skysight-inc/HackerNews huggingface dataset:
I am a bit mystified by you warning people off SSL. It's complex because the problem of establishing a trusted channel between two unrelated parties is complex. Simpler protocols with the same constraints have failed.

You should be clearer with your recommendation. If you can relax the constraint that the protocol has to work between strangers, then SSL offers functionality you don't need, and the actual interface to SSL has moving parts that might hurt you.

Most people who build crypto can't relax that constraint, even if they think they can. We've beat several schemes that relied on pre-distributed public keys because of the out-of-band channels that wound up getting grafted on to bring new members into the group.

Finally, verifying a certificate chain isn't hard. It's constructing a verifiable certificate chain in the first place that has proven difficult. If IE7 didn't offer the "bad certificate" click-through warning, and simply failed the request, we'd be discussing the right problem instead of the red herring.
Newest Arctic Melt Record Leaves Scientists Scratching Heads
Well, talking about having a 2.6% market share of.. all of advertising is disingenuous at best. If they do something morally incorrect, it happens in the market segment they totally own.

It's just a distraction. The bigger a company gets, the closer the probability that they do something evil gets to 1.
As clunky as we may be biologically, our technology rarely if ever approaches being as good as the biological equivalent that it seeks to improve on. Not saying it never will, just saying it hasn't yet. Even when we think we've beaten the system we usually end up paying for it in spades with some trouble that pops up someplace else. Things that work WITH our biology tend to be more elegant. (Laser eye surgery vs. chunky bits of optical glass in frames perched on our noses for instance).
Ah - I see, essentially:

"Don't use a signed server certificates, etc... when you don't have to, instead use a RSA public key."

It was the OpenSSL thing that confused me. I forget that TLS is way more than RSA over TCP sometimes. Thanks for the clarification.
The 7 Best States to Start a Business
faqbotic.com
That's exactly what I meant -- they have to have the ability to associate an identity with an IP/active network connections, which usually means recording it at the time that access is first granted. (Doing otherwise usually indicates the to subject of surveillance that they are being watched, which is generally considered undesirable by the watchers.) Noting someone's name along with their DHCP lease is very much not the same thing as recording all traffic to and from that IP.
I agree with you, but the amusing thing is that all of these problems could be solved with a simple contract. Lease with option to buy at set price, or guarantee to sell unless breached, etc.

Its probably a 1 page contract, even. The real issue is trying to enforce it if someone defaults on that contract - it could get impossible/expensive if they are out of the country.
My initial thoughts (literally - written as I'm browsing the site and things pop into my head):

It's a tad more expensive than Linode, although offering slightly different plans, and a tad less expensive than Slicehost for many plans.

The ReadyStack is neat, but I'd have to see if it's how I'd want my stack. I guess I shouldn't gripe about having to spend a few dollars to get a ready-made stack as long as it's the stack I'd want (which would be Ubuntu based). Also, why do I have to have phpMyAdmin or phpPgAdmin? That means that I have a walking security vulnerability on my server as well as having to have PHP on my box even if I'm not using it.

There's no information about high availability IP failover situations. Not important for a lot of people, but still.

No Amex acceptance? My company only gives us Amex charge cards. If I recommend this, it would mean putting it on my personal card and filing for reimbursements each month. Not what I want to do.

Location? Slicehost is St Louis and now Dallas-Ft Worth via Rackspace's data center. It's nice to know. Linode even lets you choose where which can be neat, if not that functional for many.

Why should I go with a new company when Linode and Slicehost are so well established with a long track record? No great answer.

No backups yet. It's a huge selling point for my IT director on Slicehost and Linode has it in beta now.

--

Well, that was my impression browsing the site. It looks really slick, but is there a reason to cause me to change? prgmr.com offers significantly cheaper prices which gives me some reason (even if they have drawbacks). That's really where I am. There's no big reason to choose Webbynode over alternative providers because I'm comfortable installing my own stack. But there might be lots of people who would want that ease.

Looks slick. Looks like great work done. Looks like it will be good for people, but not what I need. Good luck! Always nice to see more competition in this space!
I'll certainly write to them. Thanks for the suggestion!
This is a meme that needs to die. Users of SSL routinely fall into behavior traps that ruin the security of SSL. That doesn't leave them secure: it leaves them screwed. The problem that SSL is solving (and that applications are failing to solve) is hard.

If you can establish relationships between members of your protocol, you can rely on continuity for security. Continuity is what SSH uses. It's easier than authority, and it's sane to recommend that people take advantage of it when possible.

But when your users will constantly be enrolling new participants into your system, continuity becomes a huge design risk, just like how everyone used to lose their SSH keys to sniffers at Usenix Security.
What we never talk about when we talk about abortion
You might want to create your own original "feedback" image for the tab on the left. Yours[1] appears to have been copied from uservoice[2] (probably a leftover from deciding to use their feedback or use your own, am I right?).

[1] http://www.fromabirdie.com/images/feedback_tab_white.png
[2] http://cdn.uservoice.com/images/widgets/en/feedback_tab_white.png
My understanding is that CALEA effectively requires you to associate an identity with each active network node, so that requests for a "wiretap" could be addressed more or less in real-time, rather than after the fact. Being able to tap into hardware to observe active network streams is only one piece of the puzzle; you also have to be able to figure out which connections belong the the subject of the wiretap request, which in most cases means associating a name with an IP address.
Cases like this are exactly why we should have medical research and I applaud it. I am in the same boat you are in, with a genetic condition that a need medication for. The only point I'm making is that people who shouldn't 'need' the technology will get lazy becasue they know there is a safety net out there that can allow them to treat their bodies like crap and still make it to 70. There's nothing we can do about that, but it's just a fact of human nature for some people I think.
blendify.com

roundscore.com
How Intuit managed to hold off Microsoft
I keep meaning to pick up the synergy source code and improve it a bit. Things I'd like to see:

* Make it peer to peer instead of client/server, keyboard & mouse events from all peers are shared, not just the server's

* Use mDNS (e.g. Bonjour) to auto-detect nearby peers and auto-connect to known ones. Also, use some kind of authentication - you don't want random people on a public wifi to be able to get access to your clipboard because you forgot to quit your synergy client.

Alas, I haven't had the time. Maybe this summer...
That's what hosting in The Netherlands is for.
Being currently enrolled in an online master's degree program for computer science at Illinois, I can tell you that I don't feel as if I am getting as much out of it as I did as an undergrad. The lectures are far more convenient in an online form since I can watch them at any time, pause them, rewind them, jump around the slides. Occasionally, I wish that I could be able to ask questions, but I know that I can always email the prof. separately or involve the entire class by posting a question to a newsgroup. Newsgroups (and forums), by the way, are great in this setup.

Unfortunately, my experiences in working on a project (pretty much for every class) leave a lot to be desired. Working remotely with others can be really difficult due to schedule conflicts and lack of face-to-face communication. Skype-ing is amazingly helpful, but is no way close to sitting down with your teammates in a study room and brainstorming/hacking. Long silences while thinking becomes awkward when you can't see other's body language. I suppose video chat could help here, but I still think the teamwork experience is really lost when this kind of study is completely online.
You'd need a central provider.
Would you consider trading/selling kill5minutes.com?
Ancient Beasts Thrived in Arctic Swamps Despite Dark Winter
Common sense dies when adults catch teenagers "sexting" each other
it could be your demo showed them how to cheat and avoid being flagged by the tools :)
Nobody Recognizes The Chrome Icon, So Google Wants You To Make A Video About It
How do people deploy with walled-garden package managers like this? Do you write an LSB RPM which depends on Ruby and stuff like your local syslog and net-snmp configs, and runs "gem install rip" and "rip install whatever" for you?
The collision problem is a huge deal. You can no longer trust a MD5 signed object.

http://www.mscs.dal.ca/~selinger/md5collision/ has some great, and very scary examples.
http://www.amazon.com/One-Page-Proposal-Business-Pitch-Persu...
Sure. I'd sell or negotiate a fair trade. Shoot me an email:

brianklash at gmail dot com
Using django signals
Have 182 - dropped the list on pastebin:

http://pastebin.com/m1742e685

Hit me up if you're interested.
aggregatedesign.com

buyjives.com

campusai.com

djangobits.com

everyday(desi|arab|latino).com

gamefav.com

gradschoolrejects.com

instantgolfclap.com

joblike.com

linktard.com

nfektus.com

ngamr.com

sofound.com

startmyself.com

startupyours.com

Believe it or not, I had ideas for all of these domains. May resurrect a couple when I get some free time..
Let me tell you something about labs. Challenging labs a) are REALLY hard to make and b) ALWAYS suck on the first iteration, ALWAYS. This guy has set back the whole course to the very beginning, because now everything needs to be rewritten. He's a jerk.

No one's impressed by his sophomore-level introductory data structures and algo classes.

And because he posted his code to the public, I have the following comments: his code is poorly commented and kind of crappy. I'm further bothered by the fact that he's a senior-to-be and hasn't done anything substantial yet. Where's the kernel, 1337 freedom of information defender?
¡Por los derechos indígenas y la Amazonia
no worries. if you need any help, let me know.
As tons of celebs flock to Twitter in an effort to regain control of their image

Control? You have control over what you put into the world and you have control over what you pay attention to. You do not have control over what people think or say. At best you have influence.
Renewing that many domain names must suck =(
You nailed it. The original notion was that the Internet was "peer-to-peer," but people have forgotten what this originally meant. Machines on the 'Net were expected to be somewhat sophisticated service and intelligence-wise (since they were owned and operated by universities, military establishments, etc.) IP addresses originally had identifying characteristics that could be tracked to an employer, if not an individual or department. Even when "anonymous" PCs and Macs were originally being hooked up the Internet (first directly, then later via NAT) the initial connection tools still provided support for identification via finger, message signatures and so on to continue this tradition. (Anarchie, one of the first Mac FTP clients, also doubled as a Unix-like identification stack when configured fully. Many PC video game developers, like John Carmack, continued to use .plan files prior to rise of the modern "blog.")

But then the Endless September came, and most end users by this point weren't versed in "netiquette" or the whole RFC tradition to know how to use such tools and protocols, so anonymity crept in as an accidental default state. (As the drift towards the modern connotation of "peer-to-peer" demonstrates.) I personally got online about year or so before this, spent time lurking and learning the ways of the old Internet, only to watch in horror as my peers didn't give a s--t and ruined it for the rest of us.
I avoid them entirely by copying the source of my Ruby dependencies into my source tree. That way I can deploy to a fresh machine with a simple checkout. This isn't foolproof (compiled/installed dependencies) but it helps.
theconundrum.com
To me, easily the most compelling feature is multiple environment management.

I am constantly bitten by this, say, whenever I want to run multiple Ruby/Rails apps on the same machine.

Experiencing "can't activate foo (= 2.0, runtime), already activated foo-1.0" errors is a terrible way to start the work week.

I'd like to hear more about how it resolves dependency conflicts more conveniently than Rubygems though.
Build System Rules and Algorithms [pdf]
fuckaneers.com
After reading the article, I really can't come up with a plausible explanation for this scheme beyond incompetence and mismanagement.

I'd pondered the idea that some newspapers will keep a print sideline to hit the markets that aren't thoroughly online, but now I suspect that very few newspapers will survive as organizations in the first place. They - especially local ones - are doing everything they can to avoid adapting. They're going to crash and burn, not transform.

So it goes.
haha nice. i have isronpaulpresident.com.
It's not being picky, it's you writing as if you don't understand what we are talking about. I thought you might not have meant that, but forgot about it when I began writing. Sorry. Please don't complain because I misinterpreted you when you wrote something unclear, though.

In terms of experiments, I dunno, man. You're pretty much going to have to let that one go - you can never have experiments with animals over a certain size. If you can manage reading about bacterial experiments, though, that's been done - here (http://www.rasmusen.org/x/2006/11/24/evolution-experiments-w...) may be a good place to start. Bacteria don't modify limbs, but they can evolve new metabolic mechanisms in experiment time, which I think is comparable. For larger animals, see the fossil record. There really are some incredible examples - I'll show you if you're interested.

I still don't see what mechanism you're claiming inhibits parts of the genome from mutation. You accept that mutation occurs and think there are parts where it can't, correct? Though this would make sense if you were assuming a Creator wanted only microevolution to happen, but you can't just assume the things you're trying to prove. With no assumptions, there is no reason for these prohibitions on mutations to exist (other than on crucial DNA where protections have evolved because the functions are so important to life - cell duplication, for example). There are differences all over human DNA, not just in one special spot. What, other than the religious aspect, is convincing you that mutation spares parts of the genome?
Why do new standards have to be so heavy?
Why can't it just be:

<p ctag="wikipedia/The_Beatles">We're talking about The Beatles here</p>

Why can't they use Wikipedia?
Everybody knows how to search Wikipedia, but dbpedia search (called "Navigator") isn't even linked from dbpedia.org (I had to use search engine to find out how to search dbpedia)

It even seems like anything that could be tagged should be well-formed XML document (well, XHTML).
I'd be interested in ballerscholar.com if it's available.
This is off of a posting over on the GNU Make Help mailing list: http://www.nabble.com/build-system-rules---algorithms-td2395...
I think author is giving too much credit to Intuit. Intuit was and in many ways is still ignorant about the fundamental change in developing software products. Mint apart from the fact that it is web based is also much smarter than Quicken. Having all the financial data is good but without analysis Quicken is still pretty much returning you a fancy view of their database. The shift towards software products that are quicker and smarter in analyzing data is here, much more important than adding XmlHttpRequests to your app, you can adapt or kill your product like Microsoft did.
I think its fine as long is at doesn't in any way suggest approval or endorsement of the President.. Public figures are pretty much fair game. The question is whether the "manipulated in any way" is modified by "that in any way suggest approval." The way this clause is constructed, I would read it as such.
You should be clearer with your recommendation. If you can relax the constraint that the protocol has to work between strangers, then SSL offers functionality you don't need, and the actual interface to SSL has moving parts that might hurt you.

I specifically mentioned client-server applications, didn't I? If you are handing out client code which talks to a server you run, you don't need the protocol to work between strangers.
Why are you so opposed to evidence that did not originate in a laboratory? The fossil record shows that differentiation and evolution has occurred quite a number of times. Just because we weren't in control of it doesn't mean it doesn't hold weight. Besides, what other explanation do you have for the fossil record?
You should already have a mechanism in place for alerting people to vulnerabilities in your client code -- for all practical purposes, a compromised server key is just a vulnerability in the client code which needs to be corrected by upgrading to a newer version of the client.
I tried emailing you but got a bounce. [petercooper]@[petercooper].co.uk, right? (obviously without braces, ha)
"The pressure for a startup to go towards conventional wisdom is intense" is probably what I should have headlined this article as.
that's only about 1/2 of what I have, too ;)
You're late. It's expanded already. :P
Weird.. I thought I allowed all e-mail addresses through. Try [my first name] @ [my user name].co.uk instead ;-) As in peter@petercooper :) That should work for sure.
I've had good luck with godaddy's auctions. They have a good, powerful search (you can specify tld's and set a max length and blacklist characters), and their buy-it-now feature allows you to instantly separate inexpensive domains from domains owned by, er, less rational holders.

For example, the auction for eventjunky.com is ending in 10 minutes, and the price is $10. not bad. I also saw asdense.com on there the other day for $5 buy it now... I thought that would be a domain squatter's dream, but decided to pass it up :P

https://auctions.godaddy.com/trpHome.aspx?t=16
fortunecookienotes.com
w-note.com
addresstree.com & addresstree.net

Would be will to trade for some of these.
Got a TradeMark?  Register it On FaceBook in Advance to the 13th
There's nothing stopping you from using Hemlock for just the client-server communication and doing all your UI work in HTML/CSS/JS. You could essentially do a Facebook chat or a Meebo, but using flash-run XMPP communication instead of AJAX or crazy iframe polling.
I'm not seeing dramatically different prices to a hotel or hostel, but it is a good idea. Take Paris for example:
http://airbnb.com/travel/paris/fr?y=0&min_price=&lng...
Except for the part where you hand out the code and the certificate.
I understand the spec. I understand what RDFa is.

It's still not tagging.

Tagging is a UI and organizational conceit. A minimal way to attach a nickname for a class of things to a new thing to classify it, such that users are actually able to use it, and to feedback the list of used nicknames so as to encourage convergence.

Given that I made up the term in the first place, I'm pretty sure I'm right here.
I use fish about just as often as I use BASH. It has some really nice features, like tabbed multiline editing and syntax highlighting...

http://fishshell.org/index.php

In my experience: It tab completes faster than bash, but is slower when it comes to some other things. It's pretty young as far as shells go, and has some irritating bugs...
It's less easy to see how someone screws up typing "CCM" into their library.

If you trust the library, sure. But I've found that the same rules apply to crypto libraries as to everything else: Obscure and complicated features are far more likely to be buggy.

No crypto library is ever going to ship with a broken HMAC-SHA256 -- but I can't say the same thing about AES-CCM.
This site is great. Perfect in todays economy as people look for some extra bucks (by renting out their room) and others look for cheaper places to sleep while travelling. I will probably use this site when I finally decide to go to Europe
how do you get in touch with angel investors
darnnews.com, greathive.com, thegreathive.com
Sony Ericsson W995 Unlocked 
Sony Ericsson W995 is a sure shot attention grabber with its strict and functional design. The phone also carries excellent features such as a fabulous 8.1 MP camera with flash, face detection function and autofocus. The maximum size of a photo.
You need a secure way of handing out client code, sure. There's no way to get around that. But once you've figured out how to do that, you might as well include the server public key.

If an attacker can mangle the server public key which you're distributing with the client code, they can mangle the client code, at which point you've already lost.
servingsizes.com - I'd like to sell it, but I'd give it away under the right circumstances. I always imagined being able to go to that site and compare the nutrition facts of consumer products.
Nice idea, since they help the renter to bill the room.

I'm always a bit surprised that new segment between B&B, Vacation Rentals and hotels are invented. Is it that people think those existing segments are well served?
Wirefriend.com

Designtheuniverse.com

Pouqe.com

Xanama.com

Badbeatlounge.com / those of you who play poker will get this one...
No need to apologize. Thank you for the explanation.
The page http://www.fromabirdie.com/what links to itself with the word "our". It seems a bit strange.
Guys, come on. You'll never convince anybody with your argumentative tones. Speak to people as if they were people.

Edit: Shit, mine look worse. Retrieve palm, insert face.
but the client-server communication is what requires flash, does it not? i thought the point of this framework was to implement comet-style communication but use flash.

platforms (like any non win/linux/mac os or the iphone) that don't support flash can't use applications developed with this because there will be no client-server communication.
linux-inside.com.

I was looking round for a new computer to run linux on. There are lots of little companies that will sell you a computer with linux preinstalled, but they mainly have short product lines, so you have to check out loads of websites. With windows, there are companies which will put together the computer you want set it up for you.

I thought it would be a good idea if there was one place where all the small linux companies could list their product lines so they would be easier to find. Then the experience of buying a computer for linux would be closer to buying one for windows.

It became less urgent for me because I bought a computer :-) Anyone wants to execute on the idea, I'll give you the domain. Someone else has linuxinside.com, BTW.