skysight-inc/HackerNews huggingface dataset:
Rice is much more evil then Eich, that's one reason for you. I just cant trust people running Dropbox anymore. Will they go in the board meeting, shake their hands with Rice and discuss business matters? That's not a kind of people I'd like to support. My 2c.
Just because Buzzfeed uses list style headlines and has vacuous content does not mean that list style headlines are an indicator of vacuous content. If you read this and you liked it, does the title really matter?
They've been in business for over 7 years. I know because I was in the same YC batch as them. They have not rushed into anything.
JottaCloud. Based in Norway, so no US involvement.
do other countries fix that somehow? in a way that actually has some teeth?
It sure would be nice if some of those designers would take a whack at the Mozilla certificate configuration UI. It hasn't meaningfully changed in a decade, it's one of the Internet's biggest security flaws, and it's something any UX person could safely propose changes to.
Unless there's something about Mongo that means it's perfect for machine learning (unlikely), the last thing I want to maintain is yet another database because they didn't offer any choice.
Let's assume, she is an ambitious person that will work for whoever is paying her.

Wouldn't it make more sense, that they hired her because they want her to lobby against the NSA? Who would be better qualified to get some results in those areas?

From Dropbox's perspective the wire-tapping saga is just bad for bussiness, and they want to make money. So, it makes sense, they would try to spend money to put a stop to it.

Who would you hire?
Cool. It's only a natural progression until this happened.
Git based SparkleShare: http://sparkleshare.org
There is a difference between Eich and Rice.

Eich didn't torture and murder people.
I just happen to be speaking to the very reporter who wrote this article prior to him publishing this report. I told him that in 'our world' we don't really emphasize or make much of who introduced the bug, since it is understood that writing secure code is hard.

But what required the denial from the developer (and I feel horrible for him) is that this bug gained so much mainstream attention and speculation. It was only a matter of time before a reporter wanting to further the story got in touch with him.

He was in a bad situation - don't respond and have that misconstrued or respond and deny and give credence to the theory.

We all know that he didn't do it intentionally and in absence of any supporting evidence in all cases these are simple mistakes, but the general public who are currently whipped up in a frenzy around NSA revelations don't know that.
I can also attest to the biological sciences reliance on Word and Track Changes. It's maddening at times but then again my 80 year old PI (whose in the lab everyday doing wet work still!) can use it and every computer on our campus (some 1000 or so) can be used to edit our drafts .

I and some of my other colleagues would much rather move into something like Google Docs and we've done so to a limited extent. I wish someone had told me about Authorea a month ago before I started another manuscript in Word. I'm happy to take the hour and my PI is happy to spend the hour for me to show him how to use other editing and collaboration tools. I just need to know about them!
Thanks for the feedback! Just pushed an update with a max-width.
It seems to me that there is a big difference between making a modest financial contribution to a bad cause, versus being a primary actor in furtherance of bad causes. At the risk of invoking Godwin's law, it's like comparing a high ranking party member to someone who voted for the dictator and went to some rallies. Both are bad, but only one results in war crime tribunals.
You seem to have a very specific anecdote in mind.
FactCheck.org: Bush's "16 Words" on Iraq & Uranium: He May Have Been Wrong But He Wasn't Lying

Two intelligence investigations show Bush had plenty of reason to believe what he said in his 2003 State of the Union Address.

http://archive.is/vAWQa#selection-283.0-300.0

Don't let facts get in your way though.
I work with both private and public sectors in the DC area.

One of the things that sucks about the Federal sector is that they are dominated by Microsoft and Oracle shills (the kind of IT pros who can't learn new skills unless its spoon fed pre-digested in the form of industry certification training) who do nothing but scream about the danger of open source. Now of course we all know that the only difference between enterprise and open source security holes is that the former go undiscovered for longer, and when discovered by the code owners aren't disclosed despite them having knowledge that black-hats know about it.....

But make no mistake. This fucking idiot [Edit: Ok, this isn't fair, this could happen to anyone, so he's not an idiot, but why not use a static analysis tool?] who did this to OpenSSL and the idiots who let it happen are going to set open source in the Federal government back YEARS. Not because its an actual threat, but because it will be used by the enterprise assholes as a weapon to keep selling their shitware to the risk averse morons who make up the giant pile of middle manager idiots that composes the Federal government.

I've already told my boss I'm not doing any more public sector work after my current project ends, and this is the nail in the coffin for me touching it ever again.
The article says there was a reviewer who looked at this code before it was moved to the release branch.
I think the Rice as a board member issue is a totally different concern, directly related to the delivery of the service.

Rice is a former National Security Advisor, and is looped into the political structure. So now, when the three letter agency of your choosing needs to have a frank conversation with someone at Dropbox, Condi will be a trusted conduit.
WeatherSignal is a slightly different project to OpenSignal (but it's by the same people) - we're sharing data with several academic institutions and independent researchers, and will make the feed fully open. Also NB, PressureNet is a great project, WeatherSignal also collects pressure data but I think other sensors are relevant.

We have an algorithm in WeatherSignal that tries to determine whether users are indoors or outdoors - there's a roof icon that appears or disappears, try it, it's pretty accurate during the day time.

WeatherSignal project is basically funded by OpenSignal sales, we sell to carriers and regulators -- who can act on the data to improve service.

(I'm James Robinson, a co-founder of OpenSignal/WeatherSignal)
I'm probably been blind but where is the units for the Y axis on the top graph?
Graph analytics and Social Network Analysis on massive graphs with Giraph
We are writing a book on large-scale graph processing with Apache Giraph. Giraph is being currently used at Facebook to run graph analytics on their graph with a trillion relationships across hundreds of machines within minutes [1]. The book covers from technical challenges about designing and building a processing engine that runs graph algorithms efficiently, how to develop scalable algorithms for graph analytics, to the practical API of Apache Giraph. We thought you guys might be interested in these use cases for your own work, and hopefully find the content useful to you. We hope to get some useful feedback on how to improve the book to make it useful to the broadest audience.<p>We'd love to hear if you guys have any use-case, like social network analysis or recommender systems. What kind of use-cases would you like to see in such a book?<p>[1] https://www.facebook.com/notes/facebook-engineering/scaling-apache-giraph-to-a-trillion-edges/10151617006153920
You should give Komodo edit a try. For go you can use this plugin https://github.com/trentm/komodo-go and it already has JavaScript support.
Redefining Rich Consumer Engagement: HelloWorld
I find that the TypeScript compiler is annoyingly slow and I cringe imagining a workflow that involves another compiler in front of the TypeScript compiler. Granted, you'd probably do most of your tests and such at the C# level and only step into JS as the final step... but iterating through those last steps would be annoying.

Especially when you consider a "just hit reload" development cycle as the competition.
One person wanted to rob people of their right to marry whom they wish; the other person helped lead the push to a war that has killed thousands and thousands of innocent civilians.

You make the call.
It was a joke in reference to https://news.ycombinator.com/item?id=7555012
It may be a smaller amount, but it is voluntary. Paying taxes is not voluntary.
I feel similarly, I'm just not sure where I draw the line because it makes me feel like a hypocrite. I see a lot of people on HN criticizing the Obama administration for drones, NSA, Guantanamo, etc., but how many of them have stopped using tech companies whose leadership contributed large amounts of money to Obama's campaigns? I can't help but feel like there is a something deeper resonating with people when it comes to this Condi issue. I'm guessing if Hilary Clinton quit tomorrow and joined DigitalOcean,the people up in arms about this wouldn't be outraged.
Jelle van Echelpoel: latte da Vinci
Do you think if John Kerry or Barack Obama joined their board, we would see this level of outrage? I highly doubt it.
They're called Eclipse and jEdit?
That is a very interesting anti-pattern, and I see it a lot in non engineering/tech companies (because I think people are insecure about the rapid technical changes they see about them). It's called the Dunning-Kruger effect [1].

“One of the painful things about our time is that those who feel certainty are stupid, and those with any imagination and understanding are filled with doubt and indecision.” - Bertrand Russel [1]

[1]http://www.spring.org.uk/2012/06/the-dunning-kruger-effect-w...
Social logins would be great
Looks like we are living a new age of McCarthyism.
If the action is destructive, and the person hasn't regretted it, does it become acceptable just because s/he has done it with the best of intentions?

On the contrary: "those who torment us for our own good will torment us without end for they do so with the approval of their own conscience". If anything, it's even more dangerous to trust in someone who believed and continues to believe in what they were doing, than in someone who did it maliciously but has since truly regretted it.
So say an academic lab wanted to move all their projects in Authorea and they're already using git for versioning. Can we import and maintain our versioning?
A lot of the technical tutorials (that also get posted here) are frankly, absolutely terrible.

Tutorials that do not state the required levels of expertise?

Tutorials without version numbers of the components that are described in it?

Tutorials for absolute beginners that feature commands like

echo 'something' | sudo ...

without explaining them?

Tutorials about using debian-installer without explaining whether locale=en_US will set the system locale during installation to en_US.UTF8 or simply en_US?

In the same vein, tutorials about the installation of Postgres that do not mention that your system locale will impact the encoding / locale of your databases?

Check, check, check, check and check.

Something like RapGenius for technical tutorials might be useful here.
Hack Banking for Good At Standard Treasury (YC S13)
Amazon CEO Jeff Bezos' Annual Shareholder Letter
All about Heartbleed and how to protect yourself
Future of Programming workshop
I don't see a reply button under your post so replying here.
When I used to do C++ interviews more often, and I encountered someone who believed themself to be a "C++ expert" I'd sometimes pull up: http://en.cppreference.com/w/cpp/header and ask the candidate to pick three headers from the standard library that they found interesting and tell me about their contents, how they can be used, what the pitfalls are, etc.

If they get a mild panicked look in their eyes and go straight for string, vector, and iostream, my spidey-sense starts tingling.....

EDITed for grammar
Particularly relevant example: TLS/SSL implementation in Haskell.

http://hackage.haskell.org/package/tls
Ageism in the Valley is real, but you're vastly overstating the case. A person in their late 20s is, by a very wide margin, not considered too old - in the Valley or beyond.
Some of the jobs I've had or looked at made employment contingent on a non-compete. In those cases, saying something like this would mean finding another job.

Depending on your skills, your area of expertise, and your reputation, this may or may not be a big deal to you personally, but it's not an option for everyone. My last employer (when I was straight out of college) would have just shown me the door if I said something like this.
And Bush couldn't have possibly received misinformation too, right?
And Condoleeze Rice is not a "public official" now, either
Shame its not opensource then people could contribute more than just plugins!
Top 7 Tips for RxJava on Android
What is mathematics about?
Tips on Heartbleed recovery (other than "Change your password")
What evidence do you have that there was fabricated evidence to justify the war? I'm not saying it wasn't faulty, but all the parties has closed door access to all the intelligence to make a decision. Just because we don't like the decision retroactively doesn't mean it was done on purpose, but rather due to mistakes being made. Not to say that's more comforting, just that they are different things.
Ireland has cycle-to-work scheme. It deduces price of bike from your income tax, practically it means you pay 40% less for a bike. Ireland is probably the worst possible country for cycling (rain, wind, narrow roads with walls on side) but it seems to work.
Analysis of openssl freelist reuse
3 words: not gonna happen.
7 tips to increase your TripAdvisor ranking
What part of the other person seeing video of you assures you that you aren't MITM'd?
You are inferring that being in a US administration while US sanctioned murder and torture occurs, means that the leader therefore murdered and tortured people.

Which puts Condi in a large group of people: nearly every member of a US administration in the last century.

Edit: Jesus. A lot of people missed the point of what I said. All I did was argue the issue is more nuanced than "[Condi Rice] tortured and murdered people"

My mistake for trying to broaden a Hacker News discussion.
A lot of projects have no designers and the programmers spend a lot of time tweaking atrocious logos. I don't think that was meant to be a slight against designers. Probably the opposite, really: don't waste time screwing about with a logo if you don't have the talent, concentrate on the programming and either go without or find someone who can do it well.
Free Will Sell SIM Cards Using Vending Machines In France
Dammit, I just got excited yesterday about Mailbox coming to Android.
> Everyone in Congress believed it.

Wrong.

http://clerk.house.gov/evs/2002/roll455.xml
So as a vocal, technically proficient and wealthy segment; we are now basically a lobby group. Minus third party funding, hidden agendas and three piece suits. I love this. I think that using our significant influence to form an opinion followed by digital exertion of will is simply of mirror of formal politics. Game on.
I have a cheap hosting account into which I've extracted the ownCloud tarball[0]. For security updates, I've subscribed to the announcements ownCloud mailing list [1] so I get an email each time there's a new version (either bugfix or major). The mailing list is very low traffic (only messages about new versions). I either follow the instructions on the site [2] for major upgrades or otherwise use the built in updater [3][4] for the minor bugfix releases.

So far, it's been pretty painless.

[0] http://owncloud.org/install/

[1] http://mailman.owncloud.org/mailman/listinfo/announcements

[2] http://doc.owncloud.org/server/6.0/admin_manual/maintenance/...

[3] http://doc.owncloud.org/server/6.0/admin_manual/maintenance/...

[4] http://imgur.com/Z4U8ac5
That's not an adequate source as it implies nothing in terms of my request.

If that's all it takes then will you agree with me that the current administration and its members, present and past, have been conducting a quest for ideological purity in Afghanistan and neighboring areas? Therefore none of them should hold a job of any significance now or in the future?
I'm not familiar with Coverity, but Sonar (for the Java world) is very similar in concept and will fail to detect things if there are enough issues before it in a file...

Which I would HOPE is not the case here.
You aren't blind :) We just had trouble fitting a y-scale on the top chart that was both clean and readable and didn't get in the way of the time slider... However this is just supposed to be an overview of the trend - the proportional bar chart further down the page is the same data, plotted in more depth and explained further.
Maybe I'm the only one who's thinking like this but...

...It's just Dropbox.

"But she access to ALL THE THINGS!"

I highly doubt Dropbox will intentionally jeopardize the meat of their business model. And again. It's just Dropbox. Not the golden keys to nuclear warfare or even a tech mover and shaker like Google.

What I want to know is why a highly educated, over qualified, former leader of the country is joining a cloud storage company. Her skill set could be leveraged so much better elsewhere. It's just...what the hell. That's what's confusing me. Not her wielding political influence to rename my file extensions to .nsa or .chevy.
The attempt? The UN absolutely sent inspectors. That people didn't trust Saddam and wanted to make sure that he was not fooling around is one thing. To invade the country on exaggerated or just made up claims is entirely different. I don't know about China or Russia, but from what I understand, Chirac never really bought into the "proofs" proffered by the US. As for other countries who did go to war, it's a question of how much their leadership was convinced, and how much they did it to gain political credit (eg, a whistleblower leaked information from the Danish military intelligence clearly showing they were not sure at all Saddam had any WMD).
More troops and cash would not have fixed Iraq.
Eich also created JavaScript and I don't see a massive push to drop it everywhere. I think these sort of things are an outrage-economy with no serious or lasting effect.
Oh. Huh. Didn't realize that.
I don't see how this is anything but discriminatory. If you look at the stats, boys are falling behind in nearly every area, in terms of levels of achievement. Taking away incentives for them in the one area they tend to do well is discrimination, plain and simple.

"I'm concerned that boys have become politically incorrect, that we are a society in the process of turning against its male children." - Christina Hoff Sommers

I personally have been a mentor for a three sets of boys over the last three semesters at Spark (http://sparkprogram.org/) and have seen firsthand the positive experiences boys can have when they learn they can be creators, and not just consumers. To take away that creative spirit from boys is a crime, and I cannot see myself supporting any nonprofit initiative that discriminates in such a manner.
I did not mean to give the opinion that I thought Dropbox was forced to hire Condi. Nor did I intend to suggest that Dropbox agrees or disagrees with her.

Here's what I think. I think Dropbox said, "As we try to beef up our credibility with large enterprises and government agencies vs. Box.net and Google and other companies, it would be helpful if we had a board member with some street cred that we could use as a selling point with large CEOs, CIOs, and other senior tech people".

This is not an uncommon thing. At that point, you look out across the landscape of "famous people" you can put on your board. It can't be anyone who is affiliated with a competitor, and there's a lot of competitors. It has to be someone with name recognition who also is willing to be a board member and has some sort of leadership experience.

At some point, Condi's name cropped up with a few others, they met her, thought she was smart, she had the time and availability, and they brought her on.

I bet someone at some point said, "Hey, you know, are we concerned with the affiliation with GWB?" and they thought about it they said, "Hey, look, she was SECRETARY OF STATE, the first female african american one, she's a former stanford professor, she's a genius, surely people will recognize that this is different than her work with GWB"
Just because they are non-enforceable doesn't mean they have no effect. The COO of one of past employers was offered a job at a competitor shortly after he was fired. When the new company heard of his non-compete clause and the intent of the old company to enforce it, they withdrew their offer.
Sure, he can become a software developer if that's what he'd rather be doing. It's still (largely) a business where demonstrated skill outweighs paper testimonials of brilliance. If he actually likes programming then encourage him for sure. If he just wants to get into it because he doesn't like what he's doing now, then something else would be a better fit. Anything else, really.
Non-competes are very much pro-business, in that they weaken the power of labor.
That seems like a great idea.

Timing attacks work when code tries to be fast, taking shortcuts where possible. There's a reason we talk big-O instead of big-Theta: we gladly accept when an algorithm finishes early. This is, in this case, highly undesirable. Shortcuts are great, everywhere but crypto; not unlike recursion being great, unless it's embedded.

A language where every expression takes constant-time to compute seems like a solution. No short-circuiting, no variable runtimes. Don't use sorting algorithms like insertion/quicksort where best-case & worst-case are very different; use selection/merge where best-case = worst-case = average-case. Use constant-time hash functions. Caching is a very prevalent (and somewhat invisible) shortcut that needs to be solved (how can a language disable caching?).

Obviously this isn't fast but you can't have both.
The Varnish authors have specifically stated they didn't want to introduce SSL into their process because of the added attack surface that adds. [0]

If you want SSL for Varnish, use something like Pound [1], stunnel [2], or HAProxy [3] to do the SSL termination and pass it off to Varnish...

I'm partial to Pound because it is lightweight and doesn't try to do any caching, it simply terminates the SSL and passes the request on.

[0] https://www.varnish-cache.org/docs/trunk/phk/ssl.html

[1] http://www.apsis.ch/pound

[2] https://www.stunnel.org/index.html

[3] http://haproxy.1wt.eu
Yeah, precisely. I don't like her either, but I think the appropriate reaction here is "Huh, I guess I'd better keep my eyes peeled because Dropbox might change the way it does things", rather than "OMG it's Condi Rice! Jump ship! NOW!"
I wish the article had more strongly advocated using password managers like LastPass or KeePass. Mnemonic tools are useful but the main point of failure for many is using the same password in many different places, which will inevitably happen as the number of logins grows. I feel more secure not knowing what most of my passwords are, and letting LastPass generate and manage them for me (with a long and strong password memorized for LastPass, of course).
Dropbox dropped for me and my startup. Thank you for this article. I am a programmer with a political science degree, so this one really hit home for me.