skysight-inc/HackerNews huggingface dataset:
> "Then should you really be running an exchange handling millions of dollars of transactions?"

So what happens to people who aren't running an exchange handling millions of dollars of transactions? It doesn't matter if they get screwed by this flaw?

I read much of the wiki and never encountered any reference to transactional malleability.
This will come as a shock to those who are lactose intolerant, a mutation whose rise is in the vicinity of that time period.

Protip: Evolution doesn't actually stop.

Unless that was sarcastic. At which point, carry on :)
https://www.dartlang.org/
I Got A Bus Earlier, And A Woman Was Being Tortured Right Next To Me
> no evidence that any money was spent on traditional user acquisition

I love this. In my eternal naivety, I would have assumed 'traditional' user acquisition would refer to organic growth, not the $80K user review services referenced in the article.
That describes me pretty well. I thought I was going to get by in every field because of my raw talent. It turns out that you actually have to be organized and achieve things, however.
Ask HN: Well known software projects that floundered due to founder's death?
In the post today about ESR chastizing Linus, he mentioned the worry about something happening to Linus which could've been trouble for Linux.

This got me thinking: are there are any software projects that have been impacted severely (probably negatively, but maybe positively?) by the death of a key contributor?
Encryption without identity assurance really doesn't mean anything though--one might be a victim of a MITM attack.

The issue is that XPKI is _really_ easy to get wrong, but there are alternatives.
Perhaps Facebook's Algorithm was less an even-handed garbage site detector and more a direct penalty to upworthy domains.
> the kinds of problems most people have seem trivially simple to me

This sounds a bit narcissistic. If you think other people's problems are trivial, maybe you're just not being empathic enough to understand their full scope.

If everything looks like it follows simple patterns, maybe you just aren't looking close enough.

When you learn something new, there's often this point where you feel you understand it all. If you're a quick learner, you will reach this point quickly. But things only seem simple because you don't understand them fully yet. You have to continue learning, specialising, looking at the details, and only then will you learn that the subject isn't quite as simple as you thought.

You get bored when you figure out what kind of car someone has, or what color their furniture has. You think you have them all figured out. But if you continue talking to these shallow people, you might see there's something beyond these superficial details.
Legal difficulty includes avoiding cases of constructive dismissal.

Also, not sure how it works in the US but employers owe their employees a duty of care to protect them from harm and this includes bullying and undue stress.
We don't need a new build system, we need a new mentality.

The problem with build systems is they don't cover the entire scope required to actually build software reliably. Ideally, you want to take just your code as input and produce a target, but the reality is that you're taking your code, plus an environment with potentially infinite number of configuration options, and you're asking the build system to produce a target. This is effectively saying "Here's some code and some shit, please do your wizardry and make me something that looks like this." Is it any wonder that every proposed solution to this difficult (impossible?) problem gets it wrong?

The correct solution is to declare the target you want, then build up the dependencies you need as input to meet that target and declare them explicitly, then perform the build in that isolated environment to ensure that no undeclared configuration options can alter the result of the build. This is what Nix (http://nixos.org/nix/) does, and by derivation, Guix (https://www.gnu.org/software/guix/), and Debian's ReproducibleBuilds is also attempting. The build process becomes effectively a pure function, free of unwanted side-effects.

Nix doesn't actually perform builds in itself, except for trivial ./configure && make. It piggy-backs on existing build systems via bash scripts if needed, but it completely manages the environment in which such script will run, so it has local-side effects which are controlled, similar to how you might use the ST monad in place of IO in Haskell perhaps.

I find Guix a bit more interesting because it can take on the whole problem - including the build system. While it can piggy-back on existing build systems in the same way Nix can, you can also write your own in Guile (or some other language and invoke from Guile). It doesn't really make sense to depend on the old cruft under this new mentality, because things like pkg-config are obsoleted by known, explicitly declared dependencies. The build process can be simplified (and probably sped-up).
Blockout.io AES-256 MESSAGE ENCRYPTION
Biggest DDoS ever aimed at Cloudflare’s content delivery network
SEO Plymouth Company Offers Crazy Discounts On Website Services.
SEO Plymouth Company Southwest Web Services are offering huge discounts on all search engine optimization, web design and website services.
You skipped two grades in one subject with a peer so you weren't by yourself among the older children. I can certainly believe that worked out fine.

Maybe even in the more extreme case of a child skipping several grades altogether by himself, that's the best of a bad set of choices. But we shouldn't be offering only bad choices. At least in/near any decent size city, there should be a large enough population to create classes of a reasonable size of same age students at roughly the same level.
I'm curious about: https://www.abacus.com/tos

"BY REGISTERING FOR AND/OR USING THE SERVICES IN ANY MANNER, INCLUDING BUT NOT LIMITED TO VISITING OR BROWSING THE SITE, YOU AGREE TO THESE TERMS OF SERVICE AND ALL OTHER OPERATING RULES, POLICIES AND PROCEDURES THAT MAY BE PUBLISHED FROM TIME TO TIME ON THE SITE BY US, EACH OF WHICH IS INCORPORATED BY REFERENCE AND EACH OF WHICH MAY BE UPDATED FROM TIME TO TIME WITHOUT NOTICE TO YOU."

"VISITING OR BROWSING THE SITE"? Is this typical and is it actually enforceable?
You're quite wrong -- BTC is strictly less flexible than fiat. I have my own opinions, but this is inarguable and is presented as an advantage of Bitcoin, for example Bitcoin cannot be created arbitrarily by a government, Bitcoin transactions cannot be reversed, untraceable transactions cannot occur in Bitcoin, et cetera. All of these are clear restrictions upon existing currency systems.

Some possible ways that it might be interpreted to be more flexible are scripting, n-of-m transactions, and so on.
I haven't read the article completely, but I've enjoyed what I've read so far. I'd like to follow along in more detail with a perl interpreter. I'd love to see an entire book that completely tears down the entire interrupter from the perspective of within.

I purchased Ruby Under a Microscope, but I was kind of put off by the similar issues other commentators are having, that it appears to be a basic introduction to how to write Ruby, but that is just how the task has to be approached (based off your existing assumptions and test to see if they hold up). But when the task is complete, you have knowledge on a better way to write Ruby, by accounting for all the exceptions that you can't "see" in the source code, due to leaky abstractions.
That was Meteor.js' Series A round after they finished their time at YC. NPM did 2.6M in Seed.
The sad thing is, deploying code should be this easy and fast whether or not your are using Heroku.
Places with restricted conversion for regular citizens will also have a discrepancy between the official exchange rate and what people pay on the street. In recent history the difference has been roughly 30% in Venezeula, and 100000% in Zimbabwe. Caveat emptor.
I'm positive that I've seen configure scripts that try to check whether they, themselves, are out of date, and regenerate themselves if so. That's the only time I've seen an error about autoconf version skew.

To be fair, I've only actually seen this on scripts I was writing - never seen it happen to something that passed make dist.
I can vouch for your article. I believe you captured the problem with school-level math.

As an anecdote for you, since you're a mathematician: during school I had zero patience for math. I would often study just enough to get a passing grade. On the other hand, I enjoyed physics classes a lot, it involved more problem solving and holistic vision than memorization (since you can just memorize a couple formulas and derive everything else you need - e.g. the second and third equations of motion from the first). Maybe I would have enjoyed math classes more if it involved more intuition and less rote? I'm sure you'll come across kids like I've been during your voluntary lectures.

PS: I'll be following your blog.
I am coming to the observation that Hacker News, as a population, tends not to read the scientific papers they talk about.
I've sworn off cheap VPSes - most are running WHM as their control panel/billing and they're a target for DDoSes and attacks by skiddies.
Software freedom is the ability to do whatever you want with the code, for example, compiling it. I'm not saying there's any sort of license violation here, but it's not in the spirit of software freedom to "not supposed to install software [from source]"
A different kind of valentines website
Flappy Bird Think Pieces
Hell, given the null hypothesis is an assertion of perfect equality, I'd argue it's inherently a straw-man. It's one of the reasons behind "Fail to reject H0" rather than "Accept".
I think the events of the last few years have provided adequate evidence regarding the nature of "liability" as it applies to banks.
Generics notwithstanding, Go's slices are typed.

var stuff []MyType
So the system will be busy starting and stopping services in case of faulty network, instead of having them sit there patiently while the line continues to flap? Great idea - not sure when Cisco will copycat that one, though...
I won't call you over-cautious, but I submit that it's much much cheaper to travel around the world for an extended period of time that you might imagine depending on where you go (i.e. Thailand = cheap, Iceland = not cheap) and how comfortable you are working odd jobs and/or staying at strangers' houses. I traveled literally around the world a couple of years ago (albeit for months, not years) and spent far less than I do living as I do now in the Bay Area, plane tickets included.
I find neither sh nor make particularly painful. Python, however, I cannot stand the sight of.
Our Internet Empathy Problem
I'd argue that fractional reserve banking is still better than having a "currency" that is backed by absolutely nothing and may lose up to 90% of its value on a moment's notice.
I've been in any number of modern countries speculating about the inferior intellects of a minority.
Has any work been done on identifying the browsers connection speed so that we may serve high quality vs. low quality assets? The only thing I've been able to find for this is the MaxMind GeoIP Netspeed database, but I have no idea if the data is accurate enough to be valuable. I suppose you could measure latency, but not during the initial page load..
The mechanism seems similar to PRoot ( http://proot.me/ ) which uses ptrace to intercept filesystem operations to create a userspace chroot.

I wonder if there's value in creating a library for intercepting filesystem operations via ptrace...
This is especially true in a third world country with perhaps a modest level of corruption. Everyone will want a piece of you whether or not you wanted it. Personal safety and the safety of your family all of a sudden become a major concern.
You mean two-factor auth on the IdP, or on the site itself? The former wouldn't solve the problem, but the latter would.
Japan Aims to Restart 10 Nuclear Reactors by Summer
The NSA does the 1980s
I remember when we were dating, we got in an argument about something, I don't remember what exactly, and a typical lover's debate ensued. In a debate I'm usually able to rationally disassemble another person's arguments and "win"...and I remember the moment that she presented her argument and it was different than mine and I realized she was absolutely correct and I had built a sloppy argument in my mind.

I told myself, "I can't let her do that to me again", because it didn't feel good to actually really lose an argument because the other person was authentically correct and I was wrong.

And then it happened again and again.

I had never met another human being where that happened, ever.

If I feel this confident about my argument, it means I usually know it well enough that I can out argue anybody, it got me out of lots of fist fights in school, but also into lots of trouble with my teachers as I disassembled their lessons -- literary symbolism was a bad class for me for example as I challenged many of the asserted symbols and interpretations.

If I don't know it well enough I usually just keep quiet about it or don't get involved in a debate in the first place, and instead sit back and quietly learn.

But with her, she was able to, with less information, completely out-think me. To this day she still does it with alarming regularity.

She's been amazing, she helps me clarify my thinking and keep focused and not get caught up in negative thinking and actions too much. She comes up with and gives me constant challenges that take years to complete and keep me engaged in constructive positive thinking rather than destructive/deconstructive thinking. She's helped me get past decades of hurt and social isolation from my childhood and has literally polished me into a productive member of society.
Doesn't the http package's Server recover from panics in the goroutines that are created to serve requests? That bugged me when I saw it happen. If my request handler panics, I wouldn't expect the server to recover from it.
> If it walks like a duck and it quacks like a duck...

That's fair, but there is also a pretty big gulf between what Mozilla is actually doing and what most people think of when they hear the headline "Mozilla to deliver ads in Firefox."

As proposed, this is basically a set of preloaded bookmarks that automatically disappear after you've visited nine sites.

So yes, it is advertising, but every indication I've seen is that it's being done responsibly, which is a degree of nuance lost in the headline. Then again, I am a Mozilla paid contributor, so I might have a more charitable bias.
The title is backwards (or has side effects). I was about to shudder when I saw the HN title!!!

Programming language expert != programming expert.
You can also use 'runit', which has quite similar design, but comes pre-packaged for a lot of systems, and can run as init, too (only if you want to).
Oh, how I wish someone had told me this when I was fourteen. As a matter of fact, someone probably did, and I just ignored it. Public school isn't exactly challenging, and it's hard to believe that a problem could possibly be beyond your ability to intuitively grasp it when you never see actual evidence of that fact.
"If someone says they are my friend, I assume they claim to be a friend according to the definition of the word "friend"."

OK, good point. However friend is not really defined by Wikipedia. We all have an intuitive notion of what a friend is. Likewise I don't think people look on Wikipedia to check if they might be feminists.

My point is that many who say they are feminists because they want equal rights have actually joined forces with something much more negative instead.

"In either case, economic realities dictate who stays home and how long -- and that is an impediment to equal (parenting) rights."

But what if women choose jobs with lower pay but higher flexibility, so that they can stay at home with kids? Isn't that a sensible and reasonable choice? Which, btw., nobody is forced to make. There are plenty of women who earn a lot of money.

You will argue that society expects women to stay at home, but ultimately, people in the Western world are free to choose their own mates. I think a lot of men wouldn't mind staying at home and marrying well earning women.

As I said in other comments, I think it is actually a female privilege to be allowed to stay home, and also to choose jobs with lower wages. That's where I think feminists have it completely backwards.

If you think about it, why would a woman support a man staying at home? Why not pay a nurse instead, might be cheaper than paying half of your income. The other way round it doesn't work because women give childbirth.

Of course all the articles about relationships breaking when the woman earns more than the man make the cause out to be male desire for dominance and vanity. What if instead it is the women who can't cope with it - because they don't have to?

You look at the numbers and decide women must get a bad rap - you claim all you want is free choice for everyone. But the possibility that women chose their path deliberately doesn't enter your mind. That's the feminist bias at work. Which, btw., seems to assume women are stupid. Feminism is a weird beast indeed.

Another indicator that women's choices might not be so stupid at all is their significantly longer life expectancy over men's. Personally I'd happily trade a chunk of my pay check for a 10 years longer life.
Infecting more machines (to obscure the targets of interest) is a trade-off of course, and is not necessarily valid in the general case. The more machines you infect, the more chances of being discovered.
Don’t doom your startup to failure – know your centers of influence
Yeah, luckily the area I grew up in happens to have one of the top rated public school districts in the nation, so most things that were offered in private school education-wise were offered in public school as well.
DoorBot – The Doorbell for Smartphones
Meet The App That Wants To Change-Up News Consumption
If you have much trust in independent audits, I guess you've never taken part in one!

Auditors generally have no incentive to rock the boat, and might have a disincentive in the form of losing future business. And even if they're really thorough, most auditors are only in for a few days or weeks and don't have time to go through things anything like as thoroughly as people who work on them full time. And even if they're really thorough and have the time to go through everything with a fine-toothed comb, insider threats can be undetectable, like if the guy preparing the cold storage wallet to put in the safety deposit box makes himself a copy.

The only audit of an exchange worth a damn is the audit undertaken by reputable insurers who will guarantee my entire deposit.
I really like Jeremy Keith's approach to "responsive javascript". He uses `:after` and updates the content property based on media queries. It keeps it nice and DRY. Here's a small demo: http://jsbin.com/meqon/2/edit?css,js,output
Seeds of life can sprout in moon's icy pockets
Perils and pleasures of mood-sensing technology
It's a great action - and technically speaking takes us to a new level I think - I look forward to adapting the code for other campaigns I'm involved with. I appreciate the background and your work involved in bringing groups together internationally.

But my question is, with the publication/confirmation yesterday of the basis of the US drone assassination program in NSA cellphone spying (see https://firstlook.org/theintercept/article/2014/02/10/the-ns...), will you be incorporating a demand to reign in the NSA because their surveillance is killing innocent people? I think it is a real opportunity to reach out to many other groups and individuals who are opposed to and organizing against the drones both in the US and abroad.
No problem! Thanks for investing time into the project -- I'm sure it's a lot of work, and I'm sure the community really appreciates it. I enjoyed your tutorial and look forward to a few more :P
AFAIK, Gyp's biggest user is Google (Chromium uses it, and maybe others). Are there any non-Google projects that use it?
Now that Firefox Accounts is being used in Mozilla properties rather than Persona I'd expect more downplaying of Persona to come from Mozilla, including employees like OP. Is Persona still being developed at Mozilla?
protomyth we totally hear you on this, it sounds very lawery but it is standard language used in most Terms of Service. If you look around the internet you will see similar sentences on most web services.
I'm not sure which limits you are talking about. These, or others?

> http://cr.yp.to/daemontools/softlimit.html
Since each IdP has a private key, couldn't they request "pinning" it? So, for example, I can ask my IdP to say "I will be the IdP for this user for at least a year, if you get a different signature within this year, it's an impostor".

Each client would have to cache the ID specifically for every user, but that doesn't seem too bad for the extra security it gives. Alternately, the user themselves could send the IdP ID to the authenticating site and the site can check that they match, thus detecting any foul play.

Please correct me if I'm talking out of my ass, it's been a while since I implemented an IdP.
Skills you need to get product/market fit, all in a line
Could you run your own CA?
> > We shouldn't give a shit about current drug dealers

> And who do you think that that society is structured around?

That society, if you can even call it one, is the very thing that legalization is designed to destroy. Hardened criminals hiring 13 year olds to deal off street-corners to make some cash to pay for their siblings groceries is a self-destructive local-maxima.

If you want to understand legalization, then you need be able to understand a society free of the influences of discrimination enabling drug laws. We want to not break up social structures and support in the first place.

> "This will never happen, and the Jim Crow laws will continue just fine without pot."

Well no, they wouldn't. See: the massive amount of black people jailed for marijuana alone. Nothing is a full-proof silver bullet, we are dealing with shades of gray, but marijuana laws are the biggie. They need to go, even if we cannot manage to tackle anything else.

Progress has already been made on the crack front, bringing penalties back down to the level as penalties for 'standard' cocaine (a drug with high-class associations). There is more work to be done, but we are getting there one baby-step at a time.
mass surveillance... is always a violation of our inalienable human rights.

Whenever I see something like this, I think of Inigo Montoya:

Protestor: They're taking away our inalienable rights!
Inigo: You keep using that word. I do not think it means what you think it means.
C64 Music for Dummies (2012)
View source on this Mashable page to crash Chrome
I'm stoked to see the webhooks get an overhaul. I was just about to use them for a project, and this'll be a great help.

I wish they'd do similarly for the services. Currently, editing multiple services across repos is a bit of a pain, due to the length of the list and how it jumps you to the top on any interactions. (Originally, I thought this announcement meant they'd revamped that as well)

Out of curiosity, is there a generally-accepted best practice for rate-limiting / authenticating webhook pushes? I'm planning to run a daemon that listens for them, and while the effect of somebody finding the URL and hammering it isn't likely to be catastrophic, I'd still like to rate limit it if I can. Alternately, are GitHub's webhook-sending IPs static enough to put in an IP set and add to my firewall?
I just want to say that I would gladly pay for private npm hosting. Something along the lines of github's private vs public repos would be extremely valuable. Yes, we could set up our own private npm server, but this seems like an obvious thing to outsource to a service as long as the pricing is not crazy. Best of luck!