more international in that, and there's an international bond fund included. And there's the 0.16 cost ratio, rather than 0.19.
I didn't drill down but are you taking "average" as the mean value of a normal distribution? I'd imagine a few big winners would male it more of a power series.
1. I oppose drug use (don't support drug laws, though).

2. I oppose sex outside of marriage.

3. I do believe in some concept of a God (not necessarily Christian).

4. I oppose most "social justice" movements.

So, yeah I think I'm fairly conservative. I think 2 and 4 are what get the most flak in the LGBT community, especially 4 since all I support is non-discrimination laws like ENDA and anything beyond that is redundant. For example, I think badgering someone like Brendan Eich for being a devout Mormon and putting some of his private funds into a pro-Prop-8 PAC is stupid. Basically, all social justice stuff and "call-outs" are pointless when the real issue is how the State and corporate actors are allowed to behave under the law. I don't care if Eich thinks I'm going to Hell. All I care about is will he conform to the law when it doesn't favor him in discrimination? Beyond that, I don't care as to his personal values. So, I get lots of static for that particular view point.
New HackingTeam OS X RCS spyware in the wild, who is behind the threat?
Have you actually read any muckrake pieces of that time? The industrial revolution brought about the redunancy of weavers who were skilled workers that were brought to poverty[1].

1. http://webs.bcp.org/sites/vcleary/ModernWorldHistoryTextbook...
> Oh come on, it targets SSLv2. You better have a _damn_ good reason for still having SSLv2 enabled on your systems.

"Unfortunately, during our experiments we discovered that OpenSSL servers do not respect the cipher suites advertised in the ServerHello message. That is, the client can select an arbitrary cipher suite in the ClientMasterKey message and force the use of ex- port cipher suites even if they are explicitly disabled in the server configuration. The SSLv2 protocol itself was still enabled by default in the OpenSSL standalone server for the most recent OpenSSL versions prior to our disclosure."
I also find this strange but it's common in the US. The families of crime victims often have a say.
It sounds like he was referring to a UI switch.
You mean where everyone is from an upper middle class family, a private highschool, and one of 20-30 prestigious engineering schools at which they studied under one of the same four degree programs, after which they decided to go and work at "this really hot tech company!"

Boy that's diverse.

The area basically vacuums everyone who fits the exact same mold from anywhere in the world – that does not make the area more diverse.
Yes, this is available for free accounts.

Private hooks is a paid-only feature which restricts the `hook::run` role to only run for authenticated users or api keys.
I make $70,000, pay little in taxes, except property, and the government pays for my children's healthcare. People misunderstand the US. Hell, I qualify for public housing, I guess I am considered as living in poverty, which is fairly ludicrous.
Jessie has 5 changesets on top of 1.0.1k which fix 14 CVE's:

http://anonscm.debian.org/viewvc/pkg-openssl/openssl/branche...

And similar for the other debian versions.
There could be a couple of problems at work here:

1: Google is only banning developer accounts, not the violating developer themselves (policy problem).

2: Google is trying to ban the actual developer, but failing at identity assertion (technical/data problem).
I love their introduction to sound synthesis. I never managed to turn simple waveforms into warm sounds, and their example of combinging a saw-tooth with a 2Hz-offset sine, then a low-pass filter and an attack/decay amplitude modulator opened my eyes.

Does anyone happen to know a more in depth tutorial, to create more advanced, maybe moog-like [1] sounds?

[1]: https://www.youtube.com/watch?v=WY2AeD0Tn4Y
Good riddance. Everything about her has been a disaster. From her single edit history to her statement that she was afraid to address the community.

She even has her name on a damn SOFTWARE PATENT. What were they thinking when they put her in charge?
At a high level, the justice system has never been objective, at least in regards to the poor and minority groups.
It didn't mention it but after fees it probably does better .
Google approve everything and relies on stakeholders policing.

Apple is black box which you should pray to not reject it for whatever reason and get incomprehensible rejection message in your mailbox.
Typically, most server software has configuration options that allow you to specify which protocol versions are permitted (i.e. ssl_protocols in nginx, SSLProtocol in apache). Sometimes, they also bring defaults that are stricter than what OpenSSL supports by default.

The difference between older OpenSSL versions shipped by distributions and the latest version is not that newer protocols aren't supported, but that they haven't completely removed support for older, insecure protocols. For example, SSLv2 was only disabled by default in OpenSSL 1.0.2g, which was released today. Meanwhile, a lot of server software (e.g. nginx) had it disabled by default for quite some time now.

This is mostly relevant if you have code that uses OpenSSL directly - but then it's probably not a good idea to rely on OpenSSL defaults anyway.

tl;dr Older OpenSSL versions are probably fine as long as your server software has good defaults.
Another Private Social Network? You'll find Kube is a little more than that
>Just answering a work email could take 30 minutes for example.

Depends on workflows at you office, the way you communicate etc.
I don't have too much email coming at me and for Slack and other messaging - I just have a set of rules for me and people to follow.
Have something urgent? Come to me and talk and give me a phone call. Not urgent? I'll give it a look and reply as soon as I have time for this. (short version of rules :) )

The problem for many people think that if they are online they should answer immediately, which is not true.
OpenSSL security advisory 2016-03-01
The whole bourgeoning field of legal thought called "Restorative justice" is questioning the logic of pursuing justice for justice sake. Ignoring the victims wants while prioritizing the wills of career-minded prosecutors and the cynical world-view of law enforcement. To me that sounds broken.

https://en.wikipedia.org/wiki/Restorative_justice
I have this reliable bookmarklet which makes comments collapsible, however it stopped working once I got a downvote arrow: http://pastebin.com/raw/iMkHgmNZ
Here's the link to the actual index mentioned in the article:
http://www.bti-project.org/en/index/status-index/
How the Evolution of Baseball Stadiums Might Inform the Future of Web Design
When the codebase is so big and you're hiring so many engineers it might be actually a good idea to have such an extensive style guide.
Hands on with Multichain
I am very curious about the EEG bit you are talking about. If I remember, they bought MINDO which only uses frontal electrodes.

Now, I do not understand why a flashing switch should create stress.
My guess - as a former google employee he may have knowledge of the inner workings of the company and can upload/create the app in such ways that he can maximize pre take down times.
FYI, for those are just worried about their own servers, the important part is section five, which I have copied below:

-------------------------------------

Q5: Should normal users or system administrators be worried?

OpenSSL has classified this vulnerability as "low severity", which we agree with. In order to mount the attack, the attacker has to be able to run the attack code on the same machine that runs the victim code. CacheBleed is a complex attack and there are much easier-to-exploit vulnerabilities in personal computers that it is unlikely that anyone would use CacheBleed in such an environment.

Cloud servers that commonly run mutually untrusting workloads concurrently are a more realistic attack scenario. A malicious client of a cloud service could use the CacheBleed attack to spy on other clients. While cloud servers employ techniques to isolate workloads of different clients from one another, these techniques only isolate the software and do not prevent hardware-based attacks, such as CacheBleed. Nevertheless, due to the complexity of the attack and its sensitivity to system noise we believe it is not currently a practical risk to cloud environments.

The attack only works between processes running on two hyper-threads of the same core. Disabling hyper-threading is an effective mitigation against the attack.
>It's not a limiting doctrine that says you can only do this or that.

Of course it is. It's a limiting doctrine that says "you may use the resources allocated to you within the property system, and no others".

This idea that property rights aren't a form of coercion is one of the most tiresome aspects of libertarian rhetoric.

Capitalism is a very effective economic system, and that efficiency often affords people more freedom than the alternatives, but it is still fundamentally a system of coercive constraints, as indeed any economic system must be.
To a first approximation, this is what one would expect of index funds, right? They're literally incapable of beating the broad market (they have some expenses, so they have to lag a little). One point that's not addressed by these statistics is whether any given university endowment consistently beats the market, or whether they all fluctuate around that average over the long term (say, 20+ years).

The underlying question is, why should universities employ big teams of investment experts to manage their investments? (Those salaries are, I suspect, not accounted for in these performance numbers: the source says they are "net of fees", but I assume that's only counting actual fees from the investment products themselves rather than the costs of in-house staff.) If you can get consistently average results with almost no investment strategy at all, what are all those salaries for?
How to Find America's Most Isolated Starbucks with Python and CartoDB
Sorry if it wasn't clear by linking to a post instead of the repository itself. There is indeed something to try out, here's the git repo along with details on how to build and run the tests and create new tests: https://bitbucket.org/ebadf/fuzzpy/
The important bit, if you have to decide on patching emergency:

OpenSSL has classified this vulnerability as "low severity", which we agree with. In order to mount the attack, the attacker has to be able to run the attack code on the same machine that runs the victim code. CacheBleed is a complex attack and there are much easier-to-exploit vulnerabilities in personal computers that it is unlikely that anyone would use CacheBleed in such an environment.

Note that frameworks that embed OpenSSL, such as NodeJS, will need to be upgraded as well. https://groups.google.com/forum/#!topic/nodejs-sec/ORAkxchrT...
Anyone who looked at investing knows that you don't compare pure returns, you compare return per risk (say Sharpe ratio or some other measure). 10% return might be truly impressive if it does not involve much risk.

EDIT: For people who look first at comments - the article compared some endowment funds returns with broad market returns and found that funds did not outperform the market. My argument that this is flawed comparison since it ignored risk.
Show HN: Salty.PW, a stateless password manager
LibreSSL isn't affected by the OpenSSL 2016-03-01 patches
TempleOS: Talking SETI's Demands on the Industry
Ok, is there any CVE that covers this attack / disables SSLv2?

This is rather in-transparent to me. Would be nice, if somebody could give better advice on this soon.
Googlers and Xooglers receive no special treatment. No current Googler would risk getting fired to help a Xoogler. No conspiracy theory required.
That only means good thing. Me? Living in a small town in an emerging country, I could use a better broadband service.
Planning for an “Atomic Workstation”
Write Clearly and Concisely
Attack of the week: DROWN
How to work with a software house successfully?
Show HN: Turn those dumb speakers into an interactive hub thanks to iothinks
I agree. Throughout the entire movie I kept thinking, "Damn. I'd have feelings for that girl really quick." And it was just a voice.
And everyone who was not a weaver (most of the population, and mostly not skilled workers) could now afford unthinkable luxuries in their daily life, like a second or third shirt (lightly used).

I think this has been posted around here before: http://www.sleuthsayers.org/2013/06/the-3500-shirt-history-l...
Not really. Machines don't care if you instruct them to build a Ferrari or a Toyota. There's no difference in robot labor. After that, all that's left is resources, and sending robots to mine outer space isn't a deal-beaker either.

AI + Space = everything we need

Machines have been labor saving entities since the invention of the wheel. Inevitably, one day they will perform all labor.
If Googlers read HN, and if the rumors of a popular Google-Internal Meme Generator are true, I suspect this problem may go away soon.
SEC whistleblower award of $750,000 goes to HFT critic