skysight-inc/HackerNews huggingface dataset:
gpg is promoted as a kind of swiss army knife of privacy, but its interface always puts email first. If you use it for something else, you must paranoidly guard every command so that it doesn't by mistake publish information about your privately used keys, for example.
So our brains have Speedstep and are able to shut down cores to save power? :)
A gem to check npm front-end dependencies easier for a back-end developer
> It doesn't matter how good you are in [insert almost any common language], you'll really struggle to understand that code.

To the extent that true, it's because of the weird historic moment between the mid 1990s and now where essentially every industrially popular general purpose language is from the C branch of the Algol family.

It's not really the whitespace (which is clear in semantics), and other than the lambda slash and the infix ticks, the whole thing is pretty clear from a Lisp background. (Well, I'm familiar enough with Haskell now that I'm not filtering it through some other language, but the similarity to Lisp is what helped it start to click early on for me, even though it's an ML descendant and not a Lisp descendant.)

We're actually starting to see more gains for non-Algol descended general purpose languages, so maybe the syntax shyness of the last generation or so of programmers will soon be a thing of the past, because knowing multiple languages won't so invariably be knowing multiple members of the same syntax family.
Clarification: I have no idea on the WiFi quality, I use an Airport Extreme in bridge mode behind it for Wifi. This serves 8 physical hosts and 6 virtuals over gigabit without fail, however, plus all the activity on the Wifi network.
Wow Stack Overflow has 300 employees!!

So at a typical benchmark of $500,000 of revenue per employee they should be making atleast $150,000,000 per year in revenue. I have to imagine that they are making much more than that, given that I've seen valuations of $500 million.

http://www.businessinsider.com/revenue-per-employee-at-apple...

I'm going to give them the benefit of the doubt and assume that they are still very lean and well run, I'm a big fan, but the fact that they do data dumps makes me feel much better.

I've seen too many bankruptcy/wind downs of companies, and one thing you can usually bet on is that once that process starts, the data gets locked up and treated the same as any other asset, which is to say, sold to pay debts. Or put another way, once a company gets into trouble, releasing their data often gets taken off the table as an option.

Again as a reminder to startup employee's, the company was founded in 2008 and hasn't really had any talk about going public or selling, so always make sure you get atleast a market salary from any startup you join as your options even at a well run company could take more than a decade to provide you with liquidity.

EDIT I can't math
There is a reason they mostly don't exist, at least in the US. After Lavabit was so publicly shut down, it's going to be a losing proposition for anyone to put so much time and effort into it, just to then be given a choice between providing a backdoor or shutting down as soon as the government realizes they can't break your service.

If your going to start such a service, it needs to be in a country that will respect free speech. And there aren't many.
Why not S/MIME? Most clients support it, its stupid easy, and has had a lot of eyes on it considering its age.

Constantly re-inventing email encryption seems to be the problem here. None of them really make this stuff any better. Key distribution is still going to be PITA, but sticking with a supported standard makes the most sense.
Yes, and you won't be able to use this data on such sites.

You'd be stopped by the very first line of defence, AVS checks.
5 startups chosen for El Al-JetBlue tech program
For me Kubuntu was the one that finally stopped giving me grief with dual monitor support (also, I miss ALT+Space Bar whenever I'm on another computer now). I suspect which distro works best also really depends on your hardware.
Running ReactOS in a Web Browser
I guess it was closer to 55%?

http://money.cnn.com/2016/07/22/news/companies/apple-watch-s...

The watch debuted to a backlog of orders and 3.6 million units were shipped in its first three months on the market. But sales plummeted to just 1.6 million in the latest quarter, according to IDC. That's in spite of a price discount.

If you do the math - that's actually closer to 45% than 55%, but who really cares, right? Which is interesting to know because:

Apple (AAPL, Tech30) does not break out separate sales figures for its Apple Watch and did not respond to requests for comment on the IDC report.

I think the media are always looking to try and topple the Apple hype machine so when they get something like this, they go running around crowing about how this is finally going to sink Apple.
> we don't intend to release the magic sauce that makes the latency goes down.

Ok.

> what I meant with hackable is that I've wanted an e-paper device which I could run my own code on, without having to look for security holes in the software running on it.

If your software is closed source, then I don't understand how anyone other than you effectively (or practically) would be able to solve or fix any security holes.

> we're not going to release the gerber files

You're setting up a strawman there. I was not asking for your hardware design or even mentioning it in anyway. I was pointing out that you are contradicting yourself when you say your product is hackable to software developers and then 30s later say that there will be "magic sauce" in software that will be closed.
Thanks for the heads up (fixed it) and the kind words!
Asynchronous API Interaction with Guzzle (PHP) Session [audio]
Very interesting question I've asked myself a year ago.
I ended up buying an old Netgear WNDR3800 for $15, and put OpenWRT on it. And it works great!
It has enough ROM to install most of the services you would probably need need (ssh, iptables, smb, shadowsocks, dnsmasq, time machine, dyndns, are running altogether perfectly well) and enough RAM as well.
OpenWRT itself isn't perfect, and I had to setup an package building environment on my machine to install some packages (typically shadowsocks) on the latest stable build (currently 15.05.1). But it works. And it works great. Speed is good, and I don't see anything I would have to complain about that disturb my needs/usage. I like the modularity and I love having a real Linux I can ssh to as router.

I've been quite interested to read about the fact developers from OpenWRT are moving to LEDE. Maybe it could be worth it to wait - as I said, OpenWRT isn't perfect and I'm sure a lot of improvements can be done. I haven't tried LEDE though.
But I think, for a small office/home network, just getting an (reasonably)old/cheap yet powerful, compatible hardware and put OpenWRT on it is quite a good solution at the moment.
This (intentionally?) misunderstands what people have meant when they said "fake news" recently. This is just another article attacking clickbait, which is bad and annoying, but not the same.

Fake news will often be debunked on a website like Snopes, while clickbait can't be debunked because it's based in reality.

Fake news example: "Clinton bought $137M worth of fake guns"[1]

Clickbait example: "Mike Pence Gets 'Booed Like Crazy' at 'Hamilton'"

Also, I'd like to point out that the headline on HuffPo is technically correct: someone did tweet the "booed like crazy" line, and it was properly quoted in the headline of the article.

1. http://www.snopes.com/hillary-clinton-bought-137-million-wor...
Creating a Culture of Feedback inside a Startup
Why should we be the ones to look into it? It was a random intermittent short-duration fault in the middle if the Internet, at some unknown place on the then-current path between us and Pingdom. Why should not Pingdom be at least equally as obligated to look into it? After all, they’re the ones actually using the failing connection, in order to monitor our and others’ services. But no, Pingdom simply report us as being down, and leave the hard part to us; i.e. the part where we have to explain to our customers that the Pingdom report is actually provably incorrect.

I mean, what qualifies as “being up”? If some random link in the middle of the Internet goes down, and you suddenly, for 30 seconds, are unreachable for the few hundred people going through that exact link because it happens to be the best path between those people and your server, can they claim that you have failed to provide adequate uptime? If such a fault happens, are you then responsible to troubleshoot it? I say no. The Internet is the ISP’s responsibility, and the only faults actually meaningful to report to your ISP are the repeatable or long-lasting ones. Small stuff like this is not worth anybody’s time (except ISPs) to go digging into.
I got an offer from Facebook and I went to Virginia Tech, a state school.

I think it depends on the quality/prestige of the CS program.
This library was born due to other existing libraries requiring to modify the layout's markup. Since we mostly use the flexbox trick to create a sticky footer, this would have required quite a rewrite.

The focus on PullToRefresh.js is to manipulate the DOM and add the elements programatically, and allow its own proportions to push down the content.
Data sources:
• Socialblade: http://socialblade.com/youtube/top/100/mostsubscribed
• YouTube:https://www.youtube.com/user/PewDiePie
• Moneynation: http://moneynation.com/pewdiepie-net-worth/
• Itechpost: http://www.itechpost.com/articles/36837/20161005/pewdiepie-f...
• Whaculture: http://whatculture.com/gaming/10-mind-blowing-things-you-did...
• Tv Guide: http://www.tvguide.com/galleries/pewdiepie-youtube-star-thin...
> distribution of that farm product to a far away base of consumers is not viable

Can you source this? My understanding of academic research in this area was that the energy used for artificial lighting by far outweighs the energy used for production and transportation for conventional produce.

Eg: If you're interested in climate impact or energy use, warehouse farms burn significantly more coal to keep the lights on, and the divide can be expected to expand as LED efficiency is already extremely high, while there are gains every year in lowering the energy usage in transportation.

Cornell Dept. of Horticulture has a good video on this here https://www.youtube.com/watch?v=VrpyUA1pQqE
There's more to the Moore's law argument than the one prediction from Kurzweil. For example there's Hans Moravec's essay from 97 predicting "the required hardware will be available in cheap machines in the 2020s" and I remember writing about the stuff for my uni entrance exam in 1981 before I'd heard of Kurzweil or Moravec.
The basic idea is that when brain equivalent hardware is available cheaply so hackers can hack on it, the software will follow not long after if not before. Given the recent progress and the sheer number of talented people flooding into AI research that seems quite likely to me.
Decluttering with Delete (no app installation required)
"I wonder if pgp is fundamentally flawed, or we have a deep conceptual usability issue here."

I think it's the key model that's fundamentally flawed rather than pgp itself, which I believe the author of the article is also asserting.

In cryptography, it is often explained that despite the fact a one-time pad is guaranteed-secure (given various conditions I'm eliding), it is not practical in the vast majority of cases because of a chicken-and-egg problem: How do you distribute the one time pad in the first place? If you do it insecurely, it's a waste of time. If you can do it "securely", why not just use that secure channel to send the message in the first place? OTPs can still be useful because you can establish a secure channel once for a limited duration of time and then use it to temporally shift your security into the future, but that's a relatively rare use case. (That is, the vast bulk of encryption is being used between people who may never have had a "secure" channel between them; think HTTPS here.)

Similarly, PGP's got this significant problem where given that you have the correct keys and that you know you can trust them, it secures your communication quite effectively. But the question is, how do we get to the point where you know that you have the correct keys and you can trust them? Well... that's a hard problem itself. Especially considered over time.

So alternate models must be pursued.

Like the author, I think the Keybase approach is a good idea. In fact I'd even suggest that the idea should be generalized away from "social media accounts" to just "potentially unreliable mechanism" in general. If I have 6 mechanisms for asserting identity on my key, each of which are 95% reliable over the course of a year, then from an absolutist security point of view, that key is still insecure... but assuming even modest independence between the unreliable mechanisms (assuming naive total independence is definitely incorrect, once one is hacked the others are certainly more likely, but neither is it the case that one hack guarantees all others can be hacked), it's still much more secure than nothing at all.
I've been thinking a lot about PGP and other encrypted messengers lately. It's incredibly hard to get a lot of people to agree on one messaging app besides default SMS. I wish there was an open source suite of tools for mobile/desktop that easily layered PGP on top of SMS/email experience and would fall back in the absence of keys. Perhaps bluetooth for swapping keys with friends. It's something that needs to be seamless enough that the end user can't tell the difference. I don't think messaging encryption will achieve mass adoption until something like that is built or built into mobile OS's.
If the Android developer site dashboard [1] could be considered reliable, then the latest statistics show only 26.7% devices (as of yesterday, December 5, 2016) that run Marshmallow and Nougat. This leaves 73.3% devices that do not have the ability to control permissions individually (unless they've been modified with add-ons that allow it).

[1]: https://developer.android.com/about/dashboards/index.html
This has been my experience. The only "good" experience I've had with encrypted messages through email was a back and forth exchange I had with a fellow Keybase user where I manually copy and pasted blocks of encrypted text into/out of their web interface.
NYC is a very long way away from self driving cars. The truck drivers that will be replaced are those that drive cross country via highways.
On a completely unrelated note: While I do feel that political discussion is a necessity for any site that claims to be about cutting edge technology and ideas, there are also times you just should not engage. A good rule of thumb is that if a post is immediately antagonistic (and in all fairness, yours kind of was too) or ignores everything in the interest of isolating one phrase that MIGHT be disputable, it isn't.

Which is kind of why I think this entire "detox", much like just about every detox that is about getting rid of the antioxidants or whatever the hell people go to spas for, is a load of bull. The problem isn't the topic, it is how people discuss it. And people discuss plenty of topics in overly emotional and pedantic ways. Often times while extolling their own intelligence in a way that makes you REALLY glad they aren't in the same room as you (HN may be even worse than reddit on that last point).

Respond to posts that can have a discussion. Ignore the ones that can't.
On the contrary, I use the Archer C7 as my main router and in my experience, it is by far the best router I've ever had (having previously used FritzBox, Speedport, Technicolor, Netgear etc.) Here's a quick rundown of what happened: The part of the city I live in was upgraded to fibre for free (Fiber 200, with 180 down and 90 up guaranteed) and I needed a router that could handle that. The way Fiber 200 works is pretty simple: The provided optical end terminal converts the incoming fibre line to Cat5e. It then creates a VLAN, with separate IDs for TV, VoIP and Internet. So you need a router with unbounded VLAN ID config. Of course you can pay the $150 for the ISP provided one. But I didn't need VoIP, so the Archer C7 seemed perfect. Anyway:

Received C7 with old world-wide firmware. Immediately upgraded to the latest firmware, not realizing that this new version is region locked (no problem so far though). Tried to configure the VLAN for my Internet, realize that my ISP uses non-standard VLAN IDs which exceed the limit of the firmware. Call TP-Link (Germany). I was very surprised to speak to an actual engineer immediately. He knew the problem and recompiled the current beta firmware (with support for higher VLAN IDs) and sent it to me

Now we run into the first problem: You can't flash beta firmwares after upgrading to the region-locked one.

Call again - another very helpful engineer. He recommended flashing OpenWRT in recovery mode (FTP upload) and then flash the beta firmware from there. Flashed LEDE instead of OpenWRT (because I had it on hand), without any problems. Now I don't have any use for OpenWRT or LEDE. The functionality of the standard C7 firmware is more than enough for me. So I flashed the beta and everything worked.

Here are a few other points about this router:

- I pushed the internal switch to maximum capacity multiple times, even using unreasonable packet rates. The C7 doesn't even break a sweat.

- I use the built-in media server to stream music to my Dumb-TV. Works great.

- At one time, a friend brought his laptop over, which turned out to be infected. The C7 banned his device immediately, after it exceeded the DDoS protection limits I set.

- I never had any downtime on this router.

- WiFi performance is exceptional (up to 450M).

In conclusion: I would recommend the Archer over any router in this price range any day. The painless flashing of OpenWRT and LEDE makes it even more awesome. Add to that the awesome and competent support experience. And by the way: You receive an actual paper manual on how to request the GPL'd code that's used in the stock firmware.
Ranked: Top 5 Dishwashers for 2017
Mozilla is working on an open source speech-to-text engine, which might be interesting for you: https://connected.mozilla.org/2016/11/28/the-next-phase-for-...
Search the dump yourself and look for your address.

Or even better, build the service you're asking for! Clearly, there's a need.
As long as you can do without 802.11ac, make sure you get something supported by the ath9k driver, which IIRC is the only driver that doesn't need a firmware blob. So all the people working on bufferbloat etc. are using that driver for their tests, so you'll get the improvements first.

I have a TP-Link TL-WDR3600 v1 running OpenWRT. It was cheap, and works fine.
You should make it clear the demos don't do anything on a non-mobile device.

EDIT: point taken. Non-touch device
Please provide a citation for your stats if you're going to repeat it. As mentioned in my comment above, the Android official dashboard has Android 6 and newer at less than 27% as per the latest measurement yesterday. [1] I can't imagine how this couldn't be alarming.

[1]: https://developer.android.com/about/dashboards/index.html
> Companies are more directly accountable through $$$

What's direct about that? Companies are directly accountable to their shareholders, accountable to the general population via the government, and very indirectly accountable to their customers.
Ships Buried Under San Francisco
Google's End-To-End also seems dead.

https://github.com/google/end-to-end

I would say ProtonMail or the miniLock-based Peerio.com are now the most interesting projects for encrypted email.

EDIT: https://minilock.io/

https://github.com/PeerioTechnologies/peerio-client
Actually, that doesn't solve the problem that Trusted Contacts solves for location requests, which is specifically providing most-current-known location to a trusted party when the subject is unable to respond (and which does not rely on having a current channel to the device, though the more recent the central server had such a channel, the more current the response can be.)
A big problem is that a lot of this is driven less by people who have a genuine need for encrypted communication and more by people who want one on principle. And the latter tend to include the people who are more likely to try The Next New Thing.

And it also makes sense. A lot of these services are from companies that need to make money. And there isn't much money in the journalists and dissidents who don't have a bespoke solution.
Requires private keys to loaded into the browser extension. No thanks! Google's E2E is the same, which is to, say garbage.
Yeah, it's really not that easy.

I'm sure it may seem so for someone who's really never dealt with fraud, but it's definitely not as easy as just signing up to amazon and making an order.

If you tried to use UK cards gained from doing this, I assure you, not a single one of your orders would ever ship.

You'd just be wasting your time getting all your drop addresses (or purse customer addresses) blacklisted.
Ignoring the multiplication issue, I think once again it all comes down to communicating intent. If you want to allocate zeroed memory, use calloc. If you don't need your memory to necessarily be zeroed, use malloc.

I'm agreeing with you here - if your intent is to have copy-on-write functionality, that's not what you're communicating when you use calloc.

It's okay for an implementation to try to optimize given the constraints of intent, but I agree that if an implementation is doing something non-straightforward (copy-on-write in this case), that is a smell that perhaps the API needs to expose an additional layer.
I re-wrote ed in C once for fun:

https://github.com/tylerneylon/ed2

It uses the regex and readline libraries, as well as some container data types (array/map) called cstructs. The main C files sum to around 1,000 lines. It was an interesting exercise in learning some of the pieces of building a text editor.
> People will run it thinking it's legit

That might be believable if they didn't explicitly warn you and you didn't have to flash the phone yourself.
mexican company in HN front page! fellow mexican here
A guide to Workplace survival for the introverts amongst us
> When I was in Paris the only people I met were those majoring in Finance, the amount of computer programmers or engineers at the universities were extremely low. Why? Because the jobs just aren't there. Paris is and has always been a hub for Money.

Working as a software engineer in Paris, and having most of my friends doing the same, I think your were juste living in a bubble.

Furthemore, french people don't go to university to study engineering, they go to engineering schools, which are dedicated structures. Some are public, generalist, and really famous (École Polytechnique where Fabrice Bellard comes from, École Centrale where VLC was created, École des Mines) but there are also a lot of smaller private and specialized school (Epitech, Efrei, Epita or “42” for computer sciences for instance).

In France, people mostly go to university to study law, medicine, social sciences or humanities.
Usability is the "key" - it's hard enough to get people to use signal ("why do I need another messaging app?")
Like what? I can make symlinks all the live long day on unixy systems without it security problems and without having to log in as root.
Show HN: Tuppence Programming Language for 2-adic arithmetic
Thank you, I could not have done it on my own. /s

It's what I did in the end.

It was a critic against the website missing an important piece of information. And also a bit of a complaint since I spent five min looking for the address on the site before resigning myself to Google it, thinking that such piece of information could not have been omitted.
Private keys accessible to the browser is the worst model. I don't think this was ever taken seriously at Google either...