skysight-inc/HackerNews huggingface dataset:
Happens all the time with shady third-party manufacturers in countries other than your own.

You get a perfectly nice sample unit that meets all specs and looks beautiful. When the container arrives off the boat with 100,000 production units you find materials have been substituted with cheaper materials, scrap plastic, and scavenged components.

Walk into any dollar store and you'll smell something similar to this, cheap plastics off-gassing all kinds of wonderful substances. I picked up a flashlight once that literally smelled of kerosene, probably because that's what the overseas factory used as a plasticizer to get that "rubbery" feel on the handle.
Is Dell's assembly line located inside an industrial laundry building by any chance?
All browsers already have crypto. Why the fuck are people trying to invent their own when it's built in?

http://en.wikipedia.org/wiki/Network_Security_Services

https://developer.mozilla.org/en-US/docs/Mozilla_Crypto_FAQ

All you need is some kind of new "Web Standard" glue between the browser and the JS and do whatever you feel like using the native crypto functionality of the browser. You don't need to add more layers of complexity. But you can add a small bit of abstraction to what is already there.
No. Crypto is a rare case where broken crypto is actually worse than no crypto at all. When a product claims to have encryption people trust that encryption. If the encryption is not actually effective, that compromises their security. In some cases (e.g. dissidents in oppressive regimes), that gets them killed.
BYOD or bust: How bad tech is costing companies
It's interesting. Bad capacitors (http://news.cnet.com/When-good-capacitors-go-bad/2100-1041_3...) maybe?
Unemployment is basically caused by fiscal policy. (Which is to say, it's political, since economics is political.) Unemployment is actually rather absurd when you think about it: people can't get jobs, even though by definition they want to; and there's lots to do. Not only do we have an economic system which has such a weird wasteful phenomenon, but we also pursue policies to ensure this phenomenon occurs.
I think building something you know to be insecure and providing it to your user along with an assurance that your service takes their security seriously is a poor way to motivate other people (here, browser vendors) to build that security for you.

Meanwhile: the network tab thing only does anything if you do it every time and validate all the content. Nobody does this, ever.
OP probably meant the image was cropped.
Thermoplastic manufacturing is crazy. There's no end of chemical additives used for variant purposes, and substitutes for them for certain usages. Apparently this batch discovered some new chemistry and there was no QA process in place to catch it.
What do you think of the Singapore model? It includes price subsidies, health savings accounts and catastrophic coverage. I think the US will not move towards single payer medicaid for all, I think it will adopt something along these lines.

I think if people are forced to pay for routine care, we will get a much better system. Then insurance will be what it is meant for, catastrophic insurance. The simple analogy that noone uses car insurance to pay for oil changes is relevant I think.
Oh, hey:

https://medium.com/humans.txt
I didn't really use it for "news".

r/askscience and r/askhistorians were probably my favourites really. Then ELI5, science and a whole bunch of topic based ones including those for my locality.
Trying to find a way to change my full name into a nickname on YouTube made me a Google+ "user". I've also received Google+ recommendation e-mails without ever willingly joining or participating in the service.
If access tokens were encrypted (which they are now) then this would have been avoided.

That answers my question! (See https://news.ycombinator.com/item?id=6619265)

Kudos for how you guys handled this during this tough few days.
So is HN just an advertising website now?
> Opal requires as little trust as possible, but you are correct that some server-trust is required at the moment.

Unless there is some other mechanism at play here, it requires full server trust.

> I hope that apps like Opal will encourage more progress on browser/javascript cryptography. The W3C crypto spec is coming along nicely, and things like Content Security Policy address some of the concerns about delivering secure javascript.

I don't think you can just cross your fingers and hope for the best here. Whether or not it's coming along nicely is debatable, but one way or another the W3C crypto API has no bearing at all on this problem.

You're talking about implementing a "secure" service using a mechanism that is known to be insecure. For a mechanism like this to function correctly, it would likely require substantial changes to the way the web browser works that aren't currently on anyone's roadmap.

Again, this is not a theoretical problem. Two companies have done the exact same handwaving that you are doing now about users watching tcpdump to verify their traffic, and both of them were functionally destroyed when that handwaving didn't work. It doesn't seem prudent to knowingly put users (or yourselves!) into that position again.
> the takeaway is that many managers will use this kind of data as a crutch, not a supplement. The employees will suffer and the biz will lose good staff. How about treating your staff like fucking adults

I guess you have to ask yourself with what kind of people you want to work. Good/decent people (including managers) will use whatever data they've got to improve the lives of their co-workers and the prospects of the business. Where I work I have so much faith in the intentions and intellect of my co-workers I welcome sharing this kind of thing as I'm confident it will help me improve.

Not every workplace is filled with nefarious bosses out to spy on everything you do!
The software has become dramatically larger, dramatically more complicated, and dramatically more important. At the same time, the process around developing embedded projects has not even slightly kept up.

Most of the crappy projects I've worked on weren't crappy because the developers didn't know what they were doing. They were crappy because they were old code bases that were recycled over and over and over again through small hardware iterations, and no team working on a single iteration can ever get permission from management to do the necessary maintenance (refactor, redesign, whatever) -- they are just required to get their little port finished fast. Everybody makes the smartest hacks they can on top of the crap they were given, and each step of the way the system gets worse.

Most companies don't start from scratch -- which is almost impossible anyway, given the low quality of documentation from chip manufacturers -- but start from whatever example code base or framework the manufacturer provides. These are invariably bad, and were developed like I mentioned above (hacks on hacks with each hardware iteration)... and then the hacks for your specific project start.

Then the actual development cycle is pretty much dictated to be the 'waterfall' method since it's tough to be 'agile' with hardware. Proper debugging tools, at the level you would get with desktop software development, are either unavailable or cost more than the company is willing to invest. Proper code analysis tools are the same. Continuous deployment and automated testing are practically impossible unless you have tens to hundreds of millions of dollars to spend on infrastructure.

And there's never enough time for any of it.

And there's never enough documentation for any of it.

At this stage, embedded has reached the complexity of enterprise software running on desktops/servers, but without the process and tools needed to make that actually work.
"3.9 million jobs are vacant, thanks to the empty promises of algorithms. If the U.S. Congress wants a solution, it should launch an investigation into the workings of America’s employment system infrastructure, which is controlled by a handful of companies."

Oh please, no. Anything Congress touches risks dying like a baby between two pit bulls.
That's might be a sign you don't pay enough attention cryptographic research; compiler optimization side channels are not news.

Of course, the notion that the compiler is a threat here is getting a bit ahead of ourselves, because you don't even know what side channels are in the runtime.
If you can solve the halting problem, we can make software that doesn't misbehave.

I'm not saying Toyota should be allowed to provide this shoddy piece of software in a critical subsystem, but I very much think a) other vendors software will be just as crappy and b) this feels like the court longing for reasons to fault Toyota on something that was still very likely user error, not software misbehaving.
In the US, the opposite is true. The average American is somewhat to the right of the median Senator on social issues and somewhat to her left on economic issues. A lot of people like to identify as "fiscal conservatives", but that generally boils down to "the government should spend money on good things and not on bad things".
Nope, people with Django experience are definitely not off the list. PHP isn't off the list either, though the signal-to-noise in that community does seem (anecdotally) to be a lot lower. In my experience people cast a wide net for senior candidates in terms of what they've worked on, the important thing is how they've worked, what roles they've taken, what teams and projects they've led and shipped. Basically, people that can be trusted to build a solid foundation for the more junior candidates to build on top of. Even with a wide net on the specifics of their experience, candidates like that are still not easy to find.
What's worse is that djb's crypto NaCl wants to be pronounced "salt".
I think you’re disregarding some key parts of my comment. iPhone marketshare continues to grow. Apple’s phones were never dominant in marketshare. iOS does however remain dominant in web usage share, that tells me that Apple commands actual smartphone share (compared to Android 2.3 devices with no Internet connection)
If you're having trouble finding enough people, did you ever think of offering higher salaries?
> It's like a more mature reddit

This piqued my interest, but then on the front page I found "Britney Spears' music used by British navy to scare off Somali pirates". Then I check out the 'architecture' tribe and the top post is "21 Houses to Avoid on Halloween".

Perhaps I am not the target market for this, but what I would like to see is a social news site that actively rejects junk content and promotes content that helps you become a better, smarter person.
My primary concern is the LLVM bytecode to JS transformation.

Even on the LLVM side certain optimizations may be dangerous in crypto code. I wouldn't play with optimization settings unless I was sure I knew what I was doing. And I'd still think twice.
Freshplum needs your help solving hard problems in ecommerce
So it was just nastiness waiting for a made up justification.
I think that might have been 1990 or 1991 but I am not sure about the exact date.
I clicked on the link thinking I am going to see the old legendary Nokia candybar here. But the phone they are talking about here is a handheld computer itself. It was the Nokia Lumia as complex as any other phone out there. Kudos to Nokia's manufacturing.
BlackBerry Met With Facebook Last Week to Discuss Potential Bid
ALL YOU CAN EAT
Very creepy short Halloween film. very very cool concept
Leadership Without Management: Scaling Organizations by Scaling Engineers
iPad Air Review Roundup
This is like saying a sign that says "attackers keep out" provides real security, as long as you keep in mind that it only works if attackers obey the sign. After all, Dropbox doesn't have an "attackers keep out" sign!
It should be 'not dead set against any external usage.'
Actually it was no exaggeration.
"For example, if I am looking for Ruby on Rails experience and I have candidates with strong python and Django experience are they off the list?"

I think in most companies yes, they're off the list. Bottom line-ism is king these days. Companies see bringing someone in and up as a cost, not an investment. All they want to do is pull from the well, but not put anything in. They want perfect fits, and they want other companies to make them. It sounds like a frighteningly random and risky policy.
Selling things is harmful?
NuoDB 2.0 Java Stored Procedures
"Stop begging for jobs" is an approach that requires a level of privilege most people don't possess
Yeah, I've observed the effect, but it never occured to me that it doesn't (or shouldn't) have to be that way :) We should be able to demand codecs that are smarter and more adaptive :)

It's hard to imagine why anyone would want a blocky highres lowbitrate stream if the lowres variants are always better, for a given timespan of video
Part of the problem is that the JS crypto article they linked to isn't very good, but has for some reason become emblematic of the whole argument against JS crypto. It deserves an update.
Even if living wage is bad economic policy, it does not belong in the same category as young-earth creationism or eco-terrorism.

While there is a left fringe, they have effectively zero influence on national policy, whereas the mainstream right absolutely pays attention (or at least lip service) to their fringe. Compare how often mainstream Republicans discuss Limbaugh or Beck to how often Democrats bring up Chomsky or Moore. Outside of Berkley, the latter simply doesn't happen.
That's a Chrome bug - https://code.google.com/p/chromium/issues/detail?id=137692 - been pending for over a year now
It's pretty fun when you zoom out to 25% too.
"We like free enterprise and tend to favour deregulation and privatisation. But we also like gay marriage, want to legalise drugs and disapprove of monarchy. So is the newspaper right-wing or left-wing?"

Eh what? All those stances are almost text book libertarian... so how could anyone be in doubt.
Air France 101: How to Deal with Indians
I'm not arguing with @bbx, I'm replying to your assumption that when @eloisant wrote "email client" he meant "native app email client" ;)

I was trying to express my belief that neither @bbx nor @eloisant were wrong: a browser extension implementing a generic e-mail client that talks to servers using IMAP might be a really good solution. I would certainly like to try using something like that.
Show HN: transcode.io
"There is no need to read this unless you’re particularly interested in IMAP protocol issues and/or gossip."
Wow, that's a funny way to spell sorry.
Github - https://github.com/humans.txt

Bitbucket - https://bitbucket.org/humans.txt

Flickr - https://secure.flickr.com/humans.txt
Unlikely given the power law distribution of startup outcomes. But if you set a threshold defining a big hit and we funded 33 of them we'd end up being one ourselves. It's conceivable we could fund 33 big hits in 30 years. Depends how much we grow.

(3% is our estimate for the biggest successes.)
wouldn't 202 be better?
Everything We Thought We Knew About B-to-B Marketing Is Wrong
Many places with large numbers of job openings also have very low local unemployment (the Bay Area for instance). We like to report on numbers at the national level, but worker mobility is at a 40 year low [1]. That certainly isn't helping anything.

[1] - http://www.census.gov/prod/2012pubs/p20-567.pdf
The Mathematics Of Throwing A Curveball
Fair enough. It sounds like you use a more specific named mental model, rather than a visual one. When I used a 2x2 virtual desktop grid (I don't use virtual desktops at all anymore), I has loosely defined roles for each desktop, but it was fairly dynamic. I used the visual model, as in "Where did I throw that terminal window? I think it's right below me."
These provide great opportunities for better understanding return codes.

Besides, for POST it is obviously 202 ACCEPTED
I think it's a bit cynical to read it that way: there's good reason to be anti-inequality but also skeptical of naive wealth redistribution as the solution to it.

What we are left with is the European social-democratic welfare state, which seems to work well enough if you have a base of natural resources to work from. I notice the Economiat generally isn't too critical of most European tax rates (a typical cry of rich businessmen) but rather is critical of countries that have widespread and systematic structural barriers to economic freedom - the UK, pre-Thatcher, and modern France, for example.

France represents a fun eternal potshot game: they keep claiming doom yet France keeps chugging along with its massive civil service, huge employment regs, and longest vacations on Earth...
I think he means put more money on the table, ie include the salary in the job advert. I personally am not interested in talking to anyone that doesn't put that information up front. Maybe it's a Euro thing on my part.
Yeah, I'm just saying that you can work around that pretty easily. There are more important things than rolling back schemas that mysql lacks. And if it got those things, schema updates would be pretty easy even without the ability to roll them back. Not extremely convenient, but convenient enough.

Schema transactions are not nearly as useful/important as data transactions.
Echoing a third time - for any consideration on my machine, I'm going to need to take it for a test drive. $10 is non-trivial, and Adium is still more functional and already on my machine (oh, and free). I really do want to take your app for a drive, though. Please, please release a trial. Make it as short as three days - I'll use it enough to know if it's worth the money by then.
What? Not sure what you mean. The fonts use unicode characters for the icons like any other icon font. Anything we could do to make it more friendly?
Funny, but when I read the first staff comments I thought it was actually a bot responding :)

After comment #4 auto-pilot goes offline
How exactly do you use a plugin to verify the state of a Javascript runtime? You can't just verify assets; you need to verify the current bindings of every function relevant to your crypto code.
Custom fonts are fine as long as they match the guidelines. I think they will have some issue-- mostly the ones that look different than the original icons (i.e. the white outlined versions).

https://twitter.com/logo

https://github.com/logos

https://www.facebookbrand.com/dos-donts

http://www.apple.com/legal/sales-support/certification/docs/...

Page 12 -- No go "Do not use the Apple logo alone in channel affiliate communications, including web pages." (I.e. You can't just show the Apple Icon)

https://www.dropbox.com/branding

Yahoo's icon actually doesn't look like Yahoos brand icon so I would call that one a pass

http://developer.android.com/distribute/googleplay/promote/b...

Pretty much no restrictions for the robot-- accept you need attribution according to Creative Commons 3.0 Attribution License.

http://developer.linkedin.com/documents/branding-guidelines

Linked in is specific in what the logo can be used for, instead of what it looks like. So this font is fine, but even in the preview the logo should point to a linked in page or profile.

http://www.youtube.com/yt/brand/using-logo.html

The logo the author used isn't the one trademarked-- fair use here.

https://vine.co/logo

"Use only the official, unmodified files to represent our brand." So this ones a no (though it's confusing... what if the author used the original glyph? Is conversion considered modification? I suppose)

http://www.microsoft.com/en-us/legal/intellectualproperty/Tr...

Unless that glyph isn't trademarked it's not okay to use, even the logos mentioned state:

"Do not use in... Web sites for any purpose except pursuant to an express written trademark license from Microsoft."

https://en.bitcoin.it/wiki/Promotional_graphics

Bitcoins assets are fair game.

http://dribbble.com/branding

Seems to be okay, since colors are 'encouraged' and the gylph is shown as ones that are okay to use.

http://www.reddit.com/about/alien/

Absolutely no go: "We require a license to use these logos in anything outside reddit, both for free and for profit."

---

Summing up here I was surprised to learn that the restrictions are more stringent than I thought. If I were the author I'd clean up the alternate version and remove the Glyphs that aren't specifically allowed, otherwise anyone who uses your font is technically opening themselves up to trademark violations.
I've amended the previous post now.

The client is still the best place to detect something like this and block it. It has more information than the server. I will be putting work into detecting infinite loops on the server as well.
Yes, and it is much faster than MongoDB as there are no write locking issues.
Looks like you've got lots of projects on there already, which was my first concern. How do you go about re-engaging & activating users?
smh.

Your use of the word 'anyone' shows that you are imprecise and therefor, not worth responding to. My response shows that I have poor self-control.
Most of Europe also has far more comprehensive sex education and available of birth control than the US, and subsequently far less demand for abortions.
Feminists really aren't any better than religious people. As an atheist white man, I'm hated by both, but I'll sooner respect a christian than a feminist.
Part of me wonders whether or not this is some sort of collective joke by Reddit or 4chan or something. Another part of me is not surprised. Dell isn't particularly notorious for their astute QC.
my daily dose of nihilism
Tried to edit, thank you for pointing out the confusion. :)
I don't think it's any more buggy than Microsoft's own mac desktop implementation (Outlook). I tried using Outlook with a work exchange account on my Mac, and ended up switching to Mail. Mail was, in my opinion, marginally better (...although still buggy).
If there would truly be an enormous price pressure on hospitals and clinics driven by a free market setup, I am pretty sure they would turn around and talk to said equipment manufacturer: Hey, we know you are selling us a desktop with an audio card. We are pretty sure you can still survive if you reduce your $50k profit and sell us the same equipment for 20k or 10k. Then, said equipment manufacturer, would have to increase volume by starting to sell it to developing markets (what a novel idea) or find ways to produce it cheaper etc etc... but I get it - these are daily considerations of entire industries that the medical sector does not need to be concerned about. What if we tried and see where this would lead though? Right now, I think, we have a pretty good idea how a healthcare system looks like when it is run without any price incentive or cost assessment.
Ha! That was actually my first thought after submitting my comment.
It depends on what part of healthcare you're thinking of, and what stage of the process you're at.

If you're wheeled into ER with a knife in your chest, you don't have a fungible probability of needing healthcare. You're going to be buying the knife-removal service whether it costs $100 or $100,000. You may be unconscious.

Obviously at the other extreme of choice is purely elective surgery, like breast enhancement. Lots of choice there - if you don't like one doctor's prices you can shop around or skip the surgery all together.

In between are situations where treatment is required but isn't urgent, or where the problem is minor and you can live with it/use off the shelf treatments, or where there are various types of surgery available. A lot of the time when there are multiple options with complicated trade-offs, that's exactly where it would be nice to have a friendly, trustworthy doctor who can give you some unbiased guidance.

How exactly to bring all the incentives into alignment and make them fair, over the entire continuum of choice and accepting that the people who need the healthcare aren't themselves experts - that's the hard part.