skysight-inc/HackerNews huggingface dataset:
You are, once again, either misunderstanding or willfully misrepresenting everything that's being said. Users aren't being denied anything, because proprietary software doesn't exist under the GPL. Developers and distributors do lose the chance to keep their code closed. The GPL protects users, not developers.

You seem to think downstream developers have an entitlement to release proprietary software, even if it goes against the wishes of the original authors. News flash: devs aren't forced to use GPL'd software, either. If you want to keep your software proprietary, you're free to use something under another license, or write something under your own copyright.

Really, it's not even about being "open source" per se; the motivations of the GPL go much deeper than simply making the code available. But you obviously don't agree with those, from the other thread.
What’s New in Windows Server 2012 R2: Enabling Open Source Software
But a MitM exploit is an active attack that requires control of a network over which the traffic passes, and it is detectable (for the specific case of Chrome and Google sites, trivially so).

Access to the master keys for a SSL/TLS session isn't like that at all. They could retroactively capture, archive, and decrypt any traffic to the site at all with nothing but the undetectable network taps we already believe they have.

That said: the linked article is talking about "legally" compelling Google et. al. I don't think that's the only tool in the box. Surely someone at each of these companies has access to the private keys and can be coerced via an appropriate bribe (which at the scales we're talking about could be staggeringly large!) or blackmail attempt to provide it "illegally".
People set up radios and broadcast data completely indiscriminately? I would argue that is like yelling a conversation and then being shocked that people might overhear you. (Also it only gets certain packets depending on what network you're joined to, what channel you're listening on, etc.)
Robot Does Parkour
Creating an Ecosystem: The Lessons from BREW OS
>I guess I don't quite understand the controversy. To my knowledge twitter never claimed these were legitimate tweets

Thinking they are legitimate is the DEFAULT expectation.

The only way for them to not claim they are legitimate tweets is to actually state, visibly, that they are NOT legitimate.

And that's without even taking into account that they used REAL account names.

>Who is getting fooled here and at what harm?

Who the fuck told Twitter that I, as a user, want my REAL ACCOUNT HANDLE, advertising stuff I don't know about?
Congrats! The site is beautiful and I hope it takes off.

Two ideas to reduce the amount of spam and reduce the amount of low-value options (from both the gig and freelancer perspective) while hopefully getting you a more scalable revenue stream:

1. Charge a flat fee to place a bid -- this will show that all of the jobs posted are serious, not "I need Facebook cloned in three days thanks." (There's a reason Craigslist does this.)

2. Charge a flat finder's fee when a bid is accepted from a freelancer. This removes a barrier to entry for freelancers while also will cut down on undercutters offering PHP work for $5/hour.
Yeah, I read the clojure book back in like 2009 and used it a little. I thought it had a lot of neat ideas but when it comes to just getting a job done, if it's not a problem where pure functional programming brings a lot of value (things that really benefit from code-as-data), I'd rather just write boring old procedural code. Easier to read, easier to reason about.
Not so psyched to see that it's still got a 16:10 screen. One of the things I love about my iPad mini is that it's actually usable in portrait mode for reading PDFs and Word documents on the go. That said, I'm hoping the increased screen resolution will make it practical to just zoom out a bit more and just hold the device closer to my face...

Also really happy to see the LTE. I think having LTE on the go is crucial, and a 7-8" tablet is the right place to put it. Much of the time I use my iPad as an LTE hotspot (it get way better battery life in that use-case than any stand-alone LTE hotspot or tethered phone).
The Impact of Simple Design
X265 (H.265/HEVC video encoder) Mission Statement
Sounds like a cool alternative to angularjs when you can't use or don't need a full-blown framework with routing, http layer etc.
Must be that time of the month...
So someone could take a screenshot of your post, put their own text in the body instead of yours, show it to millions of people, and you wouldn't mind? What company do you hate most? Microsoft? Google? So you wouldn't mind if we changed the text of your post to support them and showed your username to everyone as loving the company? And stuck your picture next to it as well?

I'm mostly pissed off because the laws against using likeness/pictures/etc. to promote products without model sign off get in my way myself all the time, so seeing Twitter break the laws I have to follow is very annoying.
Get off Idea Island
>(... or JS, for that matter)

I have to disagree with that. There are lots of languages whose purpose is to produce JS. For example, it would be very silly for CoffeeScript to use LLVM IR. It would end up reïmplementing all of the things that it shares with JS (that is, most of JS) with no conceivable benefit. Maybe if/when PNaCl is everywhere, it would make sense for it to do that, but even then it's a hard sell as long as four giant companies are competing their asses off to optimize JS.

But I do agree with you if the language doesn't correspond well with JS. In that case, it's probably better to target LLVM and then compile to JS via emscripten.
It's also like they're trying to reduce root attack surface and potential security vulnerabilities.
Not direct technical reasons, no.

The only indirect technical justification is in maintaining compatibility with existing browsers, but that falls over pretty fast when you're a browser maker (Mozilla) and refusing to work with another browser maker (Google) on jumping over that compatibility hurdle.
Ember.js code base visualized by Gource
Google Launches The Chromecast To Bring Chrome To The Living Room
The biggest upgrade for me is "[that] battery life offers 9 hours of HD playbook and 10 hours of web browsing." I can only manage about 4 hours for my 2012 N7 and it's my biggest complaint for an otherwise perfect tablet.
'Wi-Fi models available in the U.S. July 30, LTE edition and global models “in the coming weeks”'

Wi-Fi should be included with every model IMHO.
If your system can be configured to have a Compose key, that is an alternative to Alt/AltGr for letters such as `ąśćółężź` No, I didn't copy and paste, I actually did use the Compose key on my keyboard to type them.
Did U.S. prosecutors mislead judge in decryption case?
> I'd have no problems with a page that says, "We're sorry to see you go, won't you reconsider? Here are some reasons why we think you should stay." I have a big problem with a page that says, "We're sorry to see you go, so we're going to make your life a little bit harder in the hopes that you change your mind.

See also the evil AOL dialer dialogue that used weird negatives to confuse people into not disconnecting. That was so evil I think they last some law cases over it.

It's disappointing that so much effort goes into evil tweaks. But it's worse that customers reward that evil behaviour. Candy Crush is huge at the moment. I'd pay £5 for something like Candy Crush without the evil; heck, I'd buy it for all my family too to avoid the constant FB spam from it.
I suspect the arrangement is he ceases to disseminate any new information during his stay in Russia. This avoids any undue tension in the US-Russian relations.

Once he's left Russia, I suspect he'll be able to continue his activities.
Google reveals Chromecast: video streaming to your TV from any device
Can you explain specifically what you mean by a "direct" vs. an "indirect" technical reason?
Are users of GPL software able to combine it with proprietary plugins?
We Find These Common Bugs When Testing iOS Apps
It could be used as a library as long as the other projects also made their software copyleft. The goal of copyleft is freedom for the users, not "pushing the state of the art forward." If they reject certain software because of copyleft they aren't being denied freedom, they were offered freedom and they refused.
> The GPL protects users, not developers.

The users can already choose to not use proprietary software, so what is it protecting them against? Themselves?

> You seem to think downstream developers have an entitlement to release proprietary software, even if it goes against the wishes of the original authors ...

No, I just believe that the GPL is intellectually dishonest. It's about controlling other people's means of production, with the end-goal of creating a communist ecosystem in which it's essentially impossible to not participate due to inherent market entry costs.
> platform specific stuff

Yes. If I were to write IR for a real project, I'd probably keep a few pretty large functions to avoid overhead caused by calling conventions.

Very interesting link. Thank you! Though I find the arguments unconvincing. More data needed...

> typed assembly

Yes. But now _every_ mac user and plenty of other people have a typed assembly compiler on their machines! IR is reasonably popular and quite well documented. I'm not saying it's new, I'm saying it's cool :)
It has been interesting, over the past some years, as a client just to observe the ongoing changes Google has been making to the nature of HTTPS connections to its properties.

Reporting like this appears[1], and -- coincidence or not -- those observations fit into place.

----

[1] Whether regarding three letter acronyms or protocol weaknesses or whatnot

P.S. I'm not sure why the downvotes. TLS renegotiation weakness. Perfect forward security. Even earlier, nascent deployment of their own intermediate certificate authority -- which disappeared after some months, only to reappear again more recently (at least, in my Gmail connections). More recently, in addition to maintaining perfect forward security, now also replacing the underlying certificates every three weeks or so -- at least, as based upon the changing validity dates that are easier/quicker to compare in/via the browser interface.

I continue to "wonder" where Google comes down in all this... "security/authoritarianism" fracas. If there is a single "Google position". Regardless, they appear to be one of the most proactive parties, from a technical perspective. And politics aside, I continue to think that behind the scenes, there are a lot of people there behind the scenes who want to "do the right thing" and who work hard, within their responsibilities and areas of expertise, to "make it so".
haberman beat me to it, but register allocation algorithms fall down in very branchy control flow like dispatch loops, basically for two reasons: (1) to make compile times reasonable they tend to have to approximate in this case: (2) compilers don't really know the hot paths in such code like a human would, and will likely make suboptimal spilling decisions as a result.
> The US government already has at least Verisign under their belt. They can already MITM just about any SSL connection they could ever want to.

Red herring. We are never discussing active MITM in these NSA threads because they don't do that.

We are discussing offline decryption of monitored SSL traffic, which a CA's key does not help with in any way.

For that attack, you need the server's long-term key and they have to not be using PFS modes.
The video is excellent and (with the captions switched on) explains how the site works very well. I would embed or link to the video on the site itself.

Great work by the way! A practical tool with a simple, easy interface.
They don't want to deal with FAT.
Energy Independence is a Terribly Stupid Idea
Probably worth noting that over time the games industry has become more specialised. The skills listed are essential for working in certain areas, for example rendering, engine work and physics.

Knowing how to interpolate a catmull rom spline is not required of a network programmer.

If you're considering a career in the games industry the best advice I can give you is to create a demo of your work. Do not build something ontop of a mod, build something of your own, be original and creative (something that the list does not emphasis). Don't worry if you can't draw, it matters not.
I assumed they meant "WiFi only models"
Plot twist: This is the real reason Apple's developer site is down
Nobody is actively pushing women out of technology. Fewer women pursue these types of careers and thus it becomes a male dominated scene.

It is not condescending or wrong. It is the truth. Old people and women are bad with technology because that is not their element. They play different roles. Us young people, this is what we engulf ourselves in. I don't have a family, I don't have a 30 year long career to watch out for, I don't run a business, hell, I have zero obligations aside from tinkering with shit all day. They don't have time to sit down, read HN, read Reddit, read tech blogs, and mess around with applications.

It's like me coming to a data centre trying to do sysadmin work right off the bat. I'd be terrible at it. I'd be laughed at if I messed something up. Why? Because it's not my element.

The demographic that is labeled as bad with technology is not "focused", it propagates itself .

What the real problem is, is looking at the world through the lens of equality. You look at every situation and evaluate it's idiosyncrasies and try to level them out. When you notice not everything is aligned (in this case old people and women being on the same playing field as young people), it creates a false sense of oppression and disarray, delusion if you will.

When I read articles I come up with a list of the following and write it down: things I learned, things to lookup, and a list of major points drawn from the article.

My list is blank for this article because it is about nothing. It's an immature, hyperbolic, phantom attack.
An Architects View: On my radar
> Access to the master keys for a SSL/TLS session isn't like that at all. They could retroactively capture, archive, and decrypt any traffic to the site at all with nothing but the undetectable network taps we already believe they have.

They can't in every case, especially for Google, who use a newer SSL that supports perfect forward secrecy. You are completely correct in the differing magnitudes of attack detectability though.
another frontend framework for Dom manipulation, so would this be the 50th one out there on the web?
Pretty boring spec increase. If they were an OEM they'd have to try to distinguish themselves, but it isn't life or death for them, so I suppose a boring entry is par for the course.

They aren't even keeping pace with Samsung's IR camera gesture support or HTC's all metal body and TV remote capability we're seeing on phones.
It's good to know about SIMD instructions, but you can usually get at them with intrinsics (if you're writing in C) without dropping down to pure assembly.
Almost as ridiculous as the US protecting human rights.
He hasn't been charged with treason and if he were, he'd be acquitted.
"It's a byproduct of a one-size-fits-all-content design for a CMS that all of their output looks like the same drivel."

I think this is a really important point, and want to further expand on it. The New York Times was cited as having a bad website. However, on occasion, when they put their mind to it, they produce a truly beautiful page with some fantastic visualization or something. But it's a one-off; you can't produce a beautiful page for every story, so you get the lowest-common-denominator page for most stories.

A literal paper magazine is a concrete artifact, and a set of designers can be tasked with making each page perfect. A web page on these sites is dynamic and may literally not serve the same page twice. If, as a designer, you don't internalize the idea that these are two extraordinarily different domains, despite the superficial visual similarities of the final product, then you're going to have a hard time accurately diagnosing the core problem. And I do believe many designers make this error on one level or another, when I see these complaints.

In Matthew Butterick's defense, I do think he did implicitly make one very concrete suggestion for how those sites can improve, though, at least in terms of design: Get rid of the ads. It's hard, probably to the point of impossible, to create a coherent design for a website when you are selling to the highest bidder the right to put a bright yellow and orange banner with a poorly-photographed item described in a random non-anti-aliased font unaligned with anything else on your page in the viewer's highest-priority visual space, and a different such thing for each page load. Against an uphill battle like that, is it really any wonder that the web designers of the world have collectively given up?
Get a VPS and learn how to use either Nginx and some of its configurable options, or Apache's "mass virtual hosting" mode http://httpd.apache.org/docs/2.2/vhosts/mass.html .

TLDR is "create a separate directory for each site with the directory being called the URL of the site" e.g. /var/htdocs/www.domain1.com has the web pages for http://www.domain1.com/ .
Very good idea, every time a company or organization screws you over, just take it, and don't use them anymore. No need to complain ever.

No matter if the service is otherwise needed (e.g you are a company and you need a twitter account as part of your reach strategy) or what they did was actually against the law and your rights.

Heck, why didn't that Rosa Parks girl just quit using the bus services, instead of causing such a stir?

(And, no, it didn't come out as sarcastic. Mostly as inane and bend-over-ish).
That's cool that you think job boards should be destroyed or whatever. But to shamelessly plug your idea to another users show HN thread is not cool.

I am assuming he spent many days/weeks/months etc working on this site and idea, and for you to come along and shit on it is not cool.

Stick to the old adage; if you don't have anything nice to say, don't say anything at all.
GPU review (Adreno 320, in the Snapdragon S4 Pro) http://www.anandtech.com/show/6112/qualcomms-quadcore-snapdr...

Less powerful than GPU in iPad 3 (or iPad 2 in some benchmarks); but of course, it's got a smaller display too.
> I'm ambivalent about NSA's need to request potentially large amounts of data from Google about broadly targeted foreign intelligence targets.

Why don't we see 50,000 deaths a year in the US from terrorist attacks?

N.B. that the NSA claims to have stopped "dozens" (<=100) of plots with these programs.
Seriously, this dude needs to chill !
The nice thing about restricted profiles is that it should allow us to create a really simple 'Kid mode'.
New “Chromecast” HDMI dongle to get video streams to your TV
Google announces Chromecast, a dongle to stream online videos to your TV
And why not simply build an open source banking platform? Functionally speaking banks are not so difficult.
Google announces Android 4.3, the latest incremental Jelly Bean update
Great job! Will stay tuned for the 65 days left!
Thanks for the tip! I added my email address.
Is there HDMI out and bluetooth support? I'm waiting for someone to merge the laptop/desktop/cellphone divide into one unit, this seems like this has the potential to be that unit.

Also will this just work on all carriers?
Google unveils high-resolution, Snapdragon-equipped Nexus 7 successor
> Red herring. We are never discussing active MITM in these NSA threads because they don't do that.

I believe that this quote in the article pretty much implies an active attack.

For individuals who put encryption on their traffic, we understand that there would need to be some individualized solutions if we get a wiretap order for such persons...
It often holds casual users from ditching Windows for Linux. I'm not talking about Windows being used in businesses. With Linux gaming gaining momentum, there will be significantly less reasons for many people to use Windows.
I think there's a more urgent need for a book "Law for programmers"
Ask YCers: How many responses have you gotten from a job posting on HN?
I'm curious about absolute numbers and also how much job postings vary.
interesting to see 'git' commonly used more like regular bash commands :)
I can imagine having a lot of fun making a toy compiler that emits LLVM IR directly.

Well, I'm still plugging away at the Deca compiler that outputs to LLVM IR directly. It's loads of fun!

Practically speaking, is there a good reason to do this in non-toy software rather than the more-or-less standard practice of using C as an IR?

I can tell you why I use it:

* Even through the C interface, I have an actual library API that outputs the IR code directly rather than having to transform my syntax trees into C syntax trees and then output through a C parser library.

* You recursively walk your syntax tree passing an LLVMInstructionBuilder* around to different instruction functions in the API. The result is that your code is a recursive tree-walk (rather than an ordered tree-walk), and the builder object serializes it all for you (including using one instruction's output as input to another) according to the natural order of evaluation in your higher-level language.
Most feature launches that need a 'scapegoat' use employees' likenesses or profiles. For example:

- the 'Twitter Teacher' who appears in the sign up flow used to work at Twitter;

- and, the profiles used in the verification flow are also employees (http://dashes.com/anil/2013/03/what-its-like-being-verified-...).

I agree that this was unprofessional though and hope the offenders learn from the mistake.
How realistic is it to keep these master keys secret? Can't the CIA just blackmail a foreign employee into handing over the keys? The keys must be sitting on literally thousands of boxes that do SSL termination. How many employees could access these keys?
Kudos to you Jennifer. I hope your path inspires many other aspiring programmers.
I'm oddly very very excited about this especially considering the price point ($35), the size and the cross-platform support.
Hey there! I'm on the FB/IG React core team.

Syntax differences aside, seems to me that React is geared more towards interactive UI components and Ractive is oriented more towards reactive documents, kind of like Tangle[1]. Is this accurate?

The similarity seems to be in the philosophy of the implementation (manipulating a fast representation and rendering to the DOM). It's pretty cool to see that we both discovered the "secret" though :) Seems like we're validating each others' projects!

If you ever want to nerd out we hang out in #reactjs on freenode.

[1] http://worrydream.com/Tangle/
Agreed. I would think cases like the Andrew Auernheimer (who was convicted and sentenced to three years in jail) would be a wake up call for pen testing sites without prior authorization.

Taking the 73 accounts is arguable in court.

Once you cross the line and scrap another 100K users in order to get their attention and shut the developer site down - you've just boxed yourself. There is no really no defense for doing something like this, regardless of your motives.
As an owner of Nexus 4, the only feature I'm looking for is a reduced battery usage :) They provide optimizations for the location API, but I suspect that the more prominent performance features will end up draining battery even faster :)
How to disable Gmail tabs
Stop fetishizing speculative design work.
Some thoughts on the latest 'progressively disruptive' airline website design.
I don't use Windows for a quite a while already. Gaming on Linux is very possible these days, including using Wine. What's lacking though is DX11 support there which doesn't allow playing new DX11 only Windows games. But above I wasn't really talking about Wine, but about increasing amount of new native Linux games.