skysight-inc/HackerNews huggingface dataset:
This is definitely not a short-term solution, and it might not be practical even in mid-term, but wireless charging sounds like a perfect solution for this kind of environments.

The hospital rooms could have special "charging" spots on the floor/build into the furniture or just a hole in the wall. The patients would charge their devices simply by placing them on the charging spot/shelf. Now there are no potentially dangerous cables or plugs, and all charging can be done without devices leaving the patients' reach, reducing the risk of theft at the same time.

There's already an international standard for wireless charging. The only problem is that it works only with a couple of the current phones, and it's not very likely to appear in low-cost low-end devices that the patients of the mental hospitals most likely to use. But if it ever gets a wider adoption, this would solve a lot of problems...
Re: reducing ligature risk. Would having a rigid cable (i.e. hard/unbendable metal shell) that's short be a reasonable solution? Similar to the indiegogo project posted in a sister comment, but could be slightly longer and cheaper to manufacture.
Doing something properly requires time for preparation. Posting ideas on Sunday is actually a good idea as people have 5-6 days to calm down from the rush of adrenaline (OMG this idea is THE BEST IDEA EVER!), get some research done, prepare the time (some folks have family and need to micromanage their time) and finally do some work next Sunday.
I think pretty artistic impression was the point. Project tried to reconcile art with technology that humans can't perceive. By appealing to our aesthetics this drives home the point that we are living surrounded by information fields that we can't perceive and give little thought to.
Perhaps I've drunk too much of the Unix and Heroku 12-factor kool-aid, but I'm skeptical of the usefulness of some of TrapperKeeper's features:

> a way to cohesively manage the lifecycle of the various components making up an application

I'd need a more specific example to understand exactly what this is talking about, but shouldn't each component with an independent life cycle be a Unix process?

> a common logging mechanism that wouldn't need to be set up and configured by each component

Just log to stderr. Don't even bother including timestamps; an external utility like svlogd can do that (and rotate the logs too).

> a web server flexible enough to load multiple web apps

This one in particular strikes me as an anti-feature, common in JVM environments. In the Heroku 12-factor approach, each app embeds a web server (like Jetty), rather than the web server containing apps. Then you use a front-end proxy like HAProxy or nginx to route requests to multiple apps.

> and to support a rich set of options for configuring SSL

That's the job of the front-end proxy, or maybe even a special-purpose SSL termination daemon such as stud.
The Power of Two Random Choices: A Survey of Techniques and Results (2000)
> It doesn't let the newbie startup CEO...

We're not talking about newbie CEOs here. The big-money "outsiders" are not coming in and wooing inexperienced entrepreneurs so that they can invest in their seed or Series A rounds. We're talking about CEOs of growth-stage companies. These are folks who, even if they're relatively young, have been running their companies for years and have the counsel of experienced advisers. The notion that they're haphazardly and naively choosing to negotiate exclusively with a single investor is laughable.

Andreessen Horowitz's latest $1.5 billion fund is big by venture capital standards. You can't manage a fund of that size by doing tons of small deals. My read on Marc's comments is that he's very concerned about players with bigger money using their leverage to push firms like his out of the type of deals that his firm needs.

In essence, he sees that bigger capital has the potential to disrupt his business in big bank take little bank fashion. For anyone who doesn't know what big bank take little bank is, I'm sure you can find the definition on Rap Genius. The irony.
An attack that reads everything is different from an attack that writes everything; 4.1 doesn't seem to understand that. The latter will just crash the computer like some kind of Core Wars champ. The former can copy out the whole heap! So a writing attacker has to worry about crashing the server or getting caught. A reading attacker can just loop, then run.

The guard pages I believe help---but random guard pages just mean I won't know quite what's protected and what is not. This last week I benefitted quite a bit from being able to reconstruct year old server memory layouts precisely.

In this case, I want a marginal chance of compromise no worse than 2^-192, about the strength of RSA-2048.
I think I may have gotten the KKK idea from freakonomics podcast, might have been this episode. The Oprah things sounds familiar too.
Sorry, I'm on a few threads here trying to figure this stuff out.

Basically, what I want to know is, how does this reduce the spread between some dude trying to sell shares in his venture and some dude wishing to invest his money? I get the role of a market maker in this situation. But what does HFT do to somehow make the two parties willing to either sell for less or buy for more?
Hmm... I'm trying to balance "...a non-technical friend..." against "...P, the class of problems with polynomial-time algorithms, and NP, a class of problems for which polynomial-time algorithms are not known...".

I think this post says as much about computer scientists as it does about computer science.
OK, on the topic of funding charities, an old idea that I haven't gotten around to yet: A JS plugin that companies (or regular folks) put on their blogs, which generates a downloadable PDF of the article people are reading, but have to pay $1 to download.
If money always wins in Washington, why isn't there drilling in ANWR right now? I picked that example for a reason.

Because everything costs money, it's possible for every side of every argument in Washington to level accusations of corruption. That does not mean that they are all right.

And, money is hardly the only corrupting influence in human affairs. Religion, racism, sexism, xenophobia, environmentalism, empathy, and a whole host of other emotions and beliefs power the fights at the federal level. In fact the adjudication of these competing beliefs is the express purpose of our system of government.
I've been compositing some 3d prototypes of our invisible keyboard project into photos for our website.

http://airtype.io/img/houndstooth.jpg
How much protection does this really give? If you manage to hack the web server, then you can quickly feed the HSM/software daemon unlimited amounts of chosen plaintext to encrypt. Would this make it possible to recover the private keys?
The HTML5 Skills Employers Are Looking For
I've only read Conceptual Mathematics; sorry for the confusion.

CM covers Category Theory as a general tool for probing and exploring algebraic concepts beginning as simply as endomorphism and extending all the way out to how it can be the foundations of a generalization of set theory via Toposes... all in a cheery and explorative fashion which really illuminates why the ideas work instead of merely stating them.

I'm not sure what the required background might be, but it's probably pretty minimal.
I've used Django before version 1.0 That's 3-4 years ago. The tutorial is pretty good, though I took my time to understand every bit of piece. At the time the best book anyone could get was The Django Book (http://www.djangobook.com/en/2.0/index.html), which unfortunately has ceased development.

I don't use Django these days but the hard part I remember was using signal. Getting deep into the core to fit needs is hard of any framework.

There are many tutorials just covering the basics of the framework. Then the author stops because eventually the complex stuff like handling long computation, message queue, openid/oauth/ldap integration, load balancer are very project dependent. While that's true, and every tool's author must have some "tutorial" on how to use his or her tool, but this independence (or shall I say decentralized) can be a burden on beginner.

I am very much like to think we should have a book that can cover more tool integration.
To be fair, this link is on a site called "Discover Meteor", whose entire purpose is to elucidate the Meteor framework. It's not unreasonable for the site to assume that you got there from somewhere that already explained what Meteor was, such as the front page, rather than a random HN direct link.
I just want to note that passwords are not the only sensitive information that go through a server you are communicating with. Even if there were no passwords, I would consider Heartbleed just as bad.
Datomic has two free editions - Datomic Free and Datomic Pro Starter. http://www.datomic.com/pricing.html
I'd like to see a site that focuses on the construction of logical arguments supporting various political and non-political views.

I'd like for the system to allow for continued refinement of arguments on various topics and to allow for various branching of thought. That is, I'm not looking for a democracy that rewards majoritarian thought and punishes less popular but logically consistent argumentation.

As an end product, if I'm discussing, say, gun control with someone, I should be able to give them a URL: http://www.xyz3323499.com/crusso/gun_control/ and all of the arguments and important information that I have upvoted, added to, or edited would show up.

Most of this stems out of my frustration with the tedious nature of arguments on the internet. New stories stir up old arguments. Forums like HN tend to rehash all those old arguments with often little thought for the mountains of arguments/evidence already out there. Rather than have new stories refine or even change arguments and their conclusions, most people on the internet just chase their tails in circles.

I'd view this kind of site as a "let's stand on each others' shoulders and provide our shoulders to others" kind of work. With a decent web of trust, I should be able to look at the arguments of the most "respected" members of the site and mix-in their arguments with my own.

I think that a sufficiently complex web of trust would allow for fundamentally different viewpoints on a given issue to thrive because the spheres of supporters of those viewpoints have different value systems. Even with those different value systems, it should be possible at some point to pick out the thought leaders across different spheres that transcend typical Republican, Democrat, Liberal, Conservative, Theist, Atheist labels with arguments that are acknowledged across the board as being internally consistent and factually based.

Yeah, I realize that I've rambled -- but if someone finds value in the idea and runs with it, I'd love to see it out there.
Google invests in Silicon Valley robot-maker Savioke
MOBA sports. That means DOTA or League of Legends style Soccer, Football, baseball, any team sport, really.

Baseball probably wouldn't work, but soccer would be fabulous.

- 5 on 5 with 10 minute halves, every player on the field is a real person.

- Pay to unlock famous players and skins

- Just bring FIFA controls over to a multiplayer game.

- Players can form their own teams and play on ladders.

- Start it in Brazil, then translate to other languages.
I'm not sure I understand what this means. If the HFTs "took their balls and went home", there would be that much less liquidity available as a certainty. The fact that some electronic orders get cancelled doesn't subtract from the orders that don't get cancelled. In other words: the average spread is the average spread regardless of how many "probing" orders are cancelled, and lower spreads are better.

From what I can tell, these issues come into play primarily in two scenarios:

(a) market orders with traders demanding immediate liquidity at the expense of optimal pricing, and

(b) complicated hedged trades in which traders are depending on the synchronization of two different sets of correlated limit orders.
Show HN : Soosci – Redefining social networking
A buddy of mine built #1 once - dont think it really took off though...
> If the hobbyist knows that the code may be used in a critical environment then the hobbyist should withdraw the code or make it very clear its suitability for some task has not been tested.

It's already made very clear in the license that the code hasn't been tested, and comes with no guarantees. How much clearer than that can it be?

Also, you can't really withdraw code from the Internet. Even if you take down the original repository, there may be dozens of forks.
Is sms channel really secure? Isn't it a plain text channel, as opposed to an unencrypted channel?
Any encryption algorithm that suffers from chosen plaintext attacks is considered broken.
Finding RSA keys in Heartbleed memory dumps
The State of Crypto in Python (PyCon US 2014)
That's the one I use and helped her get started with.
Agreed that the effect on the user is the same, for the most.

It does make my life easier in the event of a vulnerability, with little cost to users. Since I can more efficiently respond, the user arguably gets a better experience.

I agree this doesn't solve everything, but it is a strict improvent over our current system.
Yes, but as a customer my SSL is only free for one year :)
"the representative must sit through it and must fulfill..."
That sounds great. You can start lobbying for it to become law. I bet the "representatives" want to hear more of your opinions :)
Agreed. A new cloud hosting service comes out every month...

I would like to see more tools like Sparkleshare/Seafile, that allow some sort of self-hosting.

I simply can't trust these services with my intellectual property. I am pretty sure some of them are stealing trade secrets, despite their privacy policy.

The 'freemium' / 'try before you buy' model doesn't always apply. If I'm not paying, there is an unwritten law of Internets that says Cloud services can pillage all the data. Of course, I am open minded about whether that's the case, but it's always a possibility; especially with the lesser known Cloud services.
I have run unsuccessful kickstarter campaigns, and I think think this is the least depressing way to think about it.

Kickstarter is a way to validate your business model for no money and minimal time. You've just tested your MVP, and the feedback is that it's not what your customers want.

This is pretty valuable, since hopefully by talking to the people who backed your game (and the people here who wouldn't) you'll have a much better chance of making something that is actually wanted later.
Agreed. Really wish this was more of the story.
Interesting, but it looks like it doesn't detect threading errors (concurrent access)?
He? Just curious. Who is "he", Thanks.
Actually you are both right -- omega and omega + 1 (or omega^2) have the same 'number' of elements (there is a one to one correspondence) but the correspondence will not be (can not be) order-preserving. Ordinals are a natural extension of the natural numbers. If you take the natural numbers and add a new element that's bigger than all of them then you get a new structure (called omega + 1) which has the same size as the normal natural numbers, but has one new element which is order-distinguishable from all our normal numbers. Some ordinals, which correspond to a jump in 'size' (like 2^omega) are special and called cardinal numbers.
I think this is a really great idea that could save a lot of poor people a lot of money. It made me think if this recent article from the NY Times. http://goo.gl/IjeL0I - People are paying $400 and more for really simple tax returns.
I've been using BeyondPod for a couple years now. It has a paid and free one and the free one has suited my needs, but its a relatively cheap upgrade for some nice features.
Steve Gibson is working on a system called "SQRL" that does exactly that, and should be very usable: https://www.grc.com/sqrl/sqrl.htm

edit: forgot some words
Maybe something like http://www.riyarchy.com/issue?title=Euthanasia or http://www.crystaltower.co/welcome ?
These are all valid points. I would also like to add that I have noticed when projects fail the first time, some repost months later and succeed.
We have been using clojure for 2 years for testing web apps in our q/a team.

My journey looked ~like this:

1) Managed to get counter-clockwise working, played around with http://tryclj.com/, solved most of the http://clojurekoans.com/, and first ~15 of 99 functional problems that float around the web.

2) what helped, that I have already gone through a course of haskell while undergrad, so functional paradigms weren't that foreign :-) (immutability, laziness, partial application, e.t.c), so if you want to give it a try, you can look at Learn You a Haskell :P

3) we have since moved to python, and when I am sad, I try to write my code without loops, but using (for in) generator for everything, pretending I am still using lisp :P

4) clojuredocs.org/clojure_core/ were quite helpfull but after a year, clojure 1.5 was already out, and lots of functions recieved updated counterparts, so I spent quite a lot of time reading their sources ...
Provided that a large enough private key is used, using a "chosen-plaintext attack" (the kind you describe) to obtain the key should be computationally infeasible with known attacks on RSA/DSA/ECDSA.

Much more likely that they'd just hack the web server and MITM you or something.
And one for bitcoin! And one for nodejs! And x, and y and z! You know what, let's put them in a subdirectory, like so: /h/bitcoin or /h/meta. And we call them sub-HNs!

...
I know about those, but the key word in my post was completely.
IE8 thing is bad because you'll never find it. It should be commented out as an example.
I really thought this thread was a prank or joke when I saw the title. Sadly, it's not. The whole 2.7 / 3.x debacle is a large part of why I I have more or less stopped coding in Python and moved on to Ruby. The community is a large part of it as well.
No new features, no improvements, nothing -- just the same language, for a decade.

Am I alone in being excited by this? I am figuratively drooling over such stability.
I am using http://www.shiftyjelly.com/pocketcasts. That is really amazing. And the discovery have not failed me yet.
Am I the only one who thinks that launching my e-mail client, getting mail, probably scratching around in the Spam folder etc sounds like a fairly hellish user experience?
Not all passwords are equally valuable. Even if you are subscribed to 268 different services, it's quite likely most of them are not of particular importance to you.

One-time passwords are old as dirt. But they're also susceptible to MITM, and when TLS is vulnerable or you send through a plaintext/poorly encrypted channel (SMS), it especially makes no difference. Then, OTPs turn your mobile device or email address into a single point of failure, thus raising interest for their compromise.
Fun. I accidentally used this pattern (minus the timestamp, since it wasn't relevant for my use case) to implement a non-distributed data processing framework on top of POE. It does work pretty well, however, you need to have a way for the actor to block until enough messages have arrived (sometimes buffered operations are the most efficient). I'm not sure how you would do that with the model proposed here.
Just like a founder is often not the best runtime CEO, a founder is often not the best programmer.
"A few months" is short of the required experience for a senior software engineer by an order of magnitude. Engineers without experience cause debt that makes the code cost more to maintain over time. All of this is true.

Why did you start up in the first place? To change the world, or to have a place to hang out, or to learn things? Is there another place you can do that better now, at less cost?

Either find a niche where you are creating significant value in the current state of things, or get out to make room. Ask for a negotiated agreement with accelerated vesting of your options if you're not already owning.
OpenBSD has had two holes in a heck of a long time. By contrast OpenSSL has had a remote execute in 2010, and another 4 in 2002, and is regularly patching DOS's resulting from memory corruption that turns out not to be exploitable.

It is 453,000 or so lines, more than five times the size of xv6. It is ten times as big as PolarSSL. Documentation and internal structuring is wildly inconsistent. Features that make static analysis annoying are widely used. The API is far too low level.

Do you believe this is acceptable in a security library? Do believe that aspiring to the security of qmail or OpenSSH is a reasonable goal, even at the cost of features? Why should I use OpenSSL for TLS termination when formally validated alternatives exist?
Pythagorean tuning
This thread so far has been pretty disappointing, reacting to the headline only, slashdot-style. The article is actually a pretty interesting look at what it takes to get people in Washington to start considering a different point of view, for good or ill.

The interesting part of that is that it's completely reasonable that you have to get people thinking about things like how a search engine should function in a free market (beholden to the users, not the businesses it finds for them), but when it comes down to it, doing that is also fundamentally paying money to buy influence (even if that influence is just "that position now seems reasonable to me"). My initial reaction is to find lobbying distasteful in the same way I find marketing distasteful. An idea or product should stand on its own merits. Of course, it never works out that way: you might want to be noble and not introduce a new bias into the public, but people already have a host of biases, and to get them to even consider something new, you often have to help them get there.

The emails they got under a FOIA request are also interesting in that light[1]. The Post tries a bit to make them sound somewhat scandalous, and I know we're trained by the media to only be interested in smoking guns, but it's interesting in precisely how mundane and completely reasonable lobbying can be, while still being about shaping the entire dialog to be more favorable.

That said, there are some really bad parts here too, like describing SOPA as

> "And, in what Google saw as a direct threat to the open Internet, major lobbies such as the U.S. Chamber of Commerce and the Motion Picture Association of America were mounting a legislative campaign to place restrictions on the sale of pirated music and movies."

ugh. Kind of weird, too, as in the past the Washington Post has given good coverage of SOPA protests and why anyone would be protesting it...

[1] http://www.washingtonpost.com/news/politics/2014/04/12/how-g...
I like this a lot, but maybe market it as, "bedsheets that can go for weeks without smelling"? I assume the lack of bacteria will solve that problem? Take the focus off of how it doesn't need to be washed, which will imply to a lot of people that the sheets are accumulating dirt, and turn the focus onto how this is actually a win for hygiene.

I'd buy these. I'm terrible about washing my sheets. I'm pretty sure a lot of guys are.
Capitalism isn't working and here are the reasons why
This entire article assumes that "it is pretty inconvenient to have to put every single one of them into a password manager" and then goes on to make that case that it's preferable to check your email account or phone for a temporary password???

Just from a UX perspective - security aspects aside - this is worse by a magnitude. Password managers are nowadays a single click in your browser. Use them.