skysight-inc/HackerNews huggingface dataset:
Kicking them when they are down definitely doesn't make sense and I still agree with you there.

All I am saying is that those 3 points you listed here really do little to paint a lifetime of 70 years. I am certain you'd have little trouble imagining legitimate scenarios where someone could lose their fortune (hence why I don't buy the "no excuse" statement). #3 isn't irrational; the article indicated that the man worked in Palo Alto for a good portion of his life, where significant life events, such as his family-making, career, and death of his wife all occurred. It is not irrational to want to stay at a place you are emotionally attached to. It would be reasonable to conjecture that he has a social network there, vs. any other random place in the US.

Also, on point #2, his stepson and he are estranged, communicating only through Facebook on occasion so I am not certain that it is as relevant as you believe it to be.

I ask you would 3 facts about your life sufficiently portray the person you believe yourself to be? Would it explain in any detail why you are the person you are today?

The reason I am focusing on this point is because I believe the bias we all (myself included) have against other people in different circumstances including (but not limited to) homelessness, comes from this perspective of assuming we know far too much about the individual in question.
There is virtually no useful software vulnerability for which you can't conjure up a compelling-sounding narrative of deliberate introduction (or "bugdoor"). It's like numerology. So you should be wary of people insinuating about bugs.

What makes Dual_EC so compelling to experts is the "Nobody but us" nature of the flaw: the bug is cryptographically limited to a small number of actors. FedGov buys hundreds of millions of dollars of COTS gear with OpenSSL embedded, and this bug is so simple that middle-schoolers are exploiting it. You shouldn't even need to ask if it was deliberate.
I've heard it called the liberal's lament: last guys don't finish nice.
> give at least some care what you spend money on in the context of what you're making

Why would the amount you spend be framed in the context of what you're making?

You're just setting yourself up to spend more as you earn more, which is the exact opposite of what MMM is all about.

Remember, The goldfish fills the bowl.
Okay, I'll take the bait:

Yes, companies should be able to use the product. How is that at all related to your point? Your company blocks the domain, how is that in Dropbox's control?

Do you shut off your router and whine about how you should be able to use GitHub if they plan to make money?
In addition to assumptions of napkin salaries, the numbers could work in a place with very low taxes (10% on profit under a few hundred thousand), or friendlier contractor taxation locales, like Canada where you can do some reasonable income splitting between personal and corporation expenses.
If you are interested in Carousel you might also be interested in a service I built and am currently beta testing:

http://www.yearloop.com/

Each day it sends me an email with pictures from 1 yr ago, 2 yrs ago, etc. It is also powered by Dropbox.
Why the Web Needs Perfect Forward Secrecy More Than Ever
Yes. Pick a random number 1-10 and then multiply it by 4, and then by the number of self-titled "founders" in the startup hiring you. That's the number of hours it will take to finish after each founder has complain and asked you to change something.

But seriously, most guys who can predict hours needed with any amount of reliability are the guys who have been doing it for awhile and have already done a similar job. They use past experience to predict amount of work hours needed to finish something. If you truly have no idea how long it will take you, you could begin by breaking up the project into each piece and try to project how much time each of those pieces would take. For example, how long will the design take, the homepage, the about page, the forms. Break each feature apart and try to estimate time for each, then add them up.

My best suggestion is just to overshoot your hours. If they accept the offer you should work hard to make sure you meet the deadline and if you go under the deadline, be honest and tell them how much money you saved them.
I think they're trying to copy Google+'s "Photos" app which takes over the gallery while offering background upload in the same app.

Although on Android with Google+ it's bundled in the same apk, just 2 separate Launcher icons.
Their CA status is not at risk, was never at risk and will not be at risk in the future. Mozilla has made their stance clear that once you are in, you will never be removed (unless you were compromised, at which point they'll happily add your new CA).

I'll certainly not claim that we can magically make TLS work by starting to enforce the requirements we put on CAs. But we should call Mozilla out for their strongly worded letters and other nonsense to get some momentum for better solutions. The first step is admitting you have a problem.
"Not available in your country."

Nothing encourages piracy like geotarded content on youtube. What other industry thinks "na na na, you can't have this" is good marketing?
You do know what C is also a lot older than 20 years old too, right? The statement was about stuff invented in the past 20 years.
to the individual they did not pose much benefit, but to society as a whole they were extremely useful. Through programs like pressureNET, literally opening up new avenues for data recording that never existed before.

In the short term these new sensors will provide more benefits to the consumer, but to the majority they will be something you use 1 or 2 times then forget about.
It sounds more like cost-plus pricing rather than value-based pricing. At the same time, it makes sense for Dropbox to go on the higher end of the pricing spectrum and drop it if things don't go as well as hoped since it's much easier to drop price than ever to raise.
Temperature would be extremely useful... if not for the fact that I typically store my cellphone millimeters away from my body.

If temperature were useful, then humidity would be as well because then you could calculate local humidex.
Surely, Nigel, if you'd just implemented your own encrypted transport, everything would have worked out great. Look how well that worked for Cryptocat.

The most consistent complaint about OpenSSL is that it is developed amateurishly (I think it's more complicated than that, but "amateurish" is a fair summary of the critique). Your response seems to be, "double down on amateurish!"

PS: The only reason you know about heartbleed is that one of the self-proclaimed "experts" found it for you. Neel Mehta is an insider's insider.
Thanks for the response. In a sense, nerds seem to focus on success within the adult society before they're even out of the high school society. Do they unconsciously plan that far ahead, or are they just serendipitously interested in gaining experience in areas that happen to be extremely helpful in the next society they're about to enter?
The correct tense is "is learning". They've been studying this for years. This is not news to the AI/cog sci community, to the point that it's insulting to claim that it is.
Don't spend >30% of your gross income on housing.

Debt is evil. Unless you can get a higher rate of return than the interest rate of your debt, pay off the debt as soon as possible.

Have at least 6 months of expenses in an easily accessible, liquid place like a bank account. Once you've got that rainy-day fund in place, plow the rest (at least 10% of income, 20% is probably a better target) into investments and take any tax advantages possible:

Traditional IRA + Roth IRA ($5500 combined max/year)

Traditional IRA contribution is tax deductible if you aren't covered by a work retirement plan or if you're under a certain earning threshold.

Take advantage of 401(k) if your employer offers it, contribute at least enough to get any matching they offer. These are pre-tax dollars, but some plans have shitty investment options, so YMMV. $17,500 max/year.

Put the rest in an individual brokerage account and invest regularly (monthly or quarterly) in low-cost, broad-market index funds or ETFs like VTI, VOO, or QQQ.

The rest is your fun money...you're young, so make sure you're also investing in yourself by going on trips, having fun experiences, etc, just keep the future in mind and don't go TOO crazy!
Mailbox – Android Apps on Google Play
openssl was not created by the same people behind openbsd.
Just updated the HOWTO for installation on OSX Mavericks with a working Observer: http://blog.equanimity.nl/blog/2014/04/09/erlang-r17-on-osx-...
More DIY youtube-video-telemetry-data-extraction fun from the illustrious Oona Räisänen:

http://www.windytan.com/2014/02/mystery-signal-from-helicopt...

She actually pulls out data from a binary stream. Her whole blog is amazing, it's been on here many times.
Consumer Reports ratings are not double-blinded studies; I wouldn't be surprised if there was a correlation between product price and satisfaction ratings without blinding.
Android App Store Survey Results
Or at the very least, StartSSL certs issued before yesterday.
Because this type of mistake is easy to make in C and other programming languages make this class of bugs impossible. By moving the need for careful design from library to language implementation you get greater leverage in preventing bugs.
Bingo. If you don't like it, get your cert from somewhere else.
I've never found a phone temp sensor to be useful, primarily because it tends to be several degrees higher than ambient due to internal components.
This isn't a criminal proceeding . . . "preponderance of evidence" might be a more appropriate criterion. People are weighing whether they believe NSA malice or coder error are more likely in this situation.
Question: Why do you need to jump to page 20?

In a long topic, what value does it give you?

We have found that the vast majority of users either link to a single post or scroll downwards. For mega topics, we have a summarize option that shows the "best of."
But so is google apps no?
Good question, but you have to such fanboy when you ask?
Unlimited and free. So how do we trust that you're also going to be around in a few years?
You do understand that it's the IT department at the Fortune 500 company thats doing the blocking, right?

Dropbox has no control over your IT department, any more than you'd have control over my wireless internet.
There are a lot of reasons, but one that comes to mind is that quadcopters can't autorotate. http://en.wikipedia.org/wiki/Autorotation_(helicopter)

Also batteries suck.
I don't disagree that your attitude is more productive, but telling people to ignore statistics and assume that they're a special snowflake would be considered unsound advice in any other context.
The article is from Mother Jones, and they don't really attempt to hide their own agenda as a rule.
Show HN: Who the fuck should you watch at Coachella?
Fun app that randomly selects a song from an artist performing at Coachella (happening this weekend and next!)

My first web project
Agreed. I think the discourse developers are not considering psychology and HCI, but only the technical aspects. That the implementation of infinite scroll in Discourse gives you the same information that you get in a paginated view, does not mean that infinite scroll is at least as good.

"post x/y" tells you how far you are in the page, but only if you think about it. There's no longer any intuitive connection between the scroll bar and page position. The End key stops working intuitively, sends you to the end of currently loaded posts and then loads more posts so 1 second after pressing it you're not at the end of anything. Then there's the lag as you hit the top or bottom of currently loaded posts; even if you don't want to read any more, you get more. That's clever if you're a tabloid magazine because it entices the reader to read more, but the impression I get is it's not productive.

For maximum usability, why shouldn't the app support both infinite scroll and paginated, and let the USER choose (by url slug or GET param)? (Or by user setting if logged in)
Mailbox for Android with new Auto-swipe service, and Mailbox for Mac beta
Incorrect. DigiNotar[1] was permanently removed.

Quoting Mozilla[2]: "This is not a temporary suspension, it is a complete removal from our trusted root program."

[1]: https://en.wikipedia.org/wiki/DigiNotar#Issuance_of_fraudule...

[2]: https://blog.mozilla.org/security/2011/09/02/diginotar-remov...
A minor quibble, but in Python 3 you can print in a lambda because print is no longer a keyword.
That video...escalated quickly.
HN is refreshingly free of terms like M$. Why do we give iThing a free pass?
What problem does infinite scroll solve? Why add the complexity of more code which needs fix upon fix to get back functionality we already had? Getting infinite scroll "right" takes a lot of work (and nobody's done so yet, to my knowledge). Knowing how to fix the issues might be useful, but being able to spot that you don't need to incur the cost at all is so much more so.
StartCom almost has the right idea with the way they do EV certs: they charge you for identity verification (the thing that actually requires human labor to do), and then the EV certs themselves (as many as you like, for as long as you like) are free.

I think the optimal thing would be moving the job of identity verification into OpenID identity providers. So you could create a plain OpenID identity, or pay for a verified OpenID identity. Then, CAs would just be infrastructure to issue free certs to whichever verified identity obviously owns them.

In fact, if identity verification came before domain registration et al., the certificate-issuance part could even be done proactively: you'd buy a domain, put your verified OpenID in the SOA record, and then some CA-bot would notice, prompt your identity provider to generate a CSR using the private key the identity provider has on file, and then send back a signed cert.
I just want to take everyone in the Valley aside and sit them down, look into the crowd and calmly say "Hey guys, if we could please stop overvaluing every company that manages to set up a simple CRUD site with no revenue model, that would be great. Let's do ourselves a favor and not re-do the DotCom bubble. Thanks all and have a good night."
They should add some kind of email signup to be notified when it's in the App Stores.
No, any StartSSL cert. There are still unpatched systems and there likely will be for quite some time. Just because there's a CVE doesn't mean everyone updated
The original author was Mark E. Russinovich from "Sysinternals fame", nowadays other developers continue the new editions.

http://www.amazon.com/Windows-Internals-Edition-Developer-Re...

http://www.amazon.com/Windows-Internals-Edition-Developer-Re...

Additionally the books for user mode programming from Jeffrey Richter and Charles Petzold tend to be quite good and full of valuable information as well.
And why would people say that planes are for flying when there are so many on the ground? Where do you see this "flying" then? And what of broken planes, or model planes, or photographs of planes? Next time you see a photograph of a plane flying through the sky at 20,000 feet you can try again to convince me that racism exists, buddy.
But then that goes back to funkyy's point: there may be lots of unexpected things developers can do with it, but none of them so far are things customers care about. Atmospheric modeling? Really cool! Do customers care? Heck no.
This might be interesting to you: http://stackoverflow.com/questions/4858585/why-is-ghc-so-lar...
Five Icebreakers You Should Probably Never Use (But Sadly Some People Have)
SPIN is probably the most well-known example: http://en.wikipedia.org/wiki/SPIN_%28operating_system%29
They increased mine to 2TB, no questions asked.
Ah, very excited for this. I have just now been looking at the API of dropbox to look into making a photos app that fits my needs. The big request I have is for Dropbox to render raw files in their website, mobile app, and now carousel. It's great the video shows g-pa taking photos on a film camera, and presumably these are being scanned to jpegs, but what about people who shoot raw, or have images scanned to raw? Would LOVE for my 10000s raw images to be viewable in this. Please. Please? They're just taking up space right now and un-viewable, and dreaming for the day they get "activated".
IF you're looking for a photo/video gallery for not only Dropbox, but Google Drive, Flickr, Facebook, and more, check out http://cloudgalleryapp.com/
They should have taken this as a marketting opportunity and offered up free revocations for a week.
The CV number is on http://heartbleed.com/

CVE-2014-0160 is the official reference to this bug. CVE (Common Vulnerabilities and Exposures) is the Standard for Information Security Vulnerability Names maintained by MITRE. Due to co-incident discovery a duplicate CVE, CVE-2014-0346, which was assigned to us, should not be used, since others independently went public with the CVE-2014-0160 identifier.
You believe that you understand ekm2's situation and goals better than ekm2 does? Why is that, do you think?

My question to you is, why get a degree at all? Why not just take a lot of courses instead of fulfilling the degree requirements?
This post reminds me of popular depictions of the French Revolution. You always see these hungry mobs and callous rich people, "let them eat cake" and all that. In reality though, was that the poor in France had a better standard of living than the centuries before. The true catalyst of the revolution was a bankrupt government being forced to turn to the middle class to bail them out.
Apple, Google could pay workers $9B in class-action suit
Sure a poor assumption, but remember this is feedback from staff that are paid minimum wage. The inputs are not likely differing engineering controls for example which result in $100,000's of savings annually.
> no UI is necessary to manage them

Not that simple, unfortunately. Even with per-device certificates (which is, I believe, the proper way - have a "master" one signed by remote party then sign your own per-device certs with those), users will still have to:

1. Chose the certificate they want to present to a server. Current UIs are plain terrible and scare every non-techie user (and techies who don't know about X.50x) away. This is absolutely a must, unless Netscape intended for certificate auth to be completely transparent to end user (which is bad, because many of us have multiple identities).

2. See and be notified in advance of certificate expiration times. I have multiple overlapping for half an year StartSSL client auth certificates just because I may forget about the expiration (and miss the notification email). This is not absolutely necessary, but quite important feature if we'd suddenly start to take client certificates seriously.

3. Interoperate with system-wide keystore (if there's any) for the cases certificates're going to be used outside of the browser (say, for VPN or Email S/MIME). This is not an absolute requirement, but very useful feature to have. I understand that when Netscape Navigator was young there probably wasn't system-wide keystores, though.

4. Securely backup the certificates if they're meant to me used as a master ones, not per-device.
Its actually up, they need to remove their js blockade https://play.google.com/store/apps/details?id=com.dropbox.ca...
It would be nice if there was just a little more branding to show that this is a Dropbox-created product. "from Dropbox" isn't as clear as "by Dropbox". (Are photos being served "from" my Dropbox?) I didn't scroll all the way to the bottom the first time on the page to see the copyright.
So why should they patch it then? Keep in mind that any attack using that bug is quite stealthy.
The Theft of the Century
That bug affected OpenSSL as well. Admittedly, it was caused by the Debian maintainer, but still, OpenSSL's poor design is partially to blame.
Picturelife kind of works the way you describe. It doesn't delete your camera roll automatically but other than that it's just a big online storage for your photos. You can browse all of your images from the mobile app and it shows thumbnails until you zoom them.

Referral link:
https://picturelife.com/?love=YqDZtHd3OI99uX
By my understanding, there's about 1 checkbox that this doesn't tick: remote code execution. It's widespread, anonymous, and easy to exploit.
> Liberals have difficulty emulating perspectives that include concepts such as the divine.

I would hope so, since divine anything is simply ignorant and doesn't belong in any moral toolbox.
Cool tool. Good work! Feedback: I agree w/ other comment...the palette options I get don't seem to go well together. Maybe you're trying to include too many colors in a palette? Also, I'd center the checkboxes on the button when picking a palette.
Easily: they could get their upstream CA to revoke their own CA cert, and then get another one. All certs signed by the previous StartCom CA-cert would then be considered revoked.
The problem is these patriarchal cis-scum aren't actually making shit up to trigger her. The federal government gives contract preference to women-owned businesses, and there are incredibly valuable grants available to encourage des entrepeneuses.

Instead of just wigging out in markdown, she might have considered asking them what the hell they were talking about; it could have helped her business. Life is easier in general when you assume conversations are being held in good faith.

Speaking of good faith conversation, your traffic numbers are not a business secret, and your conversation partner does not actually give a shit. This is just the modern version of "so how are sales these days?"
Doesn't sound like they made it part of his job, just a perk. Participating isn't a requirement. And if an employee was embarrassed by the pizza party and still wanted to submit an idea, I'm sure they could say "I don't want any pizza party, but what if we did this....."
Big Bang Theory is a mainstream sitcom, and it has all the "qualities" of a mainstream sitcom set in any situation.

The vitriolic hatred of a certain subsection of geeks merely because of the setting, or god forbid, attempts at serious criticism of not "not conveying a genuine culture" only serves to confirm all geek stereotypes being exploited by that show.
On the other hand, Dropbox is a one-trick pony, providing a service that is easily replicable and becoming increasingly commoditized.

Dropbox don't even own the hardware they store your files on.

Google own the data centre, the hardware, in many cases the device (Android devices, Chromebooks, Chromecast, Google TV etc.) you use to access their services, and increasingly (with Google Fiber) the connection between you and them.
The reason is that NFS is not safe.
That would be another great meme for the show. Commenting on something without actually reading it. Definitely a HN meme.
Agreed. Its always felt spammy to me - "Register to see more than the first answer." Why??
Yes, it is clean 100%
The app, which was pretty basic and lacked of functionalities such as infinite drawing space, easily movable objects, easy save... has been updated recently. It probably deserves a HN post again, since it turned into a lot more usable tool.
Why Heartbleed doesn't leak the private key [retracted]
Take a look at https://github.com/mmozuras/pronto - does the same, has many adapters.
Apparently they admit they have no revenue source and as such going public doesn't make sense. Maybe they are aiming to be more like Wikipedia than Yahoo?