skysight-inc/HackerNews huggingface dataset:
Valid points all but we're using 20/20 hindsight to render judgments on received conventions during a time in which the more logical metric system exists. A quick glance at 'Knot (unit)' in Wikipedia supplies a 'rationalization' for the use of knots involving old Mercator projection navigation maps. But all of these 'knots' and 'mile' measures are based on the English 'foot'; where did the old 'foot' standard come from? Some 10/11 convention imposed by an English King Henry III on an older system. And by extension, why retain 24 hours in a solar day or the Babylonian 360 degrees in a circle? Or more recently, why the Cartesian convention of ordinate-vertical and abscissa-horizontal on graphs rather than the other way around (sundial-clockwise would be positive; back-Kronecker [0 1,1 0] to convert)? After a while these mathematical musings start to resemble idle etymological ramblings in linguistics: eg, 'extreme' conflates 'out of' and 'sewer'; but then why those particular phonemes for the sense of 'out of' or 'sewer'? As my brother the research psychiatrist frequently retorts "You're trying to be logical. People aren't logical"
You're missing out entirely on the point of the article.

The notion is that "women's work" is devalued, and there are all these social reasons women find themselves being underpaid or not paid at all for above and beyond "supply and demand".

It's ultimately shitty that everyone in the company but the designer got to fail upwards and land in cushy jobs while she got $10k and a pat on the head. Did she not put in long hours? Did she not sacrifice her personal life, etc, in a way commensurate with the developers?

You need one designer for every 3 or 4 programmers, but that doesn't mean you still don't need good designers or that their individual contribution is automatically less valuable.
> two years

If that's how we're measuring things, then closed source isn't going to win either, e.g. [1].

[1]: http://www.computerworld.com/s/article/9146820/Microsoft_con...
Seems unlikely to happen based on what was said in the thread.

> Whatever you and I think of this pricing structure, people free to chose any
provider of certificates that matches their pricing interest and that people
are knowingly or should be knowlingly buying a product that has a certain
price structure when they get the certificates in the first place.

> Revoking a certificate is generally primarily in the interest of the owner of
said certificate so there is incentive to actually pay this fee.

> I do not believe it is Debian's place to pass judgement on which pricing
scheme people should prefer, even if you and I personally rather pay up front
and have no costs on revocation.
So you're essentially rebuilding a browser inside of a browser?
+ sign is to choose a profile picture, which also changes the background of the landing page. The circles within the text fields are color confirmation states, turning green when the string you've entered is a complete name, email, etc.

Thanks for bringing to light the shortcomings of color confirmation; we should have text confirmation states instead.

Sorry about the confusion! I'd love to walk you through things if you're up for it. Just shoot me an email at mike [at] volleyit.co
I'd argue that your ability to program is the direct result of taking CS classes, not the direct result of majoring in CS. Similarly, I'd argue that your ability to go to graduate school in those fields is a consequence of taking math classes, rather than of majoring in math. (With the possible exception of math grad school, I will admit).

The question is: By fulfilling the requirements for a double major, what does one gain above and beyond what one would have gained by majoring in Math, but taking a lot of CS classes? Or majoring in CS, but taking a lot of math classes?
[AWS] Trying to find the optimum number of I/O bound parallel processes
This is actually not enough as you cannot be sure that certificates generated after that have never been used on a server with a vulnerable OpenSSL implementation.
this is such an undervalued point (which many in SV ignore).

many, many "startups for startups" die because naturally most startups die.

[no judgement on this proposed service - it indeed looks interesting]
What is so difficult to understand about someone being curious about the price tag for large crypto audits/development projects? I am sorry I do not have an xkcd comic to link to, hopefully I can explain this to you without pretty pictures: I am not asking about the price tag because of any specific software development project. I am asking because I am merely curious what the price tag would be. I have seen various discussions mentioning audits and rewrites as if everyone knew what the cost would be. I do not know what the price tag would be, and given the lack of genuine responses it seems a lot of people do not have any idea what the price tag would be.
Either this request is naive, or I am.

As I understand it, not all StartCom certificates are necessarily vulnerable. I have a number of StartSSL certificates issued before 4/7 that, according to the HeartBleed checker here[1] are not vulnerable.

Is it wrong for me to assume that the tool is correct, or is it wrong to assume that all StartCom certificates are necessarily vulnerable?

[1] - http://filippo.io/Heartbleed/
Must Have WordPress Plugins for 2014
seriously. I didn't even react to that picture. it didn't scare me in the least, the spider seemed too fake. if I saw this spider in real life id be scared. now I know my mother who is very conservative would have freaked out if she saw that picture.
Exhange student on an expired visa arrested in terror plot
Their behavior is enforced directly by evolutionary constraints. If an ant colony's behavior fails to be adaptive, that colony dies out.

Humans have developed intelligence and culture, which allows us to consciously adapt our behavior over timespans shorter than a generation. Thus we also have developed more adaptable rules that are embedded in culture rather than genes.

That said, both ants and humans arise from the same evolutionary process. Human government is different from, but not any less natural than, ant behaviors.
> only in synchronous conversation will you get the back-and-forth "wait what? How's that work?"

There is something to be gained from synchronous conversation, but what you've listed can be done asynchronously.

In either case, my point was IRC doesn't have to always be synchronous. When you're both available, the conversation can be synchronous.

I agree that there is a huge benefit from having a synchronous, spoken conversation, but my reply was contesting that "Understudy gives you is a one-to-one relationship with another person who cares" in contrast to IRC. IRC can do exactly that, so what sells Understudy is certainly something different.
Most StartSSL certs will stay compromised
A nice gesture like this done before the fact helps mitigate perception problems. The problem is "damaged goods" repulation, its not the "rejection". New hiring managers will silently discriminate against her (surely). By giving your employees something to point to, you are being more responsible in how you do the buyout transaction. I actually don't agree with the view that this is some type of mis=placed "entitlement", because the problem is a real problem regardless of who it impacts. Although she also shouldn't over-worry if she's falling into a hot market with a strong support network.
I think many eyes + code audits is a good mix. It seems like OpenSSL has many eyes but the code is so incredibly complex and "big" that audits are nearly impossible (or prohibitively expensive).

Perhaps we need to hit the reset button, and have a bit more oversight into "NewSSL" with continuous audits. There are enough big players in need of secure communication that money shouldn't be a problem.
Land Rover augments off-road reality with amazing Transparent Bonnet tech
I didn't like it. Like most TV shows about professions it felt like a big bundle of crude stereotypes. Maybe its because I am an east coaster, but I couldn't relate to any of the characters or scenarios.
UK Offtopic: kalzumeus.com is being blocked under the category 'gambling' for me by the TalkTalk HomeSafe filter. First time I've seen the filter. My ADSL over copper connection is provided by EE.

https://dl.dropboxusercontent.com/u/8403291/talktalk-blockin...

I can't change the settings as I am not a TalkTalk customer (to my knowledge, my connection has remained functional despite mergers: Freeserve -> Wanadoo -> Orange -> EE). I certainly don't have a 10 digit customer reference and my account email is 'unknown' to the filter.

Cameron's cyber-nanny can be circumvented for eminently respectable domains such as this by judicious use of ?oo?le Cache of course.

Anyone else from the UK with default filter settings seeing this? I'm about to write to my M.P. and some wider data points would be helpful.

I have used the 'report' button: perhaps they will unblock the domain when they realise it is about Bingo.
Companies are doing job interviews all wrong
I don't think that "charging for services you said you would charge for" is anywhere near reason enough to revoke a root certificate. I would be very disappointed by Debian if they actually went through with this.
I suspect you're being downvoted for having a dismissive tone in the same breath as you admit to not understanding the problem space. My guess is that the marketing copy on the site isn't targeted towards you, so it shouldn't surprise you that you don't understand it, whereas their target customers know all sorts of things about, say, Pig. That's fine, but then your comment should read like, "Can someone explain to me what this is for?" Instead, your comment is dripping with condescending snark, lecturing someone or another about how this thing you don't understand probably isn't useful, and incredulous that you don't understand something on the internet.

Imagine opening an advanced textbook on a subject you don't understand, reading two paragraphs of it, and throwing up your hands in disgust because what does this even mean?
Python tools for Pentesters | KitPloit – The Hacker's Tools
The Galaxy S5 does not have temperature or humidity sensors
To my mind it depends a little on what functionality is behind the account. If this is a huge chunk of functionality, that presently depends on their infrastructure but doesn't have to, then I think that's fine (though certainly enough to self-host would be better). If this is basically a thin wrapper and all the actual functionality is in their proprietary server code, then it's hugely disingenuous.
Lightweight Linux Kernel Development with KVM
> Many questions do not have answers that two-thirds of the country can agree on. For small questions, perhaps that's harmful. However, for large questions, it's definitely a feature of the system that the electorate is forced to deliberate until wider agreement is reached.

It's not a feature, however, to spend so much time butting heads over a small handful of issues that nothing else gets much discussion time, and that everything else has to rally under one of those big banners to get noticed or get action taken. Some issues just need to be written off as disproportionate time-sinks that nobody will ever agree on. Disagreement at the level you're talking about is a strong sign that there's no strong consensus in any one direction, which itself provides strong evidence that government should stay out of those issues.

> Are there issue in particular that you think are important yet avoided?

Among many other things, we seem to have completely lost the small/large government distinction that used to characterize the two parties, in favor of a large/large government that only argues about what to do with itself. The question of doing nothing never comes up or gets any discussion time at all. Whichever side of that distinction you might favor, I think it's pretty clearly worthy of consideration.

I'd also love to see more active discussion, consideration, and avoidance of the Overton window (https://en.wikipedia.org/wiki/Overton_window) as a political failure mode, rather than business as usual.
That would be the answer I was looking for. :)
http://engineering.mit.edu/ask/why-speed-sea-measured-knots
Our APIs will expand a lot over the coming months. Any feedback on people see as most useful is highly valuable.
What a ridiculously terrible article.

The company "decided to sell itself to Google as a last resort, after failing to find traction in the market". But the engineers got hired, so probably the product was good but the failure was in marketing, branding, etc. Who was in charge of that? "I did our user experience, our logo, the marketing – all that stuff," she said.

So the article could have been written "Strong technical team makes valuable product, but bad marketing and UI prevents success" and no one would be surprised that the engineers got hired and the marketing & design people didn't.

But that wouldn't fit with the sexism in tech narrative the author wanted, so let's ignore the most significant and obvious facts.
It varies by deal. If you are a hot-shit growing company, you obviously have more leverage to negotiate for your employees and can get them full-time positions with good retention bonuses/stock.

If you are running out of money and don't have a choice, then your employees are probably going to be rolled into an existing product, and at that point, there's probably not a lot of benefit to Google to hire sub-par employees, so they may not get an offer or might get less than in the above case.

It also depends on what your team does: A failing company that does hard core research and employs a bunch of Phds might be worth a lot more than a random social startup that just employs a bunch of randos.
I don't think the certificates are vulnerable at all. Their private keys may have been stolen if people were using them with a vulnerable version of OpenSSL, but that has nothing to do with StartSSL certificates themselves.
> is it wrong to assume that all StartCom certificates are necessarily vulnerable?

They aren't claiming all StartCom certificates are vulnerable, they are saying some StartCom certificates may be vulnerable because they impose a fee on revocation.
> A user comment here says the CVE was cited, and StartSSL waived the revocation fee.

Seems like a straightforward solution for them to implement.
The video is great! One, Is it possible for a user to "save" the session? After all, it may be some time before they get back together. Two, the quality of written aspect, which is central to the "communication" idea is very poor in comparison to what I can achieve on my Galaxy Note 3 with wacom digitizer. I am a lefty with very small handwriting and its still very legible on the GN3... I can't wait to get a bigger tablet with the digitizer baked in.

I think the idea could be useful for much more than SICP, however the ability to save and actually read what you have written would be killer features.
Related: https://bugzilla.mozilla.org/show_bug.cgi?id=994033
Looking at the Web with Internet Explorer 6, one last time
I think it'll last quite a bit. So many absurd things happen so quickly out here, I feel he'll have plenty of things to satirize. There'll be an endless supply of fodder for Judge.
It seems like the browser vendors (Netscape) never intended for there to be a UI for a good reason. It's intended to be used to (basically) transparently install and use a client cert. Each device can get its own key pair/client cert, and no UI is necessary to manage them.
> He used <specific language> about <the subject> to win their favour.

The very specific language he used was:

> I’ve stated my opposition to this. I think [Prop 8 is] unnecessary. I believe marriage is between a man and a woman. I am not in favor of gay marriage. But when you start playing around with constitutions, just to prohibit somebody who cares about another person, it just seems to me that’s not what America’s about. Usually, our constitutions expand liberties, they don’t contract them.

So:

* he was not personally in favour of gay marriage at the time[0]

* but he was most definitely and unambiguously against constitutionally forbidding it (and enshrining his personal beliefs in constitution), and did call then discriminatory

* as opposed to Eich who was most definitely and unambiguously for constitutionally forbidding it

Not only that, but even at the time Obama was

> “open to the possibility” that his views may be “misguided“

> So he was not in any way neutral on this issue. It is impossible to argue.

That's pretty much the only correct thing in your comment.

[0] and has since reversed his position
Buffering data with Okio
"The notion is that "women's work" is devalued, and there are all these social reasons women find themselves being underpaid or not paid at all for above and beyond "supply and demand"."

It's an interesting hypothesis, but I haven't seen any data to back it up. The common sense explanation seems like it fits. Work that can be done by lots of people gets lower (or zero) wages. If the problem were women getting underpaid, we'd see the same problem among female developers. Do we?

Designers are worth less in an acquihire. As a result, designers should demand wages that are closer to the market rate than developers do when they work for startups.
Not getting involved in the politics of being charged for revocations/re-keying, however it's worth pointing out that Google Chrome (linux and windows, and Chromium) all seem to have the "Check for server certificate revocation" option disabled by default.
else if one year has elapsed since contract started
transfer security deposit to tenant
end contract

This ignores the reason for a deposit in the first place. What if the carpets were burned in that year? Some of the deposit needs to be kept by the landlord. How does etherium know the carpet was burned? If the landlord says so, then the landlord may be lying.

For simpler operation - if rent not paid - then end contract - that sounds like it adds no benefit. No need for a program to tell you the contract has ended.

This is very useful to prove authenticity of a contract and for very simple contracts as well such as a bet. If there can be any sort of dispute about the contract though I don't see how it can be useful again save for authenticity.
Peek does free 5min site-testing. The review of Mailinator FAQ is great
There is a big difference between considering prejudice and then assuming it in the face of a plausible, alternative explanation.
Hats off to the Debian developer. I can not believe the report was handled so politely. This is one of the silliest bug reports I have seen. I can not think of what the possible thought process was that led to the formation and submission of this bug report.

# dpkg-reconfigure -p low ca-certificates
This is basically "shit men say to everyone who runs any business." It's also "shit women say to each other" and really just "shit people say."

But I guess a whiney blog post is helping.
im a male cofounder and have been on the receiving end of 80% of this. The project one gets to me every time.
I recommend the 99 Haskel problems: http://www.haskell.org/haskellwiki/H-99:_Ninety-Nine_Haskell...

All questions have solutions you can learn from; most have multiple solutions. I have learned a lot from doing these problems and doing additional research where needed.

(This is in addition to the other good learning resources like the oft mentioned LYAH.)
I think most people are too ignorant to even be either party but instead vote narrowly on issues that benefit them or stupid stuff. that's why we end up with divided government with the president as one party and congress as others.
Fwiw, here are two light-weight feature-based recommendation engines I built for Node.js (for situations where you have the cold-start problem and therefore can't rely on user/item based collaborative filtering): Alike [1] and Look-Alike [2]

[1] https://github.com/axiomzen/Alike

[2] https://github.com/axiomzen/Look-Alike
Did I miss the cost and signup page?
Not working in Chrome on OS X. Seems to look ok in FF and Safari although I am not sure where the input for color is supposed to be positioned, it looks out of place.

I see you used Zerb Foundation, how did you like it I am thinking of using it on a side project.

Edit: Working in Chrome after a few refreshes.
From the customer’s point of view there’s not much to complain about.

If you’re maintaining a CA trust store, it might be a little different. The CA can adopt any pricing structure they want, but the one they’ve chosen will lead some customers to not revoke their certificates, resulting in potentially compromised certificates being used in a way that could have been avoided.

This could definitely factor into your judgment of whether it’s a good idea to trust certificates signed by that CA.
It is incredibly, blindingly privileged to say that internalized oppression is the worst form of oppression. Being oppressed is the worst form of oppression.

And, for people who aren't white men, oppression is a lived reality, not an abstract concept that you can attempt to rationalize away. It is both rational and justified to think that prejudice is a predominant factor in virtually everything, because it is.

Finally, oppression isn't "statistical." The people who cause those statistics have names, faces, and addresses. As do the people who act as their apologists. The personal is the political, but the political is also personal.
I wonder, when computers eventually become 1,000, or better, a 1,000,000 times faster than they are today. Will all these complex algorithms to squeeze out every last drop of performance still be desirable?
None of this is gender-specific at all. Pointless linkbait.
It's typical bad business. At such a small firm especially when the employees are underpaid with the expectation of some large payoff in the future, the management should ensure that there is a positive outcome for all of their employees. Unfortunately, this frequently does not happen. This scenario is similar to when companies sell out for a per share value below the employee stock option strike price and the senior people all have stock so they get paid while all of the option holders get nothing. Or the startup that fired a lot of their employees with unvested options just prior to the ipo announcement.

These things happen and they are upsetting. There are many bad operators who wouldn't think twice about screwing over the people who helped them get where they are. On the other hand, there are folks who will try to do their best to make sure everyone comes out ok and these are the people who you should try to seek out.
What we say in the emotional raw state is not what is going to determine our future. Otherwise, I would have given up more times than I can count. :)

And it's not just her feelings that were hurt -- it could have short term negative consequences on her job prospects. "If Google didn't want her, what's wrong with her?"
How do you notify a large-ish group of a secret vuln without notifying any of the bad guys?

Because if you notify the bad guys at the same time, then you've made it worse, since people you didn't notify don't know anything is up yet.