skysight-inc/HackerNews huggingface dataset:
Maybe instead of failing silently, the browser should cease to function at all if it can't reach its OCSP data source for a public CA, and complain loudly - providing we can make revocation lookups cheap and highly available.

It could be available via anycast akin to DNS, or p2p as gojomo suggests. Lots of places use DNS to operate blacklist/RBLs - some with very large datasets which would break the internet if they ever become unavailable.
For westerners, "actually we had, it was based on the beans served regularly to the soldiers :D)" I think this means the secret weapon was heavy farts?
Ask HN: What is the current count of the messages in your "spam" folder/label?
I remember having hundreds of emails under my Gmail's "Spam" label ever since I started using the service -- but I have noticed that lately that number has grown much smaller; I've just reviewed and deleted a total of 24 messages. Note that my email is in no way secret, I have it displayed publicly in a number of places (in various forms, all of which point to the same account).

Does anyone else have the same experience? Any ideas what might be the cause?
Product / Market Fit is a Trap.
That is terrifying!

My opinion is that if you would answer 'yes' to this question then you should re-appraise the role that work plays in your life.

I can imagine certain roles where taking stimulants would be understandable: soldiers, for instance, whose survival in combat depends on having the mental edge.

But taking stimulants for a corporate coding job...?
I read this article recently: http://www.npr.org/blogs/parallels/2014/04/02/297839429/-so-...

And now I'm building a small app that'll give the people the ability to make predictions about future events and measure how well are they doing it. For now, it's just an experiment to test the idea.
> Persona does everything right

Unfortunately it isn't solving a problem that people have.

You answered this dilemma in your own message. Websites are using Google, Facebook, Twitter, GitHub, etc... for logging in. This solves a problem for publishers that want extra info on the user without asking (e.g. their email, their avatar) and users that care about privacy are simply siloing logins - e.g. I'm not connecting with Facebook for work related issues and I have a Google and a Twitter and a GitHub account too.

And surely, if it were popular, then Persona would be a good alternative. Unfortunately it has a chicken and egg problem.

> The lack of interest in pushing Persona forward has made me wildly change my stance on Mozilla.

Persona is simply an example of a product failing due to lack of interest and resources are limited - if you care so much, I'm sure they'll let you contribute ;-)

Besides, they aren't done yet.
They're very difficult to pick but not impossible. It can be done but it takes time and expertise.
That sounds great, but how many other virtual machines are you using, what is your heuristic for deciding what task is run in which virtual machine, and how strict are you about which sensitive data is used on multiple VMs?

(note: genuinely curious. I've gone down this route before myself before realizing there was simply too much overlap between my "sensitive" and "normal" work. I still employ similar configurations but for protection against data corruption, ease of system administration, and R&D purposes only.)
While I disagree with article, I do wonder, what should Mozilla do to not suffer the shrinkage further?

On other side there is Google which can advertise their own browser on their site, plus there is IE which ship their browser with Windows. How do you compete with those?
Does it run on Linux? Or Windows for starters?
That's a pretty cool channel. I've ended up spending like 30 minutes watching him pick different locks and its fairly entertaining.
Entrepreneur First Thinks It Can Grab The Talent Long Before YC
Is it more difficult because the locks are less common?
That was always the design goal. It was never a place for discussions, ever.

They eventually implemented the chat rooms because there was a demand for community-style conversations and interactions, but they've never allowed discussions or conversations in the Q/A format, and comments that turn into conversations are discouraged in the code.

Subsequently, one of the founders (Jeff Atwood) went on to form Discourse, which is about conversation and community.
Do I understand correctly you'd need to implement small updates with Courgette [1] yourself - aka it's on the Chrome side of things, not in Omaha?

[1]: http://dev.chromium.org/developers/design-documents/software...
Jeff's localtunnel has been discontinued in favor of Ngrok. It was discontinued in the middle of a transition from ruby to python.
Graham's hierarchy of disagreement
I'd say so. It provides long term benefit to the society as a whole if larger numbers of these cars are purchased (less emissions, lower demand for gas, better safety, raises the bar for other manufacturers, etc)
another great initiative in collaborative workspace culture, keep it up
Do functional languages offer significant advantages?
I'm here for the community and comments more than the links.
If you want something used by millions of people, you have to make it as simple as possible. Insisting that people learn about the invisible internals is more likely to put them off using it than to result in them learning.
Take a look at how much protection people's legitimate reasons to believe that this didn't affect them have given so far - the only people who haven't been proven wrong were the ones who weren't running a vulnerable OpenSSL. Their arguments all assumed that because they couldn't imagine a way to get the keys there wasn't one, when in fact they just hadn't thought about it enough.
See, what I fail to see is the point of such programs. We have had two female programmers in our company - they applied, they were good, so we hired them. They didn't need any outreach programs or upper hands, and there was no need for us to waste money on such stuff. We focus on shipping code. Why can that not be the case here?
See ygg2's response above. Safari is only an option for people willing to lock themselves into Apple's (increasingly closed-off) walled garden.
Safari doesn't solve anything for people not willing to lock themselves into the Apple walled garden (at present, the vast majority of desktop/laptop computer users)

Modern IE is a lot better than old IE, certainly; it runs some small subset of HTML5 applications, the javascript performance is adequate, and they have a faster release cycle. However, it still updates less often than Firefox/Chrome, has a worse security track record, and introduces new features on a longer delay. Moving to IE wouldn't make Firefox users any safer or better-served.
is this what you are meaning? https://deps.io/
Small Data: The way drugs and prostitution boost the economy
Show HN: List of Episodes
Here's an open letter from me: fuck you and your cancerous spyware. Advertising ruined TV, and businesses like yours are hell bent on ruining the web, too.

Here's a novel idea: build something people want to use, not something that helps scamming people into buying something they don't need.
Safari's a joke. Only runs on mac, ships support for key platform features late (and ships subpar support when it comes to things like video/audio codecs), and delivers slower performance.

I respect the JSC team a lot but Safari is an active hindrance to anyone trying to ship HTML5 games. It's just a poor-quality browser.
Maybe adding modality to the 'COMMENTS' link would work. From the front page it would work as it does now. From a comments page it would time sort that submission's comments.

[Disclaimer] I have rarely used the 'COMMENTS' link since my early days of karma hunting when I would try to identify active discussions in which to seek commenting opportunities particularly snark injections.
Wow, do a lot of luxury yachts have sails? I was under the impression the term "yacht" wasn't really applicable, but this thing seems like a real sail boat.

All that luxury glassware wouldn't hold up too well if you catch a bit too much wind on a tack.
i'd like to hear more about this, exactly how horribly miserable would you end up if you have trillions and you would be forced to give up 99% of your wealth?
That depends on how the BDFL of the community dictates. Generally, all the people who matter follow their BDFL religiously.
Minecraft Like Rendering in OpenGL 4
Referring to your 350 hp example:

1. That motor is a low speed motor, as such it is massive. It weighs 3044 pounds. The Tesla motor runs at nearly 10 times the speed, and ought to be roughly a factor of 10 lighter.
2. See how the price drops by almost 10% when you buy more than 5 of these motors? Now imagine you are buying 20,000+...
3. You can bet the manufacturer of the motor (Baldor) did not get $25k for it. I imagine the markup for the reseller is of the order of 30-50%, on top of other costs such as transport. These do not apply to Tesla.

I am pretty sure even $6000/unit is an over-estimate.

I have some information from an occasionally reliable source that the entire car costs around $20,000 to make. This is the "incremental cost", after tooling, R&D etc has been paid for. This is apparently about the same as a top level mass produced luxury Benz - for the Benz, the much higher inherent production cost is offset by the scale and efficiency of their production line.
Could you build a certificate revocation system on a blockchain? At least it should be obvious if someone is MITMing you (you don't get new blocks for ages), and other than that, you have a permanent record of all revoked certificates. The people who keep the chain running also get compensated.

Doesn't necessarily help mobile, due to the blockchain's size... but perhaps there's workarounds for that.
Apparently it can also be directly charged electrically. And they claim it doesn't need much sun to recharge.
> The way you've asked this it will lead people to think you're asking for very powerful static checking

That's exactly what I'm asking for :-). It should be possible to create restricted types that are checked at runtime. For example, the fabs function would return a float which is guaranteed to be >= 0. The sqrt function would require the argument to be positive.

float x;
... // arbitrary code
sqrt(x); // warning, possible invalid argument

float y;
y = fabs(...); // y is now float<positive>
sqrt(x); // no warning

float z;
z = -1.0;
sqrt(z); // error: invalid argument, argument z of type float
// fails constraint z > 0. z is constant -1.0

It is an error if the compiler can prove it to be wrong. It would probably be a warning if the compiler can't prove it to be safe - but you could optionally make it an error (to prove critical code). There are some cases where it won't work - a la solve_halting_problem() - but you could add little proofs to help it. For example, you could declare that sin(x) is `float<positive>` if `x > 0 || x < pi`.

This may sound crazy, but I think the parts are already out there. C#'s non-nullable types are a very weak version of this (the compiler can infer if something could possibly be null, and complains if you assign it to a non-nullable type). Many compilers also track uninitialized variables, and only let you assign to them, not from them. They are also effectively a restricted version of the original type (every time you declare a float argument, you actually mean float<initialized>).

Another ingredient is control-flow analysis. For example there is the excellent PySonar [1] that performs a whole-program analysis of Python programs and is able to infer types (including union types where it is not sure). In Python, values and types are somewhat blurred IMHO. Instead of variables, Python actually has `names`, and each name has a `type` and a `value` inside. Inferring what `type` a `name` could have is a bit like inferring what value a variable could have in other languages. So I think some of the lessons learned there could be valuable for building a something like this, too.

[1] http://yinwang0.wordpress.com/2010/09/12/pysonar/
Grip strength? Facial analysis?
Is it a problem that curl and wget do not reject it?
I agree with this. I come to hacker news not for the crappy blogspam but for the comments created by the crappy blogspam.

I really like this tool so adding some good comment features would keep me coming back.
This is quite old: the patent "issue" is more clear, see http://arstechnica.com/information-technology/2013/03/google... . There is still an issue with Nokia ( http://datatracker.ietf.org/ipr/2035/ ) but at the moment it looks like that everybody is ignoring them.
You don't need to review all that code. From the qubes architecture document:

"it is possible to move all the drivers and driver backends out of Dom0. The same is true for
moving the IO Device Emulator (ioemu) out of Dom0."
This is basically a test of who's set their x-frame headers or not. So the google link doesn't work, and everything that does is vulnerable to clickjacking.
I don't know about the whole of PEI - I only lived in the Summerside area for a little over a year, or two winters' worth, before the Canadian Forces Base closure was announced - but in my experience snow was not anything like occasional (or vertical, for that matter; precipitation is a horizontal phenomenon) and ground stability is an old civil engineer's wife's tale. The island is essentially a waterlogged sandbar with a plastic surface that almost seems alive during the frost season. Shallow roadbeds ripple with the seasons; deep concrete slabs tend to shift significantly. (The slab-bed highway around Charlottetown looked like a post-earthquake scene in the spring of '89, and a brisk business was being done in tires, wheels and steering and suspension parts.) There isn't a lot that works well "everywhere" that's directly transferable to PEI. The only way to make sure that inset features stay inset is to sink them deep enough to be more or less useless.
Writing up the design principals of Ethos is one of my goals this summer. The short description is:

(1) Strong security services (authentication, authorization, encryption, isolation)
(2) Higher level, less error prone semantics for all OS interaction.
(3) Security guarantees derived from system layering
(4) Highly composable semantics

Note that only (1) deals with security-specific code. The rest deals with overall code quality.
1. Norway, like Canada, is sparsely populated country.

2. I saw a Norwegian registered Model S in Zurich last week.
Browserify-fs, a FULL implementation of fs for the browser
Better Place Failed.

We have a tendency to look at success and failure stories and pick out some storyline that suits us. Here we have a lot to choose from: boiling oceans, CEO god complexes, too much money, wrong business model, the charging stations business model, etc. etc.

I think its useful to read accounts of success and failure analyze them and such. But extracting too many lessons might be as bad as too few.

I don't think there was anything inevitable about Better Place's failure. I don't think there was (is?) anything inevitable about Tesla's success. I do think that it is inevitable that some of these will fail.

Lets learn, but not to much.
Kind of amused at how Akamai smugly keep their openssl security improvements private for years, only for them to be shown to be broken days after open sourcing.

With enough eyeballs, all bugs are indeed shallow!
"Because they are more often used for scripting then anything else. Let's not add political correctness to programming."

Citation? You're just making stuff up.
Where does the IO typing come from? Is it some programming language? The website says that it uses C for kernel and Go for user space, neither of which are known for having advanced typing systems.
If you want to include comments on your static site you might enjoy this project:

https://github.com/skx/e-comments/
Oh nice! This looks very similar to https://pagekite.net (which is also open source), minus the need for an account. Good call.
Depends on your definition of "happened", I guess.

It was announced, but no patches implementing anything like this have landed in any code repositories, let alone been released.
I got a job at a start up once - it lasted 3 days - I still dont understand what happened. I had been laid off from my job, decided to take a stab at relocating to the bay area, took me a couple weeks, landed a job at a storage startup - I was a contractor, but it was contract to hire - the interview was kinda odd - normal technical questions, then a very strange interview with the manager which mostly consisted of "when can you start?"

I'd like to point out - this was not some fly-by-night sort of deal - they we're clearly not on a shoestring budget, well funded by major industry players, offering a unique solution, and it was the true startup environment - replete with: engineers who looked as if they rolled out of bed, and into work - friday night beer, free lunch, well stocked soda, nap and gaming rooms, and of course the obligatory fooseball table.

My title was to be "Senior Technical Support Engineer" - on my first day I was handed an HP laptop - with nothing but Windows on it, and a manual for their product, which I read in about 2 hours (I read fast, and it was only about an inch/inch and a half thick) - my training consisted mostly of watching the guy next to me do calls - most of which have to do with license entitlement issues and anything beyond that or simple config issues, required come cli-fu to fix.

The next day, was really just a repeat of the first - I still don't have an ID badge or a phone at my desk - so I keep watching and listening to these calls, I also took a note on hoe the majority of the office was dressed - pretty casual - Asking my peers about Putty and other apps, I asked, and was told I have local admin on the box, for office, go thru IT - anything else, just install yourself - so I then installed putty and winscp, and went thru the rigmarole to get office installed.

The next day I showed up in toe shoes, jeans and a button up shirt - as I don't really have much in the way of dressy working clothes (plus they advertise not having a dress code on their website) - but my toe shoes are brown leather - so I figure it cant be that bad, I get a sneery look from the manager and an aside comment - later that day, I was called in - and told that this would be my last day - she said I spent the whole day on Facebook (at that time I didnt even have one), dressed unprofessionally and installed "advanced software" on my laptop - I of course protested, and indicated what I saw for dress - and then told her what I was told about tools - she told me I didn't need putty, that was too advanced.

That was that - and of course the consulting house that sent me in basically looked at me as mud - I got fired on the third day; who gets fired on the third day? - eventually 2 other people had a similar experience and I was in good graces again.

The moral of this is - its not enough to worry about HR - HR is one problem, you also need to make sure you have a sane way of onboarding people, no matter if your giant or not.
Yeah but I understand GP's sentiment. As someone who writes python for my living currently, I'm a little disappointed at this because it's hard to imagine that it doesn't move further into the future the day on which we will switch our code base. I don't need to be a 3-second attention span novelty junkie to just get some pleasure out of using the latest version of the language at my workplace.
I don't get this mindset. It was pushed for barely a few months. Firefox took years to even come close to making a serious dent in the market share. Should they have given up after a year and said "The userbase has spoken and prefers IE"?

Persona as an alternative needs to be there and officially supported by Mozilla. I know they use it internally and "support" it, but the way they stopped all forms of promotion towards it etc makes it sound as if the protocol is abandoned.

Who cares what trendy new oauth2-based method RandomBlog#123 implements? Open source in general is very incremental. If it's there and solves a problem, it is a tool in the software engineer's belt. When it becomes apparent that companies don't permanently support their oauth2 "customers" and revoke all their API keys etc and Business asks "we can't have that happen again", then Persona becomes attractive. When updating the "log in with facebook" buttons will become tiresome because of social networks changing every few years, suddenly "logging in with the browser itself" becomes relevant.

It's an opportunity and they don't see the gain in it, but this is what "Keep the web open" is all about. Preventing every website in the world to depend on Google and Facebook's good graces. Protecting users from the really, really stupid password auth system.
What do you mean by "secure"? What's your threat model?

e.g. I don't see how your idea would protect against XSS, or against a heartbleed type bug. What are you trying to protect against?
A DOM aggregator/filter browser plugin.

Let's say I'm looking for a room on AirBNB. The filter they have on their website isn't specific enough: if I want to find a room that's $32 or less and that has at least 20 reviews, I have to use my eyeballs to filter all the < $35 results. What's more, there are many pages of results, making side-by-side comparison difficult. My idea is to create a browser plugin that harvests each element of a particular HTML class on a webpage (".search-result"), filters it based on the contents of some of the child classes (".listing-price < 32", ". listing-review-count > 20"), and puts all the results in a single window, probably using CSS copied from the original page. All I'd have to do in the AirBNB case is plug in the classes and comparators listed above and quickly cycle through each page of the listings with "gather mode" turned on. I'd then have all my preferred results in one place. Perhaps the plugin could even allow you to identify your classes by simply pointing and clicking on the desired nodes, much like the inspector in developer tools!

Ultimately, with this idea as the basis, I think you could make a great Automator-style tool that streamlines your research. Is there some information that's missing in the search results? Make it follow the links and filter the full listing descriptions! Looking for listings with specific kinds of owners? Do some keyword matching on each profile! Want a map of all your filtered locations? Gather the GPS data and display it in a beautiful native map interface! (Maybe you could even interface with external services like Wolfram or Yelp: crime statistics, nearby restaurant reviews, Amazon ratings?) Kind of like a web scraper, but with a very user-friendly UI specifically tailored for filtering and aggregating search results. You wouldn't have to keep 100 tabs open anymore when you're doing research: everything would be saved and synced in a handy Evernote-like interface.

I've run into this problem frequently enough with comparison shopping that I think there's value in this idea. I'm not really all that inclined to make it unless I can make some money, but I made a little Javascript rough draft script that can filter a webpage's DOM if you manually enter all the classes and comparators and copy/paste it into the dev console. A lot more work than the browser plugin I described, but still very useful for my purposes.

https://gist.github.com/archagon/10233251
Here's a perfectly written comment, downvoted. I don't agree with the conclusion, I question several of the premises, but I can't understand downvoting based on agreement. The comment is good, well written, and adds to the discussion. It should be upvoted.

Are there voting guidelines for HN? Am I in the wrong here?
A Survey of Bitcoin Transaction Types
How much can I up vote this? There has been actual research into how much people value their online information (clicks and so forth). The result from one study is a median of 7 Euros (about USD10; http://arxiv.org/pdf/1112.6098.pdf). Not much to build a business on.