skysight-inc/HackerNews huggingface dataset:
For those using nginx:

All nginx versions >= 0.8.19 (Oct 2009), and backported to >= 0.7.65 (Feb 2010), have SSLv2 disabled in default configuration[1][2]. Versions >= 1.9.1 (May 2015) also disable SSLv3 by default, which is not affected by this particular attack but suffers from the POODLE attack.

If you are on a version of nginx covered above, just ensure your nginx configuration does not have an "ssl_protocols" directive explicitly enabling SSLv2 (and SSLv3 for POODLE).

If you are on an older affected version of nginx, check your configuration to make sure you exclude SSLv2 (and typically SSLv3) with something like:

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

It is not necessary to worry whether your nginx is built against openssl 1.0.2g, as this release simply disables SSLv2 support by default. If you've covered your bases with your nginx configuration, the openssl update is not strictly required.

[1] http://nginx.org/en/docs/http/configuring_https_servers.html (versions listed at very bottom of page)

[2] https://drownattack.com/nginx
The last point may well be the best, "TEACH CONCEPTS, NOT TRICKS"
Agreed. Seems like a case of optimization for technical completeness rather than a business need.
> With the IoT, I don't know of any such writing.

Home automation gizmos, and speculating about them, have been around for a long time. Here's a quote from a newspaper article from 1990 - https://news.google.com/newspapers?nid=1755&dat=19900913&id=... :

"With a bedside remote control you'll be able to operate any electronic equipment in your home without lifting your head from the pillow"

Again, I agree with you. I haven't seen much need for such things. Then again, I don't even have a smart phone.

Oh! Here's another analogy; IoT is like the home robots of the early 1980s - https://en.wikipedia.org/wiki/HERO_%28robot%29 .
Yes I'll be retiring at 65 no problem! :-)

Oh no wait they are pushing back all the problems...
They support a whitelisted research.net domain, but genuinely curious why the name has negative connotations.
TLDR; A physical product was value-engineered to reach price point.

Using radios to adjust mechanical tumblers via solenoid or magnetron - with mechanical key override - goes back to at least 60 years. A quick patent search reveals many examples.

So, what's the koan here, if it's really zen-like?
Blue Ridge Labs @ Robin Hood ( http://labs.robinhood.org/fellowship/ ) | Brooklyn, NY | Onsite | Full Stack Engineers, UI/UX Designers, Product Managers | Fulltime Paid 5 Month Fellowship

Think the world doesn’t need another selfie app? We agree. Our intensive summer Fellowship is designed to help top talent attack big problems in new ways. By taking a customer-centric approach and pushing our teams to iterate quickly and cheaply, we aim to build products that can really make a difference.

The Fellowship is a paid, five-month program that invites talented innovators from the tech, design, and social change communities to spend the summer building new digital tools that address the needs of low-income Americans. Past fellows have come from Twitter, Linkedin, Facebook, Adobe, MOMA, Huffington Post, Successful Entrepreneurs etc. The products from previous fellowships have spun their ideas out as new ventures (both for-profit and non-profit), and gone on to raise funding from VCs, foundations, and corporations.

Our Portfolio: http://labs.robinhood.org/portfolio/#fellowship

This year, the program is focused on addressing the 'justice gap' ­ the fact that more than 70% of low-income families face the complex civil justice system without any professional assistance. This instantly stacks the system against them. In New York, as an example:
- 90% of landlords in eviction proceedings have an attorney vs. only 10% of tenants
- 100% of creditors are represented vs. only 4% of defendants
- 60% of detained immigrants facing deportation lack counsel

Apply Here: http://labs.robinhood.org/fellowship/
You may be thinking of this: https://www.technologyreview.com/s/544376/this-ai-algorithm-...
It's much harder to innovate than it is to copy someone's innovation.

Now that Slack has pioneered good UX in the space, it's easy to rip off.
Watch NASA TV Coverage of Kelly and Kornienko's Return
Zoom (zoom.us) is really good for video conferences. It's got a slightly clunky interface, but the excellent audio quality and graceful fallback are clutch.
This isn't a permanent solution, right? It's for several million miles of real world driving. You could certainly put other commercial vehicles on the same road. It's a commercial test bed for self-driving vehicles. FedEx, Amazon, UPS, etc might have other commercial needs. The traffic is separated for safety reasons at this time.
Add touch support please.
Aside from the obvious errors the publishers made, it's EXTREMELY SENSIBLE to see Amazon going 'we're going to sell your books at $10 but pay you like they were $16' and respond with 'what's the trick?'

Obviously, if you're doing something like that, there's some sort of upside for you. What's the upside? Is it... just speculating here... pushing literally every other serious bookseller out of the market by selling things at a loss, attaining near-monopoly status, and acquiring the ability to make publishers do whatever you want so you can crank your revenues up?

Of course, even if Amazon were doing something like that (how implausible! :-) ), the publishers weren't going to put a stop to it with the kind of antics they got up to...

There are already examples of how bad Amazon's pricing and fees are in areas where they have little competition - for example, the cost to deliver ebook downloads to users.

For example:
In Japan, ebook download pricing is extremely low (in no small part due to manga). If it wasn't, nobody would sell their ebooks on amazon.co.jp, because they'd get utterly suffocated by the download fees.
In every other country, the download fees are dramatically higher than those in japan. So much higher that it in fact drives independent authors to leave out illustrations and carefully optimize their PDF files to reduce costs.

You can see http://www.mhpbooks.com/what-does-it-cost-to-deliver-an-eboo... for an old article on the subject, but you can check the current rates and see that they haven't improved, and observe the very suspicious carve-out for japanese ebooks.
Agreed, and issues like this make me hugely suspicious of JS performance benchmarks. I'm only familiar with V8, but my experience has been that there are more or less three "tiers" of factors that affect performance:

1. whether the optimizing compiler gets used

2. random stuff that's impossible to know about unless you grab your code's internal representation and decompile it [1]

3. the raw performance of individual statements

The effects of (1) dominate (2), and the effects of (2) dominate (3). So when I see performance micro-benchmarks that purport to measure (3) without apparently paying any attention to (1) or (2), my first inclination is to assume the results are essentially random noise.

[1] E.g. whether statements get wrapped in type checks, whether an integer variable gets handled internally as a SMI (small int) or whether it keeps getting converted to a boxed Number and back. The cost of such things can easily exceed the cost of the statement you're trying to benchmark.
That is an interesting assertion that you do not back up in any way. I don't know about you I don't see the other steps as anything like easy. And I've been doing this software thing for a while now so I think I some benefit from experience to draw on.
Nothing has to be anything, but as long as humans are involved, shouldn't we try to maximize humanity? Maybe by attempting to make the world a bit more fun, interesting, and livable? Otherwise, what's the point of living, really. I mean, no one has to do that, but if being a profit-machine is one's goal, they shouldn't pretend that they are something else. Otherwise it starts to seem a bit sociopathic.
One lesson academics should learn: pdf-naming-skills.pdf.

I've been collecting interesting scientific papers and publications since early 2000 (I've a collection of 10,000 or so) and I've not yet seen a single academic, not even a computer scientist, who understands how to name your documents right so that when I download them I could quickly find them. I've to rename every single pdf. It's infuriating.

Someone should teach academics an SEO course.
I think what they were referring to was the reverse; the banks implementing OAuth plus revocable permissions to third party apps, such as Mint, etc.
You'd need a good wind blocker on the mic, and you'd get a lot of drag from the 20' cable, but this seems doable.
"When I got a Facebook account in 2006 he found me again and, not wanting to be rude, I accepted his friend request."

It's hard to understand why, having previously already blocked this person elsewhere, they would accept a friend request from them. I suppose now, 10 years later, one can hope that people exact greater control over their online social networks.
Maybe they won't even charge for it, just maybe call on you someday - and that day may never come - but maybe, they'll call upon you to do a service for them. But until that day, you can just accept their justice as a gift.
Most of these amount to libel, at worst. File suit.

There are excellent reasons for police to be uninvolved in what amounts to people saying mean things, even if those mean things are directed at your employer or friends.
At first I was really turned off by JSX. HTML in your JavaScript? Yuck! Then I migrated a 12k lines JS + 4k lines Angular templates to TypeScript. I didn't get any of the benefit of static typing in all of those html files. That was really upsetting to me. Getting compile time static safety on JSX components is awesome.
End result: The thing resolved itself, likely because someone else sued her stalker.

I have to wonder though: If her local police was ignorant of actual laws applying to her case, as she indicated, couldn't she just tell the officers under which exact laws she is making a complaint?

Further, if the local police is generally ignorant and incompetent, what would her chances for success be in using a lawyer to try and identify appropiate channels and contacting them?
'Child-friendly' search engine Kiddle is promoting ignorance, not safety
We've had good luck with appear.in.

The command `/appear` is even built-in to slack.

That makes me curious about what their relationship is.
We all make mistakes, especially when a situation does not seem particularly bad/urgent yet.
The first 5 or so years of 30 year mortgage you don't really pay off that much at all, it pretty much is interest, plus other holding costs and depreciation - money on fire. I was lucky with my place my last place and gain some significant equity in the first few years, but the value has been flat since the GFC. I haven't been living in my place for a few years either, I've moved around to where ever suits at the time.
But how are the dragons doing in contrast? I never see any news about them anymore. I presume they're just fine, and boring success isn't newsworthy. I'd love to see how wide the gap exists between the dragons and the unicorns now vs 2013/14, and what we can learn from that rather than obsessing over the 'corns.
There should be laws against this. A judge should be able to tell when a behavior is harassment, and forbid the harasser from contacting the person again with more severe charges if he does again.
Announcing Python 4 – now backwards compatible with Python 2.7
Alarming, isn't it? I mean, imagine the chaos that would result if everybody was allowed to put up websites, publish whatever they wanted and charge what they wanted.
Based on that excerpt, that NY statute looks pretty clearly unconstitutional. It also appears to criminalize, eg, vanilla customer complaints, as long as someone asked them not to. I'm not surprised the police weren't interested.

Edit: she leaves out the condition "for no legitimate purpose", which makes it plausibly constitutional, but nearly unprosecutable.

https://www.nycourts.gov/judges/cji/2-PenalLaw/120/120-45%28...
It seems weird to me that in this day and age people would be making negative comments about an app with this one's functionality being written in JavaScript/ecmascript. This app looks awesome and performs well on my platform, not sure if I'll continue to use it over the CLI client but so far I'm impressed.
There are – that's a restraining order.
> Guess who saw an uptick in print sales in 2015?

Textbooks.
Skype is absolutely a disaster, but it's the only video chat solution I've seen that handles audio well at all (things like echo detection). The super-expensive fancy solutions like Cisco's offering are probably better, but I haven't tried. All the web-based tools seem to be different UIs on top of the same fundamental technology. I think Slack is nice and they generally seem to understand how to make software for humans, so I really hope they pull this off.
Thanks for your questions!

- The job is currently loosely defined — we have projects that are hitting higher scale and others that are much smaller. Various jobs have different needs.

- We tend to have a couple of major projects and a few minor projects moving at once (some of our projects start as small personal explorations), but one project usually hits scale once a year.

- Every project has its own model, some rely on internal funding, some on grants, some on private partnerships.

Hope this answered your questions!
If you have more please write to us here: lil@law.harvard.edu
The IMF Confirms That ‘Trickle-Down’ Economics Is, Indeed, a Joke
Android app ratings library
Integrated Rating Request (https://github.com/mediavrog/integrated-rating-request) is an open-source Android library is aimed at app developers who want to improve the way users are asked for ratings. (as popularised by Circa in http://bit.ly/125IFe6)

It provides full design customisability, is based on a rule engine which is adjustable and/or swappable and supplies a list adapter decorator for automated management of the integrated rating request element in any list. Let me know what you think and if it is useful for you.﻿
A tech screen is a just that. It's not meant to accurately reflect the problems you work on, it's meant to see whether you can actually write code, whether you can explain your reasoning, and just generally how you react to a problem that requires some level of abstract reasoning. It's a way of filtering out candidates. At most companies, that's 30 minutes out of the 5 hours of interviews you're going to go through.

Cloning a directed graph seems like a perfectly reasonable interview question. It requires no specialized knowledge, just being able to navigate a fairly common data structure. I can't imagine a competent programmer not being to solve that problem on a whiteboard, which is precisely the point.
The problem is not whether cars can enter the exclusive lane. The bus need to be able to get out of the lane unless the lanes go everywhere the bus may want to go. Having tram lines go everywhere can be prohibitively expensive. Building exclusive lanes in major avenues used by lots of buses is cheaper and can improve travel times a lot.

Buenos Aires used to have a tram, actually. In the nineties you could still see the rails, on the road as you describe. But buses replaced them in forties because as the city grew the ability to change where public transport could go proved to be very valuable.
The indie author isn't concerned, because indie authors get much more per Amazon sale than they do from a traditional publishing contract.

The flooding already happened. There was a gold rush a few years ago when anyone who had any interest in writing slapped together an ebook and put it online.

Some of those authors did incredibly well for a year or two, then the market became saturated.

So there was a shake out. Authors who understand business - marketing, leads, keeping a mailing list, and running a blog that provides value - are doing somewhere between "ok, I guess" and "still earning well."

The opportunists and not-so-greats and other amateurs have given up and run away.

Now, the market for indies is stronger than it was - because as the post says, trad pub has strangled its own market share. And this is excellent for indies.
If you don't expatriate and live overseas then the US laws are equally irrelevant, regarding any previously owed taxes.

That's my point. Expatriation doesn't change anything concerning taxes you already owe.

> Who else would you expect was doing this?

Hmm. Perhaps I have confused your meaning.

I thought this whole time you mean people who owe taxes, don't want to pay taxes, and expatriate to try to avoid paying those taxes.

Do you mean people who will in the future need to pay taxes, and expatriate in order to avoid future obligations?

If so, then I was confused because these people don't yet owe anything.

FWIW, I file US taxes every year, having lived in Sweden for nearly 10 years. I've only once owed any taxes. The Foreign Earned Income Exclusion is, after all, $100,800 . Since that's well above the average income, I expect that many people who expatriate won't ever owe any future taxes.
Waging War on Cash
I'm seeing 11 trackers (6 advertising, 1 essential, 2 analytics & 2 social media) per Ghostery, but didn't receive any popups.

The "how much have you read?" indicator is pretty neat.
x.ai | NYC | ONSITE | Full-Time | Web Application Engineer

We are building an artificial intelligence powered personal assistant. The software will schedule meetings for our customers automatically without subjecting them to the typical back and forth over email negotiating when and where to meet someone. We are looking for a smart, self-motivated, and enthusiastic individual to join us on the journey in building the artificial intelligence of the future. You’ll get to work side by side with a small team of serial entrepreneurs moving at breakneck speed.

A Web Application Engineer will:
- Evolve Human-Machine interaction to improve data collection for our information-hungry AI
- Develop clever ways to capture both implicit and explicit human preferences
- Participate in design and implementation of new features
- Evolve frontend architecture
- Integrate with various external APIs

Ideal Candidate:
- Build maintainable, well tested and scalable code
- Excellent product sense; evolve features to provide better user experience constantly
- Awesome at JS/HTML/CSS
- Able to find the right tool for the job. Quickly evaluate different libraries but not afraid to roll your own stuff
- Experience with Node.js, Angular, and integration testing with Selenium
- Want to be part of a passionate and collaborative team, looking to make a mark in the world

Apply @ https://x.ai/jobs
Well, Slack did buy Screenhero not too long ago....
What specifically about the licensing? This is an actual question, not advocacy. IIRC, Facebook had a provision that disallowed use of React for a ridiculously broad range of offenses with respect to any of FBs intellectual property but that they narrowed it considerably last year to a more reasonable: you aren't allowed to use any of our intellectual property in React if you dispute our ownership of that specific property.

I could be characterizing this incorrectly, or you could be referring to something I'm not aware of, so what specifically are you objecting to?
The Most Exciting Art Pillows in the Known Universe
A monkey is someone dumb. Isn't a survey monkey someone dumb who takes a survey?
8000 people? Is it like a forum with many threads and topics going on or is it really like an IRC chat room with 8000 people in it?

Is this the biggest react community? Is being on Discord something they prefer to being on reddit or perhaps a forum?
Paper checks are the only free and universally accepted way to move an arbitrary amount of money in the US.

Most consumer spending runs through Visa/MasterCard credit or debit cards; the interchange fee is baked into the prices of consumer products. Most people have something that processes as MC/Visa (whether it is backed by a traditional bank account, line of credit, or non-check-writing account) but most people cannot accept such payments, and no one can accept them for free.

Tech-savvy consumers can pay each other small amounts of money through Venmo and Square Cash, and that is typically how smartphone-native millennials settle restaurant bills and alcohol purchases among each other. They are free, but you can't move more than a few grand. Very large organizations usually have a web portal where you can type your checking account and routing number to pull money from your bank account with 3-5 day latency through ACH. Perversely, many of them will charge a "convenience fee" for this service that is not applied to payments by check. This is also strictly less secure than payment by check, because it's at least a little bit difficult to get authentic-looking checks for account numbers that are not mine. I can type whatever I want into the box on your website.

Most consumer bank accounts have an Online Bill Pay feature with the ability to push money to organizations of this kind of size. Sometimes they work by transferring your money to a service provider who physically prints and mails a check on your behalf. Usually they're just the Push (rather than Pull) variant of ACH.

Only some banks have the ability to push ACH transfers by account and routing number, letting you pay smaller-time recipients (as long as they trust you with their account number). Sometimes you can also input an email address, and the bank emails them asking for the account details to push the payment to (because that's not reminiscent of a phishing scam at all).

There are plenty of uses cases not served by any of these options. The car dealership. The family member you're supporting. Your small-time landlord, or the friend you're subletting from. Small town governments, suburban school districts, etc. I'd guess most adults don't use checks frequently, but we still need them every once in a while.
You point out one of my HUGEST frustrations, "either an app takes EVERYTHING they ask for, and noone tells you how exactly they used those capabilities (no api log, no nothing), or you can't use the app". I hate this aspect of OAuth and am so desperate for a simple solution. But I sincerely doubt one is coming-- at least not for a while...
> And, if regard the material on differential equations as essentially nonsense, then good luck getting NSF grants for research in the subject

Luckily, in this world, NSF grant writers are not typically undergraduate students, and there's plenty of money flowing towards ODE research (here are some examples: http://www.nsf.gov/awardsearch/showAward?AWD_ID=1600381&Hist... http://www.nsf.gov/awardsearch/showAward?AWD_ID=1408295&Hist... http://www.nsf.gov/awardsearch/showAward?AWD_ID=1318480&Hist... http://www.nsf.gov/awardsearch/showAward?AWD_ID=1505215&Hist... http://www.nsf.gov/awardsearch/showAward?AWD_ID=1418042&Hist... http://www.nsf.gov/awardsearch/showAward?AWD_ID=1346876&Hist...) and of course there is much more cash going into PDEs.
Cryptography Pioneers Diffie and Hellman Win Turing Award
unsolvable captchas, hey? thats just what a robot would say...
I am taking a refresher class in calculus II from a community college and am pained by the tricks being taught and feel that the students are being deprived of learning core concepts. I am taking the trouble to read up and not too focused on the solution techniques that the professor emphasizes. However this doesn't do too much for grades. I wish he focused on concepts and application.
Does this mean they brought back PrivacyGuard? That was the main reason I switched to Cyanogen - to be able to use apps without giving in to their often ridiculous demands for access to my personal information.