skysight-inc/HackerNews huggingface dataset:
> Huh?

As I said, precisely timing a bubble's demise and accurately estimating the magnitude of a correction so as to benefit from the correction may be damn near impossible for most of us. And even if you do time the market well and have a good sense of the size of a correction, you probably don't have access to the investment instruments that will allow you to reap the greatest rewards.

> I'm genuinely curious if you know anyone who has the ability to do this? If you know someone, I'm putting all of my stock in their company.

What do you mean?

Right now in the Bay Area, you have lots of folks in tech who refuse to recognize that today's hot market is in large part fueled by monetary policy. They assume that they have job security and will always be able to jump to another six-figure job with a phone call or two. As a result, many fail to save. And many spend a very large portion of what they make in unproductive ways because they believe their risk of loss of income is close to zero even though it is actually much, much higher. This[1] is a good example of the mentality that is particularly prevalent amongst younger engineers and entrepreneurs here.

You don't have to be a hedge fund manager to see the froth in the market today, and even if the fun could potentially carry on for years more, any individual in tech in the Bay Area can reduce his or her risk exposure by a) avoiding certain types of employers (even if they pay handsomely today) and/or b) taking the opportunity to save while compensation levels are so high.

[1] http://www.futurealoof.com/posts/the-san-francisco-safety-ne...
Hitchens is not an unbiased citation, not even close. He routinely engaged in character denigration of several religious individuals, most notably Mother Teresa. The main argument he seems to have had with her is that he didn't think religious people should be allowed to have political opinions, and she did. Here is a thorough review of his vitriol against her:

http://www.firstthings.com/onthesquare/2013/04/mother-teresa...

What is the most telling is the response to Hitchens from the order she founded, on hearing about his death.

Despite Hitchens' vicious attacks on Mother Teresa over the years, the saint's order in India, Missionaries of Charity, said that it would offer prayers for the renowned atheist upon hearing of his passing late Thursday night at the age of 62, after a battle with cancer.

“We will pray for him and for his family,” spokeswoman for the order Sister Christie told Agence France-Presse.

http://www.christianpost.com/news/the-atheist-vs-the-saint-w...
I don't see any benefit to using this framework to Bootstrap. The author lists the following pros and cons:

Pros:

- Published under the incredibly permissive MIT License (sure, I don't know enough about the different licenses to comment on this)

- Very well documented (bootstrap is very well documented, and has a huge community behind it)

- Seems to be easier to learn/use (that's subjective, but I think bootstrap is plenty easy to use)

- Has a Grid layout (yes... who doesn't use a grid layout?)

- Uses LESS (so does bootstrap)

- A very nice implementation of buttons, modals, & progress bars (again, subjective, but bootstrap has a great, and simple, button and modal implementation, haven't used the progress bars. also, <button class="btn"> is much better than <div class="button">, especially if you're going for semantics)

- Uses an Icon font for many of it's features (k, sure)

- Has some very useful extras such as the inverted class (so does bootstrap)

- Open to community contribution (so is bootstrap)

Cons:

- No image slider (bootstrap has this)

- No thumbnail classes (bootstrap also has this)

- No visibility classes (bootstrap has this)

- No SASS (does have LESS) (not really a con but ok)

- Not at a release >1.0

I'm not trying to dis the framework (I haven't use it), but the author is claiming that it is somehow superior to bootstrap and foundation and does not present any evidence supporting this claim.
I don't read printed newspapers, but do see it a lot online. I haven't noticed any particular sources which seem to be rabid abusers (other than the obvious, like rt and fox, which I ignore anyway).
Personally I refuse to entertain conjecture and hearsay, so I have no interest in making any assumptions or interpretations.
Qualys SSL Labs also has a great online tool that allows you to quickly analyze your configuration changes [1]. Highly recommended and a great resource if you're just setting up your SSL certificate, too, to make sure you have it set correctly.

[1] https://www.ssllabs.com/ssltest/analyze.html?d=news.ycombina...
Yeah, the Logitech F710 controller basically pretends to be an Xbox 360 controller, so it's very compatible.
We just scored F:
https://www.ssllabs.com/ssltest/analyze.html?d=scirra.com

But I'm not quite sure what I need to do to make it better?
They quoted 9x drawcall rate improvement. This is especially important on AMD APUs which are relatively weak on the CPU side.
Google Analytics data is anonymized and aggregated - it's very different than request patterns and sessions tied to a specific IP.
The island pivoted.
Other than the few years ago, what regimens have you tried?

Why did you go off the being really good, eating right, etc? (other than that you are human and it happens). Can you re-commit and give it a good try?

Have you read The Hackers Diet? Tried the LoseIt app? Gotten a fitness buddy? Do you limit exposure to binge eating triggers (such as TV commercials)? Do you make your diet decisions at the supermarket in the right way? There's much you can do before you try surgery. (I'm not saying it's easy at all, though).

Good luck with whatever you try.
The session ID is encoded into each URL or Form, and the request is signed using an HMAC-SHA-256 signature.
... in which case, these nuisance requestors will be executing a denial-of-service attack on legitimate requestors.
Yeah, the stock fonts on Fedora look absolutely terrible (especially on the web). To get usable fonts:

1. Install freetype-freeworld from RPM Fusion

2. Get the Microsoft fonts like Arial, Times New Roman, and Verdana

3. Edit your ~/.config/fontconfig/fonts.conf to contain the same XML under the section "Subpixel-hinting and Font-smoothing" here: https://wiki.debian.org/Fonts
Failure as a path to Success
>Is this referring to typical gzip compression in HTTP

Yes. It's a major vulnerability discovered in the past few months that significantly weakens the crypto.

Website Describing the attack: http://breachattack.com/

Django Blog Post: https://www.djangoproject.com/weblog/2013/aug/06/breach-and-...
+1

My public stuff all goes to github, and my private repos are all on BitBucket; virtually no cost to me that way and I use each service as it's promoted (imo).
The Second Coming of Java: A Relic Returns to Rule Web
It's not even "around". They're literally charging you money to wiggle your own electrons!
Yes and no. Depends on what you let open sessions do. For example, you can steal my Amazon cookies and dick with my wish list, or put a bunch of crap in my cart, or fill my recommendation list with weird stuff. But you can't buy anything because Amazon asks again for my password. (There does seem to be an option now to skip that, but I've never enabled it. Lets pretend I'm talking about the old Amazon.)
I wonder how they are planning to do forward/backward compatibility? If Mantle catches on, will it constraint HW development due its low-level nature?
Data Center Equipment for your Server Equipment
ServerLIFT manufactures specialized data center equipment to help your server equipment run optimally.
The Apache 2 license of Bootstrap is also plenty generous. MIT isn't really much of an advantage.
I'd rather disconnect my web server, it'd take less effort and receive the same number of visitants.
Data Center Equipment for your Server Equipment
ServerLIFT manufactures specialized data center equipment to ensure that your data center server equipment runs optimally.
They were given medicine, not just a place to convelesce, but even just providing a place to convalesce is a great mercy to people who were (and often still are) dying on the sides of the street, thrown away by their society as if they were nothing more than trash.

But then, what do I know, I am sure that you must know vastly more than I do, seeing as to how as a Christian I must advocate against education now. I should write letters to all of the universities I have attended, asking them to please revoke my diplomas on the basis of my religious freedom.
He gains not only hosting value from maintaining the instance, but also the experience. And the experience is a valuable asset that you can't really buy with money.

Obviously, a sort of pre-built image to spawn "own" Gitolite/Gitlab/whatever instance would be nice, so noone but those particularly interested in the process would have to spend their time setting things up. But I suspect such images/build scripts already exist, it's just that I didn't even bothered to search for them.
Even were it possible, the zeroes of games supporting Xenon or the PPE would be, uh, a problem.
Yep, it is based on the northern hemisphere. Generally, the football season starts from Aug to May (in Europe) so the WC is usually held on June-July.

AFAIK, Australia's bid was for June-July 2022 and if FIFA changes the date, there is talk that Football Federation Australia will ask for recompense on their bid < http://www.theguardian.com/football/2013/sep/17/world-cup-20... >.
SSL/TLS is entirely a server/client exchange that has absolutely nothing to do with IP addresses. If you get the wrong certificate, you have either a crappy client, a crappy server, a misconfigured client, or a misconfigured server. For each case, there is a workaround, and that is where the inconvenience lies.
Hey, thanks a lot! I'll try this when I get back to my Fedora machine. Thanks again.
What, and people haven't been ragging on and even trying to replace OpenGL for years? Everyone used the GPU-specific API rather than OpenGL on PS3 to make it harder to port their code, not to get the maximum possible performance? The "leading game developers" that allegedly inspired Mantle aren't going to show?

Standards are great, and I'd love OpenGL drivers to be as fast as possible, but OpenGL being what it is, this API seems pretty interesting to me.
I wonder if that is vs DirectX (easier) or vs OpenGL (harder).
Remote Team
Except not even 99.9995% of your customers will know or care about the level of your SSL Cert.

It really does not add anything to the equation. Just extra costs and work for you.

It's been studied and pointed out that a green-bar does nothing to conversions and sales.

I suggest skipping it always, but often times a higher business type will override the suggestion of whomever has to implement it and maintain it - simply because they really don't get it or don't care about the cost (which isn't really that much, but still, you have to jump through hoops getting the docs in order).
The richest people are refusing to pay for labor, enslaving human beings instead - insanity.
Babies are also conceived near fracking sites. I wonder if there is a connection ...

Methane coming up from the earth is not uncommon. Considering that 10,000s or 100,000s or more years worth of decayed plants and animals were buried under the earth. Strange that it is coming to the surface of a brand new island.
I'm optimistic. Economies go up and down, sometimes in long cycles, but I think this is bound to turn for the better eventually. I'm doing fine financially and have a good job even in this economy, software development still seeming to be a growing field, but I have some friends with other degrees (or no degrees) in a lot worse shape than me. So I hope for them my optimism isn't wrong.
"It's more akin to philosophy than to science"

Exactly. I'm sure Feynman had a beautiful mind and we should rebel in his thoughts. However, let's not mistake that for science.

On a similar note, I had an idea where telescopes looking at very distant galaxies were just different states of the same galaxy - the milky way - as it evolved through time and through different space-time / gravity lenses.
Haven't tried ngrok yet, but maybe someone can tell me how it's different from creating an ssh tunnel (in a case when I do have a server/vps with public ip running sshd) ?
I didn't know that webrtc was limited to two users. If it is how does opentok get around that? My understanding of webrtc was that it uses UDP so it can get around firewalls and such by using STUN or things like that. So my experiments with webrgc used an open source library that was using some Google sever and the author of the library's server for making connections and also firebase. I think k the guys name was muaz Kahn or something. Anyway I think all you really need servers for is the initial connection establishment. And there are free servers up providing that. So if webrtc truly has a limitation on 2 peers then I doubt opentok actually has any magic patch for webrtc.. maybe they have a script that creates a bunch of Iframes or something.
When is the VP9 support coming?
A few relevant notes from AMD's Twitter at @AMDRadeon:

- Collaboration between AMD and DICE/EA

- The Frostbite engine, used in Battlefield 4, "will use "Mantle" low-level API instead of DX11 on compatible Radeon GPUs."

- "Mantle enables 9x more draw calls per second than any other APIs by reducing CPU overhead - works with all GCN GPUs!"
According to a very recent study done by NN Group, carousels are often ignored, but can be implemented effectively if certain rules are followed:

http://www.nngroup.com/articles/designing-effective-carousel...
Surely those (ieee.org) articles are dupes.

For once we have an announcement that isn't about some advance that might lead to something 5 years down the line. They built an actual computer. Wow.
The HTML5 Scorecard: The Good, The Bad and the Ugly in iOS 7
Gem for checking sandi metz rules
We are waiting for Google to officially release a libvpx version for VP9 decoding...

It seems to take a long time: http://git.chromium.org/gitweb/?p=webm/libvpx.git;a=tags
What an angry person.
There is a opportunity for performance improvements by making the API calls more practical for the hardware and unifying the design. Comparing an API at this level to OpenGL API exposes your ignorance.
I ride motorbike for about a year now. In the beginning having a navigation hints voice over bluetooth was the only way. Now when I'm confident driving I can just use the navi mounted on the handlebar. Just have to look at it now and then.
So I think all time on navigation on the visor is a bit too much. If they would find a way of keeping just an arrow most of the time and only show a map when needed ...
These kinds of seemingly random suspensions at DO are starting to concern me. I've got a service with ~10K active users I'm migrating to DO as we speak, but man! I'm starting to feel like it might be professionally negligent to do so if they're trigger-happy with shutting down instances.

It'd be nice if DO had some way to communicate "hey, this VM matters to my business, PLEASE don't do anything stupid/automated without contacting me first", but that's probably too much to ask for the cost.

Gah. Back to AWS. This sucks. :/
(note: in chrome this is not 100% true, some certs are pinned by having their trust hardcoded. its a very small list, require browser update, and of course, you're still trusting a large CA anyway)
For me the biggest concern I had when I looked at this was to what degree it could compromise the safety characteristics of the helmet, in particular:

1/ Anything that reduces the amount of compression available from the internal foam will significantly reduce the main benefit of a helmet in reducing brain damage.

2/ Anything that increases weight will aggrivate the main drawback of a helmet (giving your head more leverage to wrench your spine in an accident).

3/ Similarly any tethering or external modules are going to risk wrenching your neck in the event of an off.

It looks incredibly cool but I can't help but think it compromises most of the safety value I wear a helmet for in the first place.
Nest Announces Developer API Program
Yes, BREACH exploits HTTP body compression so this means typical gzip compression in HTTP results (see http://breachattack.com, http://en.wikipedia.org/wiki/HTTP_compression#Security_impli...).

Full Paper: "BREACH: Reviving the CRIME Attack" (http://breachattack.com/resources/BREACH%20-%20SSL,%20gone%2...)
I agree and disagree. Not all adversaries have active intercept capabilities. Some are just passive. Defending against them isn't entirely pointless.

I really, really dislike the CA cabal. Self signed "encrypt only" certs combined with auto cert pinning in browsers would probably solve 99% of the problem.
They don't provide an EC or DSA CA (only RSA)
you are limited to 1 domain + 1 alt name (the main domain) per cert

Those aren't horrible trade offs tho, but yes, those are limitations.
It's not only that, but look at all the steps they have taken in the last 12 months:

1) Convince Nvidia and AMD to improve their Linux graphic drivers - probably by promising them additional revenue from Steambox sales - to lay the groundwork
2) Port Steam to Linux, start porting their own games
3) Build a Steam-based Linux distribution and make it available to everyone
4) Find partners that build custom hardware to run SteamOS

IMO Valve is trying to achieve two goals with this. The first goal seems to be to hedge their bets OS-wise. Gabe Newell was quite explicit in his criticism of the road MS has taken with Windows 8. Valve may very well view this as an existential threat to their business model if MS for instance takes the Apple route of promoting app store downloads over the old way of installing software. Thus, it makes sense to work towards an alternative platform that is not entirely controlled by one company. The second goal would be to introduce a new competitor in the console market by leveraging the existing Steam ecosystem and game catalogue. The beauty of this strategy is that each step adds value on its own even if the ultimate goal of establishing Steamboxes should fail
I personally know the crew of hackerlist. I can say that they are working hard to provide well paying work for hackers. Definately a + to our community.
Yes, I did. Did I say something that leads you to think I did not read the link? Or were you just trying to belittle me?

I am aware that anyone can request that list. It is public info. But for a lot of people so concerned about "privacy while in public" these days... no one seems to care about the privacy of these people. It just seems a little hypocritical to me.
Unless you visited the site before. (like ssh).
Or if the trust was provided through another channel (DNS).
I love how they call it "Semantic"UI and then go and use an icon font.
There's an effort to bring these features to OpenRC which works on Linux and FreeBSD, but the Gnome developers have shown absolutely no interest in assisting the project, even though they'll be limiting their own share of the desktop environment space.
Amazing piece of software.

Somehow still can't figure out how to do the one additional thing I want (above and beyond what I have already sorted out how to do), which is quit the player and re-open it later at the TS of where I left off with my video. :-)
If somebody can tamper with your HTTP connections on the fly, they can surely rewrite the DNS too.
Firefox is throwing a "This Connection is Untrusted" alert on attempting to load resthooks.org via ssl. Someone should probably look into that.
Hackathon tool kit
Pretty cool feature set. Didn't realize you could do things like "remember where I parked" automatically.
> i have two github accounts. one with my real name another with a pseudonym.

Until relatively recently (at least that was the case about an year ago) having multiple GH accounts was a TOS violation. (And I needed a pseudonymous account, so that drove me off to BitBucket.) They seem to have changed that, so you're not allowed to have more than one free account per human.
time-based parental controls

It will be small, put it away in a cupboard when it isn't being used like any other toy.
What web server are you using.

the big one is you need to remove the following cyphers:
SSL_CK_DES_192_EDE3_CBC_WITH_MD5 (0x700c0)
SSL_CK_RC4_128_WITH_MD5 (0x10080)

and disable sslv2
Things to Remember When You’re Feeling Spent
So, do you want a replay of Iraq or a replay of Vietnam?
That sounds even worse than:

> "I watch people poll APIs or create convoluted connections, and I cry a little on the inside."

If the action being sent by the webhook is really important, there seems to be no way around doing it somewhat like this: Write a polling (or hanging-get) system, but use webhooks as an unreliable but lower-latency push mechanism.

In this setup, webhooks give you low-latency updates (when they work), and polling ensures completeness.
My Ubuntu boxes run Unity, but my Fedora laptop runs Gnome and I'm quite happy with it. Unity is a better fit for small screens, but Gnome is just fine.

It's true some fine tuning is no longer easy to do and that the Gnome team makes some decisions I disagree with, but, all things considered, it works and stays out of the way.
The API exposes several range-to-iBeacon constants, in this case they're probably going for touch (aka immediate) so your iPhone knows you're trying to set up the Apple TV, instead of popping the dialog on every phone in range.
Who would you use as an example?
> It would make it easier for [...] consumers to make a choice.

Because no choice is as easy as no choice?
I am running VLC 2.0.8 on windows, and when I check for updates, it says I am up to date. Am I on a different release channel? Anyway, I switched to VLC 2.1.0.
Do you want the US to invade Qatar? Maybe establish a puppet government? Or just invade, leave, and see what happens?
Please check out our new feature trailer for +WoundDesk
+WoundDesk, a mobile health app for professional wound care to reduce costs, time & errors.

https://vimeo.com/74493262
It would require UI on the phone to start the setup process. Or an app to download and run.

By leveraging Bluetooth LE, every iPhone is always ready to start setup, without the significant battery hit that would have previously required.
Running it on an Atom with Intel graphics here (netbook driving decent monitor). Works well as long as I don't have three open Gmail tabs.

The Radeon drivers must be terrible.
As with every major release, we usually wait for a week before activating it for normal people :)
Great, this sounds like Apple is going to compete with NFC.... you know, a real standard. Like FaceTime, oh wait, like iMessage, oh wait, like AirDrop, oh wait.
Apparently shuffle is still not working as intended... Man this issue must be around for ages now.

This problem makes VLC useless as my default music player :'(
I came across http://blog.iron.io/2013/01/queue-webhook-events-with-ironmq...

This is pretty sweet, but it seems like it might be more useful for the baked-in reliability to be on the remote end.

That is, the side sending the POSTs should notice that it didn't get a 200 reply and retry some number of times with backoff. Also, the POSTs need to be idempotent (include a sequence number or nonce or something) so that if the "200 OK" gets lost and the sending side retries, you can discard the duplicates on the receiving side.

That's of course a lot harder since you have to convince everybody whose service you want to use that this is worth the time/effort :)
Also you need to support SSL as well as TLS if you want to support IE6, and surprisingly - Stripe webhooks (see my blog for details).