skysight-inc/HackerNews huggingface dataset:
the end goal is to help people in a scalable way. Sorry it comes off as ego driven. I'm sincerely trying to find out what people care about before being one of those people who write about themselves.

I've wrestled with a few different structures and thought it would be fun to put this out there and see what happens.

I find it interesting how often others want to assign motivations to each other. Reminds me of the time I was at a professional function, and ordered the fruit. All of a sudden half the table was staring at me, and making comments, like "oh I worked out today, I can have this" even though I'd said absolutely nothing.

for now, I'm asking you to trust that my motivations are sincere and trying to find the best way to share.
Agreed. In fact, a lot of people are raging on OpenSSL and the OSS community not ever fixing this stuff but.. no one really raged on Apple over their SSL issue. They came out and showed the code and showed the missing curly brace and gave the "accidents happen" excuse but.. why wasn't that caught in unit testing?

The only reason it wouldn't have been caught in unit testing is because Apple isn't unit testing their own SSL code. If Apple doesn't commit to doing security well why do people expect OSS to?
I think this code is easier to read than the more verbose 12-line version given in the article. It takes longer to read per line, but less time total.
From my experience people tend to parrot the mannerisms of people that they emulate and vice versa. Or maybe spend much time around. No time to find support for this but I'm sure there are numerous studies that say the same.

Paul has a great deal of repect for Sam and Sam for Paul.

Not to mention that people are probably going to be more likely to support people that are like them in one way or another. I know when I get a phone call I tend to like people who talk fast, don't mess around with niceties (to me "how are you doing" is a complete waste of time) and get right to the point. Others of course don't. [1]

That said I don't know if your point is correct or not but it wouldn't surprise me if it was.

Starting a sentence with "so" is a crutch that I started to notice people using several years ago. That's clearly something that they pick up when surrounded in a community of others doing the same.

[1] A bit of selling is always like modem negotiation. Usually it's a good idea to parrot the behavior of the person you are trying to sell to. If they talk slow you talk slow. If they talk fast you talk fast. In general of course always exceptions.
A slight tangent: never ever use a passive aggressive tone in UX.

"I'm sorry you're having trouble." <-- not ok

"I'm sorry, I didn't get that." <-- ok

I'm surprised how common this is becoming. Machines shouldn't talk down to humans until they're clearly our superiors.
Notably some sites are using fresh certificates that have the same (months-in-the-past) starting-validity date as their old certificates. For example, Heroku has done this.

(I can think of a few process and fee reasons this approach might be picked. Perhaps a CA might offer a free new cert and revocation, if and only if the new cert has the same validity range as the one it replaces. An ops team might prefer one consistent time of year for the ceremony of non-emergency certificate rotation.)

I didn't notice any field in the cert-viewers of Firefox or Chrome that could reliably tell the true issue-date of a new certificate.

Is LastPass just looking at the start of the validity, or does it have some way to know if the certificate is truly new?
In a vote for lastpass (I haven't tried the others) - they just added auto filling passwords for the android app. It works pretty well (typing their generated passwords into apps that blocked copy/paste was my biggest gripe until then). I'd say that it's pretty easy to get duplicate entries for a single site which can get annoying, but it's relatively easy to delete ones if you don't get mixed up with which is the "correct" entry first.
How is this an argument for silently failing being superior? It seems like static checked exception handling could solve this problem easily, the compiler can just display a warning on an unhandled exception and then pass it up the chain.
What a wonderful "concern trolling" post.

At no point do you actually mention anything that Tesla has done wrong in the slightest, yet you manage to imply that they're the bad guys in this scenario.

Thanks for your contribution to human culture.
You don't have to go to Tesla's own blog and read the content if you don't want to.
I use and really like LastPass. In particular, its integration with browsers (and my smartphone) with the random password generation means that my passwords are all unique and non-rememberable (and thus unphishable, since I rely on LastPass to fill the password for me, which it only does on a domain match).

Things like their security check are just icing on the cake.
Your CSS is a little broken in chrome v34, the black box that overlays when you mouse over colors are about 15px to low and kinda screw things up the lower down the page you go...
Wow...that guy is a jerk.
You are likely not to see a clear victor in this thread either. People who use/like LastPass will say so, and those who use others will throw in the vote there. You can also google 'Option 1 vs Option 2' and get a bunch of results. Best you try them yourself and see which one you like!

I use LastPass Premium
Nice catch.

That is some of the worst logic I've ever seen.
Are you planning on an iPad version as well?
I'm still unclear on what you mean by "first class".

In Java, you could pass in WeatherProvider.class to tell it that you want it to produce a WeatherProvider instance or a string that said "WeatherProvider". Is that the kind of thing you have in mind?
Elegant is definitely the wrong word. Scheme is elegant. Go is simplistic. Not the same thing.
Yup. It's a great point. I do frequently mention the safety aspect in conversations about secure channels because I know that was how the importance of the work was pitched to me when I worked with a VPN provider in the past. (As a developer, but not in a role where I would have anything to do with the FMEA you mentioned. I had to look that acronym up.) I think it's a good point for people to keep in mind.
I don't understand your response. I pointed out that the critique of Freemen's 1970 essay is poorly reasoned. It sounds like you want to make a different point, but you use very different terms and have a different viewpoint while not making the connection between the two.

For example, Freemen doesn't attribute anything to "bad actors" (saying instead "Very seldom does a small group of people get together and deliberately try to take over a larger group for its own ends." and "This is not done so much out of a malicious desire to manipulate others (though sometimes it is) as out of a lack of anything better to do with their talents."), so I don't see how your last sentence all that relevant.

I will hazard a guess: it sounds like you like anarchy, it sounds like the "Tyranny of Anarchy" is often brought up as why there should be some formal rules, it sounds like you found a critique against that essay, and therefore you want to point to that critique as a justification for why that essay should not be trusted. If so, this is an argument by proxy, using cherry-picked documents to justify previously decided beliefs.

Even if my guess is completely wrong, I notice that you made a logical fallacy in your comment just now. There are rarely ever only two sides. There isn't "informal" and "formal" groups, but a spectrum of rules and a spectrum of adherence to those rules.

Freemen's lists 7 principles which should guide the development of the rules. These include "Distribution of authority among as many people as is reasonably possible.", "Rotation of tasks among individuals", "Equal access to resources needed by the group", and "Diffusion of information to everyone as frequently as possible".

These make it harder for your 'bad actor' to hide. You seem to think they make it easier. Please explain.
Also, your phone is potentially tracking your location right now.

Maybe not yours, personally, but in general.
The Aura of the Digital
Shame less plug: Build a Web Application with spreadsheet like formulas. Simple example: https://www.youtube.com/watch?v=oogKKfbRyMQ
I use pass http://www.zx2c4.com/projects/password-store/

You could store your passwords in a git repo to get a sort cross-platform thing going on.
How does their "Updated Cert?" check work? If it's just checking notBefore, it's going to have a ton of false negatives, as a lot of CAs are just re-issuing certs using the original notBefore.
The basic layout has stayed the same, but the left-side list has grown quite a bit over the years, as has the number of settings on the right side.

The original layout may have been serviceable years ago, but now it leaves a lot to be desired.

The current split-pane interface works fine if you go in there to change multiple items on a regular basis, but that's not exactly how most people use the settings.
We haven't found a way to do this -- we're using openssl s_client to get the start date, but one of our own certificates for LastPass.eu also reissued without changing the date so we know it's a problem.

We wish we had all site's certificate fingerprints from before this started so we could utilize that data -- if anyone has it, an email to securit@lastpass.com would be greatly appreciated.
If you want a relatively simple way to provision a Hadoop cluster locally, you may want to try out Ferry (http://ferry.opencore.io). It's based off Docker, so in theory, you could also write a nice Dockerfile to deploy Mortar's recommendation engine. (full disclosure, I'm the author of Ferry).
iPad is shorter still. This app isn't universal.
Used to use LastPass, but I've disliked some of their recent decisions. Their Android app is getting bulkier by the update; it includes a full blown web browser inside the app. Their Firefox extension seems to be no longer maintained as well. I switched to KeePass + Dropbox and have been enjoying it. If you use OSX, I strongly recommend http://mstarke.github.io/MacPass/
Obviously it's a PR move. You can still use evidence in a press release to strengthen your future statements within that press release.
Having uniquely-named packages is insufficient unless the maintainers of those packages never update them. The point of tools like Bundler is not about name resolution, it's about VERSION resolution.

Sample size of 1, but here's a story about what happens when things go wrong:

https://www.kickstarter.com/projects/2066438441/haunts-the-m...

The bit about packages from github.com being edited locally was particularly hair-raising. Really hope the smart folks working on Go figure out a resolution for this kind of thing.
DNS lookups of the servers that the requests came from:

54.186.135.68	ec2-54-186-135-68.us-west-2.compute.amazonaws.com	United States flag United States, WA, Seattle

220.181.159.76	China flag China, 22, Beijing

54.193.75.203	ec2-54-193-75-203.us-west-1.compute.amazonaws.com	United States flag United States, CA, San Francisco

5.61.43.116	Germany flag Germany

173.45.70.84	54.46.2d.static.xlhost.com	United States flag United States, OH, Columbus

54.72.158.29	ec2-54-72-158-29.eu-west-1.compute.amazonaws.com	United States flag United States, WA, Seattle

113.64.221.42	China flag China, 30, Guangzhou

83.222.250.151	.	United Kingdom flag United Kingdom

62.210.125.141	62-210-125-141.rev.poneytelecom.eu	France flag France

54.197.30.237	ec2-54-197-30-237.compute-1.amazonaws.com	United States flag United States, WA, Seattle

80.82.70.118	hosted-by.ecatel.net	Netherlands flag Netherlands

80.82.70.106	hosted-by.ecatel.net	Netherlands flag Netherlands

209.126.230.70	internetsurvey-1.erratasec.com	United States flag United States, CA, San Diego

183.60.244.46	China flag China, 30, Guangzhou
Whatever works for you, just configure Hound to comment on lines longer than 130 instead of 80.

https://gist.github.com/salbertson/d5eb2d42f68df9e18d10
Most of the comments here say they only use the FB app for messaging, and they won't install another app. Why is this Messenger app the 'another' one, when the main app clearly doesn't fit your usual use case? I've kept the main app off my phone for well over a year now, and only looked back when Paper came out. Try just having the Messenger app on your phone, no news feed, no ads, no crap. Just messaging, which works incredibly well on a phone that you're already using for lots of messaging.
Here are a couple of Stack Overflow answers that illustrate how you do it in Objective-C:

http://stackoverflow.com/a/2573949

http://stackoverflow.com/a/18689338

If you're interested in the nitty-gritty of how objc_msgSend works, bbum from Apple wrote up a great low-level walkthrough a few years back: http://www.friday.com/bbum/2009/12/18/objc_msgsend-part-1-th...
Things like this make me glad I live in New York. I hope that either NYC or Austin replaces SV, and I'm actually quite optimistic that it will happen.
It's like somebody walking around your house and checking to see if all the doors and windows are locked.
I'm working on it. Please send me an email if you need help with anything in the meantime.
Oh nice, I wasn't aware of that. Thanks!
"many of us are in it for the money"

I would guess that it's more than money though. It's also getting respect, attention, acquaintances, access and a pulpit that money buys. With that you can change the world.

Sam has a pulpit (my comment wasn't directed at Sam but I just thought of this) that money can't buy. He was interviewed on CNN and has a ton of influence that he now yields as a result of being a figurehead. My guess is that the amount of money he makes is totally secondary at this stage and he wouldn't trade that away for anything.

One last thing. It's what I call the "smoke up the ass" part. (Stick with me.) It's great to be in a position where your day is spent with people who are being nice to you because they want something from you or you are some kind of a gatekeeper for something they want. If you like that type of thing (and quite frankly nothing wrong if you do it's a drug free high) that goes way way beyond just having money.
Anyone who takes offense to "Good luck with your project" seems like a thoroughly unpleasant person.
How do you know this. Have they announced pooled storage?
Type (1) 'altruism' has various flavours.

Two oligarchs colluding is one.

Selling out to olligarchs may be another.

Both of these seem to be increasing "perceptions"

Of Silicon Valley's ~morality.
Nice man! long time fan - you've stuck around where lots of people just faded away... keep up the great work! Next time you're in SD hit me up :) - sean vosler
Two of the most important things when it comes to weight loss are motivation and dedication. You have to want to lose weight to an almost emotional degree, and the dedication to keep at what you need to do to continue to lose weight even if your body starts to create excuses.

It's hard to get people inspired to do so though. It's often something that person has to become driven to do.

Alternatively, one can join the Marine Corps and let the drill instructors in boot camp motivate you to exercise.
Bill Clinton on Snowden: An ‘imperfect messenger’
> Do you think it would be worth it?

Yes, it's worth it.

> Or should I not bother and simply specialize in web jobs?

IMHO, if you really do want to specialize in web jobs, then perhaps mobile development is part of it.
Flag it and move on. Without any detail at all, it's a worthless post. Most small businesses fail in the first few years - saying "I'm successful!" with zero detail does not help anyone.

Reading the article reminded me of those companies that have testimonials on their site attributed to "Anonymous". Testimonials basically saying "This product is so good, I'm not willing to put my name to it!"...
Thanks for the feedback everyone. Perhaps I should have included a bit more explanation.

I was primarily interested in an algorithmic approach to generating color palettes. I am familiar with the various tools available (Adobe Kuler being my favorite) that use color theory as a basis of providing colors to go with one that you've selected (i.e. complimentary colors, analogous colors, triadic colors). One the palettes that my app provides uses this approach.

Another approach I looked at was a trick that I've seen many designers use in which you "mix" a little of the color you want to use with another color. To play with this concept, I generate a random set of colors and blend it with the one that you've selected.

Finally, I am a huge fan of Gregor Aisch's work [1] with colors in regard to statistics. My third palette borrows a method of his that I had not seen elsewhere. He essentially maps a particular color space into two dimensions and keeps the third constant. You can sample equidistant colors along a line in that space to derive a set of colors that look good together. In my case I used HSL, where I hold Lightness constant (I use the value of lightness of the color you selected).

As he mentions in the post I've linked below, HSL is not necessarily the best color model to use this way. A more perceptually uniform color space like CIE LAB would be better. However, working with this space in this way is a little more complicated because, since this color space models how we perceive colors, it has holes. I had trouble finding an elegant way around those holes such that I could consistently offer a fourth palette.

Anyway, after looking at each of these methods, I was curious if any one of them would rise to the top as the favorite among users. Or, perhaps one method would perform better for some colors over others. I am in the midst of processing all this data and my thesis should be published within the next month. Thank you for helping me collect data!

[1] http://vis4.net/blog/posts/avoid-equidistant-hsv-colors/
Heartbleed Scanning Prior to Disclosure
The vendor space, considered seriously, consists of Google, Mozilla, Apple, and Microsoft.

Of those four, Google is pushing hardest for CA-compromise countermeasures.

Google's current preferred solution is Certificate Transparency. I don't love CT, for reasons very similar to those that the typical HN reader would come up with after reading it, but it's still a step forward.

We sponsored development of some TACK code last summer, but none of the browser vendors are itching to integrate TACK. Google has nice things to say about it, but "backburnered" would be a fair summary of where it stands right now.
>It's really not a good language for much else

It isn't even good for that. There isn't a single use case where one of: D, ocaml, haskell, rust, or C isn't better than go. Go is the new java, a language that was inferior and obsolete when it was made. And like java, it'll probably be popular for a long time.
The description is underspecified, no surprise there, but that's different from claiming it's incorrect. As far as its purpose as an interview question goes noticing this interpretation would probably be seen as a good sign.
I wonder what the platform breakdown is for people who say they wouldn't use the separate messenger app.

The inclusion of chatheads systemwide on Android makes it a great experience for me (of course YMMV). I wish FB Messenger and its chatheads could handle my SMS as well.
Valentino Giaro Shoes
Ask HN: Received three password reset emails
I received three password reset emails from Hacker News today that I did not initiate. The emails say just to ignore it but should I report it to anyone?
No I'm not kidding. The extreme minimalism in iOS7 is a style in and of itself.

Pre-iOS7, the GUI style provided utility and substance by always very clearly indicating state (which app is currently open was absolutely obvious to see even at the shortest glance because they all looked so very different), context (how screen elements relate to each other, how they are grouped together) and affordance (possible modes of interactions, what is a button, what can be manipulated how).

That substance is now gone, overridden by the style of extreme minimalism.
Checked a few of (the owners of) those IPs:

* LeaseWeb (VPS host)

* Amazon (presumably EC2)

* China Telecom (!)
"Goober with firewall".

Some users get a windows software firewall product. Those products have to persuade users that the money was well spent, so they log everything and sometimes alert too much. "WE PROTECTED YOU FROM 9,042 HOSTILE ATTEMPTS" sounds better than "it's just Internet noise. Ignore it."
Movie Barcode (Movie hashes)
RuboCop is great, but one benefit of Hound is it only checks code that has changed. Retroactively enforcing code style is usually a bad idea.
I dunno. I feel a similar sense of discomfort. But at the same time, people will do crazy things to get attention, attacking a supremely popular company with an excellent reputation for reliability is not surprising.
Really great design and execution. Are you responsible for the animations (on the marketing site and product itself) and other components? If so, what was your learning process (a book, website, etc.)?
>stores its weblogs in the MySQL database

Can you explain this to me? this seems like exactly what wordpress does..?
Automattic, Steward of Wordpress.com, Snaps Up Longreads
Read the definition again, it agrees with nardi's comment.
It's not an argument for silently failing being superior. It's a claim that too often, static checked exception handling gets subverted, and therefore doesn't work.

Sooner or later, you have to trust the programmer to not be an idiot. If he/she is an idiot, the language can try to help, but can't really fix it.

Static checked exceptions let the programmer know that there's something that needs to be handled. That's good. It can check that the programmer put a catch block somewhere, but it can't guarantee that the programmer did anything appropriate to handle the problem inside that block. It's better than nothing, but it's not enough. (And if you're going to ask what is enough, I have to reply: Nothing. If the programmer is determined to ignore the fact that there's an error to handle, the language can't fix things.)
Here's an example of how you could configure Hound to increase the line length limit.

https://gist.github.com/salbertson/d5eb2d42f68df9e18d10
It's not just more complexity per line, it's also a higher level of complexity, using language-specific features that people who aren't fluent in python wouldn't be familiar with (multiplying a string by a boolean)
Yeah, this is a deal-breaker for me as well. Why can't I selectively push my photos up? There are a ton of photos I would never want synced automatically (multiple shots of one thing where I'm going to pick the best, normal shot vs Instagram shot, screenshots from my phone, images saved from email or the web, etc).

Not to mention I can't get into the apps settings without letting it start to auto-upload thousands of pictures to check if it's going to do it over wifi-only or use my data.
Agree. I use both the news feed and the chat. What, now I have to have two apps? Fuck you Facebook.