skysight-inc/HackerNews huggingface dataset:
So would a slave owner say to the abolitionist.

I accept private property, when it's justified by reality, not when it's imposed for the profit of a few minorities.
Or a really clever marketing tactic:

Hmm, do I want a phone associated with rich people, or poor people?
No need to override the CSS, if your connection is unstable enough the CSS load can simply fail, and the page will display unstyled.
For the advanced student: this is a good comment for HN. Its signal/noise ratio is very high, given its context. There's nothing wrong with brevity.

It's true that one-word comments where the word is facepalm would nearly always deserve downvoting. Discernment is required!
The attacker will merely reply on your behalf. Does not improve the situation.
Germany is quite good it seems. I don't really understand where it comes from, but the last time I randomly turned on the TV in Berlin, there was an educational program about PGP. At around 20:30, on a standard TV channel, one of the first ones on the list at the hotel, so it wasn't something obscure either. It seemed to describe the whole idea of asymmetric encryption too (inferred from the animated presentation).

I was really impressed.
You took the words right out of my mouth. The chirpy music, too, but the kid's "How was that?" at the end tipped me over the edge. It's one thing to be fed a dose of cute, another to have a tonne of it shovelled on you.
Interesting article. I'm puzzled by one example, though. When the author says he favors the signature:

def reverse[A]: List[A] => List[A]

while Tony Morris would argue for:

def <-:[A, B](f: A => B): List[A] => List[B]

I'm puzzled. They are not two different styles of writing the type signature for the same function! You can tell at a glance that the type signature for "<-" allows functions more general than "reverse". So he is not talking about the same function.

Or did I misunderstand something?
how popular is it in places where it is open? any numbers? when is it coming to Boston?
Arduino robot hacking is a great place to start.

An alternative or complementary approach is to work in simulation, and with that decision you can immediately start working with state of the art stuff, as follows:

ROS is the dominant Open Source robot platform. It works with the powerful Gazebo simulator. It's all free. Researchers, companies, universities, and hobbyists all use it, and there's an active community. The learning curve can be steep, but this is powerful stuff.

http://www.ros.org/

For a simpler start, take a look at the platform that was popular before ROS overtook it: Player/Stage

http://playerstage.org
I think for this use case the Oculus with it's head tracking would be a better fit, because when you walk in a city you don't really use your hands like you do with the LeapMotion.
check out instructables.com. search on arduino it's a micro controller. I've been thinking about popcicle sticks and mini servos. both are really cheap.
Classic over engineering.

"Number of steps to scan grocery by phone"

Most people just use pencil + paper, or notepad/note app on phone. Never have I seen people actually use technology while shopping unless it's a typed out list.
they also didn't account for the kids "helping out" and not putting the Dash back where you expect it.

Also, if something like this gets baked into iOS or Android the steps change to "Swipe from home screen. Select 'Scan'."

Though I trust Amazon here and assume their hardware works in more situations than a phone's camera
This is extremely cool, for someone with some C experience but wants to dig into writing a lisp.
Great idea - good luck guys! Related note for the HN community, while we're on the subject:

Unless you have time & money to burn, you really should never never never trade your car into the dealership. It's the worst price you're going to get along the used car supply chain. And even if you think you're getting a good price, it's because you're probably pairing it with buying a car (and paying too much for the car you're buying).

The worst-case used car dealer supply chain works like this (going backwards):

* You buy a used car for $20,000.

* The used car dealer bought it from a wholesaler for $19,000

* The wholesaler bought it from a wholesale auction for $18,000

* The dealership who sold it at auction paid $16,000 as a trade-in.

(*I saw worst case because not all of these steps happen each time)

Note the chain begins with trade-in -- because dealerships know that people who are trading in are pressed for time and want a no-hassle deal. But in doing that, they're giving up $thousands to each step along the chain.

So when selling a car - going direct (or using a service like InstaMotor) is always going to net you more $$ than trade-in.

And now ya know :)
Silicon Valley satire nails the culture, geeks say
> I'm an ectomorph

As in ecto|meso|endo-morph? I thought that the scientific community put that idea in the trashcan.
The telegraph, MySpace, and AOL had network effects.

It's a hurdle, but it's not insurmountable. The question is whether namecoin provides anything sufficiently more appealing to all players to overcome that headwind...
Alternatively, if you had an 'always listening phone' like the Moto X, your flow might go something like this:

Option A

1. Ask your phone to buy {name of item}

2. Screen turns on, tap to confirm your purchase

Option B

1. Find the Dash device

2. Scan the item (if you haven't already discarded or recycled it, and haven't ruined the barcode in the process of opening it)

3. Confirm and pay

To me, Dash feels like a (possibly unnecessary) stopgap on Amazon's part. I understand they have the means to try things like this, but selling a device seems superfluous given the developing capability and direction of phones. As an Amazon customer, I hope Option A is their endgame.
__attribute__ directives in Objective-C
To clarify, do you sleep for another 7.5 hours after the wakeup, or just one hour to bring the 6.5 to 7.5?
I understand your point and agree with you to some extent, but robbing a liquor store is absolutely worse than stealing content online. For several reasons.
Based on the comments, I'm guessing few poeople here have ever worked retail and held a barcode scanner.

Break out your phone, load up your barcode scanning app (there's 20 seconds right there even if the phone is in your pocket). Now try to actually scan something with it. You'll spend another 30 seconds lining up the little on-screen window with the code, rotating things, waiting for the camera to focus, and even having to move to another location if you're not in bright lighting. It's a terrible experience and that's why you don't see stores checking people out using the camera of an iPad.

A barcode scanner, on the other hand, just works. You point it in the general vicinity of the barcode, press the button, and it's scanned. You don't have to perfectly align anything, be in specific lighting, or wait for a camera and an app. I'm sure you've seen cashiers run multiple things over a scanner in under a second.

Amazon Dash isn't just a subset of your phone's functionality. It's a dedicated barcode scanner, which is hardware you don't have on your phone.
I thought this was an awesome idea and tried to post it in my facebook feed to show my friends. Unfortunately http://www.instamotor.com/ ends up with the excerpt "Landing Page Template for Bootstrap" and http://www.instamotor.com/#/ has no picture. I've found, or it least it seems to me, when there's no picture none of my friends click the link.

Apparently you need to add these tags?
https://developers.facebook.com/docs/web/tutorials/scrumptio...
Be the solution – How I turned a random annoyance into my next startup
Did you try the Leap with Google Earth? it works great! Lots of fun.
I'm probably in the minority here, but if I try to install an app and it requests any permission that I think is inappropriate for what I want to do with said app, then the app is not installed. Peroid.

And yes, I also decline to update apps that demand additional permissions. Requesting more permissions up front will not help you with this, at least not with me.

My 2c.
I've been expecting Tesco (UK) to do this for ages. They have supermarkets literally operating on this sort of device, you scan+bag as you go, and they have a decent national delivery service.
EuroVoc: multilingual thesaurus of the European Union
I like how it's a separate device - it's too bad it's only available on the west coast though. AmazonFresh reminds me of "Webvan". Webvan failed during the dot com bubble, maybe Amazon is trying to start this kind of business model up again. I think the grocery delivery service is a great idea, especially now with everyone being so connected. Webvan only failed because they expanded rapidy and weren't able to attract customers at their speedy pace, plus back then not everyone was so connected.
Can't a MITM (as described in the article) strip out any HSTS headers automatically, thus thwarting this quite simply?

As with HTTPS, you need a shared secret before communication begins for anything like this to combat MITM attacks. Unless the browser communicates with a secure server to assess whether the website should be sending HSTS headers... Is that the idea?
Keep in mind that phones have a pretty high per-use setup cost:
1) Not all phones are voice activated, you you have to pick them up

2) If you're cooking and your hands are occupied/covered, you're going to have a hard time using a phone with your hands. Phones aren't typically waterproof, and touchscreens don't typically work well with water on them.

3) If you use a screen lock on your phone, any app is immediately inconvenient given #2

This device seems to be designed specifically for the job, and has a low per-use setup cost.
Three Alternatives to Ubuntu One Cloud Service
> (It sounds like this attack depends on a complete version of the website being available over port 80)

No, it doesn't. An attacker can always connect to the website over HTTPS and proxy the content to the victim over port 80.
I don't recall now just how I originally did the PDF, but it was some CLI tool that read either the markdown or HTML.

let me explain further. when you create the e-book, if you segment the book into small-enough sections, it'll generally work, across almost all situations, no matter how the person has configured the fontsize.

That's probably true enough for ebook readers (and I got good results for just epub using my CLI tools) but once I went to InDesign for the PDF layout using it for epub generation was no big deal and that was where I was making final changes to the text.

i'd be happy to show you how i'd do your book, if you'd be interested in seeing it, if you send me a copy of it.

Thank you. If you (or anyone else following this thread) wants to grab it I put up links at http://osc.justthebestparts.com/grab/

(If you need the actual markdown files I'd have to see about packing those up. I was writing the book as a Webby-generated site using a combination of Markdown and ERB. I had some scripts that would then use that same generated HTML to package it up as epub. )

It would be great if I could use command-line tools to generate the PDF while not sacrificing the precise look and layout I want but I'm deeply skeptical this can be done without a visual tool and manual adjustments to adjust things for aesthetic reasons. (Or without learning LateX. :))
On the very first connection from the browser to the website, yes. But the browser saves the HSTS setting (for the time specified by the HSTS header's max-age value) so future connections go straight to HTTPS.

Chrome and Firefox also ship with a baked-in HSTS preload list containing sites that should always use HTTPS, without depending on the HSTS header: http://src.chromium.org/viewvc/chrome/trunk/src/net/http/tra...
The answer at install is always no:

"SuperApp would like to send you push-notifications"
That's true, our non technical parents can be funny with technology. But from my experience it all comes down to motivation. My mom has a hard time plugging in her computer and definitely can't remember the power button is on the back, but put her on a dating website and she is like a little kid texting.
The quest for diversity at California's state universities
Because they fail over several different protocols transparent to you.

And much more effective than DIY. API's are much nicer than old school.
Yeah, I use Chrome but I find the error messages uncomfortably reminiscent of MacOS (ie not helpful or informative).
Because Instacart made them say, "oh shit"?
The dogcow's name is Clarus.
I think for a lot of people, their main issue revolved around Prop 8 being a civil rights issue. You are correct, however, in your example of a CEO cheating on their significant other, and for some people that is a breach of trust enough to not want to do business with that company. I agree completely that your business is no one else's but your own, but if your beliefs interfere with the rights and well-being of others, you can expect backlash.
Please hook this (and Street View) up to https://github.com/richtr/threeVR.

How it works: http://dev.opera.com/articles/view/w3c-device-orientation-us...

Live demo: http://richtr.github.io/threeVR/examples/vr_basic.html
Hmm, yes, of course you are correct. I'm not sure why I was thinking that wouldn't be a risk.
Forgiveness is really about being open hearted and keeping no record of wrongs. On the cross Jesus said:

"Forgive them for they do not know what they are doing"

Jesus had the perfect right to be angry, but he wasn't. He forgave while people were mocking him and killing him. Stephen to first martyr said the same thing while he was being stoned to death.
So if the iOS user is willing to spend more, I could add a few % to the price tags in my online shop if user has an iOS user agent?
A surprising number of developers don't really understand that...which is partially a problem of how complex things generally are in development, and partially a result of how good Github has become.

Case in point: During the whole Julie Horvath controversy, a few anti-Github developers started a campaign to create awareness of the harmful effects of Github's culture (or something)...but they created their standalone site using Github Pages:

https://github.com/CultureOffset/cultureoffset.github.com

I pointed out, independent of how I felt about Horvath or Github, that not only does it send a terrible message to run a boycotting campaign on the service you want to boycott...it is completely unnecessary, thanks to how git actually works and the many other great build tools/stacks to do static web development in under 24 hours. However, I got reamed for being an asshole and "man-splaining" things.

But really, as useful as Github is, every dev should spend some time on thinking through what underlies Github, and how to get by without it...especially if you intend on protesting Github.
Ok, so how about the attacker intercepts the https request with a self-signed cert, modifies the stored HSTS header by issuing a new max-age of 0.25 second, and includes a redirect back to http://?

This just kind of seems unwinnable, a million holes.
What is a number? (Part 1)
My friend wrote this. And I think it's brilliant!
I like the direction MS is going. At this rate they can possibly shed themselves out of the shadows of Google and Apple and truly emerge as an open, innovative company. Why not, they got the cash to do so.

Now on this Node.JS IDE, it actually makes me want to use Node.js because it's on Visual Studio, however, I'm also open to alternative IDE.

My favorite is Jetbrain's IDE products, I use webstorm and phpstorm, and pycharms. I love them all, would be nice if they had one for Node.js, as I'm not sure if webstorm has extensive support for it.
SSE is listed as "under construction" on the IE roadmap: http://status.modern.ie/serversenteventseventsource
"He was fired because the particular political donation he made is evidence that he is a bigot, that he has a broken moral code."

Just because a person is a bigot doesn't necessarily mean that s/he is a bad person.

I've met racist people and even I am able to maintain some level of respect for them. This is what being open-minded is.

Hurting people just because they have a different philosophical belief than yours is the same kind of narrow-mindedness that leads to racism and religious fanaticism in the first place. Back in the past, if you said the world was round, people would classify you as crazy by virtue of you having an opinion that the majority did not believe. This kind of narrow-mindedness holds back open dialogue and progress.

As 'bad' as it is to be your definition of a bigot, to denote all bigots as having a broken moral code is as negative as bigotry itself.

I hate how people have this misconception that you have to hurt people to make them change.
The wonderful thing about living in a country with a separation of church and state is that you don't have to change your views! You're welcome to believe whatever you want, and even to talk about it! The only thing you have to do is not try to turn your beliefs into laws that affect other people, like people that don't share your religion.

--

And for the record, many Christians, Muslims, Jews, and members of lots of other religious do support gay marriage. Please don't attempt to speak for billions of people all at once.
really? now we have to have an entire website dedicated to the t-test? surely this is something you could learn to do in a spreadsheet? no?
I hear they're in the process of morphing it into a Costco competitor with special standardized oversized boxes.
Got it. So not 100% full-proof (not that anything is).

This also means that once you switch to using HSTS, you can't go back.
> Ok, so how about the attacker intercepts the https request with a self-signed cert, modifies the stored HSTS header by issuing a new max-age of 0.25 second, and includes a redirect back to http://?

HSTS disallows the user from overriding the certificate warning and accepting a self-signed cert.
For that to work they would have to have access to the browser since the headers would be sent over TLS/SSL after the first connection. If they've got access to the client's machine and browser all bets are off. They could install their own CA and MITM even if the site is using HSTS. Certificate pinning would help solve some of that problem but you might not be able to trust that on a compromised machine anyway.
Introducing a new Twitter app for iOS for history and statistics
(You just edited your comment, didn't you) Well, that's a good detail then.

Does it in fact reject connections to self-signed certs? Or just disallow you from accepting the broken cert? Because the real goal would just be to get the user onto http:// as quick as possible, and then the untrusted warning is gone.
> He was fired because the particular political donation he made is evidence that he is a bigot

On what basis is the claim justified that "he was fired" at all?

And, if he was fired (or, at least, given the choice to resign or be fired), what evidence is that that it was because of the donation (whatever it might provide "evidence" of), and not because of Mozilla board's concerns about the way he responded to the controversy over the donation? Managing corporate image is, after all, part of the CEO's responsibility.
I guess we've just found out how we're going to be treated by the new moderators.

eps was obviously trying to be helpful to lacero. If lacero was hell-banned, he wouldn't know it to email you, would he? And for his trouble he gets this mean reply from you.
Popcorn Time? really? I'm skeptical -- how many users do you think it's seeing?
That time a drunk driver ran into our startup's office...
Knew we were in a high risk business... but this was a risk we did not contemplate...
This whole attack is assuming the attacker is there from the very first packet of the particular login session. Not about inserting a MITM in the middle of an established login session.

The initial connection of an intercepted HTTPS connection would throw a security error, because the attacker would be using the wrong cert, but if you redirect the victim quickly...

You can defeat this particular hole by getting more aggressive about untrusted certificates, but it seems browsers are very reluctant to do that.
> it really jumps fairly quickly over the basic C stuff at the beginning

In fact, for me it seems to be the best thing about this book. It mentions everything you need to hear once to be able to use search engine and clarify anything you don't understand. So help yourself! You don't know syntax of "switch" statement? Google it (or duckduckgo, or whatever)! You don't know how to use printf? You've been shown the way to cplusplus.com already, take your time and find out everything you want to know about that function. Then come back for a new piece of information to think about.

The only two things I guess are missing is "make" (I'd mention it from the start to help everybody save some time, with gdb and valgrind) and a little bit more information about pointers from the very beginning, because searching for help about "free" function will be no good if you don't know about stack/heap allocations.
yes, i discovered the limitations of phone barcode apps during a brief, abortive attempt to scan in my book collection. it was simply too painful and i gave up early.
I've installed this, but I still get this error:

fatal error: 'editline/history.h' file not found

Any advice would be greatly appreciated.
World War III has begun
Show HN: Mobile CSS Stylesheet for Hacker News
I visited Hacker News today on my phone and noticed that the site is not mobile friendly. There are some homespun mobile versions around the web, but they don't seem kosher. So I decided to take a break and entertain myself with the challenge of "mobilizing" Hacker News with its existing HTML!

To my front end developer brethren, paste this code at the end of news.css in Chrome, squish the viewport to a <768px width, and you should see the site mobile friendly. Feel free to edit this code and post your own version with any bugfixes or improvements I might have missed. Other comments, general discussion on mobile CSS, and any anecdotes about the pain of retroactively mobilizing websites are welcome too. ;-)

Also, the site HTML may not be perfect (tables...), but I think it'd be great to get some form of this code actually deployed on the site so we can browse on our phones, upvote please!
This is the CueCat done right! Technology is similar but their is a clear use case.
All the more reason to Boycott Apple!
I just listened to the This American Life episode "129 cars" about a month in a car dealership - SUPER fascinating look at the industry, with a lot of insider information:

http://www.thisamericanlife.org/radio-archives/episode/513/1...
According to the Nature Comms Open Access guidelines somebody paid $4,800 for this article to be published under a BY-NC-SA license. In general who ends up paying, the authors or the authors' respective institutions?

Open Access fees:[^1]

(CC BY) (CC BY-NC-SA) Region
-------------------------------------------------
$5,200 $4,800 (The Americas)
€3,700 €3,425 (Europe)
¥661,500 ¥612,150 (Japan)
RMB33,100 RMB30,600 (China)
£3,150 £2,915 (UK and Rest of World)

[^1]: http://www.nature.com/ncomms/open_access/index.html
I'm using in in Chrome version 33.0.1750.152 on Ubuntu 14.04 Linux with no apparent problems.
That's entirely possible, but the discussion I was hoping to have was about need determining pay and/or opportunities.
I don't think that was a boycotting campaign - it basically says "we recognise you might want/need to keep using GitHub, so if you want to make a positive contribution to better culture/whatever then here are ways to do so without changing your workflow". It was like airplane companies advertising carbon offsets.