skysight-inc/HackerNews huggingface dataset:
Webfaction enabled SNI on all of their servers in December 2011 [1], which means you no longer need to buy a dedicated IP address to use SSL. In fact, when they made this switch, they switched my server over to SNI automatically and stopped charging me the extra $5/month automatically. Awesome!

A small fraction of Internet users on extremely out-of-date system cannot use SNI. If you need to support those users, you will still have to buy a dedicated IP address. I personally don't bother (if you're running IE 6 on Windows XP, you have bigger problems).

This is a great guide! I did the exact same thing several months ago and am very happy with the result. Enough with the excuses not to deploy SSL!

[1] https://blog.webfaction.com/2011/12/server-name-indication-e...
If you host with SingleHop, they allow generation of unlimited SSL certificates. [1]

[1] Ex: https://ianthedeveloper.com
I use Gnome 3.8 with my archlinux, and I've tried it because it was giving me the least problems, now I can't touch anything else because it just seems slow and not as intuitive. It gets under your skin in a good way.

The best thing about it is also when it gets "a bit funky" it's as easy as "alt+f2 r" to fix it and have it running as good as new.
Indeed! (dudeinwhite)
I think Pete is right on. Content marketing as a by-product of engineering, especially open-source engineering, is only going to become a bigger part of recruiting. Just look at GitHub. Super engineer-driven company, incredible content marketing generated by their engineers that helps them find folks.
I don't think they're that bad, but they're inconsistent.

Part of the whole thing about going flat is to rid yourself of unnecessary decor. This also means moving away from extreme levels of detail in favor of big, bold symbology - whittle down to the basic symbol and use that.

I think they've done this well for NYC and SF - large swathes of color, immediately recognizable symbology, and large undetailed shapes that are still recognizable.

Ditto Japan, though that one sort of derived itself.

Berlin, London, and Shanghai are weird though. Berlin and Shanghai especially - highly detailed silhouettes on what is otherwise a very spartan backdrop. Seems incongruous, especially when paired with the first two icons in the set.
I (dudeinwhite) attempted to talk but I kept bugging out :(
Excellent. Congratulations :)
If you do this, execute the future on a different dispatcher so you aren't blocking the default dispatcher.

This can cause problems if you tie up the default dispatcher with blocking SQL queries while using clustering: the cluster gossip won't be able to fire and if your failure detection settings are low, that node can be marked unreachable by the rest of the cluster.
Thanks for the suggestions. I had been considering making the sample chapter more prominent.
Do they keep a list of people who FOIA the FOIA list?

I bet that makes you doubly suspicious.
> Not if somebody modifying it to use with his own marketplace, which is unlikely but possible with the open source software.

People have been doing that on PCs for ages. So far Valve seems to be doing well with "well, then, we'll just outcompete" as a solution to that issue.
I now understand that they are not using scare quotes in this case (which is what my mistaken objection was to), but I don't think that would be hack journalism. They still don't quote like that for the phrase "sex slave" for instance.
Almost 1 in 5 people on the web are still running Windows XP. No version of Internet Explorer on XP supports SNI. Neither does Safari on XP, the browser in Android 2.x, the BlackBerry browser or Opera Mobile before 10.1. It may be a minority of users, but it's not just "people who are still running IE6".

Pretty much everyone would love to use SNI; site owners wouldn't have to pay for extra IPs, hosting companies wouldn't have to worry about securing and allocating them just for SSL use, tons of IPv4 space could be put back into circulation, and CAs would be able to sell many more certs. Unfortunately the group that can't use it is too large to ignore, so none of that's happening.
I've switched from Solr to ElasticSearch. They're very similar, but ES is easier to maintain and has some nice additional features. They are both based on Lucene and are both fantastic projects.
I believe "interactive content" is the key difference. I.e. non-static pages served via CGI.
Smart move. I think it's time for Marissa/Tumblr to buy doctape now ;-)
At first I thought this will have to do something with steam powered machines[1]

[1] http://1stclass.mylargescale.com/scottychaos/steam_washingto...
I tried hard until 3.4.2, then I stopped trying and started running the "fallback mode".

Now I'm happy. Now I understand that trying to use it when it forces you to change your workflow is a terrible idea. I needed months to get used to the new desktop and a week to completely forget it.

So I guess I'm a Gnome 3 user without really using Gnome 3, if that makes any sense.

Edit: formatting
I just recently enabled SSL on my business website. It was anything but simple.

First of all, I had to get a dedicated server, because a bunch of other sites were running on the same server, and the hosting company doesn't offer additional IP addresses.

Then I wanted to get an SSL certificate. I picked Comodo, because they seemed to offer the cheapest full business validation certificate, but then accidentally bought a domain only certificate because their marketing was so confusing. Their friendly customer service walked me through a complicated process for changing my order.

To get the certificate issued, it took me a week to collect the documents they requested. I had to make sure my business was listed in the yellow pages, so they could send me an automatic phone call for verifying my number.

After every step in the process, they told me to log into their online management area, which was offline from time to time.

I had to confirm my email address by clicking a link about a dozen times. Half of the emails were missing the confirmation link.

Twice I got an email telling me my order will soon be processed, and nothing happened for two days. I had to open tickets in some online support area or send them emails to get them to continue processing.

All in all it took me a month to get SSL working. Now I understand why so many sites do not use HTTPS.
As siong1987 mentioned, Cloudup was previously LearnBoost, creators of socket.io which came from heaven and replaced the horror that was Orbited for real time abstractions around websocket.

I'm happy for them that they ended up at an awesome company.
That isn't true.

The wireless controllers for the 360 work just fine with the PC. I personally swap mine between them all the time.
Fun fact about Startcom (providers of StartSSL): they were the only certificate authority that the "Comodohacker" responsible for breaching Comodo, Diginotar, and others, was unable to hack. [1]

[1] http://www.informationweek.com/security/attacks/how-startcom...
Any IExplorer on Windows XP, Safari on Windows XP, Android 2.x, Blackberry, Symbian, Java before 1.7, Windows Mobile up to 6.5 ... the list is quite significant. Depending on your target, you can easily talk about 25% of the traffic.
Unless you're very wealthy and know how to exploit various loopholes...
Excellent guide but unfortunately StartSSL does not support all top-level domains. I went through the trouble of registering with StartSSL, they even issued a client certificate for my email account at .tk domain, but they refuse to issue SSL server certificates for any .tk domain.

Even though this is a perfectly legitimate top-level domain (yes I paid for a real .tk domain, and I fully control the DNS settings just as any other domain — it is not a free web-based redirect domain, which the Tokelau NIC also offers), StartSSL does not let you choose it when requesting a certificate. They have a drop-down of supported TLDs, but .tk is nowhere to be found (and you cannot edit the HTML to submit this domain anyways, it will be rejected by the server). Initially this appeared to be a simple omission, but investigating further revealed it was an intentional decision to not allow issuance of SSL certs to .tk due to "abuse".

Quite annoying to have purchased an apparently legitimate domain, only to discover it is considered "second-class" by certain online services. Now I am faced with a decision to buy another new domain at a more reputable TLD, switch all my servers and services over, or find another SSL issuer which supports .tk. CACert appears promising, also issuing certs for free, but sadly they are not widely accepted by browser vendors. A paid SSL authority would likely issue a cert for .tk, but at this point I'm inclined to not use SSL at all, or stick with my own self-signed certs (I mainly use my server for personal services, so wide accessibility is not a major concern, but having a "real" trusted cert would be nice).

Does anyone else have any experience with acquiring SSL certs for less popular TLDs? I picked .tk because a short and easily recognizable domain was available, got in before many of the better names were snatched up as in .com, etc, but perhaps giving in and buying a longer domain name at a popular TLD is worth it if it means StartSSL and other services will consider it more trustworthy.
I'm not very knowledgeable about this, but I thought quantum entanglement didn't allow for FTL communication? A lot of times the way quantum entanglement is explained makes it sound magical but here's a non-magical scenario with no fancy terms (like quantum superposition, qubits, or wave collapse):

Imagine you create two entangled particles, A and B. They have a number of properties, like momentum, position, and spin. Let's use spin for this example. You don't know these values yet, since they've never been measured—they could have clockwise or counterclockwise spin. However, you know the particles have opposite values. One is clockwise and the other must be counterclockwise. You then allow them to travel really far from each other, and you measure the spin of particle A—let's say it's clockwise. Because of that, you now know that particle B must have counterclockwise spin. You just learned something about a distant particle instantaneously. However, the data didn't really travel anywhere. If you interact with particle A, and change its spin to counterclockwise, particle B won't be affected. So you can't manipulate one particle to have effects on the other instantaneously (or faster than the speed of light).

This explanation seems pretty intuitive to me, but correct me if it's wrong.

EDIT: It almost seems stupid that there would be a whole theory based around this, since one would think we can just say particle A was clockwise and particle B was counterclockwise the whole time, but there is an important distinction to be made. We can't just assume they were in a certain state before we measured them. The whole premise of quantum superposition is that before being measured, the particles are a "superposition" of both states—for all we know they could both be either clockwise or counterclockwise. Just because we then measure them and determine what they are doesn't mean they had a single state before they were measured—that's an assumption. Removing the assumption creates so many consequences that we now have a whole subfield of science dedicated to understanding this stuff.

So back to the particles, if they're in both states before one of them is measured, and now they both have to resolve to one state, in some sense there is something traveling between them, letting the other one know what it has to be.
Morality 2.0
I was under the impression the private key for authentication to the StartSSL site was generated in the browser with the keygen tag, not on the server…
I'm ambivalent on the topic. Sure you can instill the values of proper time management into your kid and hope they abide by them when you're not around. However, I don't feel it's unreasonable to have an automated solution for this kind of thing.

Just like I'd love to have automated lighting in my home, or automated curtains, or a computer that will automatically turn on at certain times, sometimes it's also nice to have a things that automatically turn off after a while as well.
Gnome 3 sucks without good graphics drivers, it's very laggy and feels heavy.

On my laptop with Radeon HD 3200 using the open source drivers (from Fedora 19) it's hardly usable and spins the hell out of the fans.

Thanks god for MATE.
Kind of funny how a lot of people are all bent out of shape about surveillance, privacy and what not. But then this guy published a list that the FBI has of people who have requested a lot of docs... and he included their full names. I don't think it is unreasonable at all that the FBI keeps a list of people who are making a lot of FOIA requests. That is their data to track if they want to. But I do think it is irresponsible for the guy to publish all those names.
John Sheehan, of Runscope.com (which, by the way, is a super rad tool for API developers) did a great roundup on receiving webhooks for testing: http://john-sheehan.com/blog/a-survey-of-the-localhost-proxy...
I would worry about this obscuring vision at a bad time.
That's quite understandable, I'd say it's pretty ambiguous.
Towson jumps to No. 2 in coaches' poll; Northern Iowa enters top five
Yep. Sadly true. We as an e-commerce provider would loooove to enable it as well, but we have to be able to cater to all users for the most part.
It's not age. C is older than Perl by decades, but I think C is a lovely little language. Lisp is as old as FORTRAN (almost) and I think it's probably the most elegant language invented yet. No, my quibble with Perl is that in throwing around implicit state everywhere (in an effort to make programming languages more like human languages) Perl is just bad as a system for building complex systems. It's not unique in this regard - Perl shares its weakness with the shell scripts it was supposed to replace.
There are some minor caveats, but nothing really worth worrying about. Most browsers accept StartCom certs these days, so that's not a concern unless you're supporting ancient systems. The big difference is in how much validation is done.

The cheap certs only offer domain verification; in other words, they verify that the person holding the certificate owns the domain in question. Typically via an automated email to one of the contact addresses associated with the domain. The catch here is that you're only allowed to fill out the CN= (domain) field in your cert; the others are blanked out. For what most people use SSL for, that's sufficient.

The more expensive certs will go a step further and verify the identity of the entity or person holding the certificate. This entails things like checking your articles of incorporation if your'e a business; things that tend to require a human operator at the CA reviewing your submission. In return, you get to fill out more fields in your certificate. However, nobody ever looks at the details for certs, so this is pretty much wasted money, IMHO.

The only point at which the more expensive certs get you something of value is:

1. You pay to get a wildcard cert, which lets you use your cert on as many subdomains as you want. If you actually need it for technical reasons (e.g. you let users create their own subdomains), this might be worthwhile. Most folks won't need this.

2. You pay to get an "Extended Validation" or "EV" cert, which gets you a little green box in the address bar with your company name. There's strict requirements on identity validation to get these, and it's supposed to engender more trust on the part of users. They're also very expensive. Personally, I suspect nobody really cares about these and it's just a racket for the CAs. But opinions vary.
An introvert does improv
My experience has been positive for Gnome 3.10 (I'm running Fedora 20 nightly).
I don't feel to be more productive using other DEs though I can certainly
switch between them easily (I do coding, graphic design, and 3d modeling).
The majority of the changes listed on that page just made it look and function
a lot better overall. I think they're headed in the right direction.
Researchers Build a Working Carbon Nanotube Computer
I'm having trouble understanding why a bandwidth bill for 1.5tb is an achievement.
It's worse than you suggest. XP doesn't have the StartCom root cert unless the user has installed a manual root cert update.
For "b" I use a combination of xdotool & wmctrl to move stuff between the monitors without the use of mouse.
"Indian Ocean"? Its called the Arabian Sea.
What is the smell of fear?
And you thought Ellison missing OpenWorld wasn't worth it? He totally used his mojo to help them win. Well, at least $300M of it.
...as it stands there is no such evidence of that.

There have certainly been allegations of it, including on this comment page. Why should we assume the best possible interpretation of how Qatari projects might be staffed with manual labor? Based on the little I've learned, any assumptions I make are more likely to go in the other direction.
I'm on Debian with Gnome 3.8 and been quite happy overall.

I was recently working on a Gnome 2.x machine and couldn't believe how terrible and difficult to use it all seemed – even though I used 2.x for many years.

I'm not sure where all the Gnome 3 negativity came from. But I understand that a small detail can be enough to derail your experience with it. In my case, that would be the "Launch new instance" behaviour: clicking on the launcher focused on the existing instance, instead of creating a new one. But with a tiny gnome shell extension it was resolved. I have other extensions installed, but that's really the only one I want to keep.

I think the flak and hate they received was disproportionate… But then, pretty much the same happened with KDE3->KDE4, Win2k->WinXP, WinXP->Vista, Win7->Win8, and more recently with iOS6->iOS7. About the only time where a major UI change was introduced without too much trouble, was the MacOS9->MacOSX Public Beta transition; but I suspect there was just as much grumbling from the people on OS9, it just may have been that their voices got drowned out by the excitation of the new users attracted by the new "lickable" interface.
No, it emphatically does not mean that. In fact, this announcement makes it sound even more like they are going to abandon it. As far as I can gather from this announcement, they're releasing a very small number of units for beta testing, and then they're getting out of the hardware game and letting third parties carry the torch.
You could likely FOIA that list as well. It would be sweet to inception the FBI until it stack-overflowed.

We've all cursed the FBI recently, but now we can recurse them.
Sony might have a chance of it with the Vita TV, but that has as much to do with PS4 streaming as its native games.
Late edit: Here's an example of a multi-sensor music application that I'd call much closer to 'true innovation' - TouchKeys. http://www.kickstarter.com/projects/instrumentslab/touchkeys...

Instead of making a sensor array to just replicate machines that already exist, it is a sensor array that adds a new dimension of creativity and expressiveness. Its these types of innovations we should really be celebrating. I imagine this will be the new norm for high end keyboards in the future.
"Revealed?"

Where have you been? How is this news?
If you just want the security of SSL, don't bother with the EV certificate. It's hugely easier.
I'm glad this is getting attention. I was in Germany in July and watched a ~1h documentary about the working conditions there. Confirming what is written in the Guardian. The image I saw in the documentary were extreme. No access to clean water, no access to working bath rooms, no paying. They're also lured into coming there being promised a better life and once they're there they realize it but it's too late.

There has also been a report on it in March from Spiegel:

http://www.spiegel.de/sport/fussball/wm-2022-internationaler...

I usually dont' quote BILD, but they say the workers get paid ~0.78 Cent (EUR) an hour:

http://www.bild.de/sport/fussball/wm/arbeiter-werden-wie-skl...

No air conditioning when it's often over 50 deg. celsius (~122 Fahrenheit). This could explain the many hear failures noted in the article.
Would you not get the mean height above sea level of all points along the border and divide that by the mean height above sea level of the entire state (which I guess is really an average of some sampling of points)?
Hey, different strokes for different folks.
I would be willing to bet over 95% of SSL-secured sites don't have business validation certificates. Given virtually nobody visiting your site will know what that means, let alone how to check anything about the certificate you're using, it just doesn't make sense to pay extra for no benefit. A domain-validated certificate costs less while providing the same padlock icon and level of encryption, and takes just minutes to obtain -- pay, paste a CSR, click a link in an e-mail, and you have a cert.
Someone should probably point out: most of your problems were related to doing full business validation from a crappy provider. Business validation is optional and doesn't enhance the transport-layer security benefits of using SSL.
Patrick d'Emmabuntüs: Emmabuntüs is more than a Linux distribution
An Argument With Instruments: On Charles Mingus
This man should know. ;)
No thanks. I definitely don't want a site to have the ability to set my clipboard. It will be much easier to help spread malicious links (visiting a site using paste and go). Plus what about the annoyance of having something in your clipboard that you were going to paste somewhere then due to visiting another site it gets wiped?
You're a hundred percent correct; the BBC News story is more intelligently written: http://www.bbc.co.uk/news/world-asia-24272552
I am thinking it was more for the team, knowing what they are capable of. TJ and Guillermo are very well known developers in the node.js scene. If you ever used node.js for web development, you have used some of their work.

https://github.com/visionmedia
https://github.com/guille
The diet that saved Novak Djokovic
That's not really the same.
Teardowns reveal Apple's customary high margins for both iPhone 5S and 5C
.tk domains are probably restricted because they're free to register, thus are heavily associated with abuse. Abusive websites with certs that haven't been caught could be misleading to users. That's my guess, anyway.
This is not in the US, so the US concept of free speech does not apply (the law is much more complex in common-law based jurisdictions)

Yes the US "free speech above all else" interpretation of "right to free speech" doesn't apply in many countries, but the US is also (mostly) a common law system. It's the particular judical interpreation of "right to free speech" in USA and other countries, not the common-law-ness, that's the main difference.
> "There were dead fish on the surface. And on one side we could hear the hissing sound of the escaping gas," Mr Baloch said.

> Though they couldn't smell methane, they did put a match to the fissures from where the gas was oozing, and set it on fire.

> "We put the fire out in the end, but it was quite a hassle. Not even the water could kill it, unless one poured buckets over it."

Yes, this is what I always do when I encounter dead fish and an unknown source of hissing gas: light it with a match.

"Move fast and break things!"