skysight-inc/HackerNews huggingface dataset:
Special plug for the OpenStreetMap innovation fellow!

http://www.whitehouse.gov//innovationfellows/projects#sectio...

Round 3 Presidential Innovation Fellows will work on five Crowdsourcing projects that seek to create interesting opportunities and solve unique challenges.

Open Street Map for Diplomacy, U.S. Department of State

OpenStreetMap (OSM) is a free, editable map of the world built by a community of mappers who contribute and maintain data about roads, trails, cafés, railway stations, and much more, all over the world. During disasters like the 2010 Haiti earthquake, volunteers around the globe can use OSM to quickly build maps of uncharted or poorly charted regions, with the goal of rapidly getting help to where it is most needed. This project expands on existing State Department initiatives to: create and share open geographic data with the OSM user community; support the growth of global technology communities through stakeholder events around the globe; make citizen-driven mapping a core component of ongoing engagement with civil society; and openly share the outcomes of civic engagement efforts to help inform humanitarian and development projects around the world.
Probably a lot of room for discussion here, but I think it's problematic to conflate this documentary trip with Watsi's general practices for dealing with patient information – doesn't appear that they gave out any of their patients' personal information in this piece, and they generally do a great job limiting the amount of information listed on any given patient's page.

Of course, there are a lot of health care needs that are by nature private or could endanger the patient well-being if it became public that some procedures were done. I believe they have an anonymous fund that receives a percentage of all donations to attend to just those types of issues.

If any information on any patient should be given out is a bit of a different question.
> Is there a name for when you get progressively more depressed about an issue the more you learn about it?

Experience.
I don't know how they feel but if they're popping champaign bottles after abandoning their product and their users then I don't give a shit how they feel.

I do understand the situation better than most however because I've been there in a startup when the end is there and you're faced with acquisition to hire talent or closing the doors. You face it every day as time runs out and your runway shrinks. You face it a thousand times until you finally make a decision you were avoiding for a long time. It's not fun. So if these guys are happy it's probably because a weight has been lifted of their chest, not because they succeeded.
2011-12-31, it looks like, so it's been there for a couple of years already (introduced between 1.0.0f and 1.0.1):

http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=...
Thanks, I wasn't aware of QD-LED displays. It's sad to see Cd return to areas where LED technology seemed to bring an environmentally clean solution.
Employees seldom see a big payoff. Period.

You know what I've never heard of being tried? Creating a private business with big enough margins so that the office manager is paid $200K.
Indeed. But you could probably break these pages into app categories -- "things I read (flipboard, reader apps), things I look at (flickr, instagram), things I watch (youtube), etc."

I personally love apps that are stupid simple and stupid straightforward. You know, like melon ballers: they do precisely one thing, but they do it so incredibly well, you don't understand how you got along without one before.

Melon baller apps.
Game of Thrones Season 4 Premier crashes hbogo.com servers
read again.
> MOST ANNOYING THING

A weekend is plenty. You're an intern: there are many, many more of you to choose from. As you pointed out, nobody wants to waste time. The person that offered you the placement wants someone who wants to be there, not someone looking for an backup offer.
I've fallen into this trap myself and understand where you are coming from. You get so burnt out on your current job that you start to treat every job interview as a potential relief from this burden in your life. What happens though is that you start to sound desperate when interviewing. No one wants to hire a desperate person. Even if you are the most qualified candidate, if you give off the wrong vibe it is difficult to get hired.

My advice is to stop focusing on the outcome of interviews and just focus on what you can control in the process. Try to do a few things each week that will make you seem like a better candidate than you were last week. Treat it like a game where you are leveling up during each round. Go back and review interview questions that you didn't answer well and rehearse what you would say the next time. Put together some material that you can show to someone interviewing you that helps guide the conversation towards your strong points. Keep an open mind and talk to people in your industry. Making it trough several rounds with Google means you are a strong candidate. If you keep up with the process, you'll start getting job offers.
I'd say Quora and Dropbox can pay much higher, from my personal experience.

Also, there are other places in the industry that pay even higher. But I'd include those with Quora and Dropbox as Tier 1.

In short, Fog Creek is at most Tier 2, along with Google / Facebook, etc.
How to Land a Marketing Job – Part 9
I made the robot follow a cosine curve. Cute but ridiculous solution.
You need to manually restart all processes linking libssl, too.

Something like "lsof -n | grep ssl | grep DEL" can identify processes using the DELeted old version of libssl after apt-get upgrading.
Yes, but there are other ways to compromise TLS sessions. For example, if you're using session tickets, the ticket key could be in RAM. Or, the session master keys themselves could be leaked. Still, you're _much_ better off with Forward Secrecy -- in most cases keys ticket keys are rotated with server restarts; so are session master keys.
Play Videogames by KISSING?
They were okay.. but I actually sent back some feedback to them by showing other "related" articles. The trashy ones. You know, showing a picture of someone groping their belly fat and mentioning some diet.

This was on a programmer's static blog compiled by octopress. I really felt like it lowered the quality of my experience reading the post, even though it was entirely Disqus's fault and not the author.
Great idea, in theory. But even if you simply shared equity across, say, a 20 or 30 person company. The agendas, the politics, the perceived golden handcuffs because of equity ownership. Hard to start a business with 20-30 people. Even if those are your 20 best friends.

Now multiply this across dozens of companies. Plus, most startups give options, not equity unless you are a very early employee.
All references I see recommend (for 1.0.1-series) to move to 1.0.1g - but the OpenSSL homepage[0] says that 1.0.1g is a Work in Progress. There is a download[1] link for it though. Anybody have definitive answer for what's going on here? It's a little confusing.

[0] http://www.openssl.org/news/state.html
[1] http://www.openssl.org/source/
Pretty slick storytelling design. Anyone know if this blog is built on top of something (medium/wordpress) or is it custom?
Figured there might be more than just that flag you'd want to compile with.
Awesome, gave me a great glimpse of something, I'm not sure what you guys are, but it looks cool.

Web usability suggestion: Click as I might, I could not find a link anywhere to the Watsi home page. Call me lazy, but I still have not visited it. If there was a link to it I might have clicked on it and gone there.
Can we please vote this link higher? It's got a ton of information in it.
Segmenting my network isn't an option when "my network" involves machines on multiple continents.

I avoided ssh because sshd is an effectively unauditable mess, and breaks the "transient network glitches don't kill quiescent connections" assumption.
It doesn't necessarily need to be told what to do by a human. If you can create an AI capable of doing it and a process which can be automated, then I believe it's possible.

I'm not saying it would be easy, but automating the complexity of rug weaving was once thought to be impossible too. The past suggests that with enough knowledge and infrastructure any human endeavor can be automated. Until recently, technology has mostly allowed replicating physical labor, but now we've made tenuous steps in virtualizing the processes of the human mind.
Right, but what I've said in other replies, why can the Pi do this any better than any of the existing SO-DIMM modules on the market?
Hi modernm,

Thanks for commenting here. I wish you had asked for our side of the story before publishing these allegations.

I agree that flat rates should be compared to flat rates. It would indeed be misleading to compare Zidisha's flat interest rates with another microfinance provider's APR rates.

In my experience, flat interest and fee rates of over 30% are common in microfinance, and that was the basis for the comparisons I have made with the cost of Zidisha loans. It is hard to find reliable data on the average APR of microloans worldwide, because many microfinance organizations underreport the full cost of their loans, and those that do opt for full disclosure on sites such as Microfinance Transparency and the MIX Market tend to be those with the lowest rates.

This article provides a good overview of some of the complications involved in measuring the cost of traditional microfinance loans: http://blog.givewell.org/2010/04/02/microfinance-interest-ra...
At the risk of sounding sarcastic (I don't mean to be, really), the Wikipedia page really is a decent starting point:

http://en.wikipedia.org/wiki/Enterprise_resource_planning

Beyond that, you'll find textbooks on the topic as well. Courses on ERP (and related topics like MRP) are usually found in degree programs with names like "Management Information Systems" or something, not "Computer Science".

http://www.amazon.com/Enterprise-Resource-Planning-Bret-Wagn...

http://www.amazon.com/Concepts-Enterprise-Resource-Planning-...

If you wanted to get your hands dirty, there are some open source ERP systems out there. One well known one is OFBiz, which is now an Apache project:

http://ofbiz.apache.org/

I'm not 100% sure I'd actually recommend anybody deploy OFBiz for a real business, but if you wanted to play around and get a feel for some of the concepts, it could be a useful starting point.

Finally, if you want to drink from a firehose, you could do something like this:

https://www.google.com/search?q=%22enterprise+resource+plann...
They may have had someone involved in the research / identification and fix.
The phrasing in your second paragraph is a little off target: the truth is if you're doing anything nontrivial you always want better people because they'll get the job done faster and better even if less skilled people could have done it at all. The real question is, why does Fog Creek think it is to its advantage to only hire potlatch participants, when such discrimination is usually irrational as well as unethical?

The answer, I think, is because they are in the unique position of being able to get away with it. In the normal course of events you'll do worse looking for candidates from Ivy League universities than from people who haven't gone to college because you're fishing in a pool that has already been thoroughly fished by your competitors. But
Fog Creek frankly doesn't have very many competitors in this regard, at least not ones remotely in the same league. They seem to be so much better at hiring interns than almost anyone else (in the sense of having a strong brand name to attract attention in the first place, a rigorous selection process and generous offers to those selected) that they will probably be able to pick the cream of the crop no matter where they look, so they have no need to look further afield.

So I think it's a case where the number one player can get away with something the rest of us couldn't.
I was thinking of the scenario of old traffic being recorded by someone. Unless they also extracted the session key at that time, that traffic should be secure if PFC was enabled even if someone where to extract the server key now.
Another factor is that if you do get into illegal hacking, you're jumping in a pool that now contains a lot less kids who are learning and explorers and a lot more real criminals. Hacking (sense 2, the illegal-stuff sense) is a lot darker and more money-driven these days.
Implementing Pie Charts in R
The best way to win a customer
Unless you ended up using a Commodore 64 or one of its ancestors which was completely sprite-oriented and thus not much good for canvas-type programming. I've often thought my life might have been different if I had asked my parents to get me a Sinclair spectrum instead of relying on the fact that our school had Commodore computers to push them towards a Vic-20.
Ok, anyone could assist me on how to update openssl without breaking anything? I've fetched newest sources from openssl.org and compiled them, but "make install" doesn't actually install it, it only got compiled, but issuing "openssl version" still gives me the old version.

What I want to do is to patch it so our webserver uses new version.
I wouldn't even say the study proved that point. The fact that the older fiddles couldn't be adjusted for sound optimizations while the new ones could makes a huge impact on the study - it invariably unlevels the playing field.
#1 paid app in Google Playstore "Virus Shield" is a complete scam.
"A formula is worth a thousand pictures." [1]

Also, draw a picture of the monster group (http://en.wikipedia.org/wiki/Monster_group), 11 dimensions of space time (http://en.wikipedia.org/wiki/M-theory), or explain how a picture of seven infinitely long cylinders can illustrate that each pair of those cylinders touches each other.

So, I disagree that "everyone ends up reasoning with drawings".

[1] https://www.utexas.edu/faculty/council/2002-2003/memorials/D...
I’ll be interested to see where it goes. I’ve been with Tonx for almost a year, and I really like it, despite having easy access to great local roasters, who I still visit. Tonx provides some variety and flavors, varietals that I might not normally seek out. I get the smallest possible shipment each month, and its a relatively minor expense that provides something new.

Will be interested to see how it inevitably changes.
Answers in sibling threads suggest ssh/sshd is not affected, as ssh uses its own protocol other than TLS.
The whole world inexplicably loves Captain America
Claiming they own Podcasts – Carolla is being sued by Patent Trolls for 1.2m+
Amazing. The real-time application of this is extremely powerful.
Grace from Watsi here. I totally understand where you're coming from based on how the post is written - our fault for being hyperbolic. Of course, we would never walk through a hospital and record people without their explicit permission.

Patient privacy is something we take really seriously. It is so important to us that Watsi funds cases regardless of whether or not the patient wants to publicly share their story with the world (https://watsi.org/faq#how-does-watsi-handle-patient-privacy) so that patients are never trading privacy for access to healthcare. More info here: http://blog.watsi.org/post/62445601517/patient-privacy

That said, what I've learned after talking with dozens of Watsi patients is that the overwhelming majority of them feel compelled to share their stories. They hope it will enable more people to access the healthcare they deserve.
> As is well-known and obvious, flat-rate pricing actually obfuscates the true costs.

Huh? Flat-rate pricing makes the true cost absolutely clear. If you have N payments with an k flat rate, and principal P, the total of all payments will be P × (1+ k × N). The "true costs" with APR are no more clear.

Declining balance interest (APR) is perhaps a more fair and economically efficient basis for charging for credit, but its not at all more clear as to the "true cost".
Just received an upgrade on Ubuntu 12.04 LTS as well, apt-get clean issued before updating.

EDIT: If you are using DigitalOcean, the update is not yet on their mirrors. Issue 'sudo sed -i "s/mirrors\.digitalocean/archive.ubuntu/g" /etc/apt/sources.list;sudo apt-get clean;sudo apt-get update;sudo apt-get upgrade' to get the patch. Check the comment by 0x0 above ( https://news.ycombinator.com/item?id=7549842 ) to find any services which need restarting.
No, I might once I get deeper into JS though, if the VIM bundles don't satisfy me.
Perhaps Cloudfare should note that the "up to 64kB" isn't entirely correct.

http://heartbleed.com/

>>There is no total of 64 kilobytes limitation to the attack, that limit applies only to a single heartbeat. Attacker can either keep reconnecting or during an active TLS connection keep requesting arbitrary number of 64 kilobyte chunks of memory content until enough secrets are revealed.
Employing similar visualizations for other Numerical Methods would also be interesting to view.
Much earlier but: defense by excessive reaction.

https://gist.github.com/anonymous/0bd9b9d36892ffe6dbbf
The story of Sweet 16, Steve Wozniak ports BASIC to the Apple II.

http://www.6502.org/source/interpreters/sweet16.htm

"While writing Apple BASIC, I ran into the problem of manipulating the 16 bit pointer data and its arithmetic in an 8 bit machine..."
Apparent introduction of the bug: https://github.com/openssl/openssl/commit/bd6941cfaa31ee8a3f...
I installed the latest version of this, and of Node, on my Windows computer, and I had to change "~/node_modules" to "./node_modules" in the final line of Makefile (in the "runlocal" target) - the http-server module was installed in the current directory. Otherwise it's working great; thanks!
Waterloo's "co-op" system is quite different. The whole undergraduate co-op program lasts about 5 years, and you alternate between 4 months in school and 4 months working throughout (i.e., you don't get summers "off"). This allows the students to try many different companies of varying size and culture.
The article is discussing a very different thing. It's not web vs native on technology alone, but on which platform users are spending their time (in a browser or in an app). There is a growing number of apps being built with web technologies for the app stores, and that will only grow as the tools get better there (disclaimer, I am very much invested in that space).
There was a discussion here a few years ago (https://news.ycombinator.com/item?id=2686580) about memory vulnerabilities in C. Some people tried to argue back then that various protections offered by modern OSs and runtimes, such as address space randomization, and the availability of tools like Valgrind for finding memory access bugs, mitigates this. I really recommend re-reading that discussion.

My opinion, then and now, is that C and other languages without memory checks are unsuitable for writing secure code. Plainly unsuitable. They need to be restricted to writing a small core system, preferably small enough that it can be checked using formal (proof-based) methods, and all the rest, including all application logic, should be written using managed code (such as C#, Java, or whatever - I have no preference).

This vulnerability is the result of yet another missing bound check. It wasn't discovered by Valgrind or some such tool, since it is not normally triggered - it needs to be triggered maliciously or by a testing protocol which is smart enough to look for it (a very difficult thing to do, as I explained on the original thread).

The fact is that no programmer is good enough to write code which is free from such vulnerabilities. Programmers are, after all, trained and skilled in following the logic of their program. But in languages without bounds checks, that logic can fall away as the computer starts reading or executing raw memory, which is no longer connected to specific variables or lines of code in your program. All non-bounds-checked languages expose multiple levels of the computer to the program, and you are kidding yourself if you think you can handle this better than the OpenSSL team.

We can't end all bugs in software, but we can plug this seemingly endless source of bugs which has been affecting the Internet since the Morris worm. It has now cost us a two-year window in which 70% of our internet traffic was potentially exposed. It will cost us more before we manage to end it.
The Rise of the Mobile Web
Thanks! We used https://exposure.so/.
I am 21, and when I was 12 I started coding with TI-BASIC, which is a (terrible, terrible) flavor of BASIC that comes on most TI graphing calculators. Most kids still have these calculators, so I imagine there are several learning on it.
This is the first thing that popped into my mind when I read it was a 24/7 delivery service for only $15.
Solving the double-click in Backbone.js
No, I use the web whenever I can. I use apps only for very specific functions (music player, audiobook player [that is tied to the library system or i would simply use the audio player], maps).

Why download, upgrade, share memory space on my device for apps when I'm pretty sure I can't really trust the creators with my data anyway?
I would tread lightly here if you aren't comfortable with compiling. Rather than break your website, it might be better to take it down until your distro's packages are available.

You should probably spend your time investigating a good method of reissuing keys for when you get to a stable OpenSSL version.

Some apps have OpenSSL statically compiled into the binaries. Beware that what you think is fixed may not be.
Thanks for reminding, almost forgot about that.
No, SSH is not (directly) affected.
tl;dr: Study seeks to determine if Old Master violins actually sound "better", media reports misleading headlines (shocker), musicians are angryface.

I remember when this study was first concluded and reported on. The CBC had a woman who participated in the study (maybe this very woman) on the program and it was so extremely obvious that her professional pride was wounded, and she really wanted to make herself feel better by telling the world that she really could pick out the Stradivarius.

I have no reason to doubt her; she's a professional violinist.

But it seems to me that the study was actually very effective at showing that masterwork violins do not necessarily sound better than modern violins, contrary to the regurgitated opinions of hundreds of thousands of novice violinists out there.
Litecoin potentially merging mining power with Dogecoin
An Easy Way To Check For IE in PHP
The Business of Prison Pen Pals
No, there really isn't anything innovative about them. I doubt that will stop HN comments from crying "Won't someone think of the INNOVATION" when confronted with regulations to produce an impediment to something they want.
I believe the reason they got access was one of their customers found it and reported it to them, and they reported it to OpenSSL, and then it somehow leaked (either with the OSSL release, or someone else) and then they posted their now-public writeups of it.
wow that level took me forever. Ended up using things along the lines of if( me.getX() < 15) {move down then right} elst if me.getX()>15 and < 30 {move up then right} etc.
Its missing some stuff..

Put it this way, the money taken out of the system when mortgages blew up did not just accumulate over night.
But its the multiplying effect that is the Big thing that was taken away...that multiplying effect did in fact trickle down to USA job growth for the middle class.

Now we do not have it..

Its different than other economy transitions, in other transitions for example from farm to industrial you had higher industrial wage jobs spurring young farmers to move to the city to work. Now we have what?

We may be looking at a 0-n problem being solved in that does a 'StatUp' economy get established..

Other's thoughts?