skysight-inc/HackerNews huggingface dataset:
> I am more interested in driver less big rigs and trains. I figure that planes and ships are more heavily protected by union organizations.

Well, there's always the teamsters[1] to consider.

[1]:http://en.wikipedia.org/wiki/International_Brotherhood_of_Te...
Real money, invested with algorithms
They operate in an occupying country. Shameful.
Why I choose Github pages
Github pages is something I've recently heard of but really like it from the begging although I didn't exactly knew how is working.
Sorry for being inaccurate Tali, you're right about the parsing and the other areas where WL is being used. It's been a while since I poked around WA.
A group voting system that uses text messaging that isn't frightfully expensive for a small (~50-100) set of users.
This is fundamentally a play in how smaller companies can take higher risk, more agile approaches to solve big problems. When a VC looks at this, he or she sees an asymmetric risk profile: huge risk bounded by losing everything. For example, if an investor puts in 100k, the most he or she can lose is 100k, but the upside is much much more than 100k. For me as a founder, though, this is the reason I love startups -- they can change the world. Taking big risks and having world-changing (even more than monetary) success is something that startups can do that mature companies sometimes struggle to do (with exceptions, of course).
It's kind of interesting to consider how the Tesla would have been reviewed by Consumer Reports were it an Apple product. Too expensive, incompatible with gasoline, short-ranged.

It would either get placed in its own category, or simply downgraded because it didn't have a gas tank.
I definitely agree that the story from nothing to Yahoo has a lot more educational value, and that should be the story to tell your kids as it is something actionable and achievable through hard work.

The step from Yahoo to 19B, sadly, is more catchy for the newspapers because it's a "rare event". People don't really want to read about the "boring" stories, they want the dreams. It's human natures though. Which one do you think your kids like better: fairy tales/feel good movies or home works?
It's a protocol-relative URL, which inherits the protocol of the parent page.

http://www.paulirish.com/2010/the-protocol-relative-url/
As shared by Mike Arrington, don't know anything about the validity of the data.
Updates are signed and the OS will refuse to run them if signature verification fails, so unless your MITM has Apple's signing key that wouldn't work.

(And no, this bug didn't break client-side signed package verification.)
No, it's just a bug of the SecureTransport backend in curl [1]. I thought Apple maintains the backend as nobody else uses it (homebrew curl uses OpenSSL) and that's why I've submitted the issue to Apple instead to the curl maintainer.

So maybe it brought some eyes on the "gotofail" but that's just speculation…

Thanks anonymous Apple guy :)

[1] https://github.com/bagder/curl/pull/93/files
Cmon guys, upvote Ben Horowitz donating book $ to int'l women's rights
By removing the scheme from the url, the browser will use http/https based on the scheme of the containing page.
Yes, this should be fixed in 10.9.2.
The packages themselves are signed: Mount the .dmg file and use pkgutil --check-signature /path/to/Installer.pkg to check whether the package is signed by a valid CA (if you want to be totally sure, do this check on a machine running 10.8 or earlier)
consumers don't interact directly with the Fed. from their point of view I guess you could call it a third party.

banks interact directly with the Fed though. to them it is a first party.
I'm late 20s if that is young to you then fine. I have a gmail which hasn't changed for some 10+ Years. Before that I had a hotmail account. Now I have my own domain and redirect everything to that. I won't ditch the gmail probably ever it is too hard to move everyone to the new address.

My father has had the same email address for some 20 odd years I had to find a redirection solution for him so he could switch off of a now poorly priced ISP. His reasoning for not changing: I would have to update every single one of my clients and force them to change my contact details. That's just not going to happen.

I had a feeling my remark might get this kind of response but didn't really want to get into it during my post. Sure there are exceptions, I've changed over the years too, but in reality a lot of people out there are not in a position to jump ship with their email addresses, they are tied into everything they interact with online.
I'm inclined to agree with cperciva, who is no slouch with security stuff: https://news.ycombinator.com/item?id=7289273
DoD has its own smartcard-based PKI, which is what those certs are tied into. Apple supported those smartcards natively with earlier versions of Mac OS X (though you had to install the root certs yourself) so it wouldn't surprise me at all that Apple is trying to make their gear "out of the box" compatible with DoD's PKI-based web services.

Not even necessarily so that you can use Mac in DoD, but so that a soldier, sailor, Marine, airman, etc. can buy a Mac for their own personal use and still login to those damn training sites, pay processing sites, etc.

After all, if DoD wanted to do nefarious things with a digitally-signed something or other, they'd just buy the digital cert needed from VeriSign or whatever today's equivalent of DigiNotar is, instead of something so hopelessly obvious.

But don't let me interrupt the jerk.
That's known as protocol relative URLs. That way if your static page is HTTPS the form action will be the right protocol.
ShowHN: HealthSherpa integrates with Healthcare.gov, cuts signup time in half
I doubt a ship made for only robot operators would have any human accessible doors.

Pirates may be able to approach the ship, but entering is a different story.

Cutting a hole in the side of the ship would be the only option I could see.

Same goes for disabling the propulsion system. If there's no cockpit, there's no switch to disable anything.
I'm probably missing something obvious but I don't understand how this is different apart from costing money
Well, on the other hand if they haven't done the rewrite, Mozilla wouldn't be here now, and Netscape would have been an insignificant player like Opera at best.

So, it might have not worked out for Netscape the company, but then nothing would have, and at least if worked well for Mozilla the organisation.
Looks like you can get the sha1 via https: https://support.apple.com/kb/DL1726
In the UK train fares are not a metric. Specifically, sometimes travelling A to B then B to C is cheaper than getting a ticket direct from A to C. For example ...

Just about two years ago I had a return journey from near Liverpool in the North West of England to Exmouth, in the extreme South West. The simple return ticket was about £115. However a return Liverpool to Cheltenham was about £50, and a return Cheltenham to Exmouth was about £45, so I saved about £20, and didn't even have to change trains.

It's against the terms and conditions to scrape the official web sites for fare and timetable information, so clearly I wouldn't write a script to do that and then search for optimally priced combinations, even though I spend about £9000 every year on rail travel and could save about £3500 a year.
As a designer, this reminds me of "men, here's how to talk to women."
Hey, I'm wondering why warehouses exist.
Google Expands Underwater Street View To New Locations
Unless your box has already been pwnd and the update installer has been modified to not install that update in the way it was meant to be.
Microsoft also has a history of not disclosing it until there's a fix.
If you don't know functional programming, of course you won't be able to understand functional code at a glance. You wouldn't expect someone who doesn't know imperative programming to intuitively understand imperative code at a glance either. It's not opaque, it just requires learning.

Not being able to convert the code in your head into type-safe functioning code just means that you don't understand the code well enough yet. That's not a bad thing about you or about the language, it's just the state of things. Once you gain that understanding, you'll be able to write code that compiles, and you'll also discover that now the compiler is your best friend. Writing Haskell is extremely comforting to me, because I know that the compiler has my back. It's not a straightjacket, it's a guardrail alongside a mountain highway.
This was an interesting post...
I liked the first one, and I think this version is very good looking too. Good job.

I suggest you add a "play" button, where it scrolls from one end to the other at a slow pace, much like in the first iteration. It's nice to sit back and enjoy the view.
An API To Make Your Products and Services Available At Walmart, Target and CVS?
> A little regulation and over sight might have prevented all this.

Yes, but that is completely contrary to the whole reason Bitcoin exists in the first place. If you wanted a regulated currency you'd get fiat. It's wild west by definition, which is good for popcorn-muncher like me... but bad for friends of mine who have lost a significant amount of money by "experimenting" with Bitcoin. :(
> But, mediocre to me might not be mediocre to you. If I have someone with enormous attention to detail but this position need a high degree of creativity and experimentation, that person might perform as mediocre. But you may have a position that needs that attention to detail. We can both shuffle our directs and change our team ratings from 3(out of 5) each, to 4 or more (where 4 is better).

This is the point of the upper left quadrant. If you feel like the person is good but in the wrong place then you look at yourself. Is your management style not working for them? Do they need to be in a different position?
Little off topic.

When I first moved to SF @ 19 I looked quite young and carried my laptop in my backpack. I didn't have much cash and would pay the student/child fare to have enough $ for food.

I even knew the name of a couple local high schools and their teachers so that when I would eventually get called out I wouldn't get caught in the lie. I felt pretty bad about this "hack" for awhile, but I wouldn't have been able to eat without it. Thanks MUNI for subsidizing me.
You're forgetting costs associated with crew beyond pay. You also have to pay for food, insurance etc.. there's the risk of hostages being taken. Additionally, removing the bridge/crew quarters makes for more space to put containers, the ships could end up looking like barges with the entire top surface covered in containers.
:) thanks for sharing the data
So in order to show the importance of this security update, they've put it in bland writing in a long, detailed security notice that only the most ardent of admins would read thoroughly, and even then it doesn't particularly stand out as important.

Regular Jane and John Does or even power users would have no idea of the importance of upgrading their system for this. "500MB update? Nah, it can wait, I don't need any of that".
If anyone has 38mins to burn...

http://techcrunch.com/2013/12/17/foundation-brian-armstrong-...

A Google Ventures video about coinbase security with Kevin Rose(from old Digg) asking a bunch of questions with Coinbase founder Brian Armstrong.

Sounds very legit to me.... but... you _still_ shouldn't leave huge amounts of bitcoin in any exchange! Make[1] your own btc-address + private key and keep the coins there. And note that bitaddress.org can be git clone'd and ran on a computer without internet access.

1. https://www.bitaddress.org
Sounds solid. Good luck!
Or I could host it in S3 for ~$15/year.
> http://localhost:4000/blog/2014/02/24/why-i-choose-github-pa...

Whoops
Isn't that the kind of shit bitcoin was made for? Drugs/contract killings in the "deep web"? Would not surprise me at all if some of those guys are serious, especially if they just lost their life savings.
>Yes, but that is completely contrary to the whole reason Bitcoin exists in the first place.

Not really. Satoichi has shied away from the political motivations of a lot of the community.
In the US, yes, but in some countries the Tesla is actually cheaper than the Audi (which is the car you are comparing it to there) because of tax breaks. See http://www.ibtimes.com/tesla-owners-norway-get-134000-tax-br...
This is good. It makes me really happy to see someone actually solving these issues in a reasonable way rather than throwing hands up in the air and complaining. Better software and systems are better for everyone.
"...but it's not particularly idiomatic and the Rust elite would sneer at me."

OMFG..and in this day and age is soooooo much more important not to be sneered at by the "elite" then it is to have working code...

man do i miss the days when programming was about getting stuff working not worrying about the political and social impact of how your style was...
> This is why there are no interpreted languages without a reference implementation that haven't failed miserably.

Matlab? I'm not exactly sure what you mean by "reference implementation", though.
Online version: http://www.google.com/googlebooks/chrome/
Google Voice silently drops all MMS. So any multi-recipient text or any text with an attached pic will just not get to you and the sender will think you just didn't reply.

I ported my Google Voice number out to my cell phone which is a huge pain but it did work eventually.
Microsoft releases Office 2013 Service Pack 1
Inspire or Stifle? Reconsider the Purpose of Criticism
While this is too long IMO, Similarly critical bugs in windows have been left unfixed for years.
Some silly suggestions for the future versions:

throwing an exception: YOU KILLED MY FATHER BIG MISTAKE

catching an exception: COME WITH ME IF YOU WANT TO LIVE

finally: REMEMBER SULLY WHEN I PROMISED TO KILL YOU LAST

null value: @YOUVE JUST BEEN ERASED or @HASTA LA VISTA BABY or @I LET HIM GO

positive infinity value: @YOURE FIRED

negative infinity value: @WHAT KILLED THE DINOSAURS THE ICE AGE

NaN value: @IM PREGNANT
Ish. 2.0
Under the presumption that it is true that ~750k BTC has been stolen, has anyone considered the possibility of orchestrating a 51% attack on the attacker(s)?

Gox probably has logs of withdrawal requests. It might be daunting but feasible to sift the tx-MAL withdrawals from legitimate ones, then work with major pools and exchanges to double-spend stolen coins back to Gox.

Gox could then be forced (by the same 51% majority) to pay legitimate requests for reimbursement by vendors or 3rd parties holding stolen coins they transacted for goods or services, given reasonable documentation. Leaving us with some but not unacceptable collateral damage.
Counterexample: Damian Katz and how he did a rewrite on the Lotus compute engine[1]. I guess it depends. For 30k lines of code it should be possible for any good engineer. A browser is of course in another ballpark, but if you have a really good core team it should still be manageable. It also depends on whether you're willing to break things (Apple with OSX).

[1]http://damienkatz.net/2005/01/formula-engine-rewrite.html
Visualizing 15 Years Of Acquisitions By Apple, Google, Yahoo, Amazon, Facebook
Did you even read the article?

"By replacing the bridge -- along with the other systems that support the crew, such as electricity, air conditioning, water and sewage..."

It's not just eliminating people. It's eliminating the whole bridge, and adding more cargo. And the 12 to 15 percent number might be a "fuel per unit of cargo" number, not necessarily "total fuel per boat".

"Build a dedicated high-speed nuclear, wind and solar powered high speed cargo train connecting the US coasts and the gulf"
Who do you propose pays for this, the government which "don't now any better"? Private companies?
If this was actually cheaper than burning a million dollars of fuel, they would have done it already.
And I doubt trains could carry nearly as much cargo as a large cargo ship.
>Anyone who has attempted to implement trivial things, like thematic scrollbars or cross-browser capable code, or dealt with dom thrashing via JavaScript, knows the amount of effort going in (or knowledge required) to do trivial things is ridiculous

That's true, but that's maybe for the better?

In the sense that it leaves a place for desktop and native apps to thrive too.

I would worry if the browsers was a great execution environment, that could even run Photoshop or Valve or Pro Tools, and every company went that route.

It would mean total loss of data freedom (they would push you to have them in the "cloud"), and a rent-model for software purchases, with software being able to completely change under your feet (like Gmail did for example).
Yes, if we assume you're already fucked, then we can conclude that there is nothing you can do to verify anything and that you are fucked, because we have assumed our conclusion. SHA1s and MD5s are equally pointless in this case because you've already assumed you're fucked, so it should all be assumed to be lying to you.

If, however, we don't engage in circular reasoning and we assume your box isn't currently in the possession of the Russian mafia or (insert preferred APT here), then how can one be reasonably confident that the update one receives through the updater is legitimately the one Apple is distributing?

Because it is signed and the code-signing verification was not broken by this bug.
FYI New York State is actively building the framework for regulation of digital currency.

http://www.reddit.com/r/IAmA/comments/1ygcil/as_requested_im...
Haskell is absolutely fantastic. In C, when I'm given only the prototype of a function like:

> int foo(int, int);

Even if you tell me it is referentially transparent, I have no idea what that bloody function really does.

But with HASKELL, with just the type signature you can write a program that does what you want even though you don't know what the components you used do! Mind/Blown.
It's unfortunate that many people here seem to think that success is something achieved in single step, as if one day he wakes up and cancels his food stamps because he's suddenly a billionaire.

This is a very debilitating attitude, and it prevents people from doing what is necessary to get to the next step. It will take years, and possibly generations, but it will never happen if you are expecting it to be an overnight thing.
But isn't the result at least somewhat biased, as the car is mostly sold to environmentally conscious consumers, who might knowingly or not ignore car's potential problems to promote the nature friendly aspect of it.
Maybe the break in a switch statement... could merge with Impossible's request:

WHO IS YOUR DADDY AND WHAT DOES HE DO (foo){
SEE YOU AT THE PARTY 'bar':
//kill bad guys
I AM THE PARTY POOPER;
}
Well, I meant the people actually stealing money, who don't seem to get mentioned much in this whole discussion. What Empty Gox has done is not really good or right or anything, but deliberately stealing is worse in my book.
Answer: b/c I am an attention whore parading around as a V.C.
Unregulated industry.
You can move it from the corner and it'll act like any other chrome window.
Need Help HN – Longtime HNer Needs Help
This is a pseudonym. Don't want to publicly reveal my identity. Fear? Pride? Maybe.

Am like most of you. Have a few K Karma, been here for a while. Love patio11's comments, grellas's legal analysis of stuff that bother me, and YC.

I build web apps for clients, but am working on my own product. A non-tech product, so won't be launching on HN (rather where my customers are).

All new products, take a while. Since it is non-tech, I can't just ship and fix bugs later. The feedback/shipping loop is much longer than a web app.

I am now disillusioned with building web apps. Last few months, a client ran out of money mid-project and other prospective leads have been dragging their feet. The result has been a MAJOR cash crunch the last 4 months. Scraped by on savings for the two months, and credit cards since. But have reached my limits and need options.

Married with 3 young kids and stay-at-home wife.

I don't want to get a job because I know my product launch is around the corner (perhaps the next few weeks - few months).

Ideally, I would like to do some contract work.

My skillset: Rails developer; MBA, with a solid grasp of finance and startups; Learn quickly.

Looking For: A few flat-fee contracts; Range: $5K - $20K; I can analyze data, pull out trends, and give you new insight to help you make business decisions; Even data accessible only via a RESTful API; Think customer acquisition costs, conversion rates, determine margins, traffic analysis trends; I LOVE solving business problems; The gig should also be remote-friendly, via Skype or something.

Once we connect, I will reveal my identity to you - but ask you to keep it private.

If I can truly add value, let me know. Not to sound cavalier, but don't want pity work. This is not a woe-is-me post.

Just a baring-it-all post, hoping that someone that has a need for my particular skillset will take a risk.

Be gentle plz - shari.browner+hn@gmail.com

Thanks.
When you submit a form with a "mailto:" action, the browser opens the mailto protocol handler, which is the user's email client. So you hit submit on the form and then see a draft email filled out with your form responses.
What is Garry Kasparov's Next Move?
Designer music: how Tycho blends art and sound
Mass arrest of protesters at rallies in Russia
Apple hating seems to be the new trend and I see it as the main reason for thus much attention.

That, and also for the fact that if Steve Jobs were still around, he'd be able to sweep this up or else be able to assuage the public about the 1 extra line of goto fail;
I think that in the post-Jobs future, we'll see more and more "revelations" about bugs/issues within Apple/iOS/OS X with people aggressively posting as much info as possible to "stick it to Apple"
Comparing U.S. and World Covers for Time Magazine
How would the ship defend itself against pirates?
No matter how many times this is pointed out, people will continue to demonstrate their complete lack of understanding behind the "bail outs"; essentially asset swaps that earned the US Treasury a small profit.
Yes, if you don't test and it stops all the devices with X installed you will have a lot of unhappy customers. And no fix, however simple is risk free.
Pray: Perl 6 Ray Tracing Engine
After reading some of the comments here at HN, yes I do. In fact, in the spirit of debate (which is mostly what we all do here at HN) this is a valid point to discuss.

Probably not important in the grand scheme of things, but really it's commentary about catchy/misleading headlines and news stories than it is about the specifics of this story.

"Founder Goes from Rags to Riches" is a better headline than "Upper Middle Class Yahoo! Engineer Makes Billions". Both are correct but in order to gain readers the former is chosen almost every time (for better or worse).

I'm going to do us both a favor and stop checking this thread and get back to making my own success story ;)
How many malicious exploits have occurred in the last 5 days? I'm genuinely curious if anyone has a guess.

Wouldn't you need to have control of the router Starbucks is using to set up the MITM attack?
Yeah, I'm still trying to figure all that out myself.

There was some allusion to needing some kind of database backend for the SSH server, but there are multiple solutions for that now (like LDAP).

I'd love to have this guy work for me in a junior role (because he can really crank out the code), but all his work would need to be reviewed, and I wouldn't want him to be making architectural decisions on his own.