skysight-inc/HackerNews huggingface dataset:
being on github and using https doesn't guarantee anything, obviously.

If you look at the actual script it contains a ton of sudo and also additional curl commands. The chain of security is very lacking.
Ask HN: Math books like SICP?
I'd like to start learning undergrad math at a rigorous level.

As a CS grad I already covered certain topics like abstract algebra at a respectable level. But I'm lacking consistent and broad knowledge throughout all areas.

I'm looking for math books covering undergrad topics like SICP, which Peter Norvig described as "[...] a way of synthesizing what you already know, and building a rich framework onto which you can add new learning over a career" [1].

[1] http://www.amazon.com/review/R403HR4VL71K8
Well, I've written about thirty million words on the subject, but I don't think it will take me 12 years to implement an initial prototype, more like two and then several years for all the tools that I want to make with it which will come to define its API, it should evolve over time with only me using it - I don't want to find myself in the same situation as Dennis Ritchie and Bjarne Stroustrup when a redesign was impeded by their early versions being adopted by comparatively few users and want the total freedom to change the design of my language if absolutely necessary with it only breaking code that I have written with it myself. Indeed, the likelihood of me making my language public is quite small as I know how every new language gets a hostile reception on here, Reddit and Slashdot. Really, I'm only doing it to help solve my own problems like Larry Wall did with his Perl scripting language.

If I had started implementation sooner I would have made something naive and half-baked. I did not have the benefit of a formal education in Computer Science and I probably wouldn't have attempted a project of this size if I had known all of the work that was involved. Walter Bright wrote a compiler by himself and Paul Woakes wrote Mercenary unaided and Elite was made by just two people, with David Braben on graphics and Ian Bell doing the trading (okay, three if you count the novel included in the box by Robert Holdstock), but that is still just 1% of the staff of a Ubisoft game like Assassin's Creed employing a whole bunch of artists, animators, scriptwriters, voice actors and composers for an estimated thousand man-years to create its content-rich high production values - all of which can be circumvented with procedural content generation as in No Man's Sky (initially, just four developers), and supplementary user-generated content such as or the seven million user-created levels in Little Big Planet, or about seven thousand competitive Halo 3 maps on the Forgehub community website.

Rather than waste mine and everyone else's time "doing the sensible thing" and writing another Tetris clone, I've gone and jumped straight to what I wanted to do, mindful that I will need productivity boosting tools in order to make it and that to write those all by myself I will need a highly productive exploratory programming language and that in order to make THAT it would help if I knew what the hell I was doing and did PLENTY of preparatory reading so that I didn't go in to it uninformed.
http://guardianlv.com/2014/03/crimea-referendum-34-percent-n...
Cryptocurrencies as a force for good, not greed
Let's help them try it out the right way. For instance, here is an example I wrote using Spock (which is built on Scotty), Spock-worker and SQLite:

https://github.com/openbrainsrc/makeci

I'd love to see other people's Scotty/Spock projects.
https://github.com/popcorn-official/popcorn-app
http://get-popcorn.com/
Don't know how much this is "official"
Gah. Where does this 'CEOs are mere employees' meme come from?

In any case, board members are most certainly not 'mere employees'.
Did you personally take part in the fighting in WWII? If not, how can you say that Hitler was a bad person?

(Deliberately invoking Godwin, because that's the level of logic I'm responding to :P )
I'm with you when you say the hate on the developers (especially voluntary devs) is completely undeserved. What really baffles me about the whole debacle is how it's possible that software so widely used and of this importance is left mostly in the few hands of people who want to contribute. I get it that crypto is hard as hell and especially SSL/TLS requires skilled workers, but what I can't understand is why in all these years nobody stepped up and tried to start a collective effort to either fork the project and start a sweeping refactoring or start a completely new project with better foundations. You may argue that it's grunt work and nobody wants to do it, but if your company relies on this sensitive software is in your interest to put money on the table and pay people to do this kind of work.
Feminist framing and general equilibrium theory
This part is amusing:

THE PARTIES

4. Plaintiff Tobias Frere-Jones is one of the world's leading and most recognized type designers, having designed over 800 fonts, in over 145 languages, that are widely used in newspapers, magazines, advertising, packaging, websites, corporate identities, political campaigns and websites around the world. He joined the faculty of the Yale School of Art in 1996 and frequently lectures on typeface design and
typography at other academic institutions and graphic design organizations throughout the world. His work has been profiled in many trade and general purpose publications, and is included in the permanent collection of the Victoria & Albert Museum, London and the Museum of Modern Art, New York. In 2006, Frere-Jones became the first American to receive the prestigious Gerrit Noordzij Prize, presented by the Royal
Academy of Fine Arts in The Hague in honor of his unique contributions to type design, typography, and type education. In 2013, he received the AlGA medal -the graphic design profession's highest honor-in recognition for his exceptional achievements over the course of his career, and his contributions to the field of design and visual communication.

5. Defendant Jonathan Hoefler is also a type designer and a businessman.
Lisp on the BeagleBone Black
Volcally – Volunteer Locally. Get Rewarded.
I agree, but why not use, say, a library? The Library of Congress comes to mind. Perhaps the National Archives would be appropriate as well.
Good question re: TIOBE relevance.

I check it out more for language trends rather than fixed position; i.e. is language X on an upward or downward trend.

Scala, for example, is my daily dev. so not thrilled to see it trending downward o_O

Assumed Haskell would be trending upward along with F#

Food for thought regardless...
There's no real alternative offered here.

I understand there's a whole 'open' and 'small' world out there and I can learn lessons from my peers, but if I'm not supposed to be 'working hard for my boss' in the modern corporate world, what am I supposed to be doing to 'get there eventually'?
Toast sweat killed my uncle. I'm glad someone is finally fighting back.
Not sure why you're getting downvoted; it's a legitimate question.

I'm not sure OpenSSL is really a good match for that. I've never really studied this, but my impression is that open-source companies fall into two categories:

1) Very small consulting companies built around one or a few passionate people that scrape by rounding up contracts for specific features that businesses want, and

2) Larger companies that provide a substantial set of services around an open-source product (e.g., Chef, Puppet, RedHat, Ubuntu).

OpenSSL definitely doesn't match the latter, and I don't think it's great for the former. Having done consulting for years at a time, it's a giant pain in the ass. There's no reason to think people who are good at this sort of coding really want to spend half their time on sales, or would be good at it if they did. And adding features to OpenSSL is exactly what got us into this trouble.

This strikes me as the classic case for a tax: benefits are modest but spread widely. If you could painlessly charge each user $0.01/year, you could fund this work no problem. That leads you into all the issues you get with taxes, of course, but in this case I don't think they're obviously larger than the issues you get with capitalism.

It's a shame that the US Government has totally burned their reputation with security-minded techies, or they'd be an obvious way to collect and distribute, say, $100m/year for valuable internet infrastructure. Maybe this is a chance for Europe to step up.
Or you could put a piece of kitchen towel on the plate.
Great Products Seem Obvious in Retrospect
If you understand a vulnerability, you can often tell for sure if it can lead to exposure of private keys. For example if a PHP app runs in a separate process with separate user credentials than nginx SSL endpoint, and if file access control flags for certificates are configured correctly, you can tell for sure that php bug alone won't allow for certificates access. This of course assumes that other components work correctly (like Linux access control mechanism), but without such assumptions you wouldn't be able to do anything productive.
TLS Triple Handshake Attack
You're saying the current day USA-Mexico border is the limit of where any pre-columbian Mexicans ever inhabited?
Every CA that motivates cert owners to rather not revoke certs if they get compromised, should not be a trusted CA by anybody. It's that simple.

StartCom's been doing this for a long time. This is what makes them dangerous. It does not make them any more dangerous now than before.

Even if StartCom made an exception in this case, it should not change anything. Because even without hearbleed, certs still get compromised and StartCom's standard practice is to motivate owners to keep using known compromised certs.

Why does anybody trust a CA with this policy? Why is StartCom included in browsers and OSes? Why isn't anybody removing StartCom and CAs with similar policies from trusted CAs?
TechCrunch does some reporting on startups, so I look there.

I also have an account on https://lobste.rs, but I don't really use it.
I think the main reason is because it's just two industrial designers with no connections to any of the NGOs necessary to get the $500k worth of build-money and probably another $500k to $1.5mm worth of "let's make this happen" money.

Look at the front page of the website it's posted on: http://www.architectureandvision.com/ Half of the stuff there is made-up concepts, not real actual things.

If we were seeing this on the water.org website then yes I would absolutely agree with you that the two units as a "goal" is ridiculous. But since it seems like they have no serious funding yet and plane tickets to Africa aren't exactly cheap I think two units is reasonable.
I think the saddest thing is how incredibly short the list of OpenSSL sponsors is.[1] Every major internet company should be on there—throwing thousands of dollars at this is far less than they lose from responding to the vulnerabilities. As a critical piece of internet infrastructure, everyone with a large (monetary) stake in the integrity of that infrastructure should chip in some.

1: https://www.openssl.org/support/acknowledgments.html
"mistakes will continue to be made in code"
Not gravely if professional testing of the open source code is put into place. Yes it might be expensive but critical Internet libraries that serve a variety of purposes—with names such as Apache, Ruby, PHP, SSH and Linux– would benefit greatly from deep assessments.
OpenSSL is less like a library, and more like a framework. You need to mesh your code to it pretty closely to get anything done. All you want is a SHA256? Too bad, here's a dozen things you need to do first.

A lot of what makes OpenSSL complicated is that it covers almost every crypto/algo/protocol permutation (there are lots) and it is heavily tuned to run fast on a variety of hardware.

I like PolarSSL as an alternative. It is just a collection of libraries. When I just need SHA256, I can just compile, link and use SHA256. No book-keeping, no boilerplate.

But it's not as wide-ranging or optimised.
Is a Mac needed in order to compile?
Mass. Gov. Looks to Get Rid of Tech Non Competes
Sorry about that. Is it accessible now?

I am using blogger. Should switch soon. Here is the same post on Medium: https://medium.com/p/362c7c6176b8
I think there is an alternative offered here, it's just rather buried in there, I had to read it a couple times to find. I think these to bits of advice are pretty good:

"Today, success requires a modern perspective on the industry and actively managing your skills and relationships."

"Your loyalty must lie with your own career in the industry where you've chosen to work."
what is a typical lifetime of a fad in javascript fremeworking? Will Angular-JS still be able to elicit as much enthusiasm next month? Am I the only one who thinks Angular is a terrible kludge, which tries to turn every host language into even bigger kludge?
That's old? The project has moved on to different teams since then, and I've already seen even better apps than Popcorn Time (that are not forks) that do similar stuff.

Also, they were right. It is just a tool and it is legal - at least in Spain [1], but they weren't from US to begin with, and my guess is a similar ruling would be made in US anyway. Too bad the original team was pressured into quitting, but it's irrelevant at this point.

[1] http://torrentfreak.com/records-labels-lose-big-as-court-dec...
I'll note that a search of '"learnlayout.com" site:news.ycombinator.com' on Google doesn't bring up any other threads, but searching through the footer of the HN site does.
The dog-eat-dog one-person band?
That's exactly what I was thinking: a design based on a 16-bit length field would have been even more of a nightmare to migrate to 32, then 64 bits.

Like what Churchill said about democracy: NUL-terminated is a terrible solution, but it beats whatever's in second place.
> For the clearfix can't you just use `clear:right` or `clear:both`?

Not if you use it on the container itself, since it would apply to the interaction with floated elements that come before the one you use clear on - but here you open the container tag first, and then come the floats.

You could use clear on an element that comes after the floated elements, but before the container is closed, though. (you can also use the ::after pseudo element for this, maybe even in combination with ::last-child or something)
learning, doing, telling people about it.

making friends, finding mentors, teaching others.

I think this is why open source is becoming the new programmer's resume. It is kind of the intersection of all those things.

None of this precludes working hard either, just for who and why you are doing it.
What's VieDOS ? A new disk operating system written in Python?
Next:

Another Tower Pulls Soup Out of Thick Air
The problem is that your statement "all is legal for the sovereign" is just plain false according to the most widely accepted definition of legality.

By propagating it as if it were true, you are in fact playing into the hands of those who want society to bow to a different notion of legality - one where the rule of law has been eliminated. That is, by writing what you write, you are needlessly conceding ground to the bad guys.

I know it's tempting to play (or be?) the jaded cynic. But it seems to me that if we want to keep politicians and government officials accountable to the laws, then a necessary (though of course not sufficient) condition for that is that we insist on calling their actions illegal when they are illegal.
A chat with Maxim Lobovsky
Just tell yourself that most of these clueless webmonkeys' companies and their "products" will not live for a tenth of the lifespan of OpenSSL. This helps for me.
Also, I want to understand how its creator monetarize this? Or it is just a no-profit project?

Anyway I'm happy to see competion against xamarin. Now I only want also a javascript to native (and not just webview-running) for any platform
no, it's pretty clearly not about that.

It's about being a good co-worker, because that's what gets you ahead in the end.
Wow, that was fast. Great infrastructure here at Pycon. Knowing what kind of work goes into editing video to make it available in good quality to the web, kudos to the Montréal-Python team for helping put this together!
Then you have a piece of toast on a wet towel. Along with suggestions that suggest a cooling rack (I'm not a fan of cold toast), I think this misses the mark.

"Never serve hot food on a cold plate." -Ramsay

It seems obvious enough when you get in the habit and you wonder why you never started warming your plates to begin with.

It's usually not an extra chore if you capture the ambient heat of a cooking source. Putting plates in the oven when you take the food out to rest. Putting a plate on top of the toaster for half a minute could work in this case.
That's probably because you wrote C++ and are usimg C++ streams. Try just using printf. The binary, after stripping, will be much smaller (I think less than 20k). You can use DependencyWalker to check what DLLs you are linking to.
It's unsure what is going to happen after the MS takeover though. I keep hoping for MS being nice for a bit :) What would we be without hope...
Well, this is not really true for every free theme. If you add decent plugins, you can get almost everything using default wordpress templates like twenty thirteen or the later ones.
I don't know which site is "official", but here's one explaining "why" they shut down:

http://getpopcornti.me/
This appears to be an older post, but I think what the original author meant was that hard work alone isn't a sufficient condition for success (I'd argue it is a necessary one, though).

The real answer is there probably isn't a sufficient condition for success, but hard work in pursuit of your own goals (rather a manager's) increases the likelihood of a positive outcome.

Still, I'd have gone a step further. 'Career' is such a false construction. Go do fun shit and get really good at it. Maybe I'm naively optimistic, but if you're really good at something, it's pretty easy to get paid (a lot) for it.
Drop Salesforce and Heroku? Or stop with the witch hunts?
toy OS? Honestly, grow up. The default in OSX is best effort. Its easy enough to change to require looking at revocations or fail the connection.

Anyone that cares about security is going to be looking at what their software does and ensure its configured securely. Not posting on hacker news about a "toy OS there with the fancy graphics" like a ninny.
Yes, but then nobody implemented the SGML definition of HTML correctly. According to the standard, browsers should have parsed

<a href=foo/bar/baz>qux</a>

as

<a href="foo">bar</a>baz>qux</a>

since it did not only include optional closing tags, but also short tags. (This is incidentally why several SGML-based HTML validators used to complain about "end tag for element A which is not open" in the presence of href attributes without quotes.)
I suppose more videos are going to be added to this list? Kind of make you wish they had votes / rating for the videos.
In my view, to a considerable extent, the work environment created by following Welch's management methods, turned each of us into a dog-eat-dog one-person-band even within the mainstream organization.
Excerpt from ‘Flash Boys’ about Serge Aleynikov and Goldman Sachs
This looks like a perfect idea for a kickstarter campaign, though...
Absolutely. I was really surprised to hear this. I'm sadly getting the impression that the only large entities who have thrown funding into audits are the intelligence agencies.
AVC: Jeff Lawson on software people
This comment is tangential on purpose, but if anyone is curious as to _why_ we use the `display: inline-block; *display: inline; zoom: 1` "hack" to support IE7, then I will gladly explain it to you.

First, CSS is cascading, meaning a rule following another rule will override it. Second, attributes with an asterisk prepended to the property name are only picked up by IE7. Finally, in a nutshell, IE7 treats layout differently than other browsers. On IE7, certain elements get layout by default, but other elements can be "given" layout by using certain properties (that we refer to as "hacks") like `zoom: 1`. When an element has layout in IE7, it can be given a display of inline and act like inline-block. This is one of the many reasons why older versions of IE were such headaches for web designers. More info about IE7's hasLayout quirk can be found here[1].

If we apply what is described above into these rules, we get this:

1. display: inline-block is applied to the element.

2. on IE7, display: inline is added to the element.

3. on IE7, zoom: 1 gives the element layout, thus making it act like it act like an inline-block. Other browsers attempt to "zoom" the element, but since it's at "1", this is like saying "zoom the element 1x the size," so it does nothing.

I hope that helps clear up why we use this hack.

[1]: http://reference.sitepoint.com/css/haslayout
Wantrapreneur is a term that has started to describe people who are n00bs for entrepreneurship. This is where I see a problem. Instead of motivating people to graduate to entrepreneurship, we are mocking them to give it up. Not nice.
Amazon smartphone (with 3D screen)
when someone is bashing someone else's code if you mean free and open source code, I absolutely agree
A great site of general IT news that I read every morning is http://techmeme.com
Actually, another likely scenario is a load balancer shared by multiple sites... As long as the ssl is terminated at tr load balancer, it's vulnerable.
NOTE: please ignore above post. I shouldn't post before coffee, or without checking code. Routing A's audio output to B's frequency control output does require doing it in a loop since A's output is not compatible with freq's input. Have to do: A.last() => B.freq, and last() is the current sample, so needs to be called in a loop to work, which is what AC was saying - parameter modulation ends up being fiddling with individual samples.
Hard work is not important, good results are. That's a very different thing.
What we need is to not add fucking stupid features to TLS. TLS did not need an MTU discovery mechanism or keepalive; TCP already does both.
Facebook Is Trying To Change Its Huge Privacy Problem
While the kernel developers never break compat, userland developers are much happier to, which leads to all sorts of issues. Even if your a.out file is statically linked, it might depend on a service that's since been replaced.
I understand your sentiment, but I'd warn against judging the project based on one blog post by Ethereum's communications guy. There seems to be some serious crypto/engineering heft behind the project:

https://bitcointalk.org/index.php?topic=428589.0

Note: I'm not involved with the project. Simply watching it with interest at this point.
Alternatively, if you know enough PHP, you can build everything you need into a custom theme's options without resorting to too many plugins and risk slowing your website down.
FYI, headline has a typo. 2014 PyCon Videos.
I don't know where I'd be without http://css-tricks.com/ - great site and super helpful forums.
"They trust me — dumb fucks"

Just a reminder on why one should not have a facebook account.
It seems like the video is not up yet, but "The Birth and Death of Javascript" by Gary Bernhardt -- of 'Wat!' infamy[1] -- was by far the most entertaining talk I've seen yet. Jessica McKellar's quick overview of building a language-level sandbox was also phenomenal. Pycon has been really good so far, I can't wait for the next two days of talks.

[1] https://www.destroyallsoftware.com/talks/wat
Let me try then: http://www.crockford.com/pwl/