skysight-inc/HackerNews huggingface dataset:
Yeah. I don't generally care too much if somebody's going a bit fast, so long as they aren't driving erratically. What does cause a lot of swearing and the occasional close call:

- People merging on or off the highway at unsafe speeds (usually, too slow), without looking and picking a spot in traffic to merge into;

- People "being polite" at intersections;

- People not using their turn signals;

- People cutting in traffic, swerving, cutting off other cars, tailgating, or otherwise driving too aggressively;

- People trying to beat the light;

- People talking on the damn phone -- I don't care who you are, you can't do that and pay full attention to the road at the same time;

- People daydreaming, hanging out with their passengers, otherwise not paying attention to traffic both ahead and behind them.

Fast drivers are almost the least offensive nuisance on the road.
FOR ENTERTAINMENT PURPOSES ONLY.
Right. Exactly!

That's why I want to know what she did other than fill a post.
My usual suggestion would be "that's part of the infrastructure, so governments should get together and foot the bill", but this approach doesn't work for this particular use case.
Where is Jason Bourne when we need him?
> most people would use it as a follow-only service

Well the majority of this 44% is almost certainly just spam accounts.
Need:

Help configuring IPV6 public address pool to Ubuntu hosted lXC containers
> indentured labour.

Could you explain, I'm not sure how this is the case?
The more early-stage a startup is, the more they probably value startup-y breadth and self-motivation higher than raw in experience in any one category. So looking for early-stage startups where your last couple years will be a strength, not a weakness, might work well.

The monthly "Who's Hiring" posts and YC company job posts will be great sources these kinds of companies.
Is their web site ... for real? Who would donate $10 etc when it seems at first pass as if they only entertain massive donations. Hmmff.
They think that the embedded chip (which they call a dielet), which responds to a crytographic challenge from a handheld device on an assembly line, can avoid testing, which is much more time consuming and complicated. To test, you need to connect the device's pins to something and power it on. These devices are for military systems: you'll need to test lifespan and performance under a variety of environmental conditions. I don't know if the dielet idea will work out, but it's specifically to verify authenticity without having to test.
NATO : Russia’s accusations – setting the record straight [pdf]
Why Blinkist Doesn't Work With Ben Horowitz's 'Game of Throes'
Remote, Ruby on Rails developer, Triggit

We are looking for a full overhaul of our client facing Ruby on Rails administration interface. We already use cutting edge technology, and we have a need for a fast and feature full site. By cutting edge, we mean the latest web technologies including websockets, AngularJS, Rails, and Redis.

This position is 100% remote and will require strong communication skills, video chat availability, and a strong work ethic with dedication. We coordinate with IRC, Github, and other tools to execute effectively.

Apply at: https://hire.jobvite.com/j?cj=oZVMYfwo&s=hacker_news
Q: will boycotting Dropbox even matter if you're a free user?
What is your citation for 65mph collisions being nearly 100% fatal?

I find it hard to believe that two cars rubbing when travelling the same direction would be fatal.
I'm very surprised how low the donation is. This proves that OpenSSL was maintained more from contribution / volunteer rather than professionally. No wonder why they were not the first one to find the heartbleed bug...
Both. Counterfeiting, or substituting recycled parts, can be for economic reasons, or can be a hostile government that managed to substitute its hardware into the supply chain, for sabotage or to create backdoors.
I'm not sure about $800k a year, but taking a page from Tarn Adams, OpenSSL should be able to raise at least $2k a month by:

Sending donors one of either:
a) a short story
b) a picture drawn in crayon
MIT creates shapeshifting furniture that can transform with a gesture
I have been wondering what the value is of being continually up to date. One of my gripes with being on twitter is that you get to be up to date on things you don't particularly want to be up to date on. I wish there were an easy way to filter things out.
Radare2 Summer of Code Crowdfunding
Along the lines of the "I believe button"; I've found after reading several legal briefs and opinions, I'm able to quickly determine based on a section's heading whether it's interesting contentful content or just legal cruft. I'm 95% convinced (though without evidence) that everyone in the legal profession does the same, though obviously they must have a broader concept of what's interesting content. The rest is just citation copypasta, and that's okay.
The point about it being VERY serious, I can accept. The rest... yep, pure bull. Also "btw Open Source sucks, proprietary good".

The article is rubbish.
The third paragraph flatly says it is in the national interest to disclose zero-days.

The fourth paragraph says there is a "reinvigorated" process for deciding whether it is or not.

Obviously the fourth paragraph is more correct -- is the third paragraph just there for an easy inaccurate quote?
If the statement is true or not doesn't matter because this gem screams bullshit:

it is in the national interest to responsibly disclose
the vulnerability rather than to hold it for an
investigative or intelligence purpose.

Or to read that differently "The intelligence community would disclose 0days rather than use them as weapons".
As Luke Wroblewski likes to say "obvious always wins" [1]

[1] https://twitter.com/lukew/status/454637989503590400
Letting a bug/vuln this broad go unpatched for years for the NSA's own benefit is beyond negligent concerning our nation's security.
There hasn't been any warming for 17 years. How can the graph point up? I'm sure I will get lambasted. But there hasn't been any warming for 17 years.
> Unless there is a clear national security or law enforcement need, this process is biased toward responsibly disclosing such vulnerabilities.

wow, those two caveats are broad enough to remove any real meaning from the process.
The whole glove box routine should be avoided. Fumbling for docs under stress is not where you want to be. Better to keep your insurance/registration in an envelope in the visor.
The doctors in Minnesota are still saying that the virus that this person was infected with was “Lassa fever” a different form of Hemorrhagic fever than Ebola, but given the area of the country that the passenger traveled from, many believe that this is a case of Ebola.
Pycon Language Summit notes
This is a good point, however:

Crumple zones can be independent of weight.
A lighter car is more able to stop (less energy for brakes to dissipate) or avoid a crash (can sustain higher cornering forces, tires being the same).
probably make them happy.
Could just fill up to your quota with garbage.
A 501(c)(3) is expensive in legal work. Unless they can find a pro-bono lawyer, this puts the plan in the "it takes money to make money" category.

Then it still doesn't guarantee they'll increase donations without marketing so people know about it. Until Heartbleed became public, I imagine few companies were aware that OpenSSL had so few resources and such great needs. They definitely need to capitalize and hope the bad press doesn't make large companies seek an alternative.
Nice project, I remember seeing this before.

Small UX issue, on the input field for email addresses, the text isn't a placeholder (doesn't disappear when you start typing).
I suppose the lack of interested reviewers is a decent indicator of how many people/companies actually cared about the heartbeat feature.
Are geeks more likely to be free users of DropBox than non-geeks?
> The U.S. National Security Agency knew for at least two years about a flaw in the way that many websites send sensitive information, now dubbed the Heartbleed bug [...]

Interesting that they say "at least" two years. The bug is two years old, so they could have also chosen to say "at most" two years or "up to" two years. Least biased would be to just say "since the bug was introduced, two years ago".
https://www.google.com/#q=http%3A%2F%2Fonline.wsj.com%2Fnews...

Would they sell it at or close cost like most Amazon hardware? I don't see a lot of the customer using "amazon content (movies and music, which amazon is trying to bet heavy on)" on their tiered data plans.

Or sell above cost and join the market of, oh so many, other handsets?
Oh so now the NSA publicly comments on allegations about its operations?
Internet of Dependent Things
Now who do we believe... an anonymous source or an official press release (from an agency with both motivation to lie and a history of misleading statements). Both seem fairly unsubstantiated to me.
I bet Karl Rove is available, too.
Most police leave their radar on all day long. You can spot them with a good detector up to 5 miles away with good sight lines on a clear day.
NIST's cryptographic standardization process
Investor Appetite Grows for Food Delivery Startups
The FBI collects the private data of thousands of people they are innocent every time they use a mass-intercept warrant on a particular cell phone tower.

An attorney general collects the business records of thousands of people they know are innocent of wrongdoing in the course of routine investigations into fraud by large businesses.

Both of those are still considered "due process" because in both cases they are following a set process. Due process doesn't mean the government won't look at you if you're innocent, which seems to be a big misconception. It essentially means that the government should handle cases with similar particulars in similar ways.

So in the case of the NSA, if that collection happened under the same type of legal authority, after going through the same FISC review (if needed), was held to the same standards of reasonable and articulable suspicion (or whatever standards were required to be met for §215) then the collection that would happen from there would have been given due process.

As for your link, while its accusations are damning enough, they don't appear to support your first point or your last one. It's hard to argue DoJ is "ignoring" the law when the EFF themselves make quite clear that "The language of Section 215 allows for secret court orders to collect 'tangible things' that could be relevant to a government investigation – a far lower threshold and more expansive reach than a warrant based on probable cause. The list of possible 'tangible things' the government can obtain is seemingly limitless, and could include everything from driver’s license records to Internet browsing patterns."

So don't take my word for it, take EFF's.
Ask HN: If you were Dropbox CEO, what would you do?
In the light of the recent nomination of the newest board member at Dropbox, as "Privacy adviser" it seems, which seems fitting given the .. experience of said board member with privacy, or lack thereof; and the protesting movement that followed that decision, what would you do ?

Also how does donating a $1000 to a controversial cause, compare to the new member's past "achievements" ?

What would you do if you were the CEO of Dropbox ?
Does Ebola present a threat to modern industrialized countries?

My understanding is that it is spread through contact with bodily fluids of an infected person, so in order to be safe you can basically just drink sealed bottled water and eat food that you prepared yourself (canned only, if people handling fresh food might be infected?).

HIV is also transmitted by fluids (though nowhere near as easily) but HIV has a longer incubation period which makes it more difficult for industrialized nations to deal with.
This guy's exhaustive narrative covers most of the egregious things from the early years: http://www.vanwensveen.nl/rants/microsoft/IhateMS.html

There've been plenty of others since, most notably related to being pro-software-patents and using them to shake down Android OEMs, making threats and creating FUD about Linux, and using exclusive contracts and their leverage on OEMs to ensure that Linux on Netbooks failed (and were hobbled with artificial specification limits, etc.) and that ARM-based notebooks (running Linux) were dropped by vendors like Pegatron and Qualcom despite being highly popular when debuted at Computex... http://www.trustedreviews.com/news/ARM-Powered-Pegatron-Netb... or http://liliputing.com/2009/06/pegatrons-arm-based-netbook-at...

Personally, I've despised Microsoft since I lived in Seattle (doing research in the building next to the Mary Gates wing of the UW Hospital) prior to moving to New Zealand.
At this level, I wouldn't call anyone. In my experience, the best publicity is news stories written by other people. Many years ago, when I was the best ram per dollar deal around, a blogger's benchmark that made the reddit and hn front pages took my business from almost nothing to "I can quit my dayjob" money in a very short period of time. I bet if the OpenSSL folks announced this soonish, the sales work would be done by the media. In fact, I think this is the big advantage of the low-dollar small-business accounts. You can say "here is the deal, take it or leave it" and wait for people to take it. For the big corporate deals, you have to meet and call and actually sell.

And for invoicing at this scale, use cashflow accounting. The sale closes when you receive payment. There will be some work matching up checks to logos, but at $1000 a pop, the 5% of customers who don't write the account identifier on the check are worth tracking down.

You do need to do accounting, but you need to do accounting at the current $2000/year level, too. I don't think they are committing themselves to all that much extra work if they only get a few buyers.

I have... intimate experience with the "I got too many customers before I had sufficient automation" problem... and yeah, it is a problem when you have $50/yr customers. It is not a problem, I think, when your smallest customers are $1000/yr.
Grr. Stop upvoting stuff we can't read without jumping through hoops.
I think most of them are on youtube. Ill get back to you tomorrow.
> That's exactly equivalent to having a "size" parameter with the same size as the pointer, except you have to use a substract instruction when you want to get the length of the string, so I'd say it's inferior to just storing the length of the string.

Except that it has the important property that the (effective) length descriptor, being a pointer, would necessarily "grow" over time (across generations of machines, e.g. 16 bit -> 32 bit, etc.) and would thus never impose any artificial restrictions on string length.
SF housing protests get personal as second Googler is confronted at home
It's hard to imagine a more perfect HN post than this one.
> And speed matters.

Nope.

Delta-V, delta-t, crumple zone energy absorption and airbag/safety device deceleration capability matter.

The only energy that can do damage starts with the difference in speed between vehicles. Then you have to take into account how much time it takes for the difference in speed to reach zero (that's the delta-t). This is a combination of braking (if any), grinding, sliding (tires sideways, rubbing against barriers, etc.) and crumple-zone deformation. And then you have safety devices such as airbags and seat-belts which are mostly about reducing the rate of deceleration.

Of course, initial velocity is important. However, focusing on that alone, I think, is focusing on the wrong variable.

Road conditions, for example, are crucial. I've ridden in taxis in Munich at 180 mph. The roads and traffic supported it. No issues. On the other hand, a couple of months ago I was on a BMW on the north-bound 5 fwy just before the Grapevine. I started a lane change when a crack/level difference between the lanes grabbed the tires. This caused a violent unintended lane change. Had my reflexes been any slower or had another car been there it could have been a horrible accident. I wasn't going much faster than 60 or 70 (I was about to get off the freeway to get gas). And, BTW, this is a section of the 5 that was repaired under the American Reinvestment (...) act. Well, they actually managed to cause more damage rather than repair the road. On this section of the 5 it feels like you could loose you kidneys even while riding in a minivan.
Also of note was Leslie Lamport's recent talk on how Amazon uses TLA+ to verify algorithms.
TL;DR Wikipedia strips down entries to 100 words
I think you two disagree on what a "dumb web vulnerability" is.
While the ambiguity in later paragraphs is par for the course, the directness of the initial statement is refreshing.
That makes two of us, although the repository could hopefully stir some interest to leverage existing projects.
Final paragraph:

> When I heard about this draft I assumed that NIST had engaged in (1) an honest retrospective review of known security flaws in NIST standards and (2) an honest analysis of ways in which those flaws could have been avoided by modifications in NIST's standardization process. The current draft is, unfortunately, very far from this, and as a result is very difficult to take seriously.
"The Federal government relies on OpenSSL to protect the privacy of users of government websites and other online services."

This is my big point from the other thread. If NSA knew then not disclosing this type of serious bug should get someone's head to roll as it could imperil the security of other important USG communications.

That still leaves open the question of why NSA wasn't able to find this bug themselves though -- you'd think they'd be looking for bugs related to the introduction of new features into OpenSSL.
mortgages already send reports to IRS. System could be set where IRS send an estimate and tax payer either pays/agrees for refund, or send back updated one with deduction and supporting documentation for these deduction.

I own a house, do freelancing, investment done in retirement accounts, HSA accounts. Except business expenses, everything else was already reported to IRS either by bank, or employer or client on 1099-MISC. If there would be a form I could just sign and send back - I probably would skip expenses completely in this year.

And for majority of people I feel like there would be nothing to report what already is not reported.
It limits the corporate risks: they know exactly which passwords to change, accounts to lock, and other data loss to ameliorate.

And if the time window of exploitation is kept small, the exact same magnitude of data loss could have happened in a rapid-disclosure and patch scenario. (Two years ago, were practices for rapid response better or worse than now? Would the time window of public-knowledge-but-incomplete-protection have been any smaller - or maybe larger?)

So why not let it break later (and maybe never), rather than earlier? It's like any kind of "technical debt" analysis... oftentimes it makes sense to defer fixes, because by the time the issue becomes critical, it may have already been rendered moot, by larger changes.
fwiw, they actually try to do contracting/consulting and they do have sponsor programs (just fyi):

http://www.openssl.org/support/donations.html

http://www.openssl.org/support/funding/contract.html

http://www.openssl.org/support/consulting.html

http://www.openssl.org/support/acknowledgments.html
Just keep in mind that the NSA routinely lies... even in direct testimony under oath to Congress.

http://www.slate.com/articles/news_and_politics/war_stories/...
> When the serialization format matches the in-memory format, you can mmap directly into a struct, which is fast and convenient.

...and a non-starter if you ever have data interchange between differing types of machines.
The OpenSSL debacle exposes a real problem with Open source sw. There is massive financial incentive to break it, none to make it safe. Funding its dev does little. Fund guys to break it who will tell you how they did it.
Tinder Is Not Valued At $5B, And IAC Did Not Buy 10% Of The Company
Well it would lock them into the Amazon ecosystem...
Remote, Front end Developer, Triggit

As a web based company, Triggit has a variety of front end development based needs. From UI/UX implementation, to advertising creative template engines, there are many chances to expand your skills as well as gain experience in a variety of tech.

This position is 100% remote and will require strong communication skills, video chat availability, and a strong work ethic with dedication. We coordinate with IRC, Github, and other tools to execute effectively.

Apply at: https://hire.jobvite.com/j?cj=olVMYfwK&s=hacker_news
It's reads pretty obviously IMHO.

"Any 0day has an obvious national security interest in being responsibly disclosed and fixed".

That's not a very direct affirmation though, merely an "interest"... the caveats show up at the end, but even that is at least honest.

You'd be crazy if you thought NSA would disclose a server 0day that e.g. affects only websites running under a Russian locale, when those websites are known to be used by the Russian armed forces bordering Ukraine. That's the type of thing which could be useful to NSA while having practically nil effect on U.S. infrastructure.
There are two companies that have demonstrated cures to the Ebola and Marburg viruses: Tekmira, based in Vancouver BC, and Sarepta, in Boston. Initial data shows that they have 85%-100% cure rates receiving the medicine up to 72hrs from initial exposure, as tested on monkeys.

Unfortunately a portion of this research was funded by the DoD, which decided to cut funding in 2012 at least for the Sarepta Marburg cure, which significantly slowed down progress and prevented any stockpiling of the medicine.
I don't think I have ever upvoted so many comments in one HN thread. The NSA earned every ounce of distrust that is currently being pointed at them. I just wish people were investing as much time in OpenSSL as they are in discounting NSA statements.
Why  Surface Hair products?
You can still access Amazon content on WiFi, and they could play some games with caching. Flash is sold at a premium (wasn't the iPhone like, $100 to go from 8GB to 16GB?) but not actually all that expensive.

Google Music is a perfect example, actually. I allow it to stream music over 3G, but it still aggressively manages a local cache of music anywhere from 1-2GB, leveraging WiFi to save data. (It would use more if I didn't have a dinky 8GB device)
This just raised the question in me how efficient speed limits are. Being from Germany with no speed limit on the Autobahn I expected to see at least a slightly higher number of road fatalities in Germany. A quick look at Wikipedia confirmed that speed limits in the USA and in Germany are roughly comparable besides the unlimited Autobahn where people driving at 130 mph and more is not uncommon. [1]

USA Germany

Towns 25 – 45 majority 31, some 18 - 43
Single Carriageway 55 62
Dual Carriageway 65 - 80 unlimited, 80 advisory

To my surprise I found the following numbers for road fatalities per million inhabitants in 2010. [2]

USA 105
Germany 45

Any ideas how this could be explained? Could it matter that Germany is way smaller and the way to the next hospital is often shorter?

[1] http://en.wikipedia.org/wiki/Speed_limits_by_country

[2] http://de.wikipedia.org/wiki/Verkehrstod#Dimensionen
Given that you are the exact type of person that I would want reviewing OpenSSL, thank you for your feedback!

What would you say if this was worded more like Patrick's "priority support" clause in his analysis of Tarsnap?Practically it would just mean they send an email to the priority support list before they send it to the listserv. I still think major enterprises would get on board.
Ah - good to know. Cheers!
One thing we don't know is whether the brain is maybe able to perform calculations on real numbers which could allow for different or even more powerful calculations compared to the Turing machine.