skysight-inc/HackerNews huggingface dataset:
The approach you're talking about --- some people call it "key continuity", some people call it "trust on first use" --- does not work on the public Internet. At all.

The problem with it is that SSL/TLS is designed and intended to protect commerce. The attackers that commerce cares about† aren't targeted. If they can't sniff someone's session because they already established a trusted pairing with their bank, so be it! They'll just wait for the next person to connect. They will obviously get some percentage of user sessions that way, either from first connections or because people changed computers or reinstalled their browser or deleted files or what-have-you.

These are connections the attackers get above and beyond the stuff they already get by owning up machines. Which they'll also be able to do more of, because the same problem will happen with software update systems.

The current hardwired selection of CAs we have is bad, is a flaw in SSL/TLS/HTTPS even, but it's not so bad that we continuously lose X% of all connections to passive attackers.

† and that you should care about if you value the ability to run businesses on the Internet
Maybe I shouldn't base my opinion on a single story, but this is pretty much everything I know about Startup Chile (and it isn't good):
http://hervalicio.us/post/14915671294/on-startup-chile
The guy was revolutionary on many fronts. He proposed digital music distribution via subscription services decades ago:

http://www.zappa.com/whatsnew/news/FZ-Proposal/index.html
Ask HN: We're competing in LSM Boston. Help us win by answering a few questions
Q1) How many hours per day do you spend consuming information online from blogs/RSS/HN/Twitter, etc.?<p>Q2) What's your (broad) goal for your PRIMARY daily web browsing routine
(i.e. not specific info searches like restaurant menus, movie times,
etc.)?<p>Q3) On a scale of 1 - 10, how frustrating is it for you to accomplish your
primary goal due to S/N ratios, information overload, etc.?<p>if (Q3 > 7)<p><pre><code> Q4a) Why is your frustration great?
_ Can't find enough info
_ Too much info
_ Can't find quality info
_ Too much uninsteresting content mixed in
_ Other (Tell us why)<p><pre><code> Q5a) What actions do you take when frustration overwhelms you?
_ Descrease / stop reading routine
_ Try different aggregators or consumption types
_ Other</code></pre>
</code></pre>
else<p><pre><code> Q4b) What do you attribute that lack of frustration to?
</code></pre>
Q6) What are your top content aggregators by use?<p>If you're interested in signing up for our beta, we're developing a priority inbox for the web that uses analysis of your information consumption patterns to sort the content from the aggregators you use (like HN) by relevance to you.<p>You can sign up at foldr.co
Ask HN: Is anyone using a posture shirt for posture correction?
I'm talking about:

http://www.alignmed.com/products/posture_shirt.php

and

http://www.intelliskin.net/

This is mostly made for sports, but can be used at the office as well, as a constant reminder on how to keep your posture.

Anyone using it? What is your experience?
I think this is the very definition of "ignorance is bliss".
jQuery's extreme ubiquity arguably makes it the de facto DOM abstraction library, and this does conform to the definition.

Its demographic, or target audience, is irrelevant, because it is everywhere, and much to the detriment of 'pure javascript' (some might argue).

It'll remain that way until differing browser implementations converge and obviate the need for an abstraction that papers over the cracks.
I doubt it was intended as an insult. Julia (and other scientific languages) are often used in clustered environments, and Linux is much, much more common than Windows in HPC.
A proposal for a system to replace record merchandising
Runners and writers got over the hump to get where they're at. They didn't start out in tranquility and joy. It took some work to get to the point where it's no longer work. Like an aquired taste, there's "aquired fun".
Mozilla was faced with what appears to be the worst possible abuse of the privilege of being a Mozilla CA root. The abuse happened for commercial purposes. The transaction that occurred was on its face abusive of the CA system. The CA hasn't (and probably can't) name the company that was given illegitimate CA privileges.

In response to this, Mozilla sent out a letter. That letter doesn't even instruct CAs not to sell subCAs! It says, "don't sell them for MITM purposes".

I think Mozilla is between a rock & a hard place here, but there is no spin I think you can put on this story in which Mozilla stood up against abuse of trust.
> Lucid dreaming is the rare ability to...

Is lucid dreaming really all that rare? I've been able to have lucid dreams about once a week ever since the age of 14.
Apologies for my early reply

Actually the link mentioned in the post says this

"An integer overflow in the libpng library can lead to a heap-buffer overflow when decompressing certain PNG images. This leads to a crash, which may be potentially exploitable."

which may be potentially exploitable

that's what is mentioned in the post.

Also check this

http://blog.mozilla.com/security/2012/02/17/mozilla-releases...

Regarding mouse over ads, apologies for not providing a good reading experience. Since the original link is in blue and the ad is in green, I thought it was easily distinguishable. I will look after it.

Thanks for the comment :)
Regarding insurance: I'm an American who was laid off my job after the property market collapsed (I was in civil engineering) and I got married. My wife got pregnant a year later, and we had no insurance. Fortunately, my wife is from the Philippines and we had the baby there. I paid for her care out of pocket. She received good quality care and the baby is healthy and happy. Having the baby in the US would have bankrupted me at the time.
Diprocd, Control Your Processes Across VMs
As a follow-up to: http://news.ycombinator.com/item?id=3606600
We're kidding ourselves, totally kidding ourselves, that we have made the CA system "manageable" by allowing CAs to sell subsidiary CAs to other companies. Yes, those certs aren't cluttering up our 2 terabyte hard disks. That's a bad thing, because they're still out there, and they work whether your browser tells you about them or not.
Looking at this without looking at the quantity and quality of available talent is the most absurd thing I've ever seen. It's easily the most important thing to measure, it's easily what would push the US near the top, but it's hard to measure, so..hey, let's just leave it out.
It has the effect of allowing the player to project herself onto the game, which doesn't force her to adopt a more diverse viewpoint, but does allow her to maintain her existing non-mainstream one. Effectively it has no effect if the player is a white male, but otherwise it has a little.
As a Singaporean, I have to agree Singapore is an excellent place for business, ON PAPER. Most of the pro-business comes from the fact that the government does not protect workers.

Female employee pregnant? Feel free to pre-emptively fire her, as long as it is not 6 months before the baby is due. (Even the 6 months is a relatively new ruling, used to be ok till the baby pops).

Found a cheaper employee? Feel free to fire the existing one. No reasons need to be given. Employment at will, they call it.

As you may imagine, the employees reciprocates this regime by displaying little loyalty. You only need the smallest pay rise to prise away a rival's employee.

So good luck starting a business here. There is a reason why Singapore is dominated by MNCs and government owned conglomerates while small enterprises have unnaturally high failure rate, despite being so startup friendly, on paper.
One thing to keep in mind here is never trust the governments in most countries. Find the rules, play by them, but if you are getting money from the government, don't do that as a foreigner. It's asking for trouble.

Edit: I can't think of any government in the world where I would ask for money as a foreigner. That just strikes me as asking for serious trouble.
Two of my three kids were born in Indonesia for that same reason. The one that was born in the US, even with Insurance, left us with medical bills we were paying for years.
Or, what if the user's browser requested a site's public key on its first visit, but required it to be signed with a trusted CA? So to perform a MITM on an SSL connection, Mallory would have to both infiltrate a CA and MITM the user's connection on their first visit to a site.
There are various versions of this graph floating around, most of which start in 2005 with the publication of the first next-generation (multiplexed) sequencing methods by pyrosequencing (454) and sequencing by ligation (George Church) for complete bacterial genomes. Costs came down very quickly after commercial release in 2006 of 454, ABI Solid (SbL), and Solexa (SbS-sequencing by synthesis). This graph in particular is referring to the cost of sequencing a human genome, which was first done on James Watson using these next generation technologies by 454 in late 2007 if I remember correctly.
In the last paragraph, that sentence isn't in the book I have: "We require a LARGE quantity of money and the services of a team of mega-hackers to write the software for this system"
"May be potentially exploitable" is not the same as "can". Your article several times says "can".

I hate reading spam-filled "news" sites, and would rather read the original news, or insightful commentary. As this is "Hacker News", the commentary you provided was not insightful to its expected audience.
Some time ago I was surprised that there isn't (or I couldn't find one) any site with recruitment questions based on Stack Overflow engine. Anyway, the best one I found was http://www.careercup.com/page with a lots of questions from various companies.
But don't you need to have the previous version of growl installed or be using the Snow Leopard version?

I was under the impression that a user on Lion or later, would not have access to growl without paying for it. I'm specifically talking about the use case, where one of your users isn't already a savvy current growl user, but just a regular joe that is unlikely to have ever installed growl. In other words, the use case where the kind of person using your app will miss out on notifications because they don't know better and won't install a third party notification tool.
It took me a while to actually find the response on The Verge's site. Here's the direct link: http://growl.posterous.com/growls-response-to-notification-c...

Customization and flexibility might save Growl. There will always be people who want to use different themes for their notifications (I personally don't like how the Notification Center ones look in screenshots I've seen).
Are "social walls" the new paywall?
"Enjoyable" can also be a frame of mind. While doing a task that on the surface seems unenjoyable focus on the enjoyable parts and/or the final destination ("finishing the race").
At this point, use of GoDaddy at any point should be noted in any Due Diligence process by investors.

If the founders are unable to identify using GoDaddy as an unacceptable risk and are unable to quickly find an alternative, then one might justifiably come to the conclusion that said founders don't know what they're doing.

If an investor is unable to recognize the risk, then one might justifiably come to the conclusion that they don't know what they're doing, and should stick to Real Estate Development and Direct Mail advertising.

Personally, I like gandi.net for domain registration and hosting. They're not the cheapest, but they're not in the US.
Are you Tim Ferris of 4 hour fame?
The language looks interesting, but I am a bit concerned about the license situation, as in my understanding they have misinterpreted the GPL with regard to shared libraries. Quoting:

Various libraries used by the Julia environment include their own licenses such as the GPL, LGPL, and BSD (therefore the environment, which consists of the language, user interfaces, and libraries, is under the GPL). Core functionality is included in a shared library, so users can easily and legally combine Julia with their own C/Fortran code or proprietary third-party libraries.

The FSF disagrees (http://www.gnu.org/licenses/gpl-faq.html#NFUseGPLPlugins):

If the program dynamically links plug-ins, and they make function calls to each other and share data structures, we believe they form a single program, which must be treated as an extension of both the main program and the plug-ins. In order to use the GPL-covered plug-ins, the main program must be released under the GPL or a GPL-compatible free software license, and that the terms of the GPL must be followed when the main program is distributed for use with these plug-ins.
I had this same insight about a year ago, and while I didn't completely remove all my news, I made a point of reducing my RSS feed count to under 100 (it had been over 600.) I was indeed more productive, yet found myself missing knowing what, say, the latest Apple rumors were. But, it also didn't matter what the latest Apple rumors were. (Such rumors were wrong most of the time anyway..)

But I didn't write this comment just to agree with the OP. I wanted to add..

<i>Say that you somehow didn’t know we found and killed Osama Bin Laden last year, I claim that your life would be virtually the same if you did.</i>

That is probably true, but let me add something that takes even more of people's (or at the typical american male's) thought capacity and the knowledge of it is DEFINITELY meaningless: The fact that the Giants won the Super Bowl two weeks ago.

With the disclaimer that I am formerly a pretty big sports fan, it astounds me how much detail people know about pro sports. They can talk endlessly, for hours. The amount of time they spend just attaining that knowledge each season - it's gotta be comparable to the amount of time it takes to learn and become proficient in a new programming language. It's the same amount of time to perhaps take and do all the work for not one but several MIT/Stanford online learning courses. It's the same amount of time that, devoted to exercise, would transform an overweight person into shape. Every year! Yet they spend that time watching and reading about the NFL.. - and to what end? So they can be knowledgeable enough about the second-string tight end on the Packers that they can have a locker-room conversation about it?

Of course, the same can be said about entertainment in general - indeed, the OP's point was that news, while claiming to be important, is just entertainment. And while I didn't watch any news or football games this year, I'd be a hypocrite not to point out that I did watch a lot of Star Trek with my son. The consequence of this became clear to me this week - we punished him this week for something he did by disallowing all screens - which meant the TV didn't go on all week (and my wife and I didn't watch TV either.) Without thinking about it, by the end of the week I had come up with an idea and was hacking away at a whole new side-project. I haven't done that in a long time. Feels good. Any my son? He's reading. Got into a whole new series of books he found at the library and has set himself a goal to read every one of them.

tl;dr: if news is a waste of time, what about sports and other idle entertainment?
I like watching Zappa talk and all, but really, cigar-chomping record execs & their musical taste, and a 2 minute rant about the PMRC? Neither of these things matter at all anymore, to anyone.

I flagged this.
One of the big reasons I am looking at expanding into Singapore is it is a major regional commercial hub. This may off-set some of this in some ways.

However, I find your points very valuable and will certainly keep them in mind as I proceed (obviously it would only happen when partnering with a Singaporean who is already in the field so to speak).
Twitter Broke the ReTweet Awhile Ago
Foxconn, leading iPad manufacturer, hikes wages of Chinese workers
Facebook you suck.

This hacker should be awarded for finding flaws in facebook that could be misused by people who really wanted to do harm.
If this hacker didnt find these flaws facebook would haver never known that they have a security flaw.

Even better: Facebook should hire this guy! He managed to break into a system that is developer by the "top notch" facebook engineers.

Get him out of prison!
I've been waiting for Fortress for a LONG time, but either progress has been real slow or the Fortress team has trouble communicating their progress to the community. Probably both.

From a quick look I can tell that while Fortress is more similar to Scala, with classes, mixins and static typing, Julia is closer to Clojure, with no encapsulation, dynamic typing, homoiconicity, and separation of behavior (methods) from concrete types (akin to Clojure's protocols).

I really like the choices Julia's designers have made, particularly multiple-dispatch methods, final concrete types and lispy macros. The language seems very elegant. Not too crazy about "begin" and "end" syntax, though :)
Similar studies have been conducted by LaBerge and others for decades now. I did a brief search and found two examples: One that measured EEG for clenching hands (in 1986!) and one that measured cardio-vascular activity for performing squats. So the novelty here is probably the use of fMRI. This is probably difficult because sleeping in these things is not exactly comfortable.
"For the wealthiest, the taxes approach 30% of income and instead of a tax bracket system, you have a series of compounding taxes (something like 5% of income over 40k + 5 % of income over 50k etc). Every additional dollar you make puts something in your pocket. No nasty "I moved up a tax bracket and so I took home less this year!" surprises"

Is this not precisely how the American tax system works? At no point will you ever lose money by making an extra dollar. Each tax bracket is marginal; taxing only the money in that bracket.
You have to read the whole article again...
Ltj Bukem & MC Konrad, good stuff

For example: http://www.youtube.com/watch?v=rFVHjZYoq4Q
If you compare it to the number of dreams people have around the world each night, it probably is rare. But then, it's not that difficult to learn and you also find quite a lot of people whose dreams are usually lucid without really being aware of the difference.
Announcing LEGO Minecraft Micro World
And you say this from what sort of experience? Investing is all about deal flow and this is a chance to gain additional visibility. Visibility turns into deals.
I've never used Growl for more than 10 minutes. Last time I tried it a few years ago it didn't seem to work with some default (i.e., Apple) apps. I'm very much looking forward to notifications because they will have exactly that.
I agree. Instead of doing only what you love or constantly searching for what you love people should be focusing on being the best at whatever it is they are doing. I think that will do far more to help a person be successful than any other factor.
And real newspapers. And magazines, cable tv, movies, etc...
While not a "must-have", I would also add something for storage and preparation for simple comfort foods. This might be as simple as plates and utensils or as complex as a small fridge, microwave and hotplate/small stove. While going on walks is awesome, having to always leave the office to satisfy hunger/thirst can be a productivity killer, especially if you don't have a corner store and quick eats right nearby.
I believe what they're saying is that there are two things:

1. The Julia core, which consists of the language runtime and core functionality, is MIT licensed, and builds into an MIT-licensed shared library.

2. The Julia "environment", which includes a user interface, third-party libraries, etc., some of which are GPL, and which is therefore GPL as a whole.

I believe they're saying that you can link #1 with proprietary code, not meaning to imply that you can link #2 with proprietary code (because as you point out that wouldn't work). How useful that is probably depends on how many of the libraries the average application needs are in bucket #1.
Not only does too much information create boredom but it can also interfere with your day to day life if you're not careful.

This habit of information snacking totally screwed up my sleeping schedule as well. It got so bad that sometimes I used to stay up till 5:00 in the morning checking one board after another and then sleeping till 12:00 pm next day.

While it did not affect my business, it did take a toll on my health (my lower back) and also because of this I used to find nothing of interest any longer because my brain had started picking up patterns in stories, funnies, and everything else i could find online. Worst part was I could see that what I was doing was not good for me but like every addiction I really didn't have enough motivation to stop it on my own.

Anyway, last year I had to shift my house. And for some reason the only ISP in that area took over a month and a half to install the damn internet connection (some legal issues over digging with the gas pipeline company). On top of that the 3G sucked so bad that even opening Gmail took 3-4 minutes to open.

Long story short, call it a forced rehab but because of that one month of life without internet my life totally got back on track. My sleeping schedule was fixed. I found my old guitar again, and now I spend time on a tonne of other interesting stuff instead of hitting F5 one random sites.
Curious about how you approached that? Choose the tools based on what the client is using? Or, use the tools you are an expert in and deploy with those?
This is way too generic. There can be no one best place for entrepreneurs because the natural ideal location is where your customers are (as a startup, you'll more often than not tend to have real customers in one specific geography first). That's your best place.

I think this should read: if you're customers are in South East Asia, you're amongst the luckiest entrepreneurs in the world.
Sounds like what Mashery does mentioned in the thread.
Pypy most commonly refers to the python implementation anyway, as can be easily seen by going to the pypy website[1]. Daslch abused the fact that "pypy" points to two things to make a meaningless nitpick. Now you are claiming that I have claimed that fork and use are semantically congruent, where do I claim that? I think you are nitpicking and parsing "it" wrong. In either case a question asking for clarification would be more polite than going on attack.

There seems to be a disease, let's call it Eric Raymond Disease (ERD), on HN in particular[2] of people busting in rudely to declare with supreme confidence on the usage of quite generic words and/or slang. Let's start by tabling the fact that a particular "software definition" of "fork" has not yet reached the OED, or online dictionaries like Merriam-Webster for that matter. Going from that I can't see how you can declare it to only have one definition when you already admit there is a competing one ("GitHub parlance"). The base concept of the word fork is a divergence, a branch, which seems to me to cover any copy+modify move for software so someone copy+modifying bootstrap is forking it, someone copy+modifying the implementation of python called pypy is forking it.

Are you and Daslch really contributing to HN or are you taking a rather banal comment and turned it into a 100% useless thread by bickering over semantics?

[1]http://pypy.org/
[2]http://news.ycombinator.com/item?id=3467035
My error. You are correct. However, the total tax rate is less, and there are no income taxes that are not progressive (social security is non-progressive because of the tax cap in the US).

But more to the point the taxes are easier to fill out, and payment terms are a lot easier than in the US. If you have ever been self-employed and struggled with taxes because of sudden business increases partway through the year, you will know what I mean......