skysight-inc/HackerNews huggingface dataset:
Wouldn't it be easier to superglue a magnet to your pinky?
This would be a more compelling argument if you could find one real user who would prefer their data stay on craigslist and not appear on Padmapper. It's fairly safe to say that people who post to craigslist actively desire their ad to be viewed by as many people as possible.
I've used encfs for years to keep sensitive data encrypted locally, but I found that with cloud storage, the inability to compress made that approach less than ideal, and the dropbox client refuses to sync the file when it is mounted. The approach I take is to create a standard filesystem, and then reguarly compress and encrypt a copy into the Dropbox folder. The command to do so is below:
cat /overflow/dropbox.ext4 | gzip -f | openssl aes-256-cbc -pass pass:xxx > /overflow/Dropbox/dropbox.ext4.gz.aes-256-cbc

Which I set my backup routine to run when it is finished, but you could also set to run at regular intervals using cron. Occasionaly, you might want to zero out the filesystem to improve compression. This can be done using "cp /dev/zero /mnt/SecureDropbox/zero" followed by "rm /mnt/SecureDropbox/zero"
What does the flexibility of the backend file stores buy me? It doesn't seem like I should care as long as it's easy to install.
So you're against research, then? I don't understand what you're trying to say with this comment.
Finding Corporate Sponsors of Open Source
If two products are even in terms of features, design can be the tiebreaker.

Design can be even more critical than that and more valuable than feature parity. Facebook had way less features than Myspace - you could do all kinds of stuff on Myspace like listen to music, customize your page, have photo slideshows - but Facebook's design was a welcome relief from the haphazard Geocities-like mess that Myspace devolved into.

And similarly, Facebook's current crowded interface leaves room open for even better designed networks like Path, Instagram, etc.
A rhinoceros in the room prevented me from reading as much Bertrand Russell as would have been necessary to make the grandparent poster proud.
http://kivy.org does Ali of what you talk about using python

Edit:fix link
Is this a place you want to work? You can deftly share articles like HBR "Why Aren't You Delegating?" http://blogs.hbr.org/hmu/2012/07/why-arent-you-delegating.ht... , but at the end of the day the CEO is totally in charge.
Thanks for the comment! The one capacitor I put seems to be enough for my needs for now :) But it's great to hear what's the correct thing.

> I'd put another 0.1uF close to the input of the regulator, and another 100uF across the battery.

Interesting. I (naively) thought that a capacitor near a LiPo battery is illegal as you're not allowed to charge the battery directly. I thought when the battery power drops a capacitor will be doing exactly that. Can you explain why that's untrue?

Update: in other words: What's the difference between putting a capacitor near the battery and "charging"?
You're right, thanks for reporting.

I've created an issue for that: https://github.com/potomak/drawbang/issues/45
Java HTTPS server code allows the developer to configure the X.509 trust manager. My API uses Java for both client and server and transmits JSON messages over secure web sockets which is built over HTTPS. Works great. I authenticate on both client and server, and am just now developing an iOS Objective C client that runs wss.
You've got the right idea. I ended up implementing my own proxy for Netflix as you describe. I use dnsmasq to hijack the relevant DNS requests and then I wrote my own https proxy to proxy the API connections. The actual streams come from CDNs of which are not concerned about your country of origin.
"I am bitter because of the manipulative sociopaths abusing their position and power."

I guess your whole plan to get rich off of Videotex and the Prodigy online service just didn't work out, because of that meddling TBL.
I'm not sure if you've used PadMapper, but it's showing things about the listings, not the listings themselves. To see those, you have to click through to the listing.
Thanks for noticing. I oversaw it (although i believed to have double checked it)
I will remove the d/l link tomorrow asap i am in front of my laptop again.
Yeah, cabal isn't quite there yet. People are aware of the issues and are working on them, but it's a slow road.

As a workaround, my modus operandi right now is to use virthualenv and build everything in there. I understand cabal-dev provides similar functionality, but I haven't used it. I've never had dependency conflicts when I build something from hackage in a virthualenv, so if you're still interested in trying it you might want to give that a shot.
i know in the the world of .NET (atleast on Windows) it'll automatically check using the cert manager. Anyone know how this might work on platforms such as Java? I'd assume the local VM would need to have some OS specific plumbing in place.
Maybe your contributions are devalued because they're incoherent?
Does anyone know if he plans to teach the course again? I'd love to take it before I graduate...
Thanks for mentioning. I hope i didnt crossed a line. I will remve the dl link tomorrow (as soon as i have a proper laptop in front of me)
Come now, the restaurants have every incentive to make a food product that is valuable to poor folks while still keeping costs as low as possible.

Also note that making shit food tasty while still being cheap is indeed fleecing, and the oldest trick in the book: sweet, fat, salty. Consider how cheap it is to make soft drinks, which are easily preferred by most folks, and yet how terrible they are for your health.

Humans are hardwired to seek out certain flavors and characteristics, and large fast food joints do nothing but exploit this.

Now, consider how the markets and government reward farmers for growing things that may be in excess of what people need (lol corn subsidies) and how they drive upwards prices of food perceived as a status symbol (compare "organic" produce or milk with the mass-produced varities).

It's a pretty rigged system.
many servers are deployed using Linux which doesn't have any cert manager (see citation in the blog)
If you do, take a look at TesseractTrainer, which basically automates the entire training process: https://github.com/BaltoRouberol/TesseractTrainer
So presumably, decent high-level languages (like Python) do use an encrypted connection - they just don't ensure the right person is on the other end of that connection?
This happened about 10 years ago when eBay sued Bidder's Edge over its scraping of eBay's listings to gather statistics [1]. eBay sued, and although the case was never fully developed, the preliminary injunction issued against Bidder's Edge killed off an entire cottage industry of auction tools and analytics services, including the company I worked for at the time. I believe it also helped solidify eBay's dominance in the online auction market as the disappearance of these services made it much more difficult for buyers and sellers use multiple auction providers (anyone remember Yahoo! Auctions?) in an easy way.

[1] https://www.law.upenn.edu/fac/pwagner/law619/f2001/week11/bi...
"Marketing is pretty simple when you get down to the facts."

You're right. Taking a somewhat more literal approach to your statement, I tend to boil my marketing down to facts and only facts. I have a hard time with what I'd call hyperbole. Apple's people say "magical" an awful lot. And from a user's perspective, it may seem that way and such marketing might be a good thing. I have a hard time seeing such things from the POV of a customer and then creating marketing copy to explain the product to them.

Don't get me totally wrong on the customer POV thing: I like my software to be "magical" as much as the next guy and I tend to do UI and UX work to make things feel like that. But I know what's happening behind the scenes. I can use your Fancy New UI Widget once and know how you did it. I cannot bring myself to write copy about how magical that is.

I'm an engineer, not a marketeer. Can I do the work? Sure. But it takes time away from engineering. I should work with marketing people, not try to be one.
That Google Chrome extension for exporting friends from Facebook is interesting because one could replicate Padmapper's functionality in a browser extension using CL's RSS and one of the mapping APIs (Google, OSM, etc.).

I can only think of one reason not to make this a browser extension, and that would be to give a middleman the opportunity to completely subsume CL's role. This sounds like it could be a good beginner project for me.
In Week Two, Marissa Mayer Googifies Yahoo
What Python tools or libraries are you using for infrastructure automation?
The work they did behind the scenes was impressive in the 1990s. Today it's only impressive because Craigslist is built with antique technology.

Scaling mostly-static content with zero page customization is not rocket science anymore. Just ask anyone in the porn biz.
yep

however, encrypted connection without this checks allows, for example, Man-In-The-Middle attack
Thanks for weighing in, PG!
Which is 120 mm/sec -- about 4.75 inches, as parent noted.
Track github repo visits & page views with Google analytics
Pay hosting with Bitcoin
Technology may change quickly, but what doesn't change so quickly are the needs and wants of customers or the rules of economics. Long term viability is still essential for shareholder value – but not necessarily VC value.

But, I digress... Yes, life has changed since 2007, but many of the same fundamental problems still persist.

If I may get on a soap-box that I've borrowed from others wiser and more well-spoken, what have we done with this fast-paced technology boom?

With an exciting few exceptions, most of it has been centered around thinks like "social networking" -- chatting with friends, posting pictures, playing games, reviewing and "checking-in" at various places and things like that. What has this mind-blowing tech revolution really done to enhance the quality of life of the average user? Very little.

And that is a major reason why you don't see long-term viability in business plans – because the products themselves don't solve long-term problems and real needs.

Fix healthcare – heck, fix a part of healthcare. Improve transportation. Improve education; teach people something. Improve the looming water or energy crisis. Encourage more self-sufficency. Make products that get people jobs. Build efficiencies between businesses, between businesses and consumers. Etc, etc. etc. Become essential. Then you'll see long-term business opportunities.

The kicker is that those are all need driven – not technology driven... yet so many people, like the author of this post, are so tech focused they still miss the fact that tech is just the toolset used to deliver value to customers – by meeting their needs.
Confessions of a 20-Something Startup CTO
Those two things are not the same thing at all. For example, let's say I want to create new account in your application and you ask me to enter u/p. I enter the string that is already used by another user, so I should choose another one. Except, now I can login with another's person u/p combo.

I don't see any reason why you should do a single string login.
This is awesome. As an ex-Googler at a startup, I've been wanting to re-implement OSS snippets for a while now. Checking it out!
No, all functions do that. Consider the functions f(x)=x^2, and g(x).
f(2)=4, but f(g(x))=g(x)^2. A more intuitive example would be abs(x)=|x|. For any numeric input, you get a numeric output, but for a functional input, g(x), you get g`(x) as an output, where g`(x) is a new function simmilar to, but possibly different from, g(x).
Presumably the stock holder of said company could sell their stock and move on. Personally if I were an engineer at such a company and saw my company 'wasting' all this money on what are essentially big signing bonuses I might be pretty upset, after all you can't easily sell your 'stock option' until it vests.

That said I wonder if this will correct toward a contract scheme ala national sports, where the 'engineers association' starts negotiating 1 - 5 year deals for 'star' players. It seems it would be more efficient economically.
I bet you most YC startups offer an API, negating the need for scraping =)
When you validate server certificates from HTTPS clients, please be sure to use the right set of root certs. Mozilla maintain a decent list of these [1], but it's not in the PEM format that most HTTPS client libraries expect, e.g. Python's ssl.wrap_socket(sock, ca_certs="certs.pem").

Mozilla's list also includes distrusted certificates, so you need to be careful to leave them out when generating the PEM-encoded format. In fact, I'd strongly recommend using Adam Langley's excellent extract-nss-root-certs tool [2] which takes care of the subtle details for you.

And, if you are willing to trust me, you can download my pre-generated PEM-encoded cacerts file from a month or so ago [3].

[1] https://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw...

[2] https://github.com/agl/extract-nss-root-certs

[3] https://github.com/downloads/tav/ampify/distfile.cacerts-201...
Snippets at Google had one other really useful tool when you're a large company.

You could subscribe to a keyword, and pick up any snippets that mentioned it.

As someone who was running a service that could get in the way of engineers doing their job, this was a great way to get honest, grassroots info.
No, nginx is on the server side. The article is about client-side.
I could have swore that I posted before and didn't have to pay. Must have been a dream.
It is a good idea, I just don't remember it being like that before. Thank you for informing me, though.
http://web.archive.org/web/20110725202211/http://www.craigsl... contains the bit about copyright enforcements rights in section 14. That dates back to at least 2009. In February they reorganized it a bit (so now it's section 3a)
This doesn't seem relevant to the financial fleecing the article is referring to.

I'm all for eliminating subsidies, educating people better about nutrition, and mandating that restaurants provide nutritional information about food that consumers are likely to see at the time of purchase.
While Apple wasting money on lawyers and law suites trying to ban sales of old Samsung devices, Samsung is spending money on innovation, production of new and increasingly better devices. And surprise surprise - Samsung is capturing more market than Apple! I for one am never buying anything from Apple until they stop this bullshit anticompetitive behavior and start to innovative instead of litigating.
Long-term thinking and predicting the future are related but not the same thing. For example, if you knew you were going to unavoidably die in a month, you probably wouldn't eat the same way as if you thought you had 30-70 years ahead of you. The fact we can't predict these things doesn't mean it's a good idea to gorge on junk food every day.
Neither of those studies contradicts what the Cornell researchers say, since neither study appears to look at people who get up from sitting every 30 minutes or so for a couple minutes of activity. They are concerned with people who are sitting for long periods--e.g., sitting for several hours watching TV or playing games.
I'd actually recommend just get the exact certificates you're going to work with. For example, if I'm using GitHub's API, it makes sense not to check all the chain, but just keep the GitHub's original cert.
Beyond that, minimizing the amount of money that is forcibly taken from people is inherently good.

You'll have to elaborate on this a little better, because it seems misinformed. For example, it would suggest that saving Warren Buffet a billion dollars while taking fifty grand from a hundred poor families is preferred. And that's horseshit.
Getting this right was a big pain when we were implementing the various Stripe client libraries. We had to resort to hacks even in mainstream languages.
Why is it that there's all this software that can decode horrifically mangled text, and yet nothing to OCR a handwritten letter?
The Fastest Way to Get a Site Online
You can use nginx as a proxy on your side for any APIs. Just proxy_pass it to the API, and listen only on the local side. It can provide caching and other stuff that way.
Well, having to use hacks for that is just plain wrong. I think we can consider this as bugs in these mainstream languages. Probably you could file them?
Sadly, the first step is to realize that (1) he really thinks he's doing the right thing -- or at least he is choosing the necessary, lesser of evils when he makes these interventions; and (2) that this impression is formed on the basis of a lot of (lopsided) data, from his PoV.

By "lopsided" I mean, he's probably seen a lot of evidence that his business continues to thrive when he continually takes the reins in every aspect of its execution -- but what he hasn't seen is the extent to which it can really thrive when people feel truly enabled and empowered to contribute creatively to productive outcomes (at least within their subdomains of the operation). Even when it comes at the comparatively low cost of, yes, occasionally making small-scale mistakes.

Unfortunately, I don't know a good way to tell a CEO that, like Bjork teaches us, "there's more to life than this." Last time I tried, the CEO just didn't get it (or he sorta tried to get it, but it just didn't stick), and our relationship unraveled shortly after that.
But most distribution provide a list of trusted root CA. For exemple on Debian: /etc/ssl/certs/
"It usually takes at least 5 years to build a company to exit or profitability."

Five years is also roughly the time frame of Venture Capital funding. With Silicon Valley companies, it
may be a bit of the tail wagging the dog because exits are often driven by investor timelines.
I agree, but I'd add that part of the issue may be the zeitgeist: the world is changing more quickly than some/many are able to process; there are (again) growing fears about the future, justified or not; the fear that it may just all end tomorrow - so why bother making long term investments in anything? You could even think of it as a kind of renewed undercurrent of subconscious eschatological feeling running through societies. Our popular culture reflects this (zombie/dystopian fiction becoming very mainstream is a salient example.) Another facet of this is "The Cheating Culture" - global hypercompetition coupled with the above leads to the taking of many shortcuts, and sometimes outright unethical or illegal behavior.

This too shall all likely pass, but for the meantime, we're probably just going to have to live with this culture and thinking, and hope that we continue to make good progress regardless (everything from artificial organs to self-driving cars are beoming reality while this is being typed, so there's plenty of hope underneath.) It still has negative affects (and is depressing), as the OP explains, though.
I hope Blake Masters & Clarium come up with their own version soon. It is easier to be consumed on iPad/Kindle than on web.
My understanding is that it's more subtle than that. If you subscribe to no TV services, they can block all channels. However, if you get any TV service from your provider, they have to provide all broadcast channels to you, either un-encrypted, or encrypted with a free cable box for every TV in your house.
Thanks! It's based on animate.css
> Perhaps knowing maths is a bit like having dirty fingernails from doing manual labor.

Never tell this to someone who pursues pure mathematics. It's so absolutely opposite their whole mindset that math should focus on anything other than the beauty of mathematics that comparing it to manual labor may well make their heads explode.
The BBC coverage is unbeatable. Really sets a new benchmark for multi sport event broadcasting
Nobody has a clue? I don't buy it. Big things are happening in energy, biotech, health care, 3d printing, telecom, computing, and more. There is definitely a place for longer term thinking.
The idea that we'll be able to write apps in an interpereted language is probably a long ways off, but the second idea about more portable object models is spot on.

I would argue that such a model would need to include the ability to easily manage per record image assets. (think about how often we have images in a table view cell)

To that end, I've created an iOS library to deal with downloading these tables and images in a reasonable way. If you're interested: https://github.com/Smartovation/STRemoteResources
This is a near perfect summary of my problems with the tech business (particular the startup scene) and why I wouldn't want to get into it. People are so focused on making things that I find to be totally trivial and banal. How many more note-taking apps, organizers, and social whatevers does the world really need?
Thanks! I didn't know about virthualenv. Cabal's lack of uninstall, plus those dependency problems, will make this a must for me when I experiment with Haskell.
I haven't seen any mention of Phone Gap (http://phonegap.com/) or Titanium (http://www.appcelerator.com/). Whats the consensus of how close either of these projects get us to a "one code base" solution to multiple platforms?
That's exactly how it works in C# (.NET in general), and I would take a fairly large bet that's exactly the same in Java. It seems like a regression (when thinking on terms of lower level --> higher level language movement).
The requests library in Python will check your certs.

docs.python-requests.org/en/latest/user/advanced/#advanced
Python does have some certificate-checking machinery:

http://docs.python.org/library/ssl.html#functions-constants-...

http://docs.python.org/library/ssl.html#ssl-certificates

However, this isn't exposed in the higher-level httplib.HTTPSConnection class for some reason. I'd bet it's not too hard to write your own subclass to handle it though.
If a three axis magnetometer was used in conjunction with electrical nerve stimulation on multiple sites, you could have the full range of compass heading, local magnetic field density and ac field sensing. Which would be cool.

This has probably already been covered by the NASA Human Systems Integration Division, so it might be worth having a dig through some of their stuff - http://hsi.arc.nasa.gov/index.php

I think it was some of them who are working on the subvocalisation stuff - http://www.nasa.gov/centers/ames/news/releases/2004/subvocal... - which is basically cyborg telepathy, near as dammit.
That's great until it changes.
That looks amazing, bookmarking this for sure. Thanks!
Why the hell is that advanced?

Nice to know, though. Thanks!
what about with platforms such as Android? iOS? etc.
I noticed the commonly used words list. Is this perhaps a failing of Diceware? I feel like people choose a passphrase, but then they tinker with it because they don't think they'll remember it, which leaves some words much more likely to be chosen and some words much less likely to be chosen.

So, instead of the 7776 words you end up with (well, still very many words) fewer.

I'm keen to see further work in optimisations (such as yours) and also into the psychology of choosing passphrases.

I agree that there comes a point where more GPUs is just "Meh, so what?"
By 1910 universal compulsory education was already in full swing in many places. Take Massachusetts, for example. If you examine the textbooks being used in Massachusetts at that time you'll see the same phenomenon -- they're much more advanced than modern textbooks. And they were not just for the rich, Massachusetts already had compulsory education.

And by the same argument: where are today's equivalent textbooks for the rich? Our wealth gap is as big as ever, yet I see no books even for the rich that are so advanced.