skysight-inc/HackerNews huggingface dataset:
"It's not about working harder; it's about working the system." - Evan Spiegel

Yes indeed, and when it comes to working the system, wealthy elite families have achieved quite a formidable monopoly.

This is an incredibly good article to act as a counterweight to all of pg's essays on merit based success. It's easy to forget that Zuck, PG, and many other successful people are part of an extremely selective elite (e.g. Ivy League attendants), and that this may have a significant impact on their success.

Of course, members of this group will tell us that their Ivy League networks are totally independent of their multi-million dollar exits, but an impartial eye would scrutinize this relationship more closely.
Well... Certainly better right now.
I fear she will. I know this is harsh, but based on the mugshot she could possibly revert back to being a man while in prison.
I switched from DynDNS to NoIP last year, but I'm probably going to switch again soon; NoIP's Mac auto-updater is broken and they don't seem to give a shit about fixing it.
Have you ever tried axssl or polarssl?

I am just curious; I make no endorsement of either.
That's actually a cool idea. I wonder if that would hold up.
and you can still write bugs in Haskell.
It's been patched since, and is no longer vulnerable.
Yes but which ones in the food supply is your complaint with?
U.S. Air Force is testing Google Glass and building apps for battlefield use
Charge your cellphone in under 1 minute
> Once I didn't get their email, and they purged my whole account. I had to recreate it as a new account, and by now they had severely restricted the list of domains that were available for the free service, so I couldn't get the old domain back.

This exact same thing happened to me a few years back - didn't even notice the email, so I lost a name I'd had for years. I get that it wasn't really 'mine' per se; I might have paid for it anyway, since their service at the time was hardly expensive, but cancelling my stuff abruptly seemed... well, not exactly dishonest, I suppose. Let's go with 'distasteful.' I moved over to afraid.org's free dns service, and never looked back. It's sad it took Dyn so long to come out and admit they weren't interested in free users. I hope their new service works out for them, and that their free users are happier in their new homes.
it's the worst of both worlds, for all to enjoy!
Good job guys! :p
New smartphone battery can charge in just 30 seconds
Ask HN: Should marriage be a human right?
Locke, Paine, and other enlightenment thinkers believed that human rights belong to individuals. A marriage is a union between two people. It's not something that every individual can participate in because not every individual has someone willing to marry him/her. Some may say that having someone who loves you enough to want to be tied to you is a privilege, not a right. Should marriage really be a rights issue, or should it be a privileges issue? Is this just semantics?
The "grownups" reference was snide and dismissive of the great work done by young founders - I should not have used it.

For context, I was comparing the origin of Atlassian and Workday. Atlassian was started by two 22 year olds through a sizeable credit card debt. Workday was started by a 65 year old ex-PeopleSoft CEO with his funds and an additional $15M in VC finance.

"Mature" would have been a better suited word. Thank you for calling me out on it.
I may err, but I don't really think it's that big issue. First off, "low level" isn't exactly synonymous to "efficient machine-code", I guess we well can expect from languages like Rust to become both efficient and predictable after a while. In fact, every non-lazy well designed static typed language implementation makes it very much possible to write code that compiles in pretty predictable way, so you can control execution time as well.

And the last, but not the least, timing attacks aren't chief vulnerability, really. If you expect a timing attack being real hazard you can randomize return time explicitly.
I need to keep a "help my X device was stolen and I have evidence!" web template stored somewhere...
Indeed, and here it is: http://waltersmith.us/newton/COMPCON-OS.pdf (I also updated the c2 wiki.)

The MMU features were available on ARMs for a surprisingly long time, and I remember seeing at least one embedded OS other than Newton that used them.
NIH Stem-Cell Programme Closes
No.

A "right" is a legal claim against someone. You have no right to someone else, just yourself. Other than that its contractual and does not require a state body to sanction said contract.

So, no.
I would guess led tree beneath something frosted. Proof of concept as to what websockets are capable of. Oh, and how amazing javascript can be.
Ask HN: What OSS has the best written (clean) code you have seen?
With some topics [1] talking about how bad the OpenSSL code is to read, I was wondering what would be an OSS project that is a good contrast to it.

I'm looking for code that you think is enjoyable to read/easy-on-your-eyes that's a major part of open software.

[1]: https://news.ycombinator.com/item?id=7556407
To ensure that this doesn't devolve further into pedantic details about specific chemicals, let me move back to the overarching point and ask you a question:

Is it your assertion that there are no chemical additives in the food supply that are harmful?
Bounties should work in principle: people who rely upon and care about having a secure crypto implementation should be willing to put up money for bug bounties.

Seems like people don't care enough to put up the cash. Why?

There are data breach insurance policies for sale. Why aren't these insurance companies putting up bug bounties for responsibly disclosed vulnerabilities? Is there a market gap here?
Anyone who knew me then would laugh at the idea that I had a vast social network. My colleague sat next cubicle over at work.
I'm not sure if OP has anything to do with "wayfinder.co", but I'm not a fan at all. It should be much, much easier to close the frame and view the actual URLs of the pages they're displaying.

It makes it appear as if the content is actually owned by wayfinder (maybe this is actually the case but I'm doubtful).
> Also, my impression based on things like twin studies is that rich parents's ability give their kids unfair advantages is much weaker than you think. But that's a whole other discussion.

We're not saying kids like Spiegel are wholly untalented. They come from excellent genetic stock. But as discussed above, they are nowhere near the true outliers in terms of merit. Think Putnam Fellows, Math Olympiad Champs, etc.

Yet the Spiegelites' success is so far above that of these far more talented folk in the startup scene, that one cannot help but suspect that merit appears to be worth far less than class as a determinant of success.
It will be difficult. It's hard enough working for many US companies remotely as a native English speaker.

Let your work speak for itself. This means a couple things.

1. write self-documenting code - whatever that means for you or your team

2. use a style guide. if your team doesn't have one, ask them to create one or do it yourself and get input from the team as you do.

3. You must be capable of putting out consistent excellent work.

4. Don't work for a company that doesn't already have remote procedures in place. You don't want to be the guinea pig as a non-english speaker. This means the company should already have good remote collaboration tools in place.

Additional advice:

1. use video chat as your default form of communication. Get a good webcam.

2. Make sure there's some flag that lets your team know when your available especially if you're in a different time zone. Whether that's signing in to a work-specific IM account or some other method is up to you to decide

feel free to contact me directly if you have any more questions. I've been working remotely for a company that doesn't take it seriously for nearly 3 years and have learned a lot the hard way.
Obviously, you're going to have a lower risk of theft if you take everything with you to the restroom. But there are places I've lived where I am fairly confident I could leave my laptop unprotected in a coffee shop once a day for my entire life without it ever being stolen.
In Chrome, it doesn't scroll. It appears to be only the image and the headline. (Edit: nope, nor Firefox either, for me)
i wish that there wasn't a double standard where open source is expected to be well-documented or elegant (etc). (especially for smaller scale projects that don't have the infrastructure / time)

for OSS projects that are hard(er) to read, the question goes - why hasn't the community helped clean it up / document / etc?
"Wave of fresh techies... who are all like Kevin Rose"

I think someone has some misguided views on techies...
Yes, to be clear (esp. for others reading this thread) this is really bad, but shouldn't be able to compromise your ssh server keys.

However -- ssl certs and session keys are a likely target, and combined with passively logging traffic that is enough to compromise all data going over ssl, such as login/passwords and data.

Problem servers include not only web servers, but also imap/pop and smtp servers supporting tls (via openssl -- afaik gnutls isn't vulnerable to this bug).
Airpooler
(too late to edit: "gamers aren't synonymous with teenagers")
I'm hoping to see a chrome extension that flags every certificate issued before 2014/04/07 as insecure. In the meantime, I am switching to firefox to use certificate patrol for anything I care about.
Yeah I fear she already fenced it.
That's a nice sentiment, but for whatever it's worth: Neel Mehta is one of the best-known and most well-respected people in vulnerability research.
Where is the airport data from? seems wrong, except if you are only counting intl airports
Have you been to San Francisco? I don't know the rate of stabbings, but I have seen plenty of violently unstable people here that I wouldn't want to provoke.
Starlite, the nuclear blast-defying plastic that DIDN'T change the world (2009)
Interesting. In addition to victim blaming, it appears that all bystanders are also being blamed.
But, like you said, you still need protection of kernel data, which means that you need to execute kernel code on a stack not writeable by the user, at a greater permission level that allows ONLY the kernel code to modify kernel pages. Single-address-space or not I can't see these needs being met in a cheaper way than what we already have, presuming that kernel code/data are in never-invalidated global pages available in every address space.

Edit: Oh, I see from your other comment that you're talking about the benefits to people who don't feel this need.
I knew I was on sfgate.com when my browser stopped responding.
I edited it to tone down the linkbait. If anyone suggests a better title, I'll change it again.
A number of people are suggesting that this Haskell implementation must be worse than OpenSSL. It probably is. Writing good crypto code is hard. There are probably bugs.

Many are saying that one problem with Haskell is that you can't eliminate side-channel attacks due to features of the language. I disagree. There is no common language better than Haskell at encoding invariants in the type system. One could, for example, implement a "biggishnum" library in Haskell using large but fixed size integers and constant-time operations.

Free monads are a powerful idea in Haskell[1]. They allow one to easily generalize "interpreters" over sequences of commands. In Haskell, more-so than any other language I've ever used, one can decouple execution from algorithm specification.

Free applicative functors generalize further[2]. They define a computational structure that must be fixed a priori. That is, by definition a free applicative functor cannot know the state of the data during its execution.

There are some problems with this. Applicative functors have an operation which can lift regular functions into it. That operation would have to be hidden, so that only a kernel was exposed that offered the ability to initialize data, and then perform computations upon it.

But it's possible to do this. It is actually not a radical idea to imagine this being done in Haskell. Making a library and a set of primitive operations that can be used by an end user safely, in provably constant time is possible.

[1] http://www.haskellforall.com/2012/06/you-could-have-invented...
[2] http://paolocapriotti.com/assets/applicative.pdf
He's using faces he designed before H&FJ: Benton Modern[1] and Interstate[2] (as noted on Daring Fireball[3]).

[1]: http://www.fontbureau.com/fonts/bentonmodern/
[2]: http://www.fontbureau.com/fonts/interstate/
[3]: http://daringfireball.net/linked/2014/04/07/new-york-type
Autistic Teen Does Q&A on his first novel in honor of Autism Awareness Month
I just tried it. They mailed me asking for credit card / paypal details. Are you sure they didn't just bill a payment method you previously added?
Which ones are you stating are harmful?

It's not pedantic to ask if you have any good examples of the chemicals you are complaining about.

Derailing the conversation with complaints of pedantry is, however, rather unhelpful.
There are actually two similar but distinct interpretations of "ashamed" and "embarrassed." One implies that there is direct personal responsibility involved, as in "you deliberately lied to me, so you should be ashamed of yourself." The other is essentially the opposite of feeling pride, and doesn't imply any personal responsibility, as in "I'm ashamed that my school would make such bad decisions."

You're assuming the first interpretation, but one could, through application of the principle of charity, assume the second interpretation.
Sorry for the offhand question, but does anyone else think it's a little strange to leave a laptop and mobile phone unattended in a public space, even for 5 mins? These things are expensive dammit! Pack em up and go to the toilet with em.
From the website, it seems that they proved that their implementation is correct with respect to their formalization of the interfaces in the RFCs. That is, their implementation is logically correct.

However, this says nothing about whether or not the implementation is secure. They admit that they don't model time in their proofs, so I doubt their implementation is free of timing attacks. Moreover, its written in F#, so you have to trust your CLI implementation to be bug-free as well.
It really does seem like Hoefler pulled one helluva scam on poor Frere-Jones, here. And I really hope FJ gets some relief. But. Talk about painting a giant target on your forehead...
I'm surprised Ukraine didn't consider this tactic pre-emptively against Russia, considering they handed back their nukes.

Instead of a minefield, place gas pipelines around bridges and chokepoints that could accidentally suffer "maintenance failure" and explode in case of invasion.

I'm probably being too simplistic about this, I suppose it would just give Russia an excuse to crush Ukraine using force.
Yes. It doesn't take a lot of resources. It's already been noted on Twitter that someone - possibly quite a lot of people - were using HTTPS Everywhere lists to find interesting targets. Mass hacking and drive-bys are trivial. And remember, it's not just certificates! It's anything that is in your sever processes memory (the process that implemented SSL), so it could be passwords or other credentials.
"Soylent is betting on the fact that consumers want to separate the nourishment of food from the ritual of eating."

Not at all! The ideas is that many, or at least enough, consumers want nourishment without the effort or time spent on prepping, cooking, and cleaning up after a meal.

Aside from Soylent, the only way the person who can't cook -- or can't cook well, or hasn't access to good cooking facilities, or just doesn't want to spend time cooking -- can get good nourishment is to pay a lot to eat at high-quality restaurants -- and end up spending almost as much time on the process. Or, much more likely, to eat crap such as Ramen, MacD's, frozen dinners, PB&J sandwiches or take-out pizza slices and beer. And ironically still pay a very high price per protein calorie and fall far short of MDRs of many things.

Soylent's market is obviously not the people who like to cook, or have partners who like (or have the time) to cook, and access to a proper kitchen and pantry and such. It's the bachelors of the world, the grad students, the people living in studio apartments writing code all night. And I think it will do very well from and for them.
Eh, the jotform doesn't work after you sign up anyway so this site is harmless. xD
Being widely used is a problem. Monoculture leads to exactly this kind of mass vulnerability.
Have we really got to the bottom of the wage debate for Men and Women?
My official job title designated by my company is GIS Developer.

Since I hate acronyms and most people don't immediately know what GIS is (Geospatial Information Systems) I just say software engineer most of the time
That's not necessarily true. There is a cost to lowering the risk of theft. In this case, it's mostly the time it takes to pack up the stuff, and potentially losing your seat in the coffee shop. There must be point where it's not worth lowering the risk of theft. It would be highly dependent on the cost of your possessions, the likelihood of theft, and the cost of risk-lowering activity over one's lifetime.
It sounds like you are describing an "implementation problem" (i.e., OpenSSL's code sucks).

But then you suggest this could be a reason to throw out the notion of "ciphersuite flexibility".

Aren't these two separate things?

Perhaps the flexibility is good.

Maybe the problem is one of complexity and quality control.

Too many ciphers, and incoporating ones of dubious quality.

I still haven't seen anyone mention the other SSL libraries, e.g.,
axssl,
polarssl,
matrixssl,
etc.

As for CA "infrastructure", what if the user uses OpenSSL's ca function?

She creates her own CA certificate and key and installs it on her device.

Then she downloads a website's certificate, signs it and installs it on her device.

Regardless of whether a wesbite has a paid-for certificate from a commercial "CA authority", she needs to make the final decision whether or not to trust it.

The user is the ultimate arbiter of which website certificates she wants to sign and install. (Not browser authors.)

Websites just need a central repository to publish their certificates.

They already do this for their "domain names" by having them published in a publicly accessible zone file (ideally, the user can download the zone file, as well as query it piecemeal over a network).

We as users trust that these zone files are accurate: specifically, we assume the IP addresses for the website's nameservers are correct.
This seems interesting.

I'm completely ignorant about Haskell. I see there's some code in a "Benchmarks" folder; I think it would be highly interesting to see a comparison in speed between OpenSSL's SSL implementation and this one (the operations that a web server would normally have to do).

Can anyone make that happen? I can't even figure out how to execute Haskell code in Ubuntu 13.04.

Seems to me like if the code base is 20 times smaller than OpenSSL, and we can assess whether timing attacks are present or not -- and if they are, replace the timing critical code with C code, perhaps -- that this would be a real alternative to OpenSSL. Am I being unrealistic in thinking this? Not that everyone will adopt it, mind you, but that adopting it would be a wise thing to do?
The Chicago Open Government Movement
Presumably the Supreme Court judgment which vacated the result of the Proposition 8 plebiscite doesn't qualify as "the power of the state".
What good is it to revoke one, if it still works because no one checked the revocation list?
I agree wholeheartedly. Graphic design work tends to be more specific to an individual project (except for the things you mentioned like icons etc) whereas developers often need to extend a framework and since the work is already done, why not give it back to the community.
Because this appears to have been planned well in advance.

That lends support to the idea that no one would have believed him no matter what he had said.
Great to see both workday and veeva mentioned here, both tri-valley software companies proving that success can come in the Bay Area outside of Silicon Valley and San Fran.
With the number of cameras, device tracking and that everything is in cloud nowadays...no. In fact, it's kind of nice that we might be resembling more quainter times.
I decided long ago that I'd rather try and possibly fail than never try at all.
Bitcoin Foundation: Blog
Busted (lua)
Switch javascript off, makes it a lot more readable.
Leor's a great guy and is still actively programming.
GHC allows you to force fields to be strict rather than lazy.

http://www.haskell.org/ghc/docs/7.4.1/html/users_guide/bang-...
I'm wondering about a situation where forgetting a strictness annotation is the analogous Haskell situation of forgetting to bounds-check some input. There are lots of ways in Haskell for something not to be evaluated. (No, the simple fixes like 'use strict fields' do not cover all cases.) To put all of them behind a free monad seems like it would be giving up a lot.

In C you could have made some 'safe buffer' struct together with some safe set of functions. But people didn't do that.
You ignored my first point. You can trust the self signed certificate to be used by the same entity(A or C) after the first connection, admittedly you may have been MITM (by C) for that first time(and renewal times) and because of that you may be screwed. Alternatively if you are trusting other entities(B) to verify the certificate of A while B are not trustworthy then after that first communication (even if that first communication was legitimate) another entity (C) can pretend to be A and so long as B verifies C then you are in trouble. I am pointing out that they are different risks and I agree that in nearly all use cases it is better to use verified certificates than self-signed for general internet use, that doesn't mean that there isn't a reason to do otherwise though.
What is the modern day equivalent to this? So many have commented that this was their first (and mine too!) exposure to computers. Something in php? Rails?
It doesn't take much power to shoot a satellite out of the sky. The hard part is actually hitting it.

Let's say you're aiming at a GPS satellite in geostationary orbit. According to Wikipedia (http://en.wikipedia.org/wiki/Geostationary_orbit) you're trying to hit a target that is 20,000 miles up in the sky moving at about mach 10, and the target is the size of a car. We don't have the tech for that kind of dumb-fire accuracy, even if you fire the gun from above the atmosphere. At 20,000 miles, you would need to reliably place a shot within slightly less than 1/1000th of an arcsecond.

In order to hit a target under those conditions, you would need a projectile that can do course corrections on the way to the target. Like a missile.
https://www.kickstarter.com/projects/lavallc/ion-a-music-det...
How Uber could use bikes to take on amazon
lots of red flags, violates laws of thermodynamics, no patents, cant reach deal because of details like equity or secrecy, etc etc. 5 year old article and still no results/deals.. smells like snake oil.
China’s steelmakers owe $484 billion
"But crypto is hard! Don't roll your own", say everyone, ever.
What are people using Facebook for these days? I share images with Dropbox and use WhatsApp to talk with people. I haven't seriously used Facebook in years and when I do log in it's just a bunch of spam. I just don't see myself ever needing to use something like Facebook again. I think maybe there was a time when creating profiles was a thing, but is it still a thing? I don't want to share pictures with a million people anymore, just my family and really close friends.
How to play this game? .. i downloaded the source but cannot run it..? is there any interface that i require?