skysight-inc/HackerNews huggingface dataset:
People in the Soylent discussion boards have made bars, breads, muffins, etc. out of the base Soylent mix.

More here: http://discourse.soylent.me/t/soylid-solid-soylent/3145
Not to be a dick, but as someone who lived and worked in Japan for about 10 years your hypothesis is totally wrong.

The Japanese do many things well, but if you ever take a look at the software they produce you will realize very quickly that "perfection" is nowhere to be found and there are many industries where this is true.

I know the pizza place you are referring to in Namba Parks. The pizza is indeed incredible. However, how much of that is simply an alignment of my sense of taste? I know people who would eat that pizza and feel like it was garbage. A quick look at all of the varieties of crust and the holy wars that ensue when discussing them lends credence to this possibility.
The problem I see with your approach is that you have a rather narrow definition of "seeing results". If you want them to see something in the browser immediately, start by teaching basic HTML. You don't need Django for that. QuerySets that are easy to generate are a great result for somebody who has HTML experience and wants to build a data driven website.

Making the first step simple will just make it even more frustrating later when they don't understand concepts like objects, modules, packages, inheritance, DRY, separation of concerns, best practices, yadda.
Most free podcast android apps are pretty terrible, but PocketCast (paid) is really awesome (at least it have a great UI). I don't even listen to podcast that often, but I bought it without hesitation.

But it's true that there's a problem with podcast, so take my +1.
This idea reminds me a bit of PublikDemand[0]. According to their site, they "aggregate and organize customer complaints by topic and company. Individual complaints are turned into qualified leads for competitors."

[0]: http://www.publikdemand.com/
Oh! The reason this was submitted was that someone found it during a previous discussion of Lewis' book, and then 'yummyfajitas (a long-time HN contributor and former HFT person) wrote a comment about how good the review was. It was submitted to keep it from being lost in the shuffle of a long, noisy thread.
My thought exactly. It loads the key into memory and never exposes it, just lets you perform operations such as signing and returns the result.

It seems primarily geared at clients rather than servers, but in theory can be used for both (I'm not even sure you can load your openssh server key into ssh-agent, can you?)
Williams Syndrome, the 'opposite of autism'
This is a great idea!

I'd be terrified of the results if /b/ get hold of it. I saw the results of a few chatbots and it was funny, but also scary.
I would suggest posting this every Thursday or Friday. Give people something fun to work on over the weekend.
A couple if German podcasters are about to fix this: the have crowd sourced an antenna pod fork to make it a single purpose app. Toby Bayer is the main organizer. Alle the code is open source: https://github.com/tobybaier/Einschlafen-Podcast-App
Show HN: Publish npm packages with fewer screwups
Niklas (the RoboVM lead dev) talked briefly about how the GC is used on the list here: https://groups.google.com/d/msg/robovm/etAxWMYvRTU/huXKmPA-J...

If I understand correctly, when used in "precise" mode, the Boehm GC is capable of compacting. Mono north of version 2.8 also claims to be heap compacting by virtue of Boehm in precise mode.
Yes. I think this idea is almost in many things but you need to give the user the structure to both read and contribute to a thread of research.
I'll let you in on a secret: Python 3 is Python, just with a couple of improvements. Painting it as an entirely new language like Perl or Scala reminds me of people I used to support who thought their entire computer was different if I gave them a monitor with a different-colored rim. You're making a mountain out of a molehill.
Canadian government secretly gave military OK to share info despite torture risk
I'm not sure how that answers my questions related to why I should trust a marketplace that allows HFT over one that disallows them.
> It's cool to see a systems programming language with dependent types.

What do you mean by 'systems programming language'?
> I was under the impression that "co-founder" carried a lot more weight than CTO

Depends on the circumstances. If one founder controls a majority share, they can fire anyone they wish.

In this current situation, if the CEO controls more than 50% of the shares and the CTO reports directly to the CTO, the CTO can fire the OP.
You can definitely have very successful apps/services without decent UX, design or researching the problem. The internet is full of examples of each of those.
The beginning of the HTML (including the head with the script links) is [sometimes] missing from the page sent by the server.
@vidarh I was going to write a post, but you already wrote it. It's a great shame that many young programmers I meet think they need the noise of c# to pull off some good code. M2 with so few keywords, excruciating compile time checking, a great module system for the time, and beautiful green threading was just a joy to work with. It encouraged good engineering practice that helped me become a complete sme on the apps I created because I could keep so much more of the flow in my head than with my comparable experience with other languages. Golang has certainly rejuvenated my enjoyment of programming because it helps me recreate some of those experiences I had with M2.
Start Early On College Saving
wouldn't it just be a matter of using a shorter cable like 4" or less?
I'm really interested in chatbots, though it seems the underlying state of the art is still pretty poor.

Mitsuku (http://www.mitsuku.com/) won the Loebner Prize last year, and that chatbot still runs on basic AIML files.

I think a new approach is probably necessary to take chatbots to the next level, but I don't know what it is.
I had a small discussion about this idea[1] and I believe that it is worthwhile:

Make private key based authentication useful for logging in to websites. I don't have the chops but introducing private key based auth as an extra can be very worthwhile for some users. So start there and improve the UI until your grandmother can use it.

I believe the biggest hurdle will be private key management. The advantage of using private keys for authenticating with web services that if the keys become unrecoverable the keys can actually changed by the service provider (after sufficient diligence).

[1]: https://news.ycombinator.com/item?id=7553882
Offline navigation map for mobile. Small thread here:

https://news.ycombinator.com/item?id=7171919

The entire OpenStreetMap dataset is 23 GiB with moderate compression. With some optimization/truncuation the whole world should fit comfortably on most phones.

This is very useful, for the times you're lost with a slow connection, no connection, in a foreign country, or with roaming charges.

Also it's a fun algorithm-heavy challenge even if you don't finish anything.
3D file managers, using Occulus Rift or similar, especially if it has REZ-like interface.

This website has a bunch of 3D interfaces. They'd have to be brought up to date. And perhaps the various metaphors need a lot of work.

I don't think this will be particularly useful. I jist want something that makes me feel like I'm living in the future.
In everything I've ever done or been involved with in startups, I'm not sure anything besides people was more complicated than trademark law.

Unfortunately, my Amazon search and Google fu isn't good enough to find the book I learned most of this from, but if you're really interested in this, it requires a book level and length treatment. E.g. did you known Owens Corning has a mark regarding the color pink? (Only, or at least originally in the context of insulation.)

In between, I'm not sure, but try the usual suspects like Wikipedia: https://en.wikipedia.org/wiki/Trademark
Key management is a major issue across the board, not just web servers. Even a theoretically unbreakable crypto will always have a weakness if the keys themselves are compromised. Stopping keys from being copied is a major challenge though, because anything you can do to truly protect them involves major hassle.

Think of the problems credit card processors deal with: Hiding the keys themselves from their own employees, so that getting a root password is not enough to be able to just take all the credit card information. You don't want the key in any filesystem, and you don't want the key in an easy to retrieve memory location. You end up with servers that require multiple people to boot up, as the keys only really appear when multiple people provide their own piece of the secret.

Eventually, enough security leads to the risk of data loss, as an error can make the keys become unrecoverable.

This is why we have to add security breach detection, and make recovering from a breach easy and having low consequences. Linus said that with enough eyeballs, all buts are shallow. With enough attackers, all systems are insecure.
"Some anecdotes from recent discussion suggest it's not so easy to work with the original team."

'k, certainly forking is better than letting poor quality persist, and it may be better than reimplementing from scratch. I just don't like resorting to it when unnecessary.

"Also, if their standard for quality is what it is, it might be hard for another project to start changing things."

Possibly, though their "standard for quality" is probably at least a little malleable (particularly right now).
Maybe just the idea of podcasts is broken.
RSS has dying a slow death for quite some time. Why not just build a better podcast?
Navy's future: Electric guns, lasers, water as fuel
The first two ClojureBridge (http://clojurebridge.org) workshops sold out quickly and many more cities are working on events in the coming months. In addition, 100s of people have signed up to help or attend on the mailing list. There is clearly demand in diverse communities to learn programming via Clojure.

I don't think any serious student should expect to learn only one language. Clojure can teach concepts that any learner will find valuable in applying to other languages. In particular, I think that clear separation of values, identity, and state avoids many kinds of complication in learning how to program that are introduced early with other languages.
Instead of cash, use a cryptocurrency. Dogecoin fits perfectly with this.

As an aside, I'd like to see a torrent site that uses a cryptocurrency model to control access/leeching/improve seeding. I'd rather fry an ethernet card than a GPU!
> $30k/yr is a lot of money.

Another way to think of automation is that you're making it $30k/yr cheaper to run a business. The more automated the world becomes, the cheaper it becomes to start (useful, profitable) businesses--and so the more likely people are to start them.

Or, to put it another way: to whatever degree social mobility is enabled in a culture (and to whatever degree people realize "start a business" is an option to escape unemployment), automation converts a culture's proletariat wage-earners into bourgeois capital-holders. This process is lossy--it also outputs non-adaptive workers on welfare--but if the exchange is recognized at a cultural/governmental level, it can be optimized through education and incentive programs to produce more entrepreneurs and fewer non-productive workers.
In my experience, Chinese society is actually much more "American" than Japanese is. Both China and America are fine with doing a half-assed job if it works, and self-assured about effective kludges in a way that Japan is not even about near-perfection. And of course, both are hustling and proud and know they're the center of the world.
Wouldn't it make sense to lower the exposure by having the server only have access to its own ephemeral private key?

So instead of having the key to the hard to change site certificate on many vulnerable front-line servers, it rolls up a key and on boot sends a certificate signing request to a hardened internal system?
Perhaps the docs don't highlight it enough, but I think you should find what you're looking for under http://www.robovm.com/docs#using-the-command-line-tool

It's actually what you get when building on linux with no special args: the default behavior is to produce a binary for the current operating system and architecture.

Thereafter, if you want to get fancier and target other specific systems, there are options for "-os", "-arch", and "-cpu"; you can find some description of them in the default usage help message from running `robovm` with no commands.
The two main resources I refer to (and hang out around and in) are:

the KVR DSP forum: http://www.kvraudio.com/forum/viewforum.php?f=33

and the music-dsp mailing list: http://music.columbia.edu/mailman/listinfo/music-dsp

Even armed with all the resources in the world, though, I cannot stress how important just jumping in is. Write a couple of basic plugins and you'll get a really good feel for how the pieces fit together, what's important in the algorithms, etc.
NoScript is overkill but I wish there was a way to disable certain API entirely without disabling javascript as a whole. In this case I'd really like to disable window.getSelection() and document.selection, as usually sites using those are either up to no good or .. as awful as the original link.
A crowd-funding charity website that collects monthly very tiny micro-payment (as little as .10 cents) from users for charity. This way many users would sign up, worry free, as .10 cents a month is extremely affordable and can add up to a lot of money with scale.
I'd say that might be moderated if you're got a good grounding in Lisp. I've been able to get a good distance basically learned nothing more about Java that what it took from C++ ... but that knowledge I brought to the table might enough to satisfy your claim in essence.
We like experiments and this is a good one that goes to HN's core. Also, "Idea Sunday" is a great name.

I don't see why there shouldn't be a thread like this every Sunday, as long as the quality is good. If there aren't enough new good ideas, we can reduce the frequency. Consider yourselves challenged!

If it is to become a regular thing, we'll ask the whoishiring account to post them. That's the only account allowed to make recurring posts like this, which solves the problem of users competing to do it for the karma. Maybe rokhayakebe can keep posting these for another few weeks and, if it's still going strong, we can semi-formalize it then.
Do you mean navigation as in "routing" or just as in "viewable map"? If the latter, MapsWithMe does a good job of it already.
This article is inaccurate, or at least, omits every detail that would seem to counter a quasi-socialist position. The United States is the only industrialized nation that imposes taxation of all income regardless of origin on its citizens. For the rest of the world, these offshore investments are not tax evasion, they are merely investments not subject to taxation in their home countries. Maybe, just maybe, the United States should not have tax rates so high that it scares wealth into foreign lands.
The social discussion site MetaFilter uses part of this idea already. It requires users to pay $5 once before they are allowed to post anything (http://www.metafilter.com/newuser.mefi). But it does not charge or pay its users after that.
This is my biggest problem with GNOME shell, and programs that are packaged with it. The dependencies are very strange and just annoying. I don't need a lot of the utilities, but apparently GNOME knows better.
Google Spellcheck.

Google must have terabytes of data about correct, alternative, international, and incorrect spelling of English words. (Also probably all words in other languages).

A Google spell checker product could combine knowledge of word placement within a sentence and this huge cache of data to accurately guess what the correct spelling should be.

The product could probably go further and help people avoid eggcorns and malapropisms and etc.

It would be interesting to compare the accuracy : size ratio of this dictionary with that created by rtm and father using probabilistic, uhm, stuff.
Student Who Recorded Bullies Tormenting Him Accused of Felony Wiretapping
If you don't mind a longer journey to learning Clojure (works for Scala also): as you learn Clojure from online tutorials or books, also spend some time learning a bit about Haskell because so many ideas behind Clojure (and Scala) come from Haskell.
src/lib/libssl is in the openbsd tree as of 2 days ago approximately, and being trimmed as seen in commits:
http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/

edit: precesion: libssl has seen a set of large commits, in the past 48 hours, and other libcrypto related changes.
The value, in theory, is that PKCS#11 already exists, is already supported by software and hardware vendors, and is already comprehensive enough and has seen sufficient review to cover the gamut of use cases that such a solution would need to support.

PKCS#11 is a little funny looking and has some small rough edges, but it's actually reasonably designed and easy to implement from scratch. That's not something I can say for many of the other PKCS standards.
It's worth noting that Meteor is a unique framework, because of the live templating engine and data binding, that allow you to design and prototype real-time applications very quickly.
It doesn't have to mean that. Think of war. Defense is often developed in response to offense. Medicine is developed in response to injury. Sometimes in history, defense & medicine lag far behind weapons. Sometimes the gap is much smaller.

Privacy is impacted because we are rushing ahead, advancing our sharing & social & etc technologies. We aren't developing privacy & security fast enough to keep pace. So while it is that way right now, must it be?
Oh come on. How many of his billions did Gates inherit from his parents? Umm, none. And "anyone" nearly did get that contract, but Gary Kildall was out hang-gliding that day.

And this on a website where upper middle class kids from Stanford and MIT dream of getting rich off a cat-sharing app...
The built in iOS podcast app is the worst app I've ever used. It's not that it fails to be great, it actually seemed to go out of its way to delete podcasts just before I left home. I bought downcast and I'm happy with it except for the problem of discovering podcasts.
As long as forward secrecy is/was used then the impact on the individual user is more or less the same. Remember we're largely talking about active MITM.

In the short term your user is compromised whether it's a cookie, an AES key for the TLS session (which will presumably still have to be resident in the process sending you data), a credit card number in a POST request, or your certificate master key.

Anyone who can intercept my traffic in close to real time, and wishes to target me, is going to know I'm talking to amazon.com, IP x.y.z.f, and that that's where they should target their Heartbleed attack for a good stab at accessing my PHP session cookie or TLS session AES key.

There are some cases, like e-mail phishing, where this isn't the case of course... but then a redirection service would be sufficient to let me script an attack against many sites.
I know right? If you use it for more than an hour it's paying for itself easily.
The power of writing everyday
Heartbleed Secure Seal
Embracing the host (the JVM and Java) provides tremendous leverage in tooling, performance, and reach but has the corresponding tradeoffs of leaking that host environment throughout various parts of the stack. This is just something to accept and manage - the compromise is made.

I personally do not think the error messages are "atrocious". Some error messages are confusing or lack context. There are many tickets in progress to improve those and they continue to get better over time. This is an area we continue to work on within the language.
In python, they are called "functions" whether or not they have side effects. (And, actually, in most programming languages I've seen that have different constructs called "function" and "procedure", the difference is that functions have a return value and procedures don't -- usually, both can have side effects.)
There's a parallel in the Python world too: when Django 0.95 made a ton of backwards-incompatible changes, there were a lot of existing installs that simply couldn't make the jump quickly. So bugfix-only support continued, as a community project (I should know, since I helped with it), for quite some time past the official EOL.
> Cognitive capture is in many ways more worrisome than outright quid pro quo corruption

Agreed, but it's also impossible to avoid this as long as the people in Congress are humans and not robots.

We all believe in something, we all find some point of view more reasonable than another, and we all have experience in life (who we grew up with, who we associate with now) that vastly influence those cognitive biases. We'll always be able to strive to expand points of view and limit time monopolized by any particular cause, but in the end there's no avoiding "cognitive capture".
A crowd-funded-style of non-profit charity where you can help donations reach a worthy cause without actually donating money yourself.

I wrote about the idea in more detail in this blog post.
http://blog.myadversity.com/2014/04/so-many-ideasso-little-t...
Google Chrome and the Google Toolbar already have spellcheckers ... ?

Or do you mean something more like MS Word, which will correct misplaced letters and so on?
The reason is probably because most people are still more confident writing in Python 2 and many users are using Python 2. Though many of the simple programs really don't require advance features which are only available in python 3. In other words, many of the new projects can be Python 2 and 3 compatible without effort.
I have tried it, but there is not enough granularity
Well, the cables have to be really robust so nothing can be extracted from them that could be used for cutting.

Some people can cause surprising damage with a bobby pin so having robust, potted, cable shells would be important.
In the Ottoman Empire, Fridays were some of the busiest and were reserved for the emperor (Padishah) and council (Divan) to listen to appeals of court cases and the complaints of citizens. This was supposed to keep them in touch with the needs of their people and help them develop some compassion. Maybe we need some of this kind of guaranteed access to the representatives, which anyone can sign up for.

No staffer-only meetings, the representative must sit through it and must fulfill a quota of X office hours per month, set according to their schedule. Each person / group gets 15-20 minutes. The hours can be cancelled up to 24 hours before for emergencies but must be made up within a week. How does that sound?

I get a bit mad when people suggest that representatives don't have time for that. That's their job, damnit! Make time.

This would really cut down the power of nepotism / cronyism in lobbying and bring politicians back down to earth, closer to the people they represent. Everyone should have equal access to their representative.