skysight-inc/HackerNews huggingface dataset:
Yes, the historical conception of privacy meant certain things, while other things weren't a part of this conception, simply because the technology of the day made them inconceivable.

For example, it would be akin today to someone believing that the people should be free from being spontaneously teleported by the government against one's will. It's just not something we worry about.

But, putting that silly (but salient) analogy aside, there is an underlying ethos with regard to our conception of privacy that I think is true historically, as well as today. It survives changes in technology and generally weathers the test of time. I think that ethos feels something like the Constitution with regard to federal government rights not specifically expressed. That is, they fall to the states and the people.

So, likewise, I think people believe (at some level of consciousness) that the government simply should not be where it doesn't belong (i.e. in areas of their private lives) and that the government should have access to the minimal information about us required to do its job. And for privacy advocates, this extends to erring on the side of rights vs. security when in doubt.

In short, I think most people would agree that just because technology provides the possibility of more government access to our information, it doesn't mean they should have such access.

Mind you, I am not saying that any of this is codified, but rather is a part of people's conception of privacy. So, I disagree with your assessment of what people consider private.

With regard to your Facebook snarky comment example, I think we're talking about different things. Publicly posting such is, I think, a conscious decision that what is being posted is not deemed private. However, the notion that everything uploaded, e-mailed, or otherwise stored or communicated (even if not marked for public consumption, or clearly is not intended for same) should be accessible to the federal government is an entirely different matter. And, I believe, most people would view such carte blanche access as an invasion of their privacy.
This Sails.js tutorial is really good: http://net.tutsplus.com/tutorials/javascript-ajax/working-wi...
Are you saying that you've counter-measures against this type of attack? Poisened or fake-chunks/blocks have been infiltrated into P2P Networks for many years and P2P networks were able to fight against it pretty well.

But I cannot imagine a way how you can take measures against this type of attack. Please tell us more.
He's not using Strict Transport Security. The cookies that I can see don't have the secure flag set. I can't see a session cookie as I will not sign up to this service until he fixes the login. But I'm going to assume he hasn't set the secure flag on that either.

Which all boils down to the following: An active MITM can trivially steal your session cookie and take over your account.
Isn't that rather like the argument used regarding the JSTOR data, which we all rejected vehemently?
Marco has always been an advocate for an open web but never, in my memory anyway, an advocate for free software.

I personally want both and think both are quite tightly linked but it's not hypocrisy to value one and not the other.
I really like the term "schema-ish" and I think that most people probably want something like this. They will inevitably still have a defined structure for their data, but they need that extra bit of flexibility to keep the overall data structure simplistic and sensible.
Hm under closer inspection, they don't have any Asian developer on the boat either! Does this mean Asian developers can't use Sails? And why is the Indian man is the one rowing the boat - without the ability to see might I add? Clearly this is racially insensitive. /s
This is in development mode for quick prototyping. You can turn it off in production and only use POST requests.
Tried Sublime a couple times but I always miss something from VIM. Switched back. No patience/knowledge to customize Sublime the way I do with VIM.
Making a Case for an iWatch
"...it can be easier to change grammar/law/types/schema when not explicit."

Now that's quite interesting statement. I'd say it is true for humans but false for computers and it's paradoxical to think about why this is.

If computers were an intelligent as humans, you wouldn't have to worry about giving your program any structure because the computer could change that structure later. But sadly, spaghetti code isn't what it's cracked up to be.

Similarly, an application where don't bother thinking about your schema beforehand isn't going to be application which you can change easily later.
At work, we have Ngnix as reverse proxy for some static files. Oh boy is this thing fast with very very small amount of resources (cpu, ram) and big number of requests.
In the upcoming v0.9.0 release we are using Grunt for assets.
I come from Red Hat and I like the GPL, because it ensures the software remains free. I view GPLv3 as largely a language improvement on GPLv2, which makes it easier to understand and define how it applies.

Ansible being GPLv3 doesn't affect folks much. Your library modules can be licensed in any way you like, and it's fine to shell out and call ansible-playbook. AWX also exists as a nice API layer if you need a web services interface that abstracts you from the license question, so folks looking to do commercial integrations can tap into the REST layer.

AGPL is more restrictive than GPL, in some ways, as you can't use things in a hosted service. We didn't want to be that restrictive.
> Testing is, as far as I can tell, the reason that these problems don't come up.

Testing is a cost. It is more code to write, more code to maintain. It gives no guarantees about correctness, even of the exact feature under test.

Consider the 10 lines starting from https://github.com/yairchu/red-black-tree/blob/master/RedBla...

They guarantee the correctness of the invariants of the Red Black Tree, and they easily replace hundreds of lines of test code which give no guarantee.

We might still need to write tests, but a lot fewer of them. Also, those we write will give us far more "bang for buck" because we can use QuickCheck property testing.

> Note that both of these languages allow shared mutable data, both allow null pointers.

Scala shuns null - and only has it for Java interop. All Scala developers I've discussed this with program as if null did not exist, and never use it to signify lack of a value.

> I think Go occupies a good point along this spectrum, where I can write robust code without arguing with a compiler.

When "arguing with a compiler", you're really being faced with bugs now rather than later, when the code is no longer in your head - or worse, in production. If the type checker rejects your program, it is almost certainly broken, and it is better to "argue with a compiler" than to just compile and get a runtime error later.

Availability of engineers is a good point, though as a Haskeller, I know both companies seeking Haskell employees and Haskellers seeking employment (preferably in Haskell).

Consider the flip-side of the engineers availability is the "Python paradox".
Github down
I should point out that Ansible can store passwords on the filesystem here, using the 'password' lookup plugin. So while there is no database you can still easily access things exactly like this.
Lyx notes failing to compile to PDF under Lyx on Ubuntu 13.04, numerous warnings. But I can read them within Lyx
How I Learned to Stop Using Font Icons and Love SVGs
I'm not sure that would be so hard to solve. You can record the ciphertext plate and give that to the police.

Really the question is, "How important is this problem? Do we care about license plate privacy?"
Ask HN: Will Go become a popular web development language?
Go is fast, but also somewhat more low-level than e.g. Python and Ruby. Those of you who have tried out Revel, web.go, etc., do you think that Go has a big future in web development, or will it be a niche language? Go gets a lot of attention here on HN, but so do other languages that have never gained a large following in the web sphere (e.g. Erlang and Haskell), and I'm curious as to whether things will be different with Go.
For new products, we try to validate the idea with at least 10 people that are wiling to pay. We start with a narrow niche (as narrow as we can make it).
Uh, our people have no problem with us spying on the rest of the world. The U.S. electorate is solidly in favor of maintaining American hegemony in the world, by nearly any means necessary. We're mostly indifferent to Europeans as people, although we know they're supposed to theoretically be our allies (but c.f. all the europeans who weren't willing to go with us into Iraq). This is democracy at work.

Look at the last U.S. president that tried to present a softer face to the world: Jimmie Carter. Most people hate Carter here in the U.S., on both sides of the aisle.
Tor Books, a subsidiary of Macmillan and the biggest publisher of Sci-Fi and Fantasy fiction, went DRM-free on all of its ebooks last year. They've observed "no discernible increase" in piracy since making the change.

http://www.mediabistro.com/galleycat/no-discernible-increase...
I think Google itself sets a higher bar than even 5 or 3 months for other companies and itself.

http://www.darkreading.com/vulnerability/google-sets-new-agg...
Does anybody know how good Common Lisp (one of SBCL, Allegro, Lispworks, CCL) is with multithreading whilst calling the FFI ?
I'm one of the developers. If you have any questions, don't hesitate to ask :)
> If the DB is determining the schema and your code just mirrors it, you will inevitably do things like triggers, stored procedures, etc. that essentially put application code inside the DB. This makes testing and maintenance of such things all but impossible

If testing and maintenance of database objects (tables and other relations, as well as procedural code in triggers, SPs, etc.) is "all but impossible", the problem is with your DB maintenance policies and practices, not with where you are putting code.

It may be the case that lots of places have bad database maintenance practices (just as lots of places have bad maintenance practices for non-DB software), and it may be that in those environments, when you have a limited scope of influence, routing around those bad practices is the best solution. But it is a mistake to present that as a general solution.
Damn. DRM-free and an issue of a Warren Ellis comic on the frontpage; they know my weaknesses.

The site seems a little underdeveloped, though. For example, SCATTERLANDS is a series, but it's only in its first section. Why can't I buy the whole lot right now and get an email when each section is released, with links to download? Do they really want to rely on me remembering to check periodically to see if the next issue's been released yet?
On the dynamic..static axis, Go is much closer to the dynamic side than to Haskell's side.

I am not a teacher or researcher, I am a practicing programmer writing code that is used by critical systems as well as ambitious projects that will (hopefully) be used by many real people.

A red black tree is just an example with invariants that everyone is likely to know, so it's a nice way to illustrate the point about the power of types. Known problems are solved problems, and unsolved problems are unknown problems -- so either my invariants' example will not speak to you because you don't know it, or you will reject it because you can just re-use a library.
74 year old woman arrested for resisting arrest.. for that arrest
I don't understand your comment. I'm an American. What I said is that I wish some country(ies) would ban Americans from unrestricted travel. What I wish is that Americans become conscious of the behavior of our government both at home and abroad. Without some corrective feedback, I doubt we'll do anything other than maintain our collective ignorance/apathy.
I just recently split out the ORM, Waterline into a new project. The first step was to get API compatibility with the current ORM and a bit of sugar like lifecycle callbacks and custom instance methods.

Associations are next on the list of to-dos. It's still a very new ORM but I'm working on making it better. Check it out I'd love feedback or better yet pull requests.

https://github.com/balderdashy/waterline
Quadstreaker for iPhone - streak some quads on your Jul 4 trip
Look at that Bodylanguage and his eye movements and double-check what he actually means

http://s1.hubimg.com/u/1776076_f520.jpg Wow, Thank you for the insightful video!
Thanks! My knowledge is mostly from: https://www.gov.uk/find-out-if-i-can-buy-or-carry-a-knife

> It is illegal to [...] carry a knife in public without good reason - unless it’s a knife with a folding blade 3 inches long (7.62 cm) or less, eg a Swiss Army knife.

(it doesn't mean what you're saying is untrue!)
Square - http://www.squareup.com - Atlanta, GA (Fulltime and Internships)

Though Square's headquarters are in San Francisco, we also have a small but growing engineering office in Atlanta, GA. Our office is in Midtown (Atlantic Station), and we have a great team working on projects with a very big impact.

We're currently looking to hire for two teams:

- Production Experience (ruby, monitoring, automation, making deployment better)

- Payments / Infrastructure (java, high availability, low latency)

We're also hosting an open house for engineers in the Atlanta Area on Jul 25. Early registration recommended: https://guestlistapp.com/events/170175

Reach out to me (cconroy@squareup.com) directly if you are interested.
Does anyone know how does this compare to the 3DS? It always seems like Nintendo's development registration process is a closed off country club
> Today, however, we have large companies where single application has become the essence of the company (Google, Facebook, etc)and the one-datastore, multiple-applications model no longer makes sense

Which "one application" is the essence of Google?
I agree that Go is lower level and most Web apps won't care about the extra performance it provides. I could imagine lower-level services (memcache, databases, MQs, etc.) being written in Go and app logic being written in JS.
Black bar ?
Why not accept bitcoins? I think bitcoins was made exacly for cases like this, where individual freedom and state/private regulations clash.

Does anyone knows why not they accept bitcoins?

EDIT: Oh, good to know they accept bitcoins, thanks!
You should say something about which countries you operate in. The copy seems to have been written with the assumption that only Americans will read it.
> We _all_ want to live together in peace - all of us.

Americans want to live in peace, but we want to be in charge, and we don't like the idea of other countries telling us we can't do things. Even cooperating with other countries is perceived as a sign of weakness, and capitulating to other countries telling us that we can't do something we were planning on doing would be political suicide. If you want to get the U.S. electorate solidly behind a policy they were otherwise indifferent about, tell them France is opposed to us doing it...
Very sad, I need to do a pull...
Isn't Ripple a decentralized system, and weren't there plans to open source it?
Btw, there's also http://hnhiring.me/ which is just another interface to the monthly jobs threads.

(I didn't make it, see the About link)
This is another reason why the US lags the rest of the world in Broadband availability, Here the government is attempting to force a company to use 100 year old technology rather than allow them to select the best technology to serve their customers.
I don't know about you, but I have a lot more sensitive information on the interwebs than what I carry on my person.

Protip: I've had my paypal account hijacked before, that isn't very fun to deal with
https://status.github.com/messages

The sites appear to have recovered from an upstream network outage.
We will keep this status event open while we continue to investigate.

We are currently investigating problems accessing a number of GitHub services.
We will update with more information as soon as we have it.
Inspections are mentioned a lot. This is not a word I hear a lot of developers use, so I'm guessing this article is not written by one.

The cost of these has been completely externalized. Does the 85% reduction in defects come from a casual code review? Or are 3 senior developers doing Fagan inspections?

When an inspection reveals bugs, do we take into account the increased time to fix the bug because developers are informed about them after having forgotten some context?

Is static analysis incompatible with pairing?

Where does the 1.5 vs 1.6 defect rate come from? What about the rest of the numbers?

If a pair produces less LoC than someone soloing, couldn't this actually be a good thing? I know that the most productive coders I work with actually tend to delete more lines of code than they introduce.
>I think about how manufacturers drag their feet on normal updates

They do release security updates. (Or at least used to -- I haven't paid attention lately.)

The major upgrades change and break lots of shit for them. A backported security update generally does not.
But this isn't the only way an interface could be discoverable - what about a schema (or a good api doc for humans). This way also couples api to implementation - what if I want different verbs? Suddenly, we stray from the discoverable path.
Buy the bundle if you can possibly afford it. Not only are you getting six ebooks for a great price (that you set!!!!), but you're also striking a blow against DRM by proving that people pay for quality digital content.

Also, if you've never read The Last Unicorn, it's actually really funny and self-aware. You may have seen the animated movie some years ago, but IMHO, it's even better as a book!
Please link to github status: https://status.github.com/ which I assume is run on separate servers and actually provides useful information on the current status.
They do, in fact, seem to accept bitcoin: https://shop.wikileaks.org/donate#dbitcoin
Still doesn't explain why you need a game. You add your cookies to a pool which randomly exchanges them between users. No game needed.
Totally get that. The only thing that somewhat surprises me is why gold / bitcoins are so that stable despite the ongoing distrust in the system. Either people don't care or their impact is way to small to impact the markets.
NIST releases Critical Infrastructure Cybersecurity Framework draft
Thanks for doing this! It'll be a lot of fun for folks to fork.
Marc Andreessen on Buffet, Andrew Mason and Rap Genius on Rap Genius
When you say app logic written in JS, are you talking about the client-side stuff like e.g. AngularJS?
BlackBerry on Huawei’s Radar
Add yourself to the list of the users:
https://github.com/candy-chat/candy/wiki/Candy-In-The-Wild

if you like to :)
If someone is able to do a MitM attack with a valid cert, I'd guess they have the capabilities of doing the attack upstream of the wifi. So having the wifi open or not won't matter much.
More than just a Developer Bootcamp
A better Techdirt article than usual, but it says right in the headline that she was arrested for felony assault. Rewriting the headline to be factually incorrect misrepresents both the situation and the article. Why would you do that? Flagged.
All Things Public Radio With Marketplace Radio
I guess it's finally time to learn Angular.
I recall reading about how MongoDB saves all the key names with each record, since there is no schema. This results in quite a lot of disk space going to waste. It seems like this could be a solution to that problem as well, I like it.
"gee, we gave them a ton of money. maybe I should use the product"
Show HN: Drillbit – An API that analyzes names
I'm curious how much mail also gets lost due to being delivered to the wrong mailbox. I average at least one mail per month that is not addressed to me in my mailbox.
If the game manipulates cookies only, then all the other methods of tracking users are already immune. And many of the more "sophisticated" marketers have long ago adopted these methods in addition to or instead of standard cookies.

I still think this game is a charming idea.
Twisted would work perfectly for the message passing example given in the article.
My thoughts exactly. DNS spoofing on open wi-fi is shockingly easy. Most people just "trust" certificates without looking at the details too.
If I got a cert for facebook1234.com (just an example) and setup my server to grab credentials then send you to the real FB, nobody would notice.

HTTPS is only good when you know what you're connecting to.
Thank you for the answer: in developed / high culture markets (i.e. fashion, or targeting boutique++ markets) it's often hard to tell when someone is pushing an aesthetic trend (through prototype or catwalk) over a real product.

I loved the retro-chique of it, but it didn't appear HN was grasping the references. Since you seem happy to respond, I guess (and hope) you'll understand the humor of my replies (in that, I really don't think you're targeting WalMart with this, or would that be unfair? Yes, that's rhetorical)

Anyhow - I wish you the best, you have a unique style. (I still think you'd make an expert viral marketer over product, but that's only my opinion). As an uninformed guess, look into how the MENA market responds to it (aesthetically), as I could see this having more impact in elite stores (where the personal like is more connected to social / economic status).

Bon Chance! (groan)
I'm not particularly bright on the subject but this made me recall a related development in Japan.

Shuho Sata, the author of "Burakku Jyakku ni Yoroshiku" ("Say Hello to Black Jack"), is getting set to fly without the copyright safety net. He's freeing his 10-million selling manga from the limits of copyright as a form of "second use."

http://www.techdirt.com/articles/20120824/10510020147/award-...
This is hilarious. Next up, Minecraft Haiku's?
There are a few different ways; Flash Shared Objects (https://en.wikipedia.org/wiki/Local_shared_object ), using Browser + Machine ID information to make sure cookies are linked to the right machine, etc... - see http://samy.pl/evercookie/ for a few different other methods
App conquers personal Everests
Why doesn't Europe just block US services for "national security reasons?" Like say...china does.

I have to admit, this puts china's blocking in a completely new light...they might have a real argument if I didn't already know they just want to spy on us themselves.
Dude, ask for people password? What?

If you want to check for an HN user, simply ask them to paste a token in their profile description. And they can remove the token after you did the verification. Basic authentication mechanism.

Asking for people password is crazy. Even if you are using https and doing the best security practices.
"As the global economy shifted from manufacturing to innovation..."

Really? Innovation is an industry now? And you're saying there is no innovation in manufacturing?
As someone that uses hbase in production, I'd be interested in hearing the setting you are talking about.
Relevant post about reading. You don't need to speed read to read a lot.

http://thoughtcatalog.com/2013/how-to-read-more-a-lot-more/
Great analogy. Need to remember that :)
Yahoo acquires Xobni
My robot is smelling my dirty laundry 
Mark Meadows waxes eloquently on PRISM, privacy and robotics in the age of connected devices.
You should look at the Mars trilogy if you enjoy hard ("sciency") scifi. They were written, well, recently compared to Asimov.
I didn’t expect much but I’m a little bit disappointed. It seems to be far behind Google Docs. For example, there are no collaborative features like real-time collaboration or annotations, and only very limited options for sharing. I don’t get what Apple’s intention is with this.
Forensic Analysis of the Tor Browser Bundle on OS X, Linux, and Windows [pdf]
It's basically impossible to reason about the correctness of any nontrivial multithreaded program.