skysight-inc/HackerNews huggingface dataset:
I had a little experience last Nov/Dec coding at/from 2 coworking spaces in Tokyo

One, co-ba (http://tsukuruba.com/co-ba/) I picked mostly because it was closest to where I was staying. They have 2 floors, one of which is open 24 hours. When you sign up full time they give you an RFID card that lets you into the 24hr floor anytime.

On the non-24hr floor they often organize events that start at 7pm. They also organize many social outings which I find a huge plus.

Also, as a programmer they invited me to be part of the "programming section". I'm not sure what all their activities are but one I enjoyed more than I thought I would. That was, every Friday at 4:30pm, if you wanted to you could participate in a coding exercise.

Someone would propose a very simple programming problem like "write code to draw a multiplication table", something that could be done in a few minutes. Their goal was 30 mins or less. We'd then go over everyone's solutions. I got exposure to languages I hadn't had experience with. I got exposure to solutions that hadn't occurred to me. They'd even ask style questions like "why you name your variables like that" which brought up interesting discussion as well.

Now that has me wondering if USA based co-working spaces are similar.

I also helped at some friends who worked from one of the http://co-lab.jp/

Both of them had rented permanent desks. I just sat at an open table when helping them out. I don't really know what that place was like other than it exists. It was much bigger than co-ba.

Not a co-working space but there's also the Pico Pico Cafe in Kichijoji (http://www.picopicocafe.com/). It's run by the guy making Voxatron (http://www.lexaloffle.com/voxatron.php). It's effectively his office. He opens it 3 days a week as a cafe and works on his projects those days as well.
> And yet there seems little effort to make them production-ready and deploy them; what kind of market failure is that?

At least we have Rust...
Steam has OpenSSL security vulnerability. Do not use until fixed.
Well done guys, looks awesome!
Miran Lipovaca's LYAH is one of the best intro to programming, not just intro to Haskell, books I've read. He's great at explaining complicated technical concepts clearly.
1) They aren't making the world a better place.

2) SV is full of assholes.

3) The show is hilarious.
TL/DR from the Mozilla bugzilla (https://bugzilla.mozilla.org/show_bug.cgi?id=994033)
There doesn't appear to be a definitive argument as to should they or should they not waive their revocation fee.

On the side of StartCom an extremly resonable point as to why they should not waive their fee:

> Every other certificate provider requires payment for certificates. StartCom is the one provider offering free certificates, which goes a long way to spreading TLS and https more broadly, and the complaint here is that they're daring to charge a fee to maintain their revocation list? Removing them over that would do more harm than good to security.

And the also very reasonable counter point:

> The problem is that thanks to Heartbleed we now have potentially leaked private keys (leaked due to circumstances outside of the control of anyone) and thus insecure sites.
Now with StartSSL charging for every single revoked certificate they are encouraging people to "eh, the chance my key got leaked is so low, I'll just stay with my old certificate" thinking and behaviour.
This is actively compromising the security of SSL and consumers (no one I know checks the SSL vendor on certificates of sites they visit if there's the lock icon and it says it is trustworthy). Therefor customers and site users expose themselves to potential security risks while the browser ensures them they are communicating securely with the website.

At the very least its refreshing to see that people aren't just jumping on the rage bandwagon of, "OMG you mean I have to pay for something that you said I'd have to pay for. You are evil".

It's nice to see some even handed analysis of the situation!
I second this, and I'm a huge Mike Judge fan, but "Betas" feels so much more genuine then "Silicon Valley". Both are good, but I'm completely sold on "Betas".
Here endeth the lesson.
Since dropbox knows which files are being worked on, I don't actually think it needs to be inside of the application, it could just as well be a standalone overlay. The "sneek peak" screenshot does indeed look like an overlay that pops up when you open a file and which tracks the collaborative status. It also seems like it adds messenging functionality, which I must admit looks neat - pointed messenging functionality tends to be a lot more productive than general purpose messenging.
After spending more than a year on WP7 and then WP8 and then going back to Android, one thing is perfectly clear.

Yes, Android has a multitude more apps than the Windows App store. But in every case for the apps I use, the apps in the Windows store are much better than the ones I've found in the Play store.
But can we still have the CV numbers as well please.

"The security community refers to vulnerabilities by numbers, not names. This does have some advantages, like precision and the ability to Google them and get meaningful results all of the time"

I wish everyone embedded a Dewey Decimal number into their factual pages. Would be ace.

"I saw some kvetching on Twitter to the effect that the logo designer heard about Heartbleed before the distribution maintainers at e.g. Ubuntu and RedHat did."

Updates for Debian and CentOS landed within hours. Would have been nice to have them as we read the page.

Interestingly nothing (apparent) for Manjaro yet. Manjaro is a staged version of Arch which I have installed on a test machine to sample Gnome 3.12 when it lands in the repository a week or so.

[keith@mocha ~]$ openssl version
OpenSSL 1.0.1f 6 Jan 2014

Sort of ties in with

http://allanmcrae.com/2013/01/manjaro-linux-ignoring-securit...

perhaps. I get the impression that Manjaro (and other similar client OSes) are mainly for end users and not on servers.
Very well done. This is essentially the response I would have given in the abstract, but I appreciate that you actually have a presentable implementation.
You are making the claim that there would not be an increase in representation of other languages if they were more represented in the wild. I don't know how you could prove that.

That is, I don't think this exercise really shows what you think it does. Consider, if 90% of the software out there is in c/c++, and you had equal representation of language to vulnerability, then you would expect 90% of the vulnerabilities to be in c/c++. This would not mean that you are more likely to write bugs in those languages. In fact, unless I misunderstand, it would simply mean you are just as likely to have bugs there as otherwise.

Right?
hi - thanks for constructing these very useful and simple tools! I really appreciate the documentation. however, there's an issue - you posted the websockets example code twice, but didn't include one for webhooks.
its too bad that the data from the search process is not made available more openly. they used crowdsourdcing for the image analysis, but as this analysis shows -- its likely the people can really be useful at all stages of the search effort.

kudos for doing this! really great.
Agreed on the count of potential customers with iPads and productivity within the platform you know. I, for one, wish you all the best and I think its a great idea to be sure. I said this elsewhere, I think this could be super useful for a variety of disciplines, but the underlying technology has to be right. Heres to hoping Apple releases a tablet like the Surface Pro!
I'm getting tired of these stories.

If you want to make more money, try to train in and work in a field that makes more money.
2048 TopCoder Edition
There is no doubt that masterful branding of the bug helped with patching of vulnerable systems in this case. It is not at all clear that the trend it will surely start will be a good thing. Marketing does improve visibility. But it also, inherently obscures the truth. Even in this case: some people on HN don't know that it was a Google researcher who first discovered/reported the bug; the actionable/technical information on the bug was hidden below the fold because the primary goal of the page was to be a long term marketing tool for the security firms, not the shortest path to patch vulnerable systems. We will see how this trend develops but I would not be surprised if we get more and more marketing with less upside (necessary visibility) and more downsides.
The scroll bar things is such a serious issue i would never consider using infinite scroll until that is dealt with on a browser level.
Maybe I'm just a psychopath, but after reading your comment, reading through the article, and getting to the picture at the end, I couldn't help but laugh at the absurdity of it. It just looks incredibly fake, like something you'd see in a terrible 50s monster movie.
Remembering 1 password is easier than remembering dozens of them. Reusing passwords is not a great idea, so dozens of passwords is a real concern.

It's also the case that disabling paste doesn't do anything to stop a user from storing their passwords in an unencrypted file.
Sounds like this: https://www.peereboom.us/assl/assl/html/openssl.html ;)
Dropbox announces Mailbox for Android and Desktop
Does $180/user/year seem excessively high to anyone else?
Wow, I wish my experience was like yours. I've found my mac laptops no less frustrating than my windows laptops. They crash just as often, they lock up just as often, they have strange issues that have me digging through apple support websites just as often. The finder still drives me nuts even after having been on mac for 6 years now.

And worse, the 2 or 3 times a year I want to play a game they don't run it. I managed to play through The Stanley Parable in VMWare Fusion but the game froze around once every 1 to 3 mins. Switching in/out of fullscreen mode would unlock it.

I'm not planning to switch back .. yet .. but I do think about it. Especially as a game dev, unlike webdev most game devs are on Windows.
Apologies, condescending snark was not the intent (I can't even see where you see that, actually!). In response to your more salient points, it could be argued that a web+EC2 layer on top of existing software is hardly an advanced textbook. Likewise, their announcement's stated intent is to gain customers, so feedback on what's unclear should be well within an acceptable scope of discussion. Finally, I doubt any of us are excluded from their intended market as software people move frequently between problem domains.
Would be interesting to know if the production people at Google rolled out a fix before general announcement. E.G. is internal communication in such a large organisation still faster than intertube?
I can see your point.

The best use I have seen is a hybrid approach. Load 10 or so out of 100 items, use continuos scroll to show the remanding 90 and then use pagination to access the other results.
I feel compelled to repost the NYT's excellent, terrifying article on "Crazy Ants", particularly the section about how the constant stream of dead ant bodies also creates functional structures:

http://www.nytimes.com/2013/12/08/magazine/crazy-ants.html

> Soon he and his wife were waking up to find vast, frantic networks of ants zipping around the kitchen floor in all directions. When the picture on their 50-inch box television started flickering, Mike took off the back panel and found the guts throbbing with ants. He got rid of the television.

Outside, dead ants began pooling around the base of the house in heaps so high that they looked like discarded coffee grounds. (It’s common in Texas these days for a person who is shown one of these heaps of dead ants to take several seconds to realize that the solid surface he or she is scanning for ants actually is the ants.) Mike laid out poison, generating more heaps of dead ants. But new ants merely used those dead ants as a bridge over the poison and kept streaming inside.
Open source systems engineering work at Meteor
So, if StartCom is removed from trusted CAs you will have to buy a new certificate and spend $$$, something you obviously want to avoid. That's stupid.
I think the idea is that you would use the standard tools for the edges of the program with a Haskell core underneath handling the thinky bits. (I have no experience at all doing this, but it seems like the natural use case.)
Your code checks whether dst->len < n, but not whether dst->len > n; i.e., after copying 5 bytes to dst, there may be another 10 bytes of garbage in dst. This 'garbage' might as well be a password from a string that was just free'd. A fix would be to set dst->len to n after this operation.
Nerd'∑ting || The Interesting Nerd Stuff – WPA MiTM Attack lab
Because remembering one strong password is way easier than remembering 50 strong passwords.
Its just awe remark, and just your comment that starts with "complaining" got me a few down-votes, you involuntarily framed me (if indeed was involuntary ;))
I sincerely recommend against LYAH! It takes sooooooooo loooooong to get to the interesting bits that actually make Haskell worth learning an has so many try-to-be-funny examples that it makes you run away screaming... I tried going through it but it was literally oscillating between putting my mind to sleep and making wish to grab a chainsaw :) And the "humor" and "pretty pictures" don't help either... they were more like poignant guide to ruby, something that you either love or they annoy the hel out of you (this was for me), but either way they don't help the learning experience at all.

I suggest HFH ("Haskell Fast & Hard") as the introductory tutorial to start with instead. You can pick from 2 formats:

- http://yannesposito.com/Scratch/en/blog/Haskell-the-Hard-Way... - static all-in-one-page format with pretty pictures

- https://www.fpcomplete.com/school/to-infinity-and-beyond/pic... - split version, but with the ability to open snippets in their web based IDE

...after this, Real World Haskell is probably the next step: http://book.realworldhaskell.org/read/ (I'm still at this step).
The only thing I felt entitled to was to voicing my opinion which the manager actually asked for in the meeting. I wasn't on a crusade I just said what I thought.
I was sort of spitball including that in there in my calculations, but yes. This is an important thing for people to understand when dealing with or becoming a contractor/freelancer.

I think that a lot of people don't realize things like this when they do their back of the napkin calculations for freelancers/contractors. $50/hour != $100k salary.
does anyone have a recommendation for a good wireless weight tracker? i would appreciate the following features:

- multi user support
- ability to extract raw data
- android support and web dashboard
coolest thing I have seen lately, Über nerdy!
The unlimited storage is a pretty smart play. It makes it much harder to compare this head-to-head with Google Drive.
I'm going to have to go ahead and sort of disagree with you. A security library, specifically doing crypto, that is installed/embedded/used everywhere that trivially leaks plaintext data remotely to anyone who comes knocking (including passwords, keys, CC numbers, etc) is a compete failure.

Sure, it could hand out shells into a remote system, or hell it could launch a bunch of nuclear rockets as well...that would be very bad. But you seem to miss the point that perhaps someone's password to their shell (or maybe a nuclear launch code) is going over the wire and is intercepted...by a hostile government agency, or a 13 year old playing with a python script. There are endless, devastating scenarios one can think up caused by such a critical bug in the very fabric of the secure communication of the internet.

This is a pretty big deal.
Who Needs Clicks? Blogger Vi Hart Goes Wildly, Dramatically Dull
What about websockets? This is very similar to subscription webhooks, but also different. Websockets have been gaining in popularity due to easy of use and implementation and low overhead. Plus, a typical server can hold open thousands of connections since many might just be waiting for an event to send/receive.
How do I integrate gmail after signing up without?
What 9900 Hours of D&D Taught me About Marketing
Nice. Would be great if it could "anti-alias" the lines you draw! Using other ASCII characters, I mean.

I remember nfo files sometimes having quite impressive & inventive use of various characters :)
Served!! Ha ha
Your end-comment about /vulnerabilities.txt is a better solution than a /heartbleed.txt as this will not be the last such vulnerability.

However, I disagree about YAML. I'd recommend a standard JSON or CSV.
What's the benefit? It seems like you've gone though a lot of trouble re-implementing features of the browser but without any obvious advantage in doing so.
I am the other guy working on Understudy. The iPad has been the best platform for Understudy so far, but I still have my fingers crossed that Apple builds a better touch screen into their next iPad. Who should I pray to for that wish?
I read that as Moomin at first.

As a teacher, I give silly names to maths topics and it seems to help the students organise their 'big picture' a bit.
Deep down I know its for a new job/shiny up CV. :8

Thanks for response
Why being too "salesy" can backfire on Email Marketers
Now this seems like something that StartSSL would want to be in front of rather than risk everything by having compromised certs out there with their name on them. I would think that kind of behavior would put their CA status at risk...
Yeah, I see that. It would be really nice if you could see the other people editing the file, what they are editing, and a way to diff versions. (Similar to Google Docs editing) This would definitely require some sort of data API.

I could see this being really interesting while collaborating on a complex 3d model or scene. I change one spot of the scene and it propagates to everyone else using the application.
Big Hack Plays 2048
Seems to be largely a means of pushing the problem elsewhere.

"Um, could you please be poor some place else? This is Palo Alto - we have a prosperous reputation to uphold."
I think the buffer is a few days. This is actually begging for a "Marriage as a Service" startup :)
have you looked at mapbox.com? they make beautiful openstreetmap based maps -- which you can really use in powerful ways because you have access to the raw data. It will definitely pay off in the long run if you're looking to build a map-based app.

PS: not affiliated with mapbox in any way.
> And it's not just her feelings that were hurt -- it could have short term negative consequences on her job prospects. "If Google didn't want her, what's wrong with her?"

If she doesn't know how to spin that, she should get someone to help her out because it's really just a matter of perception. I'm no communications expert but I'd start with "Google wanted engineers," "Google was looking for a different skillset," etc. This is the type of thing that a good recruiter can actually really help with.
Well that's disappointing. Adding gimmicky(imo) sensors and removing functional/useful sensors.

Obviously Samsung is thinking from a consumer prospective, but still very disappointing.
As a business expense it seems like a no-brainer, especially with features oriented around security like remote wiping, account transferring and more detailed logs.
Hm, this set me wondering how much risk there is passing the passwords through the copy-paste mechanism itself. Probably not terribly much more than passing through the keyboard and IO subsystems, though. Still, I know with X selection buffers, when data is requested the application it's requested from can run arbitrary code to generate (or check!) it and is passed the window-id requesting[0]. It seems like a password manager could make use of this to implement an ACL and lock things down tighter - do any do this?

[0]: http://tronche.com/gui/x/icccm/sec-2.html#s-2.4
At least we have Rust...

Well, it's not really stable yet. But it is about the best candidate that I've heard of recently for this...

Since I'm not familiar with it, is it possible to write a library in Rust, and have it callable from C?

I've been doing a fair amount of golang programming recently, but calling Go from C is not possible right now (not sure if it will ever be).
Super brilliant. Really really cool.
There is a pretty high correlation between gender and roles at technology companies...

"You see, it's not that women get paid less than men... it's that women are designers, and men are programmers, and programmers make more than designers!"

It does sound as bad. The lack of appreciation for 'non-technical' employees labor is pretty sad. I am highly technical, and the designers on my team are the most valuable ones in my eyes... they can do something I can't.

All roles help build the company.
Male founder here too and I've heard most of these also. I usually like the "totally obvious idea" one. It's rarely dead-on but it commonly gives me a new related idea.
How to fix HeartBleed on Ubuntu and CentOS
Well, have an apologetic upvote from me. I tried to mitigate it with my parenthetical!
Dupe of https://news.ycombinator.com/item?id=7085133.
"Or they could try alternative options, such as sleeping on the street, or in an airport."

Or not go to the conference. It's a business transaction: if the total price of the conference, including travel, is worth it, then go and be happy to reap the rewards. If it's not, then don't go, and they are no worse off. That calculation can be made before any other commitment is on the line, and certainly before they actually arrive in Omaha.

The motorist probably made a mistake or miscalculation that left him too far from a gas station, which he didn't have any idea would happen when he woke up that morning. He had to make a choice of which direction to walk and he was in for a couple miles of walking, so he could not easily see the price (much less comparison shop) until he had already walked a long distance.

The scenarios are as different as night and day. A high price is not "gouging" (by any reasonable definition) unless there are some other factors involved.

I'm simply stunned that we are even discussing the idea that hotels are somehow exploiting travelling investors by raising the price by a known amount during known times.
Just like people believed the Universe revolves around Earth, they still have this naive believe that they're the center of intelligence in the Universe. Any other display of intelligence is explained as a combination of simple chemical, mechanical and electrical processes. But don't be quick to judge humans, though, after all, their brains are built on a combination of simple chemical, mechanical and electrical processes themselves.
>The question is: By fulfilling the requirements for a double major, what does one gain above and beyond what one would have gained by majoring in Math, but taking a lot of CS classes? Or majoring in CS, but taking a lot of math classes?

The beauty about double majoring is that the sequence for math and CS are harmonized for you.I do not have to worry about class conflicts or jumping into a course with no prerequisites.And hey,the degree says double!Not everyone has the time to check your transcripts to confirm what you did.
What I really hate is accounting ledgers that make me enter things it two places. Geeeze.

The reason email is special is because if that's wrong there's often no good way to fix it (and certainly no way to notify you). Whether that's sufficient motivation is a matter of judgement, but it's clearly different than first name.
Please don't joke about this kind of stuff.

MOODLE is an eminently useful free software course management system. A PHB I used to work for got very worried about the 'silly name' and the lack of an 0845 number for when anything went wrong. Took ages to convince him that it was a sensible alternative to another well known course management system that cost a couple of teacher salaries per year.

We got there.