skysight-inc/HackerNews huggingface dataset:
Congratulations! This is a thing of great beauty. I would like to write an iOS-centric game development book; this is truly inspiring.

Just curious... what are your self-publishing plans (if you don't mind discussing them)? What software do you use for writing?
Ah, at the title I thought this was going to be about WebRTC, something I'm pretty excited about, even though it has a quite a ways to mature yet (http://caniuse.com/rtcpeerconnection).

Interesting that they left out websockets. At this point Websockets seem to be reasonably mature, and with Socket.io/Primus/etc are dead easy to use, and allow for near-real-time 2 way communication. There do appear to be some scaling issues past a certain level with websockets though, a topic I haven't been able to find too much literature about.

As for webhooks, are these more geared towards Server-to-server communication, like consuming an API on the back end? Is there any chance that in the future browsers will begin listening on our ports too?
Here is a screenshot in case they fix it: http://wesawit.com/images/github-error.png
Chrome 35 Beta: More developer control over touch input, new JavaScript features
The pitfalls of context switching is mentioned often in this article. I have a "problem" where I'll work heavily on a side project for a few days, before getting bored and wanting to move onto another project. The result is that I have many unfinished side projects.

Is it better to focus on one project until completion, even if you aren't as into it anymore? What do other HNers do regarding multiple on-going side projects?
In addition to what danenania said, we also take the work out of running those tests continuously from an external source and integrating with third-party notification services (like PagerDuty). That's where we straddle the line between testing and monitoring.
http://en.wikipedia.org/wiki/Betteridge's_law_of_headlines

I don't think so, mostly because to get useful information out of memory after only one heartbeat would be quite lucky.

If this were an actual attack, I think we'd see many more heartbeats in Koeman's logs.
If someone buys Starbucks gift cards with dirty money, by selling the gift card at a discount, you get laundered money back.

It's could be even more advantageous if you sell the gift cards for bitcoins, which can be sent anywhere in the world and anonymously exchanged for cash in nearly any currency/country through localbitcoins.
it's fixed ^_^
Major plus for your website to feature a Nexus instead of an iPhone. It instantly gives me a comfortable feeling of professionalism. I like the idea of the app and its well-executed. However, even if I would get a 100% discount I wouldn't take it.

Starbucks equals common denominator hyped hipster coffee charged for at premium rates due to its viral-branding and A-locations. I would rather drink water from a sprinkler at a toilet-venue nearby than mix myself in the crowd which is hanging out at Starbucks and let the you-are-our-special-customer indoctrinated employees serve me a coffee.

http://bad.coffee
Oh, I see what you mean. Fair point.

(It's a wide time range of files he's released so far though, right?)
I agree. I have the habit of constantly learning, without producing. So I'll pick up side projects, suck the learning-marrow from their bones, and discard them without finishing.

I have so little to show in terms of actual work product, which I am attempting to fix with a similar "don't break the chain" approach.
http://www.edaplayground.com/ is a great way to play with hardware description languages too. You don't need to install anything.
Ok, looks like they fixed it. Was there for at least 8 minutes.
It's the de facto client library for everything but the most important TLS clients.

Ryan's argument that it's too hard to remove NSS code is compelling, but making it to easy to add code is exactly the problem we just had with OpenSSL. Heartbeat wasn't just bad code; it was code that was inappropriate for inclusion by default.
Your language is calculated to make it sound as if it's just a difference of views. She was directly involved in mass murder, the destruction of a society and the crime of international aggression. If the Nuremberg laws were applied she'd be hanged. If it's OK to refuse felons board seats then it's certainly just to refuse war criminals.
Track your location history
Hey, hey, hey, hey..........................................................................Write code everyday.

-The Next Episode Remix
There's no way anyone could own it for more than a couple of minutes before Google had contacted the managers of the root name servers and ICANN to revert. Like the sibling comment intimates handling the traffic would be nigh impossible - easier to control and perform a localised attack on a nameserver to "own" google.com for a limited subset of users.
Haha ehhh I think you're reading into this a bit too much. It is possible to love more than one thing - I love helping educate people and doing it at a scale that Khan Academy can provide. I also love building reusable JavaScript libraries. I also love building tools for Art Historians. They all shouldn't be to the exclusion of each other and, in fact, there's often overlap. Part of the fun in life is embracing that and trying to make the most of it!
Thanks for posting the link - I live in the US but have been sort of considering a move abroad. This makes it seem more favorable :)
This doesn't improve you much unless you're really new or skilled at challenging at yourself and finding new things to learn.

If the latter is true, do you really need advice?

Said differently: flow is the opiate of the masses.
No, Markdown is more concise than HTML in basically every case.

You cannot expect users to know HTML and CSS to comment on your website.
Quickly Save Tab Sessions to Read Later (no extension)
How much development time has been saved and codebase quality increased by making backwards-incompatible changes that improve things drastically? It's a balance, of course – I'm not suggesting old interfaces should be thrown under a bus at the earliest opportunity. But the super-conservative opposite does nothing for progress and ends up with excess technical debt. Varnish 4.0 is a major version release. 3.x still works and will be used by a lot of people for a long time. I really don't see the issue, certainly in this case.
It appears that you might be right, from the RFC:

"However, a HeartbeatRequest message SHOULD NOT be sent during handshakes. If a handshake is initiated while a HeartbeatRequest is still in flight, the sending peer MUST stop the DTLS retransmission timer for it. The receiving peer SHOULD discard the message silently, if it arrives during the handshake. In case of DTLS, HeartbeatRequest messages from older epochs SHOULD be discarded."

But that doesn't make sense to me because the PoC code didn't complete the handshake did it?

Edit: according to Google the reason is that OpenSSL does not honour the "SHOULD" part of the spec :/
I hate political posts on Hacker News because they lead to petty, histrionic bickering like this.

What is intellectually gratifying about mean-spirited sarcasm like:

> You have no right to criticize me for trying to reduce how implicated I am in one of the most evil acts of the 21st century.

> And if you disagree, well, I can name a thousand other forums for you to post your comment in before you come here to Hacker News. Otherwise you're just being wildly inconsistent and deeply morally corrupt.

Political threads make people forget how to make positive contributions and instead they compete to express the most outrage. Nobody wins from that.
When does something turn from "political" into "criminal"? Crimes are defined by politics - thus war criminal and international law are completely political. Similar to how someone can say "Aaron Swartz's case is not political at all, he violated criminal hacking laws!" And yet at some point, politicians decided to enact the laws that criminalized his behavior.

Similarly, someone has to set the laws for war as well, to define what a "war crime" and "false pretenses" are.

Everyone believes his or her point of view, that one specific version of war crimes is correct and above the realm of politics. Ultimately though, everything is "different strokes for different folks". Abortion? Killing unborn children, or denying women's rights?

Who has convicted any of George Bush, Condoleezza Rice, etc. for war crimes?

And who ultimately gets to decide and enforce the actions of an international court? Whoever has the biggest army. "One man's terrorist is another man's freedom fighter". No one has a big enough army to put Americans on trial for any war (bet it Vietnam, Korea, Kosovo, Iraq)

The one thing I agree most with is that Rice's actions are far more substantial and far-reaching than Eich's. On her imaginary resume somewhere is presumably "Secretary of State" and everyone's mental bullet point of "Iraq War" - that is part of her professional career and she should be judged upon that for job fitness. As offputting or not one may consider Eich's actions (what if it were not gay marriage but some other minority position in the tech world, say pro-life or anti-marijuana legalization he had donated to?), his were pretty much completely separated from his professional career.
I am going to wait a week to see if Dropbox rescinds the offer to Rice. I like Dropbox as a product but Google Drive is reasonably competitive on features and less expensive.
E-Go: A sub-$1000 electric longboard
Look into it? There's someone at google that cares anymore?
The difference is that these are pretty much all developers asking for features. You can guarantee that if github core was on github, the author would probably have wrote the feature and made a pull request instead of having to resort to asking via a blog post.
Note: while building this tool, we discovered key sites that were patched yet still vulnerable to Heartbleed including reddit! (now fixed)
There's a Starbucks Gold Card (earned from 30 drinks in 12 months). https://www.starbucks.com/card/rewards

This gives you every 13th drink free (1 per 12 = 8.3% discount). I think this just crowdsources 1 mega gold card.

I guess if you average out the drink prices... I could use the free drink on the $6 soy latte and use the $2 tall coffee as 1 of 12 drinks to earn that. So I could squeeze out some extra % points that way.

If they're really creative maybe it does geographical hedging as well, using the cheap drinks in Florida to earn free drinks in Manhattan (no idea if Starbucks prices fluctuate geographically.
I recommend you pursue your line of inquiry elsewhere.
Show HN: A different approach against online censorship
intolerance will never lead to tolerance.

Tolerating intolerance means tacit acceptance of it.

Sorry, but if you and I can't agree on this one fundamental principle, we have nothing further to discuss. You're attempting to equate two things which are inherently not.

I demand that you take your objectively intolerable ideas elsewhere. (See how that works?)

I refuse. See how that works?
I'm trying to steer the conversation to something that's actually interesting. Whether the OP is right or wrong is not interesting.
Sure. Last year, they stopped a photon for a solid minute. http://www.extremetech.com/extreme/162289-light-stopped-comp... Note this preserves the quantum state of the photon - it's not just storing the energy and then re-emitting a different photon.
A note on the dot-files... would you consider putting your dot files/configration files in a project like mine:

http://configr.io

The project is pretty old, but I started it with the assumption that maybe dot files (that are OK being in the public domain) shouldn't be on github in the first place.

I never did get github integration working, and the site is very basic, but I would love some opinions on it
Have an Astigmatism? Get rid of it with LASIK eye surgery
Ask HN: Which is the safest OS?
After Assange mentioned that Debian is owned by NSA, i started worrying that there is none. Whats your thoughts on it?

http://igurublog.wordpress.com/2014/04/08/julian-assange-debian-is-owned-by-the-nsa/
Well this could end up being a whole essay...

I would say that generally it depends on the threat model and risk versus potential adversary (some African states would be different to China in capabilities etc). I think also a big part is really internalising and enforcing the idea that you will be breached at some point and acting accordingly, to minimise the data lose and be able to recover. So for example, if your only doing low risk stuff then the convenience of something like Windows/Mac and normal email service outweighs any risks from a breach (as long as you know how to access risk correctly and take the sensible/basic precautions). However for higher risk stuff then generally open-source solutions can potentially offer more security (too many to mention but tons of good ones here - Tails, TOR etc: https://prism-break.org/‎).

I would caveat though that I am not someone who always drink the open-source koolaid all of the time. I think the recent Heartbleed and suspicions about TrueCrypt goes to show that occasionally we are make assumptions about the security of these tools based on a false sense of security. Proper security is a longer process of peer review, code audits etc that everyone kind of just takes for granted are done with open-source projects.

Sometimes I think it's a little bit like the "free rider" problem, were everyone (including so many in relation to OpenSSL) is happy to use the tool but don't want to spend time/money/brainpower looking, adding, reviewing the underlying code. Then we get a lot of myths emerging (TrueCrypt is very safe for example - that might be the case but has it really been audited yet? Also, who is doing the auditing? etc).

Obviously the fact that open source stuff is free and the code can be looked at and eventually fixed is a very good thing. Also, usability is a security feature and I think some of the secure open-source alternatives have problems in this area - though the work of the Guardian Project, Whisper Systems etc is doing a great job of fixing this aspect of things.

Apologies if I got a bit sidetracked on this answer. If there is more specific advice you want, drop me a mail to the email (low risk stuff only) in my profile.
Debates on Brendan Eich and Condoleezza Rice seem to boil down three separate questions:

1) Is there any belief or action not directly related to someone's job that should disqualify them from their position?

2) If the answer to #1 is yes, does this specific issue cross that threshold?

3) Does the answer to #1 change based on their position within a company, e.g. a regular employee vs a CEO?

I've seen well-reasoned arguments for many different combinations of those opinions, and I have a lot of respect for most of the combinations I've seen, e.g.

- Even if a white separatist contributed money to a campaign to revive "separate but equal" Jim Crow legislation, we shouldn't oppose their employment if they have a history of working well with all co-workers/employees in a diverse company.

- Some political beliefs/actions would disqualify someone, but gay marriage equality is not (yet) beyond the pale, especially given the high percentage of Americans who hold the same beliefs.

- Gay marriage is indeed an issue that should reasonably factor into employment positions, but only for a select few leadership positions such as CEO due to the disproportionate power within a company held by people in those few positions.

What makes these debates problematic is people talking past each other without realizing they're debating different questions. This gets worse because each of the 3 questions I listed have many sub-categories.

Since grellas' posted about question #1, I hope people recognize that and tailor their responses to the argument he is actually making, in the spirit of "colleagues trying to reason out the truth together". Because he argued for employment to be belief-neutral, I'll summarize the three arguments I'm seeing on these threads which are relevant to that specific question:

1) Past behavior is a signal for future action, and Rice's position on the Board of Directors sends an unacceptable signal about how seriously Dropbox takes privacy. Even a person against boycotts based on political or religious beliefs has strong reason to oppose Rice's appointment to the Board.

2) Rice is a war criminal who happens to have not been prosecuted. Refusing to do business with a company who appointed a criminal who'd committed equivalently-serious-but-non-political crimes and escaped prosecution wouldn't raise any eyebrows, so why should this?

3) All people have a responsibility to discourage behaviors which are provably detrimental to the functioning of a well-ordered society. General litmus-testing of beliefs (or even actions) causes more problems than it solves, but Rice's behavior was so far over the line that we are morally obligated to marginalize her and all of her colleagues who behaved similarly during the Bush administration.

I'm not sure whether I agree with any of the above arguments, but I respect each of them, and I hope that either Hacker News figures out how to debate them civilly or that the moderators pull all stories like this off the frontpage.
Being more easily extendable? I thought that was more of the idea.
I'd like some feedback about the idea and implementation. If you've got any ideas to make it better, I'd love to hear them.

The code is also on Github: https://github.com/SGrondin/unblock.us.org
No, but I would boycott a doctor that mutilates girls genitals.
> ...went into the thinking of the political leaders back then.

But if the things you cite don't make logical sense, then those things must not have been actual considerations, or those considerations were made in bad faith.
Money.

Just a guess.
other (non-bullied) politicians

Is this how people are co-opting the term "bullied" now? To describe criticism of prominent people in public life? C'mon. Condoleeza Rice served in two presidential administrations. She is not some ingenue who accidentally stumbled into the spotlight.
And how do you suggest throwing them out of office?
Exactly it is more of an exercise of discipline. Discipline is not simply achieved, it is a constant challenge.
I'm not an economist, but economists are not good at speculating either, looking at the results: As a a team, economists failed to preview every single financial crisis. Only after the shit hits the fan, media goes back to the few who were able to predict the crisis. There are always solitary birds singing out of the chorus. The chorus never get it right though.

To your statements now:

1) That's true, but doesn't mean anything if you put it out of context and the context might very well change in a couple of years. Crypto-currencies are evolving now, new ones are created trying to tackle bitcoin's flaws. Now seems unlikely but in the future some might be more successful than bitcoin. It's a new sector.

2) There no central governing body, but an investor with a big amount of bitcoin (say 2% of the total) might easily drive the price up, down or side-ways. It's like a financial (assets) market really, a little bit of miss-information and a massive dump of bitcoins will turn the price down at once.

It doesn't make any sense for a merchant to accept bitcoin if:

1) He is not the guy holding a huge bitcoin portofolio or plants too. Say Starbucks as a corporation starts accepting bitcoin today, in 6 month does a massive investment in the bitcoin market. If the investment is big enough the price will go up (supposedly).

2) If they have some inside information which allows them to predict with an acceptable risk the future price of bitcoin.

Other than that - and I'd go for that theory - it doesn't make sense. It's just a marketing trick. They are not expecting big amounts, just very small amounts because as you said bitcoiners are basically short or long term hoarders. But I'm sure they are ready to absorb any bitcoin drop up to a point, but not further. So I'm positive they wouldn't accept 20% of their turn-over being on bitcoin (if they are not feeling suicidal).
Google will let anyone buy Google Glass in the US for one day only
Introducing Asset Handoff: the missing link between developers and designers
Depends entirely on the website.

Hacker News could probably expect a large majority of their users to be able to handle it. Maybe with complaints, but handle it.

I had a personal Wiki which was based off of some open source Wiki. The first thing I did was removed Markdown, because it was completely pointless for me. This was 14 years ago. All I wanted was a web interface to edit HTML and view it later. For the most part, I just had lists and links, and sometimes notes and status reports.

Mainly, I could go to localhost/psychometry in my browser bar, and get immediately presented with "This page doesn't exist, type in the textbox below to write the HTML for the page". It was super handy.
This isn't about a vague ideology (re: Eich). It's about ACTIONS that Condoleezza Rice, personally, has taken in the past, and using those actions to predict what she will probably do in the future. She has shown us, with her actions, that she cannot be trusted with sensitive data.
Yes, but using a counterfeit certificate requires a much more active, targeted, and potentially-discoverable attack.

With a counterfeit cert, you could pretend to be a target's email host, for example. But you'd need to be an active man-in-the-middle, and you'd only see information during the sessions you actively hijack. The target, or anyone else you mistakenly man-in-the-middle, might notice the changed certificate/authority, thus sounding alarms or clamming up.

If exploiting heartbleed, in contrast, you'd be taking arbitrarily-many random samples of the email host's private memory, in a manner that even the email host's typical logging would not notice. Over time, you'd likely get many login credentials, app and SSL session keys, and possibly even the site's authentic certificate private key – that's something that even a faithless Certificate Authority can't cough up. (They can certify a fake private key... but they don't have their customer's true private keys.) At that point, unless PFS is enabled, all past and future SSL sessions could be decoded via passive eavesdropping.

So if you had a choice between several collaborating CAs or most of the internet running buggy OpenSSL, you'd pick the buggy OpenSSL. And if you had both, you might very well use the heartbleed bug more often, because it's both less detectable and more likely to offer bulk data for analysis.
It's a stroke of genius, yes, that others have had before now. Lime.js did this three years ago (mapping animations to hardware-accelerated CSS). Cocos2Dx-Javascript does this one step better by bridging into actually-native rendering code. Three.js has DOM-with-CSS-transformations. IIRC someone implemented hardware-accelerated CoreAnimation in Cappuccino using CSS transformations. So, not really new. I'm curious to see what new ideas they DO bring.
And yet Sussman and Abelson themselves were behind the switch from Scheme to Python at MIT. I don't hold them out as infallible, even about their own course, but it should give us pause, yes?

They have a lot of data, we have ... opinions. And the data was saying that students were having trouble learning to do practical engineering problems after this course. So, 2 hours or not (and I say not), the reality is that really bright students had trouble with it, and their professors and designer of the course, co-inventor of the language, and author of SICP thought Python a better choice than Scheme for this course.

Empiricism trumps all.