skysight-inc/HackerNews huggingface dataset:
Big changes in approach are inevitable in early-stage companies: things become apparent after 1-2 years that weren't initially. Early stage companies involve so much uncertainty that trying to stick to a plan for the sake of sticking to a plan is folly.

His numbers are in a different context; but I get his point. Venture investing is a portfolio business; you fully expect a high failure rate.
Tesla Plans Model S Corporate Leases With New Finance Arm
Sorry - I had logo, and the turtle robot's that run it, mixed up:

http://en.wikipedia.org/wiki/Turtle_(robot)

I was comparing the turtle robot I used when I was younger to the Robotiky robot (I appreciate that it is also possible to build a very sophisticated turtle robot).
Well, that seems obvious in retrospect... ;) Yes, that works.
I think that many designers have made contributions to open source though not directly contributing to a projects codebase. The things that come to mind are icon sets, background images, gradient slices and fonts. The icon set used in Bootstrap serves as a perfect example.

> Glyphicons Halflings are normally not available for free, but their creator has made them available for Bootstrap free of cost.

This is a situation that the designer has specifically contributed the asset to the project. Though I believe the more common situation is for designers to have assets on their website available for use and discovery by anyone, rather than tied to a project.
That would be possible. Just link the Facebook image to the link that points to the checkout at snappycheckout.com.
Thank you for that detailed advice.
I think it's also possible you are getting a false positive, because it's timing out or whatever. The newer version of that check tells you if it's timing out.
Imagine no SSL encryption, it’s scary if you try
> It's presumably useful and convenient (from a language writer's perspective) for iteration of a mapping to be along the keys in whatever order they may be traversed but if that's all it comes down to, why should a mapping be iterable at all when there is obvious ambiguity in what may be iterated?

Its iterable at all because early python didn't have generators, so iterating over dict.keys() would be inefficient for large dictionaries (since you would create an intermediate list just to iterate over.)

> Maybe there is some history I'm not aware of where the .keys(), .values() and .items() methods were introduced post-hoc and the previous behaviour was such due to their non-existence and the need to iterate and then index to get all values in the object.

Prior to Python 3.x, .keys(), .values(), and .items() returned lists (rather than generators providing a view on the underlying dict), which would generally be inefficient if the only purpose was to iterate over them once.
I believe what you're describing is encompassed by SSL client certificates. They're supported, but roughly nobody uses them for some reason.
Responding to Heartbleed: A script to rekey SSL certs en masse
Yahoo! vulnerable to Heartbleed, shows clear text passwords
Grep is essentially the slowest way to search content. It has to read every byte. You can do much better with term/field indexing.

Why would you be calling grep from an online application anyway?
I can't figure it out either; i know that if you raise an exception in the area you can edit, it gets caught a few levels up where the toString representation of whatever you threw is parsed into status update info, with newlines interpreted correctly. But after that, even if you input chars that could build a bridge, it's not persisted to the next attempt :/
Mobile App Go Dish Brings Dynamic Pricing To The Restaurant World
Thanks! You can make your own at https://www.coinsayswhat.com/pages/new
https://en.wikipedia.org/wiki/Muslim_conquests
One API to print to all 500 different 3D printers
Thanks, I'll check that out then. Looking for something for calendar fields specifically.
Superhero Elon Musk
Online Android Emulator For Pc : Web Based
"Manymo Web Based Online Android Emulator. Its Offer
Various Online Emulator With Latest Android Version or Different Screen Size. No need to Install Any External Software on Your pc.
"
On the list of reasons to use MongoDB, shouldn't being able to pass over JSON be at the bottom of the list given how trivial it is to pass a mysql row as a json array?
HIRING: EU or US based: Head of Open Source Software (Telecommunications)
OP here. We launched last week after a private beta for about 3 months. Have delivered over 1M NPS surveys. Roadmap over the next 3-6 months is really exciting and opens up a lot of possibilities.

Any and all feedback is welcome (site, app, usability, random questions or thoughts, etc). Thank you!
The Guerilla Skepticism on Wikipedia people may be of assistance in following the rules and making sure your edits are sufficiently scientifically skeptical. http://guerrillaskepticismonwikipedia.blogspot.com/
It's indeed a bit weird, but I think it reenforce the idea that the spinal chord is an extension of the brain, not just a communication channel.
How is it possible to have aggregation cursors without crunching the complete data set in advance (aka map/reduce) and still have consistent and correct results?
10 IMPORTANT TIPS FOR FINDING VC FUNDING
The change being made to python exists to enable the fix preferred by much of the community to the API fragmentation problem that exists among python numeric libraries given the need for both convenient matrix multiplicationa and convenient elementwise multiplication.

Since its a fairly dominant application area that is pretty key for Python (there's a reason there are so many bundled python distributions that include the common scientific/numeric libraries, and that those environments are often chosen as pedagogical tools even for general-purpose programming), making a fairly modest language-level change to enable a clean resolution to this fragmentation is a sensible thing to do.
WhatsApp becomes a virtual carrier in Germany with the help of E-Plus
The vast majority of people haven't logged in to LastPass.com in the last two years, since OpenSSL has been vulnerable?
Securing an HTTPS server (2009)
Seems they were pretty fast: https://status.heroku.com/incidents/606#update-1970
They don't know for sure, but this is the hypothesis from the paper: "Anatomical connections may have persisted after the injury that were previously 'silent' because of loss of conduction as a result of disruption of myelin or the ionic channels of the neurons."

Basically, the electrostimulation is allowing damage neurons to function.
Ask HN: How do you quantify happiness when looking for a job?
I want to open by saying that, of course, it's not possible to quantify happiness. And when looking for a job, happiness a) means different things to different people, and b) is worth more to some than others vs. other factors of a job.

So I ask this question not expecting some magical formula. I'm just trying to gather from the HN community how different people weigh happiness as a factor amongst several other factors when comparing two or more job opportunities.

For example, I may be looking at two similar but different job opportunities. And of course, a third option is to just stay where I am (or a fourth, continue looking for other opportunities).

When comparing all of my options, I've quantified as much as possible the easy stuff: base pay, PTO, 401k match, stock options/bonuses, medical premiums, etc. And after doing this, I have a clear picture of how the options compare strictly looking at comp & benefits.

But let's say after getting to this overall compensation value, job A offers $25k less than job B, but job A seems to have a better overall culture and the work sounds more enjoyable vs. job B.

How would you (not how should I) decide whether the happiness you may get from job A offset the $25k you would lose? And if you decide $25k is too much of a cut, how would you decide the amount of loss that you would be willing to live with for the benefit of a certain level[1] of more happiness?

[1] And just to clarify, I'm not talking about extreme misery vs. extreme bliss. Maybe job B would still make you happy, just not quite as much as job A.
Uber-libertarian Peter Thiel praises $12 an hour minimum wage hike
A guide to choosing the best gems for your Ruby project
He buy nigeria.ng and is surprise it was taken away...

How did he even things it was right he get it in the first place? Domain squatter hurt the web and for once one get hurt back.
It is possible and has been for some time. Like many other PKI systems it is a pain in the ass to configure on the server (atleast it was with apache) and teaching/getting users to generate keys is a nightmare.
I installed keepassx through my distro's package manager.
Attack of the week: OpenSSL Heartbleed
Multiple Sclerosis and Marijuana use
Could High Frequency Trading Have a Stabilizing Effect on the Market?
I hate with a passion their admin interface. It sucks so much, they had to add a GPS on it to gives directions on where to click to do something. No kidding.
These days it would probably be better to use stud (https://github.com/bumptech/stud) than stunnel; cperciva even did a security review of stud. And for the majority of us running Linux rather than FreeBSD on our servers, Docker would be good for this kind of thing.
But rails is written in ruby. So it can't have security bugs, right?
LLC protects your personal finances and is always a good idea once you reach the stage of a 'serious business' that might be sued by its customers. [e.g. $1000 or more MRR]
Makes sense. I'm all for making things easier. There is no reason why I could not charge the 50 cents for Stripe charges immediately. And, then come back and charge 50 cents for any PayPal transactions (if any) at the end of the month.
Why are the 8 photos they show just zooms/crops/edits of the first? Until there's another photo from a different viewpoint or some sort of official statement, I'm chalking it up to a photographic artifact. Occam's razor, people.
Probably less. The average electrical engineer working during the 60s probably had to have a far better handle on characteristic curves of tubes and transistors, and therefore physics. Hell, the Apollo team hand-calculated the diffeq's of the moon missions! These days, you are far more likely to rely on and write software for machines that involves very little direct knowledge of math and science. As the tools integrate more of human knowledge, I would expect this trend to continue.
Hacking Our Way to Vector Artwork in HTML5
Okta has finally patched their OpenSSL
Not before everyone's username/password was seen though. Tough to be an enterprise customer of that server, time to reset all passwords and replace all saml/ws signing certs
Typo on the front page:
"This message will change to something else in 5:58 or when someone bids or when someone bids 0.002."

You say "or when someone bids" twice.

Other than that, nice concept.
European court scraps phone, email data collection law
We suspect that most of our winxp/IE<8 traffic comes from people stuck in corporations that haven't/can't upgrade with no privileges on their computer.
> For the `@` operator I will be trying it as an "at" operator for accessing objects from a game map

I suppose you could use it for that that, but wouldn't that be a canonical case for indexing with []?
> Why not put every chance on our side and use languages (e.g. Rust, Ada, ATS, etc.) that make entire classes of errors impossible?

I don't think intentionally preventing the programmer from doing certain things the computer is capable of doing on the theory it makes errors impossible makes sense.

As I've said several times in this thread, somebody has to deal with the pointers and raw memory because that's the way computers work. Using a language where the language runtime itself handles such things only serves to abstract away potential errors from the programmer, and prevents the programmer from doing things in more efficient ways when she wants to. It can also be less performant, since the runtime has to do things in more generic ways than the programmer would.

> Including people responsible for one of the most important security-related library in the world.

I think you've hit on a crucial part of the problem: practically every software company on Earth uses OpenSSL, but not many of them pay people to work on it.

calvinow@Mozart ~/git/openssl $ git log --format='%aE' | grep -Po "@.*" | sort -u -
@baggins.org
@benl-macbookpro3.local
@chromium.org
@cloudflare.com
@comodo.com
@cryptsoft.com
@esperi.org.uk
@fh-muenster.de
@fifthhorseman.net
@fsmat.at
@gmail.com
@google.com
@igalia.com
@infradead.org
@innominate.com
@leeds.pl
@linaro.org
@links.org
@neurodiverse.org
@openssl.org
@opensslfoundation.com
@pobox.com
@roeckx.be
@secondstryke.com
@torproject.org
@trevp.net
@v3.sk
@velox.ch

I was very surprised how short that list is. There are a lot of big names that make heavy use of this software that are not on that list.
> Over the next five years, Harkema's team applied electrical stimulation to three more paralyzed men...

I understand the statistical reasons for having commonality among such a small sample, but I'm willing to bet that it was four Caucasian men, and it'd be really nice to hear about generalizable research being inclusive of minorities (e.g., 4 Chicana women instead of 4 Caucasian men) earlier in the research process.

Regardless, it's pretty amazing research and I hope they can overcome the current limitations soon!
As for re-issuing certs Namecheap is sucking in that department last night and today (it could be upstream with RapidSSL and PositiveSSL). GoDaddy seems to be speedy even though it looks like the notification emails are not being sent. Fun times :).
On the flip side there is Python on the JVM :)

http://crudzilla.com/assets/img/info-graphics/lang-demo.gif
This is a really great idea, would love if you could embed the message on your own webpage instead of ads, or maybe even see a list of the last bidders. Kind of like what happens on the Humble Bundle site.
A free service for viewing and sharing high-resolution imagery by Microsoft
With such a thin atmosphere, why would a light shining upwards be visible from the side? For a light to be visible laterally like this, you'd need atmosphere for a scattering effect and a very bright light. A light pointing upwards from the surface of Mars should only be visible to something looking downwards.

Concluding that it's intelligent life "using lights as we do" is just a wild claim with no backing. From the evidence it's pretty obvious that it's a holographic projection sent backwards in time from humans in the future.
Right! And for those people who do not want to spend the time coding/maintaining their own system.
> At the undergraduate level you'll get out what you put in. If you confirm computer science as what you want to do and pursue it with rigor, name schools will be an option at the graduate level. One thing about academia is that performance tends to open doors.

Right. If you do well for your Bachelors, with a good GPA, good subject understanding, and a good relationship with some of your professors, you can always get an MS from a better school. Finances may be less of a problem then as you may get a research position or be a TA for an undergrad class when you are getting your MS. For professors you get along with, or if you are particularly interested in their area of expertise, be sure to develop a small relationship with them, go to their office hours even if you don't need to, and maybe they have a friend at MIT, Stanford etc. and can write you a letter of recommendation for them to get into their graduate school.

If you tell people you got your Phd from Stanford and your MS from MIT, where you got your undergrad from is suddenly of much less concern. It's not all about the name anyway, a motivated UF undergrad is probably better off in the long run then an unmotivated undergrad at a slightly more prestigious school. If you spend five months in a class studying assembly and processors and your professor is not so good, read the textbook, write some assembly on your own, read other textbooks and books. I often went beyond the necessary, required reading if the subject was interesting and/or important.

Also look for research lab openings for undegrads at your school. Talk to the other CS students at your school, the department advisors etc., get on mailing lists, go to events, related campus clubs etc.
Where do you think they got the package from?
How do you easily connect to your network from your phone?
Why not put prices and sell the models? It's not clear if you can reuse these or not.
Any VPN provider that you can recommend?
Unsolicited advice: Use the phrase "heavily influenced" rather than "controlled" and "religious extremists" rather than "Zionists and Masonics". They make you sound less like a conspiracy theorist but mean the same thing.
Designing with your customers in mind
This is a great website that should be bookmarked by everyone who cares about search traffic.

It is curious though why this submission got up voted to the homepage and the previous two times it was submitted that it never went anywhere...makes me wonder if there is lots of great content that never gets up voted on HN.

Here is a submission from over a year ago.https://news.ycombinator.com/item?id=5405485
> If you're the NSA, you can probably get a CA to sign a cert for you, no need to steal theirs.

That would leave a trace (at least the person issuing the cert would know) while heartbleed doesn't.
And it's more convenient than trying to use Stripe & PayPal separately. There are also features (like fraud detection, digital delivery, etc.) that Stripe & PayPal do not offer -- and probably never will.
I see a funny thing when I test it against yahoo.com:

$ ./Heartbleed yahoo.com:443
(bunch of returned bytes)
2014/04/08 12:59:46 yahoo.com:443 - VULNERABLE

Near the front of the returned bytes is the sequence "yheartbleed.filippo.ioYELLOW SUBMARINE". That is some padding buried inside the Heartbleed source code.

I assume that the returned bytes are a peek inside the memory of a yahoo.com server, and we can see the padding supplied by Heartbleed, followed by some more bytes that depend on the server state.

Am I interpreting that correctly?
I misread "This could indicate there there is intelligent life below the ground and uses light as we do," Waring wrote on his website. "This is not a glare from the sun, nor is it an artifact of the photo process." as being a statement from NASA and not from some random UFO web site.
Yeah, that's exactly what I thought at first, too. But I guess it's just an example on a simple game to show how you'd do more complex applications with Angular.
17 year old suspected to be creator of BlackPOS malware
That's exactly something that an app compatibility shim should fix.
Attract new users and engage existing ones
I wouldn't necessarily say it's a bad idea, I'm just saying it's equivalent to using lastpass since it's a third party hosting your data. I think the usability of a third party syncing service is worth the potential risks.
With code, there's a certain attitude of "I need this, so I'm going to make it, but I have no intention of ever productizing it so why not share it?" It's a massive "give a penny, take a penny" jar that enriches the entire software ecosystem.

The analogous situation for graphics design would be something like textures & Photoshop filters. Or icon packs. Or fonts. Which you can find lots of for free (sometimes even with useful licensing attached).

But who the heck is going to come do free graphics work for my new Flask extension when they don't even use Flask, or understand what it is, or have any motivation beyond "hey come do free work for me"?

On the other hand, you have cases like the current mpld3 logo update. The project's author asked for help with the logo on Twitter, and got 6+ solid responses back. People are glad to help if they have the skills to do so and if they're part of the project's community. Design vs. development is not relevant, only relevance is relevant.

https://github.com/jakevdp/mpld3/wiki/Logo-Proposals
The difference is that in scala, expressions of the form foo bar baz in general are desugared to foo.bar(baz), and symbols are allowed in method names, so every arity-1 method defines an infix operator, and you don't need language-level changes to add new infix operators.
Yea, I wouldn't call "Scott C. Waring, who maintains the website UFO Sightings Daily" a reliable source. Just look at that site. I'll give you some of the headlines...

Giant UFO Near Earth In Photo Released by Brazil Planetarium, March 2014

Alien Saves Mans Life In China Car Accident, Sept 2012

Updated: Alien Face Discovered By Mars Rover Feb 2014
It's not that easy. I worked supporting Virtual IE6 users and they use it in the context of a Java based internal web application or a web application which requires some specific ActiveX that only work with IE6. In general, to migrate these applications are a nightmare and the IE6 is only connected to an internal site, it never connects to internet.
I've seen a few versions of this comment. You are stating your interest in converting a single family house into a hotel, and then stating that you see no reason why you shouldn't be allowed to do this.

I disagree. While I understand that renting out bedrooms on airbnb is a far more profitable use of a single family house than providing a place for your kids to sleep, I purchased a house in an area zoned for single family use. When I purchased, I traded my right to turn my house into a hotel in exchange for a legally enforced expectation that the neighbors I share a wall with won't do this either.
Great!

./heartbleeder zapier.com

VULNERABLE - zapier.com:443 has the heartbeat extension enabled and is vulnerable to CVE-2014-0160
This is always best practice for anything important unless you find your life is dull and bereft of emergency.
Thanks! The site is build on top of a JSON api that would definitely allow this. This is sort of a "proof-of-concept" version, but there's a lot you could build on top of the concept.
In this case I think it's mostly unnecessarily verbose.
Shifu: A Smart Way To Manage Your To Do List On Your Smartphone
The point isn't to make a clean copy of 2048. The point is to show how you build Angular apps and organize code for something more complex than a simple todo list app.
How API-First Development Boosts Productivity
clearly the tardis.
Level 5 should have more mines.

With only 75, the level is easily solved via https://en.wikipedia.org/wiki/Big_sky_theory
Snowden Speaks
Hackable home automation controller runs Android
I'm not sure you know what an ME degree entails.
Seeing as how the other camera on the rover did not capture this "light" (as seen clearly in this GIF: http://i.imgur.com/LQa9PLU.gif) it seems pretty safe to assume that this is just an artifact caused by a temporary glitch on one of the cameras.

Here are the two source images taken at the same time by the rover's two cameras:

http://mars.jpl.nasa.gov/msl-raw-images/proj/msl/redops/ods/...

http://mars.jpl.nasa.gov/msl-raw-images/proj/msl/redops/ods/...

But of course disreputable "news" sites bring in a UFO enthusiast as their source for a quote about the possibility that there is intelligent life below the surface.
I'm curious if anyone has developed a plugin that is able to capture meshes and textures displayed through WebGL? If your graphics card is rendering these things, the data is obviously there, and one should simply be able to dump a few vertex buffers.
A JavaScript Quiz (2010)
Android is on the way!
With JITs you get devirtualization as well, so no need for vtables.

Something possible in AOT as well to certain extent, but it requires a mix of profile guided optimizations coupled with whole programm analysis.

Which have issues with dll/so anyway, as those calls cannot be optimized away as in JITs.