skysight-inc/HackerNews huggingface dataset:
New Jersey! The second district. It's most of South Jersey, from the Philly outer suburbs to Atlantic City, Long Beach Island, and Cape May -- and everything in between.

Here's my bio, albeit in campaign-speak: http://coleforcongress.com/about/

The basics:

- Worked on '08 Obama campaign as a data analyst and field organizer

- I moved WhiteHouse.gov to an open source CMS and released code back to the public

- Worked with other govt agencies to do the same

- Helped design and set up the first versions of the We the People petition platform

- Worked on the "the good part" of healthcare.gov

- Early member at Mapbox, helped develop platform and work with clients

- Running as a Democrat supporting infrastructure investments for improving schools and wiring rural and non-competitive areas for high-speed (fiber) internet access

- Strongly support network neutrality, protecting free and open internet, taking on patent trolls, ending NSA domestic surveillance and supporting outside expert oversight, to name a few

Even though this is NJ, it's the US Congress -- votes affect us all.
This looks like another case where the actions of the NSA are the opposite of what's in the best interest of US Citizens.
Mobile Weather Sensor Forecast: Lookin’ Bright
My point was that it is not an unreasonable thing to have some sort of #include directive in a data format, and certainly not in a markup language.

The problem here was the same as in the rest of the software industry: programmers are far from ‘engineers’ in their desire to understand their tools, use the right tools and build bug-free code. Instead, most people hack for fun with tools they hardly understand and then somehow manage to complain if they shoot off their feet while doing so.

Hacking for fun and shooting off extremities is of course perfectly fine, but the blame for the latter lies in the programmer (and possibly their education), not the tools.
HMO:
Feedback from hardware startups.

I run a meetup and organized a conference to help folks who are working on or want to found a hw startup. Would love to connect over email with folks interested in the field and find out what their biggest frustrations are so I can develop my blog content and offer some more educational and fun events. First one is here: http://boot.lvhardware.com

Would also be interested in trading hardware work for coding/design skills or tutoring.

I can help:
Hardware design verification, general advice on finding suppliers, kickstarter strategy, etc.
I don't think this can be publicized enough:

https://www.youtube.com/watch?v=6wXkI4t7nuc

"An law school professor and former criminal defense attorney tells you why you should never agree to be interviewed by the police. "
My first thought: if this is the case, then why did they try so hard (and get "trolled" in the progress) to get the SSL keys from Lavabit?
Because it's a fancy scientific-sounding way for nerds to look down on those stupid jocks who are so dumb they don't even know how dumb they are and thereby buoy our foundering sense of self-esteem.
There are numerous reasons for this, as Regehr points out. None of these products are "sound". In other words, they aren't guaranteed to find everything. Most of the time, these are tradeoffs to reduce the number of false positives and to speed up the analysis, which come with the risk of false negatives, as is the case here.
Good luck trying to wiggle out of this one, NSA.
Most dating businesses are inherently conflicted because a successful outcome (relationship) is a lost customer. Tinder, in the "short term" relationship space, has a unique ability to have happy, repeat customers. 5B still seems like a lot. I wonder if there is a control premium baked into the price; IAC was rumored to have a majority stake already, but it's possible that those rumors were incorrect.

Edit: Sam Yagan says the valuation was not 5B

http://www.forbes.com/sites/jeffbercovici/2014/04/11/no-tind...
That doesn't sound entirely far-fetched. In the neighborhood I grew up in, there were about 4 or 5 different neighbors who worked for the police over the years and I distinctly remember three of them giving either my father or brother similar advice.

A friend of my older brother later went on to become a police officer and bought a house three houses down from my parents. He actually mentioned to my sister that if any of us needed out of a ticket, to give him a call. My father, being reckless as he is, would often get tickets that would be dismissed. Every time he would wind up mowing the lawns of the neighborhood police or otherwise doing some handiwork or helping fix a car or something similar. He flat out told me the cops would talk to their fellow officers and the tickets would be dropped per discretion of the officer.

Somewhat related, many of my friends I went to school with went on to join various branches of military. A while back he told me how a police officer noticed a military decal of the truck and flat out told him he wouldn't give him a ticket because of it.

It is all just anecdotal "evidence", but officers are humans just like you and I and will certainly do things to their benefit, like letting off someone who makes donations to a cause that benefits them. Is it really a stretch to extend the more or less "We protect our own" mentality to rich donors?
An object can accelerate arbitrarily, but in any reference frame it will never be traveling faster than c.

Of course, it won't collapse into a black hole, but the amount of energy needed to accelerate further will increase asymptotically.
> I don't believe that a Bachelors degree necessarily limits your career options. Holding a four year degree basically means you are trainable, committed, and follow the rules. The ideal employee. I'm willing to disagree on this point.

How is someone with say a Bachelors in Sociology an ideal tech employee? A degree is about specialized education and you're completely ignoring that. That's why it's called "higher learning", it's not Highschool Part 2.
"Either be friends with a police officer or pay us $2k for a license plate frame and you can get out of tickets" both very much has something to do with wealth and is incredibly corrupt.
Except we're not talking about outsourced work, and not about unqualified work either. Great job misrepresenting and misunderstanding what the issue is about.

The only reason prices are so low is because it's all outsourced. If you want Americans to do the work of the SEA and China, then you're going to pay a lot more for your shit. Those low prices are the only thing that a lot of people rely on their livelihood for.
Hand them that card along with the license, registration, and proof of insurance?
I'm not sure OkCupid and Tinder should even be compared (despite OkCupid containing a clone of the Tinder app). This is purely from experience, but most people on Tinder use it solely as an ego prop - finding a date isn't the focus so much as the validation that comes with a match. You can even do some shoddy A/B testing with Tinder (if I lead with photo x, do I get a higher match rate than with photo y?), and I do think more advanced image testing/refinement tools could and should be a large part of their feature set going forward. OkCupid has something similar with the My Best Face feature, but they don't seem to have expanded further on that idea.
Server/Client With React, Part 3: Frontend Server
> I made no such statement.

Sigh. This is tiring, but I'll bite. You implied that the unemployed college grads could be working the H-1B workers' jobs. Heck, in this comment I'm replying to, you say:

> 1.7 million graduates should certainly be 1.7 million desirable employees (or at least 650k)

So, you did make such a statement. The sentiment that there is some overlap could be true to a small degree. But if you'll listen this time, I'll try to rephrase why the 1.7 million unemployed college grads might not be able to replace the 650k for the most part (or vice versa).

- Not having the right training. You seem to think a bachelor's degree is magic and if you have a BA in Political Science, you can be a Lawyer or a Chemist (or vice versa), simply because you're trainable and committed. I guess a person could be retrained to a different profession maybe (rare in reality), but that requires getting yet another degree. Who will pay for that?

- Not being good enough. Graduation standards are pretty low on average. I disagree about the grads being trainable, committed and following the rules part. Seriously, when I was talking about "top 30", I wasn't talking about H-1B workers, I was giving an exception to the trend I noticed where in most schools, merely graduating is the bare minimum. Which means that a college grad in the 1.7 million unemployed doesn't necessarily have skills.

- Not having homogenous demand across the country. The point with the NY-N. Dakota anecdote is that it's possible to have a shortage in one part of the country and too much in another. So what's the company in North Dakota to do? Immigrant workers tend to be okay with, well, immigrating. Most other workers aren't open to relocation, so they are tend to not fill those positions. So a position belonging to an H-1B in one of these places might not necessarily be able to be filled with a native.

Another way to think about this is consider how many orders of magnitude workers there are who are NOT immigrating to the US. By accepting immigrant workers, you're self-selecting people who are by definition more willing to move to places.

So the point is that it's not likely that these two groups of workers overlap very much.

If you want to rail on immigration, rail on the L-1. No wage minimums (to ensure undercutting locals), no skill or degree requirements, no quota, no requirement to have tried to hire a local, workers can't move to other companies. Some companies can apply for a blanket L-1 and they don't even need to file a new petition for each worker. The L-1 is legitimately everything you dislike about the H-1B.

Hope this helps.
Wait a second. Is this the same business that was suspended while they were figuring out legal issues? Anyone know what I'm talking about?
That must have been be a nasty call from Sergey to NSA head quarters earlier this week.

"Sir, I am sorry to inform you that another backdoor has been found. We will introduce two more as agreed upon in our service level agreement."
You should also know what you can get away with in the area you are driving, and what they use for the traps. In upstate NY I could go 14 over an no one batted an eye, but cars going just a hair faster would get pulled over every time.
In PA the limit is closer to 8 or 9, and they pulled me over as part of a big trap with a cop hiding in the woods with a stop watch to measure the speed. The car that pulled me over had the lights on and was picking up speed before he ever saw me himself. That ticket had my speed at 83.426mph.
It didn't? That seems unlikely.
People speeding in the far left lane don't bother me. Your advice to "stay out of the left hand lane" and have a "car... on the left side shield you" are bad, dangerous advice.

Pass on the left. If you're passing people on the right then you're driving dangerously. (With an obvious exception for the occasional person going 60 in the left lane that you're forced to go around)
This rhymes with vacate:

"An error regarding venue exhibits many of the
characteristics of structural error. If the District Court had
found venue lacking upon Auernheimer’s motion to dismiss,
there would have been no trial in New Jersey at all"
I also was interested to see what's going on; it sounded intriguing to me. "I want to see what some of the projects are. Maybe I can find a side project to work on!"

Then when I saw that I wasn't going to get squat without giving first via signing up, closed it. I only wanted to take a minute or two here in between tasks, and signing up is a commitment to me.

Sounds irrational, arguably, but here's my rationale: My email box is currently flooded by dozens of emails from countless little things I've signed up for at some time in the past under similar situations. Periodically, I go clear them all out and try to unsubscribe, but it's like pulling weeds-- a project that never ends.

Mentally I was prepared to give the site a minute or two, but the requirement to sign up before I can even see what's up is a deal breaker to me-- I wasn't planning to spend that kind of time.

Then I make a liar out of myself by coming here and typing for several minutes. In any case, I love the idea, and I bet a lot of other people are, like myself, looking to connect with other people that want to give and take on various kinds of projects.
Because NSA didn't try to get Lavabit's keys at all; DOJ did. Two very different organizations. Not as incestuously linked as people think they are.

Also, worth mentioning: it's not particularly easy to get private keys out of servers with the bug.
Millions of Android Devices Vulnerable to Heartbleed Bug
Who needs JIT on I/O bound tasks?
Get the proof via nefarious ways and then construct a "legitimate" way of obtaining the information you already have.
Techstars Stats
I think it's fair to say that if you don't know who weev is, then very little about the case would interest you, including a summary of the legal decision.

Similarly, there's a posting now titled "Finally, usable GCM cipher suites in SChannel" ( https://news.ycombinator.com/item?id=7574678 ). I don't know what a GCM cipher suite is, nor what SChannel is, nor why it's a relief that this has happened. The link itself is not insightful. While it expands GCM as "Galois/counter mode", that's meaningless to me.

BTW, in this case, 'weev' matches some 63 other HN posts, though several provide no more summarized context than this link text. (Eg, a couple of other posts directly to other legal documents, a story about visiting weev in prison, and a letter from weev while in prison.) A Google, Yahoo, and Bing search all return http://en.wikipedia.org/wiki/Weev as the first hit. Perhaps one of those can provide the background you're looking for?
Do we have anything that leads us to believe the NSA was aware of heartbleed at all before we found out, other than speculation because of their resources?
Evidence? And if so, pretty much what we expected and exactly why this behaviour is terrible
As an example from history, see the story about the zimmerman telegram http://en.wikipedia.org/wiki/Zimmermann_Telegram and the british interception and decryption. They faked a theft to hide the fact that they were reading the traffic with the help of Room 40.
Why would you give them the benefit of the doubt? If anything, the base assumption should be the reverse.
I also use Digg Reader, but it seems dead. No API, no recent improvements, gets super slow when you keep scrolling down... Almost a year later and we don't have anything that comes close to Google Reader's speed and usefulness!
No fucking way. This is disastrous PR stuff, second only to the Snowden revelations.

It should be clear by now that the NSA does not restrict themselves from anything... and should be disbanded.
Protesters Gather at Google Lawyer’s Apartments
Also, I can't see how, theoretically, your ship turning into a black hole would prevent the answer to your computation from being received.
Dash is hiring Node.js interns
I have heard to just keep you hands on the top of the wheel, and when they ask for license and registration I say "Ok, my license is in my back pocket, and the registration is in the center console. I am getting the license out first." Then I move my hands off the steering wheel.
Let's just take a step back and note something:

This is about human lives. Once you eliminate birth-defects, car accidents are the leading cause of death for people under 35. Particularly for young kids, who obviously aren't driving.

Car accidents kill 34,000 Americans per-year. That's like if 9/11 happened once a month every year.

And speed matters. Stopping distance and kinetic energy go up with the square of velocity. A pedestrian hit by a car going 20 mph will almost certainly live. A person hit by a car going 40 mph will almost certainly die.
I think the professional institutional investors who run pensions and what not are fundamentally different from some Grandma investing her life savings in a "hot stock". Venture capital is just another diversification checkmark for such big funds.

A VC once told me that he thinks most venture funds don't really stand a chance of making money at all. The reason they have money to invest is because there's such a surplus of cash from institutional investors who need the "venture capital" checkbox. The lower-end VCs don't get the best deals and have to settle for leftovers, so their chances of getting lucky in a get-lucky business are that much lower.

At any rate, no honestly run pension fund is actually putting its capital at significant risk by tossing a few tenths of a percent at a collection of VC funds.
Nice work. This would be the way to go.

Sadly one cannot use it everywhere as WebSQL is not implemented in Firefox nor IE :(

The good thing is WebSQL works also great on mobile devices.
Fair point. edited to reflect this, I didn't want to give the impression that you should ordinarily be zipping by folks on the right. On the other hand if you're two lanes removed and the middle lane is empty, it's reasonably safe.
Well, Bloomberg appears to have two sources.
This is exactly why it's interesting to compare.

You could say that, feature-wise, Instagram was literally a subset of Foursquare, or Twitter was literally a subset of Tumblr (blogging) or Facebook (status updates). But how people actually interact with and use those platforms (and the value derived from those interactions) are very different.
>>If you think you've been tagged, don't slam your brakes.<<

Even better.. if you do see someone ahead of you randomly slam/tap their breaks.. slow down. This has saved me a number of times.
I would be happy to give you some feedback. Email is ewharton6 at google's popular email.
That's a pretty slippery slope. You just lumped 20x as not a big deal.
Why would he intentionally screw Woz out of money then?
It's a charity organization. It's not about the economics making sense. It's intended to be a gift for donating money, not a +EV speeding ticket helper.
It was never really clear, but most likely for tweeting and posting to soundcloud from prison

http://motherboard.vice.com/blog/hacker-andrew-auernheimer-h...
Legal versus illegal means?
I completely agree, the right tool for the task is absolutely important. I would never say NoSQL stuff is bad per se [1], but I criticize its use where it is obviously a bad choice and only used because it is the new shiny thing.

[1] Actually I said that in my first comment, but the wording is just bad and probably way to sensationalistic. What I really wanted to say is that it is a really bad fit for modeling you usual business with user, orders, products and the like.
True. It's actually not too bad for me but I only have a few feeds (maybe around 10) that I keep in it. After the demise of Google Reader I reduced how many I subscribed too.
Any links for that?
It's a terrible RSS replacement. It's owned by a single company.
There is a big discussion going on that could be misleading.

To clarify, are we calling the freelist implementation, which the heartbeat code does not use, an allocator?

Update: I agree with the author that it is wrong to point the blame at the freelist implementation. If every C application that manages the reuse of commonly used data structures is doing wrong, then pretty much every modern server application will have to be re-written -- for instance Apache [1].

C is fast and portable and binds to just about any language which is why OPENSSL is in such wide use. Maybe it would be better to use more 'secure' languages like Go, but if OPENSSL was written in Go, how many applications would use it? I'd say almost none.

[1] https://apr.apache.org/docs/apr/1.5/group__apr__pools.html
I don't know how "disastrous" this really is.

NSA knows approximately 1 zillion vulnerabilities we don't know about and won't know about. They range from RCE's in Windows and Apache to flaws in cryptographic hash functions.

It's NSA's charter to stockpile these things, and, yeah, to use them against foreign adversaries.

It's bad though, because this one was so easily exploitable. It's the kind of thing a reasonable organization finds out about and wants fixed ASAP.
Driving like an idiot while speeding causes accidents. Speeding itself does not cause accidents.

Speeding does mean that in the event of an accident, the outcome is likely to be worse for all involved.

And there's no excuse for speeding in a residential area, or anywhere you might see pedestrians (or expect them and be unable to see them). This qualifies as "driving like an idiot".
I don't know if Heartbleed could reach this point, but I think probably the only possibility for getting average citizens up in arms about this kind of thing is for them to start seeing major personal detrimental effects (like oops, all my email has been stolen and deleted and my bank account's empty), and then learn that the NSA could have easily prevented it if they weren't having so much fun being super-hackers instead.
We have "two people familiar with the matter" which is to say sources that Bloomberg thought were credible enough to lead a story with.
This is how NSA "protects America" and its infrastructure from "cybercrime" - by allowing a bug like this to exist for years without telling anyone about it.

I hope it's now clear to everyone what NSA's vision about "cybersecurity" is. They think having vulnerabilities like this in the Internet's infrastructure is a good thing, because then they get to attack their "targets", to "protect us". It has nothing to do with actual security. Weakness is strength. Vulnerability is security.
Have a contact address?

Minor thing upfront: The Signin-Workflow. First, signing in with Google, ok. Then, signing in again with Google into Forum? That didn't work, I tried it multiple times, until I just waited a bit after the login and the forum appeared by itself.

I'm behind a slow, flaky connection, but she seemed to be alright that moment.
The point is that someone has to actually sit down and define the exact feature set that a WebSQL implementation is supposed to implement, such that a development team could sit down with a copy of the standard and no other code and implement their own WebSQL implementation from scratch.

The fact that SQLite is available is entirely irrelevant to any of this. The W3C can't just say "do it like SQLite does it" - that's not a standard. The WebSQL spec that exists says:

> User agents must implement the SQL dialect supported by Sqlite 3.6.19.

Unless someone actually sits down and goes through the standardisation process to define WebSQL properly, this is not the way to go, or the next thing will be "implement this tag like Firefox does".