skysight-inc/HackerNews huggingface dataset:
Don't know about the OP, but I use a combination of sneakernet and scp to keep keepassx up to date across machines.
Thank you. Edit made. Need moar coffee.
I have updated the article to add some clarifications in response to the comments posted here.
I think you are overly optimistic here. Data retention is still perfectly legal and I'm sure it will continue in many European countries. They are just no longer required to have a data retention law. It now depends on the lawmakers and the constitutional courts of the respective countries to take actions.

But I agree with you, in Germany data retention is now very unlikely to happen. For the countries that have implemented it already, it's going to be very hard to reverse, though.
"Rust has a lot of promise, but even now it keeps changing every other week..."

A larger problem, in my opinion, is that things like OpenSSL are used (And should be!) from N other languages. As a result, calling into the library requires almost by definition lowest-common denominator interfaces. Which is C.

C code calling into Rust can certainly be done, but I believe it currently prohibits using much of the standard library, which also removes a lot of the benefits.

C++ doesn't, I think, have as much of a problem there, but I'm somewhat skeptical of C++ as a silver bullet in this case.

I don't know about Ada and any other options.

[ATS, anyone?]
Strange light on Mars
There is quite a bit more to Logo than turtle graphics. It is a complete programming language; essentially a dynamically scoped m-expression Lisp with support for fairly sophisticated functional programming[1]. In what way is your system "much higher level"?

[1] http://www.cs.berkeley.edu/~bh/v1ch0/preface.html
“See you in the trenches”: Uber’s threat finally hits as Postmates surges
PayApp :)

https://payapp.io
we can plug this seemingly endless source of bugs which has been affecting the Internet since the Morris worm. It has now cost us a two-year window in which 70% of our internet traffic was potentially exposed. It will cost us more before we manage to end it.

Could one make a new kind of OS where C programs are compiled to some intermediate representation then when run this is JIT compiled within a managed hypervisor sandbox? Could Chrome OS become something like this? Does this already exist? MS had a managed code OS called Singularity.
You are assuming that this is a situation where a contractor is very similar to an employee. These only really exist as employers try to avoid employment laws. This is an employee, not a firm in the context of that paper.

A "real" contractor negotiates rates regularly and with different pricing models, takes work from multiple contractors, pay for their own tools etc. In some cases you genuinely have a "firm" with one client but that's rare.

The question is are these uber contractors contractors in this sense? I think they are.
LHC team: Process of restarting the massive experimental mechanism has begun
I'd emailed Raymie Stata directly. Never, ever, got a response. Contrast with Microsoft: I dialed the switchboard, tequsted the EVP in charge of Hotmail, he picked up on the first ring, and I was talking to the relevant manager 15 minutes later who worked with me for a few months resolving the issue.

I'm not a Microsoft fan, but their people were very professional in this case.
thanks.

the latter is especially useful. I'll pass it along to people for extra reference.
Well that's exactly the reason the one-time pad isn't used anywhere. It's perfectly secure but basically impossible to actually implement securely because of key distribution.
I don't understand the hate for backticks either. I used to dislike them too, when I was just a hobby programmer, and used a Slovenian keyboard layout (even for programming). Needless to say, after switching to English layout, my programming skills quadrupled - ` isn't the only symbol barely accessible (without finger acrobatics) on international keyboards (other examples include: {}][|~\^ ).
I had mil.af for a year (.af is part of CoCCA). When I tried to renew, the payment was refused and the domain was dropped. The NIC didn't reply to my emails.

While I expected something like that to happen eventually, it might raise a flag about registering domains with any CoCCA members, if you're considering security.

(Apart from anything else, I did wonder whether its similarity to af.mil would cause issues down the line anyway.)

CoCCA members: http://www.nic.net.sb/index.php/about/members.html
It might be a coincidence, but last month I received an alert that someone tried to sign in to my hosting control panel using a correct password (which was long and random), but was blocked by a geo-filter (which blocks requests outside of my country) fortunately. I do not know up to this day how my password did leak, and that's one possible candidate cause.
Trance Music – Upper Case Disaster
Having numerous parties does not inherently help with anything. There are plenty of examples of countries, eg in Europe, with lots of parties and very dysfunctional political systems.

What matters the most is the culture of a country, not whether it has 2, 4, 6, or 27 political parties. A dysfunctional culture with a dozen parties will still produce a dysfunctional political system.
And this is what really makes me mad:

$ ./heartbleeder yahoo.com

VULNERABLE - yahoo.com:443 has the heartbeat extension enabled and is vulnerable to CVE-2014-0160

I can understand when some random service has vulnerability like this. But big corporations like yahoo should resolve this immediately.
After getting through the trouble of listening to so many videos - I'd suggest to put 1-2 paragraph answer for each video instead of 1-2 words.

Lots of important details are lost together with fluff.

Although I always appreciate such work - summarizing videos via get-to-the-point text is a great service.

PS: I'd ignore SEO videos of more than 1-2 yr old - unless tracking Matt's t-shirt color is someone's hidden fetish...
> We are in a position in which OpenSSL was ENTIRELY INSECURE and has been for years, because of a trivial bug that can pretty much ONLY happen in the exact language that OpenSSL was implemented in!

This is incredibly, incredibly false.

Pointers exist. Raw memory accesses exist. Even if you're writing code in a language that hides them from you, they still exist, and there is still potential for somebody to have done something stupid with them. I guarantee you that there are JVM's in the wild with vulnerabilities as severe as this one. Arguing for the use of languages that intentionally cripple the programmer on the theory they make vulnerabilities less likely is silly.

I'm not denying the severity of this issue. But bugs happen. All we can do is fix them, learn from them, and move on. The lesson to be learned here is that really messy code is a big problem that needs to be fixed, because it makes auditing the code prohibitively difficult.

The proper response IMHO is a ground-up rewrite of OpenSSL. A lot of big players use OpenSSL; financing such an endeavor would not be difficult.
Not understanding some of the responses, I think they did a pretty nice job trying to address the issues in their posts. Of course you could have been MITM but the vast majority of that danger comes from using public wifi and if you're smart you should be using a VPN provider anyway.

Realistically speaking here they found out about this at the same time as everyone else did and addressed it pretty quickly and professionally. Is there really anything else they or anyone else could have done, other then just use KeePass? Which has it's own major inconveniences that can only be addressed by some sort of cloud based solution (whether controlled by you or someone else), which probably would very likely have been using OpenSSL as well ...
This would be an image of a physical good.

For her: take product image > apply price > put on Facebook;
For user: see product image > click link to buy > purchase
If you're the NSA, you can probably get a CA to sign a cert for you, no need to steal theirs.

But MITM can still affect a lot of people if the attacker can get into a big gateway (e.g. large company, ISP, university, etc).
Can I suggest you take a quick look at ATS? The language itself is kind of horrid (and I am a ML fan) and the learning curve is way steep, but the thin, dependently typed layer over C aspect is actually quite nice.

Note: I'm not suggesting it for current production use, but rather as something that could be expanded further in the future.
Admittedly, I have no special expertise. My understanding is that while for certain kinds of force projection, they are the only game in town, they are such a rich, fat target, a larger and larger portion of their operation (in terms of manpower, arms and electronics) gets devoted to defending the carrier, and this squeezes out the force projection capability. I believe the cost of production of an aircraft carrier is around $12 billion, and I'm not sure if that includes the ~$1 billion worth of aircraft on board.
This is a problem for python numeric/numpy, not Python.

Let them fix their own problems
So You Think You Want to Manage?
I've been using Dropbox. Is that a bad idea?
But OpenSSL is embedded in many other languages and applications because it's written in C. Show me a low-level language with a stable syntax that fixes the problems caused by using C that can also be embedded in Java, Python, Lisp, Ruby, etc etc. I don't think you can.

Some things need to be in C because they need to be run everywhere, including embedded in applications. No other language does this, to my knowledge.
Working in the Games Industry: a job to die for?
This is a bit different than what your Dad has been doing: here, an electrical stimulation allows the patient to consciously move the appendage (or engage in sexual activity). In your Dad's patients, a box is sending electrical signals to appendages to get them to move. iiuc
Why the Mobile Web Will Win
How Long Does it Take to Make Apps Nowadays
Python's syntax is already pretty ponderous, this kind of thing pushes it rapidly toward bash-like incomprehensibility. I've been a big fan of the language for years but this kind of thing makes me consider jumping to Lua or something which is more sparing with new complicated sigils.
Robots Teach Robots to Beat Them at Pac-Man
I can see how you would think being fired from a job is on the same level as not being allowed to freely live your life without someone shitting on your rights. Wait no I don't.

Everyone is entitled to free speech, but that doesn't mean there aren't consequences for what you decide to do with it.
Why Build a Constant State of Flow at Your Startup
The domain name is pretty funny. Props.
Show HN: First Track – Crowsourcing triage for first responders
It barely even supports CSS. IE6 was released more than 12 years ago and it was behind even then! I'm amazed people are still able to screw with their code enough to make anything work on it.
googleapps, facebook, youtube, nike, among many other gigantic brands seem to think it is just fine to encourage their users to have a better experience.
For SSH it's common to use private keys to communicate securely with servers using public key cryptography. This is convenient and protects against key loggers.

What are the possibilities of using public key cryptography in the browser? For example, I upload my public key to some website, create an account which is locked to my private key. I get the convenience of not having to log in manually and some extra safety.
I've basically stopped believing any science headline from a major mainstream news source. CNN? MSNBC? Fox? Huffpo? Don't even bother, they're misinterpreting the science deliberately. Dat clickbait.
How about Symantec? Those of you logging in to renew Verisign certificates might want to take note:

http://filippo.io/Heartbleed/#trustcenter.websecurity.symant...

It's vulnerable as well.
This is pretty good, too. I wrote it. https://www.trycelery.com/pr-guide-ebook
There's a plugin, but I haven't used it yet. https://github.com/qnrq/rc_openpgpjs
Being able to control your bladder is probably also a huge benefit.
Show HN: Promoter.io, a SaaS platform built for measuring NPS
I can't see how that's a defining feature for it, because couchdb and others also do this really really well. Most of the time you don't even need db drivers, because couchdb is just a REST server.
On Ubuntu 12.04LTS you need to upgrade both 'libssl1.0.0' and 'openssl' - I’d check that the version of both is: 1.0.1-4ubuntu5.12

And then restart everything that comes back from a

sudo lsof -n | grep ssl | grep DEL
We work in healthcare software, and IE7/IE8 support is mandatory, otherwise we'd be ignoring potential customers and losing current ones. Sure, they have iPads now, but healthcare IT moves really slow and we have to support that pace.

It's really not as simple as stated above. It's not up to us to kill it off.
Product Managers and Data Scientists
Why not use constants then?
[Wavefront] OBJ is dead. Long live OBJ!
Quora Down :(
"This is CNN"
Factually incorrect as of posting time.
last pass never decrypts or encrypts anything on the server.

Everything is decrypted and encrypted locally. Their website says so and many many security researchers, including me, have verified that...
I never understood why IE updating lags so far behind. It is free. I understand why updating the OS is a bigger deal. It costs money and is a huge change that involves a lot of work for some.

I suppose Microsoft is partially to blame. You can install any version of Chrome and Firefox on XP, but only up to IE8.
PrintAlytics – Capturing the Print Page action in all browsers
Wrapping axis labels in D3.js
Extensions/Downloads are all cryptographically signed -- I'd hope if you're installing password management software like this that you see that it's unsigned or signed by someone other than LastPass.

Using the extensions to login -- it doesn't matter nearly as much if you're MITM as it would if the website was MITM and you login from the website -- what's in the middle is mostly useful only to do things like mess with you -- delete your sites / DOS your account, but in no way exposes your encrypted data.

The combination of extension use instead of going to the website, perfect forward security, data that's encrypted with a key that doesn't leave your devices, the fact that what you'd most likely leak is a session ID which will be replaced on your next login and that we haven't actually seen anyone utilize heartbleed to get a SSL key yet combine to make LastPass a tough target.

Given everything it'd be far easier to target all the banks and email clients that simply send your credentials right over the wire.

This is definitely a big problem and we're currently working on tools to try to help people recognize what's at risk and help them update it.
Best way to legally project myself from my current company?
I have been working on a website in my own time for around about 5 years whilst working full time for my current employer. The website may be of modest financial value now, I currently don't charge for the website but am considering doing so in the near future. Speaking to a friend yesterday he was concerned that my current employer could have a claim on my website as my contract specifies that any ideas I come up with whilst employed belong to the company.

I was wondering if there is a way I can create a company so that I can protect myself. For example does creating the company in my wife's name help? I'm sure a significant number of web companies start out as hobbies whilst working for a full time employee so I am hoping there are so things I can do to help make sure I create a company on a sound legal footing.

Just to add...the website has nothing to do with what my current employer does.

Any advice greatly appreciated.
I think I would write the fibs expression as

fibs = [true,false].lazy.flat_map{|i| if i then [1,1] else fibs.zip(fibs.drop(1)).map{|a,b| a+b} end}

instead of the author's

fibs = inf.map do |n|
if n < 3
1
else
fibs.zip(fibs.drop(1)).map { |a, b| a + b }.first(n - 2).last
end
end

because I think my way looks a lot closer to the Haskell version. It still has the problem that Enumerator::Lazy doesn't memoize, so finding the nth element of fibs (in either of these two Ruby versions) does an exponential (Fibonacci, in fact) number of additions, unlike the Haskell version that does n-1 additions.
I'm trying with

player.killedBy(function(){throw new Exception();});

...but then that just means I get killed by "function(){throw new Exception();}".

Edit: never mind, got it. Overriding onCollision helps. :)

https://gist.github.com/anonymous/2868beb0cee19259ebb5
SO glad I'm not the only one who chuckled.
Soup to Nuts:Taking an Application Idea to Reality
Lastpass also encrypts data locally before uploading it to their servers. They never get the key used to encrypt your passwords.
Compared to how the original 2048 is written - which is quite clean - the amount of clones (and the speed of their production) being a testament to that - this is disgustingly, unnecessarily complex.
Maths and Science Animations
Why Containers Instead of Hypervisors?
GTLD.club, New Site Focused on New gTLDs
> I think lot more briefcase-based transfers are "cracked", as it were, than SSL sessions.

Lots of SSL sessions are going on right now. It only takes a vulnerability like CVE-2014-0160 to change the score by 100 or so.

Briefcases: 1 in the last day

SSL sessions: 100 in the last day

Edit: if only CVE-2014-0160 had some evocative name.
Sines of certain fractions of pi are equal to certain ratios of square roots though. And once you get to more complicated functions it's very hard to prove anything (e.g. I believe it's still not even proven that pi^e is irrational, never mind transcendental). Could we construct a countable field (for to be able to write down the numbers involved the field would have to be countable, i.e. only an infinitesimal fraction of the reals) that contained everything we need to do this kind of geometry in? Maybe. But I can just as easily believe you could construct a way of arranging objects that required a turing-complete computation to determine whether two objects met, in which case the halting problem makes this impossible.
Developer: Hi Designer! We're really glad you decided to join our project. We could really use a kick ass UI because we all suck hippo ass at design.

Designer: Thanks! I'm looking forward to helping out. I have some really great ideas for the project.

Developer: Thats awesome Designer. I've got you an svn account setup. fred/23rSD@#$SDRsdfEasd5323. Go ahead and check out the source.

Designer: Where do I check out the source?

Developer: svn://open-source-project-x.com/svn/trunk/

Designer: Cool, thanks!

[10 minutes later...]

Designer: Uhh...I don't see anything at that url.

Developer: ???

Designer: When I go to that url, I don't see anything. Safari just gives me a message saying it can't open that url or something.

Developer: Haha! Your not supposed to 'check out' the source as in 'view', your supposed to run that command from the command line. svn co svn://open-source-project-x.com/svn/trunk

Designer: Oh! Sorry, never done this before. So just type that in...Terminal I suppose?

Developer: yeah.

[10 minutes later]

Designer: Man, I'm just having bad luck or something. When I type that command in I get the message: -bash: svn: command not found.

Developer: You've got to have svn installed. Have you installed it yet?

Designer: No, where do I get it?

Developer: Just run sudo port install svn

Designer: sudo port install WTF?

Developer: Do you have Darwin ports installed?

Designer: I don't think so? What's that?

Developer: Grab it from here (insert url here).

[Two hours later]

Designer: Ok, I've managed to get Darwin ports installed and I've checked out the source. Finally!

Developer: Awesome! You should be able to rock and roll now.

Designer: Great, going to check it out now (as in view).

[30 minutes later]

Designer: Developer, you know I think we should really change the way feature-x is implemented. It's just not that intuitive. From a users perspective, we should probably implement it like ...[insert well founded design decision]...

Developer: Hmm... I don't know. I think it's fine the way it is. Besides, it would take forever to implement it the way you think it should be. We'd have to change too much stuff.

Designer: Hmm.......OK.

Developer: So, think you can make this look like a really awesome app?

THE END
Who Are the Major New gTLD Applicants and… (Part Six: Starting Dot)
You don't get very much by MITM of LastPass compared to other targets -- the extensions aren't going to pull down Javascript, the update process only uses signed binaries... You might be able to put people utilizing LastPass.com to login which we don't recommend and isn't done by the vast majority of people.
I wonder if part of it is the mentality.

If a developer works on something for no money, it's open source. If a designer works on something for no money, it's free spec work.

Developer culture praises open source. Designer culture seems to be vehemently opposed to free spec work.
- I have no plans to host downloads. Dropbox, S3, etc. live and breathe that stuff. I think Dropbox is easier for the average person to setup, so I chose to go with them.

- Hosted checkout pages -- like a form directly in your website?

- The dunning emails cannot be edited right now. It's on my to-do list. I'd be happy to email anyone a sample of the format I'm using right now.

- There are no API docs right now. I'm working on it. If anyone is interested, please let me know and I will send you a full list of calls available.

- Snappy Checkout is surely new, but I've been writing software on the Internet for quite some time now. If you want to stalk me, try Googling things like "Singer's Creations", "Weather Watcher", or "Mike Singer".
If it is true it isn't surprising. Mobile devices don't just outsell PCs, they are more powerful than an old PC, and people do prefer to use them. Many people have the choice of using a work PC for personal matters or using a smartphone because they can't or won't spend for both a personal smartphone and a PC, or they won't spend to update an old PC. As for writing, I have seen a lawyer compose a professional letter on an iPhone at blazing speed. Apparently, being able to do that anywhere is more important to her than the advantages of a bigger screen and keyboard. GMail on a tablet is superior to the Web interface, and I can rip through a lot of email responses on a tablet or even a phone while I'm waiting for my tires to be changed.
Domain squatter upset about being scammed out of their squatting
Thanks for the article. I agree with you. Totally believe that the web will win in the long run.
This is clever. Officially clever.
The harsh truths of being a manager
This axiom of Schneier's (I think it's his) can't be repeated often enough:

anyone can create a cryptosystem that he himself cannot break

It's amazing how many times a lack of knowing this axiom becomes a problem / surprise.
Show HN:  ploymer element.
Using my local network or USB. Aren't most if not all your devices using your network too? There is no need for your private data to leave your network when you want to sync!
Comcast makes its case for $45bn merger with Time-Warner cable
The opposite was actually tried by Google for a while: https://www.google.com/chromeframe?prefersystemlevel=true

You've also got https://chrome.google.com/webstore/detail/ie-tab/hehijbfgiek...
However, $10 billion is a big number for everyone, including the US and China, although for them its at least possible. It's 150% of Iran's military budget and about 80% of North Korea's entire GDP.
Mongoose is definitely a pleasure to work with, regardless of MongoDB faults. Well-designed.
It's cool, so that means it's ethical! #hackerlogic