skysight-inc/HackerNews huggingface dataset:
> I listen to his weekly Security Now podcast and without failure he is well-prepared, thorough, accurate and correct. Even when he makes a small mistake next week he comes along, specifies the exact mistake and apologises and corrects it.

> Perhaps he made some mistakes or took controversial positions like ... when? 10 years ago? and people wont let it go.

According to archive.org [1] the password haystack page [2] is from June 2011. He hasn't changed his "controversial" opinion on that matter yet.

[1] http://web.archive.org/web/*/https://www.grc.com/haystack.ht...

[2] https://www.grc.com/haystack.htm
> But the bottleneck is somewhere else entirely. It's thinking in terms of models. Formalizing and abstracting what we know intuitively about the world and about the things we want to automate.

This is a bottleneck but one that exists even without programming.

In my opinion, the biggest bottlenecks are two fold. Software frameworks are coded to be coded against and the abstractions we use to communicate between sub-systems in programming languages require us to code (parameterized sub-routines).

Software frameworks that are composition centric (you hook up parts instead of calling parameterized sub-routines) make programming a lot easier. You don't even need to code against composite centric frameworks: you can just hook things up using general purpose VPLs.

Parameterized sub-routines lead to way too much specialization of interface making software frameworks both difficult to use and not composition centric. This is why we have to code against our software frameworks. I also feel that parameterized sub-routines are the reason why "there has been no progress since the 1970s".
The yacht is mentioned in the article.
> Programming for non-programmers is an oxymoron to begin with. Even using Excel is programming.

Ya, it should be something like "Programming for non-coders". We used to say we would "program our VCRs". Somehow programming has become synonymous with coding but, as you pointed out, using Excel is programming.
Automatically answer to new craigslist posts from your (G)mail account. (Node)
Automatically answer to new craigslist posts from your (G)mail account using Node.js
There is no mobile agenda. Maybe when GTK4 comes out.
Anyone has any idea on what license does it have? What can be legally done with that book?
They say they have 100 pending contracts... I believe their funding strategy could be fixed by hiring people to do the contract hours for a salary (those don't need to be OpenSSL core hackers, just good enough with the core of OpenSSL to help customers and provide viable work when a modification is requested). With the money you earn you also pay the core team members to just work at OpenSSL with the right priorities: this is where you improve security, do refactoring, and trow away #ifdefs.
Have you used GNOME 3.10 or any recent one for at elast a couple of days?
yes, I love this too. Why I build my own because hn.premii.com take off all the css and others in HTML, and some website it cannot be parsed.

So I use the iframe to build Coder's Read. But I am still using hn.premii.com when I use mobile.
thanks rex_gsd. will look into this option definitely.
Yes! There are other apps too, like Instapaper, Readability, etc. Pocket looks good, and it has browser extensions so you can save the current page with just one click. The app is one of those most beautiful apps I have seen on Play/App store.
I was once talking to someone with a lot of experience in this field and he said that false positives were one of their biggest problems. If you have too many false positives programmers end up deciding the analyzer is full of crap and either dismiss the results entirely or gloss past many ultimately useful results.

A static analyzer that will actually be used can't have too many false positives, and this is the big challenge with these things. He said that allowing some false negatives (to cut down on false positives) made the tools more effective in actually solving problems.

That said, with something like openSSL, you do sort of just wish the programmers would deal with it. Language design should include elements to make these sorts of static analyses easier.
yes logn. I have got this suggestion a lot and I must say I never thought about these markets before. But I will definitely explore this potential.
Fantastic idea, and I must say, I do love your engagement here on all the feedback being given. Sounds like you've got quite a well thought out and developed product.

My money would be on starting a kickstarter or something like that with a few niche markets. The pillow case idea is a simple one as are camping/travel outlets. This will give you proof that your product can sell.

Next step really depends on whether you want to get involved in ongoing manufacturing and marketing, or work more in the background by licensing your technology to others.

Glad to hear that you have patent pending on this too - the last thing you want is to license your product to someone and then have them copy it and move you out.

Good luck with it.
Depends of it's popularity a good paid app can have thousands of downloads so even at 1$ you could get a real profit.

Your app could be nice but please follow theming guidelines:

http://developer.android.com/design/style/themes.html

Some inspiration

http://holoeverywhere.tumblr.com/
thank you natch. I have gone through your message and the idea is really clever. I am using it :).
I think this was an area for which the writer simply wasn't as well informed. Titanium and steel are both capable of fulfilling the requirements, but titanium is very difficult to work with. (Lockheed had particular trouble with it as well.) It's more ideal to use because its so much lighter, and increasing weight is the bane of any aircraft's existence. The Soviets would have preferred this, but they couldn't overcome the machining challenges, especially not in the scale required to build the numbers required. So they went with the safer, if less ideal alternative. And since the Soviet system did not exactly encourage discussion of shortcomings, and the "simple is better" tradition fits well, its not far to see how the "steel is better" explanation became the accepted one.

All that being said, I point out that the plane did what they set out to do, and regardless of whatever compromises had to be made, it was an aerospace achievement.
> And second of all - isn't the feat of "counting money" the root of most of mankind's biggest problems?

This, and long-range planning. No mass-scale killings would've ever happened if it wasn't for the human ability of long-range planning.

Out with the long-range planning!
Read all the Tech News much much faster : http://skimfeed.com/
> Provocation: Letting Ukraine voluntarily choose closer ties with the West

, Learn how the "voluntary" choice is imposed on the Ukranie. Member the Maidan, totally supported by west to capture power in Kiev. They did it violently, using neonazi squads on the streets. Now, the russian TV, history and language is banned in Ukraine, which means that everything is ready for the "voluntary" choice. Member Nuland in Youtube dictating who will be the next prime minister in Ukraine. This is how "voluntary choices" are made.

> Not Provocation: Invading and annexing the Crimea

you. Say that: "Russuans (the population of Crimea) are biogarbage and have no right to make their choice".

http://www.google.com/translate?hl=en&ie=UTF8&sl=auto&tl=en&...
For #2 : Try Betterific https://betterific.com/

Does pretty much the same thing, allowing users to post ideas/problems/solutions.
I'm working on a project called Whybase that does exactly that: http://whybase.com
Currently, programming requires critical thinking and coding.

Enabling people to become critical thinkers is a much bigger problem than just programming: programming will always require critical thinking.

Making programming a computer easier is a difficult problem to solve but very solvable as long as we assume that programmers are critical thinkers.
Nope. People will remember it as "remember all that work as a result of OpenSSL?"
Validate data with ease, Finitio.js is out
I wish more people understood and accepted this. It seems like every other day I read something which is wistful for a bit more 'enforced equality'. Ther can be no such thing, nor is it desirable. People have different talents and different levels of motivation. As such they produce Inequal results - and that is just life. Trying to prevent inequal results can only be done through force in the end, so a prison is the result.
Understand the way of the Samurai and you're half way to understanding the Japanese.

Shame, dishonour, pride.... these are words that stem from the Samurai way.

"Measure twice and cut once."

Advice to those who care, watch a few Samurai films and you'll get it.
Determining what's "interesting" here isn't so arbitrary. This post is no doubt interesting to customers of the bank, as well as to connoisseurs of PR disasters and internet indignation (cf. the submission title), but all that is outside what has traditionally counted as "interesting" on Hacker News, and I see nothing else in the article. If you do, please point it out.
For what it's worth, at least renters have some protection from the FCC (on paper, at least) when it comes to antennas:

"The OTARD rule allows local governments, community associations and landlords to enforce restrictions that do not impair the installation, maintenance or use of the types of antennas described above [...]"

http://www.neighborhoodlink.com/article/Association/FCC_Sate...

Given that many areas mandate minimum parking requirements for development, I don't find it too hard to imagine the same for charging. (And as a long-term renter, I'm sure it'll still be a pain in the ass for years to come.)
I'm using Flightplan (https://github.com/pstadler/flightplan) which was posted on HN a while ago. All it does is provides a thin layer (albeit one with liberally applied DSL) on top of SSH which helps manage production/dev automated deployments.
I'm curious now I've seen the word 'breaks' used quite often in car related topics (instead of brakes), is that a type-o/error or is it a local thing? It was also used in a (non quoting) reply...
carljoseph, the feeling when somebody validates your product is incredible. Thank you so much for taking the time out and replying. You can also signup so that once we launch you can help me spread the word :). Thanks again
I'm in the middle of the book. Point 10, "Without co-location, the investors will fight for the spaces close to the exchange -- across the street, a block away, 2 blocks away, etc.", seems to my unsophisticated reading to be already directly addressed:

63.36%: "The NYSE had ... built this 4000,000-square-foot fortress in the middle of nowhere ... the moment they announced their plans HFT firms began to buy up land surrounding the fort ... the NYSE somehow persuaded the SEC to let them make a rule for themselves: Any banks or brokers or HFT firms that did not buy space inside the fort would be allowed to connect to the NYSE in or of two places: Newark, New Jersey, or Manhattan. The time required to move a signal ... undermined HFT strategies ... "There was a precedent: They'd let NYSE do it,"..."

So to my unsophisticated eye, this sophisticated reviewer is blowing a bit of smoke. Not all smoke, but a bit of it at least.
And they have no spare money for such projects. Ideally you would bundle the meshnet with cheaper lighting.

Something similar is mentioned here:

> Philips’ LED street light poles will now include small cell mobile telecom equipment from Ericsson that cities can rent to telecom operators. The payments from telecom providers would then help pay for the infrastructure.

http://spectrum.ieee.org/energywise/green-tech/conservation/...
Another red flag Doc doesn't mention here is the fact that Mozilla now requires extraordinary knowledge to disable JavaScript in Firefox.

There are broadly useful reasons to have this available as a toggle in the common UI (such as when you want to save an image from a site that uses JavaScript to prevent right clicks), yet it's hidden inside of the cryptic (to most users) about:config.

And why might this be? There could be several reasons all in play at once, including an attempt to protect users from themselves (think: The Nanny Browser), but I would just point out that the advertising infrastructure Mozilla increasingly relies on, with its cross-site user tracking, leans heavily on JavaScript.

It would appear that with that as a counter incentive, Mozilla has chosen to side with the ad networks, instead of with the users, in choosing which options to expose for easy control.
Cc -Osmartass
JS and Node Recipes
I still much prefer http://hckrnews.com

Looks so much nicer than any of the others IMO and is easy to filter. I wish all news sites were setup like that.

Edit: I love to see all the things people do with HN even if I don't use them. Does anyone have a list of HN augmenting sites?
NASA announces the first greenhouse in space
> It's not hard to imagine rote programming becoming a universal skill

Rote learning is a process of memorization that maps from an exact context to a specific answer ( 3 * 3 = 9).

Writing a program very rarely has the exact same context by which a rote learner can map a solution to. There may be aspects of a program that can be mapped to a specific solution but I really feel this will never be the case for an individual coming up with a complete solution to a unique, never solved before, problem.

Critical thinking is required to come up with a solution to a unique, never solved before, problem.
Which endpoint do you use to filter by date?
Why you should consider a standing desk
Most roads in the Netherlands have simple red or white reflectors every 50 meters or so alongside both roadsides, and/or in corners. Some areas have cat eyes, but that's very area-specific, not a national standard. Most roads have just white markings, which are only really visible when there's headlights on them - they become very hard to see when it's raining though. I don't know if these would solve that latter problem either.
"The relationship between McDonald's and Coca-Cola is based on a simple hand-shake."

...

Look there is no reasonable discourse possible with idiocy like this. If you think a sustainable business is possible without covering your legal grounds, I'm wondering if you'd be interested in this bridge in Brooklyn I have for sale. Blanket statements like 'the US spends a much higher share of its GDP on lawyers' don't mean a thing without a proper understanding of the legal system, business culture etc. It is obvious from your postings in this thread you know nothing about what lawyers actually do for a business, in the US nor in Germany, and that your statements are based on what you see on TV and blind prejudices.

(disclaimers: I have a law degree but have never practiced. I'm not an American, yet I have spend amounts on lawyers the last years that you probably feel are obscene, and this in a country that is considered similar to Germany in its look on lawyers, and they were worth every penny, and then some. I have also paid dearly in the past for not doing things the formal legal way, including in Germany.)
I hope your research leads to the correct conclusion that trying to force people into equality leads to the use of force to stop dissent, and leads people to flee or campaign against it.

Socialism ends in death and misery, every single time. At this point death and misery is a feature, not a bug that can be fixed.
This is very exciting.

I know some don't like hearing this, but it's possible that we don't understand how we're mechanically connected to this world, or the physical experience, or what the physical experience actually is, what 'systems' are employed to manufacture an experience within our 'conscious' mind, or what even the consciousness is.

The future is NOT an extrapolation of data we have today, hence our vision of the future in the 1920s was so 1920s looking.

We are using a brain that we could not replicate, it's a complex biological machine we don't understand. We can't pretend to know how it is connected to the world around it. It may be a 'lens' for our consciousness to operate in this physical environment, or just a fancy computer. We don't know.

Some feel this is a big step, we just 'know it' due to whatever network our brain is connected to, or perhaps due to delusion?

TL;DR; we are just starting out, this is a great start.
They used their patch for some length of time, release it to the community and a few hours later a bug is spotted and fixed. Peer review is a good thing.
Look, I like open source as much as the next guy, but this is myopic - one might as well say 'remember that one time we used open source stuff and we had to spend weeks scrambling to fix things?'. Please let's not fool ourselves into believing things that simply aren't true - it detracts from the things we can leverage.
If you live on the other side of the world, filtering by date is an issue. If you connect from Asia and with most of the activity on HN coming from the US, there is little to see during our mornings. I expect to see what I have missed on the last 24 hours without have to change the date manually.

Perhaps you can show a the top 10 (or 20, or xx) of the previous day with visual separation so that I know if was submitted earlier.
86 websites from top 10k alexa list still vulnerable to heartbleed bug
"Developers have steadily marched upwards from Assembly to C to Java to, today, scripting languages like Ruby and Python."

Downwards in terms of language design though, you can add JavaScript to the end of that sequence to make it even more obvious. Otherwise we would've been using a some sort of sane syntax version of Haskell by now. If software is "eating" 'whatever' then computers should be doing more for you not less, hence even more pre-runtime checking, not less.

"... allowed hundreds of millions of semi-technical people to become software developers. ... these tools act as a force multiplier for the software industry."

Multiplying the code mess professional developers will then have to maintain? Example: converting Excel and Access spaghetti into sane programming models in finance.
> "Bring back Firefly for another season #FlyAgain"

I for one back this request with a passion! Best series ever. What were they thinking canning this?
Is this the video you are using for your entry?

Hadn't heard of The Summit. Are they actually basing their decisions on the popularity of the entrants?
Ask HN: did hordes of hackers swoop in the first hours (minutes) of Heartbleed?
I have this idea that there are hordes of hackers who create a hitlist of target websites that they want to hack.

They then just wait until the next exploit comes along.

And within hours (or minutes) of the new exploit becoming public, they swoop, own their target site and rootkit it.

Does anyone else think this is true?

And if it is true, then has half the Internet been rootkitted long before the sites owner could update SSL?

AND......so you updated your website - good on you. Do you think you had already been rootkitted?
my 2 cents:
http://chiragjain.tumblr.com/post/19578015287/startup-ideas-...
Those that gave this negative points, care to share why?
Drastic upgrade of the most popular device on Earth
Who moved to Java? Write once - debug everywhere.
I would be interested, I'm getting daily HN mail and I use http://theoldreader.com/ but I have to many feeds to read them all so a mail would be nice.
Until it becomes difficult to work with and is perceived by someone as slowing them down, at which point someone will come up with the bright idea of typing the io channel to a suitable type for layering an untyped stream over.
Picks: دراسة: تناول مضادات الاكتئاب لرضاعة أكثر نجاحًا
New Banksy? Mural near GCHQ depicts agents listening in on phone box
Ordinary users do not want to disable JavaScript. Hell, they don't even know what it is. Advanced users like you can still use NoScript or about:config.
The MIT Lockpicking Guide
I am a big proponent of remote hiring and working - good for the developer, and if done right, good for the company.

But boy it takes some work to get a remote worker as productive and plugged in as an onsite worker.

But the very minute the whole company is not on one site, remote is the only way to go. Got two sites and no remote ethos - congratulations you now have two companies. Got two floors on the same building and no remote ethos - hooray, two companies.

it's a management and cultural shift - measuring by results, good upfront grooming, in estment in tools, reducing schedule pressure, quality above all else - the list is long
"You are absolutely deluded, if not stupid, if you think that a worldwide collection of software engineers who can't write operating systems or applications without security holes, can then turn around and suddenly write virtualization layers without security holes."

Theo de Raadt, 2007
Or you could just install noscript.

Do you think your average user would know to click a "disable javascript" button when they find right-clicking an image blocked anyway?
The Hello World Open 2014 – Slot car racing simulation contest
Ask HN: what are your ideas for a secure website?
Does anyone have any new ideas for how to make a secure website?

My idea is for a "compiled webserver" which has nothing but the OS kernel, TCP/IP stack and a compiled web application, all compiled into a single executable. The (optional) file system is read only. So there's nothing even to log in to.

Does anyone else have ideas for how to make a website super secure?
Why you should use BrowserSync
The mistake you're making is assuming that the single unit price of a low volume device like an industrial electric motor in any way reflects its component costs. High tech low volume engineering is dominated by R&D costs, one off manufacturing costs and margin. You could apply your logic (it would cost me $25,000 to buy one so therefore it costs Tesla that as well) to almost any item of consumer electronics and you'd find that your cost estimation was an order of magnitude (at least) above the retail price of a completed device. Try pricing a washing machine based on the cost of its component parts online - you won't be able to do it for anywhere near the cost in store.

When you build large numbers of integrated devices (be they washing machines, cars or cell phones), individual unit costs of components are always much lower. That's why we mass produce things.
Do you plan on making it public at some point ?

Looks like a really good idea.
Scala is static typed, clojure is not - that makes Scala faster in many cases. Scala is also more widely used and adopted by quite a few major companies - http://en.wikipedia.org/wiki/Scala_%28programming_language%2...
Why are you specifically wondering about th motor oil? Do you think that getting some to admit teslas don't need oil changes will some how prove that the power windows won't fail; rocks will never crack the windshield; one headlight won't mysteriously stop working after 6 months; tires won't lose tread etc.

Because that's the actual maintainance cost of a car. Modulo nobody's engines need replacing in 10 years. Oil changes are 30 bucks once a year at a Walmart/jiffy lube.

The post that kicked this particular thread off even said as much but everyone seems more interested in arguing about the possible cost of the worst case than considering the actual costs of the probable cases: all the little shit.