skysight-inc/HackerNews huggingface dataset:
Definitely. We've been doing a ton of investigation into the issue and are trying to get all the details right before we make a detailed technical post. There are already some issues in the queues of some modules and patches committed to others that would help prevent this kind of problem in the future on drupal.org and other sites. We basically got to a point where we wanted to let users know their information had been compromised before we got to the point where we're satisfied with the details of the attack to be able to fully share what happened in the attack. There will be at least one more technical followup in the future and possibly more. Those followups will get into more details of the class of problem we faced and what we think can be learned from the event.
This is great. To be frank, if I knew this was in the pipeline, I wouldn't have spent the past few months learning AngularJS. AngularJS, but it's fairly unintuitive to learn, and working with 3rd party libraries can be a pain with AngularJS. Most importantly, I already had a good grasp of Backbone. I love how Backbone organizes apps, and I love consuming REST APIs with Backbone. But handling the DOM is a pain in Backbone, and can result in performance issues if you're not careful.

This project appears to solve this issue and to integrate well with Backbone. I'm really looking forward to learning more about React.js.
The difference there is becoming vanishingly small. There are _many many_ sites out there using WordPress as a straight CMS with no blog-like functionality.

I've used and deployed both - if I'd _ever_ been able to get one single client to understand the power of Drupal's taxonomies, I'd be developing and deploying Drupal sites everywhere. As it turns out for me, clients are _much_ happier with WordPress's backend/ecosystem/documentation.
It's definitely not an option for very large projects, but projects small enough to have a very low chance of someone pulling in a several second window describes the vast majority of projects (and in general by the time it gets unsafe I'd expect fixing up incoming pull requests to be impractical time-wise anyway).
Think of what's being built as a machine for taking several great ideas and spreading them to areas to which they haven't yet spread.

While there's much talk of disruption in startups, their goal isn't to destroy, it's to build something better and the destruction results therefrom. Considered that way, the institutionalization of startups doesn't contradict their mission any more than writing in a higher level language makes one less of a programmer.

I agree with most of the details; most people's incentives aren't pure. While that may not be ideal, yet far it has accelerated innovation.
Wait, so your girlfriend started this because of you?
I predict: no. Paul Graham seems to think that hiding scores has suppressed one form of pointless flame war (the one started by people watching comment scores fluctuating and carping about the unjustness of it all). For what it's worth, I agree.

Moreover: at this point, it's hard to see the value of putting them back. What would be gained?
Interest rates were high back then. 8% is right on par with average student loan and mortgage loan interest rates of the late 90's. So she was not really getting squeezed. She was agreeing to what most people taking a loan were agreeing to at that time.
This is has been necessary for the ... eversincesproutcore. The weeks I've spent learning ember will now be compressed into days for noobs. Jealous.
What's the Mozilla Foundation's position on this? Are they planning on staying involved in a post-DRM W3C?

It's about time to for the anti-DRM pressure groups to go down this list:

http://www.w3.org/Consortium/Member/List

And start demanding the member organizations to make a public statement as to exactly how far the EME DRM standardization is allowed to advance before they will withdraw from the W3C.
Is it impossible to have an open DRM parametrized by some sort of secret key/cryptography/whatever?

Honest question.
Why would that be nice? And, why give people a reason to vote on comments they wouldn't normally vote on?
Maybe I don't understand enough about SSL certificates, but I am hesitant to buy a critical piece of site infrastructure from someones side project. Am I being overly cautious?
Wasn't Comodo that company whose root certificate was compromised a while ago?
Well, yes, but that's really just excuses. Forums often remove the account and profile information and leave the content created by the user intact. That's a good start in my opinion.
Sounds like the Microsoft strategy (Bing, Windows Phone etc) - and now what G+ is trying to do to Facebook.

What are some examples of startups doing it (or not doing it)?
A Slightly Different Approach to Comments
The customers were buying;
they just weren’t buying our product.
This was not a time to pivot.

Carve this into the tabletops in every Starbucks in San Francisco
It doesn't make any sense to invest in development to make a cheaper product when you can simply lower the cost by absorbing the development cost of a previous generation that is still great and runs the latest software because it had a generous design and specs to begin with. Heck, I still own only an iPhone 3GS, it works fine.

The "low-cost" strategy is for companies that have slim margins on a high-end line (that serves mainly as a way to advertise the brand and relate it to high-quality), but really make the bulk of the profits on poor-quality low-end. E.g.: cars, DSLRs cameras, running shoes... almost all manufacturers work like that nowadays.
If you're going to have that username you're not allowed to use terms like "the economic will of the people".
Does this proposed W3C standard really get us any further away from taking over our devices with god-knows-what secret solutions? After all, the CDM plugins themselves are still proprietary.
I didn't make my point very clearly, and I think it can be summed up with an offline analogy: "Toxic nerve gas spill in Disneyland. To learn more, visit the Information kiosk inside Disneyland."
Right, and so I'd rather see the W3C not compromise its integrity.
Perhaps duckduckgo?
I get my SSL certificates from Namecheap[1]. Here the cheapest ones are $9/yr (they are the same certificates as the OP's cheapest ones) and they're I suppose a well-known domain registrar.

[1] https://www.namecheap.com/ssl-certificates/comodo.aspx
"I was pretty surprised how hostile the interviewers were."
They are always like that. Every video interview I've seen on their site is exactly in that tone.
Ok, NYC transit has something I need to point out that freaking owns:

Express trains.

All across the US, municipalities keep building annoying light-rail systems and basic commuter lines. They have one class of train: stop everywhere and waste your time.

What NYC has that I love is express trains on almost every line. Want to go from Penn Station straight to JFK airport? Easy. Want to go from uptown right down to Wall St.? There's a train for that.

Most cities - and nations - could learn a lot from NYC being able to handle such a diverse set of schedules.

Now if they could only do something about the rats...
I did an MS/CS (coursework-only) nearly twenty years after completing my BS/CS. After twenty years in industry, I expected to concentrate my coursework on design, software engineering, and "practical" topics like bioinformatics. Instead, I found myself drawn to more theoretical topics, like theory of automata, and especially graph theory, and fell in love with the science of computer science. I don't claim this is causal, but my salary since completing my MS took a 25% bump and has stayed there and above since. YMMV.
If is as fast as described, it's a godsend to Backbone developers. I love Backbone, but as I described below, I've ended up learning AngularJS because handling the DOM can be so tricky and cumbersome when you use Backbone.

And AngularJS is a great project that definitely solves most performance issues, but as you pointed out, many facets of directives are pretty unintuitive. And integrating third-party libraries is a pain with AngularJS.

So I'm really excited about trying this out. I really like the sample you put on pastebin -- very intuitive for Backbone devs.
Kelvin and Celsius are the same, modulo a shift.
Yeah, and not just Walt and Kara, but the Q&A from the audience as well. My favorite is the guy who asks why Apple won't let him dream.
> I don't feel it infringes on my rights, so no need to complain.

That's a pretty narrow criterion for complaint.

How about the fact that the purpose of the W3C is to oppose everything that DRM enables?

How about the fact that blind, deaf or otherwise-handicapped people have real trouble accessing DRM-crippled content?

What of the fact that DRM bit-rot causes massive cultural content loss?

Are you concerned by the fact that DRM remains the single biggest obstacle to widespread adoption of FOSS operating systems?

Part of rational self-interest is maintaining a benevolent society in which to live. By only considering rights violations, and in particular only violations of _your_ rights, you're failing to do that.

https://en.wikipedia.org/wiki/First_they_came...
They are Comodo certificates and are issued by Comodo CA. We can offer lower prices (yes, even lower than Comodo themselves) because we are a small team and we can put smaller margins.

Also we believe in friendly support and no hidden costs or tricks :)
Brian Burke can serve claim to online commenters, B.C. court rules
It's not correct for W3C to enforce policies that are worth billions of dollars to big companies at the average user's expense.
Justine Bateman Is a College Freshman Studying Programming
While I agree with you, most vendors give the impression of about as much dependability and trustworthiness (if not less, given their longer-lived but far spammier presentation).
My father-in-law is working on this project. I've been having conversations about this for a long time...great to see it in the press...
yeah, sure "the servers" did it
Startup idea - "polishing yachts and helicopters - as a service".

(I see a _very_ small need…)
Our life expectancy doesn't go up by fucking the place up and mismanaging sustainable living. Just because I care about other species and the planet that live on (you know, it's not easy to find a planet that can sustain life) doesn't mean I'm a left-wing liberal. FYI, I'm independent.

There's 7 billion of us and growing. We can take care of ourselves and our life spans are nearing 80-90 years, animals that took billions of years to evolve into their current species are being wiped out because we have selfish attitudes. We're draining the water tables and fucking over the oceans. Aside from the medical advances to help ourselves, we're screwing EVERYONE and EVERYTHING on this planet.

"But what about us humans?" What about us? Being on every continent other than Antarctica isn't enough?

Also, we lost 160 million people in wars just in the 20th century alone. At least Koalas & Gorillas won't send your family to a concentration camp, invade your country, slaughter your citizens, get drunk and slam into your family van, rape and kill, or fuck your children. Frankly, I'd rather help the animals keep their habitat than help humanity grow it's population. At least animals don't ask for taxes or welfare. Animals won't rob you at gun point. Leave them in their forest and they'll be happy and leave you alone.

Being a human and being more intelligent than other species doesn't entitle you to being a total dick and fucking the place up for everyone. There's more to life than cheap gas, car culture, and shopping malls.
> Of course not! In fact, due to the nature of the web, it

> will make DRM in general less platform-specific!

Why do you think the inclusion of an EME standard in HTML5 will induce CDM producers to support operating systems that they wouldn't have supported without EME?
> the market interprets censorship as damage, and routes around it.

You said it. DRM is close to censorship in its core idea - it's preemptive policing. The market will find routes around it.

> I see a lot of opposition to DRM on principle. These principles will go nowhere.

Not true. There is a lot of opposition in principle to the totalitarian approach (which DRM embodies). If there would be no opposition, then it will work as "they take as much as you give them". I.e. if you don't value your own freedom, they for sure won't do that for you.
You're begging the question. Spilling oil into the oceans inherently hurts people and the environment in an uncompensated way. Bankruptcy, meanwhile, is just part of the rules of the game, just as much as enforceable debt obligations are part of the rules of the game. Everyone knows, a priori that repayment obligations can be enforced by recourse to the courts, and everyone also knows, a priori, that those obligations can be discharged by those same courts (what the federal court giveth it can taketh away). Because bankruptcy is part of the rules of the game, it's priced into interest rates. When a bank loans you money, it expects you to default with some probability and charges you a premium for that risk. There is nothing immoral about forcing them to eat the consequence if the risk you compensated them for.

It's not a matter of ignoring morality. It's a matter of not ascribing a moral dimension to something that doesn't inherently have one.

In that vein, Google "efficient breach."
One of the biggest problems with the web platform is that we've spent the last 20 years trying to shim applications into a document framework. HTML was designed to help academics share research papers, not to replace native thick-client applications, yet that's the direction it's been evolving towards.

I'm really happy to see Web Components (inc. Polymer, Angular, x-tags, and React) landing into HTML. If we accept that web apps != web pages at a spec level, hopefully we can build an awesome platform on which to create tools that leverage all the great parts of the web (linkable, available, auto-updating, device-agnostic) without the mess that we've made trying to make the web do something it wasn't designed for.
Ironically… You need to do it for you
We believe the best defense is a good offense.
(fixed that for you!)
I actually enjoyed it. It was the first time I sat down and thought about that journey and I was quite happy to share it. I don't mind about sharing my name or other such information. Never bothered me. I find it easier sharing my real name than trying to come up with a clever username.
I feel you're just repeating industry misinformation.

Industry misinformation or the actual laws for the states of Washington and Oregon, which follow countless other states and provinces in the Western US and Canada? You on the other hand are stuck repeating misinformation from the 80's anti-logging spotted owl rhetoric.

BTW, it's hardly an ad hominem. I'm not attacking you personally to discredit what you are saying - what you are saying is just factually wrong.
My first program was in Python. I was in grade 10 and math homework consisted of repetitive questions with the x/y/z changed.

I got tired of doing it on the calculator, so I put in the general equations and just updated the variables. It felt good, almost like I had a superpower.
I think it's a case of pushing at the margin; exposing more details of the CDM plugins than would otherwise be exposed. Opening the CDM spec is also a design win for reasons that should be obvious to people who've worked on software.

It's been the general trend in web browsers to minimize the permissions you need to give to plugins--I would expect CDM plugins to evolve the same way.
The Moto X phone is real, says Motorola CEO Dennis Woodside
For all web based things non-msft I use JetBrains WebStorm. Then Eclipse where I have no other choice. And of course Xcode for Apple products/projects.

Outside of an IDE (not that you asked), notepad++ and vi with some TextPad on the Mac.
Wow, they still use feedburner?
>DRM allows you to volontarily give up whatever control of your machine you're talking about.

DRM doesn't allow you to do anything. It only restricts. Your argument is really that DRM would "allow" you to enter into arrangements you wouldn't otherwise be able to because Hollywood wouldn't be willing to take your money without it, which you have not proven. And you could say the same thing about a shock collar. If someone suggested it would be a good idea to fit everyone with a shock collar that would shock you if you did anything Hollywood didn't like, and (at first) you could opt out of the shock, but not the collar, and only by opting out of popular culture (or breaking the law), I hope you can imagine why the idea might not see a particularly warm reception regardless of how many movies Hollywood alleges they'll provide in exchange.
The enthusiasm against DRM is mostly based on principle because the technological argument is so uninteresting. "DRM is part of an standard s.t. required permissions are visible and minimizable and the platform is open, opt-in and extensible" isn't possible and this is non-controversial among anyone not in the business of trying to sell it to someone who doesn't know that.
Motorola shows electronic tattoo and 'vitamin authentication' prototypes
Still extra work. My time is not infinite, and I would rather spend it on things for people who actually use my site.
I stand by my original statement. Unless you are on The Biggest Loser and exercising 8 hours per day, burning 5,000 calories per day with exercise, you have to control what you eat to lose weight. It can't be done with "1 hour of exercise, 3 times per week" as the TV commercials claim.

You called it "caloric intake constant", but that's counting calories, and sounds like a diet to me. And most people unconsciously eat more after a workout. They don't think they do, but they do.

[1] http://www.fitsugar.com/Why-Exercise-Makes-You-Eat-More-2272...
As long as the cert chains back to a root CA that is accepted everywhere, there's really nothing of value to separate the various vendors, except the purchasing price.

Unfortunately, ssl is a game where bad CAs ruin it for everyone, not just their customers: It does not matter for an attacker where they got a bogus certificate as long as it is considered valid, and there's little you can do to protect against it, certainly not by paying more or spending more effort on validation of your own cert. ("EV" (which is what the CAs really should have been doing all this time) and cert pinning comes to mind)
Flat or fiction
How will this make the binary-only, proprietary DRM blobs less platform specific, exactly?
kinda hard to trust google on this, after all they announcing this on a webpage that screws up scrolling on modern touch devices...
I'm sure we can all pick this apart and talk about all the bad decisions she's made. The fact that she'd allow an article to be written about her regarding this just shows that she's certainly not the sharpest tool in the shed. The only thing I would ask is if she's not going to pay for her education, go ahead and take down that law degree that your private practice is established on and find some other kind of work. I know it sounds ridiculous, but so does her whole story. Not going to pay for it? Don't use it. You can't have it both ways.
There are also plenty of startups that don't value or recognize technical skill and where it's easy for a junior engineer to get hired. Those are terrible as well, because (a) they'll make you stay mediocre and (b) you end up learning the wrong lessons.
That's defense; it's purely semantics.
HBO should have a Kickstarter campaign for each episode of Game of Thrones. Donate any amount you want, and if the total funds raised is $75 million (or whatever HBO determines is the expected sales figure of the one episode for the next 25 years), HBO releases the DRM-free episode for free to everyone who wants a copy.

If the amount isn't reached, then the episode is never released. Repeat the process for each successive episode in each season.
What's amazing is that someone had the foresight to build the express lines a century ago. Honestly, every time I walk through GCT I'm proud to be a human and an engineer.
Godspeed Bill!
If I can find the time I could probably come up with a list of questions that I would ask someone that would be a predictor of what they would do in a particular circumstance, that, when taken as a whole would indicate whether they are cut out for "the life".

Examples:

"Your aunt dies on Thursday, she will be buried on Sunday but you have a major trade show to go to and play an important role that could determine the future of your company. What will you do?"

"Your father has a heart attack and is in the hospital. You go to visit him but you have an important sales apointment that afternoon that took months to arrange. What do you do?" (with a bit more detail obviously).

"Your best friend from college (who you haven't seen in two years) wants to come and stay at your place for a few weeks because he was kicked out of his apartment and says he has no place to go. You know this will be disruptive and a pain but feel a sense of obligation because he helped you a few times over the years and let you stay at his place."

There are no right or wrong answers but the degree of dedication to ones family, existing values, commitments etc are good indicators of whether someone is willing to put their business life first. Which is, in short, what it takes.

Not the best example but I'm sure that Steve Jobs wouldn't miss a product launch when his Aunt died. Nor would Brian Williams (NBC) blow off a major story happening which he had to cover because a parent was in the hospital unless they were literally on their deathbed.
> the platform is open

Where did you find an open DRM? It sounds oxymoronic.
Clojure/West 2013 Videos
http://michaelochurch.wordpress.com/2012/07/08/dont-waste-yo...
Almost every SSL vendor resells SSL certificates from a few big names, and other than the ordering/paying process and support (if needed) any certificate from Comodo is as good as any other Comodo Cert, no matter who you buy it through.

There are minor differences between providers (like a Godaddy wildcard for .company.com also including company.com as a secondary entry while RapidSSL wildcard does .company.com only and will give a warning if used for http://company.com) but I've never know a user to care unless a certificate warning pops up.
Persistent News Stories
Stravinsky's  'The Rite of Spring' incited a riot 100 years ago
To me it seems far too pedantic to give an award for pointing out, based on a forum post that blocks links (ask HN posts), that if you incorrectly use the partial url you are at risk.
A selection of them were bogus-issued for a dozen or so big-name web domains, yes.
Show HN: My first iOS app - Soundtribe - 45 second sound clips with filters
You can get free SSL certs through http://www.startssl.com/. Granted, their website is _horrendous_ to navigate. Also, the certs are encryption only - no real identity verification - so they won't light up your address bar blue or green.
- Do not use passwords that are simple words or phrases
- Use different types of characters in your password (uppercase
letters, lowercase letters, numbers, and symbols).

http://xkcd.com/936/
I've written a blog post that goes over why we made some of the decisions we made here: http://www.quora.com/Pete-Hunt/Posts/React-Under-the-Hood
Gripe: Block quotes should have narrower margins than the body text, not wider.
You realize that link returns a random response, right? I'm not sure what you're referring to.
Bank of America DMCA