skysight-inc/HackerNews huggingface dataset:
> ...you'd still be paying essentially the same price

Which is exactly the goal. It's not about paying less money, it's about eliminating a confusing, unnecessarily-complicated system. If it were just restaurants it wouldn't be too bad, but I'm still not clear exactly how much/when to tip other service workers (hotel cleaners, cab drivers, whatever). People shouldn't have to do a bunch of research[0] to try to figure this stuff out.

And I grew up in the US. I have friends in NYC who moved here fairly recently, and of course it's much more confusing for them. We should ensure every worker is getting paid decently, and have tips be a truly optional thing for exceptional service, which I think was the original intention.

[0] - http://waitbutwhy.com/2014/04/everything-dont-know-tipping.h...
Webcomic explains Heartbleed bug like you're five
If you follow the 4.9 link, you get to http://gcc.gnu.org/gcc-4.9/ which states:

> As of this time no releases of GCC 4.9 have yet been made.
This is neat!

I built a little web app to play around with different options: http://nixterrimus.github.io/Triangle-Play-App/
Exactly what I did.

I mean, damn people who use a free thing that then get screwed, through no fault of their own, not wanting to be charged $25 for a part of the service that they would never need to use otherwise.

You're either free, or you're not -- StartSSL is a mish-mash of "free" and opportunistic costs.
getprismatic.com
My apologies! I'm a long way out from stats class now, but I've been doing some light A/B testing so I've been thinking about things from the perspective of statistical significance rather than simple probability.

So with that in mind, only having two trials, can we really determine a deviation from the norm? The odds were in his favour (slightly) but not so much that we can say with any certainty that he or his tipless restaurants were the issue.

I'm rusty on the math or I'd actually calculate statistical significance (p value?) of 2 tries 1 success vs two tries 0 successes. I suspect it's below 95% though.
As someone who doesn't directly consume broadcast media (radio or television), I kinda thought this was already the case. I and most everyone I know uses online services so much more than broadcast that I just assumed.

Guess I learned a bit more about how I shouldn't assume.
Or this one.

http://www.dailymail.co.uk/news/article-2430875/Barack-Obama...
You're missing the obvious - that such restrictions are a sign the site does probably store passwords in plaintext.

Although maybe they aren't but they still want to make sure they meet some arbitrary standard of "randomness" to make it less "hackable."
this may be a stupid question but why is it hard for you to give OpenSSL money?

if this were a Dutch organisation (and I could spare that kind of money ...), I could either fire up my online banking and transfer it without any costs, or use the (slightly easier) iDEAL option and it'd cost them about 50 eurocents + 0% per transaction.

not even just for the Dutch btw, since recently, if they have an IBAN bank account number, you can just transfer money there (well, not to the US, apparently, but in the EU, parts of South America, Africa, Asia, ..[0])

[0] https://en.wikipedia.org/wiki/International_Bank_Account_Num...
The article is down for me, but:

From a POV of fairness to StartCom, I agree with you, and initially saw it as a ridiculous sense of entitlement on the part of their (non-paying) customers. However as a third party user of the web I am somewhat persuaded by the simple argument that the certs should be distrusted on the basis that they are no longer trustworthy.

Edit: Having thought about it for a minute, a logical consequence of my argument is that all certificates signed by CAs that charge a revocation or reissue fee should be distrusted, which probably makes it not a very reasonable argument. I guess this just leaves us at "Valid SSL certificates are not necessarily trustworthy and we just have to live with that".

Edit2: http://news.netcraft.com/archives/2014/04/11/heartbleed-cert...
StartSSL's default usage mode is to generate private keys on their website. Yet another horribly insecure system.

I'd much rather that people used self-signed certs (and browsers had certificate pinning) by default, and could then step up to real CA certificates. Self-signed certs provide almost the same amount of trust that StartCom does.
Isn't US online advertising already consolidated into very few hands?

eg Google, Facebook, Yahoo, Amazon
What Comes After 4G?
Quick one-liner for converting and resizing these to your screen resolution (with ImageMagick):

$ mogrify -path converted -format png -resize 1440x900\! originals/*.svg
I don't think it's necessarily odd that he wouldn't have seen the question if it was sent only a day ahead of time. Was there a list of questions that all of the Senators had compiled, or was this just one question independently sent from Sen Wyden's office? Was it sent in the morning or afternoon? What was Clapper doing that day? Was he in his office? Was he out in meetings/briefings all day? If it sat in his inbox for a week I'd be less likely to give him the benefit of the doubt, but there's probably a whole host of reasons that something sent the day prior could have been overlooked.

Was his answer misleading? I definitely agree with you there. Was it a lie? That would imply that it was deliberate, which is tough to prove. He's gone on the record saying that he misunderstood the question and tried to correct it after the fact[1]. If it was deliberate, why lie directly to people that he knows know the truth?

I don't see a flagrant lie in the GC's writing. That quote goes back into the content/metadata issue. There hasn't been any leak so far showing content collection of Americans' communications. All of the debate in Congress regarding these programs has centered around bulk metadata collection. The issue everyone brings up when they accuse Clapper of perjury is the content/metadata issue, not the definition of collection. I haven't seen any government official denying that the NSA collects American cell phone metadata (besides this one instance with Clapper, which he admitted was erroneous).

[1] http://www.lawfareblog.com/wp-content/uploads/2013/07/2013-0...
I think some people are exaggerating how aware Class 1 customers were of the revocation policy. It’s in the FAQ, but the site also advertises “100% Free”. I think the expectation is that free services have automated infrastructure, and that they’re a way to advertise your paid services—and I did, in fact, start out as a Class 1 and later paid for Class 2.
I don't see where it said $5/year. Right now it costs $50 per year.

EDIT:

Are resellers like them more trustworthy? I understand that big CA often sells out to smaller CA and smaller CA sell out to even smaller CA. But how trustworthy are ssls.com and namecheap?

EDIT

Okay. I see. namecheap has been running since 2001 which means it has been doing business pretty well :) So why are they cheaper? Because namecheap are the one managing all the accounts and Comondo is only doing validation?
That sucks (but it's also a little funny, I have to admit). Here's an idea: instead of excluding Apple from the license altogether, why not insert a clause to specifically prohibit putting any of the class methods on Apple's non-public selector list?
That's awesome!

One issue though: I had to switch to Chrome to get it to work - in Safari I just get a bunch of SecurityErrors...
Better question - why is changing the topcolor something it takes karma to be able to do?
I wonder if anyone's looked into turbo-electric power trains for helicopters. They work well enough in ships and trains. There might be all sorts of reasons they wouldn't work in a helicopter, though.

A turbo-electric drive wouldn't magically achieve a faster throttle response, but it might make it faster to shift the power from one rotor to another, which might be what's really needed.
Literature is notably absent...
In the US, tips are how most servers are paid. In many cases, their hourly pay is only enough to cover the taxes on their tips. A low tip is interpreted as some degree of insult, up to and including "I am so dissatisfied with the service I received that I don't think you deserve enough money to support yourself".

even if I get served a raw steak

The waiter did not cook your steak. It's his job to try to resolve the problem if you tell him about it, and how he handles that situation should certainly influence his tip.

If I order an expensive bottle of wine... it's completely unrelated to the performance of the waiter

That's not necessarily true. Attempting to up-sell is absolutely part of a server's job, and the convention of tipping a percentage of the bill aligns the server's incentives with the restaurant's profits.

I'm not saying that the tipping conventions in the US are the best way to pay servers, but I will say that to disregard such a convention if you know about it is rude. I dislike the German convention of attendants with tip trays outside almost every public toilet, but it's my understanding that failing to leave them at least 50 cents is considered quite rude, so I do it.
In my experience, Stack Overflow is still one of the only places that I can ask questions and expect to receive useful information within the same day. I admit I don't answer questions as much as I used to, but there still seems to be plenty of people around to help. Also, as a general corpus of knowledge it really can't be beat - I often find useful answers to questions that were asked years ago.

I know it's currently in vogue to hate on it, but for me it continues to be a great source of information.
> A video of The Birth & Death of JavaScript was published accidentally; it's down now. I'll publish the best of the sevenish recordings soon.

https://twitter.com/garybernhardt/status/455045879985356800
So all evidence suggests that the 3rd problem is the hardest, by far, which is likely just some number of non-obvious edge cases.

Curious why the "hard problem" disclaimer is on the 4th?

The 4th also has a 90% solve rate (with 50% more submissions) while the 3rd has 44%.
There's an interview with Korotkevich dating from IOI 2009:

- How many hours a day are you in front of the computer?

- Not more than three to four. I like playing
football and table tennis, so I try to find time for
sports as well.

http://www.ioi2009.org/downloads/br8-3str-en.pdf
Sennheiser HD 650, Woo Audio WA-6, Cambridge Audio DACMagic. Normally I'm just streaming from di.fm
Good thought, but Apple is the gatekeeper here - not sure changing your license will help. What if they continue to use the methods without using Mogenerator (they could easily write their own categories to implement the methods for example)?
> [5G] could mean the end of data caps.

Hahhahaha haha ... whew.

Somebody needs a lesson on how telecom infrastructure and business models work.

I'll give you a hint: prior to 3G there didn't used to be data caps on many plans.
The lack of indentation in the code snippets makes this painful to read.
None of this has anything to do with StartSSL's trustworthiness as a CA. It is ridiculous to see that people are whining that a company that signed their cert for $0.00 is asking for some money for additional work. The $25 rekeying is a steal for a certificate.

What CA in mozilla/chromium comes closest to StartSSL's $0.00 or $25.00 certificate? That question is not rehetorical, I am genuinely curious what is the second cheapest option for a signed certificate (from a CA trusted by default in mozilla/chromium).
That's what I thought initially as well, but in the end I ended up solving more than last year or the year before. I felt like I wasn't going to get anything after A and B at first, though.
Huh, I see that error too.

I guess this is a chrome only demo for now, I'll see if I can't dig into this a little later this afternoon.
GP post was essentially the immature favorite "snitches get stitches" but in more flowery language.
Rationalism != facts...
http://en.m.wikipedia.org/wiki/Rationalism
Unfortunately citing the general public - it seems so.
I remember being ridiculed for having more questions than answers

Do you know that StackOverflow does not tolerate abuse and there is a flag option to automatically review any comment or post. In the rare case that doesn't work out you can directly contact moderators or developers who will actually respond. No community is perfect and you should really consider that options if you were offended. I have yet to see any ridicule that wasn't removed in 15 minutes or less.
It's about autonomy, importance, reputation, etc. [..] the difference between comfortable and rich means zilch. What does matter is control over one's destiny, rather than being blown about by others' political games, and having the resources to implement one's own ideas rather than being a tool in someone else's box.

Why is that your definition of success?

"Having the resources to implement my own ideas" is daft; I very likely don't have any (new) ideas worth implementing. How many people have lived since the early days of the industrial revolution? Call it 20 billion[1]. How many genuinely useful not too niche machines have been invented and programs written, not counting the same program reinvented over and over and over. Tens of thousands? A million? There just aren't enough new things for everyone to invent.

So instead of new ideas, maybe I/we could reimplement existing ideas - do something that someone else has done, in our own way. But how is that significantly different from "being a tool in someone else's box"?

Elon Musk makes cars, he's got control over his own destiny! He's following his dream! He's not a tool in someone else's box, he's not pushed around by others political games! That's success!

Wait, he's not pushed around by others' political games? Tesla cars have to meet all kinds of regulations. Tesla the company does too, for accounting, finance, taxes, advertising, customer interaction, etc.

The cars have to have pedals and a steering wheel or no customer would be able to drive them. They have to fit on a road, and behave in common car-like ways or no customer would have use for them. They have to look like a car or no customer would recognise what they are or wouldn't want to be seen with one. They have to be petrol, diesel or battery powered because there isn't anything else they could be that fits all the lots-of-requirements.

And yet you say "It's not money that makes Elon Musk a success, it's because he has the freeodm to shape the doors his way!".

But he doesn't have the freedom to shape them his way, he has the freedom to shape them like car doors and nothing else.

A false sense of freedom is a strange definition of success.

You could find as much limited freedom while working for someone else.

[1] http://www.prb.org/Publications/Articles/2002/HowManyPeopleH...
VC++ analysis is useful aside from the fact that it mistakenly thinks every pointer usage is a potential null pointer, but I've gotten better results with clang static analysis.
A Wearables Startup Playbook
high speed trains go between cities the wealthy want them to go between. They may want/need to work in one but prefer another to live in.

High speed trains don't solve the problem the average worker has and never will. They do not spend nearly the time traveling the "jet set" does. The type of trains they can benefit from, both light and heavy rail, are localized and definitely not sexy.

Besides, as technology ramps up the need to travel for business goes down, let alone automated automobiles, electrically powered, and solar charged, will about end the need for trains except for cargo. US uses trains more than most countries for moving cargo.
I think it works even better if you can get help from the type system. For example, the SafeHtml interface in GWT [1] gives you some safety from Java's type checking and can also make additional static analysis easier. (Then it becomes an exercise in making sure the API is used as intended.)

Perhaps something similar could be done using typedefs in C?

[1] http://www.gwtproject.org/javadoc/latest/com/google/gwt/safe...
The more I read about Rust, the more excited I am about it. When I wrote the great-grandparent comment I had Rust in mind.
This is a very interesting book, but I'm curious as to why you make such statement?
I'm really confused. If you think your original certificate may have been compromised, the only reason to get a new certificate would be to protect your users from a MITM attack. Since you have not revoked your old certificate, you have done nothing to reduce this risk.
Yeah, that disclaimer scared me off at first. I solved D last, but in the end I do feel that it's easier than C. I suppose you can solve C-small with a more naive method though.
It's only an offense if they distribute it because that is the thing that necessitates having a license to distribute the work.
Indeed. Perhaps someday the dream of eliminating all human interaction can be achieved.
I really like "Reading Tip #1" in the "Links 2013" page, reproduced below:

It's tempting to judge what you read:

I agree with these statements, and I disagree with those.

However, a great thinker who has spent decades on an unusual line of thought cannot induce their context into your head in a few pages. It’s almost certainly the case that you don’t fully understand their statements.

Instead, you can say:

I have now learned that there exists a worldview in which all of these statements are consistent.

And if it feels worthwhile, you can make a genuine effort to understand that entire worldview. You don't have to adopt it. Just make it available to yourself, so you can make connections to it when it's needed.
EDIT: Okay. Downvoter. Now defend your position.

I think people should clam down and think thoroughly.

I don't know the actual math on the cost for a CA to revoke and re-issue a new certificate. But what if someone finds another critical vulnerability? Do we go back and ask to revoke our certificate again? Free of charge?

Is it necessary to call StartCom evil? Is that even fair?

If you are serving real user data, please get a paid certificate yourself. Why? Because you have slightly better control of your certificate. If you are just running demo or running personal blog then get one from places like gandi.net (1 year at $16.00)

edit: someone mention ssls.com and namecheap.com (resellers) offer cheap Comondo PositiveSSL at less than $10 per year.

If you are running open source project, consider https://www.globalsign.com/ssl/ssl-open-source/ and http://www.godaddy.com/ssl/ssl-open-source.aspx.

If you still can't afford one, I really don't know what to say to you at the moment.
Like they say in the video, ultimately only the big brands will be able to solve this problem. However, it's up to us as consumers to to put pressure on the brands who's products we buy.
There are community sites for reviews.

I have several books stores in my town where I can order these books. Even online.

No need to support ONE particular book store.
Visualized path analysis of Interop conference's network, InteropNet
Is The Pilot of HBO's Silicon Valley About Starting With Why?
Facebook Killed the Class Reunion
You're still trying to draw conclusions from a 2-sample almost-even-odds outcome, which we really can't.
I could see a good public protest of this would be for everyone to download the app take some video of something disgusting like a dog taking a dump and then sending that to the cops.

Or use it to record police misbehavior and send in footage of that that would probably get it canned real fast.
Well, that mechanism has not worked well. Especially, someone with a large reputation point appears to be exempt and there exists elitism amongst it's members.

Largely, Stackoverflow has now become something like wikipedia, just an index of questions and answers with zealous moderators and elitists and no longer a community.
the essence of Big Brother

This is meaningless pap. The app we're describing has one purpose, and that's letting you send things to the police if you want. It is not a remote surveillance application as the headline mischaracterizes it or you mischaracterize it by invoking the title of a book that comes up any time the subject is "police do something".

How is this any different from the ability to call/text the local police tip line?

I'm all for calling out overreach, but making it easy for people to send the police data voluntarily and on their own terms hardly seems like a bad idea.
I get the message but the clunky implementation of the website is so distracting that I closed it in frustration.
Lemon Meringue Pie is Better Than Sour Grapes
Service is not like sales at all. I'm an electrical engineer, I deal with salespeople ("business development managers") from my employer's suppliers every day. They are professionals, selling complex products to other professionals for substantial salaries + commission. I assure you that people do not flirt while describing the properties of the $1 million STATCOM they are selling.

In most manufacturing or construction industries, salespeople send gifts (on their employer's dollar, not their own) to their regular customers, not the other way around. And that's a professional courtesy, not a way to make a living. I'm talking about sending a box of chocolates to the purchasing manager who does seven figures of business with you annually.
It's a lot cheaper when you buy it through resellers (like NameCheap).
I went through ssls.com, which for some reason is cheaper than Namecheap even though they’re owned by Namecheap.
How about putting some distinctive string in the generated method name? Like:

[MyEntity insertMyEntityInManagedObjectContext:moc];

Yes, it's redundant and crappy. But it's not a disaster and it should avoid the great stamping boot of Apple.
This is all kind of pointless for my silly personal blog, so you could view it as a symbolic way of registering my displeasure with StartCom ;-)

To answer your question, suppose I think my key has been compromised. Then I don’t want to continue using that key because non-MITM’ed communication between my server and the client is compromised. So I generate a new key, and I’d like a a new certificate for that new key—the old one won’t work (Apple Secure Transport bug notwithstanding). My users are still vulnerable to a MITM attack, yes.

--edit: assuming that the user’s connection uses a non-PFS cipher suite.
https://www.gandi.net/ssl/standard#single

$16 per year.

edit

Someone said reseller namecheap and ssls are way cheaper and have the same trust as any CA.
If you don't mind me asking, how do you guys? I always compete in my university's "local" contest, which is basically a tryout for competing for a spot on the team that goes to the ACM. I try doing practice problems, but when I can't solve one, I'm not sure where to go from there.
http://cheapsslsecurity.com/ is one such reseller. I use them for cheap PossitiveSSL certs for my sites.
Thanks for pointing this out. Seems to be an issue of the syntax highlighter. Will fix it.
Agreed. I definitely found D much easier than C. Was able to get C small after a failed attempt, but never stood a chance at getting C large.
This is only one step in the chain. As sad as is it -- it gets much worse on the far ends of the process. Collection of raw materials and disposal (read: "recycling") of old electronics are much worse.

Years ago me and some friends just did back of a napkin calculations about the number of human deaths that could be attributed to our consumption of devices and materials -- and it was sobering.

Sadly, not sobering enough for me to do anything about it. I try to minimize my possessions now, but not for a cause -- it is more of a lifestyle thing and I enjoy it.

The problem is so huge and stark and overwhelming it is hard to know where to start in our society governed by large state actors. I do donate to efficient charities, try not to be evil -- but that is about the net of my efforts on the subject.