skysight-inc/HackerNews huggingface dataset:
No. Their insight sheds light onto the struggles that a disruptor has to deal with in order to break through a heavily entrenched cartel (actually overlapping cartels).

This is highly pertinent information for like-minded initiatives.

Edit: for clarity
No, not at all. That's not how SSL certificate revocation works.

If the certificate is not revoked when compromised, the party harmed may not be the StartCom customer, but anyone still trusting certificates issued by them.

When this is happening on a large scale, considering the CA status of StartCom is certainly due dilligence.
Should be called "Shit that the Uniformed Say to Founders of any Gender"
Ultimate Warrior GIFs
I suspect that ants are not that kind of drone either. It seems plausible that, from the perspective of an ant, life is in some sense as rich and complex as it is for us.

Sure, we can model their collective behaviour using simple rules and randomness. Yet this says little about individuals' motivations. Similarly, one can model parts of an economy. Yet a software agent does not have the inner sense of a person.
A visiting alien with no comprehension of humans' subjective perspective might well (wrongly) consider our cities as we tend to see ants' colonies; just an artifact of some basic economic rules.
I do knot know because I couldn't access the page.
They're addressing the issue of public perception. Electric vehicles are new, untried and untrusted. This means that there are two arenas where it is in Tesla's interest to have strong public support: Consumers, who do not want to buy cars which are rumored to be unreliable, and investors who don't want to extend credit to a company which is likely to have customers turn their back on it.

Tesla has experienced multiple smear campaigns from different angles and motivations over its short history: Top Gear presenting the Roadster in an unfavorable and inorrect light, the New York Times lying about the car's performance in winter conditions, multiple news outlets overstating the fire risk of their li-ion battery packs. The fear of the public getting an incorrect picture of its reliability and safety record is very much grounded in reality.
That's mainly the conclusion I came to as well. I find Go nice to use for writing web apps and services. For anything more complex/critical and/or with a high demand for correctness, I find using Rust to be a no-brainer compared to Go.
Compare:

https://github.com/shurcooL/Conception-go - Go, 7'500 lines

https://github.com/shurcooL/Conception - C++, 15'000 lines

Which would you rather work with? You can look at the commit activity to see my preference.
+1 - mostly it's good for checking I still have a body temperature.
No, I have not.

It's great to see a build tool like this but my apology, the syntax is horrifying! :( (I suppose that's a personal taste).

I'm really2 spoiled by Maven because of all the things it does for me. FAKE is just like Ant/NAnt/MSBuild so it's not what I'm hoping for.

I've worked with Ant before and the build script generally becomes bloated really quick with no standard.
The article mentioned her boyfriend because:

her financial cushion had made it easier for her colleagues to leave her behind.

"Their attitude was, We can leave you with nothing because you’re a girl and you have a rich boyfriend," she said.
IOS developer wants others to learn by doing
NSS implements both the client and server side of TLS. And OpenSSL and NSS aren't the only options; if X.509 bugs are more your style, you could try PolarSSL or MatrixSSL:

https://twitter.com/tqbf/status/454022864660750336/photo/1
It seems odd to, in a security context, say "The payload of the HeartbeatRequest can be chosen by the implementation", giving a huge amount of freedom to implementers (apparently it was determined that "something more elaborate" might extend to an implementation needing to send a full 64K of chosen payload data) without further investigating whether any particular choices made by the implementation might have consequences for the security of the protocol.

Why allow variable length payloads at all? Why allow more than about 128 bits of data for distinguishing responses? I guess you might argue a client might want to disguise the nature of these heartbeat packets from an eavesdropper, so they need to be variable in size - that's reasonable, but if it's a requirement, then surely you'd want to comment on the security risk of using a "simple sequence of numbers" rather than "something more elaborate". 64K of data, though? That seems like a lot of leeway to give an implementation - considerably more than enough to disambiguate heartbeat packets; implementations are going to keep 64K of data around and compare it byte for byte to check whether the echo they got back matches the payload they transmitted earlier?

I really don't mean to ascribe malice here; I tend to assume this is just a bug, and that the payload for heartbeat packets gets to be up to 64K because once you've decided to make something a variable length buffer, you're probably choosing between having a one byte or a two byte field for length, and 256 bytes seems like it might be too small so you figure 'why not make the length field two bytes?' and then... oops; someone makes a buffer overrun and suddenly we're faced with 64K at a time of data being ripped out of any old server's heap.
Yep. There is no way in hell I'm going to enter my personal information on a page for a service that offers no information about itself. This is new web service 101. Come on, guys.
You can't use this on iOS without granting Photo permissions, and when you do it automatically uploads all your photos to Dropbox. So this doesn't actually improve the Dropbox photo sharing experience - it demands that your phone's camera be Dropbox's camera. Maybe that's what some people want, but I can't ask the friends and family with whom I want to share photos to use this, so there's no point in using it myself.
The source code is available on github: https://github.com/algolia/linkedin-search
Wikipedia doesn't want your Facebook login before you can read the answer.

Seriously, any talk of Wikipedia around Quora is strictly Quora's wishful thinking. This will never happen.
It might, but certainly not $25 per instance. That feels a lot like gouging.
Yes. This is known. It is to stop spam bots and to detect whether you are a regular user and not a VPS.
Google Australia: "Start With Code" campaign
Telling your side of the story is not "bullying" just because your side of the story is extremely compelling. Not to be too much of a prescriptivist, but it would be good if we reserved bullying for something with at least some remote connection to its original meaning, which is linked to injustice and violence of a verbal or physical form.
It was deliberately ambiguous what they were building since it's more or less a MacGuffin but there was some talk of it allowing faster search over compressed content which, to me, sounds like plausibly valuable technology.
Downvoting to express disagreement is appropriate on HN. See pg's comment:

https://news.ycombinator.com/item?id=117171
Congrats Andrew! I've been listening to your interviews since 2010 and still learn a lot from them.
Big congrats Andrew! I've been listening from the beginning and find it to be an immensely valuable way to learn about different businesses.

Question, what's next? Don't kill me if this is your 1,000th episode, I just started listening to it : )
> The moment it was made public information, there was absolutely no reason whatsoever to hold back on marketing it.

There's a lot of different kinds of public. "Possibly in the wild" is very different than "available to every script kiddie under the sun".
> Jobs and Ive run Apple like a cult of personality

Hello? Earth speaking to whoever is out there.

I realize information takes time to reach the end of our solar system and beyond, but Steve Jobs died long ago. He also ceded control to Tim Cook months before doing so.
I wonder if embrace the unix stdin/stdout is the solution.

I'm toying about a new languagte where each function have IN/OUT/ERR channels.

So, is possible to do:

result | err = open('file)

This consume the ERR channel, however, if is not:

result = open('file')

it "trow". Inside the open, any raise is like a return for the ERR channel.

This combined with RAII & scope like in D:
http://dlang.org/exception-safe.html
It succinctly captures the entire category of "small personal electronic device from Apple" including all present and plausible future product lines. Unlike M$, it has both derogatory and non-derogatory intonations and connotations.
There's another piece of it which is tone.

If you were standing at a checkout and the cashier wanted you to swipe your own card, he/she might say, "scan your card please".

But, while the words read as an imperative statement or command, you'd probably notice that the intonation is one akin to a question. For instance, the voice would rise at the end, as in inquiry.
The Heartbleed Bug: averting a doomsday
"able to steal the SSL certificate, to be sure, and also able to intercept other HTTPS connections"

Couldn't a SSL-terminating process that's vulnerable to heartbleed also leak unencrypted traffic? The attacker wouldn't even need to be in a position to intercept other users' connections, which is much worse.

I don't know about stunnel specifically though, maybe it doesn't free memory containing unencrypted traffic.
How apply this to a language like python?
I would rather use my own browser than whatever half-assed kludge someone was forced to throw into the help system at the last minute.
I'll echo this sentiment. I do not know where I'd be today without HN. I think the reason we are so passionate about improving HN is because we do see so much value in it and don't want that to evaporate.

Thank you HN.
FDR records huge array of instruments, this data alone has solved countless crashes.
No, it's absolutely correct. He wrote that the latest compiler doesn't have a linking exception, which is correct. The FSF compiler generally lags at least a year or two behind the AdaCore one.

For example, it has only just gotten (partial) Ada 2012 features, a full 3-4 years after the AdaCore GPL compiler.
OMG, you've exposed all those intruders-oligopolists!
Bingo Card Creator. Let's just keep the scale in mind here.
The New Codecademy In China
It looks like the Lemon King went public first and Tesla PR is just counter attacking.
Anti-radiation 'body belt' developed by Israeli firm for nuclear emergencies
Some years back, I was going through withdrawal from medication and just could not keep my feet out of my mouth on an email list. I wrote a number of sincere, heartfelt apologies, clarifying what I meant without backing down from what I was trying to say but taking full responsibility for any abrasiveness of offensiveness.

The result: I soon became the list scapegoat. I became everyone's bitch. Having a bad day and just want to go apeshit on someone? Hey, kick the crap out of Michele and demand that she apologize. The entire list with back you and say "there she goes again!"

I also worked for an insurance company for over five years. Things in insurance are strongly driven by "can they sue us?" and "will that sound guilty in a court of law?" So I don't care if it is a machine saying it. The machine represents some company and many people will, like the linked xkcd comic in the above piece, conclude you are admitting guilt if you say "sorry."

So I think: No. Do not apologize. You just convince people you are in the wrong and that leads to bad things.
Some ideas:

- Virtual currency mining

- personal VPN/proxy

- email/chat server

- minecraft server (not sure about the performance)
> I would hope so, since divine anything is simply ignorant and doesn't belong in any moral toolbox.

Please save your intolerant ignorance for your atheist message boards. There is nothing ignorant about belief in God.
one mans trash anothers treasure. When I pointed out that Django is an annoying framework because it breaks up your ability to prototype flat by forcing you into some workflow structure I was told "that's a feature". Go is similar. It's annoying but some people like bumps in the road. Enjoy
I'm afraid there's still chance that we'll learn exactly when it crashed etc but not why all this happened if it was really the result of somebody doing something intentionally and everything important happened before the last two hours. The current estimates are already that the plane simply flew on autopilot during the last hours. It's possible that nobody spoke in the cockpit at that time.
I've reviewed their offerings since they announced with great interest, but it doesn't have the whole 'sync' across devices as neatly coupled as this (dropbox) does. They only sync up the 'smart preview's of the raw files from the desktop. There is also a 20gb limit. I am nearing the 200gb limit of my dropbox.

Right now w/ Dropbox/Carousel, I have mobile photos uploaded via Camera Upload and that is a watched folder in Lightroom, so now my Phone/Pad/Web/Desktop-Lightroom are all in terrific sync, just without RAW files being viewable anywhere but Desktop.
I would feel better about an option that encrypted all internal logging, and left me in charge of the key, so that I could give read-only access to the service technician, and then revoke it after the car was good.

But that's hard to do in a consumer UI.
Which sites have patched the Heartbleed bug
Does Linode have the ability to grow a VPS?
That's not what they mean. The usage they are discussing is more like this, I believe. In a functional context, instead of doing:

print expensive_computation(), expensive_computation()

You can do:

(lambda x: print x, x)(expensive_computation())

Which would be equivalent to, with an imaginary let syntax:

(let x be expensive_computation(): print x, x)
Open Source Security with git
No - the idea is not to get a buy back - if that had been the case, then they would have issued their three buy back requests, and, from what I've read, Tesla would have been more likely than other vendors to honor it.

Instead, the objective is to appear to have a violation of the lemon law, and then file a lawsuit looking for compensatory/legal fee damages.

Normally a company like Tesla will just pay off the nuisance suit in order to avoid having their good name dragged through the press, but, apparently, Elon Musk doesn't play that game, and with his posting, he is making it clear to all the other bottom feeders that he is more than willing to go head-to-head with them.

Heh, "non-tamper" tape to the fuse switch indeed.
I know exactly what you are talking about. They say all the right things but the tone is generally somewhat accusatory. I read the same thing between the lines in the response to the journalist running out of charge doing a long drive. Another example is the interview where Musl called the Prius a lawn mower when asked about electric cars and completely skirted around talking about the Chevy Volt (IMHO the best current plug-in drivetrain.)
Google should hire this dude, just to give Sir Jony the middle finger.
I'd argue all your points regarding software are true for hardware but with the added difficulty of needing to get it right the first time.
Eric Ladizinsky: Evolving Scalable Quantum Computers (Google Tech Talk)
Your phone is capable of logging a lot more than your car would.

Most people keep their phone in their nearly all day, even when they are supposed to be in the privacy of their bathroom.
I quite like colourlovers for palette ideas and construction - they have a tool that extracts palettes from images http://www.colourlovers.com/photocopa that might have helped you.

Not connected to the site except as a user.
Seems to me that if I've got a factory, I need some way to tell it what I want it to produce. That's either a string or an exemplar or some set of properties/flags. Somehow, you have to say what you want.

Or have I not understood your pain?
Not gonna lie dude. That's kinda creepy.
Meh, he's only saying that because TPTACEK loves his PET TACK.
I’m very interested to see how the mainstream press covers something I understand well. Gives me a input → output pair to train my model of the press’s lens on the world. It’s also interesting to see how the public reacts to such a thing.
You can resize a VPS quite easily, but it does involve anywhere between 15-30 minutes to complete.
It's annoying but some people like bumps in the road.

You apparently tried to build a prototype with a framework that very explicitly tries to provide more than just prototype capabilities. Invoking "one mans trash anothers treasure [big sic]" and then citing this is ridiculous; your failure to choose the right tool for your chosen task does not reflect poorly on the tool, nor does it suggest people who do use it correctly "like bumps in the road."
Dogecoin Donor
Finally! It's never made much sense to me that Messenger is both part of the main app, and a separate app - it's pointless duplication. Glad to see they're making up their minds.
Yes if you add that qualification your point is true but still not very compelling. The number of gratuitous HTTPS installations is low, I expect, given the hassle required to properly install it, so the ones that are there are probably there because secured communications were deemed necessary.

On the other hand, there is nothing inherent in HTTPS which makes it vulnerable to remote exploits such as these, anything in the stack could have such a vulnerability. Therefore I think it is misleading to argue that we're worse off with HTTPS--the same argument could be made for Apache, PHP, Linux, Windows, etc., as they've all contained vulnerabilities.
This is all about PR. The lawyer/client in this case are betting that Tesla will pay off their ransom/legal fees/damages rather than have their good name dragged through the court. They believe that most companies are run by people who are afraid of the "legal ramifications" of responding in public, and therefore aren't prepared to defend their name.

Tesla winning in court, but losing the PR battle is a 100% loss to Tesla - a court verdict is worthless if a bunch of unanswered stories have been written in the meantime.

This is why these lawyers can bottom feed like this - they know that they have all the power, and typically, companies will just pay them to go away and bother somebody else.
Make your own ______.
That's a single comment from pg from the very early days of HN. And that's not how things developed organically. Instead, downvoting comments has been reserved for comments that violate community standards.

Here's a more recent comment from pg in which he describes ideal comments, and the collegial atmosphere he's been trying to promote for HN [1]. In my opinion, downvoting a well thought-out comment made in good faith is not very collegial.

1. https://news.ycombinator.com/item?id=7445761
I'm not criticizing your use of it, just showing the other person that you do know what panic is because you used it.
You're prematurely optimizing. Tactics that work at one level of growth, do not work at others. That is why leadership often, but not always, changes.

For example, take Microsoft. They were aggressive and bullying early on, because they had to be. Later on, those tactics when they were the dominant OS led to a pretty brutal DOJ situation.

For now, though Elon is doing what needs to be done to change the world. I applaud him. He's up against some seriously powerful forces: the oil industry, the automotive industry. This is just like a scrappy app startup going against Microsoft--times 100.
I don't know what they specifically log, but if they don't log car location, I'm not sure what "value" from a personal privacy standpoint, they would gain in knowing you open your doors 3 times before sitting down. Other than that you're OCD I guess :S. If they track location, then that changes my entire opinion. That's a trickier subject to handle.
OK I omitted a word assuming most people would know what I meant.

Steve Jobs HAS run Apple like a cult of personality.

Steve Jobs appointed Ive head of everything hardware-design-related and made him untouchable on purpose. He groomed him to lead design at Apple, which is the major department.

Steve Jobs would have vehemently disagreed with Ive about skeumorphism and probably wouldn't let him create iOS 7 this way, or if it happened, would chew him out the way he did Forstall, even though he liked him.

That said, the reason Ive is now telling everyone it's his way or the highway is a direct extension of how Steve Jobs ran the company. Get it?
It's a free service right now. We'll be taking all the suggestions and improving it as we go.
1) I think it's highly inappropriate to post photos of someone's house on HN, even if they are possibly acting in a scummy way (who knows, maybe he just has bad luck with cars).

2) He may well be plenty happy with his house and dirt driveway; what does that have to do with the car he drives?

Let's not turn this into a witch-hunt; facts win in the end.
It's only worthless if it's not true to possible positive outcomes for the reader. Whether or not it is an actual past experience of the 'author' or not, it can still serve its purpose (that's what myths are). In fact, you could argue that its anonymity increases its efficacy.
We have a built environment that influences each moment-to-moment action: For example, architecture is full of little tricks that influence crowd routing without actively telling people "YOU THERE, go this way." UX is a whole field about this kind of stuff.

So what we have is better than the ants in certain ways, because we have an ever-increasing capacity to reprogram behaviors and reason about them without relying on genetic changes; it's going to surface itself as an ugly, inefficient, inequitable, system because we use human judgment to fill in so many gaps, but that's why we also have such a strong incentive to keep automating everything.
> 1) Why even blogging about this? Is Tesla that insecure about its PR that they think they need to take the wind out of any possible negative news story, even if it will be easily defused?

I don't think insecure is the right word. Protective is probably more appropriate.

The claim really looks like slimy lawyering based on pure fraud, so why run around doing press interviews (or whatever you think they're supposed to do) when they can lay out their facts on their own terms?

If they weren't responsive to negative press, people would be calling them shrinking violets instead.
That's not what Go thinks its job is at all. Go thinks its job is to make it easier to write and maintain large scale software applications. Removing the amount of duplication that any one developer has to write is not one of the design criteria.

If you're not running into the issues that Go is trying to solve, you don't understand why its solutions are at least somewhat interesting, nor why its trade-offs are reasonable.
Self signed certificates (i.e. free) are much better than a CA which won't revoke a certificate that's reported to be compromised.

Your customer relation to StartCom is irrelevant, this is about everybody else implicitly trusting them.
Fair enough. Thank you for the explanation.
I seriously wished they had something like:

Step 1: Run this command. If it returns "Your vulnerable!" go to step 2.

And so on, with actionable steps that people could quickly understand and circulate.
Imbed – a starting point for using web content in native apps
DNSsec is still broken by hierarchical trust - implied by some "authority", rather than chosen by the user.

I think the solution needs to be something like Moxie's Convergence, which allows for users to decide who they trust, and revoke such trust at any time.

https://www.youtube.com/watch?v=8N4sb-SEpcg

It's a shame that Convergence is basically dead, although there's still some activity in Perspectives on which it was based. (http://perspectives-project.org/)