skysight-inc/HackerNews huggingface dataset:
Talk on how to get more engaged users
Here's a talk by ex-Flurry Marketing VP Peter Farago that could interest those of us who want to get more engaged users.

http://www.eventbrite.com/e/best-practices-for-lean-user-acquisition-and-engagement-tickets-11013470587
Product SPAM on Sourceforge.net? Anyone have a contact to advise?
No. Not only is Sodium (more accurately: NaCl) not a TLS library, but it doesn't even implement the primitives that TLS needs; it can't really even serve as a component of another TLS library.
I'm really excited about this. I recently installed Firefox OS 1.4 on my cheapo ZTE Open (it came with 1.0), and the difference is huge. I thought I heard somewhere that they are shooting for 2.0 in July.

Ignore everything this article says about the Geeksphone Revolution, though. Geeksphone has dropped the ball so many times with that device; they seem to be pretty incompetent, to be honest. Some owners have said that the Revolution's build of Firefox OS deviates pretty far from the official one -- who knows if you'll be able to get 2.0 on it easily.
Have you tried https://www.gitlab.com/gitlab-ce/ ?
Had Dropbox put former Vice President Dick Cheney (male, white) on the board, I suspect the firestorm of controversy would be far, far greater. As for "make up stuff about her," her comments regarding the Iraq war are on the record and are not fabricated.
It's not either or.

We see lots of our users and customers adopt nginx for SSL termination and as their webserver, but still use Varnish for HTTP caching and/or routing.

The power and flexibility that VCL offers is pretty much unmatched. Specially with the ability to extend the language through Varnish Modules (VMODs). You can see the VMOD directory on our site: https://www.varnish-cache.org/vmods.

Even better, in Varnish 4.0 all Directors are VMODS and they can be nested, basically allowing for dynamic backends and all kind of Layer 7 load balancing you can dream of.
I think it would be awesome to be able to commit README for your user page. It would resolve the sorting problem too - you could just list your projects the way you like it (even with description for each of them).
Understood, sorry about that.
> I am proud to have always been vocally against the war, torture and the Patriot Act. I will continue to oppose the people who led these efforts and oppose anything they are involved with, staying true to my own personal values requires this.

I hope this extends to opposing the Obama administration, which has continued and extended war, torture, and the patriot act. If the tech community dumps anyone from any party who supports these policies, that's awesome.

Marissa Mayer at Yahoo, Mark Benoiff at SalesForce, Sergey Brin and Eric Schmidt at Google all gave large contributions to Obama, who extended the patriot act, defended bush torture, and maintains a 'kill list' that took the life of an american citizen without trial. None of them are getting this kind of outrage.

I would love it if they were! I'd love it if we held these tech leaders accountable for the horrendous policies their supported leaders have put in place. You can't say you value your users' privacy and then give money to candidates who don't share that value, unless you say "but these other policies that he supports matter more to me" - and then fine, give us a list of what you value more than protecting my privacy. Show me where I fall on this list of yours. A president who decides he supports gave marriage when it's poitically convient is not as important to me as a president who insists on defending my privacy.

So far this looks to be partisan. I hope it isn't. To be honest, I miss having GWB as a president, because then the smart people were all outraged at the horrible stuff the president was doing. Now the president is still doing the same horrible stuff, plus some new stuff, but the smart people aren't as upset anymore.
Right, sorry! I tend to forget they're not literally next to each other since they're both nuclear security labs and in the same-ish area.
Think about what it means to the HN culture to have a subject that normally would have been flagged out of existence as overtly political suddenly be featured front and center

It means that a bunch of people who once thought they were somehow above or apart from politics find that they are not, and that the things that happen in the world constitute news of real interest to hackers. That's growth.

It's also misleading to talk about this as an issue of ideological purity. People talk about purity when the politics of the public figure in question are not extreme enough. The problem is that she helped start a war that killed rather a lot of people, none of whom are now able to lend their voices to the discussion, and those who wish to remember those people are obliged to speak on their behalf. You don't mind her politics, and that's cool. But no one's forcing me to pay Dropbox anything. So I won't anymore.
I don't really call this "Outsourcing." I call it smart hiring.

I have two teams -- one in Cincinnati, and one in Walnut Hills, CA. On my teams, I have a blend of about 60% onsite and 40% remote workers. I pay equally across the board, with the guys in CA getting an extra $1K/month due to the insane cost of living. I hire wherever I can find talent, and I find technology that works to bring us together as a team regardless of our location.
> Nuclear weapons are hard to build

True, but I said "building -- or buying" nuclear weapons. See generally http://en.wikipedia.org/wiki/Abdul_Qadeer_Khan#North_Korea.2...

> Even if Iraq had managed to obtain nuclear weapons, they had no way to deliver them anywhere.

The possibility of a nuclear weapon concealed in a container aboard a cargo ship was a non-trivial concern back then. See also http://en.wikipedia.org/wiki/Suitcase_nuke.

Remember that Saddam Hussein was not exactly a model of transparency.
Note that NSS contains a classic certificate verification engine, which was originally written in C.

The above statement refers to an external contribution that was added to NSS. It added a second validation engine to NSS, libpkix.

It's true that the libpkix portion is very complicated code, but the above statement doesn't apply to NSS in general.
As a self-taught developer trying to break into the industry, I would happily compete with them for an entry level job (I'm 25).

Goddamn lack of a college degree holds me back over and over.
HP admits to money laundering and bribery charges
Prescribing Idaho stops would be even better.
You can see the CT peoples' comparison of CT to other technologies here:
http://www.certificate-transparency.org/comparison

One serious concern I see about TACK from the browser's perspective is the support burden of dealing with server admins' lost TACK keys. HPKP has similar risks, but it seems to manage this risk in a way that is more comfortable for browsers to deal with. However, I also think that at least at Mozilla we've become more worried about the risks of HPKP than we were originally, and so there are plans to build the same kind of mechanism for dealing with DoS due to HPKP that a browser would need to build for TACK. It may be too late to get browsers to do TACK because they seem pretty committed to HPKP already and it is harder to convince them to do both. However, if you still want to try then I'd suggest presenting more clearly how browsers could deal with the "I lost my TACK key" scenerio.

The other major negative thing about TACK is that it requires the server admin to do work that can't be automated in a way that is reasonable (because the TACK key should not live on the web server). HPKP leaves more of an open door for future web servers to automatically apply it automatically (e.g. by generating pins for the end-entity, intermediates, and root keys in the chain, on the assumption that the server admin will never lose control of the private key of the end-entity at the same time he/she needs to switch CAs) or with very simplified UI.
I wonder why Ada is not widely adopted by security community. GCC supports it for ages and it is as fast as C
The real question is, how hard can it be to do that while starting with OpenSSL compared to starting from scratch?
it's a logical device. it is not always a logical fallacy:

http://en.wikipedia.org/wiki/Slippery_slope
London's public bike data is telling everyone where you've been
"pro-capital" isn't necessarily the same thing as "pro-business"; non-competes, in particular, reduce labor market mobility, which reduces overall market efficiency in the same way that barriers to capital market liquidity would.
> Your comment and the fact that it's the top-voted one are disturbing in what they imply about the moral attitudes of this community.

I can only presume a large chunk of the SV and HN commentariat would have considered the most important thing about the 50s and 60s black boycotts of segregated businesses in the US south was the "victimisation of business owners."
For sales people I see a value in non-competes. I own a company which can run successfully with 100 clients. If I hire a sales person who builds good enough relationships with 50 of our existing clients such that he takes them to another company, he could cut our revenue in half. Why is that supposed to make me want to set up my business in Massachusetts? This announcement would seem to make businesses less competitive in my mind. I'm just going to look for competitors in Massachusetts who's sales people I can cherry pick.
Snowden's files predate the existence of this vulnerability.
When you factor in the cost of living it's not an "excuse".

If, after the obligatory expenses like housing and food, the employee has more after tax dollars to spend on whatever he wants and in many ways a higher quality of living (better housing, better control over crime although that's looking to change WRT California, etc.), is he getting cheated as you imply?

I've lived in the Boston area and the D.C. area for a dozen years each, and have now moved back to my smallish home town in SW Missouri ... the differences are staggering.

Look at imroot's policies: https://news.ycombinator.com/item?id=7568217

Officially the same pay, but the people in California get an extra 1K/month for their higher living expenses. Heck, the Federal government does this for civil servant compensation.

Flip side: if the company is nasty, it'll tie up it's outside of California employees with non-competes---although that could be a bit tricky, given that it would get no support in the California state courts. How would you establish jurisdiction in the employee's home state?
As others have noted, it's less about the compiler running code and making determinations as it is using extremely robust, information-rich types. For instance, the Vector type in Idris has two type parameters (not sure that's the correct term to use in this case): the first is the type of the element contained by the vector, and the second is the length of the vector. Operations that increase the size of the vector are guaranteed to return a non-empty vector. They might look something like this:

(::) : a -> Vector a n -> Vector a (S n)

This says that an element cons a vector of any size results in a vector that is guaranteed to be non-empty. This means that you could safely write a function to retrieve the head of a list by restricting the type to lists that are guaranteed to be non-empty.

head : Vector a (S n) -> a

Something like the following pseudo-code in a REPL(I don't actually know a thing about Idris):

let nums : Vector Int n = []
head nums

...would fail to compile, since the second type param to nums is simply `n` rather than `(S n)`, as required by our `head` function. All of the things you would expect from Haskell like the power of ADTs and pattern-matching apply here, so you get even more compile time type-soundness.
I can't really handle this... Is this what we've become? So short sighted?

I know few who didn't want to blow up the entire middle east after 9/11, right, wrong, or indifferent. I'm also fairly sure government was relatively in agreement about the war when it started.

Unless you hold EVERYONE in the current administration, and everyone in government in general for the past 20 years regardless of party to the same standard, stop it here.

Torture? OK. Hasn't stopped.
Stealing of information? Hasn't stopped. Didn't start with them, if you don't believe that, you're ignorant. Just obvious evidence of it starts here.

In the end, do you think that DropBox leadership didn't think about this? I hope they did, and were prepared for it.

I'm rambling a bit, but some of the anger here I guarantee won't be directed equally.
Shouldn't crimes be tried in courts and not online petitions? Does a majority of users get to decide if you've done something wrong enough to disqualify you from a board? A vocal minority?
Was thinking of running my own server/Dropbox replacement for awhile now. This news is just the kick my rear needed to put my plans in gear.
Expanding Google’s security services for Android
The US has this as well -- registered mail, which provides a full chain of custody for the letter. It's also a serious crime to provide fraudulent identification.
Can anyone who actually understands what the upgrade document states do a how to or a straight modification of a popular vcl, so people who don't have as much experience and pretty much just use these default vcl files?

Here's one that I and a few of my friends use routinely:

https://github.com/ewanleith/Wordpress-Server-Configuration-...

Like where do I start if I want to use this thing with 4.0?

vcl_fetch needs to be renamed, will this work if I just rename it and add vcl version to the top?
Dropbox doesn't matter. Your money does. It speaks volumes about you that you are outspoken on ethical issues except where your wallet is. Like the vast majority of Americans. Of course, that's precisely the attitude that gets us gay marriage (good), two wars, a dying environment, and an absolutely unsustainable economy based on putting our lower class out of work.
Sass2Stylus – Convert Sass or SCSS to Stylus
I still think there are valid and sincere reasons to be surprised when someone doesn't know something and it's OK to express that surprise. Especially in private conversations!
I am not sure about 6 months, I guess it could be 2 years instead.
Though Ryan disagrees strongly, I think this is unfortunate. I think a case can be straightforwardly made that NSS is the better library. Here's a shotgun blast of reasons:

* NSS has more institutional constraints; random people in Germany can't, as a general rule, add support for new TLS extensions to it.

* NSS has a clearer identity, as the TLS core for Firefox and Chromium. OpenSSL is a grab bag with hundreds of different stakeholders.

* The most important code in both NSS and OpenSSL is the SSL state machine. The code for that state machine is incontrovertibly clearer and better expressed in NSS.

* NSS has had better battle-testing as a clientside browser TLS library than OpenSSL, which, apart from Android Chrome, isn't a big factor in TLS clientsides.

I don't know that anybody loves NSS, but my perception is that more people believe OpenSSL to be hopeless than believe NSS to be.

Talking to Brian and Ryan on Twitter yesterday, I proposed that someone generate a list of questions to ask of a TLS codebase --- "what's the code path from first ClientHello to validating the public key signature in a certificate", or, "what's the code that determines which extensions are enabled" --- and we'd take a shot at answering them for NSS, SecureTransport, and OpenSSL. My bet is that the answers to those questions will be more favorable for NSS, even with the crappy certificate handling.

Maybe a fork of NSS would be a better plan.

However, to head off the drama HN is probably looking for here: one inevitable result of Google transitioning fully to OpenSSL is that OpenSSL will get a lot better, probably quickly.
Thank you for educating me, I didn't know that. However, I feel that in this case, my point still stands.
>isn't really about upholding some strong high-moral consistency that we all have.

YES, it actually is!

The issue is that Rice is a known, singular, actual person wh was directly responsible for the war, death and corrupt profiteering by the defense industry.

Whereas, its much more difficult to connect an actual individual with something like "amazon building a data center" (Yes, you can hate on Bezos - but he did not start a war killing thousands of people on trump up pretense AND get caught actually lying about said pretense)

Condi is a war criminal.
For those comparing this to the ouster of Brendan Eich: It seems to me there is a distinction in that he, despite his ignorant views, was able to keep them separate from his work.

Making this country less free and more war-like (e.g.; less safe) WAS her work and she did it all too well. Her ties to the NSA alone are serious cause for concern. Do we really want someone in a position of power at a place that stores massive amounts of (supposedly) private user data?

I already removed 99.9% of my data from Dropbox after the NSA revelations with the assumption that the latter had access regardless of whether Dropbox was complicit. I assumed they weren't. With former Secretary Rice on the board I now assume Dropbox will become complicit and so I will delete my account altogether.
Mutable fields are really hard to use correctly in any language, and that's why Clojure encourages the use of immutable data. Thus I find it really odd that the article builds a mutable binary tree. The immutable version would have been equally simple. And now you can't put that tree into any of the Clojure's reference types (ref, agent, atom).
Yes. Drawing conclusions based on isolated events, without attempting to understand the reality or the context in which those things happen, and without hearing the other side of the story, is a good indicator of ignorance.
A-ha! Looks like HTTPS-Everywhere was messing it up. After loading it Incognito it worked.
It was clear that none had been purchased or were being purchased soon, either. Again, there's no rush. If and when it happens, then invade.

Even the most strident proponents of invasion were talking about buying yellowcake, not ready-to-go nuclear warheads. That wasn't put forward as a possibility by anybody.
Maybe my repos are a bit more popular (they're connected to a blog I write), but I've noticed that my best repos get pushed to the top by how often others star them.

Still, couldn't you use the username.github.io to feature your repos? Or at least have a prominent link from a github profile to that page?
Which is the typical point in which Theo de Raadt is right even though he may be saying so quite singularly.

This is another instance of the lack of 'engineering' in Computer Science/Programming/you name it. Engineers have long ago learnt that you need "automatic" standards and compliance before, during and after building anything, and that the best practice is always assuming thing will go wrong.

This, unfortunately, is not the case with programming as we can see time and again.

But I digress.
Haha, not intended to be an easter egg at all. That message happens for any non-Organization-owned, non-private, non-owned-by-you repo.

eg hit https://github.com/mbostock/d3 then https://github.com/contact

Just reads a bit funny in the case of https://github.com/isaacs/github :)
Eh, there's no way that Rumsfeld memo is "How to start a war". Note that the first reason depends on Saddam attacking the Kurds - not very actionable for the US!
Judging from this story (http://www.theglobeandmail.com/report-on-business/careers/ca...) it would appear that the Ontario courts are pretty firmly on the side of non-competes being unenforceable. "In short, most non-compete clauses are excessive, and thus will be upheld only in very limited circumstances."
> Yeah, many of us did exactly that back in 2007/2008. We nominated and worked hard to promote and to get elected a politician we believed -- based on our candidate's deeply-persuasive statements -- who would be "different". We did much more than vote. We built amazing software systems for our candidate, went door-to-door in places that almost got us shot, worked 80 hour weeks at the grass roots level, and in some cases estranged ourselves from our families. And of course we voted for him.

There are separate laws protecting IP directly, so you don't need a non-compete to do that any more than you do to protect company physical property. And specific restrictions on the use of proprietary information that isn't IP in the strict sense are often enforceable when non-competes (provision prohibiting someone from working in a particular field or capacity) are not.
Cool, but what does this have to do with OneBusAway? (the service depicted in the monitor in the photo accompanying the article).
Regarding point #5. If the performance of OpenSSL was terrible we would not be having this discussion. This is system level component which must pass all encrypted traffic.

OpenSSL is ubiquitous and runs everywhere including phones and low powered VPSs that everyone is using. If OpenSSL burned RAM and CPU cycles for the sake of correctness, alternatives would appear. The hard part about developing a library like OpenSSL is it has to be fast AND secure.
I thought the whole point of markdown was readable document source you didn't need fancy editors.
First off, I am no conservative.

I would contend that the Hollywood blacklist of the 1940s and 1950s is comparable with what is we see here; then as now, a group of people with certain political and social views are being excluded and ejected from jobs solely because of their activities outside of the job being denied to them.[1] Those blacklisted in the 1940s and 1950s had "freedom of speech", but not "freedom from social and business consequences". It is difficult to make a principled distinction between what we see happening now, and the 'McCarthy-ist' wave of the 20th century, which is oft described as ideological intolerance.

[1] http://en.wikipedia.org/wiki/Hollywood_blacklist
Ok, I really hate so say this, but this has hardly been the first time the US has gone into an unnecessary war. While you have also entered necessary wars, for which we, the other western countries, are truly grateful, you simply cannot say that with the Bush administration this is the first time something like this happens.

For me, an anonymous person living in the Netherlands, it feels like these things happen whenever a republican president is elected. The world expects this, goes along with it, and personally I'm afraid of what will happen when the first republican president post-Obama is elected.

Giving dr Reece this much heat is unfair and missing Grellas' very important point: just like freedom of speech is very important to a free press, freedom of political beliefs are very important in a free market.
>Think about what it means to the HN culture to have a subject that normally would have been flagged out of existence as overtly political suddenly be featured front and center

We've all been learning that large technology companies cannot escape politics -- whether it's Edward Snowden's revelations or Turkey's ban on Twitter. Seeing this conversation here may have less to do with a changing Hacker News culture and more to do with a realization that technology & politics are intertwined.
> Don't we still have to then trust whoever is hosting the server returning the json?

It's assumed that you find yourself (or a close friend) trustworthy.

DNSChain is designed to be run by individuals, with no powerful deciding authority (like browser vendors) deciding who you should trust (as with CAs today).

Today, you trust the least trustworthy of hundreds of organizations that you've never heard of.

With this proposal, anyone is free to trust whoever they want, and they can change that instantly without any browser updates or anything along those lines. It's about as trustworthy as you can get.
NYC restaurant Googles every guest before they arrive to dine