skysight-inc/HackerNews huggingface dataset:
As a future mitigation strategy, what about encouraging website owners to have certificates independently signed by multiple CAs? Perhaps require multiple CAs for EV certs, and maybe for certain HSTS sites?

This makes it easier to revoke a bad CA and harder to spoof a high-value certificate, and _also_ gives the CAs more revenue, which sounds like a win-win situation for everyone. :-)
I agree with you on the Mac comments, but Paul Thurrott himself talks about the ribbon in the comments- it annoys experts, but everyday users love it. Since we are surrounded by very tech savvy people, we tend to think that everyone hates it. They don't.
Ask HN: What are some good cheap ad networks?
I was having a conversation with a friend, we began talking about how to effectively market a product. One way I thought of is by using cheap ad networks. Any websites or ideas are welcomed.
Read the article (or any of the other ones). TURKTRUST did not spoof the .google.com certificate. They accidentally issued an intermediate (chained CA) certificate to a user, who happened to be a government agency, and that user accidentally spoofed .google.com.
Well, no. You still have to wait for computation, you still have to wait for network... and you still have to wait for entropy generators, if you use them.

It would possible for a part of application (thread) that do not rely on random numbers to be more responsive. But you do not need OS rewrite for that. And, of course, if you are aware that you are waiting for random numbers to draw a map, you want to do something with that in the first place. :-)
A response to Dave McClure on the Food Tech Revolution
In the Privacy Wars, It's iSpy vs. gSpy
That was interesting. I feel like I've seen an X rated movie that was edited and pixellated to make it PG-13. Lots of tantalizing bits, not a lot of narrative, and details hard to ferret out.

The basic notion that you could use metal sintering to create a rocket combustion chamber that included the cooling jacket is pretty neat. That lets you run reasonably energetic fuels without having exotic materials (tungsten for example). I can also see why going too far down that path might lead to untoward interest by third parties.
That isn't a fix. The problem isn't blocking as such but rather latency. If for example a screen refresh and reading from 10 different network connections were all done in one thread (non-blocking) it could still take some time before the screen refresh code gets to run.

60fps gives you 16ms per frame. Correctly written Android apps (and iOS for that matter) are expected to do work on secondary threads, and keep UI only code in the UI thread. Of course many applications don't quite stick to that.

In the Android developer settings you can make it whine about work being done in the UI thread (eg storage/network activity - StrictMode). You can also make it flash a red border whenever the UI thread blocks. In Android 4.0 I used to see a lot of red border from Google's own apps. In 4.2 it happens a lot less often.
Who wrote the 'Death Note' script?
FTA:

>released 40 years ago this weekend.
No. It's not even worth discussing, the possibility is so tiny and slim.
Here are some thoughts, tear me up :D

http://news.ycombinator.com/item?id=5010842
I'd like to bump my friend's band:

http://www.youtube.com/watch?v=FOt6EGgBnQs

Bit Brigade - they speedrun NES games while playing the music live, metal style.
Show HN: Resume Editing Service
Title says government agency did, not the user. The problem is with the title.
So.. how does one install this?
That's a good start, but even if no firm outperformed the average, there might still be skill involved. The question is, what is the a priori probability of success for a given class of investment? To answer that, you'd have to account for investment opportunities that weren't taken by anybody. But of course there's no way to know whether an unfunded startup would have been successful. So the VC community can rest easy knowing that they are insulated from objective evaluation, unless a VC emerges whose sole criterion for funding is that everyone else turned the investment down.
That last quote about American English sounding like "anger born out of resignation" is a bit ominous.

I'm fairly sure this Japanese band, White Ash, has nothing but pure gibberish as lyrics. I'm aware that some Japanese musicians, despite not really being able to effectively pronounce English words, will sing in English. Here though, I cannot pick out any English:

http://www.youtube.com/watch?v=x5RmmIS1AIQ

If I'd only heard the music, I would've assumed it was an American band.

*fixed "gibberish", had it spelled wrong
Hogtied bdsm soumises sandy et cerbere maitre dominateur
Hi HN, built this website as a side project. What are your thoughts?
Could you write some more documentation for this please as others have suggested in the comments above.

How to install, what functionality (can you post as well as read?), why we would want to install this over using a browser. What made you want to develop this?
It hasn't been a real problem for me. But I cant say the same for every kind of program developed in Scala. I'm not saying that it is not a problem and I dont recognize it. Its just that, for me, the problem is much smaller than some people here seem to think.

Maybe I've waited too long too many times for gcc to compile C/C++ that when I went to Scala I thought waiting some seconds to compile is okay =P
You say this as if the press is using the term in a misleading or special way, but in business the term "market share" has always meant percentage of volume for a given time period, not including product still being used. People might use a term like "usage share" for that, being something completely different.
how does that contradict the person you're replying to? surely it would be a non-blocking read that would return empty.

you seem to be saying that apps generally should need /dev/random only rarely. which seems sensible, but is also what the post one up suggested.

in short you seem to be in confused and annoyed agreement.

[vaguely related interesting post on urandom quality - http://security.stackexchange.com/questions/3936/is-a-rand-f...]
This. Inability to separate out speech from background noise. I cannot have a conversation in a pub, club or bar where there's loud background music or noisy chatter. I can understand people perfectly fine in a quiet setting. Therefore I avoid noisy places, which does negatively impact social life (especially in younger years).
Canada Needs Silicon Valley's Culture of Entrepreneurship, Expert Says
Smells like Nirvana!
Two-sided markets and platform competition have been popular topics for microeconomic theorists since around the 2003 work of Rochet and Tirole[1] (IMHO, Tirole will win the Nobel Prize in the next 3 years). These two helped put together much of the generality left out of Baye and Morgan's 2000 paper[2] that looked at information gatekeepers on the Internet.

In the late 1990s and early 2000s, economists really began to look at the Internet (Hal Varian, Google's Chief Economist is probably the best example -- see his 1998 book "Information Rules"[3]). They tried to tackle issues like price dispersion in a homogeneous goods market on the Internet (that is, why does price dispersion still exist in an Internet market for a homogeneous good?) and other problems of consumer information heterogeneity, consumer search, and so on. Starting in early 2000, economists began to take interest to the "gatekeeper" model of Internet prices -- a website that would aggregate prices across online retail sites. "If a consumer just has to go to one site to become informed about all the prices in the market, then consumers can costlessly become informed about all the prices in the market by going to the gatekeepers site" many microeconomists said. This led many researchers to look into the model of fees charged by gatekeepers to retailers who wanted to have their prices posted on the site.

Eventually, Tirole et al realized a way to generalize the concept of a two-sided market by describing it as a platform where the owner of the platform receives revenue from two [or more] sources (i.e. buyers via advertising and sellers via gatekeeper fees), hence making the general distinction between a multi-sided market and the the classic supply/demand market model. Today multi-sided markets are used to model almost all forms of platform competition.

From my perspective, research on the economics of the Internet hit a bit of a slump in the late 2000s as [too] many economists instead focused on macroeconomic issues during the bubble, but has grown in interest quite a bit again over the last 3-5 years with the rise of social networking and similar app/mobile platforms. So much of this research relies on fundamental models of two-sided markets, that I encourage anyone curious about really hot microeconomic theory topics related to the Internet and start-up industry to dig into platform competition.

[1] Platform Competition in Two-Sided Markets, http://ideas.repec.org/p/ide/wpaper/654.html

[2] Information Gatekeepers on the Internet and the Competitiveness of Homogeneous Product Markets, http://papers.ssrn.com/sol3/papers.cfm?abstract_id=215548

[3] Information Rules, http://www.amazon.com/gp/product/087584863X/
Perhaps Gangnam Style is more of a novelty in the English-speaking countries, where foreign pop music is uncommon, than in those countries where it is common: Italian teenagers might not care that much whether it is in Korean or English, whereas English teenagers will notice that they are dancing to a song whose lyrics they cannot possibly understand.
As a mediocre Javascript dev, AngularJS was the first library that clicked for me and helped me avoid the jQuery soup code I was doing more and more as a result of less code on the server and more on the client.

It can be a bit daunting when you are not a JS rockstar : directives and services code architecture, designing views without straight conditional logic, understanding the full power of filters and expressions (I still don't), using jQuery plugins with it etc.

I don't even use routes or forms yet but I had no problem integrating it into a "classic" web app.

The docs need some work though, maybe with more example on certain part. But you can find great code snippet and videos elsewhere.
Make sure you put it in the 'about' section of your profile, b/c the email field is private. Feel free to reach out to me, my email is in my profile.
Looking for an ebook about money
About 5 years ago, I stumbled across an ebook about money, which I saved on my harddrive as a pdf, but cannot find it anymore. It is likely lost. Unfortunately, I don't remember the title at all, nor the author. The book explained very nicely how money works and what role it plays in the economy. The part that stood out for me was a description of a money system, where interest was eliminated, and money lost its value over time if it did not change hands. I wonder if some of you know which book I am talking about and can give me a pointer to find it again. Thanks a lot!
Samsung confirms Tizen-based (Linux) handsets for 2013
Lessons From 2012: The Year SEO Changed Forever
I know to parallel sets of lyrics for almost all top 80s disco and soul songs: one actual, and one misheard, from when I was a child and didn't speak English.

Only a few years ago I heard my all time favorite song growing up, except I now realize it's a female singer! Tracy Chapman tapes were very popular in Somalia, and I don't think any of us realized Mr Chapman was, in fact, a woman.

Even when we have seen her pictures! She might have even looked "manlier" than most androgynous stars of that time.
Not my native language. What is 'casually nude'?

My contact picture (Android/Google) of my wife (with her consent, of course) reminds me daily that breastfeeding changes women.. No nudity, btw.

But picking up here, would a picture of my wife breastfeeding cross the border of 'casual nudity'? That would seriously confuse me. It seems that this device is supposed to keep memories for you. That situation is certainly very well worth keeping for me/us, ignoring the required nudity to prevent your offspring from starving..

I guess I cannot understand limits based on nudity alone, since a good deal of nice pictures I have/want to keep show a lot of skin, both mine or my wife's (again, no need for anything fancy. Naked son on naked wife is certainly a normal picture to keep and remember).
I certainly agree that I wouldn't post the majority to Facebook, of course. Bit if this product is supposed to replace other ways to keep your special moments with you, I see no way to exclude all nude content.
Mark Lynas, environmentalist who opposed GMOs, admits he was wrong.
Ashton's homescreen lists UberDrive instead of Uber. Sounds like the recognition's not quite there yet.
I like the Kindle metaphor! Perhaps it needs more technical details, but makes it more technical.

The important point is that if you have a black and white 600x800 screen, how many different screenshots can you make with 0 black pixels? With 1? 2? ... 239999? 240000? 240001? ... 479998? 479999? 480000?

Another important detail is that this definition of temperature is not a crazy idea from this particular research group. It's a common definition in advanced thermodynamics.
Hey, sorry for the late reply, I commute a very long distance to and from work! forgive me.

I will be trying to focus on each of the points you mention.

I will start off with C and C++ in the blog. My experience actually goes into a range of other languages and I will eventually be covering them as well where possible.

I have serious love for algorithms, data structures, good practice (when its actually good and not just over engineering) Web development is something I might add, as an experimental section (or sister blog). The reason for this is that I am actually not a web applications developer and my experience mainly lies in low level software and API development. I hope this answers your question and if you have any topics you would like to see covered, let me know please.
I'm sure the "Help, I have an STD," version of the app is not far behind.
"so shocking that I wonder if a digit got slipped somewhere."

Sounds like Verizon flipped a certain digit at RIM. Possibly a good amount of August 2012 iPhone syndrome as well, "don't buy a Blackberry now, the new ones are coming in January"
Interesting, what condition was this and how did you recover from it?

P.S.: If you miss those whimsical-sounding lyrics, there's always Purity Ring (band).
Canada simply needs more people like Debbie Landa. Grow was a huge part of helping me get connected with legitimate leaders in tech, and learn (quickly) the massive amount required to get started.

Her advice to us last year was an instigator of our pivot, and probably the most valuable we got all year.
Mandelbrot's talk about fractals and roughness
Nice work. Would be better if they didn't have a background embedded, I can add that at display time.

Is there a cdn for these icon sets?
What blocks me from digging into the source is mostly that even if there are separated components, I still need to understand all the aspects of Meteor. I can't just open the file and change it. Will it screw up the deploy system? Will all the data-binding continue to work as expected? Maybe yes, maybe no. Unless I totally understand the system, I can't really know.

You say "like using livedata (publish/subscribe) with Angular", but that's the problem I'm talking about. You need to tweak the system to make it work with Angular. But what about the hundreds of other smaller angular-like libraries? Or tomorrow's most popular one? I can't just <script src="it">, I'll need to create a meteor package and make sure it works good with all the rest of the system (Which unless I'm a Meteor expert, I have no way of knowing).

That could actually be a good blog article, "How to use MooTools, django template system and MySQL with Meteor". I.e. Going through what's needed to be tweaked to make it work. Compared to say, express, I could tell you use the mysql node library, normally include mootools in your html files and use mustache (Or whatever library already exist to mimic Django's libraries).
I feel like paving the cowpaths is all well and good, but there must be some room for innovation as well. Let's take Dropbox, for example. Sure, it stands out as the de facto file synchronization and cloud storage service in use today, but had the founders of Dropbox set out to merely improve on users' habits rather than reinvent them, their service would probably look like a fancy way to juggle the multitude of different versions of documents we used to have sitting around our harddrives and fileservers.

At times, usability improvements demand breaking with old paradigms.
Excuse me while I clean the projectile vomit from my screen.
You can't distribute it, but you certainly can print pages for yourself from an ebook. You can't distribute that, but if you bought it then you can back it up. The same with most software and music. You can't distribute, but you can create copies to prevent your own loss. A printed copy prevents against loss in the case of loss of any digital playback device.
> code=data

This is a really good explanation, and I just want to add a small bit to it, having had to use Lisp as a primary language quite recently due to some AI projects in cognitive modeling. One thing that I've found personally is that by understanding Lisp, you can essentially gain a deep understanding of every __other__ programming language.

If I had the chance to do my entire Computer Science career over again, I would have learned Lisp as my first language, and then compared every other subsequent language against it. Because of the deep symmetry between code and data, it is one of the easiest languages for implementing and re-implementing programming language features on top of.
Google Maps never supported IE on Windows Phone 8, and likely never will
Is there really a market for serious office productivity apps on tablets? I'm not seeing it. I certainly would not want to do any heavy duty editing or spreadsheet work on a 7" touch screen.
Yes, they packaged it for Ubuntu and it's been repackaged and worked in majority of distributions in a matter of minutes. Literally - around 30min after the announcement I wanted to start looking at a way to get it running under Arch, but there was already a 6th version of the packaging script available online.

I'm not sure what do you mean by fragmentation exactly - sure all distributions look a bit different and have some specific approach to packages/configuration, but apart from that it's all almost exactly the same. If something works under ubuntu, there's no good reason it wouldn't work under other distributions.
>I work on a lot of projects where my clients use Google Drive to update copy leaving me to then either update a CMS or some flat JSON/XML/YAML files. I could risk allowing my clients to update flat files but if I had £1 for every time a JSON/XML/YAML file didn't validate, well, I'd have about £38.

The rational solution is to do what everyone has been doing since the dawn of the web, which is to provide an admin interface, no?

This whole thing, to me, looks like a case of "just because you can, doesn't mean you should." At the same time, it's a novel and creative approach which gives it a cool factor.
Besides the joins it is great to be able to add custom methods to the user model. For instance, to integrate mysite with django social auth, I can add a method to the user model itself to add the auth id. Which is more natural `user.add_auth_id(provider, uid)`. Instead of calling UserSocialAuth.create_social_auth(user, provider, uid)
US DoD signs $617 million Windows 8 licensing deal
That's strange. I had no problem resolving that class on a default new Play 2.0 Scala app in IDEA 12. Unless I misunderstand your complaint... I have to hit Alt+Enter to select the Package+Class to Import since sometimes (usually) there are Class name conflicts. But it always resolves the dependencies properly.
"Not a client side problem. I just ran it through a network capture. (see here[1] )

Google is 302 redirecting anything with a WinPhone user agent to the main page. This may be a bug rather than an intentional thing, but it's Google's bug to be sure." Source: http://www.reddit.com/r/technology/comments/15yx0a/after_mic...

[1] http://i.imgur.com/Hfum6.jpg

---

And update here:

http://www.theverge.com/2013/1/4/3836510/windows-phone-8-use...

Seems this is 100% intentional from Google. What the fuck? I was completely blindsided by this, I couldn't imagine a huge company like Google doing this at this scale.
Ask HN: Do I need College?
I've been going to a local community college for two years now (I'm 19) and i'm getting to the point where I can take an AA Degree or continue and get a BA.

I have been programming since I was in 7th grade and I have owned a web hosting business since I was in 9th grade. I know my way around both pretty well. I'm currently a Systems Administrator and Developer at a Startup, but if that ever fails, I would like to have options.

I've heard such contradicting things, as I'm sure you all have, about college in general. I've heard that it's both a necessity and a joke in the IT field, it should be first and last priority - I don't know what is actually true. I know I got my current job simply because I know what i'm doing, but I know a lot of companies only hire based on education requirements.

From your own experience, should I continue getting my degree part-time, or should I ditch the idea all together and continue without a degree?

I really appreciate the feedback!
I disagree with you that shadow references are a huge invasion of privacy. You are not normally entitled to a private work history.

Would you allow a complete stranger in your house, for no other reason than a desire to know what's there? Let's assume he has no intention of damaging or stealing anything. He just wants to see what you have in your house. Would you be okay with this? I don't know you, but I'm guessing that the answer is, "no". Additionally, you have the right not to be unlawfully searched. This is considered to be a fundamental privacy protecting your domicile.

When you volunteer a reference, you're giving permission for this person to be involved in your career. It's like inviting someone to be in your house; he's allowed to be there because you invited him in. Shadow references are a different story. The employer is, without your consent or even your knowledge, inviting people into your (metaphorical) house, and that's wrong.

For my part, I've been rejected both from jobs and by investors as a result of shadow references.

I hope you inflicted some Nordic Indignation on the fuckers. They effectively committed theft against you. It's a pain in the ass to chase bad guys down, but someone needs to do it to keep society from going to hell.
"I sang it with an angry tone because the theme was
important. It was an anger born out of resignation.
I brought to light the fact that people don't
communicate."

He sang it with an angry tone because he was angry. Nothing there says that "American English sounds like anger born out of resignation to non-English speakers."