skysight-inc/HackerNews huggingface dataset:
You're right. And it's a shame, because they're so close.

CloudFlare appears to support this, but they actually don't. What they disingenuously call "Full SSL" is just "there has to be any SSL certificate, but we don't event check with a CA." It's completely MITM sensitive.

The only level higher than that is "Full SSL (strict)", which immediately requires a cert valid for the request host available on the origin, as you mention.

Ideally, they'd have an option in between: "Fuller SSL" (or just stop lying about their current options). Require a valid SSL certificate on the origin, for the origin, not for the request host. This way Cloudflare would ask Akamai for the *.github.io cert, and the browser would ask CloudFlare for the custom domain cert.

Yay, tears.
And for animals, it's mostly the first letter of the animal's name, colored like the animal, and upper- or lower-case based on the animal's size.
sounded interesting, until I selected 'view page source' on one of the pages and saw a screen full of .js

not really very 1999ish.
That is kind of the nuclear option of the big internet companies. I'm sure they realize that they have this power, but they can only use it rarely, maybe once, before there is public outcry against this "abuse of power". They're probably saving this card it for a bigger issue.
https://github.com/blog/1964-open-source-license-usage-on-gi...

TL;DR:

Rank	License	% of projects
1	MIT	44.69%
2	Other	15.68%
3	GPLv2	12.96%
4	Apache	11.19%
5	GPLv3	8.88%
6	BSD 3-clause	4.53%
7	Unlicense	1.87%
8	BSD 2-clause	1.70%
9	LGPLv3	1.30%
10	AGPLv3	1.05%
In a high volume market like the iOS app store this behavior might be OK. It shouldn't take too long to get back a few reviews to display a N stars rating. (Just guessing, have no iOS apps in the store).

But in a low volume market like the Mac App Store it takes anywhere from a few weeks to months to get 5 reviews after an update. (Or even years in non US stores).

I made the experience that updating a well reviewed Mac app leads to a drop in sales until you get back to at least 5 ratings. (You need at least 5 ratings to display the average rating in search results and category lists in the Mac App Store).

This is a big incentive to keep updates back until it is really necessary to release them.
3 so admittedly they could have improved.
The article is from April 2015. And they were quite correct – Warren did not declare her candidacy (or even come close to doing so).
Sure, but if you have a basketball background chances are you or your coaches know what the problem is anyway. Consistently short? More knees. Consistently hitting back iron? More arc. Consistently offline? Square your shoulders and set your feet better.

For the super fine tuning someone like Steph is doing, that sort of data is probably valuable, but for the majority of young basketball players doing skill development, 1000 shots in an hour is way more important than knowing how perfectly you made it.
A nitpick: roosters are hatched, not born :)
For this to be 1999-era journaling, it would need:

- To be written in Perl
- To support .php, .pl, & .cgi in the user's /cgi-bin/
- To host about 10000 accounts per physical machine
- To use FTP, or a CGI form, for remote file management
- To use HTML 4.01/XHTML
- What's CSS?
- What's Twitter?
- Features: A user profile/bio! User comments! Subscriptions! Communities!
- Up to 10 megabytes of FREE storage
- Free add-ons like a hit counter and a feedback submission e-mail form
- One free e-mail address and five free e-mail aliases
- EXTRAS: Virtual host name and domain name support, up to 5 e-mail addresses &
20 e-mail aliases, up to 1000* megabytes of storage, and No Advertising Banners!!!

* actual space may vary based on how badly we over-committed storage
Google offers pretty handcuffs that developers mistake for bracelets.

Consider how Google is helping the OEMs get Android updates out. Consider how easy it is to call google customer care.

The real question should be: what the fuck developers? Why do you keep hitching yourself to such an unreliable partner? When is it enough?
Eh, I doubt it'd impact starting lineups at all, it's not like a batting order.
That doesn't actually create a properly encrypted connection. It only encrypts between the user and the site (at CloudFlare), not between the site and Github. Without that last hop being encrypted, you have to weigh whether this is an improvement or not.
I used nimby in the contest that new houses are not wanted in my area. I am in Canada, and have lived here since 1948, so I am neutral to AIRbnb, but I feel they should exist and not be run out of town this way.
Laws need to change to permit easy new home/apartment construction, or companies will simple leave because they can not get any employees.
Yeah - to clarify, we don't literally mean work for free. Rather, do highly side projects, make concrete proposals, trial periods, internships etc.
I've tried advice like this before, and always results in rejection to even talk or after talking a nice referral to a frustratingly useless Taleo application portal. Maybe i'm not asking the right people but in my experience talking to people and hoping for a job goes nowhere.
1999? XML is our savior! The future of the web will be interconnected SOAP services! It's the year of the Linux desktop! Itanium will revolutionize software if someone would just make a sufficiently smart compiler!
Urban areas in Africa are hardly going to be "covered in concrete".
I always play Dwarf Fortress when I am waiting in the airport and there's always someone near me who thinks I'm "computer hacking".
If WeTransfer and PayPal had a child
No it's not, it didn't get popular until it was redesigned. It's proof that sites can be too ugly, but that sites don't have to be particularly pretty.
Framework for Keyword-Driven Test, 0.0.11 released
There is an ongoing trend of equating "simplicity/removing distractions" with "hiding or removing information/making it less useful".

Make something as simple as it needs to be, but no simpler. Most designers I see these days seem to forget that last bit.

In this specific example the whole purpose of the request system is to vote and secondarily get other people to vote with you. The new design eliminated almost everything that made the old one useful. It isn't simpler, it's simplistic.
Well, tiny parts of the NT API (callable from userspace) are documented, but then often with the caveat that they are not stable (in practice, even some undocumented ones can be considered stable if used by enough programs in the wild, especially if they are simple and standalone and have no Win32 equivalent)

The very precise mechanism, though, is extremely unstable. For example virtually every release of Windows (even sometimes SP) changes the syscall numbers. You have to go through the ntdll, which is kind of a more heavyweight version of the Linux VDSO. (The NTDLL approach was invented way before the VDSO, though)
So... did they put it back?
That was the year we did the first browser-based blogging software. It's when Edit This Pager was invented. The first wave of bloggers. The name weblog. It basically came together in 1999.
A touch of humor, a clip from Harmony Korine's brilliant Mister Lonely:

https://www.youtube.com/watch?v=U2B4q1yWk2U
The question I would ask someone from Microsoft is if there is any simple way I can guarantee that Windows 10 will not be installed, but I will still keep getting the rest of the upgrades.
I've been running the HTTPS Everywhere add-on and hadn't realised that this wasn't already a thing. As the post says, they have supported HTTPS for a while and this is just adding a redirection option so you don't need to resort to JS hacks. It doesn't say if they are using 301 redirects or HSTS headers, I'm guessing the former.
Show HN: A GraphQL Interface to NYC Restaurant Health Inspection Data
I regret getting a T-Mobile postpaid plan. Unlike their pre-paid plans, they tack on the following mandatory bullshit charges to their monthly plans:

Federal Universal Service Fund, State Telecom Excise, County Telecom Excise, MCTD Surcharge, Regulatory Programs & Telco Recovery Fee, State & Local Sales Tax, Public Safety Communications Surcharge, County 911

That's $10+/mo of pure BS for a single line. Would love to hear from Google Fi users if they also do this, if not I'll probably switch.
GPU Wars Have Begun, Spreadsheet of Specs by Phones, VR, Self-Driving Cars and AI
Hacker Lexicon: What Is Fuzzing?
To edit a blog you have to enable JavaScript because the blogging software is written in JS.

It would be possible to create a client that didn't, but that doesn't exist today.
I'm quite supposed another possible cause to the drop in user votes is not mentioned in the blog that seems pretty obvious to me: Where are the vote buttons?

Even if I already fully understand their system and are highly motivated to vote, I wouldn't know how to actually do that in the new design.

In the new design, you have to hover over one of the numbers (without there being any indication that hovering does anything) - after which a grey up-arrow without any text appears. If you're familiar with reddit, etc and know that particular language of symbols, and also know this is a voting system, and you're not distracted by the gray color which could indicate "action not available", you can make an educated guess that this is likely the vote button.

In the old design, it was a button with the word "vote" on it.
The technology is 2016, not 1999.
> Next up would be to see whether Google Fi's adverstised real/actual/person support is for real and helpful

I'm a google fi customer and requested support. For me, the support was fantastic. They were very helpful and did their best to make sure everything was handled. Sample size of 4-8 requests, though, so YMMV.
For individual purchases it's only over a period of a couple days or so. Not sure about subscriptions.
> "Your honor, my client created and published a software library. The so-called victims here wrote code that specifically referenced my client's software library, by name mind you. My client in no way compelled or solicited the victims to do so. Now how can that be called 'without authorization?'"

The prosecuting attorney is going to tell a jury of twelve of your non-technical "peers" that it is hacking.

Your client can either go to trial for seventeen thousand two hundred and eighty nine counts of felony hacking, and risk half a million years in prison, or they can plea bargain to 5 years in prison and a felony on his record.

Or your client can hang himself, but I'm pretty sure a federal prosecutor counts that as a win too.
Google to offer app devs the same revenue sharing terms as Apple – immediately
Hi there. I just wrote a full length guidebook on the portion you refer as "Leads". I call them "Informational Interviews". Book is available for free at and I'd love to partner with you guys to reach more people! Content here: http://www.grahamwahlberg.com/book
The way I look at it is you own the app like you own an apartment but you're paying homeowners association fee to keep the grass trimmed, pathways painted and the pool maintained.
I served my first webpages via Userland Frontier — thanks for building such a neat product all that long ago!
You don't understand. Every bug fix release resets your stars + ratings. No stars = no downloads. Simple as that.

They need an option when releasing a build: reset reviews (major release) or leave reviews intact (minor release).
>I don't see a reason to subscribe for apps that are one-time pay and periodic long term use.

This. I'm a developer of such a "sporadic use" app and I don't see how a subscription model would benefit my users. And I honestly wouldn't feel too good about introducing subscription pricing to a tool someone might need once in a few weeks.

On the other hand this might be a solution to the upgrade pricing problem if one could set the subscription interval to 1 year.
This hasn't worked too much for me either.
Along with the community. They donate $60k per year which is incredibly impressive given its size.
It's better to let them them leak my throwaway email and 9IB2?iDnDaFt0cf6jwXQp_ rather than accessing my tweets, or even my twitter id.
Disable Ghostery (white-list the site) if you're seeing a blank page. It fixed it for me.
In the video, he says that the politicians stopped the issue from even being voted on. That's without Silicon Valley stepping in to really lobby against that kind of ban (NZ has no equivalent of SV)
In your first link the mayor later said “I am not aware of anyone convicted of a sexual offence clearing the background check used by Uber in Calgary. Watching the video, I realize that I did not explain myself clearly at all. I apologize for any confusion that I have caused.”
How iOS Apps on the Mac Could Work
There are firms that offer patent infringement insurance services. The cost is astronomical (7 figures per year).

I have a fair amount of experience with patent trolls.

I've seen companies sued for using facebook, where the damages are X dollars times the number of facebook followers/posts/comments they have. (So the level of risk is very hard to estimate for an insurer, because interaction numbers on the internet can spike easily)

Also, the the troll will practically _always_ offers a settlement that is roughly equivalent (or a few percent cheaper) than the legal fees to defend and win the case. -So a company has two options: Spend Y dollars to make it go away; or Spend Y*0.99 dollars and a year of wasted time to _maybe_ win. The system is setup such that Patent Trolls can't lose and companies can't really win.
You can break all of communication down to Know, Feel and Do. What do you want someone to Know, to Feel and ultimately to Do.

http://www.yale.edu/fin-bus/resources/docs/SurvHandbookChap3...
Yep, I actually have a $20/mo (2GB/mo) data-only T-Mobile SIM that I've used extensively for international travel the past year that's worked great (anything longer than a couple days I'll tend to pick up a local SIM for my primary phone, but I leave it in a secondary phone and have never had any issues either way. Speed is perfectly cromulent for messaging and navigation.)
I'm definitely stuck in the paradox of choice.

Also, some advice on how to make money doing OSS is to dual license it (eg copyleft for most users & copyright for commercial licensees). So now there's two decisions.
Apple wanted to use the desktop computer as the "hub" to sync your various electronic media devices.

This "hub" is for IoT devices.

Seems pretty different to me too.
"Apple has recently allowed you to update the app over the air using JavaScriptCore without going through the App Store review process again."

What does this mean? Can someone elaborate on this?
Wanted to mention the SPI flash work done by the person behind thunderstrike.[1] "This device can read the chip in tens of seconds, write it in less than a minute."[2]

[1] https://trmm.net/SPI_flash
[2] https://trmm.net/Thunderstrike_31c3
So essentially, they wanted to save $ 500 a month on uservoice.com and learned the hard way, that software is not a simple as it looks. That is also why they are not just rolling back but instead have used the opportunity to at least get some PR out of it.
How many chickens? In city of Seattle, 4 chickens per house are allowed. (No roosters)
I've been using VueJS for a few months and am a big fan. Can you elaborate on why Weex would be attractive to VueJS users? I couldn't find much documentation on it.
> Cutler pretended to not like the "everything is a file" approach, but NT does basically the same thing with "everything is a handle". And soon enough, you hit exactly the same conceptual limitations (except not in the same places) that not everything is actually the same, so that cute abstraction leaks soon enough (well, it does in any OS).

Explain? Pretty much the only thing you can do with a handle is to release it. That's very different from a file, which you can read, write, delete, modify, add metadata to, etc... handles aren't even an abstraction over anything, they're just a resource management mechanism.
"Officer involved shooting"

These are all language tricks used to manipulate the masses. "Double plus good" is not a stretch at this point if we become complacent to this kind of manipulation.

https://www.washingtonpost.com/news/the-watch/wp/2014/07/14/...
I expect everything on my phone to be throw-away, beyond the life of that specific device (with the possible exception of the things that I've got as apk's and can sideload). I expect a thing on my PC to be available as some form of install medium that I'll have free access to while the service it came from is still running, and that I'll be able to install from that medium when the service goes defunct. The exception to this is most games...but I only pay prices similar to what I would've to rent it from Blockbuster for a couple days, so I don't feel to bad about the long term rental.

I pay subscriptions for a few TV-related things (Netflix+Amazon for me, DirecTv for the wife). If I really expect to want to watch the shows at some point in the future, I'll buy a copy. If I buy them, it's on a medium that I can format-shift at my convenience and get to run on arbitrary devices (which usually means DVD and the subset of Blurays with released keys).

> What good is ownership when you can't even use what you own?

I've never run into this in a practical sense, but it's an excellent point in the theoretical one. I keep around enough old hardware and software to make it a non-issue.
Absolutely! Get something working and then keep it working while making small steps.

On the other hand, the example that comes to mind is Ron Jeffries' TDD sudoku solver.

I've seen several systems where the magic black box is doing things hilariously wrong---as long as it works on the test cases and the production results are sufficiently difficult to verify, it'll be accepted as gospel.
Regardless of whatever semantic "morality" you're going on about, this guy is an example of a lost customer. His money won't be going to your "favor" and it does no one a service if no one is buying it.
Breaking BitLocker Encryption: Brute Forcing the Backdoor (Part I)
Your DNS Provider Should Not Be Your Registrar (2014)
Ask HN: How do I make a great software product video?
Got any tips for how to make a soft product video that gets people really excited?

Please share any links to product videos that do it well!
I hear this often, and yes it can be very frustrating to get rejections. I've done 200+ informational interviews over my career, and probably gotten turned down by 2000 requests. I wrote a post about this problem specifically a while back: https://grahamwahlberg.com/2016/03/22/informational-intervie...

But summary is:

1) Are you the people you are reaching out to “warm contacts”?
By that I mean is there someone you know who knows them? If not you may want to try to start with people you already know.

2) What level of experience are you targeting for coffees?
1-2 yrs experience engineers? 5-10? 30-40 years? I have found that targeting people your own age yields worse results, but people just a little ahead of you in their career are more likely.

3) What kind of people?
Some people are intimidated by going to coffee with someone new and some aren’t. If you can (and this is tricky) figure out who is more likely to say Yes.
What happens if a developer bumps the price of their service that you rely on from $10/mo to $100/mo?

At least if I purchase an app I can continue using it for a significant amount of time and look for an alternative. A subscription makes this much harder.
If it ain't broke..
> The brothers find most of their data online, but it is only because of Dwarf Fortress that you can find the density of saguaro cactus wood on the Internet. When Tarn and Zach couldn’t find the number, a fan ordered cactus wood from a dealer, empirically determined the density using liquid displacement tests, and relayed back the results, which ended up in the game.

I suspect this author reads HN :) If anyone was curious, the thread where Saguaro wood's solid density was determined can be found here:

http://www.bay12forums.com/smf/index.php?topic=80022.0

> NEW: The guesstimate of 300 kg/m^3 for Saguaro density in the V2 raws was probably wrong. I have a 6g piece of Saguaro wood with a volume of approximately 14 cm^3, which indicates that the density of Saguaro wood is approximately 430 kg/m^3. This number appears very reasonable when compared to all the other densities I have researched. I have more ~1 ft pieces of Saguaro rib wood than I know what to do with right now and I'm more than willing to ship them to people willing to do further research on the matter, or those who wish to duplicate my experiments.

In fact, there are two approximately 1" saguaro wood cubes sitting on my desk directly in front of me at this very moment.
The thing that I'm still confused about is why they offered users the ability to "Request an icon", when really, users would be suggesting an icon. As a user, I expect "requests" to be answered. That is, I expect a special service, just for me, that I'll probably have to pay for unless the site is 100% free.

Under that model of user expectations, I envision two groups of users: 1. the users who want to casually suggest an icon (and don't need it for anything critical or want to pay for it themselves, but who would happily use it if it became freely available) 2. the users who have a special request and would pay to have it done, regardless of how many other users want it.

Group number 1 won't bother clicking on "Request an icon", because they figure that the button is for members of group number 2. Group number 1 won't see an option for them, which changes site perceptions, because group number 1 has an impression that the site is for paid requests.

Group number 2 will click on "Request an icon", hoping to place an order, but will be disappointed and/or confused by what they see. Members of group number 2 might note that "Oh hey, it'd be nice if I could get this for free". But given that their need was sufficiently critical for them to want to pay commission, the option to submit an idea that may or may not be voted into existence at some unknown time won't seem promising enough for them to invest any more time in the matter.
If you didn't like the way Dwarf Fortress looked and handled, but you love the idea of a "roguelike colony builder" with a lot of potential for random happenstance and failure, this might be a more enjoyable choice:

Rimworld - http://rimworldgame.com/

It's a bit of a spiritual successor, and like DF it's developed without a supporting team (by Tynan Sylvester)
If you're arguing in favor of linux, you probably shouldn't use any arguments that deal with getting audio setups right.
You have to enable JavaScript (from fargo.io) to view posts (or at least to view the About page.)
You can push updates OTA for your app. i.e. https://microsoft.github.io/code-push/
What actually made me dig into analytics and numbers are usability studies in the first place. They were planned as a routine I follow after every new design needs to be tested, but made me reveal some deeper problems like navigation, questions etc. Now, after covering the big picture, I maybe will write an article on smaller ones.
I may seem that way, but the whois database is just plain wrong :) The ASF owns and manages groovy-lang.org.
Seems silly. Why create a pain in the ass for every command, instead of enabling auditing? Of course you should log which ssh credential started the session.
Why not enable auditing?
@davewiner, you mention interop with other CMS software. What kinds of interop are you looking for?