skysight-inc/HackerNews huggingface dataset:
Here's why I don't agree. This is a real conversation I had with someone about Heart Bleed:

N: So will I have to change all my passwords?

ME: Yes, you should.

N: That's a lot of work.

ME: Yes, but if you don't someone is likely to break into at least some of your accounts. At least make sure you've changed the password to your mail account, and set up two factor auth [very simplified explanation of what two factor auth involved], and check that all accounts you care about use that mail account for password recovery.

N: I'm not sure if I can be bothered.

This is a relatively technically experienced user.

It fits with other experience I've had, that security is perceived as a hassle until it's too late and then users do the bare minimum, even in the face of ongoing threats.

Corporate users might help drive adoption, but only if the cost and hassle is limited enough, and the damage of not going there is high enough.
My experience in large companies is more like this: A (security) engineer reviews, objects and management says: "Go ahead anyway you don't have the whole picture".
The philosophies were a ruse, no-one at the top tier lived accordingly.

"To everyone according to their needs" sounds noble in theory but I'm not sure it would ever be workable in practice, without externalities (like labor camps, authoritarian force) subsidizing it.
This kind of two-pane layout looks great on large screens but is unusable on mobile (my Nexus 5, at least). Are there any good approaches that don't involve making a separate mobile layout?

Maybe a mobile-only button to expand the sidebar, and then the list of articles takes up the full screen, sliding away after an article is selected?
How do I get to the comments?

This actually doesn't much match my reading style - I like to scan the front page for stuff that looks interesting and then read it in a new tab, which works just fine when I right click links.
It would have to be to operate in this 'infinite' physical environment. A place where we can only theorise about the concept of 'beginning' or 'end' or 'smallest' or 'largest'. We are literally living in an experience we don't have the mental ability to delineate.
I think any language you're not familiar can seem like that - especially if it uses unfamiliar sigils or syntax. I feel similar about Rust for example as I'm not as experienced with it. But with ATS I can put programs together pretty quickly - all because I've learnt it.
Removing the settings option for javascript was almost certainly not a move for advertising/tracking. The simple fact is, too many web pages are turning into web applications, so turning off javascript has no use on the modern web. Therefore they took away the option.
This was exactly the explanation from Mozilla side and it makes sense. The reason for the decision was people telling "my internet stopped working" (white pages) once they've disabled JS by accident.
I was planning a new view, which is just the user-submitted text, and that will be live within the day. (Similar to how on imgur.com you can link to the image directly, or the image with adverts.)

But extra meta-data I've been loathe to add so far because I see it as a barrier. I'm open to persuasion though.
I think if you want to disable JavaScript, you probably know what about:config is and how to use Google...

I think it does make sense to hide an option that pretty much breaks most of the Internet. As long as it's still in about:config I think that's reasonable.

By the way, you can download any image on the page from the Media tab in Page Properties, if I remember correctly.
Yes you could, if you knew about it and trusted it.

I think there's a spectrum of skills, not a binary split amongst user skills. Hard to say where the average user is with disabling JavaScript, because skill levels are multidimensional.
No new libraries? I wonder if 2014's new Python implementation from Guido's employer Dropbox- Pyston, count as significant in your mind?

If you prefer to have no Google App Engine, Azure, Amazon or distro support other than Arch, then have at it. I'll keep that and PyPy, Pyston, Jython, IronPython, PyInstaller, not to mention all programs where Python is integrated like GIMP, all of this is Python2 only.

Enjoy your Python3. I'll stick with Python.
Secunia PSI is an alternative that is great at keeping installed software updated. It's free and keeps most software up to date without any hassle.
I get an error in latest ff beta :

"Bootstrap's javascript requires jQuery" (main.js line 160)

which is weird, because jquery is included... must be something on my part, but I see no reason (according to firebug jquery is loaded before main.js)

also, when loading the first article :

"Load denied by X-Frame-Options: https://code.google.com/p/omaha/ does not permit cross-origin framing."
What I like to do is to fetch the proposed changes on my local repo, but without committing them (`--no-commit`):

- fetching locally: easy to test on your dev box

- without committing: easy to see what files are changed in your directory, and to diff files on your dev box
Localtunnel.me
I think this is a fair point, but I'm arguing for this in addition to all the other ways we have right now, including emailing, letters and phoning, which staffers mostly deal with. The point here is to get representatives to spend face to face time with their people on a regular basis instead of the cold aggregate summary from a staffer.

To make things more time efficient, you could even say than more than 5 people, with a designated spokesperson, can group together to block out an hour of time instead of making the representative hear the same issue the 5th time, and they have the benefit of being able to explain one subject in depth in an undivided manner.

Today we have the most amazing transportation and telecommuting technology available to perform duties in D.C., along with staffers to help. If representatives still can't make time for their constituency, maybe we ought to rethink their work division and responsibilities. Otherwise we run the risk of having presidents who don't know the price of milk.
Manually installing the VM Agent on your older Microsoft Azure Virtual Machines
Last week during Build, Madhan Arumugam (Lead Program Manager) announced the availability of the manual installer for the VM Agent on the MSDN Forum: VM Agent and VM Extensions – Feedback, Issues, Questions. In this post we’ll look at how to install the VM Agent.
If someone is wondering, Qubes (and all Linux based distros) are not Macbook friendly [1]. But honestly, if security or privacy are a priority for you then you are probably not using a Macbook anyway.

[1]: https://groups.google.com/forum/#!topic/qubes-devel/uLDYGdKk...
The title of the article is very annoying. "Pear: The opposite of apple"
It's an interesting thought: should we be dumbing down everything or just engaging in a bit of education instead and helping people understand what JavaScript does and its use on web pages?

The manual for my car mentions things that must be done for maintenance. They don't dumb it down. Meanwhile in computer land we hide all options and dumb everything down to "protect" the user.

There is a difference between being easy to use and molly-coddling. It is a difficult balance to get it seems!
disclaimer: I have no idea what I'm talking about.

I'd kind of like to see an elaboration of this, though:

> oil will last quite a long time when not contaminated by hydrocarbons

as I was under the impression that oil consists 100% of hydrocarbons.
Currently giving a "410 The author deleted this medium post"
If you use the non-dependently typed parts of ATS it is no more verbose than most ML variants. If you use it without the GC then verbosity increased because you need to add calls to free memory. If you add proofs or dependent types then declaring those adds more. I've used it in moderately sized production programs and it's similar to using OCaml or other ML in terms of productivity. Once you're familiar with the language of course.

If I paraphrase what you said about Haskell it's true for ATS too:

"but one of the lovely things about ATS is that despite its reputation as a difficult language, once certain key concepts are tackled, it's relatively easy to program rapidly and create real world products (with a considerably higher assurance of correctness than most languages provide)."

The key, like any language, is learning the concepts. I think people assume ATS is more difficult than it is is because much of the documentation and examples for it use a verbose style and heavy proofs. A post I wrote a while back attempts to gently introduce ATS dependent types and you can see that the non-dependently typed examples are very similar to any other ML language:

http://bluishcoder.co.nz/2010/09/01/dependent-types-in-ats.h...
Opportunity to fix other people's mess at the expense of your health (since you are not likely to get dedicated time for refactoring) and have a "thank you", while CEO gets an oversized bonus?
http://limi.net/checkboxes-that-kill/ does a great job explaining why Mozilla killed the checkbox for disabling JavaScript.
I wish Firefox's auto-updater worked as smooth as Chrome's.
Join a hangout with Arvind Kejriwal today at 3 pm IST
> Software is eating the world, and doing so using smaller and smaller teams. WhatsApp was able to disrupt the global SMS industry with only a few dozen engineers. Small teams can have a big impact because software development (and deployment) has improved dramatically over the past decade.

While this is true, I'm coming to realize more and more that a lot of would-be highly needed disruption is just not feasible because laws and monopolies are standing in the way, much of it due to lobbying and sometimes patents. It's sad.
I believe KISSmetrics is what you may be interested in. You send in events, and then are able to see who has done which event, create graphs, and do more powerful analysis.
I live in London and this is an issue that a lot of potential EV owners.

Having seen how the councils have added "club car" spaces for car rental schemes I could see them adding charge parking spaces, potentially with free electricity.

Hopefully this will be a non issue in a few years.
I would like to be notified too. Spendy seems like a great app for keeping track of what you have spent while traveling. :-) @flexd on Twitter.
It's actually a pretty bad development that most websites will no longer function without javascript. Graceful degradation was once one of the hallmarks of good tradecraft, and imo it should remain that way. The server should adapt to the client, not the other way around.
And second of all - isn't the feat of "counting money" the root of most of mankind's biggest problems?

The answer is no, in case you are wondering.
Building Instagram required a lot of engineering work?
https://news.ycombinator.com/item?id=3008447
18 Million E-mail Accounts Compromised in Germany
Exactly. In order to do complex tasks you get out the manual, open the hood, and get to work.

And in order to do something equally complex in Mozilla you grab the help, open about:config and get to work.

Your car doesn't put complex details on the dashboard, and neither should Mozilla.
and writing "a elegant" instead of "an elegant" is quite unelegant
Facebook is Planning to facilitate an E-Money Service
Speaking of titanium, the Soviets also had a class of attack submarines with titanium hulls:

http://en.wikipedia.org/wiki/Alfa-class_submarine
It's addictive. When people get used to it, they "have to have it in the morning". I don't want to become one of those people.
A crowdfunded federal lobby group whose agenda is to pass anti-lobbying legislature. Its ultimate goal would be to create a legal environment which would prohibit it from functioning.
Why would you not be using a Macbook if you want security or privacy?

If you are referring to Mac OSX and its integrations with App Stores and social media systems, note that it is entirely optional (I don't use any of the social media guff bundled into the OS).

Unless you are referring to something else and think that buying a piece of hardware somehow means you don't care about privacy, regardless of which software you are running on that piece of hardware?

I don't think the piece of hardware is relevant?
> It's an interesting thought: should we be dumbing down everything

This is not a case of "dumbing down everything", the ability to remove javascript is still there, what is not there is one (of formerly 3) often inadvertently used method for it.

> The manual for my car mentions things that must be done for maintenance.

Disabling javascript is not maintenance, it's a significant structural change in the browser's abilities, like removing the car's suspension. And it makes no sense to put that as a switch on the car's dash.
Because they are more often used for scripting then anything else. Let's not add political correctness to programming.
Indeed, I'm getting the following in Firefox:

An error occurred during a connection to revoked.grc.com. Peer's Certificate has been revoked. (Error code: sec_error_revoked_certificate)
It is indeed disturbing that Mozilla's finances depend so much on advertising. No matter how well-intentioned the folks at Mozilla Foundation/Corporation might be, it's difficult for human beings to avoid getting side-tracked when their wallet are running thin and there's easy money up for grabs out there.

But I don't think the author's suggestions are compatible what what we (or at least, I) want Firefox to be, either.

1. Spinning off a variant named PrivateFox just sends the message that the regular Firefox will no longer respect your privacy. It will also make regular, free, not-private Firefox users second-class citizens of the Internet. People deserve to have their privacy protected, regardless of whether they can pay or not. In fact, people who can't pay (minors, the poor, citizens of oppressive third-world regimes, etc.) are often in need of the most protection. Moreover, even if you can afford PrivateFox, the payment creates a paper trail that might negate the benefit of using PrivateFox.

2. Crowdsourcing sounds cool, but only if everyone benefits. There's no point in creating "The World’s First Fully Private Browser" and keeping it proprietary. If there exists technology to improve everyone's privacy, it should be included in every copy of Firefox by default.

3. Intentcasting is an interesting concept, but in the context of a web browser it sounds like just another "Ubuntu sends my searches to Amazon" debacle waiting to happen. If I want good privacy, I probably don't want to tell faceless multinational corporations what I want to buy, either.

Unfortunately, the only alternative that I can think of is a variant of Wikimedia Foundation's annual donation drive. As a long-time Firefox fan, I would certainly donate as much as I can. (Is there someone at Mozilla who can give creepy stares in a banner ad as well as Jimmy Wales does?) But again there's a problem: Mozilla's budget is several times the size of Wikimedia's (300MM vs. 80MM), and I'm not sure that the moral value of Firefox, although significant, exceeds that of Wikipedia. Mozilla needs to be seriously trimmed down if they're ever going to be supported by donations.
Probability and Monopoly
> It's actually a pretty bad development that most websites will no longer function without javascript.

Yes, because websites waited for this change to stop working without javascript...
Singing in a quire would be interesting (a small book or pamphlet; a unit of 24 or 25 sheets of paper)
I would add the existing package managers to that (eg: yum+rpm or apt+dpkg).

Those + some bash scripts to sort out credentials and relationships between services - sorted!
I like this idea. Especially when combined with something like Thingiverse- you could view the available 3D models, pick one, rotate it, view it, and then throw it either in bin, or against your 3D printer to print it :)
Turning off JS ruins the internet. I say this as an avid NoScript fan (been running it for nearly a year) - the vast majority of websites will fail (often mysteriously) with JS disabled, even if you use some curated whitelist. You need a lot of technical knowledge and debugging sense to figure out what you can/can't disable.
I just looked into this, but it was ridiculously complex.

I just went for a Wix installer instead that installed cygwin cron as a service. The cron job then rsyncs the current version into the install dir every 5 hours. Finito.
The moment they start to integrate somekind of ads (yes, I heard the rumor/plans) in Firefox they are dead. It doesn't even matter if they don't track, aren't intrusive or whatever. The users will run away.
Off-topic, www.codersgrid.com is vulnerable to a Heartbleed attack.
Interesting that you are getting a negative reaction here. I want to float this controversial statement with the HN community:

Downs syndrome is a mental handicap and preventing the disease should be a goal in science.
Graphical programming is also popular for animation/cgi/special FX, e.g. XPresso in Cinema4D.
Customizing your Azure Virtual Machines with the new CustomScript extension
Too many people mistakenly disable JavaScript every time a Java vulnerability hits the news, and there was a period not too long ago when a new Java vuln seemed to appear every other week. It was around this time that the "disable JavaScript" option disappeared from Firefox.
That matters because you're comparing apples to oranges, the part you quoted specifically mentioned combat aircraft. Giving the SR-71 as a counter example makes no sense.
But security is a policy, it's something dynamic. Not static, that's why the OpenBSD moto is a silly as it gets.

Of course design matters, a system designed from groun-up to be secure but even a Linux server with properly configured kernel patchets (grsec), process accounting, iptables, IDS, etc. Can be virtually impenetrable. Same goes for OpenBSD.

Secure operating systems are not new. IIRC Vax/VMS was build from ground-up with security in mind and was deployed by the military. Then exploits security issues started popping up.
Clojure: an outsider's investigation
There is the tor browser that is this a Firefox that respects privacy.
Data Science Toolkit – Truly open tools for data
Dropbox – Project Harmony – Versioning for humans
I really do like the crowdsource funding idea. I like that idea better than building a new app where you pay for privacy. I'd rather Firefox itself be more focused on privacy and the project be rewarded by the public with crowdsource funds as it does so.

It wouldn't bother me one bit if they even included a reminder to donate after every upgrade, etc. on the update landing page, etc.
I think polemic was referencing this statement[1] when he talks about "their patch" (and not the released patch):-

> This patch is a variant of what we've been using to help protect customer keys for a decade.

1. From the original Akamai missive: http://article.gmane.org/gmane.comp.encryption.openssl.user/...
>The manual for my car mentions things that must be done for maintenance.

Your car has a manual that describes maintenance. It doesn't have a button next to the radio that ejects the engine.
There is a guy on youtube called bosnianbill, his channel: https://www.youtube.com/user/bosnianbill is full of useful information.

You can also find Mike Gibson's "Lock Picking: Detail Overkill" which is a great book for starters!
To save someone else the clicking, these are:

> A source close to CBA tells me only CBA's main website was impacted by #Heartbleed. It uses Amazon ELB, which was vulnerable (cont...)

> Main CBA website now has a new certificate dated Friday, April 11 (you can check yourself in your web browser) (cont) #Heartbleed

> Now, considering CBA's main website was vulnerable, according to source, it could've been subject to a man in the middle attack #heartbleed

> An attacker could've sat in between connection on Wi-Fi or on carrier side and seen who visited site. So they only get IPs #heartbleed

> Next question becomes could attacker have used man in middle to change iframe login on main CBA site to collect credentials? #Heartbleed
The PowerPot: Thermoelectric Generator charges your phone with fire.
I just contacted you by email (Olivier C.), let's see how it goes :)
I tend the read the comments much more frequently than the actual page. I would suggest:

1. Make the comments number a link to load the comments page directly.

2. Allow the right pane to split to show comments above/below the actual web page
I'm participating and I have to say at first glance I'm a little bit disappointed about the format which seems to limit the possible strategies significantly. Too early to judge though.
Same for me. Running Firefox on Windows 7.
> No matter how well-intentioned the folks at Mozilla Foundation/Corporation might be, it's difficult for human beings to avoid getting side-tracked when their wallet are running thin and there's easy money up for grabs out there.

As a former Mozillian, I can't begin to describe how inaccurate this is. Discussion of money, or revenue, were relatively rare compared to the things that Mozillians actually care about. Here's a list of things that were discussed about 100x more than advertising revenue:

- building the mozilla community
- open source
- rust and servo
- where to go for lunch
- javascript performance
- keeping the web open
- making firefox builds fast
- firefox memory usage
- proprietary codecs vs vp8
Tor browser is made by EFF, and the only reason it doesn't threaten vanilla Firefox's market share is because tor is slow as hell.

If Mozilla made two versions of Firefox that were just as fast as each other but only one of them respected privacy, there would be no reason for anyone to choose the non-privacy-respecting version.
Since we're on the topic. I wish they would at least create an option that makes the javascript part operate in a way that I don't have to disable PaX on Firefox. It is both the most critical desktop application to be protected and one of the very few that can't be. Even X.Org works fine with PaX these days.
It's a ratchet like process:

- browsers don't support feature 'x'
- some browsers support feature 'x'
- all browsers support feature 'x'
- websites start relying on feature 'x'
- browsers change feature 'x' from being easy to switch off/on to defaulting to 'on'
- browsers remove easy facility to remove feature 'x'

That's a pity. Ideally websites would work with clients both new, old and configured to explicitly leave out eye candy and things like javascript. Of course there is a price to pay in terms of user experience and it is more work to keep your website alive across many different browser versions so I can see the reasoning behind this. But it violates the spirit of be strict in what you send but liberal in what you receive. If what you receive is the message that 'javascript isn't wanted' then you should respect that and make your stuff work without. Of course there are websites where javascript really is a must but if I want to use my bank website without javascript (to get rid of all the unnecessary pop-ups, overlays and other bs) and I find out that it simply doesn't work anymore then that's disappointing.

So, mozilla obviously did the right thing here in hiding a feature that 'nobody' uses anymore but it is merely the last nail in the coffin of the non-programmable browser.

And for some weird reason I find a browser that does not have the ability to execute downloaded code a good thing.

So I personally regret this development.
We all know the story, the Book Hackers by Steven Levy tells it all.
I like using cheeaun's mod for mobile since it parses the comments in a similar clean way, and the Hacker News Enhancement Suite for Chrome [2].

[1]: http://cheeaun.github.io/hackerweb/
[2]: https://chrome.google.com/webstore/detail/bappiabcodbpphnojd...
This already happened.

http://www.zdnet.com/mozilla-to-deliver-ads-in-its-firefox-b...
Isn’t the node.js version of the ruby one ? ie: http://progrium.com/localtunnel/

Or the Go version: https://github.com/inconshreveable/ngrok