skysight-inc/HackerNews huggingface dataset:
VLC doesn't soft-clip to my knowledge.
Uber Ride-Sharing Service UberPOP Now Banned in Brussels
$8,000 and month dollars for a two bedroom apartment, that is ridiculous. You could own several large house where I live. I am tired of hearing about these silly SV-SF problems. Build more and the problem will stop.
Mozilla names interim CEO after gay-marriage controversy
Thank you for the feedback. Perhaps if we add things like support for version control systems, play well with releasing code to multiple environments, and add UI elements that enforce cloning chunks of code so that changes are isolated and the system can maintain it's coherence even among disparate users we can avoid becoming some of those issues. Something to think on...
Cracking Cloudflare's heartbleed challenge
Thanks!

I did a full write up (with data correct at that time) as a guest post on Sixteen Ventures blog:

http://sixteenventures.com/pre-launch-growth-hacking

TLDR: here's the slideshare version, much shorter:

http://www.slideshare.net/liamgooding/growth-hacking-prelaun...
FBI Plans to Have 52 Million Photos in its NGI Face Recognition Database
> with as many architectural challenges (seismic, geographic, etc.) the limiting factor for new construction is land and materials, not red tape

Are you kidding me? There are plenty of other cities in seismically active regions where they've built upwards with great success. All of you people who blame earthquakes for SF's inability to build upwards should put your money where your mouth is and get rid of all the red tape - then we'll see what really happens.

> But really, the best response for the people who keep asserting that "building up" is the magical solution is to point to Manhattan: it's the densest city in America, yet it's just as expensive as San Francisco, if not more so.

Wow, how is it that so many people forget basic economics whenever the topic of Bay Area housing comes up? Prices demand both on supply and demand. You are making the (false) assumption that demand is the same in SF and Manhattan.
I think the parent poster is making an "all things being equal" comparison, where all of the things you mentioned should be equal when comparing to a car with an ICE.

For example, both the Tesla Model S and a Honda Oyssey will, presumably, require suspension replacement after a similar term when driven on the same roads by the same person. Likewise for windscreen washers and other sub-systems. Given the level of engineering and attention to detail in the design of the Model S, we should expect these systems to be of equal or greater quality than their traditional motorcar equivalents.

The point is that it appears the EV components won't negatively impact residual value as many EV-naysayers have been touting all along. "Just wait till that expensive battery pack only takes half a charge in 3 years!" That's the kind of sentiment that the parent poster was refuting.
Gmail does scan all emails, new Google terms clarify
The point of the article is to help small startups understand that a/b testing is not off the table. Of course startups will have to decide where the highest ROI is themselves. Given a point in time, the highest ROI may not be a/b testing.
For the test the quality of the input does not matter.
You can conduct the same test with a beautiful 24-bit recording as source, you would still not be able to hear much in the end.

And that's the point.

When you print a photo in size 9x13cm, does it matter whether you print it in 10,000dpi or 20,000dpi? Hardly, unless you always run around with a microscope.

And it does not matter, whether the photo was originally a good picture or not.
A brief history of SSH and remote access
I have a main thread, an actor thread, and a single object that they use to communicate. So yes, I have one lock, around the single object they use to communicate.

I'd need one lock per actor thread and its communication object.

I say again, this works in my problem domain, and probably wouldn't work in other domains.
The 2 biggest competitors in the firehose business are Gnip and Datasift. I am pretty curious if Gnip will pivot in a Twitter only firehose or it will continue to serve data from Twitter's competitors.
I didn't mention javascript. Try running their site through a validator: http://validator.w3.org/check?uri=https%3A%2F%2Fwww.openssl....

Duplicate IDs and font tags? Come on...
This deserves to be better known, and the project deserves success. Here are a few previous submissions of the story, each with its own slant and its own take on the topic. Some have comments, most don't, I've only marked the largest discussions.

https://news.ycombinator.com/item?id=7503554

https://news.ycombinator.com/item?id=7495183

https://news.ycombinator.com/item?id=7448294 : 13 comments

https://news.ycombinator.com/item?id=7407449

https://news.ycombinator.com/item?id=7385509

https://news.ycombinator.com/item?id=7384131

https://news.ycombinator.com/item?id=7377213 : 58 comments

https://news.ycombinator.com/item?id=7369558

https://news.ycombinator.com/item?id=7367503

https://news.ycombinator.com/item?id=7365903

https://news.ycombinator.com/item?id=7363305
Agreed, my reaction to this acquisition is 'what the...?'

I cannot imagine what they think they just paid $3 million for.
Yes, that part seems really important, defining the separation between the things that you do and your sense of self identity sounds like it's a critical part of creating a healthy sense of self esteem.

Looking inward it feels like I still struggle with this pattern of thinking sometimes, as I suspect many people do (the feeling of "that project failed" vs. "I'm a failure, this project is evidence of this fact" is worlds apart).
Twitter Acquires Data Startup Gnip
Google buys solar-powered drone maker Titan Aerospace
Betterment Raises $32 Million To Disrupt Money Management
are they unfriendly or merely conditioned to look away?
You open an application that measure keyboard and mouse activity and takes a screenshot of your desktop every ~10 minutes. Personally I like it. Guaranteed payment and no hassle over time tracking. I just work and get paid, what's not to love? I don't even need something like HarvestApp or PaydirtApp. I just work.
Personalized Financial Planning Service LearnVest Raises $28M
Yahoo to early Reddit: You are a rounding error
Ohanian talks of his early days in Reddit where he is invited by Yahoo to join other startups. During a talk with a Yahoo employee, he is told Reddit's traffic is equal to a rounding error and that he doesn't belong.
Great converters have 20-21 bits of range and if we fully use this range, hearing damage will start at maximum volume levels

but that doesn't have anything to do with number of bits? I mean, an audio player system is basically a digital stream sent into a DA converter outputting an analog signal which is then fed into an amplifier where the signal is amplified and then sent into speakers of some sort. No matter if you have an 8bit audio stream, or a 128bit audio stream, the stages afterwards play a much larger role in the hearing damage caused. Also not all DA converters ouput the same level to begin with. Some are -5V to 5V while others (single power supply) can be 0V to 5V, etc etc.
Das Wunschauto
Jeder hat ein Wunschauto, aber manchmal ist es schwer das Auto der Begierde zu finden. Auf Grund dessen, existieren Unternehmen die das für Sie erledigen, ob Sie jetzt auf der Suche nach einem Neuwagen oder Gebrauchtwagen sind, spielt keine Rolle. Wenn Sie sich an den Firmen wenden die diese Leistung anbieten, dann werden Sie bestimmt nicht eintauscht. In der Schweiz gibt es zahlreiche Unternehmen wo ihnen weiter geholfen wird.
This is really fun! Not sure why the shark keeps attacking me or how to get that sucker to cut it out. Maybe a little explanation of the shark would help. Didn't get too far so I'm not sure what kind of levels or progression there is. Well done on the overall responsiveness of the game.
I figured I'd post this on the blog in addition to Ansible for DevOps[1], since I spent a bit of time researching the history of remote administration in preparation for a chapter on security and Ansible.

Especially in light of the Heartbleed incident, I think it's a good idea for all admins to at least have some understanding of the history and thought behind the systems and protocols they use every day in their jobs.

Additionally, it's interesting to note that OpenSSH really gained steam after the OpenBSD project picked it up and refined it—could a similar thing be happening with OpenSSL[2]?

[1] https://leanpub.com/ansible-for-devops

[2] https://news.ycombinator.com/item?id=7589943
If You Want Google Glass, Now’s Your Chance
Schweiz Auto kaufen
Wenn Sie sich in der Schweiz ein Auto kaufen wollen, dannsollten Sie bei mehreren Händlern sich schlau machen. Wenn Sie vorhaben ein gebrauchtesAuto zu kaufen,dann ist es vielleicht vom Vorteil den nicht von privaten Anbietern zu kaufen da sie keine Garantie bekommen und somit niemand für das Auto haftet, bei Gebrauchtwagen Händler, können Sie zumindest eine Kurz Zeit Garantie vereinbaren.
"To our knowledge, our study is the first to demonstrate the emergence of polymorphic evolutionarily stable strategies within a robot evolution framework"
It sounds so simple to have a flat tax, but actually it hurts lower earners disproprotionately because they are using a higher percentage of their income for living expenses rather than luxury. In other words, 50% of 50,000 per year is more difficult to budget than 50% of 2,000,000 per year.

Plus this whole issue of 'companies returning money to shareholders' is again only favoring the rich. It will be a long time before any significant portion of my income comes from dividends and capital gains. To make money in this way, you have to have a huge amount of capital invested already. Just to prove this point, if you made a very nice 10% per year before taxes on your investments, you would have to have 100,000 invested to make an extra 10,000 per year. If you are only making 50,000 per year, that would take a 20% contribution to your pre-tax retirement account for TEN years before you reached that level of invested capital. Sure, it would happen a little faster because of compounded interest and reinvested earnings, but I think my point is clear.
You're underestimating the work that's been done in secure password managers in the last few years.

Check the whitepaper Apple published regarding their iCloud Keychain mechanism.

It generates secure passwords, locks them with a passphrase, but also makes them available on all your devices, not just one (which, if it breaks, you're locked out of all your services).

Using hardware for tokens is secure and simple, but it shows a severe lack of imagination. I only see hardware tokens as useful for very high security logins, like bank accounts, where the apparent inconvenience is at least justified.
Well if you're the only sysadmin for a company and they let you travel without the ability to both contact you and have emergency work done, you're pretty lucky. I would hope no company would let their one and only fulltime sysadmin take a vacation without having backup personnel on-hand
I'd rather use something from AllWinner. eg. an A10 is cheaper ($30 in packaged system-on-a-USB-key) and a bit more powerful. The A20 (eg. Cubietruck) is more expensive but is dual core and each core is much more powerful.
Inequality is the offspring of transcendence. I guess it's human nature to be jealous if superiority, hell I get jealous of friends, but most of them deserve what they have. People like to pick on the rich kids as the pinnacle of inequality.
1. Keep a timeline.

2. Ask to speak to a representative of the people developing the thing on the telephone.

3. Between the two of you, figure out who to tell next.

4. Realize that other people may find the bug, too. You have some time, but not infinite time.
Interesting if the current crew at Yahoo would treat them the same. It seems like they're more friendly to emerging players.
1) You can start with the richest and most successful people you know in your circle (aunts, uncles, friends, etc).
2) Try https://angel.co/
3) http://www.startups.co/

Be prepare to answer to them why you need 50k and how is the money be used.

Good Luck
Very long story. Only halfway through the original referenced article, and I can tell the writer has some solid economics chops.
Do you realise that in the upper right corner of the page you linked there a link titled "Try Track.io For Free"?
Learn how to turn VPN on iPhone
Virtual private networks, VPNs calls are an extremely useful and powerful to assist in the security of digital information tool. It is a fact that many users are still unaware of the feature and do not know what it is, questioning yourself to see the option on their smartphones...
This is how MV* libraries should be built - minimal, very fast, bloat-free, independent of other libraries. VoicePedia was based on Riot.js: http://niutech.github.io/voicepedia/
For anyone who wants to know more about the topic: Adam Grant (the author) has been doing a lot of work around this concept of "givers" as a personal trait and how behaviors around the actions of giving/taking/matching results in various levels of success or early indicators for other things. This article is really a subset of his research applied to just this one case.
Who knows, maybe one day we'll be able to install OpenSSL without having to first install Perl?

IMO, this a symbol of OpenSSL's unreasonable complexity.

OpenSSL is a default system library yet the user cannot compile it with only default system libraries.

(OpenBSD has added perl to their userland but this is not universal across other UNIX-like OS.)

Where are the compile-time options to turn things off?

The compile process has apparently become so "challenging" that the developers could not figure it how to do it easily without using perl.
I'm confused how openSSL on Android is a problem... isn't openSSL a server technology? Do the clients use a heartbeat for something?

Or is this only relevant when you're running a server on your client device?

Is OpenSSL always running as a server on Android?
This comment would benefit from some elaboration (perhaps in place of some snark).
Can the UX be a major disruption vector here? I don't think optimizing this model is a game changer, just an incremental improvement.

There's interesting startups on the seller side that let people instantly get money for their goods and take care of the whole process making it friction-less.
I think what will eventually disrupt general marketplaces [eBay] is simply sellers fleeing to seller-specific services and buyers using retail-oriented sites (like amazon) with a better experience.
This will be interesting to watch; I hope OpenBSD can do for OpenSSL what they did for OpenSSH—clean it, refine it, repackage it, and make it even better, ready for a new decade of use. I published a blog post which mentions how OpenBSD transformed SSH into the de-facto remote administration standard it is today just this morning[1].

I think this will be good news!

[1] https://servercheck.in/blog/brief-history-ssh-and-remote-acc...
I have pretty good headphones (Sony MDR-V6). I can hear decently enough (although getting older). Like I noticed that the Deutche Gramaphone 111 years music collection I bought (256kbps mp3s) has taped performances from the 70 & 80s which have some tape his.

Honestly as an end user its really good enough. If I was remixing this stuff and processing the audio I would want the non-compressed. (similar to shooting Raw photographs ). But at 256kbps honestly it really is amazingly good. thinking back to cassette tapes and records, its astonishing.

As for the tape hiss on the classical music, the performances are so good I just ignore it. Sometimes I think people get worked up about the quality of the recording and ignore the quality of the performance.
If it's a given, then why do all 3 manpages on https://www.openssl.org/docs/ say "[STILL INCOMPLETE]" and have for years?

Edit: I just read parennoob's comment about how OpenBSD isn't the maintainer of OpenSSL. I didn't know this was the case.
NSA Denies it new about HeartBleed Bug
I wonder if Twitter will be able to use the data from Twitter's competitors transiting Gnip's firehose for their own analytics/machine learning/relevance purposes. (From a legal standpoint that is, I'm sure they have the technical chops to do so)
Who would have thought that 21-month-olds are predisposed to Kantian ethics?
Be careful with "the Rails way"
re: "It's useless because most people can't hear the difference."

Sure, but when sampling and then processing things, you can consider it "headroom". Just like it's not hard to edit a photo in a few steps that the limitations of 8 bits per pixel begin to show. Though I suspect sampling frequency is a lot more important there, 24bit can't possibly be "too much".

Yes, I understand that this is not a good argument for consumer products to be more expensive and need more storage, just so musicians of the future, or pirate musicians of today, can have a better time. So I think the best plan is to encourage everybody to become hobby musicians, then it would be an easy sell.
Hmmmm, did they now. *lights up cigar and strokes cat
A lot of what made the Transputer cool was Occam http://en.wikipedia.org/wiki/Occam_(programming_language)
Rubin came from Danger, which was a J2ME company. They started Android (pre-Google) as yet another J2ME company. When they were eventually acquired by Google, Google didn't want to play ball with Sun, so they went with a clean-room simile, but, to consult actual Google documentation (three years after Android was started)-

http://www.scribd.com/doc/217988654/13/Boot-Loader

the Platform will be compatible with Java Platform, Micro Edition (Java ME).
s/new/knew
Microsoft Abandons Windows 8.1: Take Immediate Action Or Be Cut Off Like XP
Ah, now all my downvotes make sense ;)
The article gave me the impression that OpenBSD was the maintainer of OpenSSL.
You can replace Comic Sans with Neue in all browsers: https://github.com/niutech/comic-sans-replacer
Twitter Acquires Gnip
You might want to run a non-exit node at your home. That way you have a lot of Tor traffic all the time, and the one time you really do need anonymity, it doesn't show up as anything unusual.
This is a completely fair point. Startups naturally will have to decide where the highest ROI is. It may not be a/b testing. However, they should know that a/b testing isn't necessarily off the table.
One day "public" Google glass sale
Replace Comic Sans MS with Comic Neue
Hearing damage as a result of loudness; the electronics have little to do with it. If you set up a 96dB (16 bit) system such that you can hear the lowest bit toggling, your maximum volume will be 96dB above that. 96dB SPL is loud but not painful for average listening.

If you set up a 20 bit system (120dB) so that you can hear the lowest bit toggling, 120dB above that will most certainly cause hearing damage if used for very long.

144 dB (24 bit) or more SPL will cause near instantaneous damage and pain.
Android 4.1.1 is the vulnerable version. Google says only 4.1.1 is vulnerable. There are a handful of services on Android that use openssl and, I suppose, could present open ports for there to be an attack vector. See http://www.pcmag.com/article2/0,2817,2456507,00.asp
http://www.cs.kent.ac.uk/projects/ofa/kroc/
> and doesn't log customer usage

Come on. As always, naivete is dangerous: until you can't rely on anything but promises, whatever they say can't be trusted.
That's a fairly convenient justification. You "ask for something"? How do you think the provider of that "something" has the means to provide it?

You should be thankful that people like your grandfather exist, such that they can subsidize your ad-free internet experience.
http://www.openssl.org/news/secadv_20040317.txt -> http://www.openssl.org/news/secadv_20080528.txt -> http://www.openssl.org/news/secadv_20120510.txt -> heartbleed ... a pattern emerges? At least for another one of the discoverers. :) Furthermore "Goto Fail;" is actually cited twice on the http://heartbleed.com and GnuTLS bug once.
Ask HN: website privacy certification for startups
Is it worth getting a website privacy certification from a company like etrust.org? For a startup it seems like a lot of money. Are there cheaper alternatives?
Why not just start charging? If people can't live without
your app, won't they just buy it? I'm glad I read your blog;it reaffirmed an old saying. The more someone tries to
sell their product, or explain how brilliant they are--the
more skeptical I become. I don't know why this blog irritated me, but this company made it to HN; which just
might be better than charging the Free Loaders.
from the article:

> There was a thread a while ago about a little board that you could connect 4 ways to its neighbours (for the life of me I can’t find it…),

That might be: https://www.indiegogo.com/projects/pshdl-board
5 Metal Roofing Installation Mistakes Your Roofer Must Avoid | LGC Roofing Blog
Not every company in the world has sysadmins three levels deep. Lots of companies don't even have sysadmins one level deep.
This is the second time I've seen an "article" from this site posted here and receive upvotes. Maybe I'm old, but I don't quite get the joke.
I, for one, am glad that a good chunk of the security community still has its old Wild West spirit of "anarchy and chaos" that was present back during the early hacker groups of the '80s and '90s. In addition to the existence of tons of highly casual security conventions (compared to the strict cons for programming languages and frameworks), it shows that many have not forgotten their roots, and have not succumbed to becoming a false, dishonest corporate face, just so they can look like ideals that they are not.

By the way, this isn't really related to or damning of the concept of full disclosure in any way. It still remains the most widespread philosophy. The CVE lists would be drastically smaller, if it were otherwise.
POWER8 (not yet shipping) has far better little-endian support than prior PPC chips (many converted to/from big-endian when in little-endian mode!), as many customers of IBM apparently want better little-endian support (either to interface with existing little-endian hardware, to be more similar to other hardware, etc.), and IBM is paying for almost all the engineering work going on for the ppc64le ports. IBM need the software to work to be able to sell the hardware, so they're investing a lot in this.
I just finished his book Give and Take. It was a great read.
Google explains why it scans your email
Philosophy: how does it work?

Hint: its true even if babies haven't figured it out yet.
Libsunw_ssl, or, How SmartOS Avoids Sadness
I didn't get the don't be a cheater part. seemed like that would cause shame instead of guilt and confilted with the rule praise the child as a good person. expect them to do better when they do bad and seperate the bad action with fromt the good person. With hard worker being a good trait.
For two options, almost certainly not ;-)

For N ports, or for a port list defined from a config file however it could be. It's even nicer in python:

ports = [80, 443, ...]
if port in ports and http:
...

Or with underscore:

var ports = [80, 443, ...];
if(_(ports).contains(port) && http) {
...
}

Good collections make it better than manually checking the return code or checking an explicit set of port values. Also configuration > magic_nums.
On the topic of Restraint of trade (http://en.wikipedia.org/wiki/Restraint_of_trade) clause which some companies insist on: in very few cases a company will take a former employee to court over a breach of such clause and then the company is still likely to lose the case unless the restriction was narrow, specific, reasonable. Usually there also need to be consideration (http://en.wikipedia.org/wiki/Consideration) for giving up some of the freedom of trade.