skysight-inc/HackerNews huggingface dataset:
I have a better technology for stormtrooper rendering, it's called guy in stormtrooper suit, hyper-realism since 1977.
Your data is an anecdote because it isn't a repeatable environment with a proper control.
What do you mean by a major violation of their SLA?
Good point, but if they're willing to iterate a little on the physical construction, I don't see why they couldn't pass SNELL.

(Unless part of the certification is "dont put potentially sharp bits that could fall off in a crash inside the helmet")
Kind of OT: I have just opened a free github account to follow a project. Any tips for a painfully pathetic n00b for learning to use github generally?
This is a wonderful and inspiring story. Congrats to you both!
Show HN: Agent (YC S11), a collection of utilities to make your phone smarter
"The Arabian Sea is a region of the Indian Ocean..."
http://en.wikipedia.org/wiki/Arabian_Sea
you can set a `background` option when creating a drawingboard - if I did things well, setting it as the base64 string should do it!
The first thing I notice is document distance with vector space :) That's probably the beginning.
The shittiest project that I worked is just finished where we are not allowed to write any test cases cause we don't have time. I just can't believe that I finished fairly big project without writing a single test case. I hate my company, my role and managers, sales people who negotiate tight deadlines. Over all don't work for any consulting companies out there. They care less of the code quality. They just want money and no ethics.

My next job will be a product based company.
> I don't know the first question's answer and that's what i am trying to learn.

Well, if you don't claim to know all of the details then I'd say it's a bit disingenuous to make a blanket statement like "STOP USING X SERVICE". I thought the tech community was better than that...
As a rider, I'm worried about what happens to the electronics, projector (+ lens/ bulb), reflectors, and screen in case of an accident. If the helmet deforms, will those shatter, possibly scattering shards around while my head is bouncing in there?

I would absolutely love this, but I'd wait to see what the actual crash tests look like before risking my head to one.

Edit: thinking about this more, I'm even more worried trusting my safety to a company that has never even made a helmet before. I'd be much more confident if they had approached older helmet manufacturers and worked in conjunction to get these new features into something thats confidently safe.

The focus on battery life, charging, UI and menu systems also makes me wary -- there's almost nothing about safety in the presentation, except for the material ('carbon fiber'), and nothing at all on crash testing.

I would not risk my head to this.
Yeah, those are all great options. I know for sure Mandrill lets you send SMTP through them and I think Mailgun does too. It's just a matter of configuring your Postfix server to relay through them.
One reason this is interesting is because polynomial interpolation is used for secret sharing, so this method constitutes an "attack" on a poorly implemented polynomial interpolation sharing scheme.

Luckily for crypto, the coefficients used in a properly implemented scheme are so large as to not be vulnerable to such an attack.
NSA chief pleads for public's help amid push for spying restrictions
I'm guessing that most people who run a server may not even realize when they get hacked. These people (you included) probably should not run their own servers and stick to PaaS solutions like Heroku or Google App Engine. It happens all the time to guys who think they can install & maintain Wordpress themselves.

You probably should have analyzed the issue before making a blog post about it. I have had servers hacked into in the past, but I wasn't about to defame a company over my own mistake of securing the server.
Exactly my first thought. Most people are buying helmets as helmets first and foremost. This is like a GPS system that weakens your seatbelt as a side-effect of installation. Also, the website doesn't instill confidence. I'd drop $2k on one from Icon or AGV or Shoei, but not a technology startup.
Of course they could build a magical city on it with its own source of power that could develop advanced technologies and then sink into the ocean never to be heard from again :-)

I propose we dub it Atlantis.

Edit: Signed, Captain Obvious
A surprisingly large chunk of that ~6% market share.
The video-like thing is indeed really cool - remembers me http://sketchtoy.com/ a lot.
I patiently await Zuck's reply on HN. :-)
Air Force Converts F-16 Fighters into Drones
27 Drinks made from Coffee
Yes it is, it's a Display that allows you to keep your Head Up, and on the road in this case of the motorcycle.
The point of WebRTC is to allow real time communication in the browser. You can do this via p2p data streaming without any services but you are limited to p2p and its shortcomings (like maximum of 2 users, blocked ports, firewall, etc).

By using a service like OpenTok, you can augment your WebRTC experience because you well be able to stream to thousands of users, tunnel through blocked ports, and generally more firewall friendly.

Great question tho.
I find pull requests handy for working with semi-technical people, for repos only worked on by programmers we just use the format-patch/email workflow, and we have access to each others public repos (would be called "forks" in github parlance I guess).

It's a much better system, faster, more powerful and more flexible but not centralized and you have to understand what you are doing.

It's not like this is a feature github discovered and added. They made an easier, prettier and less powerful version of an existing feature. Certainly not a bad idea, git's command line UI is ridiculously bad UI so a super simple point and click interface was a fantastic way to grab market share and get non-command line people involved.

> the comments in a pull request are an excellent feature

Really? I mean, compared to nothing I guess it would seem great. But since I'm used to an email thread serving the same purpose those comments on github pull requests seem awful to me.
Agreed. If I'm trying something new, or just playing with, I could try a new and cheaper host ($5/m is less than a starbucks coffee where I live).

But if I'm running something that pays me money, there's no doubt that I'll choose the best provider. And the best provider, for my requirements, is only $15 more expensive.
I would start iOS. I started there and it has been great.
Note that Wikipedia supports HTTPS, but it is not the default (yet).
And now after nearly 10 hours or so i still haven’t heart from DO.

There is a problem on the Internet is that people demand things NOW. Really? How long will it take for stuff to happen in real life (especially if you are dealing with government).

Some stuff does happen immediately (like registering or purchasing something), but stuff which requires human intervention is obviously slow. And it requires time.

Yes, you can have 24/7 response. But only if you hire someone (probably 3 persons) working for you round the clock which will mean paying thousands of $$ per month and not $5/month.
Once those people from poorer countries are educated and stop going there, they'll be replaced by people from an even poorer country.

In the early 80s, there were a lot of Korean workers in the Middle East. As the economy in Korea boomed and they had less of a reason to go the Middle East, they were replaced by Indians. As the Indian economy boomed in the 90s/00s, they were replaced by Nepalis, Bangladeshis and others.
Hello Ben, thanks for the response. Fırst of all at first ticket i told that the only possibility of having an UDP outgoing is that script that i wrote.

Other than that i've no other activity or script that can generate that much traffic. Haven't you even considered that my droplet may be compromised or being attacked ?

Instead of letting me know what exactly happened or which processes were running at that time you just locked the account and accused me.

Couldn't you even look at the access logs or so to see which IPs login into the droplet and then take your action later instead of closing it instantly?
This is:

a.) pretty good evidence that DO did their due diligence and

b.) way more thorough investigation than I would have expected from a "value" vps provider.
This happens in the US too near fracking sites. http://www.imdb.com/title/tt1558250/
Markdown Calc for TextMate
My understanding is that StartSSL will, by default, generate a TLS/SSL private key and public certificate pair for you server side. One can manually override by creating a private key locally and uploading a CSR.

The site authentication private key and the S/MIME private key, however, are always generated in the user's browser.

From my experience (on OS X), if you want maximum flexibility for selecting your S/MIME key size, the browser you should use is the last pre-Chromium release of Opera. It allowed me to select 4096-bit RSA private key and SHA-256 hash algorithm, whereas Firefox, Safari, and Chrome have no option greater than 2048 bits.
So, you're saying paper is better than Emacs when you don't have a computer nearby.
— Cars tend to drive closer to bicyclists who are wearing helmets. That comes from Ian Walker, who set up a bicycle with sensors and drove around the city. Vehicles tend to crowd closer to him when he was wearing a helmet than when he wasn't. That's not necessarily surprising, but it's a reminder of all the weird unconscious tics we adopt while driving and making on-the-fly assumptions.

This is a weird adaptation of the Peltzman effect[1], which found that people drove more recklessly when wearing seatbelts.

[1] http://gregmankiw.blogspot.com/2006/07/peltzman-effect.html
Off topic: People who use Mother Teresa as the canonical example of selfless altruism need to read something about Mother Teresa so they don't look so silly.
I think the idea is to make MitM snooping more difficult, not necessarily data collection by a third-party.

I agree, though, it is kind of silly, knowing that Google has been complying with large numbers of FISA requests.
From a sample card-holder's agreement:

3. I will hold in strict confidence my personal identification number (PIN). I will take reasonable precautions to keep my PIN separate from my ATM card and to prevent the unauthorized disclosure of my PIN.

So, you sign an affadavit verifying you did not contravence this agreement. They will screen for this as/if you file a claim for fraud.
IPhone and iPad users report severe motion sickness while using iOS 7
recent improvements in all solid state dye-sensitized solar cells show more potential for lowering the cost of solar energy.
you're going to back up 1TB of data to dropbox?
I was interested in this and did a very quick google search. Measuring concavity/convexity of a generic 2D surface object doesn't seem to be a very common operation. The one reference I found seems to do what you describe:

http://www.ncbi.nlm.nih.gov/pubmed/7945702

Although I don't have PubMed access so I can't be sure.

This is an interesting problem.

I chose the "random points" method because it seemed easier to me to get an approximate answer for a generic shape rather than try to figure out areas. Lengths didn't occur to me though and seems interesting, although the shape you describe doesn't "feel" concave to me.
I am curious to see the blog poster's response to this, as your course of action seems completely reasonable.

May I ask what about the UDP traffic made it appear abusive?
School that lets kids play all day sends 90% students to college
I think it's a bit sad that you have to go to such great lengths to protect your company's image. This was a very obvious case of customer fault. He admitted that he doesn't know if his server was hacked. The customer probably should have looked into the issue before making a inflammatory blog post.

Maybe if you guys charged more you wouldn't get these ultra-cheap customers who think they should get 24/7 support for paying $5 a month.
> As you can see, StartSSL will believe you own the domain if you control webmaster@, postmaster@, or hostmaster@ with the domain name

I see a potential vuln here for free e-mail services. If one manages to register one of those addresses he can create a trusted certificate and use it for MITM.
Not everyone can afford a smartphone. Nor the expensive data plan that goes with it.
How did this man land a $4 million contract on LinkedIn?
Well, it's no different than Unix:

https://en.wikipedia.org/wiki/True_and_false_(Unix)
Keep in mind that apparently the OP does know why he was shut off. From another comment here:

http://i.imgur.com/1pxIxiN.png

Just because the blog post doesn't say why doesn't mean he doesn't know why. Only that he's selectively sharing the information.
I've been happy with my Surface Pro; the two changes I'm most looking forward to are the docking station and Haswell. The extra pixel density is a nice-to-have, but being able to pop it in and out of a docking station is killer. There are some other minor things I'd like addressed (the impossible-to-use microSD slot, for one. The always lost stylus is another), but I'll rebuy and probably hand the Surface Pro on to the kids.
The US sends billions in aid to Qatar and Dubai?
I think what you mean is that these countries buy billions of $ of US weapons every year.
This would great and worth consideration if helmets weren't disposable items. Obviously a crash will cause a write-off (and good luck convincing insurance your helmet was $2000). But helmets get stinky, they get dropped, they get exposed to UV. A five year replacement cycle is recommended by the Snell Foundation. [1] Okay, so $400/year; some folks will part with that. You'll cry real tears if you drop it hard enough to crack that carbon fiber shell.

Then there's fit. Some people have a Shoei head, some an Arai head (helmet brands). For $2000, that sucker better not cause hot spots on my noggin.

Replacement shields? Shields are consumables, IMO. And I want a dark one for sunny days, a light one for when I'm out after dark. I want a new one when the original gets scratched up.

I like the idea, but a cool HUD is just one thing to consider when buying a helmet, and not high on my personal list if I'm wearing the thing up to twelve hours a day.

[1] http://www.smf.org/helmetfaq#aWhyReplace
They were at San Francisco Motorcycle Club's general meeting last Thursday. They were giving people demos. I don't get it, really. When I ride, I like lo-tech :-)
You can also get free SSL certificates from LOLroot CA!

http://lolroot.ca/
So you shutdown the VM due to what appears to be a compromise. That is typical host behavior at least.

Locking the user out of their account seems...odd, tho. I've never had that happen, personally, at any host.
> So, there's consensus that this feature is not ready for prime time?

Best wait till Grails trusts the static enough to use it before you do.

> I don't want an answer from people who hate Groovy in general

I love the Groovy Language, but the current PM made some bad decisions after taking over, e.g. removing Poirier's Heredocs, disabling Scala-like catchless try statements, laundering Tkachman's Groovy++ static-typing plugin, stonewalling on Wilson's MOP upgrade, scuttling any attempt to spec the language, the horrible paren-less DSL syntax for multi-arg function calls, removing Closure Lists just before an RC release without any public discussion, how Strachan the founder was knifed over dynamically-scoped closure syntax at Devcon 2, how Java 8 lambda retrofit hasn't even been begun on, instead the PM is wasting time on non-Java compatible traits to Groovy, etc.

I still love the essence of the Groovy Language, tho, that's why I'm rebuilding it atop Clojure.
Looks like they looked at the code and determined it could not be UDP from your script.

I think they did consider your droplets to be compromised.

I think at issue here is that they have to assume that the droplet owner is the malicious party, if they don't lock your account, they can't stop you from creating more droplets.

I think you may have a point that they did not clearly explain to you why your account was locked.

However, this incident makes me more likely to continue using Digital Ocean. With the new private networking they have in NYC2, I for one am thrilled that they do this kind of proactive monitoring.
MITM would be unnoticeable then.
Processor made from carbon nanotubes runs multitasking OS
This is silly; why should Pop Sci work so hard to "adapt" to a site feature whose existence is entirely under their control?

I suppose one could make the argument that Pop Sci failed to adapt to a cultural reality that websites must have comment systems. But I don't think that actually is a cultural reality. There are successful sites that have never had comments at all, and numerous publications have demoted their comment systems to a second screen or hidden tab, with no ill effects. If you look at hot new content platforms like Medium, Quartz, etc., they are built from day one without comments.

I think Pop Sci has adapted to a new reality--a reality in which meaningful conversation has migrated to conversation-centric platforms like social media and news aggregators (like HN).
>Smell and sound

when another dog is inside a car that just stopped at the intersection?

Another issue here is that smell of different dogs is supposed to have at least some variation as well (is this feature variation bigger or smaller than variation in size?), and if one dog is downwind then another is upwind - i.e. while smell obviously plays a major role in dog's sensing of the world we just can't ascribe it all to the smell. In my experience visual recognition plays major part in many cases as well (note: i'm not arguing which dog's sense is strongest, only that there are situations when visual is basically the only one that could have brought the information)
Being attacked or even getting compromised is customer fault ? Okay i get that. But what about closing the account instantly, not notifying the customer, accusing that customer of being a cheap liar and treating them in a bad way?
Valve does love achievement unlocks!
Most cheap VPS providers would not go do that much work to decipher the root cause of the problem. When you have a server sending 1Gbps traffic, it's easier to shut it down than tail log files to figure out the cause. Digital Ocean can't do that for every customer that pays $5 a month. If you want a high level support, you should have picked a mid-level VPS like rackspace.
A do-at-home demo: http://matse1.matse.illinois.edu/energy/b.html

Note: I haven't tried these particular instructions myself, although I did do a similar demo around 20 years ago.

They used this, and maybe still do, at UIUC to heat the Vietnamese potbelly pig barns south of campus.
I think a lot of the pitfalls with unsigned types relates to the for loop construct being biased towards counting up. Consider the following code, the down for loop is really ugly and unintuitive, but the down while loop is symmetrical to the up loop. Maybe C/C++ need a counterpart to the for loop where the loop body executes last?

#include <iostream>

int main()
{
unsigned I;

// 0 to 4, for loop
for (I = 0; I != 5; ++I) std::cout << I << "\n";
std::cout << "\n";

// 4 to 0, for loop
for (I = 5; I-- != 0;) std::cout << I << "\n";
std::cout << "\n";

// 0 to 4, while loop
I = 0;
while (I != 5)
{
std::cout << I << "\n";
++I;
}
std::cout << "\n";

// 4 to 0, while loop
I = 5;
while (I != 0)
{
--I;
std::cout << I << "\n";
}
std::cout << "\n";
}
Interview with Koality Code's Jon Chu
"You could suggest that there is some other (unobservably distant?) region of the universe where antimatter dominates, but there's absolutely no evidence to support that suggestion."

That would validate the modern day myths crafted by science fiction and comic book writers. Future generations will look back and ask, "How did they know?"
Yeah, no kidding. Feeding and providing medical care for the Untouchables in India? She should have made an iPhone app to help find friends in restaurants nearby, that would have made he a real selfless altriust.
Are you using it for anything in particular which benefits from the touch input? If so, is the stylus an important positive?
It should take a lot more than an compromised web server to gain long-term access to data feeds from LexisNexus and D&B. Even if the web server let them make API requests into the feed, you would think a regular usage report would show a discrepancy in the expected and actual number of requests, or if they attributed them to some user, someone complaining about getting over-billed.

For 4 million requests to be injected into their feed from a compromised server, it would suggest that they have essentially no audit logs or accounting systems in place beyond the front-end business logic. I wouldn't be surprised if that's illegal in some states. Maybe the NY AG can take a break from setting up fake yogurt shops on Yelp to catch bad reviews and look into this...

"We could well be witnessing the death of knowledge-based authentication, and it’s as it should be,” Litan said. “The problem is that right now there are no good alternatives that are as easy to implement. There isn’t a good software-based alternative."

I also hate the KBA questionnaires, and hope they die soon. Some people are working to solve this problem using Facebook or social proof. I'm not too fond of that idea, although in certain cases like AirBnB type scenarios, I can see where a Facebook hook adds a useful data point.

One approach I've never seen used but which seems like it provides two nice strong 'factors' is to put a temp charge to someone's credit card and ask them to tell you how much it was for, and then clear it. That would prove they have the card (including CVV2) and also that they have the login credentials for the account.

I think the credit card processor I use doesn't charge anything at all for a temporary auth. And I know at least AMEX, Bank of America, and Discover will show the temp amounts on their webpage in real-time.

So it's similar to the ACH method of making 2 random small-amount deposits, which is also considered 'gold standard' for linking a checking account, except if you used credit card temp auth, it's free, and real-time instead of .25 and 1 - 2 days of lag.
Interesting, but I wonder how well it will do? Bootstrap is already very widespread and benefits from network effects. Foundation is a nice alternative to Bootstrap that appeals to people looking for such (I'm a Foundation user myself). But a third framework? Can it get traction?
That's not true. Why do you think that?
This is great. Where does the transcript data come from?
how about 'totaling 1Gbps'?
After 1 day or so i tried to reach my server but couldn’t even ping or ssh to my server. I thought that DO was down but the truth was that they’ve locked my account without any notification. Can you imagine this?

The customer is lying in this case?
Several paid-for certificates from a few CAs do just the same. If you're paying $0 for a certificate, don't expect more than ~$0 worth of identity checks!

It also highlights a critical SSL issue; there's really little strength in the concept of a certificate proving the identity of anyone.
XMonad seemed very promising, I was just afraid I would go yak shaving and learn haskell so that I could configure XMonad , hence just settled for dwm.
According to Ben's account, they did suggest to you that the droplet might be compromised. That is what they believed to be the case.
I was also tremendously happy with DO and their service. But what if you get your production apps down without even any notification and proper reasoning ? That's the thing which makes you feel insecure.
This is one of the biggest reasons I can't wait for alternative energy sources to become more prevalent. The Middle East will sink back into irrelevance.
Intel Shows Moore's Law Not Over With 14 Nanometer Gate Broadwell Chips