skysight-inc/HackerNews huggingface dataset:
> Going an extra 110mph(180km/h) would be a huge win. It greatly extends the distance where a train wins over a jet.

Not really, because jets will go much more places that your single maglev line ever will. That's the problem with hi-tech trains. They are extremely costly to deploy in terms of infrastructure, they go over land that could be used for other purposes, and because of the large investment required they only go in very few places. Jets win everywhere else.
I will check those two sites out. I do not really enjoy the writing on techcrunch but I appreciate you sending it my way.
I got really excited when I saw the PyCon videos up and then really sad when his talk wasn't listed. Any idea whether that is the full set of videos they are going to post or are there more to come?
These are from the first day of talks and a few of the tutorials. The second day is going on now, so they should be online in a day or two.
Although I recognize that your intent is a reductio ad absurdum of the parent's point of view. you should also recognize that this comment draws a parallel between the volunteer devs of OpenSSL and Hitler.
Except that it is well known by people who follow this that the Washington Times is hardly any better than those tabloids that talk about Bigfoot or whatever. Read this article about its (now late) founder and tell me if you think he had a couple of screws loose: http://www.washingtonpost.com/wp-dyn/articles/A61932-2004Jun... -- basically it's as if Kim Jong Il ran an American newspaper.
Robotium in the cloud (emulators and real devices)
I think it's a typo. it should be 'Videos'.
There are more on their Youtube channel https://www.youtube.com/channel/UCFDHJGm0IxH9uwcIHfR72yg/vid...
Yes. It's stated in the "Get Started" section.
She has been emailing Adam, the president of The Flatiron School about it. There is a $750 discount off the tuition, which she would qualify for, as well as a payment plan where 50% of the tuition is due up front, with the remaining 50% due over 6 months after graduating. I'm not sure if she is 100% eligible for that, but that would certainly make things much easier.

I agree that it is sad that money is what holds people back. It's a cruel system that I can't wait to see ripped to shreds by new & easier access to education.

I appreciate the kind words! :)
I think OP means that the developer is no longer in the organization on github (which currently has 0 members).
How Stories Best Communicate Your Startup Value
Short answer: There's a mix of people, and a few are students (college or graduate school). Some are remote coders. Some are doing startups. And some quit their jobs to come to Berlin. :)
The first three times I clicked on this link it took me to a sign-up/login page.
This is a great tutorial and helps me a lot by just reminding me of things.

There's a mistake at http://learnlayout.com/float-layout.html though were they talk about clearfix and how they are using it without actually using it on that page.
I just thought I'd say that here in case the author reads it.
Google CodeJam 2014
Pandodaily , stumbleupon (yes it does have interesting reads sometimes)
Is Java not over-saturated? I thought that was one of the selling points to the suit.
I think hard work is a necessary precursor to good results. Although, that hard work may not be of the kind most people associate with office work of the past.
That's non-responsive. We know what the deaired outputs are. The question is what are the necessary inputs.
Annotation Studio
You could also try something like pave.com or upstart.com
Page 2: "it wouldn't make sense to make an inline div"

Page 15: makes inline divs.

:)
OpenSSL's code is programmed by two peoples.. two!
Millions of servers trust them. Right now I guess it's a big pressure on them. In my opinio, this vulnerability is known for some years, but there were some negligence, and this can't happen again.
with some slight modifications i was able to extract the private key from cloudflare. i'm not sure if the modifications were necessary or not....
From the sidebar:

This organization has no public members. You must
be a member to see who's a part of this organization.

Looks like it's possible that the main dev's membership is just private. It's the same for this org, which doesn't have any repos removed:

https://github.com/popcorn-official
Clearly if you moved to OpenOpenSSL.org you would be better off!
You probably not the only one. I'll bet there are some who will defend this project no matter what happens.

But there are also people who have been annoyed with OpenSSL's needless complexity for many years. And they are speaking out too.

https://twitter.com/OpenSSLFact

The question is: Who are the ones more likely to drive us to a better solution than the status quo?

As other commenters have stated, the OpenSSL Project is not the only way to implement SSL. There are other open projects, though do not call themselves "OpenSSL".

I would imagine there is tremendous power over some peoples' minds when a project has the name "Open" and at least a small bit of history. They will defend it fervently without caring much about the code itself.

The OpenSSL Project's code is awful if for no other reason than it is far too complex to use, let alone when security is a requirement.

You can shift the focus to the programming language used or to "lack of funding" or whatever else you can conjure up, but the fact remains: OpenSSL's code is a mess.

Other SSL projects have implemented SSL in much simpler and smaller code. It makes one wonder how OpenSSL maintains its position as the default and we continue to accept the problems it creates.

Maybe because of attitudes like yours: "How dare anyone offer any critique on OpenSSL."
Amazon Reportedly Launching Smartphone This Year
Yeah, "my" approach[1] is probably best suited for computer science papers.

[1] It's not really mine, it's what I was told at university.
What is in a name . Let the haters hate
There are obviously systemic problems, like funding, corporate (and government) under-investment of time and talent, and implementing an imperfect standard. Those have a significant impact, to be sure.

But bad code is bad code is bad code. And it doesn't take too much investigation of OpenSSL to realize it's not good code. To date the inertia of network effects has outweighed the badness of OpenSSL. Hopefully the Heartbleed fall-out will disrupt those network effects and get end-user developers to explore other implementations or spur renewed investment in improving OpenSSL. But it would be folly to continue on with the status quo.

The Spolsky argument is that you should never throw working code away. Part of the reason for doing so is that you will have subtle business logic embedded in the old code. However, in the case of SSL, there's a specified protocol. So, if there's a codebase to be rewritten from scratch, it's one that's an implementation of a spec.
It would be really nice to have a "Explore" feature similar to github, where you can see projects, and maybe be able to search for tags. A big call to action button on the main page linking to the explore area would really allow people to look at projects and see how the site is getting used.
Reminds me of http://en.wikipedia.org/wiki/Sergey_Aleynikov
I see. Using the private key to revoke the certificate would be a denial of service attack, so requiring the CA for revocation avoids that, but admittedly it's not the first thing to worry about when a private key is compromised.
Unsolicited respectful feedback: if I landed on your homepage without the context of this HN article, I wouldn't really understand what you're offering. Lot of jargon on the homepage. Even with the context, I'm not quite sure what I'm looking at on http://www.doerhub.com/for/doerhub I will probably investigate further because I have a vague idea of what DoerHub is and that it might be useful to me, but I wouldn't if I landed there cold.
Only if the first occurrence of needle happens to terminate the string. Otherwise the return value of the real version of strstr returns a string that starts with needle but is followed by more text.
Did you even read it? It's about him.
honing an experience set

You are the first person to put those words together: https://www.google.com/search?q=%22honing+an+experience+set%...
Good job! Thanks for sharing your story. Someone out there might find it very interesting.
I feel weird reading a piece on career advice by somebody who works at Microsoft.
Flagged because article completely misunderstands how GPL works. GPL doesn't apply if you modify source-code to use internally, it only applies if you distribute it externally to third party users.

[GPL not mentioned in article; my recollection from the original court documents is that the code was largely LGPL and GPL code]
The Connected States of America
"Jets win everywhere else."

Of course they don't. Getting to an airport 60-90 minutes before a flight that's only 60-90 minutes doesn't make much sense
>"They see it as a challenge to their turf."

This is a good point. While I believe the "system", in general, works to get people where they need to go and build the right products and services, the internal politics on a person-to-person basis are essentially random; you never know what you're going to get when you step foot in an enterprise. And the associated costs of having a "bad" manager are high.
Just bought a makeup bag from her Etsy shop that my girlfriend is sure to love.

Good luck!
Here's how I think of it.

Smashing your shoulder against a heavy metal vault door as hard as you can over and over, hoping someone at the other side will eventually hear you and open the door is a waste of time. It results in burn-out with nearly no hope of progress.

Instead, you should examine the door and try to open it yourself with a very deliberate attempts of sound reasoning based on where the weak points of the door may be. And after awhile, you may even discover that you can walk around it... or maybe that door isn't blocking the path you should be on to begin with.
Maybe VM stands for Very Magical?
It is unsafe to drink sea water due to high salt content.
Therefore, drinking water with no salt content is also unsafe.

I do not understand that reasoning.
Knight --One HTTP development server with reloader for Go
Continuing the story from his Wiki page:

In March 2011, Aleynikov appealed the conviction, asking the Second Circuit to review the District Court's decision denying his original motion to dismiss the indictment for failure to state a claim.[9]

On February 16, 2012, the United States Court of Appeals for the Second Circuit heard oral argument on his appeal and, later that same day, unanimously ordered his conviction reversed and a judgment of acquittal entered, with opinion to follow.[10] Aleynikov was released from custody the next day.

On April 11, 2012, Dennis Jacobs, Chief Judge of the United States Court of Appeals, published a unanimous decision in a written opinion[10] stating:

On appeal, Aleynikov argues, inter alia, that his conduct did not constitute an offense under either statute. He argues that: [1] the source code was not a "stolen" "good" within the meaning of the NSPA, and [2] the source code was not “related to or included in a product that is produced for or placed in interstate or foreign commerce” within the meaning of the EEA. We agree, and reverse the judgment of the district court.[9]

In the course of these events, Aleynikov has spent 11 months in prison. Aleynikov has divorced, lost his savings, and his career is ruined.[11]

The government did not seek reconsideration of the Second Circuit's ruling, thus ending federal action against Aleynikov.[12]
The sites that the author includes in the free online courses are unimpressive garbage. The author should have included the highly useful learn*thehardway series by zed shaw.
Startup Curriculum
flash boys also talks about the FBI's suspicion when they heard Aleynikov was using software called 'subversion', and assuming he was thus doing something 'subversive'

that cracked me up!
PolarSSLs biggest problem seems to be GPL.

And all the people who favor bsd style license instead.

Weve seen it before, a license which appeals to those who would benefit from it but not required to provide something back to the community - such projects fare worse in the long term than GPL or GNU projects.

I think this mentality also explains why people hate on openssl - they expect something for nothing.

Its 2014 we should know better than to trust corporations will do the right thing and require any modifications be released back to community. They wont and they dont.
The informal way things worked was by the community not upvoting posts or in some cases flagging them; if the new HN position is that moderators will manually intervene to enforce these informal policies then that's the major change. Publishing the policies is minor in comparison.
Advanced Django Patterns from Eventbrite and Lanyrd
Fork it. Nothing is stopping you.
Probably because that is who this is about.
Maybe because they use LLVM for code generation?

But you are right, this VM <=> memory safe languages, has done more harm than good, making a whole generation think you require a VM for memory safe compilers.
Fair point, hard work is not well-defined. I interpreted and meant it in the sense of throwing a lot of working hours at the problem. And I think this is not necessary for good results and may actually be counterproductive in some cases.
Somehow you've decided that, despite labeling yourself unsuccessful, people should pay attention to what you say. The only support I see you making for this is citing your IQ, which is meaningless.

You obviously believe you're telling people things that work, and the attempt to help is something I'm sure people appreciate. But based on what you're saying here, either you don't follow that advice, you don't understand it well enough to apply it correctly, or you do apply it correctly it's actually bad advice. So unless you're learning from what successful people have done (not just said), you're offering unproven advice, and even if you are, you're offering advice you don't seem to understand.
His federal conviction was overturned then they later recharged him for the same incident in state court. Also Congressman Lamar Smith, who sponsored SOPA, amended the Economic Espionage Act of 1996 with the Theft of Trade Secrets Clarification Act of 2012 specifically related to this case.

Sergey's Legal Defense Fund - http://www.aleynikov.org/
Did you even read my comment ? Jets will go WHERE the maglev trains won't, even if it's not that far.
And... my suspicions were confirmed. I still have no idea how I did on the test and they have provided no feedback.

So, unless something changes, which I don't predict, it was a waste of time I wouldn't recommend doing the test nor applying to work at a company like this.
For my part, I think so is boredom.
Completely unneeded and seems like more police state tactics.

Take the Boston Marathon bombing - an event they cite as something where this would be useful. Even without it, their was a ton of news video and surveillance video, thousands of images from the attack taken right after or before the bomb going off. Within days, they had video footage of the suspects and a few more days they had killed one and arrested the other suspect.

I'm not convinced having this software would've helped shorten that time frame. Too me, it's more about mass surveillance and going after protesters. Seems to me there could be a whole bunch of innocent people getting swept up with this tool as well.
It's somewhat understandable; OpenSSL is a bit of a mess, and the two most recent occurrences have made me seriously think about learning more crypto in order to write a replacement, ala DJB (cf sendmail/qmail, bind/tinydns). Of course, while I think I wouldn't make any buffer overflow errors (I've got tools and training for that), I'm fairly certain I wouldn't get the crypto right the first time, and probably not the second either . . .

That being said, I too get annoyed at a few misguided POVs:

1) "Open source sucks!" - This bug would probably never been found, and even less likely would it have been fixed had OpenSSL been closed source.

2) "C sucks!" - OpenSSL would not be so widely used if it was written in another less portable, less efficient language, and besides, bad code can be written in any language.
In the article the author mentions that hard work is table stakes, meaning everyone is working hard but you need to do something different to actually get ahead and stand out among your other hard working peers.
I believe the article didn't imply steal in the legal sense, but rather in the moral sense of not contributing changes back and assuming ownership.

I also see no mention of the GPL, only open source. So the license could've been BSD or MPL etc.

Also this part might be illegal:

>Later, at his trial, his lawyer flashed two pages of computer code: the original, with its open source license on top, and a replica, with the open source license stripped off and replaced by the Goldman Sachs license.
(insert framework of the week here)

There are maybe 3 'frameworks of the week' actually being used today, Backbone, Angular, and Ember.

Spreading FUD is beneficial to nobody
This sucks, but seriously never talk to the police. Don't write anything down. Don't say anything. Don't sign anything. Tell them your name and otherwise just stay silent. They are never trying to help you, they're trying to close their case.
What does the search for cheap STEM talent say about the Innovation Economy?
I'm guessing that there isn't any legal recourse (monetary) for him from Goldman Sachs and the FBI ruining his life.

Should there be?

Goldman Sachs had every right to request that he be prosecuted, but no matter how the case turned out, his life would be ruined. I don't know of a good solution to this issue, but it just seems very wrong. I'm sure there have been countless instances of this happening though.

Maybe a good solution would be to lessen the penalties for this type of crime.

Maybe a legal requirement for a public apology and for the prosecutor to have to pay back legal costs? A portion of this restitution should come out of that courts budget or the department that perused the case without doing their due diligence.

Did Sergey sign something saying that he could never remove code from the building or use it in another project? I'm not sure that it simply being company policy is enough, in my opinion.

Has anyone here ever taken code from one employer with the intent of using it again if needed, simply to save time and not having to duplicate research? Should you be considered a criminal for that? Should you have to pay back the time the company paid you to write that code?

It seems like the lessons are:

1) Don't talk to police, even if you did nothing wrong and they tell you they are on your side. Lawyer up.

2) Don't steal code, but if you do then encrypt it and put it on a portable media device. Uploading to a foreign SVN repository using the companies network wasn't very smart, don't do that.

3) Ensure that your employees know the company's policy on removing code from the premises. It seems pretty obvious but I believe that Sergey honestly didn't think he was doing anything wrong.
GPL with a commercial license solves this.
Even a not for gratis version of GPL would do.

Companies are wasting bucks left and right on stupid shit lie oracle or microsoft licenses when free software and gratis versions exist.

Its a problem in structure and values of society. Had all enterprises valued freedom the entire society and each company would be better off. But no.
You both have the same. His fingerprint was SHA256. I see the same certificate and no error in neither chromium nor firefox nightly.
In that case, "more and more hours" is often not a necessary input
Old story. Definitely sucks for him, but mailing yourself proprietary code of a very secretive and ruthless bank is not exactly the smartest thing to do.
Ask HN: Box or Dropbox?
I not interested in a political discussion particularly, just people's impressions of the benefits or downsides of each, or other choices for similarly sharing content. I use it personally as well as want to use one with a native mobile app.
New font-spacing algorithm
> He deleted his bash history— the commands he had typed into his own Goldman computer keyboard. To access the computer, he was required to type his password . If he didn’t delete his bash history, his password would be there to see, for anyone who had access to the system.

Wait, what?
From https://www.kickstarter.com/help/faq/kickstarter%20basics:

> Kickstarter does not allow charity, cause,
> or "fund my life" projects. Check out our
> project guidelines for details.
Winning the lottery is a "good result", without a hard work.

Moving a pile of dirt from one place to another, every day, is hard work without a purpose.

Working hard (and smart) on problems you are passionate about gives you the best chance at succeeding.

And about impressing someone with your work, I have a rule - impress yourself. :)
Also, it's not as widely known as the FFT, but if you know roughly the frequency of interest you can use the Goertzel algorithm to calculate a chosen number of bins around that specific freq and then pick the max of them to find the freq of interest, instead of when using the FFT having to calculate a bunch of bins using a large nFFT in order to get enough freq resolution and then discarding 99% of the results. Going further, compared to the original Goertzel, the Generalized Goertzel algorithm does the same thing but allows you to query non-integer multiples of the fundamental frequency: http://asp.eurasipjournals.com/content/2012/1/56
That's not inherently true of open source and I didn't see where the article singled out a specific license. There are several variants of GPL the AGPL has clauses that say you still have to provide source in cases short of distribution of the software itself.
The concept of air wells has been around for awhile, but it's good that they're able to keep the costs low and build it from local materials with local labor.

http://en.wikipedia.org/wiki/Air_well_(condenser)
Pricify: the startup that keeps an eye on sales
the problem I have with the article is that FOSS/OSS used internally and modified for that use and not distributed would mean under normal copyright and work rules that yes GS did own the changes to OSS/FOSS used internally but never distributed.
Isn't documentation something that can be fixed by people as they use OpenSSL?
Should there be recourse for facilitating malicious prosecution? It's a travesty if there isn't.
Neat site but that giganto 24px type has got to go. http://userstyles.org/styles/100239/list-of-episodes
Woha $12000 for a semester? things are getting out of hand...
Yay, I always wanted to install police software on my devices!
EU and most its memeber states intelligence agencies mission is to secure national infrastructure. Oh like the internet.

They already have tons of money thrown at them from taxes.

Its just that surveillence and monitoring of citizens and industrial espionage has higher priority than...their stated goal? Theyre too busy analysing malware and making their own, exploiting openssl for their benefit while keeping and hoping none othet agency knows their exploits.
Operating systems are filled with bugs and complexity. Yet OpenBSD has had two remote holes in a heck of a long time. Everything you cite as being necessary, was within the authors power to do. Some TLS implementations are close to being formally verified as not having undefined behaviour. OpenSSL is nowhere near that state. There's no point in helping it out when better run projects could use the resources better.
Ask HN – critique my HTML5-flex based response grid CSS
Seems like the heavy-weight frameworks for grid layouts are, well, heavy.

I wanted something lighter so I made this: https://github.com/matt1/10grid

Tell me how & why it sucks! :-)
Show HN: Trianglify – low poly style background generator with D3.js