skysight-inc/HackerNews huggingface dataset:
As you said, the hierarchical system is somehow broken. You are just paying to get a cert that is trusted by the browser and therefore looks fine for the user. Also you get some insurance thing and maybe a nice button to place in your web shop. That's all. The main point is using some encryption without throwing a warning message and gain some level of security.

Also, the "potential source of vulnerability" has nothing to do with how big you are.

SSL is as save as the CA list used by the browser is. It really doesn't matter which CA you actually choose then.
Game Development Code Katas
Certificate Transparency Hack Day
😡🍋
At one point he says that he thinks it will take the black hats six months or so to figure out the exploit, but then, in the passage you have quoted, he gives what sound (to my non expert ear) like fairly massive clues. Is it possible he has revealed too much?
In a perfect world the following would have been included in the original message:

What exactly is Certificate Transparency?

Roughly: http://www.links.org/files/CertificateTransparencyVersion2.1...

Exactly: http://tools.ietf.org/html/rfc6962
Thanks for sharing this. I'm glad to see a secular author who
has a real appreciation of religion--he doesn't treat it as something that makes dimwitted people happy, but as a training regimen designed for self-improvement, a struggle to develop good mental hygiene and psychologically safe communities, etc. If I read the article right, he is saying we need to develop these practices in a nonreligious context.

I agree, but how can secular people and communities practice spirituality in a way that will cause these changes without sharing a common set of beliefs, practices and language?
Article mentions "credit card java applets on SIM cards". I've never used one of those, and I know nobody in the western world who does.

I always presumed that these sim java applets are crapware that is mercifully hidden on todays smartphones.

It's also my impression that Mastercard and Visa paid a hefty stupidity tax by thinking in the 2000s that it would be important to have their software on SIM cards, not foreseeing that smartphone apps would just bypass that whole layer.

Anybody know of an application in the western world, on smart phones, where these java applets are really used?
>This study did not include pre-term crack babies.

It is entirely reasonable to select only full-term babies for the study. Including pre-term babies makes analysis more complicated.

>That is a selection method that is going to skew heavily towards 'light' crack users.

Do you have some basis for that conclusion? It sounds reasonable (if beside the point), but are we working off of the folklore or facts?

>Crack or cocaine is very, very bad for development.

Did you read the article? They concluded after a long and careful study that poverty had a much bigger effect than cocaine use.

>It can create a child that literally cannot do anything for themselves and some that live in excruciating pain every single day of their lives (that is the very dark side of having such advanced neo-natal care).

Did you know that the NY Times and others recently recanted much of their sensationalist reporting of the "Crack Epidemic" http://retroreport.org/crack-babies-a-tale-from-the-drug-war...

http://www.nytimes.com/2013/05/20/booming/revisiting-the-cra...

>Fetal alcohol syndrome is just as bad if not worse.

FAS probably is worse. If my recollection is correct, one needs to do a lot of binge drinking during the first trimester.

>It is irresponsible to suggest otherwise.

You mean it is irresponsible to disagree with you? No, skepticism and critical analysis are never irresponsible. It is irresponsible to falsely assign a cause to some phenomena or event, and set about treating that cause without ever checking to see if what you're doing is actually helping.

>The fact that astute HN readers are looking at this and saying "See, it is overblown!" is very scary.

No, it isn't. It means that people are reading and thinking instead of reacting to headlines and summaries.

>That means the broader population reading this article is likely to do the same thing.

What's your basis for that assumption?

>The writer of this article owes it to society to be very clear about the limitations and biases of this study.

The study was narrow in scope in order to obtain a clear and concise conclusion.

Note before you jump to a conclusion about the HN general consensus on in-utero cocaine exposure, is that nobody here has come out in support of it. Rather, at least my take on it (judging by a casual perusal of this paper) is that efforts to reduce infant mortality and morbidity, and developmental defects in early childhood by combating drug-use were misguided; and going forward those efforts should be focused on learning about and mitigating whatever the effects of impoverishment are.
This isn't new, but I wonder if it's related:

"All SIMs could reject OTA message without Digitial Signature (DS), but this is rarely done as it brings additional pain to gsm providers. Most of the SIMs are correctly secured. Most of the SIMs accept OTA messages that are not encrypted. Some SIMs accept OTA messages that only have a correct Cryptographic Checksum (CC) and some SIMs only require a correct Redundancy Check (RC) and also require counter increase N+1. Most of the SIMs dont require any security feature and accept OTA messages without no RC, CC or DS, for example - Globul. (by marek, TODO: name the networks!)."

http://wiki.thc.org/gsm/simtoolkit#head-1c0ca2c9ebd6ac101c90...
Why is the Internet making us so insular?
I think a more useful statement is that "Nobody on OSX wants a poorly designed app because the platform has a high standard for design". It is possible to design well designed apps without using Cocoa - see Sublime Text.
Nice list; a little stuffy for summer though. May I suggest Infitite Jest?
What's more likely, that seeing dead people and being poor lowers your IQ, or that having a low IQ means you'll end up poor?

They preselected a bunch of poor people, which means the low IQ could be explained by the fact that their existing IQ put them in this place in society along with the predisposition to cheap drug addiction.
I'm shocked Biz Stone made this blog post. His solution is basically to "lose the ads and maybe some special features too" for 10 bucks a month. There is no way that is good enough.

Perhaps what he is really getting at is that Facebook should consider some type of Reddit Gold feature? Where users gain access to beta features first and various perks.

Now that, would be interesting.
The OS X version looks ancient and not like a modern OS X app at all. Is that due to limitations in Qt? I had considered Qt for cross platform development, but after seeing that comparison it seems like it would be better to maintain separate front-ends for different platforms.

I am thinking of Pixelmator, or Apple's Final Cut Pro and Motion for comparison to your screenshot. Even modern versions of Photoshop manage to look much nicer than that.
I've found that many APIs sloppily use parts of webdav and create a fairly ugly hybrid approach.

I think the HTTP codes should be used simply to reflect the transport (in this case HTTP) and any application level stuff should be returned in a systematic way inside the response body. Which means any API call to a valid resource that the user has access to should return a 200.

Then clients can safely assume that if they get a 4xx or 5xx something is breaking, and if it's a 200 then look at the body and deal with the actual response.
I'm not following; could you elaborate?
I don't see this working out in the long term. Unlike Firefox, which auto updates on it's own, these Firefox OS updates will be provided to partners, meaning it's up to handset manufacturers to push them out. I'm skeptical that we'll see these updates every 6 months, let alone six weeks.
A new social network
Would anyone like to beta test a new social networking website before we launch this coming week? It's an all in 1 platform. Focusing on it's users needs. User's will not be bombarded with ads. Privacy at it's best. Users will connect by interests and we will be bringing the interests to the user rather than the user searching for them and joining groups.
Proof: http://www.reddit.com/r/AskTechnology/comments/17s1pd/nfc_or...
Well, the redesign looks like it would be much more useful (just from first impressions last time I tried it).

However, this is more of a debugger when you already have some idea how to write a regex to match a particular string. Are there any complete regex builders where you can select components (such as greedy or not, positive or not) when you can't remember the specific syntax?
A lot of people, as far as I know. Private groups are still a direct competitor for the likes of Podio and Yammer, as ridiculous or stupid this may sound...
Correlation between A and B does not imply causation from A to B, but it does imply causation there is some causation somewhere, from A to B or B to A or something more complicated. In those cases we have to step down a level and look at the particular mechanisms.

We can see some very good mechanisms for how a low IQ might cause poverty in most cases, but the specific reason I mentioned the East/West Germany situation is that it precludes any of the normal ways that people can sort themselves into poverty - it wasn't as if there was any huge migration in Germany that made all the smarter people end up on the west side of the divide. Can you provide a causal mechanism other than poverty->low IQ that could explain that?

Or how about all the immigrants from rural Ireland that had significantly lower IQs than the residents of the cities they immigrated into, but whose children and descendants had substantially the same IQs as other residents of those cities?

There's really a mountain of evidence that the causality here runs both ways.
That's a separate sandboxing system. The SIM has its own sandboxes.
Thanks for sharing.

The philosophy has been mostly to create a profitable company, in the more traditional sense-- consistent revenue that can employ people.
- I share with this philosophy exactly.

The thing I am pointing out is that because of the VC gap, startups are dealing with the lack of cash infusion to really hit a homerun. As a result, Canadian tech companies stall after growing to a certain size. The options were taking VC money with bad terms or getting bought by US companies.

US companies are buying profitable Canadian businesses at a bargain price, reaping all the benefits of job creation and ambitious business goals.
VerbalExpressions Gets New .or() -Method
I wonder what hash function they used.
Google+ still a ghost town, getting beat by LinkedIn for social sharing
Of course they know how their workers survive- government welfare. They just won't admit it. This is how big corporations can get indirectly subsidized.
I dont know why everyone is lamenting its the worst idea ever.

Personally, I wouldn't pay 10$, but 5$ I would. No ads, with an extra feature, such as, voice to phone number communication.
Poor hand hygiene is a huge cause of preventable, hospital-acquired infection. See http://www.who.int/gpsc/5may/tools/who_guidelines-handhygien... (pdf).
A lot of code doesn't have exceptions; it might, for example, be written in C, or C++ in a place where exceptions aren't used. fprintf() and friends don't raise exceptions on failure.
This is true, but it's not just been twisted by the media, it's also been twisted by people like ESR. I would also be really skeptical of anyone who has a more specific definition of hacker than, "a really talented programmer", or "a really talented <something>".
This would be awesome if it also worked for Node.JS/Python/Ruby/etc. I recently switched to a Vagrant/Puppet system but there aren't too many good recipes with good documentation. This makes those two things obselete.
Something unusual is happening during the Obama administration vis a vis leaking. But we don't know what it is. Four broad, obvious possibilities:

(1) More people are taking greater liberties with government secrets in 2013 than they did in, say, 2004.

(2) The government is creating more "secrets", justifiably or not, and thus putting more people into contact with secrecy and creating a greater risk.

(3) The Obama administration is working more diligently to monitor the handling of secret information, so that leaks that wouldn't even have been detected in 2004 now are.

(4) The Obama administration has a more punitive attitude towards leakers, so that leaks that would have resulted in a slap on the wrist in 2004 now produce criminal prosecution.

All four can be true.

Also, I think it's important to bear in mind that our sympathies with specific cases (best example: Bradley Manning) aren't dispositive. It is simultaneously possible for someone to have done something for the greater good --- and even for that thing to have achieved the greater good --- and still have that act merit criminal prosecution. This gets to the issue of "rule of law, not of men", and requires you to consider that your definition of "the greater good" can differ sharply with definitions of other people; consider, for instance, my zealously pro-life Catholic aunts, or the militia movement.

Relatedly: it's important to understand that supporting a prosecution doesn't demand support for conviction; it can simply mean that one believes something more formal and "accountable" than the discretion of officials combined with public sentiment should govern the acceptability of a breach of trust with the USG.

Looking at the list of cases I presented:

* Three of the cases (Liebowitz, Sterling, Kim) don't involve terrorist threats on the US, but rather foreign policy and counterproliferation. Leaks of actual active foreign intelligence might demand a stricter review standard.

* Two of the cases (Snowden and Manning) were so monumentally huge that there may have been no possible outcome other than a court case of some sort.

That leaves Drake and Kiriakou. I read the FAS archive of filings on Kiriakou and came away thinking that, regardless of my extremely negative feelings about CIA-run interrogations in the Middle East, his prosecution wasn't egregious: https://news.ycombinator.com/item?id=5796162

Drake, I don't know.

My personal guess as to ranked order of the 4 factors above: (3), (1), (4), (2).
Show HN: untumbld - an index of the unindexed tumblrs
>If we started communicating to people that they're not good enough for the job, maybe we would have fewer people running around complaining about how unfair everything is.

I don't think you are good enough for this job

vs.

You are not good enough for this job.

The former is a decision that I (and anyone with hiring authority) is qualified to make; the latter is not.

Hiring is hard and most people aren't very good at it, so the opinion of one hiring manager (while being a valid reason for the hiring decision that manager makes) does not mean you are actually unqualified.
From what I could gather, the sandboxing was actually referring to the SIM card itself. It was hard to tell through the layman-ified description, but it sounded like he used some sort of buffer overflow to break out of the sandbox and access other parts of the SIM's memory which he shouldn't have been able to.
Old. 2011/2012.

"On July 12, 2012 OPERA updated their paper by including the new sources of errors in their calculations. They found agreement of neutrino speed with the speed of light."
http://en.wikipedia.org/wiki/Faster-than-light_neutrino_anom...
Talk about a great analogy. Selling rocks vs a Subscription model to the biggest social network on the planet.
You mean the fact that it doesnt show matches instantly?
Well, he's talking about it at Black Hat, right? Black Hat talks are usually full-disclosure.
While I wasn't previously familiar with Sloterdijk, I find it interesting that he takes exactly the opposite value from Christianity as Slavoj Zizek, the other great popular atheist apologist for Christianity (cf. Zizek's The Fragile Absolute: Why the Christian Legacy is Worth Fighting for).

"Sloterdijk’s ideal is not Pauline conversion but Trinitarian 'perichoresis,'"

Unfortunately, I don't think Sloterdijk has understood the theological context of perichoresis which he goes on to define:

"'Perichoresis means that the milieu of the persons is entirely the relationship itself,' he writes, envisioning love as a total mutual absorption."

Perichoresis is literally "mutual interpenetration" and refers to the greek choros and their dances around (peri) each other in interlocking rings in the theatre. In the theological appropriation of this imagery, this has more to do with the depth and interdependence of the relationship than with the "milieu" - though it's not clear what he means by that.
You can install those other languages, here: https://puphpet.com/#server

I have it on my list to expand out to other languages and offer in-depth configuration options just like PHP does. Unfortunately I am not familiar with any of them to be able to confidently say I am following best practices, or even know what options developers want to choose!

Opening a github issue and outlining what exactly you'd like to see would go a very long way to reaching that goal.
Ask HN: Freelance job aggregators?
Is there a site that allow freelancers to search through all the sites in one location?
It doesn't need to be called 'spirituality' - you hit it on the head before with 'self-improvement'

It's possible for secular people to practice self-improvement, but why would we not share a common set of beliefs/practices/language? I think many self-improvement groups do just that - obvious ones like churches, but also non-obvious ones (book clubs, running clubs, etc).
It wasn't in the article -- the past few years have been disruptive in the social sciences because of multiple replicated studies that show stress, including poverty stress (which is a well-quantified phenomenon) have a profound impact on working memory ("how much RAM your brain has").

Google it. I first read about it in the Economist, but really, it's where the conversation starts these days.

Brain damage is one of the main mechanisms by which poverty passes itself down to subsequent generations.
It's got a master stylesheet attached for the tabs, but admittedly, even without it, it's not identical.

http://imgur.com/68b9eoO - is native Cocoa moc-up in XCode.

I concede the borders are slightly different, but I personally wouldn't have noticed or minded.

The render button is a custom button - the only difference from the native one is the right-hand menu triangle which isn't native.

Qt has styles, and draws controls itself via vector drawing. And you can customise this yourself: So you've got all the power in the world to do what you want, but at the expense of loads of complexity that no-one's really going to go to the trouble of doing. So basically, it tries to emulate the controls on all platforms, and does a pretty poor job on OS X.
This has never, not once, worked for me from an iOS device. With or without cookies disabled. WSJ articles are always black holes to me.
How would you extend the functionality? Programming in JavaCard is really not fun (my opinion) and the space and processing power are really limited. The biggest use of it is verifying information (like pins or certificates), but what else would you do that your phone can't?
Is the notion of possession limited by jurisdiction?

If the reporter lives in the US, but does all his or her computing over ssh to a server in another country, that means that all the evidence is outside US jurisdiction. They don't possess the evidence, merely access it.
> I find the low college graduation rate more disturbing.

I was thinking it is rather high, all things considered. The statistical norm would expect only about 25 people to graduate out of that group. It would be interesting to compare against people in similar situations, but without the crack influence. I expect that the attainment rate will be similar.
This is actually the reason exceptions were created - in some languages, such as C, there are no exceptions and so the result of each write needs to be manually checked for errors.

If you're using a language with exceptions, your program will halt if it can't write. If you're using a language with checked exceptions, you'll have to write code to deal with any possible exception that can be thrown.
The real problem is not monetization. The real problem is that most people don't have imagication rich enough to envision how such ideas can improve everyone's lives. I can't recount how many hundreds of times I've heard the notion that current design/technologies are "good enough". Most people don't care about small thing and are totally pessimistic about large things. Pessimism is contagious.

Also, there are no outlets for promoting, discussing or finding projects like the ones described here. And, if that's not enough, integrating anything conceptually new with existing infrastructure is usually a royal pain.

Regardless, these are good ideas.
What I'm curious about is what Nohl meant when he said that it would take six months from the time of his presentation at Black Hat for crackers to develop working exploits based on his findings. And if he is (as the article suggests) working with the phone companies, why not simply wait until they've implemented their patches (if they in fact need them)?

If indeed it is as simple to force a sim to run these malicious applets as using some sort of rainbow-table-powered replay attack, what would be the challenge? Or perhaps he was referring to the more lucrative aspect of breaking out of the sim sandbox...
What are the implications?

Can't stand Forbes and their over the top ads, tldr would be appreciated.
might have hundreds of thousands of documents

Actually the extreme is likely to be in the millions.
Where are you? I'm surprised that wired-in-ethernet adds noticeable value to a house — I rarely see ethernet used except by technically minded people; most people I know just use wifi for everything nowadays. (I know, anecdotal, but I'm wondering if geographic area has anything to do with attitudes about this.)
Why would you include Web Applications as part of that? Web applications are almost completely OS-agnostic. I can run my PHP application on Linux, on OSX, or on Windows. It shouldn't count for any of the three operating systems because it wasn't built for any of them. It was built to run on a software stack which runs on all three.
I'm pretty sure they don't test vocab or math in an IQ test. I think you're thinking of the modern day SATs, which can be affected by poverty.
Pretty sure Blackberry does in Canada, and I assume everywhere else that their Mastercard payment NFC (paypass) works. They touted it as being extra "secure" due to being on the SIM instead of the phone. No idea if carriers selling Bold and Curve handsets are using DES SIMs vuln to this.
Why I Don't Like the Lean Startup
In my experience there's very few libraries that would require generators that could run on both the server and in browsers.
"Trained employees are quitting because they find they have to work like Westerners and get paid like East Europeans. ... You always get what you pay for."

And I'd guess that employees are similarly averse to being exploited all over the world. For example, if you were hired as a developer in the U.S. at an average salary but your employer expected you to work twelve hours every day and answer support calls in the middle of the night, you'd quickly realize that you could find another job where you could get the same salary with less painful working conditions.

And the constant departure of qualified employees should be a strong signal to management that they don't pay enough.