skysight-inc/HackerNews huggingface dataset:
We are in fact better off without DNSSEC:

* DNSSEC bakes a hierarchical PKI controlled at the roots by world governments into the core of Internet connectivity, in a way that can't be policy-controlled by users.

* DNSSEC has a poorly-thought-out interaction with Internet security and security policy; when TLS validation fails, users get a click-through that allows them to proceed to the site anyways. No similar state machine is built into the overwhelming majority of programs that do DNS lookups. As a result, if anything goes wrong with your DNSSEC configuration, you will more or less vanish from the Internet. "gethostbyname()" doesn't include a popup dialog feature.

* Mainstream deployments of DNSSEC are based on 1990s crypto, including PKCS#1v1.5 RSA padding; at exactly the moment when the rest of the Internet is transitioning away from crappy old RSA protocols, DNSSEC doubles down on it.

* DNSSEC leaks internal hostnames to the Internet because the designers of the protocols prioritized authenticated denials (availability) over confidentiality. NSEC3 is a great illustration of how slapdash the protocol design is: in an attempt to plug that leak, the IETF standardized what is in effect a password hash (and a bad one) to help obscure internal hostnames. When challenged on why the Internet should adopt a 1990s password hash as an Internet core protocol security mechanism, DNSSEC proponents say, "well, well-managed domains make domain cuts carefully to solve this problem", as if any commercial network in the world actually does that.

* DNSSEC creates yet another huge amplifier for DDoS attacks, allowing trivially small requests to elicit gigantic responses from servers.

Now, two fun things to know about all these problems:

1. They are, unlike your citation of crappy CAs, baked in design flaws in the protocol. You can evict a CA that misbehaves or isn't careful about validation. The EFF or ACLU could run a program that would allow people to subscribe to a trusted subset of CAs. None of that is possible in DNSSEC, because DNSSEC's problems aren't implementation or deployment problems, but rather fundamental attributes of the system.

* For all its flaws, DNSSEC doesn't actually protect queries from end systems to servers: it is a server-to-server system that leaves end-user DNS queries unprotected and spoofable.

I don't think this system is something we need "yesterday".

I have a lot of random opinions and thoughts about things, including security things, that I come to because discussions in places like HN prompt me to develop those opinions. DNSSEC is not one of those things. I've been following DNSSEC standardization since... well, since DNSSEC was an effort of TIS Labs, which was owned by my employer, where I was building DNS security testing tools. I've particularly followed namedroppers since the early 00's, when the list drove Daniel Bernstein away from DNS standardization.
Read what he wrote in the asterisk; he is making a distinction about DRM and terms of use.

A counter example: sourceforge, as the primary distributor of many GPL'ed binaries, does not have to field GPL requests for software. DMCA safe-habor clause removes that burden; all they have to do is comply with takedown requests.

http://www.openlogic.com/blog/bid/156894/Are-App-Stores-Liab...

"Either way, the next question in the legal analysis is whether the app store qualifies as an online service provider under the Digital Millennium Copyright Act (DMCA). Actually, a court may answer this question first as a matter or practicality.[1] The DMCA limits liability of online service providers for infringing material provided to the service by its users (i.e. app developers here) so long as the provider meets certain conditions. Whether an app store can be considered under the DMCA definition of an online service provider has yet to be tested, but it seems likely given the trend of caselaw that has held such vendors as Amazon and YouTube to qualify."
The Macintosh Is 30, and I Was There for Its Birth
Title is misleading.

> Returning to the US, I think, is the best resolution ... but it’s unfortunately not possible in the face of current whistleblower protection laws ...
>The people who campaign for GPL software authors to change their license seem to assume that the authors of the software naively chose the GPL, as opposed to choosing it for its particular spirit.

Many do. Any many of them realize they didn't actually want the GPL, they just picked the license they had heard of the most. I don't see what this has to do with the discussion of gcc being limited technically because the GPL is not enough to sufficiently hinder people from writing proprietary tools.

>That's really important distinction that people don't realize about the GPL - it's designed to protect the rights of the END USERS

That is an artificial distinction created to try to justify the newspeak meaning of "freedom" where it is defined to mean "imposes restrictions". Developers are users.
It is not only rent but other things like higher sales and income tax rates in California. My wife and I live in the mountains in Central Arizona and the cost of living is lower than California in many ways.
Show HN: How we built deferred deep links
Stallman consistently ignores the free market when writing about software freedom. What users want, the free market will provide. If they want customizable software, the market will give it to them. If they only want feature X, the market will give it to them. If they want interop., they will get that too. If they don't care about modifying the source code, well, people won't offer it.

The GPL is not what allows users to get what they need from software or technology. It's the market. As long as you have a free market, with able competitors, you don't need the GPL, and the whole discussion of "free software" is a red-herring.

Stallman's initial experience with closed software was not in a free market, so I can see how he's grown up with a colored view.
Be mostly vegetarian, with high percentage of diverse raw leafy stuff and non-modified oils (olive, sunflower, etc), everything else in moderation, and you'll be fine. Avoid any chemicals whose purpose is to increase yield, protect from plant/animal diseases, or augment taste.

/thread
I love incompetent filtering like this, it irritates those who might not otherwise care. It would be nice to see it commonplace and socially acceptable to disable the filters purely because of how rubbish they are.
the point is -who is "us"?- us the developers? us the government? us the users?
That graph certainly makes the premise of the article seem entirely incorrect.
Artur, the linked page is almost unreadable here (Chrome OSX):

http://cl.ly/image/0F212f3X2h07

The Maven Pro font appears to be infinitely thin at weight 300, it only starts being readable at 120px+. It doesn't have a version for that weight, so the browser is [failing at] simulating that.
Scrypt requires as much memory to verify a POW as to create one.
That is an unusual position, and it's certainly not mine.

I do think poverty and inequality contribute to conflict, but I also think there will be obviously struggling people and communities even in a post-scarcity world... but due to other factors, probably things like tribalism, bigotry, politics, crime, and so on.
Having grown up in the midwest, one of the main things keeping me from moving back (besides particularities of jobs/etc.) is the weather. Really really cold winters, hot & humid summers. Nice springs and autumns, though, if I could arrange to be somewhere else Dec-Feb and June-Aug. I'd pay a premium to live somewhere with a longer "nice to be outdoors" season, though how much of a premium is a good question.

I actually live in Scandinavia now, and the winters here are warm in comparison!
Is this negativity really necessary? If you're going to leave a comment about something not working at least say what went wrong and what could fix the issues you had.

I'm sick of comments like this constantly polluting HN's community with negativity.
New Wave of Sharing Tech Companies: Sharing and Caring
It doesn't. Subsequent requests are also rendered server-side and are passed down as HTML embedded in JSON that is splatted into the DOM. It isn't a lot of work to do this.
I would also add that people the bay area in general, have a "let's get it done" attitude. In the south and mid west people are a lot more laid back and generally more interested in football, Bud light/Miller light/Coors light and liberal bashing rather than putting in all-nighters. It was an eye opening change when I moved to the SF bay area.

I maybe an exception to the stereotypical software engineer, but I work best around motivated people rather than people who are laid back all the time.
Not quite. We've got about 5000 programming jobs or so available here. Of course they're not all with the latest technology, but things like http://launchcodestl.com are working to help fill these open positions.
Learn to learn
The problem with these places is what happens, when you need to hire people to build your company. The tech world is full of impressionistic statements like 'they have a startup scene,' but when you start getting numbers on available talent, you'll see you're putting yourself in a bad position.

To take an example where I have better data, people have commented on the vibrant and growing startup scene in Santiago, Chile. Maybe it is vibrant and growing, but the total number of people professionally employed in software development (devs, testers, manager, product managers, etc.) is only about 2000.

Split that 2000 into 50 different companies (and 50 tech companies would often be held up as proof of viability for the location), eliminate the high percentage with the wrong skill set for your company, and how likely is it, really, that you could build an engineering team of 20 and sustain that in the face of attrition over time?

St. Louis isn't going to have more than a few thousand of the same sort of people. Most of them are also not products of local universities with strong engineering programs relevant to most of the kinds of software behind most tech startups these days. The supply therefore is not growing at a steady rate or being replenished.

75 startups in one location? What happens, when the half that make it past the founder stage need to hire 3-4 people? Not only are there only a few available devs of any skill level available for each, but they all have dozens of options on the same block.

For startups, a higher percentage of engineers in an area employed by companies of 50-people or less actually makes hiring harder. In such a situation, they all have options of more or less equal value, and you have little to distinguish yourself from the others. The fact that SV has Google, Yahoo, Mcsft, etc. alongside a ton of mid-sized and smaller companies makes it easier.

If you've ever tried to recruit for a startup, think about how often you bring up ownership, autonomy, "startup culture," etc. as selling points? How well does that work in an environment, when nearly everyone already has that where they are?

This is just a quick set of reflections, but the overall point I hope is made. The truth is that staffing your startup is one of the most brutal forms of competition your business will experience. You're one of many, many players competing for an extremely scarce resource that very few founders even know how to identify, qualify, or retain, once they've got them.

If you ever plan on building your company beyond a small team of friends and local referrals, you should be doing everything you can to stack the deck in your favor. The Bering Sea may be an expensive and crowded area for gold prospecting, but you're still more likely to find gold there than in Lake Michigan.
Hey Patrick, we'd be happy to include any numbers that you share publicly. We gave you that opportunity yesterday, but you declined. You guys have been fundraising and having M&A talks over the last 6+ mo, meaning your numbers are "out there." I find it hard to believe that everyone we spoke to is grossly inaccurate in the exact same ballpark. I'm happy to concede that the figures may be outdated, and we acknowledged that in the article. But we also compared you guys against competitors' metrics from the same period. Our goal is to be fair and accurate. The more you share, obviously, the better.
As I said in another comment, that even assumes they were capable of knowing the driver was working for them. In their blog post they asked police to release details of the driver, with a statement saying that any driver involved in a serious law enforcement issue would be deactivated (i.e. fired). Then in the update, they confirmed that the driver (whose details were presumably released at that point) did work for them and was in fact deactivated as a result.

To my reading, it sounds like they simply had no way of knowing that the driver worked for them without the police giving them details on the driver.
Ask HN: Do you give feedback in rejection letters to job applicants?
Ahh yes, I see your point, it comes down to what cake you think will grow faster in terms of what you will buy into.

But working out what you will build into, there are different things to think about, such as potential users and their desires, and what exists currently to meet those desires. Steve Jobs was about building things people didn't know they even wanted, and that'd be something to think about with a doge app. Even messaging.. all these tips going through, they are all potential relationships and followups. How can you track who you've sent to? How easy is it for reddit users to interact with each other outside of reddit?

Can a social network be built around tipping? Maybe a user might want to bookmark someone for a tip, rather than doing it instantly, or do it off public record. So basically attaching a username to a set of addresses, which can be generated on demand. Collecting feedback and ratings between users. It should be semi-anonymous.
Shocking that PandoDaily got their facts wrong! :-) In a weird way, the press coverage feels more bubblish when the press can't figure out what is going on and do this sort of article (one presumes to draw out data they couldn't get in the first place). Of course it could just be to get the rage views.
Is there a specific reason why you choose to implement most (all?) of the functionality yourself without building it on top of any existing libraries?
Nice. I have been thinking about building a web app similar to sketch (http://www.bohemiancoding.com/sketch/). This is pretty good.
You feel the need to censor "heck"?

Seriously though, I agree. Stallman here seems to be adopting almost a religious argument, not a pragmatic one. He even announces a refusal to use Skype because it's not free software. If he prioritizes freedom over everything else, then more power to him, but to me talking about who "wins" and "loses" on some kind of arbitrary scale of freedom does not make a compelling case against the use of excellent tools like Clang/LLVM.
Exactly, most people I've spoken to consider Fulfilled By Amazon far more reliable than the best eBay seller and consequently will accept slightly higher costs to deal with Amazon instead of eBay.
Hot Sauce to Welcome Kits: Startups Send with Shyp
As I wrote to Patrick above, they've been fundraising and having M&A talks over the last 6+ mo, meaning their numbers are "out there." The figures we reported may be outdated, something that we acknowledged, but I find it extremely difficult to believe that they're wildly inaccurate for the timeframe.
What is Gett's cancellation policy?
Planet Money has a great episode on why gold:
http://www.npr.org/blogs/money/2011/02/07/131363098/the-tues...
If you dangle something into the event horizon it will be lost forever.

Large objects in free fall wouldn't travel across the event horizon instantaneously. It's just that by the time a signal from the front of the object reached the back, the back of the object would have already crossed the event horizon.
Ask HN: p0rn sites with REST API?
I'm considering on creating an unofficial one, as I needed for a project. But, maybe you know some site that is offering it.
That was always a little exaggerated IMO, but in the 20-something demographic, yes. SF feels like a giant frat party right now. At an all-boys school.

If you're 30+ things are less bad just because of the basic demographic realities of single life. But my friends from NYC still laugh at the dating scene here.
Front page of "top 15 most popular news websites" = 698 scripts, 389 cookies
The distinction is very important. The intent of Safe Harbor provisions is not to allow sites to blithely host infringing without possibility of reprisal as long as they take it down when asked. The intent is to relieve sites of the unreasonable burden of both being aware of and policing everything their users do — to allow them to act as sort of a "dumb pipe". If you have personal knowledge of infringing content, you are still expected to take it down even without a DMCA notice — and it is certainly not OK for you to post infringing content yourself.

(Standard IANAL caveats apply of course. I think I have a reasonably good layman's understanding of this stuff since my work touches on this stuff, but you should talk to your lawyer if you want concrete advice.)
> A counter example: sourceforge, as the primary distributor of many GPL'ed binaries, does not have to field GPL requests for software. DMCA safe-habor clause removes that burden; all they have to do is comply with takedown requests.

Sourceforge can get away with that because Sourceforge has no editorial process.

Apple could not continue to operate their App Store in the manner they currently do and successfully pursue a section 230 defence under the DMCA.
Yup, I think that might be true.

However, I also think (I don't know for certain) that is precisely why it is important that the FSF keeps plugging away and refusing to compromise. There has to be one place where people do give a shit.

I have started to use gNewSense 3.0 recently. Small, fast, Gnome 2 and fortunately the er - maturity - of the packages does not affect my use cases.
Interesting, an Uber driver hits someone (while not even on a trip), they release a blog post that starts with condolences to the family, and apparently a lot of people (i.e. hacker news commenters) get upset at Uber.

A Lyft driver hits someone (while active on a trip), Lyft doesn't issue a blog post (a news story contained a paraphrased "statement from Lyft", but I see nothing on Lyft's own blog), and hacker news doesn't seem to care.

This strikes me as pretty strange.
People have been saying for decades that NYC is unsustainable, yet it's still the center of the country for finance. San Francisco could well become the next New York: software engineers getting paid $300k/year and talking about how they're not really "rich" because they can't even afford to buy a 2 bedroom condo.
I work for Flywheel, an Uber competitor. We do not expose driver or passenger phone numbers to either party at all (the exact mechanism is a little different than what you propose, but the effect is the same). Driver can call passenger and passenger can call driver and neither will ever see the other person's actual number.
I remember a couple years ago in some privacy-related discussion coming across a Redtube API on github someone had written. There's probably more if you search the major porn site domain names.
He's basically saying: "We must avoid design decisions that allow users to do X, because we disagree with X".

Everyone has their own definition of "Free", but to me that seems very similar to Walled Garden decisions regarding my freedom as an end user. You could just as easily say:

"We don't want to allow unsigned code to run, because we disagree with not signing code"

I guess the difference is that you can fork gcc and start a parallel project. Or you can just let it die as llvm and clang become more and more efficient.
(1) Security for end consumer. Might seem weird that I highlight this first and foremost, but I think that security from a tech savvy standpoint is the inverse of that from a consumer standpoint. What? My Bitcoins just disappear? Someone can hack my computer and all my money is gone forever?

(2) Usability. Classic problem from Linux standpoint, hard to take something w/ current design to something that is both incredibly usable and secure for grandma to use.

(3) Stable long term demand. Right now we don't have that. If there is major adoption of Bitcoin (including merchants actually holding Bitcoin) in the developing world we may see that (watch Kenya this year, for example).

(4) Programability. This is what Ethereum (and, to a lesser extent, Mastercoin) are working on.

(5) Less transparency. Actually I don't want people to know how much money I have and what I spend it on.

(6) Price stability. I don't know how you get here with Bitcoin.

(7) Instant clearing time.

(8) Zero fees. I guess this exists in some alt coins (i.e. Doge) because there's a presumed lack of possibility of a double spend.
This isn't really all that sensationalized, based on Hawking's suggestions in question. The presence of an event horizon is quite often used as the defining feature of a black hole. The event horizon is the "point of no return" beyond which gravity is inescapable. If Hawking is claiming there is no definable event horizon (due to turbulence or whatever else), then he's claiming that there is no set of points near a dense, massive object that are inescapable.

Now, it may be fair to label this as sensationalism anyway. The source here is a brief, conceptual talk by Hawking at a conference (and an associated writeup): it's not as if he's proven a theorem (as he did years ago when he first demonstrated Hawking radiation, for instance). But honestly, it may be newsworthy that Hawking is even considering this sort of resolution to the current "firewall" debate. It would be one heck of a change in perspective!
There's no "UK Porn Filter". Please stop believing this.
There are some citations in the Disadvantages Section of the Gold Standard article on Wikipedia: http://en.wikipedia.org/wiki/Gold_standard#Disadvantages
> Ugh, this entire thing is in coffeescript too

You mean the entire thing is noise free an easily readable, I agree.
"opens up new economic opportunities for drivers". It's not sales. It's part-time job openings. Their phrasing sounds about right.
> What end benefit does this give to the users or to the currency?

It lowers the risk of investing in mining gear since it is more likely to be able to be repurposed should one chose to abandon mining. Lowering the risk of entry encourages entry.
That is an additional issue but only concerns GPLv3. GPLv2 is restricted for the reasons I mentioned above.
That graph contains no numbers and therefore does not have enough information to refute (or even disagree) the article
That warning was bothering me enough that I ended up forking jquery-rails simply to drop in 1.11.beta3.
Until jquery-rails gets updated (doesn't appear to be at the time of writing) this is an easy one liner:

gem 'jquery-rails', github: 'onpaws/jquery-rails'
Your point about the mascot is something I had not thought about. I mean there are plenty of logos that are pretty silly (Geico Gecko for one).
This is incredibly valuable for any app that has an invite viral loop. Kudos to the Tapstream guys for making this free!
Target has free wifi
You kind of seem to be avoiding specifying, but which ones, if you don't mind sharing?
Wouldn't that be OpenSSL? I can't find a single package in the Debian repos that depends on nacl. Do you have any examples?

I'm not bashing nacl, I've just not heard of anyone using it over GnuTLS, OpenSSL, CryptoPP or others.

Edit: libsodium apparently. Awesome.
No, the post is a little oddly worded, but 6/7/8 support wasn't ever removed from the 1.x branch. Just important to note that the 2.x branch removes support for them.
A Care.com IPO Roundup - Some Excitement, Some Caution