skysight-inc/HackerNews huggingface dataset:
The existence of things that claim to have been committed as me, with no proof and not in the history of my master branch or a released tag, is irrelevant. My users use my release tags, and my master branch, they don't use random commits you make "as me" elsewhere.

Before SHA1 is broken, you can't change things that I have committed, unless you have access to my account. If a SHA1 preimage attack becomes available, you can. If a SHA1 bithday attack becomes available (for the low low price of $75k, croudfund one today!), you can, by sending me some particularly evil forms of merge requests.
It's possible to get cheap, good, and liveable housing in NYC too. I just got a nice 1BR in the Bronx for $1525 that's in a great neighborhood and is less than a block from the express lines. As long as you're not in one of the top-10 trendy neighborhoods there are plenty of great apartments that are within 30-35 min of midtown.
> whatever you're sending over WhatsApp is likely going to be used by FB

The article links to the technical white paper[0] which explains why your points are invalid.

> I'm still inclined to trust apple's iMessage a bit more

Do you have any proof why iMessage is more secure or is that statement also baseless?

[0]: https://www.whatsapp.com/security/WhatsApp-Security-Whitepap...
The great thing about teslas is that they can instantly roll out features like user themes or "flat design". Every time my Audi is at the garage they take ~15 minutes and a special-purpose Laptop to update some arcane piece of software in the car (fixing bugs).

It's such a huge shift in mindset and operations for the incumbents they won't be able to make it. Recent models still come with a sim car slot so you can get real-time updates on the map.
Why is extreme population and industry concentration such a great thing? Yes, there are certain virtues to the concentration of talent and energy which happens in major cities generally--but I'm unconvinced that doing some Singapore-style 20-year plan to transform San Francisco into a western Manhattan is either necessary or desirable.
Wait, how many chips did they cram in there that they're getting 170 TFlops. Even at a very generous 10 TFLOP per chip that would be 17 chips.
Valve's Launch Trailer for SteamVR and the HTC Vive
Here's How You Can Check If Your Partner Is Cheating on Tinder
Show HN: Sity – share what you've done with your team and give feedback
Agreed. I think the real news/exciting point here is that they've been able to sell at a premium over comparable (size-wise) luxury cars (E-class, 5-series, A6) at quantities that are still impressive and growing.
Agreed. I watch network television once a week during football season, and then never again until the following year.
I echo that.

When it comes to the car hardware (besides the battery-thing) the Model S is a rather meager bang-for-buck deal.

I hope for Tesla that they can iterate on that hardware aspect as well as they do on the software part. The quality and looks as well as the manufacturing process are still the bread and butter of old giants.

What I'd like: Put a tesla engine in a car with quality interior (european/asian brands) and quality exterior (european brands/mazda), maybe their software too least for its "evergreen" update scheme - but keep the touchpad away from me unless it dims out in the dark and offers me haptic response.
I'm having difficulty understanding the distinction. Does rewording it make it something it isn't?
Not in a free market. If demand is high, and supply doesn't raise to meet it, then prices will increase unless artificially suppressed.

Rent control could do that for rent, but has its own problems. As for owners, how do you tell someone they aren't allowed to sell their house for what someone else is willing to pay them?
I couldn't help but imagine the police sending a request to view his outlook calendar while reading your comment.
Surprisingly hostile reply, given that I made clear that I don't blame the keyserver for this.

I did attempt to contact the app developers about their app's behavior--unfortunately, the only method they provided was a mailing list, so, upon having my first attempt at being discrete blow up in my face, I decided that being forced to send an e-mail to a public mailing list in order to draw attention the fact that I had inadvertently de-masked myself just seemed like rubbing salt into a wound.

To boot, it seems like something of a stretch to put a privacy-conscious user who misconfigured (or was unaware what the default behavior was, in my case) his privacy app to be in the same boat as a G-man or a celebrity who took nude selfies, don'tcha think?
Amazon Just Released a New Smart Home Skill API for the Echo
The HN guidelines:

> Please don't submit comments complaining that a submission is inappropriate for the site. If you think a story is spam or off-topic, flag it by clicking on its "flag" link. (Not all users will see this; there is a karma threshold.) If you think a comment is egregious, click on its timestamp to go to its page, then click "flag" at the top.
Gerrit is being used by many large open source projects,

It should be worth noting that those large open source projects have very, very different needs than a small development team working on a product together. The open source project likely isn't doing weekly releases (which require some sort of manual QA process, in the source article). A large open source project has hundreds of contributors, where reviewer time is scarcer than contributor time (and the pool of people to approve and commit a change is much smaller than the contributor pool).

I think the OP's real problems are that:

- an increased release frequency requires them to do more QA

- their time spent in code review seems to be a function of how often they are "releasing", not how often people are making changes

If the difficulty of making a release increases as you increase your release rate, you might be doing "agile" in a poor way.
NVIDIA Tesla P100 has 21 TeraFLOPS of FP16 performance by their words. So they got 8 chips there.
Essence of stem cells found: Key ingredients protect, heal the brain
You can set up the --sign flag in your local gitconfig.

git config --global user.signingkey $GPGKEY
git config --global commit.gpgsign true

In general, since you definitely do not want to upload your key material to GitHub, you won't be able to use the pull request merge button and the new squash button. This means, your pull requests need to be fast-forwardable, else you cannot merge (as this merge would be unsigned). Also, instead of using the squash button, you would need to squash the commits on your local machine and push the newly signed squashed commit again. It comes as a cost but it also leverages the decentralized nature of git: you can do everything locally and sign locally so you do not need to trust someone else.
You can configure git to sign commits by default with commit.gpgSign

https://git-scm.com/docs/git-config
How Y’all, Youse and You Guys Talk
The Tesla apologist rhetoric is getting a little hard to follow. Which is it? Are Teslas the best-manufactured anything? Or are they lacking because they're so revolutionary?
PGP is modeled on physical mail: content is private, but identity is very public. (I mean, the very idea of signing something is inextricably linked to having a public identity - if you're signing commits on github then you're creating an identity that stands by those commits).
Siri gives full access to contacts and photos, iPhone 6S
Headlines like this just reinforce my feeling that the "Internet of Things" concept is bad/premature. Maybe I'm pessimistic, but it strikes me as "Let's take this network technology that we've yet to make reliably secure or private and put it in everything!"
That may well be true but I was charitably assuming the poster was trying to be on-topic.
Hi Everyone we recently launched our app Sity. Sity is an app for teams that allows people to share what they’ve done, give feedback, and track skill growth. More and more companies today such as Accenture, GE, Adobe, and GAP are ditching the traditional performance management process. Instead of waiting a year to give feedback and track employee growth you can see what your employees/teammates are up to on a daily basis without disrupting with your workflow. Giving and receiving in the moment feedback has never been more seamless and action specific. You can also view individual profiles to see what people have done over time, and tag skills in your own posts/updates that can be tracked for professional growth and development.

If you would like to try it out or give feedback please feel free to sign up via this link for HN readers:
http://team.sity.io/?action=signup&ref=hn

By using this link you will get a 31 day free trial vs our normal 14 day free trial.

Thanks for checking it out!
Go to the source Luke: http://www.piratar.is/policies/?lang=en
If you do neither, are you implying that the third option would just be to tell would-be tennants to go look elsewhere because your neighborhood is full and you're not going to price out the people currently living there?

Sounds like it would work, until you realize most of the buildings are owned by landlords who want to cash in and get as much money as they can with the property they've invested in. They don't particularly care who is living in the property, just that somebody is there and that they're getting paid.
It's not like the Mission, Tenderloin or SOMA are especially safe, either. In SF, as in Oakland, there are good spots and bad spots. I haven't felt unsafe in Lake Merritt, and my place is way nicer than what I got for the same price in Cole Valley. And the weather's better (it really is).
Techies Project: Emily Eifler
Voyeurism, before low cost cameras.

The Hollywood version of this is "Sliver", from 1993, starring Sharon Stone, William Baldwin and Tom Berenger.[1] This Gay Talese story is sort of a low-rent version of that movie. It's so close that I suspect it was written after seeing the movie.

[1] https://en.wikipedia.org/wiki/Sliver_%28film%29
One of the problems is the lack of city governments and wealthy homeowners here to think beyond just SF. The Bay Area as a whole, from San Francisco to Oakland to San Jose, should work together to solve the housing and infrastructural issues we have here. It's not even just SF that needs to build. The entire Bay needs to pitch in, from San Jose to Novato. (https://www.reddit.com/r/bayarea/comments/zprpe/the_actual_o...)
Yep. The $50K model felt like it was hitting a price point rather than it being the car that people would actually want. Even if most travel would fit in that 40KWH range, no one at that point wanted to risk it.

I'm curious what will be included in the $35K Model 3 and what will differentiate it from the higher speced models. I think that will indicate if this is "really" a $35K car.
Yes, but the reason things cost more is because we are restricting supply through regulation. That's not to say that all the regulation should be repealed, but you can't examine the problem in a vacuum and expect useful information. It truly does come down to supply and demand.
Also annoying to have a quote from a patent but not be told when it was granted or when it will expire. Anyway most of these patents are obvious to one skilled in the art. They only survive because no one can afford to fight them and the Patent Office is not very interested in properly examining patents.
Shameless self-promomtion here.
The Wishbone framework (http://wishbone.readthedocs.org) enables you to construct event pipeline servers which can do exactly this sort of thing.

The parent's use case could be handled by connecting the Wishbone modules in the following way:

Accept webhook data over http(s) (https://github.com/smetj/wishbone-input-httpserver), parse the JSON data (http://wishbone.readthedocs.org/en/latest/modules/builtin%20...), validate the event data against JSONschema (https://github.com/smetj/wishbone-flow-jsonvalidate) and eventually submit the event data to to RabbitMQ (https://github.com/smetj/wishbone-output-amqp).

Super easy to start a server:

$ wishbone start --config bootstrap.yaml

Depending on the modules you hook together you can build the event processing pipeline suiting your needs.

For example: http://smetj.net/processing_webhooks_using_wishbone_part_1.h...
Absolutely this. I have a two-bedroom apt. in Brooklyn that's the size of a small house. No roommate. I just like the space.

I pay the same amount as my cousin, who lives in Manhattan in a studio apt that's smaller than my guest bedroom/office.

At my current job in the financial district, the commute would be the same. Plus, I live in a historic neighborhood where there are houses with lawns and gardens and trees. And it reminds me of home in Texas.

NYC isn't as bad as SF, but it can be really awful if you insist on living in the most "happening" parts of town.
Technically speaking, you can do whatever you want to traffic passing in/out of your node. In practice I recall reading that there's some degree of monitoring on the network that attempts to detect and flag misbehaving exit nodes.

You could certainly, for example, redirect HTTP traffic through the Internet Watch Foundations child-porn filters, if you had the connections.
There's an item about it in the Denver Post: http://www.denverpost.com/news/ci_29727885/aurora-motel-owne...
If the story checks out, I expect (or hope) the fallout will be a lot bigger in the coming weeks - that is assuming ISIS doesn't blow up the White house or Donald Trump commit suicide or something
Show HN: That’s a Nice Page – Teardowns of Product Pages Worth Talking About
Anyone can create a random key with a random email. See all the president@whitehouse.gov addresses on the keyservers. So if they used the keyserver network I could just make a fake key for anyone I want to impersonate and upload it. Github has no way to authenticate which keys are good and bad if they only use the keyserver network. So they have you upload the key on their site to implicitly authorize the key as one that you (the person with the github account, or at least its password) consider valid.

http://pool.sks-keyservers.net/pks/lookup?op=vindex&search=p...
http://gutenberg.net.au/ebooks01/0100111h.html
Depends which part of Oakland. Some parts of Oakland (eg. Rockridge, Temescal) are significantly nicer than SF. They aren't exactly cheap, but your safety : price ratio is significantly better than in say, the Mission.
Yeah; unfortunately at startups where roles / expectations aren't clearly defined, this type of stuff happens. Honestly I doubt it was out of malice; it's simply easier at a small company for the CEO to make all the comp decisions themselves than have to consult half the company about information that's supposed to be confidential. He may have thought he was doing the right thing to do -- startup CEOs are usually just winging it.
Oculus Rift's privacy policy says it's not liable if it's hacked
This depends on the number of degrees of freedom of your model - the dimension of its parameter space. This is why we have tools like https://en.wikipedia.org/wiki/Tornado_diagram and https://en.wikipedia.org/wiki/Analysis_of_variance: to keep the model's size under control, while still allowing for adjustments to its parameters in the future.
Signatures do survive, format-patch uses RFC 3676 (dashes) signature separator line, iirc., whichever, git apply-mail definitely understands them.
incredible, all the things that people would do for few bucks
It would be cool to have live periscope streams off of each player's helmet. :)
Wishbone could do that
http://wishbone.readthedocs.org/en/latest/index.html

Some example articles:

- http://smetj.net/processing_webhooks_using_wishbone_part_1.h...

- http://smetj.net/processing_webhooks_using_wishbone_part_2.h...
What are the typical going rates for basement apartments downtown or close to downtown? An apartment from what I've seen is at the very least $1200 a month.
It still could be a reasonable comment. 30F is mildly cold. Mildly cold regions will sometimes be 30F. It's possible that these problems manifest at 30F.

ND and MN also sometimes reach -20F, but the problems may (or may not) require so much cold to reproduce.
That competition between gitlab and github is starting to give good results: 3 weeks in a row with news from both, each time with long-awaited features.

If this doesn't show that competition is good, I don't know what else could!
Anecdotal evidence. Here in NYC it's mostly African drivers.
I feel like you are implying that "unchanged for many decades" is a downside. When you are talking about a drive train, it's a positive. They know what works, how to build it, and everyone knows how to fix it. Now if you want to talk about environmental impact, then yes I agree there is much to be said for Tesla.
Hey HN,

I made That’s A Nice Page because I’ve often seen products announced here followed by comments like “I visited your landing page and have no idea what your product is/does.”

I figure that’s something I can help with :)

By posting teardowns of interesting/popular tech products from big and (eventually) not-so-big companies I hope we can all learn a few tips on what makes for a compelling product page, and what might make for interesting A/B tests. Check it out and let me know what you think.

I also have SINISTER ULTERIOR MOTIVES behind the site — I hope to find consulting clients specifically here on HN who need help with their product pages, either on the copy or conversion/analytics/testing side. Is that you? I’d love to chat: luke@thatsanicepage.com or http://thatsanicepage.com/consulting. (You can also read about my testing philosophy here: http://thatsanicepage.com/faq#testing.)

But back to the site. I’d love to get your feedback. What do you think of the scroll-the-page-with-my-commentary approach (on desktop)? Like it? Hate it? Is it something that you find enjoyable to scroll through, or would you rather the teardown presented as a normal article? Would you prefer something that’s more like brief highlights, or meaty, in-depth analysis? Why?

And most importantly: What page should I teardown next? :)

Thanks for checking it out! <3
Airbnb for X
Pelikan - Twitter's Unified Cache Back End Open Sourced
You're describing Noise. WhatsApp uses Noise Pipes, which is one of many instances of the Noise framework.

You're right that it's not a good idea for generalists to pick up Noise and go to town with it. Noise isn't misuse-proof.
As someone who went through PayPal hell a few years ago, I'd say there is a lot they could do/have done to improve their customer service without impacting their fraud protection capability. I experienced issues like being bounced between different phone representatives offering different explanations for why my account was locked, a slow and duplicative process of uploading scans of identification documents, etc.. Just saying.
Phabricator[0] is awesome. Diffs (like PRs) contain several commits, but are reviewed, discussed, and "landed" as a unit with an auto-generated commit message referring to the Diff description and a link to read its history, but "master" is a linear sequence of Diffs being landed. You can also configure all kinds of rules like "X person must sign off on any changes to this file" or "do not merge code to master unless it is approved by N people other than the author." The UI is a bit clunky but I love it, and it's open source and very flexible.

[0] http://phabricator.org/
GitHub doesn't retry when the webhook fails? Stripe does that for example.
we're talking about developers signing commits here, not sending emails to your grandma gpg encrypted
You mean the Research Triangle?
Show HN: Like Tim Ferriss's Podcast? Skip ads and go to the best parts
Thanks! To be honest no major techniques except basic technical SEO and making content that people naturally link to such as Stock Up (www.sitebuilderreport.com/stock-up)

I agree regarding price. I added the pricing because readers were asking me for it— but I don't think it's done well yet. I have to figure out how to do it right.
Technological mecca would translate into a technological hegemony, even larger than today.
Ok, I really hate to shit all over somebody else's livelihood, but this whole project seems like a total waste of time.

A dehumidifier isn't a complicated mechanism. This is not a novel invention. It also isn't going to produce a sustainable amount of drinking water at a price affordable to the people who need it most.

The team running this seems to just be a group of friends who have none of the experience actually make a difference.
We've got an Artist/Engineer, and artist, another artist, another Engineer and a product manager who have no meaningful job descriptions (apparently they "do things"), A "Web Engineer", and an advisor whose only task appears to be possession of knowledge of chemistry. It doesn't seem that this team was chosen due to what they could accomplish, but instead because they all pitched in to get an IndieGoGo project going...

I'll give them credit for their cause. At least their hearts are, presumably, in the right places, but this little device isn't going to change the world even a little bit. It would win the science fair without a doubt, but it's not much more impressive than that.
Flickr: Our Justified Layout Goes Open Source
We put it back.
People didn't pay $1000 for Windows 95. Or for an iPhone. Putting down $1000 deposit for a $35k product years before you might receive it takes it out of the region of fad/novelty, I would argue.
So for one person you'd need $2000 worth of solar panels, 16 square meters of panel.

One person.

It seems like you've supported my point, not refuted it.

But I appreciate your analysis, even if I dispute your conclusion! Thanks!
Yes. I used to watch it annually. I also did a college paper on the man. It isn't a documentary, but I think it does a fair job of telling the tale.
It's entirely possible that GitLab could integrate Let's Encrypt and generate their own private keys. Some large shared hosting providers already do this (e.g. DreamHost).

Keys are cheap and plentiful, just regenerate & reissue however often you like. The paid CAs I've used do free reissues with new CSRs no problem. You are already trusting them to serve your site so adding a private TLS key isn't a big deal.

The only downside I could think of is if you are using HPKP with a long duration, you could have issues with rapidly changing keys. But I wouldn't expect GitLab Pages to support setting those headers so probably another non-issue.
"Shockingly nearly half of those bids came from just one person who lost approximately lost $3,500 in just two hours"

Is such an irrational amount of money to lose, i'd wager a guess it wasn't a real user. I'd bet its an automated system owned by the "house" that keeps the auction from ending prematurely.
> Why is an "album" worth more than a graphics engine...

Why is a Picasso worth more than paint?
Zelda in Voxels
Your implication that people who carry military equipment aren't meant to act like "normal people" would be incorrect even if it were the case that most police officers carried military equipment (which they don't.) The actions of the police in the posted article don't really support that assertion either.
im getting an error adding the key, and it appears others in this thread are also.

'error parsing key'
How to Secure Nginx with Let's Encrypt on Ubuntu 16.04
The prices are directly a result of the Bay Area's beauty. The whole reason the prices are so high is that the city has been absolute in its refusal to let people build giant hideous skyscrapers that would block the view of the bay. Those same ugly monstrosities would provide hundreds of apartments and dig the city out of its ridiculous housing shortage.

Rents are high because demand is high and supply is low. Demand is high because there are lots of jobs there. Supply is low because the city refuses to allow high density development. It's a great deal for the people who already own homes and are planning to move out. They can sell their homes for a fortune and live like a king somewhere else.