skysight-inc/HackerNews huggingface dataset:
I agree with the issues around OCSP and soft-fail, but I don't think shipping a subset CRL list of 'important' revocations is ideal, either.

I've just re-keyed certificates I'm responsible for as a precaution after patching for Heartbleed. For one of the certificate providers used, GoDaddy, re-keying automatically revokes the old certificate, which is exactly what's wanted in this case.

But would that be considered an 'important' revocation? I have no way to be sure, but I'm assuming not -- as this is the same mechanism used by GoDaddy for routine rekeying.

Perhaps this is simply a problem with GoDaddy's certificate management tools, but I'm uncomfortable with two tiers of revocation, one of which is a "real" revocation and one of which is ignored by browsers.
Delhi to vote in style thanks to free luxury ride with Uber
I've seen people not know who "pg" is, so...
Yes, and also of Sandra Bullock and George Clooney. The major bulk of the budget might have gone into that :).
Visualizing imgur database
I work for a very large company that relies on a fork (with contributions back upstream) of SQLite for a majority of its massive enterprise SOA. It is not just unpaid volunteers keeping that project going.
Sorry about that! The thing is, a tablet is very well suited to the whiteboard, and we find that the whiteboard _really_ helps for this kind of working collaboration.

It makes it very natural to gesture and discuss visually.

Understudy works in proportion to how good of a connection it fosters. You really want the tool to vanish, and to forget that you're not really in the same room. For non-work stuff, like talking to my parents, the phone does decently at that for me, but for trying to collaborate videochat is not very effective, in my experience.

Understudy's whiteboard/videochat does do it for me.

(As far as Android vs iPad – well, have to start somewhere! Also, I worked at Apple for 7 years, so it's definitely the environment where I'm quickest.)
Don't Double Major
infinite scrolling works for things like Facebook, Twitter or any other case when you probably don't want the user to be alarmed by the amount of time they've spent on a site..

If i saw 'page 11' on Facebook, i'd instantly think about all the time i just wasted and try and be sure i didn't so that again.
Blocked in Romania.
I read this article out of curiosity and from what I can it's just a bunch of unrelated words strung together.
Just to reinforce what Noddingham said: if you were a temp working for Kelly, you didn't get "fired": Juno Pacific called up your staffing manager at Kelly Services and told them that they didn't need your services anymore. Yes, that's a lot like getting fired, but if you were a temp, you were never an employee of Juno Pacific.
That outage notice you've linked includes a promise to improve communication.

Also, how'd you find that link? If you happened to just have it laying around, that's fine but it would be better if they had these things linked somewhere customers can find them when new ones are posted (like a page covering service post-mortems) and the timeline is missing little details like the year when the outage happened and a point of contact (it's signed by "the aws team") if you have questions.
Sorry to introduce the hyperbole, or not moderate it.

When the government runs a campaign to cause the public to fear and doubt your neighbor that is the beginning of a dark time ahead. This idea that they are one of you, or someone on reddit is just poison.

On an emotional level, more and more Edward Showden is becoming a mystical figure.
Yes. All of them.

Seriously, it's easier to just change all of your passwords than to hunt down a list (that will be incomplete and give you a false sense of security), cross-match against servers you might have an account on, then change their passwords.

Just change them all and be done with it.

The "whether they've been fixed" part is a little tougher, because that lets you know when you should change your password. General sentiment I've been seeing is give it a week for everybody to fix their stuff (even this might be a little long) and then change your passwords. If a given site says either "we weren't affected, here's why" or "we've patched our stuff, we're all good" then you should change your password on that site ASAP.
That all makes sense, I would disagree on one point:

"topics on Quora are limitless"

The thing (only based on my experience) is that when you grow/diversify too much on a Q&A site, quality tends to dilute, and the audience tends to drop off. I don't know if this is true for Quora; I merely suspect it might be (as it has been for all the others who tried).

In many ways our focus on just one topic has been our saving grace. Many 'globals' try to compete (even S.E.) few manage to top 'specialisation'. Not sure why.
No, you should not have to pay to get an SSL certificate rekeyed. Some providers may ask for money if you want to revoke the cert, if -- for example -- you believe your private keys may have been compromised and you want people's browsers to go nuts if they see that cert in the future, at (for example) a site attempting to MITM you.
Your point is internally inconsistent. Authoritarianism is one dimension along which people can differ, but empirically, most people are more or less authoritarian. It's a point which you essentially concede by noting that both parties in the U.S. are authoritarian (and so are most political parties throughout the developed world). So how can you justify calling authoritarianism versus anti-authoritarianism the "real divide" when it only separates a small minority from the great majority?
A linking exception from the library authors could accomplish that, I believe it's what GCC uses. LGPLv2 may also be ok, but GPL licenses in general are complex enough that no one is entirely certain.

If the library is statically linked (which is the case at least on consoles), the user would also need the game's source code. I think the restriction is enough to trigger the (L)GPL clauses anyway.
I believe that in this case marketing is a great way to get a fix out there. It's a commitment act, Schelling-style [0]. They basically forced everybody in the world to drop everything and fix this issue right fucking now. The seriousness of Heartbleed warrants that level of marketing, IMO.

[0] - http://en.wikipedia.org/wiki/Thomas_Schelling#The_Strategy_o...
What are the numbers that every computer engineer should know
I don't think it unreasonable to ask your employees for help. If you don't want the iPad, don't give good suggestions.
That article wears its heart on its sleeve a bit, doesn't it? "This is why Conservatives believe all those weird things!"
Dart 1.3 dramatically improves server-side performance
Haskell has one of the best FFIs I've ever seen; calling C code from Haskell is quite trivial, and you can write all of the necessary wrapper code and objects (such as automatic memory management or object destruction) in Haskell using common wrappers.

I'd also highly recommend c2hs for writing new wrapper libraries.
Sounds excellent, why don't you say this on the site?
FWIW we've been using the mortar platform to run large pig jobs without a fuss at http://datadog.com and we've been very happy with it. Glad to see them contribute their recommender code too.
They all (except php) work fine. Python has several async frameworks and libraries (but django is not one of them). The main reason is that its easier for webdevelopers to reuse js skills then to learn another language. For me python works perfectly and i don't see it being replaced anytime soon - at least not by js.
That quote doesn't seem right, either. The population is something like 50/50 liberal/conservative, right? So compared to the average person, it seems that this indicates both that conservatives are more fearful than average and that liberals are closer to a particular form of psychopathy. Choosing either one of these and ignoring the other shows a pretty clear bias.
Nature's own artificial intelligence.
I google for exceptions and stack traces all the time. This person must be doing it wrong.
So hang on, what exactly is a recommendation engine?

They give examples of LinkedIn (people you may know) and Amazon (presumably other people who bought this, so-and-so's list of such-a-subject books).

That makes sense, though the segment of businesses that may actually benefit seems limited. Social stuff, sure. Most of us? What's the minimum recommendable-entity/category-or-user threshold that this makes sense for? Is success with these sorts of engines merely a reflector of poor UI design in your normal UX? (Of the above examples, the first seems very unidimensional - in that it's basically a simple graph distance - and the latter also rather rudimentary and often irrelevant).

So what exactly is this thing providing? Graph analysis? I think not. It reads more like some kind of raw timestamped user behavioural event data processing to infer relationships between users or products they interact with. Reading through the docs it seems this is a layer on top of Apache Pig (https://pig.apache.org/) - a high-level language for expressing data analysis programs, coupled with infrastructure for evaluating these programs. I think clarity in explaining this thing could be improved, particularly selling clearly what a recommendation is and when its useful. Using phrases like "award winning" doesn't help.

PS. Why all the downvotes? Sheesh.
List of little-known and useful WordPress plugins
The difference between left and right may seem less to you than that between authoritarians and anti-authoritarians but what about the numbers? If the former has a roughly 50/50 split in the general population and the latter is 90/10 (I have no idea), then it's not surprising that the former is considered more important.
I haven't seen a discussion about whether this can also bypass those using 2-step verification. Does anyone here know?
I wrote a neat visualization of medicare spending last year. It doesn't go down to the physician level, but I think it is a cool way of viewing the data:

http://stonefinch.com/Projects/Medicare

It'll take a while to load, there is a 19MB file that gets loaded into your browser. Chrome suggested.
A golf channel tells Congress: Comcast-TWC would hurt little guys like them
Even though this hole is huge, the ratio of attack-surface-exposed to security-gained from SSL is still in general worth it; you'd be throwing the baby out with the bathwater to disable encryption entirely IMO

For comparison, would you avoid having a web server (or roll your own) because of CodeRed?
Handheld quantum key generators are on the way
I'm not trying to start a flame war over the use of the word open, and I think it's great that they're releasing code that others can learn from.

It's just that making a big press release and blog post that brags about open sourcing, vs the reality that you can't actually do anything substantial with the code without paying for it... it seems off to me.

I get what they're trying to do, but to me the whole point of OS code is that you can self-host, and/or modify it for business use if you so choose.

To me this would be better served by advertising "We like you so much, we're giving away access to our service for free for noncommercial and test use, and opening up the code to the library so you can see how it works", but that's less interesting as click bait.

Maybe i'm just mis-reading the whole thing and you can self-host.
I have no idea about this software for iThings, so maybe it's great and helps with stuff. I have no way to know.

But your way is the way I can recommend.

Still, I give them the benefit of the doubt that their software may be helpful. I'm not going to get an iPad for it though.
There's quite a lot of energy going into crypto outside of the OpenSSL world.

If you're interested in ubiquitous crypto (using standard primitives, and mirroring standard protocols), the Telehash Cipher Sets are a great place to start: https://github.com/telehash/telehash.org/blob/master/cipher_...

There are a surprising number of crypto-related implementation difficulties in all the language ecosystems (even if all you want to do is wrap OpenSSL) that have nothing to do with the "hard" parts of the algorithms.
Do acqui-hires go through the same rigorous hiring process as regular hires at Google? I wonder how many engineers that are hired as part of an acquisition would actually pass the infamously hard interviewing process at Google.
OP's HN user name and the websites author are the same.
Didn't this come up a couple of days ago? I suspect some 'growth hacker' is finding a way around HN's spam defences.
What a pointless article. Every single one of these can be mitigated if not completely re-mediated. It should be titled, "10 reasons why infinite scroll takes more effort than you think."
GHC 7.8 is already packaged in Debian experimental, so if you're running current testing, you may find it easiest to just add sources for experimental and sid, set the default release to testing (so you don't upgrade anything else), and then install GHC 7.8 directly. You'll end up upgrading a pile of Haskell packages to versions from experimental, but mostly not the rest of your system.
Agreed, and that is shrewd thinking, though I'm not sure if it is related to gender. It may be part of it, but I think also design is a more attractive job than coding which is gross and technical, so there are more people who want to do it -> more labor supply -> lower pay.

Same thing with games, tons of people grow up playing them and want to make them -> more supply of workers -> get paid & treated like crap.
All these problems are solvable. I co-founded Discourse (http://discourse.org) which uses infinite scrolling heavily. Discourse is also 100% open source so you can see how we did it.

My responses below:

> Users will lose the page length orientation - the browser scrollbar become useless.

We have a fixed "x/y" posts widget at the bottom with a progress bar.

> There’s no ability to jump to the end of the list.

The aforementioned widget has an up arrow and down arrow to jump to the top/bottom.

> Your users will not be able to get back to the same in-page position in 1 click.

We use replaceState to update the URL as they scroll. The back button works fine, and you can link to any position in the topic.

> There’s no visible footer until your users come to the end of the list/content.

Isn't this true of all sites where the user scrolls anything? I guess the difference is you see it more often with pagination. We instead have a fixed header with navigation options and extra details.

> Slow Experience - You are using a lot of browser memory as the page scrolls down.

We unload posts that have scrolled off the screen. We released a library for it too - http://eviltrout.com/2014/01/04/hiding-offscreen-ember.html

> If you switch away from the page by following a link there's no way of getting back to where you left off.

The back button works fine thanks to replaceState!

> Lack of sense of completion- no closure for users.

The progress bar and constantly increasing numbers in the widget help a lot.

> There’s no SEO opportunities for content located below the first scroll.

We serve up google indexable content just fine. See: http://eviltrout.com/2013/06/19/adding-support-for-search-en...

> You lose the ability to bookmark a dedicated point of interest.

With replaceState and updating the URL, you can bookmark at any point and return right back to where you left off.

> Distraction - The fear of missing out on data or other options will deter your users from completing an action.

I'm pretty sure this isn't relevant since we support all the above.
There are ways around that, too. I'm sure there are better descriptions but just for example: http://engineering.linkedin.com/linkedin-ipad-5-techniques-s...
I knew it was hypothetical, I was just building off my experience with this as a reality and not a thought experiment. I think that your hypothetical is useless to this conversation. The seriousness of death is a good argument tool, but using it in the context of responsible disclosure is theatrics.

Arguing for people with privileged access to the exploit to behave the way you want when disclosing it, is a lot like arguing that people with privileged access to the exploit behave the way you want when exploiting it (ie: don't exploit). When human safety relies on an encrypted channel, you have no option but to assume people aren't going to act the way you want. If you could get people to act the way you want, you wouldn't need to use an encrypted channel in the first place.
Seriously guys, how can you downvote a question like that? It's a real question with a real answer and not irrelevant in this context.
Canada Revenue Agency shuts down public site over Heartbleed
Of interest I suppose in the context of your comment. Bob Altemeyer's - The Authoritarians:
https://home.cc.umanitoba.ca/~altemey/
There is a very practical explanation for why a nautical mile equals one minute of arc on a great circle around the earth.

When doing celestial navigation (using a sextant) you are measuring the elevation of the sun, moon or stars above the horizon and then, combined with azimuth (compass) angles, you perform a series of trigonometry problems and chart (map) measurements to ascertain your location.

This work is made simpler by having a common measure underpinning arc (minute), distance (nautical mile) and speed (knot = 1 nm/hr).
I'm really sorry to hear about what happened. I wish you the best of luck in finding a new job. The pizza party idea sounds demeaning and silly.

Now is not the time for advice on communication, but I can't help but comment on this, sorry. Take this with a grain of salt because I wasn't in the room. Should the manager be able to handle your questions better? Yes. But, consider this rhetorical question, was your aim to embarrass the manager or improve the situation? Even though you were presented with something ridiculous, from the manager's perspective, you embarrassed him in front of his reports. Criticizing someone (or an extension of them such as their work) in a group setting can be very destructive. In a situation like that, I recommend talking to the manager one-on-one afterwards. That gives the manager the opportunity to do something that fixes this and to be a good manager that listens to his employees and comes up with incentives that might actually work. If the manager doesn't want that outcome, don't waste your time there. Your manager might be childish and unprofessional. He might just lack the empathy required to understand your perspective without it being explained to him. If he is the former, and you don't want to get fired, you have to act in a way that is acceptable to someone childish and unprofessional. I think a good manager would handle your points and questions and give you some kind of response whether it be 1) I'll look into fixing this or 2) sorry, I can't fix this. They say good managers are hard to find.
I think that depends on your password management policies. If you are using a unique password for every site, change them all now and then change the ones that were vulnerable again after they are patched. If you are like many people and reuse passwords, you should not change that password to be one you use at a patched site.
http://www.he.net/?a=39098199433&n=g&pos=1t1&p=&t=&m=e&k=hur...
Theo has a twenty year record of being a brash, non-calm[1] asshole. The pesky problem is that he has this very bad habit of being right, especially when he is angry, brash and profane. So yes, he may indeed may need to enhance his calm, but at the same time, other software developers need to realize that the best course of action in avoiding his ire is to not write software that sucks.

[1] http://www.theos.com/dispute.html
For a company this small I don't think I'd let Google acquire us w/o hiring everyone.

I doubt you'd get that. As of 2011, Google's pretty firm on regular employees of acquisitions being contractors first, and sub-80 conversion rates happen.

Or at least really compensating the one they didn't hire.

I agree. They should have done that.

I think the founders took a deal that was good for them and failed to make sure it worked for everyone. She got a crappy severance; they got jobs at twice what they'd get under normal terms. Not that it excuses their betraying her, I think they were probably a bit panicked about their own job security.

Maybe there is more to this story, but at face value, I think this is a failure of leadership to protect the team.

They saved themselves. You could say that they weren't leaders, then. It's unclear what their other options were.
Question-and-Answer Site Quora Raises $80 Million
Please remove StartCom Certification Authority root certificate
The idea is solid, but the technology to get there is crap. People who have used a wacom or ntrig based tablet can tell you drawing and writing with anything else is, to put it bluntly, complete shit. Drawing and writing on capacitive screens is a horrible experience; No palm rejection, no pressure sensitivity, and accuracy is problematic.

There is a reason why note takers, artists and others are pursuing options for tablets and PC's that have digitizer technology baked in. Look at Crabfu, Gabe of penny arcade and the hundreds of iPad vs. Galaxy Note vs Surface Pro youtube videos. The Surface Pro is a very compelling device if you strip away the emotional baggage related to MSFT.
From the outside, it has looked for a long time as if avoiding issues that matter is the whole point of your political system. No offense, we (Canada) are not much better, but your problems in that regard seem more dire.
https://en.wikipedia.org/wiki/Logbook
Waze Security flaw allows hackers to inject malicious code and steal nav history
roll on elixir 0.13
Convince Me I Don't Want VC Funding
And yet they don't support Go by default :/
Part of the problem is that iOS APIs tend to be Objective-C, which is somewhat harder to wrap in Haskell.