skysight-inc/HackerNews huggingface dataset:
These would be known as 'forests' at the larger scale, but they're actually a collection of Forestry Commission plantations. I agree they are very very unpleasant places, and it's incredibly eerie to walk through a dark woodland where nothing grows at ground level, no birds sing in the trees and there's no sound whatsoever. Thankfully most of these have reached the end of their lives (the timber is ready to be harvested) and modern planting (where they're replaced) is more enlightened and aims for a diverse ecology.

The Forest of Dean is an interesting planting. It's mostly an older trees - they were planted in the late 1700's to provide timber for the next set of wooden warships, once they matured: 150-200 years after planting!
I find it difficult to imagine that anyone would actually believe the two are equivalent, but maybe I've just been hanging around HN-types too much.
I am blasted away by your completely staggering domain-knowledge and my lack of the same. Probably should stop seeing universe docus and study more science
But it wasn't usable IMHO. While the competition did have usable software.
A bot doesn't necessarily only scan port 22 in a range - nothing stops the bot herder making it scan 1-1024 instead.
I'm not really sure how you can get similar results with completely different keys. I'm looking in to this. I tried generating a meg encrypted zeroes in 8bit mode and the most used 8 bit value was only 1% more common then the least used value.
One universal time for everything is definitely an illusion, even guys who wrote Upanishads knew that.

Each process has its own properties, to put it differently, one-time-for-it-all is just a concept of the mind and doesn't exist outside our head.
I note in the comments that the random number generator is not secure in any way. Its just a handy thing for testing, not something you would use in real life.
The google drive already has access to the local filesystem, so that is a not a good reason to not have a local copy of the data.
Except that no free stuff has been offered. A GPLv3 license is the equivalent of saying, "Hey, look at this cool thing I made! Oh, you want to use it for anything other than GPLv3 projects? Well, you can't have it!"

Forget the intent of the GPLv3. The effect of the GPLv3 has been to damage and subvert free software, rather than promote it.
You can verify the fingerprint, can't you? Not that I always do it (even is just the "first time", as you said), but IMHO the SSH model is definitely better than a central authority you have to pay to get your certificate signed.
The Slash Programming Language
Previous experience with applying market mechanisms to teaching is that it results in grade inflation. Everyone pays for the biggest, best credential money can buy, and quality drops for everyone.

We need a more thought-out solution than "the magic of markets".
You can also use Google Authenticator app. AFAIR it doesn't associate phone number with your account.
Well, actually* it was Stack Exchange that first identified the poison that is metadiscussion.

* tongue firmly in cheek as I knowigly contribute to the problem in the hopes of educating everyone away from it
Ehhh, no. That's how dropbox works. If you delete a file it stays in the cloud for a month before it's fully deleted. You can use the web interface to do a proper delete, but the interface makes it clear what you are doing.

Not only that but dropbox keeps a few revisions for you if you happen to overwrite the file.

I've NEVER heard anyone complain about these features before.
World's first Bitcoin ATM goes live in Vancouver next week.
Maybe it's not so much that the site was high profile, but the people on it. Also it may the case that people, who are into warez don't have Alexa toolbar installed.
Have a look at SSHFP[1] DNS resource record. If you combine SSHFP record with DNSSEC, you can actually validate the fingerprint.

[1] http://tools.ietf.org/html/rfc4255
I'm engaged to a "good student". She was damn well and fully aware, her entire life, that the signalling mechanism is very different from actually learning useful material.

As a two grad-student couple, we have mutual academic envy. I envy that she finds it easy to memorize large sums of material and pander to the system. She envies that I find it easy to acquire an intuition for the material I really care about. I envy that she's "saving the world" as an ecologist. She envies that I can make a good living out of my field.

Welp.
Where a Truck Full of T-Shirts Gets the Same Privileges as an Ambulance
3 Things to Do Before You Start Your Hobby Business
I apologize but there is no such thing as "it is (ALWAYS|NEVER) a good idea" no matter how many blog posts people wrote about that.

It just depends on which are the tradeoffs between the antithetic goals that you have when you do any kind of security hardening.

Aside from that, since many already mentioned port knocking as another layer in the pile of this game, let me point out that not all port knocking (-like) implementations are that weak, look e.g. at knockknock [ http://www.thoughtcrime.org/software/knockknock/ ].
I think you'll find the reviews said the Note was awful, mostly based on it being "too big" but people who bought one loved it.

It wasn't perfect (e.g. the display crushed blacks) but it was very good.
So if it results in grade inflation, why not abolish grades? When graduates are hired, why don't you look at their actual skills and knowledge? Teacher's job should be to teach and give feedback, so that students can correct themselves. It is employer's job to assess them.
Why should I switch from PHP, a mature and stable language with an enormous support base, many libraries and an obvious career path? I need a more compelling reason than "it fixes PHP's idiosyncracies", most of which I have come to understand.
Is better possible? I like the "startup weekend" style courses. But run over a term or 2 rather than a weekend. There are a few around.
Previous submission:

https://news.ycombinator.com/item?id=5348513
US seizes 'largest ever' Bitcoin haul from man linked to Silk Road website
Don't forget the hats!
Universities are institutions of research, that also happen to teach. To many faculties, students are a necessary evil to fund research. In order to teach students about their research, they have to go through three years of basics, not-so-basics, and then maybe some - to the professor - dull, repetitive, been-there-a-hundred-times preliminaries to their work.

The teaching many of them enjoy is their departmental or faculty seminars. And as a senior undergrad, those were the sessions I enjoyed attending the most. No surprises there. They were talking about the subjects they enjoyed the most.

Now - I'd argue that a professor should be bringing in revenue - either by teaching a popular set of courses that are relevant for students - or by bringing in research dollars. But then that's somewhat missing the point - universities should be exploring areas that industry doesn't yet understand and therefore doesn't want to fund... it's a quandary for sure!
Ok, well, if you ever actually implement your theory, then I would love to break it for you. Shoot me an email (sillysaurus2 at gmail) if you ever do.
Why does the storyline around smart watches ignore the Moto Active and Sony devices (plural)?

Instead Samsung is supposed to have created the "first" one in a sleazy attempt to gain reflected glory from the rumored Apple watch.
I don't change the port, but use keys and instead allow a tiny, tiny subset of the the internet to talk to my servers on 22... my networks.

Very little hassle, no crap in the logs. Is there a drawback I'm missing?
The other side of students being customers is that they will see a passing grade as something they have paid for and should receive, not something based on merit. If you paid a lot of money for a course but didn't get a good grade are you more likely to blame yourself or blame the teacher? More likely to give good feedback to a lecturer that gave an A because the course was easy or to a lecturer that gave a C for a very challenging course? Are people more likely to pick courses that have a reputation for low marks, or pick one where they will get better 'value for money'?

The result is grade inflation and it has been well documented:

http://economix.blogs.nytimes.com/2011/07/14/the-history-of-...

They then attribute the rapid rise in grade inflation in the last couple of decades to a more “consumer-based approach” to education, which they say “has created both external and internal incentives for the faculty to grade more generously.” More generous grading can produce better instructor reviews, for example, and can help students be more competitive candidates for graduate schools and the job market.
I like the idea of mutating both the output and the key. You are using it for a single pass over the length of the data. You could use the final key as input to another round of crypto. Repeating it for a number of rounds would keep it deterministic, but increase the computational load of an attacker and create an even distribution of input to output. Ah, problem could be that decryption would need the final key, not the one you started with, if so it would be good for a 1-time hash. So the key idea for the crypto is the nuking of the part of the key that was just used for the xor. Thing that concerns me is if the attacker has access to your crypto in binary form, he could run it again and again on different inputs (data,key) to infer its structure - you'd want to slow him down.
Why you hate such comments?
This would probably result in a lot of illiteracy, good education only for the rich, and very little fundamental research.

Market mechanisms are excellent at solving many problems, but they're not magic. They don't work well to provide public goods like high education standards or social mobility, and they generally have a hard time with intangible goods like knowledge.
Why this bug is particularly noteworthy? What's the context here? Bugs happen all the time, and it's not particularly surprising that fixes do not always trickle downstream correctly.
The ones employed by corporation and sitting in open space office. Also headphones.
0. Become a hermit and stop using the internet
The "expose the internals of the webserver" model is much like the Lua support for Nginx in Openresty. The "is this an application server" question still comes up...
The state mandated minimums are laughably low:
http://personalinsure.about.com/cs/vehicleratings/a/blautomi...
well, how about Apple's stuff? lots of words beginning with "NS", e.g NSArray ;)
Practice Fusion responds to accusation of publishing private user reviews
> Good student: "When will the midterm be?"

> Me: "Why do you care?"

> Good student: "Um... I'd like to be able to plan when I

> should study for it."

> Me: "Oh, okay. I don't know when it's going to be."

> Good student: "Um... Okay. What's it going to cover?"

> Me: "I'm not sure, but it'll be really great!"

> Good student: "That's good, I guess. Can you be more specific?"

> Me: "Not really. But why do you care?"

Wow, this guy is a jerk. This just shouldn't happen. Fair enough, don't tell a student exactly what's on the exam - they should be learning all the material, not cramming for a test. But not telling them when it's going to be is ridiculous. People have lives and need to structure their time.

If a professor or lecturer had refused to tell me the date of an exam, I would have pursued a complaint as far as possible, which would probably have resulted in disciplinary action. In the UK, this just isn't acceptable. Do US universities really treat their students with such disdain?

Regarding the classifications, he missed out "cynical good student", which I suspect is overrepresented amongst HN readers. I never believed my professors were particularly smart people or worth listening to so I didn't attend lectures or hand in work to get feedback, but I did see the value of learning the material so I taught myself and aced exams.
What do you mean with 'come to understand'? You can use them or you understand why they are there? Because I wouldn't call the former understanding per se and if it is the latter i'm interested to hear about it. If it is something else than 'the developer of x(a,b) was someone else than who implemented y(b,a) and he was lazy or somewhat opinionated, but just not enough to fix the other functions as well' that is.
Park Avenue is interesting but I would like to see a picture not one saying "this is not it".
Why do you find domestic spying to be appalling? It's done because of the same reasons they spy on foreign sources.
Agreed. I've come to rely on so many different libraries, that I would need to see an API first.
This looks fishy to me. Follow my thought: If you are looking at the very first value coming out of the stream, that value should have zero bias from the algorithm. Why? because it is an xor of two different values in the key. If both values are properly random then so should their XOR.

Note that at this point the algorithm has not yet started modifying itself, so the original key is still intact. The self modifying code may still be broken, but i think we can be fairly sure the first value has the exact same bias as the random number generator.
I think you're misunderstanding where that came from, or what it means.

The idea behind security through obscurity being bad isn't about stealthiness, it's about that the idea that an attacker not privy to details of the system isn't really disadvantaged. Using a secret custom cipher is worse than using publicly vetted and analyzed ciphers like AES or ChaCha20.

Specifically, port-knocking isn't about security through obscurity. Your secret is the knocking sequence. Making the port inaccessible without that makes sense.
A while ago I tried fish. Unfortunately I ran into quite a few issues because it isn't POSIX compliant. When I wasn't running into issues, it was great! I now use zsh.
Display on Moto X called groundbreaking by researcher
We tried a ton of those techniques (hidden fields, fields filled out by Javascript, anti-replay tokens) and none of them worked - the spammers appeared to be using botted IE installs.

What worked in the end was a points system for spammy behavior: First post has URL in it? +1 point. User fills out linkedin field on profile? +1 point (seriously, none of our legit users did this...). User posts a word on the blocklist? (viagra, cialis, cvv2, etc) +1 point. User Agent is IE? +1 point (we're a Mac site). After a certain number of points, the user was banned and all their generated content deleted. After a certain number of posts without triggering the ban, they're greenlighted. Spammers quickly noticed their posts disappeared instantly and left the site.
Sorry, my wording was confusing. I'm saying that on another day if you repeat your search you might get a higher price. Then, clear your cookies and search again- boom, back to the lower price. I've seen it happen 3 or 4 times now.
Ask HN: Why can't I see downvote or upvote arrows anywhere?
> It appears they want to save on real estate and cooling costs by having floating data centers.

Is this really that expensive that's still advantageous considering the costs of a barge + electricity + data link to the sea + fuel + maintenance ?
Needs some instructions on how to install it, surely.
Seeing your name again Eskil reminded me of the excellent tooling videos I used to watch for Löve!

Where are things at and what are you doing now? I think the whole of HN would be interested!
BTW - I double checked now, your code only works on sbt 0.13. My previous version of 0.12.4 doesnt work with it.

So, I guess it's cool that this kind of stuff is working now!
The $5 Challenge | Psychology Today
'grugq' shares current best practice, and recently stopped by HN when his blog came up for discussion:

Anonymity Is Hard https://news.ycombinator.com/item?id=6521517

OPSEC for Hackers (video) http://www.youtube.com/watch?v=9XaYdCdwiWU
We should feel lucky that at least captchas can help. In the future, probably, there will be no chance you could separate humans from computers.
If it's money, rather than time, that's the problem I bet you'd find support for such a project on Kickstarter...
Abolish grades. Teachers are there to teach. Employers are there to assess and hire. You're just looking at it from the same old perspective.

Let me give you an example. I teach programming privately. People pay me $100/hr. Some of them found jobs thanks to my lessons. Some of them realized it's not for them and they didn't waste tons of money and time. And I've been doing this long enough to say there's a demand for my services and people generally like it. I don't grade them, I give them useful feedback on what should they improve and if they should continue. My primary goal is their success, not some stupid grade. Market works great if you apply it right.
I don't understand how you switch from “wow, guy wrote a language I can use in my projects” to “why should I switch from PHP, I need a more compelling reason” and stuff.

And yeah, PHP sucks. And your career path is something you should not think about at all.
Is there car access to the houses? for emergency services for example?
In your case you shouldn't. :) PHP is string manipulation language, it's really hard to do anything else with it. (binary manipulation, network programs, binary streams, long running apps...)
Unfortunately game keepers and land owners try as hard as they can to sabotage these reintroduction programs. Reintroduction of White Tailed Eagles into the east of Scotland has been set back somewhat by the destruction of the nest this year: http://www.bbc.co.uk/news/uk-scotland-tayside-central-228725...

I don't know what the Norwegians must think; they give us these birds as part of a big expensive reintroduction program and then a bunch of rich toffs go around shooting them and destroying the nests because they think they might disturb their grouse shoots.
Ok, here is what I have observed so far (I don't use Line myself):

1. Line works with your telephone number (if you have someones number you can send them a message)

2. Line allows you to send messages (free sms) and voice calls.

3. Line allows you to have friend groups.

But there also reasons specific to Asia (at least Thailand):

1. Line has a "cute look" and has smilie packs which you can buy (big images actually). Thais seem to love that. Westerners would probably find them childish.

2. Line has status messages. These seems to be used in quite an interesting way: to tell people something which you don't really want to tell them directly, e.g. "Stop being jealous. Change your life to make other people jealous.".
It would be a massive boon to companies like Amazon, as the cost of anything delivered by road would decrease dramatically.

Actually, everything would drop in price, including your basic weekly groceries.
A few of the larger studios have experimented with using Go in place of Python for the frontend. Unfortunately I think they're missing the point. As you said, Go would make an incredible game engine. Since it's so idiomatic, it could also potentially be used for the frontend, allowing developers to use the same language throughout the full-stack.

The biggest barrier for most studios is the current investment in C++. The majority of engines and most associated libraries are written in C++. Regarding the libaries, it's possible to write C wrappers around the C++ APIs and then access them through cgo, but the developer time required likely isn't worth it.

I'm hoping that a smaller studio will create some proof-of-concept, but we'll see. There was an interesting kickstarter for a game written in Go that ultimately failed, giving the language quite a bit of bad press in the community (http://www.kickstarter.com/projects/2066438441/haunts-the-ma...).
Some schools require midterm dates on the syllabus, some don't. But in this case, the schools are more likely imposing structure on the professor rather than the other way around.

If you know exactly what you are going to teach for a semester, you can plan it all out. But god forbid if the class gets stuck on some material...if the schedule is strict the prof will just move on and let the curve sort it out. I preferred more flexible teachers in college and there were real reasons why universities in the US are high regarded.
.co is the worst alternative because it easily confused with .com

.io and .org or .xxx or such are the only other good alternative tlds imo. Basically tlds with a strong sense of purpose that won't be forgotten unlike something like .co
When I went to uni, I had high expectations that I'll learn intellectual bases of different fields of knowledge, and will be taught how they relate to and improve human life. But my expectations were shattered very first day in the first calculus class when professor started explaining how to solve questions in first chapter of course book. Wait madam, what is calculus, how does it relate to me, what need was felt to invent it, what problems does it solve? My questions remained unanswered and I lost my faith in uni education.
PDF.

My resume is written in LaTeX, making PDF the obvious choice.
Is there much demand still for a Python apache module? Not to disencourage gtrubetskoy, but we've extended our application server (Phusion Passenger) to support WSGI and were met with little enthousiasm from the community. It seems as though Python users are quite content with reverse proxy setups, or there's another contender we haven't heard of that's serving the community well.

I am certainly interested in how the Python community will react to the mod_python revival.

(It hasn't been long since we've added nodejs support, but that community has shown a lot more love already)
Node.js seems to be becoming a PHP successor. In regards of easy web development. With JavaScript you can both write for the front-end and the back-end. One language to rule them all. Very appealing to newcomers who want to learn webdev.
PHP is a great tool that is virtually unmatched in its domain - ie. ‘slap a script on a server and have it run’.
The problem is that PHP’s idiosyncrasies make it awkward and sometimes even painful to program in.
... [Slash] is a language that lets you achieve results quickly while being a joy to use.

You can slap a script on a server and have it run because of PHP's ubiquity. This language has none of that.

It seems like a non sequitur to say "PHP is really easy to get started with ... but my language is cleaner!"

It could be said that PHP's biggest feature is its install base. Nothing is going to "succeed" it until it gets past that.
Is there a POC Interpreter for slash, or are these some ideas you had over night?
True. The worst professor I had in school was a Nobel prize winner in physics.
How can I download/use it?
Successing PHP's spaghetti?
GitHub project at https://github.com/slash-lang/slash
I thought my account had been restricted, and came to post this exact question too
it's funny, I know I shouldn't upvote that, but I appreciate that. So here's a comment.
Aaaand they're back.

slinks off into the shadows
Just Look At How Google Dominates Ad Tech
Illuminating the Raspberry Pi with Mathematica
It is written here: https://github.com/slash-lang/slash
I use the free plan for some admin zones, few users, maybe 20 uploads/month. Now i have to pay or rework the file uploads. I feel "dark patterned".
That's close to how I'd like to see it work. My system:

1. The copying right would have a shorter term. Maybe go back to 28 years with perhaps one renewal term.

2. The derivative work right would have a very long term.

3. Fair use would be expanded to explicitly recognize things sampling, parody, and the like. (Yes, I know this would be tricky to do well).

I think this strikes a good balance between making cultural works readily available and affordable, and saving us from seeing a poorly animated Calvin and Hobbes selling breakfast cereal to kids in TV ads.