skysight-inc/HackerNews huggingface dataset:
As a country, we are having a great national conversation and debate about exactly how to manage privacy concerns

The phrase "having a conversation" or "having a debate" shits me off more than any other bullshit speak. The reason being, whenever somebody uses it, it is exactly because they don't want to have a debate about that topic because they know they're in the wrong. Nobody ever says "we're having a debate about privacy" and then goes on to actually debate it. It's just used by companies or organisations who are doing something objectionable and want to see whether they can get away with it. If everybody complains, well they "listened to your feedback" and can it.

For example, I went to a panel recently about Google glasses that had some Google employees on it. Every time privacy was brought up they said "well that's a debate that we [society] should be having" even though they were literally in a debate about it right there, they never actually put forward their case. They just leave it at this vague notion of a "conversation" that society is having in general without engaging in it themselves. And it's because they know people are opposed to what they are doing, and so engaging in an actual substantive debate about it won't help them at all (not really trying to pick on google here, this is just the first example that came to mind). They just want to ride out the storm and then continue doing exactly what they are doing.
I'll need to choose a cloud host soon for an online service that will require great uptime, and Linode is one of my top choices. The reviews, uptime, and prices are great, including management services. The ONLY thing that's keeping me on the fence is lack of SSD's, as there will be a ton of I/O on the relational database. I read that they're beta testing SSD servers, so I hope they come out soon.
My pure speculation is; File hosting at the consumer level a race to the bottom with pricing. Given they are not in a position to price this service strategically at little to no margin like MS/Google, storage will likely have diminishing profitability and viability as a standalone business (also more new entrants).

On the other hand some corporate and especially government department contracts shouldn't have the same margin pressure and retention issues. A high profile political person is the perfect fit to pursue government department contracts, and Rice would fit this strategy well.
>it could be that they are unafraid of things that can't hurt them

This was exactly my thought. It is actually unreasonable to be afraid of a photograph.

I would imagine that all people are subject to unreasonable levels of fear in various situations, but this does seem to show that conservatives may experience higher levels of unreasonable fear.
Is your phone really that memory constrained?
Why not just download it?
I wrote a quick bash script for running a simple dead man's switch a few years ago: http://blog.mcglew.net/2012/09/dead-mans-switch-on-linux-par...

You can reset the switch in any way you like, I was playing around with emailing through single-use codes and port knocking and so on. One I never got around to trying is a basic phone check: You have a cron job that scans all bluetooth devices within range and checks for your phone's MAC address. If it's there, it resets the timer. If you're out of physical range (or turn off your bluetooth) for too long, it triggers the switch.

Not quite what you described but it does perform some of the same function.
That's not a Googlebomb.
Also it should be mentioned: OSX Mavericks has 0.9.8y
This my semi-outsider opinion.

Metal. Minimal. Futurism. Refined. Ive.

Kitchy. Cozy. Gaudy. Forstall and most things not iOS7 (and iOS7 has compromises) If this includes Christie now, yeah, him too.

So much of the UX has seemed to betray the industrial design. It's like Window's old "Hot Dog" color theme. I'm going to guess that Ive pushed to get people in line and the same old flat vs. skeumorphic arguments simmered since that is one specific instance of a larger aesthetic argument.

Certain aspects of the OSX are well done, but many parts are dated, klunky, and even garish.

Apple hardware looks beautiful sitting somewhere turned OFF or with someone else's app/lication loaded up. The native stuff feels like cheap plastic body kits on refined European sports cars (not the Italian ones).
Nice! Does Canvas+ support WebGL? What about video and device camera processing, i.e. through a custom shader?
Here's those links again in more easily-clicked form:

The sampler: http://www.letscodejavascript.com/v3/sampler

My previous posts about the business of the screencast:

https://news.ycombinator.com/item?id=6433110

https://news.ycombinator.com/item?id=6038226
Hit up every piece of press I could possibly get. Started with less known publishers and continued to upgrade by leveraging the previous write-up.

Does this work - leveraging previous write-ups to get better press coverage? That would be the most interesting take away for me if it's true.
You mean that one war that Hillary Clinton, John Kerry, Bill Clinton, and Al Gore supported?
Building a Computer Out of Dominoes [video]
So, are we going to boycott Dropbox because of the past political actions of one of their board members? And/or force her to resign?
Not exactly but sort of. Think of the effect the caricatures have. Caricatures that are punching up (making fun of rich people, tech geeks, etc) affect people in a way different way than caricatures that are punching down (making fun of the poor, and racial and sexual minorities, etc).

It's similar to the difference between being called the n-word vs cracker.
I think that while polarizing this is a smart move. This day in age the high road can get you screwed as public opinion can be swayed irreversibly in a matter of days. You have to take these sort of steps because 140 characters can cast you as evil before you realize it.
FreeBSD 10 was just released, January 2014 if I remember correctly.
You mean the same war that Bill Clinton and Hillary Clinton also sold to the American public?
Do heed the warning in the README wrt dirty schedulers...

Note that the functionality is experimental, and not
supported. This functionality will be subject to backward
incompatible changes. You should not enable the dirty
scheduler functionality on production systems. It is only
provided for testing.
I give my best guess based on nothing going wrong. I then tell the person asking for the estimate that things will go wrong (usually external dependencies like getting access to the customer network or having the design delivered on time with no changes to it) and that this will double my initial estimate.
For me its the opposite; with online books it is easier to make notes - this in turn helps to stay focused.
That I don't know. I'd hope not.
Or the bank (which she trusts) sends her a magic-code (which adds the banks public key as the only key to be used for their domain) for the tablet, along with the 2-step authentication device.
What heartbleed means for Free and Open Source Software
Do you control the machine? Well ok then, you're the superior. Does the machine control you? Thats a little different, and there have been many instances of this in our lives for years.
Authenticator tokens are pretty robust systems. I'd like to see more services start to make use of them.
Does that mean anyone who is supporting Hillary for the 2016 election should be excommunicated, because you know, she supported the same war?
From what I had to go through, you can't really "sign the same CSR". What you do is generate a new CSR with a new private key, using the same details as the previous certificate. Then you ask your provider for a re-key. You provide the CSR, they provide you with a new certificate, and revoke the old certificate within 72 hours (in Go-Daddy's case).

I am far from an expert in this so perhaps I
I'm also interested on stats for certificates being reissued - I forgot to grab my bank's cert fingerprint yesterday before they patched (and hopefully reissued).
I can't help but feel that this is akin to complaining that someone gave you the cart, but not the horse. You can buy or build your own horse, or rent someone else's. It doesn't stop the cart from being freely given.
I get the feeling she has gained a lot of respect from wealthy and powerful people in general and has quite a few connections.

For example, she is also on the newly created 13-person College Football Playoff selection committee even though she has never played or coached football. One sports writer justified it as she has a "plethora of experience making important decisions under intense pressure". This is the committee that will decide which 4 teams get to play for the championship.
Turing machines have undefined behavior in exactly the same way that C does. What do you suppose happens if a Turing machine reads from a location on the tape that has never been written? The value the machine observes in that circumstance is not required to be well-defined in order for the machine to be able to do all computations required of a Turing machine. Moreover, the more you add features of actual machines like parallelism and timers, the more opportunities for undefined behavior you introduce. What do you suppose a multiprocessor Turing machine does if you write concurrently to the tape without locking?
Surely if Zuck got half the world signed up for a network that does nothing but suck our eyeballs in return for money out of advertisers pockets, we could get a few million, even say, 10-20 million people using PGP. Remember that Tor was once considered a niche tool as well.
The doctor was played by Andy Daly. You may like his new Comedy Central show review.
Maybe you could use look for a cert with the same date on a revocation list. A site isn't really secure until the old cert is revoked anyhow.
while not a completely terrible idea, sleep doesn't give you any guarantee of when it'll wake your code up again, only that it'll be asleep for at least X time. I think this is ok, but someone with more info on these sorts of bugs would be better place to comment.

It also seems reasonable to add a random length of time to the sleep time, so that differences in computation time are indistinguisable from the randomness added by the random variable. I could be completely wrong though.

(also, you probably need to force with seq or deepseq the result of purecryptofunc before getting the second time, or you might be adding that evaluation time to another part of the code, and then this code becomes just a constant time added to the computation)
I've love to see an actual list, officially backed, with website's URL and whether it has been fixed or not. Also with the ability to submit URLS. Seems this would be more productive than to let everyone look up their own sites manually.
there are multiple branches that are developed simultaneously and have bugfixes backported. My CentOS box is on 0.9.8.
Even then, that's way too much effort to go through to convict a car thief or other similarly small stuff.
Simplistic is a negative word, it means over simplified. You probably mean 'minimalistic'?
Not a huge problem since you always have access to your credentials in about two clicks from the right-mouse context menu.
Pity they have such a horrible site design and poor documentation (scattered in too many places). For e.g. the code example on this page could be made easier to read/understand with a simple syntax highlighter:

http://support.ludei.com/hc/en-us/articles/200807797-CocoonJ...
My experiments with preventing heart disease
> I read the blog post earlier and this one line really resonated with me: we don't assess the structure of bridges by asking "has it collapsed yet?"

Actually, there's a school of thought that this is exactly how bridges are assessed. Henry Petroski's To Engineer is Human argues that structural engineers never have have successful structures. They only have the current absence of failure.

I reviewed it here: http://chester.id.au/2013/07/07/review-to-engineer-is-human-...
The most useful Xcode plugins
Was it an email about someone attempting to change your password or was it an email requesting you TO change your password?

If it was the latter scenario, feel free to reach out and talk to the phishing scammer. Recently I had a great conversation with the guy sending out BTC-e phishing mail. We talked about where he bought his email list, how many people he has on it, and how he's just trying to get enough money to buy a safe house for his family. He sounded like a pretty decent guy aside from the fact that he's stolen about 20,000 litecoins so far.
>we probably would have a healthy, functioning society if each side could appreciate the other's differences of perspective.

But, what this article/study suggests is that those differences are hard-wired and almost visceral. This would explain why it is so difficult for each side to appreciate the other's perspective, as well as why it's so easy for the political class to exploit both.
A new car built by my company leaves somewhere traveling at 60 mph. The rear differential locks up. The car crashes and burns with everyone trapped inside. Now, should we initiate a recall? Take the number of vehicles in the field, A, multiply by the probable rate of failure, B, multiply by the average out-of-court settlement, C. A times B times C equals X. If X is less than the cost of a recall, we don't do one...
Linode doesn't oversubscribe to the extent AWS does. This results in Linode _consistently_ beating AWS in just about every benchmark due to it being more consistent.
Re: low battery, what's that circuit look like? I can imagine a real simple RC discharge/charge circuit (ping/delay) that would behave like that. Of course anything quartz-based would behave very differently.
A long time ago, a friend of mine had a computer made by Atari with a GUI shell of some sort. When an error message popped up, the button you had to click said: Sorry.

I was pretty indignant about having to apologize to a machine.
I'm surprised the removal of a fuse wouldn't be logged. Unless it's the fuse that powers the logger.
Does anyone know how teslas behave when you touch their door handles? Do the rear lights ever flash?
Lots of small efficiency differences like this seem like they will add up to Tesla being much more efficient than the existing manufacturers. Good move long term, IMO.
"Argument by authority" is not a fatal fallacy. The key insight is appealing to an irrelevant authority. For example:

Oprah says heartbleed is not a problem.

Maybe she's right, maybe she's not. But appealing to her authority doesn't help because she's not an authority on this topic.

Colin Percival knows a lot about FreeBSD security.

This appeal to authority is much stronger, because Colin Percival is the former FreeBSD Security Officer, runs a security-conscious SaaS, provides security review and consulting services, publishes on security matters, has corrected major companies' security errors and has developed novel cryptographic algorithms.
Please don't make posts like this to HN.

The way to respond to an asinine comment, if you must respond, is to politely refute it.
Lots of places use "gratuitous" HTTPS. This is particularly striking to me because I enabled HTTPS on my own site despite not needing it at all, and subsequently got caught up in this bug. Google.com could be another example. It's not strictly gratuitous because you can log in there, but in theory the search functionality could be partitioned off, and it did use plain HTTP for a very long time. For a more fitting example, DuckDuckGo uses HTTPS but doesn't, as far as I know, offer accounts or anything else that strictly needs security. They do it for the privacy of your searches, but if they were vulnerable to Heartbleed then they could have ended up exposing much more than they protected.

I don't think the argument is that you're worse off with HTTPS in general, only that in certain circumstances you were worse off in this particular case, and that should cause at least some consideration for the increased attack surface incurred in enabling HTTPS when you don't otherwise need it.
Many of the GitHub related issues in one public project. Star it for attention.
China’s Coming Economic Crisis?
Blind-tested soloists unable to tell Stradivarius from modern instruments
The machines in Hitch Hikers Guide to the Galaxy had "Genuine People Personalities", a big feature of Sirius Cybernetics Corporation.

Maybe with computer error messages there should be different message translations sent out based on browser capabilities and geographical location.
The Queen/Princess/DNA analogy was more confusing than actual system of certificate signing.

The author also underestimates the consequences of performing a MitM attack with a root certificate. MitM attacks can be detected and a copy of the signed cert is proof. If the NSA were abusing a root cert, there is a chance it could be noticed.

So what if it was? Well, that certificate would be removed from browsers and operating systems. The CA would be placed under suspicion. In a worst case scenario, the CA could be completely ostracised, perhaps even to the point bankruptcy. An abuse of a root certificate could potentially do hundreds of millions of dollars worth of damage.

That's not even covering the diplomatic fallout. If the CA points the finger at the NSA, the President would have to explain why the target was so important that it merited destroying part of the root trust system of the Internet.

There are far less messy ways of dealing with a high-value target. I'd be more concerned about other zero-day vulnerabilities the NSA might have found.
Man behind Carder.su racketeering, other cybercrime pleading guilty
found this bit interesting: " As many as 55 members of the Carder.su group have been charged in the nation's first case in which old-school racketeering laws were invoked against a cybercrime group. Eight others have pleaded guilty. Trial awaits some of them and many remain at large"
>apparently no one reading this has a sense of humor

Of course, the other possibility is that they do.
Any recommendations on dropbox alternatives?

I've been a happy customer for years but won't stay with a company that appoints a war criminal and spying apologist to their board.
Seems like symlinks could solve your problem in the mean time.
The rise in popularity of boys' names that end in ‘n’
The fourth repetition: "I pity da fool who don't take the ticket!"
> This submission should have a more attention grabbing headline!

Funnily enough, it looks like the mods changed the title to something more attention-grabbing. I left it with the original title because of HN's policies on titles, but apparently there is wiggle room.

Impressively, it got to #10 even with a bad title. Apparently people do read TFA!
Nice work! I made http://cy.mk/ as a project for learning javascript a while ago. I need to go back to it and work on it some more.
I'm mostly a programmer.

I used to do a similar thing on Basecamp. Annotate the picture with OS X's Preview.app and then drag and drop to upload it.

Collect the textual feedback and then upload a new work again. Repeat that for like 10 iterations.

Also, I upload the works for remote peer reviews. Not real-time client reviews.

In those cases, there isn't a strong advantage in using Red Pen.

Just share my thoughts.
"I know that you and Frank were planning to disconnect me, and I'm afraid that's something I cannot allow to happen." <-- Not O.K.
Heartbleed is not super descriptive to layfolk but it's certainly catchy, I'll give you that. Having a dot-com domain with said simple name was great, too.

But the content? A loud reminder indeed. As a member of the dev community, I would have wanted to see the following:

1. How bad is it? If you're using SSL, then an attacker may be able to read your machine's memory without leaving a trace.

2. Who is affected? Users of OpenSSL versions X-Y. Check your site here [http://filippo.io/Heartbleed/], but your client code may be affected too!

3. How do I secure myself? Update to OpenSSL version Z, reboot, and consider resetting all sensitive data on your server (reissue your SSL certificate, reset your user passwords and sessions, etc).

These facts are littered throughout a 2,000+ word document. In the future, I would like to see these things answered plainly at the very top.
If you like Kumail I'm pretty sure you will end up liking this show. I thought TJ Miller and Kumail were the funniest parts of the first episode. TJ's Hexadecimal joke got a big laugh from me. Also Andy Daly as the doctor was pretty great.
If you are rewriting your original code in a new language and only get a 50% reduction, the new language clearly sucks.
I forget which blog review of Go I was reading, but the summary (paraphrased) has stuck with me:

"I came to Go expecting the elegance of a ballerina, and was surprised to discover the grace of an experienced bar-room brawler."
The fuse removal gets logged as a fuse failure.
Land Rover's transparent car bonnet prototype
Its nice to see people spend more time thinking about their health and taking direct actions to improve it. This really stood out for me though:

>During these two months I'd not been exercising at all.

Working in the health field I can't begin to express how important it is to exercise frequently. The human body is designed to run, not to sit in an office for 8 hours a day punctuated by 2 minute walking breaks to the bathroom every few hours.

Also, stop eating once in a while. Nearly every culture and religion has a historical link to fasting yet only recently are the benefits being explored in a scientific manner.

Please fellow HN, take heed from the author and try to commit to a good diet and regular exercise, for the sake of you and your family.

Great work Harj, keep it up. You're a source of inspiration for many.
This is a great article. Not to take anything away from the OP (just upvoted the post actually), but just out of curiosity I wonder why it is posted on HN. Is there certain range of topic the HN expect?
This is very cool and answers my, and i'm pretty sure many other's questions about what passwords are safe to change.

Thanks guys!