skysight-inc/HackerNews huggingface dataset:
>The quality of the developer community seems to have gone down since the 90s. Maybe the OP should have stated "Eventually every great developer's editor search ends with vim, emacs or a management position." At least, this has been my experience.

To quote Jack Churchill (during WII) "any officer who goes into action without his sword is improperly armed."

> I was previously assured that VPLs were the future.

They are. Its just that we are getting the VPL features that we want (live programming and rich editing experiences) in editors for our textual languages instead.
Sure there is a benefit! Unless you specifically are being targetted with a MITM, your mail will be save and encrypted anywhere between your originating server and Google's receiving server. No ISP or government router traffic harvesting.
""If I lend you my phone, I don’t make a copy of my phone, I move it. We can do the same in C++ now. If I make a 10,000 by 10,000 matrix in a function, I can hand it over to you at the cost of two pointer assignments. We are talking picoseconds. That is a huge difference in the way I can write code today.”" Anyone knows how this is achieve? He mentions how you can move things out of a scope. In the past I think we would have to use a statically allocated pointer if we want to reference it somewhere else, right?
Exponential increase in power for a linear increase in the number of components
I, too, was wondering this. I haven't seen any mention of it anywhere else, though.
The idea of languages adhering to some sort of standard and not being owned by a corporation rings true.

I can see this first hand with Objective-C, where Apple evolves the language as they see fit. The joining of such different paradigms as Smalltalk-style OO and C was fragile in the first place and can barely sustain the new functionality.

Another example is C#. No matter how nice the language becomes, it will always be the MS language for me, and I don't trust MS when it comes to APIs and languages - they shuffle things around for no reason, cancel projects, etc. And then you're screwed.
Root-signed certificates tell me only that someone paid money in exchange of "trust" in a certain trust-scheme.

The fact is, the trust scheme currently implemented is broken and bad. A better system is a peer-based one, where self-signed certificates are "root" certificates.
People don't seem to understand how insecure self-signed certs are (and aren't if provisions are taken).

1) A self-signed cert provides zero protection against just about any attack that would work on clear text - any attacker can simply create their own self-signed cert and pretend to be you, and Google would have previously accepted this and happily accepted the incorrect mail. This is broken security in every way, and it is better to use no security since at least nobody can believe it is secure.

2) Self-signed certs are actually stronger than 'chain of trust' certs, provided you can trade the public cert in advance. Google should have a box on their POP fetch page where the public cert can be entered. This is more secure and the correct way to handle the problem, rather than blocking self-signed certs.

Self-signed certs are perfectly valid if the public cert is provided beforehand. Self-signed certs with the public cert used unchecked from the server is COMPLETELY BROKEN.

TLDR; Google needs to provide a box for the user to upload the mail servers public certificate.
Show HN: Create and collect forms directly from email
XKCD: Biologists play reverse Pokemon ...
I very rarely have rewarding real-life discussions involving more than 50 people. Online I've found tools that make this possible. Like threading.
How to use Pinterst for business
what an ugly baby that is...
Dodgeball/Foursquare is the canonical example. dens is relentless. (dodgeball wasn't so much a failure, but was a smaller success than 4sq to date)

I hope the things I did/failed at during dotcom (a datahaven beyond the reach of nation-states, and electronic cash) end up being things I can do successfully in the future.
Setting Up An NFS Server And Client On CentOS 6.3
Slashdot is threaded, Reddit is threaded, HN is threaded. You're right that J. Random PHPBB forum isn't (and that taken together there are more of J. Random PHPBB forums around).

I wonder if it's simply the lack of any super-simple forum software in a popular language that supports threading - slashcode was famously unreadable perl, HN is a dead lisp dialect, I don't know what reddit uses.
Except that's not how it works. The realistically high skilled C++ people are far and few between so you end up with a shit crock cludged together out of vaguely bastardised MFC'ish code, knotted with Win32 and ATL and Boost with a load of "features which were too dangerous to use" removed.

C++ has such a bad legacy, it's going to be really hard to shake off the bad old days.

Perhaps in time when the newer generations actually have been using C++11 for a while, but not for at least 5-10 years if you ask me.
If the government wants to harvest your traffic, MITM'ing is not really a great impediment. It might be an impediment for your ISP because of the economic constraint it imposes, but even that is not certain.
What about having your own (self-signed) CA? You sign your own certificates and import that CA on your computer. Would this effectively prevent a man in the middle attack?
congrats on the move... give a shout if you need any recommendations about Seattle (MSFT myself)
Good luck getting Google to trust your CA ;)
I think the notable exception to that rule is Go.

Go is imported by Google, not exported by them.

It's also got good funding, a large number of well known core team members (who won't let it die) and a good license which protects the users in the future.
The ‘fing’ Corollary
How to Prepare Employee Sheet with esCalc
The Stupid Revolution: An Update
The Internet and new wireless technologies were going to change the world. So what happened?
At ABC Innovation, where I am at the moment, every day is like this. There is a constant flurry of research, ideation, analysis - but the most important part of all that is figuring out which approach, of all these, to put our energy behind. Because the next part is a massive amount of hard work, with dev, ops, design, project management, editorial people; the deployment of serious resources. Which in the end is time spent away from our families, as well as the unstinting attention of a lot of skilled people.

So damn right, the effort of making something real is huge. All the more reason to be sure that you're working on a really good, important idea.

And yes, a lamp with a LAMP stack is a bloody great idea.
http://www.kickstarter.com/projects/cloudlight/light-1

Backed.
Sorry, my question was not actually meant to be about this Google situation but about the general approach to using your own CA instead of self-signed certificates.
What language?

Interestingly enough, you can do that with a single perl command, join.
edit: nevermind answered as Java
As I said, this is no precaution about targetted attacks. It works well against the default packet inspection and probably also storage routers (can) do.
Designmodo Looking for New Authors
We need authors to write on a regular basis who can produce high-quality, beautiful and useful articles on web design and development.
If vim actually supported other keyboard formats properly (rather than making the user redefine them from scratch) I would switch in a heartbeat. But until then, vim is useless to me.
Why Google Hangouts Dropped Vidyo For WebRTC
I've been using appfigures.com's status page for that:

http://www.appfigures.com/itcstatus
You contradict yourself by saying that bad things are a logical result of multiple events and then saying that you "could" have done something different. Our brains are just a bunch of chemicals that form organic materials called neurons that process and share information using electric-chemical reactions called synapses. Meaning that if you are a murderer you are as responsable for killing as the sun for shining (that doesn't mean we shouldn't lock murderers aways, please don't bring that argument).
How do you handle things the first time? Perhaps you're always under a MITM attack.

And what about when you change the certificate deliberately?
As long as you don't need your services to be used by third parties then a private CA is a good option, and in some ways more secure than traditional root CAs.
So long as you can find a secure way to get your CA cert onto whatever systems need to verify your server certs, it can be a very good thing. The main advantage of this over public infrastructure is that you don't have to trust the authorities, some of whom have in the past been caught handing out dodgy certificates or been compromised.

For a set of private systems that don't need to interface with the public internet and unknown clients, I would go so far as to recommend it. You must keep your master keys safe of course!
I'll grant you the pathological nature of the App Store, but I don't agree that that's characteristic of the Internet as a whole. The house always wins over there.
No surprise that there are lots of questions about VIM, it has a really sharp learning curve. You didn't include Visual Studio, Eclipse, IntelliJ, etc...which is a significant omission.

This is all informal and anecdotal, but I'll try to explain my reasoning/experience. In the mid/early 90s, you weren't really a great programmer unless you used a real text editor, so we would all eventually evolve into using Emacs (or VIM for the more daring). But then in 1997, Visual Studio got support for code completion (in VB), and Java and even C++ eventually followed. These language editors improved productivity for programming in those languages so much that it was hard to be competitive staying on Emacs. So perhaps most (~90%) of the Java/C#/C++ code written today is done with a well supported language aware editor (Eclipse, Visual Studio, JetBrains, ...).

Of course, if you are programming in a dynamic language, or a language with lousy tool support (C), then the language-aware editor doesn't really give you much (no static type system --> no static type feedback). There is a greater chance you are programming in Emacs (or VIM), but then you might not want to bother with the learning curve, or you might want something with a more modern non-ASCII UI, so maybe you are programming in Sublime or TextMate. There is nothing really wrong with this, you can be a great developer and prefer to avoid UX-archaic tooling, especially if you happen to also be a strong designer. There are strong trends away from text-based tools to visual tools, and I have no reason to believe that this isn't at play here.

The emacs community is vocal, and is particularly magnified in my field (systems/PL/PhD-level computer science) and demagnified at my place of employment (Microsoft, though keep in mind MSR has lots of Emacs/VIM users). But look at what the students prefer: they have no patience to learn these weapons from a more civilized time. They'll take whatever is the path of least resistance, and honestly who blames them!? Its not like they are losing much.
Could always ping the developers a feature request, they seem to like hearing from the community and reacting to people's needs.
Q&A - quora
We could start with a little honesty. Perhaps the C++ zealots could explain to us how the great new features they promoted for so long were actually a crock of shit. Things like auto_ptr, throw specifications, the export keyword and so forth were promoted as the bee's knees. It's funny how they love to criticize C and its "evil arrays and pointers", but never admit their own mistakes. And they've made so many, so many more than C ever did.
I have mail forwarded from from me@mydomain to me@gmail so if I've understood correctly then this might potentially affect me.
How would one check now, rather than waiting till wednesday to find out if there is going to be a problem?
It will prevent it as long as the client has your CA's public certificate embedded. Browsers/OS embed all of the normal CA's certs so that you know any cert signed by a regular CA is authentic. However, regular CAs are not incredibly trustworthy and are a security problem... (Regular CAs can be attacked with fairly easily with social attacks, and some CAs can even be bribed or hacked.)

Giving Google your CA or your public mail cert are effectively the same thing in theory, as long as Google only uses your CA cert to authenticate your own servers and not anybody elses.

In practice, current CA management software in most OSes is (imho) faulty, and will allow any CA in the chain to authenticate any cert. This probably needs to be fixed at some point... So until then, there is no way Google is going to accept your CA, but they SHOULD change their systems to accept a specific public cert for a mailserver for POP3 fetching.
Agreed. But I suppose it gets the job done.

(Disclaimer: Didn't check whether it actually gets the job done.)
You didn't read my other comments then, the ones where I said that the illicit use is in BTC's favour in my book? And that my objections to BTC itself are economic?

Never mind, just sling insults about how closed minded and scared everyone is that disagrees with you...
IPhone vs Android
"The quality of the developer community seems to have gone down since the 90s."

Really? Can you back this up? As it seems to me the community is more engaged, productive and delivering high quality code. Yes, there's a lot more bad code as well, but that seems to be proportional to the increase in developers.
Is the pixel about to die?
Fear not. I think it will spread quicker than that :-)
How to Build a Successful Small Business Brand
Great example. demonstrates the fact that if you keep solving problems in one domain / area, one day you will solve a really painful problem profitably
You know you are a senior computer scientist when people refer to events you witnessed first-hand using the words "that era".
No, this only affects users who retrieve email via POP(/IMAP?) into Gmail as separate accounts. Oddly enough this is happening on one of my accounts and not the other, yet I know both have self-signed certs.
Vedas are much much older than 11th Century (http://en.wikipedia.org/wiki/Vedas)
Dell confirms it will exit smartphone business, drop Android
Have a look at marionette: https://github.com/marionettejs/backbone.marionette

Although if Backbone keeps rolling in good features marionette's usefulness gets less and less ;)
That is such a simple but powerful observation. Like, you can have the greatest product on earth but if you cannot be available at the point of sale you have nothing.
I have a niche website that sells a digital service that i started in june. It gets 5-8 sales a month now (each of $30) and raked 1700 people who registered in the past to a mailchimp email list. It has the potential of making >120 sales a month with a good push from seo, email campaigns and the like.

I haven't touched the website for 2 months and i'm considering selling it if someone is interested. Maybe even something else? if anyone owns a website that sales, maybe we can take percentage out of each others websites and spice it up?
Hold carriers to account and save money: Don't buy a subsidised phone
What should be the recommended order for these books?
How about a blanket pardon for anyone ever convicted of consentual homosexual relationships?
toning down the rhetoric, a good "modern c++" book would be awesome - something that shows how to use a solid, simple core with the latest features in, say, the first half, and then has further chapters extending that with more complex approaches where needed.

i've asked for this kind of thing before,but never had a really good suggestion. seems like it could be a huge seller...

[when i last asked here what, 6 months ago, i think the only vaguely useful answer i got was to read the draft standard]
Just to point out how ridiculous this is: you can get mouse position information from any event (fired programatically using fireEvent or otherwise). You can even get it from the "onbounce" event on <marquee> elements, for goodness’ sake.
We were lucky enough to start a new project ~1 year ago - completely in C++11. We make heavy use of all the new fun C++11 stuff like lambdas, move constructors (yay, no vectors of pointers anymore!) and all that auto/decltype syntactic sugar.

And I must say: It's a whole different programming language and a new level of productivity.
Meet GNU Parallel :

http://www.gnu.org/software/parallel/
"Google needs to provide a box for the user to upload the mail servers public certificate."

This looks like a brilliant idea. In that way the self-signed cert gets verified without the hassle of getting CA signed certificate that it's not an optimal solution if you're virtual hosting several domains (you can get a free cert from StartSSL, but with virtual hosting and IPs being scarce and all, that's far from being a good solution).
Primate species: new slow loris found in Borneo
your intended point is right. but bribes usually make everything easier for startups in over-bureaucratic states, bribes themselves are not making anything hard, but unethical.
Microsoft responds to IE mouse tracking vulnerability
Really didn't like the way I was required to indicate to my entire network what articles I'm reading.
Reading a lot of comments here against Marc, I would like to remind him, your recent words on "why being good" is important and "don't be evil" motto is good for everyone and even for smart people.
> How do you handle things the first time?

You compare the fingerprint.
We were looking for some kind of "posterous for forms", but couldn't really find anything, so we created this side project. You can create (web)forms with email, and collect data directly from replies to the form email you send out (so people don't have to click on a link to an external form).

Any feedback is welcome, especially on whether this is something others might find useful as well?
If one is fetching emails without SSL, does that mean the data is sent in clear text over the wire?

In that case, self-signed do provide greater than zero protection in regard to ISP surveillance and other passive attacks. (similar to smtp tls encryption, enabled by default by almost all mail servers, and uses self-signed certificates).
Uh.... no? Why would we be talking about that?
;)
Why we still love board games
i used Google Sites and Google Forms mainly to collect the data of my customer. If this form can be integrated to both would be nice
This description defines abstract algebra and some topology well, but I am an applied mathematician and for me mathematics is about number crunching and stability of this number crunching. Without numbers or numerical structures like polynomials and matrices you'll only have set theory, some parts of algebra and some mathematical logic.

Philosophers of mathematics spent the 20th century what mathematics is all about and they did not settled on any potential definition.
Microsoft shutting down Live Mesh on February 13, 2013
This reminds me of a post by an author who had his own book's prize on Amazon decreased in a bidding war between bots [1]. It's a different matter but the post begins with this:

Before I talk about my own troubles, let me tell you about another book, “Computer Game Bot Turing Test”. It's one of over 100,000 “books” “written” by a Markov chain running over random Wikipedia articles, bundled up and sold online for a ridiculous price. The publisher, Betascript, is notorious for this kind of thing.
A story about computer science
and other improbable things.

It gets better. There are whole species of other bots that infest the Amazon Marketplace, pretending to have used copies of books, fighting epic price wars no one ever sees. So with “Turing Test” we have a delightful futuristic absurdity: a computer program, pretending to be human, hawking a book about computers pretending to be human, while other computer programs pretend to have used copies of it. A book that was never actually written, much less printed and read.

[1] http://carlos.bueno.org/2012/02/bots-seized-control.html
So something has parsed the HTML - but at least you didn't have to reinvent that wheel :)

Still, you might want to look at https://affiliate-program.amazon.co.uk/gp/advertising/api/de... - the Product Advertising API looks like the latest evolution of the E-Commerce Service API and might let you do things like stop the bot from making duplicate similar purchases, or accidentally fulfilling your wishlist.
Meetup with Dwight Merriman, CEO, 10gen / MongoDB
Self-signed in this context basically means "signed by something else than a trusted CA", not the strict meaning of signing a certificate by itself.

There are two elements to public key crypto: The encryption itself (which is perfectly fine on a self-signed cert) and certificate distribution (for which the best current solution are the globally trusted CAs). If you can somehow guarantee that your attacker can only listen to your data, not inject himself as a MITM, self signed is perfectly adequate to protect yourself. The catch is that providing this guarantee is very difficult.
Reading between the lines, I would guess that part of the acquisition terms include that the acquired group of devs will stick around to build out a San Francisco office.
[ Function ] PHP OOP - Server Specific Extensions - Apache - CEH - Saher Team
Google are being dicks once more.

Between my own self-signed zero security (as someone claims) certificate and your usual Comodo.com-anyone-can-haz-a-wildcard-cert I'd definitely go for the first.
Maybe -- it's not clear that 4sq is a winner, but if there were any single person who I would bet on coming up with a profitable mobile location service, it would be him. If not 4sq, whatever he does next.
"How do you know if there are new replies? Where do you find them?"

This is solvable in a very obvious way. Just visually highlight the new comments since your last visit. E.g. like this: http://i.imgur.com/MXjNZ.png (new comments are yellow).
Thanks, the results and the webform pages should be pretty easy to embed, we'll have a look at some more integration.
12 Letters That Didn’t Make the Alphabet
Our (government owned) telco is building out an island-wide Gigabit network here in Jersey which is great. Problem is that it is capped at 50GB/month usage, which defeats the purpose. Actually using the connection's full capacity for about 5-6 minutes a month will result in overage charges. I'm hoping Seattle has a more realistic monthly cap, if one exists.

Sign-up page with plan details here: http://www.jtglobal.com/Jersey/Personal/JT-Fibre/Fibre-Tarif...
Divshot - Chrome Web Store
Paperless ticket technology still not 'practical'
Christmas Bonus Games
That was the whole point of the social reader - integration with open graph. Removing that and there was no reason for them to build it in the first place. If you didn't want to share what you were reading automatically you could just go to the regular website and use the regular sharing/like button. I was very particular about which stories I viewed through it. It's surprising the articles you read on a news site that you'd prefer not be shared.
Beyond the complexity of C++ I think one of the biggest problems with it is the lack of self sufficient standard libraries. There was always something extra that needs to be done. For example, simple things like converting a string to a number involves more thinking and knowledge (using string streams) that what is really necessary.
Tinycon
I use Emacs, Vim and ST2 all the same, and most of the time, ST2 lets me do the same editing task with simpler keystrokes.

So my fingers don't look as busy as when using Vim, but I'm actually doing the same thing and postponing RSI.
Could you explain the "imported" comment? (I don't know much about the history of Go, and it looks a lot like Google is exporting it.)