skysight-inc/HackerNews huggingface dataset:
I don't believe any CEO could have done better against the witch hunt Eich faced. I mean, OKCupid was protesting him personally. I've never seen anything like it before, and I'm not sure what, say, Tim Cook would have done if the tables were turned and people had been attacking him for being a homosexual and it was materially affecting the bottom line. I think it would have worked out much the same.
Ask HN: Is there fraud here? If not, what is the motivation?
http://www.zapbux.com/viewads.php

I own one of the site being targeted but don't buy crappy traffic through such services.

What possible motive could there be to driving free traffic to one of my sites? Interesting that many sites are within industries with CPCs would be quite high.

50k referrals since the start of April is not small. I cannot see a reason why anyone would do this.
Google and Facebook both hire their interns on exempt positions, so they aren't hourly. They also pay around $6800-$7000/mo, not including benefits.
> When we say "coexist," we do not merely mean "physically exist on the same planet." We mean "exist and be civil with one another."

Your definition of "civil" and mine are not the same. I find it intensely uncivil to try to strip marriage rights from multiple friends of mine. I do not find it uncivil to say "this dude's a jerk and I won't give him money"--as I said in a cousin post, I don't go to my corner store because the owner's a jerk, this is not materially different to me.

> As the OP suggests, this sounds suspiciously like the viewpoint used to justify driving gays, blacks, etc. out of society. "Oh, I'm just exercising my freedom of association." It didn't justify those people — why are you so sure it justifies you?

You can't choose to be Not Black. You can't choose to be Not Gender Dysphoric. You can choose to be Not Bigot. The line of demarcation is super, super obvious from where I stand.

> You're punishing him for his viewpoint, not stopping him from "hurting people you love," which he wasn't doing.

Have you looked at his donation records? He has a pattern of backing politicians who are notable in their "culture war" self-presentation, who make a point of speaking about how terrible homosexuals are. Pat Buchanan. Thomas McClintock. Linda Smith. Proposition 8. (He didn't even live in Smith's state, let alone her district, when he chose to give her money. That speaks loudly to me.)

Donating money to anti-gay causes and anti-gay politicians is very much, by my lights, an action. Many of them. And don't mistake me: they're actions he is completely within his rights to take! But the same thing that gives him the right to do that frees me from the obligation to enrich him by using the product of the organization he leads. And I do not choose to undertake that obligation for him.
Ah, the never ending chain of well meaning laws that require more questionable laws, backed up by objectionable laws, with the gaps filled by laws only Stalin would be proud of.

People visit from out of town and use town resources, so we need to tax them without taxing the locals...let's create a hotel tax. The locals don't pay it, so no one cares.

How do we track the hotels to make sure we get our tax money? We'll need a licensing process. Again no one cares.

Hotels form a lobby and say, hey, we're paying these taxes and getting these licenses, maybe you should create a few laws to protect us and limit the licenses so we stay in business. Some people care.

Finally, a neighbor sees my house and my frequent guests (because I have a lot of friends that visit) and reports me to the Gestapo and says I might be renting my place out on AirBnb. Without any due process I get fined for violating a law meant to protect an industry that pays taxes to pay for the visitors that use city services that I actually live in and pay taxes. Now I really care, but it's too late.

Violating your lease is wrong, but so is violating due process. I also believe I have the right as a property owner to rent out my property as long as its purpose doesn't change.
Much better to have a REPL handy - like order-of-magnitude better. :) The further in the book you go, the more you need to write, run, tinker and test to check your understanding(s).
IT needs to learn to enchant users
>> "I think there's a whole generation that grew up on BASIC. I wonder what today's generation growing up on?"

About 6 years ago when I was in high school we were using...Pascal! During that time I actually did some work experience with Borland (creators of Turbo Pascal) and they found it hilarious we were still using it.
First: he didn't get fired.

He probably feels passionate about what he does. Imagine your work and subject of your technical passion becomes a constant reminder of a debacle like this. You would not wish that on yourself.

This is no different from refusing to patronize the corner store near me because the owner's a jerk.

Oh really? I thought principles of tolerance and social justice were at work. Are you admitting that you simply don't like and have no sympathy for "people like that?"

This is not an interpersonal conflict. This is not about someone "being a jerk." At least I hope not. At least, I hope principles of tolerance underlie everything in such an action, and not action/adventure show style ad-hominem morality. (i.e. "He deserved it!")
I guess, but it still seems like no one offers this and its not trivial. Do you know of any research/systems/practical offerings in this area? This has been something that I would be interested in learning a lot more about honestly. I agree that bullet-proof guarantees are basically impossible and that physical security is probably going to be the weak point at the end of the day. Maybe some system could be created that made it hard to individually tamper with one instance without alerting others, or made it hard to isolate one from another from a hardware view? Do you think even something like SGX can't prevent some level of physical threats? It seems like it would at least make it harder/reduce the scenarios in which hardware is vulnerable, but I haven't researched it extensively.
I reach level 60, says the counter(just because the game buged after i try to clear level 6): http://imgur.com/ty9JlXz.
I think Tiny Letter <https://tinyletter.com/> does what you want.
Great writeup but I guess I'm still a bit confused. As someone responsible for rails servers I can see that I need to update nginx and openssl as soon as packages become available or compile myself. What about keys though? Do I need to get our SSL certs re-issued? regenerate SSH keys? Anything else that I should be doing?
Yes...but I can't do it at an intelligent time.
Your post directly contradicts itself.

If most people do not have much if any aesthetic sensibility, then perhaps you do need to be a font nerd (or a car nerd, shoe nerd, etc) to see these things intuitively.
I'm currently reading "The Dream Machine"[1] and coincidentally at the point where BASIC is being invented. What I found interesting is how closely linked LISP and BASIC are in motivation and the spirit of the era. Not to mention the direct connection of Dartmouth, McCarthy, and time sharing.

[1] http://www.amazon.com/The-Dream-Machine-Licklider-Revolution...
The most interesting section of this article is the very appropriately named section "venture math is a harsh mistress". Out of the 1000 companies 188 were acquired, 28 went bust big time, 8 went public, leaving 80% unaccounted for. What are all these companies doing?
It takes little effort or risk to walk down the street and shout, either. What matters is that the people in both situations are expressing their support for one side of an issue. That it doesn't meet your standards for intelligibility isn't really material. A vote is not eloquent, but it is a powerful statement when millions do it at once and with one object. It is the same for public demonstration.
What stuck out to me is that the average user visits only 89 different domains a month. No matter how big the web becomes we only are aware of a miniscule fraction of it.
Agreed. But the difference is that the people defending them are not trying through public perception, or regulation to change the current system. If they are not asking for change, why should they be held to a higher standard than the attackers.

For all of the potentially problematic items mentioned, there is an equally problematic issue on the liquidity taker side. Invisible order books, iceberg orders, preferred router agreements, and large block rebates are all "features" that the markets provide to give advantages to the large institutional investor that harm the rest of the market but they aren't mentioned in the Lewis book, and are never referenced by folks trying to defend "the little guy".
Pay-TV subs rise despite online alternatives
Maybe it's my browser but I only see a picture, no story.

Or is it the picture that's cool?
Does SSH (specifically sshd) on major OSes use affected versions of OpenSSL? [answer pulled up from replies below: since sshd doesn't use TLS protocol, it isn't affected by this bug, even if it does use affected OpenSSL versions]

What's the quickest check to see if sshd, or any other listening process, is vulnerable?

(For example, if "lsof | grep ssl" only shows 0.9.8-ish version numbers, is that a good sign?)
"Is there a bright side to all this?"

"Yes, we can sell you our software!"
Are people going straight to buying new domain names for every TLS bug discovered these days?
So was I, until I took another close look at the code. It's easy to miss the part you can edit.
Do you have any tools available to you that let you execute code at a chosen time?
I agree that this is a significant factor in the problem, but it is far from the only one.

The problems with the mobile web are far broader than that. Being tied to JavaScript (a language whose semantics remove significant optimisation opportunities, unless you write in something else and target via asm.js), a UI layer that doesn't cleanly map to being hardware accelerated, and missing or incomplete APIs for everything from Bluetooth to push messaging.

If you look at the Chrome APIs (that is the stuff Chrome apps get access to) there is neat stuff, and they are attacking it slowly enough that what APIs they produce are sane, and this is clearly what they see as the future. The problem is the world moves faster than that, and just as the web people are beginning to even grok mobile they're going to be smacked around the head by an absolute explosion of tiny devices.
I don't think it will in the short term.

This is a really smart move by Blue Bottle though. Overnight, they have a Web presence and a mail-order/distribution network.
Just in case anybody seeing this missed the post earlier:

Article: https://news.ycombinator.com/item?id=7543691
Fourier Discussion: https://news.ycombinator.com/item?id=7544481

Direct link to Fourier animation: http://math.stackexchange.com/a/738048

More advice from the discussion: http://betterexplained.com/articles/an-interactive-guide-to-...
My first programming experience was with BASIC running on a GE time-sharing system in 1971. We worked on teletype machines and used paper tape to store and load programs. I remember that the user manual was fairly small and reasonably helpful. Performance wasn't too bad late at night when the folks who used the GE machine had gone home.
The objective of this tests seems to be more to prove a point than to be fair, I'm not surprised.

And the test looks like it's blind, but not double blind.

It seems all rigour goes out of the window in order for the researchers to prove their point

And of course taste is subjective, but a misadjusted violin will not sound great even if it's a good violin. (Same with a bad violin, modern or old)

> "professional violinists can't tell the difference between
modern violinist and old Italians," then I think we need a

> different study in which violinists are actually asked to
identify that

Of course.
The article explained how the long-term relationship with an older violin, which is more 'broken in' but temperamental day-to-day, might be different than with a modern violin, which is more 'dependable' day-to-day but can experience significant shifts in tone as it ages.
> I wonder what today's generation growing up on?

Pretty much every 8-bit came with a BASIC[1]. I would imagine a lot of kids today don't program anything since it is much less accessible.

1) had to buy the cartridge for the Atari 8-bits
This did make me chuckle:
"...when’s the last time you heard someone talking about their favorite viral OneDrive video? Never? Yeah. Probably never."
Remember to add it to /etc/portage/package.use for a permanent fix (unless you use ~arch for which 1.0.1g is now available).
Seems to be overloaded now. Multiple 503s.
As of now (21:04 UTC) this isn't fixed in Debian https://security-tracker.debian.org/tracker/CVE-2014-0160 nor Ubuntu http://people.canonical.com/~ubuntu-security/cve/2014/CVE-20...

Got a long night ahead :/
> "learn BASIC, learn Pascal, then learn C"

So much of this! I remember the older kids talking about Pascal (they were using TurboPascal at the time) and to me it was some mystical, highly-advanced form of magic, a sort of "more complex" BASIC. However, I never actually learned Pascal or used it, because I jumped directly from BASIC to C (actually ended up doing both for a while). The reason I even found out about C, was because I asked my computer teacher in junior high how people made games, and she told me that it was a language called C. So that summer I got myself an ANSI C book and started teaching myself C.

It was very difficult at first but I slowly got the hang of it. By junior year of high school we were doing C++, and having done C it was really easy for me to switch to C++.
Thanks for your comments.

1. Most email open tracking services do not alert the recipient (or require opt-in). Tracking email opens is basically standard practice these days. We don’t have numbers but I bet the majority of marketing emails track opens. Also, many new services such as Streak, Yesware, and ToutApp track opens without opt-out ability or downloads. The only similar service that we know of that has a time-limited opt-out option is Boomerang.

2/3. Pluto’s goal is to change the way people think about email. If an email is going to expire in a few minutes/hours does search matter? Pluto may not make sense for your business emails and that is ok. We are providing an option for people to use for emails that they don’t want to follow them for the rest of their life.

4. It is a big task and we’re working on ways to make Pluto as accessible and easy to use as possible.

David Gobaud
Co-Founder @ Pluto Mail
It should work with any plot that has a y range greater than 0. ggplot2 can't do anything to fix the fact that log(x) for x <= 0 is undefined.
I feel it's a good lesson that people new to the industry often learn. And working for a startup is a lot of fun; you get to wear a lot of hats and a 23 year old software developer gets way more responsibility at a startup than they would working at Microsoft or Google.

If you're fresh out of college, what do you have to lose? You either get underpaid for a few years and learn some valuable lessons (one of which being equity in a startup has a value close to zero) or you get lucky and can retire before you're 30.
So they managed to notify Cloudflare in advance, but not debian/ubuntu security teams?
I miss Antic and the other magazines that came with programs to type in and modify. I learned about checksumming from those magazines :)
Worked for me on Firefox. It's one of those scroll-down tablety things.
Fake Social Media Accounts Flourish In Wake Of MH370 Disappearance
Same thing happened to me on level 9 (I think?):

http://i.imgur.com/eYHoebE.png
Interesting idea, but it feels very weird to have it in the Uber taxi app. They need to get a better strategy if they want to continue diversifying.
An Ubuntu update would be nice right about now. Outside of disabling everything that uses openssl or compiling a new one manually, there's not much I can do to secure my servers at this moment. Meanwhile, I'm guessing a lot of not so nice people are racing to scan IP ranges for this bug.
I'd have to disagree - the math is important, and lays a foundation for functional/declarative programming. One major lesson of Chapter 1 (where the math is most evident) is conceptually tying math (and its notations) with functional, declarative programming. Math still shows up in Chapters 2 (e.g. generic operations, polar vs. rectangular coordinate system math) and 3 (streams). It can't be skipped over without missing a lot of lessons.
Can some people who are smarter than me give us the flags we would like to compile this with manually?
In my opinion its a no brainer to accept the money, some group is giving you $$$ for you to do what you want to do, and if you fail ther's no real downfall, you just go back to doing what you did before.
Keep in mind that you have to run this with OpenSSL v1.0.1 and above. Running it on a stock OS X Mavericks install will not detect the extension because v0.9.8 of OpenSSL is installed.
It would be interesting to know how many domains a user visits per day. My guess is that it would be somewhere in the vicinity of 40 which would represent the sites that user bestows the most trust to.
The level files are 503ing, but it looks like the level counter is still incrementing if I go out of the exit and back in again. You might want to add some response code validation in.

GET http://alex.nisnevich.com/untrusted/levels/10_ambush.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/11_robot.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/12_robotNav.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/13_robotMaze.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/14_crispsContest.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/15_exceptionalCrossing.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/16_lasers.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/17_pointers.jsx 503 (Service Unavailable) jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/19_documentObjectMadness.jsx net::ERR_CONNECTION_REFUSED jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/20_bossFight.jsx net::ERR_CONNECTION_REFUSED jquery.min.js:6
GET http://alex.nisnevich.com/untrusted/levels/21_endOfTheLine.jsx net::ERR_CONNECTION_REFUSED
How widely implemented is certificate revocation?
Indeed. I took a quick look at the "front page" of their blog and many of the post titles are what you would expect to see on press releases.

According to their "About Us" page, however, they are "a global leader in next-generation mobile security solutions." That's pretty remarkable to me considering the company was "founded in 2013" -- not bad for a year or so's work.

But I suppose that's easy to do when your "team consists of security industry veterans" (that shall go unnamed, it seems).

Maybe next week they'll reveal how my home is vulnerable to being broken into by a burglar armed with a battering ram.
I'd be surprised if heartbleed.com was still available in 2014
You seem to know these men well!

Would they have said we should not have spoken out when a company we know and would like to trust advances a man demonstrably and unrepentantly against equal rights for gay people to its highest post? Or would nonviolent activism and speech asking that such a person not be allowed to represent that company, and that someone with such views should not be honored but repudiated, be "inimical" to their philosophies?

I don't presume to know what King or Gandhi would have done. But I don't think speaking out against a public figure who stands against equal rights is wrong.
Conceptually, regulating new legal family relationships on the basis of existing family relationships is different than doing so based on some other non-family status, so there is no real reason why positions on these should be expected to correlate.

This rationalization of anti–cousin marriage bigotry makes you sound like an Islamophobe who cares little about violating Muslims' religious liberties by denying them their basic civil rights. Be careful not to get purged.
The Three Most Heated Debates In Git – ReadWrite
@barista: You've been hellbanned for 95 days. I look at your comments history and I cannot guess why.
Building an auth system, user accounts, comment submission, moderation, and threading, then rendering all of that out is more work than it seems. All of the dynamic-ish stuff (seeing your comment immediately, noting your comments) has to be carefully thought out. Right now commenting takes half our app load, and it's pretty tightly written.
Worst outcome: just slogging along, not good enough to exit but not bad enough to kill so people can get on with their lives.
www.chimp.net does this in Canada (been a client of mine for several years and counting).
In case you wonder why there might not be much discussion or many upvotes of this obviously entertaining item, it's been submitted before, and many of us have seen it. Here are just a few:

https://news.ycombinator.com/item?id=456462

https://news.ycombinator.com/item?id=456245

https://news.ycombinator.com/item?id=7262239

https://news.ycombinator.com/item?id=7018765

https://news.ycombinator.com/item?id=7076024

https://news.ycombinator.com/item?id=7089576

https://news.ycombinator.com/item?id=7549474

https://news.ycombinator.com/item?id=7081914

There are almost certainly more, but they had various titles, and I haven't bothered to search for the alternatives.
Another problem with raising money: if you raise early, you probably don't yet know if you have a VC-appropriate business or a lifestyle business. If you turn out to have a lifestyle business and you've raised VC, it is amazingly depressing - as in, "I'd love this business if I owned all of it and I'd be happy with a small exit".
Being tied to JavaScript (a language whose semantics remove significant optimisation opportunities, unless you write in something else and target via asm.js)

In a world where V8 exists, I'm not so sure. JS running on the main thread absolutely is a problem, and Web Workers are a clunky solution.

a UI layer that doesn't cleanly map to being hardware accelerated

Agreed this part is tricky. But existing hardware acceleration on mobile web isn't that bad.

missing or incomplete APIs for everything from Bluetooth to push messaging.

Mozilla is working on all this for Firefox OS, but of course no-one has incentive to agree with them.
> Thinking back on BASIC, what stands out most to me are the line numbers.

Because in most computers at the time, you didn't have an editor that could edit an entire source file. I remember writing BASIC on a TRS-80 and an Apple IIe. Those just had line editors.

Line numbers let you identify which line in the program you want to edit. Typing in:

20 PRINT "HI"

meant, "replace line 20 with that".

You spaced out your numbers (usually multiples of ten) so that you had some available numbers if you need to insert some code between two lines. If that got crowded, typing in "RENUM" would renumber all of your lines and neatly space them out again.

At a child, I remember thinking RENUM was the most magically complex algorithm I could imagine.
Great intro, just a minor nitpick to not spread confusion: Julia does actually have named arguments:

http://docs.julialang.org/en/latest/manual/functions/#keywor...
Seems like a merger one can feel ok about.
That argument definitely doesn’t work for Apple but it also doesn’t really work for Google.

Yeah, installing any apk is possible, but hard to do. Any apks and apps in the app store are a million miles from being on equal footing.