skysight-inc/HackerNews huggingface dataset:
GPLv2 says:

----citation----

2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:

a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change.
b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.
c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.)

These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.

Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program.

In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.

----end-of-citation----

We know that:

1. Android is a collective work based on Linux

2. Non-Linux part of Android is not distributed as a separate work in binary form. In binary form both parts of Android (Linux and non-Linux) are distributed together as a whole.

3. According to GPLv2, "when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it"

So Google is clearly violating GPL here.
> Certainly it's not the case that anything is 'broken'.

Since others have found the links to the prior papers I don't have to worry about revealing anything by suggesting that there's prior work.

What I was trying to hint at (badly) while still giving the authors their presentation, is that there's a long history behind this. Any weaknesses in TLS 1.0 should be credited correctly (and I'm sure the authors will do so), but it makes me feel bad that it's getting lost in the coverage so far. There might be a neat demo on Friday (I don't know the details of that) but they didn't break anything themselves.
Sure, but Google never claimed to be on the GPL.
Ask HN: Help me find a blog post about why AddThis doesn't work
I remember reading something data based about how the AddThis widget isn't very usable design. I never use the AddThis widget and it seems obvious to me that being able to have so many different choices for sharing is just too much.

Can anyone find me a blog post about someone that has A/B tested AddThis versus a single Facebook share/like or Reddit button?

Thanks.
But that’s because the TouchPad was a failure. Samsung’s phones are actually selling.
Is Implementing the ‘Repository’ Pattern Redundant When Using ORMs?
It seems to me that when we are using ORMs - such as Nhibernate or Entity Framework - creating these repository implementation are redundant. Furthermore since these pattern implementations does no more than what is already there in the ORMS, these act more as noise than helpful OO abstractions. It seems using the repository pattern in the situation mentioned above is nothing more than developer self aggrandizement and more pomp and ceremony without any realizable techical benefits. What are your thoughts ??
Nobody is talking about reneging legal obligations. Also, the 'you' being referred should be directed at the government and not the parent post.
... well, but neither does Emacs.
Ask HN: Single Facebook share button versus multiple share options?
I remember reading a data based blog entry about how the AddThis widget isn't very usable design. I never use the AddThis widget and it seems obvious to me that being able to have so many different choices for sharing is just too much.
Can anyone find me a blog post about someone that has A/B tested AddThis versus a single Facebook share/like or Reddit button?

Thanks!
The demands of their users? I know plenty of people who absolutely loathe those 4“ (or more) monsters.
There's a bit of back story. I run a Ruby course for intermediate developers at http://rubyreloaded.com/ and as a "bonus" part of the course I promised a run down of Ruby 1.9 in screencast format. My research showed there was more to it than I'd imagined so I decided to double down and put a lot more effort into it and sell it as a separate product too. So currently it's a video as that's what I promised my students, but I want to extend it later.

If it were a solely commercial decision, an e-book would have been the better way to go since there's still quite a bit of resistance against screencasts vs e-books IMHO.
>>the absolute philosophical illiteracy of so many naively confident advocates of reductionist science and the silly caricatures of faith they hold to.

(I can agree that Dawkins doesn't really have the background to do the theological/philosophical detailed arguments.)

I just note that to be religious is to make claims about the world ("reality", for some form of meaning) that is not based on reason or proof of facts.

So I really can't see a reason to take any religious belief more seriously than Son of Sam's world view.

I'd be more impressed if you weren't limited to insults for a motivation of what makes your supernatural creatures more likely to exist than the flying spaghetti monster.
Sylvanian families
Sylvanian Families have been around for many years and yet are still one of the favourite childrens toys. Compare Prices of Sylvanian Families at Ooh Kids Toys today.
Also I submitted this a few minutes ago and it was auto-dead'ed... AddThis is a banned keyword for titles?
They could have been, though, if the source code had been released. :)
can you apply Benford's law to only 130 samples?? that's not a large set of data according to my book
Good points. I guess the caveat is I know a lot of unemployed folks who appreciate the connection. It is true - if you don't know of a match, don't make the connection. I'd still assert that the $500 or $5,000 still doesn't make a difference in that case.

If you're doing a favor, you don't need the money. If you're professionally searching, you deserve a much higher share of the fee.
Looks really cool, except for that the underlying project hasn't issued a release in over two years. Given how much Android has changed in two years, that would seem to make this tool inappropriate for dev testing, unfortunately. Also, the article didn't make it clear if this live distro works with adb or not, which would be very useful for debugging and testing.
Ask HN: How to "sandbox" work and non-work stuff on the same PC?
I'm a freelancer that does a lot of work from home on my Macbook Air but I also use the same Mac for a lot of non-work, time wasting stuff (FB, twitter, surfing, etc).

My problem is that I'm not disciplined to stay in a "work" mode for too long. For instance while I'm working in XCode I might inadvertently open a new techcrunch or nytimes page and start reading while XCode is compiling. These brain context-switches are killing my productivity.

Is there some software solution that can create two virtual work environments for me? Something that can "sandbox" my work stuff and do the same for my non-work stuff?

OSX Spaces comes close, but doesn't do true segragation for my brain to "context-switch" into work/non-work mode. With Spaces the dock stays the same so I can easily click on some twitter client and start reading tweets. Also if I open new window on an app (Chrome) that's already open in a "non-work" space than it'll go back to that non-work space.

I feel something will work if it will require effort for me to open that time-wasting page. For instance if I use another computer strictly for non-work stuff then getting up and using that computer instead would do a "context-switch" in my brain to go into non-work mode. Otherwise it's just too easy to open a time-wasting app.

Short of getting another laptop (or an iPad) for non-work stuff, does anyone have any hints/tips/ideas on a software solution on how to really separate work from non-work stuff so that switching to non-work mode requires some kind of effort?
Home - LightNEasy
The Budget-the Ultimate Financial Management Tool
>But seriously, running around the world, telling people they are "idiots" and to "fck off" if they don't see the world the way he does?*

Can you please point out when did he called people idiots and told them to fuck off?
I have found the best places to learn (new) things about GAE are Reddit [1] and Github [2].

[1] http://www.reddit.com/r/AppEngine/.rss
[2] https://github.com/search?q=appengine&type=Everything...
Real Names
The article:

1. Demonstrate that tact is important with a seemingly elaborate joke.

2. Recommend that you use the same tact when talking with clients/investors.

implicitly:

3. Assume that your clients/investors are equally good listeners.

This is where it gets hard.
Perhaps analogous to the idea that anybody using an argument in favor of faith, no matter what terminology they couch it in, is attempting to make a rational point.
It may be that everyone is tired of endless Apple-related discussions and speculations, based on virtually no 'official' information. Unfortunately, because Apple prefers to say nothing, everyone else on the internet thinks that their personal opinions are an adequate substitute. Although I don't bother to look at these stories myself, it may be that others have got tired of reading them.

I prefer to read positive and educational stories that appear on Hacker News, and stories that are unlikely to be noticed by many given their location - if people posted and commented on these more than on the latest speculation and gossip, or on stories from sites that already get more publicity than they deserve, Hacker News might be a more rewarding place for everyone...
Vetement ralph lauren pas cher
I think the argument was poorly worded, but I agree with his point, which is that his business is stickers, not software. Hence, his advice is invalid when applied to a software business.

If you run a physical business, the only thing you need a programmer for is probably a website and an online ordering system. In that case, the founder doesn't need to learn programming, as that's not his business.

But when you're a saas startup or something, software is your business, and a non-technical founder should at least try to understand some of it. Not necessarily enough to contribute to product development, but enough to... edit basic html? Start/restart the server? Quickly debug and figure out a small technical problem when demoing the product to potential customers in case the programmer isn't available?
For the record the low Irish corporate tax rate of 12½% has created hundreds of thousands of highly paid jobs in Ireland. "Google Ireland" and "Amazon Ireland" aren't brass plaque companies with no employees, they employ thousands of people. Here's Google Ireland when their street view car passed http://maps.google.com/?ll=53.339416,-6.236528&spn=0.002...

In Ireland the low corporate tax rate is viewed as vital to creating jobs here.
How To Explode Your Havvn Business - Get Marketing Training
You can certainly benefit from being a good talker (the inverse of #3), but the broader point I was [trying to] make is more about your own ability to listen rather than the customer's.

When you tell someone your idea the first time, chances are high that they will misunderstand you. When that happens, founders' first impulse is to correct them. But you can get a lot of value by allowing that uncomfortable misunderstanding to linger for a bit while you listen.

(edited to clarify some verb ownership and improve sentence pacing)
Sounds like we need a word to describe the occasion of finding a single word for something that would otherwise take an entire paragraph to describe.
What happens when you need to request some data and therefore use the GET method, but also are passing sensitive data in the query? Should you use POST in this case in order that the sensitive request is not logged?
The 'maybe not' articles are so pointless. They bring up a bunch of theories to attempt to poke holes in things, and in the mean time they're even less rigorous than the tests they are trying to poke holes in.

I don't think most gamers even -care- if video games make them better at other things.

From personal experience, I find I have a few talents that the rest of my family doesn't have. My reaction times and eye-hand coordination are much better. It's quite common for me to knock something off a table and simply catch it on the way down, where the rest of my family would simply watch it and then pick it up afterwards. It's not something I think about. It just happens. It has amazed more than a few people.

My map skills are much better, as well as my pathfinding/path-remembering skills. If I drive a route twice, I've pretty much got a lock on it. I can also usually point directly at some landmark that's no longer visible, and I've usually got a good idea where North is. None of the rest of my family has any of this.

And puzzle-solving... I'd like to attribute that to video games, but the fact is that I just love it, and I'll do it no matter the medium. So I can't really say video games in particular did it, except that there are a LOT of puzzles in the games I play. Which certainly can't hurt.

You learn best by doing. And if what you're doing in a game maps 1:1 with another skill, then you're going to get better at it. It's that simple.
How Disqus Ranks Will Improve On-Site User Engagement
That's what I figured, so I think the tagline is pretty much perfect.
I think that's kind of the point, the high price ensures it's mostly VC and Press there, that's what most of these startups are looking for.
Facebook’s Navigation Bar Locked For Some Users
Cartoon Caption Contest on Facebook: Round 6
Bah, why the downvote? I was pointing out a major Lisp convention.
How  to be Your Own Boss
Netflix's Bold Disruptive Innovation
I have always been a firm atheist viewing the church as "architecture and hypocrisy" but lately I try to be more open minded about other peoples beliefs. The marquee on the church down the road reads

"Freedom of the mind is the beginning of all other freedoms".

Great quote, and it reminded me that I have been too judgemental, which is what has bothered me most about religion.
And I could have been a millionaire.
Here's another take on it (we also exhibited in Startup Alley)... Yes, there was a lot of drama, but I think that's what focused MORE attention on this Disrupt then others. Normally the only press really covering Disrupt is TechCrunch itself (as the other tech publications see it as competition). This time, because of the drama, I suspect a LOT more people were checking TechCrunch.com and TechCrunch did feature quite a few Startup Alley companies during this time. Yes, someone is going to be a loser, and it sounds like your startup missed out on press and leads, but these are the risks we take as entrepreneurs.
Pressire Leaf Filter, Edible oil micro filter
Gobind Expeller manufacture and exports for oil mill industries all types of oil mill equipments like oil expellers, oil expeller manufacturers, oil expellers exporters India, vegetable oil mill equipments, boiler India, seed cleaner and steam boiler.
What do /did these 525 people do exactly, if they weren't developers or developer relations? Middle managers?
Ask HN: Why is the pricing page the most common call to action?
I am just wondering why most standard web 2.0 websites have the main call to action button on the homepage send the visitor to the pricing page?

This is assuming a pretty typical navigation structure for the site that includes a tour page. Even though ultimately you want the visitor to hit the pricing page and sign up, I would have thought the conversion rate would be higher if they went via the tour page first.

Why do people not have the tour page as the main call to action, with the tour page then trying to funnel them to the pricing page?

A good example is 37signals and http://www.basecamphq.com

Is this just a case of everyone following without questioning, or is there some solid logic/evidence behind it?
Rather than me hiring security for my house at a rate of maybe one hour a day -- the only amount of private security I could afford -- the government pools the money of my entire community, hires many security guards, equips them, and lets them drive around my neighborhood.

But the reason there aren't private security companies working like that is because the police exists.

I know places (not in the 'States) where the police is grossly underfunded, and the local shop owners do exactly that: they all contribute some amount to a fund that pays a private security company to drive around in the area. It also protects the homes, which is good PR for the local shops.
Ultimately, it will come down to your level of discipline and self control. Since you are "master" of your Macbook, you will have the power to get around any controls you put in place, so those controls are only illusory.

If you are truly intent on fixing the issue, you will fix it without any "add on" controls, and if you are not truly intent on fixing the issue, no amount of "add on" controls will ultimately help in the end. They may serve as "reminders" for a short while, but eventually the reminder impression will fade and you will be back where you are now.
My first reason was an unwillingness to learn those systems. I did take a look at Joomla and CMSimple however. Unfortunately, they didn't allow clean URLs.

Now, the genuine advantages of USSM over nanoc and Jekyll may be simplicity, the navigation menu, and extensibility.

Regarding simplicity, the manual is very short, and almost complete. I even describe some of USSM's inner workings. I believe you don't need more than 1 hour to understand everything besides the source code itself.

The navigation menu, I don't know. The few sites I saw that used Jekyll didn't show such a thing, so I assumed it didn't do that. I didn't know about nanoc at the time (seeing the tutorial, I assume it does provide a similar menu).

USSM's extensibility isn't tied to any programming language besides the shell. This is because I wrote several command-line utilities that do much of the work. As a result, a new module can fit in a few lines of Bash (see the source code for ussm-core.sh and ussm-title.sh).
Harvesting 'limitless' hydrogen from self-powered cells
Consume or Create
Why hackers don't need to be smart
Show HN: WeekendHack: Does Website X Run Prestashop (and which version)
I was looking for a simple way to figure out whether an e-commerce site is running Prestashop, and if so, which version it runs.

So I built : http://runprestashop.com

It works by analyzing several resource files (CSS, JS) and compare them to the signatures of the different versions of Prestashop.

If this is helpful, I'll probably write the same tool for Magento :)

What do you think (idea, execution, etc.)?

Cheers, Julien
Why must there be a single organization that provides services to hundreds of millions? Why can't there be thousands of orgs that provide service only to a few hundred people?

The food industry is a good example. Unless you don't consider food essential.
Clickable link : http://runprestashop.com/
Huntto.org: dancing with the stars
"... So, when someone, anonymously, says something like this: “I’m sure I’m not the only programmer that can sniff out a fake nerd.” – Edward Case And tries to oust me call me out as that fake nerd. Well. Ya. You’ve got a lot to learn about people on Hacker News. Generally, we know our shit. ..."

Of the posts that I dislike, ad-hominem criticism, the singling individuals are the least helpful, especially when posted by an anonymous coward. I can't tell if this is valid criticism or a rant from a random programmer trolling because the source plays the man, not the problem.

A more helpful article might have been discussing the natural tension between entrepreneurs and programmers. Startup founders are usually the union of both, but I've noticed ideas pitched from programmers (as opposed to entrepreneurs/founders) tend to downplay the importance of everything else related to the business. Startups aren't just code. There are a multitude of conflicting issues that need attention. There might be some valid criticisms, but that's all they are. Don't beat yourself up over a random post on a bulletin board from a an anonymous source from a tabloid.
The attack works in such way:

1. A user opens any HTTP website like http://google.com/ in Iran (for example)

2. Government-controlled Iranian ISP intercepts HTTP traffic and injects some rogue JS code.

3. Rogue JS code opens https-AJAX-connection to https://gmail.com/ and transmits some constant nonsense there (chosen plaintext attack).

4. The key point of TLS 0.x-1.0 vulnerability is deterministic calculation of IV in all sessions except first one. Initialization vector (IV) is computed using (pseudo)random numbers for the first session, and subsequent connections to the same website use new IVs computed with deterministic algorithm from previous IVs, without using random numbers.

http://eprint.iacr.org/2006/136

It's a specific form of key integrity probably intended to counteract partial MitM. Or at least that way it was thought in 1994 by Netscape.

5. Rogue Iranian ISP intercepts resulting https traffic for https://gmail.com/ and by comparing known (chosen) plaintext versus ciphertext, computes initial IV. Here is where the novelty of the research is: popular belief in 2006 was this computation requires 2^1000 operations, in 2011 it turns out that could be handled in 10 minutes [see my remark below].

6. User navigates to https://gmail.com/ to read email. Browser chooses new IV different from old one, but Iranian ISP can compute it independently because algorithm is deterministic and previous IV is known to them.

7. By knowing second IV, Iranian ISP is able to decrypt all https traffic of the second session and extract user cookies from it. (Not necessarily in real time.)

8. Now Iranian government is able to read user's email by substituting his cookies on any computer and navigating to https://gmail.com/.

You may replace Iranian govt in this story with your neighbour in public WiFi, equipped with enhanced version of FireSheep.

---

My remark: I think this is fixable on the client side and somehow related to low-entropy PRNG used to generate IV for the first TLS session.