skysight-inc/HackerNews huggingface dataset:
>The question I ask myself is if Moore's law can no longer lead to faster computing, then what good is it?

Smaller and hence lower power chips. You wouldn't get multi-GHz phone CPUs if it wasn't for Moore's law allowing massive reductions in power per cycle. Even on the desktop this is good, my current graphics card is about twice as powerful as the one I bought in 2010 and uses only 1/3rd the power, which means the system fans don't have to run as loud to keep temperatures down.

I don't think mobile devices need much more processing power, but every reduction in power use is good.
Ehhh... I've played a lot of pointless games before. Can't say that this one was particularly inspiring, although it tricked me for about 10 minutes thinking that there was something worthwhile to play here.
Basically those are all media discovery applications. (PS. I can't think of a single app store experience worth replicating...)
Changing pictures isn't math, dude.
"Pretty much anyone can start their very own Certificate Authority."

This may be technically true, but the process of becoming a CA was described a year or two ago on the randombit cryptography list and it was estimated that it is a (roughly) 1+ million dollar undertaking, just to get up and running and accepted in the browsers.
Sounds a lot like Ember.
U.S. Search Awards 2014 Nominations Now Open
I plan to do the remote worker leap next year to travel around the world.. would be great if there was a who is hiring for only remote jobs.

Currently I work with three remote devs in the philipines and I can say the workflow is great. We have implemented a pretty solid git flow, and we use hip chat for communicating (hubot included).
Well, in the QR code and smartphone scenario, you also have to trust that the code in the smartphone all the way down to the hardware is trustworthy. Otherwise, you'll get attacked through the firmware or bugs in the OS or through custom sleeper electronics injected at the fab.
Apart from the absurd new theme with big, squishy looking buttons, something you could turn off in a few clicks, it was a considerable improvement over Windows 2000.

At the time, there really was nothing better than Windows XP.

Linux for the desktop was still a mirage on the horizon, Apple was still shipping a clunky, barely coherent MacOS 9, and other vendors were lost in space. Solaris? SCO? SGI? Hardly improved in half a decade when it came to use as a general-purpose workstation.

It took Apple nearly three years to catch up to Windows XP with a workable version of OS X, with 10.3 being their first solid release with a full suite of applications.

It's amazing how Microsoft could produce such a popular operating system and then completely fail to capitalize on this success in any meaningful way over the next decade.

Windows 8.1, theming aside, is barely any different from Windows 7, which is arguably not all that different from Windows XP.

By comparison, Apple's gone from MacOS 9 to OS X (PPC) to OS X IA32, to OS X Intel x64 and through all that hardly anyone's noticed. Windows 64-bit, while a thing, looks like an enormous hack based on how disorganized it is internally, like now how it has two sets of "Program Files".

Though is it even possible for the conditions to be right for another "Windows XP" moment for Microsoft?
That is very true. However, the number of people who are both good software engineers and good cryptographers is very low. Personally, I can't say that I've seen experts being hostile towards those willing to learn the concepts and best practices for cryptography, though. The hostility is usually reserved for those who try to roll their own crypto with ill considered design, no matter how nice their code is (Telegram, etc). But it's possible that I could be entirely out of touch with that.
A valuable quote from Fight Club, but reality is unfortunately different.

A $2 recall could have saved the lives of 13 with regard to the GM ignition switch problem, while the Nissan Airbag recall has only been attributed to 3 accidents (0 deaths, 0 injuries) while affecting a million vehicles.

http://www.therepublic.com/view/story/01394d0c27844fa5be3fa6...

Companies (even standard ones, like Nissan) are willing to recall minor safety issues, while other companies are completely worthless at performing recalls (GM Ignition Switch).
Yes – https://news.ycombinator.com/item?id=7558015 – but not sure that wholly rules out the chance the audit of that code started because of other anomalies, which focused suspicion.

Would love more detail from each of the researchers, in their own words, even if the full story is still just a mundane variant of, "we're always reading code, we just happened to be reading this code this week, it looked buggy, we confirmed danger and reported to OpenSSL".
Maybe I gloss over most JavaScript framework posts, but first I've seen (and remember) for this one in the last year or so.

My general point is genericX.js seems to get a lot of up votes here relative to other language/framework topics .
This is at least somewhat reassuring to me--it means that we do have enough expertise out there being vigilant against their server logs such that attacks with serious implications can be identified in a matter of days/weeks. If people start finding evidence of exploitation in logs dating back a year, then I would really worry.
In the future, all apps will be built this way.
If you wanted to, it's not too tough to extract the source code of their browser add-ons to verify for yourself that your vault is encrypted before being sent to their servers, and that your master password is not sent. (And of course with this tool it's relatively trivial to look through the javascript to verify the same.)

So while you can't look at the code running on their servers, it seems to me that you certainly can know they don't have access to your vault.
Another social news aggregator (the one frequented by crustaceans and disenfranchised Hacker News users) implemented a "story merge" feature yesterday. It is a really nice feature.

https://github.com/jcs/lobsters/commit/73b8df5eb7d9cc0de3189...

This feature would significantly reduce noise around major events, and likely prevent second order noise as people try to piggy back on with tangential analysis, derivative stories, or redundant commentary.
Is this better or similar to Hue?
I suppose it isn't that much more futile than normal tetris...
It's because open-source software doesn't have a profit motive. It doesn't have an excuse not to.

People did rage over Apple's SSL issue, but Apple handled it swiftly, pushing out updates to all affected devices as quickly as practical. It's also worth noting it was a validation bug, not something that could leech arbitrary bits of data from a device.

I have no idea how some open-source projects get anything done, their development process is insane, but they manage to hobble along. Something as significant as OpenSSL needs to be held to a higher standard.

If the OpenSSL team can't get their act together, it would be worth it if a larger non-profit organization took the initiative and made a tested, rock-solid implementation of same with an optional compatibility layer.

I've had to integrate with OpenSSL before and the code in there is truly mad. Well written code should be boring and obvious, but OpenSSL is the polar opposite.
The point of the comparison is that the size of networks for which trust is actively maintained are necessarily small due to the expense of maintenance. Indeed, both of your counterexamples have this property.

The OP believes that to be economically viable, trust networks must be large. Hence, outsourced trust.

But I agree with you: once your personal network grows beyond a certain size, the property connecting you directly to any particular node is no longer exclusively "trust", but will increasingly be "convenience". Usually followed shortly thereafter by "abused by".
> at the boundary of what can be done algorithmically with satisfactory results

Mostly due to insufficient models of human perception of color. Our perception of color is not accurate, so picking complementary colors based on their actual wavelength will be less pleasing than picking complementary colors based on a perceptual model. I don't think any of the pickers you link to attempt this.

One attempt with libraries in a few common languages is HUSL: http://www.boronine.com/husl/syntax/#997061

A much older approach is described here: http://en.wikipedia.org/wiki/CIELUV

Learn more about color perception here:
http://en.wikipedia.org/wiki/Color_perception

[Edit: just noticed this was referenced by this comment below: https://news.ycombinator.com/item?id=7562905]
According to the Wikipedia†, the aircraft in question had a 200 kw transmitter, but the article is a bit vague about VLF in particular.

The idea, of course, was that while, hopefully, the ground stations would get the message out, there was that airplane you couldn't count on knocking out in a first strike.

†http://en.wikipedia.org/wiki/TACAMO
Some very convincing points about the flaws of CSS, but I'm still not sure what a better system would look like, and how realistic implementing that system would be.

Maybe the solution will come from new preprocessors (or existing ones like Sass) which will make it possible to write CSS in a completely different way without requiring browser vendors to adapt. Kind of like what CoffeeScript is to JavaScript.
That's why it would be appropriate to have all politicians disclose their conflicts of interests.
At least for the layout issues, I believe with Grid Style Sheets[0] we have a solution. Use it for structure, CSS for "texture", React for UI and you have yourself a better web stack, today.

[0] http://gridstylesheets.org
Why is there a line for material that is openly accessible in github? This seems stupid.

All their audience are developers who can basically get it off of github.
The last time he touches and car handle opens, you see that tail light also blinked, just as if someone with the fob is standing off the camera and pressed the unlock button.
How I Setup Node + Angular Projects
Based on how many security issues the internet has seen from developers that try to roll their own crypto: it's not just you.
I like to indent two characters per level of indentation. If the indentation uses braces, I indent one for the brace and one more for the code.
Floss software activist Pablo Soto launches Blubster
Well, to be fair, the author raised the UI/UX question which could be a great way to overcome the bullshit "green padlock == safe" idea. Which it doesn't now post-Heartbeat, and never did.

A different UI might reveal the trust path more directly, so that if I navigate to my bank that path might be forced into view.

I, for one, would love it if my browser displayed the trusted path used to connect to my bank before loading any part of the page. The same goes for self-signed certs. Would I avoid HN if their cert was self-signed? Nope.
Sorry if it wasn't clear in the post but we do plan on charging for Hound in some way.

"We intend to charge in the near future to ensure Hound is sustainable, but public projects will continue to be free."
Well, I enjoyed it, but good tetris mechanics make it an exercise in how long until you get bored. Does at least make me remember the joy of finishing all the wonders in the New Tetris for n64 though.
Could you elaborate what you mean by "pinning encryption to addressing"? Do you mean DNSSEC? Doesn't that suffer from the same third party trust problem as any other PKI based system?
> Aspirin is not prescribed to those under 19.

That's only the position in the US, I believe. In France, as long as you are more than 30 kg (children from 9 to 15) you can take aspirin.

> http://www.doctissimo.fr/medicament-ASPIRINE-UPSA.htm

I seriously doubt North American kids are facing lethal dangers while kids in France would be safe at the same age, it's not like the populations are very genetically different or something.

EDIT: Confirmed in Japan as well, you can give aspirin to children and even babies in Japan - there are no particular contraindications except prior patient history, and the discretion of the HCP. Link : http://www.info.pmda.go.jp/go/pack/3399007H1021_1_15/@Generi...

So, because FDA decides something does not mean everyone agrees with it universally.
well why things that were relevant 20+ years ago would not be today?

SICP is still the best introduction to computer science. The problem is the reliance on scheme/lisp languages to explain stuffs. it could be taught in almost anything that supports basic FP,it's even taught in JS !

http://www.comp.nus.edu.sg/~cs1101s/sicp/
Google acquihired everyone but me
Interesting concept and new take on Tetris. I liked it a lot. Keep it good work!
Free: Watch the First Episode of Silicon Valley, Mike Judge’s New HBO Series
Why would downvote for disagreeing? GP is actually a well written comment, and very much deserves the upvote.
Invision and similar apps like it, technically, do everything Red Pen does. But in doing everything, they become overwhelming to use. The clients I worked with on freelance struggled to understand Invision: the signup was lengthy and distracting, the mode switching confused them, they lost their place in the hierarchy— it required me to prod them to use it, and it produced shallow feedback. Conversely, I have a folder of Red Pen customer emails who report their clients produce significantly greater feedback.

This word's meaning has been hugely diluted but "experience" matters. If you're trying to communicate something, you want your message to come across as you intend. If you want someone to be honest with you, you want them to feel at ease. That's the difference. It's easy to give feedback on Red Pen.
There's some good points in here, but they are hidden amongst the rambling text. This could be a much stronger call to action if it weren't also a laundry list of the authors pet peeves.

Edit: the complaints about needlessly cascading styles and mixed styles defined by properties that are "only meaningful in some combinations" really resonate with me. I'd love to see him explore this in more depth.
Why isn't there a super awesome mobile first Node.js shopping cart platform?
The world of innovative ecommerce platform is pretty much standing still. The latest born was pretty much Magento and now they are heavy as heck. It is slow and hard to maintain. The Admin UI is cumbersome. I am not counting the SaaS type like Shopify or Wanalo.

Why isn't there any kick ass node.js shopping cart that is easy to use like Etsy interface? Or should I take the task of building it??
No, I was talking about caching disk reads in ram. Nearly all modern operating systems do this. If you have enough ram, the data you read from disk is cached in ram. With spinning disk, especially shared 7200rpm spinning disk, for interactive use? generally speaking, you have human-noticeable latency every time you do a blocking read that isn't cached.

Because of this, having enough ram to cache all the data you read often is extremely important to system performance when you are on spinning disk. (and having a pagecache that doesn't dump all the stuff you use often when you do a one-time read of a big file.)

I was suggesting that SSD might have fast enough read-access that for some applications, the penalty for reading from ssd rather than from pagecache might be small enough to not be a big deal, meaning you could get acceptable performance out of a system with less total ram.
Probably paid by the dealers to start a fire.
> filter my uncommitted diff through and get style guide violations before I even upload to GitHub

You should be able to do this using a pre-commit hook.
Hi not paul,

And is the site profitable?

I started it in 2002. It's part of my full time engagement. It's paid my way since 2006.

There has never been any business model. Adsense only, yes it's profitable - we pay the 3 of us from that - but only because our costs are so low (single server, I've optimised the code to handle itself on an 8 core with 24gb - it runs at about 10% usage, @ about 10 requests a second)

How did you grow it to the 4 million+ number

We knew what Google wanted, we knew what our visitors wanted. We put our visitors first, but made sure the entire site worked in a way that would help Google do its job. (never really SEO). Our design is lacking, we didn't have a designer - we do now (very exciting for us!)

Essentially we predicted for many years what Google would be looking for, did some things ahead of other folks and tried our best to keep the quality of our content high. We also created a very friendly (most of the time) atmosphere on our site and encouraged high-quality posters to stick around - as much as we could. A lot of sites copied us, but missed the concept of keeping the community conducive to friendly interaction. We also did some interesting things to keep out trolls. Like our 'ghost' mode which makes a troll thing they've annoyed everyone, when in actual fact they're being system-level ignored. Fun stuff like that. This reduced further our overhead, and allowed us to expand while not worrying so much about spam. We spent time to build a system that self-managed, and self-grew. That seemed to work.

That's all the old system, what we've created now is far more interesting.
If one of the Big 4 were compromised (which we should all agree is most probably the case for all of them), even then, "too big to fail" rules the day.

It's vanishingly unlikely that Google, Microsoft, and Apple would remove a Big 4 CA root cert and break the trusted path of 25% of the secured market.
HeartPatched? ... http://imgur.com/yRpl7Gm
It's All A Matter of Perspective
And https://en.m.wikipedia.org/wiki/Malnutrition_in_India
Simulated Bee Colony in Erlang
Just adding my two cents to this discussion as someone who prescribes this stuff and has taken care of people with liver failure.

Agree that acetaminophen/tylenol/paracetamol is the safest OTC and non-OTC analgesic within the 'safe' dose limit <4000mg/24h (pills are typically 325/500/650mg)

Liver failure from tylenol toxicity that is not a suicide attempt is actually quite rare. People that intentionally overdose and die usually take large amounts, like 10-20gm AND don't come to the hospital until very late or when they are found by someone else. Smaller doses and arriving in hospital within a day can usually be treated quite successfully with N-acetylcysteine/NAC.

Tylenol + Alcohol = Lowers the dose needed for liver injury.

Alcohol causes orders of magnitude more damage to livers and to our society than tylenol does. More than half the liver transplants here are at least partially related to alcohol, and the rest are mostly hepatitis C, fatty liver, cancer, autoimmune, etc. People on the transplant list do tend to drink "a lot", such as 5-10 bottles of beer/day for 10-20 years

Tylenol is combined with opiates (eg. Tylenol#3, Percocet, Vicodin) because both work in the central nervous system (as opposed to NSAIDs that work peripherally), resulting in a synergistic effect.

Aspirin and other NSAIDs (ibuprofen/Advil, naproxen/Aleeve) are ok when used occasionally, but long-term chronic use has side effects as mentioned (eg. bleeding, kidney injury, can precipitate heart attacks in people with coronary disease, etc.)
> control the on-boarding of the open source community.

Your spam-bot needs work; real humans don't emit things like this.
I'm a bit confused by the potshots taken at React. React is a library for building components. The fact those components render down to DOM nodes is incidental. In fact the documentation[1] hints at other possibilities, like rendering to canvas elements or native iOS views.

1: http://facebook.github.io/react/blog/2013/06/05/why-react.ht...
Students could be paying loans into their 50s
The Internet’s Telltale Heartbleed
I am doing the chapter on register machines now. I love the diagrams that show the controller and the data path of the machine. See http://sarabander.github.io/sicp/html/5_002e1.xhtml#g_t5_002...

Scratch and Quartz composer show code in a graphical way. Are there examples of languages that show the data path in a similarly graphical way?

I would love to see how variables relate to each other and other functions (the data path) separated from the order in which these operations actually happen (the controller). It would be an interesting way to debug. For example, variables that get assignment but are never read would be glaringly obvious.
Why would reliance on Lisp be an issue? It's a basic requirement. Lisp can be learned in 2 hours. If you can't spend 2 hours learning some basic rules, you have no business dabbling in computing.

Lisp resistence is a phobia, a problem of the afflicted person, not the wider computing community as a whole.
I may not be understanding it clearly but won't a non-browser app be better off simply pinning whatever certificates/public-keys etc. directly in the binary of the app?
It's to encourage Tesla to settle so that he stops producing negative publicity.

The presence of the videos perhaps gives you a hint about what the case is really about. And it's probably not about the car.
I was curious about that. Is multiplying a string by a boolean idiomatic Python? I don't write nearly enough Python to know, but it strikes me that this might be more like writing French using lots of obscure words.
I hate to be "that guy," but what is Famous? http://famo.us doesn't say anything on the index, and the About page is broken. Is it just a library? Toolchain? A real product?
That's a great point worth repeating. Your personal trust relationships probably don't also change when your bank gets hacked and needs to replace their keys, and a network of a certain size will restore access to your bank relatively quickly due to friend of a friend connections.

It also reduces the burden on your bank for maintaining the security of their keys (to some extent). It's still very important, but the consequences are no longer quite so catastrophic.
Well, that example is a bit different. You're ignoring who the audience is. When writing code, the audience is usually at least people on the same team, if not the person writing in the first place.

If writing in French for people who are not fluent, I think it would be a good idea to avoid idiomatic language.
Glad I'm not the only one that saw this parallel. I can kind of see a case for them being different (community aspect of Mozilla, and quibbling over how responsible she is), but the offense at this ought to fall along similar "party lines", so I'm not sure why anyone would choose to play a double standard. It will be interesting to see if the same people get upset, if anyone really does.
Physicist Per Bak's Sand Pile Model of Mind Is Growing in Popularity
I’ve Sent This Over 100 Times to Recruiters looking for .Net devs
Did you even read the article? Marketing had nothing to do with the "success" of this drug. Good and old FUD did. The drug was sold directly from Roche to governments. Typical HN bias, it's all marketing's fault. Next time just follow the money.
Congrats Andrew! You have shown admirable persistence while building Mixergy, kudos.

Question: If you picked 3 of your interviews, that had the most unconventional advice, what would they be?
Facebook forcing users to use messenger app...
https://www.youtube.com/watch?v=GIGtHhAfe8w
NekoVM (2005)