skysight-inc/HackerNews huggingface dataset:
Playing Video Games Can Improve Your Dreams
Paracetamol is probably the safest OTC analgesic outside of Colorado and Washington. NSAIDs -- aspirin, ibuprofen, and naproxen -- have significantly higher risks associated with their use, due to a particular side effect which is inhibition of COX-1 (---> stomach bleeding); serious side-effects in regular NSAID users occur to the tune of 1-2%! See:

https://www.lef.org/protocols/appendix/otc_toxicity_01.htm

This might be paracetamol is preferred over ibuprofen et al in combination analgesics like Vicodin; if they just wanted to kill junkies they could do better.
Your chinese names link is inexplicably ranking entire names (look at #s 5, 6, and 8, the girl's name is 秀英 xiuying in every case; 王, 李, and 张 just happen to all be incredibly common family names. 丽 li also occurs in the list with each of those, although it does seem to be much less common for girls with the surname 李 [also pronounced li]. Or notice how the top four male names are all 伟.). But I'm pretty sure no one is interested in which names occur how often with which surnames -- would you be interested in studying the breakdown of "Lisa" among people variously surnamed Black, Smith, Jones, etc?

The chinese names link does accurately indicate that a chinese girl's name is usually distinguishable by the meaning; things like "beautiful", "graceful", "quiet", "compliant", and so on are popular. I would guess phonetic considerations are a distant second (though, as illustrated by the anomalous unpopularity of 李丽, they clearly do come into it).
More demos are at: http://demo.famo.us/

Facebook Paper: http://demo.famo.us/paper/

Yahoo Weather: http://disrupt.famo.us/1022e61cbff3fe1fc382a81a2d6e2396078a6...

Rise: http://demo.famo.us/rise/
there is none

Derby is the closest thing to it but Meteor has more capabilities and has a better development team plus a lot larger developer community
There's one type of homeopathy story I haven't yet heard: a reformation story. Has anyone heard of many homeopathists who have renounced their ways? If so, then what ultimately convinced them?

Hearing that Steve Jobs lost his life due to his insistence to treat his cancer with homeopathy is what convinced me that homeopathy is probably going to be with humanity forever. If someone as shrewd, rational, and rich as Jobs can fall victim to seductive thinking, then it must be true that education isn't enough. In order for education to be effective, it requires someone willing to learn. Was Jobs such a person? If so, then how is it that he still fell victim to homeopathy?

It seems being a homeopathist is a part of one's identity, the way being a vegetarian or a democrat or a hacker or a christian is. I don't understand why it's so difficult to change, but it's certainly an example of the destructive power of choosing the wrong identity.
Look, I don't even really disagree with your hypothesis. I just question whether counting all of the CVEs and "discounting bad PHP, a huge majority of bugs are in C/C++ code" proves much. Other than the majority of attacked applications are c/c++. (well, likely they are php, but we are tossing that for some reason.)

Especially if you follow that with the claim of "If you write in C/C++, you are far more likely to introduce security vulnerabilities than in other languages." In order for that claim to stick, you have to show not just that there are more CVEs against c/c++ than other languages, but that there is the same effort spent in attacking non c/c++ programs. Right? (Or, am I misreading a claim on that?)

Sure, if you reduce that to "memory vulnerabilities", it is a true statement. However, you did not make that reduction. As you point out in your counter #2, there are plenty of other vulnerabilities out there. What makes you think people are more likely to avoid those than they are memory vulnerabilities in c/c++?

As for the 90% of code not being c/c++, what is the point? Unless you can show that they receive the same level of attack as the c/c++, you can not really use that to claim that they are inherently more secure. Worse, your throwing of php under the bus just shows that recent languages don't do enough to prevent security mistakes.

Heaven help you if you throw in XSS and friends. Suddenly one of the darlings of the tech industry at the moment, javascript, is rocketing to the top of the list for security blunders.
Disclaimer: I'm an infosec student/enthusiast, so I may have a different perspective. Also, it's late; it's entirely possible that this is sleep deprivation talking.

I think it's more a case of the subject being so important that it's not really something that you can take shortcuts with. When it's something so critical to daily life as the internet is becoming, it's imperative that all code made for security purposes is carefully considered, and architected to avoid the tiniest bugs. Hobbyists or amateurs (myself included) are not necessarily qualified to judge what might constitute a critical bug, and that is one of the reasons the barrier to entry in the field is so much higher.
Heartbleed Discoverer Speaks Out (Podcast interview)
I use LP, so nothing against it, but I suppose he meant something automated.
OpenSSL Heartbleed patch
> There's still a privacy issue of your browser basically bookmarking every HSTS site that you visit, and probably not providing an easy way to know that happening or clear that out. For example, if I clear my browsing history, should it reset my HSTS lists?

Agree. I'm suggesting the client maintains an up-to-date bloom filter for all revoked certificates, and only contacts Google when something detects as positive (to verify that it is not a false positive.) You will still leak "I visited foo.com" if someone has compromised your SSL connection to google.com, but at least it doesn't leak your entire browsing history.
>objectively produces THE most serious vulnerabilities

I think you mean subjectively. From my perspective vulnerabilities that permit immediate root access are still an order of magnitude worse.

>literally burned down the internet

I don't think you know what that word means.
pcurve - responding to your question about why we "felt" that way about the name. So interestingly enough, months after he was born I recalled that my grandparents had good friends with the last name of "Quinn." I had probably only met them once or twice when I was very young, but I have to wonder if it was some kind of subliminal thing in my case. Other people have brought up the movie / song "The Mighty Quinn" - perhaps in the case of some of these trends there is just enough subtle social hints to keep certain names alive. The 2009 increase in Quinn as a female name I'm certain had to do with the TV show "Glee."Much like one of the other commenters in this thread, I felt very odd that the name we'd picked for our son, thinking it was somewhat unique or uncommon, suddenly became part of a social trend.
Really?

I've found him to be honest and sometimes cutting with his interviews.

Anytime someone is bullshitting or using weasel words he tends to call them out, if not directly then at least making them squirm.

Maybe you started listening before I did but I feel like I've listened to almost all of them.

Also +1 on Russ Roberts being a great host, I just wish there were more episodes with Mike Munger.
True.

But they may have kids.

Look, most of us don't need to be told that coffee is hot, and can burn you, but we're told anyway.
Read every
Cool site to meet new people and have fun with unlimited downloads@ www.chathoo.ml ......All exam expo(Waec expo in progess),Latest news,Cracking jokes,Hot browsing cheat code,Classified market,Photoshow contest,Sport updates and live match watching,Information on politics,economics,agricultures,lifestyle,fashion and social lifes,Interact with Foreign buddys.
I used the OpenSSL library for building a SAML token parser in JBoss (java). All the front end stuff was java and OpenSSL was used for public/private key decryption and validation of SAML tokens and signatures. I'm not sure exactly what an OpenSSL "server" -- it sounds like there is a feature which you can implement (or not) in your webserver to test the SSL/TLS listener.

However, you could -- as I did -- use anything else as your interface for the web. Why would you specifically include a heartbeat for just SSL is beyond me. If a website is up and running, you'll know it with the usual methods, the https codes. You don't need a separate "heartbeat" for telling you that an internal mechanism for processing a protocol is running...do you?
That's actually in line with how I use it.

Definitely not a marathoner/skiier but I work out about an hour a day and I never expect Vitamin-C to prevent colds. I only take it after 2 to 3 day of sensing an incoming cold.
Yeah I was actually wondering the opposite, whether 'n' is getting more popular because it's literally more friendly to more minorities. E.g. East Asian immigrants who want to give their child a western name might look for one they can pronounce easiest -- the 'n' ending is certainly easier for some of these languages. Obviously the vast majority of these kids aren't children of immigrants but it could be a positive feedback loop that plays in n's favor.
I see. I wasn't implying that any name that ends in "N" sounds caucasian. But when I looked at the 6 names (Mason, Lawson, Hudson, Colin, Callen and Quinn), they all sounded like names that white people are more likely to use. (again, this could be my hyper sensitive radar towards race issues, so I hope no one takes offense to it. I was just very curious to see if there was a parallel trend going on to black parents giving their children distinctively black names.
Hackathons as EdTech
Well what did you expect a VC to tell you? He's all about the $$$ you should have asked a user, coder or designer, if you wanted constructive feedback. However, if you're building a company for anything more than the thrill of filling out incorporation papers then you better be thinking about how to make as much $$ out of it as you can. Employees have light bills, and kids, they have to buy dog food and Soy milk lattes (kid temp), and if your head isn't into making the cash that will pay their salaries... then get out of the business end of it and find a job.
Going off a parallel to Nathan -> Nate, I'm going to suggest he be called "Ete" ;)
How to do new things
The fact remains that crypto _is_ very hard.

I don't think it is any harder, actually. It's just that the stakes are much higher.
>now I've seen 2 different operators, which I presume are overloaded to deal with those types somewhere? Or we're dealing with a ton of built-in types and built-in operators to deal with them?

No. Remember we're talking about using a language that is not broken by design instead of go. You have one operator (>>=) and it works on one typeclass (Monad). Do notation (do and <-) is merely syntactic sugar that desugars to using >>=.

>I prefer the situation of "simpler environment, don't write bugs" to "really complicated environment that makes it theoretically impossible to write bugs"

And since those are not the options available, people tell you that those are not the options available. Doing it right is very simple. Your options are "simple and with lots of chances to create bugs" or "just as simple but with fewer chances to create bugs".
JOIN THIS CHATNETWOrk www.chathoo.ml
Join now to meet new people and chat online, play online games and more via www.chathoo.ml
Ditto. I signed in and realized what was happening, looked for options in settings... no dice. I tried to sign out, and then it was going to sign me out of BOTH carousel and dropbox, so I just deleted the app. I think you should at least have the option to choose whether you want to update your previous photos, if not more granular controls.

I like their concept of simple sharing of albums. I shouldn't have to sync every photo to use it, though.
Science cannot and will never be able to demonstrate how homeopathy does not work, only that it works about as well as a placebo. So we are left with stories like this, which basically states that these two unknown things (placebos and homeopathy) are scientifically indistinguishable. That much is painfully clear. Is there anything that this article brings to the debate that is new/original?
The release was in January, but a lot of us were running Betas and Release Candidates for about three months prior to that.
It was from Hacker News. Someone was attempting to reset my password. I got three of these emails 2 minutes apart each. I wondered if it had to do with the recent heartbleed bug.
That absolutely looks like it, thanks!
It's true :) What you see is a struggle between my wife and me.

I wanted Gibson and Balthazar to be first names, my wife wanted Carlo and Leo. She won first round I will win the next one :)

Emil is my nephew and a great name.
The problem with sysops is they get paid for the number of CVEs they respond to, and not based on whether CVEs stop being issued.
If you are going to major in computer science Cal is about the best you can get if you can't get into CalTech or MIT... UPenn will get you connected on the NYC funding boys... but the vibe is much different out there. Sanford and Cal are about an hour apart and SF with a ton of startups is just a $5.50 bart ride away. Cal is my recommendation and got to Blondies and get yourself a slice and a beer..
Someone needs to create a "Heartbleed Fixed" logo
Someone needs to create a "Heartbleed Fixed" logo. I'm not a designer but my first thought would be the existing bleeding heart logo with a band-aid over it (see why I'm not a designer?)
The dynamics of which technologies find longevity on the front page is always intriguing. Erlang/OTP 17 was top for a short while, this random javascript framework hitting the top?

How is this more useful than a language/platform rev?
>This looks like a massive improvement, although I wonder if it actually protects clients which do not support the extension?

Only indirectly through network effects. It's much harder for a valid attack certificate to stay undetected in the wild when a subset of the people you might attack are running TACK. You're right that it might not help clients if the MiTM software intelligently avoids attacking TACK-capable clients.
It's not hype. They just want to control the on-boarding of the open source community. The apps at the launch event tonight show a lot of promise for Famo.us being a better framework over Angular for mobile apps.
Just need to do some more reports on chiropractors now, they have the audacity to call themselves doctors in Australia.
DO had the issue where you could delete a droplet without scrubbing the disk. So the next person to create in that area could read the disk and recover any data from it.
Show HN:Turn mail message into web page
Much to the aggravation of developers who want to be able to use the lates and greatest

Upgrading OpenSSL introduces other problems though -- the OpenSSL developers don't seem to understand the concept of a "stable branch" or "binary compatibility", so importing a new version of OpenSSL can mean that everything which links against it has to be recompiled. This is one of the reasons why FreeBSD doesn't get major OpenSSL updates on stable branches -- our policy is that if a binary worked on X.0, you should be able to run it on all future X.* releases.
Here is the existing logo: http://heartbleed.com/heartbleed.png
Being indistinguishable from a placebo is equivalent to "as powerful as your mind," though. Which is to say, if your mind can't cure cancer, then neither can homeopathy. Isn't that pretty close to demonstrating it doesn't work?
TL,DR:
A quick look at the repository says all versions between ~19000 - 23882 are affected.
I thought it was pretty well-known that Tamiflu wasn't particularly effective, and that the UK NHS had already been criticized for stockpiling it.
When comparing to AWS, it's worth noting that both Linode and DO continue to charge hourly fees for instances that have been stopped but not destroyed.

AWS does not do this. Stop an EC2 instance and you stop paying hourly instance fees. Even if it hasn't been terminated.

There are small fees for maintaining EBS volumes if you are using them for inactive instances, however.
You could make this argument about anything, how about this a new medical treatment that cures everything, what you do is bang your head against a wall every day. It wont be more effective than a placebo, but some people will get better.
Because Internet services like Dropbox are only going to get more regulated, and Rice has the sort of connections and experience to help DropBox mitigate the impact.
It's not a random framework. It's been worked on and talked about for 1-2 years now.
I know youtube videos are off-topic but this parody on homeopathy is too brilliant not to post.

https://www.youtube.com/watch?v=HMGIbOGu8q0
If there is a market for this kind of thing (I suspect there is,) it sounds like it would be a sort of "dumb terminal" as a service. You just buy a monitor, a keyboard, and a decent internet subscription. Everything else would be hosted by a (presumably, well designed) web application. Of course, you become completely dependent on connectivity. Personally, I wouldn't want such a service. But I could see it being pretty popular.
Don't agree. A 'right' is more basic than that. A 'right' is a fundamental activity that everyone can do unless it affects other people's rights. The old saying "My right to swing my arms ends at your face" is the perfect description. I have the right to drink 2 bottles of whiskey as long as I don't infringe upon other people's rights of security, safety, etc. I have the right (in a perfect world) to smoke cannabis on my back porch as long as other people's rights are not violated (right to clean air, etc). And 'rights' are not allowed or given... they are fundamental; ie, there has to be very rational reasons to disallow a 'right' (hear that, Harry Aslinger?)

... and getting back to the OP. Anyone is free to love and co-inhabit anyone else. It is a right. A privilege is given, rights are fundamental.
I'll grant you that. Crypto is just one aspect of the security field that doesn't seem very intuitive to me, but it's probably just me.
Mono's licensing decision actually makes sense now; hampering the free version of Mono with the contagious GPL license effectively means that you're required to pay if you want to use their software in a commercial fashion.

Very disappointing that Unity haven't upgraded yet, hopefully they'll do so soon.
Just by looking at the video posted by the lawyer, you can easily tell that it purpose is to tarnish their brand (if you have not watched it, please do and tell me if it was necessary), and they hope that Tesla would quickly and quietly settle it out of court.

Tesla won't do this, because that would only increase number of suits like this.
ah that makes sense. Thanks for the story and explanation.
Futilitris
Thanks for sharing your thoughts. I think the approach of building something, one piece at a time, is how I'll go with it. I just found it overwhelming to try to tackle too much all at once. After doing some more research and talking with a buddy that work in that area, I got my hands on Camel In Action, so I'll be starting there, adding other pieces as I go along. Thanks again :)
Great news! But the fact that their own website is broken on Safari on iOS7 doesn't give me much hope that this is easy to develop for http://famo.us/
If you go to a financial advisor... he's going to talk asset allocation and diversity.

I was in the same situation as you. I got some good advice and purchased real estate. I bought a home for myself and and a rental, got another rental 2 years later and 4 more over the next 10 years. 20 years later and I have $2M in equity in property that has never been underwater and a nice annual income stream(60K+) that I don't do much for.

Real estate has its ups and downs but its not as volatile as the stock market and is an asset that can not only generate capital gains but also income.

.02
> The purpose of the certificate is to establish trust not privacy.

And it fails in that case. If a government forces a root CA to give it a copy of the root cert key. Nobody can trust any received certificates signed by that CA ever again.
How frustrating is the registration + queue to read the docs =(
Burned and literally are both candidates for that statement.
I thought that was Cappuccino?

http://www.cappuccino-project.org/
It would be unfair to call Meteor's and Famous' marketing "the same". Some facts:

- Nobody knew about Meteor before their HN launch[0]

- Famous appeared at conferences, TechCrunch Disrupt and others with demos of periodic table[1] (which was a ported example from ThreeJS)

- Meteor launched on HN, people loved it, and only then they raised VC and announced it [2]

- Famous announced their funding and sometimes dropped news of various partnerships with "hardware partners" they cannot disclosure. [3]

- Meteor was open-sourced and available with documentation since the launch. They changed their licensing from GPLv2 to MIT later but it all was open[4].

- Famous is open-sourcing their 1-commit repo after 2 years of private beta and now their documentation is in private beta as well.

[0]: https://news.ycombinator.com/item?id=3824908

[1]: http://gigaom.com/2012/11/25/famous/

[2]: https://www.meteor.com/blog/2012/07/25/meteors-new-112-milli...

[3]: http://us5.campaign-archive1.com/?u=4656ba2b0a364690c8530bc1...

[4]: https://www.meteor.com/blog/2012/04/20/mit-license-http-requ...
> it's imperative that all code made for security purposes is carefully considered, and architected to avoid the tiniest bugs.

I agree wholeheartedly, but all you have to do is take a look at these security libraries' code, processes, and recent bugs to realize that the experts are failing at this. Their math and theory may be flawless, but their code is shit.

I think cryptography could benefit greatly from an influx of software engineering. We should be using modern testing and code review practices to bring some measure of reliability and architectural clarity to cryptographic work. The attitude toward programmers who aren't experts (yet!) doesn't exactly encourage this.
Anyone interested in this kind of emergent behavior should check out a great project I worked on years back called Starlogo at the MIT Media Lab. It was designed to help anyone understand decentralized systems and emergent behavior.

Here's a video with a demo of ants foraging for food - basically ants are red, food is blue, and pheromones are green: https://www.youtube.com/watch?v=9liT8epLnAQ

You could "program" individual ant behavior and tweak parameters to see how that impacted the overall behavior (how far do ants go from the nest? How fast do pheromones dissipate? etc).

It's mostly defunct now, but it looks like there is an online version called StarLogo Nova, you see a sample and play with it at http://www.slnova.org/djwendel/projects/2/
One interesting thing about Heartbleed that I don't think I've seen discussed enough is just how badly screwed anyone relying on SSL to protect against state-actor level monitoring is.

Assuming that state actors (at least NSA, possibly others) are engaging in bulk traffic collection against websites protected by HTTPS, and assume that the agencies used the heartbleed attack to grab as many private keys as they could.

Prior to Heartbleed you were protected. Now (unless the service used perfect forward) security the agencies can decrypt all your communications done under the old key (which usually means in the past 2 years).
NO! It's all done locally via JavaScript -- we never want to get your master password / encryption key -- we go through great pains to ensure that never happens.