skysight-inc/HackerNews huggingface dataset:
I've only used Private Internet Access, Air VPN and Hotspot shield.

But i'd recommend Airvpn.

The problem I had with the other two VPN's I tried was the lack of decent port forwarding. PIA has port forwarding for some of their servers but you can only forward one port. I haven't been able to play games like hearthstone while having the VPN enabled because it needs multiple ports forwarded and I haven't been able to torrent while using a nearby PIA server since the closest server that can port forward is France. Hotspot shield blocks torrents and can be slow so I don't recommend it.
Your point actually makes H1B worse than "indentured servitude" of the past. Many (if not most) H1B folks stick around at one company just waiting for a green card. This kind-of means it is involuntary in some sense. However, unlike indentured servitude, there the "young person" does not automatically get a green card and is not "free to leave" at the end by default. By default, at the end, he/she has to leave the US.
Just posted some context here: http://livingvalues.wordpress.com/2014/04/07/what-was-living...
This was the main critique of the original article - that Apple and Google are blocking the open mobile web in order for native apps to thrive.

Both Android and iOS are built around promoting apps. The web is a second class citizen.

On iOS I would go as far as to say a third class citizen, since Apple are blocking the fast Javascript engine in native apps. This makes the idea of having an app as a simple web-wrapper much harder to accomplish.

But if the systems were actually optimized for open web, then content producers could build 1 web-app, that could have important logic and graphic stored offline in an app container, while still being just as functional via direct web access.

This could work great for 90% of all the apps that are basically just glorified websites.

This of course is the main mission of FirefoxOS.
Exactly this, in El Salvador for example your employment options grow an order of magnitude if you've any experience working in the US.

Also, you have the possibility to learn about bleeding edge tech in situ.
Internet busts SF coffee shop con artist
ever heard of geocaching? The idea is that you leave things hidden around the world with GPD coordinates and hints of the location and other geocachers will grab their GPD devices (or smartphones) and hunt down your cache based on the location provided and your hints. It's like a big scavenger hunt.

What if you looked up caching 'best practices' for how to safely store items for in the weather, then stashed your valuable information somewhere nobody would find it. Keep track of the location the same way you would a geocache, but obviously don't publish it publicly. Then all you need to do is leave the cache-retrieving information in your legal will and the right people will have access to it at the right time, and it's as safe from prying eyes as you're ever going to get in the meantime :)
The bias in hiring could be more regional than anything else, though they did say they targeted Princeton, Brown and Yale. 5 of the 8 are a few hours drive from NY, and 2 of the 3 that are not local were persistent (applied more than once).
I live in Northern Europe. It's arguably superior to the US in many ways, but there are some things which we cannot get here.

One thing is size. The US has 300+ million people, whereas my country only has a few million. All communities are smaller here; interesting things get here later or not at all (with bad localizations) because the market is too small. Things are tinier, quieter and get less traction.

Another thing is that there is something of a cultural identity crisis going on. We cannot match the enormous cultural influence of the US, and so a lot of our culture is American. If you've ever talked to someone from Northern Europe and wondered "why does s/he speak English so well?" it's not because of school. One half of our cultural identity is located on the other side of the Atlantic, and we keep in touch with it mostly through backlit screens.

The deluge of information and entertainment that has come from the US since it became a superpower has served as a really efficient marketing strategy. We're not terribly interested in moving to Oklahoma. We have been sold on New York, San Francisco, Los Angeles and other metropolises in the US, because that's what we read and hear about. These places are perhaps not better than Northern Europe to settle down and start a family in, but they certainly seem more exciting.
There is also concern about the large scale conversion of long term residential and single family housing stock into short-term vacation rentals in a severely supply constrained region.
SGX is pretty reasonable IFF you believe in the Intel PKI.

I have been looking at how to do cheap ($20-50 slow USB connected (essentially smartcard), $500-1000 PCIe) HSMs. If you do shared-computation with a host (with or without SGX/TXT), you can get pretty decent performance with quite modest HSM hardware.

Those provide NSA-type protection -- in that attacking a single instance isn't guaranteed, and takes time, so a system with key rotation or k of n split across locations is going to provide pretty reasonable security.

Private Core is definitely the most interesting TXT-based solution today; if you built an IaaS provider with that tech plus live video monitoring, alarms, etc., you could probably offer quite reasonable security assurances to people. (i.e. the tools to defeat it require physical access, and if no one can gain physical access to a rack once the rack is put into production...)
SF Coffee Shop Con Artist Caught on Tape
This demo from sencha touch has always seemed dubious to me. I remember having coded extremely basic mobile web app with this framework and having had layency issues from almost day one.
My guess is that what they are doing with their framework to get to this result is pretty far from a normal use.
This document is hugely important to understand. Thank you for posting.

I always found Table 6 to be the most interesting, particularly in debates about immigration — I have a green card as a 9 year long EB3 process (Employment Based, 3rd class - the CIS doesn't value Philosophy degrees as highly as engineering degrees!)

To take the last year for which data are published, 2011

A partial breakdown of new Permanent Resident status issued—informally “green card”

Family sponsored 206,585
Immediate relatives of citizens 209,984
Employment based 14,955

In round numbers for every green card issued on basis of employment, 28 are issued to family members of citizens. This is pretty much the inverse of popular understanding of immigration.
I suspect something got broken for ads. You can call that "crippling" if you wish, I do, but other opinions differ.

I've noticed YouTube doing a lot of work to try to run ads even when blockers and stuff are trying to stop them from running.

I loathe watching YouTube videos on iPads nowadays.
Yeah, this. It is fairly common to see things like this in C-like languages when it comes to times, like when including the milliseconds in a day you might see:

int timeout = 1000 * 60 * 60 * 24;

(milliseconds in a second * 60 for minute, * 60 for hour, * 24 for hours in a day).

Much more obvious than just putting in 86400000, and the compiler will optimize away the math and putting the math in there explicitly is arguably better than a comment that could easily become unanchored from the real value (if someone changes the value and forgets to update the comment).

When it comes to byte-sizes of things, though, most code will use sizeof() to both make it more clear where these numbers are coming from and to make them automatically adjust if the structure sizes change (granted this is unlikely to happen on a mature protocol).

At the very least having them be preprocessor defines would certainly make things a lot more clear here, so even for C I'd consider this a bit of a "code smell" (though the people who work on this code regularly are probably versed enough in the ssl3 record structure enough that they immediately grok this when they see it).
I'm a Fog Creek employee who is also an immigrant and did not go to an Ivy League school.

I also do a fair bit of interviewing at Fog Creek and we don't really care about which school you went to. We look for smart people who get things done. It's as simple as that.
Breaking the entire world and then complaining that "they are doing it wrong" goes over like a lead balloon.

Its a messy state of affairs to have to workaround issues that dont match your particular models, but its often necessary to have things work at all.

Do note that mailing lists and the way they send mail predate DMARC, DKIM and SPF by far, why don't they better account for this extremely prevalent model of email usage. Why is it that mailing lists that are "broken".
Great, more long ass unedited amateur videos.

I used to upload gaming videos (moments/montages) to youtube. The share feature is nice on PS4 and Xbox one, although the reason for my comment is I quit uploading, because I always received copyright notices from YouTube, and even if I won an appeal...it still lead to copyright notices AGAIN later. Aside from the notices, my friends and I were monitoring through Adsense, after the notices would happen, I'd noticed that earned adsense revenue would be subtracted from FINALIZED earnings. I wrote a blog about this out of anger [1].

Anyways, the reason I stopped uploading was, because to actually get views and subscribers, editors need to....edit....their videos. Although when I uploaded, it taught me how to edit and compress videos, I realized I was editing and reviewing footage a lot more than playing.

[1] https://medium.com/p/6caf19d2c542
Rotating Evolution Door by Klemens Torggler
pick best does not mean pick oldest, news articles said study was identification, study subject says study was preference, study says study was preference. How you could possible reach the grand parents takeaway is seriously concerning.

explain.
Right but dynamic pricing is precisely why taxicabs are as regulated as they are. It costs you the same amount to get from the Airport downtown on a Friday night as it does Tuesday at midday. And you the tourist know how much it'll cost you when you get there, because the price is regulated.
Sorry, there is no DECENT internet connection in China
Html commented around the php tags. Don't know behavior these days but back then the php tag with contents was visible in html source.

Guy I was consulting for was famous designer who needed help with web project he talked his way into. Can't be arrogant though, he'd probably laugh at my font, color and layout choices as equally naive/catastrophic.
Loved it, but exiting on Level 1 just causes level 1 to reload for me and never unlocks level 2.
The Age of Global Warming
#89 here, let's keep it going!
> For this to fail, wouldn't the mailing list have to send the message on to its subscribers listing it as "From" the Yahoo email address?

Yes, which many mailing lists do.

> In that case, it's the mailing list doing it wrong

Is it? Not having the actual originator as the "From:" seems to be "doing it wrong".
I see this:

<form method="post" action="https://deadmansswitch.org/userhome.html">
Email:<br />
<input type="text" name="email" /><br />
Password:<br />
<input type="password" name="password" /><br />
<input type="submit" name="login" value="Log in" /><br />
<a href="/createaccount.html" title="Create an account">Create an account</a>
</form>

Also, what does/can anyone do to prevent a MITM attack? Even if thy sent a HSTS header or a redirect, they're still subject to that.
The open web is only open if it is accessible by multiple clients. That is the open part.

The point is that web access is diminishing in favor of app-access to services. A point the author of this article also completely fails to see the potential impact of.
Boom, #88.
In the hopes that you'll get involved https://watsi.org/ :)

Watsi is a wonderful glimmer of hope. I don't particularly have the money for it, but I've made 4 donations over the last couple of weeks. It's easy, you just read the stories and think to yourself, "do I really need to buy that coffee this week?"
Are Android or iOS affected? Android seems to ship openssl 1.0.

Could a malicious server attack clients? Perhaps expose a browser's cookie jar or other saved passwords in memory?

The number of installed openssl clients across all devices and computers must be quite large.
I didn't even check. It expired in Jan 2013....wow I'm betting the project isn't maintained anymore?
Have you seen or tried slate[1] btw, and does it mitigate any of the cons you mention? I've only seen the demos for it and not tried it, so I don't know if it would be useful in practice.

[1]:https://www.useslate.com/
It's even better to examine their argument sans credentials.
We noticed noticed last month that one of our Yahoo! Groups mailing lists would randomly drop emails[1]. We couldn't find any consistent behavior to it. Wonder if this is the culprit.

[1] https://twitter.com/jmathai/status/440529845198790656
spiped should be irrelevant here. But there are a lot of people using PKI where they could be using PSK.
Thanks for the hint, I hadn't heard of this one. Should be built-in to apt, I think! :)
Yeah, MS bought a couple of other companies after Kinect v1 which allowed them to do more with the Xbone.

The big downside for Xbox is as you say, the $59 Xbox Live Gold subscription. This rake is not likely something the new competing experiences like Amazon FireTV or AppleTV 4th gen will have, so they'll have to a have a LOT of perks to justify it. So far OneGuide, Skype and free Fitness demos seem a bit light (with Skype being the best justification of the lot).
It is now. It wasn't at the time of vacri's post. Top of the homepage is best.
I've always wondered how the SS administration deals with this. SSN _should_ be unique, but in practice they're not, so how do these people deal with taxes and _gasp_, social security?
Performance of JDK8's Nashorn JS engine leaves a lot to be desired
Mailwurst: redirect local mails to an smtp servers while developping
Gawking At Rape Culture
The point of the article is: the study was "Pick the one you like", not "pick Strad". According to the article, they were never asked to identify.
Is anyone working on an OpenSSL port in rust, which lacks the memory vulnerabilities of C?
Note that distributions usually don't change the library version, they just apply the fix. Look for distribution-specific sub-version.
Jane St and a few other finance firms are paying interns ~100k/y annualised. That's the highest I've heard barring grad students with sweetheart deals.

As covi mentioned, Palantir, Quora, Dropbox all pay about roughly the same but are very willing to negotiate and pay more if necessary.
Sure.

But you should look at this as a trend not the status quo. So for instance 3D printers that prints houses and thus reduces the need for construction people
It's amazing.. very simple code !
I've felt that C makes this code easy to write because it makes doing the right thing hard. What you are describing is just a lot of work in C, compared to a language with something akin to Java's generics, which are in turn an afterthought in the ML family of languages. What we're asking for is not that complicated from a PL standpoint. A generic streams library?

Economics plays an invisible part here. Someone writing a library has a limited amount of time to implement some set of features, and to balance that against other needs, like making the code "clean"/pretty and secure. In this case, pretty code and secure code are akin. Consumers would likewise have to balance out feature needs with how likely the code is going to explode. What it comes down to is that you aren't likely to have secure, stable code in a language that doesn't inherently encourage it.

It starts to be clearer then, that the more modern, "prettier" languages offer material benefits in their efforts to be more elegant.
We'll see a third platform emerge in the next few years that combines the best of native apps and the mobile web.

It will probably be based on cards as the unit of interaction.
> In round numbers for every green card issued on basis of employment, 28 are issued to family members of citizens. This is pretty much the inverse of popular understanding of immigration.

There are people that don't understand that the US immigration system is primarily family-based? I think lots of people think the motivation for immigration is largely economic (and that's also true, even for the family-based visas), but I don't recall encountering many people that had any mental model of the immigration system that didn't know that being allowed to immigrate legally was largely through family-based classes. Certainly, much of the public political drama centers around that fact (e.g., the whole "anchor babies" thing.)

(Although "Family sponsored" is not, as you present it, necessarily family-of-citizen -- the family-sponsored grouping includes visa classes for family members of Permanent Residents as well.)
That is definitely the holy grail. Personalization + editorial voice. You would think that an implementation like what you've described would require a site editor to make multiple suggestions and then there would be some algorithm that applied the correct suggestion depending on the preference of the user.

From my experience, site editors don't want to compromise on their opinions, nor spend the time it would take to make multiple suggestions. It's a tough nut. Would love to know if any companies out there are addressing that problem and what the response has been from publishers.
All of this sounds extremely exhausting for a simple internship. About 30 times more effort than I've ever had to put to land a job as a freelancer.

I'll take my standard $50/hour rate and avoid these rat-races. 400 applicants and only 8 hires!? YIKES. Are these fellas going to the moon?
It's a reasonable assumption to make that the new ones had adjustments done. Even larger was the unchanged strings. I could easily imagine that the older ones, since they're not allowed to be modified in any way, had older strings than the new ones. That alone could produce a huge difference.
The mailing lists I am subscribed to -- openbsd-misc, roundcube-dev, and backuppc-users -- all do this. So does the mailing list I admin, for a local hackers group.

As well as every other mailing list in recent memory. (Including the LKML. I just checked.)

Whether it's "right" or "wrong" might be an argument that someone will find worth having, but I don't think it can be argued that this isn't common practice.
> In fact, literally the ENTIRE WORLD is your oyster, assuming you can reliably, regularly find power, wifi, and a team that'll work with you on your timezone's timeframe.

So, this is about what the parent said.
Microsoft aims to extend .net framework to embedded evices
What do you mean by "take"? Canadian employers aren't very familiar with a concept of working visa in practice - they prefer you to first have a permanent residence, then they can talk about hiring you. To get permanent residence, you have to pass the process, which is many months long.

Am I substantially missing something?
Security could become a big factor in web vs native. For example, I don't trust the facebook native app. I've used both the web and native versions and the native version is smoother and better. But I don't trust facebook. There's a lot of personal information on mobile phones these days and I don't want facebook accessing that data. For me, using the web version is much safer.

And random apps on the app store from unknown developers? I trust those even less. I may install one if the list of permissions is very restricted and reasonable. But I don't like spending time looking at the permissions and trying to figure out if it's ok.

Another example is banking apps. I remember there was news a while ago that many banking apps were not handling passwords properly. If I use the web, I can see the SSL lock icon, inspect the certificate, and know that it's properly handled. I can't do that for a native app.
Ask HN: Why Facebook is not responsive?
Why Facebook has m.facebook.com instead of a responsive website?
If you'd like to update the keg-only OpenSSL brew on osx, and dont care for legacy and crap:

( export CONFIGURE_OPTS='no-hw no-rdrand \
no-sctp no-md4 no-mdc2 no-rc4 no-fips no-engine'; \
brew install https://gist.github.com/steakknife/8228264/raw/openssl.rb )

Beware, that by default on osx/ios, pretty much everything links to sketchy CommonCrypto or a crusty, quasi-deprecated 0.9.8.
I'd disagree about C++. In my experience, the only things it adds is (1) a false sense of security (since the compiler will flag so many things which are not really big problems, but will happily ignore most overrun issues), (2) lots of complicated ways to screw up, such as not properly allocating/deleting things deep in some templated structure, and (3) interference with checking tools - I got way more false positives from Valgrind in C++ code than in C.

I wish godspeed to Rust and any other language which doesn't expose the raw underlying computer the way C/C++ does, which is IMO insane for application programming.
This post was regarding a test conducted in 2012. I'm not saying it isn't relevant or that the reporting around the new one is good, but the study she was a part of is a different one from the study making the rounds today:

http://www.pnas.org/content/early/2014/04/03/1323367111.abst...
How do you suggest going about finding out if a bank updated the OpenSSL version in its DMZ?
At least the time limit is too long to use for Suicide-note-as-a-Service. If it were shorter, I would worry about that being the primary use case for something like this.
Because the violinists were only allowed to try the violins for one minute, this study has the same flaw that the Pepsi Challenge had in 1975:

"In his book, Blink, author Malcolm Gladwell presents evidence that suggests Pepsi's success over Coca-Cola in the "Pepsi Challenge" is a result of the flawed nature of the "sip test" method. His research shows that tasters will generally prefer the sweeter of two beverages based on a single sip, even if they prefer a less sweet beverage over the course of an entire can."

In other words, a saturated sound could initially be more attractive but not as good for an actual concert.

http://en.wikipedia.org/wiki/Pepsi_Challenge#Criticism
"and if he switches jobs the green card process has to start over." This is incorrect. You retain your place in the GC queue if your i-140 is applied and approved. You just have to port your i-140 .
Agrees but it was written by the people who created the framework so I'm sure they're much more aware of how to keep it performant.
Einstein, Tesla and Musk. None of those guys would have ended up in the US if you had any power over immigration policy. Oh.. and are you native? Genuine question as I have no idea.
We're actively working to update. :)
I've traveled pretty extensively across the world for work and very few places have an internet connection that compares to even a modest broadband connection in the US. Not only that, I deal with this problem weekly from our partners in 75 countries across the world who don't have good internet connections. As well, you're discounting the world's oceans. I've worked on a ship where we provided an extremely limited internet connection that would not be suitable for rapid development work.

I'd say it's a pretty small portion of the planet that has a decent internet connection, but the detail is how you define "decent".
This is not strictly true. If I forgot to quit my RunKeeper app my battery will be dead within a few hours. If the app's doing something like using GPS poorly (which I'd say RunKeeper is) then it's better to force it to quit.
Confirmed the same issue on Linux
Thanks man! its very encouraging, hope to dig myself out soon