skysight-inc/HackerNews huggingface dataset:
Did you get the memo? HN users can deduce the future from a few well stated postulates that engender no controversy or original thought. When expectations are shattered by renegades and outliers, HN spends the next two weeks publishing reasons why we knew it all along.
Yes, Paddy is a common Irish shortening of Patrick. Murphy is a classic surname.
> I have a family to take care of so losing my job would be a pretty big deal.

I wonder how you'd feel if your company hired a CEO who would want to take away your spouse's benefits because [insert arbitrary reason here]. There is a reason why people are vocal: they get hurt otherwise.
You can configure your http vhost to do nothing by send redirects to https and never serve content.
A few notes:

1) Appointments for a week is a lot of time sunk. Easily worth a few hundred bucks to Valley people who think of their lives by the hourly rate. Especially when buyers drag out the process by not showing, having trouble finding a location, or trying to "negotiate" past an agreed-upon price when picking the car up.

2) Very cheap, economical cars (like old Civics/Accords) and very specific enthusiast's cars are extremely frustrating to sell. With economy cars buyer expectations seem to be higher than is realistic (did you really expect your $2500 car to have flawless paint?) and with enthusiast cars many buyers aren't serious. Tire-kickers, thrill-seekers, and picky people who "just want to try this one out, but really were looking for another color and options package or extra rare year xxxx" abound.

3) Loans and paperwork differ by state, but at least here in Colorado the paperwork is trivial and loans are painful. I've never gone to a bank, paid off the car, and had the title available in a timely manner, which leaves both parties with frustrating hanging obligations even after the sale is made.

I lived with someone for a few years who bought and sold several cars a month and I still pay him a few hundred bucks to broker the deal each time I want a car gone - I actually find the sales process quite enjoyable as it involves meeting a lot of people from a lot of backgrounds, but the time sink and general flakiness gets old fast.
They did offer an olive branch as far as Azure lock-in by releasing some of the Azure components (Mobile Services and the Azure Pack) to download and run in your own environment. That said some of those pieces require a pretty high overhead.

As with most Microsoft stuff, you get a great fully integrated story if you use their whole stack, but if you want to swap one one piece it falls apart a little. My clients have compliance issues that make cloud providers hard to use so it's disappointing that I can't really use all this coon new stuff.
Development has slowed to a crawl, but http://datacoin.info is still alive. It focuses on redundancy, as all participants have a full copy of the database, and so data amounts are small (1 datacoin = 20kb). Still, there's a potential use case there for text-only content.

Definitely looking forward to distributed storage apps; other projects in progress include BitCloud, MaidSafe, and Ethereum.
How to build XAML Doughnut Chart
If at the time he made his donation the rules allowed his contribution to remain secret, then this is disturbing.

If not, it's just that he is not suited to run the Mozilla Foundation after stating publicly he does not agree with one of the core values of the foundation and its contributors. If it were the case, he could have apologized and say he changed his mind. If he didn't change his mind, again, he is not suitable to run a foundation where many core contributors have strong moral feelings about equality.
More installs for your Chrome app
Removing Sass Duplication Using Sass Maps
Yep I agree. I've tried lots of to do lists, apps, etc. and always keep coming back to the pen and paper stuck to the refrigerator. Siri adding stuff to notes through voice rec worked pretty well, but it's a gigantic hassle to be cruising through the grocery store constantly turning your phone on and off to go through the list.

Although nicely executed, I really don't see Dash being more than something a gadget freak uses for a few weeks and then sits in a drawer forever. Also doesn't help that the area for Amazon Fresh is so small too.
If you operate a website and want to enable HSTS, you should know about a few caveats:

1. You can't go back! As soon as a browser sees Strict-Transport-Security "max-age=31536000", it will refuse to load your site over HTTP for the next year.

2. The includeSubDomains option can cause problems in hard-to-predict ways. For example, Mailgun lets you set a CNAME for unsubscribe links. If a browser tries to load the HTTPS version, they'll get mailgun.com's cert, which is invalid for your domain.

3. Secure transport doesn't stop XSS, CSRF, etc. There are other headers such as Content-Security-Policy that can ameliorate some of these attacks. Also, sanitize!

4. HSTS is just one part of ensuring secure transport. It's also important to check your cipher suites. Not all TLS is created equal. SSL Labs is an extremely useful tool for testing your config: https://www.ssllabs.com/ssltest/analyze.html?d=floobits.com

If you're curious what the final result of all this paranoia looks like, take a look at the httpd config for floobits.com: https://gist.github.com/ggreer/9984770

You'll also notice mod_authn_yubikey. We require multi-factor auth (YubiKey + password) for our admin interface. There's tons of other stuff I could go into, but the real lesson is that security is like raking pine needles: You will never be done.
I would take that bet and not solely because you failed to exclude third world countries. I would probably hesitate on "in 2050, a 50 year old women has, on average, another 50 years of life" and definitely pass on "in 2075, a 75 year old women has, on average, another 25 years of life."
I wonder if they tried it and found there are less opportunities to upsell so it doesn't pay off: If I'm only scanning products I have then where's the discovery and upsell?
#define M_PI 3.14159265358979323846 is usually nicer than seeing (and possibly mistyping) those digits of pi each time.
Didn't see this pointed out so far - The existing Amazon app can already scan bar codes.
Tax the Childless
But it's okay, I understand the concern.

Thank you for saying so.
> No, you could not register those names. Because they are already registered.

Who are they registered by?
Note that if you take their money and don't ship their product as described, the US Postal Inspection Service will come after you. It protects both sides from fraud.
It seems silly that Chromium and Firefox now have separate HSTS lists (though Firefox's was seeded using the Chromium list [1]).

At the moment, these lists appear to be b) tied to specific browsers 2) tied to specific releases of those browsers.

Would it be viable to run some kind of global open registry where any website can be registered for mandatory HSTS? That way, every individual website owner doesn't need to submit a bug to Chromium and Mozilla - the browser just needs to securely connect to the registry and download the latest list. Or maybe DNSSEC can help ...

Maybe work on this is already underway, but I was reading some MLs a few weeks ago and I didn't see any forthcoming solutions ...

1. https://blog.mozilla.org/security/2012/11/01/preloading-hsts...
What of Logitech's Harmony system? It works around the concept of activities.

"Watch TV" - it asks initially, "What input is the TV set to?" "What remote do you use to control the volume?" "What remote to change the channel?"

And from then on, it works. It doesn't cover all on your list, but it has the potential.
AFAIK Clearskies does not have a working implementation yet.
5-year-old finds Xbox security flaw
I also agree. This is effectively 2 lines of R code:

binom.test(500,2100)
binom.test(1000,2000)

With a boxplots/confidence interval plots (which are not many more lines). Whether this is useful or not depends on how much people know about statistics I guess.
On The 20th Anniversary – An Oral History of Netscape’s Founding
“Cuban Twitter” Scam Is a Drop in the Internet Propaganda Bucket
The Tragedy of Mozilla
Tesla Model S Ethernet Network Explored
A minor difference between Dash and Cuecat: when the CueCat launched, approximately none percent of magazine ads had CueCat codes. When Dash launched approximately 98% of household consumable items had bar codes.

Yes, if you throw away your box for your granola bars, you might not have the bar code handy, but it was at least there when you bought it in the store.
natdempk and tptacek have both asserted that TextSecure is trustworthy and solid by dint of being implemented and designed by reliable experts. This pretty much boils down to argument by authority.

mandalar12 asks about "the same level of analysis on TextSecure". Since our (Least Authority's) audit and the iSEC audit are public, random people on the internet can know what that level is, without having to know or rely on Least Authority or iSEC to be non-malicious.

With enough eyes all bugs are shallow, but to whom? We need to communicate transparently to achieve this ideal.

Disclaimers: I worked on the Least Authority audit of Cryptocat; I've worked at iSEC in the past; I've met Moxie Marlinspike and Trevor Perrin and greatly respect their expertise and motivations; I also don't know if they've been infected by malicious puppetmaster aliens since I last saw them.
(group lead here) Thanks GravityWell for posting.

We just got done giving a talk on NTVS & PTVS at Build in SF. The reception was great (given this is a primarily .net conference). I did an informal poll of the audience (180 or so), asking whether they were planning on deploying node/python in their enterprise. The response was around 75-85% Yes to both, which was somewhat higher that I had expected.

The cool new feature is this Beta are TypeScript integration, Remote debugging (inc. linux), Edit&Continue (no server restart), free edition (NTVS + VS Express), etc. and numerous bug fixes.

To address a few comments regarding strategy - most are correct, though some are over thinking it a bit :). The project was proposed & started by the PTVS (python) folks, and mgmt was rather lukewarm about it. It was definitely not part of some uber P1 strategy. I wish it was. However, since then it's gained some momentum thanks to the community and it's become important enough that Scott Guthrie mentioned it in his keynote, and Soma (SVP for developer division) just blogged about it.

a few new videos (pls excuse the production, we do our own videos...)

new npm UI (community contributed) https://www.youtube.com/watch?v=AwSzxFY5CMI

twitter sentiment app -- https://youtu.be/9tf6HmG9VAA

remote debugging https://www.youtube.com/watch?v=ZAroJmb6XY4
Along with that they already have a phone app for android at least.

https://play.google.com/store/apps/details?id=com.demiroot.a...
Nice implementation.

Marseille has a severe graffiti problem, doesn't it? Mais c'est dégueulasse!
You made my night
I signed up for the free trial (because that's the only way to see what they have available for sale). Browsed the prices, immediately canceled the free trial. I wouldn't use it even if it were free, tacking on $299 to pay for overpriced groceries is a non-starter. Granted I live only a mile from a grocery store, so it's not a compelling proposition to cut grocery store trips out of my life for that price. However, the people who'd likely get the most from this service (people living in rural areas) probably aren't going to have this service available to them anytime soon, if ever.
> I ended up donating it because I just wanted to get rid of it. Having someone sell it for me would definitely have been worth it.

I just did the same thing for similar reasons. If there was no hassle for me, I would've sold it. 2 months too late!
Check out http://maidsafe.net. I think it does that.
Ello - Simple, beautiful & ad-free.
2010 called and wants it's smartphones-are-for-rich-geeks product formulation back.

Everyone who would buy their groceries via Amazon has a smartphone. This device is as baffling as it looks. With a smartphone you have the choice of UPC code scanning, QR codes, or label/logo recognition (as in Goggles).

One of the photos implies it is a laser bar code scanner. So if this gizmo is useful, it's because it would be faster and more reliable than photographing bar codes. Not because potential users don't have, or can't use a phone camera for this purpose.
This is very good to hear.
Wolves and dogs are the same species too, AFAIK
But it only loads because you added an exception at some point in the past. On any normal site, it would show you a cert error and wouldn't load the page at all.
Surely you can see the endgame here. Amazon employs 1/3 as many people per dollar of revenue as Walmart does. Imagine a world where Walmart automates itself to a level comparable to Amazon. Lo! Watch as 1,452,000 jobs melt away!

And that's just one company. Sure, it's the biggest one. Sure, they're probably jobs nobody would do given better alternatives. All the same, those are now 1,452,000 fewer people employed in a world replacing human capital with physical capital.
can anyone give me ideas\links on what HW & SW I would need to make something like this? Would love to make an adventure game with this concept! Cheers!
This is a total non starter for me as well, at least have 100% email as an option. I don't pick up numbers I don't have in my address book, so you would get my voice mail, which would result in me emailing you anyway.
In areas where Google already lets you view 3D imagery, it's already possible for them to show you a crude, continuous StreetView. It's just that the UI doesn't let you angle the camera such that it's oriented at street/eye-level
3SUM Solved?
Supposedly 3SUM was solved today in a strange way.
Scrambled Code-A new form of encryption could make practically unhackable code
My current client is insisting that all https traffic be served over a separate subdomain.
"Apples"

...

next day what shows up, exactly?

6 granny smith apples?

a 15 pound bag of golden delicious?

3 MacBooks pro?

ummm
Totally. That episode is one of my favorite TALs ever (second to 'Summer Camp', which despite having been done in the 90s is still totally relevant).

In fact, I used a lot of the knowledge from '129 cars' to help with a recent purchase of a Jeep (not from that dealership, sadly). I'm going to write up a blog post about the experience - I learned a lot and it should be helpful to others.
Very true. See my comment about the informal poll at Build -- 70/80% of ppl were planning on deploying python & node in their shops. Biased a bit since it was a node/python talk, but otoh, it was a Windows/.Net conference...
> Apple should really let the developer put some information like that on their permission dialog.

They do :)

See all of the NS.*UsageDescription keys listed here:

https://developer.apple.com/library/mac/documentation/genera...
Monsanto Brings Big Data to the Farm
Sometimes it's nice to look at what's coming down the pipeline and will be standard soon. When you spend time learning compatibility workarounds, that knowledge becomes more dated by the minute.

But for production, yea.
Just jump to the second comment for the actual details. Welcome to the internet, where if you are popular you can write any shit you like and people will read it, even if you don't actually know what you are talking about. (I wrote the software that runs some of the major stock exchanges. I did that for 13 years).
Agreed. eps's comment is as much a product of the opaque nature of moderation here as anything else. Unless users get notified of bans - be they temporary or otherwise - how are they expected to know to modify their behaviour.

Yes I understand there needs to be a balance to avoid an arms race with spammers and the like.
Well, the part of the population that cares about information security is very well informed

But the rest seems to live in a luddite world. If you had watched TV more you would have seen that there are a lot of ads for: web games, PayPal and other websites trying to drag the average consumer into, you know, using the stuff.

Paying with a Debit Card is rare in Berlin, Credit Cards are barely non-existent (but they have some other ways of paying stuff online and on stores)

Security of bank accounts is usually done through a list of one-use code numbers (still, they - and several other countries - have payee initiated money transfers between accounts/banks, something that is rare in US/Canada)
"Under consideration" actually.
Contour – a d3 abstraction library that's actually component based
hook it up with an invite code :)
It doesn't make sense for this to be a percentage since the work involved in selling a 30k car is the same as selling a 5k car.
If Apple wanted to implement something like this, why would they need to acquire f.lux at all. They could just develop it and bundle it with every Mac and iOS device. Perhaps I am missing something here but I don't see the advantage.
Bell's Theorem with Easy Math
In Santa Monica and Culver City in Los Angeles market I usually see 2-3 amazon fresh trucks on my daily commute to and from work. It's rare anymore that I don't see one. I've also seen several companies that are using them to stock the company fridge with things like milk. It looks like it's taking off fairly well anecdotally. I don't know if there's been any numbers published though. The biggest hurdle I've seen with it is that the site for it is woefully underpolished. It's not buggy but it tends to be slow, and a little obtuse to browse on at times. If you have something specific in mind it's really easy to find it, but if you wanted to say just look at the different types of potato chips they have, it can get a little unwieldy at times.
Amazon Unveils Barcode-Scanning, Voice-Recording Grocery Gadget
I agree with the Harmony suggestion. I bought one to replace all my remotes purely because I don't need 900 different settings that all do the same thing.

For example, I have a TV, a Bluray player, and an AV receiver. I choose the "watch a movie" task, it turns all three on, sets the TV input to the input the AV receiver is plugged into, the AV receiver to the input the Bluray player is plugged into, and then maps the play/stop/ff/rev/etc buttons to the Bluray player and the volume buttons to the AV receiver.

Every button is configurable, all the on screen menu options on the remote are configurable.
Diagnostic Port – Burrell Tried To Sneak In Some Hardware Expandability
A new new take on virtual currency, after capital gains
>"without the friction of having to help everyone find the app and register with the same account"

Sounds like a gap - Ninite for mobile.

(A quick Google suggests the idea's out there, but not yet implemented - http://www.reddit.com/r/Android/comments/mvgh7/is_there_some...)
99% of people don't even remember Wave anymore, so I'd say they kind of have a blank slate.
Everyone needs 8 hours of sleep to be healthy. Being healthy is the most important thing in life, far, far above even #2 which is family. Startups, productivity are several notches below that.

Get 8 hours of sleep. No exceptions.
Thanks for trying it nevi-me. Please give the Beta bits a try - lots of bug fixes, including in the profiler.
We should talk: http://stackmonkey.com/blog
FireChat:New Messenger App That Doesn’t Require Data Connection
4chan supports WebM format (NSFW)
Interesting that it phoned home
Comcast has this. I can go to the Comcast website or app and watch most of the stuff I can get on Netflix.
What should I do if the open source project I want to contribute to isn't on GitHub?
5-Year Old Kid Finds A Security Exploit On The Xbox One
(onion.com) would be more appropriate for this nonsense idea.
Yepp! thats the one
angersock - if you could file a feature request on http://nodejstools.codeplex.com that'd be great. We did implement support for this for Python (https://pytools.codeplex.com/wikipage?title=Mixed-mode%20deb...), so it's not out of the question.. thx.
MS tried to look all hip and cool with IE10/11 and SSE didn't have much buzz around it so it wasn't implemented.
You can implement structure in a much better fashion. This approach seems kind of silly to me. I'd rather have a gym/Yoga/sports session in the morning for physical activity - maybe a bootcamp that would be an incentive to
get me out of the bed early.
Note: there is a great Django template at https://github.com/tommikaikkonen/django-twoscoops-heroku-s3...
that will automate the creation and uploading of the s3 assets. It uses `collectstatic` to upload the static resources to be hosted from s3 (which seems to be the more typical way to do this). This template also uses heroku to host the dynamic portion of the app.

You can start your new project with the command (the hyphens break the line, but it should be executed with the settings in place):
django-admin.py startproject --template=https://github.com/tommikaikkonen/django-twoscoops-heroku-s3... --extension=py,rst,dotfile,rb --name=Procfile,Gemfile,base.html,404.html PROJECT_NAME

Follow the rest of the README and/or buy the rest of the Two Scoops book (http://twoscoopspress.org/) if you're using django for any sort of large project (and want a standard/sane project layout).
Dear HN, why the downvote?
Mongolian Breakfast Salad, A Breakfast Recipe Inspired by Genghis Kahn
My favorite episode as well. After this episode when I recently bought a new car I did the research (used the step-by-step of this fighting chance package I found googling) and bought a car on the last day of the month about 1500 below dealer's invoice price after accounting for all hold backs. Felt really good to get some of that money back I have lost to dealerships over the years.
The cool things: Tesla is running Linux (!) and standard technologies/protocols such as SSH, NFS, X11, HTTP, etc. to do things in the car. That is cool, and probably highly efficient since developer test labs can probably just be basic Ubuntu-like virtual machines.

The sketchy things: Jailbreaking a car seems pretty dangerous, especially since as far as I'm aware, the electronic systems control things including the brake. I know this only because Tesla recently released a software update that added "hill assist" which will hold the brake in place for 1 second when at a certain incline to avoid rolling back. Imagine a malicious software update that disabled the brake! Personally, I would jailbreak a phone, but not a car. :) HOPEFULLY the system the ethernet port provides access to is firewalled out of being able to update any software (i.e. the software update mechanism is some other device), but who knows.

The phone home can also be considered sketchy, but any Tesla owner is well aware the car pings home and relays diagnostic data to Tesla. At the very least, Tesla owners know it must ping home to check for updates periodically.

If anything, I thought it was kind of cool that Tesla engineers detected it and reached out so quickly. Imagine if you weren't tampering with your car and it WAS a high-tech attacker. It is good to know that they can detect the basics.
They get to claim a certain percentage of the online advertising market. Online advertising has a self-referential aspect -- if you can produce convincing statistics, you will get more business, which will further increase your statistical standing, ad infinitum. The fact that a percentage of the traffic is bogus might be overlooked by some of the providers, and even some of the clients.
“Tesla USA engineers have seen a tentative of hacking on my car.”, “can be related to industrial espionage and advised me to stop investigation, to not void the warranty”.

So long as you don't cause any damage they can't void your warranty in the US thanks to the Magnuson–Moss Warranty Act.
Namecoin encompasses more than just .bit names.
I agree. The wording is critical and I had the same impression
Most annoying persmission is Geo-Location for apps that don't really need it.
Maria Elena Boschi contro i professori