skysight-inc/HackerNews huggingface dataset:
I think the parent comment is referring to OpenVPN's HMAC packet authentication of the TLS control channel, the --tls-auth option. From the man page:

The rationale for this feature is as follows. TLS requires a multi-packet exchange before it is able to authenticate a peer. During this time before authentication, OpenVPN is allocating resources (memory and CPU) to this potential peer. The potential peer is also exposing many parts of OpenVPN and the OpenSSL library to the packets it is sending. Most successful network attacks today seek to either exploit bugs in programs (such as buffer overflow attacks) or force a program to consume so many resources that it becomes unusable. Of course the first line of defense is always to produce clean, well-audited code. OpenVPN has been written with buffer overflow attack prevention as a top priority. But as history has shown, many of the most widely used network applications have, from time to time, fallen to buffer overflow attacks.

So as a second line of defense, OpenVPN offers this special layer of authentication on top of the TLS control channel so that every packet on the control channel is authenticated by an HMAC signature and a unique ID for replay protection. This signature will also help protect against DoS (Denial of Service) attacks. An important rule of thumb in reducing vulnerability to DoS attacks is to minimize the amount of resources a potential, but as yet unauthenticated, client is able to consume.

tls-auth does this by signing every TLS control channel packet with an HMAC signature, including packets which are sent before the TLS level has had a chance to authenticate the peer. The result is that packets without the correct signature can be dropped immediately upon reception, before they have a chance to consume additional system resources such as by initiating a TLS handshake. --tls-auth can be strengthened by adding the --replay-persist option which will keep OpenVPN’s replay protection state in a file so that it is not lost across restarts.

and I just realized who I'm responding to... :) I'd be interested in knowing if the above isn't a strong/decent rationale.
These aren't objectionable pictures. These aren't objectionable message board posts. These are advertisements for overtly criminal activities. You have to make a real argument.

And speaking as one of the geekier people on HN, please spare me the geek exceptionalism.
I've been waiting for something like this for shoes. Looks excellent, though I'd recommend against the shrinking between operations when finding a size (primarily in the first step). Just takes longer and looks clunky.
Take a design class, or typography. A programmer who can do some design and understands the theory behind it is inherently more of a self starter than one that can't do design.
Do you think Party Rounds are good or bad for the entrepreneur?

Given the description in the post, how could they be bad?
Sponsor Refresh Rochester, get a cheap ticket to An Event Apart
A good cause (supporting local web designers and devs in a fairly slow tech area), and in return you get tickets to AEA for $800, worth about $1,200.
Firefox 4 beta 5 is here. Check it out
It's called a false dichotomy or a false dilemma:

http://en.wikipedia.org/wiki/False_dilemma
I've been using tinyca2, which has a really nice gnome interface for managing a certificate authority. I'm really happy with it and it takes a lot of the pain out of CA and certificate management.
IANAPothead, though I do pick up once or twice a year for concerts and to be a good host.

By far the mode price I've encountered for 1/8 oz (3.5g) is $25; $30 if something very special (though this is in Southern Ontario and British Columbia, and I've apparently been spoiled for quality). Seeing this hold so exactly when I moved from Toronto to Vancouver was my delightful first real encounter with communication-without-intent through large-scale dynamic systems.

---

Epilogue: somehow, I keep ending up being very good friends with small-time drug dealers, and Apple employees.
$64k/year with 5 years experience. That's up from a base of 45k just starting out.

So if I wanted to switch it up to be a math teacher, I'd be cutting my pay to 45k. After sweating it out for 5 years, I'd be up to 65k, still below what entry-level engineers can make in NYC.

And that's in one of the 2 most expensive housing markets in the country.

Regarding "How little can we possibly pay to keep a warm body in teh room" -- this is why modern conservatives should never be taken seriously on education. The idea of quality never even enters into your thinking? I'm not trying to be histrionic here, but why provide education at all if that's how you feel about it?

EDIT: More on that link. The following quote implies we're both overestimating what a 5-year veteran gets:

"NOTE: If you are eligible for the 5 years longevity, please add $1000 to your annual salary
Example: Jane smith had completed 5 years of full-time work for the DOE. She is currently on step 6a
with the Masters Differential. Her annual salary is $56,707. Her new salary code is 6V and her new
annual salary is $57,707."

That seems to imply 5 years with a master's that you got over those summers and went into debt for gets you to 57k. In New York City. What do I get in finance if I'm good at math, almost triple that?
True. However they also say: "...enclosed offices need not be one-person offices. The two- or three- or four-person office makes a lot more sense, particularly if office groupings can be made to align with work groups."
I think there needs to be a balance between private/semi-private team space and individual private space within the team space.
Sorry for the late reply. It looks like the latter is for people with HTML4 experience but I don't know. However, I'm not entirely sure. I'll keep reading and see what it's like.
Nuclear Power Plant Software.
Prostitution resembles the drug trade in that it is unlikely the demand as such is going to be eliminated - indeed, this is even more true for prostitution than drugs.

Certainly, prostitution is not driven by organized crime currently. The point is that when it is more difficult for a prostitute to operate independently, she is more likely to turn to a pimp and/or a mafia controlled operation (not to deny that some pimps and mafiosi entice some people into prostitution now - but as you say, this isn't the majority currently).

We're more or less arguing over demand curves. Your argument boils down to claiming that more enforcement would change the supply-and-demand situation sufficiently to improve things for people. That is where both drugs and music downloading are good analogies because they both show the failure of enforcement to impact supply and demand sufficiently to change the situation (except for the worse).
Today wasn't normal — had a medium latte and an apple dessert thingy at a coffee shop.

Normally though, my favorite thing for breakfast is super healthy and filling:
- Quickly fry two pieces of turkey bacon
- Microwave some frozen spinach, drain.
- Combine cut up bacon and spinach in a bowl, add an egg, a healthy glug of egg whites (mine come in a carton), splash of milk, herbs, salt, pepper, and miscellaneous veggies from the fridge.
- Scramble, top with some shredded cheddar, enjoy.

Full of protein and healthy veggies, super tasty, very enjoyable.
Managing browser history was the #1, #2, and #3 issue I had to deal with when I was doing a similar project. If you are very careful and clever (I recommend the jQuery history plugin) you can make it work properly, but it's a headache.

Google has made it very slick, although they at least have a fallback: "oops, Google Instant won't work on this browser (cough, IE) so here's Google Brewed." If you bill your service as instant search, you need to work with even lame browsers.
Unfortunately, many programmers take the opposite tactic: They shove optimizations in apriori of any testing or data, just because "they know it's faster", or "you should never do X". The result is often convoluted code. The Pareto Principle + Knuth's axiom (as shown by acqq) is the best route through such minefields, IMO.

You may not be one of the "many programmers" but I certainly have worked with enough of them over the years to know just how pervasive they tend to be.
Micromax GC360 GSM CDMA Mobile
:) re: long tail SEO ... We have had multiple inbound calls from people who think we're some other institution because they searched for that institution, came to our site, got our phone number and asked us about their account at that institution. This happens even though we never pretend to be that institution on our page, we don't use their logo, etc.

One problem is that some portion of this 5% don't even know that our kind of thing can be done in their situation. (But every time I go on a random forum and ask people if they know it can be done, all the smarty-pants reply and say Yeah-I-Already-Knew-That. I mean ... who's going to admit ignorance, really?)
Ask HN: Mobile Browser Testing Application?
I'm a Web Developer, I'm looking for a way to test all of the various mobile devices without owning them. Ideally in some sort of virtual machine or something. Any ideas?
Maybe moving the search bar as soon as you focus it may be an adequate compromise.
One database server for the whole of basecamp?

Edit: I found this:

> With that in mind, we went looking for an option to host the Basecamp database, which is becoming a monster. As of this writing, the database is 325GB and handles several thousand queries per second at peak times.

325GB RAM?! But now they have multiple servers. Read more: http://37signals.com/svn/posts/2479-nuts-bolts-database-serv...
I always worry about the balance of my resume. I don't mean to lie, of course! But, there does sometimes come a situation where I've worked with something before, but aren't very good at it. For a not-so-good example: I used php for a web site once, know generally how one can use it for simple stuff, but definitely wouldn't call myself well-versed in the subject (I only really used it once, right?). So, probably I shouldn't list it as something I know--that'd be lying. On the other hand, what if that small bit of knowledge that I do have is relevant and useful? How do I say, "I saw this a few times" on a resume?
Celebrate, save a bunch of it and work on the next thing.

Anything you buy in terms of trade-tools can be written off against that income.
Yes, this might actually be the way we succeed in the end. Is this something your company did? If so, could you share your experience -- getting the middleman's attention, getting cooperation, what worked / what didn't ...
Comments here as well: http://news.ycombinator.com/item?id=1670375
Take care of your company's intangibles, they are valuable to potential suitors
"Irreparable damage" as defined in my copy of The Plain-Language Law Dictionary" is "INJURY of such a nature that it is impossible to calculate its extent by an award of money".

Here's my impressions as to how that can come about; they're not at all solid, I'm not even an amateur in this area, I've just read a lot of general business stuff:

First of all, how can money recover the time and attention lost in litigating the issue? (A general problem, I grant you.)

And then there's standard of and time lines for proof. Let's say I sue now, but whatever settlement I get doesn't prevent me from going out of business anyway a few years later.

Both get to the next and defining problem: determining the proper amount of money to change hands. We can be sure the two sides will disagree ^_^. How does the damaged party prove that $X amount of damage to its future prospects has been made? They probably can't even be sure themselves. Even if they know it will put them out of business, how do they prove how much business they would have made without the injury???
It's historiography and it's already sufficiently meta. It's in the set of all sets that contain themselves. (But does the set of all sets that do not contain themselves contain itself? That is the question :-)
Campus Dibs Is A Groupon For Colleges: Smart Move
7 Things You Did Not Know About Google Instant
This sounds like a reasonable argument for legalizing prostitution. I won't vote for you, but I'll respect the effort.

It does not sound like a reasonable argument for saying that craigslist should be running ads to help the illegal sex trade.

This is not just Internet scare-mongering. Craigslist has genuinely transformed and streamlined the sex trade. It did so knowingly and, given the amount of topic-based curation it already does, deliberately. It is a valid public policy target.
I was thinking the same thing after watching it. "It's still chicken, right"? While it may not be as wholesome (especially after the additives you see him throwing in there), it's not like those particular pieces are necessarily more "disgusting" by any reasonable measure.
So you do more reading to do less reading. And if HN is showing you good stories consistently then you end up doing a lot more reading?
Instead of measuring time directly, make a post's "age" for the purposes of ranking be a function of page views. (Or submissions, or something similar.)

I worry that it might be easier to game: refresh a lot of times before submitting to make everything else older. Submissions might work better in that regard, and there are probably other things you can do to mitigate the problem.
Greeks are sure of one thing: they can’t trust their fellow Greeks.
Fantastic article. I can only wonder how the Greek government will move forward.
Success Magazine Blog Hit With Malware/Spam
Regular job, but working from home and with no fixed hours.

Consulting is nice but a little stressy in that you always have to find clients.

Haven't done a real startup.
If the description is too long, I suspect you may be focusing too much on the how it work.

I think the initial 'what or why' is both more important, and should be shorter.

For example facebook would say 'we make it easy to be in the loop with your friends. Google would be 'we help you find the info you're looking for'.

You might be in the neighbourhood of 'we connect your virtual and physical worlds'. or something like that. Unfortnately, I don't even understand it to that level, so I can't really help. But don't get into how. If people care, they'll look deeper into how.

Check out simon sinek's "start with why" http://www.ted.com/talks/simon_sinek_how_great_leaders_inspi...
Does anything?
You're falling into the same trap all programmers do when they perpetually underestimate the time to accomplish any task. The main difficulty in estimating time is that you don't know what you don't know, so you have to actually get into the nitty gritty of implementing it, and if you're smart enough you'll hopefully catch all the requirements before you actually launch it.

I'm going to take Sam's word on this that there is not a simpler way, because he's the one working on it, and I trust the competence of the 37s dev team. That's not to say that some armchair analysis here on HN might not have valuable insight, but without actually seeing the code, and in light of the full list of points Sam mentioned, I doubt very much that there is a much simpler solution of any form.
I'm from the UK, so I don't really know how much the cost of living is in the States, but it seems like an amount to save some, upgrade your tools (I'll assume they're a tax write-off, and new equipment should always perform better than old), and live off whilst developing new things.

It'll essentially give you a ramp to create new things with enough time to really get to grips with them.

I wont ask a personal question about what project it is you've sold (congrats though), but how long did it take to create, and do you think you can do something similar (+ get an exit) in a similar timeframe?
Personally I seem to be reasonably happy when I'm consulting 2 hours a day and working on my new startup 6-10 hours a day. However, I'm happiest when I'm spending 4 hours per day down at the swimming pool flirting with my cute neighbors. That's what I mostly do since selling my last company, I highly recommend it.
Conversely, when we visited the US in January I bought three pairs of jeans whose inside leg measurements were understated by an average of 4 inches. My 30"-leg trews turned out to be no less than 34" long from the inner seam.

I can't for the life of me figure out why a US customer would want to pretend they're shorter than they really are.

(Mostly I'm annoyed because getting them fixed at home adds 50% to the price, negating the entire reason for purchasing them in the first place. And yes, two of the three were bought at Old Navy.)
Would be cool if it wasn't, you know, $999
Video: How a wristwatch works
I've never been so happy as I'm today :)

I'm currently doing consulting and bootstrapping projects with my wife as co-founder, living in the country-side of france in a cheap place, with our son.

Startup are really not my dream actually: I worked for one in my early days. 9to5 jobs really appear "cluttered" to me (ie: lot of time wasted on low value stuff, where you could really benefit from that time with family or hobbies).
I was specifically referring to the usage of intermediate files...I think I assumed too much, since obviously you must have a very different view of what consists an intermediate file than I do. Would you care to elaborate?
What a CEO does... and Larry Ellison
Humans are not automatically strategic
See Phil Greenspun on women in science: http://philip.greenspun.com/careers/women-in-science
The only problem is that they are taking a "Microsoft-like" route, ignoring web standards, just to fix a stupid privacy bug. What is privacy today ? You are ok with giving out all of search history to Google or many informations to Facebook for example. Why does this is so important to actually break web standards to be fixed ? read more here : http://hacks.mozilla.org/2010/03/privacy-related-changes-com...
Yeah but are those parts really good in nutritive value? Bones, fat, "connective tissues"?

Seriously wondering if eating those parts is really a good idea? Or am I completely wrong and they are no worse than the rest?
On most forums I've been to, the username is prominently displayed above or next to a comment, along with an avatar, a way-too-large signature, and various other cruft. The end result is that each comment is contained in a rather large, personalized box, and many comments are judged by the box rather than the contents.

Here on HN, there's a tiny username, in a dim font, in the middle of the line (given less prominence than "points"). This is even true of pg; his comments look just like anyone else's. This has the net result that comments are primarily judged on their contents.

I often have exchanges like this with my wife:
Her: "I read a really good comment on [such-and-such HN thread], it said [contents]."
Me: "I wrote that."
Her: "Oh. I gave you an upvote."
If they only thing you're planning to run over your VPN is SSH, then yeah, it's a coin toss whether you should run a VPN or just expose OpenSSH to the internet. But if you're planning on running anything else over your VPN, then I'd wildly disagree that the two are equivalent.

Someone else already mentioned the performance advantage, but just the user convenience advantage alone would be a deciding factor for me.
I often use Google to search for very specific phrases -- error messages, for example, in quotes -- and that doesn't help. It actually hurts.

What hurts even more is that Google returns documents that don't contain all the search terms, but where the missing search terms can be found in incoming links (or so it says).

If you try to use the allintext: parameter you're almost always considered a bot (why??!?) and your queries get delayed or you're shown an indecipherable captcha (they're getting harder, or maybe I actually am a bot, because nowadays I fail to solve every other one).

It seems Google is aiming at some lower common denominator of the general public, someone who can't spell, can't type, can't be bothered to learn a basic search syntax and just wants to know where to buy the latest gadget.

There is a space to be filled for a "Google for grownups".
Currently I'm doing the 9to5, consulting and working on more than one personal venture. I couldn't be happier with all the work and challenges but I think along with a few other comments here I'd enjoy just working on my ventures more and some consulting.
Yeah, funny you should mention that. One of my techs is on a job site and just called in requesting documentation for an older Avaya phone system. Googling for it was a complete waste of time. (Unfortunately, DDG couldn't fare much better.)

I find this is often the case when searching for "long tail" terms, like specific models of equipment. There are tons and tons of sites like this (http://camera.manualsonline.com/ex/mfg/headline/m/avaya/type...) at the top of the search results.

(Edit: And while we're at it, trying to find information on obscure error messages or documentation for software is at least as frustrating, but for a whole other reason: so many of the results are forum posts from years ago discussing an obsolete version of the software or error conditions that are no longer relevant. For a more specific example, we recently had an OpenSolaris server refuse to boot with the very helpful "Error 16" message; the only thing we could find were references to an out-of-date BIOS problem that no longer applies.)

Google is drifting very, very far from what they set out to do 11 years ago, IMO.
Greek Yogurt is awesome (Fage and Chobani are the two brands I've most frequently come across).

I enjoy mixing any of the following: granola, strawberries, walnuts, almonds, honey, raisins.

And if you want to mix things up wrt to your yogurt viscosity, try the soupier "Australian-style" yogurt from Wallaby. It's a nice contrast to the thick Greek-style yogurt.
Oh most definitely, it's far better than not having one. I just think that bugtrackers are a bit broken themselves.
Ask HN: Karma thresholds?
As a relative newb, I have noticed that there are apparently karma thresholds for upvoting/downvoting, and (yay) changing the color of the top bar without a script.

Just curious if these are published anywhere (I found some numbers from well over a year ago that are apparently no longer accurate).
I think the key to programming drunk is keeping it to one or two beers. Sometimes when programming sober I become distracted thinking too much about ideas for other features or even other projects. A beer or two can help ease your anxiety and help focus. Also the amount of work left to be done to complete an application can sometimes feel overwhelming and kill my motivation to continue. Sometimes a couple beers can help with the hardest step which is just start. So next time your dreading starting a new feature just pop a cold one, relax and watch the code flow.
If they put a target, it would drive me crazy, particularly on my iPad. Without a target, you decide, just like you do on every other web page.