skysight-inc/HackerNews huggingface dataset:
For reference: Chromium ticket for this issue: https://code.google.com/p/chromium/issues/detail?id=361230 (Closed as WONTFIX for the same reasons)
Jony, please stick to hardware.
Sure. How many of those are there? My understanding is that most CAs let you revoke and re-issue your certs for free for the year you've paid them for.
What talent has Ive driven from the company apart from Scott Forstall and this guy?
I wonder how possible that would be given the quote in the Jobs biography:

"He told Isaacson that Ive had 'more operational power' at Apple than anyone else besides Jobs himself — that there's no one at the company who can tell Ive what to do," the report said. "That, says Jobs, is 'the way I set it up.'"
There are more web developers on this site than systems developers. What can you do in PHP that you can't do in C, or assembly, or binary...
Improving Resource Efficiency with Apache Mesos
> Ultimately, Tesla service applied non-tamper tape to the fuse switch. From that point on, the fuse performed flawlessly.

Wow.
Giving up is the best feeling
You are quite free to be impolite to the machine.

I'd prefer that the machines continue to be polite toward me, if for no other reason, because that makes it easier to ignore the interface, and push it into the background.
me too! where do you edit?
What dedicated provider(s) do you recommend for being in the same building as AWS us-east-1?
> Um, how about a VPN, or ssh with dynamic forwarding?

That's exactly what the goal of this is. Except it avoids using SSH over the public network, since spiped is more reliable and also (I think) more trustworthy. One takeaway for me from the heartbleed bug is to place less trust in large, general-purpose C libraries. Compared to SSH, spiped is a comparatively much smaller codebase, maintained by the excellent cperciva.
Stages of Open Source:

Run opensource so you can pour through the code and trust that it is secure by finding the issues in the code.

Benefit from the masses of users also pouring through the code to make sure it is safe.

Gain critical mass such that no security flaw goes undiscovered.

Grow complacent and assume all the other users are checking so you don't have.

Gain a large enough install base that malicious contributors add back doors and other nastiness to the code base.

Have a bad thing happen.

Snap out of complacency and start taking security seriously again.
Don't get jealous. You are gorgeous too <3
Very well stated. You should consider submitting this to their mailing list discussion on the topic.
Sometimes I wish debugging worked on Windows, but generally speaking I've found Go makes unit testing natural enough that it's not a big deal.
Your first note is irrelevant, since all modern phones have a (hot) CPU running while the phone is active. It's why phones don't rely on their temperature sensors for ambient readings in the first place even if they have them.
I don't think the cyberbullying is exclusive to Yik Yak. Kiwichat should also be susceptible.

derp?
This has been discussed multiple times now [1], but TACK is not a solution because:

1. It amounts to a preservation of today's pay-for-security system (the no-so "nice thing" you mentioned), which is not necessary. It is not necessary, thanks to distributed databases like Namecoin, to have to pay for SSL certificates anymore (or fax credentials, or any of that).

2. It doesn't offer a strong mathematical proof of authenticity the way a blockchain-based solution does. [1][2]

[1] https://news.ycombinator.com/item?id=7325551

[2] https://github.com/okTurtles/dnschain
And that is the same recommendation you'd have made as a week ago? (In fairness, I can believe it might be).

I am honestly struggling to see how you don't think having all Linux servers running incredibly similar crypto stacks is a bad thing. For sure HSMs and Windows boxes add to the diversity of the world, but Linux boxes form such a massive proportion of servers connected to the net that any common vulnerability there is a major problem.

Just assuming you've found all vulnerabilities is not the way to go, so mitigating the effect of a vulnerability happening seems like a reasonable thing to do. After all, this is a good reason for things like process separation.
It was giving me a "houndci.com IS VULNERABLE." 45 mins ago.

http://l.ew.is/shared/houndci.com_IS_VULNERABLE.png
This is what I originally had but I felt that the Python `while` was actually a bit more true to the way a C for loop is constructed (and `range` seems a very not C thing to do.) It's not perfect!
Is There a Hacker Hiding in Your Air Conditioner?
There is a similar problem with objc_msgSend in C: Methods with certain argument types can't be called with a normal objc_msgSend(). Instead, you need to create a specifically typed function pointer and assign objc_msgSend to it. I think a similar solution would be necessary with Haskell.
In what ways is testing an error code with an if statement more manual than catching an exception with a try/catch?
How I built in app in 30 minutes using Bubble
What do terrorist networks and how they live have to do with internet security or even the outsourcing of trust in general?

On a technical level there's no meaningful connection.

Just talking philosophically they "live in caves" because the US & other govt's have armies trying to kill them. It has nothing to do with trust networks. If anything that style of trust networking has made them more secure as it's difficult to penetrate. The point that OP was making.

Finally, personal trust networks have worked remarkably well. Look at guanxi in China, social societies like the Freemasons (not in a "control the world" way, just better business contacts, etc.). These are all based on networks of trust.

I have no idea if this is the best way forward for the web but a comparison to terrorist networks is meaningless.
I want map (the function). I want filter. And I don't want to keep rewriting them over and over when I work on projects.

They're not required -- indeed, I get by without them --, but the topic of the OP is elegance.
You're most likely right, but if they were to say that outright it would be much harder for her to exercise said influence.
To me, this is the wow part:

> After investigating, they determined that the car's front trunk had been opened immediately before the fuse failure on each of the three occasions.

The Tesla sure logs a lot of things.
And maybe you have a chance to provide simple example of how program can be rephrased in such way that generic will not be needed?
Of course IANAL but doesn't this article run the risk of prejudicing any court proceedings?
I hate arguments that includes the grannies

The point isn't the slur on elderly users (though that often applies), but to think of the least-technical, large-base user likely to be trying to make use of your product.

In my experience, I've encountered technically challenged users of all stripes: the illiterate, PhDs, strangers on the Internet, immediate family and friends, children, the elderly, mentally or psychologically challenged, executives (but I repeat myself), entrepreneurs, the harried, etc. And, put quite bluntly, there's a hell of a lot of them.

Within the tech world we tend to be fairly insulated from the larger scope of this problem, and yet in my experience it's still ubiquitous.

The point of the example isn't to take affront, but to realize that for widely-deployed systems, base-level usability is crucially important.
Or he is running an older version of FreeBSD that contains an older version of OpenSSL in the base.
"If we had multiple equally used SSL implementations of equal quality and used in equal proportions"

Then either 1) each would be of substantially lower quality than if the same development effort had been focused on one, or 2) you've pulled a bunch of smart developers off of other projects.

Biological metaphors are interesting, but software faces different constraints.
"Mobile Development" is too vague. Do you mean responsive web design? Touch-optimized HTML5? iOS? Android? Windows Phone? (Ok, probably not Windows Phone.) Or a cross-platform toolset like Titanium or PhoneGap?

As a student, the act of learning on your own is probably worth it regardless of which direction you choose. But if you're thinking career, you should prioritize with a little more specificity.

Edit: wrong word
Xscape, the new Michael Jackson single
Thinking out loud here...I'm sure this will get downvoted. I've never met PG or Sam - this comes only from videos I've watched online - but it seems not only the way they speak, but their mannerisms as well, are eerily similar. I doubt this is because Sam is mimicking PG or vice versa. Some of it I'm sure is due to the fact that in many videos they're just giving the standard pitch about YC's mission which is bound to sound similar.

I don't quite know what to make of it. I can hear my Organizational Behavior professor from college yelling "Group think! Group think!" or some bs like that but I was never a huge fan of that stuff. It certainly doesn't stand out as much as people who have picked up Zuck's habits. Ever hear anyone begin the answer to any question (literally does not matter what the question is or how it is posed) with "Right, so...". You can be sure their youtube history is riddled with Zuck interviews.

I know it's not isolated to tech and every industry faces this phenomenon. It just makes me cringe and I wish it wasn't so prevalent.
It doesn't make any sense to have the hardware and software have opposing designs... that's why they put Jony in charge of both.
As the project gets bigger the right word approaches "elegant" but practical does fit. It seems like a language for engineering software, big software like c++'s boost or google's bot. Unsurprisingly, bloggers aren't talking about that scale.
It just makes programs ambigious when reading. The amount of typing you save is the amount of type information the reader loses. It's okay if there's just one instance of IsString you're actually using, but if you're using few of them in the same module it turns out to not be satisfactory for my tastes.
Maybe I'm missing something here...

On my FreeBSD and Linux systems, the ssh -f parameter sends the process to the background, and the -N prevents remote command execution.
This War Of Mine turns war survivors’ tales into game design
Ask HN: What do you do as IT consultants?
I noticed that a lot of people on HN have side-businesses that operate in the form of a consultancy. What do you do as a consultant? Is it always programming? or are there other niches you can carve out and create a business for?
All true, but the main point is that the subject of BBT isn't "geeks", which explains the misguided haterade. For example, Raj seeking research/grant funding from Sheldon and their university office sharing hijinx hits home for a segment of nerds who aren't the type to frequent reddit or HN where the "laugh at geeks" narrative became popular.

This is esp. cogent if Community is supposed to be a "proper" nerdy show. The reality is a single-camera format is more conducive to a more subtle script (eg 30 rock, which geeks similarly like) than a cheap/quick multi-cam sitcom. The love seems to stem from the nature of the material, which is conflated with the material itself.
I always try and remove my preconceptions from a story when I'm reading it (I tend to be a fan of tesla and musk) and took care to read both the linked to article as well as tesla's version, but lots of things about this scream bullshit.

I especially dislike the youtube video created by the lawyer[1], reminds me of the american political smear campaigns that are run.

[1] http://www.usatoday.com/story/money/cars/2014/04/07/tesla-le...
I don't know the answer to your question but I suspect Tesla is more concerned with the truth getting out and telling their side of the story than just the outcome of the case. Although to be fair, that is merely a guess and a personal opinion.
If 10% of your lines are repetitions of the same thing that's absolutely a problem with the language. You should find a more concise way to express the same thing (e.g. error monad).
I think there also is a limit to growth. If population density gets to high, the average ant has to walk so far for food that getting food costs more energy than the food brings in.
Side 1: Informal groups can be manipulated

Side 2: Formal groups can be manipulated

The side #2 arguably is worse because it is at larger scale[]

[] And its better hidded: bad actors hide like needle in a haystack.
They seem to have been right to, given the number of times people have setup to knock them down.
How to use Twitter so that it helps you (3 tiny ideas).
Taking time out is a great idea as its not all about money, but to say you've made enough money for now and downing tools, when you haven't finished some of the course you've just sold people for 200 USD+. I'm not sure how you expect your customers, who now feel forgotten, to react?

The course is great btw, but I feel a little like I've bought a car which promised a great feature coming soon, and the manufacturer has got bored and moved on!
Python's newest operator
Looking for a Music Degree?
It's actually awesome. At first it feels ugly to write, and you're generating all this unnecessary noise in your code, but then you finish a big project and overall the manual error checking combined with defer leads to less code than the Java or C++ equivalent, and feels safer. Going back to try/finally just feels awkward now.
Can you name another site that uses Slash?
Awesome. Thankyou.
These are all things that we know already. Does the fact that it was covered by CNN Money really make it front page worthy?
Wouldn't -C (compression) help to speed an ssh connection?
The only thing I can figure is that the customer is trying to drive a car around for a while, file a Lemon Law complaint, then get a buy-back? I say this because it appears that the fuse had been tampered with, and the same person filed a complaint against Volvo last year.
Why the strong opinions about blocking? Go discourages, at least me, from doing non-blocking IO. I've heard that's a unix philosophy though. For example, io.Copy will block.
I wrote this to scratch an itch of mine:
There is nothing about go which prevents the use of generics. I wrote the following library to scratch an itch of mine:

https://github.com/mediocregopher/seq

It provides clojure-like data-structures and functions for interacting with them (like map and filter). It's completely immutable and generic, and supports lazy operations.
Why not, we already have .coffee .florist and .dating - we should just enumerate the OED for TLDs.
For what it's worth: he's the former FreeBSD security officer, so I wouldn't worry too much about which version of FreeBSD he's using.
The ideal resolution for Tesla is for the guy to drop the suit. This is what they're trying to accomplish by laying their cards on the table. IANAL either, but I'm not sure what risk you're talking about - do you suspect this suit will go to a jury trial, and it will become difficult to find jurors that haven't read this press release?
JS version for funsies. I didn't like the idea of specifically checking for simultaneous mod3 and mod5, so I made this.

for (i=1; i<101; i++) {
var result = "";
if(i%3 == 0)
result += "Fizz";
if(i%5 == 0)
result += "Buzz";
if(result.length == 0)
result = i;
document.write(result+"<br>");
}
Facebook to remove messaging from core app
Why? I thought he was in charge of all UX to begin with. The fact that iOS7 came out with such inconsistent design, weird colors, and almost invisible fonts is his fault as much as anyone's, if not more so. He approved everything, and now he's taking it out on the designers because of the bad feedback from the market?
If It Wanted, NSA Could Collect Internet Searches and Emails
if it were anywhere else in the world, we'd immediately be calling it out for exactly what it is: barefaced corruption amongst the incestuous VCs. But since the Valley has convinced many that it's the meritocratic mecca for formerly maligned nerds, we scratch our heads trying to preserve that image while the truth lies right in front of you.
TACK has the advantage to work in the current infrastructure (with some patches): it's a point that should not be ignored if you want wide acceptance.
I talked to an engineer from Sensirion (the makers of the temperature sensor on the S4) a couple of weeks ago. He told me that the waterproofing was the reason that they couldn't include their sensor in the S5.
Not really - underwater currents can be quite strong. If you were creating a model to accurately position this thing, you'd be best to add a v⃗ component for both the transmitter and receiver sides of the equation.
To be fair, I don't like Bob's business and wouldn't be his client. If you want me to pay for something, you'd better ask up front.

But then, StartSSL does not have a mandatory hidden cost. It just charges if you do something wrong.

The problem that everybody did something wrong and not by our fault is not exactly StartSSL's problem. I'd be impressed if they revoked the keys for free, but I don't see anything wrong on they not doing it.
If you had the option not to use OpenSSL, you can count on me not to recommend using OpenSSL.
Agreed. "Assuming Dropbox can recover from partial uploads" meaning Dropbox can pick up where the upload stopped and keep going. But let's say it's halted at 99%, if Dropbox has to re-check every single file from the start to see if it's in sync, then there's gonna be a penalty there too.
with a properly done CSR (certificate signing request), a CA never has access to your private key, therefore cannot "give it to someone else"
Yeah, this does not feel good to me. I get the PR angle but this feels not right to me.

Wait until the trial is over and then give your side of things to handle the "court of public opinion" but this has potential legal ramifications and I don't think this is the right way to handle it.

Maybe I am wrong but it doesn't look like the right way to me.
Andrew's interviews are awesome and he's a super nice guy to boot, always willing to help founders out where he can. I remember listening to them on my commute to work with my cofounder years ago. Those hours in the car were a major source of early startup lessons. Mixergy is one of the best startup resources out there in my opinion and is worth checking out if you haven't yet.

PG's interview is still open even though it's over the premium membership threshold - http://mixergy.com/y-combinator-paul-graham
I don't think StartSSL is obligated to provide free stuff. If anything, StartSSL should be obligated to charge money for their service, if they expect to remain competitive. As it stands I think that StartSSL's free certificates do not meet my standards for what the lock icon in a browser should mean.

Security is a lot more complicated than that little lock icon, anyway. Security means different things to different people, devices, and protocols. It's a UX/UI problem. What we need are fresh ideas on how to convey security concepts through GUIs and human interfaces. We need ways of visualizing privacy and trust networks (things like Lightbeam and Collusion), and ways of securely building trust links (things like interactively-verified Diffie-Hellman over NFC, or ssh-keygen's randomart)
4% of 628k (safe withdrawal limit) is 25k - this is amount you can withdraw in pretty much perpetuity (for 62 year old). 25k combined with SSN (20k/year) is very close to average family income in US and guarantee good living in most cities in US (outside of Bay Area/NY and a few other zip codes).

Saving 10% is borderline enough to retire on if you do not make stupid financial moves (like moving out of market in 2007 or living in most expensive area in US). It's not enough to be financially secure - you need to save 20-25% for that (totally doable on software engineer salary).
Is that actually true though?

The big truism of software development is that motivated small teams can do proportionately much more than the same people would if they're all thrown in one big group on one project. The whole mythical man month at work.
For me, the major problem in the infrastructure of PGP "web of trust" is that even that is prone to spamming (not in the hash values but in the appearance of names involved) and learning to avoid them. See the recent example:

http://cryptome.org/2014/04/radack-greenwald.htm

It doesn't appear at the moment that pushing this technology to web browsers would increase the security of the most of the users.
It's a cancerous post modern rhetorical strategy, where people are so convinced that they are absolutely, 100% correct that they use shitty sarcasm to the point of absurdity, then try to call you out for not "getting" a shitty half baked idea, a là reddit/r/shitredditsays
I also don't understand the 80million (perhaps rich people don't know where to put their money?).

But Quora is definitely not just another Q&A site.

First, they have incredibly good technology. I would say that their livenode/webnode2 framework is one of the (or the) most technologically advanced web frameworks in existence. (Although now that React exists, it should be relatively easy to create something even better than what Quora has.) Also, I like their deployment process - they auto-deploy on every commit if tests run flawlessly. And their CEO is pretty smart (http://www.quora.com/Adam-DAngelo-1/What-are-some-good-stori...).

Second, there's lot of very valuable and high quality content. I've learned a lot from Quora.
Interesting, this seems to have taken quite a bit of UI inspiration from Android design patterns.

- Branding in the titlebar, left aligned. I must admit, I really dislike this trend.

- Side-scrolling tab/pill menu for subscribe, hot, new, rising, etc. This is not so bad.

- Popover menu, very Android like, although on the other side.
By that logic, we should remove every CA.

At least StartSSL will have good certificates for everybody in their free tier in 12 months.

Can any of the other CA's make that claim?

So, are you going to lead the charge at the rest of the CA's?

And, I suspect that StartSSL couldn't possibly handle every single person calling them up to revoke a certificate right now. And that is NOT their fault--they didn't cause this bug.
FWIW, Web of Trust was blocking your site due to poor Trustworthiness and Child Safety Warnings. See here: https://www.dropbox.com/s/2ol9ad09qv13jk9/Screenshot%202014-...
Precisely.

Other languages, Nimrod for instance (http://nimrod-lang.org/system.html#515) can manage this while still keeping a simple core, including lots of type-inference. Having generics doesn't automatically turn your language into Java.

The map operator in Nimrod has a definition that is clear and simple:

proc map[T](data: var openarray[T]; op: proc (x: var T): S): seq[S]
Yeah, in this specific case, it seems somewhat justified, but I'm really not sure how I feel about a car that logs that much.

Even though I use web apps that can log everything including mouse movement, something about such logging in the physical world still puts me off big time...
Growth hacking to 100,000 customers and $30ml in sales for free
Jon Rubenstein had plenty of conflict with him (via the Jobs and Ive biographies), and Tony Fadell as well [1].

[1] http://www.cultofmac.com/262334/feud-jony-ive-keep-tony-fade...