skysight-inc/HackerNews huggingface dataset:
Rotating images were already possible before with transform:rotate().
Sure, but it also explicitly compared two cities, Boston and New York. Parent threw in a new area, Silicon Valley, which indisputably has a stronger tech ecosystem. My point is that, comparing 2nd and 3rd place in tech ecosystem is still interesting if other aspects of cities are important to you, and they are in my case. A similar article comparing Silicon Valley to New York wouldn't be as interesting to me because I refuse to move to Silicon Valley.
I respect RHEL/CentOS but for ease of use (packaging system,vast amount of packages, easy upgrades) I prefer Ubuntu/Debian for my server and desktop.
Hmm, no mention of SELinux? It's a pain to get into though. Many just turn it off to make its errors go away, while they should actually configure their machine. But it is very convoluted and hard to get really into. IRC helped a lot here.

Another suggestion I miss is just setting the SSH port to something different than 22, while many will correctly notice that this comes close to security through obscurity, it does throw off some more mainstream attempts.

A third one is more web-server specific, if you have the option, make it hide its version number in its responses.

A fourth one would be to mask all errors to a 404 on a production server, the less an attacker knows, the better.

A fifth actually links to the person operating the server: 'know what permissions are, and what they allow/deny'. Too many people "solve" issues by doing a "chmod 777" on a folder, which might have solved one problem (in a very bad way) but probably set him up for a few nasty surprises down the road.
You keep poo-pooing internet commentators that are trying to identify and mitigate the threat posed by the NSA - you did it in this thread, and you did it in another HN thread [1], the article where some kid wants to generate private keys in a secure way.

But what you're not doing is giving your own alternative analysis. What is the threat posed by the NSA and what are the attacks that we should think seriously about, and what are the threats we can safely ignore? What can we do about the former?

[1] https://news.ycombinator.com/item?id=6385866
Yubico makes a couple products that might fit your requirements. The YubiHSM [1] ($500) is a USB HSM designed to be connected to server. Yubikey Neo [2] ($50) is does end-user authentication (OTP, CCID, SE, JavaCard) over NFC or USB. They can both be ordered in quantities of one and have open source SDKs [3].

[1]: http://www.yubico.com/products/yubihsm/
[2]: http://www.yubico.com/products/yubikey-hardware/yubikey-neo/
[3]: http://www.yubico.com/develop/open-source-software/
>> It's not like Boston or NYC are significantly cheaper than the valley.

Yes they are plus some of us really don't want to live in a place with a 3:1 gender ratio.
There's a similar short-film that I thought was more thought-provoking -- http://vimeo.com/channels/staffpicks/42857970
No need. People need to just stop drinking this mediocre and overpriced product and learn how to make perfectly serviceable high grade arabicas taste good. I doubt most people that purchase the coffee even know what Gold Cup standards are.

http://www.scae.com/scae-gold-cup-programme/how-the-gold-cup...

Kopi Luwak is - outside of novelty purposes - a ridiculous status symbol for rich idiots, like using ground-up, ineffective rhino horn to treat erectile disfunction.
Mr.
Nascar Fan and A Dracer
You wouldn't. You would use Linux and Docker.

This is HN, not a BSD mailing list.
But it is surprising -- or, at least, interesting -- that the product doesn't benefit from economies of scale.
I don't know, you could recreate a process that falls under a model, similar to micro-brews. Then you attach clean and good for the environment. This would be the next big hobby, and better for you than that cool cigar humidor, or making of beer.
More of the same Vivek Wadhwa essay that has been submitted twice already, because it is spammed around multiple domains online.
> I'm not sure that our only option is giving up on trying to find one.

No one is suggesting "giving up". In any case, it's not in the nature of science to give up on searching for solutions. But as things stand, there's no obvious solution.

> instead of "impossible" in the quote above I would put "extremely difficult".

My use of "impossible" was only with respect to measures that modify the behavior of individuals by force. That's impossible without abandoning civilized standards. I don't normally use the word "impossible" without good reason.
Has anyone had any reliability or other problems with Ubuntu 12 04 LTS?
What about the fact that the weather in Texas is too hot and that, from what I read online at least, public transportation stinks? It'd be nice to live in a city where a car isn't required for every trip. Maybe there are places in Texas like that. I currently live in a hot and humid part of the country with no public transportation. It would be nice to get away from that.
No but I did check my phone when he got a text :)
It's not that widely known, but you can remove your child from state education as a parent and teach them yourself. You just have to tell the local authority you're doing so in writing.
Honestly, I think it's neurotic that human beings will receive criticism for, and have to worry about the choice of how many times they tap a space bar when writing (not even coding). That we have to even include things like output format and source format to distinguish between is just on another level entirely (I'm not criticizing you, your point is valid).

I mean, when I read titles like this I think to myself, "Who gives a shit?"...then I read a long thread and think, "Wow, this is actually a real debate."

I never knew there was so much that could go into a decision about typesetting spaces. You learn something new everyday.
Be sure to check out Season 1

https://technutopia.com/
My buddy, who does security research, tells me that on stock firmwares of a lot of routers WPS is turned on and can not be turned off. He claimed that he encountered several routers where after turning off WPS in the settings he was still able to use WPS vulnerability to crack the key. He thinks it has to do with the setting not being fully applied, as in, the check mark changes, but nothing happens on the backend.

Mind you, I think with open source firmware like TomatoUSB and good password you should be good.
Thanks for the advice. Shoot me an email, I'd love to ask your opinion on a couple things related to an open data project I'm doing.
Stupid question: why is it legal for the NSA to perform MITM attacks?
I get it that some degree of latitude to break the law is justified when enforcing the law (such as a police officer running a red light when pursuing a criminal). But those types of permitted transgressions are carefully controlled by police department policy. What is the legal authority by which the NSA masquerades as a major internet service? Why isn't this criminal "hacking"/unauthorized access held to the same standard Aaron Swartz was?

It seems like even if they don't need a search warrant (vis-a-vis the presumed FISA court permission), MITM is still illegal, and they would need special permission for that.

Don't think I'm asking the question very well, but is it implicit? Explicit? And if explicit, where is it codified?
True, but if the voting public paid attention at least there'd be a small chance of fixing things.
A solidly brewed quality coffee can produce the same effects and should have minimal bitterness or acidity. The technique and beans are what matter. I'm pretty skeptical about the pooping.
Well, the question we should be asking is, how can we replicate this experience for kids all over the place? How much of this happy story comes from the methodology and commitment of the teachers, how much of it is generalizable to other times, places, and students?

Make it into the story of a 'boy genius' and you reduce it to a one-off event. It's a question of how you're framing the story.
Double sentence spaces are still entrenched in the legal community, and I think they have a major advantage there: they make it easier to read text with inline citation sentences.
I'm already aware of Grooveshark being gray-area, however, the law is the law. They are not breaking the laws in the UK or the USA, as far as I am aware. Spotify is good, I continue to use Grooveshark because Spotify has only popular musicians, I listen to underground music. If Grooveshark gets closed down I will switch to YouTube. The reason I use Grooveshark over YouTube at the moment is purely because of the 'Now Playing' lists.

If the BPI is unhappy with Grooveshark because of their music being on it, either make a deal with them or DMCA all the artists. If they block the whole site, they're only making it harder for me to listen to the type of music I want to listen to. As I said, it's a monopoly.
Housing in Boston is substantially cheaper than Silicon Valley.

Anecdotally, when I moved from Silicon Valley to Boston, my rent stayed the same price and but I got to live in twice as big a house.

Non-anecdotally, look at these real estate price maps.

Boston (Middlesex County, north side of the city): http://www.trulia.com/home_prices/Massachusetts/Middlesex_Co...

SF (San Mateo County, south of SF): http://www.trulia.com/home_prices/California/San_Mateo_Count...

You can buy a relatively large house within a few miles of downtown Boston for around $400k. I don't think that's possible in SF.
> And I'm telling you that nobody gives a shit, because they just want to listen to music.

I do realize that people are selfish and just want everything for free, and that computers & the Internet enable them to circumvent having to pay for music.

That doesn't change anything about my point, though.

Do you realize that if music producers can't make a satisfactory profit, then music will just not be produced? Again, it costs money to produce music and to make it available for purchase. I've downloaded music, just like everyone else, but as a genuine music lover, I've also happily paid for some 200 - 300 CDs back in the day, and those comprise roughly 95% of all the music I listen to.

Do you get it? It's alright to pay for music. It's downright expected by anyone producing it. There is no free lunch. There aren't many things of real value that you can expect to get for free. Open-source software is a rare exception, but that doesn't really apply on the desktop, so.. yeah. Think about this stuff. You need to see beyond yourself.
Dear Priceonomics:

Please use a responsive design for your blog. I rarely get to read them because they are difficult to read on the phone, but they are fantastic and would be great to read on the go.
This is a content-free article. It boils down to "we've committed to CentOS, so that's what we prefer to use."

The claim that "in our experience, [Debian/Ubuntu] are not nearly as stable or trouble-free as RHEL/CentOS" says more about their lesser experience with those systems than it does about Debian or Ubuntu.
U.S., Russia reach deal to destroy Syria's chemical arsenal by mid-2014
The Python tutorial teaches the language fairly well: http://docs.python.org/2/tutorial/

The iterator section is http://docs.python.org/2/tutorial/classes.html#iterators. Here it is quickly. Suppose that an object has a __iter__ method which will return something with a next method that will, when it has exhausted the iterator, call StopIteration. Then all native looping constructs can loop over that object and it will just work.

If you call a function that internally calls yield and nowhere calls return, then you get back a generator, which is an object with those methods.

There is also syntax to construct such generators inline without even an explicit function.

All of the closure based looping stuff in HOP which supports potentially infinite streams? It is all built in!
I understand the mouse is being used as a standin protagonist, but why bother bookmarking something and then not using the bookmark if you're using the mouse anyway
It's gonna be more expensive, bigger, slower, and have a smaller battery life. What's in it to like?

For less than the price of the modular version, you can get a non-modular one with all the functionality included.
Your comment would make sense if military spending were an order of magnitude higher. As it is only 5% of GDP, it is hardly enough to have much effect on total hours worked.
Thanks! I once heard someone quote what was supposed to be a Japanese saying: "Fix the problem, not the blame." I thought it was wise and I started repeating it among professional associates.

Finally it dawned on me that it might have been originally based on a Japanese saying, but the ambiguous meaning of "fix" relied on an English idiom that almost certainly didn't exist in Japanese. I must have repeated it ten times before I realized its clever wording only worked in English.
Help improve Technical Project Management software. An 8 question survey.
We are starting a project at Startup Weekend today and are trying to create a better Technical Project Management solution. This survey is only 8 questions long. We would greatly appreciate your input and thoughts.
They buy a different phone. There is more than one to choose from.
what happened in 1981, when the price of college became unhinged from the CPI?
Find a reason to write a program that needs to separate prose into sentences, then ask yourself if the argument is neurotic.

It's common to use tables of abbreviations to know when a period is probably not the end of a sentence, and then apply imperfect rules to handle edge cases like proper nouns. It's tedious and inaccurate.
Agreed. I think that that most people that would like Civet poop coffee would find this good: buy a Hario, prepare one cup at ~1.5 times average strength, toss it, and brew a second cup from the previously extracted grinds.
SICP isn't a book about Scheme. It's a book about writing computer programs. Scheme was used because it imposes the minimum additional cognitive load. Worrying about all the warts in, e.g. Common Lisp (to say nothing about Javascript or Scala, say) would detract from the pedagogical mission of the book.
This is one of those moments where I learn something I had no idea about, and am very glad someone wrote the Guardian story, and that someone posted it here.

I bought the civet coffee off ThinkGeek for a coffee snob friend of mine years ago. She said it tasted watery and bland, but thanked me for the thoughtful novelty anyway. Now I realize I not only gave her crappy coffee, it was crappy coffee created through abusing animals for a stupid gimmick. I feel like an asshole.
A double-blind taste test would be very interesting, but in my experience the kopi luwak is noticeably less bitter and acidic than the least bitter and acidic solidly brewed quality coffee I've had :) It's worth a try if you've never had it, at least.
You should compared it to cold-brewed coffee and report back. :)
Faceshift.com is what I have played with most. It's amazingly accurate with even the current kinect, but starts at $800 for the indie version.

Brekel.com have a less expensive version, but I have no experience with it.

Open source alternatives seem thin on the ground, if not non existent.

Try faceshift, there's a free trial. It's mind blowingly awesome.
"Stable" sometimes means people are more familiar with the bugs than bug-fixes...
Conservative tech choices: I'm only familiar with X so I don't choose Y like you guys who are familiar with both. -- This is OK because the benefit of better tech doesn't matter so much for their business.
The world is not entirely composed of consumer web startups. There are plenty of opportunities that don't share the tradeoffs inherent in the typical HN style environment.
Style guides are arbitrary prescriptions. Why not 2 spaces around a slash? Why not put a space before and after a period? Why not put spaces around parenthesis instead of just before?
I've added

map <F4> :!pdflatex %

to my tex.vim. It's on demand, but after the first compilation it's almost instant. :)

Edit: as mentioned in another comment, Evince updates automatically when the file changes.
Nokia was experimenting with Android, as any serious business would. You have to explore every option, so that if upper management decides to go that way, they are ready. It's completely normal. Hell, they'll probably continue experimenting, even if it's just to see how Android compares to Windows on the same hardware in terms of speed.
>someone could have a telephoto lens and take pictures of your dice rolls<

Roll a braille octahedron in your bathroom with the door locked and the lights out. Type the bits on an offline computer so the keylogger can't report back to its owner.
My question is, given the drive to do this, is this kid really outstanding or is this something that many more kids are capable of doing?

Your definition of "outstanding" seems to have something to do with innate talent.

My definition of outstanding is "what does he do with what he's got"?

Unless this article is made up, this kid has accomplished quite a lot, much more than others in similar or better circumstances. I think that's what matters, and it's also the best predictor of future accomplishment.

Here's what I've picked up in my working years: "genius" is a completely worthless novelty if it is not put to productive use.
This seems very similar to wines. I like coffee and I like wine, but my only metric for whether one is good or bad is simply if I like the taste.
You are partially right. All of my beliefs are provisional and I'm waiting to be proven wrong. I'd very much prefer to believe that Google acted properly (not necessarily legally) with respect to its cooperation with NSA. To date I am still not convinced.

How is it possible to feel comfortable with Google's answers when you consider that companies are forbidden from disclosing some information? I'm equally skeptical of the truthfulness of both Google's and the NSA's responses to the revelations.

I'm not able to accept the whole "trust us, everything was circuitously legal so there's nothing to worry about" excuse.
No, you're 100% right, the claims are bullshit. Less proteins in the coffee bean = less flavor. http://sprudge.com/say-no-to-kopi-luwak.html
Pretty hilarious, given that this just came up on the BBC also: http://www.bbc.co.uk/news/uk-24094435 - using fonts without permission ("The Home Office said it was trying to contact the copyright owner to reach an agreement.").
Yes, that's right, the kernel doesn't add it to the entropy pool. RDRAND is a cryptographically secure pseudo-random number generator, it doesn't give you direct access to the full entropy of the hardware random number generator (that is planned with the RDSEED instruction, which isn't shipping yet[1]). RDRAND re-seeds a CSPRNG periodically with its hardware RNG, but it's not appropriate to feed directly in as the seed of another CSPRNG like Linux's /dev/random. Intel does provide a suggestion for how to ensure that it gets reseeded, so you can ensure you have seed-grade entropy in their software implementation guide[2]; it involves either calling it 1022 times, or running it 32 times with a 10 μs wait per iteration.

In Linux, there's a user-space deamon, rngd, that's responsible for mixing hardware random number generator entropy into the entropy pool. That's a more appropriate place to put the logic for adding entropy from RDRAND into the entropy pool; you probably don't want to be doing those 1022 iterations or 32 iterations with a sleep in between in the kernel itself.

The kernel just uses it as a parallel CSPRNG along with its own built in one. It runs its own, and RDRAND, and xors the results together. This allows it to get fast, good random numbers (which are important early in the boot sequence, for things like ASLR) even if its own entropy pool does not have very good entropy yet. This makes its random number generation at least as good as the stronger of RDRAND and the kernel's own CSPRNG. It does mean that if RDRAND (or some other processor's similar instruction, once other processors add it; it would be quite valuable on ARM and MIPS as embedded machines tend not to have very good entropy sources) is backdoored, and the kernel entropy pool has insufficient entropy, it may be possible for someone with knowledge of the backdoor to crack it, with a difficulty equal to the amount of entropy that the Linux entropy pool has. However, this is only true if you are using the non-blocking random number source, which tends to be used by things that need fast random numbers but don't need particularly good seed-grade entropy, like ASLR. If you need high-quality entropy, just use /dev/random and it will block until you have enough entropy to satisfy your request.

[1]: http://software.intel.com/en-us/blogs/2012/11/17/the-differe...
[2]: http://software.intel.com/en-us/articles/intel-digital-rando...
Did You Say “Intellectual Property”? It's a Seductive Mirage

The distorting and confusing term did not become common by accident.

The term “intellectual property” is at best a catch-all to lump together disparate laws. Nonlawyers who hear one term applied to these various laws tend to assume they are based on a common principle and function similarly.

Nothing could be further from the case. These laws originated separately, evolved differently, cover different activities, have different rules, and raise different public policy issues.

https://www.gnu.org/philosophy/not-ipr.html
Can we agree there is a distinct and dramatic difference between public and private colleges? Should we even be talking about them in the same context? This seems to be much more of a private college bubble.
I've tried them all! I lived in Seattle for 20 years and was only able to survive the winters by spending at least 4 hours a day in cafes. :)
Trampolines are a solution to the same problem that tail-call elimination solves; they're not transparent to the programmer.
Sports Broadcasting Act of 1961
Yeah, the logo is certainly not real because Westinghouse didn't invent or manufacture the original electric chair. But it's easy to guess why the logo might have appeared.

"Edison opposed capital punishment, but his desire to disparage the use of alternating current led to the invention of the electric chair. Harold P. Brown, who was being secretly paid by Edison, built the first electric chair for the state of New York to promote the idea that alternating current was deadlier than DC."

See - War Of Currents:
http://en.wikipedia.org/wiki/War_of_Currents#Edison.27s_publ...
Layoffs hit HTC America as the company struggles to turn itself around
Sean thanks for the offer, I'll definitely shoot you a note in the next couple days.
I think my analogy is more accurate. There were many independently owned web sites (stores) hosted at Freedom Hosting (neighborhood), and not all of them carried child porn. You could visit one of the legal sites without even knowing that there was child porn being hosted by Freedom Hosting (or even knowing where the site was being hosted).

From the article:

Freedom Hosting was a provider of turnkey “Tor hidden service” sites — special sites, with addresses ending in .onion, that hide their geographic location behind layers of routing, and can be reached only over the Tor anonymity network. Tor hidden services are used by sites that need to evade surveillance or protect users’ privacy to an extraordinary degree – including human rights groups and journalists. But they also appeal to serious criminal elements, child-pornography traders among them.