skysight-inc/HackerNews huggingface dataset:
I was a backer on that one, it's a great documentary.
John Carmack has been working on an Oculus Android project since he joined the company.
Yes, you're right. But that makes it far worse!
`smartcd`: make your shell come alive
How does the Class 2 pricing actually work? You need to pay $59 for your personal identity, and then $59 per domain, and then you can get unlimited Class 2 certs for that domain?
What does? The boycott? You must be joking.
Usually in the managed world you have references that point to an object. The objects themselves don't live in the same place forever, they may be moved by the GC (to consolidate "holes" in memory). References reflect that movement so you don't notice. However, when using unsafe code (which has pointers and pointer arithmetic) you need to keep the objects in place. That's pinning and it essentially forces the GC to work around those islands of pinned objects.
If Frere-Jones released versions of Gotham & Whitney, he'd be cutting off his nose to spite his face. There'd a very large amount of investment required to create anything close to the the versatility & range of H&Co's Gotham (including all various weights, narrow families and truetype hinted webfonts), and it would render him a much less sympathetic character.

His best bet is his current course of action, arduous and expensive as it is. It really does appear that he's been shafted, but I hope each side gets a fair hearing before a judge.
Maybe, but this would add legitimacy to X.509 and the CA business and cement it even further. It's an enormous ongoing drag to Internet security.

I'd like to see Mozilla and Google to team up on a reasonable replacement. Even Microsoft might join up given its recent shifts in attitude. TLS supports non-X.509 stuff just fine.
Following up on my experience:

Was looking for a registrar for my domains that supports DNSSEC (for the TLDs that support it, obviously) and wanted to leave my previous (really cheap one).

I heard about their 'no bullshit' slogan and their rather good reputation.

Searching online confirmed that

- Gandi supports DNSSEC for the domains I care about (.sh, .de) [1]

- Gandi supports all my (cc)TLDs (.name, .de, .sh, .net) [2]

- Gandis prices are reasonable [2]

Pay attention: [2] lists all their supported domains with prices. If you expand "Asia/Oceania" you'll find .sh for example. With a price. What isn't obvious right away unless you're into hovering madly: Each row is a link. That's important.

So, prices good, good reputation, dnssec support -> Let's transfer all my domains in one go. Payed, worked - but the .sh domain failed with no sensible error message at all. Retried. Contacted customer support and waited. Meanwhile I was billed for the rest and parts of my domains were transfered already. At no point I got a reasonable explanation in their interface.
CSR replies "Yeah, bad luck. That's a corporate domain. We have a list of domains for corporations only (now go and click a link on [2]), you'd have to talk to the corporate sales team".
Contacted them, waited, waited, random bullshit (sorry, with a slogan like that..) as reply ("Just subscribe to our corporate services for a while, register the domains while they're active" - "Yeah, I'm a private person and your website doesn't let me do that" - "Awwwwww, bad luck then").

Denied my incoming transfers, moved the ones that already made it out. My Gandi account is useless and empty. The denied transfers though? They refunded that part of my bill - to my "Gandi prepaid account"...

Short version:

- crappy UI

- half of their TLD support is for corporate clients only, "PLEASE TAKE MY MONEY" won't help (I tried)

- the support wasn't helpful (enough) and the corporate sales guys confused - they obviously didn't look at my account even once before answering

- the refund is a joke

I'm glad I left early.

Sorry for the rant, this is 'fresh' (i.e. the refund happened yesterday, the rest of the ordeal just last week) and so I'm still a bit agitated. I really tried to like them and don't think that I was overly complicated in my requirements.

1: https://www.icann.org/en/news/in-focus/dnssec/deployment

2: https://www.gandi.net/domain
I think what made this story all the more interesting to me is that you are doing this even though (and also because) you have a family. These kind of stories usually lend themselves to those that are less restricted as far as commitment goes.

For yourself, was it a question of weighing up between there more for your family against providing more financially for them in the future, or are you that comfortable that it isn't really something that weighs into it all that much.

Great article though, it's always good to see people going against the norm in search of a more rounded life.
Ask HN: How to start a CA?
What would it take to run a CA business/service? I know the technical details, but I think it would be hard to convince major client vendors to trust a new CA. Even if the new CA gets Chrome and Firefox's trust, there are slower updating clients out there, who may not trust this CA just because Google and Mozilla did. There could also be more requirements, obligations, expectations than just gaining clients' trust.

Ref: source of thought https://news.ycombinator.com/item?id=7557823
See above - especially if you're not incorporated (Granted, on this board that's probably the minority)
That's a great point that I haven't thought of before! I tend to forget that when others learn a new language it is generally taught in the proper and/or polite manner.
>'There is no "solution", obviously'

Apart maybe to look at the many countries outside the USA that do not have the problem to the same degree and copy some of their policies? Coming from Europe the US homeless situation seems kind of bizzare.
AIUI, it's $60 for an identity validation, which is valid for 350 years. Within those 350 days you can create unlimited certificates at no additional charge, which are valid for 2-3 years (depending on type). That means you basically need to pay $60 for a revalidation every 2-3 years so you can reissue certificates to replace expiring ones.
Github keeps the refs for pull requests separate from branches and tags. For example, you can fetch pull request #123 into a local branch called pull-123 with: `git fetch origin refs/pull/123/head:pull-123`.

When you open a pull request from a branch, Github creates the separate pull request refs to track changes to that branch. I'm assuming they have some kind of after-receive hook that updates the ref whenever you push.

However, if you close the pull request (or delete the branch, which automatically closes the pull request), then rebase the branch locally and force push your branch, the pull request will not be updated, and you still see all the comments and historical data.

You can then open a new pull request from that branch, and go through the code review process again. If you mention #123 in the description of the new pull request, it'll create a link at the bottom of the discussion on the original, closed one. This helps keep the separate discussions tied together if you're coming back later and want to see all revisions of this branch.
Yes you can (technically at-least)
If changing languages lets you reduce code size 20-fold, it's very much worth it.

Reasoning about a smaller code base is nonlinearly easier. This is especially important for security software where letting your reasoning slip usually renders the whole thing useless.
Chat. Non-pseudonymous and therefore discoverable, universally available chat with read receipts and delivery confirmation always available. Both synchronous and async conversations are first-class citizens and you can seamlessly transition between smartphone and real keyboard for more involved conversations.

WhatsApp has no penetration in any social group I've ever been part of. I'll be disappointed if it does displace Facebook, because I so much prefer being able to transition a conversation to my laptop.
This blog post explains the code: http://blog.existentialize.com/diagnosis-of-the-openssl-hear...
Performance is pretty good -- AFAICK no worse than just running all the apps in one desktop. Here is an article[1] that talks about doing kind of thing on the mac.

[1] - http://www.maclife.com/article/howtos/how_use_spaces_mac_os_...
Please use something like Pinboard, Pocket, Bitly, or Instapaper.

You put everything in one list, and the comment section stays on point :)

Links:

https://pinboard.in/

https://bitly.com/

http://getpocket.com/

https://www.instapaper.com/
I think the issue I often see here is that both sides have a one sided sense of exactly how many people "want" to live on the street and don't. Either they're all lazy or they're all victims of the system. This [1] perhaps helps illuminate the issue.

We see that 66% have drug, alcohol, or mental health issues. That's a large fraction; about two in three homeless individuals have these issues. However, one in three is a significant fraction who don't. More upsetting is that 40% are veterans. So, I think it's fair to say that we have a slight edge on the interpretation that its "their fault" (although I am extrapolating a lot from a single number here). Still, one out of three individuals there out from nothing more than misfortune is just unacceptable, so I think something should be done.

But clearly, what we are doing isn't enough; something more needs to be done. A lot of this can be alleviated by the other things, you know, fixing the rent problem, addressing the minimum wage, etc. In fact the article suggests a few fixes, like better public housing design.

[1] http://www.statisticbrain.com/homelessness-stats/
I have a bachelors in mech engg. I eventually moved to software and Walter Bright exactly echoes why:

My degree was in mechanical engineering. But mechanical engineering was frustrating because of the large expense involved with building anything ... With programming, on the other hand, I could build the most intricate machines imaginable at no expense, needing only access to a computer.
Torvalds Is Unconvined By LTO'ing A Linux Kernel
I’m not sure how that is more of a problem than what Uber faces for the moment: imagine a bike messenger (heavily branded as it seems they are going to be) facing a parcel that isn’t ridiculously large, but still not ideal to carry in a messenger bag — smaller than a carry-on luggage. Shouldn’t he be able to say: “Look, I can strap that and risk crashing your box, or for $3 more I can ask this Uber driver who’s idle right now to do the delivery for you. He’ll be here in three minutes.”
That part was moronic. The rest was good.
cacert.org is trying just that for a long time. The hard part is the paperwork and procedures that give OS and browser vendors the trust to add you in their default config.
/* Read type and payload length first */

And now this is actually the second thing the code does, not the first.
Nokia Gets Chinese Regulatory Approval for Microsoft Deal
The Python language allows constructs such as socket.write(my_private_key). Do you think that just because Python makes it possible to write your private key to a socket that it must necessarily happen?
What a douche you are!
The Privacy Dinosaur is only for users who are currently posting to Public by default, it reminds them of that fact and educates them on the different settings. It's been rolling out to select users for a couple of weeks now[1]

[1]: http://www.slate.com/blogs/future_tense/2014/03/25/facebook_...
The absolute worst API in the history of computers is the Microsoft Text Services Framework (TSF) API.

It's incomprehensible, nearly undocumented, 10x more complicated than necessary, and even Microsoft doesn't understand how it works and hates it.
Try out the new versions of Jira and Confluence which seem much better. The user experience depends on how both these are managed.

I do wish Jira had much more powerful query, and support for deeper dashboard customization. Compared to ClearQuest, Jira is very user friendly, but CQ felt much more powerful.
The big difficulty in adopting it in any current codebase is that most current pieces of software are not written in haskell. The huge advantage of projects in C like OpenSSL is that you can produce platform-native shared libraries that can be used easily from any other language.

A bit of research shows that it's possible to make shared libraries with haskell, but not quite as straightforward to use them. I have no practical experience about how troublesome it would actually be.
>In C you could have made some 'safe buffer'

No you couldn't've. C is fundamentally unsafe language and people like you should stop pretending it isn't.
Red Snow Angel
This is the most viral video on the web,hands down! MUST SEE! https://www.youtube.com/watch?feature=player_embedded&v=voIH6pcGe4I
"We do understand the situation very well, thanks."

Really? Then why does he quote the following policy:

Never share private keys with any third party and use adequate
protection and best security practices to secure private keys in
order prevent losses and compromises thereof.

If he grasps the situation, what part of that policy would apply?!?
"Where a monolithic application might have been deployed to a small application server cluster, you now have tens of separate services to build, test, deploy and run, potentially in polyglot languages and environments."

My experience is that it is vastly harder to keep a single application server running that involved only two teams compared to two teams each with three or four microservices that they own.

"Keeping an application server running can be a full time job, but we now have to ensure that tens or even hundreds of processes stay up, don't run out of disk space, don't deadlock, stay performant. It's a daunting task."

No, see, keeping up a giant monolithic application server running is a full time job.

Author seems to entirely miss the point of microservices. The problems of giant application servers don't multiply when you break it into microservices. They go away.

"Developers with a strong DevOps profile like this are hard to find, so your hiring challenge just became an order of magnitude more difficult if you go down this path."

High Performance Teams are High Performance Teams. If you don't have one, your giant monolithic application is also doomed to failure. You just get to pretend that all the bugs will come out in QA.
Probably something like this:

http://www.mrmoneymustache.com/2013/02/22/getting-rich-from-...

The basic idea is that if you can save a fraction f of your income for the next n years, then you can live work free for the next n*f/(1-f) years after that.

You do this by changing your lifestyle such that f is big and you enjoy your life. Then when you stop getting paid, you can happily carry on like that. Obviously you should increase your income as well!

7 years of work at 90% savings = 63 years worth of cash.

Once you're saved a reasonable chunk of money (~$500k) it starts to look after itself (if you invest sensibly) and you can make it last indefinitely.
I really hope that ‘advanced’ button is going to be expanded: if you believe danah boyd’s research on this, most user don't care about public and they tend to be savvier about this that to need an explanation of what ‘Facebook friends’ are. However, their main problem is not filtering friends or not, but between friends.

The hiding old profile picture might be a good thing, based on how often former paramour are featured there.
Live cyber map
I actually have been doing similar things, but without the side projects to back me; depending on my mood and the opportunity I:

- do some high-end consulting at an above-market rate

- enjoy myself at a below-market rate in a start-up

- take some time off to spend it with the kids, while I learn about new things

This usually happens in streaks of a few weeks/months...

Regarding the continuous flow of money to back you: while it is nice to have, it is not exactly a necessity; I build a little pile of cash and am very picky when I spend it. You don't need a continuous flow of money to get started, but you have to prioritize what is important for you.

Last year I have been doing high-end consulting for about 5 months, spent 4 months at home learning new things (ElixirLang etc) and enjoying myself with the kids, and the remainder was spent remoting for a start-up where I ended up experimenting with Erlang, GoLang, Haskell and a plethora of tech stacks.

In my opinion, people tend to forget why they work (to have a life and enjoy themselves), and end up focusing on getting more and more ... They tend to be afraid of breaking their habits and always predict doom scenarios.

I have been doing this for years, and my income fluctuates like hell - I even once posted a graph of about 10 years of income on my blog -, but I enjoy my life and work...

I agree that it does induce some stress every once in a while (for example, in January this year, I had just paid a huge amount to social security and taxes, and after a two week break my project was ended), but in the end you always manage.

If it had not been for this stressy period, I now would not be working on two start-ups simultaneously: one as a consultant for one or two days per week, and the remainder of it on my own (for which development is being paid for in advance by the first future customer). Maybe that is the post-traumatic growth Nassim Taleb was referring to in it's "anti-fragile: things that gain from disorder".

I would suggest everyone to really think about your work/life/fun balance and just take a leap of faith.

"If you do not change direction, you may end up where you are heading." - Lao Tzu
OpenSSL's thread safety policies is undocumented and unintelligible. We gave up and just put a single mutex around any call to OpenSSL within the process.
I'm curious though. What part of the obligations quoted was the subscriber violating?
Mainly chat, increasingly in groups; WhatsApp is good but it's not ubiquitous enough. Otherwise photos and events, but even those are slowly moving into being shared within chat groups. The "scrolling news feed" days are coming to a close, and selective communications and sharing is becoming the norm, because with a decent amount of friends not everyone needs to know about everything (as a point of relevance, less than privacy)
Please up this post then ;-)
Woah, can you point me to an article or something with more detail?
I don't know that this game was an ASCII game. The first time that I saw it was the MS-DOS versions egatrek and vgatrek.
Actually it's not as easy as that. Granted, subsidies do help. But for example in Germany, where virtually anybody could get a social welfare which covers housing, we still have homeless people.

Homelessness is also quite often a problem of mental health, which prevents them to seek help they are entitled to, or to improve their situations on their own, when they are otherwise capable of that.
The interface between an application that wants to communicate using TLS and perform related tasks and a library that implements TLS can and should be simple - at least for the 90% of common use cases.

The whole point of the original article is that the interface of OpenSSL is horrible and undocumented. Consider how the article's author was not originally interested in looking at the internals of OpenSSL. All they wanted was a decent and documented interface for dealing with certificates; if OpenSSL had exposed such an interface, they would never even have looked at the source code of its internals.
1 + 3 + padding and 1 + 3 + 16 are repeated. I suspect the magic 16 is actually just the padding too.
Bankers go undercover to catch bad guys
Yes, I did (and will do again).

Previously I used bind/named for a subdomain, something like d.someshortdomainofmine.tld for a dynamic namespace and updated entries below with a cronjob calling

nsupdate -k /path/to/a/key << _EOF_
server my.server.here
zone d.someshortdomainofmine.tld
update delete foo.d.someshortdomainofmine.tld
update add foo.d.someshortdomainofmine.tld 300 AAAA ipv6here
show
send
_EOF_

which worked just fine and took roughly 20min to get right, including the DNS entries. I'm currently moving to NSD and I'll implement something similar there.
Ada allows much more precise and standardised control of low level details than C or C++ do. You can, in a standardised way, define a record (struct) where the fields are a signed integer taking up 3 bits, followed by a 1 bit bool and then a 4 bit signed integer, followed by two 16 bit unsigned integers, and have them all packed in the order you've specified (including whether it is big or little endian), and only allowed to be used in the specific memory locations you've selected (think memory mapped control registers on a MCU). This is all part of the language spec. Not only that, if you want you can have a pointer (or access type) to that single bit bool if you need to (so obviously access types are more powerful than pointers because almost anything can be addressed, including things on remote machines if memory serves).

You also get the powerful feature of pre and post conditions being part of the language from Ada 2012 onwards, meaning you can even more precisely control what's happening. You can have types for potentially dangerous data and safe data that cannot be intermixed without being very explicit about it (something that would've avoided this bug if I understand it correctly).

I've said it in other threads, and it's worth saying again (as someone whose primary language is Haskell) Ada is absolutely the right choice for this sort of programming. It's just as low level, if not more so, as C, with all the high level constructs of C++ (well most anyway), it encourages writing safe code by making the safe easy and the unsafe hard, and has excellent open source tools backed by commercial compiler writers (AdaCore).
Xembly, an Assembly for XML
The acronym - Link Time Optimisation, probably needs to be expanded in the title.
Bitcoin is not at risk from the birthday paradox
Well, duh.

OpenSSH links to OpenSSL libraries, but only for the cryptographic primitives. SSH is a different protocol. It doesn't need TLS for anything.

It's also a simpler protocol, with less baggage and interoperability requirements.
Yeah, it just that you wanna make sure the padding variable is not being overridden by some malloc ;)
Children are great, but by the time they are interesting enough to spend all day with, they're old enough to start attending education. Of course, people can use the time to homeschool if they like - probably a good choice for many - but the real rewards for spending time with kids (for a working dad) is probably increasing from ~1 hr at night before bed to ~3 hrs including morning, something during the day and the nighttime routine. After that the marginal returns do decrease. Playing endless toddler games does tire compared to learning a new skill.
I understand your sentiment.

The author’s intent refers to study of politically repressed population: women, domestic help, low-level employees and before that slaves were referred to with only their name. That conferred a dignity to using a fuller civil name. It can seem petty when your issues are showering, fighting rabid dogs and pissing not in public but it appears to matter overall too.

Therefore, when privacy is concerned, changing the name is often a more considerate practice that removing it.
Glucosamine promotes longevity in worms and mice, study says
WordPress 3.8.2 Security Release – Update Immediately
Ask HN: SSL Certs need to be revoked, right?
So, Heartbleed. But it's not enough just to generate new certificates, right? You actually need to get the CA to revoke the old one, otherwise the (possibly stolen) original private key is still valid?

Or have I lost it?
I'm curious as to why they are not using constants or preprocessor macros for these values. It seems weird for it to be repeated in multiple places.