skysight-inc/HackerNews huggingface dataset:
> The USSR is not Russia or the Russian Empire; it is not an empire at all.

> The Soviet Union does not need new territory.

> A communist regime cannot feel secure so long as an example of another kind of life exists anywhere near it, with which its subjects can draw comparisons. It is for this reason that any form of Communism, not only the Soviet variety, is always at pains to shut itself off from the rest of the world

This is a massive insight. Most current analysis of Putin centers around a WWII Lebensraum perspective of his actions. Modelling his behavior in terms of neutralizing breakaway territories seems a much better fit.
If we held the federal government to strict constitutional constraints, we'd just do all this at the state level.
What your comment does is entirely reframe the original point, which was capitalism's objective qualities as practised over the last 200 years and enumerated by a team led by one of the world's most respected economists, in terms of an assumption that the ability to get obscenely, impossibly rich is a foregone requirement before any economic system may be discussed. I find that really interesting.
Most expensive plan only allows 1,000 concurrent tasks for $3250. This wouldn't work if I wanted to have a custom schedule for each user of most apps for example.
Thanks for pointing this out. The redesigned Google Maps does a much better job at it--I've revised the copy to be less antagonistic.

Still, the Google Maps UI does not make it easy to compare multiple alternative waypoint options (e.g. you need to click on each option to see waypoint location and trip time, doesn't show how much time is explicitly added, etc).

I posted this project not only because it's a useful tool, but also to demonstrate how awesome Meteor and the Google Maps API are.
That probably depends on how much you skew your morals.
No, I picked what I thought would be a lower bound. Do you think it will only be a few hundred or few thousand over 6 years? Python is an extremely popular language.
GRC.com has been around for so long and it is just awesome. Don't know if this is still the case, but Steve Gibson either used to - or still does - write all of his software in assembly[1]. As a young comp sci college student in 1997, I can remember how insanely, blazingly fast his software and scanners seemed to run on my computer compared to all my other programs. He wrote about why he wrote in assembly and it was a huge inspiration to me as a young programmer.

Yes, this is totally a fanboy post :) But it's cool to see Steve still popping up in relevant security news almost 20 years later.

[1] https://www.grc.com/smgassembly.htm
I'm dropping Dropbox because appointing Condoleeza Rice to the board confirms the attitude that Dropbox views privacy as a feature, not a requirement.

This is nothing to do with her involvement in the Iraq War, the creation of fiction as motivation for starting that war, or declaring the war over with the "Mission Accomplished" statement in order to deprive soldiers of combat pay.

This has everything to do with condoning torture as a means of extracting information, inventing enemies of the state to justify the appropriation of all the personal data of every human on the planet (living or dead).

The ethics I question are the ones that will be directly applicable to her role as a decision maker on the board of Dropbox.

As for the "freedom of speech" statement: the right to the freedom of political expression ends where trampling on my rights to quiet enjoyment of my own home starts. That is, your right to swing your fists ends where my nose starts. Since in this case my "body" includes the data I'm storing on Dropbox, Condoleeza's rights to express her opinion stop where handling my data starts.

Appointing Ms Rice to the board shows where Dropbox's corporate ethics are deficient. Boycotting Dropbox is not about punishing Condoleeza for her opinion. Boycotting Dropbox is about not doing business with a company whose judgment is unsound.

As for ditching Dropbox, the avenue I am choosing is to use ownCloud[1] on my existing infrastructure. Other options include Transporter Sync[2] and the Synology[3] range of Internet-connected NAS "private cloud" systems.

[1] ownCloud: https://owncloud.com

[2] Transporter Sync: http://filetransporterstore.com/products/transporter-sync

[3] Synology: http://www.synology.com/en-global/products/overview/DS213j
This is pretty much exactly how AWS SWF handles it.

The java implementation of the workflow "decider" (supervising actor) is somewhat interesting as well. It actually creates a bunch of future/promise objects and replays the workflow from the top as the promises are delivered (which of course has the implication that workflow decider processes must be deterministic!).

I suspect, but don't know, that AMZN has been dogfooding this product in a big way for quite some time.

(full disclosure: just spent some time with the swf guys in seattle)

On the other hand, It seems like the long way around to inventing Erlang ;)
> Akamai strongly implied that their patch protected customers.

Actually they said exactly the opposite of that:

> This should really be considered more of a proof of
concept than something that you want to put directly into
production. Let me restate that: do not just take this
patch and put it into production without careful review.
What a well reasoned argument you have
"We tried four tactics to get customers:"

Interesting that all the tactics were online. I wonder if visiting solo practitioners in the developers' neighborhood would have done any better, both for finding such and for getting feedback.

In any case, as a solo practitioner who charges more than $100/hour for my time, I would balk at $19/month because I'm not time limited. I might have paying work for 20% of the year (>40K/year), but the other 80% time doesn't pay at all. I'm not going to pay $228/year to get more time to read Hacker News.
Note that this 'option' has never actually been available for purchase and relies heavily on projected future cost reductions.

The battery replacement price as of December 2013 is $44,564 for the 85 kWh battery and $37,102 for the 60 kWh battery. http://www.greencarreports.com/news/1089183_life-with-tesla-...
Interesting about safari. Mobile safari on my iPad let me pass right on to the page
I honestly haven't seen a lot of this kind of job posting of late. Ten years ago this was the norm, but I just don't see it any more.
I tested going from my house, to a pizza joint, to work with both your site and with google and got the same result. The only difference is that google gave me a straight forward total time, while I have to do the math on your site and its a smaller map.

I think what separates your service from what google does is that it embeds the search in your route - so that I can choose between different places along the route, which is cool. I know I am always wanting to know what is the best place to stop for food along my route home that I haven't tried and it is a bit cumbersome with the way google is set up.

I would make that much clearer up front in how yours is different than google because I got the same "result" after I selected the place I wanted. As it is you are focusing on telling people about the result, rather than the options along the route, which is the real service.
I spent 4 weeks learning about restaurants. Here's what I found.
And the lobbyist works for who, and who benefits from the work of the lobbyist?
Catseyes are a menace for bicycles so this would be great in urban areas, and especially dedicated bike tracks, eliminating the need for lighting.
> I think there would be more money for a site that helps you argue your position

Let me toss in some anecdotal evidence in support of your suspicion. The only "debate" site to hold my attention for more than a first visit is one that focuses on curating data to support arguments about certain issues (the curation is manual AFAIK). I initially stumbled across it when debating health care reform:

http://healthcarereform.procon.org/view.resource.php?resourc...

Pay particular attention to to "Projects" sidebar on the left. It's a goldmine of relevant quantitative information and the arguments surrounding their interpretation. I actually don't think it's cynical to expect that this is the right way to approach the "debate market." Discovering data in relevant "digested" forms is a huge friction point. It should be central to the political debate process, it isn't, and anyone who can reduce the friction will be doing a huge service to humanity.
Larry Ellison Still No. 1, and Doing What He Wants
And when you're screwing someone who holds to the "no lawyers because you're supposed to trust your cofounders" approach that risk is generally greatly diminished.
Looks like this was originally a blog post and was later changed to the wired article. See https://news.ycombinator.com/item?id=7583306
> To do that Apache needs some form of internal IPC to communicate its TLS sessions to the forked process. Maybe that's more complex than forking and doing IPC at the PKCS#11 driver level? Don't know.

Yes.

Also, bear in mind that you can't just fork and continue running in modern software.

A process shall be created with a single thread. If a multi-threaded process calls fork(), the new process shall contain a replica of the calling thread and its entire address space, possibly including the states of mutexes and other resources. Consequently, to avoid errors, the child process may only execute async-signal-safe operations until such time as one of the exec functions is called.

http://pubs.opengroup.org/onlinepubs/009695399/functions/for...
This is a known issue in recruiting.

From the perspective of the agency recruiter, what seems to happen at some companies is that the development team just find the person they want through the agency recruiters and unless HR can find a better person, they tell HR to hire them and pay the recruiting agency. It's an approach that is hard for HR to argue against if they can't find a good person.
Opera 20.0.1387.91 on OS X displays "The server's security certificate is revoked!" and won't let you through it seems. IE 10 on WP8.0 says "the certificate wasn't issued by a trusted certificate authority" but gives you the option to throw caution to the wind.
Ohhh, I see, that does seem useful.

I didn't understand the multiple similar waypoints verses a fixed waypoint at first glance.
Android uses a DHCP option for this: http://www.lorier.net/docs/android-metered
Oh yes, he has been around for long. But he lost a bit of credibility after his wolf-cry when he campaigned against the inclusion of raw-sockets in Windows XP, alleging hackers might use it.
>Another way to think of automation is that you're making it $30k/yr cheaper to run a business. The more automated the world becomes, the cheaper it becomes to start (useful, profitable) businesses--and so the more likely people are to start them.

And the less employed people would be out there to buy your stuff.

Sorry, but automation either ultimately leads to something like communism or similar, or to a severy damaged market economy.

The only reason neither has happened thus far is because we haven't achieved nearly total automation, actually not even for 10-20% of the jobs. And still, what there has been have led to a shrinking middle class compared to decades past.

>it can be optimized through education and incentive programs to produce more entrepreneurs and fewer non-productive workers.

The only reason entrepreneurs are "productive" is because there are workers (either productive or non-productive) that have salaries to buy their stuff and services.
I love this. These kinds of large, moonshot projects are exactly what university research labs need to work on to move us forward.
Certificate revocation does not work.

There are two methods of revoking a certificate, Certificate Revocation Lists and OCSP (Online Certificate Status Protocol).

CRL lists do not scale at all and are almost universally do not include all revoked certificates (startssl implements this correctly which is why they charge $25 to revoke a certificate).

OCSP is susceptible to a MitM attack (exactly the scenario in which you want it to work!).

An attacker can simply block OCSP requests and nearly all current browsers will silently ignore the failure.

They ignore such a failure because they are actually very common. The CA has to run an OCSP server that is queried continuously at high volume for no additional revenue, a model that doesn't exactly encourage robust operation.

The only way to effectively revoke certificates in the numbers necessary after heartbleed is for the CAs to revoke their intermediary certs and have everybody get a new cert free of charge.

Edit: for example here is the digicert CRL http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
> which AFAIK depending on how much you pay them they support for 13 years

10 years actually. This is a common misconception from those who do not read the lifecycle page carefully.
Willem,
Thanks for the well-reasoned set of claims for us to evaluate. We are still looking at them, but a critical one is accurate: our own implementation of the secure memory area did not include the CRT values.

More here: https://blogs.akamai.com/2014/04/heartbleed-update-v3.html
I think the thing that separates a good programmer/developer/engineer is they enjoy doing it and, luckily, they can get paid for it. It is probably something they would be doing anyway if they weren't doing it professionally.

At 30, it is time to take stock and ask yourself, "do I enjoy doing this" or "do I enjoy the idea of doing this"?

If you enjoy it, keep doing it.

Some things I would recommend:

* Get a Github account and put some of your work out there

* Get on Stack Overflow and try to answer some questions

* Pick a small, self-interest project in an area you would like to work in and do the project from start to finish, as if you were getting paid for it.

* Look at other similar projects on Github and see how other do it.

I write software for money, and the thing I think most teams want is someone who can:
+ write good code that works
+ plays well with others
+ does stuff like they do

For instance, you may write totally amazing software, but if it is in a different language, with different tools, and your an arsehole, then nobody wants you on their team.

There is also a minimum level of entry because not many busy teams want to have to train someone from the ground up.

For that problem (i.e. self-training), I would try to find other people with about the same level of understanding with similar programming interests. Then try to do a project as a team. It will give you great insight into how to communicate as a software engineer (i.e. mainly through disciplined use of a version control system like git). If you can learn how to make great git commits, then you will find yourself in demand.

Good luck!
I really like these sorts of 'zoom out' comments, because they tend to show the similarity between disparate systems and the cross-domain value inherant in systems thinking. (Then again, HN is probably a bit of an echo-chamber for this!)
Heartbleed Update v3
Well, everyone seems to have their own idea of what constitutes a competent developer, and also how long it takes to acquire that competence for the average tech-literate person (as I assume the OP is since he's here).

I wrote off the people doing it in 6 months, but a year or two seemed much more reasonable. Previously I've read that a year or two is doable, but now I have to write those people off. So now 3 years is the minimum for any sort of job?

What if I run into someone who says 5 years is the minimum for a position?
It's because we all have an incomplete and biased simulator in our head.

Every time you have an idea, you run it through the "real world simulator" in your head. And as smart as we think we are, this simulator is terrible at predicting the effectiveness of ideas. And worse off all, it's usually biased and leading you to believe your ideas are amazing.

That's why the lean startup movement is so effective. It makes you get out of your internal simulator and run your experiments in the real world as fast as possible.
In 3 years, a very intelligent person should be almost ready for an absolute entry-level position.

In a year or two you should be ready to intern.

A more likely timespan, if you want to produce good developers, is five years with four years of study and one year of internships (in 3 month chunks). This is the co-op model adopted by Waterloo and it produces excellent entry-level developers.

If you want to be a reasonable developer, you cannot get away without being expert at least one low-level language (C or C++), one high-level language (Python, Ruby, LISP, etc), some knowledge of OS fundamentals (threads, processes, filesystems), some knowledge of concurrency (threads, locks, message passing), understand how to design your own language and build a compiler or interpreter (Flex/Bison, lex/yacc, etc), and a good base in discrete math (at the minimum, ideally some knowledge of numerical analysis and probability would be very useful as well).

This is exactly what you'd learn in four years of full-time study at a good university.

Why do you expect to become a good developer in 6 months by yourself when extremely intelligent people need four years of being taught (and being taught by a good teacher will normally accelerate your learning by 10x) to reach the entry-level stage?

You are being too hard on yourself. A year is nothing. Give yourself a few more years if you really love it and can afford to do so.
Wow, -4 karma for pointing out that there might be a link between circling-the-wagons on the very unpopular (at the least, "controversial") Gnome 3, which is the flagship project, and subsequent financial difficulties at the sponsoring foundation. Even if the immediate causes are attributed to other programs, it seems worthy of some reflection that the timeline seems to be "ship controversial software => stand by it without making popularly-requested changes => financial difficulties".
It's who you know and sometimes also what you know.

If you're a super-master 21 year old with a Masters in CS and triple-majored in physics, math and CS and finished your undergrad degree at 17, then you are an exception and companies will want you because they know you are a rare gem.

In the case of everyone else (wordpress/CMS people, basic app-builders, etc.) who you know matters too.

There exists such a massive glut of incompetent PHP programmers hacking through WP and Joomla sites and they're getting along just fine.

Knowing people really does help get you past the HR department, as you'll probably get a direct referral to the actual person who will hire you.

You haven't mentioned what your skills are though.

Are you a Ruby/Rails programmer?
frontend/backend JS programmer?
Java dev?

Your actual coding language and location matter too.
Show HN: My Weekend Project, Hosted Privacy Policies
An interesting way to differentiate your site would be to allow searching for multiple waypoints in no specific order, and then have your service return the optimal route.

For example, if I have three places I need to stop by (grocery, gas, and car repair shop), but I don't care which order I go to them in. Let me enter 3 addresses, and return directions for the optimal path.

If you want to get even more ambitious, let me enter destinations that have multiple locations, (ex: gas, kroger, meijer, and radioshack). Select the optimal locations for each so I spend the least amount of time in the car possible.

edit: It looks like your service may do part of this (destinations with multiple location choices) - the site wasn't loading for me before. Very neat!
Previously: https://news.ycombinator.com/item?id=6322875
Ps. If you ever see yourselve in the same situation... My friend would never proposed it on his own... He didnt want to impact the group, but he will appreciate it.
App.io - Your game becomes the ad
Python3's '/' operator is different from Python2's '/' operator. This is clear when you try to overload them. Python2's is called '__div__', while Python3's is '__truediv__'.

The Python3's operator '/' (on numbers) is defined to return a float, and it'll convert any integer parameters as required. The same is true for other operators, like 'True + True' being 2.

Because of these definitions, you should consider the operators as explicit conversions. 'total / sum' is less explicit than 'total / float(sum)', but still clear enough.

And about guidelines, there are others that fit this case:

Simple is better than complex.
Flat is better than nested.
Readability counts.
[...] practicality beats purity.

PS: I think you made an important argument and I'm glad you did it, even though I disagree with it. I fail to see why you are getting downvotes.
Well you've probably learned and improved in the six months since you last applied, so maybe it's a good time to try again? From what you've posted, a Dev Bootcamp seems like it could be just what you need to get over the hump. Good luck, try not to get discouraged if you enjoy this stuff! :)
Works in Chrome 34.0.1847.116 on OS X once "Check for server certificate revocation" is checked (off by default as others have said).
Idea: spend money on development, not "outreach foundations". The director took donations intended for one purpose and used them to fund political pet projects in another. She resigned before the 2013 financial reports came to light.
I agree, it is nice to see all of the options along the way and road.li does it a lot nicer that Google does. I've been a road.li user for a couple of months (it was on ShowHN a little while ago) and it is one of those services that fills a very specific and useful niche.
i like this idea. i'm gonna officially work on it for iOS.
First, SECP256K1 isn't (IIRC) a NIST curve.

Second, if NSA backdoored a curve standard, they probably did it in a fashion that only allows them privileges. Google [NOBUS NSA]. Dual_EC is a NOBUS backdoor, unless you can efficiently solve the ECDLP, in which case the backdoor doesn't matter anyways.

Finally, even if you stipulate for argument that a curve was backdoored in such a way that a researcher might find the backdoor, who's to say that curve researchers care that much about Bitcoin?
Ask HN: Does Steve Gibson have a good rep in the valley as a security expert?
My colleague listens to all of his podcasts and seems holds him in high regard.

A google search for "Steve Gibson security" shows the 4th result as "Steve Gibson is a fraud!"

He's listed at http://attrition.org/errata/charlatan/steve_gibson/ too.

The talk on his wikipedia page (http://en.wikipedia.org/wiki/Talk:Steve_Gibson_(computer_programmer)) seems to indicate a lot of controversy about what he actually does.

But as my colleague has claimed that he is well respected in the valley, I'd love to know what you guys and gals think

Cheers
The real question is: what's next?

If regulators cannot face up to established capital even while social temperature increases in response to well known global threats (environment, food, energy, population, etc.) then will a bottom-up re-organization of global economic paradigms through the adoption of new technologies for decentralized commerce eventually occur?

One thing's for sure: the centralized paradigm of old is clearly showing its warts. It also seems like most of the interesting changes are coming out of the remnants of academia, already disenfranchised communities (Greece, etc.) or the new possibilities offered by technology.
Or, would it be possible to extract location information from existing Instagram/Facebook/etc friends via their posts?