skysight-inc/HackerNews huggingface dataset:
It is a stretch to call this irresponsible. Is there any evidence that the OpenBSD people ever drew upstream's attention to this?
24 and 360 are really good unit bases for something you have to divide by hand. 24 gets you 2/3/4/6/8/12 while 360 gets you 2/3/4/5/6/8/10/12/15/18/20/24/30/36/45/60/72/90/120/180

And, we don't always adhere to cartesian conventions. Right-hand and left-hand rules abound in engineering. And even computer graphics regularly flips the axis directions depending upon usage (perspective transforms, for example).

And, decimal degrees isn't that uncommon either.
Why is that an epic failure? Start using the Facebook Messenger app and you'll have a smaller download when new versions ship. I think it's great.
Red Pen v2 with live collaboration
Perhaps you should try Lightroom's new cloud offerings [0].

[0] https://helpx.adobe.com/creative-cloud/learn/start/tutorials...
It's not even true that open source SSL is a monoculture. There are two critically important open source TLS implementations, not one (NSS and OpenSSL), and that's not counting SecureTransport (Apple's open-source implementation).

I don't think there's a single part of your argument that really survives scrutiny. Your central point is false, as are its premises. To the extent that a large portion of the Internet uses one TLS implementation, that's often been as helpful as harmful. And the "monoculture" you're decrying is counterfeit: you seem to think OpenSSL is the only credible option, but Chromium and Firefox disagree with you.
Sorry, I just assumed. Thanks for the clarification and good to see prices coming down to reasonable levels.
I'm not sure I consider this a positive for Dropbox.

Nor am I sure why they would do this other than they like to suck up famous people... Guido Van Rossum for instance.

Surely there are less controversial figures that have an intimate knowledge of international relations and less associated baggage. They probably come at a better price too.
The book The Man Who Lied to His Laptop [1] shows that if you asked a person if they view a computer they have iteration with it view it as a person to person engagement they would say no, experiments show otherwise. There is a base emotional impact from these things that people don't obviously notice. Sure the user would not think that message seems impolite they will notice it at least subconsciously. A good example is when rating a piece of software via a electronic survey the group that took the survey on the same computer they used the software on consistently gave it better scores. Its a very interesting book.

[1] http://smile.amazon.com/Man-Who-Lied-His-Laptop/dp/161723004...
I think you're confused because many companies choose not to comment on pending lawsuits. That doesn't mean they are legally forbidden from doing so. Tesla has every right to defend itself in the court of public opinion, though certainly if this goes to trial, the parties will seek jurors who haven't preformed an opinion based on public statements. IANAL.
Here's a shameless plug for http://www.colr.org . No palette generation algorithms, but lots of tagging and classification.
Now you've got way less code, and way more cognitive load per line.

There's a reason why hideous Java is so successful while beautiful Haskell is a punchline to jokes.
Congratulations to Andrew!

I've learned a lot from watching Mixergy, but more importantly from doing a little role-reversal and interviewing Andrew myself. I took a 'Principles of Interviewing' course in college and one of our assignments was to record three interviews with people in the industry I wanted to get into. Being interested in tech/entrepreneurship, Andrew was my top interview candidate.

The plan was to interview him first and get feedback because learning from someone who does interviews for a living would prepare me for the other two interviews. He was gracious enough to agree, and we recorded before one of his regularly scheduled interviews. I was nervous as hell! I mean, you never really see an interviewer being interviewed themselves. What questions do you ask?

I asked a lot of basic questions (history, inspiration, setbacks, etc.) and a few that made Andrew sit back and go, "hmmm, that's a good question..." but the real knowledge I gained came with Andrew's feedback immediately after. The magnitude of which has slowly been realized since: feeling uncomfortable is good.

Doing something new almost always feels uncomfortable to some degree... and an entrepreneur is almost always doing something new. Rather than try to mitigate that uneasy feeling, you can take it and embrace it. That dissonance between your gut and your brain is the origin of curiosity; where knowledge is needed to fill the holes. If something feels uncomfortable, it's because you haven't done it enough. You don't fully understand it. While it helps to have a mentor who can say whether an uneasy feeling is normal and how to get over it, the important thing is to just get your hands dirty. Just do that new task, or ask that difficult question.

It's been rewarding to watch Mixergy develop over the years—to see Andrew dirty his hands and dive into that space which makes every interviewee feel uncomfortable and vulnerable (as well as himself).

Thanks for everything, Andrew!
I think they are intentionally trying to build a reputation as a company that shouldn't be messed with. It may be saving them from a lot of this type of stuff. Additionally might be protecting them from negative reviews. I see your point about that, but it's also an interesting tactic from a company that knew it will be up against so many barriers.
SuSE Enterprise linux for example is still on 0.9.8, moving from 0.9.8 to 1.0 for a distro is a non trivial amount of work.

Some of these distros are LTS, so the bug fixes are usually back ported. The latest 0.9.8 is y which is from Feburary 2013.
You can download the TextMate theme file for the colour scheme you generate. You can use the tm file directly in Sublime.
"How do we convince that brilliant engineer that has the idea he's really passionate about, that can change the world, to start a startup and not go work as an engineer at a big company?"

Silicon Valley's engineer fetish is inane. Most early-stage web startups simply need CRUD applications that work at limited scale. Commodity-level web developers can build these applications.

What is not a commodity, in order of importance:

1. Domain expertise.

2. Product development/management.

3. User experience.

I'm sure lots of people would disagree, but you can test this. Go out and try to find the following:

1. Somebody who has worked in an industry for more than 5 years, knows it inside and out, and has relationships that can be leveraged for sales and business development.

2. An experienced product manager.

3. A proven UI/UX person capable of designing quality experiences around moderately complex workflows.

4. A PHP or Rails developer who can build a working application if given a reasonable spec and design assets.

#4 is not your problem. Most of the time, this person will be the easiest to locate and cheapest to acquire.
I think they're addressing a public complaint. When other companies provide vague responses or simply say "no comment", people complain. Tesla tries very hard to be faultless, apparently to a fault.
The $100M quarter
While this certainly reads like illicit usage, this blog entry leaves a sour taste with me.

1) Why even blogging about this? Is Tesla that insecure about its PR that they think they need to take the wind out of any possible negative news story, even if it will be easily defused?

2) Why start with their high grades in consumer reports? This is not a statistical sample, it's an individual case. Reads very defensive even though it clearly wouldn't be needed.

After so many success stories I hope they become more confident in their public communications.
Ah yes, very good examples of how Go's error handling needs improvement.
Have you taken a look at FAKE? http://fsharp.github.io/FAKE/
I was reacting mostly to the apparent exclusion of usernames, passwords, and session cookies (all exposed in net traffic) from the category of "anything sensitive".
His older sister.
We live in what is called a free country.
I've had a lot of success sharing my course (for free) on reddit: https://www.udemy.com/building-and-selling-a-niche-website-f....

If your goal is to make sales though, i would just do a lot of podcast interviews/ads within your niche.
Dropbox to organize photos with new Carousel app
panic() is awful. Right. But is so much not a pattern.

Sum, Max, Min are pain points that surprised me indeed.

As for error handling I argue that it's a good thing. Really, it forces to decide what you do with your errors, and snippet expanders are there for a reason if you need to handle them all in the same way.
The Financial Times got confirmation of this from Apple:
http://blogs.ft.com/tech-blog/2014/04/apple-confirms-departu...
(registration required)

Apple's statement:
"Greg has been planning to retire later this year after nearly 20 years at Apple. He has made vital contributions to Apple products across the board, and built a world-class Human Interface team which has worked closely with Jony for many years."

Clearly downplaying a clash.
Hey, I'm one of the contributors for that plugin. There's still a lot of work to be done, but I'm finding it fairly usable right now. If you get around to it soon, make sure to grab the plugin from Github and not the plugin manager. The version in the manager is very out of date. And pull requests are very welcome.

EDIT: For the record, I'm using it on Windows
Interesting. A shame he wouldn't identify himself or his company in the piece -- it seems like he's quite successful now, so I don't really get the need for anonymity.
As a young kid, Founders at Work was a great source of inspiration. After reading it, the dream of doing a startup was born.

When I actually started doing it – in Brazil, a place with not many startup role models – Mixergy became a guide on actual tactics to use. I would listen when commuting to/from work and this made the goal much more actionable. Hearing about other founder's stories – and, thanks to AndrewWarner's squeezing, every single detail of their stories – pushed me to go much much farther than I would've been able to go otherwise.

Thanks Andrew and congratulations!
It's perfectly fine to prejudice court proceedings that are not yet in progress (though less so for prosecutors attempting to do the same in criminal cases).

It's not permissible to influence the deliberations of jurors, but that's a narrow scope--jurors aren't supposed to digest media related to the case while serving, so the parties can generally say or opine whatever they want during a case outside of the courtroom.
Stallman said that non free software controls the users. Such software & its developers must be made to apologise, unless the software is made free.
"This app requires a camera flash". Why :( ?
I love how tesla basically discloses who the plaintiff is, by referring to an old case of his. Hello there Robert Montgomery!
For the same reason a lot of companies block USB ports on company computers: so you don't take work material without their knowledge.
Fair enough.

What I expect is that a company should either offer a free service and serve those customers well, or not offer it at all.

Offering a free service, but then being hostile to those people each and every month, is the worst of the options they could take. My 2 cents.

Lots of other companies, including my domain registrar, offer this service for free too.
I hope someone writes a book about this one day -- the transition from being the underdog to the dominant player in the field. It seems like a very difficult transition, both for the contestant and the fan.

While I understand where you're coming from, it does feel a little bit about being conflicted over the possibility of a company doing something bad in the future.
Funny, he was just on the stand in their patent trial last week.
Hmm. I was definitely oversimplifying, but if I need AES-256-GCM, how do I choose between OpenSSL and LibTom? (If you have particular insight into the strength of LibTom's GCM table acceleration implementation, I'm quite curious.)

What multiplication factor on "very" careful do I need to be with OpenSSL? :)

edit: Maybe I should've posted this link[0], because tables vs CLMUL is a little more complicated than that.

[0] https://github.com/pyca/cryptography/issues/846
One of the main jobs of a programming language is to reduce the amount of duplication you have to write. It just seems to me like being okay with that is antithetical to progress in practical language development.
Would you feel better about an option that let you disable internal logging on the condition that your service/maintenance costs were raised substantially? The purpose seems to be to make diagnostic work easier, after all.
Originally discussed here https://news.ycombinator.com/item?id=7545456
This may be an unpopular opinion, but I hope Go is relegated to web services programming. It's really not a good language for much else. The lack of generic support is really terrible. What you have to do instead (cast things to {}interface) is like casting things to Object and then hoping they have the right methods in Java.

For everything else, I think Rust is miles better than Go. It stole a ton of useful features from Haskell/ML and did a great job of putting them together. I actually want to use Rust instead of C++, whereas the only reason I ever really want to use Go is that its decent threading primitives and good standard library make for simpler web apps.
Wow I didn't know it was dead. I feel like there's really a need for a good photo/video management application. I didn't really like Everpix though, I felt like it was poorly made. Maybe that kind of thing need a desktop application to be truly good.
Its about time users are humiliated by the computers for making mistakes. Perhaps punish them in some form.
That’s enough.
Heartbleed Chromium Extension
The extension queries http://filippo.io/Heartbleed/ and displays an icon in the address bar if a website is found vulnerable.
tl;dr: Don't trust big scary corporations like Symantec to verify sites, trust your friendly local geek's network.

I think if you weren't exhausted by the sheer length of the post by the time you reach that proposal tucked at the very end, you might think to ask some critical questions. Like, what are the vulnerabilities and exploits of a peer-to-peer system? Would this not be open season on socially engineering average folks to trust the wrong peer? How vulnerable to attack are local geeks and university computer science departments? How are compromises noticed and handled by the average folks who trust a small local authority? How will the verification work be paid for, or will it be completely volunteer based, and how efficient will that be?

Moreover, what the author fundamentally misunderstands is the importance of usability in security. Web security isn't perfect but that's because more perfect security would make ecommerce annoyingly difficult. Then people start taking shortcuts or just ignore security completely, which is a worse outcome. It's not enough to point fingers at users and yell that they're doing it wrong; security architects have to take responsibility for security outcomes. A peer-to-peer system would be significantly more inconvenient for average folks to use correctly, if only because of figuring out who to trust in the first place.
You can shoot me an email (davidleothomas@gmail.com) or hit me on irc (davidthomas on freenode - I typically lurk in #haskell and #snowdrift, amongst other places). I don't want to get hopes up too high - sufficiently little isn't going to be much in the short term.
I agree completely. I like Lisp because it's elegant, and the solutions to difficult problems in Lisp are beautiful in every sense of the word.

I like Go because it's practical. I can hammer out the solution to a difficult problem very quickly and that quick solution is reasonably scalable from a software engineering perspective[0]. Go makes it easy to write the first iteration, but its real strength comes from making it easy to write the subsequent n iterations.

That's "elegance" of some sort, but it's elegance in engineering, not in programming, which is an important difference.

You might say it's "elegantly practical"

[0] By "scalable" I don't necessarily mean performance, but the costs of scaling developer manpower on large projects - ie, a "quick-and-dirty" solution in some languages may require expensive refactoring down the line, or cause you to design bad interfaces in your functions, etc.
myforwik writes:

http://arstechnica.com/security/2014/04/critical-crypto-bug-...

"Even 11 is an understatement. Remember the servers involved have potentially been leaking their private key for their certificate! This means anyone can 'fake' being them.

It is not enough to do new certificates. All of the old certificates could now be used for man in the middle attacks! 2/3rds of the Internets certificates potentially need to be blacklisted! This is a MAJOR disaster.

It is unfeasible to blacklist such a large amount of certificates - as every device requires a list of all blacklisted certificates. This means all of the major CA's are going to have to black list their intermediate certificate authorities, and start issuing all new certificates under new CA's. This means even people who weren't effected will probably have to have their certificates blacklisted.

In short EVERY existing CA used on the internet may have to be black listed, and every single SSL certificate re-issued.

IMO SSL/TLS is now completely broken. The number of potential certificates that have been exploited and that could now be used for man in the middle attacks could be in the millions..... the list of black listed certificates will be in the millions and/or the number of blacklisted sub certficate authorities is probably going to be 10,000+. Vendors already hate just including one or two items on the blacklist, let alone this number of items.... "

It's not actually 2 thirds of the Internet, but it can be that the effects can be really bigger than most people imagine on the moment. Either the massive blacklisting or ignoring the period of potential exposure.

Hopefully all this can result in the push to change some of the principles of certificate verification. And maybe a different approach to OpenSSL development.
see Steve Ballmer
Heartbleed: What programs are 'critical infrastructure'?
> Yes, you MUST. That is just how Go does things.

If it's something I "must" do, why doesn't the language force it to happen? Silent failure is a really bad default.
Jobs and Ive run Apple like a cult of personality. And it seems to have resulted in awesome products. Let's see if that can continue to happen.

Because in the last 2 years, Apple's design took a nosedive. I hate to say it but Google's interfaces are now way more pleasant than Apple's. And there is one reason for it:

FLAT INTERFACES

If it comes to the MacOS, I will probably abandon ship. I liked my iPhone and its familiar look and feel. Jobs got it, Ive didn't. It was all thrown out the window with the word "skeumorphism".

Let me be clear: iOS 7 was a leap forward DESPITE the interface, not because of it. It was all the other things, like the drawer on the bottom (whoopee) that made up for the horrible clown-like icons and complete lack of textures. My videos with white backgrounds now are indistinguishable from the controls. At least they fixed the neon-green color of the bar on top when you have a phonecall. The white text was almost impossible to read on it. How did it ever pass design QA at Apple? Probably while Jony Ive was desigining his much-touted icon grid.

Apple, your design was so good -- why'd you have to go copy Google and Microsoft after decades of leading design-wise? Why'd you have to break your browser only to fix it in 7.1? Argh.
Thank you HN for hosting another Tesla public service announcement.
Longreads acquired by Automattic
I love go, and I concur with almost everything the author wrote here. A small pain point in my experience though is that Go lacks an elegant way to pass type information around without using a zero valued (or fully populated, it makes no difference) instance. For example, I have a factory struct with a New 'method' that returns interface{MySignatures()}, but I cannot inform the factory of the concrete type I want it to produce without passing in something like new(ConcreteStructWithMySignatures). Some have suggested I pass in a string, but what is the point of a type system if I have to use strings to reason about my types?
Please consider that I wrote in a time measured better in minutes.
I can't really give a good example because I'm not sure how it happens, it just has, for me. Maybe it happens in spite of the error handling.

Anyways, I think that weaving the error handling code into the mainline of your algorithm is in fact clearer. It's 100% clear what's happening at all times, and you don't have to speculate about where exceptions could create a hidden return. Maybe you feel differently, although I'd recommend trying it for a while with an open mind.
So I guess it just missed the boat on ubuntu 14.04 LTS, right?
I use a StartCom certificate, but it has never been used with OpenSSL, so I'm fine.

It costs money to maintain a CRL.

Maybe they could revoke their intermediate certificate and reissue certificates to everyone. That would take time to coordinate, and every month that goes by 1/12 of the bad certs expire anyway.
There seems to be a an intellectual reflex that whenever the topic of exponential growth comes up, people have to bring up growth limits and population density...

In this case though, I don't think that resource limits apply that much. Individual ants feed each other, so they can survive quite long periods without food, and they don't grow much beyond carrying capacity. If circumstances change, they can do a "soft landing" by downsizing the colony slowly or even moving the colony.

In fact, colony size seems to be most often limited by burning off excess capital in sexual broods.

Compared with most other insects, ants are actually much worse at building up biomass. But the queen ant's survival is actually safer because the colony manages risk and growth.
Is this just how startups need to act in the social-media era when confronted with a story that could possibly go viral?

A company like GM doesn't need to worry as much about a lemon-law claim - it's probably cheaper to just refund the money than pay lawyers.
He who controls a Queen can make functionally equivalent copies of every Princess and Princess-baby in the Queen’s lineage. They have the skeleton keys to your ‘secure’ kingdom and could at any time decide to become a fraud factory and dish out copies of your keys to whomever they fancy.

This seems like utter nonsense to me. Certification authorities should never get to look at my private key, and I don't care about them giving out my public key (it's public, after all). The best they can do, if they're evil, is create a new pair with information that impersonates me.
I once pulled up to a parking ramp gate. A recorded voice asked me to "please take the ticket." I was fumbling for something in my car and no one was behind me, so I just sat there for a minute. The voice repeated, "please take the ticket." I continued to fumble. The third time the recorded voice came on, the tone had changed to stern and authoritarian. It barked, "take the ticket." I jumped to attention and grabbed for the ticket.

It's fascinating how powerful the change in tone and dropping the formalities affected my behavior. There's a case for pleasantries in some situations. There's a case for pithy authoritarian messages in others.