skysight-inc/HackerNews huggingface dataset:
* Hearing aids that run off body heat. They have watches that do it, why not hearing aids? Or at least helps recharge the batteries... I dunno. I spend a lot of money on hearing aid batteries...

* A better credit rating system. The current one kinda sucks, no offense to Transunion, Experian, and whatever that other one is. Just because Joe Schmoe was unemployed 18 months ago and struggled to pay the rent, much less pay the bills, does not mean that Joe Schmoe is currently unable to do so. A creditor can claim a debt from Sally Schmoe, and Sally has little recourse in fighting it -- it's ridiculously complicated to combat something you know nothing about. Usually she winds up just paying the bogus bill to get it off her credit report. The whole thing is a racket.

* A better job candidate review systems. Companies spend a lot of money hiring recruiters, but recruiters just spam the crap out of people and then send all the resumes in anyway. What if there were an app that could pre-qualify candidates? Cut out the middle man -- death to recruiters! (figuratively, of course)

* A good, interactive environment for remote calls with kids (or anyone, I guess). I'm thinking Skype meets building blocks. Maybe we have to wait for Oculus Rift, or maybe Kinect is enough to get started. For example, I live in San Francisco, and my niece lives in Atlanta. I don't want her to not know who I am. I want to be able to Facetime/Skype with her -- and as she grows, I want to be able to interact with her, play games with her on a shared screen, teach her new words and phrases, and so on. My girlfriend's nephews live 8 hours away, and her parents live even farther away. The nephews are growing up quick, and we Facetime as much as possible, but even so, it's limited to just talking and pointing at a screen. You can make this better. As grandparents, aunts, and uncles increasingly get used to technology, they will want more ways to interact with their young family members without breaking the bank on plane tickets to visit -- and they'll spend money to do it! A small subscription and microtransactions (new games/books!) would be infinitely cheaper than flying across the country. Someone make this happen.

* An app that maps out disc golf courses (please start with the one in San Francisco's Golden Gate Park... please). Using GPS on a map, show me where the hole is from the starting point, and let me record my score. Once I put my score in, show me the next hole.
THE BIG UNWIND: Here's How Hedge Funds Drove The Brutal NASDAQ Selloff
Software eats software development is nothing new. Everyone who writes libraries is doing just that for past 30+ years. In fact good software developers take pride in writing software that require less code. Its in the inherent nature of software development itself. Come to think of it, software field could be the most egalitarian of all. You won't see lawyers lobbying for less complicated laws!
> You're conflating lobbying and campaign finance

Most people take too narrow a view of lobbying.

Writing a check for a $64K/plate dinner with Obama means you've reached the pinnacle of lobbying: a casual after-dinner-with-drinks conversation with the president while looking over the twinkling lights of Silicon Valley and talking about what the administration's regulatory priorities should be. And remember Obama wants you and your pals to continue to bankroll the party; meanwhile, the two college kids with a shoestring self-funded startup that's about to get squashed by that new regulatory priority don't know what hit them. They can't afford $64K a year in salary, let alone for an Obama fundraiser.

Also, why focus only on "registered lobbyists?" I recall looking into this a decade ago and the most influential lobbyist of the second half of the 20th century, MPAA's Jack Valenti, was not always a registered lobbyist.

It's a very narrow legal definition. There are plenty of ways to get around registration, including having congresscritters arrange to call you instead of you calling them, making sure only 20% of your time is calling "covered officials," giving speeches and TV interviews, golfing with your pal who happens to be Senate majority leader where only 1% of that is talking shop, etc.

One way to think about this is that congresscritters write the laws dealing with lobbying. Another definition of "congresscritter" is "future-lobbyist-in-waiting." It would really be a shame if they limited themselves and their bank accounts too much in the future. Right?
Not to the same degree. The US spends a much higher share of GDP on lawyers than most other countries.

What I find disgusting is the culture of hiring a lawyer to put as many traps as possible into a contract, which forces the other party to hire another lawyer to remove the traps again. This does not make anyone better off except for the lawyers.

Healthy and lasting business relationships are built on trust. The relationship between McDonald's and Coca-Cola is based on a simple hand-shake. If you want to preserve such a relationship and it comes to a disagreement, the first thing you should do is talking to each other. Once that fails, you can consult the lawyer - which will formalize everything and slow the process down (e.g. "I cannot disuss this today because I have to check with my lawyer first"). And being slow is one of the things one should avoid when being in a startup.
Yes, see the linked discussion. I think the hard part is getting people to use them.
No, I had no clue that was the case! That's pretty reassuring to know. It still doesn't change that my confidence in the Hyperviser has been shaken a little, but I trust this more knowing that, and I do think the premise of Qubes is great and relatively secure - if not certainly perfect.
Post heartbleed, the right way to go is for all browsers to deny https access in case the OCSP check fails, not just ignore the failure. The CAs are those who should scramble to fix whatever doesn't work. Captive networks have to be configured to allow CA access, or just disallow https.
Python: How to check if a string is a valid IRI
Des jeux en ligne sur m.Playweez pour se socialiser 
Accordez-vous un moment de détente et faites la découverte de centaines de jeux en ligne sur le site mobile m.Playweez. Il y en a pour tous les goûts.
How to get the the source data of all the series of a chart in VBA?
I find enterprise development pretty fun these days. Now that many of the easy things are done, we're being asked to do complex things with the expectation of a fit and finish like the apps they're used to using elsewhere.

But enterprise is so varied -- some places are amazing, some places are terrible. The trick is to find a group with whom you love going to battle. Find people who are looking to continually improve. People who believe in the campground principle -- leave code better than you found it. People at every skill level who are willing to get better.

If that's not your group, find a group that is. Better yet, inspire that in your group.

It's not about the company -- it's about the people with whom you sit at lunch.

(Okay, and sometimes the business owners... yeah, sometimes they suck.)
something like mightyspring for #3?
When a Non-binding Term Sheet Is Binding
Too much too early. Sad.
Interesting to note that if Akamai hadn't open sourced their modifications, they never would have realized their certs actually had been compromised.
I love Qubes; the people involved are awesome.

What I'd really like to work on is Compartment Mode Workstation with physically distinct hardware.

Essentially, a "windowing KVM" frontend to a bunch of physically separated processor/memory subsystems, connected via well-defined networking interfaces. Essentially X Windows, but actually secure. This is sort of how desktop virtualization (VDI) works today, but with a separate instance per application.
Operational expenditure is different from capital expenditure.
You are entirely correct. All of these Asian economic successes were under a military dictatorship. The work week in South Korea is 6 days, 16 hours a day. It's not magic, it's really hard work and strictness.
Competitive market forces will keep programmers busy for quite a while. As soon as it becomes easy to do things like make basic online stores with Shopify, stores will want more fancy functionality to differentiate themselves from their competitors.
Anne needs to stop talking to the personnel department and start talking to the CEO: tell him she needs authority to hire programmers without interference from the personnel department, and that said interference is the reason his favorite projects are behind schedule.

If he refuses, then she needs to either get on with her job with the people she has and accept that the schedule delays are not her fault and not her problem, or start looking for a job in a less dysfunctional company.
How not to respond to Heartbleed – CBA, an Australian bank (read the comments)
>The interesting part of that is that it's completely reasonable that you have to get people thinking about things like how a search engine should function in a free market [...], but when it comes down to it, doing that is also fundamentally paying money to buy influence

That's because it's not a free market. It's a system of political patronage where if you don't have political support, someone (possibly competitors, or even the Department of Justice) will go hunting for you. It's not merely distasteful, it's deeply corrupt.
I (pessimistically) don't think that creators will ever be the majority. maybe in the future it will be easier for all who create things to incorporate custom software, but I don't think that the majority of the population will ever feel the need to create their own software, even if it's as easy as editing music with garageband or manipulating images with photoshop. I would love to be proven wrong within my lifetime though!
Except federalism.
Absolutely true. I didn't mean to imply that doing what you love to do means doing it literally 100% of your time. It's simply what you tend to do when you have a choice of anything at all.

If on the other hand you are always playing music; playing it for fun in your free time, taking classes, and tend to get busted slacking at your programming job because you are talking about or playing music too much. Than perhaps programming isn't what you should be doing.
ok coach.
Let's operationalize it then:

We need tools that bring the learning curve down and allow people to develop their own basic tools to make their lives easier, while storing the data on a central location.

Amazing things have been done in Excel, but have you ever seen a department have locking issues? "Can you close the spreadsheet so I can get in?"

Yeah, we need multiuser excel, or perhaps a google docs equivalent that can be hosted internally.
Are you really asserting that Al Gore has done nothing wrong during his political career?

Even his most adamant supporters that I know IRL are aware of those shortcoming & acknowledge them.

> Now I have to tell you that I find your politics reprehensible

Interesting how much you purport to know. I haven't stated any political beliefs.

> You disgust me.

It's disappointing how quickly you resort to ad hominem attacks.

Consider the discussion over.

plonk
A close friend of mine has Turner's syndrome, also a chromosomal disorder with potentially severe physical effects (such as "neck webbing").

Fortunately for her, she doesn't exhibit the gross physical abnormalities. So while I do endorse the basic sentiment of your comment, you're not on 100% solid ground.
what terminology do you think is more appropriate for these high level "glue" languages?
...and radiation.
I think there are two many lessons that can be learnt from this story.

1. Stay focussed.
2. Keep your team as small as possible.
I believe this is called a RHEL subscription... in seriousness though this is a good idea and wouldn't be that hard to put together. You would monetize it by taking a cut of the spend and passing the rest on to the projects.
Silly gimmicks like that are not the way programmer jobs get eliminated. More powerful programming languages and better tools are what do the job. That and the ever-expanding universe of libraries for every task under the sun. If you can hire one programmer to use an open source library to build an application that'd take 10 programmers to write from scratch, you eliminate 9 jobs (obviously).
It's named after a movie dubbed by some as the worst movie ever made.

So I think it's fair to call it "silly", regardless of its more serious virtues.
Bullshit.

Firstly the cert revocation check does work.

You are assuming an arbitrarily advanced adversary who is assumed to pull both an MITM and also attempt to block access to the CA's servers. When in reality that may very well not be the case. Just because someone is doing an MITM does not mean that they will also block access to the CA's servers.

Secondly the MITM can happen at different levels. If the server that is sending you the response is being MITM'd but you are not, then you can safely access CA's servers and check for revocation. The MITM does not necessarily affect the client in a manner as to guarantee the failure to access the CA's servers.

And finally these personal attacks and Steve Gibson bashing really gets old.

Perhaps he made some mistakes or took controversial positions like ... when? 10 years ago? and people wont let it go.

The exclamation points and all caps and colored text and the ugly web pages is just his utilitarian and old-school style.

I listen to his weekly Security Now podcast and without failure he is well-prepared, thorough, accurate and correct. Even when he makes a small mistake next week he comes along, specifies the exact mistake and apologises and corrects it.

Instead every time he is mentioned someone comes along and says "ew hurr durr 10 years ago he said something about raw sockets in XP".

My point is, no one is perfect, and he certainly has not done anything to deserve these personal bashings and attacks from the community, if anything he is a long-time contributor, has put many tools available online and is now developing the SQRL login systems in the public ... so ... give him a break.
Ok, surely, after 5 hours and 37 comments I cannot be the only one who wondered if this was a commercialization of LosethOS. Right?
Note: this thread has been overtaken by https://news.ycombinator.com/item?id=7582077, a post at the same time by the original creator of Idea Sunday.
Yeah they are paying very well. So even if I forget to report something, if it's not stolen they can't really do much?
If anyone is wondering, this is the browser plugin that allows one to collapse comments on HN:

Hacker News collapsible comments – http://userscripts.org/scripts/reviews/138037

It’s a user script, which means it requires GreaseMonkey or a similar extension to run.
Halide makes me think we can give a bunch of that power that Moore's law gave us back to actual problem domains without making programmers any less effective.
Dropbox's Carousel is Different
A Mathematical Proof That The Universe Could Have Formed Spontaneously
I take the original comment to mean : if you limit the size of the government, you limit the ability for people to abuse it's power for their own purposes. That's not the same as corruption. A government can still be powerful, but limited in the spheres in which it has power.
You mean Rosetta Code[0]?

[0] http://rosettacode.org/
They're present on some BC roads, where it doesn't snow as much.
Tech insiders dumped shares ahead of slide
The biggest problem with crypto is navigating the vast and dangerous sea of misinformation.
As hashtag mentions, a "calculator" is almost impossible... a related problem is that most of the developers that I've worked with don't even know the questions to ask. Don't have the slighted idea what common vs preferred means, what convertible debt is, or what "on a fully diluted basis" does and doesn't mean. A site to that helped people figure out what questions to ask when assessing an equity offer could be useful.
The Model S was highly rated by Consumer Reports, but the predicted reliability is only average. Specifically, the 2013 had a much worse than average rating for Squeaks and Rattles and Body Hardware. This will certainly affect the price. Personally, I never buy a car unless it's rated better than average by CR.
There principle intent is to remove preconceived notions about who is mormon and what kind of backgrounds and interests they have. There are plenty of sources offered for those interested in our beliefs.
"How exactly will you demonstrate that Ethos is more secure than, say, OpenBSD?"

Demonstration is not the only means by which someone can be convinced.

Consensus among experts that the fundamental building blocks offer a superior security model will convince a lot of people (directly or indirectly).
My Ideas, My Boss’s Property
This is the perfect example to point people to when they ask why the company shouldn't just maintain an internal fork or write its own version of an open source project.

Actually contributing the code you write is helps _everyone_.
Could you share a link of the same story which is not behind a paywall?
No, your web server process memory does not include SSH keys.
It's one thing to replace cat-eyes with this, it's something else to replace street lighting with this, as the article mentions. I want to see everything on the road, not just the lane markings. Even when other cars have their lights on, we see then better when the road is lit up.
"its easy" followed by 10 pages on how to configure it.

really though, how is this any better than ansible?
Is there a reason HN doesn't put comments in ascending or descending order but make it all over the place, especially with karma hidden.

If I had to guess, this had something to do with karma and trying to show which comments were most popular back in the day (wild stab in the dark here) but when someone returns to a thread to view new comments, that doesn't matter. And if they want to see responses to comments they've made, there is already a link for that. I think at the least allow sorting to show newest comments on top would help on huge comment threads
how about these:
https://upload.wikimedia.org/wikipedia/commons/b/b2/Leitpfos...

also road paint is mixed with glass fragments and is highly reflective. ok, it does not glow at night by itself, but your car should have lights ;)
Blackberry plans Heartbleed patches as mobile threat scrutinized
Relevant post on StackOverflow here: http://stackoverflow.com/questions/3711435/what-is-the-exper...
> If a Pidgin-zero-day-wielding attacker sends you a weird-looking message that takes over your computer, all it will actually take over is your Pidgin AppVM. The worst that the attacker can do is steal your OTR keys and spy on your chat conversations

Yes, the only thing the attacker can do is compromise all of your chat conversations and impersonate you on an ongoing basis. Maybe you keep a separate browser VM for sensitive work: good, but only secure as long as you never ever accidentally visit a site you don't completely trust, such as any HTTP site.

Don't get me wrong, I think Qubes is really cool, but our ultimate goal, collectively, should be an OS where the entire stack, except possibly a few lowest level components (but not including things like filesystems and network drivers), is written in a higher level language than C/C++ and guaranteed free of memory corruption vulnerabilities in the first place. While non-memory corruption vulnerabilities exist, they're generally drastically easier to reason about and prevent, while C vulnerabilities can be anywhere, with exploit mitigations that make most attacks only harder, not impossible.

In the meantime, I guess you could always browse using Chromium with ASan enabled :)
Politics test Silicon Valley's Russian ties
Wouldn't that just be regular Xen?
There is an experimental Firefox add-on that attempts to sort out the ask HN, show HN, who's hiring and polls in their own tabs.
https://addons.mozilla.org/en-US/firefox/addon/hacker-news-r...
It's wrong to think that the majority of service costs as vehicles age is in the engine and oil changes. Most new cars engines/tranmsmissions will go very large distances with no mechanical failure if serviced properly. Exceptions exist, but for the most part, engines are durable and have minimal service requirements.

Cars must have suspension replacements, plus fixed for lots of little car systems that can start failing with age. An example is windscreen washer systems. Usually required for safety inspections, they can stop working, and it's expensive to remove and replace them because they wind their way around multiple components. Same for hvac systems and lighting systems and on it goes.

I bring this up because the worth of a tesla will not just hinge on the ability to fit a new battery pack and go. It will also hinge of the ability of the basic vehicle and non-propulsion systems to continue to work and become economically serviceable. Most cars can get a substantial mechanical refresh for the current cost of a new tesla battery - but this is not usually done because the car itself develops many other failings and a new one is faster and easier to purchase.

So the resale value will swing on not only the battery replacement cost, but may other things besides. Only then will we know what the used value looks like.
That's why SharePoint is so prevalent in corporate networks, despite being hated by programmers and users alike.
Love the comment by "z". :)

The people working on this are sharp, for sure.

But I will never think of VM's as a path to "security".

Xen is useful for a variety of purposes (including resiliency, which can help if you are hacked), but I'll never rely on it for "security".

Curious what bootloader they are using for the Xen kernels.
That age old saying, "Change you job, or change your job."
What's in the name? Why Omaha of all places?
where did u get that figure for Tesla super chargers?
ninite is quite good, but closed source
Seems like the browser should at least give a warning if it thinks the cert was revoked. You can see the green padlock AND the revocation in Chrome.

http://s27.postimg.org/6cub79gbn/Screen_Shot_2014_04_13_at_1...

or through:

openssl s_client -connect revoked.grc.com:443

I mean from an end user perspective - irrespective of google's stance on revoked certs - it's very unexpected that the browser info about the cert is that it is revoked but the padlock is green

---

oh okay, as some of the other comments points out, this puts it into some perspective:

https://www.imperialviolet.org/2012/02/05/crlsets.html

---

In Safari it won't let me get to the page w/o dire warnings.
Real-world Secure Boot attacks
Nice package from Google. Much better than the buggy wyUpdate product we used to use.
hey I'm at admin@nimbusbase.com, thanks for the notice. I think there might be some problems with our login, will look into it.
What I learned in My First Year as a Female Startup CEO
"It is, in fact, impossible to reach the speeds of which the MIG-25 is capable using titanium: yet the Soviet designers had managed to build this, the fastest combat aircraft in the world, from ordinary steel. "

Right...

MiG-25, Mach-2.8. All steel.

SR-71, Mach-3.5. Uses titanium for 85% of its structure.
Isn't Bromium also doing this with vSentry?

http://www.bromium.com/products/vsentry.html
As an attacker I care only about the data and don't give a a shit if it is a real machine or a virtual one. If I can sniff the passwords in your browser or just have a keylogger in one of the VMs I am fine. Not sure if that solves a thing.

edit:
I remember there were similar concepts a decade or so ago. where you had your "green" desktop for intranet or whatever and then a seperate "red" desktop which you could switch to and go to the evil internet. hint: no benefit gained
Crimeware Helps File Fraudulent Tax Returns